NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,094 Commits 2 Branches 0 Tags
Commit Graph

1094 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Guoyi Qu
e1861f520b [ALPS04707995] CTS fail fix 
Move defination to private folder

MTK-Commit-Id: e9fcc4d4a929c928dd475887e6a100a85d641815

Change-Id: I34fc6d2f3c96f8ab9d53f840da53465f7b79e9cf
CR-Id: ALPS04707995
Feature: Connsys Log Tool
 2020-01-18 10:17:40 +08:00
Larry Liang
30cede8986 Merge "[ALPS04642542] update sepolicy rules for dumping kmemleak file" into alps-trunk-q0.basic 
Change-Id: I8d39195bf5e8f73101d1fa350c4124fba4ff1165
MTK-Commit-Id: 3331b590249be0d60f51d699767152445d7cd3ce
 2020-01-18 10:17:38 +08:00
Huaiming Li
fc904e056e [ALPS04642542] update sepolicy rules for dumping kmemleak file 
add new sepolicy rules for dumping kmemleak file into manual DB

MTK-Commit-Id: bbc72864526fe28df5f9278c4250a152fbe94515

Change-Id: Ie59c50451d3e7b00500a11eab43b99004d0b543c
CR-Id: ALPS04642542
Feature: Android Exception Engine(AEE)
 2020-01-18 10:17:36 +08:00
Yifei Qiao
ed15da7571 Merge "[ALPS04700799] Align keymanager sepolicy with p0.mp6" into alps-trunk-q0.basic 
Change-Id: I525d8f1f9893ac348145cd8f1e063a721091f288
MTK-Commit-Id: 90ca8ed634df094a119de00fe68120697b59c085
 2020-01-18 10:17:35 +08:00
Yifei Qiao
9708912e27 [ALPS04700799] Align keymanager sepolicy with p0.mp6 
Align keymanager sepolicy with p0.mp6

MTK-Commit-Id: 24a187bc32e2be7663abb880c07659834d71f4b0

Change-Id: Ia98525be2155dcf3261633d1e6c25a775426068d
CR-Id: ALPS04700799
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:17:31 +08:00
Tehsin Lin
fe23144194 Merge "[ALPS04696977] Boot cleanup" into alps-trunk-q0.basic 
Change-Id: I09561e879d0f0a6ee806d2f29e67d21e05da2a05
MTK-Commit-Id: 0f80c7aff9d129bf769c82cb4084aedfbfe33f52
 2020-01-18 10:17:29 +08:00
mtk10008
41e2472935 [ALPS04696977] Boot cleanup 
[Detail]
Android Q has more restrictions, for example vendor cannot access
/data unless than (/data/vendor), etc...
Clean up boot fail items

MTK-Commit-Id: 8cbf5c73063c73463d25f6f14dc344fecbb7dc77

Change-Id: I540a6f2cfbaa87e1ffefbf9968a433dea2ccc50b
CR-Id: ALPS04696977
Feature: build process
 2020-01-18 10:17:25 +08:00
Huaiming Li
0e69d03d37 [ALPS04697232] fix google dumpstate avc error 
[Detail]
mmcblk1 stat file avc error and proc last_kmsg avc error

[Solution]
add dumpstate sepolicy rule

MTK-Commit-Id: 4d3e60120a2049f9e6f4e7ce9e2f835c2bb993ca

Change-Id: I6e1e63eb719aa8b7b4d0a86043bd0bce637a638f
CR-Id: ALPS04697232
Feature: Android Exception Engine(AEE)
 2020-01-18 10:17:23 +08:00
Peng Zhou
2994db624c Merge "[ALPS04697232] msdc: label mmc1 in sysfs" into alps-trunk-q0.basic 
Change-Id: Ib12bc9c84519575922c5432a2e1e0487c4a10048
MTK-Commit-Id: d856b1ab48d980b6060ab451985418645fffb9b0
 2020-01-18 10:17:23 +08:00
Huaiming Li
ae04d1f49c [ALPS04697232] msdc: label mmc1 in sysfs 
label mmc1 in sysfs

MTK-Commit-Id: f779eb09ee01d25d6f6691ec14ab4fe7bc9d5d7a

Change-Id: I721f146682b32437dd6065824c87bb0d1182729f
CR-Id: ALPS04697232
Feature: [Android Default] SDCard
 2020-01-18 10:17:22 +08:00
Denis Hsu
a1afe0c47b Merge "[ALPS04667690] Add policy for format as internal" into alps-trunk-q0.basic 
Change-Id: I4bf5402d3eacd71d29315c3edaa3beb1cd145617
MTK-Commit-Id: 987fd4ac8e35add870490cb4e47730a8070322e8
 2020-01-18 10:17:20 +08:00
Denis Hsu
315c48bc5f [ALPS04667690] Add policy for format as internal 
add some policy to prevent form selinux violation
when formatting as internal.

