1158 Commits

Author SHA1 Message Date
Vincent Sung
aa64d98da4 [ALPS04014572] GPU: Security firmware binary load
[Detail]
Add sepolicty for fw load from kernel on vendor partition

MTK-Commit-Id: cdd1518aac6771b0e6276e07831d8acaa887ad03

Change-Id: I2789c865d401e7a1b85ecb9dea4db52c7839f17d
CR-Id: ALPS04014572
Feature: OpenGL|ES
2020-01-18 10:04:58 +08:00
mtk33201
5542a95d19 [ALPS03872441] Adding ro.vendor.mtk_exchange_support to property_contexts
Sepolicy denied reading the System property ro.vendor.mtk_exchange_support "Access denied finding property "ro.vendor.mtk_exchange_support""

Adding this property to property_contexts in sepolicy/basic/non_plat as per the guidelines for property defined in PRODUCT_PROPERTY_OVERRIDES.

MTK-Commit-Id: df2d79e0b9c73fe974073a94f02eb27678546043

Change-Id: I10daf364fd044249a2467520d87e8ec49c4829f7
CR-Id: ALPS03872441
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:04:58 +08:00
mtk13858
d7105292b6 [ALPS04013134] CCCI:fix android p selinux issue v2
[Detail]
fix code defect to avoid vts fail

MTK-Commit-Id: 8910b5c642fd4ebb0910eda3f6b49c38f91f4483

Change-Id: I95cd0a11b4bc9d8145b7017ffbf4b171751ef32c
Signed-off-by: mtk13858 <derong.liu@mediatek.com>
CR-Id: ALPS04013134
Feature: Modem Interface Driver
2020-01-18 10:04:57 +08:00
mtk81216
b189b5f35a [ALPS03974446] modify vendor_init selinux policy
[Detail]
vendor_init will parse meta_init.rc to ifup lo,which needs some
selinux policy. when meta mode has enabled loopback, gps tool can
run normally

[Solution]
add selinux rule to up lo interface

MTK-Commit-Id: b351d14a284871dae0783f4d48278a1fde515f4d

Change-Id: I962bfc0002a76d34e5366869cb5fea46ae1453da
CR-Id: ALPS03974446
Feature: Location Chipset Capability
2020-01-18 10:04:54 +08:00
Chaoran Zhang
19ccbe6c30 [ALPS03872369] Add radio.mnl.prop policy
Add "persist.vendor.radio.mnl.prop" set/get SEPolicy

MTK-Commit-Id: 52f83221b3ed8144c89769ff6936ae8d870a172b

Feature: Location Chipset Capability
Change-Id: I98da1bc24073ee907d4c47fa7edfd15a58f50b1b
CR-Id: ALPS03872369
2020-01-18 10:04:53 +08:00
mtk11515
1ac3d6456a [ALPS03992062] split .te file
[Solution] split .te file to non_plat,private,public folder.

MTK-Commit-Id: a044f6ece04b84ceaf8809076d3167700e351bbf

Change-Id: I6282abddb5f43008a724e34367963a16b3f1e4d4
CR-Id: ALPS03992062
Feature: MTKLogger
2020-01-18 10:04:53 +08:00
Chaoran Zhang
c89dbaf882 [ALPS03872369] Fix factory/meta Selinux issue
[Detail]
Due to factory/meta move to vendor partition, add losing SELinux policy

MTK-Commit-Id: 2566c46843cbe71442f428c99e51a942650b4d6b

Change-Id: Ia0771adf630084a54b86e69c5d4030a81e6982ec
CR-Id: ALPS03872369
Feature: Location Chipset Capability
(cherry picked from commit 5b0441261a079bb6d234dc4079d9321f260886ed)
2020-01-18 10:04:50 +08:00
Chunlan Wang
eca198762f [ALPS03997985] Factory Mode: add permission for test report
[Solution]
Factory Mode needs the permission to save test report in
data/vendor, so add it

