electimon
bfdab0b976
sm7325-common: sepolicy: Label nodes and binaries needed by tundra
...
Change-Id: I9f03d1981a6c88e8f13cdd29e88fc48b35de07b5
Signed-off-by: electimon <electimon@gmail.com>
2024-12-22 00:05:26 -07:00
Marc Bourgoin
c236e4ee06
sm7325-common: Address some sepolicy denials from xpeng
...
Change-Id: I6e6c8f774f800628f52dde1b081956f8d17f30bd
2024-06-22 03:11:20 +00:00
Nolen Johnson
d40cb2d754
sm7325-common: Rename chargeonly_data_file to chargeonly_vendor_data_file
...
* For some magical reason, the naming (and not just associations)
matter as of a few days ago - no clue why.
Change-Id: I6cf12b455dbf460a9be607d796af3536093e8427
2024-03-05 22:20:15 -05:00
Nolen Johnson
3c3de6b813
sm7325-common: sepolicy: Allow some processes to kill themselves
...
Change-Id: I6b51f99d76ba82aca9498d8218373958b8df938d
2024-01-24 01:54:45 +00:00
Nolen Johnson
c2e8af7507
Revert "sm7325-common: sepolicy: address schedtune*"
...
This reverts commit 55772d45005910e6764c0b457e840f1cc85f1f71.
Reason for revert: Brought to my attention that this is way too broad. Agree.
Change-Id: I3e2fec355960844d2af8af3212780245fc53d66b
(cherry picked from commit 5cd03a02dcc34e31fe40c15ec9c7217b66089234)
2023-11-03 17:31:12 +00:00
Andrew Hexen
efd7c01bac
sm7325-common: sepolicy: address schedtune*
...
avc: denied { create } for name="schedtune.prefer_idle" scontext=u:r:vendor_init:s0 tcontext=u:object_r:device:s0 tclass=file permissive=0
init: Command 'write /dev/stune/camera-daemon/schedtune.prefer_idle 1' action=boot (/vendor/etc/init/hw/init.target.rc:109) took 2ms and failed: Unable to write to file '/dev/stune/camera-daemon/schedtune.prefer_idle': open() failed: Permission denied
avc: denied { create } for name="schedtune.boost" scontext=u:r:vendor_init:s0 tcontext=u:object_r:device:s0 tclass=file
init: Command 'write /dev/stune/camera-daemon/schedtune.boost 0' action=boot (/vendor/etc/init/hw/init.target.rc:110) took 3ms and failed: Unable to write to file '/dev/stune/camera-daemon/schedtune.boost': open() failed: Permission denied
Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: I4111e507598a18c246593f6a7a92769e8d7e7013
(cherry picked from commit 55772d45005910e6764c0b457e840f1cc85f1f71)
2023-11-03 16:50:15 +00:00
Andrew Hexen
56d93f30a0
sm7325-common: symlink vendor/fsg to system_root
...
* Seems to be an issue where if modemst1/2 (efs) is wiped modem only looks for fsg to rebuild efs in the root_directory.
* Even though this isn't correct it should allow radio to be easily flashed during future firmware upgrades as the stock radio.img is a container which flashes fsg/modem then passes the command to wipe modemst*
Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: Ic7acabbe16d66740b3aee414be60c24d3a0de43d
2023-10-26 06:09:48 -07:00
Andrew Hexen
cb11d4250f
sm7325-common: sepolicy: fix init.oem.fingerprint2.sh
...
* For dynamic fingerprint.
Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: I3f3b4904b8ca3d0e3fb7d8eae235a65996df2434
2023-08-31 03:24:56 -07:00
Andrew Hexen
d2f6ea07a5
sm7325-common: lights: remove non-existant node
...
* original bringup on 19.1 this did exist but no longer seems to be the case.
Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: I09998c24652faab76ce0cb58b74e65d3a87295a8
2023-08-10 10:48:50 -07:00
Erik Drozina
497a7b1b61
sm7325-common: sepolicy: Label some RIL property
...
W/libc: Access denied finding property "{ro.vendor.ril.svlte1x,ro.vendor.ril.svdo,ro.fota.oem,ro.product.marketname}"
Signed-off-by: Erik Drozina <erikdro41@gmail.com>
Change-Id: I7272823540980a927cfb8243122de941e16a97c2
2023-06-22 02:33:27 +02:00
Michael Bestas
17da50dfc4
sm7325-common: sepolicy: Resolve vendor_init_touch denials
...
