diff --git a/private/platform_app.te b/private/platform_app.te index dde1c7181fc52f7d8e85f676616af4fa44a61ccb..2817e5a4721068a263d903fdbeaf3b8e0e618449 100644 --- a/private/platform_app.te +++ b/private/platform_app.te @@ -45,6 +45,7 @@ allow platform_app mediametrics_service:service_manager find; allow platform_app mediaextractor_service:service_manager find; allow platform_app mediacodec_service:service_manager find; allow platform_app mediadrmserver_service:service_manager find; +allow platform_app mediacasserver_service:service_manager find; allow platform_app persistent_data_block_service:service_manager find; allow platform_app radio_service:service_manager find; allow platform_app surfaceflinger_service:service_manager find; diff --git a/private/priv_app.te b/private/priv_app.te index dd4ac2ced1208d094d2c87d71efacf1ed6bd8bfb..76dbb98b1489087685681c6d0e59069bc793e118 100644 --- a/private/priv_app.te +++ b/private/priv_app.te @@ -26,6 +26,7 @@ allow priv_app drmserver_service:service_manager find; allow priv_app mediacodec_service:service_manager find; allow priv_app mediametrics_service:service_manager find; allow priv_app mediadrmserver_service:service_manager find; +allow priv_app mediacasserver_service:service_manager find; allow priv_app mediaextractor_service:service_manager find; allow priv_app mediaserver_service:service_manager find; allow priv_app nfc_service:service_manager find; diff --git a/private/service_contexts b/private/service_contexts index 6f467931cec28e809238e31924a2914a1ccdfebf..5200b8d1804a0268b1e282365c70b13195d2396f 100644 --- a/private/service_contexts +++ b/private/service_contexts @@ -87,6 +87,7 @@ media.resource_manager u:object_r:mediaserver_service:s0 media.radio u:object_r:audioserver_service:s0 media.sound_trigger_hw u:object_r:audioserver_service:s0 media.drm u:object_r:mediadrmserver_service:s0 +media.cas u:object_r:mediacasserver_service:s0 media_projection u:object_r:media_projection_service:s0 media_resource_monitor u:object_r:media_session_service:s0 media_router u:object_r:media_router_service:s0 diff --git a/private/system_server.te b/private/system_server.te index f16cd2d5d44422425850531dc14c10ed6087a131..0ad5d9939e098343004bb5c925db5d409e3f5262 100644 --- a/private/system_server.te +++ b/private/system_server.te @@ -511,6 +511,7 @@ allow system_server mediametrics_service:service_manager find; allow system_server mediaextractor_service:service_manager find; allow system_server mediacodec_service:service_manager find; allow system_server mediadrmserver_service:service_manager find; +allow system_server mediacasserver_service:service_manager find; allow system_server netd_service:service_manager find; allow system_server nfc_service:service_manager find; allow system_server radio_service:service_manager find; diff --git a/private/untrusted_app_all.te b/private/untrusted_app_all.te index 0315252b9ab2b4ce5ffd5ac8358db9bac6cb0a33..edd1f93a078a63210100bd3d2fa146435178b1fa 100644 --- a/private/untrusted_app_all.te +++ b/private/untrusted_app_all.te @@ -66,6 +66,7 @@ allow untrusted_app_all mediaextractor_service:service_manager find; allow untrusted_app_all mediacodec_service:service_manager find; allow untrusted_app_all mediametrics_service:service_manager find; allow untrusted_app_all mediadrmserver_service:service_manager find; +allow untrusted_app_all mediacasserver_service:service_manager find; allow untrusted_app_all nfc_service:service_manager find; allow untrusted_app_all radio_service:service_manager find; allow untrusted_app_all surfaceflinger_service:service_manager find; diff --git a/private/untrusted_v2_app.te b/private/untrusted_v2_app.te index df37fdda3bc30d2a8dcd55dc0a4c15e261322564..e51170915df112ea72a31c443389f0e988e9b2b4 100644 --- a/private/untrusted_v2_app.te +++ b/private/untrusted_v2_app.te @@ -29,6 +29,7 @@ allow untrusted_v2_app mediaextractor_service:service_manager find; allow untrusted_v2_app mediacodec_service:service_manager find; allow untrusted_v2_app mediametrics_service:service_manager find; allow untrusted_v2_app mediadrmserver_service:service_manager find; +allow untrusted_v2_app mediacasserver_service:service_manager find; allow untrusted_v2_app nfc_service:service_manager find; allow untrusted_v2_app radio_service:service_manager find; allow untrusted_v2_app surfaceflinger_service:service_manager find; diff --git a/public/mediadrmserver.te b/public/mediadrmserver.te index 9eb597c07f50f6175276fd34e9fe9f66e2596c0f..94ff76f7ab927ff046b8b44b700487e5178c9194 100644 --- a/public/mediadrmserver.te +++ b/public/mediadrmserver.te @@ -17,6 +17,8 @@ allow mediadrmserver mediametrics_service:service_manager find; allow mediadrmserver processinfo_service:service_manager find; allow mediadrmserver surfaceflinger_service:service_manager find; +add_service(mediadrmserver, mediacasserver_service) + ### ### neverallow rules ### diff --git a/public/mediaextractor.te b/public/mediaextractor.te index dc7c90e0a4f069af830511bbffc9ec0a15132742..43d511c181f473dfda7e87ffc6709248ea3ec658 100644 --- a/public/mediaextractor.te +++ b/public/mediaextractor.te @@ -11,6 +11,7 @@ binder_service(mediaextractor) add_service(mediaextractor, mediaextractor_service) allow mediaextractor mediametrics_service:service_manager find; +allow mediaextractor mediacasserver_service:service_manager find; allow mediaextractor system_server:fd use; diff --git a/public/service.te b/public/service.te index c8cd4de1876458448f61557df63adfd8552bc291..e96841decdc59180631a2621c398dbeffb44810f 100644 --- a/public/service.te +++ b/public/service.te @@ -18,6 +18,7 @@ type mediametrics_service, service_manager_type; type mediaextractor_service, service_manager_type; type mediacodec_service, service_manager_type; type mediadrmserver_service, service_manager_type; +type mediacasserver_service, service_manager_type; type netd_service, service_manager_type; type nfc_service, service_manager_type; type radio_service, service_manager_type;