63 Commits

Author SHA1 Message Date
Nolen Johnson
d40cb2d754 sm7325-common: Rename chargeonly_data_file to chargeonly_vendor_data_file
* For some magical reason, the naming (and not just associations)
  matter as of a few days ago - no clue why.

Change-Id: I6cf12b455dbf460a9be607d796af3536093e8427
2024-03-05 22:20:15 -05:00
Nolen Johnson
3c3de6b813 sm7325-common: sepolicy: Allow some processes to kill themselves
Change-Id: I6b51f99d76ba82aca9498d8218373958b8df938d
2024-01-24 01:54:45 +00:00
Nolen Johnson
c2e8af7507 Revert "sm7325-common: sepolicy: address schedtune*"
This reverts commit 55772d45005910e6764c0b457e840f1cc85f1f71.

Reason for revert: Brought to my attention that this is way too broad. Agree.

Change-Id: I3e2fec355960844d2af8af3212780245fc53d66b
(cherry picked from commit 5cd03a02dcc34e31fe40c15ec9c7217b66089234)
2023-11-03 17:31:12 +00:00
Andrew Hexen
efd7c01bac sm7325-common: sepolicy: address schedtune*
avc: denied { create } for name="schedtune.prefer_idle" scontext=u:r:vendor_init:s0 tcontext=u:object_r:device:s0 tclass=file permissive=0
init: Command 'write /dev/stune/camera-daemon/schedtune.prefer_idle 1' action=boot (/vendor/etc/init/hw/init.target.rc:109) took 2ms and failed: Unable to write to file '/dev/stune/camera-daemon/schedtune.prefer_idle': open() failed: Permission denied

avc: denied { create } for name="schedtune.boost" scontext=u:r:vendor_init:s0 tcontext=u:object_r:device:s0 tclass=file
init: Command 'write /dev/stune/camera-daemon/schedtune.boost 0' action=boot (/vendor/etc/init/hw/init.target.rc:110) took 3ms and failed: Unable to write to file '/dev/stune/camera-daemon/schedtune.boost': open() failed: Permission denied

Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: I4111e507598a18c246593f6a7a92769e8d7e7013
(cherry picked from commit 55772d45005910e6764c0b457e840f1cc85f1f71)
2023-11-03 16:50:15 +00:00
Andrew Hexen
56d93f30a0
sm7325-common: symlink vendor/fsg to system_root
* Seems to be an issue where if modemst1/2 (efs) is wiped modem only looks for fsg to rebuild efs in the root_directory.

* Even though this isn't correct it should allow radio to be easily flashed during future firmware upgrades as the stock radio.img is a container which flashes fsg/modem then passes the command to wipe modemst*

Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: Ic7acabbe16d66740b3aee414be60c24d3a0de43d
2023-10-26 06:09:48 -07:00
Andrew Hexen
cb11d4250f
sm7325-common: sepolicy: fix init.oem.fingerprint2.sh
* For dynamic fingerprint.

Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: I3f3b4904b8ca3d0e3fb7d8eae235a65996df2434
2023-08-31 03:24:56 -07:00
Andrew Hexen
d2f6ea07a5
sm7325-common: lights: remove non-existant node
* original bringup on 19.1 this did exist but no longer seems to be the case.

Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: I09998c24652faab76ce0cb58b74e65d3a87295a8
2023-08-10 10:48:50 -07:00
Erik Drozina
497a7b1b61 sm7325-common: sepolicy: Label some RIL property
W/libc: Access denied finding property "{ro.vendor.ril.svlte1x,ro.vendor.ril.svdo,ro.fota.oem,ro.product.marketname}"

Signed-off-by: Erik Drozina <erikdro41@gmail.com>
Change-Id: I7272823540980a927cfb8243122de941e16a97c2
2023-06-22 02:33:27 +02:00
Michael Bestas
17da50dfc4 sm7325-common: sepolicy: Resolve vendor_init_touch denials
Change-Id: Ia71c46662f12f3939e1a4d51b4ab06101f8cc9b7
2023-06-21 13:26:42 -03:00
Michael Bestas
f958dbb553 sm7325-common: sepolicy: Allow rild read mnt_vendor_file dir
Change-Id: I099d1ea9e0c690af7e96764852b2122ac8bf6ae9
2023-06-21 13:26:30 -03:00
Marc Bourgoin
c233285c22 sm7325-common: Commonize sepolicy
Change-Id: Idbc4e5f655fd19cc4754aab99d8bb236a73f9a12
2023-04-28 08:46:40 -06:00
Marc Bourgoin
a149d5bf76 sm7325-common: Address some xpeng fingerprint denials
Change-Id: Ie49d70441f5440c92b8dea3d086bda5502b95be6
2023-04-23 00:45:15 -06:00
Marc Bourgoin
bb40495639 sm7325-common: Initial xpeng support
Motorola Moto g200 5G (aka Motorola Edge S30)

