Initial commit for Android 10, syncing up to v201

patches/platform_system_sepolicy/0001-Don-t-set-esdfs-or-exfat-genfscon.-Assume-OEM-does.patch

@@ -0,0 +1,71 @@
+From 2963058b10e3f92d351dec6fa6a09dad4d3213b3 Mon Sep 17 00:00:00 2001
+From: Pierre-Hugues Husson <phh@phh.me>
+Date: Tue, 14 Aug 2018 20:56:54 +0200
+Subject: [PATCH 1/2] Don't set esdfs or exfat genfscon. Assume OEM does
+
+---
+ prebuilts/api/28.0/private/genfs_contexts | 4 ++--
+ prebuilts/api/29.0/private/genfs_contexts | 4 ++--
+ private/genfs_contexts                    | 4 ++--
+ 3 files changed, 6 insertions(+), 6 deletions(-)
+
+diff --git a/prebuilts/api/28.0/private/genfs_contexts b/prebuilts/api/28.0/private/genfs_contexts
+index 7e2ea509..56cd92da 100644
+--- a/prebuilts/api/28.0/private/genfs_contexts
++++ b/prebuilts/api/28.0/private/genfs_contexts
+@@ -231,12 +231,12 @@ genfscon debugfs /tracing/events/fence/
+ 
+ genfscon inotifyfs / u:object_r:inotify:s0
+ genfscon vfat / u:object_r:vfat:s0
+-genfscon exfat / u:object_r:exfat:s0
++#genfscon exfat / u:object_r:exfat:s0
+ genfscon debugfs / u:object_r:debugfs:s0
+ genfscon fuse / u:object_r:fuse:s0
+ genfscon configfs / u:object_r:configfs:s0
+ genfscon sdcardfs / u:object_r:sdcardfs:s0
+-genfscon esdfs / u:object_r:sdcardfs:s0
++#genfscon esdfs / u:object_r:sdcardfs:s0
+ genfscon pstore / u:object_r:pstorefs:s0
+ genfscon functionfs / u:object_r:functionfs:s0
+ genfscon usbfs / u:object_r:usbfs:s0
+diff --git a/prebuilts/api/29.0/private/genfs_contexts b/prebuilts/api/29.0/private/genfs_contexts
+index 202d1b31..df21c503 100644
+--- a/prebuilts/api/29.0/private/genfs_contexts
++++ b/prebuilts/api/29.0/private/genfs_contexts
+@@ -285,12 +285,12 @@ genfscon debugfs /kcov								 u:object_r:debugfs_kcov:s0
+ 
+ genfscon inotifyfs / u:object_r:inotify:s0
+ genfscon vfat / u:object_r:vfat:s0
+-genfscon exfat / u:object_r:exfat:s0
++#genfscon exfat / u:object_r:exfat:s0
+ genfscon debugfs / u:object_r:debugfs:s0
+ genfscon fuse / u:object_r:fuse:s0
+ genfscon configfs / u:object_r:configfs:s0
+ genfscon sdcardfs / u:object_r:sdcardfs:s0
+-genfscon esdfs / u:object_r:sdcardfs:s0
++#genfscon esdfs / u:object_r:sdcardfs:s0
+ genfscon pstore / u:object_r:pstorefs:s0
+ genfscon functionfs / u:object_r:functionfs:s0
+ genfscon usbfs / u:object_r:usbfs:s0
+diff --git a/private/genfs_contexts b/private/genfs_contexts
+index 202d1b31..df21c503 100644
+--- a/private/genfs_contexts
++++ b/private/genfs_contexts
+@@ -285,12 +285,12 @@ genfscon debugfs /kcov								 u:object_r:debugfs_kcov:s0
+ 
+ genfscon inotifyfs / u:object_r:inotify:s0
+ genfscon vfat / u:object_r:vfat:s0
+-genfscon exfat / u:object_r:exfat:s0
++#genfscon exfat / u:object_r:exfat:s0
+ genfscon debugfs / u:object_r:debugfs:s0
+ genfscon fuse / u:object_r:fuse:s0
+ genfscon configfs / u:object_r:configfs:s0
+ genfscon sdcardfs / u:object_r:sdcardfs:s0
+-genfscon esdfs / u:object_r:sdcardfs:s0
++#genfscon esdfs / u:object_r:sdcardfs:s0
+ genfscon pstore / u:object_r:pstorefs:s0
+ genfscon functionfs / u:object_r:functionfs:s0
+ genfscon usbfs / u:object_r:usbfs:s0
+-- 
+2.17.1
+

patches/platform_system_sepolicy/0002-Mark-mediacodec_2-6-7-8-as-hal_omx_server.patch

