30 Commits

Author SHA1 Message Date
Tim Chang
a02af82882 [ALPS04294481] WMT: add sepolicy for wmt_dbg
Add a rule to allow vendor_init have write permission
to proc_wmtdbg.

MTK-Commit-Id: fcdffbb167f1e860b31027357c5249c99b4b0281

Change-Id: I7b74e284ce9d9de1400c59bbf1f3e11188ec5245
Signed-off-by: Tim Chang <tim.chang@mediatek.com>
CR-Id: ALPS04294481
Feature: [Module]WMT Driver
2020-01-18 10:13:25 +08:00
Robbin Chiu
0fc812491c [ALPS04455064] WMT: Setting SEPolicy for coredump mode property
[Solution]
Set SEPolicy for vendor_init to set property

MTK-Commit-Id: d72a1df1f6ef596f306cc5268bd27ed1216eb9a4

Change-Id: Ie6016a873e251e224b8225797ff3451a3ccd2ac9
Signed-off-by: Robbin Chiu <robbin.chiu@mediatek.com>
CR-Id: ALPS04455064
Feature: [Module]WMT Driver
2020-01-18 10:12:34 +08:00
ming-pei.hsu
92ab2e09f7 [ALPS04344579] Add set properties permission for vendor_init
Give set telephony switching related properties for vendor_init.

MTK-Commit-Id: 7e9671dfc5abda29c5a76608d7746c8b2d6aee95

Change-Id: I371f37082ffd4685a6195185a4946b3390428f36
CR-Id: ALPS04344579
Feature: Telephony feature switch dynamically
2020-01-18 10:10:54 +08:00
Sammy-CY Yang
1888305f75 [ALPS04409296] add BT enable SAP profile policy
Enable BT SAP profile by properties rather than static resource overlay in Andorid Q.
Add the selinux rule for this property.

MTK-Commit-Id: 32eeec317227518f6be67c8bacc1aef03a413568

Change-Id: Ide8429240862eb79b24a352272ceaeae3fd09b2a
CR-Id: ALPS04409296
Feature: BT AOSP
2020-01-18 10:10:23 +08:00
Chin-Ting Kuo
403149cf5c [ALPS04098787] kernel_module: allow vendor_init kernel:key search
For kernel module verification support, allow vendor domain to
search kernel keyring.

MTK-Commit-Id: c25aec3cd1af3ce66f252755acf5c72f94de4006

Change-Id: Ia51e0aae1f94c536c03932e4999e0b9324e9d7f3
CR-Id: ALPS04098787
Feature: Secure Boot
2020-01-18 10:07:22 +08:00
anny hu
fd3d83feb7 [ALPS04059139] fix cts issue
[Detail]init.modem.rc set antutu property failed.

[Solution]add set property access for vendor init process.

MTK-Commit-Id: acde0a9b9a3e82843a34a8d92d4077644ca447e9

Change-Id: Ie2d7e124f4f0fdb356b06c81a2f7ad945eefa9cd
CR-Id:ALPS04059139
Feature:[Android Default]Dedicated APN for Tethering
2020-01-18 10:06:44 +08:00
yu.chen
5967cb46f7 [ALPS03894758] Enable Fullscreen modes systemproperty
[Detail]
enable ro.vendor.fullscreen_switch

MTK-Commit-Id: a8a6a1df9e4abd965da8524b04d54195a9e155c6

Change-Id: I81aedc738c173ed0540a6b1fadceb7919c482f1f
CR-Id: ALPS03894758
Feature: Fullscreen Switch
2020-01-18 10:06:24 +08:00
Linger Lee
cf4b6eba6a [ALPS04048779] allow vendor_init to set vold prop
Allow vendor_init to set
ro.crypto.volume.filenames_mode=aes-256-cts

MTK-Commit-Id: 79f6404e4ee263fa252c1350689d1e54138e2388

Change-Id: I686790c93fdc191937e249310a3ad85b665f97d9
CR-Id: ALPS04048779
Feature: File Based Encryption (Direct Boot)
2020-01-18 10:06:21 +08:00
yu.chen
054e883e20 [ALPS04014599] Enable App Resolution Tuner systemproperty
[Detail]
enable ro.vendor.app_resolution_tuner
persist.vendor.dbg.disable.art

MTK-Commit-Id: 6602d8315e245d601a27bb01f7f24685736a42c2

Change-Id: I1907fa852ce7c00a8349c3cf97587fee1bd037b3
CR-Id: ALPS04014599
Feature: APP Resolution Tuner
2020-01-18 10:05:29 +08:00
yu.chen
9611223a28 [ALPS04027708] Enable ANR systemproperty
[Detail]
Enable ANR systemproperty
persist.vendor.dbg.anrflow
persist.vendor.anr.
vendor.anr.autotest

MTK-Commit-Id: eb6a6e8f3803b41347567178f7649ef5c9d2f80e

Change-Id: Ibb530a1d9f5ceca67e39fe2c6980e6807e457b86
CR-Id: ALPS04027708
Feature: ANR Debugging Mechanism Enhancements
2020-01-18 10:05:22 +08:00
Denis Hsu
602af5863d [ALPS04026136] Create symlink, /mnt/sdcard, for meta/factory
Give the selinux permission,
allow vendor_init tmpfs:lnk_file create;

