tequilaOS/platform_device_tequila_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Compare commits

base: tequilaOS:cda1a13f8045eb47849c2a790b68ee8817071b2c
Branches Tags
tequilaOS:staging/volcan
...
compare: tequilaOS:c9c313fa0af178a4036b3e95064cccee90625f81
Branches Tags
tequilaOS:staging/volcan

10 commits
cda1a13f80 ... c9c313fa0a

Author SHA1 Message Date
Bartłomiej Rudecki
c9c313fa0a sepolicy: tequila 2024-09-05 19:49:14 +00:00
Han Sol Jin
2275b987de common: add legacy vibrator AIDL 
Change-Id: I9e54b3b70237d1e7427e45ad9dc47a0394cd82ab
 2024-08-24 09:20:34 +00:00
Cosmin Tanislav
26d1da8bee sepolicy: label default powershare implementation 
Change-Id: I9c91746247fdd0aeaa85690da9d0eeb409c5951c
 2024-08-22 15:00:39 +00:00
Bruno Martins
07ab1b9ad3 lineage: Label batteryless custom health aidl service 
Change-Id: I016608b158c6e4ca52431fd6771d9e5f16a10b88
 2024-07-27 09:25:29 +01:00
Nolen Johnson
1a7689a6cc common: private: Label mirroring disablement property 
Change-Id: I164fb03a13661b92659525e2d00b5ee036124e37
 2024-07-12 12:23:23 -04:00
Sebastiano Barezzi
a17dc7f67e sepolicy: Add rules for radio wrapper 
Change-Id: I3f9daf13c79e0b03b994920e9b2e9efffcc5cc20
 2024-06-05 18:26:33 +00:00
Michael Bestas
2be3f5c341
Remove legacy sepolicy leftover 
Change-Id: I2913565cc402b29acd380015b049ccf8d4e9959d
 2024-05-30 22:25:23 +03:00
Bruno Martins
b111da1c7c qcom: Use AOSP's proc_sched def 
Change-Id: I7899270c601263c7c0a765571932f235459ad599
 2024-05-18 10:45:23 +00:00
Bruno Martins
0afbffaae9 common: Delete labels of legacy GNSS and Wi-Fi service HALs 
These HALs no longer exist.

Change-Id: I5e8f7fdff14f8e876af0ffeb738f1633eba74fe9
 2024-05-18 08:55:25 +00:00
Michael Bestas
62ba073f01
common: Sort alphabetically 
Change-Id: I1d26ee924f626310c60976887123ef170c36fbaf
 2024-05-18 07:47:27 +03:00
16 changed files with 43 additions and 37 deletions
Show stats Expand all files Collapse all files

4
atv/sepolicy.mk
View file

@ -5,8 +5,8 @@
ifneq ($(TARGET_USES_PREBUILT_VENDOR_SEPOLICY), true)
BOARD_SEPOLICY_DIRS += \
device/lineage/sepolicy/atv/vendor
device/tequila/sepolicy/atv/vendor
endif
PRODUCT_PRIVATE_SEPOLICY_DIRS += \
device/lineage/sepolicy/atv/private
device/tequila/sepolicy/atv/private

2
common/private/file_contexts
View file

@ -5,7 +5,7 @@
/system/bin/mkfs\.ntfs u:object_r:mkfs_exec:s0
# OTA packages
/data/lineageos_updates(/.*)? u:object_r:ota_package_file:s0
/data/tequila_updates(/.*)? u:object_r:ota_package_file:s0
# Postinstall
/system/bin/backuptool_ab\.functions u:object_r:otapreopt_chroot_exec:s0

2
common/private/keys.conf
View file

@ -1,2 +1,2 @@
[@MEDIASHELL]
ALL : device/lineage/sepolicy/common/private/certs/mediashell/mediashell-release.x509.pem
ALL : device/tequila/sepolicy/common/private/certs/mediashell/mediashell-release.x509.pem

