NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,010 Commits 2 Branches 0 Tags
Commit Graph

1010 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Juan Rong
50e9eaca5b [ALPS04325771] [EM] power: search subpmic register 
EM need search subpmic register file

MTK-Commit-Id: bdbeb20b46586062dbeaa4337487b0780ded4429

Change-Id: I210c153ea810908d9aaa148fc231d4e2635c2665
CR-Id: ALPS04325771
Feature: Engineering Mode
 2020-01-18 10:13:38 +08:00
Yongjun Luo
dfc26f2e82 Merge "[ALPS04525727] SEPolicy:add perm for system_server" into alps-trunk-q0.basic 
Change-Id: I962cc508a89f9263f41f4578a4fb7e3be45fd794
MTK-Commit-Id: 2d624def2223c4cbb8ad095636b55eb509f1bb92
 2020-01-18 10:13:36 +08:00
mtk07742
a07397dc56 [ALPS04525727] SEPolicy:add perm for system_server 
For Android Q, there is a more stringent restriction for ioctl,
system_server need some permission to access proc_ged by ioctlcmd
in MTBF.

MTK-Commit-Id: d79045e8bfe072a3125efa56cf5012cfb84e416b

Change-Id: Ic82c4ff92333077d9260f931c67453b9e53d305e
CR-Id: ALPS04525727
Feature: [Module]SystemServer
 2020-01-18 10:13:34 +08:00
Ian-Y Chen (陳尹)
1e6a5072dc Merge "[ALPS04328846] power: refine sepolicy" into alps-trunk-q0.basic 
Change-Id: Iaf3710c91ea35b6019f6f969b78854f28bc3dcf8
MTK-Commit-Id: c0705d2f416d71357824bbea7d70237068f7b921
 2020-01-18 10:13:33 +08:00
Ian-Y Chen
9fcf99ba09 [ALPS04328846] power: refine sepolicy 
[Detail]
1. Add prefix PERFMGR for performance related ioctl
2. Add property permission for PowerHAL

MTK-Commit-Id: 91ef99a47ee2de3c48426298c9a67d5e4dd10a6b

Change-Id: I5979aefc7fb110ee540425bc53896babdcac08bd
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:13:32 +08:00
Johnny Yao
b05b2ccb3d Merge "[ALPS04294481] WMT: add sepolicy for wmt_dbg" into alps-trunk-q0.basic 
Change-Id: Iae9b6e7f67f5243bf01511e827eb65a0afc10f7f
MTK-Commit-Id: 25881f143852f7ccc0b35330ef4e8e02a5625b48
 2020-01-18 10:13:30 +08:00
Tim Chang
a02af82882 [ALPS04294481] WMT: add sepolicy for wmt_dbg 
Add a rule to allow vendor_init have write permission
to proc_wmtdbg.

MTK-Commit-Id: fcdffbb167f1e860b31027357c5249c99b4b0281

Change-Id: I7b74e284ce9d9de1400c59bbf1f3e11188ec5245
Signed-off-by: Tim Chang <tim.chang@mediatek.com>
CR-Id: ALPS04294481
Feature: [Module]WMT Driver
 2020-01-18 10:13:25 +08:00
mtk11285
a250fc423c [ALPS03806577] catch manual coredump fail 
add some rules for aee_aedv/aee_aed to read /proc/*/exe

MTK-Commit-Id: a1ee357e85a32beded54046bb1b638eb8fe4b3c9

Change-Id: Ideeb8002a9d1b9b166709442195124cce8e4e427
CR-Id: ALPS03806577
Feature: Android Exception Engine(AEE)
 2020-01-18 10:13:24 +08:00
James Hsu
61b25561f6 [ALPS04515390] mrdump: add sepolicy for mrdump partition 
[Detail]
Add sepolicy for aee access mrdump partition

error log:
mrdump partition /dev/block/platform/bootdevice/by-name/mrdump
 open failed (13), Permission denied

MTK-Commit-Id: f837dec83ec395bddca7806ef5ff2d35ed2f8f7a

Change-Id: Iad2414cdebb66cc3b7046fbe2570ea972101854a
Signed-off-by: James Hsu <james.hsu@mediatek.com>
CR-Id: ALPS04515390
Feature: Memory RAM Dump (MRDUMP)
 2020-01-18 10:13:21 +08:00
Shanshan Guo
7010a1c7bd [ALPS04501651] Sepolicy: Kernel API dump 
[Detail]
For Andorid Q, there is a more stringent restriction
for ioctl, app need to access proc_ged by ioctlcmds.

[Solution]
Add sepolicy for app to access proc_ged by ioctlcmds.