MTK-Commit-Id: 11a1e82eea3751a833fdf92aea8b31012f948bdc

Change-Id: I44ea4c0b3eb2699a51d0cdf3881e2b4971c0c3cd
CR-Id: ALPS04667690
Feature: [Android Default] Download Manager
 2020-01-18 10:17:18 +08:00
mtk10008
0ee9b429a0 [ALPS04696977] Boot cleanup 
[Detail]
Remove proc_cpu_loading from basic/non_plat/init.te

MTK-Commit-Id: 6a2ade3189d2b9613f8b19b2ebe646cef292a600

Change-Id: Ia4634123e58127d6dacaa8f98e58ed6cdfc33833
CR-Id: ALPS04696977
Feature: build process
 2020-01-18 10:17:13 +08:00
mtk10008
dcf924b4d9 [ALPS04696977] Boot cleanup 
[Detail]
Android Q has more restrictions, for example vendor cannot access
/data unless than (/data/vendor), etc...
Clean up boot fail items

MTK-Commit-Id: 44078402d526f7ef73ebfa31d95dbd24fa0f77af

Change-Id: I9b5b9dd2df253bad03e4b5fe1cab69404c9251ab
CR-Id: ALPS04696977
Feature: build process
 2020-01-18 10:17:13 +08:00
Ian-Y Chen
7141af7483 [ALPS04328846] power: fix build error 
[Detail]
Move netdagent to bsp folder

MTK-Commit-Id: f17dfe12c51ff65f807c407602a28f7cdea05687

Change-Id: I339a5401769b7b3f2803123db0fb8434c1c99d3d
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:17:12 +08:00
Ian-Y Chen
8ae5f3bd2c [ALPS04328846] power: mt6779 migration 
[Detail]
1. Add VPU, MDLA debugfs permission
2. Add EARA dsbugfs permission
3. Add netdagent HIDL permission

MTK-Commit-Id: b815b51044d2be0e70d2e987d792f273b4bd19a2

Change-Id: I104264b1ab146ac7e71e337184f3407ccc58a79b
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:17:11 +08:00
Hua Tian (田华)
756000fd0e Merge "[ALPS04696977] Fix typo issue" into alps-trunk-q0.basic 
Change-Id: Iabe312aabc6fa7a6eb669a024851fc1eb4ab439d
MTK-Commit-Id: aff372f08bebf69bbbbb84b0f9c6db9c7bb8cc3c
 2020-01-18 10:17:11 +08:00
hua.tian
67c841f99e [ALPS04696977] Fix typo issue 
Change shell to mobile_log_d

MTK-Commit-Id: d927f5e4e48ebf017bcaf08b120d6d3784723594

Change-Id: Ib565526e2e56eb26fa74a74c85dd50897ac130e8
CR-Id: ALPS04696977
Feature: Mobile Log Tool
 2020-01-18 10:17:09 +08:00
Hua Tian (田华)
de2efacf7f Merge "[ALPS04696977] Fix SELINUX issue" into alps-trunk-q0.basic 
Change-Id: If8dd25720afb56b2995b2cf519cb449c5bbdc559
MTK-Commit-Id: 7c1400fc40de4af1d4bb4b48a7bc1848c7fd93e8
 2020-01-18 10:17:08 +08:00
hua.tian
d9c874257d [ALPS04696977] Fix SELINUX issue 
Add rule to read system property.

MTK-Commit-Id: 8c5cf76aaadd4bb43ab5f55787330a9490c9af3d

Change-Id: I8d4a1e526907a7e8bc48ee7d48ed38256918c637
CR-Id: ALPS04696977
Feature: Mobile Log Tool
 2020-01-18 10:17:07 +08:00
Jiaqin Wang
18cc043b42 [ALPS04689352] ADB:add allow priority 
move persist.adb.nonblocking_ffs from
PRODUCT_SYSTEM_DEFAULT_PROPERTIES to
PRODUCT_PROPERTY_OVERRIDES, need add
allow priority to let adb daemon to
get/read it

