tequilaOS/platform_device_qcom_sepolicy-legacy-um
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "sepolicy: Remove all qssi specific WFD sepolicy change"

Browse source
This commit is contained in:
qctecmdr 2020-08-13 03:40:25 -07:00 committed by Gerrit - the friendly Code Review server
commit 3c94562422
45 changed files with 0 additions and 855 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
generic/vendor/test/property.te vendored
View file

@ -26,5 +26,3 @@
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
vendor_restricted_prop(vendor_sensors_dbg_prop);
#WiFi Display
vendor_internal_prop(vendor_wfd_vendor_debug_prop);

5
generic/vendor/test/property_contexts vendored
View file

@ -26,10 +26,5 @@
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
persist.vendor.debug.sensors. u:object_r:vendor_sensors_dbg_prop:s0
#Wifi Display
persist.vendor.debug.mux. u:object_r:vendor_wfd_vendor_debug_prop:s0
persist.vendor.debug.rtp. u:object_r:vendor_wfd_vendor_debug_prop:s0
persist.vendor.debug.wfd. u:object_r:vendor_wfd_vendor_debug_prop:s0
#CNE IWLAN Logging
persist.vendor.iwlan.logging.logcat u:object_r:vendor_cnd_prop:s0

4
legacy/vendor/common/attributes vendored
View file

@ -42,10 +42,6 @@ attribute hal_perf;
attribute hal_perf_client;
attribute hal_perf_server;
attribute wifidisplayhalservice;
attribute wifidisplayhalservice_client;
attribute wifidisplayhalservice_server;
attribute hal_alarm_qti;
attribute hal_alarm_qti_client;
attribute hal_alarm_qti_server;

3
legacy/vendor/common/file_contexts vendored
View file

@ -308,9 +308,6 @@
/(vendor|system/vendor)/bin/seemp_healthd u:object_r:seemp_health_daemon_exec:s0
/(vendor|system/vendor)/bin/btnvtool u:object_r:btnvtool_exec:s0
/(vendor|system/vendor)/bin/btsnoop u:object_r:btsnoop_exec:s0
/(vendor|system/vendor)/bin/wifidisplayhalservice u:object_r:wifidisplayhalservice_qti_exec:s0
/(vendor|system/vendor)/bin/wfdhdcphalservice u:object_r:wfdhdcphalservice_qti_exec:s0
/(vendor|system/vendor)/bin/wfdvndservice u:object_r:wfdvndservice_exec:s0
/(vendor|system/vendor)/bin/LKCore u:object_r:qti_logkit_exec:s0
/(vendor|system/vendor)/bin/tbaseLoader u:object_r:tbaseLoader_exec:s0
/(vendor|system/vendor)/bin/mcStarter u:object_r:mcStarter_exec:s0

1
legacy/vendor/common/hwservice.te vendored
View file

@ -33,7 +33,6 @@ type hal_dpmqmi_hwservice, hwservice_manager_type;
type hal_imsrtp_hwservice, hwservice_manager_type;
type hal_imscallinfo_hwservice, hwservice_manager_type;
type hal_perf_hwservice, hwservice_manager_type;
type wifidisplayhalservice_hwservice, hwservice_manager_type;
type hal_iop_hwservice, hwservice_manager_type;
type hal_alarm_qti_hwservice, hwservice_manager_type;
type hal_datafactory_hwservice, hwservice_manager_type;

6
legacy/vendor/common/hwservice_contexts vendored
View file

@ -53,9 +53,7 @@ vendor.qti.hardware.btconfigstore::IBTConfigStore u:object_r:hal_btco
com.qualcomm.qti.ant::IAntHci u:object_r:hal_bluetooth_hwservice:s0
vendor.qti.hardware.wipower::IWipower u:object_r:hal_bluetooth_hwservice:s0
vendor.qti.hardware.perf::IPerf u:object_r:hal_perf_hwservice:s0
com.qualcomm.qti.wifidisplayhal::IHDCPSession u:object_r:wifidisplayhalservice_hwservice:s0
vendor.qti.hardware.iop::IIop u:object_r:hal_iop_hwservice:s0
com.qualcomm.qti.wifidisplayhal::IDSManager u:object_r:wifidisplayhalservice_hwservice:s0
vendor.qti.hardware.alarm::IAlarm u:object_r:hal_alarm_qti_hwservice:s0
com.qualcomm.qti.uceservice::IUceService u:object_r:hal_imsrcsd_hwservice:s0
vendor.qti.ims.callinfo::IService u:object_r:hal_imscallinfo_hwservice:s0
@ -95,10 +93,6 @@ vendor.qti.hardware.scve.objecttracker::IObjectTracker u:object_r:hal_s
vendor.qti.hardware.wifi.hostapd::IHostapdVendor u:object_r:hal_wifi_hostapd_hwservice:s0
vendor.qti.hardware.wifi.wifilearner::IWifiStats u:object_r:hal_wifilearner_hwservice:s0
vendor.qti.hardware.fm::IFmHci u:object_r:hal_fm_hwservice:s0
vendor.qti.hardware.wifidisplaysession::IWifiDisplaySession u:object_r:wifidisplayhalservice_hwservice:s0
vendor.qti.hardware.wifidisplaysession::IWifiDisplaySessionVideoTrack u:object_r:wifidisplayhalservice_hwservice:s0
vendor.qti.hardware.wifidisplaysession::IWifiDisplaySessionAudioTrack u:object_r:wifidisplayhalservice_hwservice:s0
vendor.qti.hardware.wifidisplaysession::IWifiDisplaySessionImageTrack u:object_r:wifidisplayhalservice_hwservice:s0
vendor.qti.hardware.bluetooth_audio::IBluetoothAudioProvidersFactory u:object_r:hal_audio_hwservice:s0
vendor.qti.hardware.display.mapper::IQtiMapper u:object_r:hal_graphics_mapper_hwservice:s0
vendor.qti.hardware.cryptfshw::ICryptfsHw u:object_r:hal_keymaster_hwservice:s0

