bunnypad/android_device_samsung_a20
Watch
1
0
Fork
You've already forked android_device_samsung_a20
 0
mirror of https://github.com/chararomandroid/android_device_samsung_a20 synced 2026-08-21 19:55:33 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

universal7885: Address SELinux denials

Browse source 
* Now boots with enforcing kernel
This commit is contained in:
Gabriel2392 2021-10-26 09:31:26 +00:00 • committed by roynatech2544
commit 7329c87196
No known key found for this signature in database
GPG key ID: 9675C32163D88D30
17 changed files with 50 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

11
universal7885-common/SamsungParts/jni/SELinuxBridge.cpp
View file

@ -16,14 +16,3 @@ Java_com_eurekateam_samsungextras_interfaces_SELinux_getSELinux(JNIEnv *env, jcl
int ret = service->readSELinuxstats();
return ret;
}
extern "C"
JNIEXPORT void JNICALL
Java_com_eurekateam_samsungextras_interfaces_SELinux_setSELinux(JNIEnv *env, jclass clazz,
jint enable) {
android::sp<ISELinux> service = ISELinux::getService();
if (enable == 1){
service->setSELinuxWritable(Enable::ENABLE);
}else{
service->setSELinuxWritable(Enable::DISABLE);
}
}

4
universal7885-common/SamsungParts/src/com/eurekateam/samsungextras/BootReceiver.java
View file

@ -23,7 +23,7 @@ import android.content.SharedPreferences;
import androidx.preference.PreferenceManager;
import com.eurekateam.samsungextras.utils.FileUtilsWrapper;
import com.eurekateam.samsungextras.interfaces.GPU;
public class BootReceiver extends BroadcastReceiver {
@ -37,7 +37,7 @@ public class BootReceiver extends BroadcastReceiver {
}
boolean gpuenabled = sharedPrefs.getBoolean(DeviceSettings.PREF_GPUEXYNOS, false);
if (!gpuenabled){
FileUtilsWrapper.writeLine(GlobalConstants.TMU_SYSFS, "0");
GPU.setGPU(0);
}
}
}

17
universal7885-common/SamsungParts/src/com/eurekateam/samsungextras/DeviceSettings.java
View file

@ -69,10 +69,15 @@ public class DeviceSettings extends PreferenceFragment implements
mGPUExynos.setChecked(GPU.getGPU() == 1);
mGPUExynos.setOnPreferenceChangeListener(this);
SwitchPreference mSELinux = findPreference(PREF_SELINUX);
Preference mSELinux = findPreference(PREF_SELINUX);
assert mSELinux != null;
mSELinux.setOnPreferenceChangeListener(this);
mSELinux.setEnabled(SELinux.getSELinux() != 0);
mSELinux.setOnPreferenceClickListener(preference -> {
Toast.makeText(getContext(), SELinux.getSELinux() == 1 ?
"SELinux is in enforcing state." :
"SELinux is in permissive state.",
Toast.LENGTH_SHORT).show();
return true;
});
Preference mFlashLight = findPreference(PREF_FLASHLIGHT);
assert mFlashLight != null;
@ -109,12 +114,6 @@ public class DeviceSettings extends PreferenceFragment implements
Toast.makeText(getContext(), gpu_enabled ? "GPU Throttling is now enabled."
: "GPU Throttling is now disabled.",
Toast.LENGTH_SHORT).show();
case PREF_SELINUX:
boolean selinux_enabled = (Boolean) value;
SELinux.setSELinux(selinux_enabled ? 1 : 0);
Toast.makeText(getContext(), selinux_enabled ? "SELinux is now in enforcing state."
: "SELinux is now in permissive state.",
Toast.LENGTH_SHORT).show();
default:
break;
}

4
universal7885-common/SamsungParts/src/com/eurekateam/samsungextras/battery/BatteryFragment.java
View file

@ -69,12 +69,12 @@ public class BatteryFragment extends PreferenceFragment implements
if (preference == mChargePref) {
Boolean value = (Boolean) newValue;
Battery.setChargeSysfs(value ? 0 : 1 );
mFastChargePref.setChecked(Battery.getChargeSysfs() == 0);
mChargePref.setChecked(Battery.getChargeSysfs() == 0);
return true;
}else if (preference == mFastChargePref){
Boolean value = (Boolean) newValue;
Battery.setFastCharge(value ? 0 : 1 );
mChargePref.setChecked(Battery.getFastChargeSysfs() == 0);
mFastChargePref.setChecked(Battery.getFastChargeSysfs() == 0);
return true;
}
return false;

1
universal7885-common/SamsungParts/src/com/eurekateam/samsungextras/interfaces/SELinux.java
View file

@ -1,6 +1,5 @@
package com.eurekateam.samsungextras.interfaces;
public class SELinux {
public static native void setSELinux(int enable);
public static native int getSELinux();
}

4
universal7885-common/sepolicy/vendor/device.te vendored
View file

@ -33,3 +33,7 @@ type pm_qos_device, dev_type;
type radio_qos_device, dev_type;
type ssp_device, dev_type;
type vendor_radio_device, dev_type;
type drm_device, dev_type;
type custom_loop_device, dev_type;

