NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,085 Commits 2 Branches 0 Tags
Commit Graph

1085 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Shanshan Guo
1e3c2c02a8 [ALPS04696074] SEPolicy: Fix debugfs path 
[Detail]
In genfs_contexts, /sys/kernel/debug/xxxx
should be genfscon debugfs /xxxx

[Solution]
Modify genfscon rule.

MTK-Commit-Id: a6a9c119776e0c41b36077dac56fcd658f00d1b2

Change-Id: Ic23e10a58558923fbff30500e740ec7955611232
CR-Id: ALPS04696074
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:18:46 +08:00
mtk12101
6d20aad659 [ALPS04737987] Move clearkey and widevine sepolicy to basic repo 
Basic project which need clearkey and widevine will fail to
launch clearkey and widevine process, so we need move clearkey
and widevine related sepolicy to basic repo

MTK-Commit-Id: 889fb14b0d049c0fb53e1f2a45b43a1ba6700f9f

Change-Id: I7b9154b9dcee05be01a2d5f1c7a5f8d365ce4da6
CR-Id: ALPS04737987
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:18:46 +08:00
xiao.liu
c2e8765592 [ALPS04726173] enable AB partition slot 
[Solution]
add sepolicy

MTK-Commit-Id: ec87109470594ffd592fd42a41c11209bdd001f6

Change-Id: Ie016e6bcd93ed4f2c5701b0ef719de8f1f394820
CR-Id: ALPS04726173
Feature: [Android Default] Fastboot
 2020-01-18 10:18:42 +08:00
Adogu Huang
e22f81b608 [ALPS04726978] cam: fix assert in factory mode 
grant CAM_CAL_DRV access in factory mode.

MTK-Commit-Id: d0d09a8d54a5d40c58b05234f03006d75aad03f5

Change-Id: I3a7fc18aae31c41c8ec033c0962ca2828184eef9
CR-Id: ALPS04726978
Feature: Factory Mode
 2020-01-18 10:18:42 +08:00
Huaiming Li
8ed6a9057c [ALPS04719663] add sepolicy rules 
1.dump file: add adsp sepolicy rule for dumping log
2.allow vendor process ro read tracing_on file

MTK-Commit-Id: 954cb9410ded3baa31927881abbff963b5bba56d

Change-Id: Iab86bf588585b7d1b34d1c1fbc6fb5acce833267
CR-Id: ALPS04719663
Feature: Android Exception Engine(AEE)
(cherry picked from commit b0f133c03c3bf22d4794c16f1a2d98d95ad1b70d)
 2020-01-18 10:18:41 +08:00
Johnny Yao
175622c880 [ALPS04363596] WMT: set sepolicy for vendor_init 
set sepolicy for vendor_init

MTK-Commit-Id: bf149e0f2132f3827f4a159ff56c89d56ff71f64

Change-Id: Id7f4e4883c6bc89f78000256d78bf209e6b61684
Signed-off-by: Johnny Yao <johnny.yao@mediatek.com>
CR-Id: ALPS04363596
Feature: [Module]WMT Driver
(cherry picked from commit 7ee51b414cfbeef888ecabc659994144e92108a6)
 2020-01-18 10:18:38 +08:00
hao.wang
6f42a44be5 [ALPS04724423] Add postalgo selinux policy 
Allow to use graphics allocator fd for gralloc_extra

MTK-Commit-Id: b8f8c10636d3686077304ffe6bf21ead1f864945

Change-Id: Ieaa05216c4343eda7b7cda10c6eb6a75c0330208
CR-Id: ALPS04724423
Feature: Camera Application
(cherry picked from commit 95f9b0b32e24984700f33d666dd4521a3209c73a)
 2020-01-18 10:18:35 +08:00
Mike Hsieh
cff428b385 [ALPS04702268] Change sw_sync permission for 3rd party app access 
Change sw_sync permission for 3rd party app use.

