Add systemhelper_app binder client/server calls to allow clients to get
required permissions with hal_client_domain().
Change-Id: I1e181f2f03c32e013143b61d9caac7e720b4bdca
any hal domain which is using this custom bypass macro
will get the neverallow error unless it is whitelisted.
Change-Id: I87ecce04033e8fe5d5d6c4114c6af1ed774df916
While full scan in WLC, if an app invokes incfs filesystem, it causes
an avc denial denial for accessing incremental_prop and proc
filesystem. Since, WLC does not directly access the incremental
property, and that doesn't affects the classification of the apk,
add a rule to not audit when wlc reads the incremental_prop
and proc_filesystems.
Change-Id: Ic89327a7c048b760c24a1fc272dd2ee848689699
allow both "qcc" and "qdma" in preparation to transition to "qcc"
to avoid use "qdma" word in implementation
Change-Id: I608f8ecc14e56f3b17823c759c7064f09601f594
As perfetto_traces_data_file is going to be neverallow, change
to trace_data_file instead.
add allow rules vendor_perfetto_dump to read/write trace_data_file
Change-Id: Ic0569110c81c95cc6756ddc3e551733cd5411ae9
CRs-Fixed: 3194279
Allow untrusted APK to be a client of the DSP HAL server on user
builds.
Change-Id: I20b7ac551a66d6e02a09d0a283209ae14786066b
Signed-off-by: Vamsi Krishna Gattupalli <quic_vgattupa@quicinc.com>
- Remove IImsRadio, IQtiRadioStable and IQcRilAudio
definitions as these needs to be defined in vendor
to support GSI images.
Change-Id: Icfef4c5895ccae51374d83069ae93260be0f376c
CRs-Fixed: 3078236
Moving IDisplayConfig AIDL service to sepolicy_vndr in order to satisfy
VTS compliance.Removing this service from private/service_contexts to
avoid bootup failure on non GSI builds.
Change-Id: I2077dcfec71fd2b5a3d8dc970b1e3658e325847a
Added permission for a new property support for WLC.
This property is updated in vendor side to signal perf hal is up.
Change-Id: I7bf2e08b1b73aaa3b800c9ee8c8a6e459fd4ca0b
Set sepolicy permissions to Allow ro.vendor.bootreceiver.enable
to be updated from vendor side init.
Change-Id: I2b4929b70a7eab398eb1e32dd3c0914841f6e47e
vendor_persist_camera_prop is not necessary for 3rd party apps, so
don't audit it for appdomain to suppress the denial logs.
vendor_persist_camera_prop is the context of below prop, which are
added to standard Android SDK APIs, so all app may touch it.
- vendor.camera.aux.packagelist
- persist.vendor.camera.privapp.list
Change-Id: I1198ed3c3441aec5a33f2b781d29100b9d4648af
CRs-Fixed: 3027102
