From 492dab2a7bb3d568d60b3a08b9e5d48055772171 Mon Sep 17 00:00:00 2001
From: Chong Zhang <chz@google.com>
Date: Tue, 18 Apr 2017 16:24:58 -0700
Subject: [PATCH] grant mediadrmserver permission to read dir from /system/*

hal_client_domain no longer allows read dir permission, in order
to load .so from /system/lib, we have to add this permission ourselves.

bug: 37476803
Change-Id: I1711d158c2f4580f50ac244da10c489df003cc18
---
 public/mediadrmserver.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/public/mediadrmserver.te b/public/mediadrmserver.te
index eccefc661..cef81212a 100644
--- a/public/mediadrmserver.te
+++ b/public/mediadrmserver.te
@@ -16,6 +16,7 @@ allow mediadrmserver mediaserver_service:service_manager find;
 allow mediadrmserver mediametrics_service:service_manager find;
 allow mediadrmserver processinfo_service:service_manager find;
 allow mediadrmserver surfaceflinger_service:service_manager find;
+allow mediadrmserver system_file:dir r_dir_perms;
 
 add_service(mediadrmserver, mediacasserver_service)
 
-- 
GitLab