Compare commits

...

7 commits

Author SHA1 Message Date
1b963754dc
Revert "sdm710-common: permissive selinux"
No need, enforce working!
This reverts commit 549291d79f.
2023-11-25 20:31:06 +02:00
4be6a6ab65
Revert "sdm710-common: Enable LZ4 compression for ramdisks"
Could not decompress initial ramdisk image.

Booting to EDL
You can get dmesg from EDL, dump memory and read any HEX Reader, for example - GHex
This reverts commit c264973aa9.
2023-11-25 20:28:50 +02:00
Hridya Valsaraju
57fdca22c4
sdm710-common: Set PRODUCT_SET_DEBUGFS_RESTRICTIONS
Starting with Android R launched devices, debugfs cannot be mounted in
production builds. In order to avoid accidental debugfs dependencies
from creeping in during development with userdebug/eng builds, the
build flag PRODUCT_SET_DEBUGFS_RESTRICTIONS can be set by vendors to
enforce additional debugfs restrictions for userdebug/eng builds. The
same flag will be used to enable sepolicy neveallow statements to
prevent new permissions added for debugfs access.

Test: build, boot
Bug: 184381659
Change-Id: I45e6f20c886d467a215c9466f3a09965ff897d7e
2023-11-25 20:27:36 +02:00
P.Adarsh Reddy
96f59c5c55
sdm710-common: Clean up the no longer used logdump service code.
Change-Id: Iaeacbe4f2c99c9251be9ee1bde756f6abf25c021
2023-11-24 18:56:36 +02:00
Alcatraz323
af617d4761
sdm710-common: sepolicy: fix vendor_init prop access denial
* these prop should be accessed by init process from /system partition
I /system/bin/init: type=1107 audit(0.0:3): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc:  denied  { set } for property=persist.vendor.bt.a2dp_offload_cap pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:bluetooth_prop:s0 tclass=property_service permissive=1'
I /system/bin/init: type=1107 audit(0.0:4): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc:  denied  { set } for property=ro.hwui.render_ahead pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:default_prop:s0 tclass=property_service permissive=1'
2023-11-24 16:52:14 +02:00
Amit Kushwaha
8157888ada
sdm710-common: init.qcom.rc: Removing unused setprop persist.camera.gyro.disable
Addressing error :
 avc:  denied  { set } for property=persist.camera.gyro.disable pid=377 uid=0 gid=0
 scontext=u:r:vendor_init:s0 tcontext=u:object_r:default_prop:s0
 tclass=property_service permissive=0\x0a

CRs-Fixed: 2662429

Change-Id: Ibd0ed4646d52d67248ea33940c4463ecdbdefc36
2023-11-24 15:58:27 +02:00
95854fb8bc
Revert "sm7325-common: Migrate to restructured sepolicy_vndr"
PE not used this
This reverts commit a7bcd58d98.
2023-11-23 19:54:19 +02:00
13 changed files with 23 additions and 72 deletions

View file

@ -43,14 +43,12 @@ BOARD_KERNEL_CMDLINE := \
loop.max_part=7 \
kpti=off
BOARD_KERNEL_CMDLINE += androidboot.android_dt_dir=/non-existent androidboot.boot_devices=soc/7c4000.sdhci
BOARD_KERNEL_CMDLINE += androidboot.selinux=permissive
BOARD_KERNEL_BASE := 0x00000000
BOARD_KERNEL_PAGESIZE := 4096
BOARD_KERNEL_TAGS_OFFSET := 0x00000100
BOARD_RAMDISK_OFFSET := 0x01000000
BOARD_KERNEL_IMAGE_NAME := Image.gz-dtb
BOARD_KERNEL_SEPARATED_DTBO := true
BOARD_RAMDISK_USE_LZ4 := true
TARGET_KERNEL_ARCH := arm64
TARGET_KERNEL_SOURCE := kernel/lenovo/sdm710
TARGET_KERNEL_VERSION := 4.9
@ -116,6 +114,7 @@ TARGET_COPY_OUT_SYSTEM_EXT := system_ext
TARGET_ODM_PROP += $(COMMON_PATH)/odm.prop
TARGET_PRODUCT_PROP += $(COMMON_PATH)/product.prop
TARGET_SYSTEM_EXT_PROP += $(COMMON_PATH)/system_ext.prop
TARGET_SYSTEM_PROP += $(COMMON_PATH)/system.prop
TARGET_VENDOR_PROP += $(COMMON_PATH)/vendor.prop
# Root
@ -139,7 +138,7 @@ ENABLE_VENDOR_RIL_SERVICE := true
# Sepolicy
TARGET_USES_LOGDUMP_AS_METADATA := true
include device/qcom/sepolicy_vndr/SEPolicy.mk
include device/qcom/sepolicy_vndr-legacy-um/SEPolicy.mk
SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += $(COMMON_PATH)/sepolicy/private
BOARD_VENDOR_SEPOLICY_DIRS += $(COMMON_PATH)/sepolicy/vendor

