Merge "Add widevine SELinux permissions" into main

This commit is contained in:
Snehal Koukuntla 2024-09-04 08:42:49 +00:00 committed by Android (Google) Code Review
commit 13e34cc96a
2 changed files with 11 additions and 2 deletions

View file

@ -1,5 +1,6 @@
# sepolicy for DRM clearkey
type hal_drm_clearkey, domain;
type hal_drm_clearkey_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(hal_drm_clearkey)
#TODO: snehalreddy@ add sepolicy
hal_server_domain(hal_drm_clearkey, hal_drm)

View file

@ -1,5 +1,13 @@
# sepolicy for DRM widevine
type hal_drm_widevine, domain;
type hal_drm_widevine_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(hal_drm_widevine)
#TODO: snehalreddy@ add sepolicy
hal_server_domain(hal_drm_widevine, hal_drm)
# L3
allow hal_drm_widevine mediadrm_vendor_data_file:file create_file_perms;
allow hal_drm_widevine mediadrm_vendor_data_file:dir create_dir_perms;
#L1
#TODO(snehalreddy@) : Add L1 permissions