Allow virtual_camera to use fd from surfaceflinger

Test: atest --rerun-until-failure 100 android.hardware.camera2.cts.CaptureRequestTest#testEffectModes
Fixes: 329837920
Change-Id: I2de4e119383e4c8d4183957bfa6e1e363cdbbe4f
diff --git a/private/virtual_camera.te b/private/virtual_camera.te
index 45dc8a1..793f7ed 100644
--- a/private/virtual_camera.te
+++ b/private/virtual_camera.te
@@ -28,6 +28,9 @@
 # Allow virtual_camera to use fd from apps
 allow virtual_camera { appdomain -isolated_app }:fd use;
 
+# Allow virtual_camera to use fd from surface flinger
+allow virtual_camera surfaceflinger:fd use;
+
 # Only allow virtual_camera to add a virtual_camera_service and no one else.
 add_service(virtual_camera, virtual_camera_service);