NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
793 Commits 2 Branches 0 Tags
Commit Graph

793 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Chris-YC Chen
112b2a020d [ALPS04257872] sepolicy: mdp-hidl 
add sepolicy for mms while using m4u

MTK-Commit-Id: 431f4e539496a36b144601d8fe9cbfc31ac0aa3f

Change-Id: I7aec7ccdcf48522e6a3cada1a164356a06b0dbbd
CR-Id: ALPS04257872
Feature: [Module]MDP Driver
 2020-01-18 10:10:15 +08:00
Hongxu Zhao
74a77e408a Merge "[ALPS04392816] sensor: add hidl 2.0 architecture" into alps-trunk-q0.basic 
Change-Id: I72e3e71787669fa648d6ebd16b78f8538809b2b1
MTK-Commit-Id: 6ceb53687c0959b82ea3827e52f60c3b22862642
 2020-01-18 10:10:14 +08:00
hongxu.zhao
dd0eaad9fd [ALPS04392816] sensor: add hidl 2.0 architecture 
add hidl 2.0 architecture

MTK-Commit-Id: b0365c02b90b073ac85a1a4ed350967c3f1b1187

Change-Id: I4b17f59113f3085ef6df16814524353862f7d8b5
CR-Id: ALPS04392816
Feature: Sensor Hub
 2020-01-18 10:10:09 +08:00
Jih-Cheng Chiu (邱日成)
99b2e3391e Merge "[ALPS04384473] Remove relabel graphics_debug_prop" into alps-trunk-q0.basic 
Change-Id: Ic744d8a7ced13594f6dc0ca3cdd3d09fb133c3dc
MTK-Commit-Id: f942f2456178ddda3fb66f1bff9fbe79779de518
 2020-01-18 10:10:08 +08:00
Ju-Yi Cheng
2a4126739f [ALPS04384473] Remove relabel graphics_debug_prop 
[Detail] No need to relabel graphics_debug_prop since
no process need to setproperty in runtime

MTK-Commit-Id: d7f0964bc3a857471cd9891ec64dcb225c886d0f

Change-Id: I59baa11790e0dea1652097c6fe0127a25406d046
CR-Id: ALPS04384473
Feature: [Module]SurfaceFlinger/HWComposer
 2020-01-18 10:10:07 +08:00
Archilis Wang
1b7b6d077e [ALPS04385947] Add access rule for property 
mtk_agpsd uses libapmonitor to report info.
libapmonitor needs the access right to hwservicemanager_prop.

MTK-Commit-Id: ce3c3e4f204c2e607c903669601b00720cc1c5f4

Change-Id: I9a241d28ef5f6dd000cd350c3cdf05930aa9bf26
CR-Id: ALPS04385947
Feature: A-GPS
 2020-01-18 10:10:06 +08:00
Andrew Yang
243af8a9aa Merge "[ALPS04385961] RTC: add permission for power-off alarm" into alps-trunk-q0.basic 
Change-Id: I33f8647fe7ae70eb9dab4c49faf033f2a037d05c
MTK-Commit-Id: 6b07f51f7b144a3bc60c0dcc0ee3d957708cb41f
 2020-01-18 10:10:05 +08:00
andrew.yang
b8f0e2db69 [ALPS04385961] RTC: add permission for power-off alarm 
Allow alarm manager to access /dev/alarm for power-off
alarm function.

MTK-Commit-Id: 01de6e5669b8e97c12818256915885dc32c45b9f

Change-Id: I5e3759e9d11357c3f302aa2557dc71de80476262
CR-Id: ALPS04385961
Feature: Power-Off Alarm
 2020-01-18 10:10:03 +08:00
James Hsu
b2cea54f9d [ALPS04296234] mrdump_tool: apply new selinux policy 
[Detail]
Add new selinux policy to fix preallocate file failed

avc denied log
1. ioctl permission denied
mrdump_tool: type=1400 audit(0.0:517): avc: denied { ioctl }
for path="/data/vendor/dumpsys/mrdump_preallocated" dev="dm-0"
ino=1966 ioctlcmd=0x660b scontext=u:r:aee_aedv:s0
tcontext=u:object_r:aee_dumpsys_vendor_file:s0 tclass=file permissive=0

