Merge "Allow app to access configstore HAL"
diff --git a/private/app.te b/private/app.te
index 1b1f4ca..04be106 100644
--- a/private/app.te
+++ b/private/app.te
@@ -246,6 +246,9 @@
 # Allow app to access the graphic allocator HAL
 binder_call({ appdomain -isolated_app }, hal_graphics_allocator)
 
+# App can access configstore HAL which is read only
+binder_call({ appdomain -isolated_app }, hal_configstore)
+
 # Allow app to access shared memory created by camera HAL1
 allow { appdomain -isolated_app } hal_camera:fd use;