Add the sepolicy rules for trustzone
access service to provide it access to
various vendor and android services.
Change-Id: I80f8bcb9a917ed18331fa3b92f1e8c65f8c631ad
"LA.UM.11.2.1.r1-03400-sdm660.0"
# By Arvind Kumar (1) and Jiani Liu (1)
# Via Jiani Liu (1) and Linux Build Service Account (1)
* tag 'LA.UM.11.2.1.r1-03400-sdm660.0':
Add sepolicy for ISupplicantVendor aidl
Permission to access binderfs for binder info
Change-Id: Ice22795ff63de9cc918af6a22e113fe1fce1de83
"LA.UM.11.2.1.r1-03300-sdm660.0"
# By Jiani Liu (1) and Sanghoon Shin (1)
# Via Gerrit - the friendly Code Review server (1) and Linux Build Service Account (1)
* tag 'LA.UM.11.2.1.r1-03300-sdm660.0':
Add sepolicy for ISupplicantVendor aidl
sepolicy: fix issue on non-snap target
Change-Id: I512ef692ad0178c26817da2745b67e5dd43c1ee1
This commit adds required sepolicy changes to avoid avc denial for new
vendor.qti.hardware.wifi.supplicant.ISupplicantVendor/default.
Change-Id: Ie272772338299eb2c684b1c3683e062b12ca486b
This commit adds required sepolicy changes to avoid avc denial for new
vendor.qti.hardware.wifi.supplicant.ISupplicantVendor/default.
Change-Id: Ie272772338299eb2c684b1c3683e062b12ca486b
levelFrom is used to determine the level (sensitivity + categories)
for MLS/MCS. If set to all, level is determined from both UID and
user ID. This is bad for poweroffalarm, as it needs to be able to
write to /persist/alarm/data which has a context without mls_level:
u:object_r:persist_alarm_file:s0
instead of
u:object_r:persist_alarm_file:s0:c0,c256,c512,c768
Change-Id: I9a8b706cdedc090281e4b5542eb34816b7ff338e
"LA.UM.11.2.1.r1-01900-sdm660.0"
# By Neelu Maheshwari (1) and Sanghoon Shin (1)
# Via Gerrit - the friendly Code Review server (1) and Linux Build Service Account (1)
* tag 'LA.UM.11.2.1.r1-01900-sdm660.0':
sepolicy: fix issue on non-snap target
Sepolicy : Fixed Multiple AVC Denials in 11.2.1 SDM660.
Conflicts:
generic/vendor/common/hwservice.te
generic/vendor/common/hwservice_contexts
legacy/vendor/msm8996/hal_qccvndhalservice.te
legacy/vendor/sdm660/file_contexts
qva/vendor/common/hwservice.te
qva/vendor/common/hwservice_contexts
Change-Id: Ic0fa79f8c74969f25061f50706000abee5b0d008
Make power off alarm app as an independent app domain so that
the sepolies will not affect other apps.
[Giovix92]: Adapt it to lineage-18.1
CRs-Fixed: 2113144
Original Change-Id: Ia80575b6dea893bde30636b9a814a6f20ea54b6f
Change-Id: Ie56c5cbade7332a145f10cd5fff0955bcfc724ef
The `wifi.interface` property was labelled as `exported_default_prop` by
system/sepolicy in android 11. Since android 12 it is labelled as
`wifi_hal_prop` which causes the following denial.
W libc : Access denied finding property "wifi.interface"
W cnd : type=1400 audit(0.0:22): avc: denied { read } for name="u:object_r:wifi_hal_prop:s0" dev="tmpfs" ino=26257 scontext=u:r:cnd:s0 tcontext=u:object_r:wifi_hal_prop:s0 tclass=file permissive=0
Change-Id: I6cf8ad4133ca3013d844d4ef3b2701de22f408b0
* Required to set persist.vendor.delta_time.enable=true
in vendor build.prop with property isolation enabled
Change-Id: I180f236c6aac2a7266f4d49dfe9c1ca9e5582c5c
