From fd7e2855046399fc1a8a1fe93cfa8d56ff5fb58b Mon Sep 17 00:00:00 2001
From: Jan Sebechlebsky <jsebechlebsky@google.com>
Date: Mon, 26 Feb 2024 11:55:16 +0100
Subject: [PATCH] Allow virtual camera to use fd's from graphic composer

This is causing denials in case the fence fd comes from
graphic composer.

Bug: 301023410
Test: atest CtsCameraTestCases with test virtual camera enabled
Change-Id: I14cb26c058342470aa2dc214ab47cc61aa2f3255
---
 private/virtual_camera.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/private/virtual_camera.te b/private/virtual_camera.te
index dde98c0ff..45dc8a127 100644
--- a/private/virtual_camera.te
+++ b/private/virtual_camera.te
@@ -38,6 +38,9 @@ hal_client_domain(virtual_camera, hal_graphics_allocator)
 allow virtual_camera gpu_device:chr_file rw_file_perms;
 allow virtual_camera gpu_device:dir r_dir_perms;
 
+# Allow virtual camera to use graphics composer fd-s (fences).
+allow virtual_camera hal_graphics_composer:fd use;
+
 # For collecting bugreports.
 allow virtual_camera dumpstate:fd use;
 allow virtual_camera dumpstate:fifo_file write;