NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,129 Commits 2 Branches 0 Tags
Commit Graph

11 Commits

Author SHA1 Message Date
Denis Hsu
4aa82d78c9 [ALPS04761184] Remove high risk policy for nvram 
Remove high risk policy for nvram.

MTK-Commit-Id: 6b89d790d606c06b3c48ef2711ad4e1f3b3132de

Change-Id: Iae4a7b021816f771d77b3f58f150de03863dfb9f
CR-Id: ALPS04761184
Feature: NVRAM Partition
 2020-01-18 10:19:49 +08:00
Denis Hsu
a488de6a7f [ALPS03891225] Add policy for nvram 
Allow to access boot mode for nvram

MTK-Commit-Id: 42ba22047669fe5e19c2ad7919807f2dd5323950

Change-Id: Id3118a6666a068330bdeb2d4663c478aa94cd307
CR-Id: ALPS03891225
Feature: Multi-Storage
 2020-01-18 10:02:40 +08:00
mtk12101
722798a334 [ALPS03982747] Remove unused sepolicy rules 
Some rules is no need any more, need to remove it.

MTK-Commit-Id: 49685f1299d990a7195a2d54b955517d8f2cc699

Change-Id: I4a590ad781589cf94989ce72c88751ac10b82eae
CR-Id: ALPS03982747
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:02:25 +08:00
Denis Hsu
72de9ef514 [ALPS03841839] Copy fstab failed in nvram daemon 
[Detail]
We change the nvram path to /mnt/vendor/nvdata in P.
It needs add search policy for fstab copying.

[Solution]
allow nvram_daemon mnt_vendor_file:dir search;

MTK-Commit-Id: 0695da89e80b8c635be5764c5d1ba4088c38a445

Change-Id: I7ee2bd8bc6c16ac8c904e04d1f2a00da421f551e
CR-Id: ALPS03841839
Feature: NVRAM Partition
 2020-01-18 09:51:33 +08:00
SW Integrator
700750af5e [ALPS03800946] Remove data_between_core_and_vendor_violators 
[Detail]
data_between_core_and_vendor_violators is used temporarily. We should
follow Android P SELinux rule to write sepolicy.

[Solution]
Remove data_between_core_and_vendor_violators from files which already
fix SELinux build errors

MTK-Commit-Id: 6a75842a96d8997bca10caf6ca4d5b4e7e8f68a4

Change-Id: I5e840fdf6b61d44860429a7e5c7e24c9a48a9c75
CR-Id: ALPS03800946
Feature: Treble
 2020-01-18 09:49:26 +08:00
henry huang
77e5a274ef [ALPS03841839] nvram init property rename 
[Detail]nvram init property rename for Android P

[Solution]as detail

MTK-Commit-Id: 65ecb62d61060ac65847faf0706c752523ed3610

Change-Id: I8fd4a5a64681a92d0346dabab4d30821a232581b
CR-Id: ALPS03841839
Feature: NVRAM Partition
 2020-01-18 09:40:06 +08:00
Lili Lin
59f0ec9f6e [ALPS03881723] Workaround build error 
[Detail] enable PRODUCT_COMPATIBLE_PROPERTY_OVERRIDE = true, will cause build error

[Solution] Mark rules that violate AOSP neverallow rules

MTK-Commit-Id: c850c6f1fcb8de76235ea2be51becb7a2ccc6190

Change-Id: Ib9a80f4495d6db588133f929c9ea70e7215ad2aa
CR-Id: ALPS03881723
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:35:54 +08:00
henry huang
9764053433 [ALPS03841839] fix nvram SELinux violations 
[Detail]fix nvram selinux violations

[Solution]remove system_data_file sepolicy from nvram_daemon.te/nvram_agent_binder.te

MTK-Commit-Id: 4a9272ef13c590133649ca46d962f14768a216ef

Change-Id: I473edae03de50c6d747477e34e6eb797b7b1875e
CR-Id: ALPS03841839
Feature: NVRAM Partition
 2020-01-18 09:30:59 +08:00
Bo Ye
5849c224e3 [ALPS03825066] P migration selinux build failed fix 
1. Mark polices which accessing proc/sysfs file system
    2. Add violator attribute to modules violate vendor/system rule.

MTK-Commit-Id: 3954cad7a1428cda694d8428c2235a78aa6e7cc8

Change-Id: I401ae5b87eb9a03f324bef83c6678149606b15a8
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:29:36 +08:00
mtk12101
bbecfaa68b [ALPS03825066] Resolve vendor violates 
[Detail] Google add new neverallows rules on android P,
some rule violate the rules

[Solution] Remove the rules which violate google new rules

MTK-Commit-Id: ff683b4eee0a6dd95ff25fbb6c7d1fc3a79c604d

Change-Id: Iead494212c6adcec234eaef14c83d1f8c7a49deb
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:29:34 +08:00
Chunyan Zhang
37e0caa36e import from mediatek/master to mediatek/alps-mp-o1.mp1 
Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79
MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
 2020-01-18 09:29:32 +08:00