4 commits

Author	SHA1	Message	Date
Alex Vakulenko	41daa7f859	SELinux policies for PDX services ... Specify per-service rules for PDX transport. Now being able to grant permissions to individual services provided by processes, not all services of a process. Also tighter control over which permissions are required for client and server for individual components of IPC (endpoints, channels, etc). Bug: 37646189 Change-Id: I78eb8ae8b6e08105666445a66bfcbd2f1d69d0ea	2017-05-10 16:39:19 -07:00
Steven Moreland	d3ce5dc38c	Allow hals to read hwservicemanager prop. ... Test: no relevant denials on marlin while booting Test: no relevant denials on angler while booting Bug: 36278706 Change-Id: Ieba79e1c8fca4f74c63bc63e6dd0bdcf59204ca2	2017-03-23 01:50:50 +00:00
Jiwen 'Steve' Cai	eeb0d38037	Allow fd access between mediacodec and bufferhubd ... bufferhubd should be able to use sync fence fd from mediacodec; and mediacodec should be able to use a gralloc buffer fd from the bufferhubd. Bug: 32213311 Test: Ran exoplayer_demo and verify mediacodec can plumb buffer through bufferhub. Change-Id: Id175827c56c33890ecce33865b0b1167d872fc56	2017-03-15 15:56:27 -07:00
Nick Bray	084faf0259	Add policies for new services. ... Bug: 30989383 Bug: 34731101 Test: manual Change-Id: Icf9d48568b505c6b788f2f5f456f2d709969fbeb	2017-02-09 15:15:11 -08:00