Author	SHA1	Message	Date
roynatech2544	f35e7ce2a6	universal7885: sepolicy: Address charger_vendor denial	2022-10-14 14:19:55 +09:00
roynatech2544	95e42984fb	universal7885: sepolicy: Label back clearkey label	2022-10-14 11:22:16 +09:00
Tim Zimmermann	d80918f7b5	universal7885: Switch to health AIDL HAL ... Change-Id: Icbb7194943388679abd25b2dbd105424c34496a1	2022-10-11 13:50:02 +09:00
roynatech2544	b3cd2cf207	Revert "universal7885: Enable AIDL DRM HALs" ... This reverts commit 380475026d. - Clearkey init fails - Also address DRM widevine denial	2022-10-10 22:15:45 +09:00
Soo-Hwan Na	3a89b4dec4	universal7885: sepolicy: rild denials	2022-09-28 00:26:03 +09:00
roynatech2544	cf49588873	universal7885: multliclientd: Address extra denial	2022-09-25 15:15:59 +09:00
roynatech2544	93735da7ca	universal7885: sepolicy: Fixup! use macro for covering denials	2022-09-22 22:31:45 +09:00
roynatech2544	3f7b6ce7aa	universal7885: sepolicy: Add rule for multiclientd ... This will make sec audioril init succeed, as it creates socket for rild and audio system to connect Still don't know what this actually does since its part of Samsung telephony framework	2022-09-22 13:12:46 +09:00
roynatech2544	ba9e566ab3	universal7885: sepolicy: Label memtrack AIDL service	2022-09-17 20:38:43 +09:00
Tim Zimmermann	36615e9d9f	universal7885: Switch to new AIDL memtrack HAL ... Change-Id: I3ae077b5f59e4fcf32489eef64bce8551d758998	2022-09-16 18:25:58 +09:00
roynatech2544	1b26358ce9	universal7885: sepolicy: Address power stats HAL's denial	2022-09-11 20:17:33 +09:00
Tim Zimmermann	e8a089f7e0	universal7885: Switch to AIDL usb HAL ... Change-Id: I710ddcb6128ae3056083291d5dde66c294a1d018	2022-09-09 00:17:22 +00:00
roynatech2544	facb92a88a	universal7885: sepolicy: Write rules for power stats HAL ... * Also address other denials happening on permissive mode	2022-08-28 08:26:30 +09:00
roynatech2544	0ab8aa74bf	universal7885: Inital commit of powerstats impl ... Most code copied from Google's raven's powerstats source and adapted to ours	2022-08-27 06:45:40 +00:00
roynatech2544	7c26e3461b	universal7885: Address some avc denials	2022-08-26 14:10:18 +00:00
roynatech2544	39104ff516	universal7885: sepolicy: Drop file type sysfs_gpu ... * Now declared on src	2022-08-16 17:34:29 +02:00
roynatech2544	cb6cd3067d	universal7885: Adopt to changes on R10 ... * The /proc/kmsg buffer is empty by default	2022-06-17 13:58:33 +00:00
roynatech2544	6feb600625	universal7885: Allow vendor_init to set powerhal init prop ... The Pixel libperfmgr has following code : std::thread initThread([&]() { ::android::base::WaitForProperty(kPowerHalInitProp.data(), 1); hm->Start(); dlpw->Init(); }); which is basically declare thread { if (powerhalprop_is_not_set) wait; else (powerhal_prop_is_set) init_other_threads; }.start(); But in logcat <11>[ 21.988418] [2: init: 2815] init: Unable to set property 'vendor.powerhal.init' from uid:0 gid:0 pid:2816: SELinux permission check failed <36>[ 21.989189] [3: logd.auditd: 3586] type=1107 audit(1654915533.291:146): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.powerhal.init pid=2816 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_powerhal_prop:s0 tclass=property_service permissive=0' So the powerhal's thread was not being run. This commit fixes seplicy to allow vendor init to set the powerhal init prop. May fix some issues on DT2W and deep sleep	2022-06-11 13:17:55 +09:00
