NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
839 Commits 2 Branches 0 Tags
Commit Graph

802 Commits

Author SHA1 Message Date
Lili Lin
59f0ec9f6e [ALPS03881723] Workaround build error 
[Detail] enable PRODUCT_COMPATIBLE_PROPERTY_OVERRIDE = true, will cause build error

[Solution] Mark rules that violate AOSP neverallow rules

MTK-Commit-Id: c850c6f1fcb8de76235ea2be51becb7a2ccc6190

Change-Id: Ib9a80f4495d6db588133f929c9ea70e7215ad2aa
CR-Id: ALPS03881723
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:35:54 +08:00
Larry Liang
a94ac3e353 Merge "[ALPS03841705] AEE porting on Android P" into alps-trunk-p0.basic 
Change-Id: Ie88c8fb29e6e51f122cb41103b6807dc9486b8a5
MTK-Commit-Id: 17ddd9047c584201262777a2b7209980d600ab49
 2020-01-18 09:35:50 +08:00
mtk11285
457f1855f1 [ALPS03841705] AEE porting on Android P 
[Detail]
1. modify property according to P rule
2. add some selinux rules
3. relable /proc/slabinfo /proc/zraminfo

MTK-Commit-Id: aa654138c8b48d223b614c81d2f39d7cd6eedd1f

Change-Id: Ib47383553b0d320d3766780f35c397be60dc1339
CR-Id: ALPS03841705
Feature: Android Exception Engine(AEE)
 2020-01-18 09:35:48 +08:00
lokesh
bea2ef85fd [ALPS03870695] SELinux poilcy violation 
[Detail] Fix SELinux poicy violation in bootanimation

[Solution] Removed unnecessary code from te file

MTK-Commit-Id: f770df059573e3379505534bfbe86e090ed82139

Change-Id: I9808b8bfe1008d7608e7de8f923ee36779dce953
CR-Id: ALPS03870695
Feature: Boot Animation
 2020-01-18 09:35:32 +08:00
Chaoran Zhang
50e56dcbb1 Merge "[ALPS03872369] Rename property to "vendor.xx"" into alps-trunk-p0.basic 
Change-Id: I57cf73e86e7a6aba4aad91412c56699f17713e9e
MTK-Commit-Id: b8c6cebe8de71db1669bccd934ef7102bc32207a
 2020-01-18 09:35:28 +08:00
Chaoran Zhang
98dbe25ff8 [ALPS03872369] Rename property to "vendor.xx" 
[Detail]
Rename property to "vendor.xx"
[Solution]
Rename property to "vendor.xx"

MTK-Commit-Id: 87caf0e36e6fdba1493399d2fae880f86e4f8024

Change-Id: Ia5015020a88fcb84609635938792f86a6492aa3f
CR-Id: ALPS03872369
Feature: Location Chipset Capability
 2020-01-18 09:35:23 +08:00
Lili Lin
6a8302cec7 Merge "[ALPS03878175] Remove nvram policy" into alps-trunk-p0.basic 
Change-Id: I94bcecce9d7a461fd77283796f260381b7b9f882
MTK-Commit-Id: b37cccde7337b13e9d0065a902d37a12bea9512d
 2020-01-18 09:35:12 +08:00
Lili Lin
c5ef24d95d [ALPS03878175] Remove nvram policy 
[Detail]
1. Since Android P, system and vendor cannot use
   on-disk files to communicate.
   Nvram is vendor_data_file, while audio-daemon is system process.
2. Actually since Android O, audio-daemon use
   AudioSystem::getParameters() to send command to audio driver who is
   the real one who touch the nvram. This is already a HIDL,
   In other words, audio-daemon does not touch nvram directly.

[Solution] Remove unnecessary policy, which may cause build break.

