mirror of
https://github.com/AetherDroid/android_kernel_samsung_on5xelte.git
synced 2025-09-08 01:08:03 -04:00
Fixed MTP to work with TWRP
This commit is contained in:
awab228
commit
f6dfaef42e
50820 changed files with 20846062 additions and 0 deletions
9
security/tz_iccc/Kconfig
Normal file
9
security/tz_iccc/Kconfig
Normal file
|
|
@ -0,0 +1,9 @@
|
|||
#
|
||||
# TZ iccc configuration
|
||||
#
|
||||
config TZ_ICCC
|
||||
bool "TZ ICCC"
|
||||
depends on TIMA
|
||||
default n
|
||||
---help---
|
||||
Provide kernel api for reading and writing ICCC secure parameters.
|
||||
5
security/tz_iccc/Makefile
Normal file
5
security/tz_iccc/Makefile
Normal file
|
|
@ -0,0 +1,5 @@
|
|||
#
|
||||
# Makefile for TZ ICCC.
|
||||
#
|
||||
|
||||
obj-$(CONFIG_TZ_ICCC) += tz_iccc.o
|
||||
273
security/tz_iccc/tz_iccc.c
Normal file
273
security/tz_iccc/tz_iccc.c
Normal file
|
|
@ -0,0 +1,273 @@
|
|||
/*
|
||||
* TZ ICCC Support
|
||||
*
|
||||
*/
|
||||
|
||||
#include <asm/uaccess.h>
|
||||
#include <linux/list.h>
|
||||
#include <linux/device.h>
|
||||
#include <linux/kernel.h>
|
||||
#include <linux/kobject.h>
|
||||
#include <linux/module.h>
|
||||
#include <linux/miscdevice.h>
|
||||
#include <linux/slab.h>
|
||||
#include <linux/syscalls.h>
|
||||
#include <linux/init.h>
|
||||
#include <linux/types.h>
|
||||
#include <linux/proc_fs.h>
|
||||
#include "tz_iccc.h"
|
||||
|
||||
/* ICCC implementation for kernel */
|
||||
int is_iccc_ready;
|
||||
#define DRIVER_DESC "A kernel module to read boot_completed status"
|
||||
|
||||
uint8_t *iccc_tci = NULL;
|
||||
struct mc_session_handle iccc_mchandle;
|
||||
|
||||
uint32_t Iccc_SaveData_Kernel(uint32_t type, uint32_t value)
|
||||
{
|
||||
enum mc_result mc_ret;
|
||||
struct mc_uuid_t uuid = TL_TZ_ICCC_UUID;
|
||||
int ret = 0;
|
||||
tciMessage_t *msg;
|
||||
|
||||
printk(KERN_ERR "ICCC : Iccc_SaveData_Kernel \n");
|
||||
|
||||
if (!is_iccc_ready) {
|
||||
ret = RET_ICCC_FAIL;
|
||||
pr_err("%s: Not ready! type:%#x, ret:%d\n", __func__, type, ret);
|
||||
goto iccc_ret;
|
||||
}
|
||||
|
||||
if(ICCC_SECTION_TYPE(type) != KERN_ICCC_TYPE_START) {
|
||||
if (type != SELINUX_STATUS) {
|
||||
ret = RET_ICCC_FAIL;
|
||||
pr_err("iccc permission denied! ret = 0x%x", ret);
|
||||
ret = RET_ICCC_FAIL;
|
||||
goto iccc_ret;
|
||||
}
|
||||
}
|
||||
|
||||
/* open device for iccc trustlet */
|
||||
mc_ret = mc_open_device(MC_DEVICE_ID_DEFAULT);
|
||||
if (mc_ret != MC_DRV_OK) {
|
||||
pr_err("ICCC --cannot get mobicore handle from kernel. %d\n",mc_ret);
|
||||
ret = RET_ICCC_FAIL;
|
||||
goto iccc_ret;
|
||||
}
|
||||
|
||||
/* alloc world shared memory for iccc trustlet */
|
||||
mc_ret = mc_malloc_wsm(MC_DEVICE_ID_DEFAULT, 0, sizeof(tciMessage_t),&iccc_tci, 0);
|
||||
if (mc_ret != MC_DRV_OK) {
|
||||
pr_err("ICCC --cannot alloc world shared memory.%d\n",mc_ret);
|
||||
ret = RET_ICCC_FAIL;
|
||||
goto iccc_close_device;
|
||||
}
|
||||
|
||||
memset(&iccc_mchandle, 0, sizeof(struct mc_session_handle));
|
||||
iccc_mchandle.device_id = MC_DEVICE_ID_DEFAULT;
