97 Commits

Author SHA1 Message Date
bo.shang
c6f62897b6 [ALPS04721702] Save log into data partition
1. Add SELinux permission

MTK-Commit-Id: 49d711749e59016b1e46233c4569c9d22d957f3d

Change-Id: If172698697fa5005f4548328665ea6c4739315c8
CR-Id: ALPS04721702
Feature: Modem Log Tool
2020-01-18 10:18:19 +08:00
Jonas Lai
8d8e513025 [ALPS04314391] sepolicy: aee_aedv/dumpstate access to camerahalserver
Allow aee_aedv/dumpstate to dump debug info from camerahalserver.

- SELinux : avc:  denied  { find } for
  interface=android.hardware.camera.provider::ICameraProvider
  sid=u:r:aee_aedv:s0 pid=23819 scontext=u:r:aee_aedv:s0
  tcontext=u:object_r:hal_camera_hwservice:s0
  tclass=hwservice_manager permissive=0

MTK-Commit-Id: 18210cf3984bd62caa334f28e45bb0f99500bac8

Change-Id: I291450101bd0ea94fca47b592cb1ef7ffb7f1ae4
CR-Id: ALPS04314391
Feature: [Android Default] Camera Application Basic Functions
2020-01-18 10:18:07 +08:00
Hua Tian (田华)
753142662c Merge "[ALPS04709387] Support to catch MCUPM log" into alps-trunk-q0.basic
Change-Id: I9d160429e50304a82ec83b4c7133126d52ea8eb4
MTK-Commit-Id: 4b4e661646a1ff87863669fd53af94707835bc3c
2020-01-18 10:17:53 +08:00
hua.tian
608a6fd139 [ALPS04709387] Support to catch MCUPM log
Add SELINUX rule for MCUPM log.

MTK-Commit-Id: 9fb8d206f37f0fb00581f4417473974c014ff0dd

Change-Id: I7a935534d4975e444b556d133ff222a4c144b5ca
CR-Id: ALPS04709387
Feature: Mobile Log Tool
2020-01-18 10:17:51 +08:00
bo.shang
5eaf34477d [ALPS04710092] Save network log save log in data
1. Add SElinux permission to save log in data

MTK-Commit-Id: 80d74125ac0c04cb560b2b71bafe89e0d9d7441f

Change-Id: I6f17f70e3530257331331b92bdf095749d64283f
CR-Id: ALPS04710092
Feature: Network Log Tool
2020-01-18 10:17:49 +08:00
Guoyi Qu
b4c0ed52b3 Merge "[ALPS04707995] CTS fail fix" into alps-trunk-q0.basic
Change-Id: I9041039776d47e42e064ac126e154b24492c6769
MTK-Commit-Id: 88ff0b09dbbcc96c825f95a69d2172193ca856c4
2020-01-18 10:17:45 +08:00
Guoyi Qu
e1861f520b [ALPS04707995] CTS fail fix
Move defination to private folder

MTK-Commit-Id: e9fcc4d4a929c928dd475887e6a100a85d641815

Change-Id: I34fc6d2f3c96f8ab9d53f840da53465f7b79e9cf
CR-Id: ALPS04707995
Feature: Connsys Log Tool
2020-01-18 10:17:40 +08:00
Yifei Qiao
9708912e27 [ALPS04700799] Align keymanager sepolicy with p0.mp6
Align keymanager sepolicy with p0.mp6

MTK-Commit-Id: 24a187bc32e2be7663abb880c07659834d71f4b0

Change-Id: Ia98525be2155dcf3261633d1e6c25a775426068d
CR-Id: ALPS04700799
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:17:31 +08:00
Jiaqin Wang
18cc043b42 [ALPS04689352] ADB:add allow priority
move persist.adb.nonblocking_ffs from
PRODUCT_SYSTEM_DEFAULT_PROPERTIES to
PRODUCT_PROPERTY_OVERRIDES, need add
allow priority to let adb daemon to
get/read it

MTK-Commit-Id: 0489198430c2ac2412ebebdc6e24bf8fd0797bf1

Change-Id: I9f69bddfdd307a3d13a8516076b4106f4b0bdf82
CR-Id: ALPS04689352
Feature: [Android Default] ADB (Android Debug Bridge)
2020-01-18 10:17:05 +08:00
hua.tian
7574cf2c9c [ALPS04649268] Move SELINUX policies to plat_private
These policies are for system process, as a result,
move it to plat_private folder.

