aboutsummaryrefslogtreecommitdiff
path: root/sepolicy/file_contexts (follow)
Commit message (Collapse)AuthorAge
* msm8996-common: sepolicy: Move sepolicy to vendor sepolicyDavide Garberi2021-10-19
| | | | Change-Id: If6e24a7bfc3cc866e3d3f442990aec03f8827c35
* msm8996-common: sepolicy: Allow creating acdbdata delta filesBruno Martins2021-10-19
| | | | Change-Id: Ia80078dcb85930373c27de4248f043088d140c81
* msm8996-common: sepolicy: Label /persistLuK13372021-10-19
| | | | Change-Id: I471c0d1fedb51eabc32b54ab35a9823db8efd034
* msm8996-common: sepolicy: Label widevine 1.1 HALDavide Garberi2020-01-25
| | | | Change-Id: I43176dd76a1491bf9108207552cfb0e80658547a
* msm8996-common: sepolicy: Remove vendor policy for input files.Tri Vo2019-11-05
| | | | | | Bug: 112880217 Test: device boots without denials to input files Change-Id: I48686c6828bdf99efaabff39c4afb22b0dd8b38b
* msm8996-common: sepolicy: add firmware labelsVolodymyr Zhdanov2019-11-05
| | | | | | * Q sepolicy doesn't have labels for these root folders anymore Change-Id: Ibc1f13968eb4de0868de149f1347ca07da1c581c
* msm8996-common: Remove wcg_mac_toolDavide Garberi2019-05-16
| | | | | | | * Turns out we don't actually need to use this as /proc/mac_wifi and mac_bt can turn into normal mac address values just with hex dumping * Remove bt_mac_prop as we can just set the mac path in vendor_prop.mk Change-Id: I23665cdd5d39d5e090694cff5a63f55ecb9ea334
* msm8996-common: Correct BT mac address with non zui blobsDavide Garberi2019-05-15
| | | | Change-Id: Ibc6eed2018314e79f3f18749cedd9852c82a8a66
* msm8996-common: sepolicy: bluetooth: Adding permission for rfkill failureRajshekar Eashwarappa2019-05-11
| | | | | | | | - Create label for RFKILL node and add sepolicy for its access. Change-Id: Id16dce0818aa1f6233b75f35344b4eca9259c7b1 Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: pocketmode: Allow control over PocketMode serviceBruno Martins2019-05-10
| | | | | | | | | | | | | | | | * Once the service is running, proximity sensor is constantly active when the display is turned off, resulting into a residual increase in battery consumption. Add a toggle so that users can decide whether they accept that and prefer to prevent accidental wake-ups triggered by the fingerprint sensor. * Keep the receiver that listens for the screen status registered only if the fingerprint wake-up feature is enabled at the same time as the accidental wake-up prevention feature. * Set PocketMode as a required module of ConfigPanel, to make sure it is only shipped on devices building the latter. * The configpanel part is integrated in b07a633bdeda835867aa3dc5a033529d7bd712dc Change-Id: Icfa23d2aef971e368476b6f1f7612493c2b69a20
* msm8996-common: sepolicy: CleanupDavide Garberi2019-05-02
| | | | | | | | * Add back the fstab contexts to prevent some vfat denials * Remove a lot of not needed addresses * Create a domain for double tap to wake to not let the powerhal access all the sysfs files Change-Id: I44dfc5e9903eb562748215541f2d71f9a3d111d7
* msm8996-common: sepolicy: CleanupDavide Garberi2019-03-03
| | | | | | | | | | * genfs_context cleanup after b5b41d341dd744c40d3908550daaafcee6fe7b4b in which it has randomly been imported from Marlin * Slightly cleanup indentation * Remove a lot of domains which were being used in genfs_context as most of it is already labelled differently in qcom common sepolicy and already addressed * Remove violators where not needed * Remove some old properties we're not using anymore Change-Id: Ic72853dfaf71ba3f0596e75d1bdd5b5c93cd70be
* msm8996-common: Set the hardware wlan mac using wcg_mac_toolDavide Garberi2019-03-02
| | | | | | | | | * Bin extracted from ZUI * Add init.wlan.sh to check if the mac address in wlan_mac.bin is already correct, if not correct it * Run both the bins on boot completed as wcg can't run earlier * Label both the bins and address their denials Change-Id: I7a8001465ec9c3d69bd228efa57dddfdd8e3c6f3
