NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "[ALPS04328846] power: refine sepolicy" into alps-trunk-q0.basic

Browse Source 
Change-Id: Iaf3710c91ea35b6019f6f969b78854f28bc3dcf8
MTK-Commit-Id: c0705d2f416d71357824bbea7d70237068f7b921
This commit is contained in:
Ian-Y Chen (陳尹) 2020-01-18 10:13:33 +08:00 committed by Gerrit Code Review
commit 1e6a5072dc
9 changed files with 50 additions and 39 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
non_plat/app.te
View File

@ -44,10 +44,10 @@ allow appdomain mtk_cmdq_device:chr_file {open read ioctl};
allow appdomain proc_perfmgr:dir search; allow appdomain proc_perfmgr:dir search;
allow appdomain proc_perfmgr:file { getattr open read ioctl}; allow appdomain proc_perfmgr:file { getattr open read ioctl};
allowxperm appdomain proc_perfmgr:file ioctl { allowxperm appdomain proc_perfmgr:file ioctl {
FPSGO_QUEUE PERFMGR_FPSGO_QUEUE
FPSGO_DEQUEUE PERFMGR_FPSGO_DEQUEUE
FPSGO_QUEUE_CONNECT PERFMGR_FPSGO_QUEUE_CONNECT
FPSGO_BQID PERFMGR_FPSGO_BQID
}; };
# Date : W19.4 # Date : W19.4

8
non_plat/bootanim.te
View File

@ -35,8 +35,8 @@ allowxperm bootanim proc_ged:file ioctl {
GED_BRIDGE_IO_GE_INFO GED_BRIDGE_IO_GE_INFO
}; };
allowxperm bootanim proc_perfmgr:file ioctl { allowxperm bootanim proc_perfmgr:file ioctl {
FPSGO_QUEUE PERFMGR_FPSGO_QUEUE
FPSGO_DEQUEUE PERFMGR_FPSGO_DEQUEUE
FPSGO_QUEUE_CONNECT PERFMGR_FPSGO_QUEUE_CONNECT
FPSGO_BQID PERFMGR_FPSGO_BQID
}; };

8
non_plat/cameraserver.te
View File

@ -357,8 +357,8 @@ allow cameraserver debugfs_ion:dir search;
allow cameraserver proc_perfmgr:dir {read search}; allow cameraserver proc_perfmgr:dir {read search};
allow cameraserver proc_perfmgr:file r_file_perms; allow cameraserver proc_perfmgr:file r_file_perms;
allowxperm cameraserver proc_perfmgr:file ioctl { allowxperm cameraserver proc_perfmgr:file ioctl {
FPSGO_QUEUE PERFMGR_FPSGO_QUEUE
FPSGO_DEQUEUE PERFMGR_FPSGO_DEQUEUE
FPSGO_QUEUE_CONNECT PERFMGR_FPSGO_QUEUE_CONNECT
FPSGO_BQID PERFMGR_FPSGO_BQID
}; };

32
non_plat/ioctl_defines
View File

@ -28,26 +28,26 @@ define(`GED_BRIDGE_IO_IOCTLCMD_0F', `0x670f')
define(`GED_BRIDGE_IO_IOCTLCMD_10', `0x6710') define(`GED_BRIDGE_IO_IOCTLCMD_10', `0x6710')
##################################### #####################################
# perf_ioctl.h # perf_ioctl.h : FPSGO
# #
define(`FPSGO_QUEUE', `0x6701') define(`PERFMGR_FPSGO_QUEUE', `0x6701')
define(`FPSGO_DEQUEUE', `0x6703') define(`PERFMGR_FPSGO_DEQUEUE', `0x6703')
define(`FPSGO_VSYNC', `0x6705') define(`PERFMGR_FPSGO_VSYNC', `0x6705')
define(`FPSGO_TOUCH', `0x670a') define(`PERFMGR_FPSGO_TOUCH', `0x670a')
define(`FPSGO_QUEUE_CONNECT', `0x670f') define(`PERFMGR_FPSGO_QUEUE_CONNECT', `0x670f')
define(`FPSGO_BQID', `0x6710') define(`PERFMGR_FPSGO_BQID', `0x6710')
##################################### # perf_ioctl.h : EARA
# define(`PERFMGR_EARA_NN_BEGIN', `0x6701')
# define(`PERFMGR_EARA_NN_END', `0x6702')
define(`EARA_NN_BEGIN', `0x6701') define(`PERFMGR_EARA_GETUSAGE', `0x6703')
define(`EARA_NN_END', `0x6702')
define(`EARA_GETUSAGE', `0x6703')
##################################### # perf_ioctl.h : others
#
#
define(`PERFMGR_CPU_PREFER', `0x6701') define(`PERFMGR_CPU_PREFER', `0x6701')
#####################################
#
#
define(`MMC_IOCTLCMD', `0xb300') define(`MMC_IOCTLCMD', `0xb300')
define(`UFS_IOCTLCMD', `0x5388') define(`UFS_IOCTLCMD', `0x5388')