MTK-Commit-Id: 1daeb3669ade3f8213b893ae903733ca13bb9b93

Change-Id: I8005207d25fdc2bcab06dd193a3d7f7d2b521f23
CR-Id: ALPS03997985
Feature: Factory Mode
(cherry picked from commit 981cd097e413fd52a3cae2d5b8203150e9c1b45f)
(cherry picked from commit d49fb6cec0ea53e47ab72bcd5f2cbfa0dcf4eb34)
2020-01-18 10:04:49 +08:00
yuhui.zhang
b0b96a17d9 [ALPS04013705] YGPS:Use hidl to access mnld
[Detail]
Add SEPolicy for EM and YGPS to acces LBS hidl

MTK-Commit-Id: 6fefe972ef73431e64ff762b3a3344ef448f1fe3

Change-Id: I6459c26c0146f72f0adb62562d8daa65bd6cba45
CR-Id: ALPS04013705
Feature: Engineering Mode
2020-01-18 10:04:49 +08:00
mtk13858
d2412a883b [ALPS04013134] CCCI:fix android p selinux issue
[Detail]
1.add label to property init.svc.emdlogger1
2.allow ccci_mdinit access get sys boot mode

MTK-Commit-Id: bc7ec844660c91ba7bb5bdc25ec176d3d2a2ec14

Change-Id: I32df4b62b474eca193f9a719e9b559597acc1ab6
Signed-off-by: mtk13858 <derong.liu@mediatek.com>
CR-Id: ALPS04013134
Feature: Modem Interface Driver
2020-01-18 10:04:45 +08:00
Chunlan Wang
9a7b03369b [ALPS03972298] Meta Mode: Add permisson to get RSC version
[Solution]
Meta Mode will support to query RSC version

Conflicts:
	non_plat/property_contexts

MTK-Commit-Id: db231d2c6ea5ed34f20cc93b135925b117bd98f3

Change-Id: Ib9fb54bbd7355bfd50c5a3527e835ff63693c38d
CR-Id: ALPS03972298
Feature: Factory Mode
(cherry picked from commit a504e618d593ef19cfd0738048db935289515fc1)
2020-01-18 10:04:45 +08:00
dengwei.xu
009ca46220 [ALPS04011772] EM telephony system read property selinux fix
The system read property should apply the read right

MTK-Commit-Id: 91075726eb8ef7406c7581645add5d702f3475a7

Change-Id: Ib0927cf08f9091d3385514a252fa627dba9eeec9
CR-Id: ALPS04011772
Feature: IRAT - C2K
2020-01-18 10:04:44 +08:00
Josh-YC Liu
1990000501 [ALPS04010443] AAL: add set property in SELinux
Add new AAL API for set function with property.

MTK-Commit-Id: 9fa5437f96066104e04ebb655e39d24db2935080

Change-Id: Iab58a2ecd919ceadd9b8586d2b52720c176ded01
CR-Id: ALPS04010443
Feature: Ambient Light Adaptive Luma
2020-01-18 10:04:41 +08:00
Ting-Fang Hou
bbb18bde9b [ALPS03918481] Audio: Add audio factory permission to access accdet
[Detail]
Add audio factory permission to access accdet

MTK-Commit-Id: 8af09875ac4b678ba41b4d33c4fb29e2287f4de6

Change-Id: I7acba6b69d8b23fae8232f770fe477b981bdd175
CR-Id: ALPS03918481
Feature: Factory Mode
2020-01-18 10:04:37 +08:00
Juan Rong
de37c93d5f [ALPS03886705] EM:hardware-testing property hild
hardware-testing usb/uartusbswitch need hild to set property

MTK-Commit-Id: 18147a06185f3315cfa6bd0790b7539063910c4a

Change-Id: Id2bafe2df4ef44d1b0e4eaac2fe5b10483a080ab
CR-Id: ALPS03886705
Feature: Engineering Mode
2020-01-18 10:04:36 +08:00
bo.shang
2c8ef11be1 [ALPS04007645] Modem log start fail in meta mode
Fix SELinux error

MTK-Commit-Id: 239b554dcd68299e2cb3ec58b39214e552136ac9

Change-Id: Ic4800bbce6b03c83563e5171a76e331859154b8d
CR-Id: ALPS04007645
Feature: Modem Log Tool
2020-01-18 10:04:33 +08:00
Yanghui Li
a129b64e9e [ALPS04007267] sepolicy: change libm4u.so file label.
[Detail]
libGLES_mali.so depends on libm4u.so on mali GPU.
Surfaceflinger needs libGLES_mali.so, but it cant access normal vendor lib.

