From 65642af2ce87f593224840576192e7a8a0f9463d Mon Sep 17 00:00:00 2001 From: followmsi Date: Mon, 22 Nov 2021 16:35:18 +0100 Subject: [PATCH] flo: Uprev clearkey DRM HIDL to 1.4 --- device-common.mk | 2 +- sepolicy/file_contexts | 2 +- sepolicy/hal_drm_clearkey.te | 12 ++++++++++++ 3 files changed, 14 insertions(+), 2 deletions(-) create mode 100644 sepolicy/hal_drm_clearkey.te diff --git a/device-common.mk b/device-common.mk index fc21b6a..1fb86e3 100644 --- a/device-common.mk +++ b/device-common.mk @@ -87,7 +87,7 @@ PRODUCT_PACKAGES += \ PRODUCT_PACKAGES += \ android.hardware.drm@1.0-impl \ android.hardware.drm@1.0-service-lazy \ - android.hardware.drm@1.3-service-lazy.clearkey + android.hardware.drm@1.4-service-lazy.clearkey PRODUCT_COPY_FILES += \ prebuilts/vndk/v29/arm/arch-arm-armv7-a-neon/shared/vndk-core/libprotobuf-cpp-lite.so:$(TARGET_COPY_OUT_VENDOR)/lib/libprotobuf-cpp-lite-v29.so diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index a3ef40b..4768134 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -89,7 +89,7 @@ /(vendor|system/vendor)/bin/hw/android\.hardware\.gatekeeper@1\.0-service\.software u:object_r:hal_gatekeeper_default_exec:s0 -#/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@1\.3-service\.clearkey u:object_r:hal_drm_clearkey_exec:s0 +#/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@1\.4-service\.clearkey u:object_r:hal_drm_clearkey_exec:s0 # Persist firmware filesystem /persist/camera_calibration(/.*)? u:object_r:persist_camera_file:s0 diff --git a/sepolicy/hal_drm_clearkey.te b/sepolicy/hal_drm_clearkey.te new file mode 100644 index 0000000..6c0909a --- /dev/null +++ b/sepolicy/hal_drm_clearkey.te @@ -0,0 +1,12 @@ +# policy for /vendor/bin/hw/android.hardware.drm@1.4-service.clearkey +type hal_drm_clearkey, domain; +type hal_drm_clearkey_exec, exec_type, vendor_file_type, file_type; + +init_daemon_domain(hal_drm_clearkey) + +hal_server_domain(hal_drm_clearkey, hal_drm) + +vndbinder_use(hal_drm_clearkey); + +allow hal_drm_clearkey { appdomain -isolated_app }:fd use; +