Skip to content
Snippets Groups Projects
  • rpcraig's avatar
    e21871c8
    Address screenrecord denials. · e21871c8
    rpcraig authored
    
    Steps to reproduce across devices.
      adb shell screenrecord --bit-rate 8000000 --time-limit 10 /data/local/tmp/test.mp4
    
    * Allow surfaceflinger to talk to mediaserver
       avc:  denied  { call } for  pid=122 comm="surfaceflinger" scontext=u:r:surfaceflinger:s0 tcontext=u:r:mediaserver:s0 tclass=binder
    
    * Give mediaserver access to gpu_device
       avc:  denied  { read write } for  pid=2793 comm="VideoEncMsgThre" name="kgsl-3d0" dev="tmpfs" ino=6556 scontext=u:r:mediaserver:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file
       avc:  denied  { open } for  pid=2793 comm="VideoEncMsgThre" name="kgsl-3d0" dev="tmpfs" ino=6556 scontext=u:r:mediaserver:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file
       avc:  denied  { ioctl } for  pid=2793 comm="VideoEncMsgThre" path="/dev/kgsl-3d0" dev="tmpfs" ino=6556 scontext=u:r:mediaserver:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file
    
    Change-Id: Id1812ec95662f4b2433e2989f5fccce6a85c3a41
    Signed-off-by: default avatarrpcraig <rpcraig@tycho.ncsc.mil>
    e21871c8
    History
    Address screenrecord denials.
    rpcraig authored
    
    Steps to reproduce across devices.
      adb shell screenrecord --bit-rate 8000000 --time-limit 10 /data/local/tmp/test.mp4
    
    * Allow surfaceflinger to talk to mediaserver
       avc:  denied  { call } for  pid=122 comm="surfaceflinger" scontext=u:r:surfaceflinger:s0 tcontext=u:r:mediaserver:s0 tclass=binder
    
    * Give mediaserver access to gpu_device
       avc:  denied  { read write } for  pid=2793 comm="VideoEncMsgThre" name="kgsl-3d0" dev="tmpfs" ino=6556 scontext=u:r:mediaserver:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file
       avc:  denied  { open } for  pid=2793 comm="VideoEncMsgThre" name="kgsl-3d0" dev="tmpfs" ino=6556 scontext=u:r:mediaserver:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file
       avc:  denied  { ioctl } for  pid=2793 comm="VideoEncMsgThre" path="/dev/kgsl-3d0" dev="tmpfs" ino=6556 scontext=u:r:mediaserver:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file
    
    Change-Id: Id1812ec95662f4b2433e2989f5fccce6a85c3a41
    Signed-off-by: default avatarrpcraig <rpcraig@tycho.ncsc.mil>