Commit Graph

2503 Commits

Author SHA1 Message Date
dhacker29
076a1ea54a sepolicy: Set the context for fsck.exfat/ntfs to fsck_exec
This matches the policy for fsck.f2fs, although it still needs to run
as fsck_untrusted for public volumes

Change-Id: Ia04e7f8902e53a9926a87f0c99e603611cc39c5d
2015-12-17 15:43:00 -08:00
Tom Marshall
322cc5ae59 otasigcheck: Rewrite for CM 13.0
Rewrite the packages.xml parser to be slightly less brittle.  Read
lines from packages.xml and save off the interesting values, then
compare with expected results afterward.

This both avoids using grep's -A option, which is not supported in
toybox, and allows the script to recognize the cert tag regardless
of its position inside the package tag.

Change-Id: Idc0006e38f4a3f9d5aec223a8a1571f5c11fe3bb
2015-12-16 15:39:30 -08:00
Ethan Chen
909343f3df SELinux: Use custom ADB over network property
* Use a custom system property to trigger the real one, so we avoid
  running afoul of any SELinux CTS requirements.

Change-Id: If5e7a275f492631a673284408f1e430a12358380
2015-12-16 11:01:50 -08:00
Keith Mok
6bc84be525 sepolicy: Add permission for formatting user/cache partition
If the "formattable" fstab flag is set, init will tries
to format that partition, added the required policy to allow it.

Change-Id: I858b06aa3ff3ce775cf7676b09b9960f2558f7f6
2015-12-16 10:41:51 -08:00
Keith Mok
fcfc13ac6f sepolicy: Add domain for mkfs binaries
The init binary must transition to another domain when calling out to
executables. Create the mkfs domain for mkfs.f2fs such that init can
transition to it when formatting userdata/cache partitions if the
"formattable" flag is set.

Change-Id: I1046782386d171a59b1a3c5441ed265dc0824977
2015-12-16 10:40:28 -08:00
Abhisek Devkota
aa40255d77 Remove CMAccount
These servers are being retired. Use C-Apps (Cyanogen Acct),
Android Device Manager, or one of the many other services
that are capable of performing these tasks.

Change-Id: Ifc20768f24d3a5f9a7510b98c5e7d563fc703382
2015-12-15 12:19:29 -08:00
Simon Shields
7f67b4e940 sysinit: use a for loop instead of run-parts
Change-Id: Ifdff2c72ff4f77ff5ceb14cc9614174024b04d1a
2015-12-12 19:53:37 +11:00
Abhisek Devkota
967c5036d6 Fix Digi Mobile defaults
RM-165

Change-Id: Iaa701046ea24799b1c7b303ce258332eaeffbbd8
(cherry picked from commit b4b8759454556b440432d5ce8415db5f65456662)
2015-12-10 10:13:17 -08:00
Roman Birg
8470084dbd apns: update for IMS
These come from the Angler device tree.

Change-Id: I7abf4773a57502f29ce9f7938584b7881a7f5a90
Signed-off-by: Roman Birg <roman@cyngn.com>
2015-12-05 16:17:30 -08:00
Christopher N. Hesse
4e5add7dcd cm: Update maintainers
Change-Id: I59ee11b1454f9901242a01ab7c6eb4a6dd4314e0
2015-12-05 01:15:50 -08:00
Michael Bestas
d9b1ef0354 Cleanup fs tools
* Remove what's already included in build or do not exist

Change-Id: I4ef853d26512ee49edc3c3befe95209708c85e76
2015-12-04 19:25:02 -08:00
BLACK
e8c957ca2e vendor/cm: Update Japanese APNs
Change-Id: If75d6c1019c38955bc896941abe60c876fa5ffb2
2015-12-03 00:22:00 +09:00
Steve Kondik
dac37852d4 cm: Include librsjni explicitly
* Make sure this gets included since GMS webview breaks the dependency.

Change-Id: I49b01309dce8d9779ca58576c2d7ee78d133ddb0
2015-12-01 13:31:45 -08:00
Per Lycke
fa30716f71 Correct Tele2 Sweden APNs and remove Comviq Sweden.
Tele2 is the parent company of Comviq and it's operating in Tele2s network,
hence using the same APNs as Tele2

Change-Id: I55c551827a6312159cfdd8c01e20e5e1d3016cdf
2015-11-30 21:06:20 +01:00
Steve Kondik
e01646719a sepolicy: Allow adb pull of executables without root
* Because we aren't actually jerks, contrary to popular belief.

