NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,017 Commits 2 Branches 0 Tags
Commit Graph

83 Commits

Author SHA1 Message Date
Cosmo Sung
979dff06fc [ALPS04761137] SeLinux permission 
Add rild socket type.

MTK-Commit-Id: d6850afb4aa38dbb3ec7e439b40a3379edf131a0

Change-Id: I3593adadabeffbe98bacdc27579f392073a40300
CR-Id: ALPS04761137
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
 2020-01-18 10:19:48 +08:00
Nixy Hsu
2f89f8a47a [ALPS04754649] gz: add mtee trusty selinux perms 
fix sysfs permission for dumpstate under selinux.

MTK-Commit-Id: bca4ec3babf362b7f9d21b7c1ea8290f55d8d74c

Change-Id: I26cfbb4e959f0dbd89d46d6088284f36e6450c42
CR-Id: ALPS04754649
Feature: GenieZone
Signed-off-by: Nixy Hsu <nixy.hsu@mediatek.com>
 2020-01-18 10:19:30 +08:00
Yanjie Jiang
725c0b46e1 [ALPS04760260] ccci: delete rule not used 
Change sepolicy rule for security.

MTK-Commit-Id: 0fe0072748de8b9077117a9d4d67bebea46cf9ec

Change-Id: I85a2991ffa2928330989a53ad0597d403274ccce
CR-Id: ALPS04760260
Feature: Modem Interface Driver
Signed-off-by: Yanjie Jiang <yanjie.jiang@mediatek.com>
 2020-01-18 10:19:29 +08:00
hongxu.zhao
f57f7914f3 [ALPS04761129] sensor: high risk sepolicy of mtk_hal_sensors 
give /sys/class/sensor folder perms for mtk_hal_sensors

MTK-Commit-Id: 7d2c08aad389eb68e423d9fa75d5c4f0d514577c

Change-Id: I63c5300a31b523de5d4c22ac53e5e03ba8cdd048
CR-Id: ALPS04761129
Feature: Sensor Hub
 2020-01-18 10:19:22 +08:00
Jimmy Lai
bf88392bfa [ALPS04740488] SVP IT 
1. Add tag for vcodec internal log file

MTK-Commit-Id: 2b4abdfbddc7095bf9a0a721c650917bc8bbddd6

Change-Id: I72d45bed4a61f5234ae0b82b7c4958bfe1da5ad2
CR-Id: ALPS04740488
Feature: Secure Video Path (SVP)
 2020-01-18 10:19:15 +08:00
mtk11285
b913b95845 [ALPS04754945] aee: phase out unused selinux rules 
NE DB is created by /system/bin/aee_aed* on Q,
so remove selinux rules about /data/vendor/tombstones.

MTK-Commit-Id: f3b5da9438aa0fe4cc6e96bcafe0b253da475fee

Change-Id: I875ed2f4c62413e4b438b36945cda9ec7933f9b3
CR-Id: ALPS04754945
Feature: Android Exception Engine(AEE)
 2020-01-18 10:19:11 +08:00
Xiangsheng Hou
dc891f1bc7 [ALPS04747012] SEPolicy: label mtd in procfs 
[Solution]
label mtd in procfs

MTK-Commit-Id: f8ed85a97de48e92e6585070ce7ae467b62275ff

Change-Id: I928aad7c422194c5e1a59345dfbd888379550cb1
Signed-off-by: Xiangsheng Hou <xiangsheng.hou@mediatek.com>
CR-Id: ALPS04747012
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:19:03 +08:00
Huaiming Li
6272c879bf [ALPS04719663] fix some avc denied issue 
update some sepolicy rules

MTK-Commit-Id: c1294d5ae7714677077e8d38c6c1624955816cdb

Change-Id: Id30499203b004677bf95b221195ef33749ec6a36
CR-Id: ALPS04719663
Feature: Android Exception Engine(AEE)
 2020-01-18 10:18:55 +08:00
Larry Liang
30cede8986 Merge "[ALPS04642542] update sepolicy rules for dumping kmemleak file" into alps-trunk-q0.basic 
Change-Id: I8d39195bf5e8f73101d1fa350c4124fba4ff1165
MTK-Commit-Id: 3331b590249be0d60f51d699767152445d7cd3ce
 2020-01-18 10:17:38 +08:00
Huaiming Li
fc904e056e [ALPS04642542] update sepolicy rules for dumping kmemleak file 
add new sepolicy rules for dumping kmemleak file into manual DB

