Provide tcp+socket permission to mxi_port
for location_Test_app

Change-Id: I0a492ee7b6ebc7ea0f134174a761592f7814e22f
CRs-Fixed: 3772354

Change-Id: I16796abe6faf710c39ccf46aebc2e7960d61c4e1

Allow qsocket creation from location_test_app for communicate to
qCdfwRemote API.

Change-Id: I57b43ac4fd3f96d702acd0320c1653131ee2f224

The Dgnss test function need access remote server for RTCM injection.

Change-Id: Ie473e65d14ddf494591b2f03624f0d32ead9ee6b

Add wlan label for cnss script that used to start cnss2 module.

Change-Id: I659a3f82bd5dbe74b2e8398c6dc329eb18558144
CRs-Fixed: 3240326

Added policy for libraries to log onto Logcat.

CRs-Fixed: 3178933

Change-Id: I287daa6b27b9f395869965d0c9b56a200369fcc5

Dontaudit write denials to the fifo file from logd.reader.per when
running logcat.

Change-Id: Ia1d06e4f6c9138112d314ce0b7155b82e500a21d

CRs-Fixed: 2901669
Change-Id: I02838fdcc4727efb6350c33dbed028c070a9836d

Allow systemd tmpfile to relabel the context for tel.log file while creating
during bootup.

Change-Id: I01d349b9614396fe8f81f291ef0d03b855aea24d

Adding sysctl related search permissions required by LCA
layer

CRs-Fixed: 2879697

Change-Id: I1fd401cf84d117328dad662743f86486b7241eba

dontaudit socket_device_t denials from ssreq daemon.

Change-Id: I8e64d64d40c26a3d2f033ea3e1c5e263a5f2c36b
Signed-off-by: Deepak Dimri <ddimri@codeaurora.org>

Add dropbear utility to unconfined.fc so that any access
by dropbear is not confined by SELinux.

Change-Id: Ia5468e095e055d7393416706339a2bb66831c92e

Added interface that exposes necessary permission for config file
this will allow clients to easily access the config file

CRs-Fixed: 2850267
Change-Id: I6e2f95413e7cf9f4828b4b0637523002d204db31

declare qnetmgrd_config_t in auto common folder

Change-Id: I9278e24abc716dad73342606bbd8a0a41b009ac4

Dontaudit the denials when trying to reboot the device.

Change-Id: I90b6dc38832858d8df781cb72a31988408448a1e

engine-service denials are addressed for SSL connection
from PPE libs.

Change-Id: I6429078c6ea6d3de7d9e82e17a6482fd5c5d385f
CRs-Fixed: 2796171

Location QDgnss, RTCM data source policies are added in location_test_app.te
and to telux_policies.if

Change-Id: Icd08fa466177b80fa21c0e8c6e0ffdab41b60377

Adding selinux policies for avc denials seen for telsdk_console_app
after exercising data filter menu due to netmgr socket read write.

CRs-Fixed: 2785816
Change-Id: I59ac28da37e5f9b54931eaf7ebd6facbb8d4176d

Adding selinux policies for avc denials seen for
telux_audio_server after exercising QACT tool usecases.

Change-Id: Ifbccc619bb9585d36ecad61756b71ddfd3872a1c

added rules for boot kpi markers from LCA which runs in
chrony-sock context.

Change-Id: I62dbb569b31fb2e71e5eb109dd63565e203e3724
CRs-Fixed: 2697656

Added new rules for location update

CRs-Fixed: 2771307
Change-Id: I562a4e86de2e71e9adce0bd75aa011fb38c8d3ff

Added handling of selinux rules for acme app.

Change-Id: I078a08cd0f2b6491e0533a16621c25f59c564826

Defined a selinux interface for v2x library. Using this interface
defined a sepolicies for cv2x-daemon.

Change-Id: Ic1b790a29067799606126a2aaef268b083a51a98

This change adds permissions to the LPTD daemon so
that is can perform its tasks without contending with
selinux policy denials.

Change-Id: Icede158d9dcb8dabec9a87adaeb88568208a4990

Fix denials related to lptd

Change-Id: If8176adcf4762701fe2330138c880178e96a7c3c

Merge "meta-qti-auto-sepolicy: Modifying audio_server policies to depend on HAL" into le-auto-sepolicy.lnx.1.0.c4

Merge "meta-qti-auto-sepolicy: Socket search permissions for qmi clients" into le-auto-sepolicy.lnx.1.0.c4

Modified all the telux_audio_server sepolicies from hardcoded ones to
HAL Selinux interfaces which abstract most of the audio hardware
interaction.

Change-Id: I1a52019dd4a9310924457e3065e6555195e973e2

Adding permission to allow apps to allow read a sysfs file
to fetch TIME_SYNC_PARAM for diag purposes. This permission is
needed for diag logging recently enabled in the SDK.

Change-Id: Ie3a505f3f45581ce1fbb49603d394c1d30f4388b

Adding socket search permissions for QMI clients which is being
exercised in a certain usecases such as modem_configurator

Change-Id: I9d8f9fdd6401a3087398275530fb95cd9f36d6a0

Change-Id: I4730f285844ade46a5f465f6b177139036715b7b

Updating SE policy rules for Qwes License Store service. Added rules
to log echo messages to /dev/kmsg which may be required for debugging
later. Added SE policy rules to allow read-write into
/data/vendor/tzstorage/ path. This is done to provide support of
configuring alternate path for QWES License Store in case if on
OEM's device /persist partition is not present.
Updated rule for /dev/kmsg.

Change-Id: I5aecedbaa5595561976aa4f334a3f9837f1e39fc

Fix denials for location daemons interaction with gptp. Add rules
for interaction with gptp sockets, tmpfs files, device files etc.

Change-Id: I217d53efd01a608c4b0b672b0bc8a9c61a6a3b6b
CRs-Fixed: 2713712

Adding diag logging permissions such that libraries can
log to diag.

Change-Id: I0d1144a52298890ac3f669441d3688845f841f18

Change-Id: Ie3a44d7a2fa2570066c7a3cd7245471269162d55

Remove hidden characters in few .fc files which causes compilation
issue in monolithic mode.

Change-Id: If86b10f9f522fd371815d901aef6b1d2a338f90c

Slim daemon needs to open and read the configuration files hence
need to add rules to enable permisions.

Change-Id: I21165de9ef376b896ecdcc7a20fb1d148a3eb94c
CRs-Fixed: 2683749

Modified usage to reflect the SELinux interface change in the
read/write_telux_log_file APIs.

Change-Id: I265daad8f4cff9b265539e5e48a4756ef101929d