56 Commits

Author SHA1 Message Date
Peter Wang
af17e4d54a [ALPS04786311] eMMC : patch clear eMMC fail in factory
When clear eMMC, need umount bootfs, add permission to stop
mdlogger process which access bootfs.

MTK-Commit-Id: 2d39dc0341e703f5ae92797146c0d2cec8defe77

Change-Id: I32bb7e94db970361a9f3a345f0cf7541fc9fd634
CR-Id: ALPS04786311
Feature: Factory Mode
2020-01-18 10:20:32 +08:00
Qilin Tan
980fcee399 [ALPS04745284] sepolicy: add BLKGETSIZE rule for bootdevice in MT6763
In factory mode, It is failed that get size of sdcard in sdcard test.
Because the policy BLKGETSIZE is missed. Add the policy rule, the
test case will pass.

MTK-Commit-Id: 80a2d4ddd763ea35fb6c7fdf5dda40d158c1c95c

Change-Id: I88c685e98bb1439b0992d39285a715020a7c1ce3
CR-Id: ALPS04745284
Feature: Factory Mode
2020-01-18 10:18:59 +08:00
Adogu Huang
e22f81b608 [ALPS04726978] cam: fix assert in factory mode
grant CAM_CAL_DRV access in factory mode.

MTK-Commit-Id: d0d09a8d54a5d40c58b05234f03006d75aad03f5

Change-Id: I3a7fc18aae31c41c8ec033c0962ca2828184eef9
CR-Id: ALPS04726978
Feature: Factory Mode
2020-01-18 10:18:42 +08:00
Mike Hsieh
cff428b385 [ALPS04702268] Change sw_sync permission for 3rd party app access
Change sw_sync permission for 3rd party app use.

MTK-Commit-Id: 756f028f822b28e5863c772c977f3fdfad1eb338

Change-Id: I5f1f4566e8d60b16fd300dc91ddba8cc6aa7e5c4
CR-Id: ALPS04702268
Feature: [Module]MDP Driver
(cherry picked from commit 8d036ea19e62d9f509f1c54d395d4a711b4a4bd7)
2020-01-18 10:18:34 +08:00
Guobao Wang
2b5f5ceb7d [ALPS04714586] Allow factory to access AOSP property
Add SELINUX permission to allow factory to access AOSP property
persist.radio.multisim.config

MTK-Commit-Id: c73e634717213512f3a41c9850b7a4320f53b74c

Change-Id: I2a1f4437da9944b9c63876a9caa5549cbe29af27
CR-Id: ALPS04714586
Feature: Factory Mode
2020-01-18 10:18:12 +08:00
Ping-Hsun Wu
746bea8548 Merge "[ALPS04672388] Change selinux permission for MDP user" into alps-trunk-q0.basic
Change-Id: I399e0d0423e8ab393740f8546465f5118c8fac3e
MTK-Commit-Id: 919592752ef6843078dc651cb0596f81864b92ec
2020-01-18 10:16:20 +08:00
Mike Hsieh
dc6c9adc15 [ALPS04672388] Change selinux permission for MDP user
Change selinux permission for MDP user on /dev/mdp_sync

MTK-Commit-Id: a9c03563cf5e96815399788228dc62d18d88026e

CR-Id: ALPS04672388
Change-Id: I3622da7b8ba4151f9cf79e9d4d9c8f73109ef684
Feature: [Module]MDP Driver
2020-01-18 10:16:18 +08:00
Chien-Wei Hsu
d569ce167d Merge "[ALPS04286398] adsp: add adsp permission" into alps-trunk-q0.basic
Change-Id: I1ded0256d0891a753353d654600860b449c72971
MTK-Commit-Id: 628f3ced43fdc2466e3457ea70158c169c6faf77
2020-01-18 10:16:16 +08:00
chien-wei hsu
723628ecbd [ALPS04286398] adsp: add adsp permission
[detail]
add device adsp permission

MTK-Commit-Id: e4e95de61164b584c97b949d2aa57ed17dd3120e

Change-Id: I691cb90e40034357d6a320bb0749db497b76a9e7
CR-Id: ALPS04286398
Feature: [Module]Audio OpenDSP
2020-01-18 10:16:14 +08:00
Jibin Zhang
bf2e48d678 [ALPS04660540] SIM:Allow factory to access AOSP property
Add SELINUX permission to allow factory to access AOSP property

