132 Commits

Author SHA1 Message Date
thepriyanshujangid
a9d116858a h 2026-01-17 20:07:48 +05:30
thepriyanshujangid
3a20ed8bfc Revert "redwood: sepolicy: Remove commonized labels"
This reverts commit db563fedf4.
2026-01-17 20:06:04 +05:30
Giovanni Ricca
db563fedf4 redwood: sepolicy: Remove commonized labels
* Required after Id2111f398cd1c7a02fa0262676314188e08c79e7

Change-Id: I2ccd83de9b9474327da4ff118bae54d425e9adaf
2026-01-10 14:25:10 +05:30
thepriyanshujangid
7319331888 redwood: Switch to QTI power hal
Signed-off-by: thepriyanshujangid <priyanshujangid@yahoo.com>
2025-10-12 18:31:54 +05:30
Michael Bestas
d87029677a redwood: sepolicy: Remove duplicate labels
Change-Id: I3575e6bad93b2f9d69f94033944c44b7f9fbc243
2025-10-12 18:31:54 +05:30
Hridaya Prajapati
d77664e5f1 redwood: switch to common AIDL IR service
Change-Id: I36c05aaa312969e479896c6e63a26a68cf897afa
2025-10-12 18:31:54 +05:30
chrisl7
25d218e190 redwood: Import XiaomiParts from surya device tree 2025-08-27 10:12:19 +05:30
Dhina17
8b66ff518e redwood: Implement torch light control
Signed-off-by: rahul <rahul@aospa.co>
Co-Authored-By: rahul <rahul@aospa.co>
Co-Authored-By: John Galt <7730016+realjohngalt@users.noreply.github.com>
2025-08-27 10:12:18 +05:30
Amit Pundir
63c54d7460 redwood: sepolicy: Address mediaswcodec denials
- avc: denied { read write } for name="kgsl-3d0" dev="tmpfs" ino=1100 scontext=u:r:mediaswcodec:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file permissive=0

Signed-off-by: RobertGarciaa <chae0218@naver.com>
2025-08-27 10:12:18 +05:30
Wei Wang
b2bcbfab47 redwood: Switch to lineage power-libperfmgr 2025-08-27 10:12:18 +05:30
Bruno Martins
d8792d1b67 redwood: sepolicy: Remove duplicate snxxx AIDL rules
These are now part of qcom/sepolicy_vndr.

Change-Id: I709c29e827d51e22507027862a56cca1efcdc984
2025-08-27 10:12:18 +05:30
Giovanni Ricca
87a50fbe6d redwood: sepolicy: Drop redundant dynamic_fps node label
* The whole folder is labeled with `vendor_sysfs_graphics` on
  genfs_contexts.

Change-Id: I2e772590a988be8c106a0c3070a4d4dc7b1502a8
2025-08-27 10:12:18 +05:30
Giovanni Ricca
8217f8394d redwood: sepolicy: Drop vendor_sysfs_double_tap definition
* We use `/dev/xiaomi-touch` to handle dt2w.

Change-Id: I86f733ad1b0a1d28de67e39b987a8bf19a9dcd5b
2025-08-27 10:12:18 +05:30
Michael Bestas
217fe44146 redwood: sepolicy: Remove /sys/class/qcom-battery label
It's set globally now

Change-Id: Idccb51649fa72f6343534cdc4a951cd96909ff62
2025-08-27 10:12:18 +05:30
minaripenguin
058aa39d4e redwood: sepolicy: Address incremental fs SeLinux denials
* fixes random app crash for apps like coc