MTK-Commit-Id: 756f028f822b28e5863c772c977f3fdfad1eb338

Change-Id: I5f1f4566e8d60b16fd300dc91ddba8cc6aa7e5c4
CR-Id: ALPS04702268
Feature: [Module]MDP Driver
(cherry picked from commit 8d036ea19e62d9f509f1c54d395d4a711b4a4bd7)
 2020-01-18 10:18:34 +08:00
xiao.liu
38b4858be6 [ALPS04726173] Add AB partition some partition RW permission 
[Solution]
add device/mediatek/sepolicy/basic/non_plat/fastbootd.te

MTK-Commit-Id: 5529b3e558d2809977f66e3a37a43c72ad948280

Change-Id: Ie24496994f4a025850b4020066a62f13c1383f1f
CR-Id: ALPS04726173
Feature: [Android Default] Fastboot
 2020-01-18 10:18:30 +08:00
jerry-sc.wu
aecfc15854 [ALPS04735619] Thermal: add file permission 
[Detail]
Add file permission for thermal manager.

MTK-Commit-Id: f28b99158ef677c1370a0bd92fbff8732756512b

Change-Id: I6c871f828fb0dee9f71254f15fb198889c7a0578
Signed-off-by: jerry-sc.wu <jerry-sc.wu@mediatek.com>
CR-Id: ALPS04735619
Feature: Thermal Management
(cherry picked from commit 2a10700b959d147f2db80be8143c2cd6f43ba2a9)
 2020-01-18 10:18:30 +08:00
jerry-sc.wu
673540dbc3 [ALPS04735619] Thermal: modify file permission 
[Detail]
Remove unused sepolicy for security.

MTK-Commit-Id: 9dd692a0415d70888b316552857ccb6fc1a8f8fe

Change-Id: Id3cb597f38aac3629c70384b5b12b291dab60c1d
Signed-off-by: jerry-sc.wu <jerry-sc.wu@mediatek.com>
CR-Id: ALPS04735619
Feature: Thermal Management
(cherry picked from commit 0965c4af39de006e48b35f97cf1f670b72c2bc23)
 2020-01-18 10:18:29 +08:00
xin xu
9a17313658 [ALPS04329540] ccci: add sepolicy rule for ccci_mdinit 
add a init.svc.aee_aedv sepolicy rule.

MTK-Commit-Id: 6777d53c3d3fa914fbf1aefe999eb90db6300e45

Change-Id: I7acfe0fe761b63c6560dffc083162157832aa6a7
CR-Id: ALPS04329540
Feature: Modem Interface Driver
(cherry picked from commit 1e62fd097cee1270807f1e807feecbf313dac750)
 2020-01-18 10:18:29 +08:00
mtk06389
31b3320d92 [ALPS04723934] SEPolicy: Remove phased-out guiext rules 
Remove guiext rules because guiext has been phased out

MTK-Commit-Id: edc7b0828dc540a17dc68a3056b615a31f2e533a

Change-Id: I2eb259de0df187faa4dacb553b900b07f82b20b7
CR-Id: ALPS04723934
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:18:25 +08:00
Juan Rong
a533597f9f [ALPS04725620] [EM] usb/power selinux issue 
Add usb/power path to selinux

MTK-Commit-Id: ad55ebdcbc2f2abd48f74cc7d2ea5b26f2051fcc

Change-Id: I20287cef1ffc4961cf522fbda2ae47236059c564
CR-Id: ALPS04725620
Feature: Engineering Mode
 2020-01-18 10:18:25 +08:00
Eric Chung
4485486a29 [ALPS04685444] GPU: Add selinux policy for gpuservice 
Add selinux policy for gpuservice

MTK-Commit-Id: 88c5d084a571a32f04b801761114e0e0c652822e

Change-Id: I66c3b1be9c8bdc600e0064f9a81f1bf4fe58f984
CR-Id: ALPS04685444
Feature: Vulkan
(cherry picked from commit b7975c41efa9c83e13c25f4580b1f099f170d7af)
 2020-01-18 10:18:21 +08:00
Shanshan Guo
580f64da2c [ALPS04696074] SEPolicy: move contexts to genfs_contexts 
[Detail]
DoRestoreCon will spent more time in Coldboot for sys,proc & debugfs
if their contexts in file_contexts.
Genfscon can reduces time consumption.

