add dontaudit for sysctl_vm_t to avoid denials.

Change-Id: Ie1f6523404beb6c8ece169ea15b7351b42c52b3c

Fixes a denial oberved due to unconfined access

This access is required to interact with diagchar module and read
the timestamp_switch variable

CRs-Fixed: 2967387
Change-Id: Icdcac437a93f811d86fe8b8d8466a193791d364a

Also enable xtwifi_client to read /target node.

Change-Id: I639165519bcef1de71d5016afe81ca16f14fd847
CRs-Fixed: 2954726

Certain services have SourcePath= variable set in their service
files and hence when systemctl commands are executed, they have
their executable context instead of systemd_unit_t. Hence define
an interface which can be used to allow the unconfined domain to
execute systemctl commands on those services.

Change-Id: I0ea784e260765435af2d58a410fae92b30ddc947

This denial occurs due to dnsmasq internal code, and can be
suppressed without breaking functionality

Change-Id: I9ad2f831d8512694effa9e688c4c422159baff3f

Add sepolicy rule for append and unlink file.

Change-Id: Ie482a725f326f238eef92f2ab30519a844ff00e3

1. xen_port_t
2. commplex_main_port_t

Change-Id: I7e1fbf7f9607d18011564cf14942eed7730b321e
CRs-Fixed: 2968709

Change-Id: I162123335a652f5c7ae731049af18c9691fb02c6
Signed-off-by: Puneet Yatnal <puneet@codeaurora.org>

Merge "meta-qti-sepolicy : added dontaudit  for qseecomd to append file in sysfs_t" into le-sepolicy.lnx.3.0.c17

Takes care of multiple denials during IP address
assignment

Change-Id: I47302475815746df38c7ebf397d53cbb8813ba67

added dontaudit for qseecomd to append file in sysfs_t

Change-Id: Ief2c4abf78e8e44ff613d52de80de19154515ecc

add rule to read qcmap tmp files from ifconfig and kmod.

Change-Id: I61885cd31792e869bc995e17c29a8bcccc0267c5

add rule to allow read write access to files for qcmap_var_run_t

Change-Id:I3799b571c0c5f8ae7aa31b9a90b528a2b769db19

CRs-Fixed: 2808623
Change-Id: If3c39fe37ce6a09aaaa89916a8eae634d933e42b

Define and add /var/run/monitor folder to
monitor and support ipacm restart.

Change-Id: Id26adea34d2ac80957ead09bf939059c125b6c53

Change-Id: Ida393cf23f07cc20c820259ce9445448f581acf0

Change-Id: I57ea6917e4e937b29b0eb35c3ec18c825858ee47
Signed-off-by: Vishvesh Deobhankar <vdeobhan@codeaurora.org>

Adding stat check for bootup KPI node using stat has
introduced  the need for adding getattr rules for this
node -  /sys/kernel/debug/bootkpi/kpi_values. Rule is
required for location hal daemon and xtra-daemon.

Change-Id: I55e1eb990fcca202f6d7eb2c193b604eb2e9bf15
CRs-Fixed: 2900218

While trying to do 'ls' operation on /dev,rebooterdev is not listed
due to permission denied error. Add the sepolicy rules to fix that.

Change-Id: I28b452aad6c60d9da591d1ff15250679b4b4215e

Change-Id: Ia0d1ea89f3ccc7d6f5d3f8097cf0bb3c963e9659

Change-Id: I2475678332870943a49f03d453ee2ada28160011

tuicoreservice's sepolicy ownership of /dev/dri/card0 is unnecessary and
affects other services' access of the device.

Change-Id: Iaf2746ae651263ff3de87dbf3fe5d4652851f18f

add write permission in unconfined context

Give block_suspend permission to tuicoreservice for acquiring and
releasing wakelocks.

Change-Id: Ib5734d8dee04089cd7abc71e2d6f2dbc9a3c1276

Add read , write permission for netmgr config file

Change-Id: Id087854d09c60900c1f9562fd4d8e09f052edc12

Post boot script updates the printk log levels to supress
suspend to ram logs.

Change-Id: Iccc615e8f06e38526b9fc6ab9d90010ae3c246b5