NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
982 Commits 2 Branches 0 Tags
Commit Graph

982 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Sokonisa Wei
211b424c1e Merge "[ALPS04419954] sync code from android p" into alps-trunk-q0.basic 
Change-Id: I39ab50fef0f43ce30d520809713e886a0fa88b43
MTK-Commit-Id: 2afafca07620f6de79a9311210f0ff33c8193c59
 2020-01-18 10:11:23 +08:00
HungWen Hsieh
2278c51caa [ALPS04419954] sync code from android p 
[Detail]
sync code from android p

MTK-Commit-Id: d0b19b83da618bab91caff90dbe9525f3f6a22a3

Change-Id: Ib664dbb0b8a1b69012fc81a2ad1bde770ccf478b
CR-Id:ALPS04419954
Feature:[Android Default] Camera Application Basic Functions
 2020-01-18 10:11:22 +08:00
Chang-An Chen
a9a3b6ecef Merge "[ALPS04388343] add selinux label for super partition" into alps-trunk-q0.basic 
Change-Id: I649efbc60f05a10c75b9b77df3ea02f6dc4cb5f3
MTK-Commit-Id: f48fa79698750ccb5823a1ad23f1ae52027ed316
 2020-01-18 10:11:20 +08:00
Chang-An Chen
f5a260cb8f [ALPS04388343] add selinux label for super partition 
Add selinux label for super partition

MTK-Commit-Id: b32e5dcbb09628fd0272c0752e434e5e081420c4

Change-Id: I90b05a2e6a46608d56c67726e6f752c9947c360a
CR-Id: ALPS04388343
Feature: [Module]Partition
 2020-01-18 10:11:18 +08:00
Larry Liang
6247cd3587 Merge changes I4981c061,Ifc1ca446 into alps-trunk-q0.basic 
* changes:
  [ALPS04383536] debugfs_tracing_debug allow rule
  [ALPS04383536] AEE: add some new rules

Change-Id: I2fc6397bbdecfa58abec7702838f461560082fb7
MTK-Commit-Id: 1c3d1f9a790848826c31aef5ccfc23c410d90686
 2020-01-18 10:11:17 +08:00
Huaiming Li
2cd4f92785 [ALPS04383536] debugfs_tracing_debug allow rule 
add debugfs_tracing_debug allow rule for aee_aedv

MTK-Commit-Id: b41cff1758cf4f62b8e177cb51f885056b476f17

Change-Id: I4981c061795d745628eae68f56b8697990f8005f
CR-Id: ALPS04383536
Feature: Android Exception Engine(AEE)
 2020-01-18 10:11:12 +08:00
Huaiming Li
6572ac2fa3 [ALPS04383536] AEE: add some new rules 
add some new rules for not exit files in basic/non_plat/,
allow dumpstate to open/read files

MTK-Commit-Id: 7d8021e582f9c10b7f9574f4fcdadee0be5d3c99

Change-Id: Ifc1ca446ce6cd40e36835acaf52ca5a12efedcdb
CR-Id: ALPS04383536
Feature: Android Exception Engine(AEE)
 2020-01-18 10:11:11 +08:00
Sharon Feng
059dc2118b Merge "[ALPS04416069] add sepolicy for streaming playback" into alps-trunk-q0.basic 
Change-Id: I5de579611c06d8a1af903a9959da04d2e04e5d23
MTK-Commit-Id: 7c7a4485cdc88e4d29a2f10818ff62cfcedd3353
 2020-01-18 10:11:10 +08:00
Jason Hsu
99aeb78cbb [ALPS04416069] add sepolicy for streaming playback 
[Detail] add ioctl sepolicy extension for
         mediaserver and platform_app

