| Commit message (Collapse) | Author | Age |
... | |
|
|
|
|
|
|
|
| |
* Don't break any neverallows this time
* Still healthd missing to fix
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
Change-Id: I861eb5dc1f91e7cdea2e7b55c617e55a24ec2e02
|
|
|
|
|
|
|
|
|
| |
* Normal path is /data/vendor/camera, defined in device/qcom/sepolicy
* We have hex edited 6.0 blobs from /data/misc/camera to /data/vendor/qcam
because of the new path string being longer than the old one
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
Change-Id: Ib96191dd55aea0c20c58a16bf1a91a46f07367e6
|
|
|
|
|
|
|
| |
* Also fix other general sepolicy errors after stopping to ignore the neverallows
Change-Id: I1af3d9f57a0ca6e37420094a53f1c52127f3e187
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
Change-Id: Ibd1ea0a8b32fc4e87bf912a87339f7bc2a31d423
|
|
|
|
| |
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
| |
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
Change-Id: Ic8c90812fd61ec921b0bec5ddc2f20555afa4c0c
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
|
|
| |
CNE Hals moved to Factory Hal implementation. Removing
the Hal entries for the same.
CRs-Fixed: 2295302
Change-Id: Ifd7b605e3b9824951e111108c664ec0cde37fe83
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: Ia01969378d79aa6ca1a81ad3bf9cf2acd39be051
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: Ie5569ba587b47e23aab07108cf5bb483d7177f50
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: Ie829e0ec1e640578bd7c0aa92c32a1caee62dab9
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Widevine HIDL service added new v1.1 media APIs,
the service version is updated to 1.1.
Test: Netflix and Play Movies & TV (streaming and offline playback)
Test: GTS WidevineH264PlaybackTests test
e.g. ANDROID_BUILD_TOP= ./android-gts/toolsefed run gts -m GtsMediaTestCases
--test com.google.android.media.gts.WidevineH264PlaybackTests#testL1With480P30
bug: 69674645
Change-Id: I7b8966c5fe2c2ded4a86b4358511548426de76dc
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
| |
* Mostly squash the various macros
Change-Id: I1e71a6d728cd4d7e7be057604978264c429aed90
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
| |
* No new neverallows generated
Change-Id: If50b0f173fe858470fb98e83d8b7621bcffb64ff
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: Ie067c2f0f6ec96edd110c79d143de36b20708b47
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
|
|
| |
avc: denied { setattr } for pid=1 comm="init" name="scheduler" dev="sysfs" ino=36476 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0
avc: denied { setattr } for pid=1 comm="init" name="scheduler" dev="sysfs" ino=36476 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0
avc: denied { write } for pid=1 comm="init" name="scheduler" dev="sysfs" ino=36476 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0
avc: denied { write } for pid=1 comm="init" name="scheduler" dev="sysfs" ino=36476 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0
avc: denied { write } for pid=1 comm="init" name="slice_idle" dev="sysfs" ino=44595 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0
avc: denied { write } for pid=1 comm="init" name="slice_idle" dev="sysfs" ino=44595 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
avc: denied { dac_override } for pid=463 comm="chargeonlymode" capability=1 scontext=u:r:charger:s0 tcontext=u:r:charger:s0 tclass=capability permissive=1
avc: denied { write } for pid=463 comm="chargeonlymode" name="persist" dev="rootfs" ino=938 scontext=u:r:charger:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=1
avc: denied { add_name } for pid=463 comm="chargeonlymode" name="subsys" scontext=u:r:charger:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=1
avc: denied { create } for pid=463 comm="chargeonlymode" name="subsys" scontext=u:r:charger:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=1
avc: denied { create } for pid=463 comm="chargeonlyiode" name="batt_info.bin" scontext=u:r:charger:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=file permissive=1
avc: denied { write open } for pid=463 comm="chargeonlymode" path="/persist/subsys/batt_info.bin" dev="rootfs" ino=948 scontext=u:r:charger:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=file permissive=1