MTK-Commit-Id: 46e87002024d5675d566dd59f77cbde9c69bdd37

Change-Id: I9c2b72136d1f1c3062f0ac6b174c8334b1965e80
CR-Id: ALPS04649268
Feature: Mobile Log Tool
2020-01-18 10:16:47 +08:00
Jianping Jiang
109462e1f2 [ALPS04674290] Correct mnld_device type
1. Remove mnld_device from lbs_dbg.te;
2. move mnld_device type to non_plat folder

MTK-Commit-Id: f575807c7ac6d6a30595479ae03339b5765ff884

Change-Id: I8ba23283a103f52c045ae6c69ec7fc4eca06df84
CR-Id: ALPS04674290
Feature: Location Chipset Capability
2020-01-18 10:16:26 +08:00
Bo Shang
0e2cfc1985 Merge "[ALPS04669246] add sepolicy for dump proc/net" into alps-trunk-q0.basic
Change-Id: Icbee725aa67aa16d2fc36bb9fe9c71d055ac375b
MTK-Commit-Id: 7e29142f0ed4964fd2aeaf64b9143a8383d8930f
2020-01-18 10:15:56 +08:00
mtk11515
8f52102087 [ALPS04669246] add sepolicy for dump proc/net
[Solution] add sepolicy for dump proc/net

MTK-Commit-Id: 676c040c07303066916c4f1ca1d3f4d410b6735d

Change-Id: I4e3924a4b5ac611c2cce7b071935fed2b71c3398
CR-Id: ALPS04669246
Feature: Network Log Tool
2020-01-18 10:15:50 +08:00
bo.shang
5068833fef [ALPS04532537] Copy vendor modem db and filter
New feature:

Add selinux of HIDL service and client.

Use HIDL copy modem db and filter from vendor image

to data partition for modem log tool.

MTK-Commit-Id: 7fadaf0f2a60d05d7464264ef9e23a75ca27bb66

Change-Id: I12cc8614537f30e90a1717f9838c52283342eb55
CR-Id: ALPS04532537
Feature: Modem Log Tool
2020-01-18 10:15:08 +08:00
Jianping Jiang
11f88203b8 [ALPS04255502] lbs_dbg: move lbs_dbg sepolicy to system
Move lbs_dbg sepolicy to system for System/vendor Layer decouple

MTK-Commit-Id: a4638ef15ca2020d8f7eba6ab2d053d7716d0ad4

Change-Id: I4ecfb1276b47ec75bab4c72ff04ebeb035d757b3
CR-Id: ALPS04255502
Feature: Location Aiding
2020-01-18 10:14:12 +08:00
dengwei.xu
c6ed642277 [ALPS04285435] EM hidl server sepolicy
Fix the EM hidl server sepllicy build errro

MTK-Commit-Id: 8b95a2baf6f04fd1c8ec5fa6548f78203a581e3d

Change-Id: Iac820d493352c5d37991c23cb10c01f9615ed888
CR-Id: ALPS04285435
Feature: Engineering Mode
2020-01-18 10:13:51 +08:00
mtk11285
a250fc423c [ALPS03806577] catch manual coredump fail
add some rules for aee_aedv/aee_aed to read /proc/*/exe

MTK-Commit-Id: a1ee357e85a32beded54046bb1b638eb8fe4b3c9

Change-Id: Ideeb8002a9d1b9b166709442195124cce8e4e427
CR-Id: ALPS03806577
Feature: Android Exception Engine(AEE)
2020-01-18 10:13:24 +08:00
mtk11285
0b7ed7df47 [ALPS03806577] add DropBoxReceiver feature
1. allow dropboxreceiver to receive dropbox message
2. allow aee_aed to read packages.list

