bunnypad/android_device_samsung_a20
Watch
1
0
Fork
You've already forked android_device_samsung_a20
 0
mirror of https://github.com/chararomandroid/android_device_samsung_a20 synced 2026-08-23 12:35:33 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

universal7885: Address SELinux denials

Browse source 
* Now boots with enforcing kernel
This commit is contained in:
Gabriel2392 2021-10-26 09:31:26 +00:00 • committed by roynatech2544
commit 7329c87196
No known key found for this signature in database
GPG key ID: 9675C32163D88D30
17 changed files with 50 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

11
universal7885-common/SamsungParts/jni/SELinuxBridge.cpp
View file

@ -16,14 +16,3 @@ Java_com_eurekateam_samsungextras_interfaces_SELinux_getSELinux(JNIEnv *env, jcl
int ret = service->readSELinuxstats(); int ret = service->readSELinuxstats();
return ret; return ret;
} }
extern "C"
JNIEXPORT void JNICALL
Java_com_eurekateam_samsungextras_interfaces_SELinux_setSELinux(JNIEnv *env, jclass clazz,
jint enable) {
android::sp<ISELinux> service = ISELinux::getService();
if (enable == 1){
service->setSELinuxWritable(Enable::ENABLE);
}else{
service->setSELinuxWritable(Enable::DISABLE);
}
}

4
universal7885-common/SamsungParts/src/com/eurekateam/samsungextras/BootReceiver.java
View file

@ -23,7 +23,7 @@ import android.content.SharedPreferences;
import androidx.preference.PreferenceManager; import androidx.preference.PreferenceManager;
import com.eurekateam.samsungextras.utils.FileUtilsWrapper; import com.eurekateam.samsungextras.interfaces.GPU;
public class BootReceiver extends BroadcastReceiver { public class BootReceiver extends BroadcastReceiver {
@ -37,7 +37,7 @@ public class BootReceiver extends BroadcastReceiver {
} }
boolean gpuenabled = sharedPrefs.getBoolean(DeviceSettings.PREF_GPUEXYNOS, false); boolean gpuenabled = sharedPrefs.getBoolean(DeviceSettings.PREF_GPUEXYNOS, false);
if (!gpuenabled){ if (!gpuenabled){
FileUtilsWrapper.writeLine(GlobalConstants.TMU_SYSFS, "0"); GPU.setGPU(0);
} }
} }
} }

17
universal7885-common/SamsungParts/src/com/eurekateam/samsungextras/DeviceSettings.java
View file

@ -69,10 +69,15 @@ public class DeviceSettings extends PreferenceFragment implements
mGPUExynos.setChecked(GPU.getGPU() == 1); mGPUExynos.setChecked(GPU.getGPU() == 1);
mGPUExynos.setOnPreferenceChangeListener(this); mGPUExynos.setOnPreferenceChangeListener(this);
SwitchPreference mSELinux = findPreference(PREF_SELINUX); Preference mSELinux = findPreference(PREF_SELINUX);
assert mSELinux != null; assert mSELinux != null;
mSELinux.setOnPreferenceChangeListener(this); mSELinux.setOnPreferenceClickListener(preference -> {
mSELinux.setEnabled(SELinux.getSELinux() != 0); Toast.makeText(getContext(), SELinux.getSELinux() == 1 ?
"SELinux is in enforcing state." :
"SELinux is in permissive state.",
Toast.LENGTH_SHORT).show();
return true;
});
Preference mFlashLight = findPreference(PREF_FLASHLIGHT); Preference mFlashLight = findPreference(PREF_FLASHLIGHT);
assert mFlashLight != null; assert mFlashLight != null;
@ -109,12 +114,6 @@ public class DeviceSettings extends PreferenceFragment implements
Toast.makeText(getContext(), gpu_enabled ? "GPU Throttling is now enabled." Toast.makeText(getContext(), gpu_enabled ? "GPU Throttling is now enabled."
: "GPU Throttling is now disabled.", : "GPU Throttling is now disabled.",
Toast.LENGTH_SHORT).show(); Toast.LENGTH_SHORT).show();
case PREF_SELINUX:
boolean selinux_enabled = (Boolean) value;
SELinux.setSELinux(selinux_enabled ? 1 : 0);
Toast.makeText(getContext(), selinux_enabled ? "SELinux is now in enforcing state."
: "SELinux is now in permissive state.",
Toast.LENGTH_SHORT).show();
default: default:
break; break;
} }

4
universal7885-common/SamsungParts/src/com/eurekateam/samsungextras/battery/BatteryFragment.java
View file

