LenovoZ5s/device_lenovo_sdm710-common
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

merge into: LenovoZ5s:fifteen/stable
Branches Tags
LenovoZ5s:fifteen/stable
LenovoZ5s:fourteen/dynamic
LenovoZ5s:thirteen/stable
LenovoZ5s:fourteen/pe
LenovoZ5s:thirteen/dynamic
LenovoZ5s:thirteen/untested
...
pull from: LenovoZ5s:thirteen/dynamic
Branches Tags
LenovoZ5s:fifteen/stable
LenovoZ5s:fourteen/dynamic
LenovoZ5s:thirteen/stable
LenovoZ5s:fourteen/pe
LenovoZ5s:thirteen/dynamic
LenovoZ5s:thirteen/untested

8 commits
fifteen/st ... thirteen/d

Author SHA1 Message Date
Mukul Dhir
e2fe741e9b
sdm710-common: sepolicy: Allow init to write to proc 
01-01 02:13:02.803   344   344 I hwservicemanager: Since android.hardware.keymaster@3.0::IKeymasterDevice/default is not registered, trying to start it as a lazy HAL.
01-01 02:13:02.804   371   371 I HidlServiceManagement: getService: Trying again for android.hardware.keymaster@3.0::IKeymasterDevice/default...
01-01 02:13:02.930     1     1 I init    : type=1400 audit(0.0:37): avc: denied { write } for name="dirty_background_bytes" dev="proc" ino=12937 scontext=u:r:init:s0 tcontext=u:object_r:proc:s0 tclass=file permissive=1
01-01 02:13:02.953     1     1 I init    : type=1400 audit(0.0:38): avc: denied { write } for name="discard_max_bytes" dev="sysfs" ino=20778 scontext=u:r:init:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
01-01 02:13:02.953     1     1 I init    : type=1400 audit(0.0:39): avc: denied { open } for path="/sys/devices/soc.0/f9824900.sdhci/mmc_host/mmc0/mmc0:0001/block/mmcblk0/queue/discard_max_bytes" dev="sysfs" ino=20778 scontext=u:r:init:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

Change-Id: I0283d0744619d82867318879152cd6fbfca094aa
 2023-11-13 23:05:34 +02:00
Michael Bestas
d5bc026c92
sdm710-common: sepolicy: legacy: Allow init write to discard_max_bytes 
system/core/rootdir/init.rc
1110:    write /dev/sys/block/by-name/userdata/queue/discard_max_bytes 134217728
1111:    write /dev/sys/block/by-name/rootdisk/queue/discard_max_bytes 134217728

Fixes: avc: denied { write } for comm="init" name="discard_max_bytes"
    dev="sysfs" ino=55527 scontext=u:r:init:s0
    tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
 2023-11-13 23:05:33 +02:00
Khusika Dhamar Gusti
385565f029
sdm710-common: sepolicy: Address kill denials 
Fixes:
avc: denied { kill } for comm="fsck.f2fs" capability=5 scontext=u:r:fsck:s0 tcontext=u:r:fsck:s0 tclass=capability permissive=0

Signed-off-by: Khusika Dhamar Gusti <mail@khusika.dev>
 2023-11-13 23:05:33 +02:00
halibw
e80a6564f5
sdm710-common: sepolicy: Allow init to relabelto logdump_partition 
Change-Id: I8a3d2c1b0ae6163eb595310e779fa0e74c505da7
 2023-11-13 23:05:33 +02:00
Le Hong Duc
50fed07446
sdm660-common: sepolicy: Label logdump partition 2023-11-13 23:05:33 +02:00
CakesTwix
4683e63404
sdm710-common: Drop KProfiles 
This reverts commit f8e389999a.
 2023-11-13 23:05:32 +02:00
Davide Garberi
1bc645396f
sdm710-common: Reserve size for system partition statically 
* With the older flag the system space size was being chosen statically,
  this way only the reserved size for Gapps is static while the whole size
  is being dynamically chosen

Change-Id: Ib9a59ab429f725b2f571c8b1d74cec8bb6ab72dc
 2023-11-13 23:05:32 +02:00
CakesTwix
9bbfd0eac9
sdm710-common: Update fstab, change metadata, update flags 2023-11-13 23:04:44 +02:00
11 changed files with 17 additions and 29 deletions
Show stats Expand all files Collapse all files