MTK-Commit-Id: c97b48cc3d6e3975d417fad03a5f0db5d0d84f99

Change-Id: Ib01f0792bfb4110aff7cba60d0ee7ddf6de6b391
CR-Id: ALPS04660540
Feature: SIM
2020-01-18 10:16:06 +08:00
Ethan Lau (劉榮茂)
7bbd9db661 Merge "[ALPS04653648] Factory Mode: fix SElinux policy" into alps-trunk-q0.basic
Change-Id: Ie269effa84c31f1fa4b0e71eca17985d31391a8b
MTK-Commit-Id: 8a2011d115b294b0487d42e668ed3da9c074981d
2020-01-18 10:15:16 +08:00
Jenny Hsu
9018986a9a [ALPS04653648] Factory Mode: fix SElinux policy
[Detail] Add whitelist for SELinux avc denied problem

MTK-Commit-Id: 77c1c8b73aa059657ab355206e5bc73410db6534

Change-Id: I1e8911b3ccd94a0d59ab6f22dd7948d4fcb89abf
CR-Id: ALPS04653648
Feature: Factory Mode
2020-01-18 10:15:12 +08:00
Ethan Lau (劉榮茂)
51644f6ec8 Merge "[ALPS04653648] Factory Mode: fix SElinux policy" into alps-trunk-q0.basic
Change-Id: I957bd048bf6649c4484b2012f64f4a9a10290c19
MTK-Commit-Id: feac521370436d73d3fd9443694aa1ac42ff94be
2020-01-18 10:15:06 +08:00
Jenny Hsu
5985a06909 [ALPS04653648] Factory Mode: fix SElinux policy
[Detail] Add whitelist for SELinux avc denied problem

MTK-Commit-Id: 69c17be2893ecc73c0b486728899d56c11587a08

Change-Id: I2fbf51c12e68b134d6ee7a95421dba0706894147
CR-Id: ALPS04653648
Feature: Factory Mode
2020-01-18 10:15:04 +08:00
Jianping Jiang
2a609d6b82 [ALPS04641743] GPS: factory execute mnld fail
Move mnld execute permission for factory from bsp to basic.

MTK-Commit-Id: 5f8449ec00c670d7b0901b9b4c167ee502cab88d

Change-Id: Ifdb13b700f63572b9df2ff0bb64315a42375df71
CR-Id: ALPS04641743
Feature: Factory Mode
2020-01-18 10:14:59 +08:00
mtk14723
ce2ae4de97 [ALPS04414154] Backlight: set factory as an client of hal_light
[Detail]
Set factory as an client of hal_light,
so that factory can access hal_light service

MTK-Commit-Id: aa59bfbc9d04a2ede701ff67e6ae587f6e5c4394

Change-Id: I86ddb045d73175f10ee57061150a387394009967
CR-Id: ALPS04414154
Feature: Factory Mode
2020-01-18 10:11:47 +08:00
Huan Tang
46302b2c36 [ALPS04414221] msdc:add permission for sdcard
add ioctl permission for sdcard in factory mode

MTK-Commit-Id: 79229bd04c17e617dc40b00fa178648fe37fec0b

Change-Id: I9641b36a26c79499a92aeee37ff3e72c0fe5e510
CR-Id: ALPS04414221
Feature: Factory Mode
2020-01-18 10:11:01 +08:00
albert-zl.huang
11842c24f8 [ALPS04378873] suspend: allow ftm do block suspend
Allow ftm do block suspend

MTK-Commit-Id: e77e031b2c9e1075e185dcdadedb752538688730

Change-Id: I0cb75b5f7caa1852b72a28cc512b22700785e615
CR-Id: ALPS04378873
Feature: Power Management
2020-01-18 10:10:53 +08:00
Shane Chien
e5941191f7 [ALPS04237702] Audio: Add permission for audio scp device in factory.te
Add permission for audio scp device in factory.te

