{"push_id":2733626628,"size":33,"distinct_size":8,"ref":"refs/heads/a8.1.0-caf","head":"26672003172a6c93a9672704eef9999c60f345ef","before":"df229abd758aaec2be3425a7e615aaaaadfd8581","commits":[{"sha":"ba07ea42140a483c515d46176544b1342881245c","author":{"name":"Rashed Abdel-Tawab","email":"5c683af0a96180bd58bcdc2d5b6263d4089c03d4@linux.com"},"message":"sepolicy: Move definitions from Android.mk to make opt-in\n\nMove the BOARD definitions to sepolicy.mk to allow devices to opt\nin rather then automatically include with Android.mk. Also include\nlineage-specific qcom sepolicy now located in\ndevice/lineage/sepolicy/qcom.\n\nOriginal commits:\nhttps://github.com/LineageOS/android_device_qcom_sepolicy/commit/959d3362451fe081d9a25fde87e989ffe90ab159\nhttps://github.com/LineageOS/android_device_qcom_sepolicy/commit/27f078f1041497ecadf1315b39f130882177ea64\n\nChange-Id: Ibf70e4c8ab9d91b50c62c3e9f1263e1624e8ca00","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/ba07ea42140a483c515d46176544b1342881245c"},{"sha":"8a8fd281a982cb22f6400a1988165bda9037e066","author":{"name":"Corinna Vinschen","email":"ebebe60fad6e8e44260704468f0f6d9c3cbd8568@vinschen.de"},"message":"apq8084: Define qcal530_prop as property_type\n\nA typo in apq8084 defines qcal530_prop as file_type.  This collides\nwith\n\n  neverallow * ~property_type:property_service set;\n\nin system/sepolicy/domain.te.\n\nChange-Id: I2d16b84509d4c0f8d61c822795cd0da7e479c5cd\nSigned-off-by: Corinna Vinschen <xda@vinschen.de>","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/8a8fd281a982cb22f6400a1988165bda9037e066"},{"sha":"e545c4611cf870c51558a024caeb976fb481d764","author":{"name":"micky387","email":"ff95fe18ee648675566adc05553f9f41509cdc7f@free.fr"},"message":"qca1530.te: remove domain_deprecated\n\nThis attribute has been removed from public policy and is no longer\navailable.\n\nChange-Id: I52374bb3b931a210c460a588b08f00878d91b00e","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/e545c4611cf870c51558a024caeb976fb481d764"},{"sha":"89d2efff528512064107fc18c6cfec32997f7261","author":{"name":"Bruno Martins","email":"778fea3f0794d787dfa69253f82646e4f9dc35d6@gmail.com"},"message":"sepolicy: Add placeholder for legacy policies\n\n * Legacy devices that have pre-O blobs are likely going to require\n   specific rules, for accessing legacy paths and such things.\n   Those that already inherit from standard QC sepolicies can opt-in\n   for the legacy ones as well, if needed.\n\nChange-Id: I9ba8283e412f898e390df489aba3e1969e67e29e","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/89d2efff528512064107fc18c6cfec32997f7261"},{"sha":"9a98969c376a2986b3833b4b24c6c226bf3a29a2","author":{"name":"Bruno Martins","email":"778fea3f0794d787dfa69253f82646e4f9dc35d6@gmail.com"},"message":"sepolicy: Address netmgrd denials on non-fully trebelized devices\n\n * CAF allegedly moved to vendor_shell_exec and vendor_toolbox_exec in order to\n   resolve compilation issues while enabling full treble (commit c7def121c0a13733060290f9ce1401ca7cf44405),\n   but we need to handle the opposite scenario.\n\nChange-Id: Ia26b32f0f6501d64f2d3d64c7faa0385e7f42bc0","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/9a98969c376a2986b3833b4b24c6c226bf3a29a2"},{"sha":"d95357676a6e7c62ca3f3f6ce8663e389b7af848","author":{"name":"Rashed Abdel-Tawab","email":"5c683af0a96180bd58bcdc2d5b6263d4089c03d4@linux.com"},"message":"qcom: Label vendor files with (vendor|system/vendor) instead of vendor\n\nNot all devices have a vendor partition so these labels blatantly get\nignored without labelling system/vendor on those devices.