am eb8b2188
: Merge "document the non-ART-related reasons for execmem"
* commit 'eb8b2188e895d6dbc57c875bba87332d3dca9a03': document the non-ART-related reasons for execmem
This commit is contained in:
commit
33f363693a
2 changed files with 4 additions and 1 deletions
3
app.te
3
app.te
|
@ -7,8 +7,9 @@
|
||||||
### zygote spawned apps should be added here.
|
### zygote spawned apps should be added here.
|
||||||
###
|
###
|
||||||
|
|
||||||
# Dalvik Compiler JIT Mapping.
|
# WebView and other application-specific JIT compilers
|
||||||
allow appdomain self:process execmem;
|
allow appdomain self:process execmem;
|
||||||
|
|
||||||
allow appdomain ashmem_device:chr_file execute;
|
allow appdomain ashmem_device:chr_file execute;
|
||||||
|
|
||||||
# Receive and use open file descriptors inherited from zygote.
|
# Receive and use open file descriptors inherited from zygote.
|
||||||
|
|
|
@ -14,7 +14,9 @@ binder_call(mediaserver, binderservicedomain)
|
||||||
binder_call(mediaserver, appdomain)
|
binder_call(mediaserver, appdomain)
|
||||||
binder_service(mediaserver)
|
binder_service(mediaserver)
|
||||||
|
|
||||||
|
# Required by Widevine DRM (b/22990512)
|
||||||
allow mediaserver self:process execmem;
|
allow mediaserver self:process execmem;
|
||||||
|
|
||||||
allow mediaserver kernel:system module_request;
|
allow mediaserver kernel:system module_request;
|
||||||
allow mediaserver media_data_file:dir create_dir_perms;
|
allow mediaserver media_data_file:dir create_dir_perms;
|
||||||
allow mediaserver media_data_file:file create_file_perms;
|
allow mediaserver media_data_file:file create_file_perms;
|
||||||
|
|
Loading…
Reference in a new issue