Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit caf49167 authored by Bernhard Thoben's avatar Bernhard Thoben
Browse files

Enabled SELinux in enforced mode 

This is an important security feature!

Change-Id: Ie0cef85575aeff77bbf7b638ef1dd149c511c14f
parent 9639c608

Android.mk

+1 −0
Original line number Diff line number Diff line 
#

# Copyright (C) 2016 The CyanogenMod Project

# Copyright (C) 2017-2020 The LineageOS Project

#

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.

BoardConfigCommon.mk

+4 −4
Original line number Diff line number Diff line 
#

# Copyright (C) 2016 The CyanogenMod Project

# Copyright (C) 2017-2020 The LineageOS Project

#

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.
@@ -47,7 +48,8 @@ TARGET_USES_64_BIT_BCMDHD := true 
ENABLE_CPUSETS := true



# Boot image/kernel

BOARD_KERNEL_CMDLINE := androidboot.hardware=qcom user_debug=31 msm_rtb.filter=0x237 ehci-hcd.park=3 lpm_levels.sleep_disabled=1 boot_cpus=0-5 loop.max_part=7 dwc3_msm.hvdcp_max_current=1500 dwc3_msm.prop_chg_detect=Y coherent_pool=2M androidboot.selinux=permissive

BOARD_KERNEL_CMDLINE := androidboot.hardware=qcom user_debug=31 msm_rtb.filter=0x237 ehci-hcd.park=3 lpm_levels.sleep_disabled=1 boot_cpus=0-5 loop.max_part=7 dwc3_msm.hvdcp_max_current=1500 dwc3_msm.prop_chg_detect=Y coherent_pool=2M

# BOARD_KERNEL_CMDLINE += androidboot.selinux=permissive

BOARD_KERNEL_IMAGE_NAME := Image.gz-dtb

BOARD_KERNEL_PAGESIZE := 4096

BOARD_KERNEL_BASE := 0x00000000
@@ -193,9 +195,7 @@ TARGET_LD_SHIM_LIBS := \ 


# SELinux

include device/qcom/sepolicy-legacy/sepolicy.mk



BOARD_SEPOLICY_DIRS += \

    $(COMMON_PATH)/sepolicy-minimal

BOARD_SEPOLICY_DIRS += $(COMMON_PATH)/sepolicy



# WiFi

BOARD_WLAN_DEVICE           := bcmdhd

device-common.mk

+1 −4
Original line number Diff line number Diff line 
#

# Copyright (C) 2016 The CyanogenMod Project

# Copyright (C) 2017 The LineageOS Project

# Copyright (C) 2017-2020 The LineageOS Project

#

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.
@@ -326,7 +326,4 @@ PRODUCT_PACKAGES += \ 
    wpa_supplicant \

    wpa_supplicant.conf



PRODUCT_PACKAGES += \

   macaddrsetup



$(call inherit-product, hardware/broadcom/wlan/bcmdhd/config/config-bcm.mk)

rootdir/init.qcom.rc

+8 −9
Original line number Diff line number Diff line
@@ -238,7 +238,7 @@ on boot 
    mkdir /data/nfc 0770 nfc nfc

    mkdir /data/nfc/param 0770 nfc nfc



    # Set the console loglevel to < KERN_INFO

    # Set the console loglevel to lt. KERN_INFO

    # Set the default message loglevel to KERN_INFO

    write /proc/sys/kernel/printk "6 6 1 7"
@@ -556,7 +556,7 @@ service adsprpcd /system/bin/adsprpcd 
   group media drmrpc



# SONY misc

service tad_static /system/bin/tad_static /dev/block/bootdevice/by-name/TA 0,16

service tad /system/bin/tad_static /dev/block/bootdevice/by-name/TA 0,16

    class core

    user oem_2997

    group oem_2997 root
@@ -650,19 +650,18 @@ service per_proxy /system/bin/pm-proxy 
    group system net_raw

    disabled



service ppd /system/vendor/bin/mm-pp-daemon

    class hal

    user system

    socket pps stream 0660 system system

    group system graphics

    writepid /dev/cpuset/system-background/tasks



on property:init.svc.per_mgr=running

    start per_proxy



on property:sys.shutdown.requested=*

    stop per_proxy



service ppd /system/vendor/bin/mm-pp-daemon

    class hal

    user system

    socket pps stream 0660 system system

    group system graphics



# brcm-uim-sysfs (BT/FM/ANT+)

#service uim /system/vendor/bin/brcm-uim-sysfs

#    class late_start

sepolicy-minimal/file.te

deleted100644 → 0
+0 −2
Original line number Diff line number Diff line 
type idd_file, file_type;

type rca_file, file_type;