Commit Graph

199 Commits

Author SHA1 Message Date
LuK1337
690071580e Introduce vendor.oplus.hardware.urcc-service
Change-Id: I7fe1a4e9b590d077f43bbaac03e483724d3198e0
2025-09-26 00:37:26 +05:30
dianlujitao
dff1a1af0c sepolicy: qti: Allow rules for subsystem_daemon
Change-Id: I22040ac0d0ab70f32de07a5ac451d41f045433a9
2025-09-26 00:37:18 +05:30
dianlujitao
7bf0c60008 sepolicy: qti: Fix wrong macro usages
Change-Id: I6e6a52ecf8fb223fc87c51bb8fa191bd1115a3e2
2025-09-26 00:37:18 +05:30
dianlujitao
8d717cc0e5 sepolicy: qti: Support both context prefixes in oplusreserve partition
Also apply some minor clean-ups while at it.

Change-Id: I7676bf126099222ef56b2f639aba1ab62f662361
2025-09-26 00:37:18 +05:30
Bruno Martins
037c3313d1 sepolicy: qti: Let qcril look into /mnt/vendor/oplusreserve
Change-Id: Iaa6425e662c83b660af9a3bf1371faa0faf494b3
2025-09-26 00:37:18 +05:30
dianlujitao
739fc8c632 sepolicy: qti: Allow init to label vendor_reserve_partition
[    0.983556] init: Running restorecon...
[    0.989819] selinux: SELinux: Could not set context for /dev/block/platform/soc/1d84000.ufshc/by-name/oplusreserve2:  Permission denied
[    0.989819] audit: type=1400 audit(10810748.011:9): avc:  denied  { relabelto } for  pid=1 comm="init" name="oplusreserve2" dev="tmpfs" ino=35 scontext=u:r:init:s0 tcontext=u:object_r:vendor_reserve_partition:s0 tclass=lnk_file permissive=0

Change-Id: I5b356016e6f5e2b2564179eb2b87bf99c4ee78e2
2025-09-26 00:37:18 +05:30
dianlujitao
08f329df34 sepolicy: qti: Label wireless charging device and daemon
Change-Id: I3d56dd86eecdfb18aba55e64e4b7d362441b1935
2025-09-26 00:37:18 +05:30
Bruno Martins
cc47583788 sepolicy: qti: Allow touchDeamon to stop itself
As seen on devices without OplusTouch support:

[   14.155867] init: Unable to set property 'ctl.stop' from uid:0 gid:0 pid:1991: Invalid permissions to perform 'stop' on 'touchDaemon'
[   14.155902] type=1107 audit(1758323930.135:13): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc:  denied  { set } for property=ctl.stop$touchDaemon pid=1991 uid=0 gid=0 scontext=u:r:oplus_touchdaemon:s0 tcontext=u:object_r:ctl_stop_prop:s0 tclass=property_service permissive=0'

Change-Id: Iacc073b0b74713c268966c69480cf02d543d395a
2025-09-26 00:37:18 +05:30
LuK1337
8a9394f1d3 sepolicy: qti: Allow camera HAL to find osense_service
09-19 22:25:35.045   925   925 E SELinux : avc:  denied  { find } for pid=1634 uid=1047 name=osensemanager scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:osense_service:s0 tclass=service_manager permissive=0

Change-Id: I45f432e8378c726ef0026e5a1c9456b36b6929e1
2025-09-26 00:37:18 +05:30
dianlujitao
c423c2bfec sepolicy: qti: Allow eSIM HAL to access /mnt/vendor/oplusreserve
Change-Id: I07b964681f472d4d5c38be3d5aa1afd8604a1642
2025-09-26 00:37:18 +05:30
dianlujitao
b68df62d60 sepolicy: qti: Allow vendor.lineage.touch to access binder
[    4.389706] type=1400 audit(1758283865.674:53): avc:  denied  { call } for  comm="servicemanager" scontext=u:r:servicemanager:s0 tcontext=u:r:hal_lineage_touch_default:s0 tclass=binder permissive=0

