Commit graph

53 commits

Author SHA1 Message Date
jjpprrrr
e05b539a51
sdm710-common: Address init denial 2021-11-25 20:05:41 +01:00
Chenyang Zhong
50bb739532
sdm710-common: sepolicy: allow system_server to get app_zygote pgid
avc: denied { getpgid } for scontext=u:r:system_server:s0 tcontext=u:r:app_zygote:s0:c512,c768 tclass=process permissive=0

Appeared during UiBench.

Signed-off-by: Chenyang Zhong <zhongcy95@gmail.com>
2021-11-12 16:17:06 +01:00
jjpprrrr
14ed563a24
sdm710-common: sepolicy: specify the owner of vendor props
vendor_fp_prop is public because apps like Alipay may access it
to enable biometrics payment authentication.
sdm710: Drop a neverallow
2021-10-30 12:58:35 +02:00
Chenyang Zhong
ed065abb05
sdm710-common: sepolicy: allow vendor_init to read persist_debug_prop
Signed-off-by: Chenyang Zhong <zhongcy95@gmail.com>
2021-10-20 22:42:05 +02:00
Giammarco Senatore
c2918e4349
sdm710-common: Add file_contexts for neuralnetworks hal 2021-08-18 13:16:08 +02:00
Giammarco Senatore
09cd80eeb5
sdm710-common: Go enforcing
- major cleanup
- sepolicy from xiaomi-sdm845-common
- label both goodix and fpc
- allystar GPS uart port and ontim nodes
2021-08-11 22:41:19 +02:00
Giammarco Senatore
f6f497c743
sdm710-common: Initial commonized tree
* minor cleanup in overlay and init rc
* drop dolby
2021-07-25 21:56:17 +02:00
Ethan Chen
4efd4900c5
kunlun2: Enable Pixel atrace HAL
Change-Id: I34691e5e909b6ca76dc97fd5c45328e3f80b67e1
Signed-off-by: Henrique Pereira <hlcpereira@pixelexperience.org>
Signed-off-by: DennySPb <dennyspb@gmail.com>
2021-07-17 18:48:16 +02:00
Giammarco Senatore
c119216557
kunlun2: Address some initial denials
- Nuke folder creation that breaks encryption
- Nuke permissivers and other creepy things
- Properly label light and fp HALs
- Address initial fingerprint denials
- Label camera zui prop
2021-07-17 18:11:00 +02:00
Bruno Martins
961898527d
sepolicy: Add thermal-engine rules
Signed-off-by: DennySPb <dennyspb@gmail.com>
Change-Id: I4ef5664b036d0cff81ebb39646276b208da4986b
2021-07-16 23:25:14 +02:00
DennySPb
37b5c61917
sepolicy: Fix camera properties for vendor build
Signed-off-by: DennySPb <dennyspb@gmail.com>
Change-Id: I9eda9aa87102c44400c4dfb48588835d6ecb834f
2021-07-16 22:07:31 +02:00
GiaSen
57e6de12d3
sepolicy: address some more denials
and nuke neverallows
2021-07-16 18:44:08 +02:00
Adam Shih
84460e3bdf
sepolicy: gmscore_app: suppress denials on firmware
Bug: 149543390
Bug: 149062700
Bug: 151195371
Test: boot with no gmscore_app avc error
Change-Id: I4c667b86863121529f7c3a24b9daf615260104c7
Signed-off-by: Chenyang Zhong <zhongcy95@gmail.com>
Signed-off-by: DennySPb <dennyspb@gmail.com>
2021-07-16 18:44:07 +02:00
Pig
be846c32da
sepolicy: ignore hardless QCOM denials
Change-Id: Ie8f74bde8aeedbd134b11307221c1f930ea4f5dc
Signed-off-by: Chenyang Zhong <zhongcy95@gmail.com>
Signed-off-by: DennySPb <dennyspb@gmail.com>
2021-07-16 18:44:07 +02:00
Ashwin R C
ec1d9ed563
sepolicy: Allow hal_audio_default to read audio_device
audio_hw_primary: pcm_open_prepare_helper: cannot open device '/dev/snd/pcmC0D0p': Permission denied