logcat reported by user

12-15 09:23:37.767  2383  2383 W TaskThumbnailIc: type=1400 audit(0.0:705): avc: denied { ioctl } for path="/data/app/~~AkF5id64oKGn1EZvys0LgA==/com.supercell.clashofclans-oTOm1Cdlt18nhXT8665Pbw==/base.apk" dev="incremental-fs" ino=176013 ioctlcmd=0x6722 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:apk_data_file:s0 tclass=file permissive=0 app=com.android.launcher3
12-15 09:23:37.767  2383  2383 W TaskThumbnailIc: type=1400 audit(0.0:706): avc: denied { ioctl } for path="/data/app/~~AkF5id64oKGn1EZvys0LgA==/com.supercell.clashofclans-oTOm1Cdlt18nhXT8665Pbw==/split_config.en.apk" dev="incremental-fs" ino=175987 ioctlcmd=0x6722 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:apk_data_file:s0 tclass=file permissive=0 app=com.android.launcher3
12-15 09:23:37.767  2383  2383 W TaskThumbnailIc: type=1400 audit(0.0:707): avc: denied { ioctl } for path="/data/app/~~AkF5id64oKGn1EZvys0LgA==/com.supercell.clashofclans-oTOm1Cdlt18nhXT8665Pbw==/split_config.xxhdpi.apk" dev="incremental-fs" ino=176007 ioctlcmd=0x6722 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:apk_data_file:s0 tclass=file permissive=0 app=com.android.launcher3
12-15 09:23:37.767  2383  2383 W TaskThumbnailIc: type=1400 audit(0.0:708): avc: denied { ioctl } for path="/data/app/~~AkF5id64oKGn1EZvys0LgA==/com.supercell.clashofclans-oTOm1Cdlt18nhXT8665Pbw==/base.apk" dev="incremental-fs" ino=176013 ioctlcmd=0x6722 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:apk_data_file:s0 tclass=file permissive=0 app=com.android.launcher3
12-15 09:23:37.767  2383  2383 W TaskThumbnailIc: type=1400 audit(0.0:709): avc: denied { ioctl } for path="/data/app/~~AkF5id64oKGn1EZvys0LgA==/com.supercell.clashofclans-oTOm1Cdlt18nhXT8665Pbw==/base.apk" dev="incremental-fs" ino=176013 ioctlcmd=0x6722 scontext=u

* also noticed incremental-fs denials

12-15 09:23:25.658 16094 16145 I incfs   : IncFs_Features: v1
12-15 09:23:25.654 16094 16094 W com.android.vending: type=1400 audit(0.0:672): avc: denied { read } for comm=62674578656375746F72202332 name="filesystems" dev="proc" ino=4026532355 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:proc_filesystems:s0 tclass=file permissive=0 app=com.android.vending
12-15 09:23:25.661 16094 16130 I Finsky  : [83] ghu.apply(78): AIM: Got app ownership map. App counts: 1. Unique apps: 1
12-15 09:23:25.790 19437 20775 I incfs   : Initial API level of the device: 30
12-15 09:23:25.790 19437 20775 W libc    : Access denied finding property "ro.incremental.enable"
12-15 09:23:25.790 19437 20775 I incfs   : ro.incremental.enable:
12-15 09:23:25.787 19437 19437 W lowpool[13]: type=1400 audit(0.0:673): avc: denied { read } for name="u:object_r:incremental_prop:s0" dev="tmpfs" ino=12498 scontext=u:r:gmscore_app:s0:c512,c768 tcontext=u:object_r:incremental_prop:s0 tclass=file permissive=0 app=com.google.android.gms
12-15 09:23:25.791 19437 19437 W lowpool[13]: type=1400 audit(0.0:674): avc: denied { ioctl } for path="/data/app/~~AkF5id64oKGn1EZvys0LgA==/com.supercell.clashofclans-oTOm1Cdlt18nhXT8665Pbw==/base.apk" dev="incremental-fs" ino=176013 ioctlcmd=0x6722 scontext=u:r:gmscore_app:s0:c512,c768 tcontext=u:object_r:apk_data_file:s0 tclass=file permissive=0 app=com.google.android.gms
12-15 09:23:25.794 19437 19437 W lowpool[13]: type=1400 audit(0.0:675): avc: denied { ioctl } for path="/data/app/~~AkF5id64oKGn1EZvys0LgA==/com.supercell.clashofclans-oTOm1Cdlt18nhXT8665Pbw==/split_config.en.apk" dev="incremental-fs" ino=175987 ioctlcmd=0x6722 scontext=u:r:gmscore_app:s0:c512,c768 tcontext=u:object_r:apk_data_file:s0 tclass=file permissive=0 app=com.google.android.gms
12-15 09:23:25.794 19437 19437 W lowpool[13]: type=1400 audit(0.0:676): avc: denied { ioctl } for path="/data/app/~~AkF5id64oKGn1EZvys0LgA==/com.supercell.clashofclans-oTOm1Cdlt18nhXT8665Pbw==/split_config.xxhdpi.apk" dev="incremental-fs" ino=176007 ioctlcmd=0x6722 scontext=u:r:gmscore_app:s0:c512,c768 tcontext=u:object_r:apk_data_file:s0 tclass=file permissive=0 app=com.google.android.gms
12-15 09:23:25.795 19437 20775 I incfs   : IncFs_Features: v1