MTK-Commit-Id: ed37b24d8b1d939ee4d428e3ed49ba3155e953ec

Change-Id: I87c9cf8a6fb3952e24f0fb140b5cc65a59712350
CR-Id: ALPS03878175
Feature: Audio Tuning Tool
 2020-01-18 09:35:08 +08:00
Vink Shen
bb8ea108ab Merge "[ALPS03852714] Trustonic TEE: Fix persistent partition path" into alps-trunk-p0.basic 
Change-Id: I30c9855e625ece1891141d98fdeb486cf45a1274
MTK-Commit-Id: e93f930503be15d3a640d9770e60bbe4db9f2b8a
 2020-01-18 09:35:04 +08:00
Vink Shen
acf2d42d84 [ALPS03852714] Trustonic TEE: Fix persistent partition path 
[Detail] Fix persistent partition path for Android P

MTK-Commit-Id: b49324e4ff63196b8051882cbe439ecb8ca44d2d

Change-Id: I7b22f6d7f07b26bf3f0e787ee372b7bd52b16fe5
CR-Id: ALPS03852714
Feature: Trustonic TEE (Trusted Execution Environment)
 2020-01-18 09:34:53 +08:00
Elvin Lin
faea99188f Merge "[ALPS03861775] Remove the sysfs_power_supply label" into alps-trunk-p0.basic 
Change-Id: I3b1741c833f3f4308cbfa55da01fb79aa3bd38cc
MTK-Commit-Id: 0ffe2945e2d33b28c18bc00308701cc7e4321312
 2020-01-18 09:34:49 +08:00
Elvin Lin
c25696d051 [ALPS03861775] Remove the sysfs_power_supply label 
[Detail]
Since Android P, battery-related information should be declared as native
sysfs_batteryinfo, which can be accessed by healthd and other processes
asking for battery information.

[Solution]
1. Remove sysfs_power_supply.
2. Change the usage from sysfs_power_supply to sysfs_batteryinfo.

MTK-Commit-Id: 5713190900415312f7904cdf6d46a891996d5786

Change-Id: I10099570afdb48f0806d6979a3fb11b9b9e59fbe
CR-Id: ALPS03861775
Feature: Charger
 2020-01-18 09:34:44 +08:00
bo.shang
933f54b148 [ALPS03879689] mdlogger SELinux error 
[Solution] Fix boot mode selinux error

MTK-Commit-Id: 561f4064456c585ee83e66fc863065d77f256ff8

Change-Id: Id272b61b7e2fc462726770ccde9bd31c1725ce9e
CR-Id: ALPS03879689
Feature: C2K Modem Log Tool
 2020-01-18 09:34:33 +08:00
Shane Chien
cce2bb9a1a Merge "[ALPS03870469] Audio: remove useless selinux setting" into alps-trunk-p0.basic 
Change-Id: I45274ad549efa086e9f59f6d23158185e5a431d1
MTK-Commit-Id: 25e7b18cdaa870edba45da80d4c7822d020622a0
 2020-01-18 09:34:27 +08:00
Shane Chien
d16a43dba8 [ALPS03870469] Audio: remove useless selinux setting 
[Detail]
remove useless selinux setting

MTK-Commit-Id: 2b85d091ab892d172bc812ec0888bc1f389af8c6

Change-Id: I6b7ea973f98b4bd5c4b04379d2eef4ea6cc89aac
CR-Id: ALPS03870469
Feature: Phone Sound
 2020-01-18 09:34:22 +08:00
Ming-Pei Hsu
5e4495d7ce Merge "[ALPS03875603] Relabel telephony switch property" into alps-trunk-p0.basic 
Change-Id: I668eca7c355690a730642773663585b2ad981479
MTK-Commit-Id: c1738190079af936773914e5c8a08349459c5e7f
 2020-01-18 09:34:12 +08:00
ming-pei.hsu
9fcff12f5c [ALPS03875603] Relabel telephony switch property 
Relabel global telephony configuration properties.

