Merge "Allow drmserver and mediaserver to read apk files."

This commit is contained in:
Nick Kralevich 2014-03-18 03:57:56 +00:00 committed by Gerrit Code Review
commit 34e8465ccb
2 changed files with 6 additions and 1 deletions

View file

@ -37,3 +37,7 @@ allow drmserver apk_data_file:sock_file unlink;
# After taking a video, drmserver looks at the video file. # After taking a video, drmserver looks at the video file.
r_dir_file(drmserver, media_rw_data_file) r_dir_file(drmserver, media_rw_data_file)
# Read resources from open apk files passed over Binder.
allow drmserver apk_data_file:file { read getattr };
allow drmserver asec_apk_file:file { read getattr };

View file

@ -36,8 +36,9 @@ allow mediaserver audio_device:chr_file rw_file_perms;
# XXX Label with a specific type? # XXX Label with a specific type?
allow mediaserver sysfs:file rw_file_perms; allow mediaserver sysfs:file rw_file_perms;
# XXX Why? # Read resources from open apk files passed over Binder.
allow mediaserver apk_data_file:file { read getattr }; allow mediaserver apk_data_file:file { read getattr };
allow mediaserver asec_apk_file:file { read getattr };
# Access camera device. # Access camera device.
allow mediaserver camera_device:chr_file rw_file_perms; allow mediaserver camera_device:chr_file rw_file_perms;