NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
999 Commits 2 Branches 0 Tags
Commit Graph

999 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Zhongchao Xia
489d71fd5e [ALPS04741328] MMS HIDL use lazy mode 
MMS HIDL use lazy mode if MTK_GMO_RAM_OPTIMIZE
is true.

MTK-Commit-Id: fd8a40b123a05c3b49eeec138c9326ead2cc5288

Change-Id: I23fd115254a9e74aa0068b8ecd36fd9ebcf1fad8
CR-Id: ALPS04741328
Feature: [Module]MDP Driver
(cherry picked from commit 25220c503042401944a96a1dba27df45058419d3)
 2020-01-18 10:19:10 +08:00
guozhen.tang
9da18d4d0b [ALPS04753953] gps sanity fail 
add permission for gps to read prop file

MTK-Commit-Id: 5876b325d9ddbe6a6a3c800f830432f64fd3a5b6

Change-Id: I2aad7aebe615a27b21aaef33aa94dfcc8bf4c429
CR-Id: ALPS04753953
Feature: A-Glonass
 2020-01-18 10:19:04 +08:00
hua.tian
482be9e9f2 [ALPS04746763] Remove unsafe rules 
Remove the rules to create folder under /data in own process.

MTK-Commit-Id: 7bda57233e721387cb85dc246253a66de9e1ee46

Change-Id: I904278893497cd1270840b7e2bd4d20e3bc9dde9
CR-Id: ALPS04746763
Feature: Mobile Log Tool
 2020-01-18 10:19:04 +08:00
Xiangsheng Hou
dc891f1bc7 [ALPS04747012] SEPolicy: label mtd in procfs 
[Solution]
label mtd in procfs

MTK-Commit-Id: f8ed85a97de48e92e6585070ce7ae467b62275ff

Change-Id: I928aad7c422194c5e1a59345dfbd888379550cb1
Signed-off-by: Xiangsheng Hou <xiangsheng.hou@mediatek.com>
CR-Id: ALPS04747012
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:19:03 +08:00
Hanks Chen
5ed9e36984 [ALPS04748405] add sepolicy for ion cache api 
[Detail]
add sepolicy for ion cache api

MTK-Commit-Id: 86e313906832c12901114ba414334902b8d99353

Change-Id: I64c867ab4a59c93b51c72e1d4ce362f039d6c26b
CR-Id: ALPS04748405
Feature: System Performance
Signed-off-by: Hanks Chen <hanks.chen@mediatek.com>
 2020-01-18 10:19:00 +08:00
Qilin Tan
980fcee399 [ALPS04745284] sepolicy: add BLKGETSIZE rule for bootdevice in MT6763 
In factory mode, It is failed that get size of sdcard in sdcard test.
Because the policy BLKGETSIZE is missed. Add the policy rule, the
test case will pass.

MTK-Commit-Id: 80a2d4ddd763ea35fb6c7fdf5dda40d158c1c95c

Change-Id: I88c685e98bb1439b0992d39285a715020a7c1ce3
CR-Id: ALPS04745284
Feature: Factory Mode
 2020-01-18 10:18:59 +08:00
Ian-Y Chen
b2327f2a22 [ALPS04328846] power: add block device permission 
[Detail]
1. Add sysfs_dm permission
2. Add sysfs_mmcblk permission

MTK-Commit-Id: c4e4b2e30f593f462d38978937c12a44f5d9f16f

Change-Id: I6d301787a9df8af54a5c66e8483cd51e6d0938ad
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:18:59 +08:00
Huaiming Li
6272c879bf [ALPS04719663] fix some avc denied issue 
update some sepolicy rules

MTK-Commit-Id: c1294d5ae7714677077e8d38c6c1624955816cdb

Change-Id: Id30499203b004677bf95b221195ef33749ec6a36
CR-Id: ALPS04719663
Feature: Android Exception Engine(AEE)
 2020-01-18 10:18:55 +08:00
hao.wang
81a6fb6c62 [ALPS04724423] Add Vcodec in mms sepolicy 
Add Vcodec device selinux permission.

