sepolicy: Add rules for WFD App
-- add rules to enable WFD functionality Change-Id: Ifa3936a96b42cd597e262173df4d19819d7a7d60
This commit is contained in:
		@@ -28,8 +28,8 @@
 | 
			
		||||
#Add new domain for qti value added Location apps
 | 
			
		||||
user=_app seinfo=platform name=com.qualcomm.location.XT isPrivApp=true domain=vendor_location_app type=app_data_file
 | 
			
		||||
user=_app seinfo=platform name=com.qualcomm.location isPrivApp=true domain=vendor_location_app type=app_data_file
 | 
			
		||||
user=_app seinfo=platform name=com.qualcomm.wfd.service:wfd_service domain=vendor_wfd_app type=app_data_file
 | 
			
		||||
user=_app seinfo=platform name=com.qualcomm.wfd.client domain=vendor_wfd_app type=app_data_file
 | 
			
		||||
user=_app seinfo=platform name=com.qualcomm.wfd.service:wfd_service domain=vendor_wfd_app type=app_data_file levelfrom=all
 | 
			
		||||
user=_app seinfo=platform name=com.qualcomm.wfd.client domain=vendor_wfd_app type=app_data_file levelfrom=all
 | 
			
		||||
 | 
			
		||||
#Add new domain for QCC
 | 
			
		||||
user=system seinfo=platform name=com.qualcomm.qti.qdma isPrivApp=true domain=vendor_qcc_app type=system_app_data_file
 | 
			
		||||
 
 | 
			
		||||
@@ -44,10 +44,15 @@ binder_call(vendor_wfd_app, vendor_wfdservice)
 | 
			
		||||
# allow access to read video SKU property for WFD sink
 | 
			
		||||
get_prop(vendor_wfd_app, vendor_sys_video_prop)
 | 
			
		||||
 | 
			
		||||
allow vendor_wfd_app vendor_wfdservice_service:service_manager find;
 | 
			
		||||
allow vendor_wfd_app audioserver_service:service_manager find;
 | 
			
		||||
allow vendor_wfd_app mediaserver_service:service_manager find;
 | 
			
		||||
allow vendor_wfd_app mediadrmserver_service:service_manager find;
 | 
			
		||||
allow vendor_wfd_app {
 | 
			
		||||
  vendor_wfdservice_service
 | 
			
		||||
  audioserver_service
 | 
			
		||||
  mediaserver_service
 | 
			
		||||
  mediadrmserver_service
 | 
			
		||||
  app_api_service
 | 
			
		||||
  vendor_perf_service
 | 
			
		||||
  mediametrics_service
 | 
			
		||||
}:service_manager find;
 | 
			
		||||
 | 
			
		||||
# Access to /data/media for debug dump
 | 
			
		||||
allow vendor_wfd_app media_rw_data_file:dir create_dir_perms;
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user