NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
903 Commits 2 Branches 0 Tags
Commit Graph

903 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
lokesh
6969eebbef [ALPS04340640] SELinux policy update bootanim.te 
Update bootanim.te file to allow IOCTL commands

MTK-Commit-Id: 2fb03897488c2eb29dc2c6c700b7d9dbbb34ab65

Change-Id: I3287b1a3569b472edfb96f80f2d8765b8049e6e3
CR-Id: ALPS04340640
Feature: [Module]Settings
 2020-01-18 10:09:03 +08:00
Dengwei Xu
061ea43ddf Merge "[ALPS04360439] [EM]sensor move to vendor partition" into alps-trunk-q0.basic 
Change-Id: Iee6747c5899cb78b71365462791ae443da43c0c7
MTK-Commit-Id: 22468b90e17f41bfbd5427439c8c6becff5ab5cd
 2020-01-18 10:09:02 +08:00
Juan Rong
336145916b [ALPS04360439] [EM]sensor move to vendor partition 
Move sensor to vendor partition.It needs vendor_app has permission
to read/write sesor related files.

MTK-Commit-Id: 6f30fb87973b05cff81ec3851192125b4eada182

Change-Id: I95fe0601e155319108bfe68b47441b76cbb0b817
CR-Id: ALPS04360439
Feature: Engineering Mode
 2020-01-18 10:08:58 +08:00
Shan Zhang
7d9696260e Merge "[ALPS04357701] Move Widevine sepolicy from basic to bsp" into alps-trunk-q0.basic 
Change-Id: Ibd04cdf937511b74bab011397ba1f891018606a7
MTK-Commit-Id: 08601256bf56659a911a20843cfc0e7df1b39438
 2020-01-18 10:08:57 +08:00
Jackie Lin
410508d3ed [ALPS04357701] Move Widevine sepolicy from basic to bsp 
Move Widevine sepolicy from basic to bsp

MTK-Commit-Id: 53ecfeae7dc2f032423ebcfa1af522fc8aeafa60

Change-Id: Ie8250dbca503830464f90a0f1642fac86c3bc8e2
CR-Id: ALPS04357701
Feature: Google Widevine Level3
 2020-01-18 10:08:55 +08:00
Michael Hsiao
314a261d1d [ALPS04283974] Audio: HIDL 5.0 
[Detail]
Sepolicy for audio HIDL 5.0

MTK-Commit-Id: b49b562f833468bd225ac08e64e88ba0b379be04

Change-Id: Idfe85b3c04798e2f03d1c39420a4e38e7cdf4a1f
CR-Id: ALPS04283974
Feature: [Module]Audio HAL
 2020-01-18 10:08:54 +08:00
Ping-Hsun Wu
d6a6196eae Merge "[ALPS04219582] mmservice 1.2" into alps-trunk-q0.basic 
Change-Id: I1cfb57f67282fce63874c38168d13e13c7dfd395
MTK-Commit-Id: ef1c7004fc237a1b3cfed92fca6c7419329598db
 2020-01-18 10:08:53 +08:00
Howard Ho
6ea35358f7 [ALPS04219582] mmservice 1.2 
1. update mmservice to 1.2
2. BlitStream for MDP & PQ func

MTK-Commit-Id: b56c9af2d24bde8bb8c754adde31b9aa1741ab1f

Change-Id: I30e9912260342a227595a0a05de124b810c6b4e7
CR-Id: ALPS04219582
Feature: [Module]MDP Driver
 2020-01-18 10:08:52 +08:00
Shanshan Guo
1086506de4 [ALPS04345534] SEPolicy: add permission for system_app 
[Detail]
For Andorid Q, there is a more stringent restriction for ioctl,
system_app need to access proc_ged by ioctlcmd=0x6700

MTK-Commit-Id: c610a674e4a9dcdadde0eb619326359253f59f15

Change-Id: I33cd7c4e29b6bec1dc0956cf6d4a136f08f1d511
CR-Id: ALPS04345534
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:08:47 +08:00
Guoyi Qu
bc6a54d6f1 [ALPS04345674] Add permission 
Add permission for customer new feature