MTK-Commit-Id: 3991f29fab0fcb0f710c2f2ca0d0a902982b963a

Change-Id: I49a787c2451b2655a343a73e7f9cf678f1f0bdc1
CR-Id: ALPS04416069
Feature: [Module]Video Driver
 2020-01-18 10:11:09 +08:00
Chunhui Li (李春辉)
23e0248e63 Merge "[ALPS04325589] unlinker libdirect-coredump.so for mediaswcodec" into alps-trunk-q0.basic 
Change-Id: I99704ee06915b5f0f0b497a2a251e0a5406ed4cb
MTK-Commit-Id: 3dbed486470d1099f0d38c1479ed58f610ca39a2
 2020-01-18 10:11:07 +08:00
mtk11285
a96aab6d83 [ALPS04325589] unlinker libdirect-coredump.so for mediaswcodec 
disable AT_SECURE for mediaswcodec

MTK-Commit-Id: 1da6ba52d9df2792d72e999b2bdc591f7d79312f

Change-Id: Ie02830670e05346333edc0dcad972d675d497c1b
CR-Id: ALPS04325589
Feature: Android Exception Engine(AEE)
 2020-01-18 10:11:02 +08:00
Denis Hsu
50ed5a3026 [ALPS04348647] Implement lazy hidl for nvram 
Implement lazy hidl for nvram

MTK-Commit-Id: da2bab99d1bd0f9e68f97a24242828e47a79d3b5

Change-Id: Ie8723938223349b19a697d1f367327181eee5f6a
CR-Id: ALPS04348647
Feature: NVRAM Partition
 2020-01-18 10:11:01 +08:00
Huan Tang
46302b2c36 [ALPS04414221] msdc:add permission for sdcard 
add ioctl permission for sdcard in factory mode

MTK-Commit-Id: 79229bd04c17e617dc40b00fa178648fe37fec0b

Change-Id: I9641b36a26c79499a92aeee37ff3e72c0fe5e510
CR-Id: ALPS04414221
Feature: Factory Mode
 2020-01-18 10:11:01 +08:00
May Huang
e072982e03 Merge "[ALPS04328846] power: remove redundant setting" into alps-trunk-q0.basic 
Change-Id: Id57cb9d4b93289d57dff6be51c38a692435cd7d1
MTK-Commit-Id: ff09fea940bdd394fcd0281f64442d146ce66613
 2020-01-18 10:11:00 +08:00
May Huang
985baf3ef3 [ALPS04328846] power: remove redundant setting 
[Detail]
remove permission to access su, its redundant setting

MTK-Commit-Id: f217e0fd57190661d49f53eeddbc62f481127665

Change-Id: I9dad7652e5ef7e1c8a8343d495f17c478370055a
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:10:55 +08:00
ming-pei.hsu
92ab2e09f7 [ALPS04344579] Add set properties permission for vendor_init 
Give set telephony switching related properties for vendor_init.

MTK-Commit-Id: 7e9671dfc5abda29c5a76608d7746c8b2d6aee95

Change-Id: I371f37082ffd4685a6195185a4946b3390428f36
CR-Id: ALPS04344579
Feature: Telephony feature switch dynamically
 2020-01-18 10:10:54 +08:00
albert-zl.huang
11842c24f8 [ALPS04378873] suspend: allow ftm do block suspend 
Allow ftm do block suspend

MTK-Commit-Id: e77e031b2c9e1075e185dcdadedb752538688730

Change-Id: I0cb75b5f7caa1852b72a28cc512b22700785e615
CR-Id: ALPS04378873
Feature: Power Management
 2020-01-18 10:10:53 +08:00
Jih-Cheng Chiu (邱日成)
601860bd03 Merge "[ALPS04393149] Add needed sepolicy for SF/HWC to use GED" into alps-trunk-q0.basic 
Change-Id: Id0d8b8b886080efbb2c393ad0624d62ebf7505c7
MTK-Commit-Id: 544f3f2c23ace212f051ac90b83d3c12871bc3d2
 2020-01-18 10:10:53 +08:00
Kane Jhang
c5181b4250 [ALPS04393149] Add needed sepolicy for SF/HWC to use GED 
[Detail] Add GED ioctl selinux policy to let SF and HWC
         that can use GED.

