NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,102 Commits 2 Branches 0 Tags
Commit Graph

1043 Commits

Author SHA1 Message Date
mtk11285
85b3620577 [ALPS04325589] AEE: remove unuse rules 
1. remove unuse rules
2. allow dumpstate to r/w /proc/msdc_debug
3. allow aee_core_forwarder to access hwservicemanager_prop
4. allow aee_core_forwarder to connect aee_aed socket

MTK-Commit-Id: a43676c734f74636df65e59cdcace017eca79706

Change-Id: I3c45ed83499c0079b38af34cf462dcd80fec501d
CR-Id: ALPS04325589
Feature: Android Exception Engine(AEE)
 2020-01-18 10:09:44 +08:00
Marx Chiu (邱弘志)
75faa0ba65 Merge "[ALPS04377757] Fix camera sepolicy issue" into alps-trunk-q0.basic 
Change-Id: I3638ae1428e25ba0b782473365fda52084495192
MTK-Commit-Id: a2e2ec0b075ee9c69309c82b90d0b5ead97517d7
 2020-01-18 10:09:42 +08:00
mtk03805
217b4fa948 [ALPS04377757] Fix camera sepolicy issue 
[Detail]
Fix camera sepolicy issue

[Solution]
Add following to mtk_hal_camera.
GED_BRIDGE_IO_GE_GET
GED_BRIDGE_IO_GE_SET

MTK-Commit-Id: 37a5c97590fe0d61c553d282e6c79cfa96a71dc9

Change-Id: I6c32d4345296182274a1c24852a87b0b9eb8fd25
CR-Id: ALPS04377757
Feature: Camcorder Application
 2020-01-18 10:09:39 +08:00
Ian-Y Chen (陳尹)
c9ea8dd7b4 Merge "[ALPS04331194] FPSGO: add ioctl permission" into alps-trunk-q0.basic 
Change-Id: I7075fa8fd2af0240703602cc4952cc1d0f8348e8
MTK-Commit-Id: ea29b11fa2ea2e6bfb81772d2fbee163487ff987
 2020-01-18 10:09:38 +08:00
Poting Chen
de970ad094 [ALPS04331194] FPSGO: add ioctl permission 
[Detail]
add FPSGO ioctl permission

MTK-Commit-Id: 4466c4e3c548c134be6939fa50e4c8d3f37a257a

Change-Id: I0c10abd0e780f764ff423442ea3d1b6ed66177c6
CR-Id: ALPS04331194
Feature: FPSGO
 2020-01-18 10:09:36 +08:00
Cosmo Sung
88e528d73d Merge "[ALPS04365408] IMEI crash handler" into alps-trunk-q0.basic 
Change-Id: I882e94a18985867178851557807ffad672d0ad6b
MTK-Commit-Id: 29d7e7bc2a2463b37061f8622762d4a9a620e888
 2020-01-18 10:09:35 +08:00
Cosmo Sung
ee61f89be9 [ALPS04365408] IMEI crash handler 
When modem verify NVRAM fail, it will send URC to RILD and ask AP
to enter recovery mode. This change allows rild to modify powerctl_prop.

MTK-Commit-Id: 48f1f4a9c9b47cd55d03b3b99d800dd3a9a7645f

Change-Id: I84850f0da7631d6345b96c607ecf8b4b0c6f4883
CR-Id: ALPS04365408
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
(cherry picked from commit d54eff14a5941798e35798f8b2bbf349360989ed)
(cherry picked from commit 033e399e8a9f4d16dd1ff653c47ac90d9f5c5309)
(cherry picked from commit 139ffbfc706c4c1b74bac5f8e5edaf95b1909ac8)
 2020-01-18 10:09:29 +08:00
Shanshan Guo
427c135bd6 [ALPS04340791] SEPOLICY: workaround fix BASIC build error 
[Detail]
Only BASIC Sepolicy need to be applyed for BASIC,
we separate basic/bsp sepolicy for BASIC.
This workaround is for fixing the build errors that
cause by the declarations were defined in bsp/ dir
and neverallow rules.

