Commit Graph

3645 Commits

Author SHA1 Message Date
Linux Build Service Account
461470d0c0 Merge 007fd2fbe2 on remote branch
Change-Id: I3ef348a4766b0ddb46cdfbbfd7578174b8c1c540
2022-06-22 19:04:32 -07:00
Amit Agrawal
246c76dd94 sepolicy: Add new Sepolicy context for WFD R2 Enablement Property
Add new SEPolicy Context for WFD R2 Enablement property and allow
system_server and wfdservice to have read permission for the same.

Change-Id: Ic03e3070188f477df1adb326a97515d16a9d0eb1
2022-06-16 12:24:03 +05:30
Arun Kumar Neelakantam
6ec871b660 sepolicy: Add systemhelper_app binder calls
Add systemhelper_app binder client/server calls to allow clients to get
required permissions with hal_client_domain().

Change-Id: I1e181f2f03c32e013143b61d9caac7e720b4bdca
2022-06-15 05:47:53 -07:00
Jaihind Yadav
007fd2fbe2 fixing the build error while making super image.
vendor_afp_prop was not correctly added in *cil file.

Change-Id: I0473c076451f26fcf349a6a88b3c474fac9d3961
2022-06-14 10:40:38 +05:30
Jaihind Yadav
880c16c6bd sepolicy: adding neverallow for custom halserverdomain.
any hal domain which is using this custom bypass macro
will get the neverallow error unless it is whitelisted.

Change-Id: I87ecce04033e8fe5d5d6c4114c6af1ed774df916
2022-06-10 23:15:49 +05:30
qctecmdr
d506f156a0 Merge "MinkIPC over AIBinder SEPolicy" 2022-06-08 15:58:16 -07:00
Tsung Cheng Lin
57eba52929 MinkIPC over AIBinder SEPolicy
- Add SEPolicy for new service

Change-Id: I4e494e2391ec892942756ca76068b89a4f381a79
2022-06-07 09:14:35 -07:00
Rajat Asthana
003b40203c Add rule to not audit when WLC accesses incremental_prop and proc
While full scan in WLC, if an app invokes incfs filesystem, it causes
an avc denial denial for accessing incremental_prop and proc
filesystem. Since, WLC does not directly access the incremental
property, and that doesn't affects the classification of the apk,
add a rule to not audit when wlc reads the incremental_prop
and proc_filesystems.

Change-Id: Ic89327a7c048b760c24a1fc272dd2ee848689699
2022-06-06 08:02:11 -07:00
Linux Build Service Account
9ae9b5d0ee Merge 984c09ecd9 on remote branch
Change-Id: I69308fae8d90623097033ba633d01b5587e4576f
2022-06-02 04:22:29 -07:00
Sanghoon Shin
419ded622f sepolicy:qcc: add qcc path to dropbox
allow both "qcc" and "qdma" in preparation to transition to "qcc"
to avoid use "qdma" word in implementation

Change-Id: I608f8ecc14e56f3b17823c759c7064f09601f594
2022-05-31 14:43:47 -07:00
qctecmdr
20b0f2dece Merge "Sepolicy: allow vendor_perfetto_dump to read/write trace_data_file" 2022-05-31 08:54:27 -07:00
Zhiqing Xiong
e640ad7890 Sepolicy: allow vendor_perfetto_dump to read/write trace_data_file
As perfetto_traces_data_file is going to be neverallow, change
to trace_data_file instead.
add allow rules vendor_perfetto_dump to read/write trace_data_file

Change-Id: Ic0569110c81c95cc6756ddc3e551733cd5411ae9
CRs-Fixed: 3194279
2022-05-25 11:00:26 +08:00
Kripa Bhat
b4c37c6568 Add sepolicy for supporting gpu profiling
Add missing vendor_hal_qspmhal policy