MTK-Commit-Id: 8a70eea017980005696af3e55c1a716d49751e7e

Change-Id: Ia6924c9eb35ab0a2a4cc4a2f635507efcd811ba5
CR-Id: ALPS04724423
Feature: Camera Application
 2020-01-18 10:18:55 +08:00
jerry-sc.wu
d53957c10d [ALPS04525779] Thermal: modify permission for power hal 
[Detail]
Modify change thermal policy permission for power hal.
Fix gaming change thermal policy via power hal fail issue.

MTK-Commit-Id: 5e5b22a7b90aae3740ba34c1dfba5c975fb37ebf

Change-Id: Ia0a9f5e1afaaad7a4c8e620c42fac6f38bcdd220
Signed-off-by: jerry-sc.wu <jerry-sc.wu@mediatek.com>
CR-Id: ALPS04525779
Feature: Thermal Management
 2020-01-18 10:18:54 +08:00
Peter Wang
37d307c876 [ALPS04745028] dumpstate: add selinux policy 
add sda/sdb label sysfs_mmcblk for dumpstate

MTK-Commit-Id: 64c01c68f386bedd6413d9bc83eea1aaefca60be

Change-Id: I095d4ff29d37ef1104819a7f030011ac8d72aa75
CR-Id: ALPS04745028
Feature: UFS Booting
 2020-01-18 10:18:51 +08:00
Light Hsieh
63145bc394 [ALPS04688289] sepolicy: Add sepolicy rule for mke2fs 
Add sepolicy rule for mke2fs

MTK-Commit-Id: 979d9a74c16df6bac1dc47f7d40f0f6cb153c864

Change-Id: I774a962e4df4608921c8e29bec5019fcedfdfbd9
CR-Id: ALPS04688289
Feature: eMMC Boot Up
 2020-01-18 10:18:50 +08:00
yuru.zhu
4f38a2249a [ALPS04742139] Support save log to data partition 
[Solution] Add se-linux permission for delete & taglog

MTK-Commit-Id: e6e9a17da095f4f4e9d7c2c62eb5aa32b65a7bd9

Change-Id: I2c9d255ec0a8629dfb9f9b57cdc0ea8a25c8d852
CR-Id: ALPS04742139
Feature: MTKLogger
(cherry picked from commit a0eb93aae4b3fef928490e78dad057a1a315593a)
 2020-01-18 10:18:50 +08:00
Sheldon Wang
cc8a2bd63d [ALPS04709795] Porting WPFA 
[Solution] Porting WPFA.

MTK-Commit-Id: 90e173572ac650f6f6d0a52651afbf83192df161

Change-Id: I2766c30845c8f2909fae11621b27ede93e102190
CR-Id: ALPS04709795
Feature: WiFi Calling Service
(cherry picked from commit 7b3565df616baec658b9dfc74441532b6758e04b)
 2020-01-18 10:18:47 +08:00
Shanshan Guo
1e3c2c02a8 [ALPS04696074] SEPolicy: Fix debugfs path 
[Detail]
In genfs_contexts, /sys/kernel/debug/xxxx
should be genfscon debugfs /xxxx

[Solution]
Modify genfscon rule.

MTK-Commit-Id: a6a9c119776e0c41b36077dac56fcd658f00d1b2

Change-Id: Ic23e10a58558923fbff30500e740ec7955611232
CR-Id: ALPS04696074
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:18:46 +08:00
mtk12101
6d20aad659 [ALPS04737987] Move clearkey and widevine sepolicy to basic repo 
Basic project which need clearkey and widevine will fail to
launch clearkey and widevine process, so we need move clearkey
and widevine related sepolicy to basic repo

MTK-Commit-Id: 889fb14b0d049c0fb53e1f2a45b43a1ba6700f9f

Change-Id: I7b9154b9dcee05be01a2d5f1c7a5f8d365ce4da6
CR-Id: ALPS04737987
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:18:46 +08:00
xiao.liu
c2e8765592 [ALPS04726173] enable AB partition slot 
[Solution]
add sepolicy

MTK-Commit-Id: ec87109470594ffd592fd42a41c11209bdd001f6

Change-Id: Ie016e6bcd93ed4f2c5701b0ef719de8f1f394820
CR-Id: ALPS04726173
Feature: [Android Default] Fastboot
 2020-01-18 10:18:42 +08:00
Adogu Huang
e22f81b608 [ALPS04726978] cam: fix assert in factory mode 
grant CAM_CAL_DRV access in factory mode.

