Revert "sdm710-common: permissive selinux"

No need, enforce working!
This reverts commit 549291d79f.

BoardConfigCommon.mk

@@ -43,14 +43,12 @@ BOARD_KERNEL_CMDLINE := \
 		loop.max_part=7 \
 		kpti=off
 BOARD_KERNEL_CMDLINE += androidboot.android_dt_dir=/non-existent androidboot.boot_devices=soc/7c4000.sdhci
-BOARD_KERNEL_CMDLINE += androidboot.selinux=permissive
 BOARD_KERNEL_BASE := 0x00000000
 BOARD_KERNEL_PAGESIZE := 4096
 BOARD_KERNEL_TAGS_OFFSET := 0x00000100
 BOARD_RAMDISK_OFFSET := 0x01000000
 BOARD_KERNEL_IMAGE_NAME := Image.gz-dtb
 BOARD_KERNEL_SEPARATED_DTBO := true
-BOARD_RAMDISK_USE_LZ4 := true
 TARGET_KERNEL_ARCH := arm64
 TARGET_KERNEL_SOURCE := kernel/lenovo/sdm710
 TARGET_KERNEL_VERSION := 4.9
@@ -116,6 +114,7 @@ TARGET_COPY_OUT_SYSTEM_EXT := system_ext
 TARGET_ODM_PROP += $(COMMON_PATH)/odm.prop
 TARGET_PRODUCT_PROP += $(COMMON_PATH)/product.prop
 TARGET_SYSTEM_EXT_PROP += $(COMMON_PATH)/system_ext.prop
+TARGET_SYSTEM_PROP += $(COMMON_PATH)/system.prop
 TARGET_VENDOR_PROP += $(COMMON_PATH)/vendor.prop
 
 # Root
@@ -139,7 +138,7 @@ ENABLE_VENDOR_RIL_SERVICE := true
 
 # Sepolicy
 TARGET_USES_LOGDUMP_AS_METADATA := true
-include device/qcom/sepolicy_vndr/SEPolicy.mk
+include device/qcom/sepolicy_vndr-legacy-um/SEPolicy.mk
 
 SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += $(COMMON_PATH)/sepolicy/private
 BOARD_VENDOR_SEPOLICY_DIRS += $(COMMON_PATH)/sepolicy/vendor

product.prop

@@ -6,7 +6,6 @@ persist.audio.fluence.voicecall=true
 persist.audio.fluence.voicerec=false
 persist.audio.fluence.speaker=true
 persist.audio.fluence.voicecomm=true
-persist.vendor.bt.a2dp_offload_cap=sbc-aptx-aptxhd-aac-ldac
 ro.qc.sdk.audio.ssr=false
 ro.qc.sdk.audio.fluencetype=none
 
@@ -113,3 +112,6 @@ ro.zram.periodic_wb_delay_hours=24
 
 # Zygote
 persist.device_config.runtime_native.usap_pool_enabled=true
+
+# Radio
+persist.vendor.qti.telephony.vt_cam_interface=2

rootdir/etc/init.msm.usb.configfs.rc

@@ -1379,15 +1379,3 @@ on property:sys.usb.config=midi && property:sys.usb.configfs=1
 on property:sys.usb.config=midi,adb && property:sys.usb.configfs=1
     write /config/usb_gadget/g1/idVendor 0x18d1
     write /config/usb_gadget/g1/idProduct 0x4ee9
-
-on property:vendor.usb.eud=1
-    write /config/usb_gadget/g1/configs/b.1/MaxPower 1
-    write /sys/module/eud/parameters/enable 1
-    write /sys/kernel/debug/pmic-votable/USB_ICL/force_active 1
-    write /sys/kernel/debug/pmic-votable/USB_ICL/force_val 500
-
-on property:vendor.usb.eud=0
-    write /sys/kernel/debug/pmic-votable/USB_ICL/force_active 0
-    write /sys/kernel/debug/pmic-votable/USB_ICL/force_val 0
-    write /config/usb_gadget/g1/configs/b.1/MaxPower 0
-    write /sys/module/eud/parameters/enable 0

