drm: switch clearkey to apex

This commit is contained in:
Konsta
2025-03-15 02:20:23 +02:00
parent 7d91c1b33c
commit aa53179895
5 changed files with 7 additions and 17 deletions

View File

@@ -148,7 +148,7 @@ PRODUCT_SET_DEBUGFS_RESTRICTIONS := false
# DRM
PRODUCT_PACKAGES += \
android.hardware.drm-service.clearkey
com.android.hardware.drm.clearkey
# Emergency info
PRODUCT_PACKAGES += \

1
sepolicy/file.te Normal file
View File

@@ -0,0 +1 @@
type mediadrm_vendor_data_file, file_type, data_file_type;

View File

@@ -7,8 +7,7 @@
/vendor/bin/hw/android\.hardware\.tv\.cec@1\.0-service\.rpi u:object_r:hal_tv_cec_default_exec:s0
# DRM
/vendor/bin/hw/android\.hardware\.drm-service\.clearkey u:object_r:hal_drm_clearkey_exec:s0
/vendor/bin/hw/android\.hardware\.drm-service\.widevine(.*)? u:object_r:hal_drm_widevine_exec:s0
/data/vendor/mediadrm(/.*)? u:object_r:mediadrm_vendor_data_file:s0
# FFmpeg
/vendor/bin/hw/android\.hardware\.media\.c2@1\.2-service-ffmpeg u:object_r:mediacodec_exec:s0

View File

@@ -1,10 +1,5 @@
type hal_drm_clearkey, domain;
type hal_drm_clearkey_exec, exec_type, vendor_file_type, file_type;
type hal_drm_clearkey_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(hal_drm_clearkey)
hal_server_domain(hal_drm_clearkey, hal_drm)
vndbinder_use(hal_drm_clearkey);
allow hal_drm_clearkey hal_allocator_server:fd use;

View File

@@ -1,13 +1,8 @@
type hal_drm_widevine, domain;
type hal_drm_widevine_exec, exec_type, vendor_file_type, file_type;
type hal_drm_widevine_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(hal_drm_widevine)
hal_server_domain(hal_drm_widevine, hal_drm)
vndbinder_use(hal_drm_widevine);
allow hal_drm_widevine hal_allocator_server:fd use;
allow hal_drm mediacodec:fd use;
hal_client_domain(hal_drm_widevine, hal_graphics_composer);
allow hal_drm_widevine mediadrm_vendor_data_file:file create_file_perms;
allow hal_drm_widevine mediadrm_vendor_data_file:dir create_dir_perms;