7baf725ea6
(breaks vendor blobs, will have to be regenerated after this CL) This moves mediacodec to vendor so it is replaced with hal_omx_server. The main benefit of this is that someone can create their own implementation of mediacodec without having to alter the one in the tree. mediacodec is still seccomp enforced by CTS tests. Fixes: 36375899 Test: (sanity) YouTube Test: (sanity) camera pics + video Test: check for denials Change-Id: I31f91b7ad6cd0a891a1681ff3b9af82ab400ce5e
20 lines
638 B
Plaintext
20 lines
638 B
Plaintext
type mediacodec, domain, mlstrustedsubject;
|
|
type mediacodec_exec, exec_type, vendor_file_type, file_type;
|
|
|
|
init_daemon_domain(mediacodec)
|
|
|
|
not_full_treble(`
|
|
# on legacy devices, continue to allow /dev/binder traffic
|
|
binder_use(mediacodec)
|
|
binder_service(mediacodec)
|
|
add_service(mediacodec, mediacodec_service)
|
|
allow mediacodec mediametrics_service:service_manager find;
|
|
allow mediacodec surfaceflinger_service:service_manager find;
|
|
')
|
|
|
|
hal_server_domain(mediacodec, hal_omx)
|
|
|
|
hal_client_domain(mediacodec, hal_allocator)
|
|
hal_client_domain(mediacodec, hal_cas)
|
|
hal_client_domain(mediacodec, hal_graphics_allocator)
|