avc: denied { setattr } for pid=463 comm="chargeonlymode" name="batt_info.bin" dev="rootfs" ino=948 scontext=u:r:charger:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=file permissive=1
avc: denied { chown } for pid=463 comm="chargeonlymode" capability=0 scontext=u:r:charger:s0 tcontext=u:r:charger:s0 tclass=capability permissive=1
avc: denied { read } for pid=463 comm="chargeonlymode" name="type" dev="sysfs" ino=42537 scontext=u:r:charger:s0 tcontext=u:object_r:sysfs_battery_supply:s0 tclass=file permissive=1
avc: denied { open } for pid=463 comm="chargeonlymode" path="/sys/devices/soc/qpnp-smbcharger-16/pnwer_supply/dc/type" dev="sysfs" ino=42537 scontext=u:r:charger:s0 tcontext=u:objectOr:sysfs_battery_supply:s0 tclass=file permissive=1
|
|
|
|
|
|
| |
Change-Id: I79f4f3270de21ea070edc085b12c0d3d64285a3a
avc: denied { write } for pid=528 comm="audio@2.0-servi" name="delta" dev="sda10" ino=1410 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:vendor_data_file:s0 tclass=dir permissive=1
avc: denied { write } for pid=528 comm="audio@2.0-servi" name="delta" dev="sda10" ino=1410 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:vendor_data_file:s0 tclass=dir permissive=
|
|
|
|
|
|
|
| |
avc: denied { read } for pid=595 comm="rmt_storage" name="name" dev="sysfs" ino=42161 scontext=u:r:rmt_storage:s0 tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=file permissive=1
avc: denied { read } for pid=595 comm="rmt_storage" name="name" dev="sysfs" ino=42161 scontext=u:r:rmt_storage:s0 tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=file permissive=1
avc: denied { open } for pid=595 comm="rmt_storage" path="/sys/devices/soc/9300000.qcom,lpass/subsys3/name" dev="sysfs" ino=42161 scontext=u:r:rmt_storage:s0 tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=file permissive=1
avc: denied { open } for pid=595 comm="rmt_storage" path="/sys/devices/soc/9300000.qcom,lpass/subsys3/name" dev="sysfs" ino=42161 scontext=u:r:rmt_storage:s0 tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=file permissive=1
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
avc: denied { write } for pid=673 comm="time_daemon" name="time" dev="sda10" ino=15159 scontext=u:r:time_daemon:s0 tcontext=u:object_r:time_data_file:s0 tclass=dir permissive=1
avc: denied { write } for pid=673 comm="time_daemon" name="time" dev="sda10" ino=15159 scontext=u:r:time_daemon:s0 tcontext=u:object_r:time_data_file:s0 tclass=dir permissive=1
avc: denied { add_name } for pid=673 comm="time_daemon" name="ats_15" scontext=u:r:time_daemon:s0 tcontext=u:object_r:time_data_file:s0 tclass=dir permissive=1
avc: denied { add_name } for pid=673 comm="time_daemon" name="ats_15" scontext=u:r:time_daemon:s0 tcontext=u:object_r:time_data_file:s0 tclass=dir permissive=1
avc: denied { create } for pid=673 comm="time_daemon" name="ats_15" scontext=u:r:time_daemon:s0 tcontext=u:object_r:time_data_file:s0 tclass=file permissive=1
avc: denied { create } for pid=673 comm="time_daemon" name="ats_15" scontext=u:r:time_daemon:s0 tcontext=u:object_r:time_data_file:s0 tclass=file permissive=1
avc: denied { write } for pid=673 comm="time_daemon" name="time" dev="sda10" ino=15159 scontext=u:r:time_daemon:s0 tcontext=u:object_r:time_data_file:s0 tclass=dir permissive=1
avc: denied { write } for pid=673 comm="time_daemon" name="time" dev="sda10" ino=15159 scontext=u:r:time_daemon:s0 tcontext=u:object_r:time_data_file:s0 tclass=dir permissive=1
avc: denied { add_name } for pid=673 comm="time_daemon" name="ats_2" scontext=u:r:time_daemon:s0 tcontext=u:object_r:time_data_file:s0 tclass=dir permissive=1
avc: denied { add_name } for pid=673 comm="time_daemon" name="ats_2" scontext=u:r:time_daemon:s0 tcontext=u:object_r:time_data_file:s0 tclass=dir permissive=1
avc: denied { create } for pid=673 comm="time_daemon" name="ats_2" scontext=u:r:time_daemon:s0 tcontext=u:object_r:time_data_file:s0 tclass=file permissive=1
avc: denied { create } for pid=673 comm="time_daemon" name="ats_2" scontext=u:r:time_daemon:s0 tcontext=u:object_r:time_data_file:s0 tclass=file permissive=1
|
|
|
|
| |
* From marlin's sepolicy. Adapted to work with device/qcom/sepolicy.