MTK-Commit-Id: f1ed54e84b85f73e20dcc8c2ac5f0c42fddedc77

Change-Id: I568873fcc272d04b018efc4be00924b751bb3775
CR-Id: ALPS04340791
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:09:28 +08:00
Larry Liang
a27e813df1 Merge "[ALPS04362997] AEE porting" into alps-trunk-q0.basic 
Change-Id: Ic35bcf9c2b1f85995001eb859cab80655ab92ed5
MTK-Commit-Id: b22cfd44bf202f086389d9e9ec7a8eafb0e4b447
 2020-01-18 10:09:26 +08:00
Huaiming Li
62b7308528 [ALPS04362997] AEE porting 
modify file_contexts, remove "mtklog"

MTK-Commit-Id: 8199b206c4b429921a7ffdf742deb4ccb9bc5c06

Change-Id: Iaa02b89ab3469f236da7898f0adc1a196840346e
CR-Id: ALPS04362997
Feature: Android Exception Engine(AEE)
 2020-01-18 10:09:24 +08:00
Juju Sung
f0b368fd1d Merge "[ALPS04367884] Sepolicy: workaround for denied policy(2)" into alps-trunk-q0.basic 
Change-Id: I6cc0cece99dbf67f754bfa3b9d4e690b5265cdb3
MTK-Commit-Id: 9b27cd1ac23a980a210622c7471c854ffe135ce3
 2020-01-18 10:09:23 +08:00
Juju Sung
ef49210dc0 [ALPS04367884] Sepolicy: workaround for denied policy(2) 
[Detail]
Set proc node specific node
- hraphic_allocator
- bootanim
- aee_core_forwarder

MTK-Commit-Id: 3a2620f6c38a355ad1fc22e570cc2bc119ab6d48

Change-Id: I4b0572c43b44c730b9cd368870c4ff0d79f6de8d
CR-Id: ALPS04367884
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:09:22 +08:00
Ian-Y Chen
ee2308acc8 [ALPS04328846] power: add ioctl permission 
[Detail]
Add PowerHal and FPSGO permission for system server
1. Add mtk_hal_power_hwservice:hwservice_manager find
2. Add FPSGO ioctl permission

MTK-Commit-Id: c006057773df6fe4d9e55d54162215c65efc8f00

Change-Id: I3d9e81d408248c79201984e5f269de7eb2f3813e
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:09:14 +08:00
Juju Sung
05c264ab17 [ALPS04239425] BT: BIP rule removal 
[Detail]
BIP type is not defined, we remove it since it
will not block "boot to home screen".

MTK-Commit-Id: 01354af452eb0299b85ab4b5d349da0972c4f6da

Change-Id: Ieb73ce1be5cd2b9b1e69dd822633de33f98e6cfe
CR-Id: ALPS04239425
Feature: BT AOSP
 2020-01-18 10:09:10 +08:00
haohsiang.hsu
40aef819da [ALPS04345011] Add bootctrl selinux for migration 
Add ioctl commad to ioctl_defines.
Add bootctrl selinux policy for migration

MTK-Commit-Id: 153ba94f12253fd5564f93ebe946e32ee1fe25b2

Change-Id: Iebae37db9cd9988079ecca35e5e82d3c4c8021d6
CR-Id: ALPS04345011
Feature: [Android Default] SIU (SD Image Update)
 2020-01-18 10:09:10 +08:00
Ian-Y Chen
84a8614d81 [ALPS04328846] power: add ioctl permission 
[Detail]
1. Add perfctl ioctl definition
2. Add proc_perfmgr permission in mtk_hal_power

[Solution]

MTK-Commit-Id: 8c800a4e115fd8dd800475a72bffa244c687d26a

Change-Id: Iaa3894b618a3e6ee2b6dfc3b864715a137dee50f
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:09:09 +08:00
Juju Sung
0a3b110ac5 [ALPS04357449] Sepolicy: workaround for denied policy 
[Detail]
Set proc node specific node
- hraphic_composer
- bootanimation
- aee_core_forwarder
- surfaceflinger