View file

@ -6,7 +6,6 @@ persist.audio.fluence.voicecall=true
persist.audio.fluence.voicerec=false
persist.audio.fluence.speaker=true
persist.audio.fluence.voicecomm=true
persist.vendor.bt.a2dp_offload_cap=sbc-aptx-aptxhd-aac-ldac
ro.qc.sdk.audio.ssr=false
ro.qc.sdk.audio.fluencetype=none
@ -113,3 +112,6 @@ ro.zram.periodic_wb_delay_hours=24
# Zygote
persist.device_config.runtime_native.usap_pool_enabled=true
# Radio
persist.vendor.qti.telephony.vt_cam_interface=2

View file

@ -1379,15 +1379,3 @@ on property:sys.usb.config=midi && property:sys.usb.configfs=1
on property:sys.usb.config=midi,adb && property:sys.usb.configfs=1
write /config/usb_gadget/g1/idVendor 0x18d1
write /config/usb_gadget/g1/idProduct 0x4ee9
on property:vendor.usb.eud=1
write /config/usb_gadget/g1/configs/b.1/MaxPower 1
write /sys/module/eud/parameters/enable 1
write /sys/kernel/debug/pmic-votable/USB_ICL/force_active 1
write /sys/kernel/debug/pmic-votable/USB_ICL/force_val 500
on property:vendor.usb.eud=0
write /sys/kernel/debug/pmic-votable/USB_ICL/force_active 0
write /sys/kernel/debug/pmic-votable/USB_ICL/force_val 0
write /config/usb_gadget/g1/configs/b.1/MaxPower 0
write /sys/module/eud/parameters/enable 0

View file

@ -101,7 +101,6 @@ if [ $feature_id == 6 ]; then
echo 940800000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/min_freq
echo 1017600000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/max_freq
echo 3 > /sys/class/kgsl/kgsl-3d0/max_pwrlevel
echo {class:ddr, res:fixed, val: 1016} > /sys/kernel/debug/aop_send_message
setprop vendor.sku_identified 1
elif [ $feature_id == 5 ]; then
echo "SKU Configured : SA6150"
@ -126,7 +125,6 @@ elif [ $feature_id == 5 ]; then
echo 940800000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/min_freq
echo 1363200000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/max_freq
echo 2 > /sys/class/kgsl/kgsl-3d0/max_pwrlevel
echo {class:ddr, res:fixed, val: 1333} > /sys/kernel/debug/aop_send_message
setprop vendor.sku_identified 1
elif [ $feature_id == 4 || $feature_id == 3 ]; then
echo "SKU Configured : SA6155"
@ -151,7 +149,6 @@ elif [ $feature_id == 4 || $feature_id == 3 ]; then
echo 940800000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/min_freq
echo 1363200000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/max_freq
echo 0 > /sys/class/kgsl/kgsl-3d0/max_pwrlevel
echo {class:ddr, res:fixed, val: 1555} > /sys/kernel/debug/aop_send_message
setprop vendor.sku_identified 1
else
echo "unknown feature_id value" $feature_id
@ -176,7 +173,6 @@ else
echo 940800000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/min_freq
echo 1363200000 > /sys/class/devfreq/soc\:qcom,cpu6-cpu-l3-lat/max_freq
echo 0 > /sys/class/kgsl/kgsl-3d0/max_pwrlevel
echo {class:ddr, res:fixed, val: 1555} > /sys/kernel/debug/aop_send_message
setprop vendor.sku_identified 1
fi
}
@ -5047,12 +5043,6 @@ case "$target" in
;;
esac
case "$target" in
"qsd8650a_st1x")
mount -t debugfs none /sys/kernel/debug
;;
esac
chown -h system /sys/devices/system/cpu/cpufreq/ondemand/sampling_rate
chown -h system /sys/devices/system/cpu/cpufreq/ondemand/sampling_down_factor
chown -h system /sys/devices/system/cpu/cpufreq/ondemand/io_is_busy

