Commit Graph

52 Commits

Author SHA1 Message Date
Pierre-Hugues Husson
2e4d8bcb0a Allow tee to access rpmb (denials seen on Moto E5 preventing keymaster from working) 2019-09-12 20:58:18 +02:00
Pierre-Hugues Husson
1c31b0512a [temp] Set ueventd to permissive, needed to boot huawei, because it hits "unlabeled" file when trying to access some files in /firmware 2019-09-09 01:15:54 +02:00
Pierre-Hugues Husson
51ee6f155e fsck.exfat file context is now handled by aosp 2019-09-09 01:15:17 +02:00
Pierre-Hugues Husson
91ff330807 tmpfs domain is no longer created by the macro 2019-09-09 01:13:44 +02:00
Pierre-Hugues Husson
9f6a970491 Add mediatek proc_ged (else it boots but no graphics) 2019-09-09 01:12:51 +02:00
Pierre-Hugues Husson
b010be5db0 Allow treble app to write "battery info" 2019-08-22 11:36:42 +02:00
Pierre-Hugues Husson
2b4b3d6398 [su] Allow write on any file/dir 2019-08-22 00:34:13 +02:00
Pierre-Hugues Husson
31241609bb More rights to su 2019-08-21 22:40:53 +02:00
Pierre-Hugues Husson
c7d378a359 More rights 2019-08-09 23:39:36 +02:00
Pierre-Hugues Husson
31386d8037 Update sepolicy to allow more stuff based on S10e testing 2019-07-17 20:12:47 +02:00
Pierre-Hugues Husson
76c81a45ed Allow treble_app to set camera-HAL related properties 2019-03-20 23:57:06 +01:00
Pierre-Hugues Husson
251a51e6cf More permissions for phhsu_daemon selinux context 2019-01-04 01:11:06 +01:00
Pierre-Hugues Husson
92db7539d0 Fix bootanim for some MTK devices 2018-12-03 22:06:32 +01:00
Pierre-Hugues Husson
2a5a8a8428 [phh-su] Makes su usable on devices without permissive context 2018-12-03 22:06:32 +01:00
Pierre-Hugues Husson
82aeb3d402 Fix adbd on devices with integrity check
Some devices (Like Samsung Galaxy J6) has integrity check.
This means that all files outside of /system are signed by the OEM.
Since we replaced /sbin/adbd, that's an issue.
Workaround this by creating a new service, called adbd_system, which
will called instead of /sbin/adbd when needed
2018-12-03 22:06:32 +01:00
Pierre-Hugues Husson
6c4761261b Give back hostapd access to wifi_data_file 2018-09-19 13:46:22 +02:00
Pierre-Hugues Husson
3a68ec19bc Declare framework-side hostapd (will be done by treble app) 2018-09-18 16:44:06 +02:00
Pierre-Hugues Husson
b544b15e68 Get back to allowing "rild" universally
This requires to drop a checkpolicy, because checkpolicy doesn't allow
multiple identical domains definition, and "rild" will be defined both
in system and vendor.
This isn't optimal, but that's still the best solution I've found.
2018-09-18 11:16:19 +02:00
Pierre-Hugues Husson
f446ad7290 Revert "Fix qti in-call audio on P vendor"
This reverts commit ef2dd1fb34.
This commit doesn't fix anything
2018-09-18 11:06:12 +02:00
sanshu
ef2dd1fb34 Fix qti in-call audio on P vendor 2018-09-07 08:08:37 +02:00
Pierre-Hugues Husson
99633e904d Support reading /sys/board_properties/virtualkeys.xxx for virtual keys on touchscreen 2018-09-05 18:39:13 +02:00
Pierre-Hugues Husson
b284445668 Allow vendor_init to load kernel modules 2018-08-21 12:07:18 +02:00
Pierre-Hugues Husson
36c254eca4 Add qti.ims.ext context (will it conflict when it is in /vendor?) 2018-08-19 16:42:21 +02:00
Pierre-Hugues Husson
cafafc5934 Fix QtiAudio 2018-08-17 23:43:53 +02:00
Pierre-Hugues Husson
df25576594 exfat fsck/mkfs selinux label 2018-08-16 17:14:13 +02:00
Pierre-Hugues Husson
ca106f5bec Fix boot on Huawei View 10 2018-08-15 12:26:01 +02:00
Pierre-Hugues Husson
d1a0b0b955 p wip 2018-08-12 23:41:19 +02:00
Pierre-Hugues Husson
45a98a37cc P WIP 2018-08-12 21:31:47 +02:00
Pierre-Hugues Husson
7b82dab9d2 P WIP 2018-08-07 12:49:42 +02:00
Pierre-Hugues Husson
64b63dfc5c Fix tether for some Qualcomm devices [selinux part]
Fixes https://github.com/phhusson/treble_experimentations/issues/131
2018-08-02 15:01:10 +02:00
Pierre-Hugues Husson
aea19262a0 Rename service-claner to phh-on-boot and move bootctl mark-boot-successful to phh-on-boot and add a conditional start 2018-07-18 23:48:33 +02:00
Pierre-Hugues Husson
9b1ab76f44 Add SELinux policy to access qualcomm audio HAL on Pixel-s 2018-06-29 00:31:19 +02:00
Pierre-Hugues Husson
72e91c7933 Revert "Allowe system_app to access UEvent"
This reverts commit 615c724fee.