MTK-Commit-Id: 46901e2900a497c472b8a7c01f1350bdd28bbdae

Change-Id: I89a1ab578a2841d3a16718153d5a716ad45c399b
CR-Id: ALPS04357449
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:09:09 +08:00
Guoyi Qu
9cd2d57da7 Merge "[ALPS04345674] Add permission" into alps-trunk-q0.basic 
Change-Id: I5ee1de3ab196f98ad1a28cfe523a08bfdb77b3c4
MTK-Commit-Id: e7a513697c744cd1abab486a224ce1229002bb7b
 2020-01-18 10:09:08 +08:00
Guoyi Qu
c4d6a70d03 [ALPS04345674] Add permission 
Add permission for pulling connsys FWlogs out
in Meta mode

MTK-Commit-Id: 3f8753e595642800447133d7fc5feca3e3b44b5e

Change-Id: I144720b05e0c7939bcdf8956de151bcfeb0734d2
CR-Id: ALPS04345674
Feature: Modem Log Tool
 2020-01-18 10:09:06 +08:00
Sandeep Bora
67a10e3b1b Merge "[ALPS04340640] SELinux policy update bootanim.te" into alps-trunk-q0.basic 
Change-Id: Ie7f022b0c8b9437cc19e6d1c17652cda6bc4a904
MTK-Commit-Id: 2a6d5e8c19f2503fbb5b9cf8accb43c6f8de9726
 2020-01-18 10:09:05 +08:00
lokesh
6969eebbef [ALPS04340640] SELinux policy update bootanim.te 
Update bootanim.te file to allow IOCTL commands

MTK-Commit-Id: 2fb03897488c2eb29dc2c6c700b7d9dbbb34ab65

Change-Id: I3287b1a3569b472edfb96f80f2d8765b8049e6e3
CR-Id: ALPS04340640
Feature: [Module]Settings
 2020-01-18 10:09:03 +08:00
Dengwei Xu
061ea43ddf Merge "[ALPS04360439] [EM]sensor move to vendor partition" into alps-trunk-q0.basic 
Change-Id: Iee6747c5899cb78b71365462791ae443da43c0c7
MTK-Commit-Id: 22468b90e17f41bfbd5427439c8c6becff5ab5cd
 2020-01-18 10:09:02 +08:00
Juan Rong
336145916b [ALPS04360439] [EM]sensor move to vendor partition 
Move sensor to vendor partition.It needs vendor_app has permission
to read/write sesor related files.

MTK-Commit-Id: 6f30fb87973b05cff81ec3851192125b4eada182

Change-Id: I95fe0601e155319108bfe68b47441b76cbb0b817
CR-Id: ALPS04360439
Feature: Engineering Mode
 2020-01-18 10:08:58 +08:00
Shan Zhang
7d9696260e Merge "[ALPS04357701] Move Widevine sepolicy from basic to bsp" into alps-trunk-q0.basic 
Change-Id: Ibd04cdf937511b74bab011397ba1f891018606a7
MTK-Commit-Id: 08601256bf56659a911a20843cfc0e7df1b39438
 2020-01-18 10:08:57 +08:00
Jackie Lin
410508d3ed [ALPS04357701] Move Widevine sepolicy from basic to bsp 
Move Widevine sepolicy from basic to bsp

MTK-Commit-Id: 53ecfeae7dc2f032423ebcfa1af522fc8aeafa60

Change-Id: Ie8250dbca503830464f90a0f1642fac86c3bc8e2
CR-Id: ALPS04357701
Feature: Google Widevine Level3
 2020-01-18 10:08:55 +08:00
Michael Hsiao
314a261d1d [ALPS04283974] Audio: HIDL 5.0 
[Detail]
Sepolicy for audio HIDL 5.0

