Commit Graph

49 Commits

Author SHA1 Message Date
pjgowtham
2ba9d31401 sepolicy: qti: Label ST21 NFC
Change-Id: I98a2db0aed52c227737db88d4f40809970368737
2023-02-22 01:17:25 +01:00
Albert Tang
5dd007e2a4 sepolicy: qti: Label vendor.oplus.hardware.cwb hwservice
Change-Id: Ida57e20d1f733398c3da8673b9c6dd537cbc9205
2023-02-22 01:17:25 +01:00
Albert Tang
6d5818a5e3 sepolicy: qti: Label new display and camera props
Change-Id: I4e410a65bc181d893f5118099af03ef764ccd6d4
2023-02-22 01:17:25 +01:00
LuK1337
969b0f8955 sepolicy: qti: Label vendor.oplus.hardware.cameraextension hwservice
Spotted on OOS 13.

Change-Id: I7ce474a3c8b5356a24d5b60b940a79a5a2d80aa4
2023-02-20 13:09:38 +01:00
Michael Bestas
9f048526d5 sepolicy: qti: Remove duplicate wakeup nodes
Needed after I026cd6930459262c31c401e57444cfe2b60357b7

Change-Id: I0522bafab2605b3d0ab5a147154b32fa9ee3ce37
2023-01-19 16:21:33 +01:00
LuK1337
15d4c81836 sepolicy: qti: Add selinux rules for ams-tof
Change-Id: I003da0e0286fc1e6db13fe5db63d710a5d90015f
2023-01-14 13:17:55 +01:00
Edwin Moquete
7a9d685192 sepolicy: qti: Label additional SM8250 wakeup nodes
Introduced in A13 kernel.

Change-Id: Ie2f567b47a79d8eeb9839d840fb4a08f271256bd
2022-12-22 19:45:34 +01:00
LuK1337
68e353f71e sepolicy: qti: Add rules for stmvl53l1 TOF sensor
Change-Id: I45714c6389c8c60904e0f1094bfb79f701832676
2022-12-21 20:39:55 +01:00
LuK1337
99cfe97b5c sepolicy: qti: Label opproduct partition
Change-Id: If0a3209b07ba2dbddc404be98620fc3cd5867294
2022-12-01 11:45:58 +01:00
AnierinB
cc3c3cbf70 sepolicy: qti: Allow kernel to read vendor_file
There are two ways for the kernel to load iris5.fw. The first way is
via fw_get_filesystem_firmware(), which read iris5.fw directly from the
filesystem using filp_read(). The second way gets FW via ueventd, which
calls request_firmware().

Because the kernel unconditionally calls fw_get_filesystem_firmware()
for iris5, the first way always gets executed. However, the current
sepolicy denies read access to iris5.fw for the kernel, causing this way
to never work. The second way is used only on ioctl(), which would
likely be sent from HWC. Unlike the first way, the second way *does*
work as-is, and since HWC is always started when booting into Android,
we don't have to worry about the first way being broken.

However, HWC doesn't run offline charging mode, so we have to rely on
the first way for that case. Unfortunately, since the first way is
broken, offline charging fails to work properly as a result. As such, we
need to fix that denial to make the first way work again.

Change-Id: Iba43afc5dba1c64d8ced9f374bbf9f0457db3c92
2022-11-21 22:39:29 +00:00
LuK1337
188897b04e sepolicy: qti: Label vendor.nxp.nxpese::INxpEse
Change-Id: I450939fb61d9808e9994c91b6133046112e61dc0
2022-10-24 17:47:18 +02:00
LuK1337
cb0fb344ee sepolicy: qti: Label init.oplus.wifi.sh
As seen on SM8150.

Change-Id: I5908f54d76ddb7a8abc82dfd80311b0eca02fc50
2022-10-22 10:53:45 +02:00
Omkar Chandorkar
2f78330e8b sepolicy: qti: Allow cnss-daemon to access bdwlan.bin
Change-Id: I96375359bf4be92849a7969c4dfa13e13886ff70
Signed-off-by: Omkar Chandorkar <gotenksIN@aospa.co>
2022-10-22 10:41:13 +02:00
Omkar Chandorkar
159cbb52a0 sepolicy: qti: Allow hal_sensors_default to access touchpanel
- required on SM8150

Change-Id: I47360407af4e70b60be27c1f9af46f6db3ce5a5d
Signed-off-by: Omkar Chandorkar <gotenksIN@aospa.co>
2022-10-22 10:15:11 +02:00
Omkar Chandorkar
6c68312124 sepolicy: qti: Label oem_dycnvbk
- As seen on SM8150.

