Commit graph

6 commits

Author SHA1 Message Date
Hridya Valsaraju
57fdca22c4
sdm710-common: Set PRODUCT_SET_DEBUGFS_RESTRICTIONS
Starting with Android R launched devices, debugfs cannot be mounted in
production builds. In order to avoid accidental debugfs dependencies
from creeping in during development with userdebug/eng builds, the
build flag PRODUCT_SET_DEBUGFS_RESTRICTIONS can be set by vendors to
enforce additional debugfs restrictions for userdebug/eng builds. The
same flag will be used to enable sepolicy neveallow statements to
prevent new permissions added for debugfs access.

Test: build, boot
Bug: 184381659
Change-Id: I45e6f20c886d467a215c9466f3a09965ff897d7e
2023-11-25 20:27:36 +02:00
Ultra119
712c0269bb
sdm710-common: sepolicy: Fix up libperfmgr crash on logs
W/libperfmgr(798): Failed to write to node: /proc/sys/kernel/sched_boost with value: 0, fd: -1
2023-06-17 17:03:33 +03:00
Giammarco Senatore
c119216557
kunlun2: Address some initial denials
- Nuke folder creation that breaks encryption
- Nuke permissivers and other creepy things
- Properly label light and fp HALs
- Address initial fingerprint denials
- Label camera zui prop
2021-07-17 18:11:00 +02:00
GiaSen
57e6de12d3
sepolicy: address some more denials
and nuke neverallows
2021-07-16 18:44:08 +02:00
Giammarco Senatore
dfbc4aeaba
kunlun2: Nuke neverallows
for real now
2021-07-16 18:33:17 +02:00
DennySPb
14f08dc1fe
Initial selinux policies
* convert existing one to vendor
2021-07-16 17:54:51 +02:00