MTK-Commit-Id: ed75b8754a1fb969fa7247652b49d06c5232b2b9

Change-Id: I516a4fac12df9975040109d05be1b2e89509b9b5
CR-Id: ALPS04026136
Feature: Factory Mode
2020-01-18 10:05:21 +08:00
Chen-Yao.Chang
51de544bdc [ALPS04017619] add policy for boost boot perofmrance
[Detail] fix selinux permission

[Solution] add vendor_init "write" proc_perfmgr permission

MTK-Commit-Id: a2917b4a2b759f7465d95a40294916f09535b8d2

Change-Id: I81bec4a989e1a00aa05b5309ba717edc63fa76df
CR-Id: ALPS04017619
Feature: System Performance
2020-01-18 10:05:02 +08:00
mtk81216
b189b5f35a [ALPS03974446] modify vendor_init selinux policy
[Detail]
vendor_init will parse meta_init.rc to ifup lo,which needs some
selinux policy. when meta mode has enabled loopback, gps tool can
run normally

[Solution]
add selinux rule to up lo interface

MTK-Commit-Id: b351d14a284871dae0783f4d48278a1fde515f4d

Change-Id: I962bfc0002a76d34e5366869cb5fea46ae1453da
CR-Id: ALPS03974446
Feature: Location Chipset Capability
2020-01-18 10:04:54 +08:00
Miles Chuang
5f82c9e661 [ALPS03873734] Follow Android P new property rules
[Detail]
Android P add new limitation for property access between
system partition and vendor partition:
1. SET and GET only by system
2. System cannot SET the property which SET/GET by vendor.
3. Allow system and vendor GET the property which SET by vendor.

[Solution]
1. Add new property label mtk_cxp_vendor_prop
2. Modify CXP related SELinux setting

MTK-Commit-Id: 4cac600ed76d413b5aee7ee64a1d6af55aa499d1

Change-Id: I9498840dead36a536acd5d18470f57bf7aec0a7c
CR-Id: ALPS03873734
Feature: Regional Carrier Express Pack
2020-01-18 10:03:48 +08:00
Denis Hsu
1f069644ac [ALPS03891225] Create symlink, /mnt/sdcard, for meta/factory
Give the selinux permission,
allow vendor_init tmpfs:lnk_file create;

MTK-Commit-Id: 31f529ecd4711df63de5a8386b88813595ae4325

Change-Id: I516a4fac12df9975040109d05be1b2e89509b9b5
CR-Id: ALPS03891225
Feature: Multi-Storage
2020-01-18 10:03:40 +08:00
Lili Lin
2197275e79 [ALPS03934986] Remove un-renamed properties
Since Android P, all properties under non_plat/property_contexts
should follow naming rule to add "vendor" prefix, otherwise
VTS will fail.

MTK-Commit-Id: 4563796d8ea83f170097b1ad8fdc3bae0cbae5a1

Change-Id: I0315ae6beefc6f4dd97bf79d217c82b4b7c281e5
CR-Id: ALPS03934986
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:01:54 +08:00
Light Hsieh
54e28a0403 [ALPS03810368] Sepolicy: define rule for ro.vendor.mtk_emmc_support
[Detail]
Define rule for ro.vendor.mtk_emmc_support

MTK-Commit-Id: ecb6dcb6823b088fea26b80aa12d2f6bfbc507bf

Change-Id: If37ce094f1bb06365061bde36f225aa06fc6f424
CR-Id: ALPS03810368
Feature: eMMC Boot Up
2020-01-18 10:00:47 +08:00
Lili Lin
8c75cd68e6 [ALPS03934986] Add mtk_default_prop
1. We have too many config properties set by PRODUCT_PROPERTY_OVERRIDES,
and these properties usually are not sensitive and allow all processes to read.
2. Since Android P, properties should follow naming rule to add "vendor",
and then this will cause properties to be labeled as vendor_default_prop.
By default, coredomain is not granted to read vendor_default_prop.
Actually these properties are read widely from system/vendor processes.
3. So we introduce "mtk_default_prop" type that grant read access to
all processes, including system and vendor.

MTK-Commit-Id: 18077a2cb14b7b1ddadb7000e8abb565f0fd49e3

Change-Id: Ia378db3dbb9d0bf388139be3419e013228c79d6e
CR-Id: ALPS03934986
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:59:13 +08:00
Charles Yen
072a14dd6e [ALPS03951976] PQ:Add PQ Property Permission
Add pq/aal property label & permission.

MTK-Commit-Id: 7ff05d937adde3f2d3c59029e140a640f23212b9

Change-Id: Ib6d9763bb00df0e40c6d77306d5faece7b5d1a00
CR-Id:ALPS03951976
Feature:MiraVision
2020-01-18 09:58:47 +08:00
Muyi Lan
80f841d0dd [ALPS03809072] Set rat config property permission
[Detail]
Set permission for property "ro.vendor.mtk_protocol1_rat_config".

