diff options
| author | Varun Chitre <varun.chitre15@gmail.com> | 2015-06-12 02:51:57 -0400 |
|---|---|---|
| committer | Varun Chitre <varun.chitre15@gmail.com> | 2015-06-12 02:51:57 -0400 |
| commit | 456652763bb32a556b49c12d7dadade4305f15dc (patch) | |
| tree | e64e5be6cd7f16fedc57e1833647623da5c427b5 | |
| parent | 057067b1eb384157f9d08c1502e78f168c62a0c1 (diff) | |
sprout-common : fix video decoder denials
Change-Id: I0815430e7ad3d1c1c2db5d6afcaa65653b0ac98e
| -rw-r--r-- | BoardConfigCommon.mk | 1 | ||||
| -rw-r--r-- | sepolicy/mediaserver.te | 1 | ||||
| -rw-r--r-- | sepolicy/surfaceflinger.te | 1 |
3 files changed, 3 insertions, 0 deletions
diff --git a/BoardConfigCommon.mk b/BoardConfigCommon.mk index 31a6baa..ff5cc8d 100644 --- a/BoardConfigCommon.mk +++ b/BoardConfigCommon.mk @@ -97,6 +97,7 @@ BOARD_SEPOLICY_UNION += \ servicemanager.te \ shared_relro.te \ shell.te \ + surfaceflinger.te \ sysfs.te \ system_server.te \ untrusted_app.te \ diff --git a/sepolicy/mediaserver.te b/sepolicy/mediaserver.te index 1c32c31..33e46f7 100644 --- a/sepolicy/mediaserver.te +++ b/sepolicy/mediaserver.te @@ -3,3 +3,4 @@ allow mediaserver ccci_device:chr_file { read write open }; allow mediaserver ebc_device:chr_file { read write open }; allow mediaserver system_server:unix_stream_socket { read write }; allow mediaserver fm_device:chr_file { read write ioctl open }; +allow mediaserver Vcodec_device:chr_file { ioctl open read write }; diff --git a/sepolicy/surfaceflinger.te b/sepolicy/surfaceflinger.te new file mode 100644 index 0000000..05b1508 --- /dev/null +++ b/sepolicy/surfaceflinger.te @@ -0,0 +1 @@ +allow surfaceflinger sw_sync_device:chr_file { read write ioctl open }; |