tequilaOS/platform_device_qcom_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
3685 commits 1 branch 0 tags 4.5 MiB
Commit graph

3685 commits

This branch
This branch
All branches
Author SHA1 Message Date
Michael Bestas
7f068d5c3a
Merge tag 'LA.QSSI.14.0.r1-14000-qssi.0' into staging/lineage-21.0_merge-LA.QSSI.14.0.r1-14000-qssi.0 
LA.QSSI.14.0.r1-14000-qssi.0

* tag 'LA.QSSI.14.0.r1-14000-qssi.0':
  sepolicy: add permission of qvrcamservice in xrcb
  selinux: add sepolicy grouping for screen decoration prop

 Conflicts:
	generic/public/attributes

Change-Id: I2d8d3de61b6c6bd95dedd345865ace65129cb1ed
 2024-04-19 23:13:49 +03:00
Linux Build Service Account
f4a23be78b Merge 4958c416f6 on remote branch 
Change-Id: I74c8ccf211dcb539060f062b02eabf41860adca5
 2024-04-05 18:02:24 -07:00
qctecmdr
4958c416f6 Merge "sepolicy: add permission of qvrcamservice in xrcb" 2024-03-31 23:33:51 -07:00
Michael Bestas
2a95cd0b12
Merge tag 'LA.QSSI.14.0.r1-13400-qssi.0' into staging/lineage-21.0_merge-LA.QSSI.14.0.r1-13400-qssi.0 
"LA.QSSI.14.0.r1-13400-qssi.0"

# By Yashaswini Guvvala
# Via Anirudh Mahto (1) and Linux Build Service Account (1)
* tag 'LA.QSSI.14.0.r1-13400-qssi.0':
  sepolicy: add the attributes corresponding to the umdservice

Change-Id: Ie9316f453e57656f1d4d90acf4d763f29b93be86
 2024-03-29 11:58:44 +02:00
Linux Build Service Account
2c745ac0a6 Merge 268b8039b7 on remote branch 
Change-Id: If83d48f877c86b85994fd67eed4bc19c397d8e8a
 2024-03-27 10:26:05 -07:00
qctecmdr
268b8039b7 Merge "selinux: add sepolicy grouping for screen decoration prop" 2024-03-12 05:25:02 -07:00
zhw
aebf5198b2 sepolicy: add permission of qvrcamservice in xrcb 
Add attribute for qvrcamservice, and allow xrcb as
client of qvrcamservice.

Change-Id: Ia45bbcd2777888bde3865ffd94dc1d09e22a8064
(cherry picked from commit 7b2a2a2c139a64a04c89d4d67ce47805db25e26b)
 2024-03-10 23:14:53 -07:00
Linux Build Service Account
f2c9d04cfd Merge 280a4bb7e1 on remote branch 
Change-Id: Iafcf4935f2d737760b7f53d5f3338bdf4c202936
 2024-03-09 01:59:26 -08:00
Devanshi Bansal
6c9c4b6421 selinux: add sepolicy grouping for screen decoration prop 
-- Set disable_screen_decorations prop from display init
   script.

Change-Id: I0b2f56dc632af280f83761955048c907f1a5bec3
 2024-03-01 14:05:26 +05:30
Yashaswini Guvvala
280a4bb7e1 sepolicy: add the attributes corresponding to the umdservice 
Change-Id: I1102eda821c08084eccbdd2162b68989aed7c628
(cherry picked from commit c9d7ea895c96ca0f4e300c7cac1268cadc966c20)
 2024-01-29 08:58:44 -08:00
Bruno Martins
69da3f7a54 Merge tag 'LA.QSSI.14.0.r1-11200-qssi.0' of https://git.codelinaro.org/clo/la/device/qcom/sepolicy into lineage-21.0 
"LA.QSSI.14.0.r1-11200-qssi.0"

* tag 'LA.QSSI.14.0.r1-11200-qssi.0' of https://git.codelinaro.org/clo/la/device/qcom/sepolicy:
  sepolicy: Add rule to allow WLC app to use QSPA HAL
  sepolicy: CACert system AIDL sepolicy changes
  sepolicy: add hexlp aidl service sepolicy.

Change-Id: I1476df7bf1d143f14581f3a1702de6346ad5f559
 2024-01-04 21:46:32 +00:00
Linux Build Service Account
33176e1cb0 Merge f809e031fa on remote branch 
Change-Id: I473418420011ffade382df0d05e51ea03f212804
 2023-12-07 06:26:04 -08:00
qctecmdr
f809e031fa Merge "sepolicy: Add rule to allow WLC app to use QSPA HAL" 2023-11-24 02:32:36 -08:00
Jagadeesh Pagadala
9f5db93bf3 sepolicy: Add rule to allow WLC app to use QSPA HAL 
Workloadclassifier app is using QSPA HAL to query silver cpus.