Change-Id: Iea52112fefb54cc60c2c99f66ae848e54dc2be1c
2023-04-23 00:45:11 -06:00
Andrew Hexen
c42e6238fa sm7325-common: sepolicy: address berlna inclusion
Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: I7fe90b00a54e56abb977f6edfef2da7fbcf1509c
(cherry picked from commit e9023f971a09242e69ef14788c0c9af83291ac42)
2023-02-08 19:15:05 +01:00
Andrew Hexen
99f323a64e sm7325-common: sepolicy: address vendor_hal_imsfactory_hwservice
Fixes:
avc: denied  { find } for interface=vendor.qti.ims.factory::IImsFactory sid=u:r:vendor_dataservice_app:s0 pid=2653 scontext=u:r:vendor_dataservice_app:s0 tcontext=u:object_r:vendor_hal_imsfactory_hwservice:s0 tclass=hwservice_manager

Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: Icda45278cd964f545be7f757deafb2a5a9cda0c1
(cherry picked from commit 7eb7df7e96a9a59b493b4346c6a3d62085b4ca68)
2023-02-08 19:14:41 +01:00
Andrew Hexen
133239452c sm7325-common: Add berlna to guards
Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: Iac7b5aa9778ecb9d01c1dc54f18eccdbdfde48d7
2023-01-25 22:58:01 +01:00
Michael Bestas
113654f8ed sm7325-common: sepolicy: Remove duplicate wakeup nodes
Needed after I026cd6930459262c31c401e57444cfe2b60357b7

Change-Id: I0522bafab2605b3d0ab5a147154b32fa9ee3ce37
2023-01-18 00:30:59 +01:00
Andrew Hexen
86fbf4f8be sm7325-common: sepolicy: fix property_contexts for MotCamera
* Move the props to private and redefine vendor_camera_prop

Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: I77a99969311b98739198cbaa2543e150167787d4
2022-10-11 15:28:08 -04:00
sb6596
9140dc75a1 sm7325-common: Address additional vendor_qti_init_shell denials
Signed-off-by: sb6596 <shubhamprince111@gmail.com>
Change-Id: I527a4d43e88183a4b608aac860f71452c7ed93b8
2022-10-11 15:28:02 -04:00
SamarV-121
71f89622fd sm7325-common: sepolicy: Allow hal_fingerprint_default to make self binder calls
`avc: denied { call } for comm="android.hardwar" scontext=u:r:hal_fingerprint_default:s0 tcontext=u:r:hal_fingerprint_default:s0 tclass=binder permissive=0`

Signed-off-by: sb6596 <shubhamprince111@gmail.com>
Change-Id: I7bdac61d9705f24ae068c522cf73af9c094ad97f
2022-10-11 15:27:56 -04:00
Jasmine Cha
bff9489c0e sm7325-common: sepolicy: add permission to request health/sensor data
- Add audio hal into hal_health clients
- Allow audio hal to find fwk_sensor_hwservice
SELinux : avc:  denied  { find } for interface=android.frameworks.sensorservice::ISensorManager sid=u:r:hal_audio_default:s0 pid=5907 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:fwk_sensor_hwservice:s0 tclass=hwservice_manager permissive=1
SELinux : avc:  denied  { find } for interface=android.hardware.health::IHealth sid=u:r:hal_audio_default:s0 pid=9875 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:hal_health_hwservice:s0 tclass=hwservice_manager permissive=1
audio.service: type=1400 audit(0.0:14): avc: denied { call } for scontext=u:r:hal_audio_default:s0 tcontext=u:r:hal_health_default:s0 tclass=binder permissive=1
audio.service: type=1400 audit(0.0:15): avc: denied { transfer } for scontext=u:r:hal_audio_default:s0 tcontext=u:r:hal_health_default:s0 tclass=binder permissive=1