Change-Id: Ie39cce65ecc6a2861547865ff554b108b8b534fa
2015-11-29 05:28:14 -08:00
Diogo Ferreira
3463bd0b78 init: Remove world-writable permissions in BFQ hierarchy
Fixes android.permission.cts.FileSystemPermissionTest#testAllFilesInSysAreNotWritable

Change-Id: Ia71a4ae246148ab8ea5333f8dbd39bfc330d2605
2015-11-27 05:26:17 -08:00
Diogo Ferreira
140305db6d sepolicy: qcom: Allow reading PSU sysfs by system_server
BatteryService queries the usb state to check whether the usb type
is HVDCP. This patch adds a rule to allow that.

For more context check BatteryService#Led#isHvdcpPresent.

Change-Id: Ifacf13dde4b1df81c92bf5d92196e504e61dd402
2015-11-27 05:25:43 -08:00
Steve Kondik
aeec0ac261 sepolicy: Allow recovery to create links in the rootfs
* Needed to support vold and other new code.

Change-Id: I25a0b1cc6461eced7112dd4b3974a71423f7957b
2015-11-26 02:19:44 -08:00
Steve Kondik
48149d05a1 sepolicy: Rule for CM's perfd extension
Manual apply and refactor of cm-12.1 patch:
e04329df88211264e7a9c8f1d6b87a16d8d5639b

Use the unix_socket_connect macro and switch to the new
perfd domain.

Change-Id: Ibb83220b32bad7805653140751c978e629f87ffb
2015-11-23 15:11:18 -08:00
codeworkx
01490eface sepolicy: fix denial for sudaemon
fixes root access for apps

Change-Id: Iff443bf4cbea817917da72bbfc58f9fe42acceb5
2015-11-22 09:57:08 -08:00
Tom Marshall
517e6915cc backuptool: Use cut instead of awk
recovery has removed busybox in favor of toybox, and toybox does not
currently implement awk.

Change-Id: I9d91f52020e8a7b5b02dce27f3d82e6bf0aa1811
2015-11-20 14:24:37 -08:00
Brinly Taylor
ffcd990922 vendor: cm: Update maintainers.
I'm "officially" stepping down form HuaShan (although I've been MIA for months).
Marcelo will replace me for this device..

Change-Id: I6715c874f72177b96258acf19bcdbbbe657f6a6b
2015-11-18 15:09:26 -08:00
Dan Pasanen
a90b69e921 sepolicy: add persist_block_device type
* This is likely defined in several device trees, but not all
  remove it from your device trees if we're going to write rules
  for it here.

Change-Id: I1dda04647d36db52525a3d57b485860dfe3eeb30
2015-11-17 08:38:43 -08:00
Dan Pasanen
35b2402740 contributors: update g3 maintainers
Change-Id: I1bc146dd1f83116b6682024d8c65cf9520308276
2015-11-16 20:03:10 -08:00
Steve Kondik
2c3b5d353e sepolicy: Remove some denials
* Allow apps to run the "df" command to look at disk usage.
 * Allow thermal engine to check/set battery limits.

Change-Id: I67c863a82a94007e7a5e8ccfde9c095b7277ab84
2015-11-16 19:46:00 -08:00
Steve Kondik
816dec8fe9 cm: Remove fix_permissions
* Probably causes more harm than good at this point

Change-Id: Ibbea54cd48e5f8de251de38d0b772672d8a08ac9
2015-11-16 11:06:52 -08:00
Steve Kondik
7d3eca93f4 sepolicy: Add policy for thermal engine changes
* Cyngn devices will need this.

Change-Id: I1e7528e92d0d4ed8c4029667d7ef3cf9081a6575
2015-11-14 23:58:46 +01:00
Steve Kondik
d91ddb53a8 cm: Add a wrapper script for Curl which acts like wget
* Lots of stuff in the wild actually uses wget, and Toybox doesn't
   provide it. We already have Curl which does the same thing just
   with some different arguments. This wrapper script can handle it.

Change-Id: Ic02da709fcd29808b96fabcd1ac4ddd9465f635f
2015-11-14 23:56:10 +01:00
Steve Kondik
8bc283d735 cm: Move bash and powertop to the "full" target
Change-Id: Icd7d3edad16577396ceb86aee34963e88d43dd12
2015-11-14 23:51:33 +01:00
Steve Kondik
52020dea19 cm: Build 7zip and unzip on full targets
Change-Id: I48f7b63bf016db5f7ee8ae0f8b1bfe70479fb3c2
2015-11-14 22:52:08 +01:00
Steve Kondik
243e70bbe8 cm: Drop lsof, add pigz/bzip2
Change-Id: Ic3c842188c3fb001201392d0379e87e3c189e393
2015-11-14 21:04:48 +01:00
Deepak Kundra
59494db005 APN: Remove identical MVNO entries
Starting M-Android, APN's that are not unique are
clubbed in one entry in the telephony db. "name"
field is not part of the unique set and you end
up with a weird MVNO name as the APN name for
T-Mobile. Which ever is the last entry will be the
final name. In case of TMO it became "FMP Communications"