MTK-Commit-Id: 244323d818b671a13f105cf0c715d9ff57a215d5

Change-Id: I18c3d250762522066d1dc568db9ba3998f479806
CR-Id: ALPS04237702
Feature: DSP SmartPA
(cherry picked from commit f761ad3ca40fe037846b131aacbbd37c2c904069)
2020-01-18 10:08:27 +08:00
Juju Sung
12bc2025e2 [ALPS04239425] Sepolicy: fix undefined type declration
[Detail]
Unknown type:untrusted_v2_app,alarm_device,qtaguid_proc,mtd_device
Duplicated type:proc_slabinfo

MTK-Commit-Id: 11ccfcffb994452eb58a697e94a8da748ac73933

Change-Id: I2e847041d14d6b6613044cfaa98f242b7fd9381a
CR-Id: ALPS04239425
Feature: Build System
2020-01-18 10:08:05 +08:00
ILEX Lin
2abdf3da9a [ALPS04190424] NFC : W48p0 - Fix SELinux for factory mode
[Detail]
Factory mode tool for NFC only works with SElinux disabled.

[Solution]
Update NFC stack to latest release W48p0.
Create the communication socket into data/vendor and apply
a specific SElinux label.

MTK-Commit-Id: 910948f163c96cac14494e5951c504e63a3334ee

Change-Id: I9b89e828e344041ef5bb464cc872f442490a6e2a
CR-Id: ALPS04190424
Feature: NFC Chipset Capability
2020-01-18 10:07:59 +08:00
Guobao Wang
700f8ee586 [ALPS04125584] SIM:Access denied finding property "persist.radio.multisim.config"
It occurs access denied finding property "persist.radio.multisim.config"
in factory mode.
It need add permission for this property in factory.te.

MTK-Commit-Id: db2dc7782f87befe1a1a5c50551be2332763013e

Change-Id: I8aea57e0d8f3ddeeffec027a9472eec6380c0286
CR-Id: ALPS04125584
Feature: SIM
2020-01-18 10:07:44 +08:00
Dian Wang
29f9255166 [ALPS04116372] Resolve kernel version unkown issue
[Detail] Allow factory to open /proc/version

MTK-Commit-Id: 13ceaa000bcff93dbc9abb0b52aa70b61e66be91

Change-Id: I528a9ccc837439e3bd338549ea1437758a173534
CR-Id: ALPS04116372
Feature: Factory Mode
2020-01-18 10:07:27 +08:00
Shane Chien
c869528f64 [ALPS03953773] Audio: Add permission for SmartPA calibration
Add permission for SmartPA calibration in factory
mode, otherwise it will encounter avc denied in
SmartPA calibration test case.
mtk_audiohal_data_file:dir { read search open } is
merged to mtk_audiohal_data_file:dir create_dir_perms.

MTK-Commit-Id: e26e9c0120f4907d966986cc50c4d964ae816c98

Change-Id: I38c25d06426afcc2f83b4ee646cba510dde71817
CR-Id: ALPS03953773
Feature: DSP SmartPA
2020-01-18 10:07:22 +08:00
Eason Yen
f7d3d1bcd5 [ALPS04096844] audio: set permission for audio_ipi
Set permission for audio_ipi in factory mode

MTK-Commit-Id: a9bde0179515d51e56344cde917177f424a5416c

Change-Id: I533e46ba5e7c738b2e1f8d9065b1820a5481689d
Signed-off-by: Eason Yen <eason.yen@mediatek.com>
CR-Id: ALPS04096844
Feature: Factory Mode
2020-01-18 10:07:06 +08:00
Eason Yen
05bd363466 [ALPS04085738] audio: add audio_ipi permission
Add audio_ipi permission for factory mode and meta.

