diff options
| author | Chong Zhang <chz@google.com> | 2016-12-06 04:01:32 +0000 |
|---|---|---|
| committer | android-build-merger <android-build-merger@google.com> | 2016-12-06 04:01:32 +0000 |
| commit | 2bf3fc795adfada99b0ebc8f8cfb461f78e9a372 (patch) | |
| tree | dc67c3aaf8e117a4145809d9a3a72e5698347020 | |
| parent | dc0479894ca6d59b0aca9db6a08294bcc95804f0 (diff) | |
| parent | 22ff937012cb9801bcefa39b6be18789cc5f14e3 (diff) | |
| download | fugu-2bf3fc795adfada99b0ebc8f8cfb461f78e9a372.tar.gz | |
Temporarily grant tee_device access to media.codec
am: 22ff937012
Change-Id: I23621614458f4db5bb357491a9d3031f6a2d60b2
| -rw-r--r-- | sepolicy/mediacodec.te | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/sepolicy/mediacodec.te b/sepolicy/mediacodec.te index 85f4107..bc0d16a 100644 --- a/sepolicy/mediacodec.te +++ b/sepolicy/mediacodec.te @@ -1,3 +1,12 @@ dontaudit mediacodec graphics_device:dir search; allow mediacodec surfaceflinger:fifo_file { read write }; +# TODO: STOPSHIP -- b/33344694 +# This is a temporary WAR to allow secure codecs hosted +# in media.codec to access tee. Eventually OMX will be +# converted to HIDL, and the secure codecs need to be +# moved to a process that has this permission. + +userdebug_or_eng(` + allow mediacodec tee_device:chr_file r_file_perms; +') |