NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,152 Commits 2 Branches 0 Tags
Commit Graph

29 Commits

Author SHA1 Message Date
Aayush Gupta
22380a4614 non_plat: Label /dev/tee* and grant required perms to domains 
/dev/tee* are accessed by domains that interact with TEE and thus
require access to them too.

Test: Boot and observe that denials are not visible in logs anymore

Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com>
Change-Id: I7b0944a1063da8561d2928e4110674ce4845ecea
 2020-12-30 17:00:34 +05:30
Aayush Gupta
0e29840d66 non_plat: Allow mtk_hal_camera rw perms for seinf device 
Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com>
Change-Id: I4fe395de1e4c392d1f89a5976d3639fea3b7daab
 2020-12-30 10:11:35 +05:30
Aayush Gupta
7a0a7ea6a5 non_plat: Label /data/vendor/camera/ and allow mtk_hal_camera create perms 
Camera data files are store in /data/vendor/camera/ by camera hal on
treble devices. Label and allow mtk_hal_camera to manage it.

Denial observed without this change:
[   17.686535] .(4)[399:logd.auditd]type=1400 audit(1609114842.280:303): avc: denied { getattr } for comm="camerahalserver" path="/data/vendor/camera/back_dual_camera_caldata_wt.bin" dev="sdc46" ino=2490446 scontext=u:r:mtk_hal_camera:s0 tcontext=u:object_r:vendor_data_file:s0 tclass=file permissive=1

Test: Boot and notice denial has disappeared

Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com>
Change-Id: I98d0ddcce95cccdb9e86c4d36cb692e1f1ff41cb
 2020-12-30 10:10:31 +05:30
Aayush Gupta
9a3e56224e non_plat: Introduce new label for setting mtk specific camera properties 
Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com>
Change-Id: I1ce016d9e3a9cb7cda1170c830c7edd327528610
 2020-12-28 00:39:45 +05:30
Haojie Li
5e81b738ca [ALPS04475916] D2+ Add M4U SELinux Permission 
[Detail]
add selinux permission for camera

MTK-Commit-Id: f21aac620680035891c6cab33de49a2c02f659eb

Change-Id: I4a0134dda8c8411be3bb2c3a9c69f1e91803a91e
CR-Id: ALPS04475916
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:20:59 +08:00
otis.huang
ae6fbad5e9 [ALPS04387792] BGService: add sepolicy permission 
[Detail]
1. add BGService sepolicy permission

MTK-Commit-Id: f5832af535feb84ff9f94ae25eb02fc6f5959762

Change-Id: I22a1e8d6e17a2f455771adf677d2ce8cb32e6550
CR-Id: ALPS04387792
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:20:04 +08:00
mtk10721
24cdf7e61e [ALPS04758146] fix selinux 
[Detail] ioctl is not allowed

[Solution] Fix it

MTK-Commit-Id: 92a8921309a104dab501f57264e8939a57df0c30

Change-Id: I670513bdc93979217ea068b0aca61e1bda11364f
CR-Id: ALPS04758146
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:19:25 +08:00
Mike Hsieh
cff428b385 [ALPS04702268] Change sw_sync permission for 3rd party app access 
Change sw_sync permission for 3rd party app use.

MTK-Commit-Id: 756f028f822b28e5863c772c977f3fdfad1eb338

Change-Id: I5f1f4566e8d60b16fd300dc91ddba8cc6aa7e5c4
CR-Id: ALPS04702268
Feature: [Module]MDP Driver
(cherry picked from commit 8d036ea19e62d9f509f1c54d395d4a711b4a4bd7)
 2020-01-18 10:18:34 +08:00
Josepchi Tsai
fdb2a25c84 [ALPS04429330] Cam: Fix secure camera selinux issue 
[Detail]
Add permission.

MTK-Commit-Id: 8ba94b2e2ca90a6130f9cec123bbbe385f8b0ecc

Change-Id: I8419705a9c4133564ed71f7fed5c0ccbdb584ffe
CR-Id: ALPS04429330
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:16:59 +08:00
Mike Hsieh
dc6c9adc15 [ALPS04672388] Change selinux permission for MDP user 
Change selinux permission for MDP user on /dev/mdp_sync

MTK-Commit-Id: a9c03563cf5e96815399788228dc62d18d88026e

CR-Id: ALPS04672388
Change-Id: I3622da7b8ba4151f9cf79e9d4d9c8f73109ef684
Feature: [Module]MDP Driver
 2020-01-18 10:16:18 +08:00
Shanshan Guo
62cf1a413a [ALPS04639771] SEPolicy: Modify workaround 
[Detail]
There is a workaround for bring-up,
now it needs to be modified.

