1172 Commits

Author SHA1 Message Date
Cosmo Sung
0f5ea05394 [ALPS04968107] Error handling for RILD auto-restart
Allow rild to access MUXD property.

MTK-Commit-Id: 62289c439c81e3062c8908623706f2c02c95e3aa

Change-Id: I3a373cf8bef1da965eda3063e74670302f2cbf0c
CR-Id: ALPS04968107
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
(cherry picked from commit b6c41fe738e7f1c27dc21c64c193f07670fb8044)
2020-12-21 11:25:53 +05:30
Aayush Gupta
4bbc8ad3be mediatek: Add a README and makefiles required for inclusion
Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com>
2020-12-21 11:15:09 +05:30
Anthony Huang
4769fb0d97 [ALPS04925594] EMI: add permission to concurrency_scenario node
Add permission to concurrency_scenario node for mediacodec

MTK-Commit-Id: df9f4afc7ecdf7a62b3bd7b79de24d2cde4ebd6a

Change-Id: I3b98ddd5d5b28c9f8f46df1a5089088edc5e4991
CR-Id: ALPS04925594
Feature: DRAM
2020-01-18 10:22:18 +08:00
FY Yang
85dca927d4 [ALPS04915107] HWC: Enable write permission for ged_debug
[Detail] Enable write permission for ged_debug, HWC can adjust
         vsync offset by GED.

MTK-Commit-Id: b21be9b4241111a7713f1dc45c57d773e68f39bd

Change-Id: If0e6e0bdc53ba0a2798fa1426cda9035cc66276c
CR-Id: ALPS04915107
Feature: Engineering Mode
(cherry picked from commit f7bec518d257ab2f70ff6824bfc4633c1b8da720)
2020-01-18 10:22:18 +08:00
Cosmo Sung
285280a8b6 [ALPS04882955] Error handling for RILD auto-restart
Allow rild to set gsm0710muxd_prop properties.

MTK-Commit-Id: 69e78e1d537a72aaca2ffecf4e708c007ad2f4ae

Change-Id: Ia5974d851cae7fd86c806c4db0f7b91975822895
CR-Id: ALPS04882955
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
(cherry picked from commit c135e1fc7625cb3334278e0c9b6344bf81d46dc0)
2020-01-18 10:22:18 +08:00
Nixy Hsu
2213b28579 [ALPS04859387] gz: add nebula-ipc-dev0 sepolicy
[Detail]
set the same as trusty-ipc-dev0

MTK-Commit-Id: e5f995940b04d6bfde3760214f560d7458012700

Change-Id: I2cd96a5f196e3b1f7987e2b44ca708462e03ad06
CR-Id: ALPS04859387
Feature: GenieZone
Signed-off-by: Nixy Hsu <nixy.hsu@mediatek.com>
2020-01-18 10:22:15 +08:00
mtk07742
301f746c6d [ALPS04901917] Add getattr rule in system_server
Add getattr rule for storage_stub_file in system_server.

MTK-Commit-Id: 5a1c9e243e59f2269393b460a3e5f5c107fe3849

Change-Id: Iebad699b45a87b13e9d0b7079b3e985a87c8cca9
CR-Id: ALPS04901917
Feature: [Module]SystemServer
2020-01-18 10:22:14 +08:00
Lokesh Tripathi
3f78717205 [ALPS04888892] Bootanim selinux policy update
AEE_Warning Infinite-loop due to bootanim se_linux warning
System is in the terrible slow status, it is always reproduce
and cannot be recover when restarting system

MTK-Commit-Id: 4b2baa60941648e69063ecad0018e9c91c71253c

Change-Id: Ib80ee53ae09de42439a1851008a9884c006b707e
CR-Id: ALPS04888892
Feature: Boot Animation
2020-01-18 10:22:13 +08:00
xj wang
954e2fb5b7 [ALPS04897935] Sensor: fix VtsHalSensorsV2_0 fail
Add selinux permission to fix VtsHalSensorsV2_0Target
fail in vts_10.0_r2.

