vndbinder_use(hal_camera_default)

hal_client_domain(hal_camera_default, hal_graphics_allocator)

# For camera hal to talk with sensor service
binder_call(hal_camera_default, sensor_service_server)
binder_call(sensor_service_server, hal_camera_default)

# Allow the Camera HAL to communicate with the thermal HAL.
hal_client_domain(hal_camera_default, hal_thermal)

gpu_access(hal_camera_default)

# Vsocket camera
allow hal_camera_default self:vsock_socket { accept bind create getopt listen read write };

# The camera HAL can respond to APEX updates (see ApexUpdateListener), but this
# is not used by the emulated camera HAL APEX. Ignore these denials.
dontaudit hal_camera_default property_socket:sock_file { write };
dontaudit hal_camera_default apex_info_file:file { read };