Evolution-x-devices/device_google_wahoo
2
0
Fork 0
mirror of https://github.com/Evolution-X-Devices/device_google_wahoo synced 2026-01-27 18:19:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Move mediaprovider domain to wahoo

Browse Source 
mediaprovider cannot be in core policy due to O
compatability. Make it wahoo specific since it
is needed for MTP.

Bug: 62102757
Test: ps -eZ | grep mediaprovider, use MTP
Change-Id: Ieb46b596fd8b0558318d433a47f995ebf714d5f9
This commit is contained in:
Jerry Zhang
2017-06-02 14:15:12 -07:00
parent e9bed2b908
commit 442e6d64e5
2 changed files with 37 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
sepolicy/private/mediaprovider.te Normal file
View File

@@ -0,0 +1,36 @@
###
### A domain for android.process.media, which contains both
### MediaProvider and DownloadProvider and associated services.
###
type mediaprovider, domain;
typeattribute mediaprovider coredomain;
app_domain(mediaprovider)
# DownloadProvider accesses the network.
net_domain(mediaprovider)
# DownloadProvider uses /cache.
allow mediaprovider cache_file:dir create_dir_perms;
allow mediaprovider cache_file:file create_file_perms;
# /cache is a symlink to /data/cache on some devices. Allow reading the link.
allow mediaprovider cache_file:lnk_file r_file_perms;
allow mediaprovider app_api_service:service_manager find;
allow mediaprovider audioserver_service:service_manager find;
allow mediaprovider drmserver_service:service_manager find;
allow mediaprovider mediaserver_service:service_manager find;
allow mediaprovider surfaceflinger_service:service_manager find;
# Allow MediaProvider to read/write cached ringtones (opened by system).
allow mediaprovider ringtone_file:file { getattr read write };
# MtpServer uses /dev/mtp_usb
allow mediaprovider mtp_device:chr_file rw_file_perms;
# MtpServer uses /dev/usb-ffs/mtp
allow mediaprovider functionfs:dir search;
allow mediaprovider functionfs:file rw_file_perms;
# MtpServer sets sys.usb.ffs.mtp.ready
set_prop(mediaprovider, ffs_prop)

1
sepolicy/private/seapp_contexts Normal file
View File

@@ -0,0 +1 @@
user=_app seinfo=media domain=mediaprovider name=android.process.media type=app_data_file levelFrom=user