From cf2b4aabd0a6ffbda7699e9387c012ceb99fcd11 Mon Sep 17 00:00:00 2001
From: zhw <quic_zhw@quicinc.com>
Date: Mon, 15 Apr 2024 09:55:14 +0800
Subject: [PATCH] Sepolicy_vndr: allow qvr to access heap device

allow qvrservice to read heap device.

Change-Id: Ifad0e0d67c2d35a92243d8396062b4080e2fab56
---
 qva/vendor/anorak/qvrd_vndr.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/qva/vendor/anorak/qvrd_vndr.te b/qva/vendor/anorak/qvrd_vndr.te
index 60b0c9e6..b55be740 100644
--- a/qva/vendor/anorak/qvrd_vndr.te
+++ b/qva/vendor/anorak/qvrd_vndr.te
@@ -37,3 +37,6 @@ allow vendor_qvrd_vndr vendor_qvrd_vndr_cam:fd use;
 
 get_prop(vendor_qvrd_vndr, vendor_camera_prop)
 hal_server_domain_bypass(vendor_qvrd_vndr, vendor_hal_qvrcamservice_qti)
+
+# Allow to access heap
+allow vendor_qvrd_vndr vendor_dmabuf_system_heap_device:chr_file r_file_perms;