Change-Id: I13da493d65df350135b86c00d2b085669bebc263
 2023-11-21 18:20:39 +05:30
Linux Build Service Account
78bc72a37f Merge 56920032ed on remote branch 
Change-Id: Iee94dc7838e64e74d456730435e2fb138c67b774
 2023-11-09 07:56:37 -08:00
Linux Build Service Account
fdc1470980 Merge e29c90737c on remote branch 
Change-Id: Ib2ae1da0b9737ab25be8e854369b61c673105a76
 2023-10-30 14:27:59 -07:00
Yashaswini Guvvala
18415c7c55 sepolicy: add the attributes corresponding to the umdservice 
Change-Id: I1102eda821c08084eccbdd2162b68989aed7c628
 2023-10-27 14:09:40 +02:00
quic_farenl
66fbd101af AKS: sepolicy for gamepad 
Change-Id: I8d0ece364154a09f6cb41780163e71e9ae10c416
 2023-10-26 11:08:52 +01:00
Michael Bestas
d5b1835abc
Move qti-testscripts definition out of userdebug_or_eng check 
sepolicy compat_test tests fail to compile on user builds because
of the missing definitions.

Test: breakfast FP4 user && m
Change-Id: I9e5ba85a48e757cdf45e90103b3ce10f22a912d0
 2023-10-20 01:19:53 +03:00
LuK1337
e482b17c58
generic: Add typeattribute definitions for 30.0 compat 
cp generic/prebuilts/api/30.0/private/compat/30.0/30.0.cil \
    generic/private/compat/30.0/30.0.cil
cp generic/product/prebuilts/api/30.0/private/compat/30.0/30.0.cil \
    generic/product/private/compat/30.0/30.0.cil

Change-Id: If3cfcfd0c35c95ecd53473b99d6e9cb6df4cc396
 2023-10-20 01:19:53 +03:00
Arian
709e83a4ed
generic: Don't dontaudit vendor_persist_camera_prop read denials 
This needs to be allowed in order for
I15910154c6df205e6d4e00bfad30a00c9e3d5bee to work. This will be
allowed in device/lineage/sepolicy.

Change-Id: Ie22121ee75e048bfa002d8980e15aeab1376f6b4
 2023-10-20 01:19:53 +03:00
dianlujitao
0a58051f8f
sepolicy: Unlabel aux camera whitelist prop 
* This will be properly labeled in device/lineage/sepolicy
   to make it readable to everything on every device

Change-Id: Idec6cad06c51ba73519f61e95c74e1c8915d301b
 2023-10-20 01:19:53 +03:00
Pig
ed9dfbcdfb
sepolicy: Remove QCOM guards 
Change-Id: I0efd0b96f45ecfa9eec0b98087f0582dcd282798
 2023-10-20 01:19:53 +03:00
Chirayu Desai
39da5180a7
Add .gitupstream file 
Change-Id: I09a51a0b5f5826488a1596bcaf81bf0ed26a258c
 2023-10-20 01:19:52 +03:00
Manoj Basapathi
56920032ed sepolicy: CACert system AIDL sepolicy changes 
CRs-Fixed: 3643023
Change-Id: I6ae0b4bdbbd80558592885cd3118f65a7864e05b
 2023-10-18 12:22:24 +05:30
Rui Wang
e29c90737c sepolicy: add hexlp aidl service sepolicy. 
Change-Id: Ib7e8fb8b20614b1958f54e4142cb43dd20ed44ea
 2023-10-09 01:17:07 -07:00
Linux Build Service Account
eb13b9ec71 Merge 7cc766cc75 on remote branch 
Change-Id: Ibbfa3ab0bb68118a4cf43969f6221928a2aef0b6
 2023-09-01 16:29:27 -07:00
Roopesh Nataraja
4698670d6d sepolicy: Add rule to allow untrusted app to find qspm hal 
Add rule to allow unstrusted app to find qspm hal and be its client.

Change-Id: I53ba1309284dc130d673d1f2fb8f63db39927d5c
 2023-08-11 19:17:32 -07:00
Linux Build Service Account
43f59fc67b Merge 6652255a6c on remote branch 
Change-Id: I0ec1aa4482f190c219e83ba5bbe19579a92ac470
 2023-08-03 03:59:23 -07:00
Roopesh Nataraja
7cc766cc75 sepolicy: Add rule to allow untrusted app to find qspm hal 
Add rule to allow unstrusted app to find qspm hal and be its client.

