NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
592 Commits 2 Branches 0 Tags
Commit Graph

41 Commits

Author SHA1 Message Date
dengwei.xu
19c5ed689f [ALPS03992559] EM hidl V1.1 selinux 
Add the selinux labels

MTK-Commit-Id: 924bb82662abe532ec2e7d883e944547eda8efb2

Change-Id: I9a1e602f33dd1f76970f4d128cd6e25bb9643aea
CR-Id: ALPS03992559
Feature: Engineering Mode
 2020-01-18 10:07:11 +08:00
dengwei.xu
dbd6c0abd4 [ALPS04083174] EM telephony RF reset - selinux 
Add the selinux support

MTK-Commit-Id: 31d37971bece408a6fa08d20009db9bb9bb94346

Change-Id: I7d965a3cd40e8526317596c188fb07acdb37b0f8
CR-Id: ALPS04083174
Feature: Engineering Mode
 2020-01-18 10:06:50 +08:00
Juan Rong
4586efdd5a [ALPS04033230] EM:gsensor cali fail 
root cause: cant access dev/gsensor
solution: modify dev/gsensor user group
          and modify selinux at the same time

MTK-Commit-Id: d9a07d298ac7c7f6f337e998e79e0c7b607968ec

Change-Id: Id8d37fe90970297a1e23d40cb8c3fe39fd928e0f
CR-Id: ALPS04033230
Feature: [Android Default] Acclerometer
 2020-01-18 10:05:58 +08:00
mtk11285
26163d7263 [ALPS04020173] create /data/aee_exp at runtime 
[Detail]
1. create /data/aee_exp at runtime.
2. debug utils dispaly error, because engineermode cant get
aee system property, allow engineermode to get aee vendor property.

MTK-Commit-Id: f269072cba0351e65d92452bbd1b7b304d295cf6

Change-Id: I4d51ca658f6a03d18e5dde7e5028b94a08d3e17d
CR-Id: ALPS04020173
Feature: Power Management
 2020-01-18 10:05:43 +08:00
yuhui.zhang
b0b96a17d9 [ALPS04013705] YGPS:Use hidl to access mnld 
[Detail]
Add SEPolicy for EM and YGPS to acces LBS hidl

MTK-Commit-Id: 6fefe972ef73431e64ff762b3a3344ef448f1fe3

Change-Id: I6459c26c0146f72f0adb62562d8daa65bd6cba45
CR-Id: ALPS04013705
Feature: Engineering Mode
 2020-01-18 10:04:49 +08:00
dengwei.xu
009ca46220 [ALPS04011772] EM telephony system read property selinux fix 
The system read property should apply the read right

MTK-Commit-Id: 91075726eb8ef7406c7581645add5d702f3475a7

Change-Id: Ib0927cf08f9091d3385514a252fa627dba9eeec9
CR-Id: ALPS04011772
Feature: IRAT - C2K
 2020-01-18 10:04:44 +08:00
Josh-YC Liu
1990000501 [ALPS04010443] AAL: add set property in SELinux 
Add new AAL API for set function with property.

MTK-Commit-Id: 9fa5437f96066104e04ebb655e39d24db2935080

Change-Id: Iab58a2ecd919ceadd9b8586d2b52720c176ded01
CR-Id: ALPS04010443
Feature: Ambient Light Adaptive Luma
 2020-01-18 10:04:41 +08:00
Lili Lin
9e64f5e935 [ALPS03878175] Remove system_writes_vendor_properties_violators 
system_writes_vendor_properties_violators is only workaround,
and will cause *TS test fail, so remove the workaround and
corresponding rules that cause build fail.

MTK-Commit-Id: f637c1416b591c821bc9c18fd3dbf3aa5f9038af

Change-Id: If09922120de0742ec47d7c0522168d4e78a4e74f
CR-Id: ALPS03878175
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:04:31 +08:00
dengwei.xu
4f6395a554 [ALPS04001212] EM telephony system write property 
Add the system write and system read property selinux rights

MTK-Commit-Id: 432c666c3d1275c3c7d7f0d88b4fcf69650314bf

Change-Id: I835af9bfdf0b0ac039a4b04498b36f3feb791a12
CR-Id: ALPS04001212
Feature: Engineering Mode
 2020-01-18 10:04:30 +08:00
Jen-Chih Chang
5fff295700 [ALPS03999678] Allow Mwi to get vendor default properties 
vendor_default_prop object was blocked by SELinux for radio process.
Add get_prop permission for radio process to get property values for
the vendor default properties.

