Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit a592049d authored Feb 12, 2025 by Nolen Johnson

common: private: Update ATV rules

Change-Id: I28a0a53fdc0e30032cf3095586d189a6456f0feb

parent 14fdb868

common/private/mediashell_app.te

+8 −0

Original line number	Diff line number	Diff line
		@@ -34,3 +34,11 @@ allow mediashell_app system_linker_exec:file execute_no_trans;
		allow mediashell_app self:process ptrace;

		allow mediashell_app audioserver:fifo_file { write };

		allow mediashell_app proc_vendor_sched:dir search;

		# suppress denials for non-API accesses.
		dontaudit mediashell_app proc:file read;

		# wifi ssid suffix helps identify device
		get_prop(mediashell_app, odm_cast_prop)

common/private/property.te

+4 −0

Original line number	Diff line number	Diff line
		# ATV
		# used by mediashell
		product_internal_prop(odm_cast_prop)

		# Custom legal URL
		system_internal_prop(legal_url_prop)

common/private/property_contexts

+4 −0

Original line number	Diff line number	Diff line
		# ATV
		# used by mediashell
		ro.odm.cast.ssid_suffix u:object_r:odm_cast_prop:s0

		# Aux camera
		vendor.camera.aux.packageexcludelist u:object_r:vendor_persist_camera_prop:s0
		vendor.camera.aux.packagelist u:object_r:vendor_persist_camera_prop:s0

common/private/seapp_contexts

+5 −1

Original line number	Diff line number	Diff line
		user=_app isPrivApp=true seinfo=mediashell domain=mediashell_app name=com.google.android.apps.mediashell type=app_data_file levelFrom=all
		# AndroidMediaShell (mediashell_app) access to Widevine
		user=_app isPrivApp=true seinfo=mediashell domain=mediashell_app name=com.google.android.apps.mediashell type=privapp_data_file levelFrom=all
		user=_app isPrivApp=true seinfo=mediashell domain=mediashell_app name=com.google.android.apps.mediashell:* type=privapp_data_file levelFrom=all

		# Updater
		user=_app isPrivApp=true seinfo=platform name=org.lineageos.updater domain=updater_app type=app_data_file levelFrom=user