[Detail]
add selinux for lazy hidl, to make lazy hidl service can be started
MTK-Commit-Id: 68eae2f272d3cee8db8377cb298e2227bf21c6fd
Change-Id: Ic1c4ce80ed2574093bdd42f1061aca66596f3dca
CR-Id: ALPS04411237
Feature: [Module]Vibrator
[Detail]
More strictly selinux policy that system process cannot access vendor
partition,
unless label the specific vendor lib to same_process_hal_file
[Solution]
Add same-process HAL files and their dependencies
MTK-Commit-Id: 565e78ca92a83f2aaf44bc599b91f9cb61a5bec5
Change-Id: Id5450d9ae3467b9aae8be20d3d1934e3e1f8a375
CR-Id: ALPS04167940
Feature: MiraVision
(cherry picked from commit c62b2f1b4d75034ce130d909a574aa8d6879b345)
add some new rules for not exit files in basic/non_plat/,
allow dumpstate to open/read files
MTK-Commit-Id: 7d8021e582f9c10b7f9574f4fcdadee0be5d3c99
Change-Id: Ifc1ca446ce6cd40e36835acaf52ca5a12efedcdb
CR-Id: ALPS04383536
Feature: Android Exception Engine(AEE)
[Detail]
Factory mode tool for NFC only works with SElinux disabled.
[Solution]
Update NFC stack to latest release W48p0.
Create the communication socket into data/vendor and apply
a specific SElinux label.
MTK-Commit-Id: 910948f163c96cac14494e5951c504e63a3334ee
Change-Id: I9b89e828e344041ef5bb464cc872f442490a6e2a
CR-Id: ALPS04190424
Feature: NFC Chipset Capability
Add Trusty Keymaster 3.0 HIDL service to replace the legacy HAL
MTK-Commit-Id: 4acd1a3c87012bbf678dd59d74764481aceab5ae
Change-Id: Ib6b300c6a5fe3cd709896b31daa8a684d6b8b795
CR-Id: ALPS04087631
Feature: Google Trusty
1.move-widevine-data.sh is for OTA upgrading from android O
to P, new android P device dont need this rules
2.Google cts/gts/vts will check data_between_core_and_vendor_violators,
add the rule on P device, the test case will fail
MTK-Commit-Id: d4e56774e28b4a5efab572c9c8b25e134988244b
Change-Id: I04c0233ea6cc1dff9b3fdd35441f95605519b454
CR-Id: ALPS04080007
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
Spending more bootup time after label kernel interface node
in file_contexts, there is another way to label kerner interface
node on genfs_contexts file. When move the label rule to
genfs_contexts file, the bootup time will speed more than 500ms.
MTK-Commit-Id: e237c9367e74f2953b843cc9224a98b4e7cfddbc
Change-Id: I1a1e369c3eaaf359c3bf7c051793a3ffba4c71fc
CR-Id: ALPS04017619
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
Implement android.hardware.secure_element@1.0 for MTK UICC.
MTK-Commit-Id: d47f7e07b9396583e71a51c4b5da0282d9abf73b
Change-Id: Ib5ebb2543a100f95d9fb2cab8f5aef9c511d463d
CR-Id: ALPS04013153
Feature: NFC Open Mobile API
[Detail] aee_aedv_exec is defined in system.img, and when AOSP system.img
is replaced, cts will fail if aee_aedv_exev is referenced in vendor.img.
MTK-Commit-Id: 178b71c788561cea1336d2c62b67dd324ecf6e8b
Change-Id: I200ff7cd55597de05d5412677b140809e941a192
CR-Id: ALPS04056497
Feature: Android Exception Engine(AEE)
Remove policy for sysenv_daemon, which is removed in Android P
MTK-Commit-Id: adbf02af5663fc468c7b892a33b4a03ec53a948f
Change-Id: I1653bef4c9b0f9a2b7022f8895b89de0c3373148
CR-Id: ALPS04056547
Feature: [Module]Partition
Widevine provides a script in /vendor/widevine/
libwvdrmengine/move_widevine_data.sh that copies
the data files from /data to /data/vendor. Some
sepolicy rules are required to enable the device
to run this script.
MTK-Commit-Id: f7aba378699fc68e4e10ed2ed2b812c1e502e66f
Change-Id: I2731ad21da180a1a5f927c5631dcc579da1dc314
CR-Id: ALPS03982747
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
[Detail]
Add sepolicy access right for Hifi3 adsp device.
Mobilelog and AED will need these access right.
MTK-Commit-Id: 06ac39d7cebbab2bcb3468fcf14f19b7e1489819
Change-Id: Ic834ac687b4423500ef6036824a6d6f75e57ccb3
CR-Id: ALPS03738758
Feature: [Module]Audio OpenDSP
[Detail] phase out the feature of dumpstate hal service
MTK-Commit-Id: 01cf5ccf1d3b626c8efc1d1d08aa008a6864ba34
Change-Id: I0dd5aaa157d2a91feb5af63f0b5588549c20f8ed
CR-Id: ALPS04022196
Feature: Android Exception Engine(AEE)
[Detail]
libGLES_mali.so depends on libm4u.so on mali GPU.
Surfaceflinger needs libGLES_mali.so, but it cant access normal vendor lib.
[Solution]
Change libm4u.so file label from u:object_r:vendor_file:s0 to u:object_r:same_process_hal_file:s0.
MTK-Commit-Id: cb147e1fb1711d5fea686b3f11d90b60829f1953
Change-Id: I73a0bab2188aa7d2f7f7c488f8377bc8b34af24c
CR-Id: ALPS04007267
Feature: OpenGL|ES
(cherry picked from commit baec3fff9cc025f8131f0fb461400591b8156632)
[Detail]
Add poilcy for update_engine and vbmeta so that A/B
system update can work well.
MTK-Commit-Id: de7ad7a48111b4e02f042600c6e65484d03ac87f
Change-Id: I79346615ad1be4c5ea33343c1fce73c22be1f82f
CR-Id: ALPS03783870
Feature: Secure Boot