MTK-Commit-Id: bbc72864526fe28df5f9278c4250a152fbe94515

Change-Id: Ie59c50451d3e7b00500a11eab43b99004d0b543c
CR-Id: ALPS04642542
Feature: Android Exception Engine(AEE)
 2020-01-18 10:17:36 +08:00
Yifei Qiao
ed15da7571 Merge "[ALPS04700799] Align keymanager sepolicy with p0.mp6" into alps-trunk-q0.basic 
Change-Id: I525d8f1f9893ac348145cd8f1e063a721091f288
MTK-Commit-Id: 90ca8ed634df094a119de00fe68120697b59c085
 2020-01-18 10:17:35 +08:00
Yifei Qiao
9708912e27 [ALPS04700799] Align keymanager sepolicy with p0.mp6 
Align keymanager sepolicy with p0.mp6

MTK-Commit-Id: 24a187bc32e2be7663abb880c07659834d71f4b0

Change-Id: Ia98525be2155dcf3261633d1e6c25a775426068d
CR-Id: ALPS04700799
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:17:31 +08:00
Peng Zhou
2994db624c Merge "[ALPS04697232] msdc: label mmc1 in sysfs" into alps-trunk-q0.basic 
Change-Id: Ib12bc9c84519575922c5432a2e1e0487c4a10048
MTK-Commit-Id: d856b1ab48d980b6060ab451985418645fffb9b0
 2020-01-18 10:17:23 +08:00
Huaiming Li
ae04d1f49c [ALPS04697232] msdc: label mmc1 in sysfs 
label mmc1 in sysfs

MTK-Commit-Id: f779eb09ee01d25d6f6691ec14ab4fe7bc9d5d7a

Change-Id: I721f146682b32437dd6065824c87bb0d1182729f
CR-Id: ALPS04697232
Feature: [Android Default] SDCard
 2020-01-18 10:17:22 +08:00
Ian-Y Chen
8ae5f3bd2c [ALPS04328846] power: mt6779 migration 
[Detail]
1. Add VPU, MDLA debugfs permission
2. Add EARA dsbugfs permission
3. Add netdagent HIDL permission

MTK-Commit-Id: b815b51044d2be0e70d2e987d792f273b4bd19a2

Change-Id: I104264b1ab146ac7e71e337184f3407ccc58a79b
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:17:11 +08:00
Hua Tian (田华)
642e127203 Merge "[ALPS04649268] Move SELINUX policies to plat_private" into alps-trunk-q0.basic 
Change-Id: I896822f69d6a7a9877b39468141822eba21cd2e8
MTK-Commit-Id: 7158df56b1ae9d92622d91dad092628e1741d256
 2020-01-18 10:16:49 +08:00
hua.tian
7574cf2c9c [ALPS04649268] Move SELINUX policies to plat_private 
These policies are for system process, as a result,
move it to plat_private folder.

MTK-Commit-Id: 46e87002024d5675d566dd59f77cbde9c69bdd37

Change-Id: I9c2b72136d1f1c3062f0ac6b174c8334b1965e80
CR-Id: ALPS04649268
Feature: Mobile Log Tool
 2020-01-18 10:16:47 +08:00
Stanley Chu
328d60ea9c [ALPS04682157] aee: ufs: Add proc_ufs_debug 
Add proc_ufs_debug SEPolicy definition.