|
||||
|
||||
/* open session for iccc trustlet */
|
||||
mc_ret = mc_open_session(&iccc_mchandle, &uuid, iccc_tci,sizeof(tciMessage_t));
|
||||
if (mc_ret != MC_DRV_OK) {
|
||||
pr_err("ICCC : --cannot open mobicore session from kernel. %d\n",mc_ret);
|
||||
ret = RET_ICCC_FAIL;
|
||||
goto iccc_free_wsm;
|
||||
}
|
||||
|
||||
msg = (tciMessage_t *)iccc_tci;
|
||||
|
||||
msg->header.id = CMD_ICCC_SAVEDATA;
|
||||
msg->payload.generic.content.iccc_req.cmd_id = CMD_ICCC_SAVEDATA;
|
||||
msg->payload.generic.content.iccc_req.type = type;
|
||||
msg->payload.generic.content.iccc_req.value = value;
|
||||
|
||||
/* Send the command to the tl. */
|
||||
mc_ret = mc_notify(&iccc_mchandle);
|
||||
if (mc_ret != MC_DRV_OK) {
|
||||
pr_err("ICCC--mc_notify failed.\n");
|
||||
ret = RET_ICCC_FAIL;
|
||||
goto iccc_close_session;
|
||||
}
|
||||
|
||||
mc_ret = mc_wait_notification(&iccc_mchandle, -1);
|
||||
if (mc_ret != MC_DRV_OK) {
|
||||
pr_err("ICCC--wait_notify failed.\n");
|
||||
ret = RET_ICCC_FAIL;
|
||||
goto iccc_close_session;
|
||||
}
|
||||
|
||||
pr_warn("ICCC--wait_notify completed.\n");
|
||||
|
||||
if (msg->payload.generic.content.iccc_rsp.ret == RET_ICCC_SUCCESS) {
|
||||
pr_info("ICCC : Successfully write\n");
|
||||
ret = RET_ICCC_SUCCESS;
|
||||
}
|
||||
else {
|
||||
pr_err("ICCC : write failed with error (%d)\n",msg->payload.generic.content.iccc_rsp.ret);
|
||||
ret = RET_ICCC_FAIL;
|
||||
}
|
||||
|
||||
iccc_close_session:
|
||||
if (mc_close_session(&iccc_mchandle) != MC_DRV_OK) {
|
||||
pr_err("ICCC--failed to close mobicore session.\n");
|
||||
}
|
||||
|
||||
iccc_free_wsm:
|
||||
if (mc_free_wsm(MC_DEVICE_ID_DEFAULT, iccc_tci) != MC_DRV_OK) {
|
||||
pr_err("ICCC--failed to free wsm.\n");
|
||||
}
|
||||
|
||||
iccc_close_device:
|
||||
if (mc_close_device(MC_DEVICE_ID_DEFAULT) != MC_DRV_OK) {
|
||||
pr_err("ICCC--failed to shutdown mobicore instance.\n");
|
||||
}
|
||||
|
||||
iccc_ret:
|
||||
return ret;
|
||||
}
|
||||
|
||||
uint32_t Iccc_ReadData_Kernel(uint32_t type, uint32_t *value)
|
||||
{
|
||||
enum mc_result mc_ret;
|
||||
struct mc_uuid_t uuid = TL_TZ_ICCC_UUID;
|
||||
int ret = 0;
|
||||
tciMessage_t *msg;
|
||||
|
||||
printk(KERN_ERR "ICCC Iccc_ReadData_Kernel \n");
|
||||
|
||||
if (!is_iccc_ready) {
|
||||
ret = RET_ICCC_FAIL;
|
||||
pr_err("%s: Not ready! type:%#x, ret:%d\n", __func__, type, ret);
|
||||
goto iccc_ret;
|
||||
}
|
||||
|
||||
/* open device for iccc trustlet */
|
||||
mc_ret = mc_open_device(MC_DEVICE_ID_DEFAULT);
|
||||
if (mc_ret != MC_DRV_OK) {
|
||||
pr_err("ICCC --cannot get mobicore handle from kernel. %d\n",mc_ret);
|
||||
ret = RET_ICCC_FAIL;
|
||||
goto iccc_ret;
|
||||
}
|
||||
|
||||
/* alloc world shared memory for iccc trustlet */
|
||||
mc_ret = mc_malloc_wsm(MC_DEVICE_ID_DEFAULT, 0, sizeof(tciMessage_t),&iccc_tci, 0);
|
||||
if (mc_ret != MC_DRV_OK) {
|
||||
pr_err("ICCC--cannot alloc world shared memory.%d\n",mc_ret);
|
||||
ret = RET_ICCC_FAIL;
|
||||
goto iccc_close_device;
|
||||
}