4
legacy/vendor/common/mediacodec.te vendored
View file

@ -36,10 +36,6 @@ allow mediacodec proc_net:file r_file_perms;
allow mediacodec qdsp_device:chr_file r_file_perms;
allow mediacodec xdsp_device:chr_file r_file_perms;
#Allow mediacodec to access service manager wfdnativemm_service
allow mediacodec wfdnativemm_service:service_manager find;
binder_call(mediacodec, wifidisplayhalservice_qti);
#Allow mediacodec to access vendor_media_data_file files
allow mediacodec vendor_media_data_file:dir create_dir_perms;
allow mediacodec vendor_media_data_file:file create_file_perms;

1
legacy/vendor/common/mediaserver.te vendored
View file

@ -48,7 +48,6 @@ binder_call(mediaserver, poweroffhandler);
#This is required for thermal sysfs access
r_dir_file(mediaserver, sysfs_thermal);
binder_call(mediaserver, vendor_wfdservice)
#allow mediaserver to access adsprpc_prop
get_prop(mediaserver, adsprpc_prop)

4
legacy/vendor/common/netd.te vendored
View file

@ -32,10 +32,6 @@ binder_use(netd);
allow netd netd:packet_socket create_socket_perms_no_ioctl;
allow netd vendor_wfdservice:fd use;
#allow netd vendor_wfdservice:tcp_socket rw_socket_perms;
hal_client_domain(netd, wifidisplayhalservice);
#allow netd to use privileged sock ioctls
allowxperm netd self: { unix_stream_socket } ioctl priv_sock_ioctls;

2
legacy/vendor/common/vndservice.te vendored
View file

@ -29,5 +29,3 @@ type vendor_per_mgr_service, vndservice_manager_type;
type qdisplay_service, vndservice_manager_type;
type qseeproxy_service, vndservice_manager_type;
type esepmdaemon_service, vndservice_manager_type;
type wfdnativemm_service, vndservice_manager_type;
type wfdhdcpvndservice_service, vndservice_manager_type;

2
legacy/vendor/common/vndservice_contexts vendored
View file

@ -29,5 +29,3 @@ vendor.qcom.PeripheralManager u:object_r:vendor_per_mgr_service
display.qservice u:object_r:qdisplay_service:s0
com.qualcomm.qti.qseeproxy u:object_r:qseeproxy_service:s0
eSEPowerManagerService u:object_r:esepmdaemon_service:s0
wfd.native.mm.service u:object_r:wfdnativemm_service:s0
wfdhdcpvndservice u:object_r:wfdhdcpvndservice_service:s0

44
legacy/vendor/common/wfdhdcphalservice.te vendored
View file

@ -1,44 +0,0 @@
# Copyright (c) 2019 The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#Define Domain
type wfdhdcphalservice_qti, domain;
type wfdhdcphalservice_qti_exec, exec_type, vendor_file_type, file_type;
hal_server_domain(wfdhdcphalservice_qti, hal_drm)
init_daemon_domain(wfdhdcphalservice_qti)
#Allow to call wfdhdcpvndservice
vndbinder_use(wfdhdcphalservice_qti)
allow wfdhdcphalservice_qti wfdhdcpvndservice_service:service_manager find;
binder_call(wfdhdcphalservice_qti, wfdvndservice);
#Allow access to display config hal
hal_client_domain(wfdhdcphalservice_qti, hal_graphics_composer)
#Allow to use fd from mediacodec and wfd app
allow wfdhdcphalservice_qti { mediacodec system_app }:fd use;

28
legacy/vendor/common/wfdservice.te vendored
View file

@ -1,28 +0,0 @@
# Copyright (c) 2019 The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
hal_client_domain(vendor_wfdservice, wifidisplayhalservice);