MTK-Commit-Id: cbcfb406d1dfdb0d25205da21a1e99cb166659e8

Change-Id: Iee4bfba2116a7f005f8b9b8d831d0e10523b61d1
CR-Id: ALPS04682157
Feature: Android Exception Engine(AEE)
 2020-01-18 10:16:37 +08:00
sharon.feng
8a77128e9d [ALPS04428522] Add selinux policy for svp 
[Detail] For android Q, we need to add more policy for secure video playback

MTK-Commit-Id: 49b4ab8e0047f4a5002c82af075c77e8bc4e790f

Change-Id: Ib81885e40b14416b57e0776c56cb85591509501a
CR-Id: ALPS04428522
Feature: Trustonic TEE (Trusted Execution Environment)
 2020-01-18 10:16:31 +08:00
hua.tian
270eab4eb8 [ALPS04649268] Save mobile log in data partition in meta mode 
Add SELINUX policy for mobile_log_d to save log in /data/debuglogger
and for getting log from adb.

MTK-Commit-Id: 8775f10bd89be7ac112cbc56daf422814f0f385f

Change-Id: I39e5e1d0ccb2381ef302c187ff83a9e9cb0fa959
CR-Id: ALPS04649268
Feature: Mobile Log Tool
 2020-01-18 10:14:56 +08:00
Shanshan Guo
6b7634890e [ALPS04475279] Revert Sepolicy:move type sysfs_mmcblk 
Revert "[ALPS04475279] Sepolicy:move type sysfs_mmcblk"

MTK-Commit-Id: 29c0cafecc272113f799b08271f1ad71fd5abb30

Change-Id: I7b9988640f621e1dfb7129d9bf21ca446e447d04
CR-Id: ALPS04475279
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:14:23 +08:00
Jianping Jiang
11f88203b8 [ALPS04255502] lbs_dbg: move lbs_dbg sepolicy to system 
Move lbs_dbg sepolicy to system for System/vendor Layer decouple

MTK-Commit-Id: a4638ef15ca2020d8f7eba6ab2d053d7716d0ad4

Change-Id: I4ecfb1276b47ec75bab4c72ff04ebeb035d757b3
CR-Id: ALPS04255502
Feature: Location Aiding
 2020-01-18 10:14:12 +08:00
Shanshan Guo
54b1880fd1 [ALPS04475279] Sepolicy:move type sysfs_mmcblk 
[Detail]
sysfs_mmcblk is used by vendor & system process,
its type need to be moved to plat_public.

[Solution]
move type sysfs_mmcblk form non_plat to plat_public.

MTK-Commit-Id: 9221eb0ec44290e461e5602f7bfaf08b72994b4d

Change-Id: Ibe9a39e70e2071bfa9c88518fd34e232fc4844d6
CR-Id: ALPS04475279
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:14:07 +08:00
jhua.zhang
0986f7cfba [ALPS04533784] Move sepolicy of cam cooler to bsp 
[Detail]
Move camera coolers sepolicy to bsp/plat_private.
This reverts commit 869396b2725b78c55382a9f34b016b5236505965.

MTK-Commit-Id: 31387ebc1f29a342b39a8bd809cdc3f2f56c85fd

Change-Id: I64c36cefdefe72846971ec323cae0c6e89c675a1
Signed-off-by: jhua.zhang <jhua.zhang@mediatek.com>
CR-Id: ALPS04533784
Feature: Thermal Management
 2020-01-18 10:13:55 +08:00
jhua.zhang
c95ef58ba5 [ALPS04533784] Thermal: add sepolicy for cam cooler 
[Detail]
Add sepolicy to allow camera app to access /proc/driver/cl_cam_status
for camera shutdown cooler.

MTK-Commit-Id: 869396b2725b78c55382a9f34b016b5236505965

Change-Id: Iadfcfb95923c15384c7a6508525b7167e1a6e16f
Signed-off-by: jhua.zhang <jhua.zhang@mediatek.com>
CR-Id: ALPS04533784
Feature: Thermal Management
 2020-01-18 10:13:40 +08:00
Juju Sung
f680189e6c [ALPS04284125] Sepolicy: add lost label 
[Detail]
netd_socket is deprecated in a/26f84c6.
The netd_socket used in mulitple modem generation,
for cross modem compatibility we add a dummy label to
prevent splitting new branch.