|
||||
memset(&iccc_mchandle, 0, sizeof(struct mc_session_handle));
|
||||
iccc_mchandle.device_id = MC_DEVICE_ID_DEFAULT;
|
||||
|
||||
/* open session for iccc trustlet */
|
||||
mc_ret = mc_open_session(&iccc_mchandle, &uuid, iccc_tci,sizeof(tciMessage_t));
|
||||
if (mc_ret != MC_DRV_OK) {
|
||||
pr_err("ICCC--cannot open mobicore session from kernel. %d\n",mc_ret);
|
||||
ret = RET_ICCC_FAIL;
|
||||
goto iccc_free_wsm;
|
||||
}
|
||||
|
||||
/* Load message */
|
||||
msg = (tciMessage_t *)iccc_tci;
|
||||
msg->header.id = CMD_ICCC_READDATA;
|
||||
msg->payload.generic.content.iccc_req.cmd_id = CMD_ICCC_READDATA;
|
||||
msg->payload.generic.content.iccc_req.type = type;
|
||||
|
||||
/* Send the command to the tl. */
|
||||
mc_ret = mc_notify(&iccc_mchandle);
|
||||
if (mc_ret != MC_DRV_OK) {
|
||||
pr_err("ICCC mc_notify failed.\n");
|
||||
ret = RET_ICCC_FAIL;
|
||||
goto iccc_close_session;
|
||||
}
|
||||
|
||||
mc_ret = mc_wait_notification(&iccc_mchandle, -1);
|
||||
if (mc_ret != MC_DRV_OK) {
|
||||
pr_err("ICCC--wait_notify failed.\n");
|
||||
ret = RET_ICCC_FAIL;
|
||||
goto iccc_close_session;
|
||||
}
|
||||
|
||||
pr_warn("ICCC--wait_notify completed.\n");
|
||||
|
||||
if (msg->payload.generic.content.iccc_rsp.ret == RET_ICCC_SUCCESS) {
|
||||
pr_info("ICCC : Iccc_ReadData_Kernel successful\n");
|
||||
ret = RET_ICCC_SUCCESS;
|
||||
*value = msg->payload.generic.content.iccc_rsp.value;
|
||||
}
|
||||
else {
|
||||
pr_err("ICCC : Iccc_ReadData_Kernel failed with error (%d)\n",msg->payload.generic.content.iccc_rsp.ret);
|
||||
ret = RET_ICCC_FAIL;
|
||||
}
|
||||
|
||||
iccc_close_session:
|
||||
if (mc_close_session(&iccc_mchandle) != MC_DRV_OK) {
|
||||
pr_err("ICCC--failed to close mobicore session.\n");
|
||||
}
|
||||
|
||||
iccc_free_wsm:
|
||||
if (mc_free_wsm(MC_DEVICE_ID_DEFAULT, iccc_tci) != MC_DRV_OK) {
|
||||
pr_err("ICCC--failed to free wsm.\n");
|
||||
}
|
||||
|
||||
iccc_close_device:
|
||||
if (mc_close_device(MC_DEVICE_ID_DEFAULT) != MC_DRV_OK) {
|
||||
pr_err("ICCC--failed to shutdown mobicore instance.\n");
|
||||
}
|
||||
|
||||
iccc_ret:
|
||||
return ret;
|
||||
}
|
||||
|
||||
static ssize_t iccc_write(struct file *fp, const char __user *buf, size_t len, loff_t *off)
|
||||
{
|
||||
uint32_t ret;
|
||||
printk(KERN_ERR "%s:\n", __func__);
|
||||
is_iccc_ready = 1;
|
||||
|
||||
#if defined(CONFIG_SECURITY_SELINUX)
|
||||
printk(KERN_INFO "%s: selinux_enabled:%d, selinux_enforcing:%d\n",__func__, selinux_is_enabled(), selinux_is_enforcing());
|
||||
if (selinux_is_enabled() && selinux_is_enforcing()) {
|
||||
if (0 != (ret = Iccc_SaveData_Kernel(SELINUX_STATUS,0x0))) {
|
||||
printk(KERN_ERR "%s: Iccc_SaveData_Kernel failed, type = %x, value =%x\n", __func__,SELINUX_STATUS,0x0);
|
||||
}
|
||||
}
|
||||
else {
|
||||
if (0 != (ret = Iccc_SaveData_Kernel(SELINUX_STATUS,0x1))) {
|
||||
printk(KERN_ERR "%s: Iccc_SaveData_Kernel failed, type = %x, value =%x\n", __func__,SELINUX_STATUS,0x1);
|
||||
}
|
||||
}
|
||||
#endif
|
||||
|
||||