MTK-Commit-Id: d0d09a8d54a5d40c58b05234f03006d75aad03f5

Change-Id: I3a7fc18aae31c41c8ec033c0962ca2828184eef9
CR-Id: ALPS04726978
Feature: Factory Mode
 2020-01-18 10:18:42 +08:00
Huaiming Li
8ed6a9057c [ALPS04719663] add sepolicy rules 
1.dump file: add adsp sepolicy rule for dumping log
2.allow vendor process ro read tracing_on file

MTK-Commit-Id: 954cb9410ded3baa31927881abbff963b5bba56d

Change-Id: Iab86bf588585b7d1b34d1c1fbc6fb5acce833267
CR-Id: ALPS04719663
Feature: Android Exception Engine(AEE)
(cherry picked from commit b0f133c03c3bf22d4794c16f1a2d98d95ad1b70d)
 2020-01-18 10:18:41 +08:00
Johnny Yao
175622c880 [ALPS04363596] WMT: set sepolicy for vendor_init 
set sepolicy for vendor_init

MTK-Commit-Id: bf149e0f2132f3827f4a159ff56c89d56ff71f64

Change-Id: Id7f4e4883c6bc89f78000256d78bf209e6b61684
Signed-off-by: Johnny Yao <johnny.yao@mediatek.com>
CR-Id: ALPS04363596
Feature: [Module]WMT Driver
(cherry picked from commit 7ee51b414cfbeef888ecabc659994144e92108a6)
 2020-01-18 10:18:38 +08:00
hao.wang
6f42a44be5 [ALPS04724423] Add postalgo selinux policy 
Allow to use graphics allocator fd for gralloc_extra

MTK-Commit-Id: b8f8c10636d3686077304ffe6bf21ead1f864945

Change-Id: Ieaa05216c4343eda7b7cda10c6eb6a75c0330208
CR-Id: ALPS04724423
Feature: Camera Application
(cherry picked from commit 95f9b0b32e24984700f33d666dd4521a3209c73a)
 2020-01-18 10:18:35 +08:00
Mike Hsieh
cff428b385 [ALPS04702268] Change sw_sync permission for 3rd party app access 
Change sw_sync permission for 3rd party app use.

MTK-Commit-Id: 756f028f822b28e5863c772c977f3fdfad1eb338

Change-Id: I5f1f4566e8d60b16fd300dc91ddba8cc6aa7e5c4
CR-Id: ALPS04702268
Feature: [Module]MDP Driver
(cherry picked from commit 8d036ea19e62d9f509f1c54d395d4a711b4a4bd7)
 2020-01-18 10:18:34 +08:00
xiao.liu
38b4858be6 [ALPS04726173] Add AB partition some partition RW permission 
[Solution]
add device/mediatek/sepolicy/basic/non_plat/fastbootd.te

MTK-Commit-Id: 5529b3e558d2809977f66e3a37a43c72ad948280

Change-Id: Ie24496994f4a025850b4020066a62f13c1383f1f
CR-Id: ALPS04726173
Feature: [Android Default] Fastboot
 2020-01-18 10:18:30 +08:00
jerry-sc.wu
aecfc15854 [ALPS04735619] Thermal: add file permission 
[Detail]
Add file permission for thermal manager.

MTK-Commit-Id: f28b99158ef677c1370a0bd92fbff8732756512b

Change-Id: I6c871f828fb0dee9f71254f15fb198889c7a0578
Signed-off-by: jerry-sc.wu <jerry-sc.wu@mediatek.com>
CR-Id: ALPS04735619
Feature: Thermal Management
(cherry picked from commit 2a10700b959d147f2db80be8143c2cd6f43ba2a9)
 2020-01-18 10:18:30 +08:00
jerry-sc.wu
673540dbc3 [ALPS04735619] Thermal: modify file permission 
[Detail]
Remove unused sepolicy for security.