57
legacy/vendor/common/wfdvndservice.te vendored
View file

@ -1,57 +0,0 @@
# Copyright (c) 2019 The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#Define Domain
type wfdvndservice, domain;
type wfdvndservice_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(wfdvndservice)
#Allow net for hdcp connection
net_domain(wfdvndservice)
#Allow to use Vendor Binder IPC
vndbinder_use(wfdvndservice)
#Allow to host sink hdcp vnd service
add_service(wfdvndservice, wfdhdcpvndservice_service)
binder_call(wfdvndservice, wfdhdcphalservice_qti);
#Allow access to firmware files for HDCP session
r_dir_file(wfdvndservice, firmware_file)
#Allow for using fds
allow wfdvndservice { mediacodec system_app wfdhdcphalservice_qti}:fd use;
#Allow access to tee/ion device
allow wfdvndservice tee_device:chr_file rw_file_perms;
allow wfdvndservice ion_device:chr_file r_file_perms;
#Allow access to graphics_composer and qdisplay_service
hal_client_domain(wfdvndservice, hal_graphics_composer);
allow wfdvndservice qdisplay_service:service_manager find;

112
legacy/vendor/common/wifidisplayhalservice.te vendored
View file

@ -1,112 +0,0 @@
# Copyright (c) 2017,2019 The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#Define Domain
type wifidisplayhalservice_qti, domain;
type wifidisplayhalservice_qti_exec, exec_type, vendor_file_type, file_type;
#Allow for transition from init domain to wifidisplayhalservice
init_daemon_domain(wifidisplayhalservice_qti)
#Inherit base network permissions from netd
net_domain(wifidisplayhalservice_qti)
#Allow wifidisplayhalservice to use Vendor Binder IPC
vndbinder_use(wifidisplayhalservice)
hal_server_domain_bypass(wifidisplayhalservice_qti,wifidisplayhalservice)
# Allow hwbinder call from hal client to server
binder_call(wifidisplayhalservice_client, wifidisplayhalservice_server)
binder_call(wifidisplayhalservice_server, wifidisplayhalservice_client)
# Add hwservice related rules
hal_attribute_hwservice(wifidisplayhalservice, wifidisplayhalservice_hwservice)
#Direct streaming native service
add_service(wifidisplayhalservice_qti, wfdnativemm_service)
#Allow access to firmware files for HDCP session
r_dir_file(wifidisplayhalservice_qti, firmware_file)
#Allow access to tee/ion device and tcp socket for HDCP sessions
allow wifidisplayhalservice_qti tee_device:chr_file rw_file_perms;
#Allow access to PCM sound card
allow wifidisplayhalservice_qti audio_device:chr_file rw_file_perms;
allow wifidisplayhalservice_qti audio_device:dir r_dir_perms;
#Allow access to /dev/video/* devices for encoding/decoding
allow wifidisplayhalservice_qti video_device:chr_file rw_file_perms;
#Allow binder call to mediacodec from wifidisplayhalservice
binder_call(wifidisplayhalservice_qti, mediacodec);
#Allow udp socket ioctl
allow wifidisplayhalservice_qti self:udp_socket create_socket_perms;
# ioctlcmd=8bff,8912
allowxperm wifidisplayhalservice_qti self:udp_socket ioctl priv_sock_ioctls;
#Allow access to proc/net/arp
allow wifidisplayhalservice_qti proc_net:file r_file_perms;
# Add the rule for wfd to access /proc/asound/pcm file
r_dir_file(wifidisplayhalservice_qti, proc_asound)
# Add the rule for wfd to access /proc/asound/card0/state file
r_dir_file(wifidisplayhalservice_qti, proc_audiod)
#Allow hal graphics allocator permissions
hal_client_domain(wifidisplayhalservice_qti, hal_graphics_allocator);
#Allow hal graphics mapper permissions
hal_client_domain(wifidisplayhalservice_qti, hal_graphics_composer);
#Allow wifidisplayhalservice_qti to query interface name of network (p2p etc.)
allow wifidisplayhalservice_qti self:netlink_generic_socket create_socket_perms_no_ioctl;
#Allow communication with init over property server
unix_socket_connect(wifidisplayhalservice_qti, property, init);
#Allow ion device access
allow wifidisplayhalservice_qti ion_device:chr_file r_file_perms;
userdebug_or_eng(`
#Allow for property access
get_prop(wifidisplayhalservice_qti,wfd_vendor_debug_prop)
#Allow to dump in /data/vendor/media/
allow wifidisplayhalservice_qti vendor_media_data_file:dir w_dir_perms;
allow wifidisplayhalservice_qti vendor_media_data_file:file create_file_perms;
#Allow to access logmask file in /data/vendor
allow wifidisplayhalservice_qti vendor_data_file:file r_file_perms;
')
#Allow source to access video SKU and UBWC property(for encoder config)
get_prop(wifidisplayhalservice_qti, vendor_video_prop)
#Allow access to uhid driver for HID event injection
allow wifidisplayhalservice_qti uhid_device:chr_file rw_file_perms;

