17 Commits

Author SHA1 Message Date
Michael Bestas
962b8b904d zuma: sepolicy: Remove duplicate service label
This is defined in gs-common

Change-Id: Ib90caea46da6cc9e191efe8f04b783bba9e2691a
2025-06-26 07:32:33 +03:00
Michael Bestas
8f3b0963c5 zuma: sepolicy: Label missing display node
Change-Id: Ibadee03e8965db70b32103cdb80dc2c099d70a8a
2025-06-26 07:32:28 +03:00
Michael Bestas
d10b40cb68 zuma: sepolicy: Update tracking denials bug map from BP2A
Change-Id: Ibdfb2fa34bc43399f944ef73f6687d8e5051a2ef
2025-06-26 07:32:22 +03:00
Michael Bestas
b214980bfe Merge tag 'aml_tz6_351400020' into staging/lineage-23.0_merge-aml_tz6_351400020
aml_tz6_351400020 (13155446,com.google.android.go.tzdata6,com.google.android.tzdata6)

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ9i73wAKCRDorT+BmrEO
# eFyZAJ9IQBDv9E9ZB7Ppgj2kGj+Z8a8iZQCbBRcFG3AkrkG3vXd5rPxiL3uBGMs=
# =k2kR
# -----END PGP SIGNATURE-----
# gpg: Signature made Tue Mar 18 02:18:39 2025 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [ultimate]

# By Nina Chen (5) and others
# Via Android Build Coastguard Worker (9) and others
* tag 'aml_tz6_351400020':
  Update SELinux error
  Consolidate SELinux for faceauth_rawimage
  RamdumpService: Fix the SELinux errors from introducing Firebase Analytics.
  Update SELinux error
  Update SELinux error
  zuma: update selinux to allow UMI on user build
  Remove sced sepolicy rule
  Update SELinux error
  Update SELinux error.
  Restrict ioctl access for appdomain to gpu_device
  Revert "Remove hal_camera_default aconfig_storage_metadata_file ..."
  Remove hal_camera_default aconfig_storage_metadata_file from bug map
  Update SELinux error
  zuma: Add selinux permission for fth

Change-Id: I4608f407b5123cae5d545e41ce717e9efe0ea7d5
2025-06-23 05:17:12 +03:00
Michael Bestas
96ab4760bf Merge tag 'android-15.0.0_r20' into staging/lineage-22.2_merge-android-15.0.0_r20
Android 15.0.0 Release 20 (BP1A.250305.019)

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ8eo8AAKCRDorT+BmrEO
# eLroAJ94pkmmmE74kzjaEMl/1OJ/gyAKoACeMGsnkHJ+xV6knev75ebZMPJcJjY=
# =NHri
# -----END PGP SIGNATURE-----
# gpg: Signature made Wed Mar  5 03:29:20 2025 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [ultimate]

# By Nina Chen (10) and others
# Via Android Build Coastguard Worker (24) and others
* tag 'android-15.0.0_r20': (23 commits)
  Update SELinux error
  modem_svc: move shared_modem_platform related sepolicy to gs-common
  Allow tachyon service to make binder calls to GCA
  Update SELinux error
  Update SELinux error
  Update SELinux error
  Add udc sysfs to udc_sysfs fs context
  Revert "modem_svc: move shared_modem_platform related sepolicy t..."
  modem_svc: move shared_modem_platform related sepolicy to gs-common
  Update SELinux error
  Update SELinux error
  Update SELinux error
  Revert^3 "Add udc sysfs to udc_sysfs fs context"
  Revert "Update SELinux error"
  modem_svc: use shared_modem_platform to replace all modem_svc_sit
  Update SELinux error
  Update SELinux error
  Allow systemui_app to set 'debug.tracing.desktop_mode_visible_tasks' system property
  Remove duplicate service entries
  Update SELinux error
  ...

 Conflicts:
	sepolicy/zuma-sepolicy.mk

Change-Id: Ic1b521b7975aacbf44e5fe4246620f6f3e34f984
2025-03-09 11:04:28 +02:00
Michael Bestas
d97db5601b Merge tag 'android-15.0.0_r6' into staging/lineage-22.0_merge-android-15.0.0_r6
Android 15.0.0 Release 6 (AP4A.241205.013)

# -----BEGIN PGP SIGNATURE-----
#
# iFwEABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ1IssQAKCRDorT+BmrEO
# eMmQAJj8v6hZUtdtQwD+swBc8Ai58HICAJ9XVGRsPwZXj4SxZGaw88jxJvza7A==
# =Sdzw
# -----END PGP SIGNATURE-----
# gpg: Signature made Fri Dec  6 00:44:01 2024 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [marginal]
# gpg: initial-contribution@android.com: Verified 2483 signatures in the past
#      3 years.  Encrypted 4 messages in the past 2 years.
# gpg: WARNING: This key is not certified with sufficiently trusted signatures!
# gpg:          It is not certain that the signature belongs to the owner.
# Primary key fingerprint: 4340 D135 70EF 945E 8381  0964 E8AD 3F81 9AB1 0E78

