add media.codec.update service am: 52fb3edb am: c601d9e5

am: 31ef820c

Change-Id: I7d03e88e6a9c19c483ecb90867b997feaa8b207e

private/service_contexts

@@ -98,6 +98,7 @@ media.metrics                             u:object_r:mediametrics_service:s0
 media.extractor                           u:object_r:mediaextractor_service:s0
 media.extractor.update                    u:object_r:mediaextractor_update_service:s0
 media.codec                               u:object_r:mediacodec_service:s0
+media.codec.update                        u:object_r:mediaextractor_update_service:s0
 media.resource_manager                    u:object_r:mediaserver_service:s0
 media.sound_trigger_hw                    u:object_r:audioserver_service:s0
 media.drm                                 u:object_r:mediadrmserver_service:s0

public/domain.te

@@ -494,6 +494,7 @@ neverallow {
     -webview_zygote
     -zygote
     userdebug_or_eng(`-mediaextractor')
+    userdebug_or_eng(`-mediaswcodec')
 } {
     file_type
     -system_file_type
@@ -1557,3 +1558,9 @@ neverallow {
   -hal_omx_server
 } hal_codec2_hwservice:hwservice_manager add;
 
+neverallow {
+  domain
+  userdebug_or_eng(`-mediaextractor')
+  userdebug_or_eng(`-mediaswcodec')
+} mediaextractor_update_service:service_manager add;
+

public/mediaextractor.te

@@ -37,7 +37,7 @@ allow mediaextractor system_file:dir { read open };
 
 userdebug_or_eng(`
   # Allow extractor to add update service.
-  add_service(mediaextractor, mediaextractor_update_service)
+  allow mediaextractor mediaextractor_update_service:service_manager { find add };
 
   # Allow extractor to load media extractor plugins from update apk.
   allow mediaextractor apk_data_file:dir search;

public/mediaswcodec.te

@@ -7,3 +7,12 @@ typeattribute mediaswcodec mediaswcodec_server;
 hal_client_domain(mediaswcodec, hal_allocator)
 hal_client_domain(mediaswcodec, hal_graphics_allocator)
 
+userdebug_or_eng(`
+  binder_use(mediaswcodec)
+  # Add mediaextractor_update_service service
+  allow mediaswcodec mediaextractor_update_service:service_manager { find add };
+
+  # Allow mediaswcodec to load libs from update apk.
+  allow mediaswcodec apk_data_file:file { open read execute getattr map };
+  allow mediaswcodec apk_data_file:dir { search getattr };
+')