11 Commits

Author SHA1 Message Date
dengwei.xu
57ee420c72 [ALPS03984881] EM telephony SIB capture support
Add the new selinux rights support

MTK-Commit-Id: 31147b1027de480ab0b3379a008813351049e342

Change-Id: Ia07ca66917911ce7e8a7e6d76c9c4137c1cd5cf2
CR-Id: ALPS03984881
Feature: Engineering Mode
2020-01-18 10:02:13 +08:00
Juan Rong
d18a53f680 [ALPS03886705] EM:hardware-testing SELinux
[Detail]
Fix EM hardware-testing SELinux issue
 1. power->PMU read
 2. power->debug_log
 3. audio->detect headset
 4. memory->flash
 5. touchscreen->settings
 6. AAL get/set prop

MTK-Commit-Id: 5a00b957045b7a83722c4f6d2f926b38d9625342

Change-Id: I781c756404015997d130a342d123f8cdb8f33810
CR-Id: ALPS03886705
Feature: Engineering Mode
2020-01-18 10:01:41 +08:00
mtk12101
b086e609ac [ALPS03825066] Remove unused sepolicy
[Detail] Because "ro.vendor.net.upload.benchmark.default"
is unlabeled property, so all use it will have name of
vendor_default_prop

[Solution] Need owner to relabel the property of
"ro.vendor.net.upload.benchmark.default"

MTK-Commit-Id: 3a772e2b252536c9bbe9829b75f3464c2df68248

Change-Id: I42f341bf01cea16a16a0e73d13e0c03b5c270dad
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:50:11 +08:00
mtk12101
78d7f51370 [ALPS03825066] Fix boot fail
[Detail] System processes have no permission to access
vendor_default_prop

[Solution] Add get vendor_default_prop rule for system
processes

MTK-Commit-Id: 412119fb578fc32e9f046c09a13817cf3c755515

Change-Id: I791997e6bb44c61b69d32c6da0cc80c6f2a9759e
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:47:42 +08:00
yuhui.zhang
9ac183515e [ALPS03914002] Rollback em_svr sepolicy
[Detail]
Rollback em_svr sepolicy for batter log

MTK-Commit-Id: 4fe23a474c239cf857345683f5469b44b1235115

Change-Id: I544d450421d375abd91e180552cdf1d1c7a3dc06
CR-Id: ALPS03914002
Feature: Engineering Mode
2020-01-18 09:47:24 +08:00
yuhui.zhang
d442f052ed [ALPS03914002] Add property sepolicy rules
[Detail]
Add property sepolicy rules for EM

MTK-Commit-Id: 33df3c32e9e188bb4f236aac89468a932c35aa5b

Change-Id: Iac21945023892e8cfa9bec9e21bbaf70cbe547dc
CR-Id: ALPS03914002
Feature: Engineering Mode
2020-01-18 09:46:58 +08:00
mtk12101
c7ac9f171a [ALPS03825066] Resolve build error
[Detail]
1.Google add new neverallow rule for untrusted apps
2.The file/dir in /proc must associate with proc_type

[Solution]
1.Remove rules which violate google neverallow rules
about untrusted apps
2.Add proc_type attribute for file/dir on /proc

MTK-Commit-Id: b94412725e3a7b18db9573056c2fb43367989ed5

Change-Id: I89de16a65f05d052969c794604b9c372ed1ce7e1
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:38:47 +08:00
yuhui.zhang
5aa62a3b04 [ALPS03860173] Modify em_svr SEPolicy
[Detail]
Modify em_svr SEPolicy to support Android P

MTK-Commit-Id: bb10076f302a7f07d7fabb0b281a01ff3694efb6

Change-Id: Ic56cf6be0f82d0c146cdeebbc85ed00958577aff
CR-Id: ALPS03860173
Feature: Engineering Mode
2020-01-18 09:30:40 +08:00
Bo Ye
3ace839be3 [ALPS03825066] Mark file context to fix build fails
Restore the policies accessing files labeled
    as proc_xxx or sysfs_xxx, but there are some
    exceptions for coredomain process, such as
    meta_tst,dump_state,kpoc_charger

MTK-Commit-Id: 7953b5203bb3cac099c3326d330643b4cd73746d

Change-Id: I4b16c09c352891783e837bea370c264966ca6d13
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:29:41 +08:00
Bo Ye
5849c224e3 [ALPS03825066] P migration selinux build failed fix
1. Mark polices which accessing proc/sysfs file system
    2. Add violator attribute to modules violate vendor/system rule.

MTK-Commit-Id: 3954cad7a1428cda694d8428c2235a78aa6e7cc8

Change-Id: I401ae5b87eb9a03f324bef83c6678149606b15a8
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:29:36 +08:00
Chunyan Zhang
37e0caa36e import from mediatek/master to mediatek/alps-mp-o1.mp1
Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79
MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
2020-01-18 09:29:32 +08:00