@ -69,12 +69,12 @@ public class BatteryFragment extends PreferenceFragment implements
if (preference == mChargePref) { if (preference == mChargePref) {
Boolean value = (Boolean) newValue; Boolean value = (Boolean) newValue;
Battery.setChargeSysfs(value ? 0 : 1 ); Battery.setChargeSysfs(value ? 0 : 1 );
mFastChargePref.setChecked(Battery.getChargeSysfs() == 0); mChargePref.setChecked(Battery.getChargeSysfs() == 0);
return true; return true;
}else if (preference == mFastChargePref){ }else if (preference == mFastChargePref){
Boolean value = (Boolean) newValue; Boolean value = (Boolean) newValue;
Battery.setFastCharge(value ? 0 : 1 ); Battery.setFastCharge(value ? 0 : 1 );
mChargePref.setChecked(Battery.getFastChargeSysfs() == 0); mFastChargePref.setChecked(Battery.getFastChargeSysfs() == 0);
return true; return true;
} }
return false; return false;

1
universal7885-common/SamsungParts/src/com/eurekateam/samsungextras/interfaces/SELinux.java
View file

@ -1,6 +1,5 @@
package com.eurekateam.samsungextras.interfaces; package com.eurekateam.samsungextras.interfaces;
public class SELinux { public class SELinux {
public static native void setSELinux(int enable);
public static native int getSELinux(); public static native int getSELinux();
} }

4
universal7885-common/sepolicy/vendor/device.te vendored
View file

@ -33,3 +33,7 @@ type pm_qos_device, dev_type;
type radio_qos_device, dev_type; type radio_qos_device, dev_type;
type ssp_device, dev_type; type ssp_device, dev_type;
type vendor_radio_device, dev_type; type vendor_radio_device, dev_type;
type drm_device, dev_type;
type custom_loop_device, dev_type;

8
universal7885-common/sepolicy/vendor/file_contexts vendored
View file

@ -152,6 +152,12 @@
# camera # camera
/dev/m2m1shot_scaler0 u:object_r:m2m1shot_device:s0 /dev/m2m1shot_scaler0 u:object_r:m2m1shot_device:s0
# DRM
/dev/s5p-smem u:object_r:drm_device:s0
# Loop
/dev/block/loop* u:object_r:custom_loop_device:s0
# usb # usb
/dev/android_ssusbcon(/.*)? u:object_r:usb_device:s0 /dev/android_ssusbcon(/.*)? u:object_r:usb_device:s0
@ -212,7 +218,7 @@
/(vendor|system/vendor)/bin/hw/android\.hardware\.usb@[0-9]\.[0-9]-service\.exynos7884B u:object_r:hal_usb_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.usb@[0-9]\.[0-9]-service\.exynos7884B u:object_r:hal_usb_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.samsung\.hardware\.gnss@[0-9]\.[0-9]-service u:object_r:hal_gnss_default_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.samsung\.hardware\.gnss@[0-9]\.[0-9]-service u:object_r:hal_gnss_default_exec:s0
/(vendor|system/vendor)/firmware(/.*)? u:object_r:vendor_firmware_file:s0 /(vendor|system/vendor)/firmware(/.*)? u:object_r:vendor_firmware_file:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.sensors@2.1-service\.samsung-multihal u:object_r:hal_sensors_default_exec:s0
# SamsungParts # SamsungParts
/(vendor|system/vendor)/bin/hw/vendor\.eureka\.hardware\.battery@1\.0-service u:object_r:hal_battery_default_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.eureka\.hardware\.battery@1\.0-service u:object_r:hal_battery_default_exec:s0

1
universal7885-common/sepolicy/vendor/hal_battery_default.te vendored
View file

@ -12,3 +12,4 @@ allow hal_battery_default sysfs_battery_writable:file rw_file_perms;
allow hal_battery_default sysfs_sec_switch_writable:dir { search }; allow hal_battery_default sysfs_sec_switch_writable:dir { search };
allow hal_battery_default sysfs_battery_writable:dir { search }; allow hal_battery_default sysfs_battery_writable:dir { search };
allow hal_battery_default sysfs_battery:dir { search }; allow hal_battery_default sysfs_battery:dir { search };
allow hal_battery_default sysfs_virtual:dir { search };

2
universal7885-common/sepolicy/vendor/hal_drm_widevine.te vendored
View file

@ -19,3 +19,5 @@ allow hal_drm_widevine vendor_data_file:file create_file_perms;
allow hal_drm_widevine cpk_efs_file:file r_file_perms; allow hal_drm_widevine cpk_efs_file:file r_file_perms;
allow hal_drm_widevine efs_file:dir search; allow hal_drm_widevine efs_file:dir search;
allow hal_drm_widevine drm_device:chr_file { read write open ioctl };

