Commit Graph

33 Commits

Author SHA1 Message Date
Sebastiano Barezzi
f206a06d5a rosemary: Build common Xiaomi fingerprint HIDL
Change-Id: I6c29a831e985ee440c92a98aad8d33f25b9e5b2d
2023-04-15 14:36:56 +02:00
Kevin F. Haggerty
e20160a997 rosemary: sepolicy: Allow system_app to read /proc/pagetypeinfo
avc: denied { read } for name="pagetypeinfo" dev="proc" ino=4026543033
scontext=u:r:system_app:s0 tcontext=u:object_r:proc_pagetypeinfo:s0
tclass=file permissive=0

Change-Id: I16465eb9acca9ff64a755d47f86f4ff424ebe4de
2023-04-15 14:36:56 +02:00
Kevin F. Haggerty
cce24cd712 rosemary: sepolicy: Allow system_app to access zram sysfs nodes
avc: denied { search } for name="zram0" dev="sysfs" ino=20744
scontext=u:r:system_app:s0 tcontext=u:object_r:sysfs_zram:s0 tclass=dir
permissive=0

avc: denied { open } for name="mem_used_total" dev="sysfs" ino=20804
scontext=u:r:system_app:s0 tcontext=u:object_r:sysfs_zram:s0 tclass=file
permissive=0

avc: denied { read } for name="mem_used_total" dev="sysfs" ino=20804
scontext=u:r:system_app:s0 tcontext=u:object_r:sysfs_zram:s0 tclass=file
permissive=0

Change-Id: Ide9b1a9488b26fa69e7a2c8e73a8e657c8b28beb
2023-04-15 14:36:56 +02:00
bengris32
37e2411ed5 rosemary: sepolicy: Label persist camera data directory
Signed-off-by: bengris32 <bengris32@protonmail.ch>
2022-12-07 00:10:21 +01:00
bengris32
15c9c37a1d rosemary: sepolicy: Label FPC fingerprint sysfs nodes
Signed-off-by: bengris32 <bengris32@protonmail.ch>
2022-12-07 00:10:21 +01:00
bengris32
d8361dd065 rosemary: sepolicy: Label more fingerprint props
Signed-off-by: bengris32 <bengris32@protonmail.ch>
2022-12-07 00:10:21 +01:00
bengris32
19db7f0d55 rosemary: sepolicy: Allow mi_thermald to access battery supply
Signed-off-by: bengris32 <bengris32@protonmail.ch>
2022-12-07 00:10:21 +01:00
bengris32
ef47eaf9b7 rosemary: sepolicy: Label some more camera props
Signed-off-by: bengris32 <bengris32@protonmail.ch>
2022-12-07 00:10:21 +01:00
bengris32
68c439b1f4 rosemary: sepolicy: Allow fingerprint HAL to read battery stats
avc: denied { search } for name="battery" dev="sysfs" ino=8944 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
E fpc_tac : Unable to open '/sys/bus/platform/devices/battery/modalias'
avc: denied { search } for name="mt-pmic" dev="sysfs" ino=16882 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_pmu:s0 tclass=dir permissive=0
E fpc_tac : Unable to open '/sys/bus/platform/devices/mt-pmic/modalias'

