Allow mediacodec to access the vstream-secure DMA-BUF heap

This patch fixes the following denial:

avc: denied { read } for comm="HwBinder:727_3" name="vstream-secure"
dev="tmpfs" ino=693 scontext=u:r:mediacodec:s0
tcontext=u:object_r:dmabuf_system_secure_heap_device:s0 tclass=chr_file
permissive=0

Bug: 183681871
Test: build
Change-Id: I018a8d42afe2bb58416b47864b8ffd53de9292cb
This commit is contained in:
Hridya Valsaraju 2021-03-30 12:30:27 -07:00
parent 978b3b4e9b
commit ef8172c028

View file

@ -5,3 +5,4 @@ userdebug_or_eng(`
add_service(mediacodec, eco_service)
allow mediacodec hal_camera_default:binder call;
allow mediacodec sysfs_video:file r_file_perms;
allow mediacodec dmabuf_system_secure_heap_device:chr_file r_file_perms;