MTK-Commit-Id: d17839b053c5e56e060edf3421edca48f83c856f

Change-Id: Idc774aced0f2faea8a74e82430e57257fb5c3efc
CR-Id: ALPS04345674
Feature: Modem Log Tool
(cherry picked from commit 4c795389f056a8cb60ca151e6d36ca1779d2c31c)
 2020-01-18 10:08:47 +08:00
Kane Jhang
eff15efb2a [ALPS04288834] Q- migration: Add needed SE policy 
[Detail] Add HWC needed SE policy

MTK-Commit-Id: 166aa064a2f2912dd6689baf7d5b9d0adeca816e

Change-Id: I2ad22692392a9cc52aa9de15c2ff8ee7849da760
CR-Id: ALPS04288834
Feature: [Module]SurfaceFlinger/HWComposer
 2020-01-18 10:08:47 +08:00
mtk12096
3d72079909 [ALPS04345724] add sepolicy for merge_hal_service 
Detail] Add SE policy for merge_hal_service

MTK-Commit-Id: 66cdaaaf50d07cb4b4e09b1aafbe0541f8156617

Change-Id: I514534a3a852af5d9393dacd4f920ea0b41effd5
CR-Id: ALPS04345724
Feature: Memory Optimization
 2020-01-18 10:08:43 +08:00
lokesh
b151556fc1 [ALPS04340640] SELinux policy update bootanim.te 
Update bootanim.te file to allow IOCTL commands

MTK-Commit-Id: 63b0669373adc7386aa445b2e617abde5e40bcbb

Change-Id: I0e62af7c87040cd438e5e62171b830c6641e0e81
CR-Id: ALPS04340640
Feature: [Module]Settings
 2020-01-18 10:08:39 +08:00
mtk81325
9213ad4850 [ALPS04304578] e2fs: permission for ioctl/ioctlcmd 
[Detail]
fix avc denied for mk2fs in boottime.

MTK-Commit-Id: f0e39a287a24f65bb85aeda1229fcb9d9ef90712

Change-Id: I894765c5b9b5947d5bceaf37fac7f07e898e12dc
CR-Id: ALPS04304578
Feature: [Android Default] F2FS File System
 2020-01-18 10:08:39 +08:00
lena wang
2759cfde98 [ALPS04288147] Sepolicy:SIM On/off feature 
Add property access right for APP usage.

MTK-Commit-Id: f01ca106779bea2c9699fbecbc4c3de94e0ab3e9

Change-Id: I1652ead60b4b517a3a3d04aabe1d61bb7a49933c
CR-Id: ALPS04288147
Feature: SIM
(cherry picked from commit 620f4ace14bc12b95e9345b8f73dcffc372b2171)
(cherry picked from commit d447535fbc6e972fb64696481de5cb8bf3dfc546)
 2020-01-18 10:08:39 +08:00
Guoyi Qu
58bd7b2501 Merge "[ALPS04328634] Add permission" into alps-trunk-q0.basic 
Change-Id: Id68d3112d49f509a3f3babb45eff362c84cb7c2b
MTK-Commit-Id: cbf64ee2d3507d461cacccbea166a9d8aecb6c2e
 2020-01-18 10:08:39 +08:00
Guoyi Qu
77ca8c9c40 [ALPS04328634] Add permission 
Add permission to get WMT driver status.

MTK-Commit-Id: 1a7509e427a1712ce7a9f31efae9f731aecce941

Change-Id: I14e3c7ef2d96db114cf87e3be7f5df4ce16a222a
CR-Id: ALPS04328634
Feature: Connsys Log Tool
 2020-01-18 10:08:37 +08:00
guanglai guo
40975ecc65 [ALPS04339185] selinux: add start mdlogger property set policy 
add start mdlogger property set policy:
set_prop will get the permission of set and get property.