MTK-Commit-Id: 03d7fff0159d697f13fd574b132503ba6063cfab

Change-Id: Id717233c2ade4b0b8c3d6a8319647ff6e783a60a
CR-Id: ALPS03806577
Feature: Android Exception Engine(AEE)
2020-01-18 10:13:14 +08:00
bo.shang
1aa4b07238 [ALPS04382560] Add selinux permission
Add map permission for kernel API dump error

MTK-Commit-Id: 07c68bea7a790c49b3870393bf046688a19b2e58

Change-Id: I01b3f39bcc365ccedb1fc029b92307e91bece05a
CR-Id: ALPS04382560
Feature: Network Log Tool
2020-01-18 10:11:31 +08:00
yuhui.zhang
03dda6b5df [ALPS04316338] EM: battery temperature settings
[Detail]
Add sepolicy rule to set battery temperature

MTK-Commit-Id: 9fcd042bd04632fa952af7ac51833695b8a50f7c

Change-Id: I82b8b6649849403a1b1cd8a2e5093a3664719bc2
CR-Id: ALPS04316338
Feature: Engineering Mode
2020-01-18 10:09:55 +08:00
Larry Liang
10cad58309 Merge "[ALPS04325589] AEE: remove unuse rules" into alps-trunk-q0.basic
Change-Id: Ia92a7b6be46762af09a64e2c7e92607a1c734858
MTK-Commit-Id: e98481807b7d50c68a8e5bd8926df0dcf4398017
2020-01-18 10:09:48 +08:00
mtk11285
85b3620577 [ALPS04325589] AEE: remove unuse rules
1. remove unuse rules
2. allow dumpstate to r/w /proc/msdc_debug
3. allow aee_core_forwarder to access hwservicemanager_prop
4. allow aee_core_forwarder to connect aee_aed socket

MTK-Commit-Id: a43676c734f74636df65e59cdcace017eca79706

Change-Id: I3c45ed83499c0079b38af34cf462dcd80fec501d
CR-Id: ALPS04325589
Feature: Android Exception Engine(AEE)
2020-01-18 10:09:44 +08:00
Shanshan Guo
427c135bd6 [ALPS04340791] SEPOLICY: workaround fix BASIC build error
[Detail]
Only BASIC Sepolicy need to be applyed for BASIC,
we separate basic/bsp sepolicy for BASIC.
This workaround is for fixing the build errors that
cause by the declarations were defined in bsp/ dir
and neverallow rules.

MTK-Commit-Id: f1ed54e84b85f73e20dcc8c2ac5f0c42fddedc77

Change-Id: I568873fcc272d04b018efc4be00924b751bb3775
CR-Id: ALPS04340791
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:09:28 +08:00
bo.shang
aa52b35cf1 [ALPS04365111] Fix selinux error
Add socket map permission

MTK-Commit-Id: 5a8050e1faffde6adc067eea37fe99434a2f88a5

Change-Id: Ie3009b81bdae187422fb26644834bec2d145d491
CR-Id: ALPS04365111
Feature: Network Log Tool
2020-01-18 10:09:15 +08:00
Elvin Lin
9f2e49db1c [ALPS04324880] em_svr: add map permission for shell_exec
[Detail]
Add map permission for shell_exec to let Batterylog.java
can set command from shell.
Modify the permission list to rx_file_perms.

