23 Commits

Author SHA1 Message Date
Juju Sung
12bc2025e2 [ALPS04239425] Sepolicy: fix undefined type declration
[Detail]
Unknown type:untrusted_v2_app,alarm_device,qtaguid_proc,mtd_device
Duplicated type:proc_slabinfo

MTK-Commit-Id: 11ccfcffb994452eb58a697e94a8da748ac73933

Change-Id: I2e847041d14d6b6613044cfaa98f242b7fd9381a
CR-Id: ALPS04239425
Feature: Build System
2020-01-18 10:08:05 +08:00
mtk11515
4990fac4dd [ALPS04085854] make service auto run
[Solution] Make service auto run.

MTK-Commit-Id: 5e7859bac9dd91730634cfa9623936ee8f630fef

Change-Id: I6ae5c40a6d12d077bfe8093cdf7f4d9b32698a82
CR-Id: ALPS04085854
Feature: MTKLogger
(cherry picked from commit a8d2a91b7b056b3825e55dbbad4045dff361d08e)
2020-01-18 10:06:54 +08:00
mtk12101
f20ee5e7ab [ALPS04017619] SELinux policy rule optimization
Spending more bootup time after label kernel interface node
in file_contexts, there is another way to label kerner interface
node on genfs_contexts file. When move the label rule to
genfs_contexts file, the bootup time will speed more than 500ms.

MTK-Commit-Id: e237c9367e74f2953b843cc9224a98b4e7cfddbc

Change-Id: I1a1e369c3eaaf359c3bf7c051793a3ffba4c71fc
CR-Id: ALPS04017619
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:06:36 +08:00
mtk11285
7f6df66a44 [ALPS04056497] cts testVendorTypeViolators case fail
[Detail] aee_aedv_exec is defined in system.img, and when AOSP system.img
is replaced, cts will fail if aee_aedv_exev is referenced in vendor.img.

MTK-Commit-Id: 178b71c788561cea1336d2c62b67dd324ecf6e8b

Change-Id: I200ff7cd55597de05d5412677b140809e941a192
CR-Id: ALPS04056497
Feature: Android Exception Engine(AEE)
2020-01-18 10:06:12 +08:00
Juju Sung
1457d484c4 Merge "[ALPS03998186] Treble: Fix selinux issue for booting with GSI" into alps-trunk-p0.basic
Change-Id: I820b3784907771fec7f06ed07d771daf3de30c9e
MTK-Commit-Id: d1df5b415bc9376c099e38d7ccaa6db58bd64fdb
2020-01-18 10:04:14 +08:00
Sam-KY Lin
da660a3653 [ALPS03998186] Treble: Fix selinux issue for booting with GSI
[Detail]
SEPolicy rule that put in plat_private folder will be placed in system image.
So, It will be overwrited after flashing GSI.

[Solution]
Move MTK rules to non_plat folder instead which will be placed in
vendor image.

MTK-Commit-Id: 91e5023b67f0ce18e5e364adce5da5413c71fc69

Change-Id: I372b059e44c4bbfd6d4a92a790846b2228213b88
CR-Id: ALPS03998186
Feature: Treble
2020-01-18 10:04:12 +08:00
dengwei.xu
12c8c8e1f4 [ALPS03992559] EM HIDL - selinux
Add selinux support for HIDL

MTK-Commit-Id: f58b6fd1c6c053780475ad44ac648f6231af0d94

Change-Id: I77a9bdffbcb8b837e78055ef8bfb9b9d328232b2
CR-Id: ALPS03992559
Feature: Engineering Mode
2020-01-18 10:04:08 +08:00
Chaoran Zhang
c30a82525d [ALPS03872369] Add lbs_dbg selinux policy
[Detail]
Add lbs_dbg selinux policy

MTK-Commit-Id: c316e3908f5d5ddbf8f543ef08a4759159b798ba

Change-Id: Id6311f353df61ca0fa9a108c832d790b228a5bba
CR-Id: ALPS03872369
Feature: Location Chipset Capability
2020-01-18 10:03:58 +08:00
Lili Lin
56b7e390c4 [ALPS03959715] move audio-daemon to vendor
1. Per customer request, move audio-daemon to vendor partition.
2. Implement GetVolumeIndex

MTK-Commit-Id: 4f61171696528b80f9973cb1e3820c9f91116755

Change-Id: Id82b004a39b1217b543c42b9f66de72fb1f76a59
CR-Id: ALPS03959715
Feature: Audio Tuning Tool
2020-01-18 10:02:48 +08:00
Chang-An Chen
862cd6725f [ALPS03869354] fix tpd auto test fail in factory mode
[Detail]
Fix tpd auto test fail in factory mode due to sysfs nodes
are not allowed to read directly.

