Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit beaf0bbb authored by Hridya Valsaraju's avatar Hridya Valsaraju Committed by Rohit Sekhar
Browse files

FP4: Set PRODUCT_SET_DEBUGFS_RESTRICTIONS 

Starting with Android R launched devices, debugfs cannot be mounted in
production builds. In order to avoid accidental debugfs dependencies
from creeping in during development with userdebug/eng builds, the
build flag PRODUCT_SET_DEBUGFS_RESTRICTIONS can be set by vendors to
enforce additional debugfs restrictions for userdebug/eng builds. The
same flag will be used to enable sepolicy neveallow statements to
prevent new permissions added for debugfs access.

Test: build, boot
Bug: 184381659
Change-Id: I45e6f20c886d467a215c9466f3a09965ff897d7e
parent bb2247f5

device.mk

+3 −0
Original line number Diff line number Diff line
@@ -235,6 +235,9 @@ PRODUCT_PACKAGES += \ 
    vendor.qti.hardware.display.mapper@3.0.vendor \

    vendor.qti.hardware.display.mapper@4.0.vendor



# DebugFS

PRODUCT_SET_DEBUGFS_RESTRICTIONS := true



# DRM

PRODUCT_PACKAGES += \

    android.hardware.drm@1.3.vendor \

rootdir/etc/init.qcom.rc

+0 −19
Original line number Diff line number Diff line
@@ -30,28 +30,14 @@ import /vendor/etc/init/hw/init.target.rc 
import /vendor/etc/init/hw/init.stnfc.rc



on early-init

    mount debugfs debugfs /sys/kernel/debug

    chmod 0755 /sys/kernel/debug



  # create symlink for vendor mount points

    symlink /vendor/firmware_mnt /firmware

    symlink /vendor/bt_firmware /bt_firmware

    symlink /vendor/dsp /dsp



  # Change ownership of hw_recovery related nodes

    chown system graphics /sys/kernel/debug/dri/0/debug/dump

    chown system graphics /sys/kernel/debug/dri/0/debug/recovery_reg

    chown system graphics /sys/kernel/debug/dri/0/debug/recovery_dbgbus

    chown system graphics /sys/kernel/debug/dri/0/debug/recovery_vbif_dbgbus

    chown system graphics /sys/kernel/debug/dri/0/debug/recovery_dsi_dbgbus



  # Change ownership of sysfs power control node

    chown system graphics /sys/class/drm/card0/device/power/control



    # Change ownership of sw_sync node

    chown system graphics /sys/kernel/debug/sync/sw_sync

    chmod 0666 /sys/kernel/debug/sync/sw_sync



    #Disable UFS clock scaling

    write /sys/bus/platform/devices/1d84000.ufshc/clkscale_enable 0
@@ -73,9 +59,6 @@ on init 
    chown root system /sys/fs/cgroup/memory/bg/tasks

    chmod 0660 /sys/fs/cgroup/memory/bg/tasks



on post-fs

    chmod 0755 /sys/kernel/debug/tracing



on early-boot

    # set RLIMIT_MEMLOCK to 64MB

    setrlimit 8 67108864 67108864
@@ -112,8 +95,6 @@ on boot 
    chown bluetooth bluetooth /sys/module/hci_smd/parameters/hcismd_set

    chown system system /sys/module/msm_core/parameters/polling_interval

    chown system system /sys/module/msm_core/parameters/disabled

    chown system system /sys/kernel/debug/msm_core/enable

    chown system system /sys/kernel/debug/msm_core/ptable

    chown system system /sys/kernel/boot_slpi/ssr

    chmod 0660 /sys/module/bluetooth_power/parameters/power

    chmod 0660 /sys/module/hci_smd/parameters/hcismd_set