Enable dumpsys widevine without root

Before the addition of sepolicy:
Error with service 'android.hardware.drm.IDrmFactory/widevine' while dumping: FAILED_TRANSACTION

Success after change.

Test: adb shell dumpsys android.hardware.drm.IDrmFactory/widevine

Bug: 238682056
Change-Id: I3817c9487bdec0c812690823cbb941cff80f394f
This commit is contained in:
Edwin Wong 2022-07-11 23:03:34 +00:00
parent 355ecc995e
commit 9730877236

View file

@ -26,6 +26,12 @@ r_dir_file(hal_drm, cgroup_v2)
allow hal_drm cgroup_v2:dir { search write };
allow hal_drm cgroup_v2:file w_file_perms;
# Allow dumpsys Widevine without root
userdebug_or_eng(`
allow hal_drm_server shell:fd use;
allow hal_drm_server shell:fifo_file write;
')
# Allow access to ion memory allocation device
allow hal_drm ion_device:chr_file rw_file_perms;
allow hal_drm hal_graphics_allocator:fd use;