View file

@ -35,20 +35,6 @@ on early-init
rm /data/resource-cache
rm /data/system/package_cache
mount debugfs debugfs /sys/kernel/debug
chmod 0755 /sys/kernel/debug
chown system system /sys/kernel/debug
# Change ownership of hw_recovery related nodes
chown system graphics /sys/kernel/debug/dri/0/debug/dump
chown system graphics /sys/kernel/debug/dri/0/debug/recovery_reg
chown system graphics /sys/kernel/debug/dri/0/debug/recovery_dbgbus
chown system graphics /sys/kernel/debug/dri/0/debug/recovery_vbif_dbgbus
# Change ownership of sw_sync node
chown system graphics /sys/kernel/debug/sync/sw_sync
chmod 0666 /sys/kernel/debug/sync/sw_sync
chown root system /dev/kmsg
chmod 0620 /dev/kmsg
# Load WIGIG platform driver
@ -81,8 +67,6 @@ on init
write /sys/block/mmcblk0/queue/iostats 0
on post-fs
chmod 0755 /sys/kernel/debug/tracing
# Start services for bootanim
start surfaceflinger
start bootanim
@ -153,8 +137,6 @@ on boot
chown bluetooth bluetooth /sys/module/hci_smd/parameters/hcismd_set
chown system system /sys/module/msm_core/parameters/polling_interval
chown system system /sys/module/msm_core/parameters/disabled
chown system system /sys/kernel/debug/msm_core/enable
chown system system /sys/kernel/debug/msm_core/ptable
chown system system /sys/kernel/boot_slpi/ssr
chown system system /sys/module/radio_iris_transport/parameters/fmsmd_set
chmod 0660 /sys/module/bluetooth_power/parameters/power
@ -215,9 +197,6 @@ on boot
setprop ro.telephony.call_ring.multiple false
#enable camera read sensors data
setprop persist.camera.gyro.disable 0
#Remove SUID bit for iproute2 ip tool
chmod 0755 /system/bin/ip
@ -984,13 +963,6 @@ service poweroffhandler /system/vendor/bin/poweroffhandler
on property:vendor.display.lcd_density=*
setprop ro.sf.lcd_density ${vendor.display.lcd_density}
# Logcat dump daemon, dumps logs to logdump partition
service logdumpd /system/bin/logcat -b all -v threadtime -D -w /dev/block/bootdevice/by-name/logdump
class core
writepid /dev/cpuset/system-background/tasks
seclabel u:r:logdumpd:s0
disabled
service time_daemon /vendor/bin/time_daemon
class main
user system

View file

@ -257,6 +257,9 @@ PRODUCT_PACKAGES += \
# HWUI
HWUI_COMPILE_FOR_PERF := true
# Kernel
PRODUCT_SET_DEBUGFS_RESTRICTIONS := true
# Input
PRODUCT_COPY_FILES += \
$(LOCAL_PATH)/keylayout/fts_ts.kl:$(TARGET_COPY_OUT_SYSTEM)/usr/keylayout/fts_ts.kl