3
common/private/property_contexts
View file

@ -16,3 +16,6 @@ persist.vendor.recovery_update u:object_r:recovery_update_prop:s0
# xtra-daemon control
persist.sys.xtra-daemon.enabled u:object_r:xtra_control_prop:s0 exact bool
# Screen mirroring disablement
persist.sysui.disable_mirroring_confirmation_dialog u:object_r:hdmi_config_prop:s0

17
common/sepolicy.mk
View file

@ -10,25 +10,22 @@ endif
endif
SYSTEM_EXT_PUBLIC_SEPOLICY_DIRS += \
device/lineage/sepolicy/common/public
device/tequila/sepolicy/common/public
SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += \
device/lineage/sepolicy/common/private
device/tequila/sepolicy/common/private
ifeq ($(TARGET_USES_PREBUILT_VENDOR_SEPOLICY), true)
SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += \
device/lineage/sepolicy/common/dynamic \
device/lineage/sepolicy/common/system
device/tequila/sepolicy/common/dynamic \
device/tequila/sepolicy/common/system
else
BOARD_VENDOR_SEPOLICY_DIRS += \
device/lineage/sepolicy/common/dynamic \
device/lineage/sepolicy/common/vendor
device/tequila/sepolicy/common/dynamic \
device/tequila/sepolicy/common/vendor
endif
# Selectively include legacy rules defined by the products
-include device/lineage/sepolicy/legacy-common/sepolicy.mk
# Include atv rules on atv product
ifeq ($(PRODUCT_IS_ATV), true)
include device/lineage/sepolicy/atv/sepolicy.mk
include device/tequila/sepolicy/atv/sepolicy.mk
endif

20
common/vendor/file_contexts vendored
View file

@ -1,10 +1,8 @@
# Fingerprint HAL
/(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.0-service u:object_r:hal_fingerprint_default_exec:s0
# GNSS HAL
/(vendor|system/vendor)/bin/hw/android\.hardware\.gnss@1\.0-service\.legacy u:object_r:hal_gnss_default_exec:s0
# Health HAL
/(vendor|system/vendor)/bin/hw/android\.hardware\.health-service\.batteryless u:object_r:hal_health_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.lineage\.health-service\.default u:object_r:hal_lineage_health_default_exec:s0
# Light HAL
@ -13,12 +11,18 @@
# LiveDisplay HAL
/(vendor|system/vendor)/bin/hw/vendor\.lineage\.livedisplay@2\.0-service-sysfs u:object_r:hal_lineage_livedisplay_sysfs_exec:s0
# RadioConfig HAL
/(vendor|system/vendor)/bin/hw/android\.hardware\.radio\.config@1\.1-service\.wrapper u:object_r:hal_radio_config_default_exec:s0
# Power HAL
/(vendor|system/vendor)/bin/hw/android\.hardware\.power-service\.lineage-libperfmgr u:object_r:hal_power_default_exec:s0
# PowerShare HAL
/(vendor|system/vendor)/bin/hw/vendor\.lineage\.powershare@1.0-service\.default u:object_r:hal_lineage_powershare_default_exec:s0
# Radio HAL
/(vendor|system/vendor)/bin/hw/android\.hardware\.radio@1\.4-service\.legacy u:object_r:hal_radio_default_exec:s0
# RadioConfig HAL
/(vendor|system/vendor)/bin/hw/android\.hardware\.radio\.config@1\.1-service\.wrapper u:object_r:hal_radio_config_default_exec:s0
# USB HAL
/(vendor|system/vendor)/bin/hw/android\.hardware\.usb@1\.3-service\.basic u:object_r:hal_usb_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.usb@1\.1-service\.typec u:object_r:hal_usb_default_exec:s0
@ -26,6 +30,4 @@
# Vibrator HAL
/(vendor|system/vendor)/bin/hw/android\.hardware\.vibrator@1\.0-service\.lineage u:object_r:hal_vibrator_default_exec:s0
# Wi-Fi HAL
/(vendor|system/vendor)/bin/hw/android\.hardware\.wifi@1\.0-service\.legacy u:object_r:hal_wifi_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.vibrator-service\.legacy u:object_r:hal_vibrator_default_exec:s0

1
common/vendor/hal_radio_default.te vendored Normal file
View file

@ -0,0 +1 @@
allow hal_radio_default hal_lineage_backend_radio_hwservice:hwservice_manager find;

