[Detail]
Factory mode tool for NFC only works with SElinux disabled.
[Solution]
Update NFC stack to latest release W48p0.
Create the communication socket into data/vendor and apply
a specific SElinux label.
MTK-Commit-Id: 910948f163c96cac14494e5951c504e63a3334ee
Change-Id: I9b89e828e344041ef5bb464cc872f442490a6e2a
CR-Id: ALPS04190424
Feature: NFC Chipset Capability
Add Trusty Keymaster 3.0 HIDL service to replace the legacy HAL
MTK-Commit-Id: 4acd1a3c87012bbf678dd59d74764481aceab5ae
Change-Id: Ib6b300c6a5fe3cd709896b31daa8a684d6b8b795
CR-Id: ALPS04087631
Feature: Google Trusty
1.move-widevine-data.sh is for OTA upgrading from android O
to P, new android P device dont need this rules
2.Google cts/gts/vts will check data_between_core_and_vendor_violators,
add the rule on P device, the test case will fail
MTK-Commit-Id: d4e56774e28b4a5efab572c9c8b25e134988244b
Change-Id: I04c0233ea6cc1dff9b3fdd35441f95605519b454
CR-Id: ALPS04080007
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
Spending more bootup time after label kernel interface node
in file_contexts, there is another way to label kerner interface
node on genfs_contexts file. When move the label rule to
genfs_contexts file, the bootup time will speed more than 500ms.
MTK-Commit-Id: e237c9367e74f2953b843cc9224a98b4e7cfddbc
Change-Id: I1a1e369c3eaaf359c3bf7c051793a3ffba4c71fc
CR-Id: ALPS04017619
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
Implement android.hardware.secure_element@1.0 for MTK UICC.
MTK-Commit-Id: d47f7e07b9396583e71a51c4b5da0282d9abf73b
Change-Id: Ib5ebb2543a100f95d9fb2cab8f5aef9c511d463d
CR-Id: ALPS04013153
Feature: NFC Open Mobile API
[Detail] aee_aedv_exec is defined in system.img, and when AOSP system.img
is replaced, cts will fail if aee_aedv_exev is referenced in vendor.img.
MTK-Commit-Id: 178b71c788561cea1336d2c62b67dd324ecf6e8b
Change-Id: I200ff7cd55597de05d5412677b140809e941a192
CR-Id: ALPS04056497
Feature: Android Exception Engine(AEE)
Remove policy for sysenv_daemon, which is removed in Android P
MTK-Commit-Id: adbf02af5663fc468c7b892a33b4a03ec53a948f
Change-Id: I1653bef4c9b0f9a2b7022f8895b89de0c3373148
CR-Id: ALPS04056547
Feature: [Module]Partition
Widevine provides a script in /vendor/widevine/
libwvdrmengine/move_widevine_data.sh that copies
the data files from /data to /data/vendor. Some
sepolicy rules are required to enable the device
to run this script.
MTK-Commit-Id: f7aba378699fc68e4e10ed2ed2b812c1e502e66f
Change-Id: I2731ad21da180a1a5f927c5631dcc579da1dc314
CR-Id: ALPS03982747
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
[Detail]
Add sepolicy access right for Hifi3 adsp device.
Mobilelog and AED will need these access right.
MTK-Commit-Id: 06ac39d7cebbab2bcb3468fcf14f19b7e1489819
Change-Id: Ic834ac687b4423500ef6036824a6d6f75e57ccb3
CR-Id: ALPS03738758
Feature: [Module]Audio OpenDSP
[Detail] phase out the feature of dumpstate hal service
MTK-Commit-Id: 01cf5ccf1d3b626c8efc1d1d08aa008a6864ba34
Change-Id: I0dd5aaa157d2a91feb5af63f0b5588549c20f8ed
CR-Id: ALPS04022196
Feature: Android Exception Engine(AEE)
[Detail]
libGLES_mali.so depends on libm4u.so on mali GPU.
Surfaceflinger needs libGLES_mali.so, but it cant access normal vendor lib.
[Solution]
Change libm4u.so file label from u:object_r:vendor_file:s0 to u:object_r:same_process_hal_file:s0.
MTK-Commit-Id: cb147e1fb1711d5fea686b3f11d90b60829f1953
Change-Id: I73a0bab2188aa7d2f7f7c488f8377bc8b34af24c
CR-Id: ALPS04007267
Feature: OpenGL|ES
(cherry picked from commit baec3fff9cc025f8131f0fb461400591b8156632)
[Detail]
Add poilcy for update_engine and vbmeta so that A/B
system update can work well.
MTK-Commit-Id: de7ad7a48111b4e02f042600c6e65484d03ac87f
Change-Id: I79346615ad1be4c5ea33343c1fce73c22be1f82f
CR-Id: ALPS03783870
Feature: Secure Boot
[Detail]
SEPolicy rule that put in plat_private folder will be placed in system image.
So, It will be overwrited after flashing GSI.
[Solution]
Move MTK rules to non_plat folder instead which will be placed in
vendor image.
MTK-Commit-Id: 91e5023b67f0ce18e5e364adce5da5413c71fc69
Change-Id: I372b059e44c4bbfd6d4a92a790846b2228213b88
CR-Id: ALPS03998186
Feature: Treble
Google add hidl 1.1 clearkey implementation on Android P, and legacy
clearkey still exist on AOSP, on the new version 4778823 vts, it will
check both legacy and hidl clearkey funtions. So it need add to support
both types clearkey implementation to pass new vts on Android P.
MTK-Commit-Id: 229c445c3da9c4300c2586b9888a3205fe824484
Change-Id: I5488b591fc55526c7c6ae1c2516dc851ae4deb24
CR-Id: ALPS03916902
Feature: Google Widevine Level3
(cherry picked from commit c28dee0c4ab1cd7c6327f073ec9229e18b1166d3)
