Brian Duddie dfdaceabf2 Add binderized context hub HAL ...

Add context hub HAL implementation to the build, with new sepolicy files
that resolve these denials:

type=1400 audit(4779207.059:418): avc: denied { write } for pid=809
comm="android.hardwar" name="chre" dev="tmpfs" ino=32491
scontext=u:r:hal_contexthub_default:s0
tcontext=u:object_r:socket_device:s0 tclass=sock_file permissive=1

type=1400 audit(5568590.159:45): avc: denied { connectto } for pid=734
comm="android.hardwar" path="/dev/socket/chre"
scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:chre:s0
tclass=unix_stream_socket permissive=1

Bug: 35808469
Test: confirm HAL gets loaded, VTS passes, no denials from
      hal_contexthub_default
Change-Id: I1882571c0541de78242755cd4b3b1548365a388b

2017-04-03 11:49:09 -07:00

..

adsprpcd.te

Adding context and allows to handle boot denials

2017-03-23 20:32:30 +00:00

audioserver.te

Bring up binderized Audio and Soundtrigger services on new Pixels

2017-03-30 11:19:37 -07:00

bluetooth.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

bootanim.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

cameraserver.te

Adding rules and contexts for following denials

2017-03-22 10:56:52 -07:00

chre.te

Add sepolicy for CHRE

2017-03-30 15:01:41 -07:00

cnd.te

Adding allows to fix following denials during run/boot time

2017-04-03 00:23:03 +00:00

device.te

Fixing the following run and boot time denials

2017-04-02 19:07:17 -07:00

domain.te

Add binderized memtrack HAL service

2017-03-27 11:53:48 -07:00

dumpstate.te

Add wahoo dumpstate and sepolicy with smlog

2017-03-30 02:53:48 +00:00

file_contexts

Add binderized context hub HAL

2017-04-03 11:49:09 -07:00

file.te

Add binderized context hub HAL

2017-04-03 11:49:09 -07:00

folio_daemon.te

Add support for folio cases

2017-03-31 13:08:45 -07:00

fsck.te

Adding contexts and rules to address denials.

2017-03-16 21:47:32 +00:00

gatekeeperd.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

genfs_contexts

Add binderized memtrack HAL service

2017-03-27 11:53:48 -07:00

hal_audio.te

Bring up binderized Audio and Soundtrigger services on new Pixels

2017-03-30 11:19:37 -07:00

hal_bluetooth_default.te

Adding allows to fix following denials during run/boot time

2017-04-03 00:23:03 +00:00

hal_bootctl_default.te

Fixing the following run and boot time denials

2017-04-02 19:07:17 -07:00

hal_camera_default.te

Annotate violators of "no Binder in vendor" rule

2017-03-24 08:40:00 -07:00

hal_camera.te

Add cameraserver and NFC HAL to socket comms violators list

2017-03-30 18:00:38 -07:00

hal_contexthub.te

Add binderized context hub HAL

2017-04-03 11:49:09 -07:00

hal_dumpstate_impl.te

Add QShrink database file in bugreport

2017-03-31 14:04:05 -07:00

hal_fingerprint_default.te

Annotate violators of "no Binder in vendor" rule

2017-03-24 08:40:00 -07:00

hal_fingerprint.te

Merge "Annotate violators of "no Binder in vendor" rule"

2017-03-24 21:13:20 +00:00

hal_gatekeeper.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

hal_graphics_composer_default.te

Removing allow rule.