MTK-Commit-Id: 6bf36e9b4dc41769abb6d54a204877df82aa3804

Change-Id: Ie0b31f15e65381d4094bdf2095f8047db1be21fd
CR-Id: ALPS03809072
Feature: Telephony feature switch dynamically
2020-01-18 09:58:25 +08:00
Jason Su
b2d6377d9c [ALPS03950289] Add permission to access GPS properties
[Detail]
Add selinux permissions to access GPS vendor system peroperties.

MTK-Commit-Id: aa97b76d646e13029488cae3aa0feb73a389675c

Change-Id: Icd41d074b1b620f70e5a68c3c02719f773cf2b2f
CR-Id: ALPS03950289
Feature: Location AOSP
2020-01-18 09:58:10 +08:00
guoyi.zhao
134a7ddb7f [ALPS03929399] Rename CT VoLTE system property
[Detail]
Rename CT VoLTE system property and allow other module to access
persist.vendor.mtk_ct_volte_support.

MTK-Commit-Id: bc5a52b6998d941aa12c7532f095d1a8c67d663f

Change-Id: I33881fd6684dc76e148ac4917e5c146f949e24f7
CR-Id: ALPS03929399
Feature: [China Telecom]VoLTE Customization
2020-01-18 09:57:56 +08:00
Stella Yang
e74283f1a5 Merge "[ALPS03878966] Declare label for mtk_ril_mode" into alps-trunk-p0.basic
Change-Id: Ic553ed91687447da5ae9a064e32fdd04afcc3763
MTK-Commit-Id: 7df057e68500af6a428ff2d925ffd5586ae3b2e2
2020-01-18 09:56:33 +08:00
stella yang
0c41f7d408 [ALPS03878966] Declare label for mtk_ril_mode
[Detail]
1. Add label: mtk_ril_mode_prop
2. Add ro.vendor.mtk_ril_mode into the label

MTK-Commit-Id: 68167f299e05a9fc8a11f4d7579c1a62fe2e7575

Change-Id: I3df9fb88b7871506272ec7f020ce2d5ecdf85272
CR-Id: ALPS03878966
Feature: WiFi Calling Service
2020-01-18 09:56:30 +08:00
bo.shang
276c0764fc [ALPS03943443] Modem Log start USB logging fail
Fix SELinux errors:
   1. Set vendor property
   2. Set USB property

[Solution] Add permission

MTK-Commit-Id: f9bea7ca32b8ca70e6f015d786753a43491810aa

Change-Id: I3e7cfc80eb34c3430a059b57afa1474ee49e75b1
CR-Id: ALPS03943443
Feature: Modem Log Tool
2020-01-18 09:55:57 +08:00
Larry Liang
a308bd06d8 Merge "[ALPS03841705] relable the ro.* property of AEE" into alps-trunk-p0.basic
Change-Id: If2ed9f9583e7d466ff1917401fcf69dd7f05227d
MTK-Commit-Id: 6111bda13a76ef18e5974b6c815258882bcba7bd
2020-01-18 09:51:31 +08:00
mtk11285
75d22d6e40 [ALPS03841705] relable the ro.* property of AEE
[Detail] relable the ro.* property of AEE

MTK-Commit-Id: d3a00d0323f1ea56c68c75a3c07e5db649ccf328

Change-Id: Id4038cd4b01622bd955d4845eae9493693ef33b6
CR-Id: ALPS03841705
Feature: Android Exception Engine(AEE)
2020-01-18 09:51:24 +08:00
Lili Lin
98a7fdc4b2 [ALPS03934986] Fix Selinux issue
[Detail]
Command chown system system /mnt/vendor/nvcfg action=post-fs-data (/vendor/etc/init/hw/init.mt6739.rc:138) took 1ms and failed: lchown() failed: Permission denied

[Solution] Add unlabeled permission for vendor_init

MTK-Commit-Id: 511397f101d5d63593199c212888e674e661199d

Change-Id: Ia22badf945b52f76be3176f3081ada35aaada17b
CR-Id: ALPS03934986
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:51:11 +08:00
mtk11285
2d1de9641e [ALPS03841705] aee cant red screen on enforcing mode
[Detail] aee cant red screen on enforcing mode

MTK-Commit-Id: baa0c22ec13f572616eb8d5bcfc35e1dfadf4f02

Change-Id: Ib87249d85e81d60dba28e546902956be43c7d88c
CR-Id: ALPS03841705
Feature: Android Exception Engine(AEE)
2020-01-18 09:50:25 +08:00
Lili Lin
d243f35618 [ALPS03881723] vendor_init: Fix bootup denial
[Detail] vendor_init is new introduced in Android P,
and related policies have not been created yet.

[Solution] Add policies for vendor_init

MTK-Commit-Id: 00dc11bf94cbb7909ef58482d7726ebe8b954782

Change-Id: Ic2286e8e3e67b4005c7e2df18d217275f069f208
CR-Id: ALPS03881723
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:47:51 +08:00