Commit Graph

76 Commits

Author SHA1 Message Date
Moyster b99d5f6fc5 sepolicy: fix a denial from wifi2agps 2019-07-18 19:33:21 +02:00
Sanket Khidkikar be1e10f0f3 sepolicy: Remove noatsecure for init processes
* Certain domain needs LD_PRELOAD passed from init. Allow it
for most domain.

Change-Id: I7b78620d64af15ca4690abf49e4c24f0b0d5be9a
Signed-off-by: Moyster <oysterized@gmail.com>
2018-01-31 16:46:12 +01:00
Mister Oyster 0775e48564 sepolicy: add rules for config_modules=y 2018-01-05 03:40:36 +01:00
Mister Oyster e3b62932de sepolicy: label batt_vol sysfs node to prevent a crash in 3ATHREAD 2017-12-29 16:52:51 +01:00
Mister Oyster d2a81148f9 sepolicy: fix cameraserver denials 2017-12-29 16:35:46 +01:00
Mister Oyster cf3a08f180 mtk_agpsd: fix a few denials when accessing /data/media/* 2017-12-29 16:00:17 +01:00
Mister Oyster 06e457fa37 sepolicy: prevent muxreport from crashing when reloading modem 2017-12-27 17:20:04 +01:00
Mister Oyster 4f8bdff935 sepolicy: remove meta_tst & factory rules 2017-12-26 19:11:43 +01:00
Mister Oyster 638320238e sepolicy: fix typo to label cpu* zones 2017-12-08 15:06:34 +01:00
Mister Oyster c67c779561 sepolicy: mnld xbin -> bin 2017-12-07 20:47:58 +01:00
Mister Oyster 3637d8e7df sepolicy: fix thermal regexp path 2017-11-24 15:25:30 +01:00
Mister Oyster 38ad2b6fa7 sepolicy: label cpu temps as sysfs_thermal (fixes temps reporting in enforcing) 2017-11-20 19:15:51 +01:00
Mister Oyster 8efb383634 sepolicy: xbin/mnld
note for later:
gps&mnld blobs in system/ > only xbin/mnld path works
gps&mnld blobs in vendor/ > bin/mnld path works
2017-10-21 19:56:18 +02:00
Mister Oyster 6b1255a702 sepolicy: denials while reading videos in app 2017-10-21 15:10:59 +02:00
Mister Oyster fa8c5e0761 sepolicy: fix mnld path 2017-10-21 15:10:59 +02:00
Mister Oyster e5dd1818ff sepolicy: remove kpoc_charger 2017-10-02 17:20:43 +02:00
Mister Oyster 3eed4decfd sepolicy: get rid of meizu's fuelgauge unholy datalog rules
Revert:"sepolicy: fix fuelgauge denials"