rootdir/etc/init.qcom.post_boot.sh

@@ -101,7 +101,6 @@ if [ $feature_id == 6 ]; then
 	echo 940800000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/min_freq
 	echo 1017600000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/max_freq
 	echo 3 > /sys/class/kgsl/kgsl-3d0/max_pwrlevel
-	echo {class:ddr, res:fixed, val: 1016} > /sys/kernel/debug/aop_send_message
 	setprop vendor.sku_identified 1
 elif [ $feature_id == 5 ]; then
 	echo "SKU Configured : SA6150"
@@ -126,7 +125,6 @@ elif [ $feature_id == 5 ]; then
 	echo 940800000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/min_freq
 	echo 1363200000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/max_freq
 	echo 2 > /sys/class/kgsl/kgsl-3d0/max_pwrlevel
-	echo {class:ddr, res:fixed, val: 1333} > /sys/kernel/debug/aop_send_message
 	setprop vendor.sku_identified 1
 elif [ $feature_id == 4 || $feature_id == 3 ]; then
 	echo "SKU Configured : SA6155"
@@ -151,7 +149,6 @@ elif [ $feature_id == 4 || $feature_id == 3 ]; then
 	echo 940800000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/min_freq
 	echo 1363200000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/max_freq
 	echo 0 > /sys/class/kgsl/kgsl-3d0/max_pwrlevel
-	echo {class:ddr, res:fixed, val: 1555} > /sys/kernel/debug/aop_send_message
 	setprop vendor.sku_identified 1
 else
 	echo "unknown feature_id value" $feature_id
@@ -176,7 +173,6 @@ else
 	echo 940800000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/min_freq
 	echo 1363200000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/max_freq
 	echo 0 > /sys/class/kgsl/kgsl-3d0/max_pwrlevel
-	echo {class:ddr, res:fixed, val: 1555} > /sys/kernel/debug/aop_send_message
     setprop vendor.sku_identified 1
 fi
 }
@@ -5047,12 +5043,6 @@ case "$target" in
         ;;
 esac
 
-case "$target" in
-    "qsd8650a_st1x")
-        mount -t debugfs none /sys/kernel/debug
-    ;;
-esac
-
 chown -h system /sys/devices/system/cpu/cpufreq/ondemand/sampling_rate
 chown -h system /sys/devices/system/cpu/cpufreq/ondemand/sampling_down_factor
 chown -h system /sys/devices/system/cpu/cpufreq/ondemand/io_is_busy

rootdir/etc/init.qcom.rc

@@ -35,20 +35,6 @@ on early-init
     rm /data/resource-cache
     rm /data/system/package_cache
 
-    mount debugfs debugfs /sys/kernel/debug
-    chmod 0755 /sys/kernel/debug
-    chown system system /sys/kernel/debug
-
-  # Change ownership of hw_recovery related nodes
-    chown system graphics /sys/kernel/debug/dri/0/debug/dump
-    chown system graphics /sys/kernel/debug/dri/0/debug/recovery_reg
-    chown system graphics /sys/kernel/debug/dri/0/debug/recovery_dbgbus
-    chown system graphics /sys/kernel/debug/dri/0/debug/recovery_vbif_dbgbus
-
-    # Change ownership of sw_sync node
-    chown system graphics /sys/kernel/debug/sync/sw_sync
-    chmod 0666 /sys/kernel/debug/sync/sw_sync
-
     chown root system /dev/kmsg
     chmod 0620 /dev/kmsg
     # Load WIGIG platform driver
@@ -81,8 +67,6 @@ on init
     write /sys/block/mmcblk0/queue/iostats 0
 
 on post-fs
-    chmod 0755 /sys/kernel/debug/tracing
-
     # Start services for bootanim
     start surfaceflinger
     start bootanim
@@ -153,8 +137,6 @@ on boot
     chown bluetooth bluetooth /sys/module/hci_smd/parameters/hcismd_set
     chown system system /sys/module/msm_core/parameters/polling_interval
     chown system system /sys/module/msm_core/parameters/disabled
-    chown system system /sys/kernel/debug/msm_core/enable
-    chown system system /sys/kernel/debug/msm_core/ptable
     chown system system /sys/kernel/boot_slpi/ssr
     chown system system /sys/module/radio_iris_transport/parameters/fmsmd_set
     chmod 0660 /sys/module/bluetooth_power/parameters/power
@@ -215,9 +197,6 @@ on boot
 
     setprop ro.telephony.call_ring.multiple false
 
-    #enable camera read sensors data
-    setprop persist.camera.gyro.disable 0
-
     #Remove SUID bit for iproute2 ip tool
     chmod 0755 /system/bin/ip
 
@@ -984,13 +963,6 @@ service poweroffhandler /system/vendor/bin/poweroffhandler
 on property:vendor.display.lcd_density=*
     setprop ro.sf.lcd_density ${vendor.display.lcd_density}
 