test: boot to homescreen, open fresh installed COC app
Signed-off-by: RobertGarciaa <chae0218@naver.com>
2025-08-27 10:12:18 +05:30
basamaryan
0417a32035 redwood: Move to Xiaomi fingerprint AIDL 2025-08-27 10:12:18 +05:30
Sebastiano Barezzi
b61e4b3f2c redwood: Move to Xiaomi IR AIDL
Change-Id: I46094bcbfaba252b5d98ea8211b927fdaa079e2d
2025-08-27 10:12:18 +05:30
Manish Kushwaha
39156eec8f redwood: Migrate sensor HAL to AIDL interface
Bug: 247478991
Test: tested on-device (P23) ab/P46941077
Test: `sensor_test -ahal list` and `sensor_test list`
Test: `sensor_test -ahal sample -s0` and `sensor_test sample -s0`

Change-Id: I40f6ab6b7780c53cd638a1f77c95f6c324dc2d15
Signed-off-by: ralph950412 <ralph950412@gmail.com>
2025-08-27 10:12:18 +05:30
thepriyanshujangid
2044d164a7 redwood: Adapt for crDroid 2025-08-27 10:12:18 +05:30
EcrosoftXiao
d12d046fbf redwood: sepolicy: Mark vendor_camera_sensor_prop as vendor_public_prop
[Tashar02]: Make vendor_camera_sensor_prop label public so that it can be used by
the proprietary vendor camera repository.

Change-Id: I889a90382869b40885b64ca7d47f4caa5159e9c3
Signed-off-by: Tashfin Shakeer Rhythm <tashfinshakeerrhythm@gmail.com>
2025-08-27 10:12:18 +05:30
priyanshu jangid
4d124528f5 redwood: sepolicy: Drop duplicate genfs entry 2025-08-27 10:12:18 +05:30
klozz
77251eb614 redwood: build recovery as permissive
Signed-off-by: thepriyanshujangid <priyanshujangid@yahoo.com>
2025-08-27 10:12:18 +05:30
Murat Kozan
a1e89e9662 redwood: sepolicy: Address secure_element denial
avc:  denied  { search } for  name="nfc" dev="dm-37" ino=388 scontext=u:r:hal_secure_element_default:s0 tcontext=u:object_r:vendor_nfc_vendor_data_file:s0 tclass=dir permissive=0
Signed-off-by: thepriyanshujangid <priyanshujangid@yahoo.com>
2025-08-27 09:36:13 +05:30
Astridxx
7b0370ad19 redwood: sepolicy: Address audio config denial
avc: denied { read } for comm="emui:screenshot" name="u:object_r:audio_config_prop:s0" dev="tmpfs" ino=14355 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:audio_config_prop:s0 tclass=file permissive=0 app=com.android.systemui
2025-08-27 09:36:13 +05:30
Alexander Winkowski
3b4697dac4 redwood: sepolicy: Remove unused rules
Change-Id: I0e96b7af787b01c4c6e6f7cfc8744a1c34acbc6b
2025-08-27 09:36:13 +05:30
Alexander Winkowski
cc8b3c998e redwood: sepolicy: Rework batterysecret rules
Change-Id: I98b231406fa1a2910cbedd133b33554e7d1c9268
2025-08-27 09:36:13 +05:30
Alexander Winkowski
2d6abad8ee redwood: sepolicy: Simplify fingerprint rules
Reuse existing AOSP fingerprint_vendor_data_file label