MTK-Commit-Id: 630cfe13e5928346453bb3800b75439d5e9e1235

Change-Id: I1bde81017e78d5b70fc78dd5fa148667360d2af4
CR-Id: ALPS04501651
Feature: Power Management
 2020-01-18 10:13:20 +08:00
Gang Wei
edfe850621 Merge "[ALPS04418515] [META]change to vendor_de" into alps-trunk-q0.basic 
Change-Id: I09eb4d1e2169689537356c598026813fdb0e592c
MTK-Commit-Id: 5b5870298b5f9daca992d6b2ca738fa6d6bc5316
 2020-01-18 10:13:20 +08:00
jing.li
2286610683 [ALPS04418515] [META]change to vendor_de 
[META]
Change /data/vendor to /data/vendor_de

MTK-Commit-Id: 4f8a9f9adadd9c32da5d6f781553b4256fec9c38

Change-Id: I3cee972d9d19eafc6bfe465df5229eff584d9ea6
CR-Id: ALPS04418515
Feature: SP META Tool
 2020-01-18 10:13:18 +08:00
Larry Liang
800af6c731 Merge "[ALPS03806577] add DropBoxReceiver feature" into alps-trunk-q0.basic 
Change-Id: I876e115e17378f7f9978c51d51283b77ae210268
MTK-Commit-Id: e8bc82cbeff2e189a1aed8cc2346607a1f94cd31
 2020-01-18 10:13:17 +08:00
mtk11285
0b7ed7df47 [ALPS03806577] add DropBoxReceiver feature 
1. allow dropboxreceiver to receive dropbox message
2. allow aee_aed to read packages.list

MTK-Commit-Id: 03d7fff0159d697f13fd574b132503ba6063cfab

Change-Id: Id717233c2ade4b0b8c3d6a8319647ff6e783a60a
CR-Id: ALPS03806577
Feature: Android Exception Engine(AEE)
 2020-01-18 10:13:14 +08:00
Juju Sung
f680189e6c [ALPS04284125] Sepolicy: add lost label 
[Detail]
netd_socket is deprecated in a/26f84c6.
The netd_socket used in mulitple modem generation,
for cross modem compatibility we add a dummy label to
prevent splitting new branch.

MTK-Commit-Id: b949378b387f9eb942de90b7475aea4ec711f68c

Change-Id: I5179175d9df973a0da01d4520269468b70f742ce
CR-Id: ALPS04284125
Feature: Modem Interface Driver
 2020-01-18 10:13:13 +08:00
Marc Huang
9581c04e51 Merge "[ALPS04501667] SELINUX: Kernel API dump of GED access" into alps-trunk-q0.basic 
Change-Id: If901823ae54b939e2608145cdecae627551434e7
MTK-Commit-Id: 255dcf4dab6d5987452adacdb3b09150d99e98e0
 2020-01-18 10:13:12 +08:00
Figo Wang
15fe055c40 [ALPS04501667] SELINUX: Kernel API dump of GED access 
Add sepolicy to resolve the kernel api dump.

MTK-Commit-Id: 471082eb801521fcba7cb9a2dc9105e9832047b7

Change-Id: Ica2001bcb4c998f2cdb2cba26f5351ea72c65153
Signed-off-by: Figo Wang <figo.wang@mediatek.com>
CR-Id: ALPS04501667
Feature: Power Management
 2020-01-18 10:13:09 +08:00
Wy Chuang
509a95b365 Merge "[ALPS04431500] battery: add selinux policy in em_svr" into alps-trunk-q0.basic 
Change-Id: I1dd23be2b709812426a1d85e673d4b751fe9af82
MTK-Commit-Id: 3c6fefaadbbd74b2374e6ceb52253e59e1d1164d
 2020-01-18 10:13:07 +08:00
Timo Liao
7bb01a1e2e [ALPS04431500] battery: add selinux policy in em_svr 
add new labels for em_svr mode

MTK-Commit-Id: a0e12cdf7848d47c065cc10eeb144a929dcccace

Change-Id: Ic198120736d63e4b8d1615092b39ba26269c0518
Signed-off-by: Timo Liao <timo.liao@mediatek.com>
CR-Id: ALPS04431500
Feature: Fuel Gauge
 2020-01-18 10:13:04 +08:00
Cheng Li
414a5bfec1 [ALPS04468274] add cameraservice ioctrol permission 
[Detail]
add cameraserver permission

[Solution]

