NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,032 Commits 2 Branches 0 Tags
Commit Graph

1032 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
mtk10008
0ee9b429a0 [ALPS04696977] Boot cleanup 
[Detail]
Remove proc_cpu_loading from basic/non_plat/init.te

MTK-Commit-Id: 6a2ade3189d2b9613f8b19b2ebe646cef292a600

Change-Id: Ia4634123e58127d6dacaa8f98e58ed6cdfc33833
CR-Id: ALPS04696977
Feature: build process
 2020-01-18 10:17:13 +08:00
mtk10008
dcf924b4d9 [ALPS04696977] Boot cleanup 
[Detail]
Android Q has more restrictions, for example vendor cannot access
/data unless than (/data/vendor), etc...
Clean up boot fail items

MTK-Commit-Id: 44078402d526f7ef73ebfa31d95dbd24fa0f77af

Change-Id: I9b5b9dd2df253bad03e4b5fe1cab69404c9251ab
CR-Id: ALPS04696977
Feature: build process
 2020-01-18 10:17:13 +08:00
Ian-Y Chen
7141af7483 [ALPS04328846] power: fix build error 
[Detail]
Move netdagent to bsp folder

MTK-Commit-Id: f17dfe12c51ff65f807c407602a28f7cdea05687

Change-Id: I339a5401769b7b3f2803123db0fb8434c1c99d3d
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:17:12 +08:00
Ian-Y Chen
8ae5f3bd2c [ALPS04328846] power: mt6779 migration 
[Detail]
1. Add VPU, MDLA debugfs permission
2. Add EARA dsbugfs permission
3. Add netdagent HIDL permission

MTK-Commit-Id: b815b51044d2be0e70d2e987d792f273b4bd19a2

Change-Id: I104264b1ab146ac7e71e337184f3407ccc58a79b
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:17:11 +08:00
Hua Tian (田华)
756000fd0e Merge "[ALPS04696977] Fix typo issue" into alps-trunk-q0.basic 
Change-Id: Iabe312aabc6fa7a6eb669a024851fc1eb4ab439d
MTK-Commit-Id: aff372f08bebf69bbbbb84b0f9c6db9c7bb8cc3c
 2020-01-18 10:17:11 +08:00
hua.tian
67c841f99e [ALPS04696977] Fix typo issue 
Change shell to mobile_log_d

MTK-Commit-Id: d927f5e4e48ebf017bcaf08b120d6d3784723594

Change-Id: Ib565526e2e56eb26fa74a74c85dd50897ac130e8
CR-Id: ALPS04696977
Feature: Mobile Log Tool
 2020-01-18 10:17:09 +08:00
Hua Tian (田华)
de2efacf7f Merge "[ALPS04696977] Fix SELINUX issue" into alps-trunk-q0.basic 
Change-Id: If8dd25720afb56b2995b2cf519cb449c5bbdc559
MTK-Commit-Id: 7c1400fc40de4af1d4bb4b48a7bc1848c7fd93e8
 2020-01-18 10:17:08 +08:00
hua.tian
d9c874257d [ALPS04696977] Fix SELINUX issue 
Add rule to read system property.

MTK-Commit-Id: 8c5cf76aaadd4bb43ab5f55787330a9490c9af3d

Change-Id: I8d4a1e526907a7e8bc48ee7d48ed38256918c637
CR-Id: ALPS04696977
Feature: Mobile Log Tool
 2020-01-18 10:17:07 +08:00
Jiaqin Wang
18cc043b42 [ALPS04689352] ADB:add allow priority 
move persist.adb.nonblocking_ffs from
PRODUCT_SYSTEM_DEFAULT_PROPERTIES to
PRODUCT_PROPERTY_OVERRIDES, need add
allow priority to let adb daemon to
get/read it

MTK-Commit-Id: 0489198430c2ac2412ebebdc6e24bf8fd0797bf1

Change-Id: I9f69bddfdd307a3d13a8516076b4106f4b0bdf82
CR-Id: ALPS04689352
Feature: [Android Default] ADB (Android Debug Bridge)
 2020-01-18 10:17:05 +08:00
Wenxiang Zhong
2dfa9329c1 [ALPS04697845] add performance tuning properties 
Add performance tuning properties ro.vendor.mtk_perf_plus
selinux policy

