blob: cd0a5e723cdcd6777fd46132e81861c36a457533 [file] [log] [blame]
# Grant access to Qualcomm MSM Interface (QMI) audio sockets to mediaserver
# Permit mediaserver to create sockets with no specific SELinux class.
# TODO: Investigate the specific type of socket.
allow mediaserver self:socket create_socket_perms;
allow mediaserver mpdecision_socket:dir r_dir_perms;
unix_socket_send(mediaserver, mpdecision, mpdecision)
binder_call(mediaserver, rild)
unix_socket_send(mediaserver, camera, camera)
unix_socket_connect(mediaserver, adspd, adspd)
allow mediaserver audio_cutback_data_file:dir search;
allow mediaserver audio_cutback_data_file:sock_file write;
# TODO b/17015082
allow mediaserver shell_data_file:dir search;