Commit graph android_device_samsung_a20/universal7885-common/sepolicy
Author SHA1 Message Date
roynatech2544
4849848417
universal7885: debug-tools are moved to ext 2023-11-29 14:18:39 +09:00
roynatech2544
a280fa63b2
universal7885: Fill in missing parts of parts 2023-11-29 14:18:38 +09:00
roynatech2544
c55b034a4b
universal7885: Remove parts/its hal, remenants 2023-11-29 14:18:38 +09:00
roynatech2544
04f9a60e4c
universal7885: Bring back lights HAL 2023-11-29 14:18:38 +09:00
Tim Zimmermann
d105adfc53
universal7885: Use linaro BSP
[ K9100ii - Notes:
  - BOARD_HWJPEG_ANDROID_VERSION needs setting in variant device trees
  - libcsc, libgiantmscl and libhwjpeg blobs need to be removed from
    device-specific trees - Now built from source
  - Switched TARGET_BOOTLOADER_BOARD_NAME, used to derive the
    "gralloc.exynos7904" name, to exynos7904, to retain the same name as
    the proprietary blob and match newer devices
  - Renamed sysfs_graphics context to sysfs_brightness in sepolicy
  - This happens to get rid of video recording frame drops on A40 ]

Change-Id: I67c078e3ea2fab1da19029ca3e97ce968cad77ad
2023-11-29 14:18:33 +09:00
roynatech2544
04f72f040a
universal7885-common: sepolicy: Remove duplicate entry 2023-11-29 11:39:23 +09:00
roynatech2544
7536027712
Revert "universal7885: Include a radio wrapper"
This reverts commit cdcdf5481c.
2023-11-29 11:39:23 +09:00
roynatech2544
ba5f36d48c universal7885: sepolicy: Address denial 2022-12-24 23:28:17 +09:00
SamarV-121
c9ed1bc494 universal7885: sepolicy: Allow surfaceflinger to read hal_graphics_composer_default
Change-Id: Iede5b8fc546f117c709719527547d115e5054960
2022-12-23 19:24:03 +09:00
roynatech2544
cdcdf5481c universal7885: Include a radio wrapper
vendor.samsung.hardware.radio@2.1 extends android.hardware.radio@1.4 which can be casted and registered
2022-12-23 19:23:54 +09:00
roynatech2544
31c8b75b7a universal7885: sepolicy: Label cmd_result node 2022-12-23 19:23:54 +09:00
roynatech2544
e682783f6b universal7885: FM: Fix sepolicy denial and crash of app
- Don't crash on no headphones detected
- Use progressdialog instead of disabling touch
- Don't crash while manually updating freqs list
- Address selinux denial on aidl
2022-11-03 16:44:06 +09:00
roynatech2544
1845c09098 [SQUASH] universal7885: Revert health related commits
Revert "universal7885: sepolicy: Address charger_vendor denial"

This reverts commit f35e7ce2a6.

Revert "universal7885: Switch to health AIDL HAL"

This reverts commit d80918f7b5.

Revert "universal7885: health: remove unused namespace"

This reverts commit 19139783b3.

Revert "universal7885: Remove unused deps from health impl"

This reverts commit 478b6f760c.

Revert "universal7885: Implement health 2.1 hal"

This reverts commit f90a9a09cf.
2022-10-17 18:01:00 +09:00
roynatech2544
9a2f223571 universal7885: aidl-support: Address avc denials 2022-10-17 17:57:43 +09:00
roynatech2544
41a3c2f0b1 universal7885: aidl-support: Fixup build errors 2022-10-17 17:57:43 +09:00
roynatech2544
4ef818a802 universal7885: aidl-support: Add audio route hal to fake audioserver uid 2022-10-17 17:57:43 +09:00
roynatech2544
1ae356f310 universal7885: sepolicy: use binder_call macro 2022-10-16 11:03:00 +09:00
roynatech2544
f35e7ce2a6 universal7885: sepolicy: Address charger_vendor denial 2022-10-14 14:19:55 +09:00
roynatech2544
95e42984fb universal7885: sepolicy: Label back clearkey label 2022-10-14 11:22:16 +09:00
Tim Zimmermann
d80918f7b5 universal7885: Switch to health AIDL HAL
Change-Id: Icbb7194943388679abd25b2dbd105424c34496a1
2022-10-11 13:50:02 +09:00
roynatech2544
b226436fc7 universal7885: aidl-support: Fork subprocess to setuid 2022-10-11 03:00:44 +09:00
roynatech2544
b3cd2cf207 Revert "universal7885: Enable AIDL DRM HALs"
This reverts commit 380475026d.

