NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS03916010] Upgrade to drm hidl 1.1

Browse Source 
Google has upgraded drm hidl to version 1.1, need upgrade
 all config(device.mk, sepolicy, manifest) to new version.

MTK-Commit-Id: 50b87ab9d8654c2ea1bea22fa9a589fd85481324

Change-Id: I9a36ad250153bcbb446b790bae5942965409fab3
CR-Id: ALPS03916010
Feature: Google Widevine Level1
This commit is contained in:
Jackie Lin 2020-01-18 09:49:47 +08:00
parent dc82c27ed1
commit 6cfb419058
3 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
non_plat/file.te
View File

@ -264,3 +264,6 @@ type sysfs_uart_info, fs_type, sysfs_type;
# Purpose : for charger to access vbus info and pump_express
type sysfs_vbus, fs_type, sysfs_type;
type sysfs_pump_express, fs_type, sysfs_type;
# Widevine move data/mediadrm folder from system to vendor
type mediadrm_vendor_data_file, file_type, data_file_type;

3
non_plat/file_contexts
View File

@ -62,6 +62,7 @@
#/data/vendor/nfc(/.*)? u:object_r:nfc_data_file:s0
/data/vendor/connsyslog(/.*)? u:object_r:consyslog_data_file:s0
/data/vendor/stp_dump(/.*)? u:object_r:stp_dump_data_file:s0
/data/vendor/mediadrm(/.*)? u:object_r:mediadrm_vendor_data_file:s0
# Misc data
#/data/misc/acdapi(/.*)? u:object_r:acdapi_data_file:s0
@ -558,7 +559,7 @@
/(system\/vendor|vendor)/bin/hw/camerahalserver u:object_r:mtk_hal_camera_exec:s0
/(system\/vendor|vendor)/bin/hw/vendor\.mediatek\.hardware\.imsa@1\.0-service u:object_r:mtk_hal_imsa_exec:s0
#Widevine drm hal
/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@1\.0-service.widevine u:object_r:hal_drm_widevine_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@1\.1-service.widevine u:object_r:hal_drm_widevine_exec:s0
#PQ hal
/(system\/vendor|vendor)/bin/hw/vendor\.mediatek\.hardware\.pq@2\.1-service u:object_r:mtk_hal_pq_exec:s0
# Keymaster Attestation Hal

5
non_plat/hal_drm_widevine.te
View File

@ -9,6 +9,9 @@ allow hal_drm_widevine { appdomain -isolated_app }:fd use;
vndbinder_use(hal_drm_widevine);
#============= hal_drm_widevine ==============
allow hal_drm_widevine debugfs_tracing:file write;
allow hal_drm_widevine debugfs_ion:dir search;
allow hal_drm_default hal_allocator_server:fd use;
allow hal_drm_widevine mediadrm_vendor_data_file:dir create_dir_perms;
allow hal_drm_widevine mediadrm_vendor_data_file:file create_file_perms;