| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
| |
Change-Id: I687aedf186fa1efc9b5056f0ace56a819f194b8b
|
| |
|
|
| |
Change-Id: Ibe6aad316f79ec3f9a038005c29052f6b2463c81
|
| |
|
|
| |
Change-Id: Ibf9ed43dbe502d5eb44bf03d230a842bab10ebf7
|
| |
|
|
| |
Change-Id: I650c3a4cd20370f49cf24f8760873f80ad39a0e1
|
| |
|
|
| |
Change-Id: I2104848d701450c0b677c15a1686a4f459f23e44
|
| |
|
|
| |
Change-Id: I08c87f3e2f5d16ed98c7acaaf700f4a6bb4e5668
|
| |
|
|
| |
Change-Id: I691e7a12a595c06f1b92e1c3509478d521852508
|
| |
|
|
| |
Change-Id: Id21e6ab0fabd25b1fe0b4d62f8d1aa295af28922
|
| |
|
|
|
|
|
|
| |
* In Android 8.1 and later, only the ro.zygote.disable_gl_preload
property still applies. All other properties have been removed.
Reference: https://source.android.com/devices/graphics/renderer
Change-Id: Ib9b928fcb798de8f54efe183c9e4b59716a3d57e
|
| |
|
|
|
|
| |
fix magisk safetynet check and hopefully vendor missmatch dialog
Change-Id: Iba82f74040e38d2364a43632d224d887956d3862
|
| |
|
|
|
|
| |
Already in device/qcom/sepolicy now
Change-Id: I016dd73cda81fa4b3ae7e2780885379cfc9e1266
|
| |
|
|
|
|
| |
add patchset for every commit
Change-Id: I3bf076b2a6d810696d64d360562f4dbb70c048ba
|
| |
|
|
| |
Change-Id: I76eb6b9f20dd4dd914a9254c33e88801ffbf973f
|
| |
|
|
| |
Change-Id: I4928fc485e3c89895f7da694dc64478b8d4e3183
|
| |
|
|
|
|
| |
force pick all
Change-Id: I0b002af10a273f75c4e75bd14fbf2b1f4121f8d5
|
| |
|
|
| |
Change-Id: I8bee8c18f821703d592faf5de614f4a7e4741bbd
|
| |
|
|
|
|
|
|
|
| |
* Limits security exposure from shims
* As a bonus, we no longer need noatsecure
to make LD_SHIM_LIBS persist through services
Change-Id: Ief66aa999ab9816379009f6ad35c7ef7d5112c0a
|
| |
|
|
| |
Change-Id: I713985c701a169154451cfeba33c74b8bc978783
|
| | |
|
| |
|
|
| |
Change-Id: Ic568aadfa1b3a0896a072414ed68491d8692ba59
|
| |
|
|
| |
Change-Id: I13a9bfe07107a5324e2ad6a3a8a064366c5dbc07
|
| |
|
|
| |
Change-Id: Ib0e7d390ef79f4a2adf1e940a75106cad378c066
|
| |
|
|
| |
Change-Id: Ib0ed6e5acb3a3ad760162fa0ebbbb9894b3e697a
|
| |
|
|
| |
Change-Id: I6e22362bc9c81e70e6cad90cb5394770b3f09e64
|
| |
|
|
| |
Change-Id: I06a2dca245fc2ee4b60976fe8f5197de18f22ca4
|
| |
|
|
| |
Change-Id: Id5f14ea3354ef51e85773e0b7ab22b748a06fa58
|
| |
|
|
| |
Change-Id: I016d0809a55cdb51982748df8e9025c4cc2ed5b2
|
| |
|
|
| |
Change-Id: I530166072a44c435f536dbe469c4c05e69eea590
|
| |
|
|
| |
Change-Id: I709f3b8193093191572ded4e1e419cbaae5456a7
|
| |
|
|
| |
Change-Id: I794452109367f4f2a2856e22e954b78ef718ce7f
|
| |
|
|
| |
Change-Id: If3a279c771f0bb2e7f3174e10a8f485ff0a21ba8
|
| |
|
|
| |
Change-Id: Ia18c88099f2f32c31c8386643a271d6b0166371a
|
| |
|
|
| |
Change-Id: I90aead86aec0613bcad70e9628c3b44772a9df4c
|
| |
|
|
|
|
|
| |
This has been removed from vendor/lineage, but is needed
on devices that ship qti-telephony-common.jar.
