tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow mediaprovider and mediaserver to read sdk_sandbox_data_file"

Browse source
This commit is contained in:
Gavin Corkery 2023-05-05 15:45:41 +00:00 committed by Gerrit Code Review
commit 1bff173ec6
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/mediaprovider_app.te
View file

@ -35,6 +35,9 @@ allow mediaprovider_app mediametrics_service:service_manager find;
# Talk to regular app services # Talk to regular app services
allow mediaprovider_app app_api_service:service_manager find; allow mediaprovider_app app_api_service:service_manager find;
# Read SDK sandbox data files
allow mediaprovider_app sdk_sandbox_data_file:file { getattr read };
# Talk to the GPU service # Talk to the GPU service
binder_call(mediaprovider_app, gpuservice) binder_call(mediaprovider_app, gpuservice)

3
private/mediaserver.te
View file

@ -19,6 +19,9 @@ get_prop(mediaserver, media_config_prop)
# Allow mediaserver to start media.transcoding service via ctl.start. # Allow mediaserver to start media.transcoding service via ctl.start.
set_prop(mediaserver, ctl_mediatranscoding_prop); set_prop(mediaserver, ctl_mediatranscoding_prop);
# Allow mediaserver to read SDK sandbox data files
allow mediaserver sdk_sandbox_data_file:file { getattr read };
# Needed for stats callback registration to statsd. # Needed for stats callback registration to statsd.
allow mediaserver stats_service:service_manager find; allow mediaserver stats_service:service_manager find;
allow mediaserver statsmanager_service:service_manager find; allow mediaserver statsmanager_service:service_manager find;