This reverts commit 56825c44c2.
2017-09-17 14:17:40 +02:00
Mister Oyster c50b03a964 sepolicy: partial hostap denials fix 2017-09-10 13:45:46 +02:00
Mister Oyster 3629edfad6 sepolicy: cleanup mdlog unused rules 2017-09-10 13:44:56 +02:00
Mister Oyster 471295ac08 sepolicy: fix some sysfs_boot_mode denials 2017-09-05 19:59:53 +02:00
Mister Oyster c298ffcbfb sepolicy: cleanup 2017-08-30 19:56:19 +02:00
Mister Oyster b8afefbf69 sepolicy: fix sysfs_bootmode derp merge 2017-08-21 14:59:07 +02:00
fire855 8caa4fa4f0 sepolicy: fix camera denials 2017-08-21 14:59:07 +02:00
fire855 8fb5e24697 sepolicy: fix ged_srv denial 2017-08-21 14:59:07 +02:00
fire855 d23ad296e6 sepolicy: fix denials 2017-08-21 14:59:07 +02:00
fire855 8cba3a9b67 changes for N1
probably needs a cleanup..
2017-08-21 14:59:07 +02:00
fire855 29502e9317 sepolicy: fix mem_bw_ctrl denial 2017-08-21 14:59:07 +02:00
Mister Oyster a670fd1501 sepolicy: use set_prop() now 2017-08-21 14:58:58 +02:00
Mister Oyster 0c4238a2f7 sepolicy: cleanup
* logd rules ain't needed (lineage fixed system_core)
* add dir:read permissions on debugfs from system_server
* debuggered:self capa (else unwind crashes)
* fix cameraserver reading boot_mode
* mtk_agpsd search for media_rw_data_file
2017-06-06 17:33:37 +02:00
Mister Oyster c6befcb8dc sepolicy: cameraserver couldn't access boot_mode 2017-05-10 17:19:14 +02:00
Mister Oyster a93a7c6d94 sepolicy: fix mediacodec meminfo denial 2017-05-02 18:05:43 +02:00
Mister Oyster 56825c44c2 sepolicy: fix fuelgauge denials 2017-05-02 18:05:10 +02:00
Mister Oyster 3569013e25 sepolicy: label cam_cal_drv_sub 2017-05-01 03:09:11 +02:00
Mister Oyster aee8693203 sepolicy mtk_agpsd sdcardfs denial 2017-05-01 02:46:37 +02:00
Mister Oyster bb3d4e47d0 sepolicy: meizupshelper bin rule 2017-05-01 02:35:45 +02:00
Mister Oyster dc092ba4e5 sepolicy: fix sysfs_devinfo dednials 2017-05-01 02:11:09 +02:00
Mister Oyster cb50e54e17 sepolicy: fix wmtWifi write to tmpfs on init 2017-05-01 01:50:45 +02:00
Mister Oyster 9dc9e610e6 sepolicy: fix pq denial at boot 2017-05-01 01:42:49 +02:00
Mister Oyster 5bb9ea3566 sepolicy: fix tp.settings labelling 2017-05-01 01:32:18 +02:00
Mister Oyster 58b4ce250f sepolicy: fix a few system denials 2017-05-01 01:26:08 +02:00
Mister Oyster 0bc35b648b sepolicy: readd meizupshelper rules 2017-05-01 01:19:08 +02:00
Mister Oyster 21d38e24ee persistent: revert some cleanup 2017-05-01 01:16:33 +02:00
Mister Oyster d5cbd9ae3e sepolicy: fix gestures in enforcing 2017-04-30 16:51:01 +02:00
Mister Oyster fed9ec16de sepolicy: revert typo 2017-04-27 19:07:46 +02:00
Mister Oyster e978ec3653 sepolicy: fix a few denials
* sepolicy: use m2note lens dev node
* sepolicy: typo on mnld
2017-04-25 21:35:34 +02:00
Mister Oyster e876841aa8 sepolicy: switch to a better policy
* sepolicy: switch to CM sepolicy fixed by MAD team
* sepolicy: remove fm & nfc rules
* sepolicy: add akmd09911 and remove other sensors
2017-04-25 15:01:56 +02:00
Mister Oyster 1b395aba0f sepolicy: fix sdcardfs 2017-04-20 20:57:15 +02:00
Mister Oyster faeeca999a sepolicy: cleanup
* sepolicy: add perf_control rules from https://github.com/MediatekAndroidDevelopers/android_vendor_mad
* sepolicy: cleanup dhcp rules
* sepolicy: make protect* simple block devices
2017-04-20 19:44:53 +02:00
Mister Oyster 83e506aecf sepolicy: cleanup * sepolicy: make zram a simple block device * sepolicy: make proinfo a simple block device * sepolicy: cleanup file_contexts * sepolicy: make mmc a simple block device * sepolicy: make logo a simple block device * sepolicy: kpoc_charger cleanup * sepolicy: akmd0911 cleanup * sepolicy: cleanup sockets * sepolicy: add more blocks labelling 2017-04-20 18:10:52 +02:00
Mister Oyster b17a46ec8a sepolicy: kpoc_charger final denial 2017-04-19 19:37:10 +02:00