1allow mediaserver system_server:unix_stream_socket { read write }; 2allow mediaserver self:netlink_kobject_uevent_socket create_socket_perms; 3allow mediaserver sensorservice_service:service_manager find; 4allow mediaserver sysfs_gpu:file r_file_perms; 5 6# needed for widevine classic 7allow mediaserver tee_device:chr_file { ioctl open read write }; 8 9