commit 2b1d2e2969728b07e1c53056fe53390b194592a3
author Jeff Tinker <jtinker@google.com> Wed Jul 13 14:30:27 2016 -0700
committer Jeff Vander Stoep <jeffv@google.com> Tue Sep 13 12:39:40 2016 -0700
tree 181ff918182dec85a7aa796ec97efc4a17817709
parent b4b78c18a9e318255eb394755e49ac4090135846

Fix SELinux denials for protected content playback

(cherry picked from commit d2dbc8994c768984934b068bc592f710d010a26a)

bug: 30087072
bug: 29937024
Change-Id: I8bf3032b8455556ff5332f538f43aeb514d3b290

mediadrmserver.te

diff --git a/mediadrmserver.te b/mediadrmserver.te
index cfa4b28..d9368ad 100644
--- a/mediadrmserver.te
+++ b/mediadrmserver.te
@@ -49,6 +49,7 @@
 allow mediadrmserver mediadrmserver_service:service_manager { add find };
 allow mediadrmserver mediaserver_service:service_manager { add find };
 allow mediadrmserver processinfo_service:service_manager find;
+allow mediadrmserver surfaceflinger_service:service_manager find;
 
 # only allow unprivileged socket ioctl commands
 allowxperm mediadrmserver self:{ rawip_socket tcp_socket udp_socket }