universal7885: fix drm widevine L3

* make directory for sec_efs partition
* Address selinux denials while using it
* HACK: Since oemcrypto looks for /factory/wv.keys, mount sec_efs partition on /factory instead of /efs

Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
This commit is contained in:
roynatech2544 2021-12-30 02:37:35 +09:00
commit 24cc2cdcae
No known key found for this signature in database
GPG key ID: 9675C32163D88D30
6 changed files with 6 additions and 13 deletions

View file

@ -83,6 +83,8 @@ TARGET_RELEASETOOLS_EXTENSIONS := $(COMMON_PATH)/releasetools
# RIL
ENABLE_VENDOR_RIL_SERVICE := true
TARGET_BOARD_ROOT_EXTRA_FOLDERS := factory
# Sepolicy
SYSTEM_EXT_PUBLIC_SEPOLICY_DIRS += \
$(COMMON_PATH)/sepolicy/public

View file

@ -418,7 +418,7 @@ on fs
mount_all /vendor/etc/fstab.${ro.hardware} --early
# We need to seperate mounting SEC_EFS partition from fstab file due to GSI image loading case
wait /dev/block/platform/13500000.dwmmc0/by-name/sec_efs
mount ext4 /dev/block/platform/13500000.dwmmc0/by-name/sec_efs /efs nosuid nodev noatime noauto_da_alloc,discard,journal_checksum,data=ordered,errors=panic
mount ext4 /dev/block/platform/13500000.dwmmc0/by-name/sec_efs /factory nosuid nodev noatime noauto_da_alloc,discard,journal_checksum,data=ordered,errors=panic
mount none /mnt/vendor/cpefs /cpefs bind
restorecon_recursive /mnt/vendor/efs

View file

@ -23,3 +23,6 @@ allow hal_drm_widevine efs_file:dir search;
allow hal_drm_widevine drm_device:chr_file { read write open ioctl };
allow hal_drm_widevine tz_user_device:chr_file { read write open ioctl };
allow hal_drm_widevine sec_efs_file:file r_file_perms;

View file

@ -1,4 +0,0 @@
type iof_vendor, domain;
type iof_vendor_exec, file_type, vendor_file_type, exec_type;
init_daemon_domain(iof_vendor)

View file

@ -1,4 +0,0 @@
type proxy_daemon, domain;
type proxy_daemon_exec, file_type, vendor_file_type, exec_type;
init_daemon_domain(proxy_daemon)

View file

@ -1,4 +0,0 @@
type taadaemon, domain;
type taadaemon_exec, file_type, vendor_file_type, exec_type;
init_daemon_domain(taadaemon)