MTK-Commit-Id: 9dd692a0415d70888b316552857ccb6fc1a8f8fe

Change-Id: Id3cb597f38aac3629c70384b5b12b291dab60c1d
Signed-off-by: jerry-sc.wu <jerry-sc.wu@mediatek.com>
CR-Id: ALPS04735619
Feature: Thermal Management
(cherry picked from commit 0965c4af39de006e48b35f97cf1f670b72c2bc23)
 2020-01-18 10:18:29 +08:00
xin xu
9a17313658 [ALPS04329540] ccci: add sepolicy rule for ccci_mdinit 
add a init.svc.aee_aedv sepolicy rule.

MTK-Commit-Id: 6777d53c3d3fa914fbf1aefe999eb90db6300e45

Change-Id: I7acfe0fe761b63c6560dffc083162157832aa6a7
CR-Id: ALPS04329540
Feature: Modem Interface Driver
(cherry picked from commit 1e62fd097cee1270807f1e807feecbf313dac750)
 2020-01-18 10:18:29 +08:00
mtk06389
31b3320d92 [ALPS04723934] SEPolicy: Remove phased-out guiext rules 
Remove guiext rules because guiext has been phased out

MTK-Commit-Id: edc7b0828dc540a17dc68a3056b615a31f2e533a

Change-Id: I2eb259de0df187faa4dacb553b900b07f82b20b7
CR-Id: ALPS04723934
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:18:25 +08:00
Juan Rong
a533597f9f [ALPS04725620] [EM] usb/power selinux issue 
Add usb/power path to selinux

MTK-Commit-Id: ad55ebdcbc2f2abd48f74cc7d2ea5b26f2051fcc

Change-Id: I20287cef1ffc4961cf522fbda2ae47236059c564
CR-Id: ALPS04725620
Feature: Engineering Mode
 2020-01-18 10:18:25 +08:00
Eric Chung
4485486a29 [ALPS04685444] GPU: Add selinux policy for gpuservice 
Add selinux policy for gpuservice

MTK-Commit-Id: 88c5d084a571a32f04b801761114e0e0c652822e

Change-Id: I66c3b1be9c8bdc600e0064f9a81f1bf4fe58f984
CR-Id: ALPS04685444
Feature: Vulkan
(cherry picked from commit b7975c41efa9c83e13c25f4580b1f099f170d7af)
 2020-01-18 10:18:21 +08:00
Shanshan Guo
580f64da2c [ALPS04696074] SEPolicy: move contexts to genfs_contexts 
[Detail]
DoRestoreCon will spent more time in Coldboot for sys,proc & debugfs
if their contexts in file_contexts.
Genfscon can reduces time consumption.

[Solution]
Move contexts of sys,proc & debugfs from file_contexts to
genfs_contexts.

MTK-Commit-Id: a5b022f46a3285fa5ab48d418762497d49739948

Change-Id: I4619946e9f7f8f0bcb7503b737bdfac4c014edd1
CR-Id: ALPS04696074
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:18:20 +08:00
Ben Lai
cea90a2052 [ALPS04717735] Rename wifi saps interface property name 
Rename wifi saps interface property name to "ro.vendor.wifi.sap.interface"

MTK-Commit-Id: 247972295f200bae29ff47c82a050e5f076af88d

Change-Id: I1e0e1937be60542fc6dad02420d31f76101e7c54
CR-Id: ALPS04717735
Feature: Wi-Fi Tethering
 2020-01-18 10:18:20 +08:00
mtk06389
f697fb2b40 [ALPS04723934] SEPolicy: Remove phased-out guiext rules 
Remove guiext rules because guiext has been phased out

MTK-Commit-Id: 0684124257af5ca2c55c48473e1568710ce098d4

Change-Id: I8aae89d8dd2388fb9f13a55331de46284e9b97ee
CR-Id: ALPS04723934
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
(cherry picked from commit c8b973fb79f79bff081dae58d665d235bfffc23a)
 2020-01-18 10:18:20 +08:00
bo.shang
c6f62897b6 [ALPS04721702] Save log into data partition 
1. Add SELinux permission

MTK-Commit-Id: 49d711749e59016b1e46233c4569c9d22d957f3d

Change-Id: If172698697fa5005f4548328665ea6c4739315c8
CR-Id: ALPS04721702
Feature: Modem Log Tool
 2020-01-18 10:18:19 +08:00
Shanshan Guo
e045492863 [ALPS04723438] SEPolicy: Remove unused sepolicies of vendor_app 
Remove unused sepolicies of vendor_app.

