NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
890 Commits 2 Branches 0 Tags
Commit Graph

851 Commits

Author SHA1 Message Date
GW Chen
3c4854c9f5 Merge "[ALPS04383692] GPU: GPU HIDL" into alps-trunk-q0.basic 
Change-Id: I93d8b6a0f28f49c517f54df90b7cf0b2a44a8265
MTK-Commit-Id: eaa711f5f9142e1901062874bb3d23447f1d01f0
 2020-01-18 10:11:27 +08:00
GuanWen Chen
01ae15f287 [ALPS04383692] GPU: GPU HIDL 
[Detail]
Add sepolicy for gpu hidl

MTK-Commit-Id: c603f9f321c0f50cf21227787ccc3c35e50e55d2

Change-Id: I7a0ed82e546391a509687ef1b4cf5927cfbefe46
CR-Id: ALPS04383692
Feature: OpenGL|ES
 2020-01-18 10:11:25 +08:00
Sokonisa Wei
211b424c1e Merge "[ALPS04419954] sync code from android p" into alps-trunk-q0.basic 
Change-Id: I39ab50fef0f43ce30d520809713e886a0fa88b43
MTK-Commit-Id: 2afafca07620f6de79a9311210f0ff33c8193c59
 2020-01-18 10:11:23 +08:00
HungWen Hsieh
2278c51caa [ALPS04419954] sync code from android p 
[Detail]
sync code from android p

MTK-Commit-Id: d0b19b83da618bab91caff90dbe9525f3f6a22a3

Change-Id: Ib664dbb0b8a1b69012fc81a2ad1bde770ccf478b
CR-Id:ALPS04419954
Feature:[Android Default] Camera Application Basic Functions
 2020-01-18 10:11:22 +08:00
Chang-An Chen
a9a3b6ecef Merge "[ALPS04388343] add selinux label for super partition" into alps-trunk-q0.basic 
Change-Id: I649efbc60f05a10c75b9b77df3ea02f6dc4cb5f3
MTK-Commit-Id: f48fa79698750ccb5823a1ad23f1ae52027ed316
 2020-01-18 10:11:20 +08:00
Chang-An Chen
f5a260cb8f [ALPS04388343] add selinux label for super partition 
Add selinux label for super partition

MTK-Commit-Id: b32e5dcbb09628fd0272c0752e434e5e081420c4

Change-Id: I90b05a2e6a46608d56c67726e6f752c9947c360a
CR-Id: ALPS04388343
Feature: [Module]Partition
 2020-01-18 10:11:18 +08:00
Larry Liang
6247cd3587 Merge changes I4981c061,Ifc1ca446 into alps-trunk-q0.basic 
* changes:
  [ALPS04383536] debugfs_tracing_debug allow rule
  [ALPS04383536] AEE: add some new rules

Change-Id: I2fc6397bbdecfa58abec7702838f461560082fb7
MTK-Commit-Id: 1c3d1f9a790848826c31aef5ccfc23c410d90686
 2020-01-18 10:11:17 +08:00
Huaiming Li
2cd4f92785 [ALPS04383536] debugfs_tracing_debug allow rule 
add debugfs_tracing_debug allow rule for aee_aedv

MTK-Commit-Id: b41cff1758cf4f62b8e177cb51f885056b476f17

Change-Id: I4981c061795d745628eae68f56b8697990f8005f
CR-Id: ALPS04383536
Feature: Android Exception Engine(AEE)
 2020-01-18 10:11:12 +08:00
Huaiming Li
6572ac2fa3 [ALPS04383536] AEE: add some new rules 
add some new rules for not exit files in basic/non_plat/,
allow dumpstate to open/read files