MTK-Commit-Id: b949378b387f9eb942de90b7475aea4ec711f68c

Change-Id: I5179175d9df973a0da01d4520269468b70f742ce
CR-Id: ALPS04284125
Feature: Modem Interface Driver
 2020-01-18 10:13:13 +08:00
Wy Chuang
509a95b365 Merge "[ALPS04431500] battery: add selinux policy in em_svr" into alps-trunk-q0.basic 
Change-Id: I1dd23be2b709812426a1d85e673d4b751fe9af82
MTK-Commit-Id: 3c6fefaadbbd74b2374e6ceb52253e59e1d1164d
 2020-01-18 10:13:07 +08:00
Timo Liao
7bb01a1e2e [ALPS04431500] battery: add selinux policy in em_svr 
add new labels for em_svr mode

MTK-Commit-Id: a0e12cdf7848d47c065cc10eeb144a929dcccace

Change-Id: Ic198120736d63e4b8d1615092b39ba26269c0518
Signed-off-by: Timo Liao <timo.liao@mediatek.com>
CR-Id: ALPS04431500
Feature: Fuel Gauge
 2020-01-18 10:13:04 +08:00
Robbin Chiu
7238f50dd0 [ALPS04419955] WMT: stp_dump moving to vendor 
[Solution]
Set SEPolicy for stp_dump

MTK-Commit-Id: 5caf8dd3780faaf3c8933406756ef7298560590c

Change-Id: I3f2ac66941eb5f54f4b2079fbeef15e1ebe1e2b6
Signed-off-by: Robbin Chiu <robbin.chiu@mediatek.com>
CR-Id: ALPS04419955
Feature: [Module]WMT Driver
 2020-01-18 10:12:09 +08:00
jamy.tseng
142bfb6b36 [ALPS04421353] MtkCam: modify sepolicy for jpeg 
[Detail]
add ioctl for camerahalserver jpegnode
jpegnode need to control jpeg io

MTK-Commit-Id: c1adc06defb2aab6e9402f45c0f2b92bcfa83a5e

Change-Id: Ie8f65b38133fc46b3a46e3ed04b42d6f09ad13cc
CR-Id: ALPS04421353
Feature: Cshot (Continuous Shot)
 2020-01-18 10:11:44 +08:00
HungWen Hsieh
2278c51caa [ALPS04419954] sync code from android p 
[Detail]
sync code from android p

MTK-Commit-Id: d0b19b83da618bab91caff90dbe9525f3f6a22a3

Change-Id: Ib664dbb0b8a1b69012fc81a2ad1bde770ccf478b
CR-Id:ALPS04419954
Feature:[Android Default] Camera Application Basic Functions
 2020-01-18 10:11:22 +08:00
Larry Liang
6247cd3587 Merge changes I4981c061,Ifc1ca446 into alps-trunk-q0.basic 
* changes:
  [ALPS04383536] debugfs_tracing_debug allow rule
  [ALPS04383536] AEE: add some new rules

Change-Id: I2fc6397bbdecfa58abec7702838f461560082fb7
MTK-Commit-Id: 1c3d1f9a790848826c31aef5ccfc23c410d90686
 2020-01-18 10:11:17 +08:00
Huaiming Li
6572ac2fa3 [ALPS04383536] AEE: add some new rules 
add some new rules for not exit files in basic/non_plat/,
allow dumpstate to open/read files

MTK-Commit-Id: 7d8021e582f9c10b7f9574f4fcdadee0be5d3c99

Change-Id: Ifc1ca446ce6cd40e36835acaf52ca5a12efedcdb
CR-Id: ALPS04383536
Feature: Android Exception Engine(AEE)
 2020-01-18 10:11:11 +08:00
Juan Rong
d1df7349d6 [ALPS04318555] PMU path change 
PMU path changed, need modify relatd selinux path

MTK-Commit-Id: 9894024d40e75e43fe67405d1cf5fcdd76185eea

Change-Id: I6a30d42d5aacc79947d84dde3d806b205f00c437
CR-Id: ALPS04318555
Feature: Engineering Mode
 2020-01-18 10:10:30 +08:00
yuhui.zhang
03dda6b5df [ALPS04316338] EM: battery temperature settings 
[Detail]
Add sepolicy rule to set battery temperature