Change-Id: Ia12d1c3789aff80795dd026c7401f2e01f10134f
Signed-off-by: Omkar Chandorkar <gotenksIN@aospa.co>
2022-10-22 12:03:01 +05:30
LuK1337
a746fb97aa sepolicy: qti: Expose vendor_persist_engineer_file
This is necessary for camera_helper_app rules.

Change-Id: I2e675f21bc600e31334f35041de2be182f788b1d
2022-10-11 19:57:11 +02:00
LuK1337
c91027dc05 sepolicy: qti: Label vendor.oplus.hardware.cameraMDM@2.0-service
As seen on SM8150.

Change-Id: I92217d6a588bc8920aa2de048a3dca085cf7f1fe
2022-10-11 19:57:10 +02:00
LuK1337
e4a06d1d09 sepolicy: qti: Allow audio/sensors to handle ultrasound prox
Change-Id: I0c93de7578086ac97eb1ff3110c2bac6afba19c4
2022-10-11 19:57:10 +02:00
LuK1337
d25dfa3834 sepolicy: qti: Add rules for nxpnq330 NFC implementation
As seen on SM8150.

Change-Id: Id73e3ab1abd432d04dcfcc1d101d2a5985de2da0
2022-10-11 19:57:06 +02:00
LuK1337
8b0a3acf45 sepolicy: qti: Label {LOGO,oem_stanvbk} partitions
As seen on SM8150.

Change-Id: Ibd4ac7106de6e03dc24e88df945424525bb5c53c
2022-10-11 19:55:24 +02:00
LuK1337
009684123e sepolicy: qti: Label SM8150 vibrator sysfs path
Change-Id: I80836911f8b15fed6742b69e4ebe307bbdb796f2
2022-10-11 19:55:23 +02:00
LuK1337
f2de507d76 sepolicy: qti: Label SM8150 wakeup nodes
for i in $(realpath /sys/class/wakeup/*); do if ! echo "$(ls -dZ $i)" | grep -q sysfs_wakeup; then echo genfscon sysfs $(echo $i | sed -e 's|/sys||g' -e 's|wakeup/wakeup.|wakeup|g' -e 's|wakeup[0-9]*|wakeup|g') u:object_r:sysfs_wakeup:s0; fi; done | sort -u

Change-Id: I5473d60b40686d0085f291f46d882cac0390ff3d
2022-10-11 19:55:22 +02:00
AnierinB
dff14c8992 sepolicy: qti: Add rules for wlchgmonitor
Change-Id: I0f85df93f89d4fb95239656490b2f8af6f2b6737
2022-10-04 20:01:09 +02:00
LuK1337
082d65f8c4 sepolicy: qti: Move te_macros to public
This lets us use it everywhere.

