Files
pawlet_rpi4/sepolicy/service_contexts
oxmc 0d6551f178 rpi4: partition layout, boot setup, slow_storage, BootControl, wrimg for Android 16
Partition layout:
- BoardConfig: system 8 GB, vendor 2 GB
- mkimg: matching system/vendor partition sizes
- fstab: remove discard from metadata; make discard opt-in via
  BOARD_STORAGE_SUPPORTS_DISCARD to avoid boot-time I/O stalls
- slow_storage.mk: raise Watchdog timeout so first-boot SELinux label pass
  does not kill system_server on slow SD cards

Boot:
- mkbootimg: use stamp file for rpiboot; uppercase FAT volume label for
  compatibility with some UEFI firmware
- rpi4: set androidboot.boot_devices for by-name symlink creation
- wrimg: stamp androidboot.slot_suffix in cmdline.txt after each A/B write
- rpi4: disable AVB (no vbmeta partition in this layout)

A/B / BootControl:
- sepolicy: add BootControl HAL policy and fix partition file_contexts
- wrimg: switch to PARTLABEL-based device detection; fix system_ext brackets

Packages:
- product: add LawnchairQuickStep to PRODUCT_PACKAGES

SELinux:
- Fix remaining Android 16 boot-log denials and permission labels
2026-06-11 09:14:11 -07:00

19 lines
728 B
Plaintext

# Camera
android.hardware.camera.provider.ICameraProvider/external/0 u:object_r:hal_camera_service:s0
android.hardware.camera.provider.ICameraProvider/libcamera/0 u:object_r:hal_camera_service:s0
# DRM
android.hardware.drm.IDrmFactory/widevine u:object_r:hal_drm_service:s0
# Gatekeeper
android.hardware.security.sharedsecret.ISharedSecret/gatekeeper u:object_r:hal_gatekeeper_service:s0
# Graphics
mapper/minigbm_gbm_mesa u:object_r:hal_graphics_mapper_service:s0
# Codec2 — ffmpeg vendor component store
android.hardware.media.c2.IComponentStore/ffmpeg u:object_r:hal_codec2_service:s0
# Codec2 — V4L2 hardware component store
android.hardware.media.c2.IComponentStore/v4l2 u:object_r:hal_codec2_service:s0