2017-03-28 16:00:38 -07:00

hal_memtrack_default.te

Fixing the following run and boot time denials

2017-04-02 19:07:17 -07:00

hal_nfc_default.te

nfc: sepolicy: creates data/vendor/nfc/ for HAL specific data

2017-03-31 12:02:03 -07:00

hal_power_default.te

power: import and enable binderized power hal

2017-03-29 21:04:32 -07:00

hal_wifi_default.te

Annotate core components that access vendor data types

2017-03-30 21:32:47 -07:00

ims.te

Adding allows to fix following denials during run/boot time

2017-04-03 00:23:03 +00:00

imscm.te

Removing domain_deprecated from .te files

2017-03-16 15:58:12 -07:00

init_power.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

init_radio.te

Mark vendor components that access core data types

2017-03-28 14:17:44 -07:00

init.te

Adding context and allows to handle boot denials

2017-03-23 20:32:30 +00:00

ioctl_defines

Adding ism service allow rules and according ioctl_define

2017-03-16 22:10:52 +00:00

ioctl_macros

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

irsc_util.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

kernel.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

location.te

Merge "Adding allows to handle boot and runtime denials"

2017-03-28 21:13:23 +00:00

mediacodec.te

Adding files and allows to handle denials

2017-03-20 17:00:43 -07:00

netmgrd.te

Mark vendor components that access core data types am: 5182fda3a2

2017-03-29 14:14:10 +00:00

pd_services.te

Adding context and allows to handle boot denials

2017-03-23 20:32:30 +00:00

per_mgr.te

Merge "Annotate violators of "no Binder in vendor" rule"

2017-03-24 21:13:20 +00:00

per_proxy.te

Annotate violators of "no Binder in vendor" rule

2017-03-24 08:40:00 -07:00

perfd.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

platform_app.te

Adding allows to fix following denials during run/boot time

2017-04-03 00:23:03 +00:00

port-bridge.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

property_contexts

Fixing the following run and boot time denials

2017-04-02 19:07:17 -07:00

property.te

Adding allows to fix following denials during run/boot time

2017-04-03 00:23:03 +00:00

qmuxd.te

Removing domain_deprecated from .te files

2017-03-16 15:58:12 -07:00

qti.te

Adding context and allows to handle boot denials

2017-03-23 20:32:30 +00:00

radio.te

Adding allows to handle boot and runtime denials

2017-03-27 20:48:52 +00:00

ramdump.te

Adding allows to fix following denials during run/boot time

2017-04-03 00:23:03 +00:00

rfs_access.te

Adding allows to handle boot and runtime denials

2017-03-27 20:48:52 +00:00

rild.te

Bring up binderized Audio and Soundtrigger services on new Pixels

2017-03-30 11:19:37 -07:00

rmt_storage.te

Adding context and allows to handle boot denials

2017-03-23 20:32:30 +00:00

sensors.te

Adding context and allows to handle boot denials

2017-03-23 20:32:30 +00:00

service_contexts

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

service.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

smlog_dump.te

Add wahoo dumpstate and sepolicy with smlog

2017-03-30 02:53:48 +00:00

ssr_diag.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

ssr_setup.te

sepolicy: Support subsystem ramdump selinux config

2017-03-10 23:27:39 +00:00

subsystem_ramdump.te

sepolicy: Support subsystem ramdump selinux config

2017-03-10 23:27:39 +00:00

surfaceflinger.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

system_app.te

Annotate core components that access vendor data types

2017-03-30 21:32:47 -07:00

system_server.te

Adding allows to fix following denials during run/boot time

2017-04-03 00:23:03 +00:00

tee.te

Fixing the following run and boot time denials

2017-04-02 19:07:17 -07:00

thermal-engine.te

Adding allows to handle boot and runtime denials

2017-03-27 20:48:52 +00:00

time_daemon.te

sepolicy: add time_daemon domain to allow service to boot

2017-03-31 16:56:01 -07:00

ueventd.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

update_verifier.te

Adding context and allows to handle boot denials

2017-03-23 20:32:30 +00:00

vold.te

Fixing the following run and boot time denials

2017-04-02 19:07:17 -07:00

wcnss_filter.te

Adding allows to fix following denials during run/boot time

2017-04-03 00:23:03 +00:00

wcnss_service.te

Adding allows to fix following denials during run/boot time

2017-04-03 00:23:03 +00:00