1 # VIDEO_DECODE_PLAYBACK_HINT is for interactive governor in HMP kernels 2 # Do not grant the access 3 dontaudit mediacodec perfd:unix_stream_socket connectto; 4 dontaudit mediacodec perfd_data_file:dir search; 5 dontaudit mediacodec perfd_data_file:sock_file write; 6 7 allow mediacodec system_file:dir r_dir_perms; 8 9 allow mediacodec sysfs_soc:dir search; 10 allow mediacodec sysfs_soc:file r_file_perms; 11 # Only allow gpu ioctl commands that have been demonstrated to be necessary. 12 allowxperm mediacodec gpu_device:chr_file 13 ioctl { gpu_ioctls unpriv_tty_ioctls }; 14