MTK-Commit-Id: 2666cdeb888a5c7c0e87358766d60857cd3dc896

Change-Id: I317dd786e6ea32087a6866adeb415e35bc5017e1
CR-Id: ALPS03875603
Feature: Telephony feature switch dynamically
 2020-01-18 09:34:04 +08:00
mtk12101
4dc268f514 [ALPS03825066] Fix build error 
[Detail]
1.The types on /sys/ must be associated with the
"sysfs_type" attribute: sysfs_keypad_file
2.sysfs_type only have read permission

[Solution]
1.Change sysfs_keypad_file to sysfs_type
2.Modify the permission to read about sysfs_type

MTK-Commit-Id: 4cf285589167b25623a67c6b951c796846a9a3ad

Change-Id: I3dd516eaf9959611c9a2b003cb3af07a35da5442
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:33:59 +08:00
Shan Zhang (张山)
2ca1a3e6b8 Merge "[ALPS03804621] [P migration] Revert "Remove SEPolicy violated"" into alps-trunk-p0.basic 
Change-Id: I1f5509362726d31f4012d39f2444b8ab4d0b44a5
MTK-Commit-Id: c84d1583503782d39e02209d7b814a192e6470dd
 2020-01-18 09:33:50 +08:00
Allen Chu
7a473d8720 [ALPS03804621] [P migration] Revert "Remove SEPolicy violated" 
[Detail]
Modify file.te to avoid this violated:
type sysfs_keypad_file, file_type,sysfs_type;
==>type sysfs_keypad_file, fs_type;

So, revert this change.

MTK-Commit-Id: d60f20634eecfc97b7286c493884b3bea6d8e875

Change-Id: I9a1cd1d6888e4b9eb2fb1b70a4ad91d256e950c3
CR-Id: ALPS03804621
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
 2020-01-18 09:33:43 +08:00
Shan Zhang (张山)
d274e48a91 Merge "[ALPS03825066] Fix build error" into alps-trunk-p0.basic 
Change-Id: I613f71842f979761499d572b7e1ed1e7d74d4849
MTK-Commit-Id: 234828c4443151f26ab17b3d7ea81a50356362e1
 2020-01-18 09:33:38 +08:00
mtk12101
b46f5159b8 [ALPS03825066] Fix build error 
[Detail]
1.Google neverallow to modify the /proc and /sys folder
2.vendor & system process can not access each file

[Solution]
1.Change the type of sysfs_file to common file
2.Mark the rules which violate the neverallow rules

MTK-Commit-Id: 326790e7af9c782f3dace5c667b4b07860370933

Change-Id: Ifa61d2561078d3b6cde612806607d35d6cfdc4d6
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:33:28 +08:00
Allen Chu
f58168abbd [ALPS03804621] [P migration] Remove SEPolicy violated 
[Detail]
Android P adds "never allow" rule for access system file

MTK-Commit-Id: 819e979bea9491adf5fe40d804a9a49ea3931e86

Change-Id: Ie2bc5ce87a9ce0249ec8e4df03a416a7f94cb4d5
CR-Id: ALPS03804621
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
 2020-01-18 09:33:20 +08:00
Weilun Liu
a428ebd38c [ALPS03861873] fix build error 
[Detail]
correct sepolicy format, should add ,
between proerty name definition

MTK-Commit-Id: b215a791362fa12c54cd99019a25608bc2771a18

Change-Id: I546219cebc8ea2b656a8ea61d9fa2cbbb2dc1c8d
CR-Id: ALPS03861873
Feature: [Module]Telephony power on
 2020-01-18 09:33:13 +08:00
Black Chen
975daae102 [ALPS03866092] wlan: add sepolicy for /dev/fw_log_wifi 
[Detail]
Create sepolicy definition for /dev/fw_log_wifi

[Solution]
N/A

MTK-Commit-Id: 28b450dc71b48735fef6b58ade1f97bc8d81da8f

Change-Id: If932821d83e6999a3068a7520ea987b7a2ce09f8
Signed-off-by: Black Chen <black-ch.chen@mediatek.com>
CR-Id: ALPS03866092
Feature: Connsys Log Tool
(cherry picked from commit 39d8afbc1344efe75a4c591fec4e8eab78db1c61)
 2020-01-18 09:33:04 +08:00
Weilun Liu
ba9c40f244 [ALPS03861873] rename system property 
[Detail]
rename ril.ipo to vendor.ril.ipo

