NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "[ALPS03916010] Upgrade to drm hidl 1.1" into alps-trunk-p0.basic

Browse Source 
Change-Id: I6f733a6ec25cabd8b3245900748c87e7f34815f1
MTK-Commit-Id: f4edac22852384fb65ad155130c2bf7181676b4a
This commit is contained in:
Shan Zhang (张山) 2020-01-18 09:49:50 +08:00 committed by Gerrit Code Review
commit c220e2dbaf
3 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
non_plat/file.te
View File

@ -264,3 +264,6 @@ type sysfs_uart_info, fs_type, sysfs_type;
# Purpose : for charger to access vbus info and pump_express
type sysfs_vbus, fs_type, sysfs_type;
type sysfs_pump_express, fs_type, sysfs_type;
# Widevine move data/mediadrm folder from system to vendor
type mediadrm_vendor_data_file, file_type, data_file_type;

3
non_plat/file_contexts
View File

@ -62,6 +62,7 @@
#/data/vendor/nfc(/.*)? u:object_r:nfc_data_file:s0
/data/vendor/connsyslog(/.*)? u:object_r:consyslog_data_file:s0
/data/vendor/stp_dump(/.*)? u:object_r:stp_dump_data_file:s0
/data/vendor/mediadrm(/.*)? u:object_r:mediadrm_vendor_data_file:s0
# Misc data
#/data/misc/acdapi(/.*)? u:object_r:acdapi_data_file:s0
@ -558,7 +559,7 @@
/(system\/vendor|vendor)/bin/hw/camerahalserver u:object_r:mtk_hal_camera_exec:s0
/(system\/vendor|vendor)/bin/hw/vendor\.mediatek\.hardware\.imsa@1\.0-service u:object_r:mtk_hal_imsa_exec:s0
#Widevine drm hal
/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@1\.0-service.widevine u:object_r:hal_drm_widevine_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@1\.1-service.widevine u:object_r:hal_drm_widevine_exec:s0
#PQ hal
/(system\/vendor|vendor)/bin/hw/vendor\.mediatek\.hardware\.pq@2\.1-service u:object_r:mtk_hal_pq_exec:s0
# Keymaster Attestation Hal

5
non_plat/hal_drm_widevine.te
View File

@ -9,6 +9,9 @@ allow hal_drm_widevine { appdomain -isolated_app }:fd use;
vndbinder_use(hal_drm_widevine);
#============= hal_drm_widevine ==============
allow hal_drm_widevine debugfs_tracing:file write;
allow hal_drm_widevine debugfs_ion:dir search;
allow hal_drm_default hal_allocator_server:fd use;
allow hal_drm_widevine mediadrm_vendor_data_file:dir create_dir_perms;
allow hal_drm_widevine mediadrm_vendor_data_file:file create_file_perms;