Use SELinux rules from private instead of tangorpro for MediaDrm plugin

* Private mediadrm: ag/29478046, ag/29547376
* MediaDrm SELinux rules are on ag/29567026

Bug: 367906184
Bug: 366426322
Flag: EXEMPT castauth enabled
Test: b/364190751#comment27
Change-Id: If98279ba8b6310206971069d064831fa5f053515
This commit is contained in:
Rock Huang 2024-09-24 19:35:57 +08:00
parent af493c2bd0
commit 5d140bdb98
4 changed files with 0 additions and 18 deletions

3
vendor/file.te vendored
View file

@ -1,8 +1,5 @@
#Pogo USB control & status
type sysfs_pogo_usb, sysfs_type, fs_type;
# Cast device certificate
type device_cert_file, file_type, vendor_persist_type;
# Avoid GPS se failed
type sysfs_gps, sysfs_type, fs_type;

View file

@ -9,7 +9,3 @@
# Privacy LED
/vendor/bin/hw/android\.hardware\.lights-service\.tangorpro u:object_r:hal_light_default_exec:s0
# Cast Factory Credentials
/vendor/bin/hw/android\.hardware\.drm-service\.castkey u:object_r:hal_drm_cast_exec:s0
/mnt/vendor/persist/nest/cast_auth\.crt u:object_r:device_cert_file:s0

View file

@ -1,9 +0,0 @@
type hal_drm_cast, domain;
type hal_drm_cast_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_drm_cast)
hal_server_domain(hal_drm_cast, hal_drm)
allow hal_drm_cast mnt_vendor_file:dir search;
allow hal_drm_cast persist_file:dir search;
allow hal_drm_cast device_cert_file:file r_file_perms;

View file

@ -1,2 +0,0 @@
# Cast Factory Credentials
android.hardware.drm.IDrmFactory/castkey u:object_r:hal_drm_service:s0