diff options
| author | Charles Chen <liangyuchen@google.com> | 2023-03-15 22:34:15 +0000 |
|---|---|---|
| committer | Charles Chen <liangyuchen@google.com> | 2023-03-22 22:20:11 +0000 |
| commit | 0d0d328ce8cfee6103735467e4cf4aa7ac46d1c5 (patch) | |
| tree | 5cefbe9905472b91f48e8438fb586b8ee9d5bed4 | |
| parent | eccf6a135f919f76274b1cca952467988dd4b70c (diff) | |
| download | coral-sepolicy-0d0d328ce8cfee6103735467e4cf4aa7ac46d1c5.tar.gz | |
Replace isolated_app with isolated_app_all (Coral)android14-dev
Replace certain policies for isolated_app with the newly introduced
isolated_app_all for better scalability.
Bug: 265540209
Test: m
Change-Id: I1b6866d56f15089babe368bb60335c7ed99bdd6b
| -rw-r--r-- | vendor/qcom/common/hal_drm_clearkey.te | 2 | ||||
| -rw-r--r-- | vendor/qcom/common/hal_drm_widevine.te | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/vendor/qcom/common/hal_drm_clearkey.te b/vendor/qcom/common/hal_drm_clearkey.te index 013705a..8267db8 100644 --- a/vendor/qcom/common/hal_drm_clearkey.te +++ b/vendor/qcom/common/hal_drm_clearkey.te @@ -7,5 +7,5 @@ hal_server_domain(hal_drm_clearkey, hal_drm) vndbinder_use(hal_drm_clearkey); -allow hal_drm_clearkey { appdomain -isolated_app }:fd use; +allow hal_drm_clearkey { appdomain -isolated_app_all }:fd use; allow hal_drm_clearkey hal_allocator_server:fd use; diff --git a/vendor/qcom/common/hal_drm_widevine.te b/vendor/qcom/common/hal_drm_widevine.te index 2f8fbdd..40f431a 100644 --- a/vendor/qcom/common/hal_drm_widevine.te +++ b/vendor/qcom/common/hal_drm_widevine.te @@ -10,6 +10,6 @@ allow hal_drm_widevine mediadrm_vendor_data_file:file create_file_perms; allow hal_drm_widevine hal_display_config_hwservice:hwservice_manager find; binder_call(hal_drm_widevine, hal_graphics_composer_default) -allow hal_drm_widevine { appdomain -isolated_app }:fd use; +allow hal_drm_widevine { appdomain -isolated_app_all }:fd use; allow hal_drm_widevine qce_device:chr_file rw_file_perms; |