MTK-Commit-Id: 0489198430c2ac2412ebebdc6e24bf8fd0797bf1

Change-Id: I9f69bddfdd307a3d13a8516076b4106f4b0bdf82
CR-Id: ALPS04689352
Feature: [Android Default] ADB (Android Debug Bridge)
 2020-01-18 10:17:05 +08:00
Wenxiang Zhong
2dfa9329c1 [ALPS04697845] add performance tuning properties 
Add performance tuning properties ro.vendor.mtk_perf_plus
selinux policy

MTK-Commit-Id: 8aa76802ecb3d6fdfa33485ef7db0fc18818d877

Change-Id: Ib2c5bbcab4e6556ae6028568ccfef5e62f6e5b17
CR-Id: ALPS04697845
Feature: System Performance
 2020-01-18 10:17:05 +08:00
Shanshan Guo
1e529a7fb6 Merge "[ALPS04417009] Enable SELinux Property" into alps-trunk-q0.basic 
Change-Id: Ia639e07701be7ae8747c916d618e5ff2da7463ef
MTK-Commit-Id: a71e95eb3d9482066514f71d2731c169bdeaba8c
 2020-01-18 10:17:04 +08:00
mtk14318
0a8da1b15e [ALPS04417009] Enable SELinux Property 
vendor.debug.sf.hdr_enable

MTK-Commit-Id: 166ff42973f20061b1a449115ca4b7a6e5663a68

Change-Id: I04b02f334dd51821698a9875e010a92d4d6a1c2b
CR-Id: ALPS04417009
Feature: [Module]SurfaceFlinger/HWComposer
 2020-01-18 10:17:01 +08:00
Light Hsieh
270ef77677 Merge "[ALPS04674968] siu update: add permission for mmcblk access" into alps-trunk-q0.basic 
Change-Id: I30150fd24ad8e6a5e2757c649dec6942c5f3df1f
MTK-Commit-Id: 6ee51a76d3e9529ae46fe9b6bb17888939c26346
 2020-01-18 10:16:59 +08:00
Josepchi Tsai
fdb2a25c84 [ALPS04429330] Cam: Fix secure camera selinux issue 
[Detail]
Add permission.

MTK-Commit-Id: 8ba94b2e2ca90a6130f9cec123bbbe385f8b0ecc

Change-Id: I8419705a9c4133564ed71f7fed5c0ccbdb584ffe
CR-Id: ALPS04429330
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:16:59 +08:00
Freddy Hsin
2cbde35002 [ALPS04674968] siu update: add permission for mmcblk access 
add permission for mmcblk access to fix
kb3 basic project update issue

MTK-Commit-Id: d3aa3acd7f6f2cf0d4382ed36fb1e6c23218b97d

Change-Id: I2c52fc77e56ef8e09bbc528c75cbd18e249d11e2
Signed-off-by: Freddy Hsin <freddy.hsin@mediatek.com>
CR-Id: ALPS04674968
Feature: [Android Default] SIU (SD Image Update)
 2020-01-18 10:16:55 +08:00
Mark Hu
4437df27f1 Merge "[ALPS04688504] Add selinux permmision" into alps-trunk-q0.basic 
Change-Id: Ie8e7d48089e041b517b505be7b9be6fe99cb3a8e
MTK-Commit-Id: 47b0ac393980c85350daa9aa065c9bcda0e165a8
 2020-01-18 10:16:54 +08:00
Michael Lai
0eeca0ef05 [ALPS04688504] Add selinux permmision 
[Detail] Add selinux permmision

MTK-Commit-Id: ca87b8ce2b16960b4047a178391ad9ec9ad99a82

Change-Id: Iea70b082d5057d729a52c97009bcdb0bafa1de61
CR-Id: ALPS04688504
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:16:50 +08:00
Hua Tian (田华)
642e127203 Merge "[ALPS04649268] Move SELINUX policies to plat_private" into alps-trunk-q0.basic 
Change-Id: I896822f69d6a7a9877b39468141822eba21cd2e8
MTK-Commit-Id: 7158df56b1ae9d92622d91dad092628e1741d256
 2020-01-18 10:16:49 +08:00
hua.tian
7574cf2c9c [ALPS04649268] Move SELINUX policies to plat_private 
These policies are for system process, as a result,
move it to plat_private folder.

MTK-Commit-Id: 46e87002024d5675d566dd59f77cbde9c69bdd37

Change-Id: I9c2b72136d1f1c3062f0ac6b174c8334b1965e80
CR-Id: ALPS04649268
Feature: Mobile Log Tool
 2020-01-18 10:16:47 +08:00
Hua Fu
899c01d964 [ALPS04088869] GPS: Add selinux allow for mnld to access gpsdl devices 
Allow mnld to access MT6885 new GPS device drivers, which are:
/dev/gpsdl0 and /dev/gpsdl1.

