Merge "Fix SELinux denials for protected content playback"
diff --git a/mediadrmserver.te b/mediadrmserver.te
index cfa4b28..d9368ad 100644
--- a/mediadrmserver.te
+++ b/mediadrmserver.te
@@ -49,6 +49,7 @@
allow mediadrmserver mediadrmserver_service:service_manager { add find };
allow mediadrmserver mediaserver_service:service_manager { add find };
allow mediadrmserver processinfo_service:service_manager find;
+allow mediadrmserver surfaceflinger_service:service_manager find;
# only allow unprivileged socket ioctl commands
allowxperm mediadrmserver self:{ rawip_socket tcp_socket udp_socket }