Commit Graph

116 Commits

Author SHA1 Message Date
KakatkarAkshay
029bb8b7f2 sm7250-common: sepolicy: Get rid of persist.vendor.bluetooth.a2dp. property context
Duplicate prefix match detected for 'persist.vendor.bluetooth.a2dp.'
2022-03-28 23:51:39 +05:30
LuK1337
947995ce82 sm7250-common: sepolicy: Allow camera to access vendor_xdsp_device
Change-Id: I59ee2b5a5f37690c2d55f8ee3acb0cdfb127e678
2022-03-28 23:51:39 +05:30
aswin7469
58cd1c84e1 sm7250-common: address denials for gcam
Signed-off-by: aswin7469 <aswinas@pixysos.com>
2022-03-28 23:51:39 +05:30
aswin7469
885bb9c7eb sm7250-common: allow nfc data to read write
Signed-off-by: aswin7469 <aswinas@pixysos.com>
2022-03-28 23:51:39 +05:30
KakatkarAkshay
f8329112dc Revert "sm7250-common: Enable color mode & set display calibration on color mode settings"
This reverts commit 84e9206b3a.
2022-03-28 23:51:39 +05:30
KakatkarAkshay
c39d21ce33 sm7250-common: Remove op1 and op2 partitions 2022-03-07 13:13:47 +00:00
Elektroschmock
4cd0ddca4b sm7250-common: sepolicy: Fix isolated_app denial
avc: denied { setattr } for comm="CrUtilityMain" name="commands.json" dev="mmcblk0p42" ino=1251111 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c153,c256,c512,c768 tclass=file permissive=0
avc: denied { setattr } for comm="CrUtilityMain" name="commands.json" dev="mmcblk0p42" ino=1251111 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c153,c256,c512,c768 tclass=file permissive=0
avc: denied { setattr } for comm="CrUtilityMain" name="f2" dev="mmcblk0p42" ino=1251128 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c153,c256,c512,c768 tclass=file permissive=0
avc: denied { setattr } for comm="CrUtilityMain" name="f2" dev="mmcblk0p42" ino=1251128 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c153,c256,c512,c768 tclass=file permissive=0
Change-Id: I9a70417149c3239b89cc4266942cb3de4da34a4f
2022-03-07 13:12:29 +00:00
KakatkarAkshay
1bd58ce14c sm7250-common: Address some camera denials 2022-03-07 13:12:29 +00:00
Omkar Chandorkar
35f19a5c38 sm7250-common: sepolicy: allow untrusted_app_29 to access camera prop
* fixes E/libc    (7181): Access denied finding property "persist.vendor.camera.privapp.list"

Signed-off-by: Omkar Chandorkar <gotenksIN@aosip.dev>
2022-03-07 13:12:29 +00:00
alk3pInjection
5403ccfd73 sm7250-common: label power_status 2022-02-12 13:21:43 +05:30
chandu078
2d9979e96c sm7250-common: sepolicy: address misc denials
Change-Id: I78f8f206c8697efddf08474f97e7df039b0d4363
2022-02-12 13:21:42 +05:30
alk3pInjection
f2ab8f8bbb sm7250-common: sepolicy: Resolve neverallows
Signed-off-by: alk3pInjection <webmaster@raspii.tech>
Change-Id: Id53185beac0757193d0fc68c76efcfe1279c335f
2022-02-12 13:21:42 +05:30
jhonboy121
580139f879 sm7250-common: sepolicy: address denials for fp hal
Change-Id: I69be81a37de6fca38659281ebca490292cb7bbaa
2022-02-12 13:21:42 +05:30
Inseob Kim
2fb1896b68 sm7250-common: sepolicy: Attach vendor_property_type to properties
We are going to enforce that each property has an explicit owner, such
as system, vendor, or product. This attaches vendor_property_type to
properties defined under vendor sepolicy directories.

Bug: 159097992
Test: m selinux_policy && boot device
Change-Id: Ibed833cd9e5d786e82985ded6bc62abdf8cd9ded
Merged-In: Ibed833cd9e5d786e82985ded6bc62abdf8cd9ded
(cherry picked from commit 44eb8e1f89adf04fd413a69391fd444ba68af742)
(cherry picked from commit 1922128397116d551a663d5344b4456a84bf46eb)
Signed-off-by: aswin7469 <aswinas@pixysos.com>
2022-02-12 13:21:42 +05:30
Akshay Kakatkar
7cafc897c8 sm7250-common: sepolicy: Comply with VTS vendor isolation 2022-01-05 11:00:41 +05:30
LuK1337
b542d1243b sm7250-common: Adjust for recent tri state key changes
tri-state-key package has been integrated into KeyHandler app, and
KeyHandler itself no longer needs to be added to lineage-sdk overlays.

