Merge "document the non-ART-related reasons for execmem"

This commit is contained in:
Nick Kralevich 2015-09-16 23:16:37 +00:00 committed by Gerrit Code Review
commit eb8b2188e8
2 changed files with 4 additions and 1 deletions

3
app.te
View file

@ -7,8 +7,9 @@
### zygote spawned apps should be added here.
###
# Dalvik Compiler JIT Mapping.
# WebView and other application-specific JIT compilers
allow appdomain self:process execmem;
allow appdomain ashmem_device:chr_file execute;
# Receive and use open file descriptors inherited from zygote.

View file

@ -14,7 +14,9 @@ binder_call(mediaserver, binderservicedomain)
binder_call(mediaserver, appdomain)
binder_service(mediaserver)
# Required by Widevine DRM (b/22990512)
allow mediaserver self:process execmem;
allow mediaserver kernel:system module_request;
allow mediaserver media_data_file:dir create_dir_perms;
allow mediaserver media_data_file:file create_file_perms;