[Solution] Add needed sepolicy

MTK-Commit-Id: 26f1f2fa7735d91ccbb51643b1ed7d200a013988

Change-Id: Ie20589d100473578a8fc824d57718537d7102f07
CR-Id: ALPS04393149
Feature: [Module]SurfaceFlinger/HWComposer
 2020-01-18 10:10:51 +08:00
Juju Sung
5756adf040 [ALPS04239425] Fix build from sepolicy change 
The Google change ag/7017729 introduces its own /devices/virtual/net
in system/sepolicy/private/genfs_contents.  Thus, we need this
change to remove our own definition.

MTK-Commit-Id: 795196e337d6451991610a71be6b3dcb06a8850b

Test: Local build
Change-Id: I198fbeb3a4047797d9c01d37b1cd4614202fe66d
CR-Id: ALPS04239425
Feature: Engineering Mode
 2020-01-18 10:10:50 +08:00
Nan Zhao (赵楠)
c20ed36dc6 Merge "[ALPS03809072] Add vendor partition property" into alps-trunk-q0.basic 
Change-Id: I8873802ce975898fbc7b3aae9138cff82391bdf8
MTK-Commit-Id: 9a520b3af0c885c061b88288490c07379ee1314c
 2020-01-18 10:10:49 +08:00
Muyi Lan
19d36b81a9 [ALPS03809072] Add vendor partition property 
Due to we might replace system image to GSI image,
we need to maintain another vendor partition properties
to avoid unexpected errors.

MTK-Commit-Id: 2e80c29b78d158be175d350c14ee804a57e1ad41

Change-Id: I6da5eb3479bb93cbb9c0bdd41fd4c69bffb5dd15
CR-Id: ALPS03809072
Feature: Telephony feature switch dynamically
 2020-01-18 10:10:48 +08:00
YL Wang
02ac3a7894 Merge "[ALPS04294481] WMT: sepolicy adjustment" into alps-trunk-q0.basic 
Change-Id: I4139bacb99ce875feae2b6176bd97c19f7849ef0
MTK-Commit-Id: f7bb53ac352b4dc1baf90669ea96108aeb3f04f9
 2020-01-18 10:10:47 +08:00
Tim Chang
ae4cd2b056 [ALPS04294481] WMT: sepolicy adjustment 
change sepolicy of init for Android Q migration

MTK-Commit-Id: 97e5835a0515110fcf0c5fdef1f8f808b552dab0

Change-Id: I7c2065734270419c1a8eb7d791ba963b95de2763
CR-Id: ALPS04294481
Feature: [Module]WMT Driver
 2020-01-18 10:10:43 +08:00
Shanshan Guo
6e111f454d [ALPS04410351] Add MTK_LICENSE 
[Detail]
Add MTK_LICENSE

MTK-Commit-Id: 75a3255360d17b199543b48fa7dca5f94d12e7a2

Change-Id: I65ded556cf8007a704a3c554d4f16a800fa4afc5
CR-Id: ALPS04410351
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:10:42 +08:00
Shan Zhang
ab3d13a34a Merge "[ALPS04366101] mediacodec process selinux permission" into alps-trunk-q0.basic 
Change-Id: I5281d9da655b812fc77161916ea4a75b483e93a3
MTK-Commit-Id: cce799f6c0527deb1dd8fbe186c93ec40f15cf6d
 2020-01-18 10:10:41 +08:00
Bo Ye
2cb0b653a1 [ALPS04366101] mediacodec process selinux permission 
Need map permission for kernel 4.14

