tequilaOS/platform_device_qcom_sepolicy-legacy-um
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
3520 commits 1 branch 0 tags 4.7 MiB
Commit graph

345 commits

Author SHA1 Message Date
Prabhat Roy
a17345a7ce sepolicy: Add file context for DRM 
Change-Id: I568149e2c91f86a72007fb5b04f5597f133eea64
 2023-11-02 11:12:02 +05:30
Himanshu Agrawal
6f68a803eb sepolicy: Compilation fix for newer upgrade. 
Change-Id: I7eb38060cb0a1ad3e09d221022bd5955fb95b396
 2023-05-19 05:10:20 -07:00
Himanshu Agrawal
0d44cf1b75 sepolicy: Add sepolicy rules for TZAS 
Add the sepolicy rules for trustzone
access service to provide it access to
various vendor and android services.

Change-Id: I80f8bcb9a917ed18331fa3b92f1e8c65f8c631ad
 2023-05-09 03:05:55 -07:00
Sridhar Kasukurthi
ee6be5f18d sepolicy: Add policy for atfwd client 
Add policy for atfwd daemon client

Change-Id: I0251b892ffdfbd02ba16b3dc08998581b1c45015
CRs-Fixed: 3450521
 2023-04-05 11:54:07 +05:30
Jiani Liu
f9714cd55d Add sepolicy for ISupplicantVendor aidl 
This commit adds required sepolicy changes to avoid avc denial for new
vendor.qti.hardware.wifi.supplicant.ISupplicantVendor/default.

Change-Id: Ie272772338299eb2c684b1c3683e062b12ca486b
 2023-03-07 14:54:08 +08:00
Arvind Kumar
127987d3e0 Permission to access binderfs for binder info 
Change-Id: If386da636f084c2c67ee6323300aae0c2ac75bc5
 2022-11-03 11:43:07 +05:30
Neelu Maheshwari
a8d0a3a4af Sepolicy : Fixed Multiple AVC Denials in 11.2.1 SDM660. 
Change-Id: I720fc8af14e1aea42d343603f740f09066f5427a
 2022-07-15 00:39:19 -07:00
Akhil P Oommen
3114a14f3d sepolicy: Add shell permission to /sys/class/kgsl/kgsl-3d0/perfcounter 
Allow shell users to have permission to update sysfs node
/sys/class/kgsl/kgsl-3d0/perfcounter

Change-Id: I648b7f4b25e4c8c1644be5046677f41e7b5d2f8c
 2022-03-23 14:52:03 +05:30
Himanshu Agrawal
b22b63ec7b sepolicy:labeling socid and granting the permission to the domains 
for legacy target.

remove read permission for untrusted app to read device info.
Soc_id and family are set to be global read.

Change-Id: I2a30d75f6678f78c746b7b02d8a5abcda6248cea
 2022-01-27 08:45:24 -08:00
Bharat Pawar
9ee7d8250c sepolicy: Add create socket file permission for wcnss_service 
cnss_cli use unix socket to communicate with cnss-daemon.
cnss-daemon need create unix socket server file when init.

Change-Id: Ibbe1eb1f418da17c0155a0663f6a94d8777ef80f
 2022-01-03 14:46:27 +05:30
Himanshu Agrawal
3970a6c9e5 sepolicy: Address multiple avc denials during bootup 
Change-Id: I9eb5510799b33ab17f56d0e1f1440f38b87fa2c3
 2021-12-09 15:16:04 +05:30
Himanshu Agrawal
48290d633b sepolicy: Add device specific wakeup nodes 
Change-Id: I1f39b7e7d13920969f2573e157b217c05adf50fa
 2021-12-06 01:15:58 -08:00
Neelu Maheshwari
cd83ea175c Sepolicy : Fixes for multiple avc denial for sdm660 
Change-Id: If0df4244e417775503e524a8cd5a2212dde0748e
 2021-12-01 16:03:44 +05:30
Neelu Maheshwari
3a39145fbd Sepolicy : Fixes for Multiple denials 
Change-Id: I51e915e0a41a1d24947f79a7d0128a934f02dcfa
 2021-11-17 03:39:10 -08:00
Linux Build Service Account
f5b11b7887 Merge "Sepolicy: Fix avc denial seen during boot up." into sepolicy.lnx.12.0.c2 2021-10-29 10:57:01 -07:00
Linux Build Service Account
9246e22f7a Merge "sepolicy: adding getattr perm for init" into sepolicy.lnx.12.0.c2 2021-10-29 10:56:01 -07:00
Sundhara Raja Usiripati
7353e15e06 sepolicy: adding getattr perm for init 
Change-Id: I4b7295066031aa838139dda203fec019a11386dd
 2021-10-28 07:52:55 -07:00
Neelu Maheshwari
27d9d234b4 sepolicy: Add find permission to systemhelper_app.te 
Change-Id: Ia2a650d5d77dd70b7e6044bfe914f6494c4ed06a
 2021-10-28 07:52:03 -07:00
Amritendu Biswas
183f2de411 sepolicy: support qmi based embms msdc on legacy targets 
Change-Id: I0cac6d60d636ce546f91764703faca468c0ce85f
 2021-10-28 13:52:17 +05:30
Himanshu Agrawal
a3b4f4e984 Sepolicy: Fix avc denial seen during boot up. 
avc: denied { search } for name="location" dev="dm-8" ino=514
scontext=u:r:tlocd:s0 tcontext=u:object_r:location_data_file:s0
tclass=dir permissive=0

