platform_system_sepolicy/public/audioserver.te

# audioserver - audio services daemon
type audioserver, domain;
type audioserver_tmpfs, file_type;

# Allow audioserver to signal audio HAL processes and dump their stacks.
allow audioserver hal_audio_server:process signal;

# Allow audioserver to access sensorservice.
allow audioserver sensorservice_service:service_manager find;
allow audioserver system_server:unix_stream_socket { read write };
Add rules for running audio services in audioserver audioserver has the same rules as mediaserver so there is no loss of rights or permissions. media.log moves to audioserver. TBD: Pare down permissions. Bug: 24511453 Change-Id: I0fff24c14b712bb3d498f75e8fd66c2eb795171d 2015-09-09 19:48:04 +02:00			`# audioserver - audio services daemon`
audioserver: Build up least privileged policy Remove all permissions not observed during testing. Remove domain_deprecated Bug: 27064332 Change-Id: Ie154af70aaf255721b46d29357e48d5337020b4b 2016-02-09 21:12:13 +01:00			`type audioserver, domain;`
Properly Treble-ize tmpfs access This is being done in preparation for the migration from ashmem to memfd. In order for tmpfs objects to be usable across the Treble boundary, they need to be declared in public policy whereas, they're currently all declared in private policy as part of the tmpfs_domain() macro. Remove the type declaration from the macro, and remove tmpfs_domain() from the init_daemon_domain() macro to avoid having to declare the *_tmpfs types for all init launched domains. tmpfs is mostly used by apps and the media frameworks. Bug: 122854450 Test: Boot Taimen and blueline. Watch videos, make phone calls, browse internet, send text, install angry birds...play angry birds, keep playing angry birds... Change-Id: I20a47d2bb22e61b16187015c7bc7ca10accf6358 Merged-In: I20a47d2bb22e61b16187015c7bc7ca10accf6358 (cherry picked from commit e16fb9109c678f47aa7698605477d9a6baf398fb) 2019-01-24 00:07:40 +01:00			`type audioserver_tmpfs, file_type;`
audioserver: allow audioserver to generate audio HAL tombstones Allow audioserver to signal audio HAL processes and generate tombstones in case of watchdog restart. Bug: 141528385 Test: Force watchdog and verify tombstone creation Change-Id: I39bb4a63aa93efab68baad3890b8f49fc5f79ead 2019-09-28 01:35:17 +02:00
			`# Allow audioserver to signal audio HAL processes and dump their stacks.`
			`allow audioserver hal_audio_server:process signal;`
Allow audioserver to access sensorservice This is required for accessing sensor data in audioserver. Bug: 188502620 Test: log-based verification of sensor data coming through. Change-Id: I183ce5106401ae7853096e80a8650cc7919e6221 2021-08-20 18:36:22 +02:00
			`# Allow audioserver to access sensorservice.`
			`allow audioserver sensorservice_service:service_manager find;`
			`allow audioserver system_server:unix_stream_socket { read write };`