[Detail]
More strictly selinux policy that system process cannot access vendor partition,
unless label the specific vendor lib to same_process_hal_file
[Solution]
Add same-process HAL files and their dependencies
MTK-Commit-Id: 3cb98800bc3a8cda80905c0cba6a4aad1799833a
Change-Id: I0b7f9c536117944f1350bee70a06f02d3db0bfb4
CR-Id: ALPS03869840
Feature: [Module]SurfaceFlinger/HWComposer
[Detail] System processes have no permission to access
vendor_default_prop
[Solution] Add get vendor_default_prop rule for system
processes
MTK-Commit-Id: ad4fb4d8ae4fb38767c16b82ce9d8351f5f59702
Change-Id: I31cf13db6b50a3cff193aa0a34bc1130e5b18942
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
[Detail]
More strictly selinux policy that system process cannot access vendor partition,
unless label the specific vendor lib to same_process_hal_file
[Solution]
Add same-process HAL files and their dependencies
MTK-Commit-Id: 142626c1bf5c65f7781d3c75969cacd86afa938a
Change-Id: I4f6f1be7eef4f013578fe06512ba32e43d107ddf
CR-Id: ALPS03902348
Feature: OpenGL|ES
[Detail]
Refine vibrator sysfs label, using aosp defined device
Moreover, move it to basic folder due to its basic used
MTK-Commit-Id: 41053b65c8c26973005988d1ad14208fff98fde6
Change-Id: I9ed6ece496ea1ffff9f777fb1f90c76638ad979f
CR-Id: ALPS03869354
Feature: [Android Default] Backlight
[Detail] vendor_init is new introduced in Android P,
and related policies have not been created yet.
[Solution] Add policies for vendor_init
MTK-Commit-Id: 00dc11bf94cbb7909ef58482d7726ebe8b954782
Change-Id: Ic2286e8e3e67b4005c7e2df18d217275f069f208
CR-Id: ALPS03881723
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
[Detail] System processes have no permission to access
vendor_default_prop
[Solution] Add get vendor_default_prop rule for system
processes
MTK-Commit-Id: 412119fb578fc32e9f046c09a13817cf3c755515
Change-Id: I791997e6bb44c61b69d32c6da0cc80c6f2a9759e
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
[Detail]
1. Remove the battery_node label.
2. Modify the path for sysfs_batteryinfo from
/sys/devices/platform/battery/power_supply to
/sys/devices/platform/battery to let fuelgauged
use it.
3. Add the sysfs_vbus and sysfs_pump_express label.
MTK-Commit-Id: 8603797a37fbb115f08a7c46a4292acbb34e1d05
Change-Id: I5a02d30d79a3564ef429f6dfe93f8df48004640b
CR-Id: ALPS03861775
Feature: Charger
Update the rule of MM feature to follow Android P
MTK-Commit-Id: c1c04c0eb241b562ee73a0aaf250a8604c2a2093
Change-Id: Iac8c86c545cf53d7e837884fb34335a80ebb749e
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
CR-Id: ALPS03917508
[Detail]
Due to new vendor system property rule, rename:
"ro.mtk_md_mims_support" to "ro.vendor.md_mims_support"
MTK-Commit-Id: 044ed790c998cc742f0beea6c8602a0adfed08f8
Change-Id: I7ebadeae292a6a814e05eb1032a7ef65938fc309
CR-Id: ALPS03873094
Feature: VoLTE (Voice over LTE)
[Detail] As title
[Solution] As title
MTK-Commit-Id: 97369eddd804591eaa5678ce60ab2c72e0f1393d
Change-Id: Iae55b41b436943d772ee8e4af9d5506c796132a1
CR-Id:ALPS03911067
Feature: Camera Application
[Detail]
Move kisd from system to vendor and add keymanage hidl
[Solution]
Modify related sepolicy in device/mediatek/sepolicy/basic
MTK-Commit-Id: c1826ac0bdcc18a4e6d3298e73514801a35a09ad
Change-Id: Iee4b65ba5addc5a21de53e76d3bb092e2f37ab01
CR-Id: ALPS03853366
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
[Detail]
1. Add selinux right for MTKLogger to able to connect Bluetooth
via socket
2. Add selinux right for Bluetooth to set debug property for
MTKLogger state check
MTK-Commit-Id: db60d64b8ed91dfee48588fb5a32f2bedc2ba604
Change-Id: I31c5abb153c2bcd44a2dafca0f1f669e7310c3fe
CR-Id: ALPS03866092
Feature: BT AOSP
[Detail]
Add sepolicy for mediacodec since SW decoder would control CPU freq and will need to getattr proc_thermal
MTK-Commit-Id: 5ce3aa68771bdb3af46a43b1c3455d365256c99c
Change-Id: I4ca98c4ae7b06e616e19f582190826beec490a04
CR-Id: ALPS03852480
Feature: VP9 Decoder
(cherry picked from commit f173ea13c62696f30465a4cb23061e1512c0ae1f)
[Detail]add a mtk_mdp_device lable and a allow rule for VP
[Solution]add a mtk_mdp_device lable and a allow rule for VP
MTK-Commit-Id: d015c8eba69f036e0f4770e045b1c99bd4d6c8c5
Change-Id: I9b72360ae4a31d849d8e6ada94d4ee8c49f36b1b
CR-Id: ALPS03598446
Feature: [Module]MDP Driver
(cherry picked from commit e10343315224b4b166767bc7e19fa0b14cc06892)
[Solution]
There are some build errors in factory.te, so fix
MTK-Commit-Id: db2e842e2fa353e987baa282d5c2026ae8395a61
Change-Id: I07d3906e8a934ae0e36b7c384208f2cfc8506a23
CR-Id: ALPS03788916
Feature: Factory Mode
