Skip to content
Snippets Groups Projects
Commit a3266be9 authored by Jeff Vander Stoep's avatar Jeff Vander Stoep
Browse files

audioserver: grant read perms to /proc

In preparation of removing permissions from domain_deprecated.

Addresses:
avc: denied { read } for name="irq_affinity" dev="proc" ino=4026536760 scontext=u:r:audioserver:s0 tcontext=u:object_r:proc:s0 tclass=file
avc: denied { open } for path="/proc/asound/irq_affinity" dev="proc" ino=4026536760 scontext=u:r:audioserver:s0 tcontext=u:object_r:proc:s0 tclass=file
avc: denied { getattr } for path="/proc/asound/irq_affinity" dev="proc" ino=4026536760 scontext=u:r:audioserver:s0 tcontext=u:object_r:proc:s0 tclass=file

Change-Id: Iaa8843bb4e8b19d001520fcd45d35e666bf48271
parent 327da659
No related branches found
No related tags found
No related merge requests found
......@@ -14,6 +14,9 @@ binder_call(audioserver, binderservicedomain)
binder_call(audioserver, { appdomain autoplay_app })
binder_service(audioserver)
# Read access to pseudo filesystems.
r_dir_file(audioserver, proc)
# Required by Widevine DRM (b/22990512)
allow audioserver self:process execmem;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment