19 Commits

Author SHA1 Message Date
Chen-Yao.Chang
51de544bdc [ALPS04017619] add policy for boost boot perofmrance
[Detail] fix selinux permission

[Solution] add vendor_init "write" proc_perfmgr permission

MTK-Commit-Id: a2917b4a2b759f7465d95a40294916f09535b8d2

Change-Id: I81bec4a989e1a00aa05b5309ba717edc63fa76df
CR-Id: ALPS04017619
Feature: System Performance
2020-01-18 10:05:02 +08:00
mtk81216
b189b5f35a [ALPS03974446] modify vendor_init selinux policy
[Detail]
vendor_init will parse meta_init.rc to ifup lo,which needs some
selinux policy. when meta mode has enabled loopback, gps tool can
run normally

[Solution]
add selinux rule to up lo interface

MTK-Commit-Id: b351d14a284871dae0783f4d48278a1fde515f4d

Change-Id: I962bfc0002a76d34e5366869cb5fea46ae1453da
CR-Id: ALPS03974446
Feature: Location Chipset Capability
2020-01-18 10:04:54 +08:00
Miles Chuang
5f82c9e661 [ALPS03873734] Follow Android P new property rules
[Detail]
Android P add new limitation for property access between
system partition and vendor partition:
1. SET and GET only by system
2. System cannot SET the property which SET/GET by vendor.
3. Allow system and vendor GET the property which SET by vendor.

[Solution]
1. Add new property label mtk_cxp_vendor_prop
2. Modify CXP related SELinux setting

MTK-Commit-Id: 4cac600ed76d413b5aee7ee64a1d6af55aa499d1

Change-Id: I9498840dead36a536acd5d18470f57bf7aec0a7c
CR-Id: ALPS03873734
Feature: Regional Carrier Express Pack
2020-01-18 10:03:48 +08:00
Denis Hsu
1f069644ac [ALPS03891225] Create symlink, /mnt/sdcard, for meta/factory
Give the selinux permission,
allow vendor_init tmpfs:lnk_file create;

MTK-Commit-Id: 31f529ecd4711df63de5a8386b88813595ae4325

Change-Id: I516a4fac12df9975040109d05be1b2e89509b9b5
CR-Id: ALPS03891225
Feature: Multi-Storage
2020-01-18 10:03:40 +08:00
Lili Lin
2197275e79 [ALPS03934986] Remove un-renamed properties
Since Android P, all properties under non_plat/property_contexts
should follow naming rule to add "vendor" prefix, otherwise
VTS will fail.

MTK-Commit-Id: 4563796d8ea83f170097b1ad8fdc3bae0cbae5a1

Change-Id: I0315ae6beefc6f4dd97bf79d217c82b4b7c281e5
CR-Id: ALPS03934986
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:01:54 +08:00
Light Hsieh
54e28a0403 [ALPS03810368] Sepolicy: define rule for ro.vendor.mtk_emmc_support
[Detail]
Define rule for ro.vendor.mtk_emmc_support

MTK-Commit-Id: ecb6dcb6823b088fea26b80aa12d2f6bfbc507bf

Change-Id: If37ce094f1bb06365061bde36f225aa06fc6f424
CR-Id: ALPS03810368
Feature: eMMC Boot Up
2020-01-18 10:00:47 +08:00
Lili Lin
8c75cd68e6 [ALPS03934986] Add mtk_default_prop
1. We have too many config properties set by PRODUCT_PROPERTY_OVERRIDES,
and these properties usually are not sensitive and allow all processes to read.
2. Since Android P, properties should follow naming rule to add "vendor",
and then this will cause properties to be labeled as vendor_default_prop.
By default, coredomain is not granted to read vendor_default_prop.
Actually these properties are read widely from system/vendor processes.
3. So we introduce "mtk_default_prop" type that grant read access to
all processes, including system and vendor.

MTK-Commit-Id: 18077a2cb14b7b1ddadb7000e8abb565f0fd49e3

Change-Id: Ia378db3dbb9d0bf388139be3419e013228c79d6e
CR-Id: ALPS03934986
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:59:13 +08:00
Charles Yen
072a14dd6e [ALPS03951976] PQ:Add PQ Property Permission
Add pq/aal property label & permission.

MTK-Commit-Id: 7ff05d937adde3f2d3c59029e140a640f23212b9

Change-Id: Ib6d9763bb00df0e40c6d77306d5faece7b5d1a00
CR-Id:ALPS03951976
Feature:MiraVision
2020-01-18 09:58:47 +08:00
Muyi Lan
80f841d0dd [ALPS03809072] Set rat config property permission
[Detail]
Set permission for property "ro.vendor.mtk_protocol1_rat_config".

