Cheng Chang
ab38b9e239
gps: Merge akita pixel-gnss sepolicy to gs-common folder
...
Bug: 332204989
Test: Health boot check at b/332204989#comment36
Test: Verification test at b/332204989.
Change-Id: Id8801b90a2b5927329a7dc558f0bc29c2d4609ed
2024-05-07 09:44:09 +00:00
Priyanka Advani
b0910805c0
Revert "sepolicy: Allow PixelGnss to connect to Chre HAL" am: 413d3b1d43
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/27192522
Change-Id: I2b4fed1f5770c556ed01fccb82ddc552ff0aa732
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-02 19:54:21 +00:00
Priyanka Advani
413d3b1d43
Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"
...
Revert submission 27007604-pps_topic
Reason for revert: Droid-monitor created revert due to breakages in b/338407263. Will be verifying through ABTD before submission.
Reverted changes: /q/submissionid:27007604-pps_topic
Change-Id: Ice972552ad50f7af883dc0491426797da78f8918
2024-05-02 16:28:13 +00:00
Cheng Chang
e1e2dc3141
sepolicy: Allow PixelGnss to connect to Chre HAL am: d1f3ee501f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/26784208
Change-Id: I68f567426d974c86ae3aadf9379152f992d5cef3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-02 13:36:24 +00:00
Cheng Chang
d1f3ee501f
sepolicy: Allow PixelGnss to connect to Chre HAL
...
avc: denied { call } for scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0
Bug: 330120749
Test: Verify PixelGnss HAL can connect to Chre HAL.
Test: Function test verification b/330120749.
Test: b/330120749#comment24 health boot check.
Test: b/330120749#comment25 health boot check.
Change-Id: Ida89c542e8dc4ce29011357255385a0661962e16
2024-04-25 07:49:38 +00:00
Mike Wang
f99c7509d8
Merge "Move the sysfs_modem_state context defination to the gs-common" into main
2024-03-29 15:16:19 +00:00
Priyanka Advani
7a0ed6e8ea
Revert "sepolicy: Allow PixelGnss to connect to Chre HAL" am: ee7637c438
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/26750104
Change-Id: I0400689190d9b8757530e342208c3de61a9b7a31
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-28 20:20:53 +00:00
Priyanka Advani
ee7637c438
Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"
...
Revert submission 26593083-lassen_pps
Reason for revert: Culprit for test breakages in b/331680556. Will be verifying through ABTD for confirmation and before submitting the revert.
Bug: b/331680556
Reverted changes: /q/submissionid:26593083-lassen_pps
Change-Id: I8d9f5b6dcf799c428f9689949a3c6989d2ac07a0
2024-03-28 19:53:27 +00:00
mikeyuewang
2c9701677c
Move the sysfs_modem_state context defination to the gs-common
...
Bug: 331202327
Change-Id: I417b953db2c2deeac25bcc8f1b0675fa41419242
2024-03-27 17:40:05 +00:00
Cheng Chang
af52e82460
sepolicy: Allow PixelGnss to connect to Chre HAL am: d64a87cc93
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/26627527
Change-Id: I7c49ac3ada3573f458ccaae099e8eeaec19fecde
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-25 13:09:33 +00:00
Cheng Chang
d64a87cc93
sepolicy: Allow PixelGnss to connect to Chre HAL
...
avc: denied { call } for scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0
Bug: 316227249
Test: Verify PixelGnss HAL can connect to Chre HAL.
Change-Id: Ia957163eee7c6db726087ed16a2512e1d5cdf556
2024-03-25 06:58:40 +00:00
Ken Yang
6df3cdacbb
[automerger skipped] selinux: label the I2C 0x36 0x69 wakeup node am: 920e2cc3d6
am: dc3ab3174d
-s ours
...
am skip reason: Merged-In I6971dfcbc9bf0eeae5620eb280a5af2f623be54e with SHA-1 bbf47c75cf
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25868963
Change-Id: Iced90f01e976651ab75bc5cecd04b8b0572d61a9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-12 09:22:20 +00:00
Ken Yang
dc3ab3174d
selinux: label the I2C 0x36 0x69 wakeup node am: 920e2cc3d6
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25868963
Change-Id: I9104fe04cf35962a55a2df4ab04d4e3fc1cda7e0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-12 08:34:28 +00:00
Ken Yang
026df07b9a
[automerger skipped] selinux: label the I2C 0x36 0x69 wakeup node am: 4175f1cfde
am: 04627ae9c5
-s ours
...
am skip reason: Merged-In I05f0d910d684854929205f001041755dfa7648aa with SHA-1 70054ef36c
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25859540
Change-Id: I2df1b2cf40311f5ced8775f16f724946d0d3d3b0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-12 05:36:16 +00:00
Ken Yang
04627ae9c5
selinux: label the I2C 0x36 0x69 wakeup node am: 4175f1cfde
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25859540
Change-Id: Ib6898a028613d21ee91680425c3433e7d1185ba6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-12 04:31:05 +00:00
Ken Yang
920e2cc3d6
selinux: label the I2C 0x36 0x69 wakeup node
...