Signed-off-by: bengris32 <bengris32@protonmail.ch>
2022-12-07 00:10:21 +01:00
bengris32
2c1d2a27cc rosemary: Allow Fingerprint HAL to write to relavent sysfs node
Signed-off-by: bengris32 <bengris32@protonmail.ch>
2022-12-07 00:10:21 +01:00
Matsvei Niaverau
7daa6b4197 rosemary: sepolicy: Label some audio properties
Change-Id: I7c7833685434ed463304ac8b37a566c531360468
2022-12-07 00:10:21 +01:00
Matsvei Niaverau
539de33834 rosemary: sepolicy: Resolve fuelgauged_nvram denials
Change-Id: Ib19b38392df23e6d5bd3ad8e71f363296cf7d2dd
2022-12-07 00:10:21 +01:00
Matsvei Niaverau
f4d4532958 rosemary: sepolicy: Resolve mi_thermald denials
Change-Id: I06ee95cf1dee091ff71c167c1c9e037dafd8a380
2022-12-07 00:10:21 +01:00
Matsvei Niaverau
ab4c47327f rosemary: sepolicy: Label more camera properties
Change-Id: I4f3576bf830b9c757afe2b6d3e4b4a0fffa512c8
2022-12-07 00:10:21 +01:00
bengris32
5a70d2c77d rosemary: sepolicy: Label persist audio data files
Signed-off-by: bengris32 <bengris32@protonmail.ch>
Change-Id: Id065f96267996c321bcb737966802ac24491ce11
2022-12-07 00:10:21 +01:00
bengris32
1b750b9020 rosemary: sepolicy: Label cirrus audio data directory
Signed-off-by: bengris32 <bengris32@protonmail.ch>
Change-Id: Ifdf8e7dc72ce8e3f814df3fe1b6af29f4b9e043e
2022-12-07 00:10:21 +01:00
bengris32
876008ec0a rosemary: sepolicy: Address Health HAL denials
Signed-off-by: bengris32 <bengris32@protonmail.ch>
Change-Id: I8d4c4d1d792a2a8ad0a4af1f7a49a2f2e1202c9d
2022-12-07 00:10:21 +01:00
bengris32
96606d4e79 rosemary: Allow PowerHAL to write to touchpanel nodes
* Required for DT2W.

Signed-off-by: bengris32 <bengris32@protonmail.ch>
Change-Id: Ie95313704a3c6572ca7908ef01f609acad639694
2022-12-07 00:10:21 +01:00
Matsvei Niaverau
4b8f665423 rosemary: sepolicy: Label USB HAL
Change-Id: Ie360101c63ad3566a0ff558ef3b9ce8b77881b52
2022-12-07 00:10:02 +01:00
Matsvei Niaverau
4f1136d9cc rosemary: sepolicy: Define thermal_engine prop
Change-Id: Ib985028b93fd66e4082cdea77263c7fd4b1a6597
2022-12-07 00:09:40 +01:00
Zinadin Zidan
b1ced80119 rosemary: sepolicy: Address and cleanup mi_thermald denials
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>
Change-Id: I6dc276ea6578280c8c42d2653ca803f6168b90a9
2022-12-07 00:09:40 +01:00
Zinadin Zidan
d393577b30 rosemary: sepolicy: Address mi_thermald sepolicy denials
This is a squash of the following commits:

cannon: sepolicy: Label mi_thermald and grant required permissions

Change-Id: I9eebb3c911f27aaeb128696c261d902a06c52cef
Co-Authored-By: Azurite <azuritenoah@gmail.com>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>
Reviewed-on: https://review.statixos.com/c/android_device_xiaomi_cannon/+/7756
Reviewed-by: Vaisakh Murali <mvaisakh@statixos.com>
Tested-by: Vaisakh Murali <mvaisakh@statixos.com>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>

cannon: sepolicy: Drop sysfs_battery_supply sepolicy rules

Ref: https://gerrit.pixelexperience.org/c/device_mediatek_sepolicy_vndr/+/12410/1

Change-Id: Id0af2893e4ab4229ab9aa7f91c66359e878616a2
Signed-off-by: Zinadin Zidan <zidan44@pixelexperience.org>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>
Reviewed-on: https://review.statixos.com/c/android_device_xiaomi_cannon/+/7757
Reviewed-by: Vaisakh Murali <mvaisakh@statixos.com>
Tested-by: Vaisakh Murali <mvaisakh@statixos.com>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>

cannon: sepolicy: Allow mi_thermald to read thermal and cpu conf

Change-Id: I3bd838967f40fbbfa149c8aa8258ed8511d9dd50
Signed-off-by: Zinadin Zidan <zidan44@pixelexperience.org>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>
Reviewed-on: https://review.statixos.com/c/android_device_xiaomi_cannon/+/7758
Reviewed-by: Vaisakh Murali <mvaisakh@statixos.com>
Tested-by: Vaisakh Murali <mvaisakh@statixos.com>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>

