path: root/common/sepolicy/mediaserver.te (plain)
blob: 24615460640c4d4a62d7c9c31f55529594884569

1	allow mediaserver system_server:unix_stream_socket { read write setopt };
2	# media.* props
3	allow mediaserver media_prop:property_service set;
4	allow mediaserver system_server:dir search;
5	# /dev/uio0 for amadec
6	#allow mediaserver uio_device:chr_file rw_file_perms;
7	#allow mediaserver dvb_video_device:chr_file rw_file_perms;
8	# read app /proc/pid/
9	allow mediaserver appdomain:dir { getattr search };
10	allow mediaserver appdomain:file { r_file_perms };
11
12	allow mediaserver graphics_device:dir r_dir_perms;
13	allow mediaserver system_data_file:dir {write add_name};
14	allow mediaserver sysfs:file { open read write};
15	allow mediaserver sysfs_xbmc:file {open read write};
16	allow mediaserver screenmediasource_service:service_manager add;
17	allow mediaserver system_control_service:service_manager find;
18	allow mediaserver media_data_file:lnk_file {create open read write};
19	allow mediaserver tvserver:fd use;
20	allow mediaserver storage_file:dir search;
21
22	allow mediaserver audio_device:dir r_dir_perms;
23	allow mediaserver sysfs_audio_cap:file {open read write};
24	allow mediaserver kernel:system module_request;
25
26	allow mediaserver exfat:file { getattr read };
27	allow mediaserver ntfs:file { getattr read };
28
29	get_prop(mediaserver, media_prop)
30