Init widevine sepolicy

Bug: 354191444

Flag: EXEMPT bugfix

Change-Id: I331c31be2f1478b161a9af1d0c49506b717c30d2
This commit is contained in:
Snehal 2024-08-13 14:06:37 +00:00 committed by Snehal Koukuntla
parent 805f6b577c
commit 84aaa5491e
6 changed files with 21 additions and 0 deletions

View file

@ -0,0 +1,3 @@
# Widevine DRM
type mediadrm_vendor_data_file, file_type, data_file_type;

View file

@ -0,0 +1,5 @@
/vendor/bin/hw/android\.hardware\.drm-service\.widevine u:object_r:hal_drm_widevine_exec:s0
/vendor/bin/hw/android\.hardware\.drm-service\.clearkey u:object_r:hal_drm_clearkey_exec:s0
# Data
/data/vendor/mediadrm(/.*)? u:object_r:mediadrm_vendor_data_file:s0

View file

@ -0,0 +1,5 @@
type hal_drm_clearkey, domain;
type hal_drm_clearkey_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(hal_drm_clearkey)
#TODO: snehalreddy@ add sepolicy

View file

@ -0,0 +1,5 @@
type hal_drm_widevine, domain;
type hal_drm_widevine_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(hal_drm_widevine)
#TODO: snehalreddy@ add sepolicy

View file

@ -0,0 +1 @@
android.hardware.drm.IDrmFactory/widevine u:object_r:hal_drm_service:s0

2
widevine/widevine_v2.mk Normal file
View file

@ -0,0 +1,2 @@
include device/google/gs-common/widevine/widevine.mk
BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs-common/widevine/sepolicy/