MTK-Commit-Id: aea7cd86f8ba3661eb0d4407d569b9501159b6a1

Change-Id: I247e41112b4b1df1450279c21bdc578935a2d359
Signed-off-by: guanglai guo <guanglai.guo@mediatek.com>
CR-Id: ALPS04339185
Feature: Modem Interface Driver
 2020-01-18 10:08:33 +08:00
Shane Chien
8beff55795 Merge "[ALPS04237702] Audio: Add permission for audio scp device in meta_tst.te" into alps-trunk-q0.basic 
Change-Id: Ifddc8e826b67209a89cc34d8f5651808f608151a
MTK-Commit-Id: 6b9304096ac8b5c5a9dfff83d6e0b80d0ff9f8c7
 2020-01-18 10:08:32 +08:00
HsinYi Chang
68d0f1a4dc [ALPS04237702] Audio: Add permission for audio scp device in meta_tst.te 
Add permission for audio scp device in meta_tst.te

MTK-Commit-Id: e47a80662cb1b514739333ef8edc30131013841b

Change-Id: I578b9cd8325eb3637f68ffa7a7692aac17df8d5f
CR-Id: ALPS04237702
Feature: DSP SmartPA
(cherry picked from commit a9abb35ba18fb5a43d0e0612d3259351eafb1db6)
 2020-01-18 10:08:31 +08:00
Shane Chien
e5941191f7 [ALPS04237702] Audio: Add permission for audio scp device in factory.te 
Add permission for audio scp device in factory.te

MTK-Commit-Id: 244323d818b671a13f105cf0c715d9ff57a215d5

Change-Id: I18c3d250762522066d1dc568db9ba3998f479806
CR-Id: ALPS04237702
Feature: DSP SmartPA
(cherry picked from commit f761ad3ca40fe037846b131aacbbd37c2c904069)
 2020-01-18 10:08:27 +08:00
Ian-Y Chen (陳尹)
197aeeb5d1 Merge "[ALPS04328846] power: add IMtkPower and IMtkPerf" into alps-trunk-q0.basic 
Change-Id: Ic614a6d376ae8ac9c6d2e785cc968a39a8daa524
MTK-Commit-Id: db87d4a65123d299c3f5b11691a6e295c04f8162
 2020-01-18 10:08:26 +08:00
Shane Chien
25fb796fea [ALPS04237702] Audio: Add permission for audio scp device 
Add permission for audio scp device, instead of only
SCP SmartPA.

MTK-Commit-Id: 479293f8195469648aba65860920128fe85fa3f0

Change-Id: Ic33320ae0c8f36217da2aae0afba763609608af3
CR-Id: ALPS04237702
Feature: DSP SmartPA
(cherry picked from commit 1dfd94a4058c3d960539066bfe61d5032ca95c9d)
 2020-01-18 10:08:26 +08:00
Ian-Y Chen
098ee2fd8a [ALPS04328846] power: add IMtkPower and IMtkPerf 
[Detail]
1. Remove IPower extension
2. Add vendor.mediatek.hardware.mtkpower

MTK-Commit-Id: edad60cd659da32631fb8ef2da9a74ad21231d8a

Change-Id: Id65adb8625f89805fbb94c472b4b6ca744fa1943
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:08:24 +08:00
Josh-YC Liu
985027f9bf [ALPS04306526] AAL: add AAL vendor partition property 
Add vendor property for AAL.

MTK-Commit-Id: a7d55ae905f951254aab9e902be4b7ec09e8a04f

Change-Id: I1c651cb5657cdbeb2b91960f90f9c02508fa2364
CR-Id: ALPS04306526
Feature: Ambient Light Adaptive Luma
(cherry picked from commit 0fbccdc8421acd6544153f2527c492220979cade)
 2020-01-18 10:08:23 +08:00
Elvin Lin
9f2e49db1c [ALPS04324880] em_svr: add map permission for shell_exec 
[Detail]
Add map permission for shell_exec to let Batterylog.java
can set command from shell.
Modify the permission list to rx_file_perms.

