Commit Graph

2227 Commits

Author SHA1 Message Date
Kujou Yuko 01114b5c86 sepolicy: common: Don't audit storaged to read debugfs_mmc files
* This sepolicy triggers a neverallow check on new platforms (e.g.
   taro).

Ref:
 1. https://git.codelinaro.org/clo/la/platform/system/sepolicy/-/blob/LA.QSSI.13.0.r1-09000.01-qssi.0/public/te_macros#L537-L547
 2. https://git.codelinaro.org/clo/la/platform/system/sepolicy/-/blob/LA.QSSI.13.0.r1-09000.01-qssi.0/private/domain.te#L588-L600

Change-Id: I453920dc5e2f4d1695c06e8ad2ba1540024dab4d
2023-02-15 06:45:39 +00:00
Jake Weinstein 92132caeea system: Update to LA.QSSI.13.0.r1-09000.01-qssi.0
Change-Id: If02ed9eadeb16e2ae256accdc5d8aac1bfbb4686
2023-02-11 12:15:56 +09:00
Jake Weinstein b316c59d31 common: Inherit compatibility_matrix.xml from vendor-common
Change-Id: I7dbb6a66401ae6c3ec827a8b6037944d84ef605b
2023-02-08 09:09:41 +00:00
Jprimero15 d6dabf22d9 common: sepolicy: legacy: Fix more pasr memory denials
01-04 05:26:11.303 W/.pasr   (3079): type=1400 audit(0.0:179): avc: denied { read } for name="u:object_r:vendor_pasr_prop:s0" dev="tmpfs" ino=15696 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:vendor_pasr_prop:s0 tclass=file permissive=0 app=com.qti.pasrservice
01-04 05:26:20.209 E/SELinux (443): avc:  denied  { find } for interface=vendor.qti.memory.pasrmanager::IPasrManager sid=u:r:hal_pasrmanager_memory_qti:s0 pid=6570 scontext=u:r:hal_pasrmanager_memory_qti:s0 tcontext=u:object_r:hal_pasrmanager_memory_hwservice:s0 tclass=hwservice_manager permissive=0
01-04 08:16:59.438 E/SELinux (443): avc:  denied  { add } for interface=android.hidl.base::IBase sid=u:r:hal_pasrmanager_memory_qti:s0 pid=4636 scontext=u:r:hal_pasrmanager_memory_qti:s0 tcontext=u:object_r:hidl_base_hwservice:s0 tclass=hwservice_manager permissive=0

Change-Id: I3633de8c2775e60f78c44a0cea3c9416f7506c9a
Signed-off-by: Jprimero15 <jprimero155@gmail.com>
2023-02-08 07:41:32 +00:00
Kujou Yuko 4f8b5049cb system: audio: Add missing QSSI QXR NDK platform backend lib
Change-Id: I757de1c4ebc568021c6ffd2b0de4f4fa90ee5579
2023-02-08 11:44:05 +09:00
Sudarshan Rajagopalan 9bd6d99dc1 common: sepolicy: legacy: Add policy for new pasr hal
Add sepolicy for vendor.qti.memory.pasrmanager.
 - define property contexts for pasr
 - include get_prop permission for vendor.pasr. properties

Change-Id: I94ff1a9c261496e3bffa072bb4efd24b46e8bb3c

Jprimero15 Edits:
* removed: type hal_pasrmanager_memory_hwservice, hwservice_manager_type; (duplicated from sepolicy-legacy)
* commented out: hal_attribute_hwservice(hal_pasrmanager_memory, hal_pasrmanager_memory_hwservice) (neverallow)
* applied commit: Attach vendor_property_type to properties
* changed /vendor/ to /(vendor|system/vendor)/

Change-Id: Id9f1f7756a15ba610ea2fcf64ff647527f725b0a
Signed-off-by: Jprimero15 <jprimero155@gmail.com>
2023-02-05 05:55:38 +00:00
Jprimero15 4b3f799654 common: sepolicy: legacy: hal_perf -> vendor_hal_perf
Change-Id: Iee50c1931b2865f0ddbc2aa89113cdc6deaea358
Signed-off-by: Jprimero15 <jprimero155@gmail.com>
2023-02-05 03:14:38 +00:00
Jprimero15 45cd2b9b5f common: sepolicy: legacy: More denial fixes
* add dontaudit while at it

Change-Id: Ibab56cd5ecc6959ec34e492a5b2f028650489e10
Signed-off-by: Jprimero15 <jprimero155@gmail.com>
2023-02-05 03:14:30 +00:00
Jake Weinstein 8874d5f5de common: Move 5.4 family to adreno-6xx-legacy
Sadly, newer libraries cause corruption when switching
tabs in Chrome.

