bunnypad/android_device_samsung_a20
Watch
1
0
Fork
You've already forked android_device_samsung_a20
 0
mirror of https://github.com/chararomandroid/android_device_samsung_a20 synced 2026-08-22 12:05:32 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
883 commits 3 branches 0 tags 43 MiB
Commit graph android_device_samsung_a20/universal7885-common/sepolicy
Author SHA1 Message Date
roynatech2544
14e4406a1b universal7885: sepolicy: Drop shell execute rules 2022-05-21 02:29:42 +00:00
roynatech2544
0282f1e3a9
 		universal7885: Address some denials 
Change-Id: I6892bbdecf6780891c0baf5849687632602e52c9
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-05-14 15:04:18 +09:00
roynatech2544
5e69a17ac0
 		universal7885: Label powerhal props 2022-05-08 18:15:09 +09:00
roynatech2544
043d4db5cf
 		universal7885: rootdir: Allow tracing 
Also address some selinux denials
 2022-05-07 13:58:08 +09:00
roynatech2544
cdc2de72fc
 		a10: Fixup issues with sensor hal 
Imported sensor hal source from android 12L, rebranded and make it compile as 32bit
 2022-05-04 20:29:17 +09:00
Tim Zimmermann
671bd6f797
 		universal7885: Use omr as /metadata 
Change-Id: If93ec5ea8ce8770e23d2ba622fc8ae4e66ecfbbf
 2022-05-04 20:29:10 +09:00
roynatech2544
1a96e0b036
 		universal7885: Address various selinux denials 
Also fix some mistakes
 2022-04-30 15:14:15 +09:00
roynatech2544
f717debf14
 		universal7885: Add missing new line chars 2022-04-30 15:10:37 +09:00
roynatech2544
7ab4e966aa
 		universal7885: sepolicy: Continue moving to /system 2022-04-29 22:24:09 +09:00
roynatech2544
657050b9b3
 		universal7885: sepolicy: Move some sysfs genfscons 
* To public so private rules can access it too
* Also, remove rebundant genfscon
* Fix neverallows due to previous commit
 2022-04-29 22:24:08 +09:00
roynatech2544
7150c7f690
 		universa7885: sepolicy: Remove derp sepolicy 2022-04-29 22:24:08 +09:00
roynatech2544
af754b5f92
 		universal7885: parts: hidl: Move to /system 
* Sepolicy issues, need to be in /system to write data to files. While we're on it, move fm radio hal too
 2022-04-29 22:23:34 +09:00
roynatech2544
4a8c870b6b universal7885: parts: swap: Round down 
The free space on /data
Also fix some issues with it
 2022-04-20 12:58:55 +09:00
roynatech2544
f5d3e25c02 universal7885: parts: Implement swap on /data ctrl 2022-04-19 11:51:24 +09:00
roynatech2544
723dfbec38
 		universal7885: debug_daemon: Rename to EKLogger 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-04-14 00:20:05 +09:00
roynatech2544
7bd40b3a4e universal7885: interfaces: Move to /vendor/bin 
* Is not Android core hal, so moving it from /vendor/bin/hw
 2022-04-12 13:06:57 +09:00
roynatech2544
7156ddca8f universal7885: parts: hidl: Make some changes 
* Drop useless selinux and gpu
* Instead put display configs (DT2W, Glove mode)

Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-04-12 13:06:28 +09:00
Jan Altensen
c604e3fb9f
 		universal7885: hidl: Uprev usb HAl to 1.3 
* From LineageOS hardware/samsung
 2022-04-03 03:19:52 +09:00
roynaetch2544
b75cc0ced3
 		universal7885: Address some denials 
* app_domain: Allow untrusted apps to get vendor.camera props such as vendor.camera.skip_unconfigure.packagelist
* debug_daemon: Allow more perms to properly execute logcat, sepolicy neverallow passes still
* Move vendor_camera_prop to vendor_public_prop, to resolve neverallow
 2022-04-02 15:20:24 +09:00
Soo-Hwan Na
06b0274c44
 		universal7885: sepolicy: Allow logger to execute sh 2022-03-31 17:46:00 +09:00
Soo-Hwan Na
fd54476fc1
 		universal7885: sepolicy: Address more denials 
* Allow power hal to connect to init's unix socket
 2022-03-29 20:29:40 +09:00
roynatech2544
c9244bbf69
 		universal7885: sepolicy: Allow libperfmgr to set vendor.power prop 
03-29 12:27:04.015  3630  3630 W auditd  : type=1327 audit(0.0:673): proctitle=/vendor/bin/hw/android.hardware.power-service.samsung-libperfmgr
03-29 12:27:04.015  3630  3630 W auditd  : type=1320 audit(0.0:673):
03-29 12:27:04.015  3779  3779 W NodeLooperThrea: type=1400 audit(0.0:674): avc: denied { write } for name=property_service dev=tmpfs ino=2814 scontext=u:r:hal_power_default:s0 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0
03-29 12:27:04.017  3779  5369 W libc    : Unable to set property vendor.powerhal.rendering to EXPENSIVE_RENDERING: connection failed; errno=13 (Permission denied)
03-29 12:27:04.017  3779  5369 W libperfmgr: Failed to set property to : vendor.powerhal.rendering with value: EXPENSIVE_RENDERING

