NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
android_device_mediatek_sep.../non_plat
History
Aayush Gupta ad66e2bf76 non_plat: netd: suppress dir write to /system 
Based on: https://review.lineageos.org/c/LineageOS/android_system_sepolicy/+/302134

Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com>
Change-Id: Ibf9e78f53d79304d70eddd16063bfedae3d0c05f
2021-01-21 10:46:01 +05:30
..
adbd.te
[ALPS04649268] Move SELINUX policies to plat_private
2020-01-18 10:16:47 +08:00
aee_aed.te
[ALPS04758557] fix aee high risk rules
2020-01-18 10:21:37 +08:00
aee_aedv.te
[ALPS04824757] mrdump: fix ioctl sepolicy
2020-01-18 10:22:00 +08:00
aee_core_forwarder.te
[ALPS04758557] fix aee high risk rules
2020-01-18 10:21:37 +08:00
aee_hidl.te
[ALPS03948310] vendor/system property split
2020-01-18 10:03:12 +08:00
app.te
[ALPS04702268] Change sw_sync permission for 3rd party app access
2020-01-18 10:18:34 +08:00
appdomain.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
atci_service.te
[ALPS05009976] SEPolicy: Merge folder non_plat and r_non_plat
2020-12-21 12:06:48 +05:30
atcid.te
[ALPS04843717] Revise SE Linux policy
2020-01-18 10:21:33 +08:00
attributes
[ALPS04387792] BGService: add sepolicy permission
2020-01-18 10:20:04 +08:00
audiocmdservice_atci.te
[ALPS04400836] Fix SELinux issue
2020-01-18 10:10:18 +08:00
audioserver.te
[ALPS04639771] SEPolicy: Modify workaround
2020-01-18 10:15:29 +08:00
biosensord_nvram.te
[ALPS03982747] Remove unused sepolicy rules
2020-01-18 10:02:25 +08:00
bip.te
non_plat: Label bip binary and grant required permissions
2021-01-03 10:08:25 +05:30
bluetooth.te
[ALPS04639771] SEPolicy: Modify workaround
2020-01-18 10:15:29 +08:00
boot_logo_updater.te
[ALPS03825066] Remove unused sepolicy
2020-01-18 09:50:11 +08:00
bootanim.te
[ALPS04888892] Bootanim selinux policy update
2020-01-18 10:22:13 +08:00
cameraserver.te
[ALPS05009976] SEPolicy: Merge folder non_plat and r_non_plat
2020-12-21 12:06:48 +05:30
ccci_fsd.te
[ALPS04760260] ccci: delete rule not used
2020-01-18 10:19:29 +08:00
ccci_mdinit.te
[ALPS04872217] ccci: after reboot, world mode id is wrong
2020-01-18 10:22:04 +08:00
cmddumper.te
[ALPS04153997] C2K Modem Log tool selinux error
2020-01-18 10:07:49 +08:00
connsyslogger.te
[ALPS04968083] SEPolicy: Modify sepolicy files mode and type
2020-12-21 22:01:08 +05:30
device.te
non_plat: Label /dev/teei_config and allow tee rw permissions to it
2021-01-03 10:56:00 +05:30
domain.te
non_plat: Allow all domains to search debugfs_ion dir
2021-01-03 10:04:01 +05:30
drmserver.te
[ALPS04639771] SEPolicy: Modify workaround
2020-01-18 10:15:29 +08:00
dumpstate.te
[ALPS05009976] SEPolicy: Merge folder non_plat and r_non_plat
2020-12-21 12:06:48 +05:30
e2fs.te
[ALPS04688289] sepolicy: Add sepolicy rule for mke2fs
2020-01-18 10:18:50 +08:00
em_hidl.te
[ALPS04859964] EM: Add sepolicy to access NVRAM
2020-01-18 10:21:47 +08:00
em_svr.te
[ALPS04431500] battery: add selinux policy in em_svr
2020-01-18 10:13:04 +08:00
emdlogger.te
[ALPS04760404] Remove SElinux code
2020-01-18 10:20:51 +08:00
epdg_wod.te
non_plat: Allow epdg_wod rw perms to ccci_device
2021-01-18 21:44:41 +05:30
factory.te
[ALPS04824504] Audio: Add permission for rt5509 SmartPA
2020-01-18 10:21:55 +08:00
fastbootd.te
[ALPS04752203] Add vendor permission for fastbootd sepolicy enable