2. open /dev/block/platform/bootdevice/by-name/para fail
[SYSENV]sysenv_get_with_area():317 , get env name=mrdump_output
[SYSENV]get_env_info():217 , initialize
/vendor/bin/mrdump_tool: [libfs_mgr]Warning: unknown flag: resize
[SYSENV]get_partition_path():78 ,
partition path = /dev/block/platform/bootdevice/by-name/para
[SYSENV]read_env_area():136 ,
open /dev/block/platform/bootdevice/by-name/para fail: Permission denied
[SYSENV]get_env_info():238 , read_env_area fail

MTK-Commit-Id: 25a78a9e7e593ba2e376b2e243774d5b4dfc6205

Change-Id: I79c62a0f65e1781ca6d0c2eefe77078d168d146a
Signed-off-by: James Hsu <james.hsu@mediatek.com>
CR-Id: ALPS04296234
Feature: Memory RAM Dump (MRDUMP)
 2020-01-18 10:10:02 +08:00
Qian Dong
311772663d Merge "[ALPS04385687] fix mp3 playback start slowly because of sepolicy" into alps-trunk-q0.basic 
Change-Id: I7213c41ca1441576dbe6d7c2199e8e76277856fa
MTK-Commit-Id: c9a4799508b4216588720540fe3fb86d36b7eb11
 2020-01-18 10:10:01 +08:00
jianying duan
191ebc6318 [ALPS04385687] fix mp3 playback start slowly because of sepolicy 
when open selinux, mp3 playback will start slowly,
it because selinux issue,mediaextractor process cant getservice
and when MtkMp3Extractor call the function
of MediaCodecList:findMatchingCodecs,it will fail.
so,mtkmp3extractors patch cant take effect,
and because of selinuxs limit, mp3 playback start will slowly.

MTK-Commit-Id: 9bb746686dce1176a8a47f1d730c0864bb6b6d52

Change-Id: Iba512638d87ff055a8ddb98853eca956e2ec72d9
CR-Id: ALPS04385687
Feature: [Android Default] MP3 Playback
 2020-01-18 10:09:56 +08:00
yuhui.zhang
03dda6b5df [ALPS04316338] EM: battery temperature settings 
[Detail]
Add sepolicy rule to set battery temperature

MTK-Commit-Id: 9fcd042bd04632fa952af7ac51833695b8a50f7c

Change-Id: I82b8b6649849403a1b1cd8a2e5093a3664719bc2
CR-Id: ALPS04316338
Feature: Engineering Mode
 2020-01-18 10:09:55 +08:00
Miles Chuang
6594dfe902 [ALPS04385399] Separate sepolicy for BASIC/BSP project 
[Detail]
Separate sepolicy for BASIC/BSP project
So we need to modify CXP Selinux setting.
1. Move type definition "usp_srv_prop" from bsp to basic.
2. Remove type "usp_prop" which phased out.

MTK-Commit-Id: e6e9cd8c817fafcdf1f4083be515e781f7658f10

Change-Id: I3c95f5bf2bc2992a141a141dbaa6a5cfe0ed3407
CR-Id: ALPS04385399
Feature: Regional Carrier Express Pack
 2020-01-18 10:09:55 +08:00
Bo Shang
6f9e880db8 Merge "[ALPS04298621] MTKLogger can not get md/netlog property" into alps-trunk-q0.basic 
Change-Id: I5daae42ae2b33849a82ac75d8983c6612c8a9a2d
MTK-Commit-Id: 615863bcde62a1bbefc3999893fe85e9b08a3745
 2020-01-18 10:09:54 +08:00
bo.shang
5344ba81e4 [ALPS04383637] phase out emdlogger permission 
1. logmuch_prop is used for debug load.
2. Could be instead by setenforce 0