MTK-Commit-Id: d8f72393dddc2787c88bb2141594319bfe473e9a

Change-Id: I04b1b5c056223e30d5d8b6f8fe7a503afc28b521
CR-Id: ALPS04324880
Feature: Power Delivery
(cherry picked from commit 63fd26ecb2014b5a03db649b332858943a6893a9)
 2020-01-18 10:08:19 +08:00
Jonas Lai
0ae36245e9 Merge "[ALPS04314391] SYS_DEBUG_MTKCAM via aee_aedv" into alps-trunk-q0.basic 
Change-Id: Iff164c4db2cadd205a78710b38cae79949adce24
MTK-Commit-Id: 324890523ef0bf3608ad8ba074ff998447ff16e8
 2020-01-18 10:08:19 +08:00
Jonas Lai
2102224bdc [ALPS04314391] SYS_DEBUG_MTKCAM via aee_aedv 
Allow camerahalserver to dump debug info to SYS_DEBUG_MTKCAM via aee_aedv.

avc: denied { write } for path="/data/vendor/mtklog/aee_exp/temp/db.9oRG8O/SYS_DEBUG_MTKCAM"
dev="dm-2" ino=1458278 scontext=u:r:mtk_hal_camera:s0
tcontext=u:object_r:aee_exp_vendor_file:s0 tclass=file permissive=0

MTK-Commit-Id: 6b096cffb7c389e160335c9dfa241b54fd9da7c8

Change-Id: Ic4075ad89fcf32f95a0b0c1c3279f134c1f903ec
CR-Id: ALPS04314391
Feature: [Android Default] Camera Application Basic Functions
(cherry picked from commit 90e1c9c2e1668be7c4c25d0d0a7eda65ad286539)
(cherry picked from commit dbc75e9efbd7cb40b3b1102abe934943e8f7f2b7)
 2020-01-18 10:08:17 +08:00
Jason Su
38d94e1620 Merge "[ALPS04092649] GNSS HIDL v1.1 feature support" into alps-trunk-q0.basic 
Change-Id: I547002eadd975055d4e41757700366bc047e8962
MTK-Commit-Id: 1dcbb19741c5549c81191fc9bb8f3cf24da3666e
 2020-01-18 10:08:16 +08:00
Jason Su
a0d704855e [ALPS04092649] GNSS HIDL v1.1 feature support 
GNSS HIDL v1.1 feature support

MTK-Commit-Id: 4571763d450b2049200f512042ad547e15dc0bbc

Change-Id: Ie96577d39e08d2960200ef7a8d6b58892bc6a73f
CR-Id: ALPS04092649
Feature: Location AOSP
 2020-01-18 10:08:14 +08:00
Guoyi Qu
674a078700 [ALPS04293786] grant map permission 
SELinux: Add map permission

MTK-Commit-Id: a22cef3bef32ef81209eadc40cc235c6f14fdd20

Change-Id: I6c2ef8491bead430e1dd3c0a784dec8faccefb36
CR-Id: ALPS04293786
Feature: Connsys Log Tool
(cherry picked from commit 65870f81b629bc35cdfba2563dadf04ac54822de)
 2020-01-18 10:08:13 +08:00
Po Hu
4d68f2a2e5 Merge "[ALPS04209994] Android Q migration prepare" into alps-trunk-q0.basic 
Change-Id: I99aa42ac363730db9de63b50c6c055f8a307e8c6
MTK-Commit-Id: 8ab180af71cb78d2e06e05b7695e99ff8a4ddf27
 2020-01-18 10:08:12 +08:00
Po Hu
4f97064d35 [ALPS04209994] Android Q migration prepare 
[Detail]
Fix build warning like:
WARNING unrecognized character at token ^M on line XXX:

[Solution]
Use dos2unix to update files

MTK-Commit-Id: 8285bcfe7a30349f3188c9b29e4b8da9ee2c1280

Change-Id: I7773e243028a2275d11782885b4bc299d5c5d043
CR-Id: ALPS04209994
Feature: build process
 2020-01-18 10:08:11 +08:00
ILEX Lin
999541e09b Merge "[ALPS04272553] Use MTK radio HIDL extension" into alps-trunk-q0.basic 
Change-Id: I6ebee9eb8e59175597e42c53783964a6ae2768ce
MTK-Commit-Id: f164af7590ad24f2c997a275651bbb71321ade9e
 2020-01-18 10:08:09 +08:00
Juju Sung
9ca13651c2 [ALPS04239425] Sepolicy: remove neverallow rule 
[Detail]
app_zygote.te violated by allow app_zygote aee_aed:unix_stream_socket { connectto };
domain.te violated by allow aee_aedv debugfs:lnk_file { read };
We remove two policy to prevent build break.