MTK-Commit-Id: 54bf7fcfcdbc902f7ab59247a5d29c04b20ffbee

Change-Id: I9018da7029b4bff0468237142108624262fa64b9
CR-Id: ALPS04723438
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:18:18 +08:00
Freddy Hsin
a380459549 [ALPS04707932] uncrypt: add permission for bcb setting 
uncrypt needs misc access right to update bcb

MTK-Commit-Id: d3ef46374d3942f0321613bc9f9979a11d1cadc2

Change-Id: I4b6d5e741d4b7aa55186e6b8c44caa11f3209439
CR-Id: ALPS04707932
Feature: [Android Default] SIU (SD Image Update)
(cherry picked from commit c4550748a1461c467ecdc4ff73e7bb06fdd38643)
 2020-01-18 10:18:18 +08:00
MY Chuang
0cd0041269 Merge "[ALPS04701006] mrdump: fix avc denied condition" into alps-trunk-q0.basic 
Change-Id: I274442aef8fa2325b018e4cbb7fd76ed466ffc21
MTK-Commit-Id: bcbbc656d11f8783aa62e624f6b75245fa749131
 2020-01-18 10:18:17 +08:00
MY Chuang
57a8f660be [ALPS04701006] mrdump: fix avc denied condition 
1. fix some avc denied condition caused by mrdump_tool.
2. merge the rule about mrdump in one area.

MTK-Commit-Id: c0d93f9196903a772ff1b318f153701714d28d80

Change-Id: I23082aac2d7b522a9f78426796b94de145374ed5
Signed-off-by: MY Chuang <my.chuang@mediatek.com>
CR-Id: ALPS04701006
Feature: Memory RAM Dump (MRDUMP)
 2020-01-18 10:18:16 +08:00
lena wang
3e9bfe06e1 Merge "[ALPS04714586] Allow factory to access AOSP property" into alps-trunk-q0.basic 
Change-Id: I114bdf787c5f78279a3886ba0b68a7dac92e3758
MTK-Commit-Id: 97721d5dd9e14795782a72623be3778467c5f3c1
 2020-01-18 10:18:14 +08:00
Guobao Wang
2b5f5ceb7d [ALPS04714586] Allow factory to access AOSP property 
Add SELINUX permission to allow factory to access AOSP property
persist.radio.multisim.config

MTK-Commit-Id: c73e634717213512f3a41c9850b7a4320f53b74c

Change-Id: I2a1f4437da9944b9c63876a9caa5549cbe29af27
CR-Id: ALPS04714586
Feature: Factory Mode
 2020-01-18 10:18:12 +08:00
Sophie Wang
68185175ee Merge "[ALPS04714861] dumpstate: add selinux policy" into alps-trunk-q0.basic 
Change-Id: I3ec6585e2f1009c1d895e0f29986ab96bedebfcd
MTK-Commit-Id: 5554d71b82cbce1eac8369783ba1aea0a64ca566
 2020-01-18 10:18:11 +08:00
Huan Tang
943a2db478 [ALPS04714861] dumpstate: add selinux policy 
1.relabel mmcblk1 to sysfs_devices_block in sysfs
2.allow dumpstate access sysfs_devices_block

MTK-Commit-Id: 359f985388d45abc8b47a95ef71fccf72259ee35

Change-Id: I1e83b8f6f6bdba20965b7f976f9589363d28c48d
CR-Id: ALPS04714861
Feature: Android Exception Engine(AEE)
 2020-01-18 10:18:08 +08:00
Jonas Lai
8d8e513025 [ALPS04314391] sepolicy: aee_aedv/dumpstate access to camerahalserver 
Allow aee_aedv/dumpstate to dump debug info from camerahalserver.

