bohu | d5f90a5 | 2017-05-26 10:26:15 -0700 | [diff] [blame] | 1 | # define SELinux domain |
| 2 | type hal_drm_widevine, domain; |
| 3 | hal_server_domain(hal_drm_widevine, hal_drm) |
| 4 | |
| 5 | type hal_drm_widevine_exec, exec_type, vendor_file_type, file_type; |
| 6 | init_daemon_domain(hal_drm_widevine) |
| 7 | |
| 8 | allow hal_drm mediacodec:fd use; |
| 9 | allow hal_drm { appdomain -isolated_app }:fd use; |
| 10 | |
bohu | 90da258 | 2017-08-25 11:15:03 -0700 | [diff] [blame] | 11 | vndbinder_use(hal_drm_widevine); |
bohu | d5f90a5 | 2017-05-26 10:26:15 -0700 | [diff] [blame] | 12 | hal_client_domain(hal_drm_widevine, hal_graphics_composer); |
bohu | a912750 | 2018-03-21 10:24:25 -0700 | [diff] [blame] | 13 | allow hal_drm_widevine mediadrm_vendor_data_file:dir create_dir_perms; |
| 14 | allow hal_drm_widevine mediadrm_vendor_data_file:file create_file_perms; |