30
legacy/vendor/sdm710/wfdservice.te vendored
View file

@ -1,30 +0,0 @@
# Copyright (c) 2017, The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#Allow access to read property file
get_prop(vendor_wfdservice,vendor_media_sdm710_version_prop)

2
legacy/vendor/test/property.te vendored
View file

@ -26,5 +26,3 @@
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
type sensors_dbg_prop, property_type;
#WiFi Display
type wfd_vendor_debug_prop, property_type;

4
legacy/vendor/test/property_contexts vendored
View file

@ -26,7 +26,3 @@
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
persist.vendor.debug.sensors. u:object_r:sensors_dbg_prop:s0
#Wifi Display
persist.vendor.debug.mux. u:object_r:wfd_vendor_debug_prop:s0
persist.vendor.debug.rtp. u:object_r:wfd_vendor_debug_prop:s0
persist.vendor.debug.wfd. u:object_r:wfd_vendor_debug_prop:s0

1
qva/private/audioserver.te
View file

@ -25,7 +25,6 @@
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
binder_call(audioserver,vendor_wfdservice);
#allow access to ALSA MMAP FDs for AAudio API
allow audioserver audio_service:service_manager find;

1
qva/private/file_contexts
View file

@ -48,7 +48,6 @@
/(system_ext|system/system_ext)/bin/dun-server u:object_r:vendor_dun-server_exec:s0
/(system_ext|system/system_ext)/bin/bt_logger u:object_r:vendor_bt_logger_exec:s0
/(system_ext|system/system_ext)/bin/perfservice u:object_r:vendor_perfservice_exec:s0
/(system|system_ext|system/system_ext)/bin/wfdservice u:object_r:vendor_wfdservice_exec:s0
/(system|system_ext|system/system_ext)/bin/sigma_miracasthalservice u:object_r:vendor_sigmahal_qti_exec:s0
/(system_ext|system/system_ext)/bin/qccsyshalservice u:object_r:vendor_qccsyshal_qti_exec:s0
/(system_ext|system/system_ext)/bin/mmi u:object_r:vendor_mmi_sys_exec:s0

3
qva/private/property.te
View file

@ -32,9 +32,6 @@ type vendor_mm_osal_prop, property_type, extended_core_property_type;
type vendor_mm_video_prop, property_type, extended_core_property_type;
#WiFi Display
type vendor_wfd_service_prop, property_type, extended_core_property_type;
type vendor_wfd_sys_debug_prop, property_type, extended_core_property_type;
# WIGIG
type vendor_wigig_core_prop, property_type, extended_core_property_type;
type vendor_fst_prop, property_type, extended_core_property_type;

9
qva/private/property_contexts
View file

@ -57,15 +57,6 @@ vendor.encoder.video.profile u:object_r:vendor_mm_video_prop:s0
vendor.sys.media.target.version u:object_r:vendor_sys_video_prop:s0
vendor.sys.video.disable.ubwc u:object_r:vendor_sys_video_prop:s0
#Wifi Display
vendor.wfdservice u:object_r:vendor_wfd_service_prop:s0
persist.vendor.debug.wfd.wfdsvc u:object_r:vendor_wfd_sys_debug_prop:s0
persist.vendor.debug.wfdcdbg u:object_r:vendor_wfd_sys_debug_prop:s0
persist.vendor.debug.wfdcdbgv u:object_r:vendor_wfd_sys_debug_prop:s0
persist.vendor.sys.debug.mux. u:object_r:vendor_wfd_sys_debug_prop:s0
persist.vendor.sys.debug.rtp. u:object_r:vendor_wfd_sys_debug_prop:s0
persist.vendor.sys.debug.wfd. u:object_r:vendor_wfd_sys_debug_prop:s0
# WIGIG
persist.vendor.wigig. u:object_r:vendor_wigig_core_prop:s0
persist.vendor.fst. u:object_r:vendor_fst_prop:s0

2
qva/private/seapp_contexts
View file

@ -28,8 +28,6 @@
#Add new domain for qti value added Location apps
user=_app seinfo=platform name=com.qualcomm.location.XT isPrivApp=true domain=vendor_location_app type=app_data_file
user=_app seinfo=platform name=com.qualcomm.location isPrivApp=true domain=vendor_location_app type=app_data_file
user=_app seinfo=platform name=com.qualcomm.wfd.service:wfd_service domain=vendor_wfd_app type=app_data_file levelfrom=all
user=_app seinfo=platform name=com.qualcomm.wfd.client domain=vendor_wfd_app type=app_data_file levelfrom=all
#Add new domain for QCC
user=system seinfo=platform name=com.qualcomm.qti.qdma isPrivApp=true domain=vendor_qcc_app type=system_app_data_file