Change-Id: I13b8f05e8e0b036c9303a01ec0c7e2d99b6756f7
2022-01-05 11:00:41 +05:30
TheScarastic
b7ee7e9a4e sm7250-common: Switch to udfps 2021-10-30 18:20:40 +02:00
Michael Bestas
c2b95ec33d sm7250-common: sepolicy: exported2_default_prop -> build_prop
Change-Id: I535b88b360d3bf6a4487086c15d90a2800667056
2021-10-18 18:20:58 +02:00
maitreya29
3cb351509c sm7250-common: SEPolicy: Get ro.gfx.driver.1 sepolicy in accordance to master 2021-10-18 18:20:58 +02:00
Chandra Chaganti
e60b2b84df sm7250-common: nuke livedisplay 2021-10-18 18:20:54 +02:00
Jake Weinstein
84e9206b3a sm7250-common: Enable color mode & set display calibration on color mode settings
* sRGB on Natural and Boosted
   Unmanaged on Saturated
   P3 on Automatic

 * Set color mode to Natural by default

 * Adjust display composition color spaces

Change-Id: If73eafa82395e80acf84445fcab2f1ce25a33e23
Signed-off-by: aswin7469 <aswinas@pixysos.com>
2021-10-10 15:55:40 +02:00
KakatkarAkshay
830a408488 sm7250-common: sepolicy: Fix some denials 2021-10-10 15:55:40 +02:00
KakatkarAkshay
044a1120f9 sm7250-common: sepolicy: Address NFC Denials
Change-Id: I67138bb9133d12703445cf3c3010c493eecda1b0
2021-10-10 15:55:38 +02:00
Chandra Chaganti
424e901ea2 sm7250-common: overlay: enable oem fast charge
Signed-off-by: chandra <chandra.chaganti@hotmail.com>
2021-10-10 15:55:37 +02:00
Bruno Martins
46020fe68b sm7250-common: sepolicy: Fix labelling of project_info
There seems to be a race condition somewhere that prevents
it to be properly labelled, so move to genfs.

Change-Id: Ie2d1deeb19a871eb0b9f5120a92432fda658d725
2021-09-26 09:22:28 +02:00
LuK1337
10aaf01d9d sm7250-common: Remove wlchgd
Nords don't have wireless charging

Change-Id: Ifdc76ca918c2e67affa54c3ce61558b65f98558c
2021-09-26 09:22:28 +02:00
LuK1337
7dd1345dc6 sm7250-common: sepolicy: Drop labels for all socket devices
These don't exist anymore.

Change-Id: I25e15cc3d2f68d00e4ab85ed955b014da727294b
2021-09-26 09:22:28 +02:00
LuK1337
909a5b20d6 sm7250-common: sepolicy: Remove u:object_r:memplus_device:s0 type
/dev/memplus doesn't exist anymore.

Change-Id: Ib0cf673039769465b50901db9a6575ab322d1095
2021-09-26 09:22:28 +02:00
LuK1337
bde9286ca3 sm7250-common: sepolicy: Regenerate labels for wakeup dirs
The list of folders for genfscon was generated using following script:
  for f in `adb shell "find /sys/devices -name wakeup -type d"`; do
      adb shell "ls -Z '$f' | grep -qv u:object_r:sysfs:s0 || echo '$f'"
  done

While list for regular file_contexts was just a simple grep "wakeup[0-9]".

Change-Id: I66abd501ce53b84e7268948d01d7b6c6c42cfbd1
2021-09-26 09:22:28 +02:00
LuK1337
01388d7ea8 sm7250-common: sepolicy: Remove procfs_oem_wireless type
SM7250 devices don't have /proc/wireless or /proc/skin_temp_thrd.

Change-Id: Ib3a67f7c508ab3aea0bee28866b7293c8a785739
2021-09-26 09:22:28 +02:00
Bruno Martins
e3e752c978 sm7250-common: sepolicy: Re-label health sysfs nodes
Change-Id: I648046582f54a254d61c6c76ec5747357bdeca59
2021-09-26 09:22:28 +02:00
KakatkarAkshay
5d1a5c70b0 sm7250-common: Remove PowerShare Sepolicy
None of the lito family of OnePlus devices has this feature.