[Solution]
Move contexts of sys,proc & debugfs from file_contexts to
genfs_contexts.

MTK-Commit-Id: a5b022f46a3285fa5ab48d418762497d49739948

Change-Id: I4619946e9f7f8f0bcb7503b737bdfac4c014edd1
CR-Id: ALPS04696074
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:18:20 +08:00
Ben Lai
cea90a2052 [ALPS04717735] Rename wifi saps interface property name 
Rename wifi saps interface property name to "ro.vendor.wifi.sap.interface"

MTK-Commit-Id: 247972295f200bae29ff47c82a050e5f076af88d

Change-Id: I1e0e1937be60542fc6dad02420d31f76101e7c54
CR-Id: ALPS04717735
Feature: Wi-Fi Tethering
 2020-01-18 10:18:20 +08:00
mtk06389
f697fb2b40 [ALPS04723934] SEPolicy: Remove phased-out guiext rules 
Remove guiext rules because guiext has been phased out

MTK-Commit-Id: 0684124257af5ca2c55c48473e1568710ce098d4

Change-Id: I8aae89d8dd2388fb9f13a55331de46284e9b97ee
CR-Id: ALPS04723934
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
(cherry picked from commit c8b973fb79f79bff081dae58d665d235bfffc23a)
 2020-01-18 10:18:20 +08:00
bo.shang
c6f62897b6 [ALPS04721702] Save log into data partition 
1. Add SELinux permission

MTK-Commit-Id: 49d711749e59016b1e46233c4569c9d22d957f3d

Change-Id: If172698697fa5005f4548328665ea6c4739315c8
CR-Id: ALPS04721702
Feature: Modem Log Tool
 2020-01-18 10:18:19 +08:00
Shanshan Guo
e045492863 [ALPS04723438] SEPolicy: Remove unused sepolicies of vendor_app 
Remove unused sepolicies of vendor_app.

MTK-Commit-Id: 54bf7fcfcdbc902f7ab59247a5d29c04b20ffbee

Change-Id: I9018da7029b4bff0468237142108624262fa64b9
CR-Id: ALPS04723438
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:18:18 +08:00
Freddy Hsin
a380459549 [ALPS04707932] uncrypt: add permission for bcb setting 
uncrypt needs misc access right to update bcb

MTK-Commit-Id: d3ef46374d3942f0321613bc9f9979a11d1cadc2

Change-Id: I4b6d5e741d4b7aa55186e6b8c44caa11f3209439
CR-Id: ALPS04707932
Feature: [Android Default] SIU (SD Image Update)
(cherry picked from commit c4550748a1461c467ecdc4ff73e7bb06fdd38643)
 2020-01-18 10:18:18 +08:00
MY Chuang
0cd0041269 Merge "[ALPS04701006] mrdump: fix avc denied condition" into alps-trunk-q0.basic 
Change-Id: I274442aef8fa2325b018e4cbb7fd76ed466ffc21
MTK-Commit-Id: bcbbc656d11f8783aa62e624f6b75245fa749131
 2020-01-18 10:18:17 +08:00
MY Chuang
57a8f660be [ALPS04701006] mrdump: fix avc denied condition 
1. fix some avc denied condition caused by mrdump_tool.
2. merge the rule about mrdump in one area.