MTK-Commit-Id: d8f72393dddc2787c88bb2141594319bfe473e9a

Change-Id: I04b1b5c056223e30d5d8b6f8fe7a503afc28b521
CR-Id: ALPS04324880
Feature: Power Delivery
(cherry picked from commit 63fd26ecb2014b5a03db649b332858943a6893a9)
2020-01-18 10:08:19 +08:00
Po Hu
4f97064d35 [ALPS04209994] Android Q migration prepare
[Detail]
Fix build warning like:
WARNING unrecognized character at token ^M on line XXX:

[Solution]
Use dos2unix to update files

MTK-Commit-Id: 8285bcfe7a30349f3188c9b29e4b8da9ee2c1280

Change-Id: I7773e243028a2275d11782885b4bc299d5c5d043
CR-Id: ALPS04209994
Feature: build process
2020-01-18 10:08:11 +08:00
Juju Sung
12bc2025e2 [ALPS04239425] Sepolicy: fix undefined type declration
[Detail]
Unknown type:untrusted_v2_app,alarm_device,qtaguid_proc,mtd_device
Duplicated type:proc_slabinfo

MTK-Commit-Id: 11ccfcffb994452eb58a697e94a8da748ac73933

Change-Id: I2e847041d14d6b6613044cfaa98f242b7fd9381a
CR-Id: ALPS04239425
Feature: Build System
2020-01-18 10:08:05 +08:00
mtk16229
0016bf873f [ALPS04112420] add mota selinux limited
[Detail]add mota selinux linited

MTK-Commit-Id: 7762b88c2e81f42f95232f00c1c2cf0e81d47421

Change-Id: I5071ca451510cd14a8ccf53e8e77c3e77f50816b
Signed-off-by: mtk16229 <Heaven.Zhang@mediatek.com>
CR-Id: ALPS04112420
Feature: MOTA (Mediatek Over The Air)
2020-01-18 10:07:40 +08:00
mtk11515
4990fac4dd [ALPS04085854] make service auto run
[Solution] Make service auto run.

MTK-Commit-Id: 5e7859bac9dd91730634cfa9623936ee8f630fef

Change-Id: I6ae5c40a6d12d077bfe8093cdf7f4d9b32698a82
CR-Id: ALPS04085854
Feature: MTKLogger
(cherry picked from commit a8d2a91b7b056b3825e55dbbad4045dff361d08e)
2020-01-18 10:06:54 +08:00
mtk12101
f20ee5e7ab [ALPS04017619] SELinux policy rule optimization
Spending more bootup time after label kernel interface node
in file_contexts, there is another way to label kerner interface
node on genfs_contexts file. When move the label rule to
genfs_contexts file, the bootup time will speed more than 500ms.

MTK-Commit-Id: e237c9367e74f2953b843cc9224a98b4e7cfddbc

Change-Id: I1a1e369c3eaaf359c3bf7c051793a3ffba4c71fc
CR-Id: ALPS04017619
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:06:36 +08:00
mtk11285
7f6df66a44 [ALPS04056497] cts testVendorTypeViolators case fail
[Detail] aee_aedv_exec is defined in system.img, and when AOSP system.img
is replaced, cts will fail if aee_aedv_exev is referenced in vendor.img.

MTK-Commit-Id: 178b71c788561cea1336d2c62b67dd324ecf6e8b

Change-Id: I200ff7cd55597de05d5412677b140809e941a192
CR-Id: ALPS04056497
Feature: Android Exception Engine(AEE)
2020-01-18 10:06:12 +08:00
mtk13858
d7105292b6 [ALPS04013134] CCCI:fix android p selinux issue v2
[Detail]
fix code defect to avoid vts fail

MTK-Commit-Id: 8910b5c642fd4ebb0910eda3f6b49c38f91f4483

Change-Id: I95cd0a11b4bc9d8145b7017ffbf4b171751ef32c
Signed-off-by: mtk13858 <derong.liu@mediatek.com>
CR-Id: ALPS04013134
Feature: Modem Interface Driver
2020-01-18 10:04:57 +08:00
mtk11515
1ac3d6456a [ALPS03992062] split .te file
[Solution] split .te file to non_plat,private,public folder.