8
non_plat/mtk_hal_power.te
View File

@ -40,7 +40,7 @@ allow mtk_hal_power mtk_hal_audio:dir r_dir_perms;
# Purpose : Allow powerHAL to access perfmgr # Purpose : Allow powerHAL to access perfmgr
allow mtk_hal_power proc_perfmgr:dir r_dir_perms; allow mtk_hal_power proc_perfmgr:dir r_dir_perms;
allow mtk_hal_power proc_perfmgr:file rw_file_perms; allow mtk_hal_power proc_perfmgr:file rw_file_perms;
allowxperm mtk_hal_power proc_perfmgr:file ioctl FPSGO_TOUCH; allowxperm mtk_hal_power proc_perfmgr:file ioctl PERFMGR_FPSGO_TOUCH;
# Date : 2017/10/11 # Date : 2017/10/11
# Operation: SQC # Operation: SQC
@ -100,6 +100,10 @@ allow mtk_hal_power proc_mtktz:file rw_file_perms;
# Date : 2019/05/08 # Date : 2019/05/08
# Operation: SQC # Operation: SQC
# Purpose : Allow powerHAL to access /proc/[pid] # Purpose : Allow powerHAL to access /proc/[pid]
# 2019/04/24 : redundant setting
allow mtk_hal_power system_server:dir r_dir_perms; allow mtk_hal_power system_server:dir r_dir_perms;
allow mtk_hal_power system_server:file r_file_perms; allow mtk_hal_power system_server:file r_file_perms;
# Date : 2019/05/22
# Operation: SQC
# Purpose : Allow powerHAL to access prop
set_prop(mtk_hal_power, mtk_powerhal_prop)

3
non_plat/property.te
View File

@ -307,3 +307,6 @@ type logmuch_prop, property_type, extended_core_property_type;
#=============mtk bt enable SAP profile property============= #=============mtk bt enable SAP profile property=============
type mtk_bt_sap_enable_prop, property_type, mtk_core_property_type; type mtk_bt_sap_enable_prop, property_type, mtk_core_property_type;
#=============MTK powerhal property================
type mtk_powerhal_prop, property_type;

4
non_plat/property_contexts
View File

@ -341,3 +341,7 @@ ro.lmk.medium u:object_r:exported3_default_prop:s0 exact int
ro.lmk.critical u:object_r:exported3_default_prop:s0 exact int ro.lmk.critical u:object_r:exported3_default_prop:s0 exact int
ro.lmk.kill_timeout_ms u:object_r:exported3_default_prop:s0 exact int ro.lmk.kill_timeout_ms u:object_r:exported3_default_prop:s0 exact int
ro.lmk.swap_free_low_percentage u:object_r:exported3_default_prop:s0 exact int ro.lmk.swap_free_low_percentage u:object_r:exported3_default_prop:s0 exact int
#=============allow processes to change powerhal config================
persist.vendor.powerhal. u:object_r:mtk_powerhal_prop:s0
vendor.powerhal. u:object_r:mtk_powerhal_prop:s0

10
non_plat/surfaceflinger.te
View File

@ -47,11 +47,11 @@ allow surfaceflinger mtkbootanimation:file { read getattr open };
allow surfaceflinger proc_perfmgr:dir {read search}; allow surfaceflinger proc_perfmgr:dir {read search};
allow surfaceflinger proc_perfmgr:file {open read ioctl}; allow surfaceflinger proc_perfmgr:file {open read ioctl};
allowxperm surfaceflinger proc_perfmgr:file ioctl { allowxperm surfaceflinger proc_perfmgr:file ioctl {
FPSGO_QUEUE PERFMGR_FPSGO_QUEUE
FPSGO_DEQUEUE PERFMGR_FPSGO_DEQUEUE
FPSGO_QUEUE_CONNECT PERFMGR_FPSGO_QUEUE_CONNECT
FPSGO_BQID PERFMGR_FPSGO_BQID
FPSGO_VSYNC PERFMGR_FPSGO_VSYNC
}; };
# Date : WK17.43 # Date : WK17.43

8
non_plat/system_server.te
View File

@ -178,10 +178,10 @@ allow system_server mtk_hal_power_hwservice:hwservice_manager find;
allow system_server proc_perfmgr:dir {read search}; allow system_server proc_perfmgr:dir {read search};
allow system_server proc_perfmgr:file {open read ioctl}; allow system_server proc_perfmgr:file {open read ioctl};
allowxperm system_server proc_perfmgr:file ioctl { allowxperm system_server proc_perfmgr:file ioctl {
FPSGO_QUEUE PERFMGR_FPSGO_QUEUE
FPSGO_DEQUEUE PERFMGR_FPSGO_DEQUEUE
FPSGO_QUEUE_CONNECT PERFMGR_FPSGO_QUEUE_CONNECT
FPSGO_BQID PERFMGR_FPSGO_BQID
}; };
# Date : W18.22 # Date : W18.22