|
|
|
|
|
|
|
|
| |
* From LA.UM.7.2.r1-04000-sdm660.0 - B2N_sprout:9/PPR1.180610.011/00WW_3_22C
* libqsocket and libqrtr are dependencies of tftp_server
Change-Id: Ia88230d5ad5287825e624df337c37aa06a3d9edd
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: Ifc66eb447953aaa312b7c3a9230a72b70fb78ea7
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
| |
* Without this the scheduler (bfq) doesn't get set at boot
Change-Id: Ibd59caeabac4cdcfae9060cc16975a54ce12db7c
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
|
| |
* They won't make the build fail anyway
* Probably just a temporarely thing
Change-Id: I4822b4eeef8cb3381a5721da8cc6b382898e6c4a
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: Idd48c93dbfddede327c556cf273520412485295e
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Change-Id: I71e47d5f203adb7e28d37447e19a8041a1d02840
msm8996-common: PocketMode: Apply LineageOS rebrand
Change-Id: I1de627062f56bd125f430033e8bb7aad8fe48f69
msm8996-common: pocketmode: Bump sdk version
Change-Id: Ic521e380868bdc886e15c6a8a472564a98dbc094
msm8996-common: PocketMode: Explicitly include Android support libs
* Fixes non-jack build
Change-Id: I9d8346193577c7be218e12efb20f52ca9946eb14
msm8996-common: PocketMode: Properly depend on Lineage SDK
* This is actually the proper library to include
(only spotted while buidling with Jack disabled,
because app compilation was failing).
Change-Id: Ib61f93704c6411a4cb1f91d9e8693a1775934037
msm8996-common: PocketMode: Remove useless cast
Change-Id: I655b0b80ccafdaae422a2464d2b8409f70be0e8c
msm8996-common: Adapt to Zuk
Change-Id: I9050faac37de0a8392b31fed5c3562d4553c546f
msm8996-common: Set LOCAL_SDK_VERSION where possible.
This change sets LOCAL_SDK_VERSION for all packages where
this is possible without breaking the build, and
LOCAL_PRIVATE_PLATFORM_APIS := true otherwise.
Setting one of these two will be made required soon, and this
is a change in preparation for that. Not setting LOCAL_SDK_VERSION
makes the app implicitly depend on the bootclasspath, which is
often not required. This change effectively makes depending on
private apis opt-in rather than opt-out.
Test: make relevant packages
Bug: 73535841
Change-Id: Ic906adbd670c4dbfe2cdf0b71cdbeaf9ac08a27e
msm8996-common: sepolicy: Address a fingerprint denial
Change-Id: I07c75d58357f7eea2dcc68ed80dacbab76bb30f5
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: Id73515a55b1082283789cffbd2aafecaada4e06c
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
|
| |
* QCOM has moved to `vendor.post_boot.parsed` but our
blobs still use `sys.post_boot.parsed`.
Change-Id: I881f459aa10f1c55f8a7c3de87f36d42e000f47e
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
|
| |
* From Nokia 7 plus
* Don't update perf configs because we need 8996 ones
Change-Id: I0c074af4b01e2198f3f36084177e3fae6b77e64c
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: Ib2e08d365f088e07d30df2c5dfc72660ca839d21
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
| |
* Fixes the bluetooth crashing when activated
Change-Id: Ic4c120319cbc5267fd433ca935e51837946000a6
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: Ia4fa68909a710a904bd796ab53d486b81ee2238a
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
|
| |
* Partial revert of 2bc563eaed5ab7aec72b3bd929739245cf3de4ab
* Even if it generates a neverallow this fixes the readmac crash in enforcing
Change-Id: Ib108662c17f456fcdea90b9615e2e4f350755059
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
| |
* It has been renamed to mnt_vendor_file in QCOM sepolicy.
