aboutsummaryrefslogtreecommitdiffstats
path: root/mediaserver.te
diff options
context:
space:
mode:
Diffstat (limited to 'mediaserver.te')
-rw-r--r--mediaserver.te23
1 files changed, 22 insertions, 1 deletions
diff --git a/mediaserver.te b/mediaserver.te
index 704b723..d269097 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -78,8 +78,29 @@ unix_socket_connect(mediaserver, bluetooth, bluetooth)
# Connect to tee service.
allow mediaserver tee:unix_stream_socket connectto;
-allow mediaserver mediaserver_service:service_manager add;
+allow mediaserver activity_service:service_manager find;
+allow mediaserver appops_service:service_manager find;
+allow mediaserver batterystats_service:service_manager find;
+allow mediaserver drmserver_service:service_manager find;
+allow mediaserver mediaserver_service:service_manager { add find };
+allow mediaserver permission_service:service_manager find;
+allow mediaserver power_service:service_manager find;
+allow mediaserver processinfo_service:service_manager find;
+allow mediaserver scheduling_policy_service:service_manager find;
+allow mediaserver surfaceflinger_service:service_manager find;
# /oem access
allow mediaserver oemfs:dir search;
allow mediaserver oemfs:file r_file_perms;
+
+use_drmservice(mediaserver)
+allow mediaserver drmserver:drmservice {
+ consumeRights
+ setPlaybackStatus
+ openDecryptSession
+ closeDecryptSession
+ initializeDecryptUnit
+ decrypt
+ finalizeDecryptUnit
+ pread
+};