Modify the path in sysfs rule for msmnile.
Add the corresponding net sysfs rule for sdm710.
Change-Id: Ibd299806e4a0edf91ff071774064e19a2135bbbd
CRs-Fixed: 2473945
This patch adds lazyhal property to bluetooth_prop
and allows bluetooth application to access the property.
Change-Id: I1803488eaced69116ba07f219f7dc22b7ee1d1ca
1. Define domain for capabilityconfigstore
2. Add type for /data/vendor/configstore folder
3. Allow capabilityconfigstore HIDL Server access/r/w it
Change-Id: I2781d93f02fc4673d935d6b764f53a9f45868256
Add socket communication sepolicy rules for location and wifihal.
lowiserver would interact with wifihal for nl communication.
CRs-Fixed: 2467101
Change-Id: Iff7e5f50858c95ad86ff34e5f5333bd9304aec4e
Allow sensingdaemon access to create socket, to fix the
following error, seen when trying to run the sensingdaemon
with start command:
avc: denied { create } for scontext=u:r:sensingdaemon:s0
tcontext=u:r:sensingdaemon:s0 tclass=qipcrtr_socket permissive=0
Change-Id: I68ae70fe93e0b73f0b6aeec5e84793edf532dfd0
These rules are missed while porting the policies from Android P
to Android Q.
Adressing the following denial:
type=1400 audit(14866.629:43): avc: denied { search } for comm="HwBinder:753_1"
name="gpu" dev="sda9" ino=376 scontext=u:r:hal_graphics_allocator_default:s0
tcontext=u:object_r:vendor_gles_data_file:s0 tclass=dir permissive=0
Change-Id: I24434be8d895d5dab8e5c24643c8be48f20d8673
APK needs access for SCVE libs which are on vendor side for
providing the system access for the hals.
These SCVE libs run on different platforms such as GPU,
dsp and cpu, which uses the ion memory.
Change-Id: I21a0bd9c6f2fac58a54e4b7cedc6ab8ea29ea929
Add charger.te file and add policy for charger script
to access charger devices.
while at it add sepolicy rules for hvdcp_opti.
Change-Id: Ib14d5baad3415e3044732177c73b3e64d4f8fdc4
Sepolicy changes needed for dynamic partition support for legacy
targets : SDM845 and SDM710
- Add rules to enable fastbootd mode flashing of dynamic partition
- Define labels for super, recovery and vbmeta_system partitions
- Allow update_engine to access recovery partition for OTA
Change-Id: I6f692da6ab687529833a87b6feb375fda26508b8
As definition of uefi_block_device been moved to common
removing this definition from other target specific folders
Change-Id: I7367555c4d2d869b8f55a3c5bad0ad72a0203e67
- Add rule for write access to dpmtcm_socket sock file
- Add few domains to dont audit rule list for vendor_gles_data_file
dir search.
Change-Id: Iabc0250d2ac0bf28e4f4dd3d8c67b4bf20fbeb1e
CRs-Fixed: 2469209
Do not audit zygote service access to vendor_gles_data_file.
Addressing the following denial:
type=1400 audit(0.0:123): avc: denied { search } for name="gpu" dev="dm-0"
ino=1654839 scontext=u:r:zygote:s0 tcontext=u:object_r:
vendor_gles_data_file:s0 tclass=dir permissive=0
CRs-Fixed: 2465123
Change-Id: I6cc6e3e6e393a7181bd9fea6992e6f86f987f0d5