MTK-Commit-Id: 6ea8645273cb9a1642839c1473a9eaf15bb6594b

Change-Id: I31cdb274551457d975d5df6ac401d1254dd05faf
CR-Id: ALPS04366101
Feature: H.264 Decoder
 2020-01-18 10:10:40 +08:00
Joen Chen
09f5c5aeb7 Merge "[ALPS04384473] Add needed sepolicy" into alps-trunk-q0.basic 
Change-Id: I80706cc8d0b2676d803404810a4ccedf7ddf7584
MTK-Commit-Id: bbcff09cf9bfc46aa93a3f337f026a4b454fd453
 2020-01-18 10:10:38 +08:00
Kane Jhang
7ad3357d31 [ALPS04384473] Add needed sepolicy 
[Detail] SurfaceFlinger need to add sepolicy to do ioctl with ged node

[Solution] Add SurfaceFlinger sepolicy

MTK-Commit-Id: 8f848c40c9443a959fe564875aa5046458219ae5

Change-Id: Id88cd8d31f66bbdcb7df6e48127e789d341772ac
CR-Id: ALPS04384473
Feature: [Module]SurfaceFlinger/HWComposer
 2020-01-18 10:10:36 +08:00
Yuhui Zhang
ef8e6d37cd Merge "[ALPS04318555] PMU path change" into alps-trunk-q0.basic 
Change-Id: Ibd34c4fa710371999a4284a0dac344ed082b9583
MTK-Commit-Id: 58b0e3da9605a33bea51d598c1d086533424c2d5
 2020-01-18 10:10:31 +08:00
Juan Rong
d1df7349d6 [ALPS04318555] PMU path change 
PMU path changed, need modify relatd selinux path

MTK-Commit-Id: 9894024d40e75e43fe67405d1cf5fcdd76185eea

Change-Id: I6a30d42d5aacc79947d84dde3d806b205f00c437
CR-Id: ALPS04318555
Feature: Engineering Mode
 2020-01-18 10:10:30 +08:00
Black Chen
4d236156f2 Merge "[ALPS04409296] add BT enable SAP profile policy" into alps-trunk-q0.basic 
Change-Id: I87b2257db7b9141744a71ee44625a58927390a22
MTK-Commit-Id: 50418d8f06f04bda1ce8f9b14e66843ddc9baf30
 2020-01-18 10:10:28 +08:00
Sammy-CY Yang
1888305f75 [ALPS04409296] add BT enable SAP profile policy 
Enable BT SAP profile by properties rather than static resource overlay in Andorid Q.
Add the selinux rule for this property.

MTK-Commit-Id: 32eeec317227518f6be67c8bacc1aef03a413568

Change-Id: Ide8429240862eb79b24a352272ceaeae3fd09b2a
CR-Id: ALPS04409296
Feature: BT AOSP
 2020-01-18 10:10:23 +08:00
Liu Cheng
865fce7f58 [ALPS04277923] SUPL SMS dispatch new feature 
Allow rild access to send SUPL INIT to mnld.

MTK-Commit-Id: c632adb702c3c11b60ee77d28aca477c44d5f6bd

Change-Id: If47a5702cd723e2cc1a6a214e1560ba19ae8c055
CR-Id: ALPS04277923
Feature: [Android Default] Message-SMS framework
 2020-01-18 10:10:22 +08:00
Boru Zhao
9f06829adb [ALPS04394576] MT6739:cameraserver sepolicy issue 
[Detail]
Sepolicy ioctl configure is changed after Q, we modify
cameraserver ioctl configure.

MTK-Commit-Id: 26f6cde989b082ee36067c3e01bdfd1855db046b

Change-Id: I59489c6ee27a9bb7913d0b49cdaa4e281024cb42
CR-Id: ALPS04394576
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:10:22 +08:00
Marx Chiu (邱弘志)
9ab7604179 Merge "[ALPS04401451] Fix ioctl permission issue for cameraserver" into alps-trunk-q0.basic 
Change-Id: Idbceb6f115c78b548cdf10b74b0ca8070682d2cf
MTK-Commit-Id: 8f58167ddaa5256094a029c9d49c28b843769e58
 2020-01-18 10:10:21 +08:00
Michael Lai
682f71fd6d [ALPS04401451] Fix ioctl permission issue for cameraserver 
[Detail] Fix the ioctl permission issue for cameraserver

