diff options
| author | Bill Yi <byi@google.com> | 2018-11-28 18:33:36 -0800 |
|---|---|---|
| committer | Bill Yi <byi@google.com> | 2018-11-28 18:33:36 -0800 |
| commit | a3408c502312181dbe653a29ceb16819d5b51926 (patch) | |
| tree | 37eeb836eebb0518b17582b65225338d4a74da32 /sepolicy/common/hal_drm_widevine.te | |
| parent | d0425ec805c34752e30f94e5875577d56761709c (diff) | |
| parent | 225639a44dc0a02893f8cbd4ff02b58cd9454a35 (diff) | |
| download | android_device_generic_goldfish-a3408c502312181dbe653a29ceb16819d5b51926.tar.gz android_device_generic_goldfish-a3408c502312181dbe653a29ceb16819d5b51926.tar.bz2 android_device_generic_goldfish-a3408c502312181dbe653a29ceb16819d5b51926.zip | |
Merge pi-qpr1-release PQ1A.181105.017.A1 to pi-platform-release
Change-Id: Ie9db533b7a07e1085b177a1694799d6772f519ef
Diffstat (limited to 'sepolicy/common/hal_drm_widevine.te')
| -rw-r--r-- | sepolicy/common/hal_drm_widevine.te | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/sepolicy/common/hal_drm_widevine.te b/sepolicy/common/hal_drm_widevine.te new file mode 100644 index 0000000..8198410 --- /dev/null +++ b/sepolicy/common/hal_drm_widevine.te @@ -0,0 +1,15 @@ +# define SELinux domain +type hal_drm_widevine, domain; +hal_server_domain(hal_drm_widevine, hal_drm) + +type hal_drm_widevine_exec, exec_type, vendor_file_type, file_type; +init_daemon_domain(hal_drm_widevine) + +allow hal_drm mediacodec:fd use; +allow hal_drm { appdomain -isolated_app }:fd use; + +vndbinder_use(hal_drm_widevine); +hal_client_domain(hal_drm_widevine, hal_graphics_composer); +allow hal_drm_widevine hal_allocator_server:fd use; +allow hal_drm_widevine mediadrm_vendor_data_file:dir create_dir_perms; +allow hal_drm_widevine mediadrm_vendor_data_file:file create_file_perms; |