Come on qcom, how is this shipped in a public tag?

Change-Id: Ica58668b202e95a4deb1fdd92c2c90316285767a

Merge tag 'LA.UM.9.14.r1-24200-LAHAINA.QSSI13.0' into staging/lineage-21.0_merge-LA.UM.9.14.r1-24200-LAHAINA.QSSI13.0

"LA.UM.9.14.r1-24200-LAHAINA.QSSI13.0"

# By Neelu Maheshwari (3) and others
# Via Gerrit - the friendly Code Review server (3) and others
* tag 'LA.UM.9.14.r1-24200-LAHAINA.QSSI13.0':
  Sepolicy_vndr : Allow vendor_init to access properties.
  Sepolicy_vndr : Allow access to LED devices sysfs
  Allow dumpstate to make binder calls with rild
  sepolicy : add permissions for extcon file
  sepolicy_vndr: lahaina: Label device wakeup nodes - Label the nodes listed by SuspendSepolicyTests.sh
  Sepolicy: Add the rules to run the UAC/UVC enforced
  sepolicy_vndr: Add rule to allow graphics_composer to find qspm hal
  Allow wcnss service to access hal perf service

Change-Id: Ie2224e17c0aa4b5a04b343f408d849de9e2e8638

Similar to hal_usb_qti.

Change-Id: If0f608f8f2c59a21f89ffebc118e56c559a90755

Change-Id: I3927a94417f897c0a5b2625a28f064f39b8181a6

Update sepolicy to fix AVC denials seen during OTA update.

Change-Id: Ib2980598f58f6d2b66a257c2a8dab3cf3a12e037
CRs-Fixed:: 2876895

Change-Id: I4f4b0d0cd29a2a82425a2283e49f590b0e86590e

The discard_max_bytes rule is also valid for sdm710 so commonize it.

Change-Id: Iceb2571ed9726131a74dd60555e1b474b6412c60

Change-Id: Ibda91a147db7bcba12bdbd9baa4f138cd562728d

Change-Id: I2c8d829de50a3a28395df068be10ad9358426f59

This is needed for a CTS testcase:
SELinuxHostTest#testNoBugreportDenials
Denial: denied { call } for scontext=u:r:dumpstate:s0
        tcontext=u:r:rild:s0 tclass=binder permissive=0

Change-Id: I4a4f2319115575962f3259f1927f4e4009c01e7d
CRs-Fixed: 3688919

Needed for ssr_setup

Change-Id: If24855f5e72d904043e69893fa5590ac26b46ff5

Resolves:
W e2fsck  : type=1400 audit(0.0:16): avc: denied { read write } for name="sdf7" dev="tmpfs" ino=11779 scontext=u:r:fsck:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file permissive=0

Change-Id: I653a088d84479a2e096e0d2bece770c1430b694f

* sdm845 and sdm710 didn't have a metadata partition, but we can repurpose logdump which is a 64MB partition used to store Android logcats

Change-Id: I826571d4e31f2a3f03c1d3e6a0daab262a4ccd6b
(cherry picked from commit 8a5eeb6a2bfb3f1a7232199d32c1e3c2bbc0ef55)

- Add permissions for extcon files needed for HDMI in platform
specific file..

Change-Id: I855b359dfe6115f5a40363f1f73179f055805269

Change-Id: I5d76fa0a0dc680e5128d382bed794a8c724a0a8c

Change-Id: I4c35e3c4f26a93020c4227283cb96c03df004928

Merge tag 'LA.UM.9.14.r1-23600-LAHAINA.QSSI14.0' of https://git.codelinaro.org/clo/la/device/qcom/sepolicy_vndr into lineage-21.0-legacy-um

"LA.UM.9.14.r1-23600-LAHAINA.QSSI14.0"

* tag 'LA.UM.9.14.r1-23600-LAHAINA.QSSI14.0' of https://git.codelinaro.org/clo/la/device/qcom/sepolicy_vndr:
  Revert "sepolicy: update display boot service rules"
  sepolicy: update display boot service rules
  Sepolicy_vndr : Allow creating IPA FWs
  sepolicy_vndr : bengal: Fix avc denials for wakeup nodes
  Fix avc denials
  BT: Add bluetooth support to access mediametrics service
  sepolicy rules to allow Gnss Hal to access RIL Srv for kona target
  sepolicy rules to allow Gnss Hal to access RIL Srv for holi target
  sepolicy_vndr : lahaina: Fix avc denials for wakeup nodes
  sepolicy_vndr: Suppress QMCS related denial errors in ENG builds
  sepolicy_vndr : Allow vendor_qti_init_shell to set ctl_start_prop
  sepolicy_vndr:qcc: read vendor_qcc_prop
  Aidirector sepolicy changes to run in enforced mode
  sepolicy: Add uio device node
  QGuard: add permission for black screen detector
  sepolicy_vndr: Allow system_server read vendor_persist_camera_prop
  Sepolicy rules to allow Gnss Hal to access ssgtz
  QCM6490.LA.3.1: addressing Modem & ADSP  sysfs wakeup node.

Change-Id: Idc7a655385a67cead68d5802d990d8c4dd6bbc6d

Having both files in place causes a neverallow,
so guard it behind a flag.

Change-Id: Ic485e454b7f5d81b954ffffdd8743b3ca879cde1

Merge "sepolicy_vndr: lahaina: Label device wakeup nodes - Label the nodes listed by SuspendSepolicyTests.sh"

This reverts commit a028e92a.

Change-Id: Id6d7bc25a683af0712436a6657b0cd48d2d53e2f

- Label the nodes listed by SuspendSepolicyTests.sh

Change-Id: I1c438f8942a33af4c9cb2296839e31b7a687ba26

- For the FRs FR65663,FR85720

Change-Id: I9ae77a24cf9019eb3cbecdfbe04caf3e59fadc97

Change-Id: I7f6f3031772d8a93c4c4e1add7cb03e13501be1c

system/core/rootdir/init.rc
1110:    write /dev/sys/block/by-name/userdata/queue/discard_max_bytes 134217728
1111:    write /dev/sys/block/by-name/rootdisk/queue/discard_max_bytes 134217728

Fixes: avc: denied { write } for comm="init" name="discard_max_bytes"
    dev="sysfs" ino=68814 scontext=u:r:init:s0
    tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
Change-Id: I9cab3cff6db9e660b2805c0da956d005164327d6

Change-Id: I7cb46f73c72170b46390321fa4144cd23f17471a

This reverts commit c81632f5.

Reason for revert: <VTS issue - vts_treble_sys_prop_test -t __main__.VtsTrebleSysPropTest>

Change-Id: Ic36e385f0edc8f43d5af8e6a4fcc3dea9cdf5211

Change-Id: I3f87eed87bf3934cc0ade4436213395d4b334248

This reverts commit 73d63071.

Change-Id: Ifbc3eb3be14b736480db4d446657d5cd7a4f95b7

Change-Id: I4ab197511726e28f7005d0e808803493e406591e

Added rules related to debug.sf prop.

Change-Id: Iaa590efa3a44014baf4b734530ae9ab746adfd36

Change-Id: I71165bc28d5404477d218385794712d303a8d7dd

Change-Id: Ic49f0d4fa46ac4749e9bad3a9d4a780c54c3880e

Change-Id: I762ad746a65d44ac777ed5c401e5f25ee52cf58d

Change-Id: I9aa05bfc90582365437edfb690d693b411f479ce

 -Adding rule to fix avc denials because of sepolicy issue

CRs-Fixed: 3643432

Change-Id: I0fb76e38b8fdac343b2573a415b346f2096e9246