\n\nAlso move msm8998 gralloc and vulkan labels to msm8998/file_contexts\n\nChange-Id: I244d667f6b3ddcf7eac71719a981dc25dc401873","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/d95357676a6e7c62ca3f3f6ce8663e389b7af848"},{"sha":"67d26ee9b2458da1ef3976adee2c9929566f274a","author":{"name":"Michael Bestas","email":"46f7c721ffdce34ce8f6f45045248d1691b5a576@lineageos.org"},"message":"Fix userdebug_or_eng macro damage\n\n* CAF used ' instead of `, breaking the build. Fix it\n\nChange-Id: Idfcbe3afe3feec0dc22bc5ab5ffd1082a5db5e54","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/67d26ee9b2458da1ef3976adee2c9929566f274a"},{"sha":"27a1e8b37b37d1f804394c3ed4f0748dd521703e","author":{"name":"LuK1337","email":"6c9bff5473b68c1565a176ad458785864409abaa@gmail.com"},"message":"sepolicy: Add sysfs labels for devices using 'soc.0'\n\n* Newer QCOM kernels seem to be using 'soc', this\n  allows older kernels to have proper labels on sysfs.\n\nChange-Id: I60a732efcd369c0cb95c10b15b661b14f41b5aca","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/27a1e8b37b37d1f804394c3ed4f0748dd521703e"},{"sha":"d5e15815c4c3a25644cf839876e41a007f58b0b0","author":{"name":"Ricardo Cerqueira","email":"d4e7430f1534a12df46cedd1ac369935436dbb94@cyngn.com"},"message":"sepolicy: Let keystore load firmware\n\n * Partial pick from commit 3aaeeceb270dc6c8af8dd9a95fa8b9e33097ff50\n\nChange-Id: I46bcb9a8be3ad7fccca8128df1a8f1ce7207ead6","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/d5e15815c4c3a25644cf839876e41a007f58b0b0"},{"sha":"314852b15acc6668b57e6e4329017408d919d9f4","author":{"name":"Bruno Martins","email":"778fea3f0794d787dfa69253f82646e4f9dc35d6@gmail.com"},"message":"sepolicy: Include legacy rild policies\n\n * Disabled in commit c7def121c0a13733060290f9ce1401ca7cf44405,\n   but still needed for legacy devices.\n\n * Addresses the following denials:\n \n     W rild : type=1400 audit(0.0:82): avc: denied { call } for scontext=u:r:rild:s0 tcontext=u:r:servicemanager:s0 tclass=binder permissive=0\n     ...\n     I Telecom : Event: RecordEntry TC@1: REQUEST_DISCONNECT, null: ICA.dC(InCall package: com.android.dialer)@AHI\n     I Telecom : Call: Send disconnect to connection service for call: [TC@1, DIALING, com.android.phone/com.android.services.telephony.TelephonyConnectionService, tel:**********, A, childs(0), has_parent(false), [Capabilities: CAPABILITY_SUPPORT_HOLD CAPABILITY_MUTE CAPABILITY_CANNOT_DOWNGRADE_VIDEO_TO_AUDIO], [Properties:]]: ICA.dC(InCall package: com.android.dialer)@AHI\n     W servicemanager: type=1400 audit(0.0:67): avc: denied { search } for name=\"383\" dev=\"proc\" ino=10482 scontext=u:r:servicemanager:s0 tcontext=u:r:rild:s0 tclass=dir permissive=0\n     E ServiceManager: SELinux: getpidcon(pid=383) failed to retrieve pid context.\n     I ServiceManager: Waiting for service media.audio_flinger...\n\nChange-Id: I83983521162aa9bb63450930d4d242a4f8c5e4c1","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/314852b15acc6668b57e6e4329017408d919d9f4"},{"sha":"4b5a7378be5b41dd2d22ce5afe102244360437b1","author":{"name":"LuK1337","email":"6c9bff5473b68c1565a176ad458785864409abaa@gmail.com"},"message":"sepolicy: Allow system_app to connect to time_daemon socket\n\nChange-Id: Ibdb0b152c5adea34f770ca037e9aea942e0684ab","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/4b5a7378be5b41dd2d22ce5afe102244360437b1"},{"sha":"c2ccf202c06f5c5f972b10e6380735cbe82ac5b1","author":{"name":"LuK1337","email":"6c9bff5473b68c1565a176ad458785864409abaa@gmail.com"},"message":"sepolicy: