NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
893 Commits 2 Branches 0 Tags
Commit Graph

15 Commits

Author SHA1 Message Date
hua.tian
270eab4eb8 [ALPS04649268] Save mobile log in data partition in meta mode 
Add SELINUX policy for mobile_log_d to save log in /data/debuglogger
and for getting log from adb.

MTK-Commit-Id: 8775f10bd89be7ac112cbc56daf422814f0f385f

Change-Id: I39e5e1d0ccb2381ef302c187ff83a9e9cb0fa959
CR-Id: ALPS04649268
Feature: Mobile Log Tool
 2020-01-18 10:14:56 +08:00
Stephen Chen
246e5b5057 [ALPS03738758] Audio: Add Hifi3 adsp device info 
[Detail]
Add sepolicy access right for Hifi3 adsp device.
Mobilelog and AED will need these access right.

MTK-Commit-Id: 06ac39d7cebbab2bcb3468fcf14f19b7e1489819

Change-Id: Ic834ac687b4423500ef6036824a6d6f75e57ccb3
CR-Id: ALPS03738758
Feature: [Module]Audio OpenDSP
 2020-01-18 10:05:34 +08:00
Stella Yang
a93a104f36 Merge "[ALPS03908242] Add SEPolicy" into alps-trunk-p0.basic 
Change-Id: Ic71ee5efa3940cc23ffe986e7443e23cb764fa09
MTK-Commit-Id: 614239ade50253dd01d18e9e2710712408e9a287
 2020-01-18 10:02:53 +08:00
Cheng-H Chen
5925ad4321 [ALPS03908242] Add SEPolicy 
[Detail]
System properties like init.svc.vendor.* cannot be dumped
in mobilelog. It is because moblelogd doesnt have permission to
access them. The status of VoLTE-stack cannot be shown in
mobilelog.

[Solution]
Add get permission to access those system properties

MTK-Commit-Id: 73a911ef7934cdb4640809343f64c9815c43f1be

Change-Id: I6c11e5a397826c45ca83cb19ce6cb114aee59f53
CR-Id:ALPS03908242
Feature:VoLTE (Voice over LTE)
 2020-01-18 10:02:51 +08:00
Yuxian Xu
2a22f85be4 [ALPS03976171] fix: Mobilelog writing vendor property 
[Detail]
make Mobilelog its own properties only used in system partition

MTK-Commit-Id: 98c61ef31a7a7a09bed1c492a9dc1e7c1f12c47e

Change-Id: Iceea093a055817f4ccc8350c3543433b83ecc2f2
CR-Id: ALPS03976171
Feature: Mobile Log Tool
 2020-01-18 10:02:44 +08:00
mtk12101
722798a334 [ALPS03982747] Remove unused sepolicy rules 
Some rules is no need any more, need to remove it.

MTK-Commit-Id: 49685f1299d990a7195a2d54b955517d8f2cc699

Change-Id: I4a590ad781589cf94989ce72c88751ac10b82eae
CR-Id: ALPS03982747
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:02:25 +08:00
Lili Lin
05f5d87b88 [ALPS03881723] Workaround to fix build break 
[Detail] Googles new commit
neverallow coredomain from writing vendor properties
cause build break

cdb1624c27

[Solution] Declare system_writes_vendor_properties_violators as workaround

MTK-Commit-Id: 2b19515d2d98945b0aadfbc9043352ae927497f3

Change-Id: I7be59b6811f6c75ea47da205be902417311fe1d0
CR-Id: ALPS03881723
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:56:13 +08:00
Peter Wang
8183941448 [ALPS03901606] eMMC&UFS : Combo feature 
[Detail]
1. Change type name from sysfs_boot to sysfs_boot_mode
2. Add type name sysfs_boot_type

MTK-Commit-Id: 54d5bb31fc8ad1d9ac2e931fe5dc01ef4c1083cf

Change-Id: I445ecdf5a5e334a49ccc1d747daa87f6be351d20
Signed-off-by: Peter Wang <peter.wang@mediatek.com>
CR-Id: ALPS03901606
Feature: UFS Booting
 2020-01-18 09:52:26 +08:00
Yuxian Xu
e5092c50cd [ALPS03886572] Relabel MobileLog properties 
[Detail]
 Relabel MobileLog properties

MTK-Commit-Id: 55ea56fb0008719e0081ff362b3f0867107aaf38

Change-Id: I5546316e039fa28b74946a54dee84fdddfefb2d1
CR-Id: ALPS03886572
Feature: Mobile Log Tool
 2020-01-18 09:51:19 +08:00
mtk12101
b086e609ac [ALPS03825066] Remove unused sepolicy 
[Detail] Because "ro.vendor.net.upload.benchmark.default"
is unlabeled property, so all use it will have name of
vendor_default_prop

[Solution] Need owner to relabel the property of
"ro.vendor.net.upload.benchmark.default"

MTK-Commit-Id: 3a772e2b252536c9bbe9829b75f3464c2df68248

Change-Id: I42f341bf01cea16a16a0e73d13e0c03b5c270dad
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:50:11 +08:00
mtk12101
9cbf8fb766 [ALPS03825066] Fix boot fail 
[Detail] System processes have no permission to access
vendor_default_prop

[Solution] Add get vendor_default_prop rule for system
processes

MTK-Commit-Id: ad4fb4d8ae4fb38767c16b82ce9d8351f5f59702

Change-Id: I31cf13db6b50a3cff193aa0a34bc1130e5b18942
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:48:37 +08:00
Yuxian Xu
af8b6473d2 [ALPS03886572] Mobile Log selinux rule porting 
[Detail]
Mobile Log selinux rule porting:
1. fix the violation on P
2. relable some kernel interfaces.

MTK-Commit-Id: 4108ed13f3e7693c3642b6f073c5444f133b3c38

Change-Id: I1fac185779510f10b9b94bdf6ec40573237d846a
CR-Id: ALPS03886572
Feature: Mobile Log Tool
 2020-01-18 09:37:45 +08:00
Bo Ye
3ace839be3 [ALPS03825066] Mark file context to fix build fails 
Restore the policies accessing files labeled
    as proc_xxx or sysfs_xxx, but there are some
    exceptions for coredomain process, such as
    meta_tst,dump_state,kpoc_charger

MTK-Commit-Id: 7953b5203bb3cac099c3326d330643b4cd73746d

Change-Id: I4b16c09c352891783e837bea370c264966ca6d13
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:29:41 +08:00
Bo Ye
5849c224e3 [ALPS03825066] P migration selinux build failed fix 
1. Mark polices which accessing proc/sysfs file system
    2. Add violator attribute to modules violate vendor/system rule.

MTK-Commit-Id: 3954cad7a1428cda694d8428c2235a78aa6e7cc8

Change-Id: I401ae5b87eb9a03f324bef83c6678149606b15a8
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:29:36 +08:00
Chunyan Zhang
37e0caa36e import from mediatek/master to mediatek/alps-mp-o1.mp1 
Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79
MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
 2020-01-18 09:29:32 +08:00