NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,022 Commits 2 Branches 0 Tags
Commit Graph

30 Commits

Author SHA1 Message Date
Mike Hsieh
cff428b385 [ALPS04702268] Change sw_sync permission for 3rd party app access 
Change sw_sync permission for 3rd party app use.

MTK-Commit-Id: 756f028f822b28e5863c772c977f3fdfad1eb338

Change-Id: I5f1f4566e8d60b16fd300dc91ddba8cc6aa7e5c4
CR-Id: ALPS04702268
Feature: [Module]MDP Driver
(cherry picked from commit 8d036ea19e62d9f509f1c54d395d4a711b4a4bd7)
 2020-01-18 10:18:34 +08:00
Michael Lai
0eeca0ef05 [ALPS04688504] Add selinux permmision 
[Detail] Add selinux permmision

MTK-Commit-Id: ca87b8ce2b16960b4047a178391ad9ec9ad99a82

Change-Id: Iea70b082d5057d729a52c97009bcdb0bafa1de61
CR-Id: ALPS04688504
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:16:50 +08:00
Shanshan Guo
b11cda4bfd [ALPS04640303] SEPolicy: Fix app violation 
[Detail]
There are some selinux violation for app in MTBF,
need to add some sepolicy for them.

[Solution]
1.Add sepolicy
2.Move sepolicy of untrusted_app_* to untrusted_app_*.te
3.Modify sepolicy

MTK-Commit-Id: 62b5c74c6d1d85acf0184fc18fca0b40c4a8e60c

Change-Id: Icac33ccc54b691ee0e4ab7088f77adb1c1a4a549
CR-Id: ALPS04640303
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:15:38 +08:00
Shanshan Guo
62cf1a413a [ALPS04639771] SEPolicy: Modify workaround 
[Detail]
There is a workaround for bring-up,
now it needs to be modified.

[Solution]
1.Split workaround to sepcial *.te
2.Modify ged sepolicy
3.Modify mistake
4.Add sepolicy

MTK-Commit-Id: 5a2b7e3fdc826a7ca6bc70a3810f14c1661e7d79

Change-Id: I0894de45e014a5eae754e35b57fbc9b21bc4bf90
CR-Id: ALPS04639771
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:15:29 +08:00
jhua.zhang
0986f7cfba [ALPS04533784] Move sepolicy of cam cooler to bsp 
[Detail]
Move camera coolers sepolicy to bsp/plat_private.
This reverts commit 869396b2725b78c55382a9f34b016b5236505965.

MTK-Commit-Id: 31387ebc1f29a342b39a8bd809cdc3f2f56c85fd

Change-Id: I64c36cefdefe72846971ec323cae0c6e89c675a1
Signed-off-by: jhua.zhang <jhua.zhang@mediatek.com>
CR-Id: ALPS04533784
Feature: Thermal Management
 2020-01-18 10:13:55 +08:00
jhua.zhang
c95ef58ba5 [ALPS04533784] Thermal: add sepolicy for cam cooler 
[Detail]
Add sepolicy to allow camera app to access /proc/driver/cl_cam_status
for camera shutdown cooler.

MTK-Commit-Id: 869396b2725b78c55382a9f34b016b5236505965

Change-Id: Iadfcfb95923c15384c7a6508525b7167e1a6e16f
Signed-off-by: jhua.zhang <jhua.zhang@mediatek.com>
CR-Id: ALPS04533784
Feature: Thermal Management
 2020-01-18 10:13:40 +08:00
Eve
38c772248f [ALPS04428497] mdp: MMS HIDL for pq version 
add pq control for jpeg usage

MTK-Commit-Id: fa4d43a6005c174326f4bea2bdc244a03ac0fc0e

Change-Id: Ia996efb0fcca703514a39fc1a3c1eb2d72e1c1f9
CR-Id: ALPS04428497
Feature: [Module]MDP Driver
 2020-01-18 10:12:50 +08:00
Yuru Zhu (朱禹儒)
1701212f4c Merge "[ALPS04386294] Move debugtool to EM" into alps-trunk-q0.basic 
Change-Id: I07d9028a1a8269bae6e33cf4a4f45af6b62799a8
MTK-Commit-Id: bb651141c47618e88c71ee1dac3a559de220a331
 2020-01-18 10:12:05 +08:00
yuru.zhu
57d468a379 [ALPS04386294] Move debugtool to EM 
[Solution] Move debugtool source code to EM

MTK-Commit-Id: f9aae70ea8b8c0075e93ade1fcbedc3bc25aa484

Change-Id: I0a16d8cac8c1cf64cbc88ed9a9de6bd29e3e740b
CR-Id: ALPS04386294
Feature: MTKLogger
 2020-01-18 10:12:01 +08:00
Shanshan Guo
203b3d02de [ALPS04428389] SEPlolicy: for app to access ged by ioctlcmd 
[Detail]
For Andorid Q, there is a more stringent restriction for ioctl,
app need some permissions to access proc_ged by ioctlcmd.

