[Detail]
The P version change nvdata path to /mnt/vendor/nvdata.
If want to open fstab when using nvram function,
it needs search policy.
[Solution]
allow xxx mnt_vendor_file:dir search
MTK-Commit-Id: a34d6ff7cf3b1545014a45f5052f7dbddf93808a
Change-Id: I2730d51963d3859008b4a53f06329ef0a23eb8f4
CR-Id: ALPS03841839
Feature: NVRAM Partition
Wlan driver has no permission to read nvram and wifi.cfg, wifi_fw.cfg,
so need to read that in wlan_assistant, and then write it to wlan
driver
MTK-Commit-Id: 1df286414a6fefe023069318bd4e7f14606d9fe1
Change-Id: I5e8adcfeb17b043fedec5bd2d65b25fc58f59bae
CR-Id: ALPS03868216
Feature: [Module]Wi-Fi HAL
[Detail]
We change the nvram path to /mnt/vendor/nvdata in P.
It needs add search policy for fstab copying.
[Solution]
allow nvram_daemon mnt_vendor_file:dir search;
MTK-Commit-Id: 0695da89e80b8c635be5764c5d1ba4088c38a445
Change-Id: I7ee2bd8bc6c16ac8c904e04d1f2a00da421f551e
CR-Id: ALPS03841839
Feature: NVRAM Partition
[Detail]
Relable vendor defined debug property for android P
and label the following property:
1. vendor.debug.sf
2. vendor.debug.hwc
3. vendor.debug.bq
MTK-Commit-Id: 597f4da4e53b1d45c556895e0d85bdb3c6cd80a1
Change-Id: Iaa311f9049a519bd891a45f2b2ca73a61861e353
CR-Id: ALPS03869840
Feature: [Module]SurfaceFlinger/HWComposer
[Detail]
data_between_core_and_vendor_violators is used temporarily. We should
follow Android P SELinux rule to write sepolicy.
[Solution]
Remove data_between_core_and_vendor_violators from files which already
fix SELinux build errors
MTK-Commit-Id: b371583759e781b0fb353f08d27cf7e425ff40fe
Change-Id: Ibdd1d2c175eea0abc502728d3effc5ee1564ee75
CR-Id: ALPS03800946
Feature: Treble
[Detail] Move meta_tst from system to vendor
[Solution]
modify sepolicy/basic
MTK-Commit-Id: 4bac131e38e71904dfc6f69a0b1ec15f46a08881
Change-Id: I571edd67cf3f59c293aa2aa674292380b86fcf38
CR-Id: ALPS03909621
Feature: SP META Tool
[Detail] Because "ro.vendor.net.upload.benchmark.default"
is unlabeled property, so all use it will have name of
vendor_default_prop
[Solution] Need owner to relabel the property of
"ro.vendor.net.upload.benchmark.default"
MTK-Commit-Id: 3a772e2b252536c9bbe9829b75f3464c2df68248
Change-Id: I42f341bf01cea16a16a0e73d13e0c03b5c270dad
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
Google has upgraded drm hidl to version 1.1, need upgrade
all config(device.mk, sepolicy, manifest) to new version.
MTK-Commit-Id: 50b87ab9d8654c2ea1bea22fa9a589fd85481324
Change-Id: I9a36ad250153bcbb446b790bae5942965409fab3
CR-Id: ALPS03916010
Feature: Google Widevine Level1
[Detail]
data_between_core_and_vendor_violators is used temporarily. We should
follow Android P SELinux rule to write sepolicy.
[Solution]
Remove data_between_core_and_vendor_violators from files which already
fix SELinux build errors
MTK-Commit-Id: 6a75842a96d8997bca10caf6ca4d5b4e7e8f68a4
Change-Id: I5e840fdf6b61d44860429a7e5c7e24c9a48a9c75
CR-Id: ALPS03800946
Feature: Treble
allow CCT to set property, and run "MtkEng" mode
MTK-Commit-Id: 1e9d617b4ea425b5201cefc5c44c0a8fe1fc33d6
Change-Id: Icd7312b1dee132110ba4009d31ecb1c365ec8573
CR-Id: ALPS03919865
Feature: Camera Calibration Tuning (CCT) Tool
(cherry picked from commit 71736e24765ee35e4aaa91ac770bda610574fa17)
(cherry picked from commit 4d38e06e9dfbdaec65b725ba7ff6b5671ca82636)
[Detail]
More strictly selinux policy that system process cannot access vendor partition,
unless label the specific vendor lib to same_process_hal_file
[Solution]
Add same-process HAL files and their dependencies
MTK-Commit-Id: 3cb98800bc3a8cda80905c0cba6a4aad1799833a
Change-Id: I0b7f9c536117944f1350bee70a06f02d3db0bfb4
CR-Id: ALPS03869840
Feature: [Module]SurfaceFlinger/HWComposer
[Detail] System processes have no permission to access
vendor_default_prop
[Solution] Add get vendor_default_prop rule for system
processes
MTK-Commit-Id: ad4fb4d8ae4fb38767c16b82ce9d8351f5f59702
Change-Id: I31cf13db6b50a3cff193aa0a34bc1130e5b18942
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
[Detail]
More strictly selinux policy that system process cannot access vendor partition,
unless label the specific vendor lib to same_process_hal_file
[Solution]
Add same-process HAL files and their dependencies
MTK-Commit-Id: 142626c1bf5c65f7781d3c75969cacd86afa938a
Change-Id: I4f6f1be7eef4f013578fe06512ba32e43d107ddf
CR-Id: ALPS03902348
Feature: OpenGL|ES
[Detail]
Refine vibrator sysfs label, using aosp defined device
Moreover, move it to basic folder due to its basic used
MTK-Commit-Id: 41053b65c8c26973005988d1ad14208fff98fde6
Change-Id: I9ed6ece496ea1ffff9f777fb1f90c76638ad979f
CR-Id: ALPS03869354
Feature: [Android Default] Backlight
