xref: /aosp_15_r20/system/sepolicy/prebuilts/api/202404/private/mediaserver.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertypeattribute mediaserver coredomain;
2*e4a36f41SAndroid Build Coastguard Worker
3*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(mediaserver)
4*e4a36f41SAndroid Build Coastguard Workertmpfs_domain(mediaserver)
5*e4a36f41SAndroid Build Coastguard Workerallow mediaserver appdomain_tmpfs:file { getattr map read write };
6*e4a36f41SAndroid Build Coastguard Worker
7*e4a36f41SAndroid Build Coastguard Worker# allocate and use graphic buffers
8*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(mediaserver, hal_graphics_allocator)
9*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(mediaserver, hal_configstore)
10*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(mediaserver, hal_drm)
11*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(mediaserver, hal_omx)
12*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(mediaserver, hal_codec2)
13*e4a36f41SAndroid Build Coastguard Worker
14*e4a36f41SAndroid Build Coastguard Workerset_prop(mediaserver, audio_prop)
15*e4a36f41SAndroid Build Coastguard Worker
16*e4a36f41SAndroid Build Coastguard Workerget_prop(mediaserver, drm_service_config_prop)
17*e4a36f41SAndroid Build Coastguard Workerget_prop(mediaserver, media_config_prop)
18*e4a36f41SAndroid Build Coastguard Worker
19*e4a36f41SAndroid Build Coastguard Worker# Allow MediaCodec running on mediaserver to read media_native flags
20*e4a36f41SAndroid Build Coastguard Workerget_prop(mediaserver, device_config_media_native_prop)
21*e4a36f41SAndroid Build Coastguard Worker
22*e4a36f41SAndroid Build Coastguard Worker# Allow mediaserver to start media.transcoding service via ctl.start.
23*e4a36f41SAndroid Build Coastguard Workerset_prop(mediaserver, ctl_mediatranscoding_prop);
24*e4a36f41SAndroid Build Coastguard Worker
25*e4a36f41SAndroid Build Coastguard Worker# Allow mediaserver to read SDK sandbox data files
26*e4a36f41SAndroid Build Coastguard Workerallow mediaserver sdk_sandbox_data_file:file { getattr read };
27*e4a36f41SAndroid Build Coastguard Worker
28*e4a36f41SAndroid Build Coastguard Worker# Needed for stats callback registration to statsd.
29*e4a36f41SAndroid Build Coastguard Workerallow mediaserver stats_service:service_manager find;
30*e4a36f41SAndroid Build Coastguard Workerallow mediaserver statsmanager_service:service_manager find;
31*e4a36f41SAndroid Build Coastguard Workerbinder_call(mediaserver, statsd)
32*e4a36f41SAndroid Build Coastguard Worker
33*e4a36f41SAndroid Build Coastguard Worker# Allow mediaserver to communicate with Surface provided
34*e4a36f41SAndroid Build Coastguard Worker# by virtual camera.
35*e4a36f41SAndroid Build Coastguard Workerbinder_call(mediaserver, virtual_camera)
36