[Solution]
Change libm4u.so file label from u:object_r:vendor_file:s0 to u:object_r:same_process_hal_file:s0.

MTK-Commit-Id: cb147e1fb1711d5fea686b3f11d90b60829f1953

Change-Id: I73a0bab2188aa7d2f7f7c488f8377bc8b34af24c
CR-Id: ALPS04007267
Feature: OpenGL|ES
(cherry picked from commit baec3fff9cc025f8131f0fb461400591b8156632)
2020-01-18 10:04:33 +08:00
Lili Lin
21a818c683 [ALPS04001212] Revise "[ALPS04001212] EM telephony system write property"
Change mtk_core_property_type to extended_core_property_type
to resolve build break.

MTK-Commit-Id: 5b1eb96784b9dc89e263840466d396bda39651a7

Change-Id: Ifc31512cec1f5098f49a43eae7caa2d5cbdf4a88
CR-Id: ALPS04001212
Feature: Engineering Mode
2020-01-18 10:04:32 +08:00
Lili Lin
9e64f5e935 [ALPS03878175] Remove system_writes_vendor_properties_violators
system_writes_vendor_properties_violators is only workaround,
and will cause *TS test fail, so remove the workaround and
corresponding rules that cause build fail.

MTK-Commit-Id: f637c1416b591c821bc9c18fd3dbf3aa5f9038af

Change-Id: If09922120de0742ec47d7c0522168d4e78a4e74f
CR-Id: ALPS03878175
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:04:31 +08:00
Allen Chu
b2561b02e2 [ALPS03888293] [P migration] Migration RILD
Fix permission

MTK-Commit-Id: 62967c76d720b52d446c70adb6e48fb925530747

Change-Id: Ie9f5cdce07759dae864f822ba61ba408d28f2f11
CR-Id: ALPS03888293
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
(cherry picked from commit 04db65da56a7a5b012120281079c6d800b2f7bc1)
2020-01-18 10:04:30 +08:00
dengwei.xu
4f6395a554 [ALPS04001212] EM telephony system write property
Add the system write and system read property selinux rights

MTK-Commit-Id: 432c666c3d1275c3c7d7f0d88b4fcf69650314bf

Change-Id: I835af9bfdf0b0ac039a4b04498b36f3feb791a12
CR-Id: ALPS04001212
Feature: Engineering Mode
2020-01-18 10:04:30 +08:00
haohsiang.hsu
b69f0cbf9c [ALPS03783870] Add policy for update boot partition
[Detail]
Add poilcy for update_engine and vbmeta so that A/B
system update can work well.

MTK-Commit-Id: de7ad7a48111b4e02f042600c6e65484d03ac87f

Change-Id: I79346615ad1be4c5ea33343c1fce73c22be1f82f
CR-Id: ALPS03783870
Feature: Secure Boot
2020-01-18 10:04:29 +08:00
Jen-Chih Chang
5fff295700 [ALPS03999678] Allow Mwi to get vendor default properties
vendor_default_prop object was blocked by SELinux for radio process.
Add get_prop permission for radio process to get property values for
the vendor default properties.

MTK-Commit-Id: 7dc6ef3ddc126117fbd69cf83a1d3f5bfb70b61e

Change-Id: If0ebff064cc7b3622bcf513650304daf67f3f8fc
CR-Id: ALPS03999678
Feature: WiFi Calling Service
(cherry picked from commit 99687c64c8cfdf261186a1c682a456409e52d20b)
2020-01-18 10:04:29 +08:00
lena wang
3f037eeb36 [ALPS03856250] SIM:add policy for system set prop
Config property "vendor.gsm.sim.operator.default-name" as:
1. system image could set but vendor image cant.
2. System could read.

