Commit graph android_device_samsung_a20/universal7885-common/sepolicy
Author SHA1 Message Date
roynatech2544
cdcdf5481c universal7885: Include a radio wrapper
vendor.samsung.hardware.radio@2.1 extends android.hardware.radio@1.4 which can be casted and registered
2022-12-23 19:23:54 +09:00
roynatech2544
31c8b75b7a universal7885: sepolicy: Label cmd_result node 2022-12-23 19:23:54 +09:00
roynatech2544
e682783f6b universal7885: FM: Fix sepolicy denial and crash of app
- Don't crash on no headphones detected
- Use progressdialog instead of disabling touch
- Don't crash while manually updating freqs list
- Address selinux denial on aidl
2022-11-03 16:44:06 +09:00
roynatech2544
1845c09098 [SQUASH] universal7885: Revert health related commits
Revert "universal7885: sepolicy: Address charger_vendor denial"

This reverts commit f35e7ce2a6.

Revert "universal7885: Switch to health AIDL HAL"

This reverts commit d80918f7b5.

Revert "universal7885: health: remove unused namespace"

This reverts commit 19139783b3.

Revert "universal7885: Remove unused deps from health impl"

This reverts commit 478b6f760c.

Revert "universal7885: Implement health 2.1 hal"

This reverts commit f90a9a09cf.
2022-10-17 18:01:00 +09:00
roynatech2544
9a2f223571 universal7885: aidl-support: Address avc denials 2022-10-17 17:57:43 +09:00
roynatech2544
41a3c2f0b1 universal7885: aidl-support: Fixup build errors 2022-10-17 17:57:43 +09:00
roynatech2544
4ef818a802 universal7885: aidl-support: Add audio route hal to fake audioserver uid 2022-10-17 17:57:43 +09:00
roynatech2544
1ae356f310 universal7885: sepolicy: use binder_call macro 2022-10-16 11:03:00 +09:00
roynatech2544
f35e7ce2a6 universal7885: sepolicy: Address charger_vendor denial 2022-10-14 14:19:55 +09:00
roynatech2544
95e42984fb universal7885: sepolicy: Label back clearkey label 2022-10-14 11:22:16 +09:00
Tim Zimmermann
d80918f7b5 universal7885: Switch to health AIDL HAL
Change-Id: Icbb7194943388679abd25b2dbd105424c34496a1
2022-10-11 13:50:02 +09:00
roynatech2544
b226436fc7 universal7885: aidl-support: Fork subprocess to setuid 2022-10-11 03:00:44 +09:00
roynatech2544
b3cd2cf207 Revert "universal7885: Enable AIDL DRM HALs"
This reverts commit 380475026d.

- Clearkey init fails
- Also address DRM widevine denial
2022-10-10 22:15:45 +09:00
roynatech2544
1c6d1f2678 universal7885: sepolicy: (Finally) Adapt for AIDL 2022-10-09 22:23:10 +09:00
roynatech2544
946f4768e9 universal7885: FMRadio: Remove source edit
If the AIDL hal which can be allowed to change uid calls audioflinger API to change route, we don't need to change source for it. seteuid(audioserver_uid) will work fine
2022-10-08 01:12:37 +09:00
roynatech2544
b6537a107b universal7885: Unify IFMSysfsSupport to IFMDevControl
Also update sepolicy svc ctx
2022-10-07 13:39:07 +09:00
roynatech2544
d3adcd6380 universal7885: Fixup remaining mistakes converting to AIDL
sepolicy: Rename service_contexts for AIDL
parts-aidl: vintf: Fix hal name
2022-10-07 11:00:14 +09:00
roynatech2544
972e443357 universal7885: sepolicy: Fix neverallows and label 2022-10-06 17:31:49 +00:00
roynatech2544
dd1f2a2bd2 universal7885: sepolicy: Fix system_app rules
Also move fm dev ioctl allow to fm hal
2022-10-06 14:13:46 +00:00
roynatech2544
983a25b4d2 universal7885: sepolicy: Rename for aidl hals 2022-10-05 09:59:39 +00:00
roynatech2544
2e0da038da universal7885: parts-hidl: Refactor code and impl smartcharge 2022-10-03 16:38:45 +09:00
Soo-Hwan Na
3a89b4dec4
universal7885: sepolicy: rild denials 2022-09-28 00:26:03 +09:00
roynatech2544
cf49588873 universal7885: multliclientd: Address extra denial 2022-09-25 15:15:59 +09:00
roynatech2544
93735da7ca universal7885: sepolicy: Fixup! use macro for covering denials 2022-09-22 22:31:45 +09:00
roynatech2544
3f7b6ce7aa universal7885: sepolicy: Add rule for multiclientd
This will make sec audioril init succeed, as it creates socket for rild and audio system to connect
Still don't know what this actually does since its part of Samsung telephony framework
2022-09-22 13:12:46 +09:00
roynatech2544
ba9e566ab3 universal7885: sepolicy: Label memtrack AIDL service 2022-09-17 20:38:43 +09:00
Tim Zimmermann
36615e9d9f universal7885: Switch to new AIDL memtrack HAL
Change-Id: I3ae077b5f59e4fcf32489eef64bce8551d758998
2022-09-16 18:25:58 +09:00
roynatech2544
1b26358ce9 universal7885: sepolicy: Address power stats HAL's denial 2022-09-11 20:17:33 +09:00
Tim Zimmermann
e8a089f7e0 universal7885: Switch to AIDL usb HAL
Change-Id: I710ddcb6128ae3056083291d5dde66c294a1d018
2022-09-09 00:17:22 +00:00
roynatech2544
facb92a88a universal7885: sepolicy: Write rules for power stats HAL
* Also address other denials happening on permissive mode
2022-08-28 08:26:30 +09:00
roynatech2544
0ab8aa74bf universal7885: Inital commit of powerstats impl
Most code copied from Google's raven's powerstats source and adapted to ours
2022-08-27 06:45:40 +00:00
roynatech2544
7c26e3461b universal7885: Address some avc denials 2022-08-26 14:10:18 +00:00
roynatech2544
39104ff516 universal7885: sepolicy: Drop file type sysfs_gpu
* Now declared on src
2022-08-16 17:34:29 +02:00
roynatech2544
841efbe2b9 universal7885: sepolicy: Rename wrong filename of genfscon 2022-08-16 22:49:21 +09:00
roynatech2544
cb6cd3067d universal7885: Adopt to changes on R10
* The /proc/kmsg buffer is empty by default
2022-06-17 13:58:33 +00:00
roynatech2544
6feb600625
universal7885: Allow vendor_init to set powerhal init prop
The Pixel libperfmgr has following code :
std::thread initThread([&]() {
        ::android::base::WaitForProperty(kPowerHalInitProp.data(), 1);
        hm->Start();
        dlpw->Init();
    });