MTK-Commit-Id: 11b8302cd93d085be0e56f7e7645a1e6fd7b5980

Change-Id: I49f18a7ff01c6c4c700f9069920994dd5e62a624
Signed-off-by: Hua Fu <hua.fu@mediatek.com>
CR-Id: ALPS04088869
Feature: Location Chipset Capability
 2020-01-18 10:16:44 +08:00
Yogesh Tundele
94de77a5fe Merge "[ALPS04685340] Recovery: Add SELinux Permission" into alps-trunk-q0.basic 
Change-Id: I3d076b625fe6b39dd86d4c2358890bc829fdb57f
MTK-Commit-Id: e7e98db12833b1425593d60035bce6593cc7c6e2
 2020-01-18 10:16:44 +08:00
Yogesh Tundele
5f63a6caa8 [ALPS04685340] Recovery: Add SELinux Permission 
[Detail]
Uncrypt service need permission to write ota package

MTK-Commit-Id: 0fa210d0c4e4ce5eae607fa2d53fb10a59a49628

Change-Id: If8127d2056278932ecf947541cfa24b29be6bb11
CR-Id: ALPS04685340
Feature: [Module]Settings
Signed-off-by: Yogesh Tundele <yogesh.tundele@mediatek.com>
 2020-01-18 10:16:38 +08:00
Stanley Chu
328d60ea9c [ALPS04682157] aee: ufs: Add proc_ufs_debug 
Add proc_ufs_debug SEPolicy definition.

MTK-Commit-Id: cbcfb406d1dfdb0d25205da21a1e99cb166659e8

Change-Id: Iee4bfba2116a7f005f8b9b8d831d0e10523b61d1
CR-Id: ALPS04682157
Feature: Android Exception Engine(AEE)
 2020-01-18 10:16:37 +08:00
Stanley Chu
1a276c5460 [ALPS04682157] aee: ufs: Enable write permission for ufs_debug 
Enable write permission for /proc/ufs_debug to try to catch
precise UFS command history in erroneous scenes by:

- Stopping UFS command history immediately just after error
  (e.g., NE, JE ...etc.) happens.
- Re-starting UFS command history after UFS command history
  is dumped.

MTK-Commit-Id: 59f4a6c71850d7131cf6312e802124fe68a830c6

Change-Id: I738eff0040210b4a833f15af526c68282f697d5b
CR-Id: ALPS04682157
Feature: Android Exception Engine(AEE)
 2020-01-18 10:16:36 +08:00
Harvey Liu
81bde14096 Merge "[ALPS04682095] Factory Mode: fix SElinux policy" into alps-trunk-q0.basic 
Change-Id: I7ccd9cbbb58599b6ac3728d39ba1cae4fc52f205
MTK-Commit-Id: 9e50666bedfd55e9d06dfb8ca3c7316302ef3fc3
 2020-01-18 10:16:35 +08:00
Jenny Hsu
5208b37972 [ALPS04682095] Factory Mode: fix SElinux policy 
[Detail] Add whitelist for SELinux avc denied problem

MTK-Commit-Id: 09661f9080a79ab4793477bb1d2f58ca82c8c517

Change-Id: Ibdacde2da8c49e5f7d7744c2c5781b0bcf03cccc
CR-Id: ALPS04682095
Feature: Factory Mode
 2020-01-18 10:16:33 +08:00
Sharon Feng
ffc22cbb24 Merge "[ALPS04428522] Add selinux policy for svp" into alps-trunk-q0.basic 
Change-Id: I50b42e9a60dc1cfefa309a6c50e76dc337ba8853
MTK-Commit-Id: 6f772916ed73393a7854d683cb69ad7efe645be2
 2020-01-18 10:16:32 +08:00
sharon.feng
8a77128e9d [ALPS04428522] Add selinux policy for svp 
[Detail] For android Q, we need to add more policy for secure video playback

MTK-Commit-Id: 49b4ab8e0047f4a5002c82af075c77e8bc4e790f

Change-Id: Ib81885e40b14416b57e0776c56cb85591509501a
CR-Id: ALPS04428522
Feature: Trustonic TEE (Trusted Execution Environment)
 2020-01-18 10:16:31 +08:00
Johnny Yao
4a346a24a8 [ALPS04667511] WMT: add map policy for stp_dump, stpwmt_device 
add map policy for stp_dump, stpwmt_device