Change-Id: I8fb7ec2c269fca6b8bf21aacf521990e9279418d
Signed-off-by: DennySPb <dennyspb@gmail.com>
2021-07-16 18:44:06 +02:00
LuK1337
4652cba66e
sepolicy: Address hal_audio_default denials
Change-Id: I67b064ccf1d84ca4b891f1cdb4f4d6ecebdbce23
Signed-off-by: DennySPb <dennyspb@gmail.com>
2021-07-16 18:44:05 +02:00
LuK1337
1efea1f5bc
kunlun2: sepolicy: Address time_daemon denials
Change-Id: I83947a673ed19cfc20c130fb133d1957aa44d284
Signed-off-by: DennySPb <dennyspb@gmail.com>
2021-07-16 18:44:05 +02:00
LuK1337
2f47635396
kunlun2: sepolicy: Address qti_init_shell denials
Change-Id: I21807dc3ae7b7c073b3b06f1412ccc21a727b497
Signed-off-by: DennySPb <dennyspb@gmail.com>
2021-07-16 18:44:05 +02:00
LuK1337
7f69622f6f
sepolicy: Address kernel denials
Change-Id: Ie506bd769173d1c5780cfbf8b2740b5c5d66d8c5
Signed-off-by: DennySPb <dennyspb@gmail.com>
2021-07-16 18:44:05 +02:00
Scott Warner
933e39f1c8
sepolicy: Address hal_graphics_composer_default denials
Change-Id: Iff994cc69d8e11b746cda5a5517c0cf0deea8c86
Signed-off-by: DennySPb <dennyspb@gmail.com>
2021-07-16 18:43:59 +02:00
Scott Warner
047ebfb3ab
sepolicy: Address sensors denials
Change-Id: Iff842e7333fba5dd17cb3675caede95dd37e3780
Signed-off-by: DennySPb <dennyspb@gmail.com>
2021-07-16 18:42:51 +02:00
LuK1337
ff0ea35f8a
kunlun2: sepolicy: Address hal_sensors_default denials
Change-Id: I211841e7709e6e54edcce9951f5a52f7b7be6158
Signed-off-by: DennySPb <dennyspb@gmail.com>
2021-07-16 18:34:31 +02:00
LuK1337
cd50185651
sepolicy: rild: file->dir
Change-Id: I631cc080ad0dedecf24476bac84064575b809809
Signed-off-by: DennySPb <dennyspb@gmail.com>
2021-07-16 18:34:31 +02:00
LuK1337
da6ae287a6
sepolicy: Address rild denials
Change-Id: Ia081566c64e7cdc4007baab0de61ba8e62906a61
Signed-off-by: DennySPb <dennyspb@gmail.com>
2021-07-16 18:34:21 +02:00
Giammarco Senatore
dfbc4aeaba
kunlun2: Nuke neverallows
for real now
2021-07-16 18:33:17 +02:00
LuK1337
68d09ebf7f
Drop SSR blobs and set SSR restart_level in init.qcom.rc
Change-Id: I32fc08c9ad36b9c8ebfc019fc87a19eece18f0b4
Signed-off-by: DennySPb <dennyspb@gmail.com>
2021-07-16 17:54:58 +02:00
DennySPb
14f08dc1fe
Initial selinux policies
* convert existing one to vendor
2021-07-16 17:54:51 +02:00
Giammarco Senatore
38b77bd32e
kunlun2: Drop vendor_overlay and its hax 2021-07-11 17:06:19 +02:00
Giammarco Senatore
47f9cbc14b
kunlun2: Nuke neverallows 2021-05-14 15:13:34 +02:00
Georg Veichtlbauer
9e6425cf23
kunlun2: sepolicy: Allow changing read-ahead value in init
Change-Id: Id39212dcc9927192138b871a29f0bbafc85403ca
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
2021-04-01 18:28:27 +02:00
Giammarco Senatore
e0a7933eff
kunlun2: addressed some denials 2021-02-15 15:41:06 +01:00
xyyx
ad74ced2e6
kunlun2: Address FM Radio denials 2021-02-15 15:41:06 +01:00
GiaSen
abdf28791a kunlun2: sepolicy: cleanup and update 2021-01-02 21:05:16 +01:00
DennySPB
d4a7573cd1 kunlun2: Resolve power HAL denials on R
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
2021-01-01 19:18:32 +01:00
SamarV-121
30666f3913 kunlun2: Import Pixel power AIDL HAL
Nuke Powerstats
2021-01-01 17:52:11 +01:00
GiaSen
2f07f5abc0 kunlun2: Go enforcing
Bind mount etc files because vendor_overlay/29/etc makes device to reboot to recovery