Change-Id: Ib9bd93a483179fcf5a34c16bb755c1a56b8fe234
2023-02-02 01:56:45 +09:00
Michael Bestas 18f7f724fd common: sepolicy: legacy: Label persist.vendor.bluetooth. properties
* As seen on non legacy

Change-Id: I06c8b554256565f536fc643e3a743272c841cdef
Signed-off-by: Jprimero15 <jprimero155@gmail.com>
2023-01-25 10:53:53 +00:00
Chirayu Desai db5ad3323a common: sepolicy: legacy: Label persist/rfs recursively
* restorecon_recursive silenty fails otherwise.

Change-Id: If31d9b55dc68f39ee6b43d784167e7233b8e07c8
Signed-off-by: Jprimero15 <jprimero155@gmail.com>
2023-01-25 10:53:30 +00:00
Bruno Martins 24e89eed83 common: sepolicy: legacy: Allow mm-qcamerad to access v4L "name" node
Change-Id: I42b329d782795feed776b09d5c12d89be9bac868
Signed-off-by: Jprimero15 <jprimero155@gmail.com>
2023-01-25 10:52:59 +00:00
Bruno Martins f5ce19c896 common: sepolicy: legacy: Fix video4linux "name" node labeling
Do u even regex, br0?

Change-Id: If907448d394f967268c9f72051bec5a47220087b
Signed-off-by: Jprimero15 <jprimero155@gmail.com>
2023-01-25 10:52:37 +00:00
Bavyasritha Alahari 5c4dff9a3f common: sepolicy: legacy: remove legacy sysmon_app domain
Remove unused sysmon_app domain from the legacy test
and corresponding rule in seapp_contexts.

Change-Id: I54390f9d186477e5ac52b363392db4efbe546664
2023-01-25 10:50:35 +00:00
Michael Bestas 97e4802166 common: sepolicy: legacy: Label persist partition for all SoCs
Change-Id: I8db3acb9a1b958ec59c7f14c6ee16ea466548cc7
Signed-off-by: Jprimero15 <jprimero155@gmail.com>
2023-01-25 10:50:14 +00:00
Jake Weinstein 2b1d3d1de6 common: sepolicy: legacy: Add support for MSM8937/MSM8953/MSM8998/SDM660
from LA.UM.9.6.4.r1-03900-89xx.QSSI13.0 and LA.UM.11.2.1.r1-02600-sdm660.0

Includes support for MSM8937/MSM8953/MSM8998/SDM660

Change-Id: Iaa111b2eebaf7ef755b57cea26d6c4ba0a4d5def
2023-01-20 06:42:13 +00:00
Tobias Merkel 25050e82ef common: sepolicy: move hub_app rules to private
Change-Id: I16b8c19d3753b9aa9236c924188400aaa476e1fc
2023-01-20 06:20:10 +00:00
Jake Weinstein f815cf4635 common: sepolicy: Commonize system SEPolicy
There's no reason for these to be separate since
all devices use the same QSSI system policy.

This also fixes inheriting of system policies
as the directory in the Makefile and
the actual directory did not match before.

Change-Id: I48b178f136b2a6ff0d0bb36264149b46ef3884c4
2023-01-20 03:18:58 +00:00
Anay Wadhera b1e2ebf875 init: switch to aidl supplicant interface
Change-Id: Id84db47dd94e50010641337c4dcf956a4c4a6be8
2023-01-17 06:07:40 +00:00
Kaushik Sadashiva Reddy c8fcb80c2f vendor: telephony: Unset radio rat on property for 5.10 family
This is not needed anymore as RAT info is
passed in the results for network scan and
is being set as part of the API
setNetworkSelectionModeManual_1_5

Change-Id: Id9cbc34b7c854c52a71c0f209cc6fbf32eccff9f
Signed-off-by: chrisl7 <wandersonrodriguesf1@gmail.com>
2023-01-15 13:00:08 +00:00
Adithya R 6b935d9a85 common: sepolicy: Allow mediaswcodec to access gpu_device
Required by Adreno stack.

type=1400 audit(0.0:744): avc: denied { read write } for name="kgsl-3d0" dev="tmpfs" ino=1176 scontext=u:r:mediaswcodec:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file permissive=0

Signed-off-by: chrisl7 <wandersonrodriguesf1@gmail.com>
Change-Id: Ie04f15ee768d3c070e2c3a8499cd9d8b1e94e06d
2023-01-15 12:59:48 +00:00
chrisl7 62eff19733 vendor: media: Add fastcv headers for bengal
[1] - hardware/qcom/media/mm-video-v4l2/vidc/venc/src/omx_video_base.cpp:46:10: fatal error: 'fastcv.h' file not found
         ^~~~~~~~~~
1 error generated.

