Merge "sepolicy_vndr: trinket: Updated camera sysfs path"
diff --git a/qva/vendor/kona/file_contexts b/qva/vendor/kona/file_contexts
index 4328793..69b69e7 100644
--- a/qva/vendor/kona/file_contexts
+++ b/qva/vendor/kona/file_contexts
@@ -7,6 +7,7 @@
#umd_service
/vendor/bin/hw/vendor\.qti\.hardware\.umd@1\.0-service u:object_r:vendor_hal_umd_qti_exec:s0
+/(vendor|system/vendor)/bin/hw/android\.hardware\.camera\.provider@2\.[0-9]+-external-service_64 u:object_r:hal_camera_default_exec:s0
# UFS Devices
/dev/block/platform/soc/1d84000.ufshc/by-name/system u:object_r:system_block_device:s0
diff --git a/qva/vendor/trinket/genfs_contexts b/qva/vendor/trinket/genfs_contexts
index 33a4d9e..dd537b0 100644
--- a/qva/vendor/trinket/genfs_contexts
+++ b/qva/vendor/trinket/genfs_contexts
@@ -133,6 +133,7 @@
# Sysfs for graphics
genfscon sysfs /devices/platform/soc/5e00000.qcom,mdss_mdp/drm/card0/card0-DSI-1/status u:object_r:vendor_sysfs_graphics:s0
+genfscon sysfs /devices/platform/soc/5e00000.qcom,mdss_rotator/video4linux/video2/name u:object_r:vendor_sysfs_graphics:s0
#net sysfs
genfscon sysfs /devices/platform/soc/c800000.qcom,icnss/net u:object_r:sysfs_net:s0
diff --git a/qva/vendor/trinket/hal_graphics_allocator_default.te b/qva/vendor/trinket/hal_graphics_allocator_default.te
index fed16a3..b84b877 100644
--- a/qva/vendor/trinket/hal_graphics_allocator_default.te
+++ b/qva/vendor/trinket/hal_graphics_allocator_default.te
@@ -3,4 +3,6 @@
allow hal_graphics_allocator_default vendor_sysfs_kgsl_gpu_model:file r_file_perms;
allow hal_graphics_allocator_default vendor_dmabuf_system_heap_device:chr_file r_file_perms;
-allow hal_graphics_allocator_default vendor_dmabuf_system_uncached_heap_device:chr_file r_file_perms;
\ No newline at end of file
+allow hal_graphics_allocator_default vendor_dmabuf_system_uncached_heap_device:chr_file r_file_perms;
+allow hal_graphics_allocator_default vendor_dmabuf_display_heap_device:chr_file r_file_perms;
+allow hal_graphics_allocator_default vendor_membuf_dev:chr_file r_file_perms;