Merge "Remove execmem permission for mediaserver" into nyc-dev

ebc72b6b · Jeff Tinker · Android (Google) Code Review · 81b7675e · b21b3130 · ebc72b6b
Commit ebc72b6b authored 8 years ago by Jeff Tinker Committed by Android (Google) Code Review 8 years ago
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -25,9 +25,6 @@ binder_call(mediaserver, binderservicedomain)
 binder_call(mediaserver, { appdomain autoplay_app })
 binder_service(mediaserver)

-# Required by Widevine DRM (b/22990512)
-allow mediaserver self:process execmem;
-
 allow mediaserver media_data_file:dir create_dir_perms;
 allow mediaserver media_data_file:file create_file_perms;
 allow mediaserver app_data_file:dir search;