platform_system_sepolicy/public/mediaswcodec.te
Chong Zhang 52fb3edbb6 add media.codec.update service
Add a service in mediaswcodec to load updated codecs,
and restrict it to userdebug/eng. Reuse existing
mediaextractor_update_service since the codec update
service is identical, this avoids adding a new one
for now as we may not need the service anymore
after switching to APEX.

Bug: 111407413
Bug: 117290290

Change-Id: Ia75256f47433bd13ed819c70c1fb34ecd5d507b4
2018-10-15 21:06:53 +00:00

18 lines
653 B
Text

type mediaswcodec, domain;
type mediaswcodec_exec, system_file_type, exec_type, file_type;
typeattribute mediaswcodec halserverdomain;
typeattribute mediaswcodec mediaswcodec_server;
hal_client_domain(mediaswcodec, hal_allocator)
hal_client_domain(mediaswcodec, hal_graphics_allocator)
userdebug_or_eng(`
binder_use(mediaswcodec)
# Add mediaextractor_update_service service
allow mediaswcodec mediaextractor_update_service:service_manager { find add };
# Allow mediaswcodec to load libs from update apk.
allow mediaswcodec apk_data_file:file { open read execute getattr map };
allow mediaswcodec apk_data_file:dir { search getattr };
')