MTK-Commit-Id: 5a405882d7853dc0915064d7bfffcc30978ebd86

Change-Id: I35d963d08cbcb921ee0e98d2a2fe6c4123a1f56b
CR-Id: ALPS04383637
Feature: Modem Log Tool
 2020-01-18 10:09:54 +08:00
Jason Hsu
802ee2afa1 [ALPS04377757] Fix mediacodec sepolicy issue 
[Detail]
Fix mediacodec sepolicy issue

[Solution]
Add following to mediacodec due to new check rules after Android Q.
GED_BRIDGE_IO_GE_GET
GED_BRIDGE_IO_GE_SET

MTK-Commit-Id: a037b13e90f3b02999539d17dfde4e1827523b9d

Change-Id: If8e986a630803a9c2eee0c9654b728f5178ee0e9
CR-Id: ALPS04377757
Feature: [Module]Video Driver
 2020-01-18 10:09:54 +08:00
mtk11515
56945bbceb [ALPS04298621] MTKLogger can not get md/netlog property 
[Detail] kernel 4.14 SE linux change

[Solution] change group read file map

MTK-Commit-Id: 971e30bb8a9a2170588e9f363f6617fd90f7e2c8

Change-Id: I2834fa7c081058d49f6c0370160bb94b08cad7f7
CR-Id: ALPS04298621
Feature: MTKLogger
(cherry picked from commit 6ff5e6fc63519d2298d04d1a980349f9c8169f48)
 2020-01-18 10:09:50 +08:00
Larry Liang
10cad58309 Merge "[ALPS04325589] AEE: remove unuse rules" into alps-trunk-q0.basic 
Change-Id: Ia92a7b6be46762af09a64e2c7e92607a1c734858
MTK-Commit-Id: e98481807b7d50c68a8e5bd8926df0dcf4398017
 2020-01-18 10:09:48 +08:00
mtk11285
85b3620577 [ALPS04325589] AEE: remove unuse rules 
1. remove unuse rules
2. allow dumpstate to r/w /proc/msdc_debug
3. allow aee_core_forwarder to access hwservicemanager_prop
4. allow aee_core_forwarder to connect aee_aed socket

MTK-Commit-Id: a43676c734f74636df65e59cdcace017eca79706

Change-Id: I3c45ed83499c0079b38af34cf462dcd80fec501d
CR-Id: ALPS04325589
Feature: Android Exception Engine(AEE)
 2020-01-18 10:09:44 +08:00
Marx Chiu (邱弘志)
75faa0ba65 Merge "[ALPS04377757] Fix camera sepolicy issue" into alps-trunk-q0.basic 
Change-Id: I3638ae1428e25ba0b782473365fda52084495192
MTK-Commit-Id: a2e2ec0b075ee9c69309c82b90d0b5ead97517d7
 2020-01-18 10:09:42 +08:00
mtk03805
217b4fa948 [ALPS04377757] Fix camera sepolicy issue 
[Detail]
Fix camera sepolicy issue

[Solution]
Add following to mtk_hal_camera.
GED_BRIDGE_IO_GE_GET
GED_BRIDGE_IO_GE_SET

MTK-Commit-Id: 37a5c97590fe0d61c553d282e6c79cfa96a71dc9

Change-Id: I6c32d4345296182274a1c24852a87b0b9eb8fd25
CR-Id: ALPS04377757
Feature: Camcorder Application
 2020-01-18 10:09:39 +08:00
Ian-Y Chen (陳尹)
c9ea8dd7b4 Merge "[ALPS04331194] FPSGO: add ioctl permission" into alps-trunk-q0.basic 
Change-Id: I7075fa8fd2af0240703602cc4952cc1d0f8348e8
MTK-Commit-Id: ea29b11fa2ea2e6bfb81772d2fbee163487ff987
 2020-01-18 10:09:38 +08:00
Poting Chen
de970ad094 [ALPS04331194] FPSGO: add ioctl permission 
[Detail]
add FPSGO ioctl permission

MTK-Commit-Id: 4466c4e3c548c134be6939fa50e4c8d3f37a257a

Change-Id: I0c10abd0e780f764ff423442ea3d1b6ed66177c6
CR-Id: ALPS04331194
Feature: FPSGO
 2020-01-18 10:09:36 +08:00
Cosmo Sung
88e528d73d Merge "[ALPS04365408] IMEI crash handler" into alps-trunk-q0.basic 
Change-Id: I882e94a18985867178851557807ffad672d0ad6b
MTK-Commit-Id: 29d7e7bc2a2463b37061f8622762d4a9a620e888
 2020-01-18 10:09:35 +08:00
Cosmo Sung
ee61f89be9 [ALPS04365408] IMEI crash handler 
When modem verify NVRAM fail, it will send URC to RILD and ask AP
to enter recovery mode. This change allows rild to modify powerctl_prop.