MTK-Commit-Id: 7d8021e582f9c10b7f9574f4fcdadee0be5d3c99

Change-Id: Ifc1ca446ce6cd40e36835acaf52ca5a12efedcdb
CR-Id: ALPS04383536
Feature: Android Exception Engine(AEE)
 2020-01-18 10:11:11 +08:00
Sharon Feng
059dc2118b Merge "[ALPS04416069] add sepolicy for streaming playback" into alps-trunk-q0.basic 
Change-Id: I5de579611c06d8a1af903a9959da04d2e04e5d23
MTK-Commit-Id: 7c7a4485cdc88e4d29a2f10818ff62cfcedd3353
 2020-01-18 10:11:10 +08:00
Jason Hsu
99aeb78cbb [ALPS04416069] add sepolicy for streaming playback 
[Detail] add ioctl sepolicy extension for
         mediaserver and platform_app

MTK-Commit-Id: 3991f29fab0fcb0f710c2f2ca0d0a902982b963a

Change-Id: I49a787c2451b2655a343a73e7f9cf678f1f0bdc1
CR-Id: ALPS04416069
Feature: [Module]Video Driver
 2020-01-18 10:11:09 +08:00
Chunhui Li (李春辉)
23e0248e63 Merge "[ALPS04325589] unlinker libdirect-coredump.so for mediaswcodec" into alps-trunk-q0.basic 
Change-Id: I99704ee06915b5f0f0b497a2a251e0a5406ed4cb
MTK-Commit-Id: 3dbed486470d1099f0d38c1479ed58f610ca39a2
 2020-01-18 10:11:07 +08:00
mtk11285
a96aab6d83 [ALPS04325589] unlinker libdirect-coredump.so for mediaswcodec 
disable AT_SECURE for mediaswcodec

MTK-Commit-Id: 1da6ba52d9df2792d72e999b2bdc591f7d79312f

Change-Id: Ie02830670e05346333edc0dcad972d675d497c1b
CR-Id: ALPS04325589
Feature: Android Exception Engine(AEE)
 2020-01-18 10:11:02 +08:00
Denis Hsu
50ed5a3026 [ALPS04348647] Implement lazy hidl for nvram 
Implement lazy hidl for nvram

MTK-Commit-Id: da2bab99d1bd0f9e68f97a24242828e47a79d3b5

Change-Id: Ie8723938223349b19a697d1f367327181eee5f6a
CR-Id: ALPS04348647
Feature: NVRAM Partition
 2020-01-18 10:11:01 +08:00
Huan Tang
46302b2c36 [ALPS04414221] msdc:add permission for sdcard 
add ioctl permission for sdcard in factory mode

MTK-Commit-Id: 79229bd04c17e617dc40b00fa178648fe37fec0b

Change-Id: I9641b36a26c79499a92aeee37ff3e72c0fe5e510
CR-Id: ALPS04414221
Feature: Factory Mode
 2020-01-18 10:11:01 +08:00
May Huang
e072982e03 Merge "[ALPS04328846] power: remove redundant setting" into alps-trunk-q0.basic 
Change-Id: Id57cb9d4b93289d57dff6be51c38a692435cd7d1
MTK-Commit-Id: ff09fea940bdd394fcd0281f64442d146ce66613
 2020-01-18 10:11:00 +08:00
May Huang
985baf3ef3 [ALPS04328846] power: remove redundant setting 
[Detail]
remove permission to access su, its redundant setting

MTK-Commit-Id: f217e0fd57190661d49f53eeddbc62f481127665

Change-Id: I9dad7652e5ef7e1c8a8343d495f17c478370055a
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:10:55 +08:00
ming-pei.hsu
92ab2e09f7 [ALPS04344579] Add set properties permission for vendor_init 
Give set telephony switching related properties for vendor_init.

