Evolution-x-devices/device_google_wahoo
2
0
Fork 0
mirror of https://github.com/Evolution-X-Devices/device_google_wahoo synced 2026-02-01 07:50:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
aec1e04de2fa9d71e8a06b3fa89c2d5f9daec3d2
device_google_wahoo/sepolicy/vendor
History
Jaekyun Seok 591308e3bf Fix access denials for Render script props 
ro.vendor.graphics.memory and vendor.debug.rs.* are used by Render
script (one of same-process HALs).
So they should be public-readable because Render script can be loaded
from almost everywhere.

Bug: 109653662
Test: succeeded building and tested with taimen
Change-Id: I5c6d6dd2f2406feaec60c965a763215c4a064f52
2018-06-05 09:26:02 +09:00
..
certs
Update ArCore/Tango pem file for userdebug
2017-09-22 13:47:13 -07:00
adsprpcd.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
app.te
Allow Hexagon DSP access to GoogleCamera application
2017-06-17 18:49:58 -07:00
atfwd.te
Mark unlabeled vendor properties with vendor_default_prop
2018-01-17 14:31:30 +09:00
audioserver.te
Power: Implement PowerHal 1.2
2017-12-04 11:56:39 -08:00
bluetooth.te
Temporarily whitelisting system domains writing vendor props
2018-05-15 14:22:26 +09:00
bootanim.te
Suppressing boot time denial
2018-01-30 10:57:02 -08:00
bug_map
Track nfc SELinux denial.
2018-05-12 09:05:43 -07:00
cameraserver.te
Temporarily whitelisting system domains writing vendor props
2018-05-15 14:22:26 +09:00
charger.te
Temporarily whitelisting system domains writing vendor props
2018-05-15 14:22:26 +09:00
chre.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
cnd.te
Adding userdebug/eng diag access for following domains
2017-11-09 09:52:26 -08:00
con_monitor.te
Give access persist.radio access
2018-04-16 21:33:34 -07:00
dataservice_app.te
sepolicy: Separate system partition sepolicy and hal macros from vendor partition
2017-07-05 16:24:33 -07:00
device.te
sepolicy: use context thermal_device for thermal driver device file
2017-09-20 18:03:03 +00:00
dnsmasq.te
Allow some denials we have seen.
2018-04-16 10:45:58 -07:00
domain.te
Mark unlabeled vendor properties with vendor_default_prop
2018-01-17 14:31:30 +09:00
dumpstate.te
dumpstate: dump SRAM & power supply properties
2018-03-21 10:05:14 -07:00
easel.te
easel.te: read access to sysfs_thermal
2018-01-03 18:26:13 +00:00
easelservice_app.te
Add permission to search the kernel's keychain
2017-06-29 16:42:22 -07:00
esed.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
file_contexts
Remove device-specific metadata policy that's now in platform.
2018-05-21 12:01:22 -07:00
file.te
battery cycle counts: backup/restore + update dumpstate
2018-04-04 09:23:39 -07:00
fsck.te
label persist partition and grant e2fsck access
2017-07-20 10:47:03 -07:00
gatekeeperd.te
Temporarily whitelisting system domains writing vendor props
2018-05-15 14:22:26 +09:00
genfs_contexts
Add /sys/kernel/memory_state_time to sysfs_power.
2018-04-06 10:01:49 +00:00
google_camera_app.te
system_executes_vendor_violators: google_camera_app and tango_core
2018-01-16 10:01:10 -08:00
hal_audio_default.te
Power: Implement PowerHal 1.2
2017-12-04 11:56:39 -08:00
hal_bluetooth_default.te
Merge "Namespace ssrdump properties with vendor prefix" into pi-dev
2018-05-01 22:34:43 +00:00
hal_bootctl.te
Remove unnecessary permissions.
2018-03-07 18:30:46 -08:00
hal_camera_default.te
camera HAL is a client of configstore
2017-09-07 17:38:05 -07:00
hal_camera.te
hal_camera: Allow traversal of persist/ am: 45c8eedd87 am: e097025bd4
2018-01-20 04:12:42 +00:00
hal_cas_default.te
cas: add CAS HAL and allow it to use vndbinder
2017-06-29 17:34:34 +00:00
hal_contexthub.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
hal_drm_clearkey.te
Add SELinux policy for clearkey HIDL service.
2018-02-01 20:43:04 +00:00
hal_drm_default.te
Move persistent data to /data/vendor.
2018-01-15 14:52:04 -08:00
hal_drm_widevine.te
Rename Widevine HIDL service to v1.1.