[Solution]
Group existing sepolicies for different types app to access
proc_ged by ioctlcmd together in appdomain.

MTK-Commit-Id: e9ba9a00dbbc063388c8120048a72fd8f7ce497c

Change-Id: I24a4671259a68a0fda756d37c16b7e61801e6cc8
CR-Id: ALPS04428389
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:12:00 +08:00
Jason Hsu
99aeb78cbb [ALPS04416069] add sepolicy for streaming playback 
[Detail] add ioctl sepolicy extension for
         mediaserver and platform_app

MTK-Commit-Id: 3991f29fab0fcb0f710c2f2ca0d0a902982b963a

Change-Id: I49a787c2451b2655a343a73e7f9cf678f1f0bdc1
CR-Id: ALPS04416069
Feature: [Module]Video Driver
 2020-01-18 10:11:09 +08:00
mtk11515
56945bbceb [ALPS04298621] MTKLogger can not get md/netlog property 
[Detail] kernel 4.14 SE linux change

[Solution] change group read file map

MTK-Commit-Id: 971e30bb8a9a2170588e9f363f6617fd90f7e2c8

Change-Id: I2834fa7c081058d49f6c0370160bb94b08cad7f7
CR-Id: ALPS04298621
Feature: MTKLogger
(cherry picked from commit 6ff5e6fc63519d2298d04d1a980349f9c8169f48)
 2020-01-18 10:09:50 +08:00
mtk11515
3107d089df [ALPS04025118] add get btlog property selinux 
[Detail] avc: denied { open }
for path="/dev/__properties__/u:object_r:vendor_bluetooth_prop:s0"
 dev="tmpfs" ino=464 scontext=u:r:platform_app:s0:c512,c768
 tcontext=u:object_r:vendor_bluetooth_prop:s0 tclass=file permissivSolution]

[Solution] add selinux in te file

MTK-Commit-Id: a42afa781fc86421c345c96a271465b3efdec5bd

Change-Id: Ie4d1478e97429247e5355a9b06ea749227f18bf7
CR-Id: ALPS04025118
Feature: MTKLogger
 2020-01-18 10:06:03 +08:00
Yuru Zhu (朱禹儒)
1cc7505c70 Merge "[ALPS03965031] MTKLogger can not access aee data vendor" into alps-trunk-p0.basic 
Change-Id: I3bee72169906a52a6273e003afc9615e791ae79d
MTK-Commit-Id: 6829da562f17f1010914e3994a85457acef22ceb
 2020-01-18 10:03:10 +08:00
yuru.zhu
765e08b32c [ALPS03965031] MTKLogger can not access aee data vendor 
[Solution] Add permission to access aee data vendor

MTK-Commit-Id: a18e63eb8cde8f45a8c58ab6d396d482ce9e0fbb

Change-Id: I79f31a16a90a5afc0a7985044eb2e1ca7f88f3ab
CR-Id: ALPS03965031
Feature: MTKLogger
 2020-01-18 10:03:08 +08:00
Yuxian Xu
2a22f85be4 [ALPS03976171] fix: Mobilelog writing vendor property 
[Detail]
make Mobilelog its own properties only used in system partition

MTK-Commit-Id: 98c61ef31a7a7a09bed1c492a9dc1e7c1f12c47e

Change-Id: Iceea093a055817f4ccc8350c3543433b83ecc2f2
CR-Id: ALPS03976171
Feature: Mobile Log Tool
 2020-01-18 10:02:44 +08:00
mtk12101
722798a334 [ALPS03982747] Remove unused sepolicy rules 
Some rules is no need any more, need to remove it.

MTK-Commit-Id: 49685f1299d990a7195a2d54b955517d8f2cc699

Change-Id: I4a590ad781589cf94989ce72c88751ac10b82eae
CR-Id: ALPS03982747
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 10:02:25 +08:00
Guoyi Qu
0dfb2a6abc [ALPS03973363] move to system image 
Move connsyslog to system image as
limitation to access phone storage in
andriod new version.