MTK-Commit-Id: b49b562f833468bd225ac08e64e88ba0b379be04

Change-Id: Idfe85b3c04798e2f03d1c39420a4e38e7cdf4a1f
CR-Id: ALPS04283974
Feature: [Module]Audio HAL
 2020-01-18 10:08:54 +08:00
Ping-Hsun Wu
d6a6196eae Merge "[ALPS04219582] mmservice 1.2" into alps-trunk-q0.basic 
Change-Id: I1cfb57f67282fce63874c38168d13e13c7dfd395
MTK-Commit-Id: ef1c7004fc237a1b3cfed92fca6c7419329598db
 2020-01-18 10:08:53 +08:00
Howard Ho
6ea35358f7 [ALPS04219582] mmservice 1.2 
1. update mmservice to 1.2
2. BlitStream for MDP & PQ func

MTK-Commit-Id: b56c9af2d24bde8bb8c754adde31b9aa1741ab1f

Change-Id: I30e9912260342a227595a0a05de124b810c6b4e7
CR-Id: ALPS04219582
Feature: [Module]MDP Driver
 2020-01-18 10:08:52 +08:00
Shanshan Guo
1086506de4 [ALPS04345534] SEPolicy: add permission for system_app 
[Detail]
For Andorid Q, there is a more stringent restriction for ioctl,
system_app need to access proc_ged by ioctlcmd=0x6700

MTK-Commit-Id: c610a674e4a9dcdadde0eb619326359253f59f15

Change-Id: I33cd7c4e29b6bec1dc0956cf6d4a136f08f1d511
CR-Id: ALPS04345534
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:08:47 +08:00
Guoyi Qu
bc6a54d6f1 [ALPS04345674] Add permission 
Add permission for customer new feature

MTK-Commit-Id: d17839b053c5e56e060edf3421edca48f83c856f

Change-Id: Idc774aced0f2faea8a74e82430e57257fb5c3efc
CR-Id: ALPS04345674
Feature: Modem Log Tool
(cherry picked from commit 4c795389f056a8cb60ca151e6d36ca1779d2c31c)
 2020-01-18 10:08:47 +08:00
Kane Jhang
eff15efb2a [ALPS04288834] Q- migration: Add needed SE policy 
[Detail] Add HWC needed SE policy

MTK-Commit-Id: 166aa064a2f2912dd6689baf7d5b9d0adeca816e

Change-Id: I2ad22692392a9cc52aa9de15c2ff8ee7849da760
CR-Id: ALPS04288834
Feature: [Module]SurfaceFlinger/HWComposer
 2020-01-18 10:08:47 +08:00
mtk12096
3d72079909 [ALPS04345724] add sepolicy for merge_hal_service 
Detail] Add SE policy for merge_hal_service

MTK-Commit-Id: 66cdaaaf50d07cb4b4e09b1aafbe0541f8156617

Change-Id: I514534a3a852af5d9393dacd4f920ea0b41effd5
CR-Id: ALPS04345724
Feature: Memory Optimization
 2020-01-18 10:08:43 +08:00
lokesh
b151556fc1 [ALPS04340640] SELinux policy update bootanim.te 
Update bootanim.te file to allow IOCTL commands

MTK-Commit-Id: 63b0669373adc7386aa445b2e617abde5e40bcbb

Change-Id: I0e62af7c87040cd438e5e62171b830c6641e0e81
CR-Id: ALPS04340640
Feature: [Module]Settings
 2020-01-18 10:08:39 +08:00
mtk81325
9213ad4850 [ALPS04304578] e2fs: permission for ioctl/ioctlcmd 
[Detail]
fix avc denied for mk2fs in boottime.

MTK-Commit-Id: f0e39a287a24f65bb85aeda1229fcb9d9ef90712

Change-Id: I894765c5b9b5947d5bceaf37fac7f07e898e12dc
CR-Id: ALPS04304578
Feature: [Android Default] F2FS File System
 2020-01-18 10:08:39 +08:00
lena wang
2759cfde98 [ALPS04288147] Sepolicy:SIM On/off feature 
Add property access right for APP usage.