Change-Id: I9ee699cdefd5fcfd1154fa927425f987ed148aaf
2022-10-03 20:30:38 +02:00
Alexander Koskovich
0c4f6712ac sepolicy: qti: Add policy for AOSP SNXXX NFC
Change-Id: I0c5130ea0f81d1234aef369f6e58088181d0e8d3
2022-09-13 16:09:40 +02:00
Alexander Koskovich
c14387697d sepolicy: qti: Label oplus.camera.* for camera HAL
Change-Id: I2bea6acf9c93012f2af2e0bdc2ef77bad585d97d
2022-07-23 09:31:53 -07:00
Alexander Koskovich
ae6f570b87 sepolicy: qti: Let sscrpcd read & write to vendor_proc_eng_cali_file
Change-Id: I13bea2d591e3e010e5502e66dbd77380c3ae0433
2022-07-23 06:03:51 -07:00
Alexander Koskovich
ff1c96933a sepolicy: qti: Let camera HAL set vendor.camera.vm.parameters
Change-Id: Iced8bead0eee6bfbf30d37ace74eed46353f5b98
2022-07-21 09:01:12 -07:00
Alexander Koskovich
e05dbba7ca sepolicy: qti: Add policy for ICameraExtensionService
Change-Id: If8b6e605c0ff16b43a18c23819c95769b951f677
2022-07-21 09:00:32 -07:00
Alexander Koskovich
8dc75317d7 sepolicy: qti: Add GetClientAppInfo QTEE vndservice
Change-Id: If36ed9b365d6b8bb570ebc610eb413dac2e18eed
2022-07-21 08:59:00 -07:00
LuK1337
cf5e10f923 sepolicy: qti: Label oneplus_wlchg wakeup nodes
Change-Id: I9839c23d2f80874bda56e79b2a587ec7912cdb51
2022-07-16 11:27:17 +02:00
LuK1337
7b65e6e8d9 livedisplay: Migrate to ioctl()
Change-Id: I2039c94eb3239f2d88ab67076b52f58493d9b43e
2022-07-11 11:52:45 -07:00
Alexander Koskovich
c258d12fcc sepolicy: qti: Let camera HAL read from /proc/meminfo
Change-Id: Iccf62886f49be86137eba48c16c01b20e7c6284b
2022-07-11 09:35:09 +02:00
Alexander Koskovich
e3a6197dd8 sepolicy: qti: Label libipebpsstriping so we can pin it
Change-Id: I957ae46f3c99d22aba253205a70cf878cce9319d
2022-07-11 09:35:09 +02:00
Alexander Koskovich
c49638d219 sepolicy: qti: Label all 4 oplusreserve partitions
Change-Id: I595393f5bac2344e06910c94bd701aacc7300a89
2022-07-11 09:35:09 +02:00
Alexander Koskovich
675aef4837 sepolicy: qti: Add some properties wanted by RMT storage
Change-Id: Ie354fd5a07e3673bcd5dcb4e067af55f20ba45a1
2022-07-11 09:35:09 +02:00
LuK1337
74c4300652 sepolicy: qti: Add rules for vendor.oplus.hardware.oplusSensor
Change-Id: I3f51f2586e0af11749bd2cdb5a744b7b2fcb283d
2022-07-11 09:35:09 +02:00
LuK1337
6f35c7a779 sepolicy: qti: Introduce rw_dir_file() macro and use wherever possible
Change-Id: Iec8a7f18c75a994032792421172fea92e9595af6
2022-07-11 09:35:09 +02:00
LuK1337
67c51391b7 sepolicy: qti: Allow fastbootd to write to logo, spunvm, and storsec
Change-Id: Idfaee7740b56de523fbe73606ab09102b7bcd80c
2022-07-11 09:35:09 +02:00
LuK1337
e20099c05f sepolicy: qti: Label SM8250 charging sysfs path
Change-Id: I3662e118e1b401d97c8450ae6b3c95442dfef625
2022-07-11 09:35:09 +02:00
LuK1337
41ac9d7d73 sepolicy: qti: Label SM8250 vibrator sysfs paths
Change-Id: Icb13e32b4b72e734c7252e5b31b856f9ece4dd98
2022-07-11 09:35:09 +02:00
LuK1337
73b6c06adf sepolicy: qti: Allow sensors to access ssc_interactive & soc:sensor_fc
Change-Id: I75b740b8fba66615b08f791a43e476042e19a0f6
2022-07-11 09:35:09 +02:00
LuK1337
7fab01bf61 sepolicy: qti: Allow rild to set vendor.gsm.{phoneserial,serial}
Change-Id: Ic976ca785ca04aa2ed9ca3f5e6b109adcaad4ed0
2022-07-11 09:35:09 +02:00
LuK1337
157325442b sepolicy: qti: Add label and rules for MDM modem
Change-Id: I4035e1a8ca305642bb8f852f4f4af86558530729
2022-07-11 09:35:09 +02:00
LuK1337
17d82b5a99 sepolicy: qti: Label SM8250 wakeup nodes
for i in $(realpath /sys/class/wakeup/*); do if ! echo "$(ls -dZ $i)" | grep -q sysfs_wakeup; then echo genfscon sysfs $(echo $i | sed -e 's|/sys||g' -e 's|wakeup/wakeup.|wakeup|g' -e 's|wakeup[0-9]*|wakeup|g') u:object_r:sysfs_wakeup:s0; fi; done | sort -u

Change-Id: Id70f4e725f8925b31c0007fae5eb98756ddcd410
2022-07-11 09:35:09 +02:00
Alexander Koskovich
c4db837788 sepolicy: qti: Allow vendor_init to update display panel firmware
Change-Id: Iba517b59fe2856ed6f991c07e0362b1be203af45
2022-07-11 09:35:09 +02:00
Alexander Koskovich
df6558746e sepolicy: qti: Label some logging properties
Change-Id: I40531f4fce77290b42068669274ea1c20280d982
2022-07-11 09:35:09 +02:00
Alexander Koskovich
31ddd0f1ea sepolicy: qti: Allow update engine to flash oplusstanvbk
* Needed when payload.bin contains oplusstanvbk.

Change-Id: I5139aff2b0152790e1ebf8c598fc99c0f00fd21d
2022-07-11 09:35:09 +02:00
Alexander Koskovich
eb50d7c01c Add initial QTI SEPolicy for Oplus
Change-Id: Ib06cada5e7031d1f95976bf48a6a8475a835c9a4
2022-07-11 09:35:09 +02:00