MTK-Commit-Id: 48f1f4a9c9b47cd55d03b3b99d800dd3a9a7645f

Change-Id: I84850f0da7631d6345b96c607ecf8b4b0c6f4883
CR-Id: ALPS04365408
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
(cherry picked from commit d54eff14a5941798e35798f8b2bbf349360989ed)
(cherry picked from commit 033e399e8a9f4d16dd1ff653c47ac90d9f5c5309)
(cherry picked from commit 139ffbfc706c4c1b74bac5f8e5edaf95b1909ac8)
 2020-01-18 10:09:29 +08:00
Shanshan Guo
427c135bd6 [ALPS04340791] SEPOLICY: workaround fix BASIC build error 
[Detail]
Only BASIC Sepolicy need to be applyed for BASIC,
we separate basic/bsp sepolicy for BASIC.
This workaround is for fixing the build errors that
cause by the declarations were defined in bsp/ dir
and neverallow rules.

MTK-Commit-Id: f1ed54e84b85f73e20dcc8c2ac5f0c42fddedc77

Change-Id: I568873fcc272d04b018efc4be00924b751bb3775
CR-Id: ALPS04340791
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:09:28 +08:00
Larry Liang
a27e813df1 Merge "[ALPS04362997] AEE porting" into alps-trunk-q0.basic 
Change-Id: Ic35bcf9c2b1f85995001eb859cab80655ab92ed5
MTK-Commit-Id: b22cfd44bf202f086389d9e9ec7a8eafb0e4b447
 2020-01-18 10:09:26 +08:00
Huaiming Li
62b7308528 [ALPS04362997] AEE porting 
modify file_contexts, remove "mtklog"

MTK-Commit-Id: 8199b206c4b429921a7ffdf742deb4ccb9bc5c06

Change-Id: Iaa02b89ab3469f236da7898f0adc1a196840346e
CR-Id: ALPS04362997
Feature: Android Exception Engine(AEE)
 2020-01-18 10:09:24 +08:00
Juju Sung
f0b368fd1d Merge "[ALPS04367884] Sepolicy: workaround for denied policy(2)" into alps-trunk-q0.basic 
Change-Id: I6cc0cece99dbf67f754bfa3b9d4e690b5265cdb3
MTK-Commit-Id: 9b27cd1ac23a980a210622c7471c854ffe135ce3
 2020-01-18 10:09:23 +08:00
Juju Sung
ef49210dc0 [ALPS04367884] Sepolicy: workaround for denied policy(2) 
[Detail]
Set proc node specific node
- hraphic_allocator
- bootanim
- aee_core_forwarder

MTK-Commit-Id: 3a2620f6c38a355ad1fc22e570cc2bc119ab6d48

Change-Id: I4b0572c43b44c730b9cd368870c4ff0d79f6de8d
CR-Id: ALPS04367884
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:09:22 +08:00
Bo Shang
4cb2af0a23 Merge "[ALPS04365111] Fix selinux error" into alps-trunk-q0.basic 
Change-Id: Ib9793203f1bd6a81367784d7bed9b32e6e296e8c
MTK-Commit-Id: 39bbf6cd4890f3fca9f87de1c844787677878f73
 2020-01-18 10:09:17 +08:00
bo.shang
aa52b35cf1 [ALPS04365111] Fix selinux error 
Add socket map permission