MTK-Commit-Id: 8aa76802ecb3d6fdfa33485ef7db0fc18818d877

Change-Id: Ib2c5bbcab4e6556ae6028568ccfef5e62f6e5b17
CR-Id: ALPS04697845
Feature: System Performance
 2020-01-18 10:17:05 +08:00
Shanshan Guo
1e529a7fb6 Merge "[ALPS04417009] Enable SELinux Property" into alps-trunk-q0.basic 
Change-Id: Ia639e07701be7ae8747c916d618e5ff2da7463ef
MTK-Commit-Id: a71e95eb3d9482066514f71d2731c169bdeaba8c
 2020-01-18 10:17:04 +08:00
mtk14318
0a8da1b15e [ALPS04417009] Enable SELinux Property 
vendor.debug.sf.hdr_enable

MTK-Commit-Id: 166ff42973f20061b1a449115ca4b7a6e5663a68

Change-Id: I04b02f334dd51821698a9875e010a92d4d6a1c2b
CR-Id: ALPS04417009
Feature: [Module]SurfaceFlinger/HWComposer
 2020-01-18 10:17:01 +08:00
Light Hsieh
270ef77677 Merge "[ALPS04674968] siu update: add permission for mmcblk access" into alps-trunk-q0.basic 
Change-Id: I30150fd24ad8e6a5e2757c649dec6942c5f3df1f
MTK-Commit-Id: 6ee51a76d3e9529ae46fe9b6bb17888939c26346
 2020-01-18 10:16:59 +08:00
Josepchi Tsai
fdb2a25c84 [ALPS04429330] Cam: Fix secure camera selinux issue 
[Detail]
Add permission.

MTK-Commit-Id: 8ba94b2e2ca90a6130f9cec123bbbe385f8b0ecc

Change-Id: I8419705a9c4133564ed71f7fed5c0ccbdb584ffe
CR-Id: ALPS04429330
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:16:59 +08:00
Freddy Hsin
2cbde35002 [ALPS04674968] siu update: add permission for mmcblk access 
add permission for mmcblk access to fix
kb3 basic project update issue

MTK-Commit-Id: d3aa3acd7f6f2cf0d4382ed36fb1e6c23218b97d

Change-Id: I2c52fc77e56ef8e09bbc528c75cbd18e249d11e2
Signed-off-by: Freddy Hsin <freddy.hsin@mediatek.com>
CR-Id: ALPS04674968
Feature: [Android Default] SIU (SD Image Update)
 2020-01-18 10:16:55 +08:00
Mark Hu
4437df27f1 Merge "[ALPS04688504] Add selinux permmision" into alps-trunk-q0.basic 
Change-Id: Ie8e7d48089e041b517b505be7b9be6fe99cb3a8e
MTK-Commit-Id: 47b0ac393980c85350daa9aa065c9bcda0e165a8
 2020-01-18 10:16:54 +08:00
Michael Lai
0eeca0ef05 [ALPS04688504] Add selinux permmision 
[Detail] Add selinux permmision

MTK-Commit-Id: ca87b8ce2b16960b4047a178391ad9ec9ad99a82

Change-Id: Iea70b082d5057d729a52c97009bcdb0bafa1de61
CR-Id: ALPS04688504
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:16:50 +08:00
Hua Tian (田华)
642e127203 Merge "[ALPS04649268] Move SELINUX policies to plat_private" into alps-trunk-q0.basic 
Change-Id: I896822f69d6a7a9877b39468141822eba21cd2e8
MTK-Commit-Id: 7158df56b1ae9d92622d91dad092628e1741d256
 2020-01-18 10:16:49 +08:00
hua.tian
7574cf2c9c [ALPS04649268] Move SELINUX policies to plat_private 
These policies are for system process, as a result,
move it to plat_private folder.

MTK-Commit-Id: 46e87002024d5675d566dd59f77cbde9c69bdd37

Change-Id: I9c2b72136d1f1c3062f0ac6b174c8334b1965e80
CR-Id: ALPS04649268
Feature: Mobile Log Tool
 2020-01-18 10:16:47 +08:00
Hua Fu
899c01d964 [ALPS04088869] GPS: Add selinux allow for mnld to access gpsdl devices 
Allow mnld to access MT6885 new GPS device drivers, which are:
/dev/gpsdl0 and /dev/gpsdl1.

