NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS03916902] Add hidl 1.1 clearkey to pass vts

Browse Source 
Google add hidl 1.1 clearkey implementation on Android P, and legacy
 clearkey still exist on AOSP, on the new version 4778823 vts, it will
 check both legacy and hidl clearkey funtions. So it need add to support
 both types clearkey implementation to pass new vts on Android P.

MTK-Commit-Id: 229c445c3da9c4300c2586b9888a3205fe824484

Change-Id: I5488b591fc55526c7c6ae1c2516dc851ae4deb24
CR-Id: ALPS03916902
Feature: Google Widevine Level3
(cherry picked from commit c28dee0c4ab1cd7c6327f073ec9229e18b1166d3)
This commit is contained in:
Jackie Lin 2020-01-18 10:01:00 +08:00 committed by Jackie Lin (林中校)
parent 52478b8187
commit 9aba419353
3 changed files with 14 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
non_plat/file_contexts
View File

@ -615,3 +615,5 @@
/vendor/bin/hw/vendor\.mediatek\.hardware\.dumpstate@1\.0-service u:object_r:hal_dumpstate_impl_exec:s0 /vendor/bin/hw/vendor\.mediatek\.hardware\.dumpstate@1\.0-service u:object_r:hal_dumpstate_impl_exec:s0
/vendor/bin/aeev u:object_r:aee_aedv_exec:s0 /vendor/bin/aeev u:object_r:aee_aedv_exec:s0
/vendor/bin/hw/android\.hardware\.drm@1\.1-service\.clearkey u:object_r:hal_drm_clearkey_exec:s0

11
non_plat/hal_drm_clearkey.te Normal file
View File

@ -0,0 +1,11 @@
# policy for /vendor/bin/hw/android.hardware.drm@1.1-service.clearkey
type hal_drm_clearkey, domain;
type hal_drm_clearkey_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_drm_clearkey)
hal_server_domain(hal_drm_clearkey, hal_drm)
vndbinder_use(hal_drm_clearkey);
allow hal_drm_clearkey { appdomain -isolated_app }:fd use;

2
non_plat/hal_drm_widevine.te
View File

@ -12,6 +12,6 @@ vndbinder_use(hal_drm_widevine);
allow hal_drm_widevine debugfs_tracing:file write; allow hal_drm_widevine debugfs_tracing:file write;
allow hal_drm_widevine debugfs_ion:dir search; allow hal_drm_widevine debugfs_ion:dir search;
allow hal_drm_default hal_allocator_server:fd use; allow hal_drm_widevine hal_allocator_server:fd use;
allow hal_drm_widevine mediadrm_vendor_data_file:dir create_dir_perms; allow hal_drm_widevine mediadrm_vendor_data_file:dir create_dir_perms;
allow hal_drm_widevine mediadrm_vendor_data_file:file create_file_perms; allow hal_drm_widevine mediadrm_vendor_data_file:file create_file_perms;