[Galaxy Note 4 Android Development (Snapdragon)] fattire:
Quick update... (TMO)

Quick follow up on the self-built 910T 15.1 from 12 hours later--

1. So far so good. Yeah, everything seems to be working as well as it did in 14.1 which is amazing considering how easily this built. Again, kudos and great work!

2. This one app "GPS Data" consistently crashes Android--I don't think it's even related to the GPS itself because it still does it when Location permission is off. So I'm not sure what's happening here. logcat doesn't seem to say much, nor does dmesg- the second you touch the satellite dish icon, the UI freezes and then it restarts. Is anyone else seeing this with this app? The "GPS Test" app from the play store does work fine tho and gives me satellites, etc.

3. I got rid of that annoying "vendor image mismatch" error by changing the property_override() function in android_device_samsung_trltetmo/init/init_trlte.cpp to property_override_dual(). So with the changes from two posts ago, here are the updated changes, which includes the enforcing vs permission change: +#BOARD_KERNEL_CMDLINE += androidboot.selinux=permissive though you may want to not do that-- see below.)

4. I'm building now with enforcing on to see how it works. For future reference, the current denials (in permissive) I'm seeing can be fixed with the following automated suggestions:

$ [B]adb pull /sys/fs/selinux/policy[/B]
$ [B]adb logcat -b all -d | audit2allow -p policy[/B]
#============= audioserver ==============
allow audioserver sysfs:dir { open read };
allow audioserver sysfs:file { open read };

#============= platform_app ==============
allow platform_app system_app_data_file:dir getattr;

#============= priv_app ==============
allow priv_app su_exec:file { open read };

#============= untrusted_app ==============
allow untrusted_app proc:file { getattr open read };

#============= untrusted_app_25 ==============
allow untrusted_app_25 proc:file { getattr open read };

I don't think all of these are desired. I'm not going to mess with the .te files for the moment unless someone can show that there's an issue to fix.

Update: So putting in enforcing mode killed the sim. And I get denials, which apparently would be fixed with the following:

#============= audioserver ==============
allow audioserver sysfs:file read;

#============= mdm_helper ==============
allow mdm_helper sysfs:file read;

#============= mpdecision ==============
allow mpdecision sysfs:file read;

#============= qmuxd ==============
allow qmuxd sysfs:file read;

#============= shell ==============
allow shell kernel:system syslog_read;

#============= system_app ==============
allow system_app installd_service:service_manager find;
allow system_app netd_service:service_manager find;
allow system_app storaged:binder call;
allow system_app wificond:binder call;

#============= system_server ==============
allow system_server app_efs_file:dir search;

#============= untrusted_app ==============
allow untrusted_app proc:file read;

#============= untrusted_app_25 ==============
allow untrusted_app_25 proc:file read;

Maybe I could try a few of those to get the one we need for enforcing and still have a working simcard? I'm going to play with this a little and will report back.

That is all :)

ft