mediaserver.te revision 3296dea4277842a7b791342588583b094acb6bf6
1# mediaserver - multimedia daemon 2type mediaserver, domain; 3type mediaserver_exec, exec_type, file_type; 4 5init_daemon_domain(mediaserver) 6net_domain(mediaserver) 7typeattribute mediaserver mlstrustedsubject; 8allow mediaserver kernel:system module_request; 9binder_use(mediaserver) 10binder_call(mediaserver, binderservicedomain) 11binder_call(mediaserver, appdomain) 12binder_service(mediaserver) 13allow mediaserver app_data_file:dir search; 14allow mediaserver app_data_file:file r_file_perms; 15r_dir_file(mediaserver, sdcard) 16allow mediaserver sdcard:file write; 17allow mediaserver camera_device:chr_file rw_file_perms; 18allow mediaserver graphics_device:chr_file rw_file_perms; 19allow mediaserver video_device:chr_file rw_file_perms; 20allow mediaserver audio_device:dir r_dir_perms; 21allow mediaserver audio_device:chr_file rw_file_perms; 22allow mediaserver qemu_device:chr_file rw_file_perms; 23# XXX Label with a specific type? 24allow mediaserver sysfs:file rw_file_perms; 25# XXX Why? 26allow mediaserver apk_data_file:file { read getattr }; 27allow mediaserver ion_device:chr_file rw_file_perms; 28 29# To use remote processor 30allow mediaserver rpmsg_device:chr_file rw_file_perms; 31 32# Inter System processes communicate over named pipe (FIFO) 33allow mediaserver system:fifo_file r_file_perms; 34 35# Camera calibration 36allow mediaserver camera_calibration_file:dir r_dir_perms; 37allow mediaserver camera_calibration_file:file r_file_perms; 38 39# Read/[write] to /proc/net/xt_qtaguid/ctrl and /dev/xt_qtaguid 40allow mediaserver qtaguid_proc:file rw_file_perms; 41allow mediaserver qtaguid_device:chr_file r_file_perms; 42