Change-Id: I603fbc74059636f86180645cdf8d38274b0af745

* needed for redwood/taoyao/vili

Change-Id: I2a9312ec07bf227965d3655709459079926ade9d

* Needed for redwood/vili/taoyao/zijin

Change-Id: I93f1d7d016a34e70c2772c8bfabb7d4fd0210cc2

Change-Id: Ie9c417de8a03a143b410e83e0caedb3700bcc668

Change-Id: I1baab3cc53c3f0cb19ae3103d53f5413ba088545

Change-Id: Ibe4c30bcb5b912109478a548019d19a85d27a4bb

Change-Id: I6ace3ac149c84d2cb9e2773e7ef5ddbf24c35b92

Correct the NULL check code block and add NULL check before
object access.

Change-Id: Ic41b781b41fb4e21bbff8801d500a41a6d7219d0
CRs-fixed: 3084543

Change-Id: I7ca7e78addd6385289b8449edae8b682839ecc91

Replace certain policies for isolated_app with the newly introduced
isolated_app_all for better scalability.

Bug: 265540209
Test: m
Change-Id: I1b6866d56f15089babe368bb60335c7ed99bdd6b

The new folder structure now looks like this:

  device/qcom/sepolicy_vndr
  ├─ legacy-um (meant for sdm845 until sm8350)
  ├─ sm8450
  └─ sm8550

Change-Id: I4ed1a06af779909d64172da294c4a99a3ae9ba0d

Change-Id: I0aac742db9c2b4b3e48ee20158f19405863893c2

Bug: 274964641
Test: Pre-submit tests
Change-Id: I4d9114377fe75b593bbfe6a59f03d8f5d607d6a1

Change-Id: Ic720909c803c20aaec72dae9b25ed2070b144f9d

This disables the following kernel configs:
* CONFIG_DEBUG_FS
* CONFIG_PAGE_OWNER

Change-Id: Idbf74e3dee4dccff4708462271e79374e28449ae

Starting with Android R launched devices, debugfs cannot be mounted in
production builds. In order to avoid accidental debugfs dependencies
from creeping in during development with userdebug/eng builds, the
build flag PRODUCT_SET_DEBUGFS_RESTRICTIONS can be set by vendors to
enforce additional debugfs restrictions for userdebug/eng builds. The
same flag will be used to enable sepolicy neveallow statements to
prevent new permissions added for debugfs access.

Test: build, boot
Bug: 184381659
Change-Id: I45e6f20c886d467a215c9466f3a09965ff897d7e

Change-Id: I70cc903a03ac9fa3303bb8fa039c9de4806449bf

Change-Id: I8ff8518321d6416886b24d329cecc2e47e1fbb4c

Change-Id: I688347cfe59f56e4de2e4bf3c3324ca465f7a897

Default to false if the property is not set.
Device init scripts will need to be adapted to restart
loc_launcher service when property change is detected.

Change-Id: Icbda789cd2a9a3391f437af2c07fc5127f2f09ab

Almost all warnings/errors have been fixed.
Ignore undefined bool conversion error on purpose.

Change-Id: I00cb5f38711fa9f873da030fc6a0ebc6cde3ceeb

This fixes enum-conversion warning due to implicit type enum casting
between linked_list and msg_q which happens only for status -6.

Change-Id: I27ba74c4d840b7ba0cb1017d69a30fc25b80d6b9

Change-Id: I45d621a2b995afeb7757df3f89614a0d95552f33

-Wreorder-ctor is a compile-time, Clang-only flag which is enabled by
default since Clang 12, which will warn whenever a specified field will
be initialized right after field specified below it. However, since it
doesn't sweep through all fields, compiler may miss some of them.

This order has been checked thoroughly through many trial and errors to
ensure that no such warns will be triggered anymore.

Change-Id: Id24cbb7277dc8d6c02767f8f365818ab6c017683

Change-Id: I0acef3da2c3567a28edd0a71dac89a5828f7725d

* NfcNci and SecureElement are built by handheld_system.mk

Change-Id: I83f686b67778634b584a58d8bae95d237e6dbad1

- https://git.codelinaro.org/clo/la/platform/hardware/qcom/bootctrl/-/commit/4b6405a7f0b4d52e6266683ba49c3e83c5b16e32

Change-Id: I51663ff8e074681191ac708fcd7b4d28e890deaf

Change-Id: Iee2dff5e4550239319326e4c707f89006c13ddb8

Change-Id: I1287d066eca7d1a274b491f80166ed68c5b11459

Change-Id: I60d18f2c9ab2f3b7da5c80d9a2b21236dae3d36e

Change-Id: I56af84663e44672c5f0e105be323dea7902e1c75

Change-Id: I9a0ad1bc605ea6fd40b8f0a1301129bad1c61fbd

Change-Id: I8770a65a01e622f7c541bf88cf4b70c40792a169

Change-Id: I8cbabdfd48576a1afdbf9d2c542ed82a11a4874c

Change-Id: Icb8b0619ebee908c241e90c76439895c7026adec

Change-Id: If97042228749352bc804888d8cb31ccf56742542

Looks too small on some devices

Change-Id: I0accc5fdd0ad4cb0b466e226cfc9ec4bc96a66d4

Change-Id: I8d6b915eb5037180f299f0a4b7beca84575787c5

Change-Id: Ie7ed48158db6f5f5facab5dfb2efc8560c83fe49

chaptsand authored 2 years ago and Giovanni Ricca committed 1 year ago

* Fix selinux denied of WeChat fingerprint payment

- E SELinux : avc:  denied  { find } for interface=vendor.qti.hardware.soter::ISoter sid=u:r:platform_app:s0:c512,c768 pid=3613 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:vendor_hal_soter_hwservice:s0 tclass=hwservice_manager permissive=0

Issue: https://gitlab.com/LineageOS/issues/android/-/issues/4701

Change-Id: I3176f8e709fb31aec16a31094b78f753d1d16b43