xref: /aosp_15_r20/system/sepolicy/prebuilts/api/34.0/private/mediaserver.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1typeattribute mediaserver coredomain;
2
3init_daemon_domain(mediaserver)
4tmpfs_domain(mediaserver)
5allow mediaserver appdomain_tmpfs:file { getattr map read write };
6
7# allocate and use graphic buffers
8hal_client_domain(mediaserver, hal_graphics_allocator)
9hal_client_domain(mediaserver, hal_configstore)
10hal_client_domain(mediaserver, hal_drm)
11hal_client_domain(mediaserver, hal_omx)
12hal_client_domain(mediaserver, hal_codec2)
13
14set_prop(mediaserver, audio_prop)
15
16get_prop(mediaserver, drm_service_config_prop)
17get_prop(mediaserver, media_config_prop)
18
19# Allow mediaserver to start media.transcoding service via ctl.start.
20set_prop(mediaserver, ctl_mediatranscoding_prop);
21
22# Allow mediaserver to read SDK sandbox data files
23allow mediaserver sdk_sandbox_data_file:file { getattr read };
24
25# Needed for stats callback registration to statsd.
26allow mediaserver stats_service:service_manager find;
27allow mediaserver statsmanager_service:service_manager find;
28binder_call(mediaserver, statsd)
29