diff --git a/tracking_denials/hal_drm_widevine.te b/tracking_denials/hal_drm_widevine.te deleted file mode 100644 index 577c7424..00000000 --- a/tracking_denials/hal_drm_widevine.te +++ /dev/null @@ -1,4 +0,0 @@ -# b/202906980 -dontaudit hal_drm_widevine hal_drm_hwservice:hwservice_manager { add }; -dontaudit hal_drm_widevine hal_drm_hwservice:hwservice_manager { find }; -dontaudit hal_drm_widevine hidl_base_hwservice:hwservice_manager { add }; diff --git a/widevine/hal_drm_widevine.te b/widevine/hal_drm_widevine.te index 0e465719..1ecfa920 100644 --- a/widevine/hal_drm_widevine.te +++ b/widevine/hal_drm_widevine.te @@ -2,6 +2,8 @@ type hal_drm_widevine, domain; type hal_drm_widevine_exec, vendor_file_type, exec_type, file_type; init_daemon_domain(hal_drm_widevine) +hal_server_domain(hal_drm_widevine, hal_drm) + # L3 allow hal_drm_widevine mediadrm_vendor_data_file:file create_file_perms; allow hal_drm_widevine mediadrm_vendor_data_file:dir create_dir_perms;