android_device_mediatek_sep.../non_plat/mediaextractor.te

# ==============================================
# MTK Policy Rule
# ==============================================

# Date : WK16.33
# Purpose: Allow to access ged for gralloc_extra functions
allow mediaextractor proc_ged:file {open read write ioctl getattr};

#============= mediaextractor ==============
allow mediaextractor vfat:file r_file_perms;
import from mediatek/master to mediatek/alps-mp-o1.mp1 Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79 MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee 2020-01-18 09:29:32 +08:00			`# ==============================================`
			`# MTK Policy Rule`
			`# ==============================================`

			`# Date : WK16.33`
			`# Purpose: Allow to access ged for gralloc_extra functions`
[ALPS03825066] Mark file context to fix build fails Restore the policies accessing files labeled as proc_xxx or sysfs_xxx, but there are some exceptions for coredomain process, such as meta_tst,dump_state,kpoc_charger MTK-Commit-Id: 7953b5203bb3cac099c3326d330643b4cd73746d Change-Id: I4b16c09c352891783e837bea370c264966ca6d13 CR-Id: ALPS03825066 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK 2020-01-18 09:29:41 +08:00			`allow mediaextractor proc_ged:file {open read write ioctl getattr};`
[ALPS03940737] add selinux permission to mediaextractor.te [Detail] mediaextractor cannot read sdcard. [Solution] add selinux permission to mediaextractor.te MTK-Commit-Id: 7a89ca1914626a10008eafc2af6b3b38b9661918 Change-Id: I93db44bb28d442a0a58544dcb89963ede449206b CR-Id: ALPS03940737 Feature: [Android Default] MPEG4/3GP Playback 2020-01-18 09:54:45 +08:00
			`#============= mediaextractor ==============`
			`allow mediaextractor vfat:file r_file_perms;`