1
qva/private/service.te
View file

@ -31,7 +31,6 @@ type vendor_MinkBinderSvc, app_api_service, service_manager_type;
type vendor_perf_service, app_api_service, service_manager_type;
type vendor_izat_service, app_api_service, system_api_service, service_manager_type;
type vendor_color_service, service_manager_type;
type vendor_wfdservice_service, service_manager_type;
type vendor_wigigp2p_service, app_api_service, system_server_service, service_manager_type;
type vendor_wigig_service, app_api_service, system_server_service, service_manager_type;
type vendor_vps_service, app_api_service, service_manager_type;

1
qva/private/service_contexts
View file

@ -35,7 +35,6 @@ com.qualcomm.location.izat.IzatService u:object_r:vendor_izat_service:s0
qti.security.seempspa u:object_r:vendor_seemp_service:s0
vendor.audio.vrservice u:object_r:audioserver_service:s0
com.qti.snapdragon.sdk.display.IColorService u:object_r:vendor_color_service:s0
wfdservice u:object_r:vendor_wfdservice_service:s0
wigigp2p u:object_r:vendor_wigigp2p_service:s0
wigig u:object_r:vendor_wigig_service:s0
display.smomoservice u:object_r:surfaceflinger_service:s0

6
qva/private/sigma-hal.te
View file

@ -37,12 +37,6 @@ init_daemon_domain(vendor_sigmahal_qti);
#Allow the interaction with servicemanager
binder_use(vendor_sigmahal_qti)
#Allow the interaction with wfdservice
binder_call(vendor_sigmahal_qti,vendor_wfdservice);
#Allow access to vendor_wfdservice_service,audioserver_service,surfaceflinger_service to interact with vendor_sigmahal_qti
allow vendor_sigmahal_qti {vendor_wfdservice_service audioserver_service surfaceflinger_service}:service_manager find;
#Allow vendor_sigmahal_qti to interact with audio_server
binder_call(vendor_sigmahal_qti,audioserver);

1
qva/private/surfaceflinger.te
View file

@ -25,4 +25,3 @@
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
binder_call(surfaceflinger, vendor_wfdservice);

5
qva/private/system_server.te
View file

@ -50,11 +50,6 @@ allow system_server vendor_vps_service:service_manager find;
binder_call(system_server,vendor_qvrd);
#Allow for access to WFD specific debug properties
binder_call(system_server, vendor_wfdservice);
userdebug_or_eng(`
get_prop(system_server, vendor_wfd_sys_debug_prop)
')
# Allow system server to access fst,wigig system properties
set_prop(system_server, vendor_wigig_core_prop)
set_prop(system_server, vendor_fst_prop)

59
qva/private/wfd_app.te
View file

@ -1,59 +0,0 @@
# Copyright (c) 2020 The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
typeattribute vendor_wfd_app coredomain;
app_domain(vendor_wfd_app)
net_domain(vendor_wfd_app)
set_prop(vendor_wfd_app, vendor_wfd_service_prop);
userdebug_or_eng(`
get_prop(vendor_wfd_app, vendor_wfd_sys_debug_prop);
#Access to MM-OSAL debug prop for parser debugging on WFD sink
get_prop(vendor_wfd_app, vendor_mm_osal_prop);
#Allow access to logmask file in /data/
allow vendor_wfd_app system_data_file:file r_file_perms;
')
binder_call(vendor_wfd_app, vendor_wfdservice)
# allow access to read video SKU property for WFD sink
get_prop(vendor_wfd_app, vendor_sys_video_prop)
allow vendor_wfd_app {
vendor_wfdservice_service
audioserver_service
mediaserver_service
mediadrmserver_service
app_api_service
vendor_perf_service
mediametrics_service
}:service_manager find;
# Access to /data/media for debug dump
allow vendor_wfd_app media_rw_data_file:dir create_dir_perms;
allow vendor_wfd_app media_rw_data_file:file create_file_perms;

