summaryrefslogtreecommitdiff
path: root/sepolicy
AgeCommit message (Collapse)Author
2020-03-30db845c: audio: Set Analog and HDMI mixer controlsaudioAmit Pundir
Set Analog and HDMI mixer controls on boot using tinymix. Change-Id: Ib321559815e5d22d224fc36a1fe6c21f52df3eec Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
2020-03-30sepolicy: Allow access to graphics_device getattrAmit Pundir
dmesg and logcat is filled with selinux denials related to getting access to graphics device attributes. From bootanimation to all the way up to video playback, all display/graphics related apps/services seem to need access to graphics device attributes. Although the denials are non-fatal but it is good to get rid of the denial messages. Change-Id: Ic65364c08b5de8aab8b22997ab5215304a4782ac Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
2020-03-30mediaswcodec: Fix non-fatal selinux and seccomp policy denialsAmit Pundir
Fix non-fatal mediaswcodec selinux and seccomp denials. mediaswcodec need gpu access, plus it also crashes with following seccomp error during youtube playback: E media.swcodec: libminijail[2139]: blocked syscall: sysinfo So whitelist sysinfo syscall for mediaswcodec. Change-Id: I11db36aeda475c4ca73121efb8b2bfd3d7590be0 Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
2020-03-17db845c: qcom: Add userspace tools to talk to dsp and modemAmit Pundir
Add Qcom userspace tools and their respective sepolicy rules. Userspace tools are downloaded from following github: To trigger loading of wlan firmware on SDM845 git clone https://github.com/andersson/pd-mapper Userspace reference for net/qrtr in the Linux kernel git clone https://github.com/andersson/qrtr Qualcomm Remote Filesystem Service Implementation git clone https://github.com/andersson/rmtfs Trivial File Transfer Protocol server over AF_QIPCRTR git clone https://github.com/andersson/tqftpserv Change-Id: Ic466af6fef010a9b71c90e38205f49a876b001e2 Signed-off-by: Amit Pundir <amit.pundir@linaro.org> Signed-off-by: John Stultz <john.stultz@linaro.org>
2020-03-16db845c: Make userdata formattableJohn Stultz
If one runs "fastboot erase userdata", and then does not flash a userdata image to the partition, the system will fail to boot as /data/ will not mount, and the apex and dalvik cache directories won't be present or writable. This tries to address this by adding the formattable flag to the fstab and add the partition to the sepolicy so mkfs can access it. NOTE: I did have to use the full by-name path in the fstab, which is less flexible then the LABEL= method, but if the partition isn't formatted there isn't neceessarily a partition label to find. Big thanks to AmitP for suggesting this approach Signed-off-by: John Stultz <john.stultz@linaro.org> Change-Id: Ia678d0d1d5e1eb35462f8fcfee478969c614b0d4
2020-01-24netd does not require and should not have module loading privsMaciej Żenczykowski
Any required functionally should be built into the kernel. Test: NA Signed-off-by: Maciej Żenczykowski <maze@google.com> Change-Id: I500d0079ebd0a49a5be5419bad48502c19b4b7df (cherry picked from commit 6418bdeb46f640a5a6d1e190b7d65c8869911316)
2020-01-18Remove allow dnsmasq netd:{fifo_file,unix_stream_socket} getattrMaciej Żenczykowski
Already provided by system/sepolicy/public/dnsmasq.te: allow dnsmasq netd:fifo_file { getattr read write }; allow dnsmasq netd:unix_stream_socket { getattr read write }; Test: N/A Signed-off-by: Maciej Żenczykowski <maze@google.com> Change-Id: I6fa06d1d61c4abea1d65130e87fb49ac5bc57a0f
2019-10-25db845c: sepolicy: Add some kernel sepolicy rules to allow firmware loadingJohn Stultz
Previously we were seeing issues w/ firmware loading due to sepolicy blocking the in-kernel loader from accessing /vendor/firmware files This patch adds some sepolicy additions suggested by audit2allow that let it work. Change-Id: Ie7238a2ae30d1377dcd73a6c194f0017989006bf Signed-off-by: John Stultz <john.stultz@linaro.org>
2019-10-08sepolicy: Add sysfs path for v5.4-rc1+ kernelsAmit Pundir
Upstream kernel commit a1875bf98290 ("arm64: dts: qcom: sdm845: Add unit name to soc node") broke sysfs path for sdm845 devices running kernel v5.4-rc1 and above. This broke display on db845c when selinux is enforced. Change-Id: Ic447b3747c3f6ac40141ba8e74f0101c42a4f214 Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
2019-09-24db845c: Add support for AOSP on dragonboard db845cAmit Pundir
Boots dragonboard db845c to console. HDMI display broken due to missing firmware files. Change-Id: I820aeb7b7ab2536a362f9ae37cc44906be0a6190 Signed-off-by: Amit Pundir <amit.pundir@linaro.org>