Bug: 199382564
Bug: 199801586
Test: build pass

Signed-off-by: Jasmine Cha <chajasmine@google.com>
Change-Id: I8e8a512cfbd6be814c98bac75ff6c0e5db028db2
2022-10-11 15:27:50 -04:00
Jeferson
d188362b07 sm7325-common: sepolicy: Label vendor.net.qmi.rev_ip_info as radio prop
* `avc: denied { set } for property=vendor.net.qmi.rev_ip_info pid=1301 uid=1001 gid=1001 scontext=u:r:netmgrd:s0 tcontext=u:object_r:vendor_default_prop:s0 tclass=property_service permissive=0`
  `init: Unable to set property 'vendor.net.qmi.rev_ip_info' from uid:1001 gid:1001 pid:1301: SELinux permission check failed`

Change-Id: Ie6047f7ed4180212836eaa38b3472a1a99f991b8
2022-10-11 15:18:25 -04:00
AdarshGrewal
edad8ae1cf sm7325-common: Drop support for AdaptiveBacklight from livedisplay
* Neither berlin nor dubai supports it.

Change-Id: I22842a489b1cfcb3f32ea3464338597473df912e
2022-10-11 15:18:00 -04:00
Cosmin Tanislav
f65f648212 sm7325-common: remove light hal
Change-Id: I5307764a5a04b5a28f940b31759a4552cc75a0a2
2022-10-08 00:09:40 +02:00
Marc Bourgoin
e132be9416 sm7325-common: Drop dubai touch sepolicy
I don't currently see a way to modify high touch polling rate...
If in the future a way is found? We can always revert this anyways
but for now it's better to remove it instead of having a placebo
toggle that doesn't do anything.

Change-Id: I192857434edcea470601ab067eb1971c6a97874a
2022-09-29 20:05:44 -06:00
Marc Bourgoin
75dc802330 sm7325-common: Address dubai's DT2W denials
Change-Id: I0a0f892185eb98017aafa948d103155780954367
2022-09-25 14:58:33 -06:00
Marc Bourgoin
357641de5b sm7325-common: Address dubai's Egistec UDFPS selinux denials
Change-Id: Ibfd955256d95384bda17ad5404bc269d769ae347
2022-09-25 14:58:33 -06:00
Marc Bourgoin
032a78d43f sm7325-common: Import stock charge_only_mode
Change-Id: I3542bac25ac2a161a165c55cbabe93ec75c04ce8
2022-09-20 10:08:57 +02:00
dianlujitao
3605aa48b1 sm7325-common: Ensure multisim property gets set at early stage
Change-Id: I8066dbd0a466f008ec1ce3144b76922fe1b7e750
2022-09-03 12:27:22 -06:00
Marc Bourgoin
27a8c002ce sm7325-common: Address dubai's vibrator denials
Example:
I auditd  : type=1400 audit(0.0:18): avc: denied { open } for comm="vendor.qti.hard" path="/sys/devices/platform/soc/990000.i2c/i2c-1/1-005a/leds/vibrator/activate" dev="sysfs" ino=93558 scontext=u:r:hal_vibrator_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file

Change-Id: Iea46e718f4e2c1ed3b3037dcfecb4536fd47ef2d
2022-08-27 12:01:35 -06:00
SGCMarkus
b07ea4d7ae sm7325-common: sepolicy: allow init.oem.hw to log into kmsg
Change-Id: Ib7c73cd1ff18b800c791c322e4960dd94b9bc702
2022-08-13 19:42:43 +02:00
SGCMarkus
ef3519be97 sm7325-common: sepolicy: label more wakeups
Change-Id: I932c550ed9771a82d6813d7018df2320b012b640
2022-08-11 21:26:16 +02:00
SGCMarkus
7ec57dede3 sm7325-common: sepolicy: allow thermal engine read access to vendor_sysfs_usb_supply
Change-Id: Ieaa0188f31ba9c37396a691165859ab0b0e195f0
2022-08-11 21:26:16 +02:00
SGCMarkus
0a33bd0595 sm7325-common: sepolicy: adapt dt2w path to new implementation
Change-Id: Ibedf5ec526dfea8353838e267fefd7e5ef3a18d5
2022-08-11 21:26:16 +02:00
SGCMarkus
163b60efb0 sm7325-common: sepolicy: label cam-sync/cam-req-mgr v4l name
and allow desktopcamera hal access to it