2
common/vendor/hwservice.te vendored
View file

@ -1 +1,3 @@
type hal_lineage_backend_radio_hwservice, hwservice_manager_type;
type hal_lineage_backend_radio_config_hwservice, hwservice_manager_type;

1
common/vendor/hwservice_contexts vendored
View file

@ -1,2 +1,3 @@
# The following hwservices are supposed to be registered by blobs through hexedit; Keep string length the same.
lineage.hardware.radio::IRadio u:object_r:hal_lineage_backend_radio_hwservice:s0
lineage.hardware.radio.config::IRadioConfig u:object_r:hal_lineage_backend_radio_config_hwservice:s0

1
common/vendor/rild.te vendored
View file

@ -1 +1,2 @@
add_hwservice(rild, hal_lineage_backend_radio_hwservice)
add_hwservice(rild, hal_lineage_backend_radio_config_hwservice)

10
exynos/sepolicy.mk
View file

@ -10,14 +10,14 @@ endif
endif
SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += \
device/lineage/sepolicy/exynos/private
device/tequila/sepolicy/exynos/private
ifeq ($(TARGET_USES_PREBUILT_VENDOR_SEPOLICY), true)
SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += \
device/lineage/sepolicy/exynos/dynamic \
device/lineage/sepolicy/exynos/system
device/tequila/sepolicy/exynos/dynamic \
device/tequila/sepolicy/exynos/system
else
BOARD_VENDOR_SEPOLICY_DIRS += \
device/lineage/sepolicy/exynos/dynamic \
device/lineage/sepolicy/exynos/vendor
device/tequila/sepolicy/exynos/dynamic \
device/tequila/sepolicy/exynos/vendor
endif

2
libperfmgr/sepolicy.mk
View file

@ -1,2 +1,2 @@
BOARD_VENDOR_SEPOLICY_DIRS += \
device/lineage/sepolicy/libperfmgr/vendor
device/tequila/sepolicy/libperfmgr/vendor

10
qcom/sepolicy.mk
View file

@ -10,16 +10,16 @@ endif
endif
SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += \
device/lineage/sepolicy/qcom/private
device/tequila/sepolicy/qcom/private
ifeq ($(TARGET_USES_PREBUILT_VENDOR_SEPOLICY), true)
SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += \
device/lineage/sepolicy/qcom/dynamic \
device/lineage/sepolicy/qcom/system
device/tequila/sepolicy/qcom/dynamic \
device/tequila/sepolicy/qcom/system
else
BOARD_VENDOR_SEPOLICY_DIRS += \
device/lineage/sepolicy/qcom/dynamic \
device/lineage/sepolicy/qcom/vendor
device/tequila/sepolicy/qcom/dynamic \
device/tequila/sepolicy/qcom/vendor
endif
ifeq (,$(filter msm8937 msm8953 msm8996 msm8998 sdm660 sdm710 sdm845, $(TARGET_BOARD_PLATFORM)))

1
qcom/vendor/file.te vendored
View file

@ -1,2 +1 @@
type proc_sched_energy_aware, proc_type, fs_type;
type sysfs_socinfo_sensitive, fs_type, sysfs_type;

2
qcom/vendor/genfs_contexts vendored
View file

@ -1,2 +1,2 @@
genfscon proc /sys/kernel/sched_energy_aware u:object_r:proc_sched_energy_aware:s0
genfscon proc /sys/kernel/sched_energy_aware u:object_r:proc_sched:s0
genfscon sysfs /devices/soc0/serial_number u:object_r:sysfs_socinfo_sensitive:s0

2
qcom/vendor/hal_power_default.te vendored
View file

@ -1,5 +1,5 @@
# To do powerhint on nodes defined in powerhint.json
rw_dir_file(hal_power_default, proc_sched_energy_aware)
rw_dir_file(hal_power_default, proc_sched)
rw_dir_file(hal_power_default, sysfs_devfreq)
rw_dir_file(hal_power_default, sysfs_graphics)
rw_dir_file(hal_power_default, sysfs_kgsl)