- Added telux_allow_qmi_client permission to the telux_allow_wlan
and telux_allow_data interface

CRs-Fixed: 3862525
Change-Id: Iaf06c28f594cf92d86e5f2d1ca3037f51b6781d3

Merge "meta-qti-auto-sepolicy: Add policy to fix sensor mount-copybind error" into le-auto-sepolicy.lnx.2.0.c7

-  avc: denied { watch } for pid=696 comm="QCMAP_Connectio"
   path="/run/data/monitor" dev="tmpfstmpfs" ino=76
   scontext=system_u:system_r:qcmap_cm_t:s0-s15:c0.c1023
   tcontext=system_u:object_r:qcmap_var_run_t:s0
   tclass=dir permissive=0

 - avc: denied { read write } for pid=1890 comm="ip"
   path="socket:[25641]" dev="sockfs" ino=25641
   scontext=system_u:system_r:ifconfig_t:s0-s15:c0.c1023
   tcontext=system_u:system_r:qcmap_cm_t:s0-s15:c0.c1023
   tclass=netlink_kobject_uevent_socket permissive=0

Change-Id: Ic8e2351228c7f46e3886eb2bd01ffa462b5c65fa

Add sepolicy to allow mount-copybind to mount
sensor config file.

Change-Id: I74ebfeeaea8b433e2efdda7081daf7ef85b30a0c

Merge "meta-qti-auto-sepolicy: create bbappend for refpolicy-mls-auto in auto layer" into le-auto-sepolicy.lnx.2.0.c7

Add avc denial rules to fix permissions issue for
configuring coresight during device bootup.

Change-Id: I8756539b8db315c4213fa3cc472f3d7105c2dbe7
Signed-off-by: Vishnu Teja <quic_vteja@quicinc.com>

Create bbappend for refpolicy-mls-auto for auto layer to compile sepolicies
from auto-sepolicy layer.

Change-Id: I6edf20562330110b4d8ae8e4027224c599abcbe1

Merge "meta-qti-auto-sepolicy: Give dontaudit rule for mount_copybind" into le-auto-sepolicy.lnx.2.0.c7

Change-Id: I9ab3cefd283446f3ef292f5bfa1252cb67b58efa
(cherry picked from commit bc2f2716)

Added read-write permissions for the unix stream socket
under adbd context.

CRs-Fixed: 3789984

Change-Id: I636e66c66837c8b6536f9f35b0f865c3c71ac394

Adding ioctl permissions during copying licenses from /data/qwes/licenses to
license store path

Change-Id: If800d8d65c6a29f510b0764da631334cfc5b10ee

Selinux rules are associated with older
application name crypto_console_app.
This commit associates rules with correct
application name.

Change-Id: I8e6f27d44282cb6dbc1e925c2759958ec48226fb
(cherry picked from commit 04149f6300dab83618ea5bdae374a70a9961180d)

Give dontaudit rule to mount_copybind for accessing cv2x, ipa_vlan,
power_manager, qits, sensor_util and telsdk file.

CRs-Fixed: 3819647

Change-Id: I70c6d9e829e0ac41482550f63228089a92ffb1b3
Signed-off-by: jbhalani <quic_jbhalani@quicinc.com>

aerolink systemrw data search rule
aerolink tmp access rule
aerolink udp socket rule
qits kpi boot selinux rule
qits read proc loadavg selinux rule

CRs-Fixed: 3811100

Change-Id: I18c72499c85f809a2bf0d952165b473b2034dbc1

Add rules to allow power-daemon writing into kpi node

Change-Id: Id821cab17d4533547bb280cf17fdc8fffe0d8682

Merge "meta-qti-auto-sepolicy:avc denied for getattr fix in stream_update" into le-auto-sepolicy.lnx.2.0.c7

Change-Id: Ic831d1004e19357340fab3a619159bd5d323e92b
CRs-Fixed: 3794755

Merge "meta-qti-auto-sepolicy : Added rules to access thermal-client socket and conf file" into le-auto-sepolicy.lnx.2.0.c7

add rule to enable trace logging
denial addressed is :
audit(315964841.215:139): avc: denied { confidentiality } for
pid=919 comm="cat" lockdown_reason="use of tracefs"
scontext=system_u:system_r:unconfined_t:s0-s15:c0.c1023
tcontext=system_u:system_r:unconfined_t:s0-s15:c0.c1023
tclass=lockdown permissive=1
Change-Id: Ib0b6d19c33ea936f4934213930c5df7345af5086

- telux_thermal_server uses thermal-engine.conf file and thermal-client lib
- Allowing telux thermal server to read thermal-engine.conf file and
  socket permission for thermal-client lib

CRs-Fixed: 3744951
Change-Id: I0cada16aaf01f177aac62a8aa20de0694bcff1f2

Add rules for ddr_min_freq_change service.

Change-Id: I15467349ac070c450e9a53ec018c3ef8ecbbaf75
Signed-off-by: Deepak Dimri <quic_ddimri@quicinc.com>

Merge "meta-qti-auto-sepolicy: system: Address boot_kpi_values denial" into le-auto-sepolicy.lnx.2.0.c7

Merge "meta-qti-auto-sepolicy: Add denails for thermal-eth-netlink" into le-auto-sepolicy.lnx.2.0.c7

Merge "meta-qti-auto-sepolicy: Add selinux files for verified-boot" into le-auto-sepolicy.lnx.2.0.c7

 * Fixes an issue where adb isn't working due to denial

Change-Id: Id597a93605008e05cd998cc8c7a41b538ca1b32c
Signed-off-by: Abhinav Gupta <quic_abhingu@quicinc.com>

 * fixes an issue where diag router is not able to write to boot kpi node resulting in a missed marker

Change-Id: Ib3bc2cd4b9df9008c347ce3f0e7b7a19c0f01588
Signed-off-by: Abhinav Gupta <quic_abhingu@quicinc.com>
(cherry picked from commit 5267c92a187389e8f69d885b0da71c186d97f022)

-Added rule to access qms socket.

Change-Id: I3e5f84dff18a674d935c69920d058bc9d22294f5