| Avijit Kanti Das | 0196c6a | 2014-07-23 23:44:35 -0700 | [diff] [blame] | 1 | # allow mediaserver to communicate with cnd |
| 2 | unix_socket_connect(mediaserver, cnd, cnd) |
| Avijit Kanti Das | 36fb2c1 | 2014-10-06 15:21:57 -0700 | [diff] [blame] | 3 | |
| 4 | allow mediaserver camera_device:chr_file rw_file_perms; |
| 5 | unix_socket_send(mediaserver, camera, mm-qcamerad) |
| Avijit Kanti Das | 226cc03 | 2014-10-06 19:09:05 -0700 | [diff] [blame] | 6 | |
| Dinesh K Garg | e5bafbf | 2014-10-22 00:13:49 -0700 | [diff] [blame] | 7 | allow mediaserver tee_device:chr_file rw_file_perms; |
| Naveen Kumar | 9f75294 | 2014-11-01 10:39:13 -0700 | [diff] [blame] | 8 | allow mediaserver qdsp_device:chr_file r_file_perms; |
| Biswajit Paul | 64f83f6 | 2014-10-13 14:36:16 -0700 | [diff] [blame] | 9 | |
| 10 | allow mediaserver self:socket create_socket_perms; |
| 11 | |
| 12 | binder_call(mediaserver, rild) |
| 13 | |
| 14 | qmux_socket(mediaserver) |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 15 | allow mediaserver camera_data_file:sock_file w_file_perms; |
| 16 | |
| Jayasena Sangaraboina | c925347 | 2014-10-24 18:55:25 -0700 | [diff] [blame] | 17 | userdebug_or_eng(` |
| 18 | allow mediaserver camera_data_file:dir rw_dir_perms; |
| 19 | allow mediaserver camera_data_file:file create_file_perms; |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 20 | # Access to audio |
| 21 | allow mediaserver debugfs:file rw_file_perms; |
| Jayasena Sangaraboina | c925347 | 2014-10-24 18:55:25 -0700 | [diff] [blame] | 22 | ') |
| Avijit Kanti Das | fe61c2d | 2014-10-16 20:17:03 -0700 | [diff] [blame] | 23 | |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 24 | r_dir_file(mediaserver, sysfs_esoc) |
| Venkateshwarlu Domakonda | 612197a | 2014-11-07 18:04:55 +0530 | [diff] [blame] | 25 | allow mediaserver system_app_data_file:file rw_file_perms; |
| Alexy Joseph | a2ff47f | 2015-01-07 15:15:05 -0800 | [diff] [blame] | 26 | |
| 27 | # allow mediaserver to write DTS files |
| 28 | allow mediaserver dts_data_file:dir rw_dir_perms; |
| 29 | allow mediaserver dts_data_file:file create_file_perms; |
| 30 | |
| Vince Leung | 06bd7d8 | 2014-10-15 15:15:57 -0700 | [diff] [blame] | 31 | # access to perflock |
| 32 | allow mediaserver mpctl_socket:dir r_dir_perms; |
| 33 | unix_socket_send(mediaserver, mpctl, mpdecision) |
| 34 | unix_socket_connect(mediaserver, mpctl, mpdecision) |
| Vince Leung | 358d6f3 | 2014-10-16 15:10:52 -0700 | [diff] [blame] | 35 | |
| 36 | # access to perflock |
| 37 | allow mediaserver mpctl_socket:dir r_dir_perms; |
| 38 | unix_socket_send(mediaserver, mpctl, perfd) |
| 39 | unix_socket_connect(mediaserver, mpctl, perfd) |
| Kurva Harish | a86fd52 | 2014-11-19 17:06:16 -0800 | [diff] [blame] | 40 | |
| 41 | # for thermal sock files |
| 42 | unix_socket_connect(mediaserver, thermal, thermal-engine) |
| Praveen Chavan | dfd0d6c | 2015-01-08 15:00:42 -0800 | [diff] [blame] | 43 | |
| 44 | #allow mediaserver to communicate with timedaemon |
| 45 | allow mediaserver time_daemon:unix_stream_socket connectto; |
| Ravit Dennis | eef3499 | 2014-10-29 20:09:18 +0200 | [diff] [blame] | 46 | |
| 47 | # Allow mediaserver to create socket files for audio arbitration |
| 48 | allow mediaserver audio_data_file:sock_file { create setattr unlink }; |
| 49 | allow mediaserver audio_data_file:dir remove_name; |
| Srikanth Uyyala | 79af968 | 2014-11-12 18:16:10 +0530 | [diff] [blame] | 50 | |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 51 | #Allow mediaserver to set camera properties |
| 52 | allow mediaserver camera_prop:property_service set; |
| 53 | |
| 54 | #allow mediaserver to access wfdservice |
| 55 | binder_call(mediaserver, wfdservice) |