Commit graph

125 commits

Author SHA1 Message Date
qctecmdr
3db39e369d Merge "sepolicy: Modify the path in sysfs rule" 2019-06-20 06:25:15 -07:00
Pavan Kumar M
76e95132fd sepolicy: Modify the path in sysfs rule
Modify the path in sysfs rule for msmnile.
Add the corresponding net sysfs rule for sdm710.

Change-Id: Ibd299806e4a0edf91ff071774064e19a2135bbbd
CRs-Fixed: 2473945
2019-06-20 03:02:21 -07:00
Balakrishna Godavarthi
bc07bc1014 Add sepolicy for BT lazyhal property
This patch adds lazyhal property to bluetooth_prop
and allows bluetooth application to access the property.

Change-Id: I1803488eaced69116ba07f219f7dc22b7ee1d1ca
2019-06-19 22:56:02 -07:00
qctecmdr
180704bb4e Merge "sepolicy: Add capabilityconfigstore support for legacy targets." 2019-06-19 04:30:11 -07:00
qctecmdr
7c32d91780 Merge "sepolicy : moving dumpstate permission to normal builds ." 2019-06-19 01:12:18 -07:00
qctecmdr
cc70fbee28 Merge "sepolicy: Add access policy for charger files" 2019-06-18 22:45:20 -07:00
Ravi Kumar Siddojigari
626a7aca87 sepolicy : moving dumpstate permission to normal builds .
As the testcase is expected to pass in even userbuild .
Moving the rule out of test folder .

Change-Id: I0cab3ac99d99b417b159a6229e61e3a4fc492497
2019-06-19 11:11:08 +05:30
Mahantesh Sanakall
a8916de8f7 sepolicy: Add capabilityconfigstore support for legacy targets.
1. Define domain for capabilityconfigstore
2. Add type for /data/vendor/configstore folder
3. Allow capabilityconfigstore HIDL Server access/r/w it

Change-Id: I2781d93f02fc4673d935d6b764f53a9f45868256
2019-06-18 09:57:24 -07:00
Vinay Gannevaram
8980acb821 sepolicy: Add location and wifihal rules for legacy devices
Add socket communication sepolicy rules for location and wifihal.
lowiserver would interact with wifihal for nl communication.

CRs-Fixed: 2467101
Change-Id: Iff7e5f50858c95ad86ff34e5f5333bd9304aec4e
2019-06-14 04:04:14 -07:00
Kavya Nunna
362458c219 sepolicy: Add access policy for charger files
Add charger.te file and add policy for charger script
to access charger devices.

while at it add sepolicy rules for hvdcp_opti.

Change-Id: Ib14d5baad3415e3044732177c73b3e64d4f8fdc4
2019-06-13 11:50:57 +05:30
qctecmdr
38ea1e979b Merge "sepolicy: Add rules to enable non-A/B dynamic partitions" 2019-06-12 10:59:51 -07:00
qctecmdr
f82a9615fa Merge "sepolicy: Add support for fastbootd to flash dynamic partitions" 2019-06-12 07:50:38 -07:00
Mahantesh Sanakall
ef4cce3990 sepolicy: Add rules to enable non-A/B dynamic partitions
Change-Id: Icb6e99cf07a1105bb3f2f4311825617c58b8e699
2019-06-12 04:17:35 -07:00
Anuj Singhal
bad42f8098 sepolicy: Add support for fastbootd to flash dynamic partitions
Sepolicy changes needed for dynamic partition support for legacy
targets : SDM845 and SDM710
- Add rules to enable fastbootd mode flashing of dynamic partition
- Define labels for super, recovery and vbmeta_system partitions
- Allow update_engine to access recovery partition for OTA

Change-Id: I6f692da6ab687529833a87b6feb375fda26508b8
2019-06-12 15:04:58 +05:30
Rajavenu Kyatham
23a0ea8f24 sepolicy: Add permissions for composer service
- composer service is required for communication b/w
  SF and HWC. 