Change-Id: Ie013727493ea6b8fa2a1345f16e6f713b5fd1c8f
Signed-off-by: chrisl7 <wandersonrodriguesf1@gmail.com>
2023-01-15 03:09:49 +00:00
chrisl7 ee0ffca982 common: sepolicy: Fix AtCmdFwd related selinux denials
Change-Id: I2c4c82fbc28bfa322eb7fdd737cc8eabb3ec74be
Signed-off-by: chrisl7 <wandersonrodriguesf1@gmail.com>
2023-01-15 03:09:15 +00:00
Jake Weinstein f3b4a95fb6 system: Update to LA.QSSI.13.0.r1-08600-qssi.0
Change-Id: I54ebac9e0bf9ad9bd1a72f2d2fa61aeccf246999
2023-01-14 15:03:33 +09:00
Jake Weinstein d40ae3eec3 common: sepolicy: Allow hub_app to write to DPM/TCM socket
Fixes lots of spam. Qualcomm allows this on many appdomains,
including priv_app and untrusted_app.

01-01 20:47:44.865  6561  6561 W TcmReceiver: type=1400 audit(0.0:90): avc: denied { write } for name="tcm" dev="tmpfs" ino=20937 scontext=u:r:hub_app:s0:c512,c768 tcontext=u:object_r:vendor_dpmtcm_socket:s0 tclass=sock_file permissive=0 app=co.aospa.hub

Change-Id: I20fa1c3f6c90e5bd19173c396ebf963d9c07fffb
2023-01-12 06:08:13 +00:00
Richard Raya 1f19e27191 fixup! system: telephony: Add framework manifest to hidl AtCmdFwdService
Change-Id: I1ba00029ab2ac38905020b50f7d282e4cb3506e5
2023-01-10 04:14:40 -03:00
chrisl7 a3318fb4f6 system: telephony: Add framework manifest to hidl AtCmdFwdService
[1] - This was removed because system atcmdfwd-saidl was added in QSSI 13.0. But because of GRF, vendor hidl manifest must be set to R and S vendor blobs
[2] - I hwservicemanager: getTransport: Cannot find entry vendor.qti.hardware.radio.atcmdfwd@1.0::IAtCmdFwd/AtCmdFwdService in either framework or device VINTF manifest.
      E HidlServiceManagement: Service vendor.qti.hardware.radio.atcmdfwd@1.0::IAtCmdFwd/AtCmdFwdService must be in VINTF manifest in order to register/get.
[3] - 12-26 12:13:28.995 W/AutoPasteSuggestionHelper(3603): AutoPasteSuggestionHelper.createProactiveSuggestions():377 Failed to create item chips. Clip items are [ClipItem{ id = 1672071207744, timestamp = 1672071207744, clipItemContent = ClipItemContent{text=I hwservicemanager: getTransport: Cannot find entry vendor.qti.hardware.radio.atcmdfwd@1.0::IAtCmdFwd/AtCmdFwdService in either framework or device VINTF manifest.
[4] - 12-26 12:13:28.995 W/AutoPasteSuggestionHelper(3603): E HidlServiceManagement: Service vendor.qti.hardware.radio.atcmdfwd@1.0::IAtCmdFwd/AtCmdFwdService must be in VINTF manifest in order to register/get., htmlText=, itemType=0, entityType=0, uri=, groupId=-1, viewType=0}}].
[5] - 01-04 11:36:04.485 E/AtFwdService(2681):  at vendor.qti.hardware.radio.atcmdfwd.V1_0.IAtCmdFwd$Stub.registerAsService(IAtCmdFwd.java:524)
[6] - 01-04 11:36:04.484 E/HidlServiceManagement(2681): Service vendor.qti.hardware.radio.atcmdfwd@1.0::IAtCmdFwd/AtCmdFwdService must be in VINTF manifest in order to register/get.

