From cc8a4d3bf277301cdd54b48cab35497ff430f7e6 Mon Sep 17 00:00:00 2001
From: Robert Shih <robertshih@google.com>
Date: Fri, 22 Nov 2019 14:47:15 -0800
Subject: [PATCH] allow mediaserver to access drm hidl

Previously mediaserver could only access hidl via mediadrmserver.
Required because mediadrmserver will be removed in R.

Bug: 134787536
Bug: 144731879
Test: MediaPlayerDrmTest
Change-Id: If0ae1453251e88775a43750e24f7dac198294780
---
 private/mediaserver.te | 1 +
 public/domain.te       | 1 +
 2 files changed, 2 insertions(+)

diff --git a/private/mediaserver.te b/private/mediaserver.te
index bf8be28e0..d74ab9573 100644
--- a/private/mediaserver.te
+++ b/private/mediaserver.te
@@ -6,6 +6,7 @@ tmpfs_domain(mediaserver)
 # allocate and use graphic buffers
 hal_client_domain(mediaserver, hal_graphics_allocator)
 hal_client_domain(mediaserver, hal_configstore)
+hal_client_domain(mediaserver, hal_drm)
 hal_client_domain(mediaserver, hal_omx)
 hal_client_domain(mediaserver, hal_codec2)
 
diff --git a/public/domain.te b/public/domain.te
index 75769b33d..e50ef7586 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -542,6 +542,7 @@ neverallow {
   userdebug_or_eng(`-incidentd')
   -init
   -mediadrmserver
+  -mediaserver
   -recovery
   -shell
   -system_server