device_mediatek_wembley-sepolicy/non_plat/cameraserver.te, branch android11-mainline-release

[ALPS05009976] SEPolicy: Merge folder non_plat and r_non_plat

2020-02-29T04:02:13+00:00

[Detail]
BASIC and BSP project should have same sepolicies in basic/.

[Solution]
1.Modify SEPolicies in non_plat/ by comparing with r_non_plat/ .
2.Remove r_non_plat/ .

Change-Id: I24d3df00255779bd73f4075c1c4062176d5b6047
CR-Id: ALPS05009976
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK

[ALPS04974468] SEPolicy: Add neverallow rule for system_data_file

2020-01-19T08:01:11+00:00

[Detail]
Do not allow access to the generic system_data_file label. This is too broad.
Instead, if access to part of system_data_file is desired, it should have a
more specific label.

[Solution]
1.Add neverallow rule for system_data_file.
2.Remove the conflicting SEPolicies.

Change-Id: Ifc5a87d55b7ca18a53dd6ffe1fbccaf63e03e263
CR-Id: ALPS04974468
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK

[ALPS04967689] SEPolicy: Add neverallow rule for proc

2020-01-11T13:58:41+00:00

[Detail]
Do not allow access to the generic proc label. This is too broad.
Instead, if access to part of proc is desired, it should have a
more specific label.
TODO: Remove mtk_hal_audio/audioserver and so on once there are no violations.
EX.
   r_dir_file(hal_audio, proc)
   hal_server_domain(mtk_hal_audio, hal_audio)
   hal_client_domain(audioserver, hal_audio)

[Solution]
1.Add neverallow rule for proc.
2.Remove the conflicting SEPolicies.

Change-Id: Ie932149f8c642d4a05152117f1166daeaf9b2cff
CR-Id: ALPS04967689
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK

[ALPS04639771] SEPolicy: Modify workaround

2019-06-14T08:39:30+00:00

[Detail]
There is a workaround for bring-up,
now it needs to be modified.

[Solution]
1.Split workaround to sepcial *.te
2.Modify ged sepolicy
3.Modify mistake
4.Add sepolicy

Change-Id: I0894de45e014a5eae754e35b57fbc9b21bc4bf90
CR-Id: ALPS04639771
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK

[ALPS04566986] Fix cameraserver permission

2019-06-04T07:42:35+00:00

[Detail]
allow permission of ioctl for cameraserver

[Solution]

Change-Id: Icddcd0e5eb51583d65aca6763d4b2f31683ffd7f
CR-Id: ALPS04566986
Feature: [Android Default] Camera Application Basic Functions

[ALPS04328846] power: refine sepolicy

2019-05-22T09:48:45+00:00

[Detail]
1. Add prefix PERFMGR for performance related ioctl
2. Add property permission for PowerHAL

Change-Id: I5979aefc7fb110ee540425bc53896babdcac08bd
CR-Id: ALPS04328846
Feature: [Module]PowerHAL

[ALPS04468274] add cameraservice ioctrol permission

2019-05-17T05:38:41+00:00

[Detail]
add cameraserver permission

[Solution]

Change-Id: Ie4b9aa9cd836a3c96a353a8148e5ada5d21166f8
CR-Id: ALPS04468274
Feature: [Android Default] Camera Application Basic Functions

[ALPS04394576] MT6739:cameraserver sepolicy issue

2019-04-18T08:20:19+00:00

[Detail]
Sepolicy ioctl configure is changed after Q, we modify
cameraserver ioctl configure.

Change-Id: I59489c6ee27a9bb7913d0b49cdaa4e281024cb42
CR-Id: ALPS04394576
Feature: [Android Default] Camera Application Basic Functions

Merge "[ALPS04401451] Fix ioctl permission issue for cameraserver" into alps-trunk-q0.basic

2019-04-18T03:52:38+00:00

[ALPS04401451] Fix ioctl permission issue for cameraserver

2019-04-18T02:13:28+00:00

[Detail] Fix the ioctl permission issue for cameraserver

Change-Id: Idca3ad9f37e6aa38375ed008647e81f525a77618
CR-Id: ALPS04401451
Feature: [Android Default] Camera Application Basic Functions