NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,028 Commits 2 Branches 0 Tags
Commit Graph

16 Commits

Author SHA1 Message Date
Eric Chung
7876720527 [ALPS04735709] GPU: Add selinux policy to enable GED new ioctl 
[Detail]
New GED ioctl: GED_BRIDGE_IO_HINT_FORCE_MDP

MTK-Commit-Id: 49b81814f6f14ea55b6dcff2780726a71533f9ae

Change-Id: I9c2d10c8e10f67c0618b7daee7d980a783fa86bf
CR-Id: ALPS04735709
Feature: Vulkan
 2020-01-18 10:19:15 +08:00
sharon.feng
8a77128e9d [ALPS04428522] Add selinux policy for svp 
[Detail] For android Q, we need to add more policy for secure video playback

MTK-Commit-Id: 49b4ab8e0047f4a5002c82af075c77e8bc4e790f

Change-Id: Ib81885e40b14416b57e0776c56cb85591509501a
CR-Id: ALPS04428522
Feature: Trustonic TEE (Trusted Execution Environment)
 2020-01-18 10:16:31 +08:00
Shanshan Guo
62cf1a413a [ALPS04639771] SEPolicy: Modify workaround 
[Detail]
There is a workaround for bring-up,
now it needs to be modified.

[Solution]
1.Split workaround to sepcial *.te
2.Modify ged sepolicy
3.Modify mistake
4.Add sepolicy

MTK-Commit-Id: 5a2b7e3fdc826a7ca6bc70a3810f14c1661e7d79

Change-Id: I0894de45e014a5eae754e35b57fbc9b21bc4bf90
CR-Id: ALPS04639771
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:15:29 +08:00
Coboy Chen
045348b627 [ALPS04327011] sepolicy: add ioctl defines 
Add ioctl defines of MMC and UFS for storageproxyd.

MTK-Commit-Id: b274b0af303546e3dedb47510ca2f43460ee3f33

Change-Id: I9af1c8904c44d1d773c1f7248ac945fe8a991888
Signed-off-by: Coboy Chen <coboy.chen@mediatek.com>
CR-Id: ALPS04327011
Feature: GenieZone
 2020-01-18 10:14:10 +08:00
Ian-Y Chen
9fcf99ba09 [ALPS04328846] power: refine sepolicy 
[Detail]
1. Add prefix PERFMGR for performance related ioctl
2. Add property permission for PowerHAL

MTK-Commit-Id: 91ef99a47ee2de3c48426298c9a67d5e4dd10a6b

Change-Id: I5979aefc7fb110ee540425bc53896babdcac08bd
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:13:32 +08:00
Shanshan Guo
7010a1c7bd [ALPS04501651] Sepolicy: Kernel API dump 
[Detail]
For Andorid Q, there is a more stringent restriction
for ioctl, app need to access proc_ged by ioctlcmds.

[Solution]
Add sepolicy for app to access proc_ged by ioctlcmds.

MTK-Commit-Id: 630cfe13e5928346453bb3800b75439d5e9e1235

Change-Id: I1bde81017e78d5b70fc78dd5fa148667360d2af4
CR-Id: ALPS04501651
Feature: Power Management
 2020-01-18 10:13:20 +08:00
Jamy Tseng
e36513694d Merge "[ALPS04421353] MtkCam: modify sepolicy for jpeg" into alps-trunk-q0.basic 
Change-Id: I2b2e3b23760f93ef27ca627e16a874d38b6ae9eb
MTK-Commit-Id: e36f1561a6d79042b0cada9acc6c66d9e0aa40ac
 2020-01-18 10:11:46 +08:00
jamy.tseng
142bfb6b36 [ALPS04421353] MtkCam: modify sepolicy for jpeg 
[Detail]
add ioctl for camerahalserver jpegnode
jpegnode need to control jpeg io

