Commit Graph

2597 Commits

Author SHA1 Message Date
FrozenCow
ec0322e31b cm: sepolicy: allow kernel to read storage
This fixes issues where the kernel would need to read and write
files from internal or external storage. More specifically, the
kernel needs these rules for USB mass storage to work correctly.

Change-Id: I8cb0307727bc0c464d5470e55275ad808e748ee0
2016-02-20 14:26:41 -08:00
Dave Daynard
4a2f567dc9 init: add permissions for max_freq_hysteresis node
Change-Id: If556282e37daabf270be4af922c7c9a4112c3771
2016-02-20 09:14:46 -08:00
Matt Mower
2880cc802b apns: Net10 310410: Fix port
The 8080 port appears to be only for the T-Mobile mvno, not the AT&T
mvno.

Change-Id: I44330aaa98fdcc9b577ed507ed0be093750c0afe
2016-02-20 08:59:12 -08:00
Scott Mertz
2b4ec05fc0 Revert "recovery: default recovery updating to false"
The default behavior is as if this setting is off.  There's no need
to set it.  Settings will now set it at boot if not configured.

This reverts commit e0e8c2772e.

OPO-490
Change-Id: I77963dfc9eea8ece25ed1b6b17bd2c6936ae69ee
2016-02-16 12:02:38 -08:00
Arne Coucheron
3f4d8432e3 Cleanup APN list for Norway
* wap? WAP? What?!? Are we living in the dark ages with our dumbphones? :)
 * Remove redundant Telenor entries
 * Tele2 are part of NetCom now, and all users have been transferred there
 * Talkmore and djuice can use the Telenor APN
 * Remove providers that doesn't exist anymore
 * Update some APNs according to info on providers webpage
 * Consolidate some APNs

Change-Id: I2bd6441e476aebf1c0c63b34d659efce40e42847
2016-02-16 06:30:45 +01:00
rogersb11
cb8c139a35 Contributors: Update Note 2
Change-Id: I8e7b11ed12dd3ef8c7d542bcb0204c72f48590e9
2016-02-13 19:38:01 -08:00
Matt Mower
137ba2e278 Contributors: Add mt2 dolts
For the record, I do not like my name being first here. When all is
said and done, u-ra chose his handle unwisely and is relegated to the
end of the alphabet -- a doltish move.

Change-Id: Ib1f15af12c1118e6fda5673b08e870dfdb941e15
2016-02-12 10:20:30 -06:00
genesixx
3f9f7a6b3d contributors: add LG V10
Change-Id: Ia791576dee92aad832b83e7e28a8aeaf2fbcb487
2016-02-12 02:59:20 -08:00
Adnan Begovic
97ac30ec9c cm: Set explicit dependencies on stubs for checkapi-cm.
Change-Id: I2c8b8425262a6812f1061326c55ffc7418967444
TICKET: CYNGNOS-1950
2016-02-10 15:22:17 -08:00
Pat Erley
15697319ca sepolicy: Allow system server and uncrypt access pipe
System server needs to be able to create a pipe in the cache partition
for uncrypting OTAs. Uncrypt needs to be able to read and write the
pipe.

Change-Id: Ie03ee7d637eaecff8fe38bf03dc733b3915cd336
2016-02-09 13:24:46 -08:00
Adnan Begovic
f84ce1b738 cm: Fix checkapi makefile typo.
Change-Id: I96d1acba8e8f665dabf6d18dac5fc5c3132ad0f7
TICKET: CYNGNOS-1950
2016-02-09 11:38:40 -08:00
Adnan Begovic
e738087fdd cm: Provide verbosity for checkapi-cm.
Also a helper text for how to unbreak yourself.

