Commit graph

165 commits

Author SHA1 Message Date
Android Build Coastguard Worker
02c7934a3e Snap for 11816316 from ab38b9e239 to 24Q3-release
Change-Id: I180d2b51dcfdf53f0146df81472ce8f3cebd8a45
2024-05-08 23:01:26 +00:00
Cheng Chang
ab38b9e239 gps: Merge akita pixel-gnss sepolicy to gs-common folder
Bug: 332204989
Test: Health boot check at b/332204989#comment36
Test: Verification test at b/332204989.
Change-Id: Id8801b90a2b5927329a7dc558f0bc29c2d4609ed
2024-05-07 09:44:09 +00:00
Android Build Coastguard Worker
b014935cc3 Snap for 11800966 from b0910805c0 to 24Q3-release
Change-Id: I960a0453209429c686c9516e39d120250219ac40
2024-05-04 01:01:35 +00:00
Android Build Coastguard Worker
174b445f05 Snap for 11794304 from e1e2dc3141 to 24Q3-release
Change-Id: Icbe9b85c006d192e3b7998d8f12c6b8bf325b018
2024-05-02 23:01:21 +00:00
Priyanka Advani
b0910805c0 Revert "sepolicy: Allow PixelGnss to connect to Chre HAL" am: 413d3b1d43
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/27192522

Change-Id: I2b4fed1f5770c556ed01fccb82ddc552ff0aa732
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-02 19:54:21 +00:00
Priyanka Advani
413d3b1d43 Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"
Revert submission 27007604-pps_topic

Reason for revert: Droid-monitor created revert due to breakages in b/338407263. Will be verifying through ABTD before submission.

Reverted changes: /q/submissionid:27007604-pps_topic

Change-Id: Ice972552ad50f7af883dc0491426797da78f8918
2024-05-02 16:28:13 +00:00
Cheng Chang
e1e2dc3141 sepolicy: Allow PixelGnss to connect to Chre HAL am: d1f3ee501f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/26784208

Change-Id: I68f567426d974c86ae3aadf9379152f992d5cef3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-02 13:36:24 +00:00
Cheng Chang
d1f3ee501f sepolicy: Allow PixelGnss to connect to Chre HAL
avc:  denied  { call } for  scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0

Bug: 330120749
Test: Verify PixelGnss HAL can connect to Chre HAL.
Test: Function test verification b/330120749.
Test: b/330120749#comment24 health boot check.
Test: b/330120749#comment25 health boot check.
Change-Id: Ida89c542e8dc4ce29011357255385a0661962e16
2024-04-25 07:49:38 +00:00
Android Build Coastguard Worker
519561f73b Snap for 11648291 from f99c7509d8 to 24Q3-release
Change-Id: I6c8f33521dedfe41501f884475c4c1be6d7b7913
2024-03-30 01:01:30 +00:00
Mike Wang
f99c7509d8 Merge "Move the sysfs_modem_state context defination to the gs-common" into main 2024-03-29 15:16:19 +00:00
Priyanka Advani
7a0ed6e8ea Revert "sepolicy: Allow PixelGnss to connect to Chre HAL" am: ee7637c438
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/26750104

Change-Id: I0400689190d9b8757530e342208c3de61a9b7a31
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-28 20:20:53 +00:00
Priyanka Advani
ee7637c438 Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"
Revert submission 26593083-lassen_pps

Reason for revert: Culprit for test breakages in b/331680556. Will be verifying through ABTD for confirmation and before submitting the revert.