74
qva/private/wfdservice.te
View file

@ -1,74 +0,0 @@
# Copyright (c) 2017, 2019-2020 The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
typeattribute vendor_wfdservice coredomain;
type vendor_wfdservice_exec, system_file_type , exec_type, file_type;
#Allow for transition from init domain to vendor_wfdservice
init_daemon_domain(vendor_wfdservice)
#Inherit base socket permissions from netd domain
net_domain(vendor_wfdservice)
#Allow vendor_wfdservice to use Binder IPC
binder_use(vendor_wfdservice)
#Allow for interaction with Display HAL
binder_call(vendor_wfdservice, surfaceflinger)
#Allow apps to interact with vendor_wfdservice
binder_call(vendor_wfdservice, vendor_wfd_app)
#Allow access to Audio Flinger APIs
binder_call(vendor_wfdservice, audioserver)
#Allow access to Permission Controller in System Server
binder_call(vendor_wfdservice, system_server)
#Allow vendor_wfdservice to be registered with service manager
add_service(vendor_wfdservice, vendor_wfdservice_service)
#Allow access to read mmosal_logmask file in /data partition
userdebug_or_eng(`
allow vendor_wfdservice system_data_file:file r_file_perms;
')
# Allow access to mediaserver, surfaceflinger and permissionmanager for interaction of vendor_wfdservice
allow vendor_wfdservice {audioserver_service permission_service surfaceflinger_service}: service_manager find;
hal_client_domain(vendor_wfdservice, hal_graphics_allocator);
hal_client_domain(vendor_wfdservice, hal_graphics_composer);
#Allow ion device access
allow vendor_wfdservice ion_device:chr_file r_file_perms;
#Allow source to access video UBWC property(for display config)
get_prop(vendor_wfdservice, vendor_sys_video_prop)
#Allow the interaction with vendor_sigmahal_qti
binder_call(vendor_wfdservice,vendor_sigmahal_qti);

28
qva/public/wfd_app.te
View file

@ -1,28 +0,0 @@
# Copyright (c) 2020, The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
type vendor_wfd_app, domain;

28
qva/public/wfdservice.te
View file

@ -1,28 +0,0 @@
# Copyright (c) 2017, 2019 The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
type vendor_wfdservice, domain;

4
qva/vendor/common/attributes vendored
View file

@ -61,10 +61,6 @@ attribute vendor_hal_seccam;
attribute vendor_hal_seccam_client;
attribute vendor_hal_seccam_server;
attribute vendor_wifidisplayhalservice;
attribute vendor_wifidisplayhalservice_client;
attribute vendor_wifidisplayhalservice_server;
attribute vendor_hal_vpp;
attribute vendor_hal_vpp_client;
attribute vendor_hal_vpp_server;

3
qva/vendor/common/file_contexts vendored
View file

@ -99,9 +99,6 @@
/(vendor|system/vendor)/bin/hostapd_cli u:object_r:vendor_hostapd_exec:s0
/(vendor|system/vendor)/bin/qcom-system-daemon u:object_r:vendor_qcomsysd_exec:s0
/(vendor|system/vendor)/bin/vppservice u:object_r:vendor_vppservice_exec:s0
/(vendor|system/vendor)/bin/wifidisplayhalservice u:object_r:vendor_wifidisplayhalservice_qti_exec:s0
/(vendor|system/vendor)/bin/wfdhdcphalservice u:object_r:vendor_wfdhdcphalservice_qti_exec:s0
/(vendor|system/vendor)/bin/wfdvndservice u:object_r:vendor_wfdvndservice_exec:s0
/(vendor|system/vendor)/bin/nqnfcinfo u:object_r:vendor_nqnfcinfo_exec:s0
/(vendor|system/vendor)/bin/ssgqmigd u:object_r:vendor_ssgqmigd_exec:s0
/(vendor|system/vendor)/bin/ssgtzd u:object_r:vendor_ssgtzd_exec:s0

1
qva/vendor/common/hwservice.te vendored
View file

@ -28,7 +28,6 @@
type vendor_hal_dpmqmi_hwservice, hwservice_manager_type, protected_hwservice;
type vendor_hal_iop_hwservice, hwservice_manager_type, protected_hwservice;
type vendor_hal_pasrmanager_hwservice, hwservice_manager_type, protected_hwservice;
type vendor_wifidisplayhalservice_hwservice , hwservice_manager_type, protected_hwservice;
type vendor_hal_alarm_qti_hwservice , hwservice_manager_type, protected_hwservice;
type vendor_hal_vpp_hwservice , hwservice_manager_type, protected_hwservice;
type vendor_hal_wigig_hwservice , hwservice_manager_type, protected_hwservice;