TICKET: CYNGNOS-1950
Change-Id: I8311e19905b507c3a65eba37a6b4ea6606108e4f
2016-02-09 11:05:03 -08:00
Simon Shields
ce212158a5 contributors: add i9300
Change-Id: I947ac687e7604c41bae51c4f9a66a15bb041c34d
2016-02-08 08:55:56 -08:00
Michael Bestas
d914b185b9 Remove leftover profiles entry from power menu
* No longer available

Change-Id: Ifac7e1181dc53af5788f54444ef75a345a888fa2
2016-02-08 05:55:50 -08:00
dianlujitao
8d21e67e9f contributors: Add cherry and nx510j
Change-Id: I454553414ff39e15dd850b636047532e4c2f4b77
2016-02-05 17:18:16 +08:00
Michael Bestas
34b5b9756c cm: Add live lockscreen feature
Change-Id: I62e5229c9688619c2f7809f001d761b4bdf13a10
2016-02-02 12:23:43 -08:00
Matt Mower
144291005d apns: Cricket AIO 310150: Remove duplicate
Change-Id: I7f68a8bb531e02fe74971565a425327e79a70604
2016-02-01 09:10:28 -08:00
Matt Mower
92a49a949d apns: T-Mobile 310260: Compatibility update
* Allow both IPv4 and IPv6 protocols for data and mms
* Provide an apn name for the initial attach profile

With respect to initial attach, it seems at least the qcom ril blobs
on my device require the apn field to be set. The following error is
produced and data will not connect on boot unless radio resets (e.g.
airplane mode toggle) so that the default APN is used.

E RILQ    : (0/231): RIL[0][cmd-111(680)] qcril_data_request_set_lte_attach_profile: ril_apn (provided NULL) is mandatory param for looking up profile.
E RILQ    : (0/231): RIL[0][cmd-111(680)] qcril_data_request_set_lte_attach_profile: EXIT with FAILURE
E RILQ    : (0/231): RIL[0][cmd-111(680)] qcril_qmi_nas_set_initial_attach_apn: Data RIL call for Attach APN failed with Error code 2

Change-Id: Ie983474780a7443c870911994234ea2f2025de12
2016-01-29 20:44:14 -06:00
Pat Erley
db4fb0ee6b recovery: Add new rules for recursive wipe
We now use a temporary context when mounting /data, so add permissions
to do that, and add permissions necessary to do the recursive wipe.

Change-Id: Ic925c70f1cf01c8b19a6ac48a9468d6eb9205321
2016-01-28 15:20:51 -08:00
Jason Riordan
86020c9066 Add Zenfone 2 maintainers, update a few others
Change-Id: I35499bc5bdbdd11ddcb37d6715b5b3f9c7f5d637
2016-01-25 08:15:05 -08:00
Brinly Taylor
0921d1f11f vendor: cm: Update maintainers.
AdrianDC also in the crew now while Marcelo doesn't have the device anymore.

This patch was requested by AdrianDC.

Change-Id: I57a27655537d96c7f5dc33f33d8e7d7e3982d6db
2016-01-25 08:12:13 -08:00
Jani Lusikka
8c780755f2 Grant platform apps access to /mnt/media_rw with sdcard_posix label
Also allow apps to read the contents of mounted OBBs.

See AOSP Change-Id: I66df236eade3ca25a10749dd43d173ff4628cfad
and Change-Id: I49b722b24c1c7d9ab084ebee7c1e349d8d660ffa

Change-Id: I757a2a8831c69d41c0496025a39eaf79ceb0e65f
2016-01-24 14:39:42 -08:00
Dave Kover
580bc0afa2 Add new default wallpaper for CM13
Some cotton candy to go with that serving of Marshmallow.

Change-Id: Ia98397a63aa2157421c777036e997b600374cf9a
Ticket: CYNGNOS-1494
2016-01-19 17:37:32 -08:00
Adnan Begovic
67f9e7adaa vendor/cm: Bump cmsdk platform version.
Change-Id: I5f460fd94e9e85003d6d7dac58c42d5d3d31a742
2016-01-18 11:27:05 -08:00
herriojr
f0a6f1ec8b Fixed mmm For Maven APK
Maven APK (Why are these in maven anyways?) will crash due to it not
needing to generate a jack file.  This wasn't noticed before as brunch
succeeded, however, doing an mmm on one will cause this to fail. This
adds in logic to not generate a jack file for an apk in maven.