Change-Id: I518002f0ef620e708d72f7f53b94486913d8b974
2022-08-11 21:26:16 +02:00
SGCMarkus
c8748021a6 sm7325-common: sepolicy: allow init.qti.media to read sku_version
also label sku_version while we at it

Change-Id: Id826748274b96957f88b5e1abe11337778b20a8f
2022-08-11 21:26:16 +02:00
SGCMarkus
570636673b sm7325-common: sepolicy: allow fp hal to acess tzstorage data files
FP HAL needs read access to /data/vendor/tzstorage/goodix/gf_otp_info

Change-Id: If7460e792df04dfc1a1efdb8a2d72d56f1801a62
2022-08-11 21:26:16 +02:00
Marc Bourgoin
782cc6aa56 sm7325-common: Add support for dubai (Edge 30)
Also decommonize a kernel cmdline

Change-Id: Id5aa4a5b2b893bd43531fa7bd0c1b9391705b430
2022-08-04 10:14:51 +02:00
SGCMarkus
e7c5fc252b sm7325-common: sepolicy: move some moto props to private
Change-Id: I2f992b80f29ed1f9660e72c82b2dc6a21fb697fe
2022-04-03 21:51:09 +02:00
SGCMarkus
85e730bd67 sm7325-common: sepolicy: remove battery duplicate
Change-Id: I3743d3535c46db57f661b8f34d2ed5496a8314c0
2022-04-03 21:50:32 +02:00
SGCMarkus
a42400032e sm7325-common: sepolicy: remove duplicate definition
this is defined in device/qcom/sepolicy_vndr/generic/vendor/lahaina

Change-Id: I236b7aee6e7996e5cd8fc3e93e863eb65b949203
2022-04-01 18:16:04 +02:00
SGCMarkus
7d32b1387c sm7325-common: sepolicy: first adaptions to berlin 2022-03-27 00:04:19 +01:00
SGCMarkus
95b667c5b9 sm8250-common -> sm7325-common 2022-03-26 23:16:05 +01:00
SGCMarkus
7ad58f9629 sm8250-common: sepolicy: allow vendor_file execute_no_trans
In some cases vendor_init_fingerprint, vendor_init_hw,
and vendor_qti_init_shell were not allowed to execute setprop/getprop

This caused ril and fingerprint, as well as partially sensors to fail.

Log:
avc:  denied  { execute_no_trans } for  pid=613 comm="init.oem.hw.sh" path="/vendor/bin/setprop" dev="overlay" ino=32565 scontext=u:r:vendor_init_hw:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0
avc: denied { execute_no_trans } for comm="init.qcom.early" path="/vendor/bin/getprop" dev="overlay" ino=34132 scontext=u:r:vendor_qti_init_shell:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0
avc: denied { execute_no_trans } for comm="init.oem.finger" path="/vendor/bin/getprop" dev="overlay" ino=34132 scontext=u:r:vendor_init_fingerprint:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0
avc: denied { execute_no_trans } for comm="init.qcom.post_" path="/vendor/bin/getprop" dev="overlay" ino=34132 scontext=u:r:vendor_qti_init_shell:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0
2022-03-09 22:50:07 +01:00
SGCMarkus
3c0cba0748 sm8250-common: livedisplay: uprev to 2.1 2022-03-06 23:02:20 +01:00
SGCMarkus
37fb10f30e sm8250-common: sepolicy: allow hal_fingerprint_default access to vendor_sysfs_fingerprint 2022-02-25 16:58:36 +01:00
SGCMarkus
906e2153d7 sm8250-common: sepolicy: add pstar touch hal service 2022-02-22 21:57:46 +01:00
SGCMarkus
7375f455fa sm8250-common: sepolicy: fix power hal and wakeup
also fix few more nfc denials
2022-02-21 00:11:32 +01:00
SGCMarkus
31398f7cdc sm8250-common: sepolicy: label dt-gesture and allow power/sensor hal access
pstar uses the touchscreen_mmi via stmicro_mmi driver
this is a partial revert of
376db816f6
2022-02-20 17:19:53 +01:00
SGCMarkus
d1def81471 sm8250-common: sepolicy: allow gnss hal to find fwk_sensor_hwservice 2022-02-20 17:09:08 +01:00