From 0a20b57f884d0bd9a3dd7821c1e77cec1f13ad4c Mon Sep 17 00:00:00 2001
From: Vineeta Srivastava <vsrivastava@google.com>
Date: Tue, 16 Sep 2014 10:00:50 -0700
Subject: [PATCH] Added sepolicy for oem customization.

Bug: 16635599

Change-Id: I69f9089dde1fe68762a38f4d97ddee2c20aaaa9d
---
 drmserver.te   | 3 +++
 mediaserver.te | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/drmserver.te b/drmserver.te
index 19931766e..b4d741625 100644
--- a/drmserver.te
+++ b/drmserver.te
@@ -46,3 +46,6 @@ allow drmserver asec_apk_file:file { read getattr };
 allow drmserver radio_data_file:file { read getattr };
 
 allow drmserver drmserver_service:service_manager add;
+
+# /oem access
+allow drmserver oemfs:file r_file_perms;
diff --git a/mediaserver.te b/mediaserver.te
index 55d1f2053..4d5657241 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -79,3 +79,6 @@ unix_socket_connect(mediaserver, bluetooth, bluetooth)
 allow mediaserver tee:unix_stream_socket connectto;
 
 allow mediaserver mediaserver_service:service_manager add;
+
+# /oem access
+allow mediaserver oemfs:file r_file_perms;
-- 
GitLab