2020-01-18 10:21:55 +08:00
file_contexts
Label vtservice binary, hidl, and service and grant required permissions
2021-01-19 17:00:18 +05:30
file.te
non_plat: Label /dev/socket/volte_imsvt1 and allow mtkimsapdomain write to it
2021-01-03 10:58:52 +05:30
fm_hidl_service.te
[ALPS04239425] Sepolicy: fix undefined type declration
2020-01-18 10:08:05 +08:00
fsck.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
fuelgauged_nvram.te
[ALPS03982747] Remove unused sepolicy rules
2020-01-18 10:02:25 +08:00
fuelgauged.te
[ALPS03982747] Remove unused sepolicy rules
2020-01-18 10:02:25 +08:00
genfs_contexts
non_plat: Generate sysfs_net context for /devices/platform/CONNAC
2020-12-30 10:14:20 +05:30
gpuservice.te
[ALPS04870741] GPU: Add selinux policy for gpuservice (Revert)
2020-01-18 10:22:00 +08:00
gsm0710muxd.te
[ALPS03804621] [P migration] Add property context
2020-01-18 09:53:03 +08:00
hal_audio.te
[ALPS04639771] SEPolicy: Modify workaround
2020-01-18 10:15:29 +08:00
hal_bootctl_default.te
[ALPS04794271] bootctl: add misc access permission for bootctrl
2020-01-18 10:20:50 +08:00
hal_cas_default.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
hal_drm_clearkey.te
[ALPS04737987] Move clearkey and widevine sepolicy to basic repo
2020-01-18 10:18:46 +08:00
hal_drm_default.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
hal_drm_widevine.te
non_plat: Label /dev/tee* and grant required perms to domains
2020-12-30 17:00:34 +05:30
hal_fingerprint_default.te
non_plat: Label /dev/tee* and grant required perms to domains
2020-12-30 17:00:34 +05:30
hal_gatekeeper_default.te
non_plat: Label /dev/tee* and grant required perms to domains
2020-12-30 17:00:34 +05:30
hal_gnss_default.te
[ALPS03982747] Remove unused sepolicy rules
2020-01-18 10:02:25 +08:00
hal_gnss.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
hal_gpu.te
[ALPS04383692] GPU: GPU HIDL
2020-01-18 10:11:25 +08:00
hal_graphics_allocator_default.te
non_plat: Label /dev/tee* and grant required perms to domains
2020-12-30 17:00:34 +05:30
hal_graphics_allocator.te
[ALPS04639771] SEPolicy: Modify workaround
2020-01-18 10:15:29 +08:00
hal_graphics_composer_default.te
[ALPS04915107] HWC: Enable write permission for ged_debug
2020-01-18 10:22:18 +08:00
hal_hdmi.te
[ALPS04707246] porting hdmi hidl service
2020-01-18 10:17:54 +08:00
hal_imsa.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
hal_ir.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
hal_keymaster_attestation.te
non_plat: Label /dev/tee* and grant required perms to domains
2020-12-30 17:00:34 +05:30
hal_keymaster_default.te
non_plat: Label /dev/tee* and grant required perms to domains
2020-12-30 17:00:34 +05:30
hal_memtrack_default.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
hal_mms.te
[ALPS04968083] SEPolicy: Modify sepolicy files mode and type
2020-12-21 22:01:08 +05:30
hal_nfc.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
hal_nvramagent.te
[ALPS04968083] SEPolicy: Modify sepolicy files mode and type
2020-12-21 22:01:08 +05:30
hal_pq.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
hal_thermal_default.te
[ALPS04968083] SEPolicy: Modify sepolicy files mode and type
2020-12-21 22:01:08 +05:30
hal_usb.te
[ALPS04061953] add open permission for mtk_hal_usb
2020-01-18 10:06:29 +08:00
hal_vibrator.te
