platform_system_sepolicy/public/mediaswcodec.te
Dongwon Kang 523c746859 SEPolicy updates for adding native flag namespace(media).
Test: add sepolicy, build, check GetServerConfigurableFlag function
Bug: 123658514
Change-Id: I798b0ef901068c53070e768305acd38118a7e886
2019-01-31 10:06:32 -08:00

20 lines
710 B
Text

type mediaswcodec, domain;
type mediaswcodec_exec, system_file_type, exec_type, file_type;
typeattribute mediaswcodec halserverdomain;
typeattribute mediaswcodec mediaswcodec_server;
hal_client_domain(mediaswcodec, hal_allocator)
hal_client_domain(mediaswcodec, hal_graphics_allocator)
get_prop(mediaswcodec, device_config_media_native_prop)
userdebug_or_eng(`
binder_use(mediaswcodec)
# Add mediaextractor_update_service service
allow mediaswcodec mediaextractor_update_service:service_manager { find add };
# Allow mediaswcodec to load libs from update apk.
allow mediaswcodec apk_data_file:file { open read execute getattr map };
allow mediaswcodec apk_data_file:dir { search getattr };
')