MTK-Commit-Id: 5a8050e1faffde6adc067eea37fe99434a2f88a5

Change-Id: Ie3009b81bdae187422fb26644834bec2d145d491
CR-Id: ALPS04365111
Feature: Network Log Tool
 2020-01-18 10:09:15 +08:00
Ian-Y Chen
ee2308acc8 [ALPS04328846] power: add ioctl permission 
[Detail]
Add PowerHal and FPSGO permission for system server
1. Add mtk_hal_power_hwservice:hwservice_manager find
2. Add FPSGO ioctl permission

MTK-Commit-Id: c006057773df6fe4d9e55d54162215c65efc8f00

Change-Id: I3d9e81d408248c79201984e5f269de7eb2f3813e
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:09:14 +08:00
Juju Sung
05c264ab17 [ALPS04239425] BT: BIP rule removal 
[Detail]
BIP type is not defined, we remove it since it
will not block "boot to home screen".

MTK-Commit-Id: 01354af452eb0299b85ab4b5d349da0972c4f6da

Change-Id: Ieb73ce1be5cd2b9b1e69dd822633de33f98e6cfe
CR-Id: ALPS04239425
Feature: BT AOSP
 2020-01-18 10:09:10 +08:00
haohsiang.hsu
40aef819da [ALPS04345011] Add bootctrl selinux for migration 
Add ioctl commad to ioctl_defines.
Add bootctrl selinux policy for migration

MTK-Commit-Id: 153ba94f12253fd5564f93ebe946e32ee1fe25b2

Change-Id: Iebae37db9cd9988079ecca35e5e82d3c4c8021d6
CR-Id: ALPS04345011
Feature: [Android Default] SIU (SD Image Update)
 2020-01-18 10:09:10 +08:00
Ian-Y Chen
84a8614d81 [ALPS04328846] power: add ioctl permission 
[Detail]
1. Add perfctl ioctl definition
2. Add proc_perfmgr permission in mtk_hal_power

[Solution]

MTK-Commit-Id: 8c800a4e115fd8dd800475a72bffa244c687d26a

Change-Id: Iaa3894b618a3e6ee2b6dfc3b864715a137dee50f
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:09:09 +08:00
Juju Sung
0a3b110ac5 [ALPS04357449] Sepolicy: workaround for denied policy 
[Detail]
Set proc node specific node
- hraphic_composer
- bootanimation
- aee_core_forwarder
- surfaceflinger

MTK-Commit-Id: 46901e2900a497c472b8a7c01f1350bdd28bbdae

Change-Id: I89a1ab578a2841d3a16718153d5a716ad45c399b
CR-Id: ALPS04357449
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:09:09 +08:00
Guoyi Qu
9cd2d57da7 Merge "[ALPS04345674] Add permission" into alps-trunk-q0.basic 
Change-Id: I5ee1de3ab196f98ad1a28cfe523a08bfdb77b3c4
MTK-Commit-Id: e7a513697c744cd1abab486a224ce1229002bb7b
 2020-01-18 10:09:08 +08:00
Guoyi Qu
c4d6a70d03 [ALPS04345674] Add permission 
Add permission for pulling connsys FWlogs out
in Meta mode

MTK-Commit-Id: 3f8753e595642800447133d7fc5feca3e3b44b5e

Change-Id: I144720b05e0c7939bcdf8956de151bcfeb0734d2
CR-Id: ALPS04345674
Feature: Modem Log Tool
 2020-01-18 10:09:06 +08:00
Sandeep Bora
67a10e3b1b Merge "[ALPS04340640] SELinux policy update bootanim.te" into alps-trunk-q0.basic 
Change-Id: Ie7f022b0c8b9437cc19e6d1c17652cda6bc4a904
MTK-Commit-Id: 2a6d5e8c19f2503fbb5b9cf8accb43c6f8de9726
 2020-01-18 10:09:05 +08:00
lokesh
6969eebbef [ALPS04340640] SELinux policy update bootanim.te 
Update bootanim.te file to allow IOCTL commands