MTK-Commit-Id: 11b8302cd93d085be0e56f7e7645a1e6fd7b5980

Change-Id: I49f18a7ff01c6c4c700f9069920994dd5e62a624
Signed-off-by: Hua Fu <hua.fu@mediatek.com>
CR-Id: ALPS04088869
Feature: Location Chipset Capability
 2020-01-18 10:16:44 +08:00
Yogesh Tundele
94de77a5fe Merge "[ALPS04685340] Recovery: Add SELinux Permission" into alps-trunk-q0.basic 
Change-Id: I3d076b625fe6b39dd86d4c2358890bc829fdb57f
MTK-Commit-Id: e7e98db12833b1425593d60035bce6593cc7c6e2
 2020-01-18 10:16:44 +08:00
Yogesh Tundele
5f63a6caa8 [ALPS04685340] Recovery: Add SELinux Permission 
[Detail]
Uncrypt service need permission to write ota package

MTK-Commit-Id: 0fa210d0c4e4ce5eae607fa2d53fb10a59a49628

Change-Id: If8127d2056278932ecf947541cfa24b29be6bb11
CR-Id: ALPS04685340
Feature: [Module]Settings
Signed-off-by: Yogesh Tundele <yogesh.tundele@mediatek.com>
 2020-01-18 10:16:38 +08:00
Stanley Chu
328d60ea9c [ALPS04682157] aee: ufs: Add proc_ufs_debug 
Add proc_ufs_debug SEPolicy definition.

MTK-Commit-Id: cbcfb406d1dfdb0d25205da21a1e99cb166659e8

Change-Id: Iee4bfba2116a7f005f8b9b8d831d0e10523b61d1
CR-Id: ALPS04682157
Feature: Android Exception Engine(AEE)
 2020-01-18 10:16:37 +08:00
Stanley Chu
1a276c5460 [ALPS04682157] aee: ufs: Enable write permission for ufs_debug 
Enable write permission for /proc/ufs_debug to try to catch
precise UFS command history in erroneous scenes by:

- Stopping UFS command history immediately just after error
  (e.g., NE, JE ...etc.) happens.
- Re-starting UFS command history after UFS command history
  is dumped.

MTK-Commit-Id: 59f4a6c71850d7131cf6312e802124fe68a830c6

Change-Id: I738eff0040210b4a833f15af526c68282f697d5b
CR-Id: ALPS04682157
Feature: Android Exception Engine(AEE)
 2020-01-18 10:16:36 +08:00
Harvey Liu
81bde14096 Merge "[ALPS04682095] Factory Mode: fix SElinux policy" into alps-trunk-q0.basic 
Change-Id: I7ccd9cbbb58599b6ac3728d39ba1cae4fc52f205
MTK-Commit-Id: 9e50666bedfd55e9d06dfb8ca3c7316302ef3fc3
 2020-01-18 10:16:35 +08:00
Jenny Hsu
5208b37972 [ALPS04682095] Factory Mode: fix SElinux policy 
[Detail] Add whitelist for SELinux avc denied problem

MTK-Commit-Id: 09661f9080a79ab4793477bb1d2f58ca82c8c517

Change-Id: Ibdacde2da8c49e5f7d7744c2c5781b0bcf03cccc
CR-Id: ALPS04682095
Feature: Factory Mode
 2020-01-18 10:16:33 +08:00
Sharon Feng
ffc22cbb24 Merge "[ALPS04428522] Add selinux policy for svp" into alps-trunk-q0.basic 
Change-Id: I50b42e9a60dc1cfefa309a6c50e76dc337ba8853
MTK-Commit-Id: 6f772916ed73393a7854d683cb69ad7efe645be2
 2020-01-18 10:16:32 +08:00
sharon.feng
8a77128e9d [ALPS04428522] Add selinux policy for svp 
[Detail] For android Q, we need to add more policy for secure video playback

MTK-Commit-Id: 49b4ab8e0047f4a5002c82af075c77e8bc4e790f

Change-Id: Ib81885e40b14416b57e0776c56cb85591509501a
CR-Id: ALPS04428522
Feature: Trustonic TEE (Trusted Execution Environment)
 2020-01-18 10:16:31 +08:00
Johnny Yao
4a346a24a8 [ALPS04667511] WMT: add map policy for stp_dump, stpwmt_device 
add map policy for stp_dump, stpwmt_device

MTK-Commit-Id: f49e856a8cbe3813d9e177345ce18ae1b61e89b7

Change-Id: Ib76f0cb54e7dc363da194686aec4724b6b4c1fad
Signed-off-by: Johnny Yao <johnny.yao@mediatek.com>
CR-Id: ALPS04667511
Feature: [Module]WMT Driver
 2020-01-18 10:16:29 +08:00
Chinwen Chang
b26257b43e [ALPS04682095] revert "[ALPS04455690] Whitelist some lmkd properties that go into /vendor/build.prop" 
This reverts commit bc8b76b56605d264af1727cd234a5406da372744