Change-Id: Iaee3ef28f9c62c22de41f7d3310cf91709101527
Signed-off-by: chrisl7 <wandersonrodriguesf1@gmail.com>
2023-01-09 23:08:22 +00:00
chrisl7 fdfcb22de2 vendor: perf-legacy: Update SocIds support from LA.UM.9.15.2.r1-06000-KAMORTA.QSSI13.0
Change-Id: I4e5e7ab2c1aebe1af9c443bd879c2663a26982ed
Signed-off-by: chrisl7 <wandersonrodriguesf1@gmail.com>
2023-01-09 13:27:46 +00:00
Omkar Chandorkar 25f0132074
vendor: init: Restore support for setting Netflix property in runtime
- This is needed when 2 or targets are binary compatible,
  but have different Netflix proprty for device whitelisting.
- removed in f9f83796b3 (diff-bddfbea90d0ee4e67f976ff668dbb17413ae9703224b866961a7ad03b9305ee6L501)

Change-Id: Iddad3c75f95fc53a0175346e4b7800525359ca3a
Signed-off-by: Omkar Chandorkar <gotenksIN@aospa.co>
2023-01-09 14:04:32 +01:00
Jake Weinstein ccbf9fcde2 common: sepolicy: Add public policies to generic and legacy
Also add private to legacy

Change-Id: I2c51d55f91c709d8432e44fa0201bc8b46c15c5c
2023-01-05 09:40:19 +00:00
Jyotiraditya Panda 274ba903e1 common: sepolicy: legacy: Allow system server to read camera properties.
avc: denied { read } for name="u:object_r:vendor_persist_camera_prop:s0" dev="tmpfs" ino=12792 scontext=u:r:system_server:s0 tcontext=u:object_r:vendor_persist_camera_prop:s0 tclass=file permissive=0
W libc    : Access denied finding property "vendor.camera.aux.packagelist"
W CameraManagerGlobal: ignore the torch status update of camera: 2

Change-Id: I85ade7e96c70ae89a61d857155509c7d04d8e48d
Signed-off-by: Jyotiraditya Panda <jyotiraditya@aospa.co>
Signed-off-by: Omkar Chandorkar <gotenksIN@aospa.co>
2023-01-05 04:44:23 +00:00
Arian bd4d86ef20 common: sepolicy: legacy: Allow apps to read auxiliary camera properties
Change-Id: I379e0d3329cd6507a6040bd716a3230a6babb423
Signed-off-by: Omkar Chandorkar <gotenksIN@aospa.co>
2023-01-05 04:44:19 +00:00
Jake Weinstein d2f0a861e3 common: sepolicy: Move policies to common directory
The folder structure added by I75165f3bf86f5f099298672977f6f5f5dc46c064
was confusing. In this commit, we are moving policies to
the common directory, which will only take effect on 855 and
newer. Then, as needed, we can backport to legacy.

Change-Id: Idc300d2a31b7851d37827e647a60a2b992ab256c
2022-12-31 09:04:21 +00:00
Jake Weinstein ac3d570e44 vendor: perf-legacy: Update perf configs to LA.VENDOR.1.0.r1-16000-WAIPIO.QSSI13.0
Skipping QAPE/QGPE for now.  Those require learning modules from
taro, which would be a separate commit.

Change-Id: I246ff2ba848b00ea779b9b93ca0ece9b3b3a5172
2022-12-31 06:26:15 +00:00
Adam Shih da0634377e common: Add additional dontaudit lines
Change-Id: Ic2e286d244360784a76673412662cabef02d313a
2022-12-31 06:22:09 +00:00
Adithya R 212e7c739f common: sepolicy: Allow build.prop to set vendor.all.modules.ready
Change-Id: Ia2edd8ff98fa5bbb507fabd32eb5cbd8e9f77cb7
2022-12-30 10:28:52 +00:00
Saikannan Chintakayala 10cf23d619 config: Add Bluetooth HAL 1.1 service permission
Add Bluetooth HAL 1.1 service permission.