6
qva/vendor/common/hwservice_contexts vendored
View file

@ -25,9 +25,7 @@
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
com.qualcomm.qti.wifidisplayhal::IHDCPSession u:object_r:vendor_wifidisplayhalservice_hwservice:s0
vendor.qti.hardware.iop::IIop u:object_r:vendor_hal_iop_hwservice:s0
com.qualcomm.qti.wifidisplayhal::IDSManager u:object_r:vendor_wifidisplayhalservice_hwservice:s0
vendor.qti.hardware.alarm::IAlarm u:object_r:vendor_hal_alarm_qti_hwservice:s0
vendor.qti.hardware.vpp::IHidlVppService u:object_r:vendor_hal_vpp_hwservice:s0
vendor.qti.hardware.vpp::IVppService u:object_r:vendor_hal_vpp_hwservice:s0
@ -61,10 +59,6 @@ vendor.qti.hardware.wifi.supplicant::ISupplicantVendor u:object_r:hal_wifi
vendor.qti.hardware.factory::IFactory u:object_r:vendor_hal_factory_qti_hwservice:s0
vendor.qti.hardware.cvp::ICvp u:object_r:vendor_hal_cvp_hwservice:s0
vendor.qti.hardware.bluetooth_sar::IBluetoothSar u:object_r:hal_bluetooth_hwservice:s0
vendor.qti.hardware.wifidisplaysession::IWifiDisplaySession u:object_r:vendor_wifidisplayhalservice_hwservice:s0
vendor.qti.hardware.wifidisplaysession::IWifiDisplaySessionVideoTrack u:object_r:vendor_wifidisplayhalservice_hwservice:s0
vendor.qti.hardware.wifidisplaysession::IWifiDisplaySessionAudioTrack u:object_r:vendor_wifidisplayhalservice_hwservice:s0
vendor.qti.hardware.wifidisplaysession::IWifiDisplaySessionImageTrack u:object_r:vendor_wifidisplayhalservice_hwservice:s0
vendor.qti.hardware.wifi.hostapd::IHostapdVendor u:object_r:hal_wifi_hostapd_hwservice:s0
vendor.qti.hardware.bluetooth_audio::IBluetoothAudioProvidersFactory u:object_r:hal_audio_hwservice:s0
vendor.qti.hardware.wifi.wifilearner::IWifiStats u:object_r:vendor_hal_wifilearner_hwservice:s0

4
qva/vendor/common/mediacodec.te vendored
View file

@ -25,11 +25,7 @@
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#WFD
#Allow mediacodec to access service manager wfdnativemm_service
allow mediacodec vendor_wfdnativemm_service:service_manager find;
allow mediacodec audio_device:chr_file rw_file_perms;
binder_call(mediacodec, vendor_wifidisplayhalservice_qti);
get_prop(mediacodec, vendor_video_prop)

2
qva/vendor/common/vndservice.te vendored
View file

@ -26,5 +26,3 @@
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
type vendor_esepmdaemon_service, vndservice_manager_type;
type vendor_wfdnativemm_service, vndservice_manager_type;
type vendor_wfdhdcpvndservice_service, vndservice_manager_type;

3
qva/vendor/common/vndservice_contexts vendored
View file

@ -25,6 +25,3 @@
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#WFD
wfd.native.mm.service u:object_r:vendor_wfdnativemm_service:s0
wfdhdcpvndservice u:object_r:vendor_wfdhdcpvndservice_service:s0

45
qva/vendor/common/wfdhdcphalservice.te vendored
View file

@ -1,45 +0,0 @@
# Copyright (c) 2019-2020 The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#Define Domain
type vendor_wfdhdcphalservice_qti, domain;
type vendor_wfdhdcphalservice_qti_exec, exec_type, vendor_file_type, file_type;
hal_server_domain(vendor_wfdhdcphalservice_qti, hal_drm)
init_daemon_domain(vendor_wfdhdcphalservice_qti)
#Allow to call wfdhdcpvndservice
vndbinder_use(vendor_wfdhdcphalservice_qti)
allow vendor_wfdhdcphalservice_qti vendor_wfdhdcpvndservice_service:service_manager find;
binder_call(vendor_wfdhdcphalservice_qti, vendor_wfdvndservice);
#Allow access to display config hal
hal_client_domain(vendor_wfdhdcphalservice_qti, hal_graphics_composer)
#Allow to use fd from mediacodec and wfd app
allow vendor_wfdhdcphalservice_qti { mediacodec vendor_wfd_app }:fd use;

28
qva/vendor/common/wfdservice.te vendored
View file

@ -1,28 +0,0 @@
# Copyright (c) 2019 The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
hal_client_domain(vendor_wfdservice, vendor_wifidisplayhalservice);

57
qva/vendor/common/wfdvndservice.te vendored
View file

@ -1,57 +0,0 @@
# Copyright (c) 2019-2020 The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#Define Domain
type vendor_wfdvndservice, domain;
type vendor_wfdvndservice_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(vendor_wfdvndservice)
#Allow net for hdcp connection
net_domain(vendor_wfdvndservice)
#Allow to use Vendor Binder IPC
vndbinder_use(vendor_wfdvndservice)
#Allow to host sink hdcp vnd service
add_service(vendor_wfdvndservice, vendor_wfdhdcpvndservice_service)
binder_call(vendor_wfdvndservice, vendor_wfdhdcphalservice_qti);
#Allow access to firmware files for HDCP session
r_dir_file(vendor_wfdvndservice, firmware_file)
#Allow for using fds
allow vendor_wfdvndservice { mediacodec vendor_wfd_app vendor_wfdhdcphalservice_qti}:fd use;
#Allow access to tee/ion device
allow vendor_wfdvndservice tee_device:chr_file rw_file_perms;
allow vendor_wfdvndservice ion_device:chr_file r_file_perms;
#Allow access to graphics_composer and qdisplay_service
hal_client_domain(vendor_wfdvndservice, hal_graphics_composer);
allow vendor_wfdvndservice vendor_qdisplay_service:service_manager find;