MTK-Commit-Id: 23fe7f9ba48f0ff2d27acf666670c1d4dba69a6e

Change-Id: Ie4b9aa9cd836a3c96a353a8148e5ada5d21166f8
CR-Id: ALPS04468274
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:13:00 +08:00
Chinwen Chang
2c81327460 Merge "[ALPS04455690] Whitelist some lmkd properties that go into /vendor/build.prop" into alps-trunk-q0.basic 
Change-Id: I9dd7a3f87f7aca104d8e0da549f6943f9a6ad1c5
MTK-Commit-Id: 9db1544dd83a52d62cdf2e6b96da42048a2e8320
 2020-01-18 10:13:00 +08:00
Chinwen Chang
3203c8f38a [ALPS04455690] Whitelist some lmkd properties that go into /vendor/build.prop 
Add whitelist for the following properties,
      ro.lmk.use_minfree_levels
      ro.lmk.low
      ro.lmk.medium
      ro.lmk.critical
      ro.lmk.kill_timeout_ms
      ro.lmk.swap_free_low_percentage

This is just a temp solution because those properties should be
put in system/sepolicy/public/property_contexts, but it is not
ready currently. Once it is ready for those properties, this
patch will be rolled back.

MTK-Commit-Id: bc8b76b56605d264af1727cd234a5406da372744

Change-Id: Id8db6725e9dfeeeebd401c8922fe8004c5f5c5b4
CR-Id: ALPS04455690
Feature: Memory Optimization
 2020-01-18 10:12:59 +08:00
Peter Wang
33a714e910 Merge "[ALPS04428820] MSDC : Add selinux allow sysfs_boot_type access" into alps-trunk-q0.basic 
Change-Id: I9abe1d290dd34eabb28498652bc047bf1107f7de
MTK-Commit-Id: d19ca49eb1e8d6d6c6935ccf0689f68f1a92350f
 2020-01-18 10:12:57 +08:00
Peter Wang
08d19098f9 [ALPS04428820] MSDC : Add selinux allow sysfs_boot_type access 
Add selinux allow sysfs_boot_type access

MTK-Commit-Id: ba46272a27487f42748fb590e7793c3a21cb9d6e

Change-Id: Ib8f2d6dfe11720b545b4c4665489e50e7eb77ec5
CR-Id: ALPS04428820
Feature: SP META Tool
(cherry picked from commit d24a639fffad5f36315f3dcc95b04543e7c5e56d)
 2020-01-18 10:12:56 +08:00
Archilis Wang
9d48113003 Merge "[ALPS04418703] Add mnt_vendor_file permission" into alps-trunk-q0.basic 
Change-Id: Ia6cbace12725310eb8d3309bfb76f5ef82ed6b6b
MTK-Commit-Id: 33198a2107ed4b998a140af912bfb0ff899c8a09
 2020-01-18 10:12:55 +08:00
Archilis Wang
4df84f7fa4 [ALPS04418703] Add mnt_vendor_file permission 
mtk_agpsd needs to save some data in mnt_vendor

MTK-Commit-Id: 9a16e787248a3b6e07dea75bdeee2428ef8ceb2c

Change-Id: I55715e48c3c56e700725cc223ac08f753433cd5d
CR-Id: ALPS04418703
Feature: A-GPS
 2020-01-18 10:12:53 +08:00
chia-mao.hung
3273c74f52 Merge "[ALPS04428497] mdp: MMS HIDL for pq version" into alps-trunk-q0.basic 
Change-Id: If56f4cc71d1e9bbe0830994e37b3105eb785dfd3
MTK-Commit-Id: cbb1868ed74b02f2ee3858e80636f56710db02dd
 2020-01-18 10:12:52 +08:00
Eve
38c772248f [ALPS04428497] mdp: MMS HIDL for pq version 
add pq control for jpeg usage

MTK-Commit-Id: fa4d43a6005c174326f4bea2bdc244a03ac0fc0e

Change-Id: Ia996efb0fcca703514a39fc1a3c1eb2d72e1c1f9
CR-Id: ALPS04428497
Feature: [Module]MDP Driver
 2020-01-18 10:12:50 +08:00
mtk07742
b110192c83 [ALPS04462320] SEPolicy:add perm for system_server 
For Android Q, there is a more stringent restriction for ioctl,
system_server need some permission to access proc_ged by ioctlcmd
in MTBF.