MTK-Commit-Id: f49e856a8cbe3813d9e177345ce18ae1b61e89b7

Change-Id: Ib76f0cb54e7dc363da194686aec4724b6b4c1fad
Signed-off-by: Johnny Yao <johnny.yao@mediatek.com>
CR-Id: ALPS04667511
Feature: [Module]WMT Driver
 2020-01-18 10:16:29 +08:00
Chinwen Chang
b26257b43e [ALPS04682095] revert "[ALPS04455690] Whitelist some lmkd properties that go into /vendor/build.prop" 
This reverts commit bc8b76b56605d264af1727cd234a5406da372744

MTK-Commit-Id: 70d80baace23b335bad1fe838af8662e4145feaa

Change-Id: Idfe9cf773b3434596d97e0c0412468635ef624c3
CR-Id: ALPS04682095
Feature: Memory Optimization
 2020-01-18 10:16:29 +08:00
Shanshan Guo
ac04c06d44 [ALPS04661377] SEPolicy:workaround for google dumpstate avc error 
[Detail]
In xTS, testNoBugreportDenials will check if there are any
avc denied log of dumpstate.
https://android-review.googlesource.com/c/platform/cts/+/667966

[Solution]
add dumpstate allow rules as workaround for google
dumpstate avc error.

MTK-Commit-Id: 98f2dcd0a8011ce5892a25bf40e3e94efe87e302

Change-Id: I12d8d197a815791be942336d6c951e38a3278d2c
CR-Id: ALPS04661377
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:16:29 +08:00
Jianping Jiang
b3838f31bb Merge "[ALPS04674290] Correct mnld_device type" into alps-trunk-q0.basic 
Change-Id: I16857bef7e386fefdb04f0b3d6798f49a94213ec
MTK-Commit-Id: 46c321079fa7510de79fc8b3b0d2096c85fa4fd9
 2020-01-18 10:16:28 +08:00
Jianping Jiang
109462e1f2 [ALPS04674290] Correct mnld_device type 
1. Remove mnld_device from lbs_dbg.te;
2. move mnld_device type to non_plat folder

MTK-Commit-Id: f575807c7ac6d6a30595479ae03339b5765ff884

Change-Id: I8ba23283a103f52c045ae6c69ec7fc4eca06df84
CR-Id: ALPS04674290
Feature: Location Chipset Capability
 2020-01-18 10:16:26 +08:00
Guoyi Qu
c05f509f1b [ALPS04266403] add permission 
Add permission for access data/debuglogger.

MTK-Commit-Id: 5aee880b2f482110007a55d23c65e5d86b65cf72

Change-Id: I55faf7bcd66beef34d916b594d3ad8cb62836e9d
CR-Id: ALPS04266403
Feature: Connsys Log Tool
 2020-01-18 10:16:25 +08:00
lena wang
2ddeac52a9 Merge "[ALPS04607956] SIM:Add IMSI to sensitive property" into alps-trunk-q0.basic 
Change-Id: Ib07607fc7274a5eb770eb155591fe59ee9421b18
MTK-Commit-Id: a23a5e67e573d5cf2e30741429d364fe2681534f
 2020-01-18 10:16:24 +08:00
lena wang
271faac986 [ALPS04607956] SIM:Add IMSI to sensitive property 
IMSI belongs to sensitive information and is not allowed to print.
Add IMSI property to sensitive group and it is not printed in
mtklogger property files.

MTK-Commit-Id: 9c0bde9784ce5f9f4a88ee6827faf864c248682a

Change-Id: If3721c66fc69f86424ed98193aecd600019071f8
CR-Id: ALPS04607956
Feature: SIM
 2020-01-18 10:16:21 +08:00
Ping-Hsun Wu
746bea8548 Merge "[ALPS04672388] Change selinux permission for MDP user" into alps-trunk-q0.basic 
Change-Id: I399e0d0423e8ab393740f8546465f5118c8fac3e
MTK-Commit-Id: 919592752ef6843078dc651cb0596f81864b92ec
 2020-01-18 10:16:20 +08:00
Mike Hsieh
dc6c9adc15 [ALPS04672388] Change selinux permission for MDP user 
Change selinux permission for MDP user on /dev/mdp_sync

MTK-Commit-Id: a9c03563cf5e96815399788228dc62d18d88026e

CR-Id: ALPS04672388
Change-Id: I3622da7b8ba4151f9cf79e9d4d9c8f73109ef684
Feature: [Module]MDP Driver
 2020-01-18 10:16:18 +08:00