MTK-Commit-Id: 4c7eba0c71d5bb65f244095ca93596b28ba60ad8

Change-Id: Idca3ad9f37e6aa38375ed008647e81f525a77618
CR-Id: ALPS04401451
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:10:20 +08:00
Kobe Wu
a25d1ca12f [ALPS04400836] Fix SELinux issue 
[Detail]
avc:  denied  { find } for interface=android.hardware.audio::
IDevicesFactory sid=u:r:audiocmdservice_atci:s0 pid=4193 scontext=u:r:
audiocmdservice_atci:s0 tcontext=u:object_r:hal_audio_hwservice:s0
tclass=hwservice_manager permissive=0

[Solution]
hal_client_domain(audiocmdservice_atci, hal_audio)
allow audiocmdservice_atci hal_audio_hwservice:hwservice_manager find;

MTK-Commit-Id: 19954438860104bb7e0036ce92d21429103e6149

Change-Id: Idc7fe552e63aec6e4e1081a0f4681d251b019be3
CR-Id: ALPS04400836
Feature: Audio Tuning Tool
Signed-off-by: Kobe Wu <kobe-cp.wu@mediatek.com>
 2020-01-18 10:10:18 +08:00
Boru Zhao
25996d6511 [ALPS04394576] mt6739:fix camera sepolicy issue 
[Detail]
Add gpu_device:map in non_plat/mtk_hal_camera.te and
non_plat/cameraserver

MTK-Commit-Id: a3544387d9eb532f03a1fd0603f96b9cef46f1cf

Change-Id: Ic3c0e82e87315c29bee5984ae74f579304710c9d
CR-Id: ALPS04394576
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:10:15 +08:00
Chris-YC Chen
112b2a020d [ALPS04257872] sepolicy: mdp-hidl 
add sepolicy for mms while using m4u

MTK-Commit-Id: 431f4e539496a36b144601d8fe9cbfc31ac0aa3f

Change-Id: I7aec7ccdcf48522e6a3cada1a164356a06b0dbbd
CR-Id: ALPS04257872
Feature: [Module]MDP Driver
 2020-01-18 10:10:15 +08:00
Hongxu Zhao
74a77e408a Merge "[ALPS04392816] sensor: add hidl 2.0 architecture" into alps-trunk-q0.basic 
Change-Id: I72e3e71787669fa648d6ebd16b78f8538809b2b1
MTK-Commit-Id: 6ceb53687c0959b82ea3827e52f60c3b22862642
 2020-01-18 10:10:14 +08:00
hongxu.zhao
dd0eaad9fd [ALPS04392816] sensor: add hidl 2.0 architecture 
add hidl 2.0 architecture

MTK-Commit-Id: b0365c02b90b073ac85a1a4ed350967c3f1b1187

Change-Id: I4b17f59113f3085ef6df16814524353862f7d8b5
CR-Id: ALPS04392816
Feature: Sensor Hub
 2020-01-18 10:10:09 +08:00
Jih-Cheng Chiu (邱日成)
99b2e3391e Merge "[ALPS04384473] Remove relabel graphics_debug_prop" into alps-trunk-q0.basic 
Change-Id: Ic744d8a7ced13594f6dc0ca3cdd3d09fb133c3dc
MTK-Commit-Id: f942f2456178ddda3fb66f1bff9fbe79779de518
 2020-01-18 10:10:08 +08:00
Ju-Yi Cheng
2a4126739f [ALPS04384473] Remove relabel graphics_debug_prop 
[Detail] No need to relabel graphics_debug_prop since
no process need to setproperty in runtime

MTK-Commit-Id: d7f0964bc3a857471cd9891ec64dcb225c886d0f

Change-Id: I59baa11790e0dea1652097c6fe0127a25406d046
CR-Id: ALPS04384473
Feature: [Module]SurfaceFlinger/HWComposer
 2020-01-18 10:10:07 +08:00
Archilis Wang
1b7b6d077e [ALPS04385947] Add access rule for property 
mtk_agpsd uses libapmonitor to report info.
libapmonitor needs the access right to hwservicemanager_prop.