Change-Id: I9aae25a16a9ce3f32516ceecc758f54ec3d4e4f4
2022-05-18 23:48:18 -07:00
Linux Build Service Account
76097ab74d Merge 9ccd77d71d on remote branch
Change-Id: If22d430d8768ee4247eff7b3fbe6dce14b712b7a
2022-05-18 12:18:33 -07:00
Libo Jin
55d88c0c3e Perf:add property permission for AFP
CRs-Fixed: 3155750
Change-Id: Ibb58a13cbcc4f148a55a9c3a5ada82fc031a0cac
2022-05-16 00:01:07 -07:00
Gnaneshwar Gatla
984c09ecd9 update mutualex permissions to qms
Change-Id: I8e8c261341349840e3b34888da10ed7c8d530663
2022-05-10 12:05:45 -07:00
Linux Build Service Account
1bc251721a Merge 251782a8b7 on remote branch
Change-Id: I5835565032c2c13ef32c5ffbc1b648c47807f31f
2022-05-06 04:32:50 -07:00
Gnaneshwar Gatla
9ccd77d71d define mutualex hal service and client
Change-Id: Ifa80eab98a122840d33e9094f16a48c0dbe7edb9
2022-05-02 12:59:12 -07:00
Rohit Soneta
561a6cb426 sepolicy: Update sepolicy rules for seccamservice
Change-Id: I698bf9d57c861f38ab4b414deb692f21607bdbc6
2022-04-29 03:14:38 -07:00
qctecmdr
34278db4dd Merge "Sepolicy: allow PowerSaveMode app in UI to access system property." 2022-04-28 05:29:43 -07:00
qctecmdr
251782a8b7 Merge "sepolicy: Update sepolicy rules for seccamservice" 2022-04-26 00:49:08 -07:00
zehugong
df7469d4e4 Sepolicy: allow PowerSaveMode app in UI to access system property.
Change-Id: I06d7f7f57af6f26c7327f42845dc0711899ab5ec
2022-04-25 15:03:56 +08:00
qctecmdr
be45f3492a Merge "Allow untrusted apps to be client of the DSP HAL server" 2022-04-19 21:00:27 -07:00
Vamsi Krishna Gattupalli
313e9194d9 Allow untrusted apps to be client of the DSP HAL server
Allow untrusted APK to be a client of the DSP HAL server on user
builds.

Change-Id: I20b7ac551a66d6e02a09d0a283209ae14786066b
Signed-off-by: Vamsi Krishna Gattupalli <quic_vgattupa@quicinc.com>
2022-04-19 12:51:52 +05:30
qctecmdr
063f99d96c Merge "sepolicy: QCC package rename to com.qti.qcc" 2022-04-18 23:35:25 -07:00
qctecmdr
702b1a4b62 Merge "sepolicy: Add sepolicy for AtCmdFwd app" 2022-04-18 13:28:20 -07:00
Rohit Soneta
9559e2f564 sepolicy: Update sepolicy rules for seccamservice
Change-Id: Ib76f6d936da45208d0e46dc68b17ab08948e46f4
2022-04-14 01:53:48 -07:00
P.Adarsh Reddy
da05f122b6 Sepolicy: Add sepolicies for Qvirtmgr properties.
Change-Id: I9fba0474a73331bcdfc6a230b1cd955847c3c698
2022-04-14 12:43:23 +05:30
Phani Deepak Parasuramuni
9c9783a79f sepolicy: QCC package rename to com.qti.qcc
Change-Id: I50654d7786d1e086e52bf6dec33ef9c407799d8c
2022-04-11 10:30:29 +05:30
Linux Build Service Account
991f5f7c02 Merge 49fc190404 on remote branch
Change-Id: Idf5ec2f684815f5b9d30f55ca091081b035ee8c2
2022-04-05 13:07:41 -07:00
Sridhar Kasukurthi
efad11956d sepolicy: Add sepolicy for AtCmdFwd app
Change-Id: I5b3bf28701a785988dcaaaf207a98d0d1cb3f002
2022-04-01 13:47:02 +05:30
Shivam Agrawal
49fc190404 sepolicy: Allow wfdservice to access debug properties
Change-Id: I30159d970c5cdc31c2c7f828dc76f838e644ee69
2022-03-23 15:45:44 +05:30
Phani Deepak Parasuramuni
743d06f18a Sepolicy: make qccsyshal service file path generic in file_contexts
Change-Id: I01af575c04a4911a249652316258d99a4655a50b
2022-03-08 02:53:12 -08:00
Linux Build Service Account
871a67a90c Merge 7c3d92dfce on remote branch
Change-Id: I80b58158c7bd43129a1db6ca29244fb97329e7fa
2022-02-17 01:02:08 -08:00
Rui Wang
f8244c160c sepolicy: remove the permission for app to access qconfig.
Change-Id: I730b067330fa606a26e014e0ac5b3737d43c0717
2022-02-16 17:32:48 +08:00
Jaihind Yadav
7c3d92dfce creating 32.0.cil files and 32.0 prebuilt sepolicies.
Change-Id: Ib92095628d41d2409ba951e01f0abd201338b30d
2022-01-28 20:46:40 +05:30
Linux Build Service Account
ce2c31bdf7 Merge "Remove conflicting service to avoid bootup failure" into sepolicy-sysintf.lnx.13.0.r1-rel 2022-01-27 01:46:19 -08:00
Zube Molokwu
ba8c48be5e Remove conflicting service to avoid bootup failure
Moving IDisplayConfig AIDL service to sepolicy_vndr in order to satisfy
VTS compliance.Removing this service from private/service_contexts to
avoid bootup failure on non GSI builds.