MTK-Commit-Id: 31032858c56fe57e0ec9972f0e1e67beb109d73a

Change-Id: I88c2f9878e96c7296759c03da8f18e5ecad39834
Signed-off-by: xj wang <xj.wang@mediatek.com>
CR-Id: ALPS04897935
Feature: Sensor Hub
2020-01-18 10:22:10 +08:00
Shanshan Guo
a18280258a [ALPS04897291] SEPolicy: Remove unused SEPolicies in prebuilts/ & private/
[Detail]
SEPolicies in prebuilts/ & private/ are unused.

[Solution]
Remove unused SEPolicies in prebuilts/ & private/

MTK-Commit-Id: b6fc2058aa96db7a6a3cf527da2aa402081e0246

Change-Id: I37373defdb00a4ac65f67e722b9320724e8bf92a
CR-Id: ALPS04897291
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:22:09 +08:00
Eric Chung
bd213b5098 [ALPS04838214] GPU: Enable SPHAL for GPUD
[Detail]
Enable SPHAL for GPU debugger in "r_non_plat"

MTK-Commit-Id: fe19a6c711597969f44251858d63aa8b96d5e7a3

Change-Id: I9bb43c8ea89e19945f1a365441689cbd35c66d66
CR-Id: ALPS04838214
Feature: OpenGL|ES
2020-01-18 10:22:08 +08:00
mtk07742
a362bc838a [ALPS04864529] Add rmdir rule for sf_rtt_file
Add rmdir rule for sf_rtt_file in system_server.

MTK-Commit-Id: 17998fb6c488974f0318f5a08e69e9e4cc1cef7e

Change-Id: If982b6d738d00affd2997691477ad67e8edf1fee
CR-Id: ALPS04864529
Feature: [Module]SystemServer
2020-01-18 10:22:07 +08:00
Jack-TC Lin
90aef177b8 [ALPS04814143] sepolicy for ATMs
[Detail]
for atms tuning

MTK-Commit-Id: 23f599db22fcc34548ad014c9a666c5b5cf9ea10

Change-Id: I4d0eb60fc67379658d81d8d88ecc46c07d4695f6
CR-Id: ALPS04814143
Feature: Camera Application
2020-01-18 10:22:04 +08:00
xin xu
6bb6ee6315 [ALPS04872217] ccci: after reboot, world mode id is wrong
add selinux sepolicy for ccci_mdinit.

MTK-Commit-Id: 159e957b1e591199fd6eab7ef0f09a8de47dfcdc

Change-Id: Ie0dbea1df8f655466fc63a4ac1eb1556563d9f16
Signed-off-by: xin xu <xin.xu@mediatek.com>
CR-Id: ALPS04872217
Feature: Modem Interface Driver
(cherry picked from commit 81d022e7e97d55d330e0a7bcf0885b63e2391e7b)
2020-01-18 10:22:04 +08:00
vend_mcd_am070
37c8952830 [ALPS04860912] Switch USB3.0 in EngineerMode
Switch USB3.0 in EngineerMode

MTK-Commit-Id: f40908497f08881a147016a60bf9f826a43f3ddc

Change-Id: I23a28ff07e19d02c0910171fc995cbdba6cfa038
CR-Id: ALPS04860912
Feature: USB 3.0 Device
2020-01-18 10:22:03 +08:00
Jun Wang (王军)
05b6acb923 [ALPS04870741] GPU: Add selinux policy for gpuservice (Revert)
[Detail]
Add selinux policy for gpuservice for gts issue
GtsGraphicsHostTestCases---com.google.android.graphics.gts.VulkanTest#checkVulkan1_1Requirements

This reverts commit b36a0ce9d20b7e39b4c932335842a861b00f676e.

Reason for revert: The GTS fail is not caused by sepolicy.

