Avijit Kanti Das | 0196c6a | 2014-07-23 23:44:35 -0700 | [diff] [blame] | 1 | # allow mediaserver to communicate with cnd |
Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 2 | #unix_socket_connect(mediaserver, cnd, cnd) |
Avijit Kanti Das | 36fb2c1 | 2014-10-06 15:21:57 -0700 | [diff] [blame] | 3 | |
Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 4 | #unix_socket_send(mediaserver, camera, mm-qcamerad) |
Avijit Kanti Das | 226cc03 | 2014-10-06 19:09:05 -0700 | [diff] [blame] | 5 | |
Dinesh K Garg | e5bafbf | 2014-10-22 00:13:49 -0700 | [diff] [blame] | 6 | allow mediaserver tee_device:chr_file rw_file_perms; |
Naveen Kumar | 9f75294 | 2014-11-01 10:39:13 -0700 | [diff] [blame] | 7 | allow mediaserver qdsp_device:chr_file r_file_perms; |
Tharun Kumar Merugu | 04759ff | 2018-05-04 13:16:50 +0530 | [diff] [blame] | 8 | allow mediaserver xdsp_device:chr_file r_file_perms; |
Biswajit Paul | 64f83f6 | 2014-10-13 14:36:16 -0700 | [diff] [blame] | 9 | |
Biswajit Paul | 2d35d98 | 2017-02-01 17:40:10 -0800 | [diff] [blame] | 10 | allow mediaserver self:socket create_socket_perms_no_ioctl; |
Biswajit Paul | 64f83f6 | 2014-10-13 14:36:16 -0700 | [diff] [blame] | 11 | |
| 12 | binder_call(mediaserver, rild) |
| 13 | |
Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 14 | #qmux_socket(mediaserver) |
Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 15 | allow mediaserver camera_data_file:sock_file w_file_perms; |
| 16 | |
Jayasena Sangaraboina | c925347 | 2014-10-24 18:55:25 -0700 | [diff] [blame] | 17 | userdebug_or_eng(` |
| 18 | allow mediaserver camera_data_file:dir rw_dir_perms; |
| 19 | allow mediaserver camera_data_file:file create_file_perms; |
Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 20 | # Access to audio |
Ravi Kumar Siddojigari | 92eed18 | 2017-06-27 00:25:03 +0530 | [diff] [blame] | 21 | allow mediaserver qti_debugfs:file rw_file_perms; |
Jayasena Sangaraboina | c925347 | 2014-10-24 18:55:25 -0700 | [diff] [blame] | 22 | ') |
Avijit Kanti Das | fe61c2d | 2014-10-16 20:17:03 -0700 | [diff] [blame] | 23 | |
Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 24 | r_dir_file(mediaserver, sysfs_esoc) |
David Ng | a658efb | 2016-10-07 11:38:22 -0700 | [diff] [blame] | 25 | #allow mediaserver system_app_data_file:file rw_file_perms; |
Alexy Joseph | a2ff47f | 2015-01-07 15:15:05 -0800 | [diff] [blame] | 26 | |
c_yongga | ce732a2 | 2016-01-18 12:58:51 +0800 | [diff] [blame] | 27 | # allow poweroffhandler to binder mediaserver |
| 28 | binder_call(mediaserver, poweroffhandler); |
| 29 | |
Vladimir Oltean | ce294d2 | 2019-01-22 03:45:08 +0200 | [diff] [blame] | 30 | # Required for libqdutils MDPVersion::updatePanelInfo() |
| 31 | # during WFD - opens /sys/class/graphics/fb0/msm_fb_type |
| 32 | allow mediaserver sysfs_graphics:file r_file_perms; |
Kurva Harish | a86fd52 | 2014-11-19 17:06:16 -0800 | [diff] [blame] | 33 | |
| 34 | # for thermal sock files |
Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 35 | #unix_socket_connect(mediaserver, thermal, thermal-engine) |
Praveen Chavan | dfd0d6c | 2015-01-08 15:00:42 -0800 | [diff] [blame] | 36 | |
Biswajit Paul | 28439f9 | 2015-07-15 13:28:27 -0700 | [diff] [blame] | 37 | #This is required for thermal sysfs access |
| 38 | r_dir_file(mediaserver, sysfs_thermal); |
| 39 | |
Praveen Chavan | dfd0d6c | 2015-01-08 15:00:42 -0800 | [diff] [blame] | 40 | #allow mediaserver to communicate with timedaemon |
Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 41 | #allow mediaserver time_daemon:unix_stream_socket connectto; |
Ravit Dennis | eef3499 | 2014-10-29 20:09:18 +0200 | [diff] [blame] | 42 | |
Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 43 | #allow mediaserver to access wfdservice |
| 44 | binder_call(mediaserver, wfdservice) |
Manikanta Sivapala | 3c21311 | 2015-07-31 15:10:09 +0530 | [diff] [blame] | 45 | |
| 46 | #allow mediaserver to access adsprpcd |
| 47 | r_dir_file(mediaserver, adsprpcd_file); |
Tharun Kumar Merugu | afab9bd | 2018-06-28 16:48:36 +0530 | [diff] [blame] | 48 | #allow mediaserver to access adsprpc_prop |
| 49 | get_prop(mediaserver, adsprpc_prop) |
Manikanta Sivapala | 40a3864 | 2015-02-08 00:04:32 +0530 | [diff] [blame] | 50 | |
yongga | 1bf3ef5 | 2016-01-15 16:09:03 +0800 | [diff] [blame] | 51 | # allow mediaserver to communicate with bootanim |
| 52 | binder_call(mediaserver, bootanim); |
| 53 | |
Arun Mirpuri | 34a300d | 2018-06-13 16:20:18 -0700 | [diff] [blame] | 54 | #allow mediaserver to access audio properties |
| 55 | get_prop(mediaserver, vendor_audio_prop) |
| 56 | |
Rajeev Kulkarni | 05c0207 | 2015-10-29 16:37:49 -0700 | [diff] [blame] | 57 | allow mediaserver surfaceflinger:unix_stream_socket rw_socket_perms; |
Uma Mehta | 822cf72 | 2018-05-25 14:05:13 +0530 | [diff] [blame] | 58 | |
Ravi Kumar Siddojigari | 78d92d7 | 2018-06-04 16:26:49 +0530 | [diff] [blame] | 59 | allow mediaserver mm_video_prop:file r_file_perms; |
Ramkumar Radhakrishnan | d2bddf5 | 2018-07-30 15:58:48 -0700 | [diff] [blame] | 60 | hal_client_domain(mediaserver, hal_graphics_composer) |