Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

it seems that /efs/TEE can have 2 contexts:
efs_file and prov_efs_file. this commit ensures both will be met
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

there is one crucial important thing when it comes to IOCTL as this is a specific thing:

> I auditd  : type=1400 audit(0.0:1021): avc: denied { ioctl } for comm="Binder:2728_3" path="/dev/block/mmcblk0p24" dev="tmpfs" ino=1109 ioctlcmd=1272 scontext=u:r:vold:s0 tcontext=u:object_r:emmcblk_device:s0 tclass=blk_file permissive=0

see "system/sepolicy/public/ioctl_defines" for 1272 (because of ioctlcmd=1272)  which leads to "BLKGETSIZE64"

some more details and background:
https://selinuxproject.org/page/XpermRules

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

gatekeeperd needs to run as group system otherwise
it will not be able to write into /efs/TEE

gatekeeperd HAS TO run in 32bit so we can use all PIE based blobs
and only these are working properly

this commit takes the current system/core/gatekeeperd and modifies
it to build 32bit (as gatekeeperd_32) by overriding gatekeeperd
(see Android.bp).
it also ensures the gatekeeperd.rc is correctly set and all needed
selinux policies are set

the whole setup has been tested in selinux=enforcing and fixes
the PIN/Password issues
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

fixes:

> vndksupport: Could not load /vendor/lib/hw/camera.universal7870.so from default namespace: dlopen failed: cannot locate symbol "_ZN7android5FenceD1Ev" referenced by "/system/vendor/lib/libexynoscamera.so"....

which prevents starting the camera
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

going official takes longer then expected

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

extends:
https://code.binbash.rocks:8443/MVA-VoLTE/android_device_samsung_exynos7870-common/commit/2578168866a47d1cd50703ee071c0f63784838ec



by creating a new domain and all related selinux policies
to allow enforcing boot
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

The following happens as we had 2 libaudioroute.so:

- one in /system (build by system/media/audio_route)
- and the other in /vendor (copied as blob)

> E vndksupport: Could not load /vendor/lib/hw/audio.primary.universal7870.so from default namespace: dlopen failed: cannot locate symbol "audio_route_get_mixer_ctl" referenced by "/system/vendor/lib/hw/audio.primary.universal7870.so"....

Removing one of the both causes this error:

> E vndksupport: Could not load /vendor/lib/hw/audio.primary.universal7870.so from default namespace: dlopen failed: cannot locate symbol "mixer_update" referenced by "/system/lib/libaudioroute.so"....

I was not able to find a blob or ref to this symbol
(likely I'm just blind) so I decided to shim this.

Shimming seems to work fine while not very intensively
tested - but at least audio is back.
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Christopher N. Hesse authored Aug 06, 2018 and steadfasterX committed Dec 08, 2020

(cherry picked from commit 8b94746c3ed4f377266681b6ab49a3d5de306012)
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

based on
https://github.com/Suicide-Squirrel/android_device_lge_g4-common/commit/f94cb6dd4ffaa7c60741c9bae12aa06030ccc1d4.patch

this reverts treble support and allows native builds to build and
boot.

(for fully untrebl-ing a kernel change is required as well)
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

it's supposed to be used exclusively on QCom devices, and causes POSP builds to fail

Use TOMBSTONES partition for encryption key