which is basically
declare thread {
        if (powerhalprop_is_not_set) wait;
        else (powerhal_prop_is_set) init_other_threads;
}.start();

But in logcat
<11>[   21.988418]  [2:           init: 2815] init: Unable to set property 'vendor.powerhal.init' from uid:0 gid:0 pid:2816: SELinux permission check failed
<36>[   21.989189]  [3:    logd.auditd: 3586] type=1107 audit(1654915533.291:146): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.powerhal.init pid=2816 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_powerhal_prop:s0 tclass=property_service permissive=0'

So the powerhal's thread was not being run. This commit fixes seplicy to allow vendor init to set the powerhal init prop. May fix some issues on DT2W and deep sleep
2022-06-11 13:17:55 +09:00
roynatech2544
14e4406a1b universal7885: sepolicy: Drop shell execute rules 2022-05-21 02:29:42 +00:00
roynatech2544
0282f1e3a9
universal7885: Address some denials
Change-Id: I6892bbdecf6780891c0baf5849687632602e52c9
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-05-14 15:04:18 +09:00
roynatech2544
5e69a17ac0
universal7885: Label powerhal props 2022-05-08 18:15:09 +09:00
roynatech2544
043d4db5cf
universal7885: rootdir: Allow tracing
Also address some selinux denials
2022-05-07 13:58:08 +09:00
roynatech2544
cdc2de72fc
a10: Fixup issues with sensor hal
Imported sensor hal source from android 12L, rebranded and make it compile as 32bit
2022-05-04 20:29:17 +09:00
Tim Zimmermann
671bd6f797
universal7885: Use omr as /metadata
Change-Id: If93ec5ea8ce8770e23d2ba622fc8ae4e66ecfbbf
2022-05-04 20:29:10 +09:00
roynatech2544
1a96e0b036
universal7885: Address various selinux denials
Also fix some mistakes
2022-04-30 15:14:15 +09:00
roynatech2544
f717debf14
universal7885: Add missing new line chars 2022-04-30 15:10:37 +09:00
roynatech2544
7ab4e966aa
universal7885: sepolicy: Continue moving to /system 2022-04-29 22:24:09 +09:00
roynatech2544
657050b9b3
universal7885: sepolicy: Move some sysfs genfscons
* To public so private rules can access it too
* Also, remove rebundant genfscon
* Fix neverallows due to previous commit
2022-04-29 22:24:08 +09:00
roynatech2544
7150c7f690
universa7885: sepolicy: Remove derp sepolicy 2022-04-29 22:24:08 +09:00
roynatech2544
af754b5f92
universal7885: parts: hidl: Move to /system
* Sepolicy issues, need to be in /system to write data to files. While we're on it, move fm radio hal too
2022-04-29 22:23:34 +09:00
roynatech2544
4a8c870b6b universal7885: parts: swap: Round down
The free space on /data
Also fix some issues with it
2022-04-20 12:58:55 +09:00
roynatech2544
f5d3e25c02 universal7885: parts: Implement swap on /data ctrl 2022-04-19 11:51:24 +09:00