Change-Id: I948bbfd80cc5efd0de246be5181b01027d2376f5
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-29 12:31:26 +09:00
roynatech2544
e112b2fb59
 		universal7885: debug_daemon: Move to /system 
* Vendor processes can no longer execute system processes...
 2022-03-27 20:45:25 +09:00
Chatur27
112cc401c5
 		universal7885: Address ROM-specific aux cam prop 2022-03-22 19:05:32 +09:00
roynatech2544
9443bdc315
 		universal7885: FMRadio: Futher improve code 
* Using enum classes for various statuses for good readability
* Implement favorite channel saving which was missing
* Use Kotlin coroutines again for refreshing channel list button, for faster UI response
* Added javadoc for better functions description
* Also, code native audio routing system on jni (fm_route.cpp)

Change-Id: I993c88fdb580248d8a55efd8e9b6fed0e36d9b24
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:05:31 +09:00
Chenyang Zhong
130e2d9b57
 		universal7885: sepolicy: Address init denial 
Change-Id: Id0d0c88bbedde6b6586e3a6f04704457d910d8a0
 2022-03-22 19:05:29 +09:00
roynatech2544
02eded67c8
 		universal7885: sepolicy: Label FM Radio HAL 2022-03-22 19:05:28 +09:00
roynatech2544
45e292f408
 		universal7885: camera.provider: Label and build 
* Except for a10 which has only 1 back cam

Change-Id: Ibf6f07ea36c16880bf760bf66f5454485889c792
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:05:26 +09:00
roynatech2544
4be8e028a2
 		universal7885: sepolicy: rework for unify 2022-03-22 19:04:58 +09:00
roynatech2544
7348a1bea4
 		universal7885: stop covering vendor.camera.aux props 
* It is already covered on ROM-specific sepolicy, therefore causing BSOD on some roms

Change-Id: I18d2592d8150a63f989c2b96cdb48a21ff11bbab
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:04:25 +09:00
roynatech2544
c8b0cf2f9f
 		[SQUASH] Revert "universal7885: import Pixel thermal HAL" 
This reverts commit cb95ff03729f9721c1a2af56e349a880c416ea59.

Revert "universal7885: sepolicy: Add another rule for thermal hal"

This reverts commit e695df796cf6b39e88652b2829bb18fc797ac0c8.

Revert "universal7885: switch to pixel thermal hal"

This reverts commit b8f413737399e34405322865d1efb391648124d7.
 2022-03-22 19:04:25 +09:00
Soo-Hwan Na
c98184931a
 		universal7885: sepolicy: address sensor denials on A40 
* Now covering /sys/devices/virtual/input/input[0 to 12]
* Hope thats enough
 2022-03-22 19:04:24 +09:00
roynatech2544
75cd9e0a4c
 		universal7885: allow init to mount sec_efs to /factory 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:03:20 +09:00
roynatech2544
c254008d6b
 		universal7885: set factory context 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:03:20 +09:00
roynatech2544
0119118b2b
 		universal7885: cleanup unused contexts 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:03:20 +09:00
roynatech2544
24cc2cdcae
 		universal7885: fix drm widevine L3 
* make directory for sec_efs partition
* Address selinux denials while using it
* HACK: Since oemcrypto looks for /factory/wv.keys, mount sec_efs partition on /factory instead of /efs

Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:03:20 +09:00
roynatech2544
53b426b522
 		universal7885: work on sepolicy 
* Allow system app to ioctl to FM Radio device
* import some missing samsung vendor bins

Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:03:19 +09:00
Soo-Hwan Na
183f67303e
 		universal7885: sepolicy: remove unused context 
* /dev/block/loop(0-99) is covered by system/sepolicy already
 2022-03-22 19:03:19 +09:00
Soo-Hwan Na
ce1a1adc1e
 		universal7885: resolve drm widevine denials 
* allow drm widevine to call ioctl() to tz_user_device
 2022-03-22 19:03:19 +09:00
roynatech2544
b298ccb96f
 		universal7885: address logcat exec denials 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:03:18 +09:00
roynatech2544
f9eb06e899
 		universal7885: fixup sepolicy denials 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:02:52 +09:00
roynatech2544
667610e1fb
 		universal7885: fixup sepolicy neverallows 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:02:51 +09:00
roynatech2544
8fcc87eaf2
 		universal7885: add needed sepolicy for it 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:02:51 +09:00
roynatech2544
772644b37d
 		universal7885: stop avc log spamming with zygote writing to cgroupv2 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:02:47 +09:00
Soo-Hwan Na
e0d5faa85c
 		universal7885: resolve selinux neverallows 
* vendor services can't set system prop, why did I forget that
 2022-03-22 19:02:19 +09:00
roynatech2544
6420fb45b0
 		universal7885: address some selinux denials 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:02:19 +09:00
Soo-Hwan Na
af843a7a34
 		universal7885: label light aidl 2022-03-22 19:02:17 +09:00
roynatech2544
b4b885dc21
 		universal7885: remove duplicate entry 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:02:17 +09:00
roynatech2544
eca4a6eb4c
 		universal7885: label new AIDLs 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:02:17 +09:00
Tim Zimmermann
a3850a3ba8
 		universal7885: Switch to new AIDL vibrator HAL 
Change-Id: If10972cce06dd5128729d4d7409c57f79775b09b
Signed-off-by: SamarV-121 <samarvispute121@pm.me>
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:02:16 +09:00