MTK-Commit-Id: a044f6ece04b84ceaf8809076d3167700e351bbf

Change-Id: I6282abddb5f43008a724e34367963a16b3f1e4d4
CR-Id: ALPS03992062
Feature: MTKLogger
2020-01-18 10:04:53 +08:00
bo.shang
2c8ef11be1 [ALPS04007645] Modem log start fail in meta mode
Fix SELinux error

MTK-Commit-Id: 239b554dcd68299e2cb3ec58b39214e552136ac9

Change-Id: Ic4800bbce6b03c83563e5171a76e331859154b8d
CR-Id: ALPS04007645
Feature: Modem Log Tool
2020-01-18 10:04:33 +08:00
Juju Sung
1457d484c4 Merge "[ALPS03998186] Treble: Fix selinux issue for booting with GSI" into alps-trunk-p0.basic
Change-Id: I820b3784907771fec7f06ed07d771daf3de30c9e
MTK-Commit-Id: d1df5b415bc9376c099e38d7ccaa6db58bd64fdb
2020-01-18 10:04:14 +08:00
Sam-KY Lin
da660a3653 [ALPS03998186] Treble: Fix selinux issue for booting with GSI
[Detail]
SEPolicy rule that put in plat_private folder will be placed in system image.
So, It will be overwrited after flashing GSI.

[Solution]
Move MTK rules to non_plat folder instead which will be placed in
vendor image.

MTK-Commit-Id: 91e5023b67f0ce18e5e364adce5da5413c71fc69

Change-Id: I372b059e44c4bbfd6d4a92a790846b2228213b88
CR-Id: ALPS03998186
Feature: Treble
2020-01-18 10:04:12 +08:00
Yuhui Zhang
c7fd91bdb5 Merge "[ALPS03992559] EM HIDL - selinux" into alps-trunk-p0.basic
Change-Id: I4fd3bd2554bf61653f45af1c5aa73d58c35ef65e
MTK-Commit-Id: c2b6c5d2327253281e4dc125e045e6752b348fe4
2020-01-18 10:04:10 +08:00
dengwei.xu
12c8c8e1f4 [ALPS03992559] EM HIDL - selinux
Add selinux support for HIDL

MTK-Commit-Id: f58b6fd1c6c053780475ad44ac648f6231af0d94

Change-Id: I77a9bdffbcb8b837e78055ef8bfb9b9d328232b2
CR-Id: ALPS03992559
Feature: Engineering Mode
2020-01-18 10:04:08 +08:00
Larry Liang
e2b7fd0b00 Merge "[ALPS03997871] allow MobileLog exec logcat -L" into alps-trunk-p0.basic
Change-Id: I366928a1a654959932a1bc39a77530f3f5c7a8ce
MTK-Commit-Id: 9d2d735377baa0a913c902f58108a7af5c10e6a3
2020-01-18 10:04:06 +08:00
Yuxian Xu
000e69e1bc [ALPS03997871] allow MobileLog exec logcat -L
Mobile_log_d exec logcat -L to get last Android Log

MTK-Commit-Id: e51d67ff3d1024ec236d26f66d5286a1aed6fb75

Change-Id: Id2f2aceb501a5324ff642f34455080ccbd54bf34
CR-Id: ALPS03997871
Feature: Mobile Log Tool
2020-01-18 10:04:04 +08:00
Chaoran Zhang
c30a82525d [ALPS03872369] Add lbs_dbg selinux policy
[Detail]
Add lbs_dbg selinux policy

MTK-Commit-Id: c316e3908f5d5ddbf8f543ef08a4759159b798ba

Change-Id: Id6311f353df61ca0fa9a108c832d790b228a5bba
CR-Id: ALPS03872369
Feature: Location Chipset Capability
2020-01-18 10:03:58 +08:00
Eddie Hung
d51b584df5 Merge "[ALPS03974529] Add policy for audio hidl service" into alps-trunk-p0.basic
Change-Id: Ieff4f111e7304c7a4ca1d264dd3590dfc207e166
MTK-Commit-Id: efa57894f27833ba4d26a25d0e84b4f33e4ff29d
2020-01-18 10:03:32 +08:00
Eddie Hung
7970815eea [ALPS03974529] Add policy for audio hidl service
[Detail]
Allow mtk audio hidl service to read "ro.audio.usb.period_us"

