Evolution-X-Tensor/device_google_tangorpro
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Revert "Revert "CastAuth: SELinux rules for the MediaDrm plugin"" am: c3ea668daa

Browse source 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20116451

Change-Id: I4aa02c9c5c3333c23cd6ed4fb052785a2fbfde9c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Ryan Ki Sing Chung 2022-10-05 04:07:02 +00:00 • committed by Automerger Merge Worker
commit 5e4bde23de
4 changed files with 18 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
vendor/file.te vendored
View file

@ -1,2 +1,5 @@
#Pogo USB control & status
type sysfs_pogo_usb, sysfs_type, fs_type;
# Cast device certificate
type device_cert_file, file_type, vendor_persist_type;

4
vendor/file_contexts vendored
View file

@ -9,3 +9,7 @@
# Privacy LED
/vendor/bin/hw/android\.hardware\.lights-service\.tangorpro u:object_r:hal_light_default_exec:s0
# Cast Factory Credentials
/vendor/bin/hw/android\.hardware\.drm-service\.castkey u:object_r:hal_drm_cast_exec:s0
/mnt/vendor/persist/nest/cast_auth\.crt u:object_r:device_cert_file:s0

9
vendor/hal_drm_cast.te vendored Normal file
View file

@ -0,0 +1,9 @@
type hal_drm_cast, domain;
type hal_drm_cast_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_drm_cast)
hal_server_domain(hal_drm_cast, hal_drm)
allow hal_drm_cast mnt_vendor_file:dir search;
allow hal_drm_cast persist_file:dir search;
allow hal_drm_cast device_cert_file:file r_file_perms;

2
vendor/service_contexts vendored Normal file
View file

@ -0,0 +1,2 @@
# Cast Factory Credentials
android.hardware.drm.IDrmFactory/castkey u:object_r:hal_drm_service:s0