1
BoardConfigCommon.mk
View file

@ -101,6 +101,7 @@ BOARD_SUPER_PARTITION_BLOCK_DEVICES := vendor system
BOARD_SUPER_PARTITION_METADATA_DEVICE := system BOARD_SUPER_PARTITION_METADATA_DEVICE := system
BOARD_SUPER_PARTITION_VENDOR_DEVICE_SIZE := 1073741824 BOARD_SUPER_PARTITION_VENDOR_DEVICE_SIZE := 1073741824
BOARD_SUPER_PARTITION_SYSTEM_DEVICE_SIZE := 5368709120 BOARD_SUPER_PARTITION_SYSTEM_DEVICE_SIZE := 5368709120
BOARD_SYSTEMIMAGE_PARTITION_RESERVED_SIZE := 500019200
BOARD_SUPER_PARTITION_SIZE := $(shell expr $(BOARD_SUPER_PARTITION_VENDOR_DEVICE_SIZE) + $(BOARD_SUPER_PARTITION_SYSTEM_DEVICE_SIZE) ) BOARD_SUPER_PARTITION_SIZE := $(shell expr $(BOARD_SUPER_PARTITION_VENDOR_DEVICE_SIZE) + $(BOARD_SUPER_PARTITION_SYSTEM_DEVICE_SIZE) )
BOARD_SUPER_PARTITION_GROUPS := lenovo710_dynpart BOARD_SUPER_PARTITION_GROUPS := lenovo710_dynpart

13
rootdir/etc/fstab.qcom
View file

@ -6,13 +6,14 @@
# Currently we dont have e2fsck compiled. So fs check would failed. # Currently we dont have e2fsck compiled. So fs check would failed.
#<src> <mnt_point> <type> <mnt_flags and options> <fs_mgr_flags> #<src> <mnt_point> <type> <mnt_flags and options> <fs_mgr_flags>
system /system ext4 ro wait,logical,first_stage_mount system /system ext4 ro,barrier=1,discard wait,logical,first_stage_mount
system_ext /system_ext ext4 ro wait,logical,first_stage_mount system_ext /system_ext ext4 ro,barrier=1,discard wait,logical,first_stage_mount
product /product ext4 ro wait,logical,first_stage_mount product /product ext4 ro,barrier=1,discard wait,logical,first_stage_mount
vendor /vendor ext4 ro wait,logical,first_stage_mount vendor /vendor ext4 ro,barrier=1,discard wait,logical,first_stage_mount
odm /odm ext4 ro wait,logical,first_stage_mount odm /odm ext4 ro,barrier=1,discard wait,logical,first_stage_mount
/dev/block/bootdevice/by-name/recovery /recovery emmc defaults defaults
/dev/block/bootdevice/by-name/boot /boot emmc defaults defaults /dev/block/bootdevice/by-name/boot /boot emmc defaults defaults
/dev/block/bootdevice/by-name/logdump /metadata ext4 nosuid,nodev,noatime,discard wait,check,formattable,first_stage_mount /dev/block/by-name/logdump /metadata ext4 nosuid,nodev,noatime,discard wait,check,formattable,first_stage_mount
/dev/block/bootdevice/by-name/userdata /data ext4 noatime,nosuid,noatime,nodev,barrier=1,noauto_da_alloc,discard,lazytime latemount,wait,check,fileencryption=ice,reservedsize=128M /dev/block/bootdevice/by-name/userdata /data ext4 noatime,nosuid,noatime,nodev,barrier=1,noauto_da_alloc,discard,lazytime latemount,wait,check,fileencryption=ice,reservedsize=128M
/dev/block/bootdevice/by-name/cache /cache ext4 nosuid,noatime,nodev,barrier=1 wait /dev/block/bootdevice/by-name/cache /cache ext4 nosuid,noatime,nodev,barrier=1 wait
/devices/platform/soc/8804000.sdhci/mmc_host* /storage/sdcard1 vfat nosuid,nodev wait,voldmanaged=sdcard1:auto,encryptable=footer /devices/platform/soc/8804000.sdhci/mmc_host* /storage/sdcard1 vfat nosuid,nodev wait,voldmanaged=sdcard1:auto,encryptable=footer

6
rootdir/etc/init.target.rc
View file

@ -96,12 +96,6 @@ on boot
write /dev/cpuset/background/cpus 0-7 write /dev/cpuset/background/cpus 0-7
write /dev/cpuset/system-background/cpus 0-7 write /dev/cpuset/system-background/cpus 0-7
# Allow system to manipulate KProfiles modes and parameters
chown system system /sys/module/kprofiles/parameters/auto_kprofiles
chmod 0660 /sys/module/kprofiles/parameters/auto_kprofiles
chown system system /sys/module/kprofiles/parameters/kp_mode
chmod 0660 /sys/module/kprofiles/parameters/kp_mode
####Regionalization config and prop files#### ####Regionalization config and prop files####
chmod 0644 /persist/speccfg/spec chmod 0644 /persist/speccfg/spec
chmod 0644 /persist/speccfg/devicetype chmod 0644 /persist/speccfg/devicetype

