Commit graph android_device_samsung_a20/universal7885-common/sepolicy
Author SHA1 Message Date
Soo-Hwan Na
183f67303e
universal7885: sepolicy: remove unused context
* /dev/block/loop(0-99) is covered by system/sepolicy already
2022-03-22 19:03:19 +09:00
Soo-Hwan Na
ce1a1adc1e
universal7885: resolve drm widevine denials
* allow drm widevine to call ioctl() to tz_user_device
2022-03-22 19:03:19 +09:00
roynatech2544
b298ccb96f
universal7885: address logcat exec denials
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:03:18 +09:00
roynatech2544
f9eb06e899
universal7885: fixup sepolicy denials
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:02:52 +09:00
roynatech2544
667610e1fb
universal7885: fixup sepolicy neverallows
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:02:51 +09:00
roynatech2544
8fcc87eaf2
universal7885: add needed sepolicy for it
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:02:51 +09:00
roynatech2544
772644b37d
universal7885: stop avc log spamming with zygote writing to cgroupv2
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:02:47 +09:00
Soo-Hwan Na
e0d5faa85c
universal7885: resolve selinux neverallows
* vendor services can't set system prop, why did I forget that
2022-03-22 19:02:19 +09:00
roynatech2544
6420fb45b0
universal7885: address some selinux denials
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:02:19 +09:00
Soo-Hwan Na
af843a7a34
universal7885: label light aidl 2022-03-22 19:02:17 +09:00
roynatech2544
b4b885dc21
universal7885: remove duplicate entry
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:02:17 +09:00
roynatech2544
eca4a6eb4c
universal7885: label new AIDLs
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:02:17 +09:00
Tim Zimmermann
a3850a3ba8
universal7885: Switch to new AIDL vibrator HAL
Change-Id: If10972cce06dd5128729d4d7409c57f79775b09b
Signed-off-by: SamarV-121 <samarvispute121@pm.me>
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:02:16 +09:00
roynatech2544
ba4f5671b1
universal7885: enable nfc for all a202f
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:02:16 +09:00
roynatech2544
3e8358f7a2
universal7885: import thermal-symlinks sepolicy
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:02:15 +09:00
Kevios12
4897ff7354
universal7885: fixup broken rils 2022-03-22 19:02:15 +09:00
roynatech2544
d77d80d2c5
universal7885: re-commonize fingerprint hal 2022-03-22 19:02:15 +09:00
Soo-Hwan Na
413906cf74
universal7885: remove duplicate entry 2022-03-22 19:02:14 +09:00
roynatech2544
59e0ac89e7
universal7885: props: add ro.csc. 2022-03-22 19:02:14 +09:00
roynatech2544
70a1a5c55b
universal7885: fix undefined sepolicy error 2022-03-22 19:02:14 +09:00
Tim Zimmermann
a096bb29ed
universal7885: Enable fingerprint gestures
Change-Id: I3289fac865b8d7bf5900d8fa8b3f5b03b818a230
Signed-off-by: SamarV-121 <samarvispute121@pm.me>
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:02:13 +09:00
roynatech2544
6ef9da0b1e
universal7885: address camera selinux denials 2022-03-22 19:02:13 +09:00
roynatech2544
6c55caa493
universal7885: sepolicy: Add another rule for thermal hal 2022-03-22 19:02:13 +09:00
roynatech2544
a94e055586
universal7885: switch to pixel thermal hal
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:02:12 +09:00
roynatech2544
4e8f041f6e
universal7885: address denials for 7904 2022-03-22 19:02:10 +09:00
roynatech2544
0423e2e88c
universal7885: address drm widevine denials while try to use it 2022-03-22 19:02:09 +09:00
roynatech2544
69fd695b16
universal7885: sepolicy: Address a10 sensors denials
Change-Id: Ifba5e98923f470b3c10ca87c2ccfb65c4af75c4c
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:01:56 +09:00
Soo-Hwan Na
9cb6b6dd4e
universal7885: fix sepolicy 2022-03-22 19:01:56 +09:00
roynatech2544
b5d019b3fb
universal7885: add vndservice to composer hal
* Logs
12-03 07:59:00.804  3416  3416 E SELinux : avc:  denied  { add } for pid=3652 uid=1000 name=Exynos.HWCService scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:vendor_surfaceflinger_vndservice:s0 tclass=service_manager permissive=1
12-03 07:59:00.804  3549  3549 W HidlServiceManagement: Waited one second for android.hardware.graphics.composer@2.1::IComposer/default
12-03 07:59:00.804  3415  3415 I hwservicemanager: Since android.hardware.graphics.composer@2.1::IComposer/default is not registered, trying to start it as a lazy HAL.
12-03 07:59:00.804  3416  3416 E SELinux : avc:  denied  { find } for pid=3652 uid=1000 name=Exynos.HWCService scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:vendor_surfaceflinger_vndservice:s0 tclass=service_manager permissive=1
12-03 07:59:00.805  3549  3549 I HidlServiceManagement: getService: Trying again for android.hardware.graphics.composer@2.1::IComposer/default...
2022-03-22 19:01:56 +09:00
roynatech2544
07b209df81
universal7885: Major (de)commonize due to prev commit 2022-03-22 19:01:33 +09:00
Kevios12
78c95716ca
universal7885: duplicate genfscon 2022-03-22 18:57:41 +09:00
roynatech2544
eaab77ceff
universal7885: Add other 7885 devices
* A10, A30, A40