Change-Id: I338d3fd5cb80035905c6c509eb53da61a2aa0338
2025-09-26 00:37:18 +05:30
LuK1337
7588273dcf sepolicy: qti: Let vendor_init set vendor_camera_prop
Required for erhai's vendor.qti.camera.provider-service_64.rc:

on property:sys.boot_completed=1
    setprop vendor.oplus.camera.cam0.count 0
    setprop vendor.oplus.camera.cam3.count 0
    setprop vendor.oplus.camera.error.camlist 0

Change-Id: I7b9c50f5532a8c809b2061f8c6eedc08d7a18802
2025-09-26 00:37:18 +05:30
dianlujitao
f48eb33d45 sepolicy: qti: Label thermal engine prop
Change-Id: I14766b69fd83031083730a445c958a5e1027bd34
2025-09-26 00:37:18 +05:30
madmax7896
27e31ebbb5 sepolicy: qti: Label some missing wakeup nodes on OP13R 2025-09-17 00:07:07 +01:00
kok-o3
3fc8912155 sepolicy: qti: Label SM7675 wakeup nodes
Change-Id: I0f7f1dec0f8f9da88afd17233898ceb5c4a23ec5
2025-09-13 21:39:40 +02:00
inferno0230
34a24318a8 sepolicy: qti: Label SM7550 charging sysfs path
Change-Id: Ia79079f3df34714e5a8f9294d3db6048552609e6
Signed-off-by: inferno0230 <mail@inferno0230.in>
2025-09-09 22:06:47 +02:00
LuK1337
495cfb6640 sepolicy: qti: Allow vendor_init to set vendor_fingerprint_prop
Change-Id: Icc898bba9d8a06b79e1cfcf34412871471a9bdf7
Signed-off-by: inferno0230 <mail@inferno0230.in>
2025-09-09 19:54:53 +05:30
dianlujitao
7a643a4105 sepolicy: qti: Move proc_horae to vendor
This fixes booting AOSP GSIs.

Fixes: 8acb73ff6a ("sepolicy: qti: Add support for horae service")
Change-Id: Ica812bb31d6c60b4ec5f6837de7712bd0c275543
2025-09-07 15:29:03 +08:00
Bruno Martins
a9438581bb sepolicy: qti: Add inital eSIM support
Change-Id: Iae2d3c17a6eb5a9b1c71198c8ac861ad4e5f85d5
2025-09-05 13:42:42 +00:00
Bruno Martins
63795ed4d4 sepolicy: qti: Update compatibility mapping files
Change-Id: I6d10fa03042e4f360a494a7eb2c9ffd0502c86a4
2025-09-04 16:05:55 +01:00
chandu078
8acb73ff6a sepolicy: qti: Add support for horae service
Service required for thermal management, as it reports and updates shell
temperature to /proc/shell-temp.

Change-Id: I02e2ddeda461cbb2ead1348edc6ebf57b8f7fdde
2025-09-04 13:30:17 +01:00
pjgowtham
b122025d2d Introduce vendor.oplus.hardware.performance-service
Dummy service named differently from the stock one to avoid conflicts.

This can be used on devices that do not include CPU ricing, but still
require the service to register for camera and prebuilt audio stack to
actually work.

Change-Id: I41087aefe9af57e7a1161a3a71ab3b9e849925f2
2025-09-04 10:14:22 +00:00
LuK1337
23a4f0c429 sepolicy: qti: Add system_oplus_radio_prop to *.ignore.cil
Change-Id: If943028a54f7a7f32f289bf080f6565052bdaf40
2025-08-31 20:00:33 +02:00
pjgowtham
0ad31fba1e sepolicy: qti: Let qti secure_element rw /dev/nq-nci
vendor.qti.secu: type=1400 audit(0.0:2346): avc:  denied  { getattr }
for  path=/dev/nq-nci dev=tmpfs ino=1371
scontext=u:r:hal_secure_element_default:s0
tcontext=u:object_r:nfc_device:s0 tclass=chr_file permissive=1

Spotted on ferrari.