MTK-Commit-Id: c0d93f9196903a772ff1b318f153701714d28d80

Change-Id: I23082aac2d7b522a9f78426796b94de145374ed5
Signed-off-by: MY Chuang <my.chuang@mediatek.com>
CR-Id: ALPS04701006
Feature: Memory RAM Dump (MRDUMP)
 2020-01-18 10:18:16 +08:00
lena wang
3e9bfe06e1 Merge "[ALPS04714586] Allow factory to access AOSP property" into alps-trunk-q0.basic 
Change-Id: I114bdf787c5f78279a3886ba0b68a7dac92e3758
MTK-Commit-Id: 97721d5dd9e14795782a72623be3778467c5f3c1
 2020-01-18 10:18:14 +08:00
Guobao Wang
2b5f5ceb7d [ALPS04714586] Allow factory to access AOSP property 
Add SELINUX permission to allow factory to access AOSP property
persist.radio.multisim.config

MTK-Commit-Id: c73e634717213512f3a41c9850b7a4320f53b74c

Change-Id: I2a1f4437da9944b9c63876a9caa5549cbe29af27
CR-Id: ALPS04714586
Feature: Factory Mode
 2020-01-18 10:18:12 +08:00
Sophie Wang
68185175ee Merge "[ALPS04714861] dumpstate: add selinux policy" into alps-trunk-q0.basic 
Change-Id: I3ec6585e2f1009c1d895e0f29986ab96bedebfcd
MTK-Commit-Id: 5554d71b82cbce1eac8369783ba1aea0a64ca566
 2020-01-18 10:18:11 +08:00
Huan Tang
943a2db478 [ALPS04714861] dumpstate: add selinux policy 
1.relabel mmcblk1 to sysfs_devices_block in sysfs
2.allow dumpstate access sysfs_devices_block

MTK-Commit-Id: 359f985388d45abc8b47a95ef71fccf72259ee35

Change-Id: I1e83b8f6f6bdba20965b7f976f9589363d28c48d
CR-Id: ALPS04714861
Feature: Android Exception Engine(AEE)
 2020-01-18 10:18:08 +08:00
Jonas Lai
8d8e513025 [ALPS04314391] sepolicy: aee_aedv/dumpstate access to camerahalserver 
Allow aee_aedv/dumpstate to dump debug info from camerahalserver.

- SELinux : avc:  denied  { find } for
  interface=android.hardware.camera.provider::ICameraProvider
  sid=u:r:aee_aedv:s0 pid=23819 scontext=u:r:aee_aedv:s0
  tcontext=u:object_r:hal_camera_hwservice:s0
  tclass=hwservice_manager permissive=0

MTK-Commit-Id: 18210cf3984bd62caa334f28e45bb0f99500bac8

Change-Id: I291450101bd0ea94fca47b592cb1ef7ffb7f1ae4
CR-Id: ALPS04314391
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:18:07 +08:00
Cheng-H Chen
3ae2121560 Merge "[ALPS04709027] ST SE HAL for ST54H (SPI) support" into alps-trunk-q0.basic 
Change-Id: Ied52d15185f1d63bfc940b1f9464e1b5322a2b3c
MTK-Commit-Id: 3a71afeb9fac13a84110a03ecb2ece426ce6d237
 2020-01-18 10:18:06 +08:00
Megad Lu
3be9ba0bce [ALPS04709027] ST SE HAL for ST54H (SPI) support 
[Detail]
New ST NFC stack for Android compatible with native SecureElement service.
Added also SE HAL for ST54H (SPI) support.
SE HAL files are for internal reference only.

MTK-Commit-Id: 1ad8ab131a2acbdf66133db290e4206627a5f50b

Change-Id: Ief43e503b7147ab96185100ae3c02ecb2ce82640
CR-Id: ALPS04709027
Feature: NFC Chipset Capability
 2020-01-18 10:18:02 +08:00
Cheng-H Chen
d78668baa8 Merge "[ALPS04707214] ST NFC HAL 1.2" into alps-trunk-q0.basic 
Change-Id: I1178c94aae2eda7d2dd1c8383d1f2fe272d185fd
MTK-Commit-Id: b9d80ecb9b047afd398522623c08cd114dd59669
 2020-01-18 10:18:00 +08:00
Megad Lu
4d4cdb7208 [ALPS04707214] ST NFC HAL 1.2 
[Detail]
Update for the ST NFC HAL version to 1.2.