Change-Id: I44036bfd51ae3edd9437b153898b419ffc6ba2d6
2016-01-18 10:32:36 -08:00
myfluxi
fc52e707e8 cm: Update maintainers
Change-Id: Ibe69fe6730a2f34c44bd7df5892dd25adb90e4f3
2016-01-18 09:01:58 -08:00
herriojr
04864b10aa Fixed Maven Artifactory to work with jack
Prebuilts weren't generating their .jack file when doing an mm or mmm
but would work with a brunch or full make.  This makes it so mmm/mm
will properly generate it.

Change-Id: If5ccd1b557ef124b3c57fa09b172ec11caff886e
2016-01-15 16:58:02 -08:00
Michael Gernoth
356bb56442 APN: Remove wrong T-Mobile CZ and Vodafone CZ APNs
There are two T-Mobile CZ APNs which specify the MMS proxy as http
proxy (which doesn't work). Get rid of them, there are correct APNs
available. Also remove duplicate IMS and wrong MMS APN.

Remove two wrong and one deprecated Vodafone CZ APNs. The separate
'ointernet' APN for prepaid cards has been deprecated since 2010.

Change-Id: Idf8e7c8df7bb843cdfafe7dbce710d09aa47eda1
2016-01-13 23:24:19 +01:00
HashBang
6f6e11f0ae fix cricket APN
reported to fix MMS on cricket

https://www.cricketwireless.com/support/apps-and-services/bring-your-own-device-byod/customer/bring-your-own-android.html

Change-Id: Ib5127f4bf4478a040ee5662071a0e81b6c1086ef
2016-01-13 08:17:57 -08:00
myfluxi
e8df21c962 sepolicy: Add perfprofd with set_prop macro
Addresses:
avc: denied { write }
for pid=293 comm="perfprofd" name="property_service" dev="tmpfs" ino=9229 scontext=u:r:perfprofd:s0 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0

Change-Id: I5a88722eda4d0751fd9a081c434d385ac1c785ef
2016-01-12 17:21:32 -08:00
Luca Stefani
bd3d22e354 init: Create directories needed by sshd
Change-Id: I672bd86f2ce359653fe1c2abc036a0fdc918ace1
2016-01-09 07:00:14 -08:00
Deepak Kundra
74d7c57a79 Update IMS APN based on Smartfren Device Technical document-v1 2
Change-Id: Iea131e28fbace6e8d848f606ef796a91afa6813d
Issue-id:RENDANG-525
2016-01-08 17:26:01 -08:00
Francis Guevarra
c7469c6008 APN: Add Smartfren IMS for Volte support
RENDANG-525

Change-Id: Idcfb6e2577ec80cb160b049451f5ffdc6992ea57
2016-01-07 12:38:53 -08:00
Khalid Zubair
311a862e9d cm: add lib7z to product packages
Add dependency for lib7z

Change-Id: Ic597456601e052dfe5413651de76d5a9880df786
2016-01-06 17:42:23 -08:00
Gabriele M
7ea45800c1 APN: Fixup Vodafone IT and remove Noverca
Noverca is out of business, so the APN is unneeded. Vodafone IT
has duplicate entries and the type of APN associated to web.omnitel.it
is wrong, so fix it.

Change-Id: I4ddc0dbc13d44f8dc8ef2bc307496155230e720c
2016-01-06 23:26:01 +01:00
Gabriele M
af7dd24948 APN: Update TIM MVNOs
'COOPVOCE' is the same as 'WEB COOP', except for mvno_type and
mvno_match_data, so get rid of it.

'Unefon' uses the exact same APN of 'Iusacell', so duplicate the
entries and assign the right mvno_type and mvno_match_data.

Change-Id: Ibae12b3c179528ccd115849929995c79fa91ed0f
2016-01-06 10:45:56 -08:00
Adnan Begovic
d2bc6c2b69 cm: Fixup maven artifact publish inclusions.
TICKET: CYNGNOS-1529
Change-Id: Ie7307d43f0b38b179ae42b7c54a790bb7e4c5ea5
2016-01-05 20:12:23 -08:00
Adnan Begovic
4198cf685f cm: Modify maven artifact publish makefile.
Now allows you to specify a target module to be
  compiled prior to publish via LOCAL_MAVEN_TARGET_MODULE.