This doesn't compile, and actually I intented to target platform_app,
which already have this permission.
2018-06-07 16:46:16 +02:00
Pierre-Hugues Husson
615c724fee Allowe system_app to access UEvent 2018-06-07 14:30:47 +02:00
Pierre-Hugues Husson
a9a6cba4dd Force GPU profiling on Huawei as a work-around for rendering artifacts 2018-05-27 13:52:16 +02:00
Pierre-Hugues Husson
e5bf6a5c2a Allow system_server => su grep 2018-05-19 13:39:22 +02:00
Pierre-Hugues Husson
6eaf501e68 Include service-cleaner.sh which kills looping services 30s after boot 2018-05-14 17:25:03 +02:00
Pierre-Hugues Husson
dbfa3c728e Fix wrong domain 2018-05-01 22:04:56 +02:00
Pierre-Hugues Husson
7527833d72 Give su hwbinder use 2018-05-01 21:44:29 +02:00
Pierre-Hugues Husson
49d6d91f9c Fix f2fs on Huawei devices (Thanks @Flex1911 and @LuK1337) 2018-04-24 14:12:25 +02:00
Pierre-Hugues Husson
01566efd3d Allow mediaextractor to read real sdcard 2018-04-16 23:33:58 +02:00
Pierre-Hugues Husson
7171b3215f Support me.phh.treble.qti.audio 2018-04-15 20:35:08 +02:00
Pierre-Hugues Husson
f1811092e6 [WIP] Edit android version/security patch based on boot.img 2018-04-10 18:35:44 +02:00
Pierre-Hugues Husson
25d7b4c539 Resize /system in boot
Is it really safe?
Tested on Allview V3 Viper and Huawei Mate 9
2018-04-03 00:13:48 +02:00
Pierre-Hugues Husson
1e27cc1157 Override vendor's usb_audio_policy_configuration
Android 8.1 added the support for new type of USB Audio devices
(USB_HEADSET, instead of old USB_DEVICE)
Some older USB devices got converted to this USB_HEADSET while still
using the old protocol.
There is no driver change needed, but the audio policy needs to be
changed.
Since vendors are simply using AOSP usb_audio_policy_configuration
Override it by ourself.
2018-04-01 00:30:31 +02:00
Pierre-Hugues Husson
a3818e7455 Add custom sepolicy to support samsung Galaxy S9
This is harmless on other devices because this type doesn't exist, so
isn't used.
2018-03-21 17:15:55 +01:00
Pierre-Hugues Husson
2886155138 mount bind /system/bin/adbd /sbin/adbd before adbd starts
This is needed for master on A-only devices
2018-02-19 00:06:48 +01:00
Pierre-Hugues Husson
fb0cb0c690 Allow vold to delete /data/user/0 if he thinks it is useful 2018-02-17 19:41:09 +01:00
Pierre-Hugues Husson
8a07d2c495 Auto detect vndk based on vendor SELinux policy 2018-02-16 22:41:03 +01:00
Pierre-Hugues Husson
b91085d281 Fix substratum 2017-12-21 23:20:52 +01:00