Change-Id: Ia71c46662f12f3939e1a4d51b4ab06101f8cc9b7
2023-06-21 13:26:42 -03:00
Michael Bestas
f958dbb553
sm7325-common: sepolicy: Allow rild read mnt_vendor_file dir
...
Change-Id: I099d1ea9e0c690af7e96764852b2122ac8bf6ae9
2023-06-21 13:26:30 -03:00
Marc Bourgoin
c233285c22
sm7325-common: Commonize sepolicy
...
Change-Id: Idbc4e5f655fd19cc4754aab99d8bb236a73f9a12
2023-04-28 08:46:40 -06:00
Marc Bourgoin
a149d5bf76
sm7325-common: Address some xpeng fingerprint denials
...
Change-Id: Ie49d70441f5440c92b8dea3d086bda5502b95be6
2023-04-23 00:45:15 -06:00
Marc Bourgoin
bb40495639
sm7325-common: Initial xpeng support
...
Motorola Moto g200 5G (aka Motorola Edge S30)
Change-Id: Iea52112fefb54cc60c2c99f66ae848e54dc2be1c
2023-04-23 00:45:11 -06:00
Andrew Hexen
c42e6238fa
sm7325-common: sepolicy: address berlna inclusion
...
Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: I7fe90b00a54e56abb977f6edfef2da7fbcf1509c
(cherry picked from commit e9023f971a09242e69ef14788c0c9af83291ac42)
2023-02-08 19:15:05 +01:00
Andrew Hexen
99f323a64e
sm7325-common: sepolicy: address vendor_hal_imsfactory_hwservice
...
Fixes:
avc: denied { find } for interface=vendor.qti.ims.factory::IImsFactory sid=u:r:vendor_dataservice_app:s0 pid=2653 scontext=u:r:vendor_dataservice_app:s0 tcontext=u:object_r:vendor_hal_imsfactory_hwservice:s0 tclass=hwservice_manager
Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: Icda45278cd964f545be7f757deafb2a5a9cda0c1
(cherry picked from commit 7eb7df7e96a9a59b493b4346c6a3d62085b4ca68)
2023-02-08 19:14:41 +01:00
Andrew Hexen
133239452c
sm7325-common: Add berlna to guards
...
Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: Iac7b5aa9778ecb9d01c1dc54f18eccdbdfde48d7
2023-01-25 22:58:01 +01:00
Michael Bestas
113654f8ed
sm7325-common: sepolicy: Remove duplicate wakeup nodes
...
Needed after I026cd6930459262c31c401e57444cfe2b60357b7
Change-Id: I0522bafab2605b3d0ab5a147154b32fa9ee3ce37
2023-01-18 00:30:59 +01:00
Andrew Hexen
86fbf4f8be
sm7325-common: sepolicy: fix property_contexts for MotCamera
...
* Move the props to private and redefine vendor_camera_prop
Signed-off-by: Andrew Hexen <SyberHexen@gmail.com>
Change-Id: I77a99969311b98739198cbaa2543e150167787d4
2022-10-11 15:28:08 -04:00
sb6596
9140dc75a1
sm7325-common: Address additional vendor_qti_init_shell denials
...
Signed-off-by: sb6596 <shubhamprince111@gmail.com>
Change-Id: I527a4d43e88183a4b608aac860f71452c7ed93b8
2022-10-11 15:28:02 -04:00
SamarV-121
71f89622fd
sm7325-common: sepolicy: Allow hal_fingerprint_default to make self binder calls
...
`avc: denied { call } for comm="android.hardwar" scontext=u:r:hal_fingerprint_default:s0 tcontext=u:r:hal_fingerprint_default:s0 tclass=binder permissive=0`
Signed-off-by: sb6596 <shubhamprince111@gmail.com>
Change-Id: I7bdac61d9705f24ae068c522cf73af9c094ad97f
2022-10-11 15:27:56 -04:00
Jasmine Cha
bff9489c0e
sm7325-common: sepolicy: add permission to request health/sensor data
...