Change-Id: I8632de158050edf87e1b04ec83f0c8c3a61ff0c0
2025-08-27 09:36:13 +05:30
TheStrechh
70b14a94eb redwood: sepolicy: Import missing adress for MIUI Camera 2025-08-27 07:36:13 +05:30
Michael Bestas
18a17aa9f1 redwood: Build Lineage Health HAL
Change-Id: I70cc903a03ac9fa3303bb8fa039c9de4806449bf
Signed-off-by: thepriyanshujangid <priyanshujangid@yahoo.com>
2025-08-27 07:36:13 +05:30
Charles Chen
92568104a8 redwood: Replace isolated_app with isolated_app_all
Replace certain policies for isolated_app with the newly introduced
isolated_app_all for better scalability.
2025-08-27 07:36:12 +05:30
Michael Bestas
e69f4dea3e redwood: Switch to common QTI vibrator HAL
Change-Id: I281c6d993901ad86592d43afcac2171840998738
2025-08-27 07:36:12 +05:30
Astridxx
b8676bed41 redwood: Switch to NFC service AIDL 2025-08-24 22:55:21 +05:30
TheStrechh
4df26fcf86 redwood: sepolicy: allow read hal_camera_default 2025-08-24 22:55:21 +05:30
TheStrechh
a12f300244 redwood: sepolicy: Add more wakeups nodes 2025-08-24 22:55:21 +05:30
IPSBHANGU
acb25ef711 redwood: Import AOSP fingerprint HIDL service 2025-08-24 22:55:21 +05:30
TheStrechh
21333e77c9 redwood: we don't use cameraperf 2025-05-23 17:21:31 +05:30
TheStrechh
a1e3a93ca2 redwood: Drop fingerprint fpc stuff 2024-09-29 19:18:44 +05:30
TheStrechh
ecc0204269 redwood: Drop udfps 2024-04-10 18:02:23 +05:30
TheStrechh
86826166f5 redwood: Initial rebrand from sm8350-common 2023-10-12 06:51:27 +05:30
EcrosoftXiao
4a894ef454 sm8350-common: sepolicy: Label display drivers
Change-Id: If97042228749352bc804888d8cb31ccf56742542
2023-10-06 07:15:42 +05:30
Giovanni Ricca
19691486d9 sm8350-common: sepolicy: Address mlipay denials
Change-Id: Ie7ed48158db6f5f5facab5dfb2efc8560c83fe49
2023-05-15 11:22:04 +02:00
chaptsand
3364309e72 sm8350-common: sepolicy: Allow platform app to find SoterService
* Fix selinux denied of WeChat fingerprint payment

- E SELinux : avc:  denied  { find } for interface=vendor.qti.hardware.soter::ISoter sid=u:r:platform_app:s0:c512,c768 pid=3613 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:vendor_hal_soter_hwservice:s0 tclass=hwservice_manager permissive=0

Issue: https://gitlab.com/LineageOS/issues/android/-/issues/4701

Change-Id: I3176f8e709fb31aec16a31094b78f753d1d16b43
2023-05-14 17:23:42 +02:00
Arian
5943e273d8 sm8350-common: sepolicy: Label libSNPE.so as same process hal file
Change-Id: I2c8e996fe2b7772e88c925966a6bef04f47d3661
2023-04-25 16:54:44 +02:00
Arian
07b6eb7639 sm8350-common: Move to common sensors multihal
Change-Id: Iba4df5ebb5d653cb2d3f68fce9e682d946d20935
2023-04-16 17:43:25 +02:00
Bruno Martins
88fdfc318a sm8350-common: sepolicy: Remove duplicate lahaina wakeup nodes
Needed after I53aad29624e904b092c3cf73d498c735cf2f1b3e

Change-Id: I245c50c6e5c5d93a58cb4fe11e8e3aef3003ae29
2023-04-16 17:43:25 +02:00
Arian
2a641ef6ff sm8350-common: sepolicy: Label camera libraries as same process hal files
Change-Id: If04a525677e9e137dacb4fd759eb6d1d5d2776ba
2023-04-16 17:43:25 +02:00
Arian
08a574b256 sm8350-common: sepolicy: Add camera perf and postproc hwservice
Change-Id: I5e054952a9739c1363294564296a26adcf3c8d8a
2023-04-16 17:43:25 +02:00
Chenyang Zhong
794542baa6 sm8350-common: sepolicy: Set sensor HAL as a client of audio HAL
Elliptic ultrasonic proximity sensor's libnotifyaudiohal looks for
the audio HAL during elliptic's activate().

avc:  denied  { find } for interface=android.hardware.audio::IDevicesFactory sid=u:r:hal_sensors_default:s0 pid=970 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:hal_audio_hwservice:s0 tclass=hwservice_manager permissive=0

Change-Id: Ibcd6693acb49c810e8ce1f0ea86cf2238ad10a70
Signed-off-by: Chenyang Zhong <zhongcy95@gmail.com>
2023-04-16 17:43:25 +02:00
AdarshGrewal
f3e0c86da3 sm8350-common: sepolicy: Label more wakeup nodes
Change-Id: Iba883ad3a4c35bc59222571c7a0069dc47d34d59
2023-04-16 17:43:25 +02:00
AdarshGrewal
346f014dd7 sm8350-common: sepolicy: Drop duplicate wakeup node labels
Change-Id: I528d6cfcdfb40b1f2fad8706e2121eb20bc81dc6
2023-03-05 10:01:31 +05:30