Commit graph

41 commits

Author SHA1 Message Date
LuK1337
0e91c2f57e sm8350-common: sepolicy: Remove u:object_r:memplus_device:s0 type
/dev/memplus doesn't exist anymore.

Change-Id: Ib0cf673039769465b50901db9a6575ab322d1095
2021-06-03 10:32:32 +02:00
LuK1337
511731bbf5 sm8350-common: sepolicy: Update labels for mmw thermal devices
Change-Id: I8dc2dc17fea9ab624b24b2ca610cfd96df202a2e
2021-06-03 10:27:40 +02:00
LuK1337
72da964f9a sm8350-common: Add wifi mac generator shell script
Change-Id: I95593db840dc4a668f899d248b2c8e03d4ebbc3e
2021-06-02 22:50:00 +02:00
LuK1337
5e59b3a379 sm8350-common: sepolicy: Label oplusstanvbk partition
Change-Id: I01f6c33c2328935cbddca6e40c3d9fdb0e4fbc01
2021-06-02 13:27:38 +02:00
Bruno Martins
eeea085285 sm8350-common: sepolicy: Allow vendor_sensors to read engineermode data
Change-Id: I90a4f912fc277094faf9150866eae50d8f171e2a
2021-06-02 13:18:12 +02:00
Bruno Martins
05e5792452 sm8350-common: sepolicy: Address vendor_qti_init_shell denials
Change-Id: I60d638881bde90ba2627150a17a45689314c74b0
2021-06-02 13:18:12 +02:00
Bruno Martins
2596fae414 sm8350-common: sepolicy: Allow camera to set vendor.sys.op.disable_ufstw
Change-Id: Iafd461fed468a91f3c5637a6ecb61616acbcb225
2021-06-02 13:18:06 +02:00
Bruno Martins
d822e326fb sm8350-common: sepolicy: Label tri-state key calibration data file
Change-Id: I072c2aaf5c9aae231c68bc9e55806eb59fa7f665
2021-06-02 11:37:29 +02:00
LuK1337
965826e23b sm8350-common: sepolicy: Add rules for OnePlus charger
Change-Id: Ic4685fca5d631bce8b87492bc3c956e3dc567054
2021-06-02 09:35:21 +01:00
Bruno Martins
186093efa0 sm8350-common: sepolicy: Trash leftover rules
Change-Id: Ia4e454598230bb5f78812494c2c3d45933c71250
2021-06-02 01:00:04 +01:00
LuK1337
aed215cbbf sm8350-common: sepolicy: Regenerate labels for wakeup dirs
The list of folders for genfscon was generated using following script:
  for f in `adb shell "find /sys/devices -name wakeup -type d"`; do
      adb shell "ls -Z '$f' | grep -qv u:object_r:sysfs:s0 || echo '$f'"
  done

While list for regular file_contexts was just a simple grep "wakeup[0-9]".

Change-Id: I66abd501ce53b84e7268948d01d7b6c6c42cfbd1
2021-06-02 01:55:41 +02:00
LuK1337
444f982c63 sm8350-common: powershare: Update TX enable node
Change-Id: I0c9b384b2debdb2f83016d7d51eff45122bb594e
2021-06-02 01:15:32 +02:00
LuK1337
62dffdd580 sm8350-common: sepolicy: Label all oplus chg nodes
Change-Id: I0f7b55e21dcf237e33e91717d4f750e88134268a
2021-06-02 01:15:32 +02:00
LuK1337
1d85651b3a sm8350-common: sepolicy: Remove procfs_oem_wireless type
SM8350 devices don't have /proc/wireless or /proc/skin_temp_thrd.

Change-Id: Ib3a67f7c508ab3aea0bee28866b7293c8a785739
2021-06-02 01:15:32 +02:00
LuK1337
deeda29fbf sm8350-common: sepolicy: Sync block device labels with stock
Change-Id: I39ff2f346297e4c90fb85e0dced69bec15c1503d
2021-06-02 01:15:32 +02:00
Bruno Martins
4cd2c8b6e5 sm8350-common: Bring up camera with enforcing SELinux
SELinux is more and more annoying nowadays, we all know that...
After spending hours to figure out why camera wasn't working while
on enforcing mode, the audits finally showed up after booting
into permissive mode. :S

05-31 01:19:55.133   877   877 I provider@2.4-se: type=1400 audit(0.0:456): avc: denied { read write } for name="capture" dev="sysfs" ino=116259 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
05-31 01:19:55.133   877   877 I provider@2.4-se: type=1400 audit(0.0:457): avc: denied { open } for path="/sys/kernel/tof_control/app0/capture" dev="sysfs" ino=116259 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

