summaryrefslogtreecommitdiff
path: root/sepolicy/audioserver.te
diff options
context:
space:
mode:
authorAndy Hung <hunga@google.com>2015-12-07 14:20:45 -0800
committerAndy Hung <hunga@google.com>2015-12-07 14:21:57 -0800
commita0e5c77a57b1071e110ca033da3c734059294934 (patch)
tree00d79a56d26d2325dccb1f0474f95e799eb7388e /sepolicy/audioserver.te
parenta524a7e65f8659206f26e906c68b264c0aac96e3 (diff)
downloadbullhead-a0e5c77a57b1071e110ca033da3c734059294934.tar.gz
Add audioserver to Bullhead sepolicy
audioserver has the same rules as mediaserver so there is no loss of rights or permissions. TBD: pare down permissions Bug: 24511453 Change-Id: I5f486d864e89da374155cd1e9c5e958ab951e44b
Diffstat (limited to 'sepolicy/audioserver.te')
-rw-r--r--sepolicy/audioserver.te11
1 files changed, 11 insertions, 0 deletions
diff --git a/sepolicy/audioserver.te b/sepolicy/audioserver.te
new file mode 100644
index 0000000..c45e6d4
--- /dev/null
+++ b/sepolicy/audioserver.te
@@ -0,0 +1,11 @@
+unix_socket_connect(audioserver, thermal, thermal-engine)
+allow audioserver thermal_socket:sock_file w_file_perms;
+
+allow audioserver camera:unix_dgram_socket sendto;
+allow audioserver camera_data_file:sock_file write;
+
+# allow communication w/perfd
+allow audioserver perfd_data_file:dir search;
+allow audioserver perfd_data_file:sock_file write;
+allow audioserver perfd:unix_dgram_socket sendto;
+allow audioserver perfd:unix_stream_socket connectto;