MTK-Commit-Id: ceb3557c1f5abe011a8f1fbb92985d5ae1bc22e0

Change-Id: Ibc09f1687774046013d673a8db74f9aa911a277f
CR-Id: ALPS03861873
Feature: [Module]Telephony power on
 2020-01-18 09:32:55 +08:00
Max Huang
f5716bff04 Merge "[ALPS03866092] Debug Utility: add sepolicy for /dev/fw_log_wmt" into alps-trunk-p0.basic 
Change-Id: Iaa70f5f8ea3d8883a6713f76de2205f7e3cc9bad
MTK-Commit-Id: b408cb4b919e30d4fc3d1c6c444ccc0dc8dced36
 2020-01-18 09:32:52 +08:00
Danny Shih
633ed5a00e [ALPS03866092] Debug Utility: add sepolicy for /dev/fw_log_wmt 
[Detail]
Create sepolicy definition for /dev/fw_log_wmt

MTK-Commit-Id: ffee8a32646445eec5ddb80e4ca4f22b6a74f54e

Change-Id: I68560eaf5f7d8e03317aae494d1861141077a31e
Feature: Connsys Log Tool
Signed-off-by: Danny Shih <danny.shih@mediatek.com>
CR-Id: ALPS03866092
(cherry picked from commit 85aad3cfc9bd3809ea78fcb72d23cb70e8dba462)
 2020-01-18 09:32:41 +08:00
Weilun Liu (劉維倫)
ecd8df2454 Merge "[ALPS03861873] rename system property" into alps-trunk-p0.basic 
Change-Id: I617e270fac5c7f520a6b1af27a67c88a3376eb9f
MTK-Commit-Id: 5c8f561320e8662c1c1c3f01569100f48b411a7e
 2020-01-18 09:32:31 +08:00
Weilun Liu
099ce766c2 [ALPS03861873] rename system property 
[Detail]
1. rename ril.mux to ril.vendor.mux
2. rename ril.ipo to vendor.ril.ipo

MTK-Commit-Id: 78bc6ff5295857d43026874250bf19005601f04f

Change-Id: I11f24cfb470db4ca4ed9108bce66a6bf956095fd
CR-Id: ALPS03861873
Feature: [Module]Telephony power on
 2020-01-18 09:32:27 +08:00
Jimmy-YJ Huang
5602864cb5 Merge "[ALPS03737981] power: prepare Hal version." into alps-trunk-p0.basic 
Change-Id: I4b4abe6b727b7e92b480eee46fce9e6219f6ab73
MTK-Commit-Id: 0271da96341ac128874dc027fe57b2cec5dfca8e
 2020-01-18 09:32:17 +08:00
Jimmy-YJ.Huang
d28ccc99bd [ALPS03737981] power: prepare Hal version. 
[Detail]
prepare HAL version 2.0

MTK-Commit-Id: fa6c01053653fcc337a336c1da19c07db7a69486

Change-Id: I0da57902ef3fb8e7e9eadba892e57cc322025bc9
CR-Id: ALPS03737981
Feature: System Performance
 2020-01-18 09:32:08 +08:00
mtk81217
ce7965cf78 [ALPS03855838] Rename MTKs system properties 
Rename World Phone property "ril.active.md" to "vendor.ril.active.md" for
change sepolicy file.

MTK-Commit-Id: 168ea39aae1a74f214888201f7c3e1ce3ac57299

Change-Id: Iff29c044cfe3914a2bc78a673b4fc4a851c5f669
CR-Id: ALPS03855838
Feature: World Phone
 2020-01-18 09:31:58 +08:00
Jungo Lin
b5f93ddd6c [ALPS03859804] Rename MTKs system properties 
From Android P, system properties added by vendor/ODM/OEM should follow
naming rules.

