NekoSakura/Android_Device_Mediatek_Sepolicy_Vndr
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sepolicy: basic: non_plat: Allow mediacodec to read some props

Browse Source 
W omx@1.0-service: type=1400 audit(0.0:117): avc: denied { open } for path="/dev/__properties__/u:object_r:default_prop:s0" dev="tmpfs" ino=12368 scontext=u:r:mediacodec:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0
W libc    : Access denied finding property "ro.mtk_deinterlace_support"
W libc    : Access denied finding property "ro.mtk_crossmount_support"
W libc    : Access denied finding property "mtk.vendor.omx.core.log"

Change-Id: I14cbe8a4e6a7892b0b34d05c86b68281291d6579
This commit is contained in:
SamarV-121 2022-09-13 18:48:52 +05:30 committed by Matsvei Niaverau
parent 224041dad4
commit 8a583e3348
3 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
basic/non_plat/mediacodec.te
View File

@ -145,3 +145,7 @@ allow mediacodec sysfs_emi_ctrl_concurrency_scenario:dir search;
# # Operation: SQC # # Operation: SQC
# # Purpose : Allow medicodec to control video mode property # # Purpose : Allow medicodec to control video mode property
set_prop(mediacodec, vendor_mtk_video_prop) set_prop(mediacodec, vendor_mtk_video_prop)
get_prop(mediacodec, vendor_mtk_crossmount_prop)
get_prop(mediacodec, vendor_mtk_deinterlace_prop)
get_prop(mediacodec, vendor_mtk_omx_core_prop)

6
basic/non_plat/property.te
View File

@ -124,6 +124,9 @@ vendor_restricted_prop(vendor_mtk_mdrsra_v2_support_prop)
vendor_restricted_prop(vendor_mtk_xfrm_support_prop) vendor_restricted_prop(vendor_mtk_xfrm_support_prop)
vendor_restricted_prop(vendor_mtk_mdp_prop) vendor_restricted_prop(vendor_mtk_mdp_prop)
vendor_restricted_prop(vendor_debug_logger_prop) vendor_restricted_prop(vendor_debug_logger_prop)
vendor_restricted_prop(vendor_mtk_crossmount_prop)
vendor_restricted_prop(vendor_mtk_deinterlace_prop)
vendor_restricted_prop(vendor_mtk_omx_core_prop)
# Properties with can be read by all domains # Properties with can be read by all domains
typeattribute vendor_mtk_aal_ro_prop mtk_core_property_type; typeattribute vendor_mtk_aal_ro_prop mtk_core_property_type;
@ -202,3 +205,6 @@ typeattribute vendor_mtk_mdrsra_v2_support_prop mtk_core_property_type;
typeattribute vendor_mtk_xfrm_support_prop mtk_core_property_type; typeattribute vendor_mtk_xfrm_support_prop mtk_core_property_type;
typeattribute vendor_mtk_mdp_prop mtk_core_property_type; typeattribute vendor_mtk_mdp_prop mtk_core_property_type;
typeattribute vendor_debug_logger_prop mtk_core_property_type; typeattribute vendor_debug_logger_prop mtk_core_property_type;
typeattribute vendor_mtk_crossmount_prop mtk_core_property_type;
typeattribute vendor_mtk_deinterlace_prop mtk_core_property_type;
typeattribute vendor_mtk_omx_core_prop mtk_core_property_type;

4
basic/non_plat/property_contexts
View File

@ -399,3 +399,7 @@ persist.vendor.eara_io. u:object_r:vendor_mtk_eara_io_prop:s0
# xfrm and mdrsra property for non 5G GKI platform # xfrm and mdrsra property for non 5G GKI platform
persist.vendor.mdrsra_v2_support u:object_r:vendor_mtk_mdrsra_v2_support_prop:s0 persist.vendor.mdrsra_v2_support u:object_r:vendor_mtk_mdrsra_v2_support_prop:s0
persist.vendor.xfrm_support u:object_r:vendor_mtk_xfrm_support_prop:s0 persist.vendor.xfrm_support u:object_r:vendor_mtk_xfrm_support_prop:s0
mtk.vendor.omx.core.log u:object_r:vendor_mtk_omx_core_prop:s0
ro.mtk_crossmount_support u:object_r:vendor_mtk_crossmount_prop:s0
ro.mtk_deinterlace_support u:object_r:vendor_mtk_deinterlace_prop:s0