MTK-Commit-Id: 2fb03897488c2eb29dc2c6c700b7d9dbbb34ab65

Change-Id: I3287b1a3569b472edfb96f80f2d8765b8049e6e3
CR-Id: ALPS04340640
Feature: [Module]Settings
 2020-01-18 10:09:03 +08:00
Dengwei Xu
061ea43ddf Merge "[ALPS04360439] [EM]sensor move to vendor partition" into alps-trunk-q0.basic 
Change-Id: Iee6747c5899cb78b71365462791ae443da43c0c7
MTK-Commit-Id: 22468b90e17f41bfbd5427439c8c6becff5ab5cd
 2020-01-18 10:09:02 +08:00
Juan Rong
336145916b [ALPS04360439] [EM]sensor move to vendor partition 
Move sensor to vendor partition.It needs vendor_app has permission
to read/write sesor related files.

MTK-Commit-Id: 6f30fb87973b05cff81ec3851192125b4eada182

Change-Id: I95fe0601e155319108bfe68b47441b76cbb0b817
CR-Id: ALPS04360439
Feature: Engineering Mode
 2020-01-18 10:08:58 +08:00
Shan Zhang
7d9696260e Merge "[ALPS04357701] Move Widevine sepolicy from basic to bsp" into alps-trunk-q0.basic 
Change-Id: Ibd04cdf937511b74bab011397ba1f891018606a7
MTK-Commit-Id: 08601256bf56659a911a20843cfc0e7df1b39438
 2020-01-18 10:08:57 +08:00
Jackie Lin
410508d3ed [ALPS04357701] Move Widevine sepolicy from basic to bsp 
Move Widevine sepolicy from basic to bsp

MTK-Commit-Id: 53ecfeae7dc2f032423ebcfa1af522fc8aeafa60

Change-Id: Ie8250dbca503830464f90a0f1642fac86c3bc8e2
CR-Id: ALPS04357701
Feature: Google Widevine Level3
 2020-01-18 10:08:55 +08:00
Michael Hsiao
314a261d1d [ALPS04283974] Audio: HIDL 5.0 
[Detail]
Sepolicy for audio HIDL 5.0

MTK-Commit-Id: b49b562f833468bd225ac08e64e88ba0b379be04

Change-Id: Idfe85b3c04798e2f03d1c39420a4e38e7cdf4a1f
CR-Id: ALPS04283974
Feature: [Module]Audio HAL
 2020-01-18 10:08:54 +08:00
Ping-Hsun Wu
d6a6196eae Merge "[ALPS04219582] mmservice 1.2" into alps-trunk-q0.basic 
Change-Id: I1cfb57f67282fce63874c38168d13e13c7dfd395
MTK-Commit-Id: ef1c7004fc237a1b3cfed92fca6c7419329598db
 2020-01-18 10:08:53 +08:00
Howard Ho
6ea35358f7 [ALPS04219582] mmservice 1.2 
1. update mmservice to 1.2
2. BlitStream for MDP & PQ func

MTK-Commit-Id: b56c9af2d24bde8bb8c754adde31b9aa1741ab1f

Change-Id: I30e9912260342a227595a0a05de124b810c6b4e7
CR-Id: ALPS04219582
Feature: [Module]MDP Driver
 2020-01-18 10:08:52 +08:00
Shanshan Guo
1086506de4 [ALPS04345534] SEPolicy: add permission for system_app 
[Detail]
For Andorid Q, there is a more stringent restriction for ioctl,
system_app need to access proc_ged by ioctlcmd=0x6700

MTK-Commit-Id: c610a674e4a9dcdadde0eb619326359253f59f15

Change-Id: I33cd7c4e29b6bec1dc0956cf6d4a136f08f1d511
CR-Id: ALPS04345534
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:08:47 +08:00
Guoyi Qu
bc6a54d6f1 [ALPS04345674] Add permission 
Add permission for customer new feature

MTK-Commit-Id: d17839b053c5e56e060edf3421edca48f83c856f

Change-Id: Idc774aced0f2faea8a74e82430e57257fb5c3efc
CR-Id: ALPS04345674
Feature: Modem Log Tool
(cherry picked from commit 4c795389f056a8cb60ca151e6d36ca1779d2c31c)
 2020-01-18 10:08:47 +08:00