- Add audio hal into hal_health clients
- Allow audio hal to find fwk_sensor_hwservice
SELinux : avc: denied { find } for interface=android.frameworks.sensorservice::ISensorManager sid=u:r:hal_audio_default:s0 pid=5907 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:fwk_sensor_hwservice:s0 tclass=hwservice_manager permissive=1
SELinux : avc: denied { find } for interface=android.hardware.health::IHealth sid=u:r:hal_audio_default:s0 pid=9875 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:hal_health_hwservice:s0 tclass=hwservice_manager permissive=1
audio.service: type=1400 audit(0.0:14): avc: denied { call } for scontext=u:r:hal_audio_default:s0 tcontext=u:r:hal_health_default:s0 tclass=binder permissive=1
audio.service: type=1400 audit(0.0:15): avc: denied { transfer } for scontext=u:r:hal_audio_default:s0 tcontext=u:r:hal_health_default:s0 tclass=binder permissive=1
Bug: 199382564
Bug: 199801586
Test: build pass
Signed-off-by: Jasmine Cha <chajasmine@google.com>
Change-Id: I8e8a512cfbd6be814c98bac75ff6c0e5db028db2
2022-10-11 15:27:50 -04:00
Jeferson
d188362b07
sm7325-common: sepolicy: Label vendor.net.qmi.rev_ip_info as radio prop
...
* `avc: denied { set } for property=vendor.net.qmi.rev_ip_info pid=1301 uid=1001 gid=1001 scontext=u:r:netmgrd:s0 tcontext=u:object_r:vendor_default_prop:s0 tclass=property_service permissive=0`
`init: Unable to set property 'vendor.net.qmi.rev_ip_info' from uid:1001 gid:1001 pid:1301: SELinux permission check failed`
Change-Id: Ie6047f7ed4180212836eaa38b3472a1a99f991b8
2022-10-11 15:18:25 -04:00
AdarshGrewal
edad8ae1cf
sm7325-common: Drop support for AdaptiveBacklight from livedisplay
...
* Neither berlin nor dubai supports it.
Change-Id: I22842a489b1cfcb3f32ea3464338597473df912e
2022-10-11 15:18:00 -04:00
Cosmin Tanislav
f65f648212
sm7325-common: remove light hal
...
Change-Id: I5307764a5a04b5a28f940b31759a4552cc75a0a2
2022-10-08 00:09:40 +02:00
Marc Bourgoin
e132be9416
sm7325-common: Drop dubai touch sepolicy
...
I don't currently see a way to modify high touch polling rate...
If in the future a way is found? We can always revert this anyways
but for now it's better to remove it instead of having a placebo
toggle that doesn't do anything.
Change-Id: I192857434edcea470601ab067eb1971c6a97874a
2022-09-29 20:05:44 -06:00
Marc Bourgoin
75dc802330
sm7325-common: Address dubai's DT2W denials
...
Change-Id: I0a0f892185eb98017aafa948d103155780954367
2022-09-25 14:58:33 -06:00
Marc Bourgoin
357641de5b
sm7325-common: Address dubai's Egistec UDFPS selinux denials
...
Change-Id: Ibfd955256d95384bda17ad5404bc269d769ae347
2022-09-25 14:58:33 -06:00
Marc Bourgoin
032a78d43f
sm7325-common: Import stock charge_only_mode
...
Change-Id: I3542bac25ac2a161a165c55cbabe93ec75c04ce8
2022-09-20 10:08:57 +02:00
dianlujitao
3605aa48b1
sm7325-common: Ensure multisim property gets set at early stage
...
Change-Id: I8066dbd0a466f008ec1ce3144b76922fe1b7e750
2022-09-03 12:27:22 -06:00
Marc Bourgoin
27a8c002ce
sm7325-common: Address dubai's vibrator denials
...
Example:
I auditd : type=1400 audit(0.0:18): avc: denied { open } for comm="vendor.qti.hard" path="/sys/devices/platform/soc/990000.i2c/i2c-1/1-005a/leds/vibrator/activate" dev="sysfs" ino=93558 scontext=u:r:hal_vibrator_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file
Change-Id: Iea46e718f4e2c1ed3b3037dcfecb4536fd47ef2d
2022-08-27 12:01:35 -06:00
SGCMarkus
b07ea4d7ae
sm7325-common: sepolicy: allow init.oem.hw to log into kmsg
...
Change-Id: Ib7c73cd1ff18b800c791c322e4960dd94b9bc702
2022-08-13 19:42:43 +02:00
SGCMarkus
ef3519be97
sm7325-common: sepolicy: label more wakeups
...
Change-Id: I932c550ed9771a82d6813d7018df2320b012b640
2022-08-11 21:26:16 +02:00
SGCMarkus
7ec57dede3
sm7325-common: sepolicy: allow thermal engine read access to vendor_sysfs_usb_supply
...