MTK-Commit-Id: 0ea895cbf9dcb98a392cce5d98dd38ef839ac452

Change-Id: I68a37f21635b0ffeaddcda6ab5f59f8202c86709
CR-Id: ALPS03973363
Feature: Connsys Log Tool
 2020-01-18 10:00:42 +08:00
Guoyi Qu (曲国毅)
c431a4aa8a Merge "[ALPS03966863] Relabel log vendor property" into alps-trunk-p0.basic 
Change-Id: If6a3d3a3ce83c72565c7997c5f8b00c428587bc4
MTK-Commit-Id: a47e200f6e205b39949bc965110ad5ade7950576
 2020-01-18 10:00:22 +08:00
bo.shang
da4b44cc8b [ALPS03966863] Relabel log vendor property 
modify netlog, mdlog and mtklogger selinux file

MTK-Commit-Id: 9f11854e582d88eba22388a2ffc59a41da906898

Change-Id: I5b782c80ae2df464cb574f9733757687e374402d
CR-Id: ALPS03966863
Feature: Network Log Tool
 2020-01-18 10:00:20 +08:00
Jason Su
da5c66b125 [ALPS03950289] Remove mnld system property set permissions 
[Detail]
For new neverallow rule, remove platoform app writting vendor
system property permissions.

MTK-Commit-Id: 0df6bfa09a5f6f1243935659d4b5de56728cdd0c

CR-Id: ALPS03950289
Feature: Location AOSP
Change-Id: Id31442a20bd8f577dd20ac15b9d25f07725a0ec8
 2020-01-18 09:59:58 +08:00
Yuru Zhu (朱禹儒)
50bf8286c8 Merge "[ALPS03934549] MTKLogger support for LogHandler" into alps-trunk-p0.basic 
Change-Id: Ifd056ef814611b604c49a78779f447a003afdc77
MTK-Commit-Id: 3e0a98839d004126e93de1276c81a61de1d22a73
 2020-01-18 09:56:41 +08:00
yuru.zhu
146cf88d6f [ALPS03934549] MTKLogger support for LogHandler 
[Solution] MTKLogger support for LogHandler

MTK-Commit-Id: 58a1ac0f72764fced2c0eac8421160d42d90b05c

Change-Id: I5117ffb2b12707e4819938553f580a440a9ae6a2
CR-Id: ALPS03934549
Feature: MTKLogger
 2020-01-18 09:56:38 +08:00
Lili Lin
05f5d87b88 [ALPS03881723] Workaround to fix build break 
[Detail] Googles new commit
neverallow coredomain from writing vendor properties
cause build break

cdb1624c27

[Solution] Declare system_writes_vendor_properties_violators as workaround

MTK-Commit-Id: 2b19515d2d98945b0aadfbc9043352ae927497f3

Change-Id: I7be59b6811f6c75ea47da205be902417311fe1d0
CR-Id: ALPS03881723
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:56:13 +08:00
Mason Lai
364e2c8274 [ALPS03938413] FM Radio: Add sepolicy for fm_hidle_service 
[Detail]
Add sepolicy for fm_hidle_service.

MTK-Commit-Id: 13358f71839220423a732b81b0e3c1d2e4210cb8

Change-Id: I761732065bbcec7fa398ab481b7921509232e693
CR-Id: ALPS03938413
Feature: [Module]FM Radio Driver
 2020-01-18 09:53:45 +08:00
Peng QI
7941a87b15 Merge "[ALPS03866092] BT HCI snoop log (2/2)" into alps-trunk-p0.basic 
Change-Id: I57b57fd88223366357b717fb7aa9d9b2b2e31872
MTK-Commit-Id: d968e2163fad3e6912b3f9e937aa5b8a00cb8714
 2020-01-18 09:45:49 +08:00
Peng Qi
bf77ac2d12 [ALPS03866092] BT HCI snoop log (2/2) 
[Detail]
1. Add selinux right for MTKLogger to able to connect Bluetooth
via socket
2. Add selinux right for Bluetooth to set debug property for
MTKLogger state check

MTK-Commit-Id: db60d64b8ed91dfee48588fb5a32f2bedc2ba604

Change-Id: I31c5abb153c2bcd44a2dafca0f1f669e7310c3fe
CR-Id: ALPS03866092
Feature: BT AOSP
 2020-01-18 09:45:40 +08:00
mtk11285
f54afd92e5 [ALPS03841705] add selinux on android P 
[Detail] allow platform_app to read /data/vendor/mtklog/aee_exp

MTK-Commit-Id: a94d29a0e64fc3583032946481c6e61159477f49

Change-Id: Ieb6c79a4f5668aff6dbc8c271da2ed88327f1cd9
CR-Id: ALPS03841705
Feature: Android Exception Engine(AEE)
 2020-01-18 09:41:34 +08:00
Bo Ye
5849c224e3 [ALPS03825066] P migration selinux build failed fix 
1. Mark polices which accessing proc/sysfs file system
    2. Add violator attribute to modules violate vendor/system rule.

MTK-Commit-Id: 3954cad7a1428cda694d8428c2235a78aa6e7cc8

Change-Id: I401ae5b87eb9a03f324bef83c6678149606b15a8
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
 2020-01-18 09:29:36 +08:00
Chunyan Zhang
37e0caa36e import from mediatek/master to mediatek/alps-mp-o1.mp1 
Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79
MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
 2020-01-18 09:29:32 +08:00