MTK-Commit-Id: 9fcd042bd04632fa952af7ac51833695b8a50f7c

Change-Id: I82b8b6649849403a1b1cd8a2e5093a3664719bc2
CR-Id: ALPS04316338
Feature: Engineering Mode
 2020-01-18 10:09:55 +08:00
Larry Liang
10cad58309 Merge "[ALPS04325589] AEE: remove unuse rules" into alps-trunk-q0.basic 
Change-Id: Ia92a7b6be46762af09a64e2c7e92607a1c734858
MTK-Commit-Id: e98481807b7d50c68a8e5bd8926df0dcf4398017
 2020-01-18 10:09:48 +08:00
mtk11285
85b3620577 [ALPS04325589] AEE: remove unuse rules 
1. remove unuse rules
2. allow dumpstate to r/w /proc/msdc_debug
3. allow aee_core_forwarder to access hwservicemanager_prop
4. allow aee_core_forwarder to connect aee_aed socket

MTK-Commit-Id: a43676c734f74636df65e59cdcace017eca79706

Change-Id: I3c45ed83499c0079b38af34cf462dcd80fec501d
CR-Id: ALPS04325589
Feature: Android Exception Engine(AEE)
 2020-01-18 10:09:44 +08:00
Shanshan Guo
427c135bd6 [ALPS04340791] SEPOLICY: workaround fix BASIC build error 
[Detail]
Only BASIC Sepolicy need to be applyed for BASIC,
we separate basic/bsp sepolicy for BASIC.
This workaround is for fixing the build errors that
cause by the declarations were defined in bsp/ dir
and neverallow rules.

MTK-Commit-Id: f1ed54e84b85f73e20dcc8c2ac5f0c42fddedc77

Change-Id: I568873fcc272d04b018efc4be00924b751bb3775
CR-Id: ALPS04340791
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:09:28 +08:00
Juju Sung
12bc2025e2 [ALPS04239425] Sepolicy: fix undefined type declration 
[Detail]
Unknown type:untrusted_v2_app,alarm_device,qtaguid_proc,mtd_device
Duplicated type:proc_slabinfo

MTK-Commit-Id: 11ccfcffb994452eb58a697e94a8da748ac73933

Change-Id: I2e847041d14d6b6613044cfaa98f242b7fd9381a
CR-Id: ALPS04239425
Feature: Build System
 2020-01-18 10:08:05 +08:00
ILEX Lin
2abdf3da9a [ALPS04190424] NFC : W48p0 - Fix SELinux for factory mode 
[Detail]
Factory mode tool for NFC only works with SElinux disabled.

[Solution]
Update NFC stack to latest release W48p0.
Create the communication socket into data/vendor and apply
a specific SElinux label.

MTK-Commit-Id: 910948f163c96cac14494e5951c504e63a3334ee

Change-Id: I9b89e828e344041ef5bb464cc872f442490a6e2a
CR-Id: ALPS04190424
Feature: NFC Chipset Capability
 2020-01-18 10:07:59 +08:00
Guoyi Qu
20d2ca6bd9 [ALPS04153997] get modem dump info 
change device node to get modem dump info

 add permission to read mddb

MTK-Commit-Id: 461f3252135aa29a2bf88c43ddf23eea7c235f10

Change-Id: Id8da2ece58aad29d1ed66ecbc34a6a9f96634b55
CR-Id: ALPS04153997
Feature: Modem Log Tool
 2020-01-18 10:07:53 +08:00
dengwei.xu
9e520e8fef [ALPS04185953] EM c2k bypass ui display issues 
The data button cannot show checked

MTK-Commit-Id: c244f89abe8640c4bc8b362fcd4f5cf96216190c

Change-Id: I31d70b7540f098643bccc5db6bc2396abf226f91
CR-Id: ALPS04185953
Feature: Engineering Mode
 2020-01-18 10:07:52 +08:00
Willy Yu
11bf606dc5 [ALPS04080300] Connsys log: catch log when host suspend 
add permission of setprop on user load

