Merge "Enable dumpsys widevine without root" am: b7529adf07

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2166095

Change-Id: I11291fea53e0d4be42390f2848e050d128eb9839
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Edwin Wong 2022-08-09 05:58:48 +00:00 committed by Automerger Merge Worker
commit 078df507dc

View file

@ -26,6 +26,12 @@ r_dir_file(hal_drm, cgroup_v2)
allow hal_drm cgroup_v2:dir { search write };
allow hal_drm cgroup_v2:file w_file_perms;
# Allow dumpsys Widevine without root
userdebug_or_eng(`
allow hal_drm_server shell:fd use;
allow hal_drm_server shell:fifo_file write;
')
# Allow access to ion memory allocation device
allow hal_drm ion_device:chr_file rw_file_perms;
allow hal_drm hal_graphics_allocator:fd use;