xref: /aosp_15_r20/system/sepolicy/prebuilts/api/34.0/private/mediaserver.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertypeattribute mediaserver coredomain;
2*e4a36f41SAndroid Build Coastguard Worker
3*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(mediaserver)
4*e4a36f41SAndroid Build Coastguard Workertmpfs_domain(mediaserver)
5*e4a36f41SAndroid Build Coastguard Workerallow mediaserver appdomain_tmpfs:file { getattr map read write };
6*e4a36f41SAndroid Build Coastguard Worker
7*e4a36f41SAndroid Build Coastguard Worker# allocate and use graphic buffers
8*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(mediaserver, hal_graphics_allocator)
9*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(mediaserver, hal_configstore)
10*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(mediaserver, hal_drm)
11*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(mediaserver, hal_omx)
12*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(mediaserver, hal_codec2)
13*e4a36f41SAndroid Build Coastguard Worker
14*e4a36f41SAndroid Build Coastguard Workerset_prop(mediaserver, audio_prop)
15*e4a36f41SAndroid Build Coastguard Worker
16*e4a36f41SAndroid Build Coastguard Workerget_prop(mediaserver, drm_service_config_prop)
17*e4a36f41SAndroid Build Coastguard Workerget_prop(mediaserver, media_config_prop)
18*e4a36f41SAndroid Build Coastguard Worker
19*e4a36f41SAndroid Build Coastguard Worker# Allow mediaserver to start media.transcoding service via ctl.start.
20*e4a36f41SAndroid Build Coastguard Workerset_prop(mediaserver, ctl_mediatranscoding_prop);
21*e4a36f41SAndroid Build Coastguard Worker
22*e4a36f41SAndroid Build Coastguard Worker# Allow mediaserver to read SDK sandbox data files
23*e4a36f41SAndroid Build Coastguard Workerallow mediaserver sdk_sandbox_data_file:file { getattr read };
24*e4a36f41SAndroid Build Coastguard Worker
25*e4a36f41SAndroid Build Coastguard Worker# Needed for stats callback registration to statsd.
26*e4a36f41SAndroid Build Coastguard Workerallow mediaserver stats_service:service_manager find;
27*e4a36f41SAndroid Build Coastguard Workerallow mediaserver statsmanager_service:service_manager find;
28*e4a36f41SAndroid Build Coastguard Workerbinder_call(mediaserver, statsd)
29