MTK-Commit-Id: 79e9cc75b8937a0eeb1e0a34af2095fad7182388

Change-Id: Ib14716449080c17dbd98e681215e1d89d96029a8
CR-Id: ALPS03856250
Feature: SIM
(cherry picked from commit ef7ae758c93dc94fec1f7f23c877d86a254d035d)
2020-01-18 10:04:28 +08:00
haohsiang.hsu
435518d532 [ALPS03939719] Refine sepolicy for bootctrl
Add policy for bootctrl read cmdline

MTK-Commit-Id: a264204afb83417dacb4f1b76e05b71509a492de

Change-Id: I2bd838b67003dc13208810b4de724ca06b67067e
CR-Id: ALPS03939719
Feature: A/B System Updates
2020-01-18 10:04:28 +08:00
Christopher Chen
cf8b0fcdd5 [ALPS03595410] VPU: patch sync from o1.mp1
[Detail] sync from o1.mp1

[Solution]
1. add sepolicy for debug file

MTK-Commit-Id: 17203252c8bbb77792b32aa5f04ede3408e18e0d

Change-Id: I5fb01a274e2a795612c7c64038b2cb9b49802129
CR-Id: ALPS03595410
Feature: [Android Default] Camera Application Basic Functions
(cherry picked from commit 2cdafad54592601280163dc9ee8f581661657755)
2020-01-18 10:04:27 +08:00
Miles Chuang
2555c134f1 [ALPS03873734] Follow Android P new property rules
[Detail]
Android P add new limitation for property access between
system partition and vendor partition:
1. SET and GET only by system
2. System cannot SET the property which SET/GET by vendor.
3. Allow system and vendor GET the property which SET by vendor.

[Solution]
Add new CXP HIDL to set the vendor property in vendor layer.

MTK-Commit-Id: 9a2ec20bc8a60761ed0ff15f897f67b3883f8486

Change-Id: Icaea3afb2743108d7c78eea2b6e4dad363a8052d
CR-Id: ALPS03873734
Feature: Regional Carrier Express Pack
2020-01-18 10:04:27 +08:00
Chang-An Chen
5ea20dfd23 Merge "[ALPS03875899] Add update dtbo permission" into alps-trunk-p0.basic
Change-Id: I8cc5a2f98e3aaebb2fb47e116382525016e6181b
MTK-Commit-Id: 6325e5e61e7b3a94659fc56940c36bdbc03b2137
2020-01-18 10:04:26 +08:00
haohsiang.hsu
ed2182abf9 [ALPS03875899] Add update dtbo permission
[Detail]
Add A/B system updates dtbo partition permission

MTK-Commit-Id: 8f3d181b1373f1454619641100e9994a93fab2fd

Change-Id: I2616b8783f604b2a37b16e9e80ded89af0c83347
CR-Id: ALPS03875899
Feature: A/B System Updates
(cherry picked from commit 0d38d31fa2506d0f1be7194b7d55c0a181734c4c)
2020-01-18 10:04:24 +08:00
Chaoran Zhang
47f6411005 Merge "[ALPS03951854] Add lbs_dbg SDCard policy" into alps-trunk-p0.basic
Change-Id: I57b566d96ca2709bd8d005c2ab7c92947c69f153
MTK-Commit-Id: ae7d06f471a69157dc0709272000c45a56308875
2020-01-18 10:04:22 +08:00
Chaoran Zhang
6b44fd145f [ALPS03951854] Add lbs_dbg SDCard policy
Add lbs_dbg SDCard policy

MTK-Commit-Id: c67c8b7574d9afdf515bc4018ab6603d48b9f8fc

Change-Id: Ifc351a47255a2b688a8fc66d4e78db172efb4013
CR-Id: ALPS03951854
Feature: GNSS Co-Clock
2020-01-18 10:04:19 +08:00
Weiqi Fu (付玮祺)
f31617cda3 Merge "[ALPS03951701] sensor: data/vendor/sensor path" into alps-trunk-p0.basic
Change-Id: I5a007064b43c3d6e3cfa3a7da89dc24b2925998a
MTK-Commit-Id: 7a912a525f42ba5a99409c82480d603329d9ec33
2020-01-18 10:04:18 +08:00
hongxu.zhao
7b8ea7e69c [ALPS03951701] sensor: data/vendor/sensor path
modify path data/vendor/sensor path

