NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,060 Commits 2 Branches 0 Tags
Commit Graph

16 Commits

Author SHA1 Message Date
Shanshan Guo
62cf1a413a [ALPS04639771] SEPolicy: Modify workaround 
[Detail]
There is a workaround for bring-up,
now it needs to be modified.

[Solution]
1.Split workaround to sepcial *.te
2.Modify ged sepolicy
3.Modify mistake
4.Add sepolicy

MTK-Commit-Id: 5a2b7e3fdc826a7ca6bc70a3810f14c1661e7d79

Change-Id: I0894de45e014a5eae754e35b57fbc9b21bc4bf90
CR-Id: ALPS04639771
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:15:29 +08:00
lokesh
96c9971cfd [ALPS04654005] Selinux error bootanimation 
Allow SELinux permissions for all GED proc

MTK-Commit-Id: d371e1d19a81c711fa97dc73c51709c8f9eee142

Change-Id: I64155523baef9b75b8947626de7e4d5bd6b47795
CR-Id: ALPS04654005
Feature:[Module]Settings
 2020-01-18 10:14:58 +08:00
Ian-Y Chen
9fcf99ba09 [ALPS04328846] power: refine sepolicy 
[Detail]
1. Add prefix PERFMGR for performance related ioctl
2. Add property permission for PowerHAL

MTK-Commit-Id: 91ef99a47ee2de3c48426298c9a67d5e4dd10a6b

Change-Id: I5979aefc7fb110ee540425bc53896babdcac08bd
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:13:32 +08:00
lokesh
a4175cc0e4 [ALPS04340640] BootAnimation SELinux policy changes 
Update SELinux policy of bootanimation

MTK-Commit-Id: f97c66dacfd9766f692e753f3aaae1faba66591c

Change-Id: I5f6a5cf18be6430b2365588917d45278140df696
CR-Id: ALPS04340640
Feature: [Module]Settings
 2020-01-18 10:12:28 +08:00
Poting Chen
de970ad094 [ALPS04331194] FPSGO: add ioctl permission 
[Detail]
add FPSGO ioctl permission

MTK-Commit-Id: 4466c4e3c548c134be6939fa50e4c8d3f37a257a

Change-Id: I0c10abd0e780f764ff423442ea3d1b6ed66177c6
CR-Id: ALPS04331194
Feature: FPSGO
 2020-01-18 10:09:36 +08:00
Juju Sung
ef49210dc0 [ALPS04367884] Sepolicy: workaround for denied policy(2) 
[Detail]
Set proc node specific node
- hraphic_allocator
- bootanim
- aee_core_forwarder

MTK-Commit-Id: 3a2620f6c38a355ad1fc22e570cc2bc119ab6d48

Change-Id: I4b0572c43b44c730b9cd368870c4ff0d79f6de8d
CR-Id: ALPS04367884
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:09:22 +08:00
Juju Sung
0a3b110ac5 [ALPS04357449] Sepolicy: workaround for denied policy 
[Detail]
Set proc node specific node
- hraphic_composer
- bootanimation
- aee_core_forwarder
- surfaceflinger

MTK-Commit-Id: 46901e2900a497c472b8a7c01f1350bdd28bbdae

Change-Id: I89a1ab578a2841d3a16718153d5a716ad45c399b
CR-Id: ALPS04357449
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:09:09 +08:00
lokesh
6969eebbef [ALPS04340640] SELinux policy update bootanim.te 
Update bootanim.te file to allow IOCTL commands

MTK-Commit-Id: 2fb03897488c2eb29dc2c6c700b7d9dbbb34ab65

Change-Id: I3287b1a3569b472edfb96f80f2d8765b8049e6e3
CR-Id: ALPS04340640
Feature: [Module]Settings
 2020-01-18 10:09:03 +08:00
lokesh
b151556fc1 [ALPS04340640] SELinux policy update bootanim.te 
Update bootanim.te file to allow IOCTL commands

MTK-Commit-Id: 63b0669373adc7386aa445b2e617abde5e40bcbb

Change-Id: I0e62af7c87040cd438e5e62171b830c6641e0e81
CR-Id: ALPS04340640
Feature: [Module]Settings
 2020-01-18 10:08:39 +08:00
lokesh
a7ac10eabf [ALPS03870695] Relabel bootanim property 
modify bootanim and mtkbootanim selinux file

MTK-Commit-Id: 499216aca19a337156ad7b83beb93dae5dc0f009

Change-Id: Ifccc14d4f8d410789e01730aa4be82c423a19975
CR-Id: ALPS03870695
Feature: Boot Animation
(cherry picked from commit 05973051a0e2ae272a9ecfd511e088a33f9f54b1)
 2020-01-18 10:03:55 +08:00
Lili Lin
05f5d87b88 [ALPS03881723] Workaround to fix build break 
[Detail] Googles new commit
neverallow coredomain from writing vendor properties
cause build break

cdb1624c27

[Solution] Declare system_writes_vendor_properties_violators as workaround

MTK-Commit-Id: 2b19515d2d98945b0aadfbc9043352ae927497f3

Change-Id: I7be59b6811f6c75ea47da205be902417311fe1d0
CR-Id: ALPS03881723
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:56:13 +08:00
mtk12101
b086e609ac [ALPS03825066] Remove unused sepolicy 
[Detail] Because "ro.vendor.net.upload.benchmark.default"
is unlabeled property, so all use it will have name of
vendor_default_prop

[Solution] Need owner to relabel the property of
"ro.vendor.net.upload.benchmark.default"

MTK-Commit-Id: 3a772e2b252536c9bbe9829b75f3464c2df68248

Change-Id: I42f341bf01cea16a16a0e73d13e0c03b5c270dad
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:50:11 +08:00
mtk12101
9cbf8fb766 [ALPS03825066] Fix boot fail 
[Detail] System processes have no permission to access
vendor_default_prop

[Solution] Add get vendor_default_prop rule for system
processes

MTK-Commit-Id: ad4fb4d8ae4fb38767c16b82ce9d8351f5f59702

Change-Id: I31cf13db6b50a3cff193aa0a34bc1130e5b18942
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:48:37 +08:00
lokesh
bea2ef85fd [ALPS03870695] SELinux poilcy violation 
[Detail] Fix SELinux poicy violation in bootanimation

[Solution] Removed unnecessary code from te file

MTK-Commit-Id: f770df059573e3379505534bfbe86e090ed82139

Change-Id: I9808b8bfe1008d7608e7de8f923ee36779dce953
CR-Id: ALPS03870695
Feature: Boot Animation
 2020-01-18 09:35:32 +08:00
Bo Ye
5849c224e3 [ALPS03825066] P migration selinux build failed fix 
1. Mark polices which accessing proc/sysfs file system
    2. Add violator attribute to modules violate vendor/system rule.

MTK-Commit-Id: 3954cad7a1428cda694d8428c2235a78aa6e7cc8

Change-Id: I401ae5b87eb9a03f324bef83c6678149606b15a8
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:29:36 +08:00
Chunyan Zhang
37e0caa36e import from mediatek/master to mediatek/alps-mp-o1.mp1 
Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79
MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
 2020-01-18 09:29:32 +08:00