Change-Id: I52652d309363b3f0f7b963d615688ce3e11c6fef
CRs-Fixed: 2466343
2019-06-12 12:20:03 +05:30
qctecmdr
b362bed0fa Merge "Sepolicy: Add permissions to set vendor boot mode prop for Factory HIDL" 2019-06-11 06:52:29 -07:00
Huang Li
b3e35668d2 Sepolicy: Add permissions to set vendor boot mode prop for Factory HIDL
Allow permissions for Factory HIDL to set vendor.sys.boot_mode prop.

Change-Id: Ifa5edbb01d5f859225ccb440ec367c222b8eebf4
CRs-Fixed: 2450631
2019-06-11 18:29:07 +08:00
qctecmdr
deb6cc1f72 Merge "sepolicy: allow gnss hal to access health hal" 2019-06-10 12:14:36 -07:00
qctecmdr
11d1a57ae3 Merge "sepolicy: Add permissions for composer service" 2019-06-10 06:30:18 -07:00
Rajavenu Kyatham
e3f33989ec sepolicy: Add permissions for composer service
CRs-Fixed: 2466343
Change-Id: I5a66822c1c8b46093cd62eb08aa1ff48b1c658b7
2019-06-10 04:12:38 -07:00
qctecmdr
dca379a39e Merge "sepolicy: provide rules for cryptfs_hw hal" 2019-06-10 04:08:18 -07:00
Nitin Shivpure
ebc9ef5c11 sepolicy: allow bluetooth hal to access persist/bluetooth data
allow bluetooth hal to access(read, write, create) persist bluetooth
data.

Change-Id: Idee1f22f12c9852532325577efd534a731985d45
2019-06-10 12:52:52 +05:30
Neeraj Soni
66bb7bb387 sepolicy: provide rules for cryptfs_hw hal
BUG: b/121350843
vold need to communicate with tee device node to set crypto
engine keys for userdata encryption. cryptfs_hw hal is
implemented to facilitate this commuincation.

Change-Id: Ie1d02b211e1f6e147092710008b363795df5e0a6
Signed-off-by: Neeraj Soni <neersoni@codeaurora.org>
2019-06-09 12:41:46 +05:30
qctecmdr
345bdfcd92 Merge "sepolicy: add sysfs paths for mhi timesync feature support" 2019-06-08 12:37:14 -07:00
Harikrishnan Hariharan
ee24695856 sepolicy: allow gnss hal to access health hal
Add rule for gnss hal to listen battery status for legacy
devices upgrade.

Change-Id: Ia251c3446b7f7861bb920fe635229d8e2e90c824
CRs-Fixed: 2467115
2019-06-06 19:11:12 +05:30
Mohit Aggarwal
938a52c749 sepolicy: allow time-services to access perf hal
Allow time-services to access perf hal

Change-Id: Iaca0b6e47b63aeccdf5e5faa3628a0cc53017be0
2019-06-06 10:42:17 +05:30
Sujeev Dias
10553605a6 sepolicy: add sysfs paths for mhi timesync feature support
Add sysfs path for mhi timesync feature files to be read from
userspace applications/services.

CRs-Fixed: 2426302
Change-Id: Ib28800e000774d8ce27dd9a78db9efd6ebdbdb00
2019-06-04 17:47:19 -07:00
qctecmdr
8da456b050 Merge "sepolicy : addressed dumpstate related denials." 2019-06-04 11:20:55 -07:00
qctecmdr
878819b0d9 Merge "sepolicy: Read vendor_pd_locater_dbg_prop in GNSS HIDL for legacy" 2019-06-04 05:44:15 -07:00
qctecmdr
697281bf7f Merge "sepolicy: Add rule for audioserver to find audio_service" 2019-06-04 00:19:32 -07:00
Harikrishnan Hariharan
90d39e829c sepolicy: Read vendor_pd_locater_dbg_prop in GNSS HIDL for legacy
Add rule to read vendor_pd_locater_dbg_prop in GNSS HIDL for legacy
devices

Change-Id: If7cc23dcf06278877c16f9d964b272ff08c24825
CRs-Fixed: 2464884
2019-06-03 22:52:26 +05:30
Ravi Kumar Siddojigari
9767ee2638 sepolicy : addressed dumpstate related denials.
As part of CTS testing its expected no denails should be seen
from dumpstate domain during testing so addressing generic
permission issue.