MTK-Commit-Id: 82c649202267f9b52065b7563e3e9f2d544a2fe7

Change-Id: Ib7efe28f28c8a07f7796ad8f6f82bab937ffef32
CR-Id: ALPS03951701
Feature: Sensor Hub
2020-01-18 10:04:16 +08:00
Juju Sung
1457d484c4 Merge "[ALPS03998186] Treble: Fix selinux issue for booting with GSI" into alps-trunk-p0.basic
Change-Id: I820b3784907771fec7f06ed07d771daf3de30c9e
MTK-Commit-Id: d1df5b415bc9376c099e38d7ccaa6db58bd64fdb
2020-01-18 10:04:14 +08:00
Sam-KY Lin
da660a3653 [ALPS03998186] Treble: Fix selinux issue for booting with GSI
[Detail]
SEPolicy rule that put in plat_private folder will be placed in system image.
So, It will be overwrited after flashing GSI.

[Solution]
Move MTK rules to non_plat folder instead which will be placed in
vendor image.

MTK-Commit-Id: 91e5023b67f0ce18e5e364adce5da5413c71fc69

Change-Id: I372b059e44c4bbfd6d4a92a790846b2228213b88
CR-Id: ALPS03998186
Feature: Treble
2020-01-18 10:04:12 +08:00
Yuhui Zhang
c7fd91bdb5 Merge "[ALPS03992559] EM HIDL - selinux" into alps-trunk-p0.basic
Change-Id: I4fd3bd2554bf61653f45af1c5aa73d58c35ef65e
MTK-Commit-Id: c2b6c5d2327253281e4dc125e045e6752b348fe4
2020-01-18 10:04:10 +08:00
dengwei.xu
12c8c8e1f4 [ALPS03992559] EM HIDL - selinux
Add selinux support for HIDL

MTK-Commit-Id: f58b6fd1c6c053780475ad44ac648f6231af0d94

Change-Id: I77a9bdffbcb8b837e78055ef8bfb9b9d328232b2
CR-Id: ALPS03992559
Feature: Engineering Mode
2020-01-18 10:04:08 +08:00
Larry Liang
e2b7fd0b00 Merge "[ALPS03997871] allow MobileLog exec logcat -L" into alps-trunk-p0.basic
Change-Id: I366928a1a654959932a1bc39a77530f3f5c7a8ce
MTK-Commit-Id: 9d2d735377baa0a913c902f58108a7af5c10e6a3
2020-01-18 10:04:06 +08:00
Yuxian Xu
000e69e1bc [ALPS03997871] allow MobileLog exec logcat -L
Mobile_log_d exec logcat -L to get last Android Log

MTK-Commit-Id: e51d67ff3d1024ec236d26f66d5286a1aed6fb75

Change-Id: Id2f2aceb501a5324ff642f34455080ccbd54bf34
CR-Id: ALPS03997871
Feature: Mobile Log Tool
2020-01-18 10:04:04 +08:00
Hua Tian (田华)
cfd3f022a1 Merge "[ALPS03861807] Revise code" into alps-trunk-p0.basic
Change-Id: I021df5471270aacefdb99434a73a1ad1ef8d0e3a
MTK-Commit-Id: 90c5001ee3cd5ccec6df93d7970a97d241e43bfa
2020-01-18 10:04:02 +08:00
Wei Fu
969ca69f47 [ALPS03861807] Revise code
Restore audio command handling back to atcid to
simplify code.

