Commit graph

7 commits

Author SHA1 Message Date
Jeff Vander Stoep
21f77f630b buildtime/cts enforce no inet access for media domains
Bug: 28348382
Change-Id: Iaab1430750dfbb997900d3d70993c9fff2a8745d
2016-04-22 15:39:00 -07:00
Marco Nelissen
6c53b23da8 mediacodec: grant access to surfaceflinger
avc:  denied  { find } for service=SurfaceFlinger scontext=u:r:mediacodec:s0
tcontext=u:object_r:surfaceflinger_service:s0 tclass=service_manager

Bug: 26990688
Change-Id: Ie7c5f6d879c286375eb52ef4c6b84726aa4f1ba2
2016-02-27 21:27:07 -08:00
Marco Nelissen
ebf79f88e4 Add missing selinux permissions for mediacodec
Bug: 27305063
Change-Id: Ie9ac3fb971dbb989d7b26421e076139d3f48a916
2016-02-24 10:04:38 -08:00
Robb Glasser
b7a76e9b34 elinux: Update access rules for codec process
Add rule to address dir search violation for video_device

bug:27115708
Change-Id: I14bad283af1ddda725e41d0100a09e6066519846
2016-02-11 10:33:57 -08:00
Marco Nelissen
c3ba2e5130 selinux rules for codec process
Bug: 22775369

Change-Id: Ic6abe3d0e18ba6f7554d027e0ec05fd19011709b
2016-02-09 14:13:13 -08:00
Marco Nelissen
b1bf83fd79 Revert "selinux rules for codec process"
This reverts commit 2afb217b68.

Change-Id: Ie2ba8d86f9c7078f970afbb06230f9573c28e0ed
2016-01-28 13:51:28 -08:00
Marco Nelissen
2afb217b68 selinux rules for codec process
Bug: 22775369
Change-Id: I9733457b85dbaeb872b8f4aff31d0b8808fa7d44
2016-01-22 14:43:14 -08:00