MTK-Commit-Id: 7c7f8db4cc98b778cddfddae6679947a6b663270

Change-Id: I1c3544d570631d9d46a617203e68466ed529820b
CR-Id: ALPS04707214
Feature: NFC Chipset Capability
 2020-01-18 10:17:58 +08:00
sin_mingfeilv
53d88ba13c Merge "[ALPS04707246] porting hdmi hidl service" into alps-trunk-q0.basic 
Change-Id: I61666a22c7485f1c2ec593231fe990fb95f32281
MTK-Commit-Id: 9f37e2e99eb79b990663e7a15a56a20c814562b4
 2020-01-18 10:17:57 +08:00
gtk_qingyunmei
060eb640e1 [ALPS04707246] porting hdmi hidl service 
Refactoring hdmi service as hidl service,so that
other process can call hdmi services API.
Add Selinux permission for hdmi hidl service.

MTK-Commit-Id: 0ecef9e52ce92b52413fbecd2b5be492806b8f53

Change-Id: I7f1c5f48d4ae9777acc80436a4af801f32969fac
CR-Id: ALPS04707246
Feature: [Module]Settings
 2020-01-18 10:17:54 +08:00
Hua Tian (田华)
753142662c Merge "[ALPS04709387] Support to catch MCUPM log" into alps-trunk-q0.basic 
Change-Id: I9d160429e50304a82ec83b4c7133126d52ea8eb4
MTK-Commit-Id: 4b4e661646a1ff87863669fd53af94707835bc3c
 2020-01-18 10:17:53 +08:00
hua.tian
608a6fd139 [ALPS04709387] Support to catch MCUPM log 
Add SELINUX rule for MCUPM log.

MTK-Commit-Id: 9fb8d206f37f0fb00581f4417473974c014ff0dd

Change-Id: I7a935534d4975e444b556d133ff222a4c144b5ca
CR-Id: ALPS04709387
Feature: Mobile Log Tool
 2020-01-18 10:17:51 +08:00
Jia-Hua Yang
c0ac513d46 [ALPS04668607] NLO: Add define for nlop device 
Add define for nlop device.

MTK-Commit-Id: 1312261b0c1b3c20ea8f2d6259e4b46257dc947f

Change-Id: Iee00cf9779af3455ff0235fe5482d41b0d7cb8da
CR-Id: ALPS04668607
Feature: Network Latency Optimization
 2020-01-18 10:17:49 +08:00
bo.shang
5eaf34477d [ALPS04710092] Save network log save log in data 
1. Add SElinux permission to save log in data

MTK-Commit-Id: 80d74125ac0c04cb560b2b71bafe89e0d9d7441f

Change-Id: I6f17f70e3530257331331b92bdf095749d64283f
CR-Id: ALPS04710092
Feature: Network Log Tool
 2020-01-18 10:17:49 +08:00
CS Kuo
103246ae55 Merge "[ALPS04669137] wlan: Add support for saps property" into alps-trunk-q0.basic 
Change-Id: I2c6c3b8b764d252e34369a71bdd01a73861245c4
MTK-Commit-Id: a322ccd8fb13bafcd3589663ecd544a6fd1a82da
 2020-01-18 10:17:48 +08:00
Ben Lai
49506ee5cc [ALPS04669137] wlan: Add support for saps property 
Add support for saps property.