MTK-Commit-Id: 7dc6ef3ddc126117fbd69cf83a1d3f5bfb70b61e

Change-Id: If0ebff064cc7b3622bcf513650304daf67f3f8fc
CR-Id: ALPS03999678
Feature: WiFi Calling Service
(cherry picked from commit 99687c64c8cfdf261186a1c682a456409e52d20b)
 2020-01-18 10:04:29 +08:00
lena wang
3f037eeb36 [ALPS03856250] SIM:add policy for system set prop 
Config property "vendor.gsm.sim.operator.default-name" as:
1. system image could set but vendor image cant.
2. System could read.

MTK-Commit-Id: 79e9cc75b8937a0eeb1e0a34af2095fad7182388

Change-Id: Ib14716449080c17dbd98e681215e1d89d96029a8
CR-Id: ALPS03856250
Feature: SIM
(cherry picked from commit ef7ae758c93dc94fec1f7f23c877d86a254d035d)
 2020-01-18 10:04:28 +08:00
dengwei.xu
12c8c8e1f4 [ALPS03992559] EM HIDL - selinux 
Add selinux support for HIDL

MTK-Commit-Id: f58b6fd1c6c053780475ad44ac648f6231af0d94

Change-Id: I77a9bdffbcb8b837e78055ef8bfb9b9d328232b2
CR-Id: ALPS03992559
Feature: Engineering Mode
 2020-01-18 10:04:08 +08:00
yuhui.zhang
ba25c399b3 [ALPS03914002] EM: Remove unused property rule 
[Detail]
Some function will move to vendor hidl, so related sepolicy rules in radio.te could be removed.

MTK-Commit-Id: 8294731a4889e3954a70f5d4379327d9ae0a0ec3

Change-Id: Ib6693e7b6ec3d076e64b505ce670e9c9f5b88281
CR-Id: ALPS03914002
Feature: Engineering Mode
 2020-01-18 10:03:53 +08:00
Juan Rong
cdb72dbd48 [ALPS03886705] EmCamera: move to vendor partition 
Move EmCamera to vendor partition, need modify the selinux

MTK-Commit-Id: 92c1e87c5f0901e9eb235b00853975d0cf138f90

Change-Id: I47be92abaf4020e20f756cb36bb55c602a1662f2
CR-Id: ALPS03886705
Feature: Engineering Mode
 2020-01-18 10:03:50 +08:00
mtk12101
722798a334 [ALPS03982747] Remove unused sepolicy rules 
Some rules is no need any more, need to remove it.

MTK-Commit-Id: 49685f1299d990a7195a2d54b955517d8f2cc699

Change-Id: I4a590ad781589cf94989ce72c88751ac10b82eae
CR-Id: ALPS03982747
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:02:25 +08:00
yuhui.zhang
51e62850d5 [ALPS03914002] EM: remove unused sepolicy rules 
[Detail]
1. Remove mnld_prop for using hidl
2. Remove bt ssp debug mode for function removing

MTK-Commit-Id: 7b69d50028b1f3543596c1cb7c55f3e0bf43d5a4

Change-Id: I34618a2f4347e56d825fe86ef7084aeaa95b0ebc
CR-Id: ALPS03914002
Feature: Engineering Mode
 2020-01-18 10:02:10 +08:00
Juan Rong
d18a53f680 [ALPS03886705] EM:hardware-testing SELinux 
[Detail]
Fix EM hardware-testing SELinux issue
 1. power->PMU read
 2. power->debug_log
 3. audio->detect headset
 4. memory->flash
 5. touchscreen->settings
 6. AAL get/set prop

MTK-Commit-Id: 5a00b957045b7a83722c4f6d2f926b38d9625342

Change-Id: I781c756404015997d130a342d123f8cdb8f33810
CR-Id: ALPS03886705
Feature: Engineering Mode
 2020-01-18 10:01:41 +08:00
Kaiwen Liu
6a6892c1e2 Merge "[ALPS03974555] neverallow coredomain from writing vendor properties" into alps-trunk-p0.basic 
Change-Id: I8768b6599b9005b3d439e797e575c415b6e60d96
MTK-Commit-Id: 9833797552e88afb947ba1de154c8d1bf1d2e917
 2020-01-18 10:01:14 +08:00
Yu-Hua.Huang
3ca7933c55 [ALPS03974555] neverallow coredomain from writing vendor properties 
Remove uce property to compliance google new rule on android P

MTK-Commit-Id: d5819765a722ab16504011bdc12797e72576b6df

Change-Id: I91f011952ac7e6272700de5042fb776ad0f497f9
CR-Id: ALPS03974555
Feature: UCE, User Capability Exchange
 2020-01-18 10:01:11 +08:00
lena wang
3988ce4bc2 [ALPS03856250] SIM: Revise property permission 
Change set_prop to get_prop to avoid breaking neverallow rule.

