Aayush Gupta
76fa0c541a
sm6250-common: Allow hal_nfc_default to search nfc_vendor_data_file
...
[ 77.883303] type=1400 audit(1602012223.756:15): avc: denied { search } for comm="nfc@1.2-service" name="nfc" dev="mmcblk0p85" ino=778309 scontext=u:r:hal_nfc_default:s0 tcontext=u:object_r:nfc_vendor_data_file:s0 tclass=dir permissive=0
Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com>
Change-Id: Icf414bd7c34fe9b318d684dac2b167717e53aad3
2022-06-10 18:56:57 +01:00
Sebastiano Barezzi
b6ffec238a
sm6250-common: Add power AIDL DT2W support via sysfs node
...
Change-Id: Idcff758444a5c89ba20f2ae804a407ee78c445cb
2022-06-10 18:56:54 +01:00
Alexander Winkowski
997f35cf06
sm6250-common: Remove zram writeback leftovers
...
It has been disabled in kernel because of memory corruption.
Change-Id: I50e4cdc39b38a510d39032253606ddec3e41d22c
2022-06-10 18:56:54 +01:00
Alexander Winkowski
bc4c9909f8
sm6250-common: sepolicy: Label UFS clock gating node
...
Change-Id: I54326740d35a95b3c5ec544a7916784f98aa92e2
2022-02-23 06:31:12 +00:00
Chenyang Zhong
2e110efe72
sm6250-common: sepolicy: specify the owner of vendor props
...
vendor_fp_prop is public because apps like Alipay may access it
to enable biometrics payment authentication.
Change-Id: I167bca763bdf2a5e66ed763f8e0a61b74c915498
Signed-off-by: Chenyang Zhong <zhongcy95@gmail.com>
2022-01-02 05:35:31 +00:00
Alexander Winkowski
9a0f82ac21
sm6250-common: sepolicy: Remove unused type definitions
...
Change-Id: Idea8863bf29f609a4641275c3d30d7f6396eda0f
2022-01-02 05:35:31 +00:00
Alex Hong
3cc69f3a92
sm6250-common: sepolicy: Solve the naming problem for vendor property
...
Bug: 158720266
Test: Build selinux modules successfully
Change-Id: I01a83a7828d34db982db60bbf307c81fc12c7939
2022-01-02 05:35:31 +00:00
Alexander Winkowski
4c0bf0df7f
sm6250-common: sepolicy: Fix namespace violation
...
* vendor property_contexts should contain vendor props only.
Change-Id: Ieb621921dc43f6c9b6b451fe45ac1a3fbaaac3c8
2021-11-01 08:22:28 +00:00
Alexander Winkowski
7f99605ccc
sm6250-common: Update thermal HAL
...
* From hardware/google/pixel at d774cbb949e98627e4172bf8fc11e8d954599aa7.
Change-Id: I3a3a0c29575d0595e71a30f1e64e33ca34d2eb27
2021-11-01 08:20:48 +00:00
Sebastiano Barezzi
27f575c973
sm6250-common: Move to common Xiaomi light AIDL
...
Change-Id: I00494cd392d19abd97cd65aeb4ec4bd9c9b11352
2021-11-01 08:18:28 +00:00
Alexander Koskovich
54830186e5
sm6250-common: Don't mount TraceFS twice.
...
* AOSP already mounts TraceFS in system init, so mounting it twice
causes SEPolicy denials. See the comments in this change.
https://android-review.googlesource.com/c/platform/system/sepolicy/+/1294195
Change-Id: Ic5d9ac2dbd36e404a93a8d48aa0ea933fd7fa701
2021-09-23 18:42:57 +02:00
Mimi Wu
b744748f1d
sm6250-common: Modify sepolicy for toolbox to rm -rf /data/per_boot
...
type=1400 audit(1581489923.612:571): avc: denied { getattr } for comm="rm" path="/data/per_boot" dev="dm-9" ino=4577 scontext=u:r:toolbox:s0 tcontext=u:object_r:per_boot_file:s0 tclass=dir permissive=1
type=1400 audit(1581489923.612:572): avc: denied { read } for comm="rm" name="per_boot" dev="dm-9" ino=4577 scontext=u:r:toolbox:s0 tcontext=u:object_r:per_boot_file:s0 tclass=dir permissive=1
type=1400 audit(1581489923.612:573): avc: denied { open } for comm="rm" path="/data/per_boot" dev="dm-9" ino=4577 scontext=u:r:toolbox:s0 tcontext=u:object_r:per_boot_file:s0 tclass=dir permissive=1
type=1400 audit(1581489923.616:574): avc: denied { getattr } for comm="rm" path="/data/per_boot/ft09,GYyRLUL4NXv4BjupD" dev="dm-9" ino=4578 scontext=u:r:toolbox:s0 tcontext=u:object_r:per_boot_file:s0 tclass=file permissive=1
type=1400 audit(1581489923.616:575): avc: denied { write } for comm="rm" name="per_boot" dev="dm-9" ino=4577 scontext=u:r:toolbox:s0 tcontext=u:object_r:per_boot_file:s0 tclass=dir permissive=1
type=1400 audit(1581489923.616:576): avc: denied { remove_name } for comm="rm" name="ft09,GYyRLUL4NXv4BjupD" dev="dm-9" ino=4578 scontext=u:r:toolbox:s0 tcontext=u:object_r:per_boot_file:s0 tclass=dir permissive=1
type=1400 audit(1581489923.619:577): avc: denied { unlink } for comm="rm" name="ft09,GYyRLUL4NXv4BjupD" dev="dm-9" ino=4578 scontext=u:r:toolbox:s0 tcontext=u:object_r:per_boot_file:s0 tclass=file permissive=1
type=1400 audit(1581489923.656:578): avc: denied { rmdir } for comm="rm" name="per_boot" dev="dm-9" ino=4577 scontext=u:r:toolbox:s0 tcontext=u:object_r:per_boot_file:s0 tclass=dir permissive=1
Bug: 147469156
Test: flash full build and find avc errors gone
Change-Id: I22706c63fb13ea2aae0cd9fe8b92edc578fd459e
Signed-off-by: Mimi Wu <mimiwu@google.com>
Signed-off-by: Albert I <kras@raphielgang.org>
2021-09-09 18:46:36 +02:00
Mimi Wu
316cdce3f5
sm6250-common: Add sepolicy for kernel to access /data/per_boot/zram_swap
...