Change-Id: If16c6d17635ec746fc01c7309854ccbeb1303339
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: I1cf339887cedf3ff5bf9a01160f1acc56da5eb93
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: Id7520ca339db83eeeb8b3e608a44809141e30df3
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
| |
Solves the following denials.
denied { read } for name="/" dev="sda17" ino=2 scontext=u:r:tee:s0 tcontext=u:object_r:system_data_file:s0 tclass=dir permissive=0
Change-Id: I767e4e12a6b4d72c0df0ff7cc018a8bcfe5edf18
|
|
|
|
| |
Change-Id: I3e3668d77a7b65fd3572248ba98c980537ad1e25
|
|
|
|
|
|
|
| |
Solves the following denial.
denied { set } for property=persist.net.doxlat pid=837 uid=1001 gid=1001 scontext=u:r:netmgrd:s0 tcontext=u:object_r:default_prop:s0 tclass=property_service permissive=1
Change-Id: I30db8b7aa6017dfdea1c874f69b7b8b90bcc8800
|
|
|
|
|
|
|
|
|
|
| |
Removed from system_sepolicy, but still needed by our old camera stack.
Solves the following denials.
denied { search } for pid=717 comm="CAM_AECAWB" name="camera" dev="sda17" ino=3121215 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:camera_data_file:s0 tclass=dir permissive=0
denied { search } for pid=717 comm="CAM_AECAWB" name="camera" dev="sda17" ino=3121215 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:camera_data_file:s0 tclass=dir permissive=0
Change-Id: I497bade68e6a5b2f60cd8ec90a97a81986d971af
|
|
|
|
|
|
|
|
| |
Solves the following denial.
denied { search } for pid=719 comm="HwBinder:719_1" name="mediadrm" dev="sda17" ino=1449985 scontext=u:r:hal_drm_default:s0 tcontext=u:object_r:media_data_file:s0 tclass=dir permissive=0
Change-Id: I068732c69dcb8da08f223359ece5e3e09bcea82e
|
|
|
|
|
|
|
|
|
|
|
| |
Solves the following denials.
denied { search } for pid=546 comm="init" name="dpm" dev="sda17" ino=1204225 scontext=u:r:vendor_init:s0 tcontext=u:object_r:dpmd_data_file:s0 tclass=dir permissive=0
denied { search } for pid=546 comm="init" name="thermal" dev="sda17" ino=3325953 scontext=u:r:vendor_init:s0 tcontext=u:object_r:thermal_data_file:s0 tclass=dir permissive=0
denied { search } for pid=546 comm="init" name="thermal" dev="sda17" ino=3325953 scontext=u:r:vendor_init:s0 tcontext=u:object_r:thermal_data_file:s0 tclass=dir permissive=0
denied { setattr } for pid=546 comm="init" name="camera" dev="sda17" ino=3121215 scontext=u:r:vendor_init:s0 tcontext=u:object_r:camera_data_file:s0 tclass=dir permissive=0
Change-Id: I824f7c27c9f93630ba7b65252609777197e3a682
|
|
|
|
| |
Change-Id: Id4b05f402da939a3add6be254666132744133c20
|
|
|
|
|
|
|
|
|
|
| |
CAF renamed this prop to vendor.sys.listeners.registered, but our blobs
still use the old one, making enforcing boot to stall. Label it.
selinux: avc: denied { set } for property=sys.listeners.registered pid=568 uid=1000 gid=1000 scontext=u:r:tee:s0 tcontext=u:object_r:system_prop:s0 tclass=property_service permissive=0
init: Unable to set property 'sys.listeners.registered' to 'true' from uid:1000 gid:1000 pid:568: SELinux permission check failed
Change-Id: I43407d89df024b557dd4c06a4ac9d0ec8f37581e
|
|
|
|
| |
Change-Id: I9571f2a3cb82ea0de6ff4e76335ab9454ba66f3d
|
|
|
|
|
|
| |
They're not under /data/vendor.
Change-Id: I63ad040967c985925b05cf139710dc35b33291c5
|
|
|
|
|
| |
Change-Id: I36ba7dfe4bccae83703f65cd1afb57a8673e5471
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: Iddf2ac2f63d6f3a390e1720c11b1f334cc9729aa
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: I8f4d9588573e48069d365b77b081f981b4948fbb
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: If6f7c4310f34239d49af0cad4cc481b507803f80
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|