1. Add random number generator device access for ITS application.
2. Add aerolink log permission for ITS application.

CRs-Fixed: 3349704
Change-Id: Ie7d2070a778ae9c17c8b76bce4e3b050905f0d0d

Tool loc_injector domain is unconfined, and some permissions
need to be added as well.

CRs-Fixed: 3344260

Change-Id: I6e3311e07a37bce7e42b95d134f81ce762f3758c
Signed-off-by: jie Chen <quic_jie@quicinc.com>

Add proper file contexts to the conf files to avoid avc denials.

Change-Id: I9b857fb41988d316b33f492882dde10339bf3d48

Add selinux context and rules for compensator service

Change-Id: I7fb8978043d0f6d77b2222e8e7e0fd7fe3fae6b7

Avoid AVCs in tool cv2x_get_capabilities that have no functional impact.

CRs-Fixed: 3304927

Change-Id: I35e0862747b5272b557144c790981e37d58a6ed0
Signed-off-by: jie Chen <quic_jie@quicinc.com>

Allow system tmpfs to remove socket file in tmp partition
CRs-Fixed: 3296301

Change-Id: Ic8c4bded49844758815f2aa67d6eef9570157f41

1. Add selinux rules for tool cv2x_slss_rx_app.
2. Support cv2x-daemon log to kpi_values.

CRs-Fixed: 3280331

Change-Id: Ie380ed3a4e2e30f350dbac46a43860bedd6761f8
Signed-off-by: jie Chen <quic_jie@quicinc.com>

Change-Id: Ib5af582acf79976b8c5849f800c8a9c5b5781c8c

Add permissions for accessing /var/tmp/v2x.xml.

CRs-Fixed: 3260715

Change-Id: Ia32d45a54d7d1acea135e052f1a2a108382e8404
Signed-off-by: jie Chen <quic_jie@quicinc.com>

The daemon's context was not associated with any policy or domain which caused
denial when stat the file from the shell. Adding the domain transition allows
the file to be stat.

Change-Id: I2e5aaeabc5d1c5dbfd438c9dcfec391dc6508dc5

Add rules for kinematics-sample-client to access location socket in /dev path

Change-Id: If2c461b0ebac1a25fcf7e04e7a5a4a17adc848c1

Change-Id: Ic6bc40e71a986a4a7f48dfdbc58120357bc7f659

Added SE policy rules for wake_lock in qwesd.
Updated patchset for new branch.
New Patch.
Updated patchset.

Change-Id: Ifa82bbcfee94495bf79ce3cad438a111623c1570

Add edgehub_data_conf to allow dm to read files from /data/c2c/

Change-Id: I02750b04a7af48cf9cf2dbf9bb5cac81ab39f6c4

Change-Id: I1d62dddc987187e644b7a7b0f539d100f8d3573c

Change-Id: I36ac8da3a32f679bd33c3c1d5d4ee2dfa2e98269

Added required file context for edgehub services.
Added required rules for the edgehub services.

Change-Id: Iecdb747d7cbda1828ee7b086fb83b3920b4c65ff

Add rules to grant cv2xd to get tmpfs filesystem attribute

Change-Id: I7ae7e0fcdc0c7abee5618199c03e729c08db6f9b

Merge "meta-qti-auto-sepolicy: Remove tmpfile access permissions for telsdk logging" into le-auto-sepolicy.lnx.1.0.c25

Previously telsdk backup log need access semaphore which located at tmpfile /dev/shm/
Now with telsdk logging change it not involve semaphore any longer, so remove tmpfile access permissions

CRs-Fixed: 3197215

Change-Id: Ib90b0511ff4a3584b24c9f101a394bb794ab1c99
Signed-off-by: yma <quic_yma@quicinc.com>

CRs-Fixed: 3197215

Change-Id: I7d395bf73449eaf8a9cf69696785cafc3adecec7

Add sepolicy rules for calculating rotational
matrix and sensor position for sensor.

Change-Id: I3a641686babd71daa15c196564c9d1854ac544d7

Added policy for libraries to log onto Logcat.

CRs-Fixed: 3178933

Change-Id: Ic42a25d996a9ccc1228dfc6e31e1948a1239622a

Add new policies for ITS stack.

CRs-Fixed: 3095563

Change-Id: I7db05bbf8ce611b5ed9ccd493d6d1c02a01215c7
Signed-off-by: jie Chen <quic_jie@quicinc.com>

move cv2x related selinux to common place

CRs-Fixed: 3160365

Change-Id: Ia625eb523aeef6fa3a4275193e08e8c31577e7bb

Updated policy to allow all ITS stack daemons to write to syslog.

CRs-Fixed: 3031477

Change-Id: Ie6eda85c2de10304480374ffb269002a1d74a17d

- Added new policy for telux_thermal_server
- Updated the policy for thermal_test_app

CRs-Fixed: 3162741

Change-Id: I2b304d7d00da816167d67558c1614f16751e5569

Add unreserved port bind capability and
/etc file read permission for kinematics-sample-client.

Allow unconfined domain to execute systemctl start/stop commands to start/stop
qcmap and qti services.

Change-Id: Iddc71fcb388f9ff4b288e188d54ac5ea7b98e0ab

Change-Id: I529487c17840b98ba083f171a851d4c7ecb82dc6

Change-Id: I6aec8e03e5c8903370d60a27e2d10e22548d419f

New resources getting accessed by telSDK RAL create denials
when running qits and acme that are solved by adding the
following policies.

Change-Id: I9d235ce0190549e0f7dc5e9cf70f86d6e3c625b8

Add socket related policies to interface telux_allow_v2x.

CRs-Fixed: 3030154

Change-Id: I73e7e3ba555b7fef7a5a1f41946db78ced7f93d1
Signed-off-by: jie Chen <jie.chen@codeaurora.org>

Add rules for /etc/tel.conf copy-bind

Change-Id: I8e93d7fd0a9ec780330384a6170c0f25dedf4dd1

Throttle manager interactions with TMD via telSDK  access the
tel.conf resource located in the /etc folder. This change adds the
rule for throttleman to access /etc/tel.conf when using the TMD.

Change-Id: I7bebfe6315d070e1ab3f86200cfac3b24ef03c20

socket used in dsrc interfaces

New functionality added in telSDK requires the acme process to be able
to create, read, write, connect, bind and accept socket operations and
thus these rules have been added into selinux policy to prevent denials
seen in log mesages.

Change-Id: I496acb4c8ecf2da38864d8d6027a0564a587ca0c

Dispatcher/LB was getting denials when logging mode was enabled, the policy
update allows writing to syslog.

Change-Id: I03714411c0685cf4b09fca92e662d8e704898fff