MTK-Commit-Id: 484857faf4481c9b0f815520e3cb1f558d72df3b

Change-Id: I7fc44f080bd887a2218d542feb10533151c4604a
CR-Id: ALPS03856250
Feature: SIM
 2020-01-18 10:00:51 +08:00
Allen Chu
561fad2a70 [ALPS03804621] [P migration] Remove old property label 
We never use persist.ril.* at Android P. So, remove it.

MTK-Commit-Id: 6a1943658ce7647e6efd65234252d69e83be1a47

Change-Id: I49d35e81192dfd9707687400bc3f0885cde16940
CR-Id: ALPS03804621
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
 2020-01-18 10:00:38 +08:00
yuhui.zhang
c2c4d55858 [ALPS03914002] EM:Remove unused property lable 
[Detail]
Remove property lable for following items
1. Old bt ssp property
2. Wifi log property

MTK-Commit-Id: 35a20d1cc097301f05a69e00bc209b597f3d6539

Change-Id: Iffa2a958cce998b7e020696ceb99667f1b7b5891
CR-Id: ALPS03914002
Feature: Engineering Mode
 2020-01-18 10:00:23 +08:00
yuhui.zhang
77655e590e [ALPS03914002] Remove unused sepolicy 
[Detail]
Remove unused sepolicy for EM

MTK-Commit-Id: daf75aeacea74a466f5a5b4bef81173cccf6dc23

Change-Id: I8d6b7924a82e6897eb0ae85273455d73094eb109
CR-Id: ALPS03914002
Feature: Engineering Mode
 2020-01-18 09:58:52 +08:00
Juan Rong
4fef319c9b [ALPS03951067] EM: selinux for battery 
[Detail]
allow EM access battery info

MTK-Commit-Id: cdcee8fe601a984182ded4522acadfe6b70dec66

Change-Id: Ic55a779d3d6883d1dd0828258ff3bf084c8d7706
CR-Id: ALPS03951067
Feature: Fuel Gauge
 2020-01-18 09:58:35 +08:00
yuhui.zhang
7952f3fc53 [ALPS03914002] Add sepolicy rule for EM 
[Detail]
1. Add SEPolicy rule for battery log
2. Add SEPolicy rule for EM setting property

MTK-Commit-Id: e59cf4c98b75739a0e2e58f098174747951bda5d

Change-Id: Ic6cc12fe0a26d2fad5dd6196d598a21fd96b25cb
CR-Id: ALPS03914002
Feature: Engineering Mode
 2020-01-18 09:57:40 +08:00
Lili Lin
05f5d87b88 [ALPS03881723] Workaround to fix build break 
[Detail] Googles new commit
neverallow coredomain from writing vendor properties
cause build break

cdb1624c27

[Solution] Declare system_writes_vendor_properties_violators as workaround

MTK-Commit-Id: 2b19515d2d98945b0aadfbc9043352ae927497f3

Change-Id: I7be59b6811f6c75ea47da205be902417311fe1d0
CR-Id: ALPS03881723
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:56:13 +08:00
Juan Rong
e405561d06 [ALPS03886705] EmCamera:sytemproperty name change 
[Detail]
P migration: System property name change,
related SELinux need change too.

MTK-Commit-Id: f71582111ca7952637d39f49d8dccebdc933e299

Change-Id: Id0afb83774b37a23dfdcb8c85ccbd79310ad20e3
CR-Id: ALPS03886705
Feature: Engineering Mode
 2020-01-18 09:55:49 +08:00
yuhui.zhang
d442f052ed [ALPS03914002] Add property sepolicy rules 
[Detail]
Add property sepolicy rules for EM

MTK-Commit-Id: 33df3c32e9e188bb4f236aac89468a932c35aa5b

Change-Id: Iac21945023892e8cfa9bec9e21bbaf70cbe547dc
CR-Id: ALPS03914002
Feature: Engineering Mode
 2020-01-18 09:46:58 +08:00
mtk14723
681f5b91de [ALPS03900296] EM move xcap system property to bsp 
[Detail]
EM move xcap system property from basic to bsp

MTK-Commit-Id: 101ad6522cf582f548e53260346a441b80acddf4

Change-Id: If70507ef90c5a76c9fc66b1d4cc8d230329a5428
CR-Id: ALPS03900296
Feature: Engineering Mode
 2020-01-18 09:44:13 +08:00
Dom Lin
f0be2264f5 Merge "[ALPS03894499] Modify SELinux policy" into alps-trunk-p0.basic 
Change-Id: I3dfd8d985ec7e86a3cace143296434e7ef97e16a
MTK-Commit-Id: 9c6815b0936f900f579a85947be0674836f1aefb
 2020-01-18 09:41:25 +08:00
ILEX Lin
85b71fe67d [ALPS03894499] Modify SELinux policy 
[Detail]
Remove "allow radio debugfs_tracing:file write"

MTK-Commit-Id: 793d7934f1412512906eaba15bf7c86357a350bc

Change-Id: I02065c831a4dfb0bb26a267469f8a48b2562ed2e
CR-Id: ALPS03894499
Feature: NFC Chipset Capability
 2020-01-18 09:41:15 +08:00
Allen Chu
64d6f4722e [ALPS03804621] [P migration] Add property context 
[Detail]
Add the following prefix property to vendor_radio_prop:
vendor.ril.
ro.vendor.ril.
vendor.gsm.
persist.vendor.radio

And declare permission at te file.