2
universal7885-common/sepolicy/vendor/hal_flashlight_default.te vendored
View file

@ -7,3 +7,5 @@ hwbinder_use(hal_flashlight_default);
get_prop(hal_flashlight_default, hwservicemanager_prop); get_prop(hal_flashlight_default, hwservicemanager_prop);
allow hal_flashlight_default sysfs_flashlight:file { read open write getattr }; allow hal_flashlight_default sysfs_flashlight:file { read open write getattr };
allow hal_flashlight_default sysfs_flashlight:dir search; allow hal_flashlight_default sysfs_flashlight:dir search;
allow hal_flashlight_default sysfs_virtual:dir { search };

4
universal7885-common/sepolicy/vendor/hal_gpu_default.te vendored
View file

@ -5,5 +5,5 @@ init_daemon_domain(hal_gpu_default);
hwbinder_use(hal_gpu_default); hwbinder_use(hal_gpu_default);
get_prop(hal_gpu_default, hwservicemanager_prop) get_prop(hal_gpu_default, hwservicemanager_prop)
allow system_app sysfs_gpu_tmu:file { read open write getattr }; allow hal_gpu_default sysfs_gpu_tmu:file { read open write getattr };
allow system_app sysfs_gpu_tmu:dir search; allow hal_gpu_default sysfs_gpu_tmu:dir search;

1
universal7885-common/sepolicy/vendor/hal_keymaster_default.te vendored
View file

@ -7,3 +7,4 @@ allow hal_keymaster_default mnt_vendor_file:dir search;
allow hal_keymaster_default efs_file:dir search; allow hal_keymaster_default efs_file:dir search;
teegris_use(hal_keymaster_default) teegris_use(hal_keymaster_default)
allow hal_keymaster_default prov_efs_file:file r_file_perms; allow hal_keymaster_default prov_efs_file:file r_file_perms;
allow hal_keymaster_default prov_efs_file:dir search;

2
universal7885-common/sepolicy/vendor/hal_wifi_default.te vendored
View file

@ -5,3 +5,5 @@ allow hal_wifi_default conn_vendor_data_file:dir search;
allow hal_wifi_default conn_vendor_data_file:file rw_file_perms; allow hal_wifi_default conn_vendor_data_file:file rw_file_perms;
allow hal_wifi_default wifi_vendor_data_file:dir search; allow hal_wifi_default wifi_vendor_data_file:dir search;
get_prop(hal_wifi_default, persist_vendor_debug_wifi_prop)

3
universal7885-common/sepolicy/vendor/init.te vendored
View file

@ -55,3 +55,6 @@ allow init proc_last_kmsg:file setattr;
allow init mnt_vendor_file:dir mounton; allow init mnt_vendor_file:dir mounton;
unix_socket_connect(init, property, rild) unix_socket_connect(init, property, rild)
get_prop(init, vendor_radio_prop)
get_prop(init, radio_prop)

2
universal7885-common/sepolicy/vendor/kernel.te vendored
View file

@ -16,3 +16,5 @@ allow kernel block_device:dir search;
allow kernel sysfs_sec_key:dir search; allow kernel sysfs_sec_key:dir search;
r_dir_file(kernel, sysfs_virtual) r_dir_file(kernel, sysfs_virtual)
allow kernel loop_device:blk_file { create setattr };

2
universal7885-common/sepolicy/vendor/rild.te vendored
View file

@ -93,5 +93,3 @@ allow rild hal_audio_default:file r_file_perms;
# hwservice # hwservice
add_hwservice(rild, rild_hwservice) add_hwservice(rild, rild_hwservice)

12
universal7885-common/sepolicy/vendor/system_app.te vendored
View file

@ -10,3 +10,15 @@ allow system_app sysfs_battery_info:dir { search };
allow system_app sysfs_battery_info:file { read open getattr }; allow system_app sysfs_battery_info:file { read open getattr };
r_dir_file(system_app, sysfs_battery_info) r_dir_file(system_app, sysfs_battery_info)
# SamsungParts
#
allow system_app hal_battery_hwservice:hwservice_manager find;
allow system_app hal_flashlight_hwservice:hwservice_manager find;
allow system_app hal_selinux_hwservice:hwservice_manager find;
allow system_app hal_gpu_hwservice:hwservice_manager find;
allow system_app hal_battery_default:binder call;
allow system_app hal_flashlight_default:binder call;
allow system_app hal_selinux_default:binder call;
allow system_app hal_gpu_default:binder call;