Please follow naming rule to rename the property:
1. Read-writable: A.B -> vendor.A.B
2. Read-only: ro.A.B -> ro.vendor.A.B
3. Persistent: persist.A.B -> persist.vendor.A.B

MTK-Commit-Id: 0ced1a123df3fc3698ae01c9461c7e805aa5a948

Change-Id: I94b95909d9c2f7273fed87b0c5b6f38f670f6b05
CR-Id: ALPS03859804
Feature: [Module]IP Networking
 2020-01-18 09:31:42 +08:00
Ian-Y Chen
5732613313 [ALPS03804108] power: fixing SELinux violation 
[Detail] Fixing SELinux violation

[Solution] Remove redundant rules

MTK-Commit-Id: 1f8da8de51be91d616cc48fea67d53c688556e7c

Change-Id: Ibd11dc92d0eb4a0de6d7903a709495beafc70209
CR-Id: ALPS03804108
Feature: System Performance
 2020-01-18 09:31:39 +08:00
roger.chang
a66b8deff0 [ALPS03867541] Rename MTKs system properties 
From Android P, system properties added by vendor/ODM/OEM should follow
naming rules.

Please follow naming rule to rename the property:
1. Read-writable: A.B -> vendor.A.B
2. Read-only: ro.A.B -> ro.vendor.A.B
3. Persistent: persist.A.B -> persist.vendor.A.B

MTK-Commit-Id: e750504be160afe62a2805b334157e4304878ce4

Change-Id: I0f263557a5d6fb5e471c4680f4028eddb85f7504
CR-Id: ALPS03867541
Feature: UCE, User Capability Exchange
 2020-01-18 09:31:30 +08:00
Morven-CF Yeh
2519f5e40d Merge "[ALPS03860276] Rename MTKs system properties" into alps-trunk-p0.basic 
Change-Id: I4487776e8f843dbed5b69396ca2564583e2bf69b
MTK-Commit-Id: beb0792ade4a1881626aa0cc3934023959049e8a
 2020-01-18 09:31:14 +08:00
Morven-CF Yeh
a1cfcc550c [ALPS03860276] Rename MTKs system properties 
[Detail] modify debug.factory.idle_state to
vendor.debug.factory.idle_state

MTK-Commit-Id: 725183500a96ad7d96bea72edfd5fd42643db833

Change-Id: I323b158642aec36604fe6d1dab2afe217ba09002
Signed-off-by: Morven-CF Yeh <morven-cf.yeh@mediatek.com>
CR-Id: ALPS03860276
Feature: Power Management
 2020-01-18 09:31:09 +08:00
henry huang
9764053433 [ALPS03841839] fix nvram SELinux violations 
[Detail]fix nvram selinux violations

[Solution]remove system_data_file sepolicy from nvram_daemon.te/nvram_agent_binder.te

MTK-Commit-Id: 4a9272ef13c590133649ca46d962f14768a216ef

Change-Id: I473edae03de50c6d747477e34e6eb797b7b1875e
CR-Id: ALPS03841839
Feature: NVRAM Partition
 2020-01-18 09:30:59 +08:00
Chunlan Wang
06fbbbdb00 [ALPS03861528] modify sepolicy for boot mode 
[Solution]
sysfs is neverallow, so use sysfs_boot instead

MTK-Commit-Id: 8a48cfbc0a1df06330b9699da2f87243dd8155fe

Change-Id: I67a2dc04dfa5d863ceb8104695dec5d0dbc62630
CR-Id: ALPS03861528
Feature: Factory Mode
 2020-01-18 09:30:46 +08:00
yuhui.zhang
5aa62a3b04 [ALPS03860173] Modify em_svr SEPolicy 
[Detail]
Modify em_svr SEPolicy to support Android P

MTK-Commit-Id: bb10076f302a7f07d7fabb0b281a01ff3694efb6

Change-Id: Ic56cf6be0f82d0c146cdeebbc85ed00958577aff
CR-Id: ALPS03860173
Feature: Engineering Mode
 2020-01-18 09:30:40 +08:00
Vink Shen
551d01441c [ALPS03852714] Trustonic TEE: Fix persistent partition path 
[Detail] Fix persistent partition path for Android P