cannon: sepolicy: Allow mi_thermald to access sysfs_leds

Change-Id: Ie861d1797be99b5b22fb3927f71be388e835a3e8
Signed-off-by: Zinadin Zidan <zidan44@pixelexperience.org>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>
Reviewed-on: https://review.statixos.com/c/android_device_xiaomi_cannon/+/7759
Reviewed-by: Vaisakh Murali <mvaisakh@statixos.com>
Tested-by: Vaisakh Murali <mvaisakh@statixos.com>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>
2022-12-07 00:09:40 +01:00
SamarV-121
723cde3fdc rosemary: sepolicy: Label WiFi HAL
Change-Id: I2d282bbbfa13f7c1fe17bd97049d4a4d6d3fff7a
2022-12-07 00:09:19 +01:00
Matsvei Niaverau
3e8c0424b5 rosemary: sepolicy: Allow vendor_init to write fingerprint data
Change-Id: I0c35db23258221142009db4e7e372ffccc65283e
2022-12-07 00:08:51 +01:00
bengris32
0e4dd1b970 rosemary: sepolicy: nfc_data_file -> nfc_data_vendor_file
Signed-off-by: bengris32 <bengris32@protonmail.ch>
Change-Id: Icf705f92ee9d362f6dc1c8e95960cc6b5394cd0c
2022-12-07 00:08:51 +01:00
bengris32
af2679a76c rosemary: sepolicy: Allow vendor_init to adjust vm and sched parameters
Signed-off-by: bengris32 <bengris32@protonmail.ch>
Change-Id: I3854b84b8d98bc9a7098bb202cd56112742b5aaf
2022-12-07 00:08:51 +01:00
bengris32
d0f40a9b0d rosemary: sepolicy: Allow vendor_init to create NFC directories
Signed-off-by: bengris32 <bengris32@protonmail.ch>
Change-Id: I2ac4549b51a722f3fca6dbba7c61b46e86433747
2022-12-07 00:08:51 +01:00
bengris32
fe63fd790a rosemary: sepolicy: Label tpi camera property
Signed-off-by: bengris32 <bengris32@protonmail.ch>
Change-Id: Iba0aaa4f6f3086f9db4100acca17541ac6c169ac
2022-12-07 00:08:51 +01:00
bengris32
032c3b56f7 rosemary: sepolicy: Allow Audio HAL to search in persist
Signed-off-by: bengris32 <bengris32@protonmail.ch>
Change-Id: I33edffa5f22fea07fff94493022bfb722b0ee9a7
2022-12-07 00:08:51 +01:00
bengris32
97c1305dcf rosemary: sepolicy: Allow Camera HAL to search in persist_data_file
Signed-off-by: bengris32 <bengris32@protonmail.ch>
Change-Id: I6e441132ec29ec084e4cfc2eee6669f693a53f72
2022-12-07 00:08:51 +01:00
SamarV-121
8b4c2f65b4 rosemary: sepolicy: Allow fingerprint HAL to create netlink socket
Change-Id: Iebcc9f29f0bd2c83c431f881ba63e569ab574049
Signed-off-by: SamarV-121 <samarvispute121@pm.me>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>
2022-12-07 00:08:51 +01:00
Adithya R
cf74f4b595 rosemary: sepolicy: Label goodix fingerprint interfaces
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>
Change-Id: I24987fe8db43a61ea2119ce75eb0e8be1d513076
2022-12-07 00:08:51 +01:00
LinkBoi00
5219a2446a rosemary: sepolicy: Initial vendor SEpolicy
Co-authored-by: Vaisakh Murali <mvaisakh@statixos.com>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>
Change-Id: If2f65d3bd9b5849557b911fa2cbfcc2392d568c9
2022-12-07 00:08:38 +01:00