1 allow mediaserver system_server:unix_stream_socket { read write }; 2 allow mediaserver self:netlink_kobject_uevent_socket create_socket_perms; 3 allow mediaserver sensorservice_service:service_manager find; 4 allow mediaserver sysfs_gpu:file r_file_perms; 5 6 # needed for widevine classic 7 allow mediaserver tee_device:chr_file { ioctl open read write }; 8 9