[ALPS03946622] vibrator: Fix sepolicy issue
2020-01-18 09:56:42 +08:00
hal_wifi.te
sepolicy : Add rule to set property for wlan driver/fw ver info
2020-12-26 16:28:02 +05:30
hwservice_contexts
Label vtservice binary, hidl, and service and grant required permissions
2021-01-19 17:00:18 +05:30
hwservice.te
Label vtservice binary, hidl, and service and grant required permissions
2021-01-19 17:00:18 +05:30
init.te
non_plat: Label /dev/tee* and grant required perms to domains
2020-12-30 17:00:34 +05:30
installd.te
[ALPS04160752] Add policy for installd
2020-01-18 10:07:48 +08:00
ioctl_defines
[ALPS04968083] SEPolicy: Modify sepolicy files mode and type
2020-12-21 22:01:08 +05:30
ioctl_macros
[ALPS04735709] GPU: Add selinux policy to enable GED new ioctl
2020-01-18 10:19:15 +08:00
ipsec_mon.te
non_plat: Label ipsec_mon binary and grant required permissions
2020-12-31 23:28:10 +05:30
ipsec.te
non_plat: Label ipsec binary and grant required permissions
2021-01-18 20:55:27 +05:30
kernel.te
non_plat: Allow kernel to search debugfs_mmc dir
2021-01-18 21:42:58 +05:30
keystore.te
[ALPS03982747] Remove unused sepolicy rules
2020-01-18 10:02:25 +08:00
kisd.te
[ALPS04700799] Align keymanager sepolicy with p0.mp6
2020-01-18 10:17:31 +08:00
lbs_hidl_service.te
[ALPS04239425] Sepolicy: fix undefined type declration
2020-01-18 10:08:05 +08:00
lmkd.te
[ALPS03949661] Add SeLinux policy for lmkd socket
2020-01-18 09:58:42 +08:00
loghidlsysservice.te
[ALPS04345674] Add permission
2020-01-18 10:09:06 +08:00
loghidlvendorservice.te
[ALPS04799819] add system binder call permission
2020-01-18 10:20:55 +08:00
mdlogger.te
[ALPS04760297] SEPolicy Optimize
2020-01-18 10:20:40 +08:00
mediacodec.te
non_plat: Label /dev/tee* and grant required perms to domains
2020-12-30 17:00:34 +05:30
mediadrmserver.te
[ALPS04639771] SEPolicy: Modify workaround
2020-01-18 10:15:29 +08:00
mediaextractor.te
[ALPS04639771] SEPolicy: Modify workaround
2020-01-18 10:15:29 +08:00
mediaserver.te
[ALPS04672388] Change selinux permission for MDP user
2020-01-18 10:16:18 +08:00
mediaswcodec.te
[ALPS04968083] SEPolicy: Modify sepolicy files mode and type
2020-12-21 22:01:08 +05:30
merged_hal_service.te
[ALPS04760857] power: remove redundant policy
2020-01-18 10:20:45 +08:00
meta_tst.te
non_plat: Label /dev/tee* and grant required perms to domains
2020-12-30 17:00:34 +05:30
mmc_ffu.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
mnld.te
[ALPS04753953] gps sanity fail
2020-01-18 10:19:04 +08:00
mobile_log_d.te
[ALPS04696977] Fix typo issue
2020-01-18 10:17:09 +08:00
modemdbfilter_service.te
[ALPS04968083] SEPolicy: Modify sepolicy files mode and type
2020-12-21 22:01:08 +05:30
mtk_agpsd.te
non_plat: Allow mtk_agpsd to manage wakelocks
2021-01-18 20:55:32 +05:30
mtk_hal_audio.te
[ALPS04824504] Audio: Add permission for rt5509 SmartPA
2020-01-18 10:21:55 +08:00
mtk_hal_bgs.te
[ALPS04387792] BGService: add sepolicy permission
2020-01-18 10:20:04 +08:00
mtk_hal_bluetooth.te
[ALPS04765260] BT open fail
2020-01-18 10:19:25 +08:00
mtk_hal_camera.te
non_plat: Label /dev/tee* and grant required perms to domains
2020-12-30 17:00:34 +05:30
mtk_hal_em.te
[ALPS04209994] Android Q migration prepare
2020-01-18 10:08:11 +08:00
mtk_hal_fm.te
[ALPS03938413] FM Radio: Add sepolicy for fm_hidle_service
2020-01-18 09:53:45 +08:00
