From b21b31305dce26588021898bd4a7ae4f553bb6f4 Mon Sep 17 00:00:00 2001
From: Jeff Tinker <jtinker@google.com>
Date: Fri, 22 Apr 2016 17:43:15 -0700
Subject: [PATCH] Remove execmem permission for mediaserver
bug: 22990512
Change-Id: I39baf6594cfcf56f5461ba54a7cdf6c9e161d834
---
mediaserver.te | 3 ---
1 file changed, 3 deletions(-)
diff --git a/mediaserver.te b/mediaserver.te
index 21f16f4d6..1a71a3198 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -25,9 +25,6 @@ binder_call(mediaserver, binderservicedomain)
binder_call(mediaserver, { appdomain autoplay_app })
binder_service(mediaserver)
-# Required by Widevine DRM (b/22990512)
-allow mediaserver self:process execmem;
-
allow mediaserver media_data_file:dir create_dir_perms;
allow mediaserver media_data_file:file create_file_perms;
allow mediaserver app_data_file:dir search;
--
GitLab