1# Copyright (c) 2022 Huawei Device Co., Ltd.
2# Licensed under the Apache License, Version 2.0 (the License);
3# you may not use this file except in compliance with the License.
4# You may obtain a copy of the License at
5#
6#     http://www.apache.org/licenses/LICENSE-2.0
7#
8# Unless required by applicable law or agreed to in writing, software
9# distributed under the License is distributed on an "AS IS" BASIS,
10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
11# See the License for the specific language governing permissions and
12# limitations under the License.
13
14#avc:  denied  { call } for  pid=434 comm="wavparse0:sink" scontext=u:r:media_service:s0 tcontext=u:r:audio_server:s0 tclass=binder permissive=1
15#avc:  denied  { transfer } for  pid=434 comm="aqueue:src" scontext=u:r:media_service:s0 tcontext=u:r:audio_server:s0 tclass=binder permissive=1
16allow media_service audio_server:binder { call transfer };
17
18#avc:  denied  { getattr } for  pid=431 comm="threaded-ml" path="/data/data/.pulse_dir/state" dev="mmcblk0p11" ino=522248 scontext=u:r:media_service:s0 tcontext=u:object_r:data_data_pulse_dir:s0 tclass=dir permissive=1
19#avc:  denied  { open } for  pid=431 comm="threaded-ml" path="/data/data/.pulse_dir/state" dev="mmcblk0p11" ino=522248 scontext=u:r:media_service:s0 tcontext=u:object_r:data_data_pulse_dir:s0 tclass=dir permissive=1
20#avc:  denied  { read } for  pid=431 comm="threaded-ml" name="state" dev="mmcblk0p11" ino=522248 scontext=u:r:media_service:s0 tcontext=u:object_r:data_data_pulse_dir:s0 tclass=dir permissive=1
21#avc:  denied  { search } for  pid=431 comm="threaded-ml" name=".pulse_dir" dev="mmcblk0p11" ino=522246 scontext=u:r:media_service:s0 tcontext=u:object_r:data_data_pulse_dir:s0 tclass=dir permissive=1
22allow media_service data_data_pulse_dir:dir { getattr open read search };
23
24#avc:  denied  { lock } for  pid=431 comm="threaded-ml" path="/data/data/.pulse_dir/state/cookie" dev="mmcblk0p11" ino=522251 scontext=u:r:media_service:s0 tcontext=u:object_r:data_data_pulse_dir:s0 tclass=file permissive=1
25#avc:  denied  { open } for  pid=431 comm="threaded-ml" path="/data/data/.pulse_dir/state/cookie" dev="mmcblk0p11" ino=522251 scontext=u:r:media_service:s0 tcontext=u:object_r:data_data_pulse_dir:s0 tclass=file permissive=1
26#avc:  denied  { read write } for  pid=431 comm="threaded-ml" name="cookie" dev="mmcblk0p11" ino=522251 scontext=u:r:media_service:s0 tcontext=u:object_r:data_data_pulse_dir:s0 tclass=file permissive=1
27allow media_service data_data_pulse_dir:file { lock open read write };
28
29#avc:  denied  { get } for service=3009 pid=512 scontext=u:r:media_service:s0 tcontext=u:object_r:sa_audio_policy_service:s0 tclass=samgr_class permissive=1
30allow media_service sa_audio_policy_service:samgr_class { get };
31
32#avc:  denied  { get } for service=3001 pid=512 scontext=u:r:media_service:s0 tcontext=u:object_r:sa_pulseaudio_audio_service:s0 tclass=samgr_class permissive=1
33allow media_service sa_pulseaudio_audio_service:samgr_class { get };
34
35#avc:  denied  { call } for  pid=501 comm="media_service" scontext=u:r:media_service:s0 tcontext=u:r:dcamera:s0 tclass=binder permissive=0
36#avc:  denied  { transfer } for  pid=466 comm="media_service" scontext=u:r:media_service:s0 tcontext=u:r:dcamera:s0 tclass=binder permissive=0
37allow media_service dcamera:binder { call transfer };
38
39allow media_service audio_server:fd { use };
40
41#avc denied { get } for service=1901 pid=1427 scontext=u:r:media_service:s0 tcontext=u:object_r:sa_resource_schedule:s0 tclass=samgr_class permissive=0
42allow media_service sa_resource_schedule:samgr_class { get };
43