type=1400 audit(0.0:4): avc: denied { read } for path="/data/per_boot/zram_swap" dev="dm-5" ino=29313 scontext=u:r:kernel:s0 tcontext=u:object_r:system_data_file:s0 tclass=file permissive=0
Bug: 147469156
Test: flash full build and find avc errors gone
Change-Id: I338040c9166ddd5eb2f06d7cba1aee85da988c53
Signed-off-by: Mimi Wu <mimiwu@google.com>
Signed-off-by: Albert I <kras@raphielgang.org>
2021-09-09 18:46:36 +02:00
Albert I
233e73dbc0
sm6250-common: sepolicy: Allow neural networks HAL to read ADSP properties
...
Signed-off-by: Albert I <kras@raphielgang.org>
Change-Id: I3fa6f51b746703bab2faf3f5fd6334b221a8636c
2021-09-09 18:46:36 +02:00
Albert I
e42d1c571f
sm6250-common: sepolicy: Allow apps and camera HAL access to secure ADSP domain
...
Signed-off-by: Albert I <kras@raphielgang.org>
Change-Id: Ibb1071299632ab53726638dbcc134d4bca59fc52
2021-09-09 18:46:35 +02:00
dianlujitao
92b6e36b71
sm6250-common: Make fastrpc_shell_3 publicly available
...
* Used by GCAM for DSP-accelerated HDR processing
* Arguably we should label /vendor/dsp/cdsp/fastrpc_shell_3 to
same_process_hal_file like Pixels, but the partition is prebuilt thus
we're unable to relabel it.
* Copy the file to writable tmpfs, setup attributes and bind mount back
to workaround the limitation.
[ghostrider-reborn]:
Allow adsp/cdsprpcd and neuralnetworks HAL to access fastrpc_shell_3
[kras edit:
1. rename some contexts as per qva/kona
2. extend to allow camera HAL and VPP service to access it as well]
[dereference23: Remove VPP policy because atoll doesn't use it]
Co-authored-by: Adithya R <gh0strider.2k18.reborn@gmail.com>
Change-Id: Ide90e5c7307d413db5ece736e859559f06679545
2021-09-09 18:46:35 +02:00
Alexander Winkowski
c653ce51be
sm6250-common: Pull SELinux policy from Xiaomi SM8250 tree
...
Change-Id: I83dce3c678f796034fd39947414c8067d338edf2
2021-09-09 18:46:35 +02:00
Alexander Winkowski
cefd104891
sm6250-common: thermal: Rebrand to Xiaomi SM6250
...
Change-Id: Iafa72da14648a2652df9b64a02dd6e5b9fa8bd9b
2021-09-09 18:46:29 +02:00
Alexander Winkowski
c03d9330bc
sm6250-common: Import Pixel thermal HAL
...
* From hardware/google/pixel at 728fb99bbb910be05711421310efa6827aaaa4fa.
Change-Id: I763b4dbef65084cfee337065b2c5ab465f69bca8
2021-09-09 18:46:29 +02:00
Alexander Winkowski
ab8029bdc2
sm6250-common: Build Xiaomi power AIDL HAL
...
Change-Id: I0e10f0b36598b8cbf25ee2dc08b8a4eced95c2ed
2021-09-09 18:46:23 +02:00
Sebastiano Barezzi
b4e037ad8e
sm6250-common: lights: Rebrand to Xiaomi SM6250
...
Change-Id: I3c2ec7f68b0d845ea15277e396194409f8ebe216
2021-09-09 18:46:21 +02:00
Volodymyr Zhdanov
d93a5f853e
sm6250-common: biometrics: Rebrand to Xiaomi SM6250
...
Change-Id: Ia70786f28372e49cc3dc3d25fedbbe3a1562b5a7
2021-09-09 18:46:18 +02:00