MTK-Commit-Id: 6fe037cc18f278a95a919bb3188ae50fb880a36e

Change-Id: I4f4a3b13f3ee49920ebb588ed5e7094ae0065494
CR-Id: ALPS04462320
Feature: [Module]SystemServer
 2020-01-18 10:12:48 +08:00
mtk07406
210222b8d4 [ALPS04431046] GPU: Enable SPHAL for OpenCL 
[Detail]
Same process hal modification

MTK-Commit-Id: 54746202d1051616f8d4e65c13d516063899040f

Change-Id: I31873741ce1a25106552d3cc83b22ef866f49433
CR-Id: ALPS04431046
Feature: OpenGL|ES
(cherry picked from commit 53d59eca15de0fdfc5ab1eb6e7ebe45a8dc9ba91)
 2020-01-18 10:12:48 +08:00
mtk07742
734b5286a2 [ALPS04462320] SEPolicy:add perm for system_server 
For Android Q, there is a more stringent restriction for ioctl,

system_server need some permission to access proc_ged by ioctlcmd

in MTBF.

MTK-Commit-Id: b3250e2378854b801fd8602b5369b48d91268993

Change-Id: I46d46e62dfb7fcc8a5675cc7584fd8f8e069238f
CR-Id: ALPS04462320
Feature: [Module]SystemServer
 2020-01-18 10:12:48 +08:00
CS Kuo
eb08f2a396 Merge "[ALPS04423688] wlan: Remove unused codes" into alps-trunk-q0.basic 
Change-Id: Ia3e34fd228cd128ad4a3ef87193247b6be0b801f
MTK-Commit-Id: 8a96380238e2fedda0e0aae51aaadd26835f8ce7
 2020-01-18 10:12:47 +08:00
Ben Lai
014e70be61 [ALPS04423688] wlan: Remove unused codes 
Remove unused codes for hotspot.

MTK-Commit-Id: 8fb09c8c6cb3d9362ae657285dd81f8648e2b271

Change-Id: Idcf2f7359dfb324028a752d8fe3824e0caa93862
CR-Id: ALPS04423688
Feature: Wi-Fi Tethering
Signed-off-by: Ben Lai <ben.lai@mediatek.com>
 2020-01-18 10:12:45 +08:00
Code Lin
1cdd0f7bd4 Merge "[ALPS04431920] NP: Add MDLA device SEPolicy" into alps-trunk-q0.basic 
Change-Id: Idc43193e6f45c35ef3f4799a1500a9b17c3a503f
MTK-Commit-Id: 7e30f1dccea206f80e4a6ac957e1752565777ac1
 2020-01-18 10:12:44 +08:00
Code Lin
da52ff0805 [ALPS04431920] NP: Add MDLA device SEPolicy 
Add MDLA device SEPolicy.

MTK-Commit-Id: 097bfbf9de8c3c8760f436ca8f1964037c4ab7f6

Change-Id: Ie4aaab4fc28eb1daf0d6c88cbe4e86f0f59444af
CR-Id: ALPS04431920
Feature: NeuroPilot
 2020-01-18 10:12:37 +08:00
YL Wang
814f844b6e Merge "[ALPS04455064] WMT: Setting SEPolicy for coredump mode property" into alps-trunk-q0.basic 
Change-Id: Ib7843e3e6f8ee4cf0a06ce238f0c397c0c0bf11f
MTK-Commit-Id: c589e02628f2793cfbf4f889993fddba582d8082
 2020-01-18 10:12:35 +08:00
Robbin Chiu
0fc812491c [ALPS04455064] WMT: Setting SEPolicy for coredump mode property 
[Solution]
Set SEPolicy for vendor_init to set property

MTK-Commit-Id: d72a1df1f6ef596f306cc5268bd27ed1216eb9a4

Change-Id: Ie6016a873e251e224b8225797ff3451a3ccd2ac9
Signed-off-by: Robbin Chiu <robbin.chiu@mediatek.com>
CR-Id: ALPS04455064
Feature: [Module]WMT Driver
 2020-01-18 10:12:34 +08:00
Zhongchao Xia
bed757c9c8 Merge "[ALPS04382560] MDP: open mdp device fail" into alps-trunk-q0.basic 
Change-Id: I32eb257de568b42ee3405d57bfeb1407addc0836
MTK-Commit-Id: 4c9bdb05011d86bf33434ada19b957201cfe69a2
 2020-01-18 10:12:33 +08:00
Zhongchao Xia
379de5a9b0 [ALPS04382560] MDP: open mdp device fail 
[Detail]
1. Change /proc/mdp/device to /dev/mdp_device
2. Modify kernel driver change device node
3. Modify init.rc change device owner
4. Add selinux policy

