| app_domain(gallery_app) |
| net_domain(gallery_app) |
| |
| typeattribute gallery_app system_executes_vendor_violators; |
| |
| # Access standard system services |
| allow gallery_app app_api_service:service_manager find; |
| allow gallery_app audioserver_service:service_manager find; |
| allow gallery_app cameraserver_service:service_manager find; |
| allow gallery_app drmserver_service:service_manager find; |
| allow gallery_app mediacodec_service:service_manager find; |
| allow gallery_app mediaextractor_service:service_manager find; |
| allow gallery_app mediaserver_service:service_manager find; |
| allow gallery_app mediametrics_service:service_manager find; |
| allow gallery_app nfc_service:service_manager find; |
| allow gallery_app surfaceflinger_service:service_manager find; |
| |
| allow gallery_app hidl_token_hwservice:hwservice_manager find; |
| |
| # Allow to read and execute camera app modules |
| allow gallery_app vendor_file:file { rx_file_perms }; |