2018-03-31 00:19:54 +00:00
hal_dumpstate_impl.te
battery cycle counts: backup/restore + update dumpstate
2018-04-04 09:23:39 -07:00
hal_fingerprint_default.te
Move platform/vendor data violations to device policy
2017-11-09 14:03:32 -08:00
hal_gatekeeper_qti.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
hal_gatekeeper.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
hal_gnss_qti.te
Allow access to sysfs_timestamp_switch.
2018-04-25 08:52:31 -07:00
hal_graphics_allocator_default.te
Allow some denials we have seen.
2018-04-16 10:45:58 -07:00
hal_graphics_composer_default.te
Allow some denials we have seen.
2018-04-16 10:45:58 -07:00
hal_health_default.te
battery cycle counts: backup/restore + update dumpstate
2018-04-04 09:23:39 -07:00
hal_imsrtp.te
Grant HALs access to diag_device
2017-11-09 09:57:31 -08:00
hal_keymaster_qti.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
hal_light_default.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
hal_light.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
hal_memtrack_default.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
hal_neuralnetworks_hvx.te
Allow hvx hal to open application fd
2018-01-17 13:08:00 -08:00
hal_nfc_default.te
Add dontaudit rules for nfc.persist properties
2018-05-15 15:02:45 +00:00
hal_oemlock_default.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
hal_power_default.te
Merge "sepolicy: Fix denial when dump powerhal" into pi-dev
2018-04-24 00:52:36 +00:00
hal_rcsservice.te
Grant HALs access to diag_device
2017-11-09 09:57:31 -08:00
hal_sensors_default.te
Allow Sensors HAL to connect with CHRE Daemon
2017-12-07 13:37:23 -08:00
hal_tetheroffload_default.te
declare ipacm as the tetheroffload HAL
2017-06-29 04:25:14 +00:00
hal_usb_impl.te
Add SELinux permissions for vendor usb config
2018-03-26 22:53:36 -07:00
hal_vibrator_default.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
hal_vr.te
wahoo: toggle special touch mode when VR mode is active
2017-08-02 02:02:32 -07:00
hal_wifi_default.te
Suppress hal_wifi_default module loading denials.
2018-04-12 13:50:28 -07:00
hal_wifi_offload_default.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
hal_wifi_supplicant_default.te
wpa_supplicant: move control sockets to /data/vendor
2018-01-24 14:01:23 -08:00
hardware_info_app.te
battery cycle counts: backup/restore + update dumpstate
2018-04-04 09:23:39 -07:00
healthd.te
Temporarily whitelisting system domains writing vendor props
2018-05-15 14:22:26 +09:00
hwservice_contexts
hal_tetheroffload: move hwservice mapping to core policy
2018-04-11 14:57:58 -07:00
hwservice.te
Add support for NFC 1.1
2018-04-02 23:53:41 +00:00
ims.te
Adding userdebug/eng diag access for following domains
2017-11-09 09:52:26 -08:00
init_elabel.te
Add copy from /persist/elabel to /data/misc/elabel
2017-07-07 03:04:46 +00:00
init_ese.te
Allow init_ese to run grep
2017-06-27 15:39:13 -07:00
init_power.te
Allow init.power.sh to change printk console_suspend
2017-07-20 13:05:21 -07:00
init_radio.te
Move /data/misc/radio to /data/vendor/radio as per treble rules
2017-06-21 05:55:21 +00:00
init-devstart-sh.te
Mark unlabeled vendor properties with vendor_default_prop
2018-01-17 14:31:30 +09:00
init-insmod-sh.te
Mark unlabeled vendor properties with vendor_default_prop
2018-01-17 14:31:30 +09:00
init-ipastart-sh.te
wahoo: Make vendor script use vendor shell and vendor toybox
2017-06-19 11:18:51 -07:00
init-wlan-sh.te
wifi: create the sys property for wlan driver/firmware
2018-03-26 15:01:24 -07:00
init.te
STOPSHIP: move sys.vdso reflector to allow "user" builds
2018-01-16 12:44:14 -08:00
ioctl_defines
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
ioctl_macros
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
irqbalance.te
irqbalance: add msm_irqbalance to wahoo
2017-07-31 09:57:36 -07:00
irsc_util.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
kernel.te
Remove vendor_firmware_file type
2018-02-28 15:45:28 -08:00
keys.conf
sepolicy: Rename com.google.arcore to com.google.ar.core
2017-08-08 15:53:16 -07:00
location.te
Wahoo sepolicy changes
2017-07-06 12:30:04 -07:00
logger_app.te
Add SELinux permissions for vendor usb config
2018-03-26 22:53:36 -07:00
mac_permissions.xml
sepolicy: Rename com.google.arcore to com.google.ar.core
2017-08-08 15:53:16 -07:00
mds_app.te
Add SELinux rules for MDS app
2017-07-18 17:00:50 +00:00
mediacodec.te
sepolicy: remove perfd usage in mediacodec
2017-11-09 09:52:45 -08:00
mediaextractor.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
move-widevine-data-sh.te
Move persistent data to /data/vendor.
