SELinux policy for accessing audio firmware files.
Change-Id: I9a0467b16e7b0a4f6ca41bdd1a76971a3771112a
diff --git a/sepolicy/file.te b/sepolicy/file.te
index 77b0e1d..839b0a4 100644
--- a/sepolicy/file.te
+++ b/sepolicy/file.te
@@ -3,3 +3,5 @@
type qmux_bluetooth_socket, file_type;
type qmux_gps_socket, file_type;
type qmux_radio_socket, file_type;
+
+type audio_firmware_file, file_type;
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index 02d1b24..5524e47 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -17,3 +17,6 @@
# Qualcomm MSM Audio ACDB device
/dev/msm_acdb u:object_r:msm_acdb_device:s0
+
+# Qualcomm audio firmware files
+/data/misc/audio/* u:object_r:audio_firmware_file:s0
diff --git a/sepolicy/mediaserver.te b/sepolicy/mediaserver.te
index 49e4d98..dacaacf 100644
--- a/sepolicy/mediaserver.te
+++ b/sepolicy/mediaserver.te
@@ -7,3 +7,7 @@
# Permit mediaserver to create sockets
allow mediaserver self:socket create;
+
+# Grant access to audio firmware files to mediaserver
+allow mediaserver audio_firmware_file:dir ra_dir_perms;
+allow mediaserver audio_firmware_file:file create_file_perms;