Signed-off-by: KakatkarAkshay <akshayakakatkaraa@gmail.com>
2021-09-26 09:22:10 +02:00
KakatkarAkshay
f2f3e53131 sm7250-common: sepolicy: Fix build errors 2021-09-26 09:21:11 +02:00
LuK1337
a56ed01f90 sm7250-common: Add wifi mac generator shell script
Change-Id: I95593db840dc4a668f899d248b2c8e03d4ebbc3e
2021-09-26 09:20:40 +02:00
KakatkarAkshay
0386782fa7 sm7250-common: Fix haptics and health node path 2021-09-26 09:20:40 +02:00
LuK1337
43591c3713 sm8250-common: Switch to hardware/oneplus components
Change-Id: I26ba94eac5d7a0cdad07559afe55e6cabe2e161e
2021-09-20 15:05:35 +02:00
Bruno Martins
03e16e41d5 sm8250-common: sepolicy: Move tri-state-key labels to genfs_contexts
Change-Id: I072c2aaf5c9aae231c68bc9e55806eb59fa7f665
2021-06-02 11:42:54 +02:00
Hikari-no-Tenshi
756ac6b751 sm8250-common: fod: Remove no longer needed chown/chmod and sepolicy
Signed-off-by: Omkar Chandorkar <gotenksIN@aosip.dev>
Change-Id: Id7d6c7e1196db020673ea92f691d93ca3511dcf4
2021-05-18 16:52:03 +02:00
LuK1337
1dc5f1546b sm8250-common: sepolicy: Label op_charger
Health HAL wants to access it.

Change-Id: I07a8c11324c0a8b9bae6e7c027aa69df7ee5b7d1
2021-05-04 19:40:51 +02:00
LuK1337
de5498efab sm8250-common: livedisplay: Rip out IDisplayModes
We are now using AOSP-ish display modes implementation.

Change-Id: Iba9d570dd7cef116e18f3e327c8ab5f5e63f2697
2021-04-27 09:35:23 +02:00
LuK1337
7432867822 sm8250-common: livedisplay: Implement IAntiFlicker interface
Change-Id: I1dbc6d8989a80fe7b06d4356aeb717417997a793
2021-04-09 12:09:28 +02:00
LuK1337
335e820c4c sm8250-common: livedisplay: Uprev to 2.1
Change-Id: I98b2ea16ed342339ee652d5cb79dcfd22f8c0a0d
2021-04-09 12:09:28 +02:00
LuK1337
5ae4426e8f sm8250-common: sepolicy: Allow vendor_sensors to read project info
This is necessary so that SSC sensors HAL can
expose hw_id/project to sensor configs.

Change-Id: I9130ac5985c0924b01937ece15740d08e04d0bbf
2021-03-25 19:09:32 +01:00
LuK1337
c943073afe sm8250-common: sepolicy: Remove init.te
How did that end up here???

Change-Id: I4ec4382f84e2e5f66a6779b5f5920511e09d8d84
2021-03-21 15:49:17 +01:00
LuK1337
dfc13143a3 sm8250-common: sepolicy: Label OEM /data top-level directories
Fixes boot up after booting once in permissive mode,
alternatively that could be fixed by removing mkdir
instructions in *.rc but I'd rather add couple SELinux
lines than diverge from stock scripts.

Change-Id: I32e4461745c6738a6c7579e5e93481d4186972f2
2021-03-12 00:15:28 +01:00
LuK1337
b710ebaaf3 sm8250-common: sepolicy: Remove commented out rules
Change-Id: I026d7f6f0185773d5aa8a5e0f53b70323551f5cf
2021-02-19 15:57:10 +01:00
LuK1337
d1d109c825 sm8250-common: Bring in TOF sensor HAL
Change-Id: Ic5296a9ecf96f9a7fec5f523f9c59bfb68a0704f
2021-02-16 19:18:10 +01:00
Hikari-no-Tenshi
19525f89df sm8250-common: tri-state-key: Add hall sensor calibration support
Change-Id: I8449041eec5c8ab4153bd2942ebc7fda9ceb743e
2021-02-08 15:06:53 +01:00
LuK1337
2412a59d46 sm8250-common: tri-state-key: Relocate to /vendor
Change-Id: Ic70173b82ded0151e98fcfa4023b8a081cd67874
2021-02-08 14:59:28 +01:00
LuK1337
75c37b543c sm8250-common: sepolicy: Label ro.gfx.driver.1
Change-Id: I56ea28752ab8a1ef489adc7ab6547e86dfc220ca
2021-01-23 20:38:10 +01:00