View file

@ -1,7 +1,6 @@
type fingerprint_data_file, data_file_type, file_type;
type thermal_data_file, data_file_type, file_type;
type debugfs_sched_features, debugfs_type, fs_type;
type proc_sysctl_schedboost, proc_type, fs_type;
type sysfs_fingerprint, sysfs_type, fs_type;

View file

@ -1,7 +1,6 @@
genfscon sysfs /power/rpmh_stats/master_stats u:object_r:sysfs_rpm:s0
genfscon sysfs /power/system_sleep/stats u:object_r:sysfs_system_sleep_stats:s0
genfscon debugfs /sched_features u:object_r:debugfs_sched_features:s0
genfscon proc /sys/kernel/sched_boost u:object_r:proc_sysctl_schedboost:s0
# DT2W

View file

@ -16,7 +16,6 @@ allow hal_power_default sysfs_devices_system_cpu:file rw_file_perms;
allow hal_power_default device_latency:chr_file rw_file_perms;
allow hal_power_default cgroup:dir search;
allow hal_power_default cgroup:file rw_file_perms;
allow hal_power_default debugfs_sched_features:file rw_file_perms;
allow hal_power_default proc_sysctl_schedboost:file rw_file_perms;
# Allow power hal to talk to mm-pp-daemon to control display lpm

View file

@ -5,5 +5,4 @@ allow init self:netlink_route_socket rw_socket_perms_no_ioctl;
allow init self:rawip_socket create_socket_perms_no_ioctl;
allow init socket_device:sock_file { unlink setattr create };
allow init debugfs_tracing_debug:dir mounton;
allow init proc:file write;

View file

@ -1,4 +0,0 @@
allow ueventd debugfs:dir { getattr open read relabelfrom };
allow ueventd { debugfs debugfs_wakeup_sources }:file getattr;
allow ueventd qti_debugfs:dir relabelto;
allow ueventd { debugfs debugfs_sched_features }:file getattr;

14
system.prop Normal file
View file

@ -0,0 +1,14 @@
# Bluetooth
vendor.qcom.bluetooth.soc=cherokee
# Audio
persist.vendor.bt.a2dp_offload_cap=sbc-aptx-aptxhd-aac-ldac
# Multi-gen LRU
persist.device_config.mglru_native.lru_gen_config=all
# Graphics
ro.hwui.render_ahead=20
# System Server
arm64.memtag.process.system_server=off

View file

@ -82,7 +82,6 @@ vendor.audio.feature.snd_mon.enable=true
vendor.voice.path.for.pcm.voip=true
# Bluetooth
vendor.bluetooth.soc=cherokee
bluetooth.device.class_of_device=90,2,12
bluetooth.hardware.power.operating_voltage_mv=3300
bluetooth.profile.asha.central.enabled?=true
@ -123,7 +122,6 @@ debug.sf.phase_offset_threshold_for_next_vsync_ns=6100000
# Graphics
debug.sf.auto_latch_unsignaled=true
ro.hwui.render_ahead=20
debug.hwui.renderer=opengl
# Fastbootd
@ -142,13 +140,9 @@ debug.stagefright.omx_default_rank=0
ro.vendor.extension_library=libqti-perfd-client.so
ro.vendor.perf.scroll_opt=true
# Multi-gen LRU
persist.device_config.mglru_native.lru_gen_config=all
# Radio
ro.carrier=unknown
persist.radio.multisim.config=dsds
persist.vendor.qti.telephony.vt_cam_interface=2
persist.vendor.radio.add_power_save=1
persist.vendor.radio.apm_sim_not_pwdn=1
persist.vendor.radio.sib16_support=1
@ -162,9 +156,6 @@ persist.vendor.radio.mt_sms_ack=30
ro.soc.manufacturer=QTI
ro.soc.model=SDM710
# System Server
arm64.memtag.process.system_server=off
# Target specific Netflix custom property
ro.netflix.bsp_rev=Q855-16947-1