[Solution]
update touch setting sysfs policy and add to factory mode

MTK-Commit-Id: d8733ca0938653098f5ec1f5462c1723d8f67894

Change-Id: I3fb6a46cfbf02fe050174501a2606404a53bb2ad
CR-Id: ALPS03869354
Feature: [Android Default] CapTouch
2020-01-18 09:59:45 +08:00
Chunlan Wang
c93290f067 [ALPS03932298] Factory Mode: move to vendor partition
[Solution]
Factory mode should build in vendor partiton, so move
factory from system partition to vendor partition

MTK-Commit-Id: c55354593a97aed3af9d0b2584037d03d3d2669c

Change-Id: I5a607b60f9ac974380c5e440a6fa0c51797d6b1b
CR-Id: ALPS03932298
Feature: Factory Mode
2020-01-18 09:58:07 +08:00
Denis Hsu
756781b45f Merge "[ALPS03943904] Act storagemanagerd as vold context" into alps-trunk-p0.basic
Change-Id: Iad441b1c1dae1037468921f9fb4ea0260abc0f67
MTK-Commit-Id: 773b91887f849e607c7a27d460eb8935e8e09c60
2020-01-18 09:57:27 +08:00
Denis Hsu
0b03f73f0c [ALPS03943904] Act storagemanagerd as vold context
[Detail]
In order to meet selinux limitation, storagemanagerd act as
vold context to mount storages

[Solution]
Add the following line in file_contexts.
/system/bin/storagemanagerd u:object_r:vold_exec:s0

MTK-Commit-Id: 0b309fd0afc84f3da0ea91a324dca6f824366537

Change-Id: I68e568b8e7d37d218ae88e82cdd509c32abaea66
CR-Id: ALPS03943904
Feature: Mobile Log Tool
2020-01-18 09:57:15 +08:00
Linger Lee
b4490de2ae [ALPS03946137] vibrator: fix selinux issue
[Detail]
Add new path for P0

MTK-Commit-Id: ea1afedcb6f95a885827b002df7f6f2ea5328c77

Change-Id: Iea0ba7fcafaac70c8ec3980fc0a4753b7cbbbc91
CR-Id: ALPS03946137
Feature: [Module]Vibrator
2020-01-18 09:56:52 +08:00
Dian Wang
39aae26920 Merge "[ALPS03909621] Move meta_tst" into alps-trunk-p0.basic
Change-Id: I8bf77adeabb1e8c9cb670d08f2e9c7547e3545c7
MTK-Commit-Id: 2d248dc848d56e791912f2ca6c3d17650b1e558f
2020-01-18 09:50:42 +08:00
Dian Wang
b84e8c94d9 [ALPS03909621] Move meta_tst
[Detail] Move meta_tst from system to vendor

[Solution]
modify sepolicy/basic

MTK-Commit-Id: 4bac131e38e71904dfc6f69a0b1ec15f46a08881

Change-Id: I571edd67cf3f59c293aa2aa674292380b86fcf38
CR-Id: ALPS03909621
Feature: SP META Tool
2020-01-18 09:50:34 +08:00
Chang-An Chen
5e3fcfb472 [ALPS03869354] refine vibrator sysfs label
[Detail]
Refine vibrator sysfs label, using aosp defined device
Moreover, move it to basic folder due to its basic used

MTK-Commit-Id: 41053b65c8c26973005988d1ad14208fff98fde6

Change-Id: I9ed6ece496ea1ffff9f777fb1f90c76638ad979f
CR-Id: ALPS03869354
Feature: [Android Default] Backlight
2020-01-18 09:48:04 +08:00
mtk14717
dd229ac506 [ALPS03853366] Fix kisd sepolicy issue for android p[1/3]
[Detail]
Move kisd from system to vendor and add keymanage hidl
[Solution]
Modify related sepolicy in device/mediatek/sepolicy/basic

MTK-Commit-Id: c1826ac0bdcc18a4e6d3298e73514801a35a09ad

Change-Id: Iee4b65ba5addc5a21de53e76d3bb092e2f37ab01
CR-Id: ALPS03853366
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:45:51 +08:00
Larry Liang
2e97184a4b Merge "[ALPS03841705] modify aee_core_forwarder selinux rule" into alps-trunk-p0.basic
Change-Id: I4bad1d381c0ec3b1e76f1bc7a5ae7ae68ad8add9
MTK-Commit-Id: b01515bb610c7a0c60117c97d4f98b5c9f882071
2020-01-18 09:40:46 +08:00
mtk11285
07c11d89ba [ALPS03841705] modify aee_core_forwarder selinux rule
[Detail]
transfer aee_core_forwarder form /vendor/bin to /system/bin,
so modify aee_core_forwarder selinux rule.

[Solution]

MTK-Commit-Id: 5a583b375a0d33032e8004e1818f05c75363e4f5

Change-Id: I9ff1d0b5d521ce2f09780146f6b75c5378d03d4d
CR-Id: ALPS03841705
Feature: Android Exception Engine(AEE)
2020-01-18 09:40:34 +08:00
mtk33297
1cbaa678fe [ALPS02333452] Android p selinux change
[Detail]
Android has defined neverallow rules
to restrict direct access to system files.
We need to have a custom label for each policy.

[Solution]
Define custom label for drmserver

MTK-Commit-Id: c84c43b87a6ac2651a0562b8818bc66516e4a50b

Change-Id: Ide4fc49628508aee77e67f3213749210430153a3
CR-Id: ALPS02333452
Feature: OMA DRM V1.0
2020-01-18 09:38:07 +08:00
Bo Ye
4dc7f49e69 [ALPS03825066] Mark file context to fix build fails
Should add vendor_file_type for vendor files, and
    add core_data_file_type for system files. Vendor files
    and system files are differented by file path.

MTK-Commit-Id: 602eb35b36c658789e093e2730b16b9b5c892c0f

Change-Id: Ibacc08427f332741f12757c66ecbb8ce91b76416
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:29:36 +08:00
Chunyan Zhang
37e0caa36e import from mediatek/master to mediatek/alps-mp-o1.mp1
Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79
MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
2020-01-18 09:29:32 +08:00