Commit graph android_device_samsung_a20/universal7885-common/sepolicy
Author SHA1 Message Date
roynatech2544
983a25b4d2 universal7885: sepolicy: Rename for aidl hals 2022-10-05 09:59:39 +00:00
roynatech2544
2e0da038da universal7885: parts-hidl: Refactor code and impl smartcharge 2022-10-03 16:38:45 +09:00
Soo-Hwan Na
3a89b4dec4
universal7885: sepolicy: rild denials 2022-09-28 00:26:03 +09:00
roynatech2544
cf49588873 universal7885: multliclientd: Address extra denial 2022-09-25 15:15:59 +09:00
roynatech2544
93735da7ca universal7885: sepolicy: Fixup! use macro for covering denials 2022-09-22 22:31:45 +09:00
roynatech2544
3f7b6ce7aa universal7885: sepolicy: Add rule for multiclientd
This will make sec audioril init succeed, as it creates socket for rild and audio system to connect
Still don't know what this actually does since its part of Samsung telephony framework
2022-09-22 13:12:46 +09:00
roynatech2544
ba9e566ab3 universal7885: sepolicy: Label memtrack AIDL service 2022-09-17 20:38:43 +09:00
Tim Zimmermann
36615e9d9f universal7885: Switch to new AIDL memtrack HAL
Change-Id: I3ae077b5f59e4fcf32489eef64bce8551d758998
2022-09-16 18:25:58 +09:00
roynatech2544
1b26358ce9 universal7885: sepolicy: Address power stats HAL's denial 2022-09-11 20:17:33 +09:00
Tim Zimmermann
e8a089f7e0 universal7885: Switch to AIDL usb HAL
Change-Id: I710ddcb6128ae3056083291d5dde66c294a1d018
2022-09-09 00:17:22 +00:00
roynatech2544
facb92a88a universal7885: sepolicy: Write rules for power stats HAL
* Also address other denials happening on permissive mode
2022-08-28 08:26:30 +09:00
roynatech2544
0ab8aa74bf universal7885: Inital commit of powerstats impl
Most code copied from Google's raven's powerstats source and adapted to ours
2022-08-27 06:45:40 +00:00
roynatech2544
7c26e3461b universal7885: Address some avc denials 2022-08-26 14:10:18 +00:00
roynatech2544
39104ff516 universal7885: sepolicy: Drop file type sysfs_gpu
* Now declared on src
2022-08-16 17:34:29 +02:00
roynatech2544
841efbe2b9 universal7885: sepolicy: Rename wrong filename of genfscon 2022-08-16 22:49:21 +09:00
roynatech2544
cb6cd3067d universal7885: Adopt to changes on R10
* The /proc/kmsg buffer is empty by default
2022-06-17 13:58:33 +00:00
roynatech2544
6feb600625
universal7885: Allow vendor_init to set powerhal init prop
The Pixel libperfmgr has following code :
std::thread initThread([&]() {
        ::android::base::WaitForProperty(kPowerHalInitProp.data(), 1);
        hm->Start();
        dlpw->Init();
    });

which is basically
declare thread {
        if (powerhalprop_is_not_set) wait;
        else (powerhal_prop_is_set) init_other_threads;
}.start();

But in logcat
<11>[   21.988418]  [2:           init: 2815] init: Unable to set property 'vendor.powerhal.init' from uid:0 gid:0 pid:2816: SELinux permission check failed
<36>[   21.989189]  [3:    logd.auditd: 3586] type=1107 audit(1654915533.291:146): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.powerhal.init pid=2816 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_powerhal_prop:s0 tclass=property_service permissive=0'

So the powerhal's thread was not being run. This commit fixes seplicy to allow vendor init to set the powerhal init prop. May fix some issues on DT2W and deep sleep
2022-06-11 13:17:55 +09:00
roynatech2544
14e4406a1b universal7885: sepolicy: Drop shell execute rules 2022-05-21 02:29:42 +00:00
roynatech2544
0282f1e3a9
universal7885: Address some denials
Change-Id: I6892bbdecf6780891c0baf5849687632602e52c9
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-05-14 15:04:18 +09:00
roynatech2544
5e69a17ac0
universal7885: Label powerhal props 2022-05-08 18:15:09 +09:00
roynatech2544
043d4db5cf
universal7885: rootdir: Allow tracing
Also address some selinux denials
2022-05-07 13:58:08 +09:00
roynatech2544
cdc2de72fc
a10: Fixup issues with sensor hal
Imported sensor hal source from android 12L, rebranded and make it compile as 32bit
2022-05-04 20:29:17 +09:00
Tim Zimmermann
671bd6f797
universal7885: Use omr as /metadata
Change-Id: If93ec5ea8ce8770e23d2ba622fc8ae4e66ecfbbf
2022-05-04 20:29:10 +09:00
roynatech2544
1a96e0b036
universal7885: Address various selinux denials
Also fix some mistakes
2022-04-30 15:14:15 +09:00
roynatech2544
f717debf14
universal7885: Add missing new line chars 2022-04-30 15:10:37 +09:00
roynatech2544
7ab4e966aa
universal7885: sepolicy: Continue moving to /system 2022-04-29 22:24:09 +09:00
roynatech2544
657050b9b3
universal7885: sepolicy: Move some sysfs genfscons
* To public so private rules can access it too
* Also, remove rebundant genfscon
* Fix neverallows due to previous commit
2022-04-29 22:24:08 +09:00
roynatech2544
7150c7f690
universa7885: sepolicy: Remove derp sepolicy 2022-04-29 22:24:08 +09:00
roynatech2544
af754b5f92
universal7885: parts: hidl: Move to /system
* Sepolicy issues, need to be in /system to write data to files. While we're on it, move fm radio hal too
2022-04-29 22:23:34 +09:00
roynatech2544
4a8c870b6b universal7885: parts: swap: Round down
The free space on /data
Also fix some issues with it
2022-04-20 12:58:55 +09:00
roynatech2544
f5d3e25c02 universal7885: parts: Implement swap on /data ctrl 2022-04-19 11:51:24 +09:00
roynatech2544
723dfbec38
universal7885: debug_daemon: Rename to EKLogger
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-04-14 00:20:05 +09:00
roynatech2544
7bd40b3a4e universal7885: interfaces: Move to /vendor/bin
* Is not Android core hal, so moving it from /vendor/bin/hw
2022-04-12 13:06:57 +09:00
roynatech2544
7156ddca8f universal7885: parts: hidl: Make some changes
* Drop useless selinux and gpu
* Instead put display configs (DT2W, Glove mode)

Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-04-12 13:06:28 +09:00
Jan Altensen
c604e3fb9f
universal7885: hidl: Uprev usb HAl to 1.3
* From LineageOS hardware/samsung
2022-04-03 03:19:52 +09:00
roynaetch2544
b75cc0ced3
universal7885: Address some denials
* app_domain: Allow untrusted apps to get vendor.camera props such as vendor.camera.skip_unconfigure.packagelist
* debug_daemon: Allow more perms to properly execute logcat, sepolicy neverallow passes still
* Move vendor_camera_prop to vendor_public_prop, to resolve neverallow
2022-04-02 15:20:24 +09:00
Soo-Hwan Na
06b0274c44
universal7885: sepolicy: Allow logger to execute sh 2022-03-31 17:46:00 +09:00
Soo-Hwan Na
fd54476fc1
universal7885: sepolicy: Address more denials
* Allow power hal to connect to init's unix socket
2022-03-29 20:29:40 +09:00
roynatech2544
c9244bbf69
universal7885: sepolicy: Allow libperfmgr to set vendor.power prop
03-29 12:27:04.015  3630  3630 W auditd  : type=1327 audit(0.0:673): proctitle=/vendor/bin/hw/android.hardware.power-service.samsung-libperfmgr
03-29 12:27:04.015  3630  3630 W auditd  : type=1320 audit(0.0:673):
03-29 12:27:04.015  3779  3779 W NodeLooperThrea: type=1400 audit(0.0:674): avc: denied { write } for name=property_service dev=tmpfs ino=2814 scontext=u:r:hal_power_default:s0 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0
03-29 12:27:04.017  3779  5369 W libc    : Unable to set property vendor.powerhal.rendering to EXPENSIVE_RENDERING: connection failed; errno=13 (Permission denied)
03-29 12:27:04.017  3779  5369 W libperfmgr: Failed to set property to : vendor.powerhal.rendering with value: EXPENSIVE_RENDERING

Change-Id: I948bbfd80cc5efd0de246be5181b01027d2376f5
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-29 12:31:26 +09:00
roynatech2544
e112b2fb59
universal7885: debug_daemon: Move to /system
* Vendor processes can no longer execute system processes...
2022-03-27 20:45:25 +09:00
Chatur27
112cc401c5
universal7885: Address ROM-specific aux cam prop 2022-03-22 19:05:32 +09:00
roynatech2544
9443bdc315
universal7885: FMRadio: Futher improve code
* Using enum classes for various statuses for good readability
* Implement favorite channel saving which was missing
* Use Kotlin coroutines again for refreshing channel list button, for faster UI response
* Added javadoc for better functions description
* Also, code native audio routing system on jni (fm_route.cpp)

Change-Id: I993c88fdb580248d8a55efd8e9b6fed0e36d9b24
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:05:31 +09:00
Chenyang Zhong
130e2d9b57
universal7885: sepolicy: Address init denial
Change-Id: Id0d0c88bbedde6b6586e3a6f04704457d910d8a0
2022-03-22 19:05:29 +09:00
roynatech2544
02eded67c8
universal7885: sepolicy: Label FM Radio HAL 2022-03-22 19:05:28 +09:00
roynatech2544
45e292f408
universal7885: camera.provider: Label and build
* Except for a10 which has only 1 back cam

Change-Id: Ibf6f07ea36c16880bf760bf66f5454485889c792
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:05:26 +09:00
roynatech2544
4be8e028a2
universal7885: sepolicy: rework for unify 2022-03-22 19:04:58 +09:00
roynatech2544
7348a1bea4
universal7885: stop covering vendor.camera.aux props
* It is already covered on ROM-specific sepolicy, therefore causing BSOD on some roms

Change-Id: I18d2592d8150a63f989c2b96cdb48a21ff11bbab
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:04:25 +09:00
roynatech2544
c8b0cf2f9f
[SQUASH] Revert "universal7885: import Pixel thermal HAL"
This reverts commit cb95ff03729f9721c1a2af56e349a880c416ea59.

Revert "universal7885: sepolicy: Add another rule for thermal hal"

This reverts commit e695df796cf6b39e88652b2829bb18fc797ac0c8.

Revert "universal7885: switch to pixel thermal hal"

This reverts commit b8f413737399e34405322865d1efb391648124d7.
2022-03-22 19:04:25 +09:00
Soo-Hwan Na
c98184931a
universal7885: sepolicy: address sensor denials on A40
* Now covering /sys/devices/virtual/input/input[0 to 12]
* Hope thats enough
2022-03-22 19:04:24 +09:00
roynatech2544
75cd9e0a4c
universal7885: allow init to mount sec_efs to /factory
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-03-22 19:03:20 +09:00