Transcoding: Add file read/write permission to service.
This is needed for the transcoding service to read from the source fd and write to destination fd. Bug: 145628554 Test: atest MediaTranscodeManagerTest Change-Id: Icffed1e402bc2fb593e925de0742c0d7552b50bc
This commit is contained in:
parent
4e622b28ed
commit
c7f42b2b80
@ -12,6 +12,11 @@ allow mediatranscoding system_server:fd use;
|
||||
allow mediatranscoding activity_service:service_manager find;
|
||||
allow mediatranscoding untrusted_app:binder call;
|
||||
|
||||
# allow mediatranscoding service read/write permissions for file sources
|
||||
allow mediatranscoding sdcardfs:file { getattr read write };
|
||||
allow mediatranscoding media_rw_data_file:file { getattr read write };
|
||||
allow mediatranscoding apk_data_file:file { getattr read };
|
||||
|
||||
# mediatranscoding should never execute any executable without a
|
||||
# domain transition
|
||||
neverallow mediatranscoding { file_type fs_type }:file execute_no_trans;
|
||||
|
Loading…
Reference in New Issue
Block a user