CRs-fixed: 3158165
Change-Id: I634599efbb0c20d222beab6b217c9193edc07b45
Signed-off-by: chrisl7 <wandersonrodriguesf1@gmail.com>
2022-12-27 16:29:44 -04:00
chrisl7 9a53912d32 vendor: perf-legacy: Set cpuset audio for perf-legacy too
[1] - I forgot that now we have two different folders

Change-Id: I545984810d986aae20d0d4dddf24bbb0f882f543
Signed-off-by: chrisl7 <wandersonrodriguesf1@gmail.com>
2022-12-27 12:03:42 +00:00
chrisl7 6f6009dfdd vendor: audio: Build audioadsprpcd
Change-Id: I51accaf5bdec89bc4c31b6fe03b4b32d9242e2c9
Signed-off-by: chrisl7 <wandersonrodriguesf1@gmail.com>
2022-12-27 12:03:32 +00:00
chrisl7 4ed3feafd3 vendor: media: Move bengal Codec2 prop definition to ODM
[1] - is set by default in media hal so we will create an override for that
[2] - https://git.codelinaro.org/clo/la/platform/hardware/qcom/media/-/blob/LA.UM.9.15.r1-06800-KAMORTA.QSSI13.0/product.mk#L31

Change-Id: Idea892c7b795461664afb0d5f04bb1d55494e8be
Signed-off-by: Wahid7852 <wahidzk0091@gmail.com>
2022-12-27 12:03:32 +00:00
Eruvaram Kumar Raja Reddy 35c1daff0d vendor: media: bengal: Enable Codec2 for HY11 builds
Add bengal tag to enable HY11 build.

Change-Id: I4f188ac06bf9bfd3f12baeeb5f2cbeab74ed675e
Signed-off-by: Wahid7852 <wahidzk0091@gmail.com>
2022-12-27 12:03:32 +00:00
Omkar Chandorkar e3abadc742 vendor: media: Set netflix revision irresepective of android version
- no reason why netflix support would just disappear with newer qssi

Signed-off-by: Omkar Chandorkar <gotenksIN@aospa.co>
Change-Id: I2c652781c1be4fcef1aaf87299f6a04d5091a1d5
Signed-off-by: chrisl7 <wandersonrodriguesf1@gmail.com>
2022-12-27 12:03:32 +00:00
chrisl7 7d85224df7 vendor: media: Add bengal init.qti.media.sh for bengal
[1] - We are sending taro definitions on the vendor.

Change-Id: I3017aaf35794506b160f42c5d2783c7160699d7f
Signed-off-by: chrisl7 <wandersonrodriguesf1@gmail.com>
2022-12-27 12:03:32 +00:00
chrisl7 64ab7f373c vendor: media: Add C2 audio props to bengal
[1] - From audio-ar

Change-Id: I73a0f8c1dd44a90073b66a98aac63a97d7f4e3ca
Signed-off-by: chrisl7 <wandersonrodriguesf1@gmail.com>
2022-12-27 12:03:32 +00:00
chrisl7 9847232c0c vendor: media: Add missing definitions to bengal
Change-Id: I4044eb6f967f99a8db6dcbdf0ae7afd2b6e18c7d
Signed-off-by: chrisl7 <wandersonrodriguesf1@gmail.com>
2022-12-27 12:03:32 +00:00
Jake Weinstein 306d32cedc components: Enable media component to bengal
[1] - Everything being used here is also cane enabled on SM8450 audio hal.

Change-Id: Iee0cb5cd7dd872f72b5b9ebe8244f9910146c990
Signed-off-by: chrisl7 <wandersonrodriguesf1@gmail.com>
2022-12-27 12:03:32 +00:00
Adithya R 3f6106f53e vendor: init: Directly set modules prop instead of script
For some reason, even when KERNEL_MODULES_OUT is set
it's using the no_modules script. Avoid this and set
the modules.ready prop directly if there are no modules.

This partially reverts commit 93382fa26a.

Change-Id: I237c6b31f335a71913d24a9c15f9c120ac24b1ba
2022-12-27 07:45:14 +00:00
Abhay Singh Gill 94a4528d9b common: sepolicy: legacy: Label QTI Supplicant AIDL HAL
Change-Id: I6f81ed23a6edf702effb01c393a845770fff1f11
2022-12-25 20:04:15 +00:00
Abhay Singh Gill f19af84df4 common: sepolicy: Label QTI Supplicant AIDL HAL
Change-Id: I390912933f6f27bd24401c8051d60081a817db37
2022-12-23 17:19:08 +00:00
Adithya R b34dcb6d28 Revert "telephony: force enable ims features"
Causes constant wakelocks with some networks that
don't support VoLTE, as the modem continuously tries
to register IMS.

CarrierConfig is enough to decide IMS functionality.

This reverts commit b634ff0b03.

Change-Id: I530e5d313de34c432b9819545abc0800fbbace87
2022-12-23 15:09:47 +00:00