MTK-Commit-Id: c1adc06defb2aab6e9402f45c0f2b92bcfa83a5e

Change-Id: Ie8f65b38133fc46b3a46e3ed04b42d6f09ad13cc
CR-Id: ALPS04421353
Feature: Cshot (Continuous Shot)
 2020-01-18 10:11:44 +08:00
GuanWen Chen
6775f03fcb [ALPS04383692] GPU: gpu hidl ioctl permission 
[Detail]
Add gpu hidl ioctl permission

MTK-Commit-Id: 0a22c8a73634941e3559a82396c587d41a68e1c2

Change-Id: I0dfbc9c69689a3906e5c84fd0991333aff79c0c7
CR-Id: ALPS04383692
Feature: OpenGL|ES
 2020-01-18 10:11:41 +08:00
haohsiang.hsu
40aef819da [ALPS04345011] Add bootctrl selinux for migration 
Add ioctl commad to ioctl_defines.
Add bootctrl selinux policy for migration

MTK-Commit-Id: 153ba94f12253fd5564f93ebe946e32ee1fe25b2

Change-Id: Iebae37db9cd9988079ecca35e5e82d3c4c8021d6
CR-Id: ALPS04345011
Feature: [Android Default] SIU (SD Image Update)
 2020-01-18 10:09:10 +08:00
Ian-Y Chen
84a8614d81 [ALPS04328846] power: add ioctl permission 
[Detail]
1. Add perfctl ioctl definition
2. Add proc_perfmgr permission in mtk_hal_power

[Solution]

MTK-Commit-Id: 8c800a4e115fd8dd800475a72bffa244c687d26a

Change-Id: Iaa3894b618a3e6ee2b6dfc3b864715a137dee50f
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:09:09 +08:00
Juju Sung
0a3b110ac5 [ALPS04357449] Sepolicy: workaround for denied policy 
[Detail]
Set proc node specific node
- hraphic_composer
- bootanimation
- aee_core_forwarder
- surfaceflinger

MTK-Commit-Id: 46901e2900a497c472b8a7c01f1350bdd28bbdae

Change-Id: I89a1ab578a2841d3a16718153d5a716ad45c399b
CR-Id: ALPS04357449
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:09:09 +08:00
lokesh
6969eebbef [ALPS04340640] SELinux policy update bootanim.te 
Update bootanim.te file to allow IOCTL commands

MTK-Commit-Id: 2fb03897488c2eb29dc2c6c700b7d9dbbb34ab65

Change-Id: I3287b1a3569b472edfb96f80f2d8765b8049e6e3
CR-Id: ALPS04340640
Feature: [Module]Settings
 2020-01-18 10:09:03 +08:00
Kane Jhang
eff15efb2a [ALPS04288834] Q- migration: Add needed SE policy 
[Detail] Add HWC needed SE policy

MTK-Commit-Id: 166aa064a2f2912dd6689baf7d5b9d0adeca816e

Change-Id: I2ad22692392a9cc52aa9de15c2ff8ee7849da760
CR-Id: ALPS04288834
Feature: [Module]SurfaceFlinger/HWComposer
 2020-01-18 10:08:47 +08:00
mtk12096
3d72079909 [ALPS04345724] add sepolicy for merge_hal_service 
Detail] Add SE policy for merge_hal_service

MTK-Commit-Id: 66cdaaaf50d07cb4b4e09b1aafbe0541f8156617

Change-Id: I514534a3a852af5d9393dacd4f920ea0b41effd5
CR-Id: ALPS04345724
Feature: Memory Optimization
 2020-01-18 10:08:43 +08:00
lokesh
b151556fc1 [ALPS04340640] SELinux policy update bootanim.te 
Update bootanim.te file to allow IOCTL commands

MTK-Commit-Id: 63b0669373adc7386aa445b2e617abde5e40bcbb

Change-Id: I0e62af7c87040cd438e5e62171b830c6641e0e81
CR-Id: ALPS04340640
Feature: [Module]Settings
 2020-01-18 10:08:39 +08:00