77 lines
2.5 KiB
Text
77 lines
2.5 KiB
Text
# allow mediaserver to communicate with cnd
|
|
unix_socket_connect(mediaserver, cnd, cnd)
|
|
|
|
unix_socket_send(mediaserver, camera, mm-qcamerad)
|
|
|
|
allow mediaserver tee_device:chr_file rw_file_perms;
|
|
allow mediaserver qdsp_device:chr_file r_file_perms;
|
|
|
|
allow mediaserver self:socket create_socket_perms;
|
|
|
|
binder_call(mediaserver, rild)
|
|
|
|
qmux_socket(mediaserver)
|
|
allow mediaserver camera_data_file:sock_file w_file_perms;
|
|
|
|
userdebug_or_eng(`
|
|
allow mediaserver camera_data_file:dir rw_dir_perms;
|
|
allow mediaserver camera_data_file:file create_file_perms;
|
|
# Access to audio
|
|
#allow mediaserver debugfs:file rw_file_perms;
|
|
')
|
|
|
|
r_dir_file(mediaserver, sysfs_esoc)
|
|
allow mediaserver system_app_data_file:file rw_file_perms;
|
|
|
|
# allow mediaserver to write DTS files
|
|
allow mediaserver dts_data_file:dir rw_dir_perms;
|
|
allow mediaserver dts_data_file:file create_file_perms;
|
|
|
|
# allow poweroffhandler to binder mediaserver
|
|
binder_call(mediaserver, poweroffhandler);
|
|
|
|
# access to perflock
|
|
allow mediaserver mpctl_socket:dir r_dir_perms;
|
|
unix_socket_send(mediaserver, mpctl, mpdecision)
|
|
unix_socket_connect(mediaserver, mpctl, mpdecision)
|
|
unix_socket_connect(mediaserver, thermal, thermal-engine)
|
|
|
|
# access to perflock
|
|
allow mediaserver mpctl_socket:dir r_dir_perms;
|
|
unix_socket_send(mediaserver, mpctl, perfd)
|
|
unix_socket_connect(mediaserver, mpctl, perfd)
|
|
|
|
# for thermal sock files
|
|
unix_socket_connect(mediaserver, thermal, thermal-engine)
|
|
|
|
#This is required for thermal sysfs access
|
|
r_dir_file(mediaserver, sysfs_thermal);
|
|
|
|
#allow mediaserver to communicate with timedaemon
|
|
allow mediaserver time_daemon:unix_stream_socket connectto;
|
|
|
|
# Allow mediaserver to create socket files for audio arbitration
|
|
allow mediaserver audio_data_file:sock_file { create setattr unlink };
|
|
allow mediaserver audio_data_file:dir remove_name;
|
|
|
|
# Allow mediaserver to create audio pp files
|
|
allow mediaserver audio_pp_data_file:dir rw_dir_perms;
|
|
allow mediaserver audio_pp_data_file:file create_file_perms;
|
|
|
|
#Allow mediaserver to set camera properties
|
|
set_prop(mediaserver, camera_prop)
|
|
|
|
#allow mediaserver to access wfdservice
|
|
binder_call(mediaserver, wfdservice)
|
|
|
|
#allow mediaserver to access adsprpcd
|
|
r_dir_file(mediaserver, adsprpcd_file);
|
|
|
|
# allow mediaserver to communicate with bootanim
|
|
binder_call(mediaserver, bootanim);
|
|
|
|
allow mediaserver surfaceflinger:unix_stream_socket rw_socket_perms;
|
|
|
|
# Allow mediaserver to search and get the widevine, playready firmwares
|
|
allow mediaserver firmware_file:dir search;
|
|
allow mediaserver firmware_file:file { read getattr open };
|