1. add the additional 10 and 11 I2C address
2. correct the bus id from 10c90000 to 10cb0000
Bug: 316561238
Change-Id: I6971dfcbc9bf0eeae5620eb280a5af2f623be54e
Merged-In: I6971dfcbc9bf0eeae5620eb280a5af2f623be54e
Signed-off-by: Ken Yang <yangken@google.com>
2024-01-12 04:24:40 +00:00
Ken Yang
bbf47c75cf
selinux: label the I2C 0x36 0x69 wakeup node
...
1. add the additional 10 I2C address
2. correct the bus id from 10c90000 to 10cb0000
Bug: 316561238
Signed-off-by: Ken Yang <yangken@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:5a7f8ab5ac5272bcabd850c39b30cce679001932 )
Merged-In: I6971dfcbc9bf0eeae5620eb280a5af2f623be54e
Change-Id: I6971dfcbc9bf0eeae5620eb280a5af2f623be54e
2024-01-12 03:15:28 +00:00
Ken Yang
4175f1cfde
selinux: label the I2C 0x36 0x69 wakeup node
...
Bug: 316561238
Change-Id: I05f0d910d684854929205f001041755dfa7648aa
Merged-In: I05f0d910d684854929205f001041755dfa7648aa
Signed-off-by: Ken Yang <yangken@google.com>
2024-01-11 04:17:34 +00:00
Ken Yang
70054ef36c
selinux: label the I2C 0x36 0x69 wakeup node
...
Bug: 316561238
Signed-off-by: Ken Yang <yangken@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:d4feec6a39a07d5d43233a8858a675b1359b448d )
Merged-In: I05f0d910d684854929205f001041755dfa7648aa
Change-Id: I05f0d910d684854929205f001041755dfa7648aa
2024-01-11 04:15:46 +00:00
Jack Wu
2597333531
[automerger skipped] SELinux: fix avc denials am: a8cd93be09
am: 912c13b4b7
-s ours
...
am skip reason: Merged-In Ib0b8383158aa5ef987ca03a6951bab378c48dbd4 with SHA-1 c2ff1a167b
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25755027
Change-Id: I69cca8e42ceacfcf94d8e467309c96236e6ee8b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-29 03:49:55 +00:00
Jack Wu
912c13b4b7
SELinux: fix avc denials am: a8cd93be09
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25755027
Change-Id: I90e1a9dcef4a9dbb1d0207145dd013259aa218a5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-29 03:19:58 +00:00
Jack Wu
a8cd93be09
SELinux: fix avc denials
...
Fix the avc denials for sysfs_wakeup
bug: 317314288
Test: no avc denials for sysfs_wakeup
Change-Id: Ib0b8383158aa5ef987ca03a6951bab378c48dbd4
Merged-In: Ib0b8383158aa5ef987ca03a6951bab378c48dbd4
Signed-off-by: Jack Wu <wjack@google.com>
2023-12-27 07:43:44 +00:00
Jack Wu
c2ff1a167b
SELinux: fix avc denials
...
Fix the avc denials for sysfs_wakeup
bug: 317314288
Test: no avc denials for sysfs_wakeup
Change-Id: Ib0b8383158aa5ef987ca03a6951bab378c48dbd4
Signed-off-by: Jack Wu <wjack@google.com>
2023-12-27 15:41:08 +08:00
Jack Wu
22e231b72d
SELinux: fix avc denials
...
Fix the avc denials for sysfs_wakeup
bug: 317314288
Test: no avc denials for sysfs_wakeup
Change-Id: Ib3eaee7216b91e8e58a71e017bdcddca8c43a801
Signed-off-by: Jack Wu <wjack@google.com>
2023-12-26 09:34:59 +00:00
Treehugger Robot
3158e2d46e
Merge "Revert "allow vendor init to access percpu_pagelist_high_fraction"" into main
2023-11-27 01:45:54 +00:00
Cheng Chang
0da0d6c1af
sepolicy: allow hal_gnss_default call am: f438970a99
am: 0684e61ccb
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25446022
Change-Id: Ia4a149652ee4966ceb7d738466a66e6205796db5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-24 12:29:44 +00:00
Cheng Chang
0684e61ccb
sepolicy: allow hal_gnss_default call am: f438970a99
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25446022
Change-Id: I7ebb825c62673fc0e8e74c30a6cfddfb25d4b6a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-24 11:58:18 +00:00
Cheng Chang
f438970a99
sepolicy: allow hal_gnss_default call
...