Change-Id: Ia86d5c72f36d32315ef1e2469fdd364869160730
2015-11-13 00:04:00 -08:00
Steve Kondik
49852a7ab0 cm: Update a few module names
* Keep the fs tools consistent

Change-Id: Ib485a044f0d25e2baf59a8f642e03ba70eaec212
2015-11-10 17:30:33 +01:00
Arne Coucheron
53d09902de Ventelo is now Phonero
Change-Id: I1f69258f2e0e53946ed7690e3f31e3795ee56132
2015-11-10 17:30:33 +01:00
Scott Mertz
2911a0e0bb cm: add opt-out for exFAT
Allow global disable of exFAT through environment variable
WITH_EXFAT. Maintain exFAT as enabled by default.

Change-Id: I85e8b14c51441fe52bd185be83880419ee831d5c
2015-11-10 17:30:33 +01:00
Abhisek Devkota
103c64a964 Update boosted audio files 2/2
SAMBAR-975
Change-Id: If69160ce4352e0accd50490c2dc01d8b52ea5261
2015-11-10 17:30:33 +01:00
Daniel Hillenbrand
9a09de86bb contributors: add LG G4, remove cody from some devices
Change-Id: Ib50ccc4ebf2e553146d4220757fdde7adf52357f
2015-11-10 17:30:33 +01:00
Marcos Marado
ddbf80568d Updated CHANGELOG and (c) date
Change-Id: I7fe1156e999cf543b5b3459d7746718a73845ccf
2015-11-10 17:28:12 +01:00
myfluxi
98df019cb4 sepolicy: qcom: Remove duplicate entry
We have this in qcom/sepolicy/common already.

Change-Id: Ibe6ada531f77d3ec00ff61081d21b3d36a1fe7a7
2015-11-10 17:28:12 +01:00
Abhisek Devkota
a1c783fb28 Add volume boosted ringtones (1/2)
SAMBAR-789
Change-Id: I467727adad3c2f5e2212fe5fa5a45e03500ec877
2015-11-10 17:28:12 +01:00
herriojr
8454361962 Missed Capital Letter
I missed a capital letter for an excel mimetype. All are now
converted to lowercase.

Change-Id: I1b0958fbc7b6b01df0f6e7b3da9a1d920bfb2fad
2015-11-10 17:28:12 +01:00
Marcos Marado
f61c4532dc Overlay to set up the voicemail number on MEO
Change-Id: I20ba13966c5fb1d738572c633eca9fde3b541920
2015-11-10 17:28:12 +01:00
Marcos Marado
8d446d533d Overlays to set up the voicemail number on O2
Fixes: CYNGNOS-1190

Change-Id: Icd9a338ffa975d92fba83abe8a7bd295e3b90ec3
2015-11-10 17:28:12 +01:00
Dan Pasanen
7b6521e87d Remove overlays that don't exist anymore
Change-Id: Ie9562c9b3e3e983384e6e16e11834f87107021d4
2015-11-10 06:47:08 -08:00
Steve Kondik
2395401e47 cm: Get tcmiface off the boot classpath
Change-Id: I03c8d5aa7736a313005fa444b992a9e2e460c623
2015-11-07 17:40:12 -08:00
Dan Pasanen
d918bb9a1e common: build mkntfs
Change-Id: I1878873432b37f0cf7aca9d3a14036454c70df5f
2015-11-07 13:46:24 -08:00
myfluxi
8501771607 sepolicy: Make superuser_device and sudaemon mlstrustedobjects
Address:
avc: denied { write } for pid=8782 comm="su" name="su-daemon" dev="tmpfs" ino=9462
scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:object_r:superuser_device:s0
tclass=sock_file permissive=0

avc: denied { connectto } for pid=6666 comm="su" path="/dev/socket/su-daemon/su-daemon"
scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:r:sudaemon:s0
tclass=unix_stream_socket permissive=0

And thus fix su.

Change-Id: I666277067c5ff9f2a985c243075c63fd87090b27
2015-11-05 23:53:50 +01:00
Dan Pasanen
48f0b94fff contributors: update d855 maintainer
Change-Id: I34469cba8c0329da78a6b6fa113087fd5352eb57
2015-11-05 15:40:56 -06:00
Abhisek Devkota
df76a1fd89 Remove instance of server=""
Change-Id: I973f9a49aef09b56eeccfee6fbe26ad609bb592c
(cherry picked from commit d9d3201c077dc697a5a76480cf4cc6948e08d704)
2015-11-05 11:01:44 -08:00
Arne Coucheron
3ae1edd009 cm: Include ExactCalculator in the build
Change-Id: Ib5e29677c9a3c375d46839cf32596df58a5be8c1
2015-11-05 02:35:12 +01:00