mtk_hal_gnss.te
[ALPS04239425] Sepolicy: fix undefined type declration
2020-01-18 10:08:05 +08:00
mtk_hal_gpu.te
[ALPS04761007] GPU: Fix high risk sepolicy
2020-01-18 10:19:59 +08:00
mtk_hal_hdmi.te
[ALPS04707246] porting hdmi hidl service
2020-01-18 10:17:54 +08:00
mtk_hal_imsa.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
mtk_hal_keyattestation.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
mtk_hal_keymanage.te
[ALPS04340791] SEPOLICY: workaround fix BASIC build error
2020-01-18 10:09:28 +08:00
mtk_hal_lbs.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
mtk_hal_light.te
[ALPS04761108] Backlight: remove the unused sepolicy
2020-01-18 10:19:50 +08:00
mtk_hal_log.te
[ALPS04209994] Android Q migration prepare
2020-01-18 10:08:11 +08:00
mtk_hal_md_dbfilter.te
[ALPS04968083] SEPolicy: Modify sepolicy files mode and type
2020-12-21 22:01:08 +05:30
mtk_hal_mms.te
[ALPS04968083] SEPolicy: Modify sepolicy files mode and type
2020-12-21 22:01:08 +05:30
mtk_hal_power.te
[ALPS04328846] power: add fliperfs policy
2020-01-18 10:20:54 +08:00
mtk_hal_pq.te
[ALPS03982747] Remove unused sepolicy rules
2020-01-18 10:02:25 +08:00
mtk_hal_secure_element.te
[ALPS04301155] Add sepolicy for map permission
2020-01-18 10:15:36 +08:00
mtk_hal_sensors.te
[ALPS04897935] Sensor: fix VtsHalSensorsV2_0 fail
2020-01-18 10:22:10 +08:00
mtk_hal_wifi.te
non_plat: Allow mtk_hal_wifi to set wifi version property
2020-12-31 23:01:22 +05:30
mtk_wmt_launcher.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
mtkbootanimation.te
[ALPS04723934] SEPolicy: Remove phased-out guiext rules
2020-01-18 10:18:20 +08:00
MtkCodecService.te
[ALPS03982747] Remove unused sepolicy rules
2020-01-18 10:02:25 +08:00
mtkimsapdomain.te
non_plat: Label /dev/socket/volte_imsvt1 and allow mtkimsapdomain write to it
2021-01-03 10:58:52 +05:30
mtkrild.te
[ALPS04817575] Add system property only for MTK system image
2020-01-18 10:21:38 +08:00
muxreport.te
[ALPS03982747] Remove unused sepolicy rules
2020-01-18 10:02:25 +08:00
netd.te
non_plat: netd: suppress dir write to /system
2021-01-21 10:46:01 +05:30
netdiag.te
[ALPS03966863] Relabel log vendor property
2020-01-18 10:00:20 +08:00
netutils_wrapper.te
non_plat: Label ipsec_mon binary and grant required permissions
2020-12-31 23:28:10 +05:30
nvram_agent_binder.te
[ALPS04761184] Remove high risk policy for nvram
2020-01-18 10:19:49 +08:00
nvram_daemon.te
[ALPS04761184] Remove high risk policy for nvram
2020-01-18 10:19:49 +08:00
permissive.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
platform_app.te
[ALPS04387792] BGService: add sepolicy permission
2020-01-18 10:20:04 +08:00
proc_perfmgr.te
non_plat: Allow proc_perfmgr to associate with proc filesystem
2021-01-18 21:47:31 +05:30
property_contexts
non_plat: Label xcap binary and grant required permissions
2021-01-03 10:56:00 +05:30
property.te
non_plat: Label xcap binary and grant required permissions
2021-01-03 10:56:00 +05:30
radio.te
[ALPS04825820] change selinux rule for engineermode
2020-01-18 10:21:29 +08:00
recovery.te
[ALPS04658973] ota update: add recovery.te for basic project
2020-01-18 10:15:30 +08:00
resize.te
[ALPS04340791] SEPOLICY: workaround fix BASIC build error
2020-01-18 10:09:28 +08:00
rild.te
[ALPS04882955] Error handling for RILD auto-restart
