allow cameraserver gpu_device:chr_file rw_file_perms; typeattribute cameraserver system_writes_vendor_properties_violators; set_prop(cameraserver, camera_prop) allow cameraserver sysfs_camera:file r_file_perms; allow cameraserver sysfs_camera:dir search; allow cameraserver system_server:unix_stream_socket { read write }; # TODO (b/37688918) Verify that this is actually needed and not a violation of treble binder_call(cameraserver, mediacodec)