MTK-Commit-Id: 70d80baace23b335bad1fe838af8662e4145feaa

Change-Id: Idfe9cf773b3434596d97e0c0412468635ef624c3
CR-Id: ALPS04682095
Feature: Memory Optimization
 2020-01-18 10:16:29 +08:00
Shanshan Guo
ac04c06d44 [ALPS04661377] SEPolicy:workaround for google dumpstate avc error 
[Detail]
In xTS, testNoBugreportDenials will check if there are any
avc denied log of dumpstate.
https://android-review.googlesource.com/c/platform/cts/+/667966

[Solution]
add dumpstate allow rules as workaround for google
dumpstate avc error.

MTK-Commit-Id: 98f2dcd0a8011ce5892a25bf40e3e94efe87e302

Change-Id: I12d8d197a815791be942336d6c951e38a3278d2c
CR-Id: ALPS04661377
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:16:29 +08:00
Jianping Jiang
b3838f31bb Merge "[ALPS04674290] Correct mnld_device type" into alps-trunk-q0.basic 
Change-Id: I16857bef7e386fefdb04f0b3d6798f49a94213ec
MTK-Commit-Id: 46c321079fa7510de79fc8b3b0d2096c85fa4fd9
 2020-01-18 10:16:28 +08:00
Jianping Jiang
109462e1f2 [ALPS04674290] Correct mnld_device type 
1. Remove mnld_device from lbs_dbg.te;
2. move mnld_device type to non_plat folder

MTK-Commit-Id: f575807c7ac6d6a30595479ae03339b5765ff884

Change-Id: I8ba23283a103f52c045ae6c69ec7fc4eca06df84
CR-Id: ALPS04674290
Feature: Location Chipset Capability
 2020-01-18 10:16:26 +08:00
Guoyi Qu
c05f509f1b [ALPS04266403] add permission 
Add permission for access data/debuglogger.

MTK-Commit-Id: 5aee880b2f482110007a55d23c65e5d86b65cf72

Change-Id: I55faf7bcd66beef34d916b594d3ad8cb62836e9d
CR-Id: ALPS04266403
Feature: Connsys Log Tool
 2020-01-18 10:16:25 +08:00
lena wang
2ddeac52a9 Merge "[ALPS04607956] SIM:Add IMSI to sensitive property" into alps-trunk-q0.basic 
Change-Id: Ib07607fc7274a5eb770eb155591fe59ee9421b18
MTK-Commit-Id: a23a5e67e573d5cf2e30741429d364fe2681534f
 2020-01-18 10:16:24 +08:00
lena wang
271faac986 [ALPS04607956] SIM:Add IMSI to sensitive property 
IMSI belongs to sensitive information and is not allowed to print.
Add IMSI property to sensitive group and it is not printed in
mtklogger property files.

MTK-Commit-Id: 9c0bde9784ce5f9f4a88ee6827faf864c248682a

Change-Id: If3721c66fc69f86424ed98193aecd600019071f8
CR-Id: ALPS04607956
Feature: SIM
 2020-01-18 10:16:21 +08:00
Ping-Hsun Wu
746bea8548 Merge "[ALPS04672388] Change selinux permission for MDP user" into alps-trunk-q0.basic 
Change-Id: I399e0d0423e8ab393740f8546465f5118c8fac3e
MTK-Commit-Id: 919592752ef6843078dc651cb0596f81864b92ec
 2020-01-18 10:16:20 +08:00
Mike Hsieh
dc6c9adc15 [ALPS04672388] Change selinux permission for MDP user 
Change selinux permission for MDP user on /dev/mdp_sync

MTK-Commit-Id: a9c03563cf5e96815399788228dc62d18d88026e

CR-Id: ALPS04672388
Change-Id: I3622da7b8ba4151f9cf79e9d4d9c8f73109ef684
Feature: [Module]MDP Driver
 2020-01-18 10:16:18 +08:00
Chien-Wei Hsu
d569ce167d Merge "[ALPS04286398] adsp: add adsp permission" into alps-trunk-q0.basic 
Change-Id: I1ded0256d0891a753353d654600860b449c72971
MTK-Commit-Id: 628f3ced43fdc2466e3457ea70158c169c6faf77
 2020-01-18 10:16:16 +08:00
chien-wei hsu
723628ecbd [ALPS04286398] adsp: add adsp permission 
[detail]
add device adsp permission