# By Daniel Chapin (3) and others
# Via Android Build Coastguard Worker (30) and others
* tag 'android-15.0.0_r6': (32 commits)
  Make android.framework.stats-v2-ndk app reachable
  Update SELinux error
  Change vendor_fingerprint_prop to vendor_restricted_prop
  Update SELinux error
  storage: move storage related device type to common folder
  Update SELinux error
  Revert^2 "Add udc sysfs to udc_sysfs fs context"
  Label sysfs node power_mode as sysfs_display.
  Revert^2 "zuma: update modem_svc sepolicy for UMI"
  Revert "zuma: update modem_svc sepolicy for UMI"
  Update SELinux error
  zuma: update modem_svc sepolicy for UMI
  Revert "trusty: storageproxy: add fs_ready_rw property context"
  DisplayPort Stats: add sysfs access permission on Zuma devices
  Revert "trusty: storageproxy: add fs_ready_rw property context"
  Revert "trusty: storageproxy: add fs_ready_rw property context"
  Correct the path of tcpm-source-psy device
  add hal_graphics_composer to access thermal temperature
  Revert "Add udc sysfs to udc_sysfs fs context"
  Add udc sysfs to udc_sysfs fs context
  ...

Change-Id: I0f827d7ab63b0cea6e3dfd3c3d28b03f53673a1e
2024-12-11 03:49:13 +02:00
Michael Bestas
6bfcb2c45c Merge tag 'android-15.0.0_r4' into staging/lineage-22.0_merge-android-15.0.0_r4
Android 15.0.0 release 4

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZyveQgAKCRDorT+BmrEO
# eJM2AJ9qMKzVt1NzhtprBRWqM3A11xgkyACfcOmtzhEb5maHBfy6HN4RrZV298A=
# =A3nx
# -----END PGP SIGNATURE-----
# gpg: Signature made Wed Nov  6 23:23:14 2024 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [marginal]
# gpg: initial-contribution@android.com: Verified 2340 signatures in the past
#      3 years.  Encrypted 4 messages in the past 2 years.
# gpg: WARNING: This key is not certified with sufficiently trusted signatures!
# gpg:          It is not certain that the signature belongs to the owner.
# Primary key fingerprint: 4340 D135 70EF 945E 8381  0964 E8AD 3F81 9AB1 0E78

# By gilliu
# Via Android Build Coastguard Worker
* tag 'android-15.0.0_r4':
  add hal_graphics_composer to access thermal temperature

Change-Id: I7d332857715494aa6a38a96ed26258d2853fb44a
2024-11-07 14:59:07 +02:00
Michael Bestas
09b49ecdcf zuma: sepolicy: Don't label SystemUI as systemui_app
While this might be useful on Pixel stock ROM, this serves no purpose
anywhere else. In fact, it makes it more fragile, as we'd need to track
platform SystemUI related SELinux changes ourselves.

Change-Id: I205df902649fd712a89f21f51099e088c5bdef2e
2024-10-20 06:12:20 +03:00
Michael Bestas
45c8c75d83 Label additional UWB service
Change-Id: Ia938529497a5b274354366e6d8c8579184be491c
2024-10-20 06:12:20 +03:00
Michael Bestas
e99ff8f6aa Label vendor.dolby.media.c2@1.0-service
Change-Id: I89fb4c149aed94cf2f7c3d34f7fde5877175b1e2
2024-10-20 06:12:20 +03:00
Michael Bestas
74fd7f5340 Include missing vendor sepolicy
Change-Id: Id35fb4b22e2ee8dfafdfb8ae601ab823435d2b94
2024-10-20 06:12:20 +03:00
Chirayu Desai
1813c18ef8 Allow radio access to IOemSlsiRadioExternal
Change-Id: Ib5d57b199b3e8288cd3de0c12898f0c1d679be4a
2024-10-20 06:12:20 +03:00
Danny Lin
2d094a50a4 Update seapp certificates to match stock presigned apps
Certificates extracted from stock vendor_mac_permissions.xml using
adevtool: https://github.com/kdrag0n/adevtool

Change-Id: Iaf59f1548905d16fe7ad231c039ba43941c15710
2024-10-20 06:12:20 +03:00
Michael Bestas
31ab22b7e6 Include missing ConnectivityThermalPowerManager sepolicy
Change-Id: I1e0f05159a6797251ed85360966aa45246005bbd
2024-10-20 06:04:55 +03:00
Michael Bestas
62371207c2 zuma: Update sepolicy path
Change-Id: Ie2d420cd25e1a8b65977504ed987df57b525dc5f
2024-10-07 14:13:13 +03:00
Michael Bestas
90f03e1f0b Add .gitupstream
Change-Id: I79747ef989659c069386a6ed34a59bba2e8ea860
2024-10-07 14:10:48 +03:00
Michael Bestas
1f12b7b750 Add 'sepolicy/' from tag 'android-15.0.0_r1'
git-subtree-dir: sepolicy
git-subtree-mainline: 5ac4bfe691
git-subtree-split: 8c9dd0dbcd
Change-Id: If7ab7a231c42edd022de4786d0e0d92c6e77eef0
2024-10-07 14:08:35 +03:00