MTK-Commit-Id: d23f20fd117efde5d22ea8abcc467617cc5b0ab0

Change-Id: I0abb4f9a5cc0facf44a27107a1cd90ce575c389e
CR-Id: ALPS03861807
Feature: [Module]ATCI (AT Command Interface)
2020-01-18 10:04:01 +08:00
Chaoran Zhang
7afa1c5c3f Merge "[ALPS03872369] Add lbs_dbg selinux policy" into alps-trunk-p0.basic
Change-Id: I39eb95ac7b36d54feecc0a96d51f7d6850977d99
MTK-Commit-Id: 3086d4d417da03478e366f08e6c4de5f90512550
2020-01-18 10:03:59 +08:00
Chaoran Zhang
c30a82525d [ALPS03872369] Add lbs_dbg selinux policy
[Detail]
Add lbs_dbg selinux policy

MTK-Commit-Id: c316e3908f5d5ddbf8f543ef08a4759159b798ba

Change-Id: Id6311f353df61ca0fa9a108c832d790b228a5bba
CR-Id: ALPS03872369
Feature: Location Chipset Capability
2020-01-18 10:03:58 +08:00
vijayan amalraj
40572596a5 Merge "[ALPS03870695] Relabel bootanim property" into alps-trunk-p0.basic
Change-Id: I0c26cfe4925744e3739235bad745074d7eed4e7e
MTK-Commit-Id: 7b943156f070463cbef136367a8a97f3b2ddaba8
2020-01-18 10:03:56 +08:00
lokesh
a7ac10eabf [ALPS03870695] Relabel bootanim property
modify bootanim and mtkbootanim selinux file

MTK-Commit-Id: 499216aca19a337156ad7b83beb93dae5dc0f009

Change-Id: Ifccc14d4f8d410789e01730aa4be82c423a19975
CR-Id: ALPS03870695
Feature: Boot Animation
(cherry picked from commit 05973051a0e2ae272a9ecfd511e088a33f9f54b1)
2020-01-18 10:03:55 +08:00
yuhui.zhang
ba25c399b3 [ALPS03914002] EM: Remove unused property rule
[Detail]
Some function will move to vendor hidl, so related sepolicy rules in radio.te could be removed.

MTK-Commit-Id: 8294731a4889e3954a70f5d4379327d9ae0a0ec3

Change-Id: Ib6693e7b6ec3d076e64b505ce670e9c9f5b88281
CR-Id: ALPS03914002
Feature: Engineering Mode
2020-01-18 10:03:53 +08:00
Yuhui Zhang
31c972041e Merge "[ALPS03886705] EmCamera: move to vendor partition" into alps-trunk-p0.basic
Change-Id: Icd4d1a685c2e0954e3d265ba596a75cbd3320156
MTK-Commit-Id: 35895f358d56cee9ee678df17441ee4505d3a803
2020-01-18 10:03:52 +08:00
Juan Rong
cdb72dbd48 [ALPS03886705] EmCamera: move to vendor partition
Move EmCamera to vendor partition, need modify the selinux

MTK-Commit-Id: 92c1e87c5f0901e9eb235b00853975d0cf138f90

Change-Id: I47be92abaf4020e20f756cb36bb55c602a1662f2
CR-Id: ALPS03886705
Feature: Engineering Mode
2020-01-18 10:03:50 +08:00
Denis Hsu
d0dc578513 Merge "[ALPS03891225] Create symlink, /mnt/sdcard, for meta/factory" into alps-trunk-p0.basic
Change-Id: Id2eb7a378d7b073c2570ca27bf75e530c4f8f0ab
MTK-Commit-Id: b70f624618ed2ba719be679d1f09af4188c8f487
2020-01-18 10:03:48 +08:00
Miles Chuang
5f82c9e661 [ALPS03873734] Follow Android P new property rules
[Detail]
Android P add new limitation for property access between
system partition and vendor partition:
1. SET and GET only by system
2. System cannot SET the property which SET/GET by vendor.
3. Allow system and vendor GET the property which SET by vendor.

[Solution]
1. Add new property label mtk_cxp_vendor_prop
2. Modify CXP related SELinux setting

MTK-Commit-Id: 4cac600ed76d413b5aee7ee64a1d6af55aa499d1

Change-Id: I9498840dead36a536acd5d18470f57bf7aec0a7c
CR-Id: ALPS03873734
Feature: Regional Carrier Express Pack
2020-01-18 10:03:48 +08:00