MTK-Commit-Id: 11cd557fb681b511edfbbf9bd363d75856a7dc2d

Change-Id: Iae1618bf7d91b324444affd3b11037a0340fc369
Feature: Vulkan
CR-Id: ALPS04870741
2020-01-18 10:22:00 +08:00
MY Chuang
945b222419 [ALPS04824757] mrdump: fix ioctl sepolicy
1. mrdump_tool was blocked by sepolicy by ioctl actions.
2. add 4 more items
   - FS_IOC_GETFLAGS
   - FS_IOC_SETFLAGS
   - F2FS_IOC_GET_PIN_FILE
   - F2FS_IOC_SET_PIN_FILE

MTK-Commit-Id: 926484c7b945397752926c9a605e3e2cd4b7ae19

Change-Id: Idadd2f3a2525a3cff8bd8a7b91c8dc76f2482546
CR-Id: ALPS04824757
Feature: Memory RAM Dump (MRDUMP)
(cherry picked from commit 81c51be3cfd29de37b3d4a02072813a4b4f25fa6)
2020-01-18 10:22:00 +08:00
swintegrator
ba675f90bd [ALPS04879324] SELinux sepolicy for TEEI OS communication Adjustment
Because teei_client_device and mobicore_user_device belong to BSP project,
we need to move SELinux sepolicy from BASIC to BSP project as well.

MTK-Commit-Id: f33102728ebc2c0969605800d73558741c3f0732

Change-Id: Ib9f8a68bde615593d971220655edb3bb9e83e3af
CR-Id: ALPS04879324
Feature: Secure Facial Recognition - 2D Sensor
2020-01-18 10:21:59 +08:00
Shane Chien
1c8313c394 [ALPS04824504] Audio: Add permission for rt5509 SmartPA
Add permission for rt5509 SmartPA to access device node.

MTK-Commit-Id: 2dcda2ed6418dc8c60f0e696e31fde0642b53554

Change-Id: I1c08f0aff93f8984a685b70374f434972d5b7c8c
CR-Id: ALPS04824504
Feature: Phone Sound
2020-01-18 10:21:55 +08:00
Jun Wang
7e16e3c233 [ALPS04870741] GPU: Add selinux policy for gpuservice
[Detail]
Add selinux policy for gpuservice for gts issue
GtsGraphicsHostTestCases---com.google.android.graphics.gts.VulkanTest#checkVulkan1_1Requirements

MTK-Commit-Id: b36a0ce9d20b7e39b4c932335842a861b00f676e

Change-Id: I163153bc1a9f1b8ebef6cb7dc2224e4a70762394
Feature: Vulkan
CR-Id: ALPS04870741
2020-01-18 10:21:55 +08:00
mtk80905
4312a6125a [ALPS04752203] Add vendor permission for fastbootd sepolicy enable
Google patch system/sepolicy/private/domain.te
Vendor sepolicy device/mediatek/sepolicy/basic/non_plat/fastbootd.te

MTK-Commit-Id: c793f3c90651b1fd483621e5795e41cf91cdf63e

Change-Id: I998679ac71c6018fc5f0305226bd73f91fd3f27e
CR-Id: ALPS04752203
Feature: [Android Default] Fastboot
2020-01-18 10:21:55 +08:00
Huaiming Li
812b6fe928 [ALPS04864227] add selinux rules for fixing system API dump issue
1. allow domain process can use fd
2. allow domain process can write data to file in /data/vendor/aee_exp/

MTK-Commit-Id: 7b021c62aa51a474e12c59a805f97b27b940e357

Change-Id: I286e248c8fd3fe05492753a91806c19ffce0079d
CR-Id: ALPS04864227
Feature: Android Exception Engine(AEE)
2020-01-18 10:21:51 +08:00
mtk13668
0b22c77f8b [ALPS04863179] Add postproc hidl
[Detail]
Add postproc hidl for swnr or
other post-processing.

MTK-Commit-Id: ef1b5ff20dddeed7b56de5d2a5c867e0d6a6790b

Change-Id: I8c81b35db478a6ab2aafea30e7dfff184033f692
CR-Id: ALPS04863179
Feature: [Android Default] Camera Application Basic Functions
2020-01-18 10:21:51 +08:00
Marcus Huang
51fa64d7f5 [ALPS04760813] Remove high risk SEPolicy
Remove it first; user has to add it back later with specified file.