MTK-Commit-Id: 7e9671dfc5abda29c5a76608d7746c8b2d6aee95

Change-Id: I371f37082ffd4685a6195185a4946b3390428f36
CR-Id: ALPS04344579
Feature: Telephony feature switch dynamically
 2020-01-18 10:10:54 +08:00
albert-zl.huang
11842c24f8 [ALPS04378873] suspend: allow ftm do block suspend 
Allow ftm do block suspend

MTK-Commit-Id: e77e031b2c9e1075e185dcdadedb752538688730

Change-Id: I0cb75b5f7caa1852b72a28cc512b22700785e615
CR-Id: ALPS04378873
Feature: Power Management
 2020-01-18 10:10:53 +08:00
Jih-Cheng Chiu (邱日成)
601860bd03 Merge "[ALPS04393149] Add needed sepolicy for SF/HWC to use GED" into alps-trunk-q0.basic 
Change-Id: Id0d8b8b886080efbb2c393ad0624d62ebf7505c7
MTK-Commit-Id: 544f3f2c23ace212f051ac90b83d3c12871bc3d2
 2020-01-18 10:10:53 +08:00
Kane Jhang
c5181b4250 [ALPS04393149] Add needed sepolicy for SF/HWC to use GED 
[Detail] Add GED ioctl selinux policy to let SF and HWC
         that can use GED.

[Solution] Add needed sepolicy

MTK-Commit-Id: 26f1f2fa7735d91ccbb51643b1ed7d200a013988

Change-Id: Ie20589d100473578a8fc824d57718537d7102f07
CR-Id: ALPS04393149
Feature: [Module]SurfaceFlinger/HWComposer
 2020-01-18 10:10:51 +08:00
Juju Sung
5756adf040 [ALPS04239425] Fix build from sepolicy change 
The Google change ag/7017729 introduces its own /devices/virtual/net
in system/sepolicy/private/genfs_contents.  Thus, we need this
change to remove our own definition.

MTK-Commit-Id: 795196e337d6451991610a71be6b3dcb06a8850b

Test: Local build
Change-Id: I198fbeb3a4047797d9c01d37b1cd4614202fe66d
CR-Id: ALPS04239425
Feature: Engineering Mode
 2020-01-18 10:10:50 +08:00
Nan Zhao (赵楠)
c20ed36dc6 Merge "[ALPS03809072] Add vendor partition property" into alps-trunk-q0.basic 
Change-Id: I8873802ce975898fbc7b3aae9138cff82391bdf8
MTK-Commit-Id: 9a520b3af0c885c061b88288490c07379ee1314c
 2020-01-18 10:10:49 +08:00
Muyi Lan
19d36b81a9 [ALPS03809072] Add vendor partition property 
Due to we might replace system image to GSI image,
we need to maintain another vendor partition properties
to avoid unexpected errors.

MTK-Commit-Id: 2e80c29b78d158be175d350c14ee804a57e1ad41

Change-Id: I6da5eb3479bb93cbb9c0bdd41fd4c69bffb5dd15
CR-Id: ALPS03809072
Feature: Telephony feature switch dynamically
 2020-01-18 10:10:48 +08:00
YL Wang
02ac3a7894 Merge "[ALPS04294481] WMT: sepolicy adjustment" into alps-trunk-q0.basic 
Change-Id: I4139bacb99ce875feae2b6176bd97c19f7849ef0
MTK-Commit-Id: f7bb53ac352b4dc1baf90669ea96108aeb3f04f9
 2020-01-18 10:10:47 +08:00
Tim Chang
ae4cd2b056 [ALPS04294481] WMT: sepolicy adjustment 
change sepolicy of init for Android Q migration

MTK-Commit-Id: 97e5835a0515110fcf0c5fdef1f8f808b552dab0

Change-Id: I7c2065734270419c1a8eb7d791ba963b95de2763
CR-Id: ALPS04294481
Feature: [Module]WMT Driver
 2020-01-18 10:10:43 +08:00
Shan Zhang
ab3d13a34a Merge "[ALPS04366101] mediacodec process selinux permission" into alps-trunk-q0.basic 
Change-Id: I5281d9da655b812fc77161916ea4a75b483e93a3
MTK-Commit-Id: cce799f6c0527deb1dd8fbe186c93ec40f15cf6d
 2020-01-18 10:10:41 +08:00
Bo Ye
2cb0b653a1 [ALPS04366101] mediacodec process selinux permission 
Need map permission for kernel 4.14

