blob: d49000d1499a122412e1411cde8b56655da19d7e [file] [log] [blame]
bohud5f90a52017-05-26 10:26:15 -07001# define SELinux domain
2type hal_drm_widevine, domain;
3hal_server_domain(hal_drm_widevine, hal_drm)
4
5type hal_drm_widevine_exec, exec_type, vendor_file_type, file_type;
6init_daemon_domain(hal_drm_widevine)
7
8allow hal_drm mediacodec:fd use;
9allow hal_drm { appdomain -isolated_app }:fd use;
10
bohu90da2582017-08-25 11:15:03 -070011vndbinder_use(hal_drm_widevine);
bohud5f90a52017-05-26 10:26:15 -070012hal_client_domain(hal_drm_widevine, hal_graphics_composer);
bohua9127502018-03-21 10:24:25 -070013allow hal_drm_widevine mediadrm_vendor_data_file:dir create_dir_perms;
14allow hal_drm_widevine mediadrm_vendor_data_file:file create_file_perms;