Change-Id: I8869fffae3cc6028b6b8ff009bd84108e2a53ada
2025-08-25 13:59:35 +02:00
pjgowtham
1477e8b42e sepolicy: qti: Label awinic vibrator sysfs for ziti
Change-Id: I6543983b6de8f7852015ea6a304be9aa809dc65f
2025-08-24 21:23:41 +05:30
LuK1337
4af7f26d3f sepolicy: qti: oplusSensor -> oplus_sensor
Matches new AIDL naming style.

Change-Id: I93a22091f54df5c48d105bc82d51b90bcf1e59e3
2025-08-22 10:06:40 +02:00
pjgowtham
04441ff343 sepolicy: qti: Label and add rules for oplusSensor AIDL
Change-Id: I451d7bf6bb110ed900ff5258cdcf6566945ab490
2025-08-22 10:06:39 +02:00
pjgowtham
93e8cfc069 sepolicy: qti: Let vendor_hal_oplusSensor_default search /dev/block
Change-Id: I248bd96c9753a4c9f51643368a0a5f67d52729df
2025-08-22 09:58:37 +02:00
pjgowtham
17d525da8f sepolicy: qti: Let hal_oplus_charger_aidl rw /dev/oplus_chg
Change-Id: I222aed7542f5750a3fe2f062998237bc00d22a3a
2025-08-22 09:49:45 +02:00
pjgowtham
af977627d4 sepolicy: qti: Let hal_oplus_charger_aidl rw vendor_sysfs_battery_supply
Change-Id: I058aad89acba10eaae84734341d30d1efa8e4a2f
2025-08-22 09:49:45 +02:00
pjgowtham
00c112c97a sepolicy: qti: Update qseecom rules for fingerprint
Change-Id: I34cbd4642f1c03446d1e57da079e5e495c2326cc
2025-08-22 07:43:54 +00:00
pjgowtham
9914060348 sepolicy: qti: Label goodix fingerprint property
W /system/bin/init: type=1107 audit(0.0:13): uid=0 auid=4294967295
ses=4294967295 subj=u:r:init:s0 msg='avc:  denied  { set } for
property=gf.debug.dump_data pid=1873 uid=1000 gid=1000
scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:default_prop:s0
tclass=property_service permissive=0'

Change-Id: I07acc42f6a5cba7e7b94f8473feb0540eee9096c
2025-08-22 07:43:54 +00:00
pjgowtham
abe43816a2 sepolicy: qti: Let camera hal rw /proc/qcom_flash
On Ziti (OnePlus Nord CE 3), this seems necessary for the torchlight
function to work.

Change-Id: I37ac5d7a1578d939d61728e8292c47b2fa9d870d
2025-08-22 09:35:36 +02:00
pjgowtham
655f8c1814 sepolicy: qti: Label wly wakeup nodes
wly / # cat /sys/devices/platform/soc/984000.i2c/i2c-5/5-003b/name
p9415-rx
wly / # cat /sys/devices/platform/soc/990000.i2c/i2c-6/6-004b/name
synaptics-s3908
wly / # cat /sys/devices/platform/soc/a84000.i2c/i2c-8/8-0028/name
sn-nci

Change-Id: I8aef0c21df2af86b06515ef609729c352770a260
2025-08-22 09:28:01 +02:00
pjgowtham
8da66b3786 sepolicy: qti: Label ferrari wakeup nodes
ferrari / # cat /sys/devices/platform/soc/990000.i2c/i2c-5/5-004b/name
synaptics-s3908
ferrari / # cat /sys/devices/platform/soc/a84000.i2c/i2c-7/7-0028/name
sn-nci

Change-Id: Ia2af6499a912697694ee24f209726a974887545f
2025-08-22 09:26:25 +02:00
pjgowtham
19cd98ab96 sepolicy: qti: Label lunaa/ziti wakeup nodes
lunaa / # cat /sys/devices/platform/soc/a84000.i2c/i2c-1/1-0008/name
st21nfc
lunaa / # cat /sys/devices/platform/soc/a94000.i2c/i2c-2/2-0038/name
fts
ziti / # ls /sys/devices/platform/soc/a94000.spi/spi_master/spi1/spi1.0/
driver           fts_rw_reg  supplier:18200000.rsc:rpmh-regulator-ldoc12
driver_override  input       supplier:18200000.rsc:rpmh-regulator-ldoc3
fts_dump_reg     modalias    supplier:f000000.pinctrl
fts_esd_check    of_node     supplier:regulator.36
fts_fw_version   power       supplier:regulator.47
fts_hw_reset     statistics  uevent
fts_irq          subsystem   wakeup