Change-Id: I92829c4d3b11e2759f08ef04fe4d4d60ff352a0b
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 18:57:19 +09:00
Kevios12
62b750c2e9
universal7885: Add some rules to make ds work on enforcing 2022-03-22 18:57:12 +09:00
David Sehr
a5d59ee4fe
universal7885: Use dex2oat64
Enable dex2oat64 use
Additionally, cleanup
Bug: 153380900
Test: boot and install an application
Change-Id: I3e7a6e6e9385ff6564d1a2e6dda004ebb061f095
(cherry picked from commit 126f03be80f57a8a0411842011152d9381589b78)
Merged-In: I3e7a6e6e9385ff6564d1a2e6dda004ebb061f095
Signed-off-by: orgesified <gesishabani1@gmail.com>
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
Signed-off-by: Kevios12 <kerschbaumer.kevin2@gmail.com>
2022-03-22 18:56:53 +09:00
roynatech2544
c3ae831d7f
universal7885: Fixup neverallow 2022-03-22 18:56:37 +09:00
Inseob Kim
faa961a5f5
universal7885: sepolicy: Attach vendor_property_type to properties
We are going to enforce that each property has an explicit owner, such
as system, vendor, or product. This attaches vendor_property_type to
properties defined under vendor sepolicy directories.

Bug: 159097992
Test: m selinux_policy && boot device
Change-Id: I33c40ca345365d8f01f43d3ce7f1f3434b1edfd5
Signed-off-by: SamarV-121 <samarvispute121@pm.me>
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 18:56:37 +09:00
Soo-Hwan Na
833959f896
universal7885: drop a2dp hardware offload
Reason: unsupported

Inital inputmonitor

* Tool to record input keycodes (numbers)

Signed-off-by: roynatech2544 <whiteshell2544@naver.com>

universal7885: inputmonitor: fix build errors
2022-03-22 18:56:36 +09:00
roynatech2544
1f8d0619cc
[APTX] universal7885: Add APTX support
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 18:55:39 +09:00
roynatech2544
2ba9a6ccbf
universal7885: Add samsung configstore HAL entry 2022-03-22 18:55:32 +09:00
roynatech2544
84b8328a01
universal7885: import light HAL from hardware/samsung
* Added .clang-format symlink
* Undefine non-existent nodes in header file

Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 18:52:43 +09:00
roynatech2544
cecc5caa7b
universal7885: SEPolicy: Label new HAL(libpower-perfmgr)
* Since we merged Samsung slsi repo, it should be labeled here

Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 18:51:41 +09:00
Tim Zimmermann
5fc20541b8
universal7885: Switch to AIDL libperfmgr power HAL
Change-Id: I56928037bf543accb3175ea50c674f80a3f60b99
Signed-off-by: SamarV-121 <samarvispute121@pm.me>
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 18:51:23 +09:00
roynatech2544
eb55252ccd
universal7885: Add necessary selinux policy for previous commit
* type=1400 audit(0.0:410): avc: denied { setuid } for capability=7 scontext=u:r:hal_battery_default:s0 tcontext=u:r:hal_battery_default:s0 tclass=capability permissive=0

Change-Id: Iaf23adf8c27758b4856f4c3ab2f55b16f57e646e
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 18:46:49 +09:00
Soo-Hwan Na
2c3de84078
universal7885: sepolicy: typo
* add ; back

Change-Id: Ied8348babdf09daa4768b9a9cd4c2b405290d6b2
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 18:44:10 +09:00
roynatech2544
0631cfad71
universal7885: sepolicy: Address A20 and DS denials
Change-Id: I5838c1cd88f4479169651b8a66f70d52242c2e4e
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 18:41:13 +09:00
roynatech2544
0d81c5b97d
universal7885: CameraLightSensor: Correctly monitor brightness settings
* Added an observer
2022-03-22 18:39:42 +09:00
roynatech2544
0629318372
universal7885: sepolicy: Address dual sim model's denials
Change-Id: Ib9482de562b74964738968320c869c96e22bd704
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 18:39:11 +09:00
roynatech2544
83eec48ea9
universal7885: sepolicy: Address build error
* ERROR 'unknown type system_suspend' at token ';' on line 37636

Change-Id: I701844d4ca372c7bfa031fc03e0b56d94fd08c01
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 18:36:40 +09:00
roynatech2544
7d795b7fe3
universal7885: sepolicy: Support for A20's poll_delay file 2022-03-22 18:36:18 +09:00
roynatech2544
0fc8d0c629
a20: Address SELinux denials
* Additionally, try to save more battery on CameraLightSensor

Change-Id: I8a3a86a67eeefb0b023e4162f0a32c9ecca20ff4
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 18:35:27 +09:00