2020-01-18 10:22:18 +08:00
rilproxy.te
[ALPS04773384] SeLinux permission
2020-01-18 10:20:24 +08:00
shared_relro.te
[ALPS04639771] SEPolicy: Modify workaround
2020-01-18 10:15:29 +08:00
shell.te
[ALPS04649268] Move SELINUX policies to plat_private
2020-01-18 10:16:47 +08:00
slpd.te
import from mediatek/master to mediatek/alps-mp-o1.mp1
2020-01-18 09:29:32 +08:00
spm_loader.te
[ALPS03982747] Remove unused sepolicy rules
2020-01-18 10:02:25 +08:00
st54spi_hal_secure_element.te
[ALPS04709027] ST SE HAL for ST54H (SPI) support
2020-01-18 10:18:02 +08:00
stp_dump3.te
[ALPS04763245] WMT: Fix sepolicy issue
2020-01-18 10:21:11 +08:00
stroke_exec.te
non_plat: Label and address stroke binary denials
2021-01-18 19:00:40 +05:30
surfaceflinger.te
[ALPS04417009] Enable SELinux Property
2020-01-18 10:17:01 +08:00
system_app.te
[ALPS04707246] porting hdmi hidl service
2020-01-18 10:17:54 +08:00
system_server.te
non_plat: Label /dev/tee* and grant required perms to domains
2020-12-30 17:00:34 +05:30
tee.te
non_plat: Allow tee to connect to init unix_stream_socket
2021-01-03 10:56:00 +05:30
thermal_manager.te
[ALPS04763250] Thermal: SEPolicy de-risk
2020-01-18 10:20:24 +08:00
thermal.te
non_plat: Label thermal binary and grant required perms
2020-12-30 10:18:16 +05:30
thermalloadalgod.te
[ALPS04735619] Thermal: modify file permission
2020-01-18 10:18:29 +08:00
ueventd.te
[ALPS04639771] SEPolicy: Modify workaround
2020-01-18 10:15:29 +08:00
uncrypt.te
[ALPS04968083] SEPolicy: Modify sepolicy files mode and type
2020-12-21 22:01:08 +05:30
untrusted_app_25.te
[ALPS04640303] SEPolicy: Fix app violation
2020-01-18 10:15:38 +08:00
untrusted_app.te
[ALPS04640303] SEPolicy: Fix app violation
2020-01-18 10:15:38 +08:00
update_engine.te
[ALPS04401328] ota update: fix selinux permission for AB update with dynamic partition
2020-01-18 10:11:37 +08:00
vendor_init.te
non_plat: Allow vendor_init to set mtk_dsbp_support_prop
2020-12-28 00:39:58 +05:30
vendor_shell.te
[ALPS04758557] fix aee high risk rules
2020-01-18 10:21:37 +08:00
vold_prepare_subdirs.te
[ALPS04968083] SEPolicy: Modify sepolicy files mode and type
2020-12-21 22:01:08 +05:30
vold.te
non_plat: Label /dev/tee* and grant required perms to domains
2020-12-30 17:00:34 +05:30
volte_imcb.te
non_plat: Label volte_stack binary and grant required permissions
2021-01-03 10:56:00 +05:30
volte_imsm_93.te
non_plat: Label volte_ism_93 and grant required permissions
2021-01-03 10:07:32 +05:30
volte_md_status.te
non_plat: Label volte_md_status and grant required permissions
2021-01-03 10:06:17 +05:30
volte_ua.te
non_plat: Label volte_ua binary and grant required permissions
2021-01-03 10:55:55 +05:30
vpud_native.te
non_plat: Label and grant required permissions to VPU devices
2021-01-03 10:56:00 +05:30
vtservice.te
Label vtservice binary, hidl, and service and grant required permissions
2021-01-19 17:00:18 +05:30
wfca.te
non_plat: Label wfca binary and grant required permissions
2021-01-03 10:56:00 +05:30
wlan_assistant.te
[ALPS04331131] Wlan: wlan_assistant selinux
2020-01-18 10:14:46 +08:00
wmt_loader.te
[ALPS04763245] WMT: Fix sepolicy issue
2020-01-18 10:21:11 +08:00
xcap.te
non_plat: Label xcap binary and grant required permissions
2021-01-03 10:56:00 +05:30
zygote.te
[ALPS04639771] SEPolicy: Modify workaround
2020-01-18 10:15:29 +08:00