MTK-Commit-Id: 6bf36e9b4dc41769abb6d54a204877df82aa3804

Change-Id: Ie0b31f15e65381d4094bdf2095f8047db1be21fd
CR-Id: ALPS03809072
Feature: Telephony feature switch dynamically
2020-01-18 09:58:25 +08:00
Jason Su
b2d6377d9c [ALPS03950289] Add permission to access GPS properties
[Detail]
Add selinux permissions to access GPS vendor system peroperties.

MTK-Commit-Id: aa97b76d646e13029488cae3aa0feb73a389675c

Change-Id: Icd41d074b1b620f70e5a68c3c02719f773cf2b2f
CR-Id: ALPS03950289
Feature: Location AOSP
2020-01-18 09:58:10 +08:00
guoyi.zhao
134a7ddb7f [ALPS03929399] Rename CT VoLTE system property
[Detail]
Rename CT VoLTE system property and allow other module to access
persist.vendor.mtk_ct_volte_support.

MTK-Commit-Id: bc5a52b6998d941aa12c7532f095d1a8c67d663f

Change-Id: I33881fd6684dc76e148ac4917e5c146f949e24f7
CR-Id: ALPS03929399
Feature: [China Telecom]VoLTE Customization
2020-01-18 09:57:56 +08:00
Stella Yang
e74283f1a5 Merge "[ALPS03878966] Declare label for mtk_ril_mode" into alps-trunk-p0.basic
Change-Id: Ic553ed91687447da5ae9a064e32fdd04afcc3763
MTK-Commit-Id: 7df057e68500af6a428ff2d925ffd5586ae3b2e2
2020-01-18 09:56:33 +08:00
stella yang
0c41f7d408 [ALPS03878966] Declare label for mtk_ril_mode
[Detail]
1. Add label: mtk_ril_mode_prop
2. Add ro.vendor.mtk_ril_mode into the label

MTK-Commit-Id: 68167f299e05a9fc8a11f4d7579c1a62fe2e7575

Change-Id: I3df9fb88b7871506272ec7f020ce2d5ecdf85272
CR-Id: ALPS03878966
Feature: WiFi Calling Service
2020-01-18 09:56:30 +08:00
bo.shang
276c0764fc [ALPS03943443] Modem Log start USB logging fail
Fix SELinux errors:
   1. Set vendor property
   2. Set USB property

[Solution] Add permission

MTK-Commit-Id: f9bea7ca32b8ca70e6f015d786753a43491810aa

Change-Id: I3e7cfc80eb34c3430a059b57afa1474ee49e75b1
CR-Id: ALPS03943443
Feature: Modem Log Tool
2020-01-18 09:55:57 +08:00
Larry Liang
a308bd06d8 Merge "[ALPS03841705] relable the ro.* property of AEE" into alps-trunk-p0.basic
Change-Id: If2ed9f9583e7d466ff1917401fcf69dd7f05227d
MTK-Commit-Id: 6111bda13a76ef18e5974b6c815258882bcba7bd
2020-01-18 09:51:31 +08:00
mtk11285
75d22d6e40 [ALPS03841705] relable the ro.* property of AEE
[Detail] relable the ro.* property of AEE

MTK-Commit-Id: d3a00d0323f1ea56c68c75a3c07e5db649ccf328

Change-Id: Id4038cd4b01622bd955d4845eae9493693ef33b6
CR-Id: ALPS03841705
Feature: Android Exception Engine(AEE)
2020-01-18 09:51:24 +08:00
Lili Lin
98a7fdc4b2 [ALPS03934986] Fix Selinux issue
[Detail]
Command chown system system /mnt/vendor/nvcfg action=post-fs-data (/vendor/etc/init/hw/init.mt6739.rc:138) took 1ms and failed: lchown() failed: Permission denied

[Solution] Add unlabeled permission for vendor_init

MTK-Commit-Id: 511397f101d5d63593199c212888e674e661199d

Change-Id: Ia22badf945b52f76be3176f3081ada35aaada17b
CR-Id: ALPS03934986
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:51:11 +08:00
mtk11285
2d1de9641e [ALPS03841705] aee cant red screen on enforcing mode
[Detail] aee cant red screen on enforcing mode

MTK-Commit-Id: baa0c22ec13f572616eb8d5bcfc35e1dfadf4f02

Change-Id: Ib87249d85e81d60dba28e546902956be43c7d88c
CR-Id: ALPS03841705
Feature: Android Exception Engine(AEE)
2020-01-18 09:50:25 +08:00
Lili Lin
d243f35618 [ALPS03881723] vendor_init: Fix bootup denial
[Detail] vendor_init is new introduced in Android P,
and related policies have not been created yet.

[Solution] Add policies for vendor_init

MTK-Commit-Id: 00dc11bf94cbb7909ef58482d7726ebe8b954782

Change-Id: Ic2286e8e3e67b4005c7e2df18d217275f069f208
CR-Id: ALPS03881723
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:47:51 +08:00