sepolicy/mediaserver.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14

unix_socket_connect(mediaserver, thermal, thermal-engine)
allow mediaserver thermal_socket:sock_file w_file_perms;

allow mediaserver camera:unix_dgram_socket sendto;
allow mediaserver camera_data_file:sock_file write;

# allow communication w/perfd
allow mediaserver perfd_data_file:dir search;
allow mediaserver perfd_data_file:sock_file write;
allow mediaserver perfd:unix_dgram_socket sendto;
allow mediaserver perfd:unix_stream_socket connectto;

# needed for widevine classic
allow mediaserver tee_device:chr_file { ioctl open read write };