X-Git-Url: https://gerrit.automotivelinux.org/gerrit/gitweb?a=blobdiff_plain;f=meta-pipewire%2Fdynamic-layers%2Fmeta-app-framework%2Frecipes-multimedia%2Fwireplumber%2Fwireplumber-config-agl%2Faccess-smack.lua;fp=meta-pipewire%2Fdynamic-layers%2Fmeta-app-framework%2Frecipes-multimedia%2Fwireplumber%2Fwireplumber-config-agl%2Faccess-smack.lua;h=a662a0f206c77b7bfa0c9e070c72bf16580d6802;hb=761e6467d12e2935785774383adca9ddbd3e1c26;hp=0000000000000000000000000000000000000000;hpb=69dbc40c36265760a27094b960ef9faebda3a08d;p=AGL%2Fmeta-agl.git

diff --git a/meta-pipewire/dynamic-layers/meta-app-framework/recipes-multimedia/wireplumber/wireplumber-config-agl/access-smack.lua b/meta-pipewire/dynamic-layers/meta-app-framework/recipes-multimedia/wireplumber/wireplumber-config-agl/access-smack.lua
new file mode 100644
index 000000000..a662a0f20
--- /dev/null
+++ b/meta-pipewire/dynamic-layers/meta-app-framework/recipes-multimedia/wireplumber/wireplumber-config-agl/access-smack.lua
@@ -0,0 +1,17 @@
+clients_om = ObjectManager {
+  Interest {
+    type = "client",
+    Constraint { "pipewire.access", "=", "restricted" },
+  }
+}
+
+clients_om:connect("object-added", function (om, client)
+  local smack_label = client["global-properties"]["pipewire.sec.label"]
+
+  if smack_label:match("^User::App::.+") then
+    -- FIXME: apps can work with less permissions
+    client:update_permissions { ["any"] = "all" }
+  end
+end)
+
+clients_om:activate()