1 allow mediacodec perfd:unix_stream_socket connectto; 2 allow mediacodec perfd_data_file:dir search; 3 allow mediacodec perfd_data_file:sock_file write; 4 5 allow mediacodec system_file:dir r_dir_perms; 6 7 allow mediacodec sysfs_soc:dir search; 8 allow mediacodec sysfs_soc:file r_file_perms; 9 # Only allow gpu ioctl commands that have been demonstrated to be necessary. 10 allowxperm mediacodec gpu_device:chr_file 11 ioctl { gpu_ioctls unpriv_tty_ioctls }; 12