MTK-Commit-Id: 6ea8645273cb9a1642839c1473a9eaf15bb6594b

Change-Id: I31cdb274551457d975d5df6ac401d1254dd05faf
CR-Id: ALPS04366101
Feature: H.264 Decoder
 2020-01-18 10:10:40 +08:00
Joen Chen
09f5c5aeb7 Merge "[ALPS04384473] Add needed sepolicy" into alps-trunk-q0.basic 
Change-Id: I80706cc8d0b2676d803404810a4ccedf7ddf7584
MTK-Commit-Id: bbcff09cf9bfc46aa93a3f337f026a4b454fd453
 2020-01-18 10:10:38 +08:00
Kane Jhang
7ad3357d31 [ALPS04384473] Add needed sepolicy 
[Detail] SurfaceFlinger need to add sepolicy to do ioctl with ged node

[Solution] Add SurfaceFlinger sepolicy

MTK-Commit-Id: 8f848c40c9443a959fe564875aa5046458219ae5

Change-Id: Id88cd8d31f66bbdcb7df6e48127e789d341772ac
CR-Id: ALPS04384473
Feature: [Module]SurfaceFlinger/HWComposer
 2020-01-18 10:10:36 +08:00
Yuhui Zhang
ef8e6d37cd Merge "[ALPS04318555] PMU path change" into alps-trunk-q0.basic 
Change-Id: Ibd34c4fa710371999a4284a0dac344ed082b9583
MTK-Commit-Id: 58b0e3da9605a33bea51d598c1d086533424c2d5
 2020-01-18 10:10:31 +08:00
Juan Rong
d1df7349d6 [ALPS04318555] PMU path change 
PMU path changed, need modify relatd selinux path

MTK-Commit-Id: 9894024d40e75e43fe67405d1cf5fcdd76185eea

Change-Id: I6a30d42d5aacc79947d84dde3d806b205f00c437
CR-Id: ALPS04318555
Feature: Engineering Mode
 2020-01-18 10:10:30 +08:00
Black Chen
4d236156f2 Merge "[ALPS04409296] add BT enable SAP profile policy" into alps-trunk-q0.basic 
Change-Id: I87b2257db7b9141744a71ee44625a58927390a22
MTK-Commit-Id: 50418d8f06f04bda1ce8f9b14e66843ddc9baf30
 2020-01-18 10:10:28 +08:00
Sammy-CY Yang
1888305f75 [ALPS04409296] add BT enable SAP profile policy 
Enable BT SAP profile by properties rather than static resource overlay in Andorid Q.
Add the selinux rule for this property.

MTK-Commit-Id: 32eeec317227518f6be67c8bacc1aef03a413568

Change-Id: Ide8429240862eb79b24a352272ceaeae3fd09b2a
CR-Id: ALPS04409296
Feature: BT AOSP
 2020-01-18 10:10:23 +08:00
Liu Cheng
865fce7f58 [ALPS04277923] SUPL SMS dispatch new feature 
Allow rild access to send SUPL INIT to mnld.

MTK-Commit-Id: c632adb702c3c11b60ee77d28aca477c44d5f6bd

Change-Id: If47a5702cd723e2cc1a6a214e1560ba19ae8c055
CR-Id: ALPS04277923
Feature: [Android Default] Message-SMS framework
 2020-01-18 10:10:22 +08:00
Boru Zhao
9f06829adb [ALPS04394576] MT6739:cameraserver sepolicy issue 
[Detail]
Sepolicy ioctl configure is changed after Q, we modify
cameraserver ioctl configure.