Allow dataservice_app to read/write to IPA device\n\nChange-Id: I31b13b38374d7a72f956ffe1f3723154738bcdb1","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/c2ccf202c06f5c5f972b10e6380735cbe82ac5b1"},{"sha":"9f6a91b884556bab33dc9762ec101b3a0483db30","author":{"name":"LuK1337","email":"6c9bff5473b68c1565a176ad458785864409abaa@gmail.com"},"message":"sepolicy: Allow bluetooth to connect to wcnss_filter socket\n\nChange-Id: If9b803a6a215448c2c1d0d12a860f316b1b9fd60","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/9f6a91b884556bab33dc9762ec101b3a0483db30"},{"sha":"a5b2d5310578e8bc67ad29ee090ef2d1f86586ff","author":{"name":"LuK1337","email":"6c9bff5473b68c1565a176ad458785864409abaa@gmail.com"},"message":"sepolicy: Allow netmgrd to communicate with netd\n\nChange-Id: If6c47c0c67ff7e4e75dd05288da66ba9b9b13208","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/a5b2d5310578e8bc67ad29ee090ef2d1f86586ff"},{"sha":"142661ab7b582d2712c9f37d9fd2eb1a7a7e8fbf","author":{"name":"LuK1337","email":"6c9bff5473b68c1565a176ad458785864409abaa@gmail.com"},"message":"sepolicy: Allow energyawareness to read sysfs files\n\n* Old blobs don't have energyawareness specific sysfs\n  thus we have to allow it to read any sysfs like CAF\n  did in <= 7.0.\n\nChange-Id: I80695d3d952d46ebc90cbe9497dce8b1862dc4fb","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/142661ab7b582d2712c9f37d9fd2eb1a7a7e8fbf"},{"sha":"2a765b7ada8ccd07a539fcbf6ba9584b94bfd362","author":{"name":"LuK1337","email":"6c9bff5473b68c1565a176ad458785864409abaa@gmail.com"},"message":"sepolicy: Readd perfd policies\n\nChange-Id: I276c2b254b2c6d58278a19da0ac34f4f4fd962c1","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/2a765b7ada8ccd07a539fcbf6ba9584b94bfd362"},{"sha":"d70d966fd403932a98296b20829cafa20bbf05a3","author":{"name":"LuK1337","email":"6c9bff5473b68c1565a176ad458785864409abaa@gmail.com"},"message":"sepolicy: Label pre-O location data and socket file paths\n\nChange-Id: Ic9c9e519ccec1918e2a308421c6474074e46be39","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/d70d966fd403932a98296b20829cafa20bbf05a3"},{"sha":"b10d2c2d43b5037fe6332f74967f27dca97c9f22","author":{"name":"LuK1337","email":"6c9bff5473b68c1565a176ad458785864409abaa@gmail.com"},"message":"sepolicy: Add /data/vendor/time label for old oreo blobs\n\n * Old O blobs moved to /data/vendor/time but there will be issue\n   that system time will be reset after ota upgrade, so Qualcomm\n   moved back to /data/time in newer release. Label /data/vendor/time\n   for compatibility with those old O blobs.\n\nChange-Id: Ifecf4f0d9218eb47c7478a6a2e3edb6648c4ed89","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/b10d2c2d43b5037fe6332f74967f27dca97c9f22"},{"sha":"dc84ebce4f60c6985e728ff57fe60d05315cb19f","author":{"name":"LuK1337","email":"6c9bff5473b68c1565a176ad458785864409abaa@gmail.com"},"message":"sepolicy: Allow 'sys_admin' capability for rmt_storage\n\n* Older blobs still use it for setting ioprio.\n\nChange-Id: I6fae35a6b74dd00efe4d634787d20fb49cca9cb7","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/dc84ebce4f60c6985e728ff57fe60d05315cb19f"},{"sha":"8eda071972d380e3842bc3d5652c19e9b94e4610","author":{"name":"Dan Cartier","email":"41b9c11e448d1a1f0dde71645479d4b8b9367559@gmail.com"},"message":"sepolicy: Fix naming\n\nChange-Id: Ief0ef5a0ad1bd57e6ff482588be2aff356457031","distinct":false,"url":"https://api.github.com/repos/AquariOS/device_qcom_sepolicy/commits/8eda071972d380e3842bc3d5652c19e9b94e4610"}]}
{"actor":{"display_login":"rc420head"}}