1# mediaserver - multimedia daemon 2type mediaserver, domain; 3type mediaserver_exec, exec_type, file_type; 4 5init_daemon_domain(mediaserver) 6net_domain(mediaserver) 7typeattribute mediaserver mlstrustedsubject; 8allow mediaserver kernel:system module_request; 9binder_use(mediaserver) 10binder_call(mediaserver, binderservicedomain) 11binder_call(mediaserver, appdomain) 12binder_service(mediaserver) 13allow mediaserver app_data_file:dir search; 14allow mediaserver app_data_file:file { read getattr }; 15r_dir_file(mediaserver, sdcard) 16allow mediaserver sdcard:file write; 17allow mediaserver camera_device:chr_file rw_file_perms; 18allow mediaserver graphics_device:chr_file rw_file_perms; 19allow mediaserver video_device:chr_file rw_file_perms; 20allow mediaserver audio_device:dir r_dir_perms; 21allow mediaserver audio_device:chr_file rw_file_perms; 22allow mediaserver qemu_device:chr_file rw_file_perms; 23# XXX Label with a specific type? 24allow mediaserver sysfs:file rw_file_perms; 25# XXX Why? 26allow mediaserver apk_data_file:file { read getattr }; 27