[Solution]
1.Split workaround to sepcial *.te
2.Modify ged sepolicy
3.Modify mistake
4.Add sepolicy

MTK-Commit-Id: 5a2b7e3fdc826a7ca6bc70a3810f14c1661e7d79

Change-Id: I0894de45e014a5eae754e35b57fbc9b21bc4bf90
CR-Id: ALPS04639771
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:15:29 +08:00
Wilson Fan
5d35b26aba [ALPS04641674] Flashlight: add flashlight sepolicy in basic 
[Detail]
Add flashlight device sepolicy in basic

MTK-Commit-Id: ad0aff2ace102a539e4c43b1b0d72257596ab45d

Change-Id: I5676a830af246c3856bd8ed26d5e79973abc33d1
CR-Id: ALPS04641674
Feature: [Android Default] Flashlight
 2020-01-18 10:15:00 +08:00
Lovefool Tai
5deaf73ab0 [ALPS04643911] Fix cameraserver permission GED_IO 
[Detail]
To solve the kernel dump message when switch to stereo mode.
Enable the capability of mtk_hal_camera about GED_IO.

MTK-Commit-Id: 88e25a18c125c57a1bbf5c40102ef604f556be95

Change-Id: Ia5a462a2264e2b2ed68090c5ce2e24d5f21d9423
CR-Id: ALPS04643911
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:14:29 +08:00
Max Tseng
4973f6afc9 [ALPS04400468] Fix build error for AINR sepolicy 
[Detail]
Build error due to miss ;

MTK-Commit-Id: 9ff79edcad3b00db3ed3143b62a5078a8765f3de

Change-Id: Idccb173c592417bd36bc71c096b21c1f255204d4
CR-Id: ALPS04400468
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:12:15 +08:00
Max Tseng
e90d91bd45 [ALPS04400468] Sepolicy : AINR Thermal Boost 
[Detail]
Improve AINR performance, to remove Thermal Restriction

MTK-Commit-Id: 3c332337e985649df2d23d0077356c2b9af0b3de

Change-Id: I913184e1cb97d3b750d57bf23ebdd6e86f7e8bd0
CR-Id: ALPS04400468
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:12:15 +08:00
jamy.tseng
142bfb6b36 [ALPS04421353] MtkCam: modify sepolicy for jpeg 
[Detail]
add ioctl for camerahalserver jpegnode
jpegnode need to control jpeg io

MTK-Commit-Id: c1adc06defb2aab6e9402f45c0f2b92bcfa83a5e

Change-Id: Ie8f65b38133fc46b3a46e3ed04b42d6f09ad13cc
CR-Id: ALPS04421353
Feature: Cshot (Continuous Shot)
 2020-01-18 10:11:44 +08:00
HungWen Hsieh
2278c51caa [ALPS04419954] sync code from android p 
[Detail]
sync code from android p

MTK-Commit-Id: d0b19b83da618bab91caff90dbe9525f3f6a22a3

Change-Id: Ib664dbb0b8a1b69012fc81a2ad1bde770ccf478b
CR-Id:ALPS04419954
Feature:[Android Default] Camera Application Basic Functions
 2020-01-18 10:11:22 +08:00
Boru Zhao
25996d6511 [ALPS04394576] mt6739:fix camera sepolicy issue 
[Detail]
Add gpu_device:map in non_plat/mtk_hal_camera.te and
non_plat/cameraserver

MTK-Commit-Id: a3544387d9eb532f03a1fd0603f96b9cef46f1cf

Change-Id: Ic3c0e82e87315c29bee5984ae74f579304710c9d
CR-Id: ALPS04394576
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:10:15 +08:00
mtk03805
217b4fa948 [ALPS04377757] Fix camera sepolicy issue 
[Detail]
Fix camera sepolicy issue

[Solution]
Add following to mtk_hal_camera.
GED_BRIDGE_IO_GE_GET
GED_BRIDGE_IO_GE_SET

MTK-Commit-Id: 37a5c97590fe0d61c553d282e6c79cfa96a71dc9

Change-Id: I6c32d4345296182274a1c24852a87b0b9eb8fd25
CR-Id: ALPS04377757
Feature: Camcorder Application
 2020-01-18 10:09:39 +08:00
Jonas Lai
2102224bdc [ALPS04314391] SYS_DEBUG_MTKCAM via aee_aedv 
Allow camerahalserver to dump debug info to SYS_DEBUG_MTKCAM via aee_aedv.

avc: denied { write } for path="/data/vendor/mtklog/aee_exp/temp/db.9oRG8O/SYS_DEBUG_MTKCAM"
dev="dm-2" ino=1458278 scontext=u:r:mtk_hal_camera:s0
tcontext=u:object_r:aee_exp_vendor_file:s0 tclass=file permissive=0