test :testNoBugreportDenials

Change-Id: Ic60a49e6330c42aa99280af8e6913af140e981e5
2019-06-03 18:21:39 +05:30
Ravi Kumar Siddojigari
a0e764c972 sepolicy : bt services domains aligned with prebuilds version 29.0
Change-Id: I095c5294daf29da389c2da16f03c6bb1508d6be6
2019-06-03 16:30:32 +05:30
Ramjee Singh
cafb67c1ca sepolicy: Add rule for audioserver to find audio_service
Add rule for audioserver to find audio_service for AAudio usecase

Change-Id: I1cd1b621b362124a338973aaeff6341e6862418d
2019-06-03 14:40:57 +05:30
Nitin Shivpure
3f4efd7619 sepolicy: allow bluetooth to access perf hal
allow bluetooth to access perf hal

Change-Id: Ibe71b00b71b010c8032a563638debea7990067b6
2019-05-31 03:00:48 -07:00
qctecmdr
aa536e05d4 Merge "sepolicy: Adding permissions for nfc" 2019-05-29 16:35:06 -07:00
Padmanabhan Komanduru
00ddb37c5f sepolicy: permit graphics hwcomposer to read kgsl sysfs nodes
Permit graphics hwcomposer to access kgsl sysfs node to get
the value of maximum GPU clock supported.

Change-Id: Idc3966029364436cbca445a9bc704ee2a2caf874
2019-05-29 14:02:15 +05:30
qctecmdr
cc5fa63528 Merge "sepolicy : clean-up of netd_socket usage." 2019-05-28 00:46:25 -07:00
Ravi Kumar Siddojigari
4cb4eee99e sepolicy : clean-up of netd_socket usage.
As public defination of netd_scoket is removed removing all the
references to this.

Change-Id: I752d1d546d5d6e76dc4e43fc3d4a90b0aca077c8
2019-05-28 11:47:01 +05:30
qctecmdr
bd64e5e5d2 Merge "sepolicy: add device sepolicy rule for NNHAL-1.2v" 2019-05-27 22:34:05 -07:00
Devi Sandeep Endluri V V
6a63afe092 sepolicy: add rules for imshelper_app
Add rules to allow imshelper_app to search
radio_data_file

Change-Id: I1184833d2cde889292aa4cf205e748cecb23ae3c
2019-05-27 00:37:30 -07:00
Tharaga Balachandran
3dd3609333 sepolicy: Add policies for mapper and allocator
CRs-Fixed: 2451972
Change-Id: I3415b9672066bdbd6726fcd32b165980b0c7eeca
2019-05-24 11:53:40 -07:00
Vishawa Raj Singh
26e7f29bdf sepolicy: add device sepolicy rule for NNHAL-1.2v
Updated rules for legacy targets from generic targets

Change-Id: I1128703a8303d5359c3a28329a7f3c3f091d9d44
2019-05-24 16:50:43 +05:30
richagar
5c0dd72f17 sepolicy: Adding permissions for nfc
Adding perf hal permissions to nfc.te
for legacy and qva

Change-Id: Ic62e0cff34fb7af1778239c1d436a3a25c0cfc01
2019-05-22 12:21:29 +05:30
qctecmdr
04c14f1d19 Merge "Sepolicy: Add selinux permission for QtiMapper interface." 2019-05-21 09:36:08 -07:00
Ashish Kumar
47a514ed91 Sepolicy: Add selinux permission for QtiMapper interface.
CRs-Fixed: 2451646
Change-Id: Ic909d367ac4bec149451b1fb68b400f27c62491f
2019-05-21 13:57:17 +05:30
qctecmdr
8844b19e03 Merge "sepolicy: Add persist file access rules for USTA test App" 2019-05-21 00:17:27 -07:00
qctecmdr
d2cb04b0d9 Merge "sepolicy: Add permission to access min_level_change node for hdcp" 2019-05-16 03:41:20 -07:00
Sandeep Neerudu
01daaa8332 sepolicy: Add persist file access rules for USTA test App
Change-Id: I1ea7b7bd2a77dc37021fc3312ca04e25eeff06a9
2019-05-15 06:35:49 -07:00
qctecmdr
0e7f78678e Merge "Camera: Add permission to access camera library for passthrough hidl" 2019-05-14 23:10:42 -07:00