Sepolicy rules to mount the phone_home.json file from edgehub & phone-home module.

Change-Id: I2570373824ba934b88a145fbcf4f15c36a100b77
Signed-off-by: nnimish <quic_nnimish@quicinc.com>
(cherry picked from commit 5e25ce44)

Sepolicy rules added for attestation_manager to access configurable timer values, conf files and certs.

Change-Id: I396cc254d4ef04cf1161a8097e37ae23e7ba4994

Specifying the sepolicy rules for phone-home services to access & modify phone_home.json file.

Change-Id: I3293c0cfdf2ebfa1a5e2489ac783a80525271335
Signed-off-by: nnimish <quic_nnimish@quicinc.com>
(cherry picked from commit c6e2e126)

Changed name of softsku_manager to ph_manager
Sepolicies for softsku_manager is transferred to ph_manager
Added ph_manager to imaevm.te file

Change-Id: I43a695a751a2a9286df27a75ec43bf931792dbeb
(cherry picked from commit 7cb454bb)

 * build cron policies from upstream

Change-Id: I7eb08a84c9ac3fa95a8cee377e74234028665b93
Signed-off-by: Abinaya P <quic_abinayap@quicinc.com>

updated rules to create and delete edgehub_data_certs_t.
Added rules to use cusp library.

Change-Id: I6731e457f44874f315cfe7cf3e14973a60b2ec74
(cherry picked from commit 2e190b20)

Sepolicy changes to access files in etc/c2c, firmware files etc.

Change-Id: Ic722d9917404b452c7ddb58a9ec28e4db78062ef
(cherry picked from commit 8f163324)

Denials are required due to location libraries using le properties
api

Change-Id: I8bd902a96d57799660df186d885f298af1870b32
CRs-Fixed: 3695044
(cherry picked from commit 8db5ee0f)

The updated shutdown sequence for qvirtmgr sends SIGTERM to the VM
processes, which requires signal permission.

Change-Id: Ib7b3ca03dac6917d8facc1b94a8db81df1dda14d

allow telux_thermal_server,antenna_test_app and audio_console_app
to receive signals.

CRs-Fixed: 3908599
Change-Id: I2f152cbddac07fb78a6d9cead4059306aebc41ed

Add new sepolicy in thermal to perform shutdown action.

Change-Id: I2483dfcd1a3ebe9a104c7b40ad018c43457d69e6
Signed-off-by: Nitesh Kumar <quic_nitekuma@quicinc.com>

Add ioctl dontaudit rule for audio_auto_hal, loc_etc_t and
throttleman_etc_t.

CRs-Fixed: 3924998

Change-Id: Id2b55406073d9b24ed8f9ed3f0d6ec03906f5a29
Signed-off-by: jbhalani <quic_jbhalani@quicinc.com>

Add dontaudit rules for unconfined_mount_t for getattr permission.

Change-Id: I9c8c0d7574e4c9098fa50c89ee00504d5456e029

add support to access property_get apis for agm_server

Change-Id: I350cabe2fbfdcc69da2f41f6e559e3a47666cc67

Added sepolicy rule to fix non functional avc denial on netmgrd.

Change-Id: I8607b336b1d13d0dd64f21af72a4817a3fb4f36f
(cherry picked from commit 9d7ea14967781e7dea45578d899d94031549b7de)

Change-Id: Iaaf31de981039dcd2232da44eabc9eea12d2790d
(cherry picked from commit c8423a54)

Adds rules to allow mount permission in loc_etc context
This is seen as with new variants, we have restricted
permissions, so we need to keep conf files in systemrw
to allow modiciation

Change-Id: Ie88ea2891104476ccdd7a0ccdbf29aa13bcb9453
CRs-Fixed: 3725549

Fix chrony-sock access /etc/telux_chrony-sock.conf avc denials issue

Change-Id: I03c14575c63ee31d0be1e3a678146e288924703a
Signed-off-by: yma <quic_yma@quicinc.com>
(cherry picked from commit a47f44a7)

 add support for logd for agm_server.

Change-Id: I3b7d366c712555d5f2a531f661630a818ed23f49

Allow communication via UDP for NAO-IP feature.

Change-Id: Ic859d4dd957172602ad9bb7388b159d3ba70dc9a

- Added telux_allow_qmi_client permission to the telux_allow_wlan
and telux_allow_data interface

CRs-Fixed: 3862525
Change-Id: Iaf06c28f594cf92d86e5f2d1ca3037f51b6781d3

Merge "meta-qti-auto-sepolicy: Add policy to fix sensor mount-copybind error" into le-auto-sepolicy.lnx.2.0.c7

avc: denied { ioctl } for pid=916 comm="cp" path="/systemrw/qvirtmgr.json" dev="ubifs"
ino=113 ioctlcmd=0x9409 scontext=system_u:system_r:mount_copybind_t:s0-s15:c0.c1023
tcontext=system_u:object_r:qvirtmgr_etc_t:s0 tclass=file permissive=0

Change-Id: I08649ce2eea94714bf459e67503befe796bcb57a