112
qva/vendor/common/wifidisplayhalservice.te vendored
View file

@ -1,112 +0,0 @@
# Copyright (c) 2017,2019 The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#Define Domain
type vendor_wifidisplayhalservice_qti, domain;
type vendor_wifidisplayhalservice_qti_exec, exec_type, vendor_file_type, file_type;
#Allow for transition from init domain to wifidisplayhalservice
init_daemon_domain(vendor_wifidisplayhalservice_qti)
#Inherit base network permissions from netd
net_domain(vendor_wifidisplayhalservice_qti)
#Allow wifidisplayhalservice to use Vendor Binder IPC
vndbinder_use(vendor_wifidisplayhalservice)
hal_server_domain_bypass(vendor_wifidisplayhalservice_qti,vendor_wifidisplayhalservice)
# Allow hwbinder call from hal client to server
binder_call(vendor_wifidisplayhalservice_client, vendor_wifidisplayhalservice_server)
binder_call(vendor_wifidisplayhalservice_server, vendor_wifidisplayhalservice_client)
# Add hwservice related rules
hal_attribute_hwservice(vendor_wifidisplayhalservice, vendor_wifidisplayhalservice_hwservice)
#Direct streaming native service
add_service(vendor_wifidisplayhalservice_qti, vendor_wfdnativemm_service)
#Allow access to firmware files for HDCP session
r_dir_file(vendor_wifidisplayhalservice_qti, firmware_file)
#Allow access to tee/ion device and tcp socket for HDCP sessions
allow vendor_wifidisplayhalservice_qti tee_device:chr_file rw_file_perms;
#Allow access to PCM sound card
allow vendor_wifidisplayhalservice_qti audio_device:chr_file rw_file_perms;
allow vendor_wifidisplayhalservice_qti audio_device:dir r_dir_perms;
#Allow access to /dev/video/* devices for encoding/decoding
allow vendor_wifidisplayhalservice_qti video_device:chr_file rw_file_perms;
#Allow binder call to mediacodec from wifidisplayhalservice
binder_call(vendor_wifidisplayhalservice_qti, mediacodec);
#Allow udp socket ioctl
allow vendor_wifidisplayhalservice_qti self:udp_socket create_socket_perms;
# ioctlcmd=8bff,8912
allowxperm vendor_wifidisplayhalservice_qti self:udp_socket ioctl priv_sock_ioctls;
#Allow access to proc/net/arp
allow vendor_wifidisplayhalservice_qti proc_net:file r_file_perms;
# Add the rule for wfd to access /proc/asound/pcm file
r_dir_file(vendor_wifidisplayhalservice_qti, proc_asound)
# Add the rule for wfd to access /proc/asound/card0/state file
r_dir_file(vendor_wifidisplayhalservice_qti, vendor_proc_audiod)
#Allow hal graphics allocator permissions
hal_client_domain(vendor_wifidisplayhalservice_qti, hal_graphics_allocator);
#Allow hal graphics mapper permissions
hal_client_domain(vendor_wifidisplayhalservice_qti, hal_graphics_composer);
#Allow vendor_wifidisplayhalservice_qti to query interface name of network (p2p etc.)
allow vendor_wifidisplayhalservice_qti self:netlink_generic_socket create_socket_perms_no_ioctl;
#Allow communication with init over property server
unix_socket_connect(vendor_wifidisplayhalservice_qti, property, init);
#Allow ion device access
allow vendor_wifidisplayhalservice_qti ion_device:chr_file r_file_perms;
userdebug_or_eng(`
#Allow for property access
get_prop(vendor_wifidisplayhalservice_qti,vendor_wfd_vendor_debug_prop)
#Allow to dump in /data/vendor/media/
allow vendor_wifidisplayhalservice_qti vendor_media_data_file:dir w_dir_perms;
allow vendor_wifidisplayhalservice_qti vendor_media_data_file:file create_file_perms;
#Allow to access logmask file in /data/vendor
allow vendor_wifidisplayhalservice_qti vendor_data_file:file r_file_perms;
')
#Allow source to access video SKU and UBWC property(for encoder config)
get_prop(vendor_wifidisplayhalservice_qti, vendor_video_prop)
#Allow access to uhid driver for HID event injection
allow vendor_wifidisplayhalservice_qti uhid_device:chr_file rw_file_perms;

30
qva/vendor/msmsteppe/wfdservice.te vendored
View file

@ -1,30 +0,0 @@
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#Allow access to read property file
get_prop(vendor_wfdservice,vendor_media_sdmmagpie_version_prop)

30
qva/vendor/trinket/wfdservice.te vendored
View file

@ -1,30 +0,0 @@
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#Allow access to read property file
get_prop(vendor_wfdservice,vendor_media_trinket_version_prop)