8
universal7885-common/sepolicy/vendor/file_contexts vendored
View file

@ -152,6 +152,12 @@
# camera
/dev/m2m1shot_scaler0 u:object_r:m2m1shot_device:s0
# DRM
/dev/s5p-smem u:object_r:drm_device:s0
# Loop
/dev/block/loop* u:object_r:custom_loop_device:s0
# usb
/dev/android_ssusbcon(/.*)? u:object_r:usb_device:s0
@ -212,7 +218,7 @@
/(vendor|system/vendor)/bin/hw/android\.hardware\.usb@[0-9]\.[0-9]-service\.exynos7884B u:object_r:hal_usb_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.samsung\.hardware\.gnss@[0-9]\.[0-9]-service u:object_r:hal_gnss_default_exec:s0
/(vendor|system/vendor)/firmware(/.*)? u:object_r:vendor_firmware_file:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.sensors@2.1-service\.samsung-multihal u:object_r:hal_sensors_default_exec:s0
# SamsungParts
/(vendor|system/vendor)/bin/hw/vendor\.eureka\.hardware\.battery@1\.0-service u:object_r:hal_battery_default_exec:s0

1
universal7885-common/sepolicy/vendor/hal_battery_default.te vendored
View file

@ -12,3 +12,4 @@ allow hal_battery_default sysfs_battery_writable:file rw_file_perms;
allow hal_battery_default sysfs_sec_switch_writable:dir { search };
allow hal_battery_default sysfs_battery_writable:dir { search };
allow hal_battery_default sysfs_battery:dir { search };
allow hal_battery_default sysfs_virtual:dir { search };

2
universal7885-common/sepolicy/vendor/hal_drm_widevine.te vendored
View file

@ -19,3 +19,5 @@ allow hal_drm_widevine vendor_data_file:file create_file_perms;
allow hal_drm_widevine cpk_efs_file:file r_file_perms;
allow hal_drm_widevine efs_file:dir search;
allow hal_drm_widevine drm_device:chr_file { read write open ioctl };

2
universal7885-common/sepolicy/vendor/hal_flashlight_default.te vendored
View file

@ -7,3 +7,5 @@ hwbinder_use(hal_flashlight_default);
get_prop(hal_flashlight_default, hwservicemanager_prop);
allow hal_flashlight_default sysfs_flashlight:file { read open write getattr };
allow hal_flashlight_default sysfs_flashlight:dir search;
allow hal_flashlight_default sysfs_virtual:dir { search };

4
universal7885-common/sepolicy/vendor/hal_gpu_default.te vendored
View file

@ -5,5 +5,5 @@ init_daemon_domain(hal_gpu_default);
hwbinder_use(hal_gpu_default);
get_prop(hal_gpu_default, hwservicemanager_prop)
allow system_app sysfs_gpu_tmu:file { read open write getattr };
allow system_app sysfs_gpu_tmu:dir search;
allow hal_gpu_default sysfs_gpu_tmu:file { read open write getattr };
allow hal_gpu_default sysfs_gpu_tmu:dir search;

1
universal7885-common/sepolicy/vendor/hal_keymaster_default.te vendored
View file

@ -7,3 +7,4 @@ allow hal_keymaster_default mnt_vendor_file:dir search;
allow hal_keymaster_default efs_file:dir search;
teegris_use(hal_keymaster_default)
allow hal_keymaster_default prov_efs_file:file r_file_perms;
allow hal_keymaster_default prov_efs_file:dir search;

2
universal7885-common/sepolicy/vendor/hal_wifi_default.te vendored
View file

@ -5,3 +5,5 @@ allow hal_wifi_default conn_vendor_data_file:dir search;
allow hal_wifi_default conn_vendor_data_file:file rw_file_perms;
allow hal_wifi_default wifi_vendor_data_file:dir search;
get_prop(hal_wifi_default, persist_vendor_debug_wifi_prop)

3
universal7885-common/sepolicy/vendor/init.te vendored
View file

@ -55,3 +55,6 @@ allow init proc_last_kmsg:file setattr;
allow init mnt_vendor_file:dir mounton;
unix_socket_connect(init, property, rild)
get_prop(init, vendor_radio_prop)
get_prop(init, radio_prop)

2
universal7885-common/sepolicy/vendor/kernel.te vendored
View file

@ -16,3 +16,5 @@ allow kernel block_device:dir search;
allow kernel sysfs_sec_key:dir search;
r_dir_file(kernel, sysfs_virtual)
allow kernel loop_device:blk_file { create setattr };

2
universal7885-common/sepolicy/vendor/rild.te vendored
View file

@ -93,5 +93,3 @@ allow rild hal_audio_default:file r_file_perms;
# hwservice
add_hwservice(rild, rild_hwservice)

12
universal7885-common/sepolicy/vendor/system_app.te vendored
View file

@ -10,3 +10,15 @@ allow system_app sysfs_battery_info:dir { search };
allow system_app sysfs_battery_info:file { read open getattr };
r_dir_file(system_app, sysfs_battery_info)
# SamsungParts
#
allow system_app hal_battery_hwservice:hwservice_manager find;
allow system_app hal_flashlight_hwservice:hwservice_manager find;
allow system_app hal_selinux_hwservice:hwservice_manager find;
allow system_app hal_gpu_hwservice:hwservice_manager find;
allow system_app hal_battery_default:binder call;
allow system_app hal_flashlight_default:binder call;
allow system_app hal_selinux_default:binder call;
allow system_app hal_gpu_default:binder call;