diff options
| author | Xin Li <delphij@google.com> | 2023-08-14 15:33:16 -0700 |
|---|---|---|
| committer | Xin Li <delphij@google.com> | 2023-08-14 15:33:16 -0700 |
| commit | c58b906f581dbc635f153d2e617374e680c071a5 (patch) | |
| tree | 5cefbe9905472b91f48e8438fb586b8ee9d5bed4 | |
| parent | a98b00f9e683f42a85ed80d7a12850d0c30e7b8a (diff) | |
| parent | 0d0d328ce8cfee6103735467e4cf4aa7ac46d1c5 (diff) | |
| download | coral-sepolicy-tmp_amf_298295554.tar.gz | |
Merge Android U (ab/10368041)tmp_amf_298295554
Bug: 291102124
Merged-In: I1b6866d56f15089babe368bb60335c7ed99bdd6b
Change-Id: I095390607b4d38857ef05f4e2ae182b5ae071bdc
| -rw-r--r-- | vendor/google/e2fs.te | 2 | ||||
| -rw-r--r-- | vendor/google/fsck.te | 2 | ||||
| -rw-r--r-- | vendor/qcom/common/hal_drm_clearkey.te | 2 | ||||
| -rw-r--r-- | vendor/qcom/common/hal_drm_widevine.te | 2 |
4 files changed, 6 insertions, 2 deletions
diff --git a/vendor/google/e2fs.te b/vendor/google/e2fs.te new file mode 100644 index 0000000..4d2b596 --- /dev/null +++ b/vendor/google/e2fs.te @@ -0,0 +1,2 @@ +allow e2fs sysfs_scsi_devices_0000:dir r_dir_perms; +allow e2fs sysfs_scsi_devices_0000:file r_file_perms; diff --git a/vendor/google/fsck.te b/vendor/google/fsck.te index 1500b5f..7d94ea1 100644 --- a/vendor/google/fsck.te +++ b/vendor/google/fsck.te @@ -1 +1,3 @@ allow fsck persist_block_device:blk_file rw_file_perms; +allow fsck sysfs_scsi_devices_0000:dir r_dir_perms; +allow fsck sysfs_scsi_devices_0000:file r_file_perms; diff --git a/vendor/qcom/common/hal_drm_clearkey.te b/vendor/qcom/common/hal_drm_clearkey.te index 013705a..8267db8 100644 --- a/vendor/qcom/common/hal_drm_clearkey.te +++ b/vendor/qcom/common/hal_drm_clearkey.te @@ -7,5 +7,5 @@ hal_server_domain(hal_drm_clearkey, hal_drm) vndbinder_use(hal_drm_clearkey); -allow hal_drm_clearkey { appdomain -isolated_app }:fd use; +allow hal_drm_clearkey { appdomain -isolated_app_all }:fd use; allow hal_drm_clearkey hal_allocator_server:fd use; diff --git a/vendor/qcom/common/hal_drm_widevine.te b/vendor/qcom/common/hal_drm_widevine.te index 2f8fbdd..40f431a 100644 --- a/vendor/qcom/common/hal_drm_widevine.te +++ b/vendor/qcom/common/hal_drm_widevine.te @@ -10,6 +10,6 @@ allow hal_drm_widevine mediadrm_vendor_data_file:file create_file_perms; allow hal_drm_widevine hal_display_config_hwservice:hwservice_manager find; binder_call(hal_drm_widevine, hal_graphics_composer_default) -allow hal_drm_widevine { appdomain -isolated_app }:fd use; +allow hal_drm_widevine { appdomain -isolated_app_all }:fd use; allow hal_drm_widevine qce_device:chr_file rw_file_perms; |