vndbinder_use(hal_camera_default); allow hal_camera_default hal_graphics_mapper_hwservice:hwservice_manager find; hal_client_domain(hal_camera_default, hal_graphics_allocator); hal_client_domain(hal_camera_default, hal_graphics_composer); # for external camera allow cameraserver device:dir r_dir_perms; allow cameraserver video_device:dir r_dir_perms; allow cameraserver video_device:chr_file rw_file_perms; allow hal_camera_default gpu_device:chr_file { open read write ioctl map getattr }; allow hal_camera_default dri_device:dir { open read search }; allow cameraserver dri_device:dir { open read write search getattr }; allow cameraserver gpu_device:chr_file { open read write ioctl map getattr };