Signed-off-by: steadfasterX <steadfasterX@gmail.com>

there is one crucial important thing when it comes to IOCTL as this is a specific thing:

> I auditd  : type=1400 audit(0.0:1021): avc: denied { ioctl } for comm="Binder:2728_3" path="/dev/block/mmcblk0p24" dev="tmpfs" ino=1109 ioctlcmd=1272 scontext=u:r:vold:s0 tcontext=u:object_r:emmcblk_device:s0 tclass=blk_file permissive=0

see "system/sepolicy/public/ioctl_defines" for 1272 (because of ioctlcmd=1272)  which leads to "BLKGETSIZE64"

some more details and background:
https://selinuxproject.org/page/XpermRules

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

gatekeeperd needs to run as group system otherwise
it will not be able to write into /efs/TEE

gatekeeperd HAS TO run in 32bit so we can use all PIE based blobs
and only these are working properly

this commit takes the current system/core/gatekeeperd and modifies
it to build 32bit (as gatekeeperd_32) by overriding gatekeeperd
(see Android.bp).
it also ensures the gatekeeperd.rc is correctly set and all needed
selinux policies are set

the whole setup has been tested in selinux=enforcing and fixes
the PIN/Password issues
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

fixes:

> vndksupport: Could not load /vendor/lib/hw/camera.universal7870.so from default namespace: dlopen failed: cannot locate symbol "_ZN7android5FenceD1Ev" referenced by "/system/vendor/lib/libexynoscamera.so"....

which prevents starting the camera
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

going official takes longer then expected

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

extends:
https://code.binbash.rocks:8443/MVA-VoLTE/android_device_samsung_exynos7870-common/commit/2578168866a47d1cd50703ee071c0f63784838ec



by creating a new domain and all related selinux policies
to allow enforcing boot
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

The following happens as we had 2 libaudioroute.so:

- one in /system (build by system/media/audio_route)
- and the other in /vendor (copied as blob)

> E vndksupport: Could not load /vendor/lib/hw/audio.primary.universal7870.so from default namespace: dlopen failed: cannot locate symbol "audio_route_get_mixer_ctl" referenced by "/system/vendor/lib/hw/audio.primary.universal7870.so"....

Removing one of the both causes this error:

> E vndksupport: Could not load /vendor/lib/hw/audio.primary.universal7870.so from default namespace: dlopen failed: cannot locate symbol "mixer_update" referenced by "/system/lib/libaudioroute.so"....

I was not able to find a blob or ref to this symbol
(likely I'm just blind) so I decided to shim this.

Shimming seems to work fine while not very intensively
tested - but at least audio is back.
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Christopher N. Hesse authored Aug 06, 2018 and steadfasterX committed Dec 08, 2020

(cherry picked from commit 8b94746c3ed4f377266681b6ab49a3d5de306012)
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

based on
https://github.com/Suicide-Squirrel/android_device_lge_g4-common/commit/f94cb6dd4ffaa7c60741c9bae12aa06030ccc1d4.patch

this reverts treble support and allows native builds to build and
boot.

(for fully untrebl-ing a kernel change is required as well)
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

it's supposed to be used exclusively on QCom devices, and causes POSP builds to fail

Use TOMBSTONES partition for encryption key

We move more values to specific, some of them related with doze and autobrightness