Bug: b/331680556
Reverted changes: /q/submissionid:26593083-lassen_pps

Change-Id: I8d9f5b6dcf799c428f9689949a3c6989d2ac07a0
2024-03-28 19:53:27 +00:00
mikeyuewang
2c9701677c Move the sysfs_modem_state context defination to the gs-common
Bug: 331202327

Change-Id: I417b953db2c2deeac25bcc8f1b0675fa41419242
2024-03-27 17:40:05 +00:00
Android Build Coastguard Worker
29ae8a15ab Snap for 11623990 from af52e82460 to 24Q3-release
Change-Id: Ib9572cf2b0e5ea4c9ff0e0a5c09b73c548a3dd81
2024-03-25 23:01:31 +00:00
Cheng Chang
af52e82460 sepolicy: Allow PixelGnss to connect to Chre HAL am: d64a87cc93
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/26627527

Change-Id: I7c49ac3ada3573f458ccaae099e8eeaec19fecde
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-25 13:09:33 +00:00
Cheng Chang
d64a87cc93 sepolicy: Allow PixelGnss to connect to Chre HAL
avc:  denied  { call } for  scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0

Bug: 316227249
Test: Verify PixelGnss HAL can connect to Chre HAL.
Change-Id: Ia957163eee7c6db726087ed16a2512e1d5cdf556
2024-03-25 06:58:40 +00:00
Ken Yang
6df3cdacbb [automerger skipped] selinux: label the I2C 0x36 0x69 wakeup node am: 920e2cc3d6 am: dc3ab3174d -s ours
am skip reason: Merged-In I6971dfcbc9bf0eeae5620eb280a5af2f623be54e with SHA-1 bbf47c75cf is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25868963

Change-Id: Iced90f01e976651ab75bc5cecd04b8b0572d61a9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-12 09:22:20 +00:00
Ken Yang
dc3ab3174d selinux: label the I2C 0x36 0x69 wakeup node am: 920e2cc3d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25868963

Change-Id: I9104fe04cf35962a55a2df4ab04d4e3fc1cda7e0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-12 08:34:28 +00:00
Ken Yang
026df07b9a [automerger skipped] selinux: label the I2C 0x36 0x69 wakeup node am: 4175f1cfde am: 04627ae9c5 -s ours
am skip reason: Merged-In I05f0d910d684854929205f001041755dfa7648aa with SHA-1 70054ef36c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25859540

Change-Id: I2df1b2cf40311f5ced8775f16f724946d0d3d3b0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-12 05:36:16 +00:00
Ken Yang
04627ae9c5 selinux: label the I2C 0x36 0x69 wakeup node am: 4175f1cfde
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25859540

Change-Id: Ib6898a028613d21ee91680425c3433e7d1185ba6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-12 04:31:05 +00:00
Ken Yang
920e2cc3d6 selinux: label the I2C 0x36 0x69 wakeup node
1. add the additional 10 and 11 I2C address
2. correct the bus id from 10c90000 to 10cb0000

Bug: 316561238
Change-Id: I6971dfcbc9bf0eeae5620eb280a5af2f623be54e
Merged-In: I6971dfcbc9bf0eeae5620eb280a5af2f623be54e
Signed-off-by: Ken Yang <yangken@google.com>
2024-01-12 04:24:40 +00:00
Ken Yang
bbf47c75cf selinux: label the I2C 0x36 0x69 wakeup node
1. add the additional 10 I2C address
2. correct the bus id from 10c90000 to 10cb0000

Bug: 316561238
Signed-off-by: Ken Yang <yangken@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:5a7f8ab5ac5272bcabd850c39b30cce679001932)
Merged-In: I6971dfcbc9bf0eeae5620eb280a5af2f623be54e
Change-Id: I6971dfcbc9bf0eeae5620eb280a5af2f623be54e
2024-01-12 03:15:28 +00:00
Ken Yang
4175f1cfde selinux: label the I2C 0x36 0x69 wakeup node
Bug: 316561238
Change-Id: I05f0d910d684854929205f001041755dfa7648aa
Merged-In: I05f0d910d684854929205f001041755dfa7648aa
Signed-off-by: Ken Yang <yangken@google.com>
2024-01-11 04:17:34 +00:00
Ken Yang
70054ef36c selinux: label the I2C 0x36 0x69 wakeup node
Bug: 316561238
Signed-off-by: Ken Yang <yangken@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:d4feec6a39a07d5d43233a8858a675b1359b448d)
Merged-In: I05f0d910d684854929205f001041755dfa7648aa
Change-Id: I05f0d910d684854929205f001041755dfa7648aa
2024-01-11 04:15:46 +00:00
Jack Wu
2597333531 [automerger skipped] SELinux: fix avc denials am: a8cd93be09 am: 912c13b4b7 -s ours
am skip reason: Merged-In Ib0b8383158aa5ef987ca03a6951bab378c48dbd4 with SHA-1 c2ff1a167b is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25755027