* msm8996-common: Remove readmacDavide Garberi2019-03-02
| | | | | | * We don't need this anymore, no random mac because the real hardware wlan mac works now Change-Id: I13f85f4eb438b2230408d5bad1c694b2cd39a25b
* msm8996-common: Replace KeyDisabler class with Touch HALBruno Martins2019-02-11
| | | | | Change-Id: I7b87ae0ad834ba02a78696afe393d9d4f8920fbd Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: sepolicy: Label custom camera socketsMichael Bestas2019-02-06
| | | | | | | | | * Normal path is /data/vendor/camera, defined in device/qcom/sepolicy * We have hex edited 6.0 blobs from /data/misc/camera to /data/vendor/qcam because of the new path string being longer than the old one Signed-off-by: Davide Garberi <dade.garberi@gmail.com> Change-Id: Ib96191dd55aea0c20c58a16bf1a91a46f07367e6
* msm8996-common: sepolicy: Nuke the neverallowsDavide Garberi2019-02-06
| | | | | | | * Also fix other general sepolicy errors after stopping to ignore the neverallows Change-Id: I1af3d9f57a0ca6e37420094a53f1c52127f3e187 Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: Rename Widevine HIDL service to v1.1.Edwin Wong2018-11-20
| | | | | | | | | | | | | | | Widevine HIDL service added new v1.1 media APIs, the service version is updated to 1.1. Test: Netflix and Play Movies & TV (streaming and offline playback) Test: GTS WidevineH264PlaybackTests test e.g. ANDROID_BUILD_TOP= ./android-gts/toolsefed run gts -m GtsMediaTestCases --test com.google.android.media.gts.WidevineH264PlaybackTests#testL1With480P30 bug: 69674645 Change-Id: I7b8966c5fe2c2ded4a86b4358511548426de76dc Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: Add pocketmode appfluxi2018-10-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: I71e47d5f203adb7e28d37447e19a8041a1d02840 msm8996-common: PocketMode: Apply LineageOS rebrand Change-Id: I1de627062f56bd125f430033e8bb7aad8fe48f69 msm8996-common: pocketmode: Bump sdk version Change-Id: Ic521e380868bdc886e15c6a8a472564a98dbc094 msm8996-common: PocketMode: Explicitly include Android support libs * Fixes non-jack build Change-Id: I9d8346193577c7be218e12efb20f52ca9946eb14 msm8996-common: PocketMode: Properly depend on Lineage SDK * This is actually the proper library to include (only spotted while buidling with Jack disabled, because app compilation was failing). Change-Id: Ib61f93704c6411a4cb1f91d9e8693a1775934037 msm8996-common: PocketMode: Remove useless cast Change-Id: I655b0b80ccafdaae422a2464d2b8409f70be0e8c msm8996-common: Adapt to Zuk Change-Id: I9050faac37de0a8392b31fed5c3562d4553c546f msm8996-common: Set LOCAL_SDK_VERSION where possible. This change sets LOCAL_SDK_VERSION for all packages where this is possible without breaking the build, and LOCAL_PRIVATE_PLATFORM_APIS := true otherwise. Setting one of these two will be made required soon, and this is a change in preparation for that. Not setting LOCAL_SDK_VERSION makes the app implicitly depend on the bootclasspath, which is often not required. This change effectively makes depending on private apis opt-in rather than opt-out. Test: make relevant packages Bug: 73535841 Change-Id: Ic906adbd670c4dbfe2cdf0b71cdbeaf9ac08a27e msm8996-common: sepolicy: Address a fingerprint denial Change-Id: I07c75d58357f7eea2dcc68ed80dacbab76bb30f5 Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: file_contexts: Label light service correctlyDavide Garberi2018-09-25
| | | | | Change-Id: Ia4fa68909a710a904bd796ab53d486b81ee2238a Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: file_contexts: Label zuk's fingerprint integrationDavide Garberi2018-09-25
| | | | | Change-Id: I1cf339887cedf3ff5bf9a01160f1acc56da5eb93 Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: sepolicy: label old cne data fileDemon Singur2018-09-25
| | | | Change-Id: Id4b05f402da939a3add6be254666132744133c20
* Revert "msm8996: Build HVX neuralnetworks HAL"Cosme Domínguez Díaz2018-07-28
| | | | This reverts commit 5a1c5d7094cf0c00f4bbca7390fee11ef9293366.
