These policies are for system process, as a result,
move it to plat_private folder.
MTK-Commit-Id: 46e87002024d5675d566dd59f77cbde9c69bdd37
Change-Id: I9c2b72136d1f1c3062f0ac6b174c8334b1965e80
CR-Id: ALPS04649268
Feature: Mobile Log Tool
[Detail] For android Q, we need to add more policy for secure video playback
MTK-Commit-Id: 49b4ab8e0047f4a5002c82af075c77e8bc4e790f
Change-Id: Ib81885e40b14416b57e0776c56cb85591509501a
CR-Id: ALPS04428522
Feature: Trustonic TEE (Trusted Execution Environment)
Add SELINUX policy for mobile_log_d to save log in /data/debuglogger
and for getting log from adb.
MTK-Commit-Id: 8775f10bd89be7ac112cbc56daf422814f0f385f
Change-Id: I39e5e1d0ccb2381ef302c187ff83a9e9cb0fa959
CR-Id: ALPS04649268
Feature: Mobile Log Tool
[Detail]
sysfs_mmcblk is used by vendor & system process,
its type need to be moved to plat_public.
[Solution]
move type sysfs_mmcblk form non_plat to plat_public.
MTK-Commit-Id: 9221eb0ec44290e461e5602f7bfaf08b72994b4d
Change-Id: Ibe9a39e70e2071bfa9c88518fd34e232fc4844d6
CR-Id: ALPS04475279
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
[Detail]
netd_socket is deprecated in a/26f84c6.
The netd_socket used in mulitple modem generation,
for cross modem compatibility we add a dummy label to
prevent splitting new branch.
MTK-Commit-Id: b949378b387f9eb942de90b7475aea4ec711f68c
Change-Id: I5179175d9df973a0da01d4520269468b70f742ce
CR-Id: ALPS04284125
Feature: Modem Interface Driver
add some new rules for not exit files in basic/non_plat/,
allow dumpstate to open/read files
MTK-Commit-Id: 7d8021e582f9c10b7f9574f4fcdadee0be5d3c99
Change-Id: Ifc1ca446ce6cd40e36835acaf52ca5a12efedcdb
CR-Id: ALPS04383536
Feature: Android Exception Engine(AEE)
[Detail]
Only BASIC Sepolicy need to be applyed for BASIC,
we separate basic/bsp sepolicy for BASIC.
This workaround is for fixing the build errors that
cause by the declarations were defined in bsp/ dir
and neverallow rules.
MTK-Commit-Id: f1ed54e84b85f73e20dcc8c2ac5f0c42fddedc77
Change-Id: I568873fcc272d04b018efc4be00924b751bb3775
CR-Id: ALPS04340791
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
[Detail]
Factory mode tool for NFC only works with SElinux disabled.
[Solution]
Update NFC stack to latest release W48p0.
Create the communication socket into data/vendor and apply
a specific SElinux label.
MTK-Commit-Id: 910948f163c96cac14494e5951c504e63a3334ee
Change-Id: I9b89e828e344041ef5bb464cc872f442490a6e2a
CR-Id: ALPS04190424
Feature: NFC Chipset Capability
The data button cannot show checked
MTK-Commit-Id: c244f89abe8640c4bc8b362fcd4f5cf96216190c
Change-Id: I31d70b7540f098643bccc5db6bc2396abf226f91
CR-Id: ALPS04185953
Feature: Engineering Mode
Miss rule in aee_aedv.te and cause cmdq status blocking by rule.
Add rule and fix name typo.
MTK-Commit-Id: 589feaa73ff62b1893f30d5e4b1ce02d34c94edf
Change-Id: I046f73e29f404cb51908f8191599cb46a7c1399d
Signed-off-by: Dennis YC Hsieh <dennis-yc.hsieh@mediatek.com>
CR-Id: ALPS04023420
Feature: Android Exception Engine(AEE)
[Detail]
Add sepolicy access right for Hifi3 adsp device.
Mobilelog and AED will need these access right.
MTK-Commit-Id: 06ac39d7cebbab2bcb3468fcf14f19b7e1489819
Change-Id: Ic834ac687b4423500ef6036824a6d6f75e57ccb3
CR-Id: ALPS03738758
Feature: [Module]Audio OpenDSP
Move connsyslog to system image as
limitation to access phone storage in
andriod new version.
MTK-Commit-Id: 0ea895cbf9dcb98a392cce5d98dd38ef839ac452
Change-Id: I68a37f21635b0ffeaddcda6ab5f59f8202c86709
CR-Id: ALPS03973363
Feature: Connsys Log Tool
[Detail] modify sepolicy
[Solution]
modify sepolicy for read and write system and proc/bootprof
MTK-Commit-Id: 2df7f3b055778e043c9cc2ad75a2c9a7abcb7ad6
Change-Id: I3c4f4dd2435a2b2dee72c54d60e9e1adf2ec671f
CR-Id: ALPS03888283
Feature: SP META Tool
[Detail]
Fix tpd auto test fail in factory mode due to sysfs nodes
are not allowed to read directly.
[Solution]
update touch setting sysfs policy and add to factory mode
MTK-Commit-Id: d8733ca0938653098f5ec1f5462c1723d8f67894
Change-Id: I3fb6a46cfbf02fe050174501a2606404a53bb2ad
CR-Id: ALPS03869354
Feature: [Android Default] CapTouch
[Detail]
1. Change type name from sysfs_boot to sysfs_boot_mode
2. Add type name sysfs_boot_type
MTK-Commit-Id: 54d5bb31fc8ad1d9ac2e931fe5dc01ef4c1083cf
Change-Id: I445ecdf5a5e334a49ccc1d747daa87f6be351d20
Signed-off-by: Peter Wang <peter.wang@mediatek.com>
CR-Id: ALPS03901606
Feature: UFS Booting
Google has upgraded drm hidl to version 1.1, need upgrade
all config(device.mk, sepolicy, manifest) to new version.
MTK-Commit-Id: 50b87ab9d8654c2ea1bea22fa9a589fd85481324
Change-Id: I9a36ad250153bcbb446b790bae5942965409fab3
CR-Id: ALPS03916010
Feature: Google Widevine Level1