  This utilizes the definition for intermediates-dir-for on
  the target module after it sets an explicit dependency from
  remote to local module.

Change-Id: I65b5e07fdcc3368e350b1935ccca381b74dce59e
2016-01-05 17:36:46 -08:00
Tom Marshall
139e798bf9 otasigcheck: Avoid long lines in XML
Shells based on busybox, such as found in CM 12.1 recovery and TWRP, do not
properly handle pattern based parameter expansion for variables longer than
4kb.  This throws our naive little XML parser into an infinite loop.  Since
all such lines are associated with external app certs, just skip them.

Change-Id: I203b65c1ffd62bf3261b3ae315327314a5006952
2016-01-04 10:26:54 -08:00
Matt Mower
511152cd2c sepolicy: Allow minivold execute_no_trans
After assimilating minivold into /sbin/recovery, we need to allow the
minivold service (a symlink to the recovery binary) to transition from
the recovery to the vold domain.

Change-Id: I112e6d371a8da8fc55a06967852c869105190616
2016-01-02 02:07:18 -08:00
codeworkx
14e765cd71 cm: sepolicy: fix denials for external storage
Change-Id: I784a859671c69370cab0118a88a5fb0190352af9
2016-01-01 17:30:27 +01:00
codeworkx
053b1805da sepolicy: label exfat and ntfs mkfs executables
Change-Id: Ic5e32818bc54993f4e8c2377cbec64f9444f6d8a
2015-12-29 21:51:32 +01:00
Adnan Begovic
39ba595215 cm: Publish system api as part of publish process.
Change-Id: Iba8b2fbc43dfd7592d7526b03ce6e1338ea095d0
2015-12-23 12:38:15 -08:00
Scott Mertz
33cff384df cm: add Screencast by default
Change-Id: Ice8dd9ca28bfd0d3a8e7917ef87edb00b899ab93
2015-12-20 21:42:48 -08:00
dhacker29
076a1ea54a sepolicy: Set the context for fsck.exfat/ntfs to fsck_exec
This matches the policy for fsck.f2fs, although it still needs to run
as fsck_untrusted for public volumes

Change-Id: Ia04e7f8902e53a9926a87f0c99e603611cc39c5d
2015-12-17 15:43:00 -08:00
Tom Marshall
322cc5ae59 otasigcheck: Rewrite for CM 13.0
Rewrite the packages.xml parser to be slightly less brittle.  Read
lines from packages.xml and save off the interesting values, then
compare with expected results afterward.

This both avoids using grep's -A option, which is not supported in
toybox, and allows the script to recognize the cert tag regardless
of its position inside the package tag.

Change-Id: Idc0006e38f4a3f9d5aec223a8a1571f5c11fe3bb
2015-12-16 15:39:30 -08:00
Ethan Chen
909343f3df SELinux: Use custom ADB over network property
* Use a custom system property to trigger the real one, so we avoid
  running afoul of any SELinux CTS requirements.

Change-Id: If5e7a275f492631a673284408f1e430a12358380
2015-12-16 11:01:50 -08:00
Keith Mok
6bc84be525 sepolicy: Add permission for formatting user/cache partition
If the "formattable" fstab flag is set, init will tries
to format that partition, added the required policy to allow it.

Change-Id: I858b06aa3ff3ce775cf7676b09b9960f2558f7f6
2015-12-16 10:41:51 -08:00
Keith Mok
fcfc13ac6f sepolicy: Add domain for mkfs binaries
The init binary must transition to another domain when calling out to
executables. Create the mkfs domain for mkfs.f2fs such that init can
transition to it when formatting userdata/cache partitions if the
"formattable" flag is set.

Change-Id: I1046782386d171a59b1a3c5441ed265dc0824977
2015-12-16 10:40:28 -08:00
Abhisek Devkota
aa40255d77 Remove CMAccount
These servers are being retired. Use C-Apps (Cyanogen Acct),
Android Device Manager, or one of the many other services
that are capable of performing these tasks.

Change-Id: Ifc20768f24d3a5f9a7510b98c5e7d563fc703382
2015-12-15 12:19:29 -08:00