Change-Id: I69cca8e42ceacfcf94d8e467309c96236e6ee8b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-29 03:49:55 +00:00
Jack Wu
912c13b4b7 SELinux: fix avc denials am: a8cd93be09
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25755027

Change-Id: I90e1a9dcef4a9dbb1d0207145dd013259aa218a5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-29 03:19:58 +00:00
Jack Wu
a8cd93be09 SELinux: fix avc denials
Fix the avc denials for sysfs_wakeup

bug: 317314288
Test: no avc denials for sysfs_wakeup
Change-Id: Ib0b8383158aa5ef987ca03a6951bab378c48dbd4
Merged-In: Ib0b8383158aa5ef987ca03a6951bab378c48dbd4
Signed-off-by: Jack Wu <wjack@google.com>
2023-12-27 07:43:44 +00:00
Jack Wu
c2ff1a167b SELinux: fix avc denials
Fix the avc denials for sysfs_wakeup

bug: 317314288
Test: no avc denials for sysfs_wakeup
Change-Id: Ib0b8383158aa5ef987ca03a6951bab378c48dbd4
Signed-off-by: Jack Wu <wjack@google.com>
2023-12-27 15:41:08 +08:00
Jack Wu
22e231b72d SELinux: fix avc denials
Fix the avc denials for sysfs_wakeup

bug: 317314288
Test: no avc denials for sysfs_wakeup
Change-Id: Ib3eaee7216b91e8e58a71e017bdcddca8c43a801
Signed-off-by: Jack Wu <wjack@google.com>
2023-12-26 09:34:59 +00:00
Treehugger Robot
3158e2d46e Merge "Revert "allow vendor init to access percpu_pagelist_high_fraction"" into main 2023-11-27 01:45:54 +00:00
Cheng Chang
0da0d6c1af sepolicy: allow hal_gnss_default call am: f438970a99 am: 0684e61ccb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25446022

Change-Id: Ia4a149652ee4966ceb7d738466a66e6205796db5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-24 12:29:44 +00:00
Cheng Chang
0684e61ccb sepolicy: allow hal_gnss_default call am: f438970a99
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25446022

Change-Id: I7ebb825c62673fc0e8e74c30a6cfddfb25d4b6a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-24 11:58:18 +00:00
Cheng Chang
f438970a99 sepolicy: allow hal_gnss_default call
avc:  denied  { call } for  comm="servicemanager"
scontext=u:r:servicemanager:s0 tcontext=u:r:hal_gnss_default:s0
tclass=binder permissive=0

Bug: 312647680
Test: verify no avc denied with patch
Change-Id: If9b02634dd34ec5ca5300f4d110725b99345df5e
2023-11-23 00:58:43 +00:00
Martin Liu
0470d3d03c Revert "allow vendor init to access percpu_pagelist_high_fraction"
This reverts commit 83d9e5bd31.