MTK-Commit-Id: 417b98edd6ff2731c9ebc676db6877dc2c3a7225

Change-Id: I5ed35f2494298cdfc7ea36e7434cc5cbd16260fc
CR-Id: ALPS04080300
Feature: [Module]WMT Driver
Signed-off-by: Willy Yu <willy.yu@mediatek.com>
 2020-01-18 10:07:02 +08:00
mtk11285
c54cc72936 [ALPS04036690] add selinxu rules 
[Detail]
1. relable /proc/chip/info and replace /proc/chip/hw_ver lable
2. add "allow aee_aed sysfs_leds:dir search" for red screen

MTK-Commit-Id: 9a2bac1e41aad51276011d48a65fc58fa16d2fc9

Change-Id: Ifdfb536a9fb763301960b4e771e50c0c49636e7e
CR-Id: ALPS04036690
Feature: Android Exception Engine(AEE)
 2020-01-18 10:06:25 +08:00
Dennis YC Hsieh
28cf5af63a [ALPS04023420] cmdq: CMDQ_STATUS not gen in db 
Miss rule in aee_aedv.te and cause cmdq status blocking by rule.
Add rule and fix name typo.

MTK-Commit-Id: 589feaa73ff62b1893f30d5e4b1ce02d34c94edf

Change-Id: I046f73e29f404cb51908f8191599cb46a7c1399d
Signed-off-by: Dennis YC Hsieh <dennis-yc.hsieh@mediatek.com>
CR-Id: ALPS04023420
Feature: Android Exception Engine(AEE)
 2020-01-18 10:06:20 +08:00
Stephen Chen
246e5b5057 [ALPS03738758] Audio: Add Hifi3 adsp device info 
[Detail]
Add sepolicy access right for Hifi3 adsp device.
Mobilelog and AED will need these access right.

MTK-Commit-Id: 06ac39d7cebbab2bcb3468fcf14f19b7e1489819

Change-Id: Ic834ac687b4423500ef6036824a6d6f75e57ccb3
CR-Id: ALPS03738758
Feature: [Module]Audio OpenDSP
 2020-01-18 10:05:34 +08:00
Robbin Chiu
8ef11ef3fe [ALPS03951556] WMT: Move stp_dump to system image 
[Solution]
Move stp_dump to system image to follow SEPolicy rules

MTK-Commit-Id: f3e5e4f43b6c506109caf2e01d1a61ee0223300e

Change-Id: I1252c1e5b682f97ff36a66d070b33368be05fd0f
CR-Id: ALPS03951556
Feature: [Module]WMT Driver
Signed-off-by: Robbin Chiu <robbin.chiu@mediatek.com>
 2020-01-18 10:05:30 +08:00
Christopher Chen
cf8b0fcdd5 [ALPS03595410] VPU: patch sync from o1.mp1 
[Detail] sync from o1.mp1

[Solution]
1. add sepolicy for debug file

MTK-Commit-Id: 17203252c8bbb77792b32aa5f04ede3408e18e0d

Change-Id: I5fb01a274e2a795612c7c64038b2cb9b49802129
CR-Id: ALPS03595410
Feature: [Android Default] Camera Application Basic Functions
(cherry picked from commit 2cdafad54592601280163dc9ee8f581661657755)
 2020-01-18 10:04:27 +08:00
Chaoran Zhang
c30a82525d [ALPS03872369] Add lbs_dbg selinux policy 
[Detail]
Add lbs_dbg selinux policy

MTK-Commit-Id: c316e3908f5d5ddbf8f543ef08a4759159b798ba

Change-Id: Id6311f353df61ca0fa9a108c832d790b228a5bba
CR-Id: ALPS03872369
Feature: Location Chipset Capability
 2020-01-18 10:03:58 +08:00
Lili Lin
56b7e390c4 [ALPS03959715] move audio-daemon to vendor 
1. Per customer request, move audio-daemon to vendor partition.
2. Implement GetVolumeIndex

MTK-Commit-Id: 4f61171696528b80f9973cb1e3820c9f91116755

Change-Id: Id82b004a39b1217b543c42b9f66de72fb1f76a59
CR-Id: ALPS03959715
Feature: Audio Tuning Tool
 2020-01-18 10:02:48 +08:00