MTK-Commit-Id: 08cf6d6ee97647a5f1262f475b79b420b616e527

Change-Id: I2bd7ee983116294dd62f247a9d30a67655316bd8
CR-Id: ALPS04382560
Feature: [Module]MDP Driver
 2020-01-18 10:12:32 +08:00
Rajkamal R
8b8627c31a Merge "[ALPS04340640] BootAnimation SELinux policy changes" into alps-trunk-q0.basic 
Change-Id: Ic4a6d637dc717d4b947c8852d33f00cad0c6eb19
MTK-Commit-Id: 7c3ff3d20f67920bc896748643b2468200433f47
 2020-01-18 10:12:30 +08:00
lokesh
a4175cc0e4 [ALPS04340640] BootAnimation SELinux policy changes 
Update SELinux policy of bootanimation

MTK-Commit-Id: f97c66dacfd9766f692e753f3aaae1faba66591c

Change-Id: I5f6a5cf18be6430b2365588917d45278140df696
CR-Id: ALPS04340640
Feature: [Module]Settings
 2020-01-18 10:12:28 +08:00
Shanshan Guo
4c048b9055 Merge "[ALPS04449311] SEPlolicy: for app to access ged by ioctlcmd" into alps-trunk-q0.basic 
Change-Id: Ia283db06b79ae3252a13a674109fb86fa9c27b6f
MTK-Commit-Id: 1fa276d7dd8e8d6fd850582d85240f3a9e253b30
 2020-01-18 10:12:27 +08:00
Shanshan Guo
552d39bdd1 [ALPS04449311] SEPlolicy: for app to access ged by ioctlcmd 
[Detail]
For Andorid Q, there is a more stringent restriction for ioctl,
app need some permissions to access proc_ged by ioctlcmd.

[Solution]
Add sepolicy for app to access proc_ged by
ioctlcmd=GED_BRIDGE_IO_BOOST_GPU_FREQ.

MTK-Commit-Id: 1d7bd0172f33336abcc94349978bbbd008f5fe9d

Change-Id: I62f422f072dc0881ea4c9f082a4c548b7164d58d
CR-Id: ALPS04449311
Feature: Power Management
 2020-01-18 10:12:25 +08:00
Jason Su
e1868bca08 Merge "[ALPS04414889] GNSS HIDL 2.0 feature support" into alps-trunk-q0.basic 
Change-Id: If79d0dcd54fcd6d043d2b2b48209be393849b420
MTK-Commit-Id: f25092a07205872b985fb8fe954cc2a06faf93b1
 2020-01-18 10:12:24 +08:00
Jason Su
4817794ff1 [ALPS04414889] GNSS HIDL 2.0 feature support 
GNSS HIDL 2.0 feature support.

MTK-Commit-Id: f0cdd26e9b65f70a4025c542743ff0d2b32359b7

Change-Id: Ic50f73813934c218c6917f5ab7aa735fcc0478d0
CR-Id: ALPS04414889
Feature: Location AOSP
 2020-01-18 10:12:19 +08:00
Max Tseng
4973f6afc9 [ALPS04400468] Fix build error for AINR sepolicy 
[Detail]
Build error due to miss ;

MTK-Commit-Id: 9ff79edcad3b00db3ed3143b62a5078a8765f3de

Change-Id: Idccb173c592417bd36bc71c096b21c1f255204d4
CR-Id: ALPS04400468
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:12:15 +08:00
Max Tseng
e90d91bd45 [ALPS04400468] Sepolicy : AINR Thermal Boost 
[Detail]
Improve AINR performance, to remove Thermal Restriction

MTK-Commit-Id: 3c332337e985649df2d23d0077356c2b9af0b3de

Change-Id: I913184e1cb97d3b750d57bf23ebdd6e86f7e8bd0
CR-Id: ALPS04400468
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:12:15 +08:00
Ian-Y Chen (陳尹)
a7f37cdfba Merge "[ALPS04328846] power: add system server permission" into alps-trunk-q0.basic 
Change-Id: Ie075ee31359da1349bfa23e92702ca17ba840112
MTK-Commit-Id: 35f28a0438545016d9b453a2c238a3f8e7309d12
 2020-01-18 10:12:14 +08:00
Ian-Y Chen
f6646fd2a6 [ALPS04328846] power: add system server permission 
[Detail]
1. Add system server permission for power_hal_mgr_service
2. Remove su permission
3. Use macro to set permission

MTK-Commit-Id: 465f6b986296ecd46404c4cfd497bfd80c0a1842

Change-Id: I65041fd264cae53b850e013f12679c84c3b9eb36
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:12:13 +08:00
YL Wang
7dd5ed2019 Merge "[ALPS04419955] WMT: stp_dump moving to vendor" into alps-trunk-q0.basic 
Change-Id: Ib706133bdd8d041971987dffadf9c46cbfd9d5da
MTK-Commit-Id: eb4c5ddfa8f365b59ec5f3be570997c69bdbe157
 2020-01-18 10:12:11 +08:00