pipewire: run with the System::Pipewire smack label 47/21747/3
authorGeorge Kiagiadakis <george.kiagiadakis@collabora.com>
Wed, 26 Jun 2019 11:48:29 +0000 (14:48 +0300)
committerJan-Simon Moeller <jsmoeller@linuxfoundation.org>
Thu, 27 Jun 2019 13:29:30 +0000 (13:29 +0000)
commit1f5849784f91f18488e21307b2548e96095c190e
tree4f928ff4b1e50157ff4661c0d38ae68d438a15af
parent5cb5bf7e0c021e9b925b3e1fcf01b4945927bd07
pipewire: run with the System::Pipewire smack label

Pipewire shares memory with its clients using open file
descriptors (memfd or shared memory file) which are created within
pipewire and therefore they have the same smack label as the
pipewire process. Clients must be able to read and write to this
memory, therefore they need rw acess to that smack label.

Since all AGL apps have only write access to the System label,
we need to use a different smack label which can be granted rw
access from the applications that need to use audio.
"System::Pipewire" is chosen here to follow the "System::Sub"
pattern that is described in the documentation.

Bug-AGL: SPEC-2554

Change-Id: I81cbf82adfde3ef4f67872bd91293370339b18d7
Signed-off-by: George Kiagiadakis <george.kiagiadakis@collabora.com>
meta-pipewire/recipes-multimedia/pipewire/pipewire/pipewire@.service
meta-pipewire/recipes-multimedia/pipewire/pipewire/smack-pipewire [new file with mode: 0644]
meta-pipewire/recipes-multimedia/pipewire/pipewire_git.bbappend