summaryrefslogtreecommitdiff
path: root/sepolicy
AgeCommit message (Collapse)Author
2020-04-25audio: Set Analog and HDMI mixer controlsAmit Pundir
Set Analog and HDMI mixer controls for db845c on boot completion using tinymix. Put a 1 second sleep in-between pd-mapper and tinymix to let sound/codecs initialized properly before setting mixer controls. Also made sure that audio out interface is ready before audioserver service get started. Change-Id: Ib321559815e5d22d224fc36a1fe6c21f52df3eec Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
2020-04-25sepolicy: Cleanup and cosmetic changesAmit Pundir
No functional changes. Renamed few labels and removed older kernel support. Earlier I named few framework sysfs labels based on the execs accessing those sysfs entries. For example: /sys/class/remoteproc u:object_r:sysfs_tqftpserv:s0 just because tqftpserv was the only binary which needed access of remoteproc sysfs. That was short sighted and I try to fix some of such cosmetic mistakes in this patch. All the remoteproc sysfs entries (adsp/cdsp) are labeled as sysfs_remoteproc. Also removed few sysfs entries needed to bring display on obsolete v5.3 and older kernels. Signed-off-by: Amit Pundir <amit.pundir@linaro.org> Change-Id: I9b09be07d9f74708a6be89408b565dde7c184dfd
2020-04-25qcom: qrtr: Disable qrtr-ns and qrtr-cfgAmit Pundir
No need to run qrtr-ns and qrtr-cfg services explicitly. They are moved to kernel now starting from v5.7-rc1. We are keeping qrtr-lookup around for debugging. Signed-off-by: Amit Pundir <amit.pundir@linaro.org> Change-Id: I02d72e73ef3d64fed1c024a97cec3560241aff22
2020-04-25sepolicy: pd-mapper: Fix denials introduced by new pd-mapper changesAmit Pundir
Signed-off-by: Amit Pundir <amit.pundir@linaro.org> Change-Id: If72dc1f82f2d5752e9c5998a1f2f7c21fb25ec1d
2020-04-25db845c: Set Ethernet MAC address on bootAmit Pundir
db845c development boards do not have unique Ethernet MAC address. All boards share same MAC address and it cause problems while running CTS tests on db845c in a lab with multiple db845c boards connected. Set the Ethernet MAC address based on board's unique serial number as a workaround for now. Signed-off-by: Amit Pundir <amit.pundir@linaro.org> Change-Id: I1c5b63b7d6cbf5e55ac40980b5823cc6bb4f44d3
2020-04-01sepolicy: dontaudit getattr access to graphics_deviceAmit Pundir
dmesg and logcat is filled with selinux denials related to getting access to graphics device attributes. From bootanimation to all the way up to video playback, all display/graphics related apps/services seem to need access to graphics device attributes. Although the denials are non-fatal but it is good to get rid of the denial messages. Change-Id: Ic65364c08b5de8aab8b22997ab5215304a4782ac Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
2020-03-17db845c: qcom: Add userspace tools to talk to dsp and modemAmit Pundir
Add Qcom userspace tools and their respective sepolicy rules. Userspace tools are downloaded from following github: To trigger loading of wlan firmware on SDM845 git clone https://github.com/andersson/pd-mapper Userspace reference for net/qrtr in the Linux kernel git clone https://github.com/andersson/qrtr Qualcomm Remote Filesystem Service Implementation git clone https://github.com/andersson/rmtfs Trivial File Transfer Protocol server over AF_QIPCRTR git clone https://github.com/andersson/tqftpserv Change-Id: Ic466af6fef010a9b71c90e38205f49a876b001e2 Signed-off-by: Amit Pundir <amit.pundir@linaro.org> Signed-off-by: John Stultz <john.stultz@linaro.org>
2020-03-16db845c: Make userdata formattableJohn Stultz
If one runs "fastboot erase userdata", and then does not flash a userdata image to the partition, the system will fail to boot as /data/ will not mount, and the apex and dalvik cache directories won't be present or writable. This tries to address this by adding the formattable flag to the fstab and add the partition to the sepolicy so mkfs can access it. NOTE: I did have to use the full by-name path in the fstab, which is less flexible then the LABEL= method, but if the partition isn't formatted there isn't neceessarily a partition label to find. Big thanks to AmitP for suggesting this approach Signed-off-by: John Stultz <john.stultz@linaro.org> Change-Id: Ia678d0d1d5e1eb35462f8fcfee478969c614b0d4
2020-01-24netd does not require and should not have module loading privsMaciej Żenczykowski
Any required functionally should be built into the kernel. Test: NA Signed-off-by: Maciej Żenczykowski <maze@google.com> Change-Id: I500d0079ebd0a49a5be5419bad48502c19b4b7df (cherry picked from commit 6418bdeb46f640a5a6d1e190b7d65c8869911316)
2020-01-18Remove allow dnsmasq netd:{fifo_file,unix_stream_socket} getattrMaciej Żenczykowski
Already provided by system/sepolicy/public/dnsmasq.te: allow dnsmasq netd:fifo_file { getattr read write }; allow dnsmasq netd:unix_stream_socket { getattr read write }; Test: N/A Signed-off-by: Maciej Żenczykowski <maze@google.com> Change-Id: I6fa06d1d61c4abea1d65130e87fb49ac5bc57a0f
2019-10-25db845c: sepolicy: Add some kernel sepolicy rules to allow firmware loadingJohn Stultz
Previously we were seeing issues w/ firmware loading due to sepolicy blocking the in-kernel loader from accessing /vendor/firmware files This patch adds some sepolicy additions suggested by audit2allow that let it work. Change-Id: Ie7238a2ae30d1377dcd73a6c194f0017989006bf Signed-off-by: John Stultz <john.stultz@linaro.org>
2019-10-08sepolicy: Add sysfs path for v5.4-rc1+ kernelsAmit Pundir
Upstream kernel commit a1875bf98290 ("arm64: dts: qcom: sdm845: Add unit name to soc node") broke sysfs path for sdm845 devices running kernel v5.4-rc1 and above. This broke display on db845c when selinux is enforced. Change-Id: Ic447b3747c3f6ac40141ba8e74f0101c42a4f214 Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
2019-09-24db845c: Add support for AOSP on dragonboard db845cAmit Pundir
Boots dragonboard db845c to console. HDMI display broken due to missing firmware files. Change-Id: I820aeb7b7ab2536a362f9ae37cc44906be0a6190 Signed-off-by: Amit Pundir <amit.pundir@linaro.org>