Evolution-X-Tensor/device_google_gs-common
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Snap for 12289667 from 13883d9a54 to 24Q4-release

Browse source 
Change-Id: I2890d977eedcaf8418bb8404c8ec0a45cd12830d
This commit is contained in:
Android Build Coastguard Worker 2024-08-28 23:02:15 +00:00
commit 2583351232
2 changed files with 15 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
audio/common.mk
View file

@ -3,8 +3,15 @@ BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs-common/audio/sepolicy/common
#Audio Vendor libraries #Audio Vendor libraries
PRODUCT_PACKAGES += \ PRODUCT_PACKAGES += \
libfvsam_prm_parser \ libfvsam_prm_parser \
libmahalcontroller \ libmahalcontroller
ifeq ($(USE_MAM_V4_ABOVE),true)
PRODUCT_PACKAGES += \
libMAM_Google_Pixel_Android
else
PRODUCT_PACKAGES += \
libAlgFx_HiFi3z libAlgFx_HiFi3z
endif
ifneq ($(USE_AUDIO_HAL_AIDL),true) ifneq ($(USE_AUDIO_HAL_AIDL),true)
## AudioHAL Configurations ## AudioHAL Configurations

7
mediacodec/vpu/sepolicy/mediacodec_google.te
View file

@ -7,6 +7,8 @@ hal_server_domain(mediacodec_google, hal_codec2)
hal_client_domain(mediacodec_google, hal_graphics_allocator) hal_client_domain(mediacodec_google, hal_graphics_allocator)
add_service(mediacodec_google, eco_service)
allow mediacodec_google dmabuf_system_heap_device:chr_file r_file_perms; allow mediacodec_google dmabuf_system_heap_device:chr_file r_file_perms;
allow mediacodec_google video_device:chr_file { read write open ioctl map }; allow mediacodec_google video_device:chr_file { read write open ioctl map };
@ -19,3 +21,8 @@ neverallow mediacodec_google { file_type fs_type }:file execute_no_trans;
# https://android-developers.googleblog.com/2016/05/hardening-media-stack.html # https://android-developers.googleblog.com/2016/05/hardening-media-stack.html
neverallow mediacodec_google domain:{ udp_socket rawip_socket } *; neverallow mediacodec_google domain:{ udp_socket rawip_socket } *;
neverallow mediacodec_google { domain userdebug_or_eng(`-su') }:tcp_socket *; neverallow mediacodec_google { domain userdebug_or_eng(`-su') }:tcp_socket *;
userdebug_or_eng(`
allow mediacodec_google vendor_media_data_file:dir rw_dir_perms;
allow mediacodec_google vendor_media_data_file:file create_file_perms;
')