MTK-Commit-Id: ce3c3e4f204c2e607c903669601b00720cc1c5f4

Change-Id: I9a241d28ef5f6dd000cd350c3cdf05930aa9bf26
CR-Id: ALPS04385947
Feature: A-GPS
 2020-01-18 10:10:06 +08:00
Andrew Yang
243af8a9aa Merge "[ALPS04385961] RTC: add permission for power-off alarm" into alps-trunk-q0.basic 
Change-Id: I33f8647fe7ae70eb9dab4c49faf033f2a037d05c
MTK-Commit-Id: 6b07f51f7b144a3bc60c0dcc0ee3d957708cb41f
 2020-01-18 10:10:05 +08:00
andrew.yang
b8f0e2db69 [ALPS04385961] RTC: add permission for power-off alarm 
Allow alarm manager to access /dev/alarm for power-off
alarm function.

MTK-Commit-Id: 01de6e5669b8e97c12818256915885dc32c45b9f

Change-Id: I5e3759e9d11357c3f302aa2557dc71de80476262
CR-Id: ALPS04385961
Feature: Power-Off Alarm
 2020-01-18 10:10:03 +08:00
James Hsu
b2cea54f9d [ALPS04296234] mrdump_tool: apply new selinux policy 
[Detail]
Add new selinux policy to fix preallocate file failed

avc denied log
1. ioctl permission denied
mrdump_tool: type=1400 audit(0.0:517): avc: denied { ioctl }
for path="/data/vendor/dumpsys/mrdump_preallocated" dev="dm-0"
ino=1966 ioctlcmd=0x660b scontext=u:r:aee_aedv:s0
tcontext=u:object_r:aee_dumpsys_vendor_file:s0 tclass=file permissive=0

2. open /dev/block/platform/bootdevice/by-name/para fail
[SYSENV]sysenv_get_with_area():317 , get env name=mrdump_output
[SYSENV]get_env_info():217 , initialize
/vendor/bin/mrdump_tool: [libfs_mgr]Warning: unknown flag: resize
[SYSENV]get_partition_path():78 ,
partition path = /dev/block/platform/bootdevice/by-name/para
[SYSENV]read_env_area():136 ,
open /dev/block/platform/bootdevice/by-name/para fail: Permission denied
[SYSENV]get_env_info():238 , read_env_area fail

MTK-Commit-Id: 25a78a9e7e593ba2e376b2e243774d5b4dfc6205

Change-Id: I79c62a0f65e1781ca6d0c2eefe77078d168d146a
Signed-off-by: James Hsu <james.hsu@mediatek.com>
CR-Id: ALPS04296234
Feature: Memory RAM Dump (MRDUMP)
 2020-01-18 10:10:02 +08:00
Qian Dong
311772663d Merge "[ALPS04385687] fix mp3 playback start slowly because of sepolicy" into alps-trunk-q0.basic 
Change-Id: I7213c41ca1441576dbe6d7c2199e8e76277856fa
MTK-Commit-Id: c9a4799508b4216588720540fe3fb86d36b7eb11
 2020-01-18 10:10:01 +08:00
jianying duan
191ebc6318 [ALPS04385687] fix mp3 playback start slowly because of sepolicy 
when open selinux, mp3 playback will start slowly,
it because selinux issue,mediaextractor process cant getservice
and when MtkMp3Extractor call the function
of MediaCodecList:findMatchingCodecs,it will fail.
so,mtkmp3extractors patch cant take effect,
and because of selinuxs limit, mp3 playback start will slowly.

MTK-Commit-Id: 9bb746686dce1176a8a47f1d730c0864bb6b6d52

Change-Id: Iba512638d87ff055a8ddb98853eca956e2ec72d9
CR-Id: ALPS04385687
Feature: [Android Default] MP3 Playback
 2020-01-18 10:09:56 +08:00