avc: denied { write } for name="kmsg" dev="tmpfs" ino=1559
scontext=u:r:wcnss_service:s0 tcontext=u:object_r:kmsg_device:s0
tclass=chr_file permissive=0

- Added these policies as part of reduce avc deniels in boot up

Change-Id: I68868f5c3084bd10d8e74dd0623160a849dab5b9
 2021-10-28 11:12:46 +05:30
Linux Build Service Account
064c4b07f1 Merge "sepolicy: Add read dir permission to hal_bootctl.te" into sepolicy.lnx.12.0.c2 2021-10-21 01:29:51 -07:00
Himanshu Agrawal
bd0d1c24e4 sepolicy: Allow access for /dev/qseecom from vendor_init 
avc: denied { getattr } for path="/dev/qseecom" dev="tmpfs" ino=25714
scontext=u:r:vendor_init:s0 tcontext=u:object_r:tee_device:s0
tclass=chr_file permissive=0

Change-Id: Ia55d4e07c4596ab9d2f78cba91b22d84bf35dc5d
 2021-10-12 22:08:32 +05:30
Sundhara Raja Usiripati
da451f1c9f sepolicy: Add read dir permission to hal_bootctl.te 
hal_bootctl needs read permission to sysfs_dt_firmware_android

Change-Id: I6e89b2db756d7070bc4b815cf15a6a4f241d137b
 2021-09-27 15:27:52 +05:30
Linux Build Service Account
438292158d Merge "sepolicy: Add drm clearkey policies" into sepolicy.lnx.12.0.c2 2021-09-21 02:18:49 -07:00
Linux Build Service Account
fbbbf01dbf Merge "sepolicy: get radio_control_prop multisim property" into sepolicy.lnx.12.0.c2 2021-09-13 04:06:02 -07:00
Bharat Pawar
0c919f535a sepolicy: Add drm clearkey policies 
Add selinux rules for drm clearkey services. Refine and extend drm
widevine service rules for future updates.

Change-Id: I1f73fd97ba083085be898f39d96ce2e61e99ca7b
 2021-09-09 16:42:26 +05:30
Himanshu Agrawal
dd9c8c1825 sepolicy: making system/product and vendor restricted/internal prop 
making system/product and vendor to restricted and public
prop for all the extendeded core prop and property type defined in public

Change-Id: Icbfe02ecb49a70619d6aa03a45975b2db186f559
 2021-09-02 08:03:33 -07:00
Himanshu Agrawal
baa098a5bd sepolicy: Fix compilation issues 
Change-Id: I60fc0aec2f6d4e3330210d52529fba20eb403d92
 2021-08-13 12:35:04 +05:30
Sridhar Kasukurthi
76f88bb757 sepolicy: get radio_control_prop multisim property 
- Allow reading of persist.radio.multisim.config
  property
- Add qtiphone and telephonyservice policy to
  legacy folder

Change-Id: I6ecd57d18cb97760d8133e239940b1e2ad69e55c
 2021-08-10 02:04:24 -07:00
Himanshu Agrawal
6123a9d0e8 sepolicy: Add cpu4-ddr-latfloor devfreq node for K4.19 
cpu4-ddr-latfloor devfreq node for K4.19

Change-Id: I1b8462b45de419d79819288bab62f3d56cb84533
 2021-06-03 18:21:17 +05:30
Monika Singh
2a00ecb00b sepolicy: Update qseecomd sepolicy to access tmpfs 
Update policies for qseecomd so that it can access
SFS.