roynatech2544	0282f1e3a9	universal7885: Address some denials ... Change-Id: I6892bbdecf6780891c0baf5849687632602e52c9 Signed-off-by: roynatech2544 <whiteshell2544@naver.com>	2022-05-14 15:04:18 +09:00
roynatech2544	5e69a17ac0	universal7885: Label powerhal props	2022-05-08 18:15:09 +09:00
roynatech2544	043d4db5cf	universal7885: rootdir: Allow tracing ... Also address some selinux denials	2022-05-07 13:58:08 +09:00
roynatech2544	cdc2de72fc	a10: Fixup issues with sensor hal ... Imported sensor hal source from android 12L, rebranded and make it compile as 32bit	2022-05-04 20:29:17 +09:00
Tim Zimmermann	671bd6f797	universal7885: Use omr as /metadata ... Change-Id: If93ec5ea8ce8770e23d2ba622fc8ae4e66ecfbbf	2022-05-04 20:29:10 +09:00
roynatech2544	1a96e0b036	universal7885: Address various selinux denials ... Also fix some mistakes	2022-04-30 15:14:15 +09:00
roynatech2544	f717debf14	universal7885: Add missing new line chars	2022-04-30 15:10:37 +09:00
roynatech2544	657050b9b3	universal7885: sepolicy: Move some sysfs genfscons ... * To public so private rules can access it too * Also, remove rebundant genfscon * Fix neverallows due to previous commit	2022-04-29 22:24:08 +09:00
roynatech2544	af754b5f92	universal7885: parts: hidl: Move to /system ... * Sepolicy issues, need to be in /system to write data to files. While we're on it, move fm radio hal too	2022-04-29 22:23:34 +09:00
roynatech2544	4a8c870b6b	universal7885: parts: swap: Round down ... The free space on /data Also fix some issues with it	2022-04-20 12:58:55 +09:00
roynatech2544	f5d3e25c02	universal7885: parts: Implement swap on /data ctrl	2022-04-19 11:51:24 +09:00
roynatech2544	7bd40b3a4e	universal7885: interfaces: Move to /vendor/bin ... * Is not Android core hal, so moving it from /vendor/bin/hw	2022-04-12 13:06:57 +09:00
roynatech2544	7156ddca8f	universal7885: parts: hidl: Make some changes ... * Drop useless selinux and gpu * Instead put display configs (DT2W, Glove mode) Signed-off-by: roynatech2544 <whiteshell2544@naver.com>	2022-04-12 13:06:28 +09:00
Jan Altensen	c604e3fb9f	universal7885: hidl: Uprev usb HAl to 1.3 ... * From LineageOS hardware/samsung	2022-04-03 03:19:52 +09:00
roynaetch2544	b75cc0ced3	universal7885: Address some denials ... * app_domain: Allow untrusted apps to get vendor.camera props such as vendor.camera.skip_unconfigure.packagelist * debug_daemon: Allow more perms to properly execute logcat, sepolicy neverallow passes still * Move vendor_camera_prop to vendor_public_prop, to resolve neverallow	2022-04-02 15:20:24 +09:00
Soo-Hwan Na	fd54476fc1	universal7885: sepolicy: Address more denials ... * Allow power hal to connect to init's unix socket	2022-03-29 20:29:40 +09:00
roynatech2544	c9244bbf69	universal7885: sepolicy: Allow libperfmgr to set vendor.power prop ... 03-29 12:27:04.015 3630 3630 W auditd : type=1327 audit(0.0:673): proctitle=/vendor/bin/hw/android.hardware.power-service.samsung-libperfmgr 03-29 12:27:04.015 3630 3630 W auditd : type=1320 audit(0.0:673): 03-29 12:27:04.015 3779 3779 W NodeLooperThrea: type=1400 audit(0.0:674): avc: denied { write } for name=property_service dev=tmpfs ino=2814 scontext=u:r:hal_power_default:s0 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0 03-29 12:27:04.017 3779 5369 W libc : Unable to set property vendor.powerhal.rendering to EXPENSIVE_RENDERING: connection failed; errno=13 (Permission denied) 03-29 12:27:04.017 3779 5369 W libperfmgr: Failed to set property to : vendor.powerhal.rendering with value: EXPENSIVE_RENDERING Change-Id: I948bbfd80cc5efd0de246be5181b01027d2376f5 Signed-off-by: roynatech2544 <whiteshell2544@naver.com>	2022-03-29 12:31:26 +09:00
