From 0968dd3f1cf98a4d00247c359d09bedb91701b03 Mon Sep 17 00:00:00 2001 From: Phalguni Date: Tue, 25 Jun 2019 17:00:36 -0700 Subject: [PATCH] Sepolicy : Enable smcinvoke_device for Widevine Change-Id: Ie3439958b0cb3f6b1b56870c3b3bad49e70e8b4d --- generic/vendor/common/hal_drm_widevine.te | 3 +++ 1 file changed, 3 insertions(+) diff --git a/generic/vendor/common/hal_drm_widevine.te b/generic/vendor/common/hal_drm_widevine.te index b7ffde00..505518e6 100644 --- a/generic/vendor/common/hal_drm_widevine.te +++ b/generic/vendor/common/hal_drm_widevine.te @@ -36,6 +36,9 @@ allow hal_drm_widevine mediacodec:fd use; allow hal_drm_widevine { appdomain -isolated_app }:fd use; allow hal_drm_widevine qce_device:chr_file rw_file_perms; +#Allow access to smcinvoke device +allow hal_drm_widevine smcinvoke_device:chr_file rw_file_perms; + # The QTI DRM-HAL implementation uses a vendor-binder service provided # by the HWC HAL. vndbinder_use(hal_drm_widevine);