MTK-Commit-Id: f5047d8b7abbc4f4adce38301741a91ba53895ca

Change-Id: I9bfaccde83cbd3032714ff09baf974622b67eeae
CR-Id: ALPS04669137
Feature: Wi-Fi Tethering
 2020-01-18 10:17:46 +08:00
Guoyi Qu
b4c0ed52b3 Merge "[ALPS04707995] CTS fail fix" into alps-trunk-q0.basic 
Change-Id: I9041039776d47e42e064ac126e154b24492c6769
MTK-Commit-Id: 88ff0b09dbbcc96c825f95a69d2172193ca856c4
 2020-01-18 10:17:45 +08:00
Guoyi Qu
e1861f520b [ALPS04707995] CTS fail fix 
Move defination to private folder

MTK-Commit-Id: e9fcc4d4a929c928dd475887e6a100a85d641815

Change-Id: I34fc6d2f3c96f8ab9d53f840da53465f7b79e9cf
CR-Id: ALPS04707995
Feature: Connsys Log Tool
 2020-01-18 10:17:40 +08:00
Larry Liang
30cede8986 Merge "[ALPS04642542] update sepolicy rules for dumping kmemleak file" into alps-trunk-q0.basic 
Change-Id: I8d39195bf5e8f73101d1fa350c4124fba4ff1165
MTK-Commit-Id: 3331b590249be0d60f51d699767152445d7cd3ce
 2020-01-18 10:17:38 +08:00
Huaiming Li
fc904e056e [ALPS04642542] update sepolicy rules for dumping kmemleak file 
add new sepolicy rules for dumping kmemleak file into manual DB

MTK-Commit-Id: bbc72864526fe28df5f9278c4250a152fbe94515

Change-Id: Ie59c50451d3e7b00500a11eab43b99004d0b543c
CR-Id: ALPS04642542
Feature: Android Exception Engine(AEE)
 2020-01-18 10:17:36 +08:00
Yifei Qiao
ed15da7571 Merge "[ALPS04700799] Align keymanager sepolicy with p0.mp6" into alps-trunk-q0.basic 
Change-Id: I525d8f1f9893ac348145cd8f1e063a721091f288
MTK-Commit-Id: 90ca8ed634df094a119de00fe68120697b59c085
 2020-01-18 10:17:35 +08:00
Yifei Qiao
9708912e27 [ALPS04700799] Align keymanager sepolicy with p0.mp6 
Align keymanager sepolicy with p0.mp6

MTK-Commit-Id: 24a187bc32e2be7663abb880c07659834d71f4b0

Change-Id: Ia98525be2155dcf3261633d1e6c25a775426068d
CR-Id: ALPS04700799
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:17:31 +08:00
Tehsin Lin
fe23144194 Merge "[ALPS04696977] Boot cleanup" into alps-trunk-q0.basic 
Change-Id: I09561e879d0f0a6ee806d2f29e67d21e05da2a05
MTK-Commit-Id: 0f80c7aff9d129bf769c82cb4084aedfbfe33f52
 2020-01-18 10:17:29 +08:00
mtk10008
41e2472935 [ALPS04696977] Boot cleanup 
[Detail]
Android Q has more restrictions, for example vendor cannot access
/data unless than (/data/vendor), etc...
Clean up boot fail items

MTK-Commit-Id: 8cbf5c73063c73463d25f6f14dc344fecbb7dc77

Change-Id: I540a6f2cfbaa87e1ffefbf9968a433dea2ccc50b
CR-Id: ALPS04696977
Feature: build process
 2020-01-18 10:17:25 +08:00
Huaiming Li
0e69d03d37 [ALPS04697232] fix google dumpstate avc error 
[Detail]
mmcblk1 stat file avc error and proc last_kmsg avc error

[Solution]
add dumpstate sepolicy rule

MTK-Commit-Id: 4d3e60120a2049f9e6f4e7ce9e2f835c2bb993ca

Change-Id: I6e1e63eb719aa8b7b4d0a86043bd0bce637a638f
CR-Id: ALPS04697232
Feature: Android Exception Engine(AEE)
 2020-01-18 10:17:23 +08:00
Peng Zhou
2994db624c Merge "[ALPS04697232] msdc: label mmc1 in sysfs" into alps-trunk-q0.basic 
Change-Id: Ib12bc9c84519575922c5432a2e1e0487c4a10048
MTK-Commit-Id: d856b1ab48d980b6060ab451985418645fffb9b0
 2020-01-18 10:17:23 +08:00