universal7580: sepolicy: add s5p-mem rule (fixes WideVine L1)
authorDanny Wood <danwood76@gmail.com>
Sun, 17 Mar 2019 08:59:40 +0000 (08:59 +0000)
committerJan Altensen <info@stricted.net>
Fri, 16 Aug 2019 21:18:40 +0000 (23:18 +0200)
Change-Id: I18ee98ff921c8553d25275ea54acd744b47cc1a4

sepolicy/hal_drm_default.te

index cbb705262e7345204720250b643df97a92a744bb..5403987f53f3d20594f315a8a2b3426834d46c93 100644 (file)
@@ -1,2 +1,8 @@
 # hal_drm_default
 vndbinder_use(hal_drm_default)
+
+# /dev/s5p-smem
+allow hal_drm_default secmem_device:chr_file { ioctl rw_file_perms };
+allow hal_drm_default tee:unix_stream_socket connectto;
+allow hal_drm_default efs_file:dir search;
+allow hal_drm_default cpk_efs_file:file { getattr open read };