MTK-Commit-Id: 7035ebb6f8308dc756848a173bb2a412d421f9b3

Test: Build only
Change-Id: I6b228a38d5953e2ceaa41c4193d2bf6c14bee581
CR-Id: ALPS04239425
Feature:Android Exception Engine(AEE)
 2020-01-18 10:08:09 +08:00
Dom Lin
a1059fdd16 [ALPS04272553] Use MTK radio HIDL extension 
RIL separates MTK HIDL APIs from AOSP. Thus, we should
use the new HAL layer called MtkRadioEx.

MTK-Commit-Id: ef0ea5880927b69a911e511fd3031c044803db2e

Change-Id: I2aa6c9fb0cb2db8f94b38dc8c8f9a2955086fe05
CR-Id: ALPS04272553
Feature: NFC Open Mobile API
 2020-01-18 10:08:08 +08:00
Cosmo Sung
00450c2b53 [ALPS04218651] MTK radio HIDL extension 
Add permission for IMtkRadioEx.

MTK-Commit-Id: 69306931d79a2f6f4884ef486e207d6f3373ae95

Change-Id: I31e065d271130a22235b1f3f8c0af029c4e49a32
CR-Id: ALPS04218651
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
 2020-01-18 10:08:06 +08:00
Juju Sung
12bc2025e2 [ALPS04239425] Sepolicy: fix undefined type declration 
[Detail]
Unknown type:untrusted_v2_app,alarm_device,qtaguid_proc,mtd_device
Duplicated type:proc_slabinfo

MTK-Commit-Id: 11ccfcffb994452eb58a697e94a8da748ac73933

Change-Id: I2e847041d14d6b6613044cfaa98f242b7fd9381a
CR-Id: ALPS04239425
Feature: Build System
 2020-01-18 10:08:05 +08:00
ILEX Lin
2abdf3da9a [ALPS04190424] NFC : W48p0 - Fix SELinux for factory mode 
[Detail]
Factory mode tool for NFC only works with SElinux disabled.

[Solution]
Update NFC stack to latest release W48p0.
Create the communication socket into data/vendor and apply
a specific SElinux label.

MTK-Commit-Id: 910948f163c96cac14494e5951c504e63a3334ee

Change-Id: I9b89e828e344041ef5bb464cc872f442490a6e2a
CR-Id: ALPS04190424
Feature: NFC Chipset Capability
 2020-01-18 10:07:59 +08:00
Guoyi Qu
20d2ca6bd9 [ALPS04153997] get modem dump info 
change device node to get modem dump info

 add permission to read mddb

MTK-Commit-Id: 461f3252135aa29a2bf88c43ddf23eea7c235f10

Change-Id: Id8da2ece58aad29d1ed66ecbc34a6a9f96634b55
CR-Id: ALPS04153997
Feature: Modem Log Tool
 2020-01-18 10:07:53 +08:00
Juan Rong
ae82eac4a3 [ALPS04202940] Xcap: use raw url 
set/get property for whether xcap use raw url

MTK-Commit-Id: d6f9cdb5a6752582a5effd143ea77e6ca44c2ca6

Change-Id: I093c419181606cd8adb41449b02ff9c5cfa42b51
CR-Id: ALPS04202940
Feature: IMS SS
(cherry picked from commit 8e45ece0df6b2d8619f461afde28dcbb163dbab2)
 2020-01-18 10:07:53 +08:00
dengwei.xu
9e520e8fef [ALPS04185953] EM c2k bypass ui display issues 
The data button cannot show checked

MTK-Commit-Id: c244f89abe8640c4bc8b362fcd4f5cf96216190c

Change-Id: I31d70b7540f098643bccc5db6bc2396abf226f91
CR-Id: ALPS04185953
Feature: Engineering Mode
 2020-01-18 10:07:52 +08:00
bo.shang
a8f7abb66b [ALPS04153997] C2K Modem Log tool selinux error 
Add permission for P migration

