Give apps, cameraserver, and system_server access to sync fences.
Since hal_graphics_composer_default is now no longer
a member of binderservicedomain, these domains would
no longer be able to use filedescriptors from it.
Bug: 36569525
Bug: 35706331
Test: marlin boots, YouTube, Maps, Camera, video
Change-Id: I4c110cf7530983470ae079e4fbc8cf11aa0fab7f
diff --git a/private/system_server.te b/private/system_server.te
index 2711a8c..e200bef 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -199,6 +199,9 @@
hal_client_domain(system_server, hal_wifi_supplicant)
+# Talk with graphics composer fences
+allow system_server hal_graphics_composer:fd use;
+
# Talk to tombstoned to get ANR traces.
unix_socket_connect(system_server, tombstoned_intercept, tombstoned)