MTK-Commit-Id: 26f6cde989b082ee36067c3e01bdfd1855db046b

Change-Id: I59489c6ee27a9bb7913d0b49cdaa4e281024cb42
CR-Id: ALPS04394576
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:10:22 +08:00
Marx Chiu (邱弘志)
9ab7604179 Merge "[ALPS04401451] Fix ioctl permission issue for cameraserver" into alps-trunk-q0.basic 
Change-Id: Idbceb6f115c78b548cdf10b74b0ca8070682d2cf
MTK-Commit-Id: 8f58167ddaa5256094a029c9d49c28b843769e58
 2020-01-18 10:10:21 +08:00
Michael Lai
682f71fd6d [ALPS04401451] Fix ioctl permission issue for cameraserver 
[Detail] Fix the ioctl permission issue for cameraserver

MTK-Commit-Id: 4c7eba0c71d5bb65f244095ca93596b28ba60ad8

Change-Id: Idca3ad9f37e6aa38375ed008647e81f525a77618
CR-Id: ALPS04401451
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:10:20 +08:00
Kobe Wu
a25d1ca12f [ALPS04400836] Fix SELinux issue 
[Detail]
avc:  denied  { find } for interface=android.hardware.audio::
IDevicesFactory sid=u:r:audiocmdservice_atci:s0 pid=4193 scontext=u:r:
audiocmdservice_atci:s0 tcontext=u:object_r:hal_audio_hwservice:s0
tclass=hwservice_manager permissive=0

[Solution]
hal_client_domain(audiocmdservice_atci, hal_audio)
allow audiocmdservice_atci hal_audio_hwservice:hwservice_manager find;

MTK-Commit-Id: 19954438860104bb7e0036ce92d21429103e6149

Change-Id: Idc7fe552e63aec6e4e1081a0f4681d251b019be3
CR-Id: ALPS04400836
Feature: Audio Tuning Tool
Signed-off-by: Kobe Wu <kobe-cp.wu@mediatek.com>
 2020-01-18 10:10:18 +08:00
Boru Zhao
25996d6511 [ALPS04394576] mt6739:fix camera sepolicy issue 
[Detail]
Add gpu_device:map in non_plat/mtk_hal_camera.te and
non_plat/cameraserver

MTK-Commit-Id: a3544387d9eb532f03a1fd0603f96b9cef46f1cf

Change-Id: Ic3c0e82e87315c29bee5984ae74f579304710c9d
CR-Id: ALPS04394576
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:10:15 +08:00
Chris-YC Chen
112b2a020d [ALPS04257872] sepolicy: mdp-hidl 
add sepolicy for mms while using m4u

MTK-Commit-Id: 431f4e539496a36b144601d8fe9cbfc31ac0aa3f

Change-Id: I7aec7ccdcf48522e6a3cada1a164356a06b0dbbd
CR-Id: ALPS04257872
Feature: [Module]MDP Driver
 2020-01-18 10:10:15 +08:00
Hongxu Zhao
74a77e408a Merge "[ALPS04392816] sensor: add hidl 2.0 architecture" into alps-trunk-q0.basic 
Change-Id: I72e3e71787669fa648d6ebd16b78f8538809b2b1
MTK-Commit-Id: 6ceb53687c0959b82ea3827e52f60c3b22862642
 2020-01-18 10:10:14 +08:00
hongxu.zhao
dd0eaad9fd [ALPS04392816] sensor: add hidl 2.0 architecture 
add hidl 2.0 architecture

MTK-Commit-Id: b0365c02b90b073ac85a1a4ed350967c3f1b1187

Change-Id: I4b17f59113f3085ef6df16814524353862f7d8b5
CR-Id: ALPS04392816
Feature: Sensor Hub
 2020-01-18 10:10:09 +08:00
Jih-Cheng Chiu (邱日成)
99b2e3391e Merge "[ALPS04384473] Remove relabel graphics_debug_prop" into alps-trunk-q0.basic 
Change-Id: Ic744d8a7ced13594f6dc0ca3cdd3d09fb133c3dc
MTK-Commit-Id: f942f2456178ddda3fb66f1bff9fbe79779de518
 2020-01-18 10:10:08 +08:00
Ju-Yi Cheng
2a4126739f [ALPS04384473] Remove relabel graphics_debug_prop 
[Detail] No need to relabel graphics_debug_prop since
no process need to setproperty in runtime

