commit 609c243dd0a361a0a00566b20c9bb2c6bf0f006f
author Pawin Vongmasa <pawin@google.com> Tue Apr 30 05:09:28 2019 -0700
committer Pawin Vongmasa <pawin@google.com> Thu May 23 03:53:47 2019 -0700
tree 978758ab5b241936e04b29496c49eb4237cc2e79
parent 676d9590f4f48e9f4af6505e4a9a54f0125edbab

Properly define hal_codec2 and related policies

Test: make cts -j123 && cts-tradefed run cts-dev -m \
CtsMediaTestCases --compatibility:module-arg \
CtsMediaTestCases:include-annotation:\
android.platform.test.annotations.RequiresDevice

Bug: 131677974
Change-Id: I59c3d225499a8c53c2ed9f3bd677ff3d7423990b

private/app_neverallows.te

diff --git a/private/app_neverallows.te b/private/app_neverallows.te
index 3c5b921..23e1fd2 100644
--- a/private/app_neverallows.te
+++ b/private/app_neverallows.te
@@ -311,9 +311,10 @@
   neverallow all_untrusted_apps {
     halserverdomain
     -coredomain
+    -hal_cas_server
+    -hal_codec2_server
     -hal_configstore_server
     -hal_graphics_allocator_server
-    -hal_cas_server
     -hal_neuralnetworks_server
     -hal_omx_server
     -binder_in_vendor_violators # TODO(b/35870313): Remove once all violations are gone