diff --git a/sepolicy/vendor/hal_drm_widevine.te b/sepolicy/vendor/hal_drm_widevine.te index e83649b9..faf47b31 100644 --- a/sepolicy/vendor/hal_drm_widevine.te +++ b/sepolicy/vendor/hal_drm_widevine.te @@ -10,3 +10,8 @@ vndbinder_use(hal_drm_widevine); allow hal_drm mediacodec:fd use; allow hal_drm { appdomain -isolated_app }:fd use; + +# The Qualcomm DRM-HAL implementation uses a vendor-binder service provided +# by the HWC HAL. +allow hal_drm_widevine qdisplay_service:service_manager { find }; +binder_call(hal_drm_widevine, hal_graphics_composer)