MTK-Commit-Id: d7f0964bc3a857471cd9891ec64dcb225c886d0f

Change-Id: I59baa11790e0dea1652097c6fe0127a25406d046
CR-Id: ALPS04384473
Feature: [Module]SurfaceFlinger/HWComposer
 2020-01-18 10:10:07 +08:00
Archilis Wang
1b7b6d077e [ALPS04385947] Add access rule for property 
mtk_agpsd uses libapmonitor to report info.
libapmonitor needs the access right to hwservicemanager_prop.

MTK-Commit-Id: ce3c3e4f204c2e607c903669601b00720cc1c5f4

Change-Id: I9a241d28ef5f6dd000cd350c3cdf05930aa9bf26
CR-Id: ALPS04385947
Feature: A-GPS
 2020-01-18 10:10:06 +08:00
Andrew Yang
243af8a9aa Merge "[ALPS04385961] RTC: add permission for power-off alarm" into alps-trunk-q0.basic 
Change-Id: I33f8647fe7ae70eb9dab4c49faf033f2a037d05c
MTK-Commit-Id: 6b07f51f7b144a3bc60c0dcc0ee3d957708cb41f
 2020-01-18 10:10:05 +08:00
andrew.yang
b8f0e2db69 [ALPS04385961] RTC: add permission for power-off alarm 
Allow alarm manager to access /dev/alarm for power-off
alarm function.

MTK-Commit-Id: 01de6e5669b8e97c12818256915885dc32c45b9f

Change-Id: I5e3759e9d11357c3f302aa2557dc71de80476262
CR-Id: ALPS04385961
Feature: Power-Off Alarm
 2020-01-18 10:10:03 +08:00
James Hsu
b2cea54f9d [ALPS04296234] mrdump_tool: apply new selinux policy 
[Detail]
Add new selinux policy to fix preallocate file failed

avc denied log
1. ioctl permission denied
mrdump_tool: type=1400 audit(0.0:517): avc: denied { ioctl }
for path="/data/vendor/dumpsys/mrdump_preallocated" dev="dm-0"
ino=1966 ioctlcmd=0x660b scontext=u:r:aee_aedv:s0
tcontext=u:object_r:aee_dumpsys_vendor_file:s0 tclass=file permissive=0

2. open /dev/block/platform/bootdevice/by-name/para fail
[SYSENV]sysenv_get_with_area():317 , get env name=mrdump_output
[SYSENV]get_env_info():217 , initialize
/vendor/bin/mrdump_tool: [libfs_mgr]Warning: unknown flag: resize
[SYSENV]get_partition_path():78 ,
partition path = /dev/block/platform/bootdevice/by-name/para
[SYSENV]read_env_area():136 ,
open /dev/block/platform/bootdevice/by-name/para fail: Permission denied
[SYSENV]get_env_info():238 , read_env_area fail

MTK-Commit-Id: 25a78a9e7e593ba2e376b2e243774d5b4dfc6205

Change-Id: I79c62a0f65e1781ca6d0c2eefe77078d168d146a
Signed-off-by: James Hsu <james.hsu@mediatek.com>
CR-Id: ALPS04296234
Feature: Memory RAM Dump (MRDUMP)
 2020-01-18 10:10:02 +08:00
Qian Dong
311772663d Merge "[ALPS04385687] fix mp3 playback start slowly because of sepolicy" into alps-trunk-q0.basic 
Change-Id: I7213c41ca1441576dbe6d7c2199e8e76277856fa
MTK-Commit-Id: c9a4799508b4216588720540fe3fb86d36b7eb11
 2020-01-18 10:10:01 +08:00