bunnypad/android_device_samsung_a20
Watch
1
0
Fork
You've already forked android_device_samsung_a20
 0
mirror of https://github.com/chararomandroid/android_device_samsung_a20 synced 2026-08-22 04:05:31 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
929 commits 3 branches 0 tags 43 MiB
Commit graph android_device_samsung_a20/universal7885-common/sepolicy
Author SHA1 Message Date
roynatech2544
facb92a88a universal7885: sepolicy: Write rules for power stats HAL 
* Also address other denials happening on permissive mode
 2022-08-28 08:26:30 +09:00
roynatech2544
0ab8aa74bf universal7885: Inital commit of powerstats impl 
Most code copied from Google's raven's powerstats source and adapted to ours
 2022-08-27 06:45:40 +00:00
roynatech2544
7c26e3461b universal7885: Address some avc denials 2022-08-26 14:10:18 +00:00
roynatech2544
39104ff516 universal7885: sepolicy: Drop file type sysfs_gpu 
* Now declared on src
 2022-08-16 17:34:29 +02:00
roynatech2544
841efbe2b9 universal7885: sepolicy: Rename wrong filename of genfscon 2022-08-16 22:49:21 +09:00
roynatech2544
cb6cd3067d universal7885: Adopt to changes on R10 
* The /proc/kmsg buffer is empty by default
 2022-06-17 13:58:33 +00:00
roynatech2544
6feb600625
 		universal7885: Allow vendor_init to set powerhal init prop 
The Pixel libperfmgr has following code :
std::thread initThread([&]() {
        ::android::base::WaitForProperty(kPowerHalInitProp.data(), 1);
        hm->Start();
        dlpw->Init();
    });

which is basically
declare thread {
        if (powerhalprop_is_not_set) wait;
        else (powerhal_prop_is_set) init_other_threads;
}.start();

But in logcat
<11>[   21.988418]  [2:           init: 2815] init: Unable to set property 'vendor.powerhal.init' from uid:0 gid:0 pid:2816: SELinux permission check failed
<36>[   21.989189]  [3:    logd.auditd: 3586] type=1107 audit(1654915533.291:146): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.powerhal.init pid=2816 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_powerhal_prop:s0 tclass=property_service permissive=0'

So the powerhal's thread was not being run. This commit fixes seplicy to allow vendor init to set the powerhal init prop. May fix some issues on DT2W and deep sleep
 2022-06-11 13:17:55 +09:00
roynatech2544
14e4406a1b universal7885: sepolicy: Drop shell execute rules 2022-05-21 02:29:42 +00:00
roynatech2544
0282f1e3a9
 		universal7885: Address some denials 
Change-Id: I6892bbdecf6780891c0baf5849687632602e52c9
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-05-14 15:04:18 +09:00
roynatech2544
5e69a17ac0
 		universal7885: Label powerhal props 2022-05-08 18:15:09 +09:00
roynatech2544
043d4db5cf
 		universal7885: rootdir: Allow tracing 
Also address some selinux denials
 2022-05-07 13:58:08 +09:00
roynatech2544
cdc2de72fc
 		a10: Fixup issues with sensor hal 
Imported sensor hal source from android 12L, rebranded and make it compile as 32bit
 2022-05-04 20:29:17 +09:00
Tim Zimmermann
671bd6f797
 		universal7885: Use omr as /metadata 
Change-Id: If93ec5ea8ce8770e23d2ba622fc8ae4e66ecfbbf
 2022-05-04 20:29:10 +09:00
roynatech2544
1a96e0b036
 		universal7885: Address various selinux denials 
Also fix some mistakes
 2022-04-30 15:14:15 +09:00
roynatech2544
f717debf14
 		universal7885: Add missing new line chars 2022-04-30 15:10:37 +09:00
roynatech2544
7ab4e966aa
 		universal7885: sepolicy: Continue moving to /system 2022-04-29 22:24:09 +09:00
roynatech2544
657050b9b3
 		universal7885: sepolicy: Move some sysfs genfscons 
* To public so private rules can access it too
* Also, remove rebundant genfscon
* Fix neverallows due to previous commit
 2022-04-29 22:24:08 +09:00
roynatech2544
7150c7f690
 		universa7885: sepolicy: Remove derp sepolicy 2022-04-29 22:24:08 +09:00
roynatech2544
af754b5f92
 		universal7885: parts: hidl: Move to /system 
* Sepolicy issues, need to be in /system to write data to files. While we're on it, move fm radio hal too
 2022-04-29 22:23:34 +09:00
roynatech2544
4a8c870b6b universal7885: parts: swap: Round down 
The free space on /data
Also fix some issues with it
 2022-04-20 12:58:55 +09:00
roynatech2544
f5d3e25c02 universal7885: parts: Implement swap on /data ctrl 2022-04-19 11:51:24 +09:00
roynatech2544
723dfbec38
 		universal7885: debug_daemon: Rename to EKLogger 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-04-14 00:20:05 +09:00
roynatech2544
7bd40b3a4e universal7885: interfaces: Move to /vendor/bin 
* Is not Android core hal, so moving it from /vendor/bin/hw
 2022-04-12 13:06:57 +09:00
roynatech2544
7156ddca8f universal7885: parts: hidl: Make some changes 
* Drop useless selinux and gpu
* Instead put display configs (DT2W, Glove mode)

Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-04-12 13:06:28 +09:00
Jan Altensen
c604e3fb9f
 		universal7885: hidl: Uprev usb HAl to 1.3 
* From LineageOS hardware/samsung
 2022-04-03 03:19:52 +09:00
roynaetch2544
b75cc0ced3
 		universal7885: Address some denials 
* app_domain: Allow untrusted apps to get vendor.camera props such as vendor.camera.skip_unconfigure.packagelist
* debug_daemon: Allow more perms to properly execute logcat, sepolicy neverallow passes still
* Move vendor_camera_prop to vendor_public_prop, to resolve neverallow
 2022-04-02 15:20:24 +09:00
Soo-Hwan Na
06b0274c44
 		universal7885: sepolicy: Allow logger to execute sh 2022-03-31 17:46:00 +09:00
Soo-Hwan Na
fd54476fc1
 		universal7885: sepolicy: Address more denials 
* Allow power hal to connect to init's unix socket
 2022-03-29 20:29:40 +09:00
roynatech2544
c9244bbf69
 		universal7885: sepolicy: Allow libperfmgr to set vendor.power prop 
03-29 12:27:04.015  3630  3630 W auditd  : type=1327 audit(0.0:673): proctitle=/vendor/bin/hw/android.hardware.power-service.samsung-libperfmgr
03-29 12:27:04.015  3630  3630 W auditd  : type=1320 audit(0.0:673):
03-29 12:27:04.015  3779  3779 W NodeLooperThrea: type=1400 audit(0.0:674): avc: denied { write } for name=property_service dev=tmpfs ino=2814 scontext=u:r:hal_power_default:s0 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0
03-29 12:27:04.017  3779  5369 W libc    : Unable to set property vendor.powerhal.rendering to EXPENSIVE_RENDERING: connection failed; errno=13 (Permission denied)
03-29 12:27:04.017  3779  5369 W libperfmgr: Failed to set property to : vendor.powerhal.rendering with value: EXPENSIVE_RENDERING

Change-Id: I948bbfd80cc5efd0de246be5181b01027d2376f5
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-29 12:31:26 +09:00
roynatech2544
e112b2fb59
 		universal7885: debug_daemon: Move to /system 
* Vendor processes can no longer execute system processes...
 2022-03-27 20:45:25 +09:00
Chatur27
112cc401c5
 		universal7885: Address ROM-specific aux cam prop 2022-03-22 19:05:32 +09:00
roynatech2544
9443bdc315
 		universal7885: FMRadio: Futher improve code 
* Using enum classes for various statuses for good readability
* Implement favorite channel saving which was missing
* Use Kotlin coroutines again for refreshing channel list button, for faster UI response
* Added javadoc for better functions description
* Also, code native audio routing system on jni (fm_route.cpp)