roynatech2544	e112b2fb59	universal7885: debug_daemon: Move to /system ... * Vendor processes can no longer execute system processes...	2022-03-27 20:45:25 +09:00
Chatur27	112cc401c5	universal7885: Address ROM-specific aux cam prop	2022-03-22 19:05:32 +09:00
roynatech2544	02eded67c8	universal7885: sepolicy: Label FM Radio HAL	2022-03-22 19:05:28 +09:00
roynatech2544	45e292f408	universal7885: camera.provider: Label and build ... * Except for a10 which has only 1 back cam Change-Id: Ibf6f07ea36c16880bf760bf66f5454485889c792 Signed-off-by: roynatech2544 <whiteshell2544@naver.com>	2022-03-22 19:05:26 +09:00
roynatech2544	4be8e028a2	universal7885: sepolicy: rework for unify	2022-03-22 19:04:58 +09:00
roynatech2544	7348a1bea4	universal7885: stop covering vendor.camera.aux props ... * It is already covered on ROM-specific sepolicy, therefore causing BSOD on some roms Change-Id: I18d2592d8150a63f989c2b96cdb48a21ff11bbab Signed-off-by: roynatech2544 <whiteshell2544@naver.com>	2022-03-22 19:04:25 +09:00
roynatech2544	c8b0cf2f9f	[SQUASH] Revert "universal7885: import Pixel thermal HAL" ... This reverts commit cb95ff03729f9721c1a2af56e349a880c416ea59. Revert "universal7885: sepolicy: Add another rule for thermal hal" This reverts commit e695df796cf6b39e88652b2829bb18fc797ac0c8. Revert "universal7885: switch to pixel thermal hal" This reverts commit b8f413737399e34405322865d1efb391648124d7.	2022-03-22 19:04:25 +09:00
Soo-Hwan Na	c98184931a	universal7885: sepolicy: address sensor denials on A40 ... * Now covering /sys/devices/virtual/input/input[0 to 12] * Hope thats enough	2022-03-22 19:04:24 +09:00
roynatech2544	75cd9e0a4c	universal7885: allow init to mount sec_efs to /factory ... Signed-off-by: roynatech2544 <whiteshell2544@naver.com>	2022-03-22 19:03:20 +09:00
roynatech2544	c254008d6b	universal7885: set factory context ... Signed-off-by: roynatech2544 <whiteshell2544@naver.com>	2022-03-22 19:03:20 +09:00
roynatech2544	0119118b2b	universal7885: cleanup unused contexts ... Signed-off-by: roynatech2544 <whiteshell2544@naver.com>	2022-03-22 19:03:20 +09:00
roynatech2544	24cc2cdcae	universal7885: fix drm widevine L3 ... * make directory for sec_efs partition * Address selinux denials while using it * HACK: Since oemcrypto looks for /factory/wv.keys, mount sec_efs partition on /factory instead of /efs Signed-off-by: roynatech2544 <whiteshell2544@naver.com>	2022-03-22 19:03:20 +09:00
roynatech2544	53b426b522	universal7885: work on sepolicy ... * Allow system app to ioctl to FM Radio device * import some missing samsung vendor bins Signed-off-by: roynatech2544 <whiteshell2544@naver.com>	2022-03-22 19:03:19 +09:00
Soo-Hwan Na	183f67303e	universal7885: sepolicy: remove unused context ... * /dev/block/loop(0-99) is covered by system/sepolicy already	2022-03-22 19:03:19 +09:00
Soo-Hwan Na	ce1a1adc1e	universal7885: resolve drm widevine denials ... * allow drm widevine to call ioctl() to tz_user_device	2022-03-22 19:03:19 +09:00