mirror of
https://github.com/chararomandroid/android_device_samsung_a20
synced 2026-08-21 19:55:33 -04:00
universal7885: fix drm widevine L3
* make directory for sec_efs partition * Address selinux denials while using it * HACK: Since oemcrypto looks for /factory/wv.keys, mount sec_efs partition on /factory instead of /efs Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
This commit is contained in:
parent
53b426b522
commit
24cc2cdcae
6 changed files with 6 additions and 13 deletions
|
|
@ -83,6 +83,8 @@ TARGET_RELEASETOOLS_EXTENSIONS := $(COMMON_PATH)/releasetools
|
|||
# RIL
|
||||
ENABLE_VENDOR_RIL_SERVICE := true
|
||||
|
||||
TARGET_BOARD_ROOT_EXTRA_FOLDERS := factory
|
||||
|
||||
# Sepolicy
|
||||
SYSTEM_EXT_PUBLIC_SEPOLICY_DIRS += \
|
||||
$(COMMON_PATH)/sepolicy/public
|
||||
|
|
|
|||
|
|
@ -418,7 +418,7 @@ on fs
|
|||
mount_all /vendor/etc/fstab.${ro.hardware} --early
|
||||
# We need to seperate mounting SEC_EFS partition from fstab file due to GSI image loading case
|
||||
wait /dev/block/platform/13500000.dwmmc0/by-name/sec_efs
|
||||
mount ext4 /dev/block/platform/13500000.dwmmc0/by-name/sec_efs /efs nosuid nodev noatime noauto_da_alloc,discard,journal_checksum,data=ordered,errors=panic
|
||||
mount ext4 /dev/block/platform/13500000.dwmmc0/by-name/sec_efs /factory nosuid nodev noatime noauto_da_alloc,discard,journal_checksum,data=ordered,errors=panic
|
||||
|
||||
mount none /mnt/vendor/cpefs /cpefs bind
|
||||
restorecon_recursive /mnt/vendor/efs
|
||||
|
|
|
|||
|
|
@ -23,3 +23,6 @@ allow hal_drm_widevine efs_file:dir search;
|
|||
allow hal_drm_widevine drm_device:chr_file { read write open ioctl };
|
||||
|
||||
allow hal_drm_widevine tz_user_device:chr_file { read write open ioctl };
|
||||
|
||||
allow hal_drm_widevine sec_efs_file:file r_file_perms;
|
||||
|
||||
|
|
|
|||
|
|
@ -1,4 +0,0 @@
|
|||
type iof_vendor, domain;
|
||||
type iof_vendor_exec, file_type, vendor_file_type, exec_type;
|
||||
init_daemon_domain(iof_vendor)
|
||||
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
type proxy_daemon, domain;
|
||||
type proxy_daemon_exec, file_type, vendor_file_type, exec_type;
|
||||
init_daemon_domain(proxy_daemon)
|
||||
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
type taadaemon, domain;
|
||||
type taadaemon_exec, file_type, vendor_file_type, exec_type;
|
||||
init_daemon_domain(taadaemon)
|
||||
|
||||
Loading…
Reference in a new issue