Merge "Init widevine sepolicy" into main

This commit is contained in:
Treehugger Robot 2024-08-16 17:15:08 +00:00 committed by Android (Google) Code Review
commit e6a505e473
6 changed files with 21 additions and 0 deletions

View file

@ -0,0 +1,3 @@
# Widevine DRM
type mediadrm_vendor_data_file, file_type, data_file_type;

View file

@ -0,0 +1,5 @@
/vendor/bin/hw/android\.hardware\.drm-service\.widevine u:object_r:hal_drm_widevine_exec:s0
/vendor/bin/hw/android\.hardware\.drm-service\.clearkey u:object_r:hal_drm_clearkey_exec:s0
# Data
/data/vendor/mediadrm(/.*)? u:object_r:mediadrm_vendor_data_file:s0

View file

@ -0,0 +1,5 @@
type hal_drm_clearkey, domain;
type hal_drm_clearkey_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(hal_drm_clearkey)
#TODO: snehalreddy@ add sepolicy

View file

@ -0,0 +1,5 @@
type hal_drm_widevine, domain;
type hal_drm_widevine_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(hal_drm_widevine)
#TODO: snehalreddy@ add sepolicy

View file

@ -0,0 +1 @@
android.hardware.drm.IDrmFactory/widevine u:object_r:hal_drm_service:s0

2
widevine/widevine_v2.mk Normal file
View file

@ -0,0 +1,2 @@
include device/google/gs-common/widevine/widevine.mk
BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs-common/widevine/sepolicy/