MTK-Commit-Id: 455348332b37389291e4ff3887b492f202611462

Change-Id: Idd6a9447af7fa6eba7049023d620d01384b21e63
CR-Id: ALPS04153997
Feature: C2K Modem Log Tool
 2020-01-18 10:07:49 +08:00
bo.shang
530ecc4e0c [ALPS04153997] Fix C2K modem log bug 
Can use storage path for P migration

MTK-Commit-Id: 4a405ab78b426a627391c13dc2118e660baabfcd

Change-Id: If96499abc6ba58103b5491248e46ddf3ce1d2667
CR-Id: ALPS04153997
Feature: C2K Modem Log Tool
 2020-01-18 10:07:48 +08:00
Lili Lin
c09b4b0753 [ALPS04160752] Add policy for installd 
To address following denial with kernel-4.14

avc: denied { map } for pid=651 comm="Binder:651_1" path="/vendor/etc/selinux/vendor_file_contexts" dev="dm-1" ino=44 scontext=u:r:installd:s0 tcontext=u:object_r:vendor_configs_file:s0 tclass=file permissive=1

MTK-Commit-Id: 8af14b2b4ff87f37add600ed19a76b1a8cf9dd32

Change-Id: Ia40e6e70d57db6a2a875c3f7d7c69c0c298a36cb
CR-Id: ALPS04160752
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:07:48 +08:00
Denis Hsu
ddebab7641 [ALPS04160752] Add selinux policy for vold_prepare_subdirs 
It would get selinux violation in kernel 4.14.
To fix that, add the policy, vendor_configs_file:file map.

selinux violation log:
avc: denied { map } for pid=633 comm="vold_prepare_su" path="/vendor/etc/selinux/vendor_file_contexts" dev="dm-1" ino=44 scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:vendor_configs_file:s0

MTK-Commit-Id: 4b9d7e588a26e9557b15aee36351fb9baa169861

Change-Id: Ie41809a378e0d9f1f71f2e87ab23565a68d62fb7
CR-Id: ALPS04160752
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:07:45 +08:00
min.he
463a35aa13 [ALPS04147660] Add selinux policy for bootctrl 
Add policy for read  boot_type for bootctrl

MTK-Commit-Id: 0665caa10660ea2b630fb3299e0c8ce9360d6d63

Change-Id: Ibe33047a14d32473d054c9e7c239947984748a00
CR-Id: ALPS04147660
Feature: A/B System Updates
 2020-01-18 10:07:44 +08:00
Guobao Wang
700f8ee586 [ALPS04125584] SIM:Access denied finding property "persist.radio.multisim.config" 
It occurs access denied finding property "persist.radio.multisim.config"
in factory mode.
It need add permission for this property in factory.te.

MTK-Commit-Id: db2dc7782f87befe1a1a5c50551be2332763013e

Change-Id: I8aea57e0d8f3ddeeffec027a9472eec6380c0286
CR-Id: ALPS04125584
Feature: SIM
 2020-01-18 10:07:44 +08:00
Miles Chuang
1609d21594 [ALPS04125055] Set SBP ID to nvdata for CCCI requirement 
[Detail]
From android P, CCCI will not wait for the data partition ready
for the nvram data, so that CCCI cannot read the persist property
during the boot up phase.

[Solution]
Carrier express set SBP ID to nvdata for CCCI requirement.

MTK-Commit-Id: 2c460ca4aadbd0b130a5478337b8eb8ad6cbdb3c

Change-Id: I1bc3f8f012cb5e2bf2ef1b1d72d9543c7554bbd0
CR-Id: ALPS04125055
Feature: Regional Carrier Express Pack
 2020-01-18 10:07:41 +08:00
mtk16229
0016bf873f [ALPS04112420] add mota selinux limited 
[Detail]add mota selinux linited

MTK-Commit-Id: 7762b88c2e81f42f95232f00c1c2cf0e81d47421

Change-Id: I5071ca451510cd14a8ccf53e8e77c3e77f50816b
Signed-off-by: mtk16229 <Heaven.Zhang@mediatek.com>
CR-Id: ALPS04112420
Feature: MOTA (Mediatek Over The Air)
 2020-01-18 10:07:40 +08:00