MTK-Commit-Id: e4e95de61164b584c97b949d2aa57ed17dd3120e

Change-Id: I691cb90e40034357d6a320bb0749db497b76a9e7
CR-Id: ALPS04286398
Feature: [Module]Audio OpenDSP
 2020-01-18 10:16:14 +08:00
Cosmo Sung
c8a28bd034 Merge "[ALPS04649355] TC1 Q migration" into alps-trunk-q0.basic 
Change-Id: If0ee6963fc28d65cefe46ef4a47f8d5c8beb49e6
MTK-Commit-Id: 1fa774aa71061e9ad6d7e765a920b135cc6ceeda
 2020-01-18 10:16:11 +08:00
Cosmo Sung
bd0e54fbb5 [ALPS04649355] TC1 Q migration 
Add permission for IMtkRadioEx.

MTK-Commit-Id: 88ee7b7349158b7b17705cc54941f989bbe58e2f

Change-Id: I19d4494f707966265c364ae640f4f5455662708c
CR-Id: ALPS04649355
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
 2020-01-18 10:16:10 +08:00
lena wang
f288849b4b Merge "[ALPS04660540] SIM:Allow factory to access AOSP property" into alps-trunk-q0.basic 
Change-Id: I511f4e7784a59cf80981dbd267d6da432116e2b5
MTK-Commit-Id: cd4bbdfa715f8434c047396b33f655bedc2f1449
 2020-01-18 10:16:08 +08:00
Jibin Zhang
bf2e48d678 [ALPS04660540] SIM:Allow factory to access AOSP property 
Add SELINUX permission to allow factory to access AOSP property

MTK-Commit-Id: c97b48cc3d6e3975d417fad03a5f0db5d0d84f99

Change-Id: Ib01f0792bfb4110aff7cba60d0ee7ddf6de6b391
CR-Id: ALPS04660540
Feature: SIM
 2020-01-18 10:16:06 +08:00
Larry Liang
94b231fbb3 Merge "[ALPS04642542] add allow rule for reading tracing_on" into alps-trunk-q0.basic 
Change-Id: I328ef6c3839dda06c8c7b5caec7d4ffcba656459
MTK-Commit-Id: 937bf8e174a07adcaf7a43ef9c50670afbfd7100
 2020-01-18 10:16:05 +08:00
Huaiming Li
cbb2ca1665 [ALPS04642542] add allow rule for reading tracing_on 
ensure aee_dumpstate can read tracing_on value

MTK-Commit-Id: a97d988f87616ea966acdfc090f665237098fb22

Change-Id: I04b844de30965f943b7d3d2be1c805c3158dbf13
CR-Id: ALPS04642542
Feature: Android Exception Engine(AEE)
 2020-01-18 10:16:04 +08:00
Deepti Vashist
47867cc607 Merge "[ALPS04669482] Added SELinux policy for mediaswcodec" into alps-trunk-q0.basic 
Change-Id: I2bc864b4cd21989e9113b9b8e61ba9f04bf9f8e4
MTK-Commit-Id: 276993cc3d265edbcc149e4522b4f10c0ac1378e
 2020-01-18 10:16:03 +08:00
pankaj jangir
31c487c298 [ALPS04669482] Added SELinux policy for mediaswcodec 
Add file & dir permission on gpu, proc_ged, and debugfs_ion

MTK-Commit-Id: b27f71d9a9c557042c7844b034d26c5a58895204

Change-Id: Ie0dce4d5fba5cfdce1b76cdd8706d81f010a3771
CR-Id: ALPS04669482
Feature: Video Player
 2020-01-18 10:16:01 +08:00
stephen.wong
107835458d Merge "[ALPS04667747] selinux config" into alps-trunk-q0.basic 
Change-Id: I3e79cc6f3c9232174facc3af80d73f41cef1894a
MTK-Commit-Id: d9364175022bb4793eb1c32089f7f6adf5b08b9b
 2020-01-18 10:15:59 +08:00
stephen.wong
c9ac72bb74 [ALPS04667747] selinux config 
add selinx config for thermal property

MTK-Commit-Id: 3399f43cfdc0e8ede5cd28b79737c35525cb50ee

Change-Id: Ic0cbbf250baea60347602e284cb6961cd453d721
CR-Id: ALPS04667747
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:15:58 +08:00