NekoSakura/Android_Device_Mediatek_Sepolicy_Vndr
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sepolicy: basic: non_plat: Add selinux rules for mtkcodecservice HAL

Browse Source 
Change-Id: Ia024bc02b07c45c17475005b4216baa50cee9c13
This commit is contained in:
SamarV-121 2022-09-17 11:43:05 +05:30 committed by Matsvei Niaverau
parent ca74f59339
commit b924fa4058
8 changed files with 31 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
basic/non_plat/file_contexts
View File

@ -712,6 +712,7 @@
/(vendor|system/vendor)/bin/hw/android\.hardware\.media\.c2@1\.2-mediatek u:object_r:mtk_hal_c2_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.media\.c2@1\.2-mediatek-64b u:object_r:mtk_hal_c2_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.memtrack-service\.mediatek u:object_r:mtk_hal_memtrack_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.mediatek\.hardware\.mtkcodecservice@1\.1-service u:object_r:hal_mtkcodecservice_default_exec:s0
# Google Trusty system files
/(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@3\.0-service\.trusty u:object_r:hal_keymaster_default_exec:s0

17
basic/non_plat/hal_mtkcodecservice_default.te Normal file
View File

@ -0,0 +1,17 @@
type hal_mtkcodecservice_default, domain;
type hal_mtkcodecservice_default_exec, exec_type, file_type, vendor_file_type;
init_daemon_domain(hal_mtkcodecservice_default)
hal_server_domain(hal_mtkcodecservice_default, hal_mtkcodecservice)
hal_client_domain(hal_mtkcodecservice_default, hal_allocator)
binder_call(hal_mtkcodecservice_client, hal_mtkcodecservice_server)
binder_call(hal_mtkcodecservice_server, hal_mtkcodecservice_client)
add_hwservice(hal_mtkcodecservice_server, hal_mtkcodecservice_hwservice)
allow hal_mtkcodecservice_client hal_mtkcodecservice_hwservice:hwservice_manager find;
allow hal_mtkcodecservice_default hidl_allocator_hwservice:hwservice_manager find;
allow hal_mtkcodecservice_default hidl_memory_hwservice:hwservice_manager find;

1
basic/non_plat/hwservice.te
View File

@ -77,3 +77,4 @@ type mtk_hal_composer_ext_hwservice, hwservice_manager_type, protected_hwservice
# GPU HIDL
type mtk_hal_gpu_hwservice, hwservice_manager_type;
type hal_mtkcodecservice_hwservice, hwservice_manager_type;

2
basic/non_plat/hwservice_contexts
View File

@ -90,3 +90,5 @@ vendor.mediatek.hardware.bluetooth.audio::IBluetoothAudioProvidersFactory u:obje
# Date: 2021/06/30
# composer extension HIDL
vendor.mediatek.hardware.composer_ext::IComposerExt u:object_r:mtk_hal_composer_ext_hwservice:s0
vendor.mediatek.hardware.mtkcodecservice::IMtkCodecService u:object_r:hal_mtkcodecservice_hwservice:s0

2
basic/non_plat/mediacodec.te
View File

@ -150,3 +150,5 @@ get_prop(mediacodec, vendor_mtk_crossmount_prop)
get_prop(mediacodec, vendor_mtk_deinterlace_prop)
get_prop(mediacodec, vendor_mtk_omx_core_prop)
get_prop(mediacodec, vendor_mtk_hdr_video_prop)
hal_client_domain(mediacodec, hal_mtkcodecservice)

2
basic/non_plat/mediaserver.te
View File

@ -307,3 +307,5 @@ hal_client_domain(mediaserver, hal_keymaster)
hal_client_domain(mediaserver, hal_power)
allow mediaserver vpud_device:chr_file rw_file_perms;
hal_client_domain(mediaserver, hal_mtkcodecservice)

2
basic/non_plat/system_server.te
View File

@ -276,3 +276,5 @@ allow system_server proc_mgq:dir search;
# when anr dump process, SystemServer need send sigal
allow system_server mtk_hal_pq:process signal;
hal_client_domain(system_server, hal_mtkcodecservice)

4
basic/plat_public/attributes
View File

@ -116,3 +116,7 @@ attribute mtk_safe_halserverdomain_type;
attribute hal_mtk_mmagent;
attribute hal_mtk_mmagent_client;
attribute hal_mtk_mmagent_server;
attribute hal_mtkcodecservice;
attribute hal_mtkcodecservice_client;
attribute hal_mtkcodecservice_server;