MTK-Commit-Id: b01231f987504c3e0826537cb126f7a4c5cfe715

Change-Id: I03a2ffd9b109f8712fc2c7b37cf335ba0f1daadc
CR-Id: ALPS04760813
Feature: H.264 Encoder
2020-01-18 10:21:51 +08:00
yuhui.zhang
559ce8e777 [ALPS04859964] EM: Add sepolicy to access NVRAM
[Detail]
Make EM BT functions have right to access NVRAM

MTK-Commit-Id: 48b88d77cbc4334a61b5ae0cabcfd296fc3a699d

Change-Id: Ib82b72c26068ea8cd09a170d252089885d9c7fb0
CR-Id: ALPS04859964
Feature: Engineering Mode
(cherry picked from commit 257e62c385534b7690039f7a8dc9436b8d4d63ef)
2020-01-18 10:21:47 +08:00
mtk07742
5a781306fb [ALPS04855246] Add rules in system_server
Add search rule for proc_chip and setsched rule for zygote in system_server.

MTK-Commit-Id: e6b2c39860f7cb83d54f1c01b9fe90969d8ede3b

Change-Id: If7fb47b1873a688b047a919eb726e18f4daadc19
CR-Id: ALPS04855246
Feature: [Module]SystemServer
2020-01-18 10:21:47 +08:00
Huaiming Li
2341e2e16c [ALPS04849010] move plat_private add_aedv contexts
1. move plat_private aee_aedv contexts to non_plat/file_contexts
2. move plat_private aee_aedv contexts to r_non_plat/file_contexts

MTK-Commit-Id: 8b60b4707b32707c8ada4ebc5effdb47627d00df

Change-Id: Ie307e1938dd9afbf0f87b166f91397fd5431f9fb
CR-Id: ALPS04849010
Feature: Android Exception Engine(AEE)
2020-01-18 10:21:46 +08:00
mtk07742
fb38f20512 [ALPS04828168] Add rule in system_server
Add sigkill rule for mtk_hal_camera in system_server.
Add syslog_read rule for kernel in system_server.

MTK-Commit-Id: b93c75273e790203d9f616718cda12d47ef0f968

Change-Id: Ic25e92dc2897a238c328eef4bdbab990fe598c00
CR-Id: ALPS04828168
Feature: [Module]SystemServer
2020-01-18 10:21:42 +08:00
Shanshan Guo
9eeda9d646 [ALPS04833608] SEPolicy: Add specail SELabel for atag,chipid
[Detail]
It has risk for allow process to get permission of atag,chipid
by using u:object_rsysfs:s0
To avoid that, need to add specail SELabel for atag,chipid

[Solution]
Add specail SELabel for atag,chipid

MTK-Commit-Id: b727ba4e2b59c1dbe59f5e1d9f6b9c5d94c5ffad

Change-Id: Ibaf69f387015790c657783bb1234e584e56f67aa
CR-Id: ALPS04833608
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:21:42 +08:00
Huaiming Li
9e3351da5a [ALPS04758557] fix aee high risk rules
1. fix some high risk rules

MTK-Commit-Id: b9c316d9b87f36e958f56273ffec3d6556639bdd

Change-Id: I093cccaa98e2a157da359ef2ebf43134f86ddad2
CR-Id: ALPS04758557
Feature: Android Exception Engine(AEE)
2020-01-18 10:21:42 +08:00
Shanshan Guo
ffa4ed5121 [ALPS04833608] SEPolicy: Add specail SELabel for /proc/chip
[Detail]
It has risk for allow process to get permission of /proc/chip by
using u:object_r:proc:s0
To avoid that, need to Add specail SELabel for /proc/chip

[Solution]
Add specail SELabel for /proc/chip

MTK-Commit-Id: 84d8e9654281e4f7ee8a602e91084c320feff658

Change-Id: Ia6d4be26491fa11f81734cbb80b0b98b2b88f64a
CR-Id: ALPS04833608
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:21:38 +08:00
Sheldon Wang
1482d6d9af [ALPS04817575] Add system property only for MTK system image
[Solution]
When run VTS test, theres no WOS module due to its AOSP system image.
So we need to skip the edpg related function.

MTK-Commit-Id: 8f8e5faded18d6bcee1eb96dba37a2d708f3995f

Change-Id: I9cee39eea1dd75bccf6cc442f16ed3fe4e72ae95
CR-Id: ALPS04817575
Feature: WiFi Calling Service
2020-01-18 10:21:38 +08:00
mtk07742
e164a5e7e6 [ALPS04820462] Dontaudit read rule for sdcardfs
Dontaudit read rule for sdcardfs in system_server.