- SELinux : avc:  denied  { find } for
  interface=android.hardware.camera.provider::ICameraProvider
  sid=u:r:aee_aedv:s0 pid=23819 scontext=u:r:aee_aedv:s0
  tcontext=u:object_r:hal_camera_hwservice:s0
  tclass=hwservice_manager permissive=0

MTK-Commit-Id: 18210cf3984bd62caa334f28e45bb0f99500bac8

Change-Id: I291450101bd0ea94fca47b592cb1ef7ffb7f1ae4
CR-Id: ALPS04314391
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:18:07 +08:00
Cheng-H Chen
3ae2121560 Merge "[ALPS04709027] ST SE HAL for ST54H (SPI) support" into alps-trunk-q0.basic 
Change-Id: Ied52d15185f1d63bfc940b1f9464e1b5322a2b3c
MTK-Commit-Id: 3a71afeb9fac13a84110a03ecb2ece426ce6d237
 2020-01-18 10:18:06 +08:00
Megad Lu
3be9ba0bce [ALPS04709027] ST SE HAL for ST54H (SPI) support 
[Detail]
New ST NFC stack for Android compatible with native SecureElement service.
Added also SE HAL for ST54H (SPI) support.
SE HAL files are for internal reference only.

MTK-Commit-Id: 1ad8ab131a2acbdf66133db290e4206627a5f50b

Change-Id: Ief43e503b7147ab96185100ae3c02ecb2ce82640
CR-Id: ALPS04709027
Feature: NFC Chipset Capability
 2020-01-18 10:18:02 +08:00
Cheng-H Chen
d78668baa8 Merge "[ALPS04707214] ST NFC HAL 1.2" into alps-trunk-q0.basic 
Change-Id: I1178c94aae2eda7d2dd1c8383d1f2fe272d185fd
MTK-Commit-Id: b9d80ecb9b047afd398522623c08cd114dd59669
 2020-01-18 10:18:00 +08:00
Megad Lu
4d4cdb7208 [ALPS04707214] ST NFC HAL 1.2 
[Detail]
Update for the ST NFC HAL version to 1.2.

MTK-Commit-Id: 7c7f8db4cc98b778cddfddae6679947a6b663270

Change-Id: I1c3544d570631d9d46a617203e68466ed529820b
CR-Id: ALPS04707214
Feature: NFC Chipset Capability
 2020-01-18 10:17:58 +08:00
sin_mingfeilv
53d88ba13c Merge "[ALPS04707246] porting hdmi hidl service" into alps-trunk-q0.basic 
Change-Id: I61666a22c7485f1c2ec593231fe990fb95f32281
MTK-Commit-Id: 9f37e2e99eb79b990663e7a15a56a20c814562b4
 2020-01-18 10:17:57 +08:00
gtk_qingyunmei
060eb640e1 [ALPS04707246] porting hdmi hidl service 
Refactoring hdmi service as hidl service,so that
other process can call hdmi services API.
Add Selinux permission for hdmi hidl service.

MTK-Commit-Id: 0ecef9e52ce92b52413fbecd2b5be492806b8f53

Change-Id: I7f1c5f48d4ae9777acc80436a4af801f32969fac
CR-Id: ALPS04707246
Feature: [Module]Settings
 2020-01-18 10:17:54 +08:00
Hua Tian (田华)
753142662c Merge "[ALPS04709387] Support to catch MCUPM log" into alps-trunk-q0.basic 
Change-Id: I9d160429e50304a82ec83b4c7133126d52ea8eb4
MTK-Commit-Id: 4b4e661646a1ff87863669fd53af94707835bc3c
 2020-01-18 10:17:53 +08:00
hua.tian
608a6fd139 [ALPS04709387] Support to catch MCUPM log 
Add SELINUX rule for MCUPM log.

MTK-Commit-Id: 9fb8d206f37f0fb00581f4417473974c014ff0dd

Change-Id: I7a935534d4975e444b556d133ff222a4c144b5ca
CR-Id: ALPS04709387
Feature: Mobile Log Tool
 2020-01-18 10:17:51 +08:00