[Solution] Move /vendor/persist to /data/vendor/persist

MTK-Commit-Id: fdfc88d4f679c6347923de9db6ec1dcc82675966

Change-Id: I53427f90670fcbb6b0ed6f12bbd1da748e9ac6ca
CR-Id: ALPS03852714
Feature: Trustonic TEE (Trusted Execution Environment)
 2020-01-18 09:30:33 +08:00
Larry Liang
c5e6816987 Merge "[ALPS03841705] fix the violation during Android P migration" into alps-trunk-p0.basic 
Change-Id: I0f2a4cad7e3f07a1ab2a9ba391ac1c79a14ae061
MTK-Commit-Id: f2f6adceb758cc09ae694b6e9a63407ab2aab9de
 2020-01-18 09:30:18 +08:00
mtk11285
3f1078bbd4 [ALPS03841705] fix the violation during Android P migration 
[Detail] fix the violation during Android P migration

MTK-Commit-Id: 7dae33f4c7435a7eeae86a738d88dc6c3e52e3c3

Change-Id: I1000b278dd411438bf43ca0bda22d83aab52616f
CR-Id: ALPS03841705
Feature: Android Exception Engine(AEE)
 2020-01-18 09:30:11 +08:00
Allen Chu
6c3fdf8a05 [ALPS03804621] [P Migration] Fix SEPolicy violated 
[Detail] Remove read/write system_data and radio_data
         declaration

MTK-Commit-Id: 35a543208e84f95989f7f01f9c2ed766c5aab457

Change-Id: I135686e96cf214ca67523256aaa21e96f4fca3f0
CR-Id: ALPS03804621
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
 2020-01-18 09:30:03 +08:00
chiayen
1f7d244f89 [ALPS03273784] Remove MPED related policy 
[Detail] Remove MPED related policy

MTK-Commit-Id: 5cd7d5187a0598e591a59abd59b379317266c15d

Change-Id: If1299e27deb8bb5d01b174fd3b4daf221e3061f8
CR-Id: ALPS03273784
Feature: Fused Location
 2020-01-18 09:29:47 +08:00
Bo Ye
3ace839be3 [ALPS03825066] Mark file context to fix build fails 
Restore the policies accessing files labeled
    as proc_xxx or sysfs_xxx, but there are some
    exceptions for coredomain process, such as
    meta_tst,dump_state,kpoc_charger

MTK-Commit-Id: 7953b5203bb3cac099c3326d330643b4cd73746d

Change-Id: I4b16c09c352891783e837bea370c264966ca6d13
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:29:41 +08:00
chiayen
c1813481d1 [ALPS03273784] Remove mpe.te 
[Detail] remove mpe.te in android p

MTK-Commit-Id: 793d5eb7d2faf4e8c5dfd1b3371f3ab911a9998c

Change-Id: I86fdb722a67284ef601b813f63bcdb66a842f311
CR-Id: ALPS03273784
Feature: Fused Location
 2020-01-18 09:29:41 +08:00
Bo Ye
4dc7f49e69 [ALPS03825066] Mark file context to fix build fails 
Should add vendor_file_type for vendor files, and
    add core_data_file_type for system files. Vendor files
    and system files are differented by file path.

MTK-Commit-Id: 602eb35b36c658789e093e2730b16b9b5c892c0f

Change-Id: Ibacc08427f332741f12757c66ecbb8ce91b76416
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:29:36 +08:00
Bo Ye
5849c224e3 [ALPS03825066] P migration selinux build failed fix 
1. Mark polices which accessing proc/sysfs file system
    2. Add violator attribute to modules violate vendor/system rule.

MTK-Commit-Id: 3954cad7a1428cda694d8428c2235a78aa6e7cc8

Change-Id: I401ae5b87eb9a03f324bef83c6678149606b15a8
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:29:36 +08:00