MTK-Commit-Id: f01ca106779bea2c9699fbecbc4c3de94e0ab3e9

Change-Id: I1652ead60b4b517a3a3d04aabe1d61bb7a49933c
CR-Id: ALPS04288147
Feature: SIM
(cherry picked from commit 620f4ace14bc12b95e9345b8f73dcffc372b2171)
(cherry picked from commit d447535fbc6e972fb64696481de5cb8bf3dfc546)
 2020-01-18 10:08:39 +08:00
Guoyi Qu
58bd7b2501 Merge "[ALPS04328634] Add permission" into alps-trunk-q0.basic 
Change-Id: Id68d3112d49f509a3f3babb45eff362c84cb7c2b
MTK-Commit-Id: cbf64ee2d3507d461cacccbea166a9d8aecb6c2e
 2020-01-18 10:08:39 +08:00
Guoyi Qu
77ca8c9c40 [ALPS04328634] Add permission 
Add permission to get WMT driver status.

MTK-Commit-Id: 1a7509e427a1712ce7a9f31efae9f731aecce941

Change-Id: I14e3c7ef2d96db114cf87e3be7f5df4ce16a222a
CR-Id: ALPS04328634
Feature: Connsys Log Tool
 2020-01-18 10:08:37 +08:00
guanglai guo
40975ecc65 [ALPS04339185] selinux: add start mdlogger property set policy 
add start mdlogger property set policy:
set_prop will get the permission of set and get property.

MTK-Commit-Id: aea7cd86f8ba3661eb0d4407d569b9501159b6a1

Change-Id: I247e41112b4b1df1450279c21bdc578935a2d359
Signed-off-by: guanglai guo <guanglai.guo@mediatek.com>
CR-Id: ALPS04339185
Feature: Modem Interface Driver
 2020-01-18 10:08:33 +08:00
Shane Chien
8beff55795 Merge "[ALPS04237702] Audio: Add permission for audio scp device in meta_tst.te" into alps-trunk-q0.basic 
Change-Id: Ifddc8e826b67209a89cc34d8f5651808f608151a
MTK-Commit-Id: 6b9304096ac8b5c5a9dfff83d6e0b80d0ff9f8c7
 2020-01-18 10:08:32 +08:00
HsinYi Chang
68d0f1a4dc [ALPS04237702] Audio: Add permission for audio scp device in meta_tst.te 
Add permission for audio scp device in meta_tst.te

MTK-Commit-Id: e47a80662cb1b514739333ef8edc30131013841b

Change-Id: I578b9cd8325eb3637f68ffa7a7692aac17df8d5f
CR-Id: ALPS04237702
Feature: DSP SmartPA
(cherry picked from commit a9abb35ba18fb5a43d0e0612d3259351eafb1db6)
 2020-01-18 10:08:31 +08:00
Shane Chien
e5941191f7 [ALPS04237702] Audio: Add permission for audio scp device in factory.te 
Add permission for audio scp device in factory.te

MTK-Commit-Id: 244323d818b671a13f105cf0c715d9ff57a215d5

Change-Id: I18c3d250762522066d1dc568db9ba3998f479806
CR-Id: ALPS04237702
Feature: DSP SmartPA
(cherry picked from commit f761ad3ca40fe037846b131aacbbd37c2c904069)
 2020-01-18 10:08:27 +08:00
Ian-Y Chen (陳尹)
197aeeb5d1 Merge "[ALPS04328846] power: add IMtkPower and IMtkPerf" into alps-trunk-q0.basic 
Change-Id: Ic614a6d376ae8ac9c6d2e785cc968a39a8daa524
MTK-Commit-Id: db87d4a65123d299c3f5b11691a6e295c04f8162
 2020-01-18 10:08:26 +08:00
Shane Chien
25fb796fea [ALPS04237702] Audio: Add permission for audio scp device 
Add permission for audio scp device, instead of only
SCP SmartPA.