Change-Id: I2933a1fb695f72cd859d6654947ac37bd7f3f77f
2025-08-21 17:22:41 +05:30
LuK1337
622f8070f3 livedisplay: Migrate to AIDL
Change-Id: I8dbe9ed99549aff3e7fcff553482a4c45aae67ef
2025-08-17 23:40:08 +02:00
basamaryan
55dd4cee89 sepolicy: qti: Label missing SM8350 wakeup nodes
MT2111_IND / # cat /sys/devices/platform/soc/884000.i2c/i2c-10/10-0028/name
sn-nci
MT2111_IND / # cat /sys/devices/platform/soc/990000.i2c/i2c-7/7-004b/name
synaptics-s3908

Change-Id: I76b2da5f17b2b64254a8f21e328352bb0743bcf0
2025-08-17 21:19:08 +02:00
dianlujitao
d3b35847b1 IFAAService: Wire up oplus fingerprint pay AIDL
Change-Id: Ibbac7e3c4d6591b712cbdcfb3eda955fbb78f8f3
2025-08-10 15:38:47 +01:00
dianlujitao
179e2abe46 sepolicy: qti: Add support for fingerprint pay
Change-Id: I298b9b1c8b733c05fd16687ec06fa9dd916e972c
2025-08-10 15:38:45 +01:00
dianlujitao
0d8b5aa9d4 sepolicy: Move attributes to public
Change-Id: I527559b1a970cbbeefff0825a494be0d577ecda3
2025-08-09 11:04:37 +01:00
Vivekachooz
08ff2f8522 sepolicy: qti: Label missing sm6375 wakeup nodes
Change-Id: Ia2123ff041617a39d34bc691d9cc662a2f60daec
2025-08-08 20:17:33 +05:30
LuK1337
f9faa7d9ed sepolicy: qti: Remove unwanted newline at the end of genfs_contexts
Accidentally introduced with e8f2b8aacd.

Change-Id: I6b902f867f6282781073a635a69ac8cc77575c4e
2025-08-02 22:35:44 +02:00
dianlujitao
5be9c6e55b Introduce nrmodeswitcher
This configures the NR mode to "SA Preferred" upon each boot (a setting
that persists even after a factory reset), which is desirable in most
cases. The mode can be customized using ro.vendor.radio.auto_nr_mode:
  0: NSA Preferred
  1: NSA Only
  2: SA Only
  3: SA Preferred

Change-Id: I86ad739167a51af04c041887a93462bf5bb5e32f
2025-07-30 22:45:08 +01:00
Bruno Martins
a2bf842855 sepolicy: qti: Label oplus sensor props
Change-Id: I72fca9f8507cace163f1e344d60f619d1d87e3e9
2025-07-27 10:31:02 +01:00
chandu078
5da3fbb258 sepolicy: qti: Allow rild to search oplus_reserve_file
Change-Id: I4d700def0c84da2cda2af8e88b6cac224b6dffc3
2025-07-26 21:20:50 +05:30
Bruno Martins
3b02db249a sepolicy: qti: Add support for pogo pin keyboard
Change-Id: I941e779c380f85edb61c69fcf891dacd40921d9f
2025-07-19 23:46:02 +01:00
LuK1337
e8f2b8aacd sepolicy: qti: Label OnePlus Pad 3 wakeup nodes
Change-Id: Ife85a0aee81ee79c115aeaf475b130fae7177fa1
2025-07-19 18:36:42 +00:00
LuK1337
f6bd8f76c4 sepolicy: qti: Add rules for nvram{_qmi,_server}
Spotted on erhai.

Change-Id: Idec44370c5e51fd65394fd7c9523b905d9a400d1
2025-07-19 18:36:42 +00:00
LuK1337
d4cfb60cf7 Introduce OplusPen
Change-Id: Icfc9d2d8172aa01bf1c71a5a23a8e6387660a746
2025-07-19 18:36:42 +00:00