// len bytes successfully written
|
||||
return len;
|
||||
}
|
||||
|
||||
static const struct file_operations iccc_proc_fops = {
|
||||
.write = iccc_write,
|
||||
};
|
||||
|
||||
static int __init iccc_init(void)
|
||||
{
|
||||
printk(KERN_INFO"%s:\n", __func__);
|
||||
|
||||
if (proc_create("iccc_ready", 0644, NULL, &iccc_proc_fops) == NULL) {
|
||||
printk(KERN_ERR "%s: proc_create() failed\n",__func__);
|
||||
return -1;
|
||||
}
|
||||
printk(KERN_INFO"%s: registered /proc/iccc_boot_completed interface\n", __func__);
|
||||
return 0;
|
||||
}
|
||||
|
||||
static void __exit iccc_exit(void)
|
||||
{
|
||||
printk(KERN_INFO"deregistering /proc/iccc_boot_completed interface\n");
|
||||
remove_proc_entry("iccc_ready", NULL);
|
||||
}
|
||||
|
||||
module_init(iccc_init);
|
||||
module_exit(iccc_exit);
|
||||
|
||||
MODULE_DESCRIPTION(DRIVER_DESC);
|
||||
/* END ICCC implementation for kernel */
|
||||
64
security/tz_iccc/tz_iccc.h
Normal file
64
security/tz_iccc/tz_iccc.h
Normal file
|
|
@ -0,0 +1,64 @@
|
|||
#ifndef TZ_ICCC_H
|
||||
#define TZ_ICCC_H
|
||||
|
||||
/* ICCC Implementation in Kernel */
|
||||
|
||||
#include <../../drivers/gud/gud-exynos7570/MobiCoreDriver/public/mobicore_driver_api.h>
|
||||
#include <linux/security/Iccc_Interface.h>
|
||||
#include <linux/selinux.h>
|
||||
|
||||
#define TL_TZ_ICCC_UUID {{ 0xff,0xff,0xff,0xff,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x41 }}
|
||||
|
||||
#define CMD_ICCC_INIT 0x00000001
|
||||
#define CMD_ICCC_SAVEDATA 0x00000002
|
||||
#define CMD_ICCC_READDATA 0x00000003
|
||||
|
||||
#define RET_ICCC_SUCCESS 0
|
||||
#define RET_ICCC_FAIL -1
|
||||
|
||||
#define ICCC_READ 1
|
||||
#define ICCC_WRITE 2
|
||||
|
||||
#define MIN_PADDING_NEEDED 9
|
||||
|
||||
typedef struct tz_msg_header {
|
||||
/* * First 4 bytes should always be id: either cmd_id or resp_id */
|
||||
uint32_t id;
|
||||
uint32_t content_id;
|
||||
uint32_t len;
|
||||
uint32_t status;
|
||||
} __attribute__ ((packed)) tz_msg_header_t;
|
||||
|
||||
typedef struct iccc_req_s
|
||||
{
|
||||
uint32_t cmd_id;
|
||||
uint32_t type;
|
||||
uint32_t value;
|
||||
uint32_t padding[MIN_PADDING_NEEDED]; //only padding , just to make tciMessage_t's size >= 64
|
||||
} __attribute__ ((packed)) iccc_req_t;
|
||||
|
||||
typedef struct iccc_rsp_s
|
||||
{
|
||||
uint32_t cmd_id;
|
||||
uint32_t type;
|
||||
uint32_t value;
|
||||
int ret;
|
||||
} __attribute__ ((packed)) iccc_rsp_t;
|
||||
|
||||
typedef struct {
|
||||
union content_u {
|
||||
iccc_req_t iccc_req;
|
||||
iccc_rsp_t iccc_rsp;
|
||||
} __attribute__ ((packed)) content;
|
||||
} __attribute__ ((packed)) iccc_generic_payload_t;
|
||||
|
||||
typedef struct {
|
||||
tz_msg_header_t header;
|
||||
union payload_u {
|
||||
iccc_generic_payload_t generic;
|
||||
} __attribute__ ((packed)) payload;
|
||||
} __attribute__ ((packed)) iccc_message_t;
|
||||
|
||||
typedef iccc_message_t tciMessage_t;
|
||||
|
||||
#endif /* TZ_ICCC_H */
|
||||
Loading…
Add table
Add a link
Reference in a new issue