MTK-Commit-Id: 479293f8195469648aba65860920128fe85fa3f0

Change-Id: Ic33320ae0c8f36217da2aae0afba763609608af3
CR-Id: ALPS04237702
Feature: DSP SmartPA
(cherry picked from commit 1dfd94a4058c3d960539066bfe61d5032ca95c9d)
 2020-01-18 10:08:26 +08:00
Ian-Y Chen
098ee2fd8a [ALPS04328846] power: add IMtkPower and IMtkPerf 
[Detail]
1. Remove IPower extension
2. Add vendor.mediatek.hardware.mtkpower

MTK-Commit-Id: edad60cd659da32631fb8ef2da9a74ad21231d8a

Change-Id: Id65adb8625f89805fbb94c472b4b6ca744fa1943
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:08:24 +08:00
Josh-YC Liu
985027f9bf [ALPS04306526] AAL: add AAL vendor partition property 
Add vendor property for AAL.

MTK-Commit-Id: a7d55ae905f951254aab9e902be4b7ec09e8a04f

Change-Id: I1c651cb5657cdbeb2b91960f90f9c02508fa2364
CR-Id: ALPS04306526
Feature: Ambient Light Adaptive Luma
(cherry picked from commit 0fbccdc8421acd6544153f2527c492220979cade)
 2020-01-18 10:08:23 +08:00
Jonas Lai
0ae36245e9 Merge "[ALPS04314391] SYS_DEBUG_MTKCAM via aee_aedv" into alps-trunk-q0.basic 
Change-Id: Iff164c4db2cadd205a78710b38cae79949adce24
MTK-Commit-Id: 324890523ef0bf3608ad8ba074ff998447ff16e8
 2020-01-18 10:08:19 +08:00
Jonas Lai
2102224bdc [ALPS04314391] SYS_DEBUG_MTKCAM via aee_aedv 
Allow camerahalserver to dump debug info to SYS_DEBUG_MTKCAM via aee_aedv.

avc: denied { write } for path="/data/vendor/mtklog/aee_exp/temp/db.9oRG8O/SYS_DEBUG_MTKCAM"
dev="dm-2" ino=1458278 scontext=u:r:mtk_hal_camera:s0
tcontext=u:object_r:aee_exp_vendor_file:s0 tclass=file permissive=0

MTK-Commit-Id: 6b096cffb7c389e160335c9dfa241b54fd9da7c8

Change-Id: Ic4075ad89fcf32f95a0b0c1c3279f134c1f903ec
CR-Id: ALPS04314391
Feature: [Android Default] Camera Application Basic Functions
(cherry picked from commit 90e1c9c2e1668be7c4c25d0d0a7eda65ad286539)
(cherry picked from commit dbc75e9efbd7cb40b3b1102abe934943e8f7f2b7)
 2020-01-18 10:08:17 +08:00
Jason Su
38d94e1620 Merge "[ALPS04092649] GNSS HIDL v1.1 feature support" into alps-trunk-q0.basic 
Change-Id: I547002eadd975055d4e41757700366bc047e8962
MTK-Commit-Id: 1dcbb19741c5549c81191fc9bb8f3cf24da3666e
 2020-01-18 10:08:16 +08:00
Jason Su
a0d704855e [ALPS04092649] GNSS HIDL v1.1 feature support 
GNSS HIDL v1.1 feature support

MTK-Commit-Id: 4571763d450b2049200f512042ad547e15dc0bbc

Change-Id: Ie96577d39e08d2960200ef7a8d6b58892bc6a73f
CR-Id: ALPS04092649
Feature: Location AOSP
 2020-01-18 10:08:14 +08:00
Guoyi Qu
674a078700 [ALPS04293786] grant map permission 
SELinux: Add map permission

MTK-Commit-Id: a22cef3bef32ef81209eadc40cc235c6f14fdd20

Change-Id: I6c2ef8491bead430e1dd3c0a784dec8faccefb36
CR-Id: ALPS04293786
Feature: Connsys Log Tool
(cherry picked from commit 65870f81b629bc35cdfba2563dadf04ac54822de)
 2020-01-18 10:08:13 +08:00