diff options
| author | Lajos Molnar <lajos@google.com> | 2016-05-10 11:05:31 -0700 |
|---|---|---|
| committer | Lajos Molnar <lajos@google.com> | 2016-05-11 01:44:02 +0000 |
| commit | 538033b71f5767998dc4ac65070868eea9c4a4e0 (patch) | |
| tree | 6ce787037daf8bec50e0392cd63d75513e03ba72 /sepolicy | |
| parent | fff33b61bb828267ca9e978881675e08f8dea37a (diff) | |
sepolicy: allow surfaceflinger->mediacodec
This is needed for android.media.cts.VideoEncoderTest#testGoogH264Surf480p.
type=1400 audit(0.0:44): avc: denied { read } for path="pipe:[13075]" dev="pipefs" ino=13075 scontext=u:r:mediacodec:s0 tcontext=u:r:surfaceflinger:s0 tclass=fifo_file permissive=0
type=1400 audit(0.0:74): avc: denied { write } for path="pipe:[13505]" dev="pipefs" ino=13505 scontext=u:r:mediacodec:s0 tcontext=u:r:surfaceflinger:s0 tclass=fifo_file permissive=1
Bug: 27589011
Bug: 27643307
Change-Id: Ica8f8a49d6889e33618b6c691a5bd334ecb1bd67
Diffstat (limited to 'sepolicy')
| -rw-r--r-- | sepolicy/mediacodec.te | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sepolicy/mediacodec.te b/sepolicy/mediacodec.te index 37b7940..85f4107 100644 --- a/sepolicy/mediacodec.te +++ b/sepolicy/mediacodec.te @@ -1,2 +1,3 @@ dontaudit mediacodec graphics_device:dir search; +allow mediacodec surfaceflinger:fifo_file { read write }; |