Commit Graph

11 Commits

Author SHA1 Message Date
nebrassy 5ca08db4e6 sepolicy: make postinstall permissive
Change-Id: I005669b31598a8917a1e70dc3284bdb857763955
2021-11-10 13:34:18 +00:00
Captain Throwback 3d0a644462 sepolicy: update for exfat-fuse
Change-Id: I5226d22c8b23faffeb70f56483c45d1a4ec72039
2021-10-27 12:40:17 -04:00
bigbiff b9655640f7 postinstall: allow twrp to run postinstall scripts
Change-Id: I9b2ff1b94611bf08e53a5cc452872eb3942dd160
2021-10-23 13:33:51 -04:00
Captain Throwback 32a17d528b sepolicy: add vendor_init to clear avc denials
Change-Id: I12bb691c9796a7c2e4b755af8140cad150fa7b90
2021-10-16 20:33:42 +00:00
micky387 2596960451 recovery: Allow kernel to read and write unlabeled files
10-04 09:32:55.504   626   626 W kworker/6:3: type=1400 audit(0.0:1498): avc: denied { read } for name="bat_health" dev="sde50" ino=13 scontext=u:r:kernel:s0 tcontext=u:object_r:unlabeled:s0 tclass=file permissive=0
10-04 10:34:15.124   397   397 W kworker/6:1: type=1400 audit(0.0:1494): avc: denied { open } for path="/batinfo/bat_health" dev="sde50" ino=13 scontext=u:r:kernel:s0 tcontext=u:object_r:unlabeled:s0 tclass=file permissive=0
10-04 10:36:49.484   399   399 W kworker/6:2: type=1400 audit(0.0:1366): avc: denied { write } for name="Batpercentage" dev="sde50" ino=15 scontext=u:r:kernel:s0 tcontext=u:object_r:unlabeled:s0 tclass=file permissive=0

Change-Id: Ib22560ca9149b729529797b004bcb2ee4879c317
2021-10-05 23:16:32 +00:00
bigbiff 477006a4a0 fastboot: allow device to start required healthd and boot-hal services
Change-Id: Iac1d20ce26d49e7a99071c968d8c8e654e5ff1c6
2021-06-25 18:36:36 -04:00
bigbiff 0e97f7e73a apex: fix selinux denials
We also look to use the loop-control device to identify loop devices.
We only create devices if they don't exist. Modern kernels can have
an option CONFIG_BLK_DEV_LOOP_MIN_COUNT=16 to pre-create the devices.

Change-Id: Ib10cd29f17be4684dd75e0927a2862bf541cd661
2021-02-27 15:14:36 +00:00
bigbiff 91bd7a7ff1 adb: get adb working and cleanup pixelflinger
- update recovery init.rc
- add libdl bootstrap
- cleanup libpixelflinger import
- logd and adbd permissive for now
2021-01-03 17:36:52 -05:00
bigbiff d58ba18272 AOSP10 TWRP Merge: fix conflicts and update libraries needed
This allows flame to boot TWRP. Still will need to work on
super partition for vendor and system access.

The plan will be to cherry-pick any updates to android-9.0
through gerrit.twrp.me to this branch as a WIP.
2020-03-23 11:18:29 -04:00
Andrea Mennillo f591c87993 Fixup union sepolicy
This change solve two issue:
1) Policies related to recovery should be only included in recovery
policy
2) In CM trees the sepolicy dir was always bootable/recovery-
twrp/sepolicy, even if recovery path was bootable/recovery

Change-Id: I9466d22293074ba5f5240abe8b97a5d1bf30982d
2015-11-05 20:58:39 +02:00
Ethan Yonker 11309e912d Union sepolicy within TWRP to make SELinux permissive
This patch set should make it easier to build TWRP in non-Omni
trees as it allows TWRP to modify the sepolicy instead of having
to merge a patch in external/sepolicy to meet TWRP's needs.

Change-Id: I73205343556abb0852ff4c5f8cbf293d840b95d9
2015-10-16 22:49:19 +02:00