From ce1a1adc1e340007ab68a380d85eb7ef2c9f22bc Mon Sep 17 00:00:00 2001
From: Soo-Hwan Na <69458352+roynatech2544@users.noreply.github.com>
Date: Wed, 22 Dec 2021 14:39:28 +0900
Subject: [PATCH] universal7885: resolve drm widevine denials

* allow drm widevine to call ioctl() to tz_user_device
---
 universal7885-common/sepolicy/vendor/hal_drm_widevine.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/universal7885-common/sepolicy/vendor/hal_drm_widevine.te b/universal7885-common/sepolicy/vendor/hal_drm_widevine.te
index 790a9e0..21f377d 100644
--- a/universal7885-common/sepolicy/vendor/hal_drm_widevine.te
+++ b/universal7885-common/sepolicy/vendor/hal_drm_widevine.te
@@ -22,4 +22,4 @@ allow hal_drm_widevine efs_file:dir search;
 
 allow hal_drm_widevine drm_device:chr_file { read write open ioctl };
 
-allow hal_drm_widevine tz_user_device:chr_file { read write open };
+allow hal_drm_widevine tz_user_device:chr_file { read write open ioctl };