-# Logcat dump daemon, dumps logs to logdump partition
-service logdumpd /system/bin/logcat -b all -v threadtime -D -w /dev/block/bootdevice/by-name/logdump
-    class core
-    writepid /dev/cpuset/system-background/tasks
-    seclabel u:r:logdumpd:s0
-    disabled
-
 service time_daemon /vendor/bin/time_daemon
     class main
     user system

sdm710.mk

@@ -257,6 +257,9 @@ PRODUCT_PACKAGES += \
 # HWUI
 HWUI_COMPILE_FOR_PERF := true 
 
+# Kernel
+PRODUCT_SET_DEBUGFS_RESTRICTIONS := true
+
 # Input
 PRODUCT_COPY_FILES += \
     $(LOCAL_PATH)/keylayout/fts_ts.kl:$(TARGET_COPY_OUT_SYSTEM)/usr/keylayout/fts_ts.kl

sepolicy/vendor/file.te

@@ -1,7 +1,6 @@
 type fingerprint_data_file, data_file_type, file_type;
 type thermal_data_file, data_file_type, file_type;
 
-type debugfs_sched_features, debugfs_type, fs_type;
 type proc_sysctl_schedboost, proc_type, fs_type;
 
 type sysfs_fingerprint, sysfs_type, fs_type;

sepolicy/vendor/genfs_contexts

@@ -1,7 +1,6 @@
 genfscon sysfs /power/rpmh_stats/master_stats         u:object_r:sysfs_rpm:s0
 genfscon sysfs /power/system_sleep/stats              u:object_r:sysfs_system_sleep_stats:s0
 
-genfscon debugfs /sched_features                      u:object_r:debugfs_sched_features:s0
 genfscon proc /sys/kernel/sched_boost                 u:object_r:proc_sysctl_schedboost:s0
 
 # DT2W

sepolicy/vendor/hal_power_default.te

@@ -16,7 +16,6 @@ allow hal_power_default sysfs_devices_system_cpu:file rw_file_perms;
 allow hal_power_default device_latency:chr_file rw_file_perms;
 allow hal_power_default cgroup:dir search;
 allow hal_power_default cgroup:file rw_file_perms;
-allow hal_power_default debugfs_sched_features:file rw_file_perms;
 allow hal_power_default proc_sysctl_schedboost:file rw_file_perms;
 
 # Allow power hal to talk to mm-pp-daemon to control display lpm

sepolicy/vendor/init.te

@@ -5,5 +5,4 @@ allow init self:netlink_route_socket rw_socket_perms_no_ioctl;
 allow init self:rawip_socket create_socket_perms_no_ioctl;
 allow init socket_device:sock_file { unlink setattr create };
 
-allow init debugfs_tracing_debug:dir mounton;
 allow init proc:file write;

sepolicy/vendor/ueventd.te

@@ -1,4 +0,0 @@
-allow ueventd debugfs:dir { getattr open read relabelfrom };
-allow ueventd { debugfs debugfs_wakeup_sources }:file getattr;
-allow ueventd qti_debugfs:dir relabelto;
-allow ueventd { debugfs debugfs_sched_features }:file getattr;

system.prop

@@ -0,0 +1,14 @@
+# Bluetooth
+vendor.qcom.bluetooth.soc=cherokee
+
+# Audio
+persist.vendor.bt.a2dp_offload_cap=sbc-aptx-aptxhd-aac-ldac
+
+# Multi-gen LRU
+persist.device_config.mglru_native.lru_gen_config=all
+
+# Graphics
+ro.hwui.render_ahead=20
+
+# System Server
+arm64.memtag.process.system_server=off

vendor.prop

@@ -82,7 +82,6 @@ vendor.audio.feature.snd_mon.enable=true
 vendor.voice.path.for.pcm.voip=true
 
 # Bluetooth
-vendor.bluetooth.soc=cherokee
 bluetooth.device.class_of_device=90,2,12
 bluetooth.hardware.power.operating_voltage_mv=3300
 bluetooth.profile.asha.central.enabled?=true
@@ -123,7 +122,6 @@ debug.sf.phase_offset_threshold_for_next_vsync_ns=6100000
 
 # Graphics
 debug.sf.auto_latch_unsignaled=true
-ro.hwui.render_ahead=20
 debug.hwui.renderer=opengl
 
 # Fastbootd
@@ -142,13 +140,9 @@ debug.stagefright.omx_default_rank=0
 ro.vendor.extension_library=libqti-perfd-client.so
 ro.vendor.perf.scroll_opt=true
 
-# Multi-gen LRU
-persist.device_config.mglru_native.lru_gen_config=all
-
 # Radio
 ro.carrier=unknown
 persist.radio.multisim.config=dsds
-persist.vendor.qti.telephony.vt_cam_interface=2
 persist.vendor.radio.add_power_save=1
 persist.vendor.radio.apm_sim_not_pwdn=1
 persist.vendor.radio.sib16_support=1
@@ -162,9 +156,6 @@ persist.vendor.radio.mt_sms_ack=30
 ro.soc.manufacturer=QTI
 ro.soc.model=SDM710
 
-# System Server
-arm64.memtag.process.system_server=off
-
 # Target specific Netflix custom property
 ro.netflix.bsp_rev=Q855-16947-1