From 802ee2afa1c3b24b2e150bf14740f3c9cff7c041 Mon Sep 17 00:00:00 2001
From: Jason Hsu <yeong-cherng.hsu@mediatek.com>
Date: Sat, 18 Jan 2020 10:09:54 +0800
Subject: [PATCH] [ALPS04377757] Fix mediacodec sepolicy issue

[Detail]
Fix mediacodec sepolicy issue

[Solution]
Add following to mediacodec due to new check rules after Android Q.
GED_BRIDGE_IO_GE_GET
GED_BRIDGE_IO_GE_SET

MTK-Commit-Id: a037b13e90f3b02999539d17dfde4e1827523b9d

Change-Id: If8e986a630803a9c2eee0c9654b728f5178ee0e9
CR-Id: ALPS04377757
Feature: [Module]Video Driver
---
 non_plat/mediacodec.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/non_plat/mediacodec.te b/non_plat/mediacodec.te
index 475740f..cc1640f 100644
--- a/non_plat/mediacodec.te
+++ b/non_plat/mediacodec.te
@@ -90,6 +90,7 @@ allow mediacodec MtkCodecService:binder transfer;
 # Date : WK16.33
 # Purpose: Allow to access ged for gralloc_extra functions
 allow mediacodec proc_ged:file {open read write ioctl getattr};
+allowxperm mediacodec proc_ged:file ioctl { GED_BRIDGE_IO_GE_GET GED_BRIDGE_IO_GE_SET };
 
 # Data : WK16.42
 # Operator: Whitney bring up