Change-Id: I1727b1a299a02f15b75dce9a4d5c72201f6632c3
2021-06-01 23:23:38 +01:00
Bruno Martins
f49155a32c sm8350-common: sepolicy: Fix haptics nodes path
Change-Id: I54cb741b145ff144162c82f84aad46628b408004
2021-06-01 23:23:38 +01:00
Bruno Martins
f4e7375e13 sm8350-common: sepolicy: Re-label health sysfs nodes
Change-Id: I648046582f54a254d61c6c76ec5747357bdeca59
2021-06-01 23:23:38 +01:00
LuK1337
2deb022492 sm8350-common: Use correct FRP block device
Change-Id: I54495530fa383b81efc70e94f4bb46a56a07ef6d
2021-06-01 23:23:38 +01:00
LuK1337
ad131f888d sm8350-common: sepolicy: Fix build errors
Change-Id: I41717ff4b31f8abe1abc17bcb9ff5392991a351d
2021-06-01 23:23:38 +01:00
Bruno Martins
410e7ff323 sm8350-common: Initial common device tree conversion
Change-Id: I0d7188b3fa82dddf3f9fb9523d716a8f15f46184
2021-06-01 11:12:31 +02:00
Hikari-no-Tenshi
756ac6b751 sm8250-common: fod: Remove no longer needed chown/chmod and sepolicy
Signed-off-by: Omkar Chandorkar <gotenksIN@aosip.dev>
Change-Id: Id7d6c7e1196db020673ea92f691d93ca3511dcf4
2021-05-18 16:52:03 +02:00
LuK1337
1dc5f1546b sm8250-common: sepolicy: Label op_charger
Health HAL wants to access it.

Change-Id: I07a8c11324c0a8b9bae6e7c027aa69df7ee5b7d1
2021-05-04 19:40:51 +02:00
LuK1337
de5498efab sm8250-common: livedisplay: Rip out IDisplayModes
We are now using AOSP-ish display modes implementation.

Change-Id: Iba9d570dd7cef116e18f3e327c8ab5f5e63f2697
2021-04-27 09:35:23 +02:00
LuK1337
7432867822 sm8250-common: livedisplay: Implement IAntiFlicker interface
Change-Id: I1dbc6d8989a80fe7b06d4356aeb717417997a793
2021-04-09 12:09:28 +02:00
LuK1337
335e820c4c sm8250-common: livedisplay: Uprev to 2.1
Change-Id: I98b2ea16ed342339ee652d5cb79dcfd22f8c0a0d
2021-04-09 12:09:28 +02:00
LuK1337
5ae4426e8f sm8250-common: sepolicy: Allow vendor_sensors to read project info
This is necessary so that SSC sensors HAL can
expose hw_id/project to sensor configs.

Change-Id: I9130ac5985c0924b01937ece15740d08e04d0bbf
2021-03-25 19:09:32 +01:00
LuK1337
c943073afe sm8250-common: sepolicy: Remove init.te
How did that end up here???

Change-Id: I4ec4382f84e2e5f66a6779b5f5920511e09d8d84
2021-03-21 15:49:17 +01:00
LuK1337
dfc13143a3 sm8250-common: sepolicy: Label OEM /data top-level directories
Fixes boot up after booting once in permissive mode,
alternatively that could be fixed by removing mkdir
instructions in *.rc but I'd rather add couple SELinux
lines than diverge from stock scripts.

Change-Id: I32e4461745c6738a6c7579e5e93481d4186972f2
2021-03-12 00:15:28 +01:00
LuK1337
b710ebaaf3 sm8250-common: sepolicy: Remove commented out rules
Change-Id: I026d7f6f0185773d5aa8a5e0f53b70323551f5cf
2021-02-19 15:57:10 +01:00
LuK1337
d1d109c825 sm8250-common: Bring in TOF sensor HAL
Change-Id: Ic5296a9ecf96f9a7fec5f523f9c59bfb68a0704f
2021-02-16 19:18:10 +01:00
Hikari-no-Tenshi
19525f89df sm8250-common: tri-state-key: Add hall sensor calibration support
Change-Id: I8449041eec5c8ab4153bd2942ebc7fda9ceb743e
2021-02-08 15:06:53 +01:00
LuK1337
2412a59d46 sm8250-common: tri-state-key: Relocate to /vendor
Change-Id: Ic70173b82ded0151e98fcfa4023b8a081cd67874
2021-02-08 14:59:28 +01:00
LuK1337
75c37b543c sm8250-common: sepolicy: Label ro.gfx.driver.1
Change-Id: I56ea28752ab8a1ef489adc7ab6547e86dfc220ca
2021-01-23 20:38:10 +01:00
LuK1337
9e70d87ab6 sm8250-common: Add PowerOffAlarm app
* Blob has been modified to add back MS_IN_ONE_MIN offset.

Change-Id: Ib69b4e00794c5d094a5e95e84281f7db205d423f
2021-01-08 14:31:39 +01:00
LuK1337
f9c9767e3b sm8250-common: sepolicy: Initial vendor sepolicy
Change-Id: I28ae7907209b5aae9806466556dc49639dd7c9e4
2021-01-08 14:31:38 +01:00
LuK1337
da018dd3c6 sm8250-common: Re:Start sepolicy
* Drop all old rules, but keep tri-state-key.
* Also introduce dashd/wlchgd domain as they are needed for seclabels.

Change-Id: I0a7121f51d106d927866aead746a49b3dea6a149
2021-01-06 18:47:30 +01:00
quark2323
59b31cc8a7 sm8250-common: Address backlight/scsi/thermal related denials in recovery
Change-Id: Iecfac8b7bd618a2dca32775709c608610c564835
2020-06-29 14:26:44 +02:00
quark2323
f7dab66f68 sm8250-common: Pull device/qcom/sepolicy rules for bootctrl/update_engine
Change-Id: Ia47d46e8e83562d905aeb51ce8318bee5d538701
2020-06-29 14:26:44 +02:00
LuK1337
8e89dbf92a sm8250-common: Move /dev/dri/card0 labeling to sepolicy/vendor 2020-06-27 00:17:13 +02:00
LuK1337
564f71535b sm8250-common: Setup fastbootd 2020-06-27 00:17:13 +02:00