Do not grant DAC override permission which would allow this daemon
unix permissions to everything.
avc: denied { dac_override } for pid=2664 comm="rmt_storage" capability=1 scontext=u:r:rmt_storage:s0 tcontext=u:r:rmt_storage:s0 tclass=capability permissive=0
Change-Id: Ib02b4aedab479f5ad8aca3a2100b5c489397002a
Do not grant DAC override permission which would allow this daemon
unix permissions to everything.
avc: denied { dac_override } for capability=1 scontext=u:r:netmgrd:s0 tcontext=u:r:netmgrd:s0 tclass=capability
Adding
wifi group to access
/data/misc/net/rt_tables
-rw-r--r-- 1 system wifi 130 2016-05-11 09:58 rt_tables
wakelock group to access:
/sys/power/wake_lock
-rw-rw---- 1 radio wakelock 4096 1970-01-19 15:03 wake_lock
radio/inet groups to access
/dev/socket/netmgr/netmgr_connect_socket
srw-rw---- 1 radio inet 0 1970-01-19 15:03 netmgr_connect_socket
Change-Id: I7ed6a98dd85bf7efa8cab0b8a0851217f030ba8b
* When a device with hundreds of apps is booted up, hundreds of
apps will spawn their BOOT_COMPLETED receivers which start
up their background initialization services. Since only one
core is allowed for these processes, the time for all these
services to complete is extremely long.
* To improve this, allow three cores for background processes,
keeping the fourth for idle wakeups. This ends up producing
a better thermal profile for the device as well, since the
small cores are not the aggressor on this SoC.
Change-Id: I98bbf8bf565bd77066ff7726014e6fa5730a4e09
Sound trigger HAL needs to write to the WDSP sysfs
node to load WDSP image. Update ownership from root
to media:audio for this node.
Change-Id: Iefe889ffd21bba154875f71cf55f4a571d88f9fb
Some of the directories under persist need to be accessed by
daemons which are running with root access. Currently only
system is allowed to access or create files under /persist.
Change the permission for persist to allow root to access and
create files.
CRs-Fixed: 1018233
Change-Id: Icbdbf5ddc329ff9627f6bcf79445b98aae942956
On first boot all services which belonging to main class
will get killed to perform encryption. Later on these services
will get restarted. Since cnss_diag is defined as one shot,
need to start service back at the time vold.decrypt property
is set.
Change-Id: Ib673398b892f6301b69cf4cff6e8cf17ada4620c
CRs-Fixed: 1041549
Stop cnss-daemon when device shutdown. This is required by
peripheral manager as cnss-daemon vote for modem when service is
started. It needs to release vote when device shutdown.
Change-Id: I48c8bcab673280ab5f725ffdb4625994f2078b8f
CRs-Fixed: 1051868
Start cnss-daemon with system level permission. Add
required group as part of init script for cnss-daemon
service.
Change-Id: Icc685e9c2734ff0552d5912eb18471456774fcc8
CRs-Fixed: 1024366
