aboutsummaryrefslogtreecommitdiffstats
path: root/drmserver.te
diff options
context:
space:
mode:
authorGeremy Condra <gcondra@google.com>2013-04-03 15:51:16 -0700
committerrepo sync <gcondra@google.com>2013-04-05 13:13:34 -0700
commitd381b97e13c5bdc888d7af20b1b1a6dd04784cf5 (patch)
tree4cfeaa423271c2a7abb8d9140ce486aa838e16a9 /drmserver.te
parent207c709e3a9bfc53c365de3102d75bf4cfb7f2e9 (diff)
downloadandroid_external_sepolicy-d381b97e13c5bdc888d7af20b1b1a6dd04784cf5.tar.gz
android_external_sepolicy-d381b97e13c5bdc888d7af20b1b1a6dd04784cf5.tar.bz2
android_external_sepolicy-d381b97e13c5bdc888d7af20b1b1a6dd04784cf5.zip
Give the drmserver the ability to connect to the tee.
Bug: 8539042 Change-Id: I6a9c3247688f49bed4a1637c728e77c2e865afd2
Diffstat (limited to 'drmserver.te')
-rw-r--r--drmserver.te3
1 files changed, 3 insertions, 0 deletions
diff --git a/drmserver.te b/drmserver.te
index ba33326..0b34eb7 100644
--- a/drmserver.te
+++ b/drmserver.te
@@ -14,6 +14,9 @@ binder_service(drmserver)
# Perform Binder IPC to mediaserver
binder_call(drmserver, mediaserver)
+# Talk to the tee
+allow drmserver tee:unix_stream_socket { connectto };
+
allow drmserver sdcard_type:dir search;
allow drmserver drm_data_file:dir create_dir_perms;
allow drmserver drm_data_file:file create_file_perms;