MTK-Commit-Id: 5f794920af51f2f7900212f8a6ba7ecb3b64c919

Change-Id: I2ace425bb53190c10b397fca92420d35af764738
CR-Id: ALPS03974529
Feature: [Android Default] USB Audio
2020-01-18 10:03:30 +08:00
Lili Lin
56b7e390c4 [ALPS03959715] move audio-daemon to vendor
1. Per customer request, move audio-daemon to vendor partition.
2. Implement GetVolumeIndex

MTK-Commit-Id: 4f61171696528b80f9973cb1e3820c9f91116755

Change-Id: Id82b004a39b1217b543c42b9f66de72fb1f76a59
CR-Id: ALPS03959715
Feature: Audio Tuning Tool
2020-01-18 10:02:48 +08:00
mtk12101
722798a334 [ALPS03982747] Remove unused sepolicy rules
Some rules is no need any more, need to remove it.

MTK-Commit-Id: 49685f1299d990a7195a2d54b955517d8f2cc699

Change-Id: I4a590ad781589cf94989ce72c88751ac10b82eae
CR-Id: ALPS03982747
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:02:25 +08:00
mtk13799
86ea78a67a [ALPS03886692] property rename for Android P
[Detail]property rename for Android P

MTK-Commit-Id: 8cc2c773156fcfa1757a261b960f88d7a8b9d4f6

Change-Id: I42fab46ce67a240d619e0a74cb7fa8834ac74bc6
Signed-off-by: mtk13799 <xin.huang@mediatek.com>
CR-Id: ALPS03886692
Feature: [Android Default]Dedicated APN for Tethering
2020-01-18 10:01:57 +08:00
Light Hsieh
f798441035 [ALPS03957630] Selinux: rules for meta_clr_emmc and mke2fs
[Detail]
Because Android P impose so many restrictions, it is difficult for
meta mode or factory mode to format partitions. A new design is
adopted as follows:
1. Meta mode or factory mode write all 0 to first 4KB of target
   partition.
2. When entering kernel booting, the partition mount process in the
   original init flow find that XXX partition is wiped and automatically
   format XXX partition.
In step-1 described above, selinux rules shall be added for meta_tst or
  factory.
In step-2 described above, selinux rules shall be added for mke2fs.

MTK-Commit-Id: 7e9bbd418ca6353ba89ecffdc016c78504583bf3

Change-Id: I3dd869c57107b0ebebf3134f69c50744df8f8ff9
CR-Id: ALPS03957630
Feature: SP META Tool
2020-01-18 10:00:04 +08:00
Chang-An Chen
862cd6725f [ALPS03869354] fix tpd auto test fail in factory mode
[Detail]
Fix tpd auto test fail in factory mode due to sysfs nodes
are not allowed to read directly.

[Solution]
update touch setting sysfs policy and add to factory mode

MTK-Commit-Id: d8733ca0938653098f5ec1f5462c1723d8f67894

Change-Id: I3fb6a46cfbf02fe050174501a2606404a53bb2ad
CR-Id: ALPS03869354
Feature: [Android Default] CapTouch
2020-01-18 09:59:45 +08:00
mtk11285
5c7942168d [ALPS03948310] add sepolicy
[Detail]
1. add sepolicy for aeev
2. add sepolicy for dumpstate hal service

[Solution]

MTK-Commit-Id: c9a341625f9f299341a0ba5ec02db3ffb2cf7edc

Change-Id: Ida4c75fc762293005b1f7942dd23efb9540d5e13
CR-Id: ALPS03948310
Feature: Android Exception Engine(AEE)
2020-01-18 09:59:28 +08:00
Juan Rong
4fef319c9b [ALPS03951067] EM: selinux for battery
[Detail]
allow EM access battery info

MTK-Commit-Id: cdcee8fe601a984182ded4522acadfe6b70dec66

Change-Id: Ic55a779d3d6883d1dd0828258ff3bf084c8d7706
CR-Id: ALPS03951067
Feature: Fuel Gauge
2020-01-18 09:58:35 +08:00