1typeattribute mediaserver coredomain; 2 3init_daemon_domain(mediaserver) 4tmpfs_domain(mediaserver) 5allow mediaserver appdomain_tmpfs:file { getattr map read write }; 6 7# allocate and use graphic buffers 8hal_client_domain(mediaserver, hal_graphics_allocator) 9hal_client_domain(mediaserver, hal_configstore) 10hal_client_domain(mediaserver, hal_drm) 11hal_client_domain(mediaserver, hal_omx) 12hal_client_domain(mediaserver, hal_codec2) 13 14set_prop(mediaserver, audio_prop) 15 16get_prop(mediaserver, drm_service_config_prop) 17get_prop(mediaserver, media_config_prop) 18 19# Allow MediaCodec running on mediaserver to read media_native flags 20get_prop(mediaserver, device_config_media_native_prop) 21 22# Allow mediaserver to start media.transcoding service via ctl.start. 23set_prop(mediaserver, ctl_mediatranscoding_prop); 24 25# Allow mediaserver to read SDK sandbox data files 26allow mediaserver sdk_sandbox_data_file:file { getattr read }; 27 28# Needed for stats callback registration to statsd. 29allow mediaserver stats_service:service_manager find; 30allow mediaserver statsmanager_service:service_manager find; 31binder_call(mediaserver, statsd) 32 33# Allow mediaserver to communicate with Surface provided 34# by virtual camera. 35binder_call(mediaserver, virtual_camera) 36