* msm8996-common: More SELinux fixes...Cosme Domínguez Díaz2018-05-06
|
* msm8996-common: sepolicy: CleanupCosme Domínguez Díaz2018-05-02
|
* msm8996-common: Remove context for /factory.Cosme Domínguez Díaz2018-04-13
|
* msm8996: Build HVX neuralnetworks HALRashed Abdel-Tawab2018-04-07
| | | | Change-Id: I6dfc2f82393f23e3f11bc813057c9446985d1968
* msm8996-common: sepolicy: Add context for our vendor partition.Cosme Domínguez Díaz2018-04-07
|
* label persist partition and grant e2fsck accessJeff Vander Stoep2018-03-29
| | | | | | | | | | persist partition is mounted rw so it should be checked for errors. Bug: 63874026 Test: build and flash, verify persist is correctly labeled and no denials in the log. Change-Id: I9bb57b5ed20bda0f6937d506bf9b9630365abd87
* msm8996-common: sepolicy: Remove /system/vendor paths.Cosme Domínguez Díaz2018-03-29
|
* msm8996-common: Grant system_server access to idc and keylayot dirsAlex Klyubin2018-03-23
| | | | | | | | | | | | | | | system_server is configured to access idc and keylayout files in /vendor/usr/idc and /vendor/usr/keylayout. This explicitly grants this access to system_server, instead of relying on overly broad access granted by hal_client_domain(system_server, ...) macros which is no longer going to grant this overly broad access soon. Test: Modify hal_client_domain to no longer associate hal_x_client with hal_x, observe that there are no violations form system_server trying to read /vendor/usr/idc and /vendor/usr/keylayouts. Bug: 37160141 Change-Id: I136df8713f2f9ff03096e5f6cf35e3e804733040
* msm8996-common: Initial work to enable full treble.Cosme Domínguez Díaz2018-03-22
| | | | | * Remove never-allow rules and enable SELinux permissive for now. * Enable PRODUCT_FULL_TREBLE_OVERRIDE.
* msm8996-common: sepolicy: add file_contexts policy for tfa9890Cosme Domínguez Díaz2018-02-20
|
* msm8996-common: Deprecate system/vendor completelyDavide Garberi2018-02-04
| | | | Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: Convert lights HAL into a native binderized HALBruno Martins2018-01-25
| | | | | Change-Id: If41458e22b9a67a5c2a415571723917df1904aa1 Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: wifi: Move readmac to vendordavidevinavil2018-01-23
| | | | | Change-Id: I6a370dfcf3346104880eaacfee6a5368d45a7dd7 Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: sepolicy: Relabel time_data_fileDavide Garberi2018-01-20
| | | | | | | * After https://review.lineageos.org/c/199554/ the timeservice just doesn't do its work for us (even if that patch should make it work with both data/time and data/vendor/time) and the time at boot is wrong * This commit fixes the wrong time when the phone is booted without connection Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: file_contexts: CleanupDavide Garberi2018-01-08
| | | | | | * Basically remove some uneeded things from sepolicy Oreo bringup and from the initial device tree bringup Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996: Update audio from LA.UM.6.5.r1-02500-8x96.0 [2/2]Davide Garberi2018-01-08
| | | | Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996: Update DRM and QSEE from LA.UM.6.5.r1-02500-8x96.0 [2/2]Davide Garberi2018-01-08
| | | | Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996: selinux: label wcnss_filter and fix denialcodeworkx2018-01-07
| | | | | Change-Id: Ic41316e00c52672a6f8ff245fdba844fd9546ea7 Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: sepolicy: UpdateDavide Garberi2018-01-07
| | | | Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: sepolicy: file_contexts: Remove legacy paths not needed anymoreDavide Garberi2018-01-07
| | | | Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: Update CNE to LA.UM.6.x [2/2]Davide Garberi2018-01-06
| | | | Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: sepolicy: UpdateDavide Garberi2018-01-06
| | | | Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: sepolicy: UpdateDavide Garberi2018-01-05
| | | | | | * Thanks codeworkx that gave me some advices for this :D Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: Initial sepolicydd3boh2017-11-04
| | | | | | | * Lots of parts are from the old one so thanks to everyone who contributed to that one * Still it doesn't boot in enforcing though Signed-off-by: dd3boh <dade.garberi@gmail.com>
* msm8996-common: Nuke the Nougat sepolicydd3boh2017-11-04
| | | | Signed-off-by: dd3boh <dade.garberi@gmail.com>
* z2_plus: Fix KeyDisablerOndrej Hlavac2017-07-13
| | | | | | - fix path in cmhw - change permissions on boot for sysfs - add selinux rule for sysfs
* Remove alipay/ifaa packages and permissionsÁlvaro Brey2017-04-07
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-10-19 20:38:13 +0000