Bug: 309409009
Reason for revert: move to common pixel policy ag/25305147

Change-Id: Ia1f40f02dd6ce8575356a578dc6b14094428a1d7
2023-11-21 09:33:28 +00:00
Darren Hsu
846c562d3e sepolicy: allow hal_power_stats to read GPS files am: adb42e4290 am: f688bcc60e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/24677347

Change-Id: I12125ee29d4a9fd6aeb3e1729db5d8738b28ba73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 09:05:04 +00:00
Darren Hsu
f688bcc60e sepolicy: allow hal_power_stats to read GPS files am: adb42e4290
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/24677347

Change-Id: Ib20c62afe9107e5765c9198ff33d9d09f68380dd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 08:34:58 +00:00
Treehugger Robot
0eaa882878 Merge "allow vendor init to access percpu_pagelist_high_fraction" into main 2023-11-10 03:14:25 +00:00
Martin Liu
83d9e5bd31 allow vendor init to access percpu_pagelist_high_fraction
Bug: 309409009
Test: boot
Change-Id: Ie5b10d435f043da635b4de8d50ff01f6f221c119
Signed-off-by: Martin Liu <liumartin@google.com>
2023-11-10 10:18:28 +08:00
Darren Hsu
adb42e4290 sepolicy: allow hal_power_stats to read GPS files
avc:  denied  { search } for  name="gps" dev="dm-46" ino=373
scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:vendor_gps_file:s0 tclass=dir permissive=0

Bug: 289764363
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Ie362e06c51c87c34c11551d3b13278d21c7222fc
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-11-08 02:35:50 +00:00
Treehugger Robot
e707e07235 [automerger skipped] Merge "[DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction" into udc-qpr-dev am: 467d378ae4 am: a59caa830d -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883

Change-Id: Ie3bc110da3ed45e1aba98670406b4b717d225ee0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 02:20:35 +00:00
Martin Liu
d9e7a7abc1 [automerger skipped] [DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction am: 3a5a9ab8c0 am: 2d26bdeecd -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883

Change-Id: Ic11867b42b7abffc8415424093243be57297bfe9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 02:20:32 +00:00
Treehugger Robot
a59caa830d Merge "[DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction" into udc-qpr-dev am: 467d378ae4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883

Change-Id: I7fe5af7c9c3e1a750e9f0945b81998ebe1c3b8a7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 01:42:43 +00:00
Martin Liu
2d26bdeecd [DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction am: 3a5a9ab8c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883

Change-Id: I6d9d9aafb6bd3929d5e4bbbbba7f06ce80f5273b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 01:42:40 +00:00
Treehugger Robot
467d378ae4 Merge "[DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction" into udc-qpr-dev 2023-11-08 01:20:26 +00:00
Cheng Chang
8722b4cbe6 gps: Allow hal_gnss_pixel toggle coredump node am: 82ddd40aeb am: a7d7e6d944
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25229055

Change-Id: I18fb493f3c365e6ba14cc88b95a46a135673a840
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-07 10:54:44 +00:00
Cheng Chang
a7d7e6d944 gps: Allow hal_gnss_pixel toggle coredump node am: 82ddd40aeb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25229055

Change-Id: I17ba97826a98760dce40c967065b717d62049f4b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-07 10:16:14 +00:00
Martin Liu
3a5a9ab8c0 [DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction
Bug: 309409009
Test: boot
Change-Id: Iec26ef9650d06f265bf484d66cec0ef4bb365bee
Signed-off-by: Martin Liu <liumartin@google.com>
2023-11-07 15:46:51 +08:00
Cheng Chang
82ddd40aeb gps: Allow hal_gnss_pixel toggle coredump node
Bug: 308527972
Test: b/308527972#comment12
Change-Id: I9060ce551b42a3c1f1482bbe734dec393ff48de5
2023-11-02 23:25:37 +00:00
Treehugger Robot
83e72138ec Merge "gps: allow hal_gnss_default to use coredump node" into udc-qpr-dev am: 09c658415f am: f65707cb65
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25030388

Change-Id: Ie269d04adfdf7d51c7bdc2ab1181c0179d8e09ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 12:57:44 +00:00
Treehugger Robot
f65707cb65 Merge "gps: allow hal_gnss_default to use coredump node" into udc-qpr-dev am: 09c658415f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25030388

Change-Id: I78ea9a897ebbdfc065d73dfe39f7d1ef7e8daee4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 12:24:45 +00:00