MTK-Commit-Id: 2754547c48d8cb78008c8b59e01d43e8d242813a

Change-Id: I593d7d1cdaf0caa5a92c65d0f7b03591cc8cbac8
CR-Id: ALPS03804621
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
 2020-01-18 09:39:37 +08:00
dengwei.xu
05776353bd [ALPS03830074] EM telephony property selinux 
[Detail]
The Basic EM selinux modify

MTK-Commit-Id: 6b4156244ced418aa502dc771ae63d47015c4e66

Change-Id: I01f8927774f3fac7a477a510d4a7d2c265e01f4a
CR-Id: ALPS03830074
Feature: Engineering Mode
 2020-01-18 09:38:35 +08:00
Ming-Pei Hsu
5e4495d7ce Merge "[ALPS03875603] Relabel telephony switch property" into alps-trunk-p0.basic 
Change-Id: I668eca7c355690a730642773663585b2ad981479
MTK-Commit-Id: c1738190079af936773914e5c8a08349459c5e7f
 2020-01-18 09:34:12 +08:00
ming-pei.hsu
9fcff12f5c [ALPS03875603] Relabel telephony switch property 
Relabel global telephony configuration properties.

MTK-Commit-Id: 2666cdeb888a5c7c0e87358766d60857cd3dc896

Change-Id: I317dd786e6ea32087a6866adeb415e35bc5017e1
CR-Id: ALPS03875603
Feature: Telephony feature switch dynamically
 2020-01-18 09:34:04 +08:00
mtk12101
4dc268f514 [ALPS03825066] Fix build error 
[Detail]
1.The types on /sys/ must be associated with the
"sysfs_type" attribute: sysfs_keypad_file
2.sysfs_type only have read permission

[Solution]
1.Change sysfs_keypad_file to sysfs_type
2.Modify the permission to read about sysfs_type

MTK-Commit-Id: 4cf285589167b25623a67c6b951c796846a9a3ad

Change-Id: I3dd516eaf9959611c9a2b003cb3af07a35da5442
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:33:59 +08:00
Allen Chu
7a473d8720 [ALPS03804621] [P migration] Revert "Remove SEPolicy violated" 
[Detail]
Modify file.te to avoid this violated:
type sysfs_keypad_file, file_type,sysfs_type;
==>type sysfs_keypad_file, fs_type;

So, revert this change.

MTK-Commit-Id: d60f20634eecfc97b7286c493884b3bea6d8e875

Change-Id: I9a1cd1d6888e4b9eb2fb1b70a4ad91d256e950c3
CR-Id: ALPS03804621
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
 2020-01-18 09:33:43 +08:00
Allen Chu
f58168abbd [ALPS03804621] [P migration] Remove SEPolicy violated 
[Detail]
Android P adds "never allow" rule for access system file

MTK-Commit-Id: 819e979bea9491adf5fe40d804a9a49ea3931e86

Change-Id: Ie2bc5ce87a9ce0249ec8e4df03a416a7f94cb4d5
CR-Id: ALPS03804621
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
 2020-01-18 09:33:20 +08:00
Bo Ye
5849c224e3 [ALPS03825066] P migration selinux build failed fix 
1. Mark polices which accessing proc/sysfs file system
    2. Add violator attribute to modules violate vendor/system rule.

MTK-Commit-Id: 3954cad7a1428cda694d8428c2235a78aa6e7cc8

Change-Id: I401ae5b87eb9a03f324bef83c6678149606b15a8
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:29:36 +08:00
mtk12101
bbecfaa68b [ALPS03825066] Resolve vendor violates 
[Detail] Google add new neverallows rules on android P,
some rule violate the rules

[Solution] Remove the rules which violate google new rules

MTK-Commit-Id: ff683b4eee0a6dd95ff25fbb6c7d1fc3a79c604d

Change-Id: Iead494212c6adcec234eaef14c83d1f8c7a49deb
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:29:34 +08:00
Chunyan Zhang
37e0caa36e import from mediatek/master to mediatek/alps-mp-o1.mp1 
Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79
MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
 2020-01-18 09:29:32 +08:00