MTK-Commit-Id: 9692c06e36b398d98c8855bd936595c10a6f2116

Change-Id: I0740e40e1476f6699f6f92e648b3d7ea718cb66d
CR-Id: ALPS04820462
Feature: [Module]SystemServer
2020-01-18 10:21:37 +08:00
Huaiming Li
cd6459c6ee [ALPS04758557] fix aee high risk rules
1. fix some aee high risk rules

MTK-Commit-Id: 4031a4610757debf0aa0de48408c72517fd61bcb

Change-Id: I637d723cba54ba7119d15617bd2935a4b00dd6c5
CR-Id: ALPS04758557
Feature: Android Exception Engine(AEE)
2020-01-18 10:21:37 +08:00
Wei Fu
31121b1e5d [ALPS04843717] Revise SE Linux policy
Revise SE Linux policy, avoid using socket_device.

MTK-Commit-Id: 93924c0432a94d66682827dd9e5ee9020f10decb

Change-Id: Iad72e8ff6144be73d32c3d27bd31b830900d07a3
CR-Id: ALPS04843717
Feature: [Module]ATCI (AT Command Interface)
2020-01-18 10:21:33 +08:00
xiao.liu
222d04459c [ALPS04840835] Remove all vendor sepolicy for fastbootd
[Solution]
1. remove sepolicy for native partition erase permission
2. remove AB partition sepolicy, leave it to Google solution

MTK-Commit-Id: 0476e00269accaf247550928cc72c010f99787c1

Change-Id: I67ab4363307a69b5a94a0242c12750bc94670344
CR-Id: ALPS04840835
Feature: [Android Default] Fastboot
2020-01-18 10:21:33 +08:00
mtk07742
9487dd3031 [ALPS04827489] Add sys_module rule in systemserver
Add sys_module rule for self in systemsever.

MTK-Commit-Id: fac8a7d0dec7f3316c1127928a564e2b0009313e

Change-Id: I48692ee2ee74a7863e9b8a7b69356df0177fef5d
CR-Id: ALPS04827489
Feature: [Module]SystemServer
2020-01-18 10:21:33 +08:00
Huaiming Li
df5012bc21 [ALPS04825820] change selinux rule for engineermode
1. change aeev.dal to aee.dal in engineermode

MTK-Commit-Id: 47758681e9ad97de7c423fad0ee2e7a9c4e21cf0

Change-Id: Ifc4bdf0535f6aff02bd5d42c7a5a73acb104875f
CR-Id: ALPS04825820
Feature: Engineering Mode
2020-01-18 10:21:29 +08:00
Ian-Y Chen
96de8c54ba [ALPS04838812] power: add boot_mode policy
[Detail]
There is SE Linux warning when system server
uses perf lock api

[Solution]
Add sysfs_boot_mode permission

MTK-Commit-Id: ab3e875f72f0ec5a55cb7682d6ac4a21f6dfe6dc

Change-Id: Ifd9c2acb54022de9297f7c7b62516a58fdf1c25b
CR-Id: ALPS04838812
Feature: [Module]PowerHAL
2020-01-18 10:21:29 +08:00
Chalos YL
8af759bcb1 [ALPS04821745] Add sepolicy for mediacodec
Codec using /proc/m4u have not permission to perform cmd 0x671a
(MTK_M4U_CONFIG_PORT ARRAY)

MTK-Commit-Id: edb1f46ed2152cbc05d0e91873283363ea5c39ad

Change-Id: I8c2b91cf92ad2b13ba62d88affc31f21c193d2d5
CR-Id: ALPS04821745
Feature: H.264 Encoder
2020-01-18 10:21:28 +08:00
Will-SL Chen (Will Chen)
c0f2c27d28 [ALPS04821785] Add sepolicy permission
[Details]
Add sepolicy permission for ISP HIDL

MTK-Commit-Id: 469a87485629718c725aae81537ce5cc7295105a

Change-Id: Id5a56581f726defcf527b2eefc184524cd0c5779
CR-Id: ALPS04821785
Feature: [Android Default] Face Detection
2020-01-18 10:21:25 +08:00
Juju Sung
939dbae537 [ALPS04823486] selinux: export fingerprint property
coredump tool needs to expose system and vendor image
fingerprint to know the relative version info.

