Sepolicy for crosvm to play audio with aaudio
This change adds some policies to let crosvm access the audio-server.
Bug: 325930215
Test: Play Youtube video on panther
Change-Id: I78da2268597db0d35e4662a7a620a46bfe8cddaf
diff --git a/private/crosvm.te b/private/crosvm.te
index fced92f..ee8f90c 100644
--- a/private/crosvm.te
+++ b/private/crosvm.te
@@ -97,6 +97,10 @@
allow crosvm servicemanager:binder { call transfer };
allow crosvm virtualization_service:service_manager find;
allow crosvm virtualizationservice:binder { call transfer };
+
+ # Allow crosvm to play sound.
+ binder_call(crosvm, audioserver)
+ allow crosvm audioserver_service:service_manager find;
')
# crosvm tries to use netlink sockets as part its APCI implementation, but we don't need it for AVF (b/228077254)