- Clearkey init fails
- Also address DRM widevine denial
2022-10-10 22:15:45 +09:00
roynatech2544
1c6d1f2678 universal7885: sepolicy: (Finally) Adapt for AIDL 2022-10-09 22:23:10 +09:00
roynatech2544
946f4768e9 universal7885: FMRadio: Remove source edit
If the AIDL hal which can be allowed to change uid calls audioflinger API to change route, we don't need to change source for it. seteuid(audioserver_uid) will work fine
2022-10-08 01:12:37 +09:00
roynatech2544
b6537a107b universal7885: Unify IFMSysfsSupport to IFMDevControl
Also update sepolicy svc ctx
2022-10-07 13:39:07 +09:00
roynatech2544
d3adcd6380 universal7885: Fixup remaining mistakes converting to AIDL
sepolicy: Rename service_contexts for AIDL
parts-aidl: vintf: Fix hal name
2022-10-07 11:00:14 +09:00
roynatech2544
972e443357 universal7885: sepolicy: Fix neverallows and label 2022-10-06 17:31:49 +00:00
roynatech2544
dd1f2a2bd2 universal7885: sepolicy: Fix system_app rules
Also move fm dev ioctl allow to fm hal
2022-10-06 14:13:46 +00:00
roynatech2544
983a25b4d2 universal7885: sepolicy: Rename for aidl hals 2022-10-05 09:59:39 +00:00
roynatech2544
2e0da038da universal7885: parts-hidl: Refactor code and impl smartcharge 2022-10-03 16:38:45 +09:00
Soo-Hwan Na
3a89b4dec4
universal7885: sepolicy: rild denials 2022-09-28 00:26:03 +09:00
roynatech2544
cf49588873 universal7885: multliclientd: Address extra denial 2022-09-25 15:15:59 +09:00
roynatech2544
93735da7ca universal7885: sepolicy: Fixup! use macro for covering denials 2022-09-22 22:31:45 +09:00
roynatech2544
3f7b6ce7aa universal7885: sepolicy: Add rule for multiclientd
This will make sec audioril init succeed, as it creates socket for rild and audio system to connect
Still don't know what this actually does since its part of Samsung telephony framework
2022-09-22 13:12:46 +09:00
roynatech2544
ba9e566ab3 universal7885: sepolicy: Label memtrack AIDL service 2022-09-17 20:38:43 +09:00
Tim Zimmermann
36615e9d9f universal7885: Switch to new AIDL memtrack HAL
Change-Id: I3ae077b5f59e4fcf32489eef64bce8551d758998
2022-09-16 18:25:58 +09:00
roynatech2544
1b26358ce9 universal7885: sepolicy: Address power stats HAL's denial 2022-09-11 20:17:33 +09:00
Tim Zimmermann
e8a089f7e0 universal7885: Switch to AIDL usb HAL
Change-Id: I710ddcb6128ae3056083291d5dde66c294a1d018
2022-09-09 00:17:22 +00:00
roynatech2544
facb92a88a universal7885: sepolicy: Write rules for power stats HAL
* Also address other denials happening on permissive mode
2022-08-28 08:26:30 +09:00
roynatech2544
0ab8aa74bf universal7885: Inital commit of powerstats impl
Most code copied from Google's raven's powerstats source and adapted to ours
2022-08-27 06:45:40 +00:00
roynatech2544
7c26e3461b universal7885: Address some avc denials 2022-08-26 14:10:18 +00:00
roynatech2544
39104ff516 universal7885: sepolicy: Drop file type sysfs_gpu
* Now declared on src
2022-08-16 17:34:29 +02:00
roynatech2544
841efbe2b9 universal7885: sepolicy: Rename wrong filename of genfscon 2022-08-16 22:49:21 +09:00
roynatech2544
cb6cd3067d universal7885: Adopt to changes on R10
* The /proc/kmsg buffer is empty by default
2022-06-17 13:58:33 +00:00
roynatech2544
6feb600625
universal7885: Allow vendor_init to set powerhal init prop
The Pixel libperfmgr has following code :
std::thread initThread([&]() {
        ::android::base::WaitForProperty(kPowerHalInitProp.data(), 1);
        hm->Start();
        dlpw->Init();
    });

which is basically
declare thread {
        if (powerhalprop_is_not_set) wait;
        else (powerhal_prop_is_set) init_other_threads;
}.start();

But in logcat
<11>[   21.988418]  [2:           init: 2815] init: Unable to set property 'vendor.powerhal.init' from uid:0 gid:0 pid:2816: SELinux permission check failed
<36>[   21.989189]  [3:    logd.auditd: 3586] type=1107 audit(1654915533.291:146): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.powerhal.init pid=2816 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_powerhal_prop:s0 tclass=property_service permissive=0'

So the powerhal's thread was not being run. This commit fixes seplicy to allow vendor init to set the powerhal init prop. May fix some issues on DT2W and deep sleep
2022-06-11 13:17:55 +09:00
roynatech2544
14e4406a1b universal7885: sepolicy: Drop shell execute rules 2022-05-21 02:29:42 +00:00
roynatech2544
0282f1e3a9
universal7885: Address some denials
Change-Id: I6892bbdecf6780891c0baf5849687632602e52c9
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
2022-05-14 15:04:18 +09:00
roynatech2544
5e69a17ac0
universal7885: Label powerhal props 2022-05-08 18:15:09 +09:00
roynatech2544
043d4db5cf
universal7885: rootdir: Allow tracing
Also address some selinux denials
2022-05-07 13:58:08 +09:00
roynatech2544
cdc2de72fc
a10: Fixup issues with sensor hal
Imported sensor hal source from android 12L, rebranded and make it compile as 32bit
2022-05-04 20:29:17 +09:00