55e5c9b513
public/property split is landed to selectively export public types to
vendors. So rules happening within system should be in private. This
introduces private/property.te and moves all allow and neverallow rules
from any coredomains to system defiend properties.
Bug: 150331497
Test: system/sepolicy/tools/build_policies.sh
Change-Id: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe
Merged-In: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe
(cherry picked from commit 42c7d8966c)
16 lines
527 B
Text
16 lines
527 B
Text
typeattribute mediaserver coredomain;
|
|
|
|
init_daemon_domain(mediaserver)
|
|
tmpfs_domain(mediaserver)
|
|
allow mediaserver appdomain_tmpfs:file { getattr map read write };
|
|
|
|
# allocate and use graphic buffers
|
|
hal_client_domain(mediaserver, hal_graphics_allocator)
|
|
hal_client_domain(mediaserver, hal_configstore)
|
|
hal_client_domain(mediaserver, hal_drm)
|
|
hal_client_domain(mediaserver, hal_omx)
|
|
hal_client_domain(mediaserver, hal_codec2)
|
|
|
|
allow mediaserver mediatranscoding_service:service_manager find;
|
|
|
|
set_prop(mediaserver, audio_prop)
|