MTK-Commit-Id: e8794c35f056dfeb20c0dff8b8aa506bd938fbd6

Change-Id: I009e10ccc8838b032d2192055fe1defcf81cebee
CR-Id: ALPS04823486
Feature: Android Exception Engine(AEE)
2020-01-18 10:21:25 +08:00
mtk07742
42a61b8bae [ALPS04821191] Add rules in system_server
Add rules for proc_wlan_status and sysfs_pages_shared and
sysfs_pages_sharing and sysfs_pages_unshared and sysfs_pages_volatile.

MTK-Commit-Id: 7c7249f4597a69f068100da07e2773962c0bdba7

Change-Id: I6a3d7823295fd19b934ac0a28bef1f14ca8de2fa
CR-Id: ALPS04821191
Feature: [Module]SystemServer
2020-01-18 10:21:24 +08:00
Eric Chung
a754653a61 [ALPS04816302] GPU: Enable SPHAL for GPUD
[Detail]
Enable SPHAL for GPU debugger

MTK-Commit-Id: c762a93f7586279bf5d9e7f76b3aab12a20acac3

Change-Id: I794cae14228a716aa099c22d06804d56c363c449
CR-Id: ALPS04816302
Feature: OpenGL|ES
Signed-off-by: Eric Chung <eric.chung@mediatek.com>
2020-01-18 10:21:20 +08:00
mtk07742
4971775314 [ALPS04811125] Add getattr rule in system_server
Add getattr rule for mddb_filter_data_file in system_server.

MTK-Commit-Id: 839f2b7648dbd15dcabd9bf2c4021d57867b2649

Change-Id: I05012778bcb29ea2ecbafd0ea946d8a7c7605bae
CR-Id: ALPS04811125
Feature: [Module]SystemServer
2020-01-18 10:21:17 +08:00
mtk07742
a4100ab1fd [ALPS04813229] Add perms in systemserver
Add permissions in system_server.

MTK-Commit-Id: 88c1d92c05bba929078a3f4a7b2dceb7a56e0982

Change-Id: I42eafa73df5bf9227d0c21e2dd32710574093314
CR-Id: ALPS04813229
Feature: [Module]SystemServer
2020-01-18 10:21:16 +08:00
gtk_qingyunmei
b1003a58cc [ALPS04816830] add hal mms sepolicy
add system_app policy

MTK-Commit-Id: 733342cdf392dd669201a6030ec7fa7cf4af58db

Change-Id: I6ecdc3b4d20f0b1018e3ef8a2f2a15118c3dfc6b
CR-Id: ALPS04816830
Feature: MiraVision
2020-01-18 10:21:16 +08:00
mtk07742
581161d905 [ALPS04813157] Add read rule for aee_prop
Add read rule for debug_mtk_aee_prop in system_server.

MTK-Commit-Id: e7f4b639476e390d3371f2e544c85e73300e0f1b

Change-Id: I63d7e6fa1a64ee41462f7e4be035525bd534a231
CR-Id: ALPS04813157
Feature: [Module]SystemServer
2020-01-18 10:21:15 +08:00
mtk07742
164ae5b2bd [ALPS04809091] Add search rule for battery_cmd
Add search rule for proc_battery_cmd in system_server.

MTK-Commit-Id: b40e8c7371e8aaea6e9587a394f2f6b53c258cd4

Change-Id: Ibe9186c1d1127daa88fd2e984e5c0c1512f2196d
CR-Id: ALPS04809091
Feature: [Module]SystemServer
2020-01-18 10:21:14 +08:00
Robbin Chiu
734efb5717 [ALPS04763245] WMT: Fix sepolicy issue
[Solution]
Remove SEPolicy rules to fix
high risk sepolicy issues for stp_dump and wmt_loader

MTK-Commit-Id: 00ea2a4d222547ba0872c93521de79b8cb26673f

Change-Id: I8b31383f55f1075488a55c406ecd08bd5b3249af
Signed-off-by: Robbin Chiu <robbin.chiu@mediatek.com>
CR-Id: ALPS04763245
Feature: [Module]WMT Driver
2020-01-18 10:21:11 +08:00