MTK-Commit-Id: 6b096cffb7c389e160335c9dfa241b54fd9da7c8

Change-Id: Ic4075ad89fcf32f95a0b0c1c3279f134c1f903ec
CR-Id: ALPS04314391
Feature: [Android Default] Camera Application Basic Functions
(cherry picked from commit 90e1c9c2e1668be7c4c25d0d0a7eda65ad286539)
(cherry picked from commit dbc75e9efbd7cb40b3b1102abe934943e8f7f2b7)
 2020-01-18 10:08:17 +08:00
Juju Sung
12bc2025e2 [ALPS04239425] Sepolicy: fix undefined type declration 
[Detail]
Unknown type:untrusted_v2_app,alarm_device,qtaguid_proc,mtd_device
Duplicated type:proc_slabinfo

MTK-Commit-Id: 11ccfcffb994452eb58a697e94a8da748ac73933

Change-Id: I2e847041d14d6b6613044cfaa98f242b7fd9381a
CR-Id: ALPS04239425
Feature: Build System
 2020-01-18 10:08:05 +08:00
Mark Hu
50e4268f54 [ALPS04079884] FRHandler P0 migration 
[Detail]
1) device/mediatek/sepolicy/[basic|bsp]
 --> /dev/gz_kree SELinux rule enabling
2) device/mediatek/mt6771
 --> gz_kree file-mode, FRHandler package add-on,
     FRHandler manifest.xml
3) vendor/../hardware/interfaces
 --> add IFRHandler hal

4) [mtkcam]
 --> FRHandler CA

5) device/mediatekprojects
 --> enlarge k71v1_64_bsp_as GZ-img to 24MB

6) [geniezone]/prebuilts/libs
 --> put empty-model FRlib to avoid GZ-img >16MB,
   need to manually update FRlib for testing

7) [geniezone]/trusty/app/fralgo
 --> FRHandler TA part

8) [geniezone]/trusty/device/arm/mediatek
 --> use project-name to include fralgo or not

[Solution]
as detail

MTK-Commit-Id: b451be02f7f719bc8490d2343d9dc67cc9c8f122

Change-Id: I34a380691b8a2b10b1b5c26581cc4a38e96f1251
CR-Id: ALPS04079884
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:07:02 +08:00
mtk04179
3c5b96aa1c [ALPS03892544] CCT k65 P porting 
CCT k65

MTK-Commit-Id: 4e28dade7f7018a3556bf40ed1772110799762fd

Change-Id: I1ae0989736e7f23e797936aff6a8beafab65bb9e
CR-Id: ALPS03892544
Feature: Camera Calibration Tuning (CCT) Tool
 2020-01-18 10:06:20 +08:00
mtk12101
722798a334 [ALPS03982747] Remove unused sepolicy rules 
Some rules is no need any more, need to remove it.

MTK-Commit-Id: 49685f1299d990a7195a2d54b955517d8f2cc699

Change-Id: I4a590ad781589cf94989ce72c88751ac10b82eae
CR-Id: ALPS03982747
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:02:25 +08:00
Yang Chang
91238a62a4 [ALPS03943803] Add sepolicy for NVRAM 
[Detail] As title

[Solution] As title

MTK-Commit-Id: 2e0d48205919bc075721a6470a4102a95cf841de

Change-Id: I88e7bdf77940d7d89379af3d73996d998235f093
CR-Id: ALPS03943803
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 09:57:35 +08:00
mtk10721
0db3e13890 [ALPS03911067] Fix sepolicy rules 
[Detail] As title

[Solution] As title

MTK-Commit-Id: 97369eddd804591eaa5678ce60ab2c72e0f1393d

Change-Id: Iae55b41b436943d772ee8e4af9d5506c796132a1
CR-Id:ALPS03911067
Feature: Camera Application
 2020-01-18 09:46:04 +08:00
Elvin Lin
c25696d051 [ALPS03861775] Remove the sysfs_power_supply label 
[Detail]
Since Android P, battery-related information should be declared as native
sysfs_batteryinfo, which can be accessed by healthd and other processes
asking for battery information.

[Solution]
1. Remove sysfs_power_supply.
2. Change the usage from sysfs_power_supply to sysfs_batteryinfo.

MTK-Commit-Id: 5713190900415312f7904cdf6d46a891996d5786

Change-Id: I10099570afdb48f0806d6979a3fb11b9b9e59fbe
CR-Id: ALPS03861775
Feature: Charger
 2020-01-18 09:34:44 +08:00
Bo Ye
5849c224e3 [ALPS03825066] P migration selinux build failed fix 
1. Mark polices which accessing proc/sysfs file system
    2. Add violator attribute to modules violate vendor/system rule.

MTK-Commit-Id: 3954cad7a1428cda694d8428c2235a78aa6e7cc8

Change-Id: I401ae5b87eb9a03f324bef83c6678149606b15a8
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:29:36 +08:00
Chunyan Zhang
37e0caa36e import from mediatek/master to mediatek/alps-mp-o1.mp1 
Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79
MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
 2020-01-18 09:29:32 +08:00