GitLab

I was not able to set:

> allow system_suspend hal_audio_default:binder transfer;

as hal_audio_default is part of vendor which is not avail in private
but system_suspend is part of private and not avail in vendor.

this commit fixes the first call on boot issue until I find a better
way fixing that. without this the very first call will loose audio after
some seconds while subsequent calls work fine.

log:

> I auditd  : type=1400 audit(0.0:250): avc: denied { transfer } for comm="suspend@1.0-ser" scontext=u:r:system_suspend:s0 tcontext=u:r:hal_audio_default:s0 tclass=binder permissive=1
> I suspend@1.0-ser: type=1400 audit(0.0:250): avc: denied { transfer } for scontext=u:r:system_suspend:s0 tcontext=u:r:hal_audio_default:s0 tclass=binder permissive=1
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Jan Altensen authored Sep 14, 2020 and steadfasterX committed Apr 13, 2021

Change-Id: I7c370f91636c1813a46d5e8bf788aef9f14c51e5
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Lakshay authored Oct 19, 2019 and steadfasterX committed Mar 23, 2021

Fixes the following error:

> E vndksupport: Could not load /vendor/lib64/hw/android.hardware.graphics.mapper@2.0-impl.so from sphal namespace: dlopen failed: library "android.hardware.graphics.mapper@2.0.so" not found.

note:
Android error was: "Can't play this video"
Signed-off-by: Lakshay <lakshaygarg.in@gmail.com>
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Wang Han authored Sep 16, 2019 and steadfasterX committed Mar 23, 2021

 * This config needs to be modified for legacy devices. As
   there is no easy way to split it, import it into device
   tree and bind mount it instead.

 * Head at android-10.0.0_r2
   (3ac371484399da6efbd0c835aa461d3326263ab1).

Change-Id: I8d5003d7cd3a471c569844aede4b5ea4c68ae36b
Signed-off-by: Lakshay <lakshaygarg.in@gmail.com>
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

it seems that /efs/TEE can have 2 contexts:
efs_file and prov_efs_file. this commit ensures both will be met
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

there is one crucial important thing when it comes to IOCTL as this is a specific thing:

> I auditd  : type=1400 audit(0.0:1021): avc: denied { ioctl } for comm="Binder:2728_3" path="/dev/block/mmcblk0p24" dev="tmpfs" ino=1109 ioctlcmd=1272 scontext=u:r:vold:s0 tcontext=u:object_r:emmcblk_device:s0 tclass=blk_file permissive=0

see "system/sepolicy/public/ioctl_defines" for 1272 (because of ioctlcmd=1272)  which leads to "BLKGETSIZE64"

some more details and background:
https://selinuxproject.org/page/XpermRules

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

gatekeeperd needs to run as group system otherwise
it will not be able to write into /efs/TEE

gatekeeperd HAS TO run in 32bit so we can use all PIE based blobs
and only these are working properly

this commit takes the current system/core/gatekeeperd and modifies
it to build 32bit (as gatekeeperd_32) by overriding gatekeeperd
(see Android.bp).
it also ensures the gatekeeperd.rc is correctly set and all needed
selinux policies are set

the whole setup has been tested in selinux=enforcing and fixes
the PIN/Password issues
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

fixes:

> vndksupport: Could not load /vendor/lib/hw/camera.universal7870.so from default namespace: dlopen failed: cannot locate symbol "_ZN7android5FenceD1Ev" referenced by "/system/vendor/lib/libexynoscamera.so"....

which prevents starting the camera
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

going official takes longer then expected

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

extends:
https://code.binbash.rocks:8443/MVA-VoLTE/android_device_samsung_exynos7870-common/commit/2578168866a47d1cd50703ee071c0f63784838ec



by creating a new domain and all related selinux policies
to allow enforcing boot
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

The following happens as we had 2 libaudioroute.so:

- one in /system (build by system/media/audio_route)
- and the other in /vendor (copied as blob)

> E vndksupport: Could not load /vendor/lib/hw/audio.primary.universal7870.so from default namespace: dlopen failed: cannot locate symbol "audio_route_get_mixer_ctl" referenced by "/system/vendor/lib/hw/audio.primary.universal7870.so"....

Removing one of the both causes this error:

> E vndksupport: Could not load /vendor/lib/hw/audio.primary.universal7870.so from default namespace: dlopen failed: cannot locate symbol "mixer_update" referenced by "/system/lib/libaudioroute.so"....

I was not able to find a blob or ref to this symbol
(likely I'm just blind) so I decided to shim this.

Shimming seems to work fine while not very intensively
tested - but at least audio is back.
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

Christopher N. Hesse authored Aug 06, 2018 and steadfasterX committed Dec 08, 2020

(cherry picked from commit 8b94746c3ed4f377266681b6ab49a3d5de306012)
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

based on
https://github.com/Suicide-Squirrel/android_device_lge_g4-common/commit/f94cb6dd4ffaa7c60741c9bae12aa06030ccc1d4.patch

this reverts treble support and allows native builds to build and
boot.

(for fully untrebl-ing a kernel change is required as well)
Signed-off-by: steadfasterX <steadfasterX@gmail.com>

it's supposed to be used exclusively on QCom devices, and causes POSP builds to fail