Change-Id: I993c88fdb580248d8a55efd8e9b6fed0e36d9b24
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:05:31 +09:00
Chenyang Zhong
130e2d9b57
 		universal7885: sepolicy: Address init denial 
Change-Id: Id0d0c88bbedde6b6586e3a6f04704457d910d8a0
 2022-03-22 19:05:29 +09:00
roynatech2544
02eded67c8
 		universal7885: sepolicy: Label FM Radio HAL 2022-03-22 19:05:28 +09:00
roynatech2544
45e292f408
 		universal7885: camera.provider: Label and build 
* Except for a10 which has only 1 back cam

Change-Id: Ibf6f07ea36c16880bf760bf66f5454485889c792
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:05:26 +09:00
roynatech2544
4be8e028a2
 		universal7885: sepolicy: rework for unify 2022-03-22 19:04:58 +09:00
roynatech2544
7348a1bea4
 		universal7885: stop covering vendor.camera.aux props 
* It is already covered on ROM-specific sepolicy, therefore causing BSOD on some roms

Change-Id: I18d2592d8150a63f989c2b96cdb48a21ff11bbab
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:04:25 +09:00
roynatech2544
c8b0cf2f9f
 		[SQUASH] Revert "universal7885: import Pixel thermal HAL" 
This reverts commit cb95ff03729f9721c1a2af56e349a880c416ea59.

Revert "universal7885: sepolicy: Add another rule for thermal hal"

This reverts commit e695df796cf6b39e88652b2829bb18fc797ac0c8.

Revert "universal7885: switch to pixel thermal hal"

This reverts commit b8f413737399e34405322865d1efb391648124d7.
 2022-03-22 19:04:25 +09:00
Soo-Hwan Na
c98184931a
 		universal7885: sepolicy: address sensor denials on A40 
* Now covering /sys/devices/virtual/input/input[0 to 12]
* Hope thats enough
 2022-03-22 19:04:24 +09:00
roynatech2544
75cd9e0a4c
 		universal7885: allow init to mount sec_efs to /factory 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:03:20 +09:00
roynatech2544
c254008d6b
 		universal7885: set factory context 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:03:20 +09:00
roynatech2544
0119118b2b
 		universal7885: cleanup unused contexts 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:03:20 +09:00
roynatech2544
24cc2cdcae
 		universal7885: fix drm widevine L3 
* make directory for sec_efs partition
* Address selinux denials while using it
* HACK: Since oemcrypto looks for /factory/wv.keys, mount sec_efs partition on /factory instead of /efs

Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:03:20 +09:00
roynatech2544
53b426b522
 		universal7885: work on sepolicy 
* Allow system app to ioctl to FM Radio device
* import some missing samsung vendor bins

Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:03:19 +09:00
Soo-Hwan Na
183f67303e
 		universal7885: sepolicy: remove unused context 
* /dev/block/loop(0-99) is covered by system/sepolicy already
 2022-03-22 19:03:19 +09:00
Soo-Hwan Na
ce1a1adc1e
 		universal7885: resolve drm widevine denials 
* allow drm widevine to call ioctl() to tz_user_device
 2022-03-22 19:03:19 +09:00
roynatech2544
b298ccb96f
 		universal7885: address logcat exec denials 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:03:18 +09:00
roynatech2544
f9eb06e899
 		universal7885: fixup sepolicy denials 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:02:52 +09:00
roynatech2544
667610e1fb
 		universal7885: fixup sepolicy neverallows 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:02:51 +09:00
roynatech2544
8fcc87eaf2
 		universal7885: add needed sepolicy for it 
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
 2022-03-22 19:02:51 +09:00