summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJerry Huang <huangjerry@google.com>2022-02-16 01:15:03 +0800
committerJerry Huang <huangjerry@google.com>2022-05-10 09:22:12 +0000
commita5e9b426ebaec1757e01d82ae3e7f75cbc111634 (patch)
tree3e2bf586601b9dab8d9f6974fd91616233135f28
parent36f7fe941d41ecf0c7c371d30e70e7ceca5d5a1b (diff)
downloadgs101-sepolicy-a5e9b426ebaec1757e01d82ae3e7f75cbc111634.tar.gz
Allow mediacodec to access vendor_data_file
For dumping output buffer of HDR to SDR fliter. This patch fixes the following denial: 05-06 15:26:54.248 1046 856 856 W HwBinder:856_4: type=1400 audit(0.0:174404): avc: denied { getattr } for name="/" dev="dmabuf" ino=1 scontext=u:r:mediacodec:s0 tcontext=u:object_r:unlabeled:s0 tclass=filesystem permissive=0 Bug: 229360116 Change-Id: I41acb29407a7ddb27279a834e27c5ee515efe666
-rw-r--r--whitechapel/vendor/google/mediacodec.te2
1 files changed, 2 insertions, 0 deletions
diff --git a/whitechapel/vendor/google/mediacodec.te b/whitechapel/vendor/google/mediacodec.te
index ed7c1ad..0c22d5b 100644
--- a/whitechapel/vendor/google/mediacodec.te
+++ b/whitechapel/vendor/google/mediacodec.te
@@ -1,5 +1,7 @@
userdebug_or_eng(`
set_prop(mediacodec, vendor_codec2_debug_prop)
+ allow mediacodec vendor_media_data_file:dir rw_dir_perms;
+ allow mediacodec vendor_media_data_file:file create_file_perms;
')
add_service(mediacodec, eco_service)