Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 3b38c601 authored by Nishith Khanna's avatar Nishith Khanna
Browse files

Merge remote-tracking branch 'origin/lineage-22.1' into a15

parents 98de4bcc 6585eff1

common/private/mediashell_app.te

+10 −0
Original line number Diff line number Diff line
@@ -34,3 +34,13 @@ allow mediashell_app system_linker_exec:file execute_no_trans; 
allow mediashell_app self:process ptrace;



allow mediashell_app audioserver:fifo_file { write };



allow mediashell_app proc_vendor_sched:dir search;



# suppress denials for non-API accesses.

dontaudit mediashell_app proc:file read;



# wifi ssid suffix helps identify device

get_prop(mediashell_app, odm_cast_prop)



dontaudit mediashell_app wifi_config_prop:file read;

common/private/property.te

+4 −0
Original line number Diff line number Diff line 
# ATV

# used by mediashell

product_internal_prop(odm_cast_prop)



# Custom legal URL

system_internal_prop(legal_url_prop)

common/private/property_contexts

+4 −0
Original line number Diff line number Diff line 
# ATV

# used by mediashell

ro.odm.cast.ssid_suffix u:object_r:odm_cast_prop:s0



# Aux camera

vendor.camera.aux.packageexcludelist   u:object_r:vendor_persist_camera_prop:s0

vendor.camera.aux.packagelist          u:object_r:vendor_persist_camera_prop:s0

common/private/seapp_contexts

+5 −1
Original line number Diff line number Diff line 
user=_app isPrivApp=true seinfo=mediashell domain=mediashell_app name=com.google.android.apps.mediashell type=app_data_file levelFrom=all

# AndroidMediaShell (mediashell_app) access to Widevine

user=_app isPrivApp=true seinfo=mediashell domain=mediashell_app name=com.google.android.apps.mediashell type=privapp_data_file levelFrom=all

user=_app isPrivApp=true seinfo=mediashell domain=mediashell_app name=com.google.android.apps.mediashell:* type=privapp_data_file levelFrom=all



# Updater

user=_app isPrivApp=true seinfo=platform name=org.lineageos.updater domain=updater_app type=app_data_file levelFrom=user