Change-Id: I9bfe8c242de441a4a4171af93481bf00eda7d8f7
 2021-05-25 03:09:23 -07:00
Himanshu Agrawal
a473048fb3 sepolicy: Addressing post-boot denials 
Change-Id: I5282c1acf9f096c6363c77afc0443b06f00a6c37
 2021-05-17 17:12:16 +05:30
Himanshu Agrawal
d7eb0cc6b6 sepolicy: Fix /sys/devices/soc0 read permission issue 
Change-Id: I189fea846191f6407d6c6b9fb767595466b7dc06
 2021-05-05 22:14:35 -07:00
qctecmdr
d418e08af1 Merge "sensors : Updating property name" 2021-05-03 09:18:08 -07:00
Eruvaram Kumar Raja Reddy
f575fdf52f sepolicy: msm8937: Add sysnode for imsdatadaemon 
Add a change to fix avc denial for the imsdatadaemon

Change-Id: I0f2eacf7ee08660b5dd8d39b0ed3a096a3813b38
 2021-04-30 08:20:43 -07:00
Akhil Manikoth Kallankandy
2906bf533d sensors : Updating property name 
changing property name according to VtsTrebleSysPropTest

Change-Id: I95bae88a4126606c4d5eef992d863e483766212f
 2021-04-30 05:45:21 -07:00
qctecmdr
98d6c29eae Merge "sepolicy: msm8937: Add label for wakeup sources" 2021-04-26 04:53:35 -07:00
Himanshu Agrawal
53203d8bfb sepolicy: Add sepolicy rules for vm_bms 
create vendor_vm_bms_debug_prop for debug properties.

Change-Id: I6ac3986af96bb50288e404c377613c6b0d4dc998
 2021-04-22 22:53:53 -07:00
Eruvaram Kumar Raja Reddy
892ac25bce sepolicy: msm8937: Add label for wakeup sources 
Add a change to fix the avc denials for the wakeup source
used for different nodes.

Change-Id: I3f51e966e33fdabdae8cb43bc425ee42d8b3356d
 2021-04-22 02:42:45 -07:00
qctecmdr
6ed2f466d1 Merge "sepolicy: Addressing multiple on-boot denials present" 2021-04-21 23:48:23 -07:00
Himanshu Agrawal
c5495488d8 sepolicy: Addressing multiple on-boot denials present 
Multiple on boot denials has been addressed for
improving device performance.

Change-Id: If0db0c0bd334da91c879d9170d03171c2bf4a91d
 2021-04-20 15:50:51 +05:30
Himanshu Agrawal
efc87f7815 sepolicy: sdm439: Add cpu-ddr-latfloor devfreq node for K4.19 
Add cpu-ddr-latfloor devfreq node for sdm439 target

Change-Id: Id0d84edc1d6474a09ef5c90f9ea5c4f59537728e
 2021-04-19 11:09:26 +05:30
Himanshu Agrawal
38419ce515 sepolicy: Add cpu-ddr-latfloor devfreq node for K4.19 
cpu-ddr-latfloor devfreq node for K4.19

Change-Id: I55e72f915d8de62d47adda386ffabe8421e5c502
 2021-04-14 17:27:31 +05:30
Prerna Kalla
debf881517 sepolicy: Add label for KM 4.1 service 
Add label for KM 4.1 service.

Change-Id: Iab41f356da6562c9c0b9ed942f20442cfc6ec8f2
 2021-04-02 03:55:53 -07:00
qctecmdr
bfca115857 Merge "sepolicy: cpu-ddr devfreq nodes for K4.19" 2021-04-01 03:51:10 -07:00
Karthik Gopalan
3bfa6d9474 sepolicy: cpu-ddr devfreq nodes for K4.19 
cpu-ddr devfreq nodes for K4.19

Change-Id: I2e270c2e89b19b6eda9a020ff6d35cd7f0d04d84
 2021-04-01 02:38:57 -07:00
qctecmdr
e8d0a199a9 Merge "sensros : changing property name" 2021-04-01 01:48:49 -07:00
Akhil Manikoth Kallankandy
7849fcf55f sensros : changing property name 
Change-Id: I17e71ca56e9fa050221972c846a9f99db8761283
 2021-03-31 14:24:32 +05:30
Himanshu Agrawal
bdbe69b3b8 sepolicy: msm8937: Add label for wakeup sources 
Add a change to fix the avc denials for the wakeup source
used for different nodes.

Change-Id: I9309363b04aac163364809083edf359dcab2ab0c
 2021-03-30 03:26:17 -07:00
Himanshu Agrawal
58dfef56b4 sepolicy: msm8937: Add selinux rules for update engine 
Change-Id: I8ba1ca16083613445b7642f83fdccc73a252f658
 2021-03-23 14:20:43 +05:30