Change-Id: I2077dcfec71fd2b5a3d8dc970b1e3658e325847a
2022-01-27 01:07:13 -08:00
Suresh Koleti
2e951aeba9 Remove IImsRadio and IQtiRadioStable definitions
- Remove IImsRadio, IQtiRadioStable and IQcRilAudio
  definitions as these needs to be defined in vendor
  to support GSI images.

Change-Id: Icfef4c5895ccae51374d83069ae93260be0f376c
CRs-Fixed: 3078236
2022-01-27 01:06:38 -08:00
Linux Build Service Account
6e04f58bb5 Merge fd0b9d688d on remote branch
Change-Id: Ide16ca31b8114edb0e7b30b65f2e8d8bbc503efe
2022-01-26 03:25:53 -08:00
qctecmdr
1649e15f5b Merge "Remove conflicting service to avoid bootup failure" 2022-01-20 05:33:04 -08:00
Suresh Koleti
850899fd1c Remove IImsRadio and IQtiRadioStable definitions
- Remove IImsRadio, IQtiRadioStable and IQcRilAudio
  definitions as these needs to be defined in vendor
  to support GSI images.

Change-Id: Icfef4c5895ccae51374d83069ae93260be0f376c
CRs-Fixed: 3078236
2022-01-18 22:26:54 -08:00
Zube Molokwu
d3c5ecc91b Remove conflicting service to avoid bootup failure
Moving IDisplayConfig AIDL service to sepolicy_vndr in order to satisfy
VTS compliance.Removing this service from private/service_contexts to
avoid bootup failure on non GSI builds.

Change-Id: I2077dcfec71fd2b5a3d8dc970b1e3658e325847a
2022-01-18 16:39:51 -08:00
Devendar Gali
fd0b9d688d NFC: FR74324, Add the new STM NFC extensions
As a part FR74324 requirement, added the new STM NFC extensions.

Change-Id: Idce9ba00b4075aa9b769850297b80df83f9ba9b1
2021-12-29 12:48:27 +05:30
Jaihind Yadav
7fb3761a9e adding <system_ext/product> versioned cil files.
Change-Id: I24cd7430d9eca69472f1594a8ed24ada3dba2647
2021-12-13 16:14:42 +05:30
qctecmdr
0540f3364f Merge "se-policy: Added permission for a new property support for WLC." 2021-12-10 01:39:04 -08:00
Ashish Jain
1fa36f96c0 se-policy: Added permission for a new property support for WLC.
Added permission for a new property support for WLC.
This property is updated in vendor side to signal perf hal is up.

Change-Id: I7bf2e08b1b73aaa3b800c9ee8c8a6e459fd4ca0b
2021-12-02 00:38:11 +05:30
Manoj Basapathi
ff8bd3acf1 sepolicy: allow platform to vendor tcmd
fixes denials of
W TcmReceiver: type=1400 audit(0.0:730): avc: denied { connectto }
for path="/dev/socket/tcmd" scontext=u:r: platform_app:s0:c512,c768
tcontext=u:r:vendor_tcmd:s0 tclass=unix_stream_socket permissive=0
app=com.qualcomm.qti.qccvendortest

Change-Id: Ic8ae27b555758f9694981de82716e67b5e4d6c8b
2021-11-09 11:50:36 +05:30
ysr
e4523f42f6 sepolicy: Update 31.0 sepolicy
Change-Id: I5276ae85f151caf186953fa79dce7b3b307b7b63
2021-10-07 16:04:50 -07:00
Jaihind Yadav
1edbb7d331 creating plat_pub_versioned.cil and vendor_sepolicy.cil for 31.0
Change-Id: Id80c4d02550407d9d2b513f50de99ff104c7d308
2021-10-06 18:55:14 +05:30