MTK-Commit-Id: 3a16bc05d2cb3107f767a9ca76720db55cfffd2d

Change-Id: I01e5ea1c018cb9617d2bb2e619f0b662b6494fc4
Signed-off-by: Eason Yen <eason.yen@mediatek.com>
CR-Id: ALPS04085738
Feature: Factory Mode
2020-01-18 10:07:01 +08:00
albert-zl.huang
5d457db70b [ALPS04046220] suspend: add factory access sys_power sepolicy
sys_power access has been forbidden in Android P,
but only init/ueventd/vold damain can access

MTK-Commit-Id: e2be46ce6bae18ef7167bd3c07476e3748c3e483

Change-Id: Ic8dc8b5f9e0a5943a9837edd953b70e0170a0a00
CR-Id: ALPS04046220
Feature: Factory Mode
2020-01-18 10:06:07 +08:00
Luhua Xu
087fdc764c [ALPS04046220] Backlight: add factory access sys_leds sepolicy
sys_leds  access has been forbidden in Android P, but only
init/ueventd/vold damain can access

MTK-Commit-Id: 1fcd7afabaa608f6434144f16837d43a5c218df7

Change-Id: I837708bf32e95a037787ac2f23d7f58b41722735
CR-Id: ALPS04046220
Feature: Factory Mode
2020-01-18 10:06:03 +08:00
Light Hsieh
02046e7138 [ALPS04046768] Factory: add sepolicy for Storage item in factory mode
[Detail]
Add sepolicy for Storage item in factory mode so that factory can
access /sys/class/block/mmcblk0/.

MTK-Commit-Id: b3e289e9ea36a4d2581365a73ecae798c4fc60e0

Change-Id: I14222cef75b5e0516cb7a767cdb3487d38dbd95b
CR-Id: ALPS04046768
Feature: Factory Mode
2020-01-18 10:05:59 +08:00
YC
f621158dc4 [ALPS04017296] USB: revise selinux of OTG
revise selinux policy of OTG test item,
align AOSP method due to the same requirement.
(search/read USB devices)

MTK-Commit-Id: a0aed0eede4032d7ed56b7b94297a36366624d52

Change-Id: Iee584b5421069f4159879d7b5c1f4c6ee18082ae
CR-Id: ALPS04017296
Feature: Factory Mode
(cherry picked from commit ea3f52167e7e983843639b4b63b3f1b08290cbad)
2020-01-18 10:05:02 +08:00
Chunlan Wang
eca198762f [ALPS03997985] Factory Mode: add permission for test report
[Solution]
Factory Mode needs the permission to save test report in
data/vendor, so add it

MTK-Commit-Id: 1daeb3669ade3f8213b893ae903733ca13bb9b93

Change-Id: I8005207d25fdc2bcab06dd193a3d7f7d2b521f23
CR-Id: ALPS03997985
Feature: Factory Mode
(cherry picked from commit 981cd097e413fd52a3cae2d5b8203150e9c1b45f)
(cherry picked from commit d49fb6cec0ea53e47ab72bcd5f2cbfa0dcf4eb34)
2020-01-18 10:04:49 +08:00
Ting-Fang Hou
bbb18bde9b [ALPS03918481] Audio: Add audio factory permission to access accdet
[Detail]
Add audio factory permission to access accdet

MTK-Commit-Id: 8af09875ac4b678ba41b4d33c4fb29e2287f4de6

Change-Id: I7acba6b69d8b23fae8232f770fe477b981bdd175
CR-Id: ALPS03918481
Feature: Factory Mode
2020-01-18 10:04:37 +08:00
Elvin Lin
ddeb3c3e41 Merge "[ALPS03893656] factory: add power_supply and switch permission" into alps-trunk-p0.basic
Change-Id: I45bc05f2a7b30497b8a49e71642ae4492feeae35
MTK-Commit-Id: 59248eee76c2fdd98a725417a881d4af1a27d083
2020-01-18 10:03:00 +08:00
Ivan-YH Chen
1e4d3f3823 [ALPS03893656] factory: add power_supply and switch permission
[Detail]
Add power_supply and switch permission
to get online and otg status.

MTK-Commit-Id: dad1b84ca11f7cb5dfe70f03a05b80d6250bfc7a

Change-Id: I349d8313fbf567a3289a8be54b81487cd13fa36f
CR-Id: ALPS03893656
Feature: Charger
2020-01-18 10:02:55 +08:00
mtk12101
722798a334 [ALPS03982747] Remove unused sepolicy rules
Some rules is no need any more, need to remove it.