@@ -0,0 +1,90 @@
+From 50cc46681b211922da50a0d97624499f551642a1 Mon Sep 17 00:00:00 2001
+From: Pierre-Hugues Husson <phh@phh.me>
+Date: Wed, 18 Sep 2019 11:50:14 +0200
+Subject: [PATCH 2/2] Mark mediacodec_2{6,7,8} as hal_omx_server
+
+Change-Id: I03e763b8092a9089739db68ed17368ff574879bb
+---
+ prebuilts/api/29.0/private/compat/26.0/26.0.cil | 1 +
+ prebuilts/api/29.0/private/compat/27.0/27.0.cil | 1 +
+ prebuilts/api/29.0/private/compat/28.0/28.0.cil | 1 +
+ private/compat/26.0/26.0.cil                    | 1 +
+ private/compat/27.0/27.0.cil                    | 1 +
+ private/compat/28.0/28.0.cil                    | 1 +
+ 6 files changed, 6 insertions(+)
+
+diff --git a/prebuilts/api/29.0/private/compat/26.0/26.0.cil b/prebuilts/api/29.0/private/compat/26.0/26.0.cil
+index 3b3dae1c..60f42b9c 100644
+--- a/prebuilts/api/29.0/private/compat/26.0/26.0.cil
++++ b/prebuilts/api/29.0/private/compat/26.0/26.0.cil
+@@ -336,6 +336,7 @@
+ (typeattributeset mdnsd_socket_26_0 (mdnsd_socket))
+ (typeattributeset mdns_socket_26_0 (mdns_socket))
+ (typeattributeset mediacasserver_service_26_0 (mediacasserver_service))
++(typeattributeset hal_omx_server (mediacodec_26_0))
+ (typeattributeset mediacodec_26_0 (mediacodec))
+ (typeattributeset mediacodec_exec_26_0 (mediacodec_exec))
+ (typeattributeset mediacodec_service_26_0 (mediacodec_service))
+diff --git a/prebuilts/api/29.0/private/compat/27.0/27.0.cil b/prebuilts/api/29.0/private/compat/27.0/27.0.cil
+index 365d791a..8c8f82fc 100644
+--- a/prebuilts/api/29.0/private/compat/27.0/27.0.cil
++++ b/prebuilts/api/29.0/private/compat/27.0/27.0.cil
+@@ -1047,6 +1047,7 @@
+ (typeattributeset mdnsd_27_0 (mdnsd))
+ (typeattributeset mdnsd_socket_27_0 (mdnsd_socket))
+ (typeattributeset mdns_socket_27_0 (mdns_socket))
++(typeattributeset hal_omx_server (mediacodec_27_0))
+ (typeattributeset mediacodec_27_0 (mediacodec))
+ (typeattributeset mediacodec_exec_27_0 (mediacodec_exec))
+ (typeattributeset mediacodec_service_27_0 (mediacodec_service))
+diff --git a/prebuilts/api/29.0/private/compat/28.0/28.0.cil b/prebuilts/api/29.0/private/compat/28.0/28.0.cil
+index 305cb3ac..338cbd02 100644
+--- a/prebuilts/api/29.0/private/compat/28.0/28.0.cil
++++ b/prebuilts/api/29.0/private/compat/28.0/28.0.cil
+@@ -1242,6 +1242,7 @@
+ (typeattributeset mdnsd_28_0 (mdnsd))
+ (typeattributeset mdnsd_socket_28_0 (mdnsd_socket))
+ (typeattributeset mdns_socket_28_0 (mdns_socket))
++(typeattributeset hal_omx_server (mediacodec_28_0))
+ (typeattributeset mediacodec_28_0 (mediacodec))
+ (typeattributeset mediacodec_exec_28_0 (mediacodec_exec))
+ (typeattributeset mediacodec_service_28_0 (mediacodec_service))
+diff --git a/private/compat/26.0/26.0.cil b/private/compat/26.0/26.0.cil
+index 3b3dae1c..60f42b9c 100644
+--- a/private/compat/26.0/26.0.cil
++++ b/private/compat/26.0/26.0.cil
+@@ -336,6 +336,7 @@
+ (typeattributeset mdnsd_socket_26_0 (mdnsd_socket))
+ (typeattributeset mdns_socket_26_0 (mdns_socket))
+ (typeattributeset mediacasserver_service_26_0 (mediacasserver_service))
++(typeattributeset hal_omx_server (mediacodec_26_0))
+ (typeattributeset mediacodec_26_0 (mediacodec))
+ (typeattributeset mediacodec_exec_26_0 (mediacodec_exec))
+ (typeattributeset mediacodec_service_26_0 (mediacodec_service))
+diff --git a/private/compat/27.0/27.0.cil b/private/compat/27.0/27.0.cil
+index 365d791a..8c8f82fc 100644
+--- a/private/compat/27.0/27.0.cil
++++ b/private/compat/27.0/27.0.cil
+@@ -1047,6 +1047,7 @@
+ (typeattributeset mdnsd_27_0 (mdnsd))
+ (typeattributeset mdnsd_socket_27_0 (mdnsd_socket))
+ (typeattributeset mdns_socket_27_0 (mdns_socket))
++(typeattributeset hal_omx_server (mediacodec_27_0))
+ (typeattributeset mediacodec_27_0 (mediacodec))
+ (typeattributeset mediacodec_exec_27_0 (mediacodec_exec))
+ (typeattributeset mediacodec_service_27_0 (mediacodec_service))
+diff --git a/private/compat/28.0/28.0.cil b/private/compat/28.0/28.0.cil
+index 305cb3ac..338cbd02 100644
+--- a/private/compat/28.0/28.0.cil
++++ b/private/compat/28.0/28.0.cil
+@@ -1242,6 +1242,7 @@
+ (typeattributeset mdnsd_28_0 (mdnsd))
+ (typeattributeset mdnsd_socket_28_0 (mdnsd_socket))
+ (typeattributeset mdns_socket_28_0 (mdns_socket))
++(typeattributeset hal_omx_server (mediacodec_28_0))
+ (typeattributeset mediacodec_28_0 (mediacodec))
+ (typeattributeset mediacodec_exec_28_0 (mediacodec_exec))
+ (typeattributeset mediacodec_service_28_0 (mediacodec_service))
+-- 
+2.17.1
+