Change-Id: Ieaa0188f31ba9c37396a691165859ab0b0e195f0
2022-08-11 21:26:16 +02:00
SGCMarkus
0a33bd0595
sm7325-common: sepolicy: adapt dt2w path to new implementation
...
Change-Id: Ibedf5ec526dfea8353838e267fefd7e5ef3a18d5
2022-08-11 21:26:16 +02:00
SGCMarkus
163b60efb0
sm7325-common: sepolicy: label cam-sync/cam-req-mgr v4l name
...
and allow desktopcamera hal access to it
Change-Id: I518002f0ef620e708d72f7f53b94486913d8b974
2022-08-11 21:26:16 +02:00
SGCMarkus
c8748021a6
sm7325-common: sepolicy: allow init.qti.media to read sku_version
...
also label sku_version while we at it
Change-Id: Id826748274b96957f88b5e1abe11337778b20a8f
2022-08-11 21:26:16 +02:00
SGCMarkus
570636673b
sm7325-common: sepolicy: allow fp hal to acess tzstorage data files
...
FP HAL needs read access to /data/vendor/tzstorage/goodix/gf_otp_info
Change-Id: If7460e792df04dfc1a1efdb8a2d72d56f1801a62
2022-08-11 21:26:16 +02:00
Marc Bourgoin
782cc6aa56
sm7325-common: Add support for dubai (Edge 30)
...
Also decommonize a kernel cmdline
Change-Id: Id5aa4a5b2b893bd43531fa7bd0c1b9391705b430
2022-08-04 10:14:51 +02:00
SGCMarkus
e7c5fc252b
sm7325-common: sepolicy: move some moto props to private
...
Change-Id: I2f992b80f29ed1f9660e72c82b2dc6a21fb697fe
2022-04-03 21:51:09 +02:00
SGCMarkus
85e730bd67
sm7325-common: sepolicy: remove battery duplicate
...
Change-Id: I3743d3535c46db57f661b8f34d2ed5496a8314c0
2022-04-03 21:50:32 +02:00
SGCMarkus
a42400032e
sm7325-common: sepolicy: remove duplicate definition
...
this is defined in device/qcom/sepolicy_vndr/generic/vendor/lahaina
Change-Id: I236b7aee6e7996e5cd8fc3e93e863eb65b949203
2022-04-01 18:16:04 +02:00
SGCMarkus
7d32b1387c
sm7325-common: sepolicy: first adaptions to berlin
2022-03-27 00:04:19 +01:00
SGCMarkus
95b667c5b9
sm8250-common -> sm7325-common
2022-03-26 23:16:05 +01:00
SGCMarkus
7ad58f9629
sm8250-common: sepolicy: allow vendor_file execute_no_trans
...
In some cases vendor_init_fingerprint, vendor_init_hw,
and vendor_qti_init_shell were not allowed to execute setprop/getprop
This caused ril and fingerprint, as well as partially sensors to fail.
Log:
avc: denied { execute_no_trans } for pid=613 comm="init.oem.hw.sh" path="/vendor/bin/setprop" dev="overlay" ino=32565 scontext=u:r:vendor_init_hw:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0
avc: denied { execute_no_trans } for comm="init.qcom.early" path="/vendor/bin/getprop" dev="overlay" ino=34132 scontext=u:r:vendor_qti_init_shell:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0
avc: denied { execute_no_trans } for comm="init.oem.finger" path="/vendor/bin/getprop" dev="overlay" ino=34132 scontext=u:r:vendor_init_fingerprint:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0
avc: denied { execute_no_trans } for comm="init.qcom.post_" path="/vendor/bin/getprop" dev="overlay" ino=34132 scontext=u:r:vendor_qti_init_shell:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0
2022-03-09 22:50:07 +01:00
SGCMarkus
3c0cba0748
sm8250-common: livedisplay: uprev to 2.1
2022-03-06 23:02:20 +01:00
SGCMarkus
37fb10f30e
sm8250-common: sepolicy: allow hal_fingerprint_default access to vendor_sysfs_fingerprint
2022-02-25 16:58:36 +01:00
SGCMarkus
906e2153d7
sm8250-common: sepolicy: add pstar touch hal service
2022-02-22 21:57:46 +01:00
SGCMarkus
7375f455fa
sm8250-common: sepolicy: fix power hal and wakeup
...
also fix few more nfc denials
2022-02-21 00:11:32 +01:00