2018-01-15 14:52:04 -08:00
netd.te
Move device-agnostic netd rules to fwk policy.
2017-10-20 23:08:03 +00:00
netmgrd.te
Allow some denials we have seen.
2018-04-16 10:45:58 -07:00
netutils_wrapper.te
Adding intermittent taimen denials to bug_map and adding dontaudit
2017-11-20 19:01:58 +00:00
pd_services.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
per_mgr.te
Remove treble violations from sepolicy
2017-06-15 11:26:24 -07:00
per_proxy.te
Remove treble violations from sepolicy
2017-06-15 11:26:24 -07:00
perfd.te
wahoo: power: switch to libperfmgr for powerhint
2018-01-04 13:51:18 -08:00
platform_app.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
port-bridge.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
property_contexts
Fix access denials for Render script props
2018-06-05 09:26:02 +09:00
property.te
sepolicy: cleanup tel_mon_prop as its no more used
2018-05-22 23:57:44 +00:00
qlogd.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
qmuxd.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
qtelephony.te
add atfwd service and related policy.
2017-07-13 15:39:30 +02:00
qti.te
Allow access to sysfs_timestamp_switch.
2018-04-25 08:52:31 -07:00
radio.te
sepolicy: cleanup tel_mon_prop as its no more used
2018-05-22 23:57:44 +00:00
ramdump_app.te
Namespace ssrdump properties with vendor prefix
2018-04-12 18:43:32 -07:00
ramdump.te
Namespace ramdump_prop with vendor prefix (2/7)
2018-03-22 18:27:50 +09:00
rfs_access.te
Narrow down tftp_server's access to /persist
2017-06-22 12:44:40 -07:00
rild.te
sepolicy: cleanup tel_mon_prop as its no more used
2018-05-22 23:57:44 +00:00
rmt_storage.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
seapp_contexts
enable power anomaly detection
2018-01-10 19:45:53 -08:00
sensors.te
Adding userdebug/eng diag access for following domains
2017-11-09 09:52:26 -08:00
service_contexts
Remove service_contexts.
2017-07-28 12:57:21 +00:00
shell.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
smlog_dump.te
Ensure taking a bugreport generates no denials.
2018-03-07 18:30:25 -08:00
ssr_detector.te
Namespace ssrdump properties with vendor prefix
2018-04-12 18:43:32 -07:00
ssr_diag.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
ssr_setup.te
Allowed ssr_setup to access sysfs_msm_subsys for user builds.
2017-11-07 14:52:37 -08:00
subsystem_ramdump.te
Namespace ssrdump properties with vendor prefix
2018-04-12 18:43:32 -07:00
surfaceflinger.te
Temporarily whitelisting system domains writing vendor props
2018-05-15 14:22:26 +09:00
system_app.te
sepolicy: cleanup tel_mon_prop as its no more used
2018-05-22 23:57:44 +00:00
system_server.te
Temporarily whitelisting system domains writing vendor props
2018-05-15 14:22:26 +09:00
tango_core.te
system_executes_vendor_violators: google_camera_app and tango_core
2018-01-16 10:01:10 -08:00
tee.te
Ban sharing data between platform and vendor processes
2017-11-08 20:20:09 +00:00
thermal-engine.te
Label vendor sys/*/power_supply/* as sysfs_batteryinfo
2017-12-12 22:33:04 +00:00
time_daemon.te
Dontaudit denial caused by race with labeling.
2018-02-26 13:50:11 -08:00
timeservice_app.te
Add policies to remove System UID from time service
2017-06-30 23:16:39 +00:00
ueventd.te
ueventd: remove redundant rules
2017-07-11 07:55:12 -07:00
update_engine_common.te
Add BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIR
2017-06-02 13:45:16 -07:00
vendor_init.te
Hide denials caused by race with labeling.
2018-04-26 10:01:51 -07:00
vndservice_contexts
Add easel sepolicy.
2017-11-09 03:58:02 +00:00
vndservice.te
Add easel sepolicy.
2017-11-09 03:58:02 +00:00
vold.te
Remove regex and label the whole directory.
2018-03-08 15:32:39 -08:00
wcnss_filter.te
Merge "Namespace ssrdump properties with vendor prefix" into pi-dev
2018-05-01 22:34:43 +00:00
wcnss_service.te
Allow some denials we have seen.
2018-04-16 10:45:58 -07:00