MTK-Commit-Id: 49685f1299d990a7195a2d54b955517d8f2cc699

Change-Id: I4a590ad781589cf94989ce72c88751ac10b82eae
CR-Id: ALPS03982747
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:02:25 +08:00
Black Chen
7748e0c1b1 [ALPS03969178] wlan: factory and meta move to vendor partition
In P version, process needs add net permission to access socket.

MTK-Commit-Id: 4cd65a5adf83ee597402220297cf8d7b727f3da0

Change-Id: I39fbeb59e146fc508cc721ddb299fedc15a70a6b
Signed-off-by: Black Chen <black-ch.chen@mediatek.com>
CR-Id: ALPS03969178
Feature: [Module]Wi-Fi Driver
(cherry picked from commit 1569bcd159fe2472597e2bf2b3c5016f44d7756d)
2020-01-18 10:01:23 +08:00
Dian Wang
1b5890dfe1 Merge "[ALPS03932298] Factory Mode: resolve neverallow error" into alps-trunk-p0.basic
Change-Id: If1c77d4e5b5dfba7aeffea5c6f1566cb19113e39
MTK-Commit-Id: b2e7e8f1f4f0d3a03a85465db2926a01ef2819b1
2020-01-18 10:00:07 +08:00
Chunlan Wang
572aa85017 [ALPS03932298] Factory Mode: resolve neverallow error
[Solution]
New Android not allow system process modify vendor
properties, factory mode move to vendor partition,
so remove the workaround

MTK-Commit-Id: bac8727b1a70a637eb7386213b7bf2bee2096b22

Change-Id: I360a493f770fae96f94199ae436d5e29bf752f70
CR-Id: ALPS03932298
Feature: Factory Mode
2020-01-18 10:00:05 +08:00
Light Hsieh
f798441035 [ALPS03957630] Selinux: rules for meta_clr_emmc and mke2fs
[Detail]
Because Android P impose so many restrictions, it is difficult for
meta mode or factory mode to format partitions. A new design is
adopted as follows:
1. Meta mode or factory mode write all 0 to first 4KB of target
   partition.
2. When entering kernel booting, the partition mount process in the
   original init flow find that XXX partition is wiped and automatically
   format XXX partition.
In step-1 described above, selinux rules shall be added for meta_tst or
  factory.
In step-2 described above, selinux rules shall be added for mke2fs.

MTK-Commit-Id: 7e9bbd418ca6353ba89ecffdc016c78504583bf3

Change-Id: I3dd869c57107b0ebebf3134f69c50744df8f8ff9
CR-Id: ALPS03957630
Feature: SP META Tool
2020-01-18 10:00:04 +08:00
Chang-An Chen
862cd6725f [ALPS03869354] fix tpd auto test fail in factory mode
[Detail]
Fix tpd auto test fail in factory mode due to sysfs nodes
are not allowed to read directly.

[Solution]
update touch setting sysfs policy and add to factory mode

MTK-Commit-Id: d8733ca0938653098f5ec1f5462c1723d8f67894

Change-Id: I3fb6a46cfbf02fe050174501a2606404a53bb2ad
CR-Id: ALPS03869354
Feature: [Android Default] CapTouch
2020-01-18 09:59:45 +08:00
Ting-Fang Hou
9034dfa5e7 [ALPS03918481] Audio: Eable audio factory permission
[Detail]
Eable audio factory permission

MTK-Commit-Id: 208dd7a107b82f0224f663345830ecea98ff90c6

Change-Id: Ife089a2bb7c94e4571fabea0ce2ff4811ced7b34
CR-Id: ALPS03918481
Feature: Factory Mode
2020-01-18 09:59:34 +08:00
Chang-An Chen
8729873c5d [ALPS03869354] start merge_hal_service for light hidl
[Detail]
start merge_hal_service for light hidl for ago projects

MTK-Commit-Id: 1cb1aeb24cf5ac34663fa60d41f6e3bd8738d1ff

Change-Id: Iecfea38a24fa237873859b52a82a7e52086f55d3
CR-Id: ALPS03869354
Feature: [Android Default] Backlight
2020-01-18 09:59:16 +08:00
Chang-An Chen
73f8a63b8b [ALPS03869354] Fix factory mode backlight and vibrator test fail
[Detail]
1. Backlight level test in factory mode fail due to no sepolicy
applied, and sysfs_leds is not allow to add to factory.te.
2. Vibrator test fail due to no corresponding selinux policy.