from pstore
vdc: Command: cryptfs enablefilecrypto Failed: Status(-8, EX_SERVICE_SPECIFIC): '0: '
2021-01-01 13:33:47 +01:00
SamarV-121
fcd478120d kunlun2: power-libperfmgr: Convert to lenovo targets
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
2020-05-22 11:29:29 +02:00
SamarV-121
2d90abaa7c sdm710-common: Disable IOP and PERF HAL
* also revert 56f6504f61, eb7a690439, d5cb550169
 * in the favour of power-libperfmgr
 * also nuke all sepolicies for now
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
2020-05-22 11:27:40 +02:00
GiaSen
d4b68133ed kunlun2: nuke sepolicy again 2020-04-25 19:49:22 +02:00
SamarV-121
d660d30e22 kunlun2: sepolicy: Allow power hal to access tap to wake node
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
2020-04-12 03:13:03 +05:30
SamarV-121
d5cc7b6ce3 kunlun2: Remove all useless stuffs
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
2020-04-11 18:58:43 +05:30
SamarV-121
d07301de0a sdm710-common: Import QTI Power HAL from Lineage
* 0db671a262
 * https://github.com/LineageOS/android_hardware_lineage_interfaces/tree/lineage-17.1/power/1.0
 * rootdir: Disable vendor.power-hal-1-0
 * sepolicy: Lable android.hardware.power@1.2-service-qti

Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
2020-03-30 18:37:36 +05:30
Jake Weinstein
eb7a690439 sdm710-common: Enable UXE,IOP in perfconfigstore
Matches stock Qualcomm configuration and improves performance.
OnePlus disables this because of their framework features, which
we do not have.

Change-Id: I2b6e8c9ed59415bc7841bf244bd3dd9b5633088c
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
2020-03-30 18:37:36 +05:30
SamarV-121
879aa5df81 sdm710-common: sepolicy: Address selinux denials
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
2020-03-20 23:45:32 +05:30
SamarV-121
9934de7ac2 sdm710-common: Nuke sepolicy for now
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
2019-11-27 11:48:54 +00:00
LuK1337
172e69cd0d sdm710-common: Make SELinux great again!
Change-Id: Id479e031b584b24f79377aa244add20903a42b02
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
2019-10-12 09:41:10 +00:00
bgcngm
44ad53081b sdm710-common: Import and bind mount stock custom audio policy config
* The purpose is to apply the same BT A2DP fix that used to be
   applied in the individual device trees.
2019-09-26 01:14:55 +00:00
luca020400
fd9829737d sdm710-common: Import stub camera motor HAL 2019-09-21 14:53:31 +00:00
luca020400
3e5e42415f sdm710-common: sepolicy: Address neverallows 2019-09-09 14:44:27 +00:00
dianlujitao
4cb4078b40 sdm710-common: sepolicy: Allow system_server to read vendor camera props
Change-Id: I43a2404d9399a931b03e1d2c8589d0d4adb10fc3
2019-08-29 09:56:23 +00:00