Commit graph

15 commits

Author SHA1 Message Date
Monika Singh
c4f1af1eb4 sepolicy: Update rpmb device path and type
On 4.19 kernel, due to upstream commit <97548575be>
(mmc: block: Convert RPMB to a character device),
there is a change in RPMB path from "/dev/block/mmcblk0rpmb"
to “/dev/mmcblk0rpmb”. Also block device design for RPMB is
now changed to char device. This change updates RPMB path
and provides required permissions for qseecom to be able to
access new device design for RPMB eMMC device.

Change-Id: I7545b9b30b9b8f1c0fd8aacd38048516c2f86970
2020-03-27 11:46:14 +05:30
Linux Build Service Account
79373693d9 Merge "Adding Kill capability to perf hal service." into sepolicy.lnx.6.0 2020-03-11 19:00:38 -07:00
qctecmdr
2b83ce6044 Merge "sepolicy: add sepolicy label for charge_pump" 2020-03-10 20:35:04 -07:00
Sai Manobhiram
f0e173e226 Adding Kill capability to perf hal service.
Adding permission to kill only the app domain from vendor.
For lito, atoll, trinket.

Change-Id: Id9377a993ca847aaa830d53a330aabad1db3cd17
2020-03-04 15:21:59 +05:30
Ashay Jaiswal
7f8750cee4 sepolicy: add sepolicy label for charge_pump
Add sepolicy label to files exposed by charger_pump master and slave
devices.

Change-Id: Id70e39695444573638055f88734f0ae02df25a02
2020-03-02 09:21:26 +05:30
Santosh Mardi
b5e2cbdb28 sepolicy: give se policy permission to npu dcvs nodes
Give SE policy permission to npu dcvs nodes used to scale
DDR frequency based on traffic from npu->llcc and llcc->ddr.

Change-Id: Ib58f75a65b7979d58128a594769916ec25bf9082
2020-02-28 01:16:41 -08:00
Amritendu Biswas
553e906288 sepolicy for embms hal service
Allow embmssl hal to access unix_stream_socket,
Allow embmssl hal to access qipcrtr_socket

Change-Id: I84024db652dc839c9f07e46a620e7b9659da7297
2020-02-19 17:59:07 -08:00
qctecmdr
974a82ac78 Merge "sepolicy: Add vm block devices labeling" 2020-02-18 05:46:28 -08:00
P.Adarsh Reddy
36750295a6 lito: Assign subsys nodes file contexts in a dynamic way.
The subsystem name to subsys number mapping is not constant
and can change based on the order of probing OR incase a new
subsystem gets added.
To handle such cases, this change assigns the contexts in a
more dynamic way using regex within file-contexts file.

Change-Id: Ibc688f334381dffec2bf5419305fabcf2ecd72e6
2020-02-17 14:09:12 +05:30
David Ng
6fb17fefbf sepolicy: Add vm block devices labeling
Add VM (virtual machine) partition block devices and associated
firmware file labeling and handling policies.

Centralize update_engine_common.te under generic/vendor/common
as the content are all common at this time.

Change-Id: Iba8bf4150db861f97bc9b78b70683f73b6fa7607
2020-02-13 15:10:53 -08:00
P.Adarsh Reddy
ddc3f5001c Allow update engine to access to metadata_file.
With virtual-ab feature, update engine needs access
to metadata_file, allow the same.

Change-Id: Ia366da18517db28f4404f2605987e1b36906a83a
2020-01-23 19:56:47 +05:30
Jaihind Yadav
865b2f7060 sepolicy: adding vendor prefix to avoid naming colision
Change-Id: Ib403824c380696e1fca97ef744863a6e15000395
2020-01-14 20:31:42 +05:30
padarshr
858cca944b Add file contexts for few new partitions.
This adds file contexts to few new partitions so
that the ota update engine is allowed to do OTA
over them.

Change-Id: I0290b50a92a7a051a4b285a01b3b70d204be6b82
2019-12-31 16:58:54 +05:30
Paresh Purabhiya
bc21907762 lito : Enable ODM Partition on Lito
- Add odm specific policies for lito target

Change-Id: Icdb25b1351690c36edb353f2960c09448982fecb
2019-12-07 05:52:32 -08:00
Ravi Kumar Siddojigari
dadebbfcb7 sepolicy : move lito-sepolicy folder to generic from qva.
As change in lito sepolicy handling moving all the sepolicy
related to lito target to  generic folder .

Change-Id: Ib27e9cf90329f6931e79c750a2ab84614e5c2a6d
2019-10-30 12:24:44 +05:30