4
sdm710.mk
View file

@ -279,10 +279,6 @@ PRODUCT_PACKAGES += \
vendor.lineage.livedisplay@2.0-service-sdm vendor.lineage.livedisplay@2.0-service-sdm
endif endif
# KProfiles
PRODUCT_PACKAGES += \
KProfiles
# Media # Media
PRODUCT_PACKAGES += \ PRODUCT_PACKAGES += \
libavservices_minijail \ libavservices_minijail \

1
sepolicy/private/init.te Normal file
View file

@ -0,0 +1 @@
allow init proc:file write;

3
sepolicy/vendor/file.te vendored
View file

@ -10,6 +10,3 @@ type sysfs_msm_subsys, sysfs_type, fs_type;
type sysfs_rpm, sysfs_type, fs_type; type sysfs_rpm, sysfs_type, fs_type;
type sysfs_system_sleep_stats, sysfs_type, fs_type; type sysfs_system_sleep_stats, sysfs_type, fs_type;
type sysfs_tp, fs_type, sysfs_type; type sysfs_tp, fs_type, sysfs_type;
# KProfiles
type sysfs_kprofiles, sysfs_type, fs_type;

4
sepolicy/vendor/file_contexts vendored
View file

@ -31,3 +31,7 @@
# Block devices # Block devices
/dev/block/platform/soc/7c4000\.sdhci/by-name/system u:object_r:system_block_device:s0 /dev/block/platform/soc/7c4000\.sdhci/by-name/system u:object_r:system_block_device:s0
/dev/block/platform/soc/7c4000\.sdhci/by-name/vendor u:object_r:system_block_device:s0 /dev/block/platform/soc/7c4000\.sdhci/by-name/vendor u:object_r:system_block_device:s0
/dev/block/platform/soc/7c4000\.sdhci/by-name/logdump u:object_r:metadata_block_device:s0
# MMC
/sys/devices/platform/soc/7c4000.sdhci/mmc_host/mmc0/mmc0:0001/block/mmcblk0/queue/discard_max_bytes u:object_r:sysfs_mmc_host:s0

1
sepolicy/vendor/fsck.te vendored Normal file
View file

@ -0,0 +1 @@
allow fsck fsck:capability kill;

4
sepolicy/vendor/genfs_contexts vendored
View file

@ -7,10 +7,6 @@ genfscon proc /sys/kernel/sched_boost u:object_r:proc_sysctl_sch
# DT2W # DT2W
genfscon sysfs /devices/virtual/touch/tp_dev/gesture_on u:object_r:sysfs_tp:s0 genfscon sysfs /devices/virtual/touch/tp_dev/gesture_on u:object_r:sysfs_tp:s0
# KProfiles
genfscon sysfs /module/kprofiles/parameters/auto_kprofiles u:object_r:sysfs_kprofiles:s0
genfscon sysfs /module/kprofiles/parameters/kp_mode u:object_r:sysfs_kprofiles:s0
# Graphics # Graphics
genfscon sysfs /devices/platform/soc/soc:qcom,msm-ext-disp/extcon/extcon1/name u:object_r:sysfs_graphics:s0 genfscon sysfs /devices/platform/soc/soc:qcom,msm-ext-disp/extcon/extcon1/name u:object_r:sysfs_graphics:s0
genfscon sysfs /devices/platform/soc/soc:qcom,msm-ext-disp/extcon/extcon2/name u:object_r:sysfs_graphics:s0 genfscon sysfs /devices/platform/soc/soc:qcom,msm-ext-disp/extcon/extcon2/name u:object_r:sysfs_graphics:s0

6
sepolicy/vendor/init.te vendored
View file

@ -1,6 +1,6 @@
get_prop(init, exported_default_prop)
allow init logdump_partition:lnk_file relabelto;
allow init self:netlink_route_socket rw_socket_perms_no_ioctl; allow init self:netlink_route_socket rw_socket_perms_no_ioctl;
allow init self:rawip_socket create_socket_perms_no_ioctl; allow init self:rawip_socket create_socket_perms_no_ioctl;
allow init socket_device:sock_file { unlink setattr create }; allow init socket_device:sock_file { unlink setattr create };
# Allow init to set attribute to sysfs_kprofiles
allow init sysfs_kprofiles:file { setattr };

3
sepolicy/vendor/system_app.te vendored
View file

@ -1,4 +1 @@
# Allow KProfiles to be adjusted by a system app
allow system_app sysfs_kprofiles:file rw_file_perms;
allow system_app zygote:unix_stream_socket getopt; allow system_app zygote:unix_stream_socket getopt;