blob: 2405e91930caf5a7c495aae90a59a28e986c53b4 [file] [log] [blame]
# Grant access to Qualcomm MSM Interface (QMI) audio sockets to mediaserver
# Permit mediaserver to create sockets with no specific SELinux class.
# TODO: Investigate the specific type of socket.
allow mediaserver self:socket create_socket_perms;
allowxperm mediaserver self:socket ioctl msm_sock_ipc_ioctls;
allow mediaserver mpdecision_socket:dir r_dir_perms;
unix_socket_send(mediaserver, mpdecision, mpdecision)
binder_call(mediaserver, rild)
unix_socket_send(mediaserver, camera, camera)
unix_socket_connect(mediaserver, adspd, adspd)
allow mediaserver audio_cutback_data_file:dir search;
allow mediaserver audio_cutback_data_file:sock_file write;
# needed for widevine classic
allow mediaserver tee_device:chr_file { ioctl open read write };