1 # Grant access to Qualcomm MSM Interface (QMI) audio sockets to mediaserver 2 qmux_socket(mediaserver) 3 4 # Permit mediaserver to create sockets with no specific SELinux class. 5 # TODO: Investigate the specific type of socket. 6 allow mediaserver self:socket create_socket_perms; 7 8 allow mediaserver mpdecision_socket:dir r_dir_perms; 9 unix_socket_send(mediaserver, mpdecision, mpdecision) 10 11 binder_call(mediaserver, rild) 12 13 unix_socket_send(mediaserver, camera, camera) 14 unix_socket_connect(mediaserver, adspd, adspd) 15 allow mediaserver audio_cutback_data_file:dir search; 16 allow mediaserver audio_cutback_data_file:sock_file write; 17 18 # needed for widevine classic 19 allow mediaserver tee_device:chr_file { ioctl open read write }; 20 21