Change-Id: I53ba1309284dc130d673d1f2fb8f63db39927d5c
 2023-07-31 15:58:15 -07:00
Linux Build Service Account
8d8f78a7a0 Merge " sepolicy: allow lmkd to access lru_gen node" into qvr-sys.lnx.13.0.r4-rel 2023-07-27 03:39:27 -07:00
Divyanand Rangu
67d89dcbc2 sepolicy: allow lmkd to access lru_gen node 
Allow lmkd to read lru_gen node for making decisions
based on MGLRU enablememnt.

Change-Id: I0fe819baa166f793f52a8fc45529daad9d22770c
 2023-07-27 03:17:12 -07:00
Manoj Basapathi
049af51e30 rkapdapp: sepolicy to write tcmd socket. 
- any app using OkHttp stack needs tcmd socket access privilege.

- rkpdapp uses OkHttp stack, so it needs tcmd socket
 access privilege.

Change-Id: I0260936964caa8274490af69514b2cac9ac491fd
 2023-07-27 03:15:27 -07:00
qctecmdr
6652255a6c Merge "rkapdapp: sepolicy to write tcmd socket." 2023-07-21 11:13:15 -07:00
Manoj Basapathi
6c28b8d4e9 rkapdapp: sepolicy to write tcmd socket. 
- any app using OkHttp stack needs tcmd socket access privilege.

- rkpdapp uses OkHttp stack, so it needs tcmd socket
 access privilege.

Change-Id: I0260936964caa8274490af69514b2cac9ac491fd
 2023-07-21 11:29:14 +05:30
Divyanand Rangu
00e3ac2928 sepolicy: allow lmkd to access lru_gen node 
Allow lmkd to read lru_gen node for making decisions
based on MGLRU enablememnt.

Change-Id: I0fe819baa166f793f52a8fc45529daad9d22770c
 2023-07-17 03:32:48 -07:00
Karra Harshitha
62a97e1b82 Adding sepolicy changes in attributes for qspa aidl 
Change-Id: I922ad9a30ad188a07a438c4b1698ff812ceedb8a
 2023-07-07 00:21:58 -07:00
Linux Build Service Account
f3c4cf864b Merge 0b9d71adfc on remote branch 
Change-Id: Ia612dd12647359bc4aa5317cf87e8b112deaa52f
 2023-06-29 06:42:52 -07:00
Linux Build Service Account
c266d0615d Merge 74e4e37701 on remote branch 
Change-Id: I1f3d23fd362263ef4b581fcd8c19687a4f08a59b
 2023-06-12 15:44:54 -07:00
Sandeep Gangadharaiah
0b9d71adfc sepolicy: Add perf_hal policy for mediaserver 
mediaserver service needs to access perf HAL APIs for boosting
performance during HEIF/thumbnails decoding. This change adds the
sepolicy to give permission access.

CRs-Fixed: 3499137

Change-Id: I8859de3af09b1ae592f543ce5531020bd20ec0e4
 2023-06-12 09:50:08 -07:00
Linux Build Service Account
a95156e510 Merge d70fdccf9a on remote branch 
Change-Id: I3225aa23fd24021313239390b350e6bb903389e7
 2023-06-07 18:32:59 -07:00
qctecmdr
74e4e37701 Merge "sepolicy: allow binder transactions from lmkd" 2023-06-02 14:01:41 -07:00
Divyanand Rangu
69bfdb8587 sepolicy: allow binder transactions from lmkd 
Change-Id: I1eb5b951600744c9af4b76ef59d462c44af867f0
 2023-06-01 12:34:38 +05:30
Samyak Jain
ae681add1c Add rules to allow to set property 
Change-Id: I56fac5f23a27a3a71ef700569cd9c9429785ff15
 2023-05-31 05:48:10 -07:00
qctecmdr
d70fdccf9a Merge "hwbinder permission for qti testscript for diag binary" 2023-05-25 06:06:21 -07:00
qctecmdr
3f9d81b184 Merge "Integrate PhoneLink 14-3 sepolicy change" 2023-05-19 10:19:52 -07:00
qctecmdr
2ac92009f1 Merge "Allow dumpstate to getattr on vendor_vm_qti_system_file" 2023-05-19 03:49:43 -07:00
qctecmdr
a6e4a4fc6f Merge "DpmService system sepolicy rules for tcm" 2023-05-18 05:26:45 -07:00
Karra Harshitha
1af866422d Allow dumpstate to getattr on vendor_vm_qti_system_file 
Change-Id: Ic34993db1e8886b9869d375a34dd7afe1788cd6d
 2023-05-18 00:46:10 -07:00
Manoj Basapathi
116ad64c2b DpmService system sepolicy rules for tcm 
Change-Id: I537849a84a991f4f9d322234b89d3b7485311a5b
 2023-05-17 17:12:09 +05:30