Change-Id: I11f38218b64b4cedb2354db627d46de86fe4f549
|
| |
|
|
|
|
|
|
| |
* adapt to oreo hals
* remove not needed rules
* split into proper files
Change-Id: Ib34a36e448a2dae0c0259044461a87fbae02be27
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Required to preserve LD_SHIM_LIBS throughout
the services to fully support SHIM libraries
* Introduced in device_qcom_sepolicy by commit:
"sepolicy: allow getopt for appdomain"
I7b78620d64af15ca4690abf49e4c24f0b0d5be9a
"Certain domain needs LD_PRELOAD passed from init.
Allow it for most domain."
Change-Id: I17095630043bbd5af4436cd5625a0fdc3480ed05
Signed-off-by: Adrian DC <radian.dc@gmail.com>
|
| |
|
|
|
|
|
| |
Solves the following denial.
Change-Id: I5cc4935047a42ce1bdbc71830d464ab4eb4e30dc
avc: denied { getattr } for comm="allocator@2.0-s" path="/sys/devices/virtual/graphics/fb0/msm_fb_type" dev="sysfs" ino=12617 scontext=u:r:hal_graphics_allocator_default:s0 tcontext=u:object_r:sysfs_graphics:s0 tclass=file
|
| |
|
|
| |
Change-Id: Ie2f25ae9c15e75b0b68685171023a043882fee27
|
| |
|
|
|
|
|
|
| |
Solves the following denial.
avc: denied { write } for name="default_pwrlevel" dev="sysfs" ino=13506 scontext=u:r:qti_init_shell:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=file
Change-Id: I13ecb7499de4a1050ca13a4f5a8647c913940ade
|
| |
|
|
|
|
|
|
|
|
| |
Solves the following denials.
* avc: denied { ioctl } for pid=422 comm="readmac" path="socket:[13782]" dev="sockfs" ino=13782 ioctlcmd=c302 scontext=u:r:readmac:s0 tcontext=u:r:readmac:s0 tclass=socket
* avc: denied { ioctl } for pid=439 comm="mmbn-daemon" path="socket:[16630]" dev="sockfs" ino=16630 ioctlcmd=c302 scontext=u:r:mmbn-daemon:s0 tcontext=u:r:mmbn-daemon:s0 tclass=socket
Change-Id: Ica9b1c39ef1d4ab2dda9960ec44b08c860e6accb
|
| |
|
|
|
|
|
|
| |
* Newer devices ship with bt_firmware partition but
we aren't so lucky so we have to allow bluetooth
to read firmware_file instead.
Change-Id: I607fcd539752e3887e117b812ca75fd732673190
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Qcom sepolicy only covers bt_qca6174, while our devices
uses bt_qca6174.91.
Label using a regex to make sure every case is covered.
This fixes the following denial.
avc: denied { write } for comm="hci_thread" name="state" dev="sysfs" ino=17919 scontext=u:r:bluetooth:s0 tcontext=u:object_r:sysfs:s0 tclass=file
And should also fix bluetooth.
Change-Id: Ice453dee8750e6c9ca6b1fe6cb20709c39958c7e
|
| |
|
|
|
|
|
|
|
| |
Fixes the following denial.
avc: denied { dac_override } for pid=426 comm="cnd" capability=1 scontext=u:r:cnd:s0 tcontext=u:r:cnd:s0 tclass=capability
Change-Id: I1b38a2c1296a7524442dcccbbe96219d6ec28f0f
CRs-Fixed: 2063571
|
| |
|
|
|
|
|
| |
Qualcomm moved most of the blobs to /vendor.
Move the blobs ourself to match qcom sepolicy paths.
Change-Id: If10217e2357e665c608ff2d13487f32973e2eeca
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
* move locally into etc or bin
* move shell files on device to /system/vendor/bin
* label shell files as qti_init_shell_exec
* use vendor sh
Change-Id: Ifd2754286409a4eb938e1c697f1989ba4e40988e
merge to move
Change-Id: I74f957a551368069564e2e18a037346a168fdbbe
|
| |
|
|
|
|
|
|
| |
As stated in https://android.googlesource.com/platform/build/+/418258c
this is required in O-MR1 since sepolicy now prevents system server from
loading anything from /data making our system extremely slow and janky.
Change-Id: I215ec7ebe95981ef0b953fe938e12b83675795ab
|
| |
|
|
| |
Change-Id: I9df6db0c5533629e6786ac65ba7c33c784a16fd9
|
| |
|
|
| |
Change-Id: I80a1ea26d9a59e290a55cd8215451e97095065fa
|
| |
|
|
| |
Change-Id: Ia849f246a88f03247672cac731b06962945dfe6b
|
| |
|
|
| |
Change-Id: Ib6fad8188d6a9c3fdf9892050da6f73ee2dc805a
|