[Solution]
1. Using hidl for backlight in factory mode.
2. Add vibrator policy.

MTK-Commit-Id: 9470dca00da2fecfb373af94aae3502714d31ea3

Change-Id: I42cd45951054a267449e79f559b3761fce34d497
CR-Id: ALPS03869354
Feature: [Android Default] Backlight
2020-01-18 09:59:00 +08:00
Chunlan Wang
c93290f067 [ALPS03932298] Factory Mode: move to vendor partition
[Solution]
Factory mode should build in vendor partiton, so move
factory from system partition to vendor partition

MTK-Commit-Id: c55354593a97aed3af9d0b2584037d03d3d2669c

Change-Id: I5a607b60f9ac974380c5e440a6fa0c51797d6b1b
CR-Id: ALPS03932298
Feature: Factory Mode
2020-01-18 09:58:07 +08:00
Chunlan Wang
2010ade935 [ALPS03928691] Factory Mode:add the permission to get com type
[Solution]
Factory mode need to get com type is USB or UART, so add the
permission in factory.te

MTK-Commit-Id: aff8a941116fde70abd5c492fa084e74d927629e

Change-Id: I0b9206bda110b9dde77168db73a8378c4a571851
CR-Id: ALPS03928691
Feature: Factory Mode
2020-01-18 09:57:07 +08:00
Lili Lin
05f5d87b88 [ALPS03881723] Workaround to fix build break
[Detail] Googles new commit
neverallow coredomain from writing vendor properties
cause build break

cdb1624c27

[Solution] Declare system_writes_vendor_properties_violators as workaround

MTK-Commit-Id: 2b19515d2d98945b0aadfbc9043352ae927497f3

Change-Id: I7be59b6811f6c75ea47da205be902417311fe1d0
CR-Id: ALPS03881723
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:56:13 +08:00
Peter Wang
8183941448 [ALPS03901606] eMMC&UFS : Combo feature
[Detail]
1. Change type name from sysfs_boot to sysfs_boot_mode
2. Add type name sysfs_boot_type

MTK-Commit-Id: 54d5bb31fc8ad1d9ac2e931fe5dc01ef4c1083cf

Change-Id: I445ecdf5a5e334a49ccc1d747daa87f6be351d20
Signed-off-by: Peter Wang <peter.wang@mediatek.com>
CR-Id: ALPS03901606
Feature: UFS Booting
2020-01-18 09:52:26 +08:00
SW Integrator
700750af5e [ALPS03800946] Remove data_between_core_and_vendor_violators
[Detail]
data_between_core_and_vendor_violators is used temporarily. We should
follow Android P SELinux rule to write sepolicy.

[Solution]
Remove data_between_core_and_vendor_violators from files which already
fix SELinux build errors

MTK-Commit-Id: 6a75842a96d8997bca10caf6ca4d5b4e7e8f68a4

Change-Id: I5e840fdf6b61d44860429a7e5c7e24c9a48a9c75
CR-Id: ALPS03800946
Feature: Treble
2020-01-18 09:49:26 +08:00
ZH Chen
ce3a0f44e7 [ALPS03614388] Sepolicy: Add ttyS to sepolicy
[Detail]
Add ttyS to sepolicy

MTK-Commit-Id: f51e0700ff76c53befa5c15f1bfa6d1726905fed

Change-Id: I88aaa49b470ff98fcbd0d3720c641b74ca42bdeb
CR-Id: ALPS03614388
Feature: Headset Cable/Button Detection and Reaction
(cherry picked from commit 7e314d2dbea64a05f626115e5beccce53bb2a07f)
2020-01-18 09:46:05 +08:00
Chunlan Wang
8c0ef1d8e5 [ALPS03788916] fix build error
[Solution]
There are some build errors in factory.te, so fix

MTK-Commit-Id: db2e842e2fa353e987baa282d5c2026ae8395a61

Change-Id: I07d3906e8a934ae0e36b7c384208f2cfc8506a23
CR-Id: ALPS03788916
Feature: Factory Mode
2020-01-18 09:44:43 +08:00