avc: denied { call } for comm="servicemanager"
scontext=u:r:servicemanager:s0 tcontext=u:r:hal_gnss_default:s0
tclass=binder permissive=0
Bug: 312647680
Test: verify no avc denied with patch
Change-Id: If9b02634dd34ec5ca5300f4d110725b99345df5e
2023-11-23 00:58:43 +00:00
Martin Liu
0470d3d03c
Revert "allow vendor init to access percpu_pagelist_high_fraction"
...
This reverts commit 83d9e5bd31
.
Bug: 309409009
Reason for revert: move to common pixel policy ag/25305147
Change-Id: Ia1f40f02dd6ce8575356a578dc6b14094428a1d7
2023-11-21 09:33:28 +00:00
Darren Hsu
846c562d3e
sepolicy: allow hal_power_stats to read GPS files am: adb42e4290
am: f688bcc60e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/24677347
Change-Id: I12125ee29d4a9fd6aeb3e1729db5d8738b28ba73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 09:05:04 +00:00
Darren Hsu
f688bcc60e
sepolicy: allow hal_power_stats to read GPS files am: adb42e4290
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/24677347
Change-Id: Ib20c62afe9107e5765c9198ff33d9d09f68380dd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 08:34:58 +00:00
Treehugger Robot
0eaa882878
Merge "allow vendor init to access percpu_pagelist_high_fraction" into main
2023-11-10 03:14:25 +00:00
Martin Liu
83d9e5bd31
allow vendor init to access percpu_pagelist_high_fraction
...
Bug: 309409009
Test: boot
Change-Id: Ie5b10d435f043da635b4de8d50ff01f6f221c119
Signed-off-by: Martin Liu <liumartin@google.com>
2023-11-10 10:18:28 +08:00
Darren Hsu
adb42e4290
sepolicy: allow hal_power_stats to read GPS files
...
avc: denied { search } for name="gps" dev="dm-46" ino=373
scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:vendor_gps_file:s0 tclass=dir permissive=0
Bug: 289764363
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Ie362e06c51c87c34c11551d3b13278d21c7222fc
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-11-08 02:35:50 +00:00
Treehugger Robot
e707e07235
[automerger skipped] Merge "[DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction" into udc-qpr-dev am: 467d378ae4
am: a59caa830d
-s ours
...
am skip reason: subject contains skip directive
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883
Change-Id: Ie3bc110da3ed45e1aba98670406b4b717d225ee0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 02:20:35 +00:00
Martin Liu
d9e7a7abc1
[automerger skipped] [DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction am: 3a5a9ab8c0
am: 2d26bdeecd
-s ours
...
am skip reason: subject contains skip directive
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883
Change-Id: Ic11867b42b7abffc8415424093243be57297bfe9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 02:20:32 +00:00
Treehugger Robot
a59caa830d
Merge "[DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction" into udc-qpr-dev am: 467d378ae4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883
Change-Id: I7fe5af7c9c3e1a750e9f0945b81998ebe1c3b8a7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 01:42:43 +00:00
Martin Liu
2d26bdeecd
[DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction am: 3a5a9ab8c0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883
Change-Id: I6d9d9aafb6bd3929d5e4bbbbba7f06ce80f5273b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 01:42:40 +00:00
Treehugger Robot
467d378ae4
Merge "[DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction" into udc-qpr-dev
2023-11-08 01:20:26 +00:00
Cheng Chang
8722b4cbe6
gps: Allow hal_gnss_pixel toggle coredump node am: 82ddd40aeb
am: a7d7e6d944
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25229055
Change-Id: I18fb493f3c365e6ba14cc88b95a46a135673a840
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-07 10:54:44 +00:00
Cheng Chang
a7d7e6d944
gps: Allow hal_gnss_pixel toggle coredump node am: 82ddd40aeb
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25229055
Change-Id: I17ba97826a98760dce40c967065b717d62049f4b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-07 10:16:14 +00:00
Martin Liu
3a5a9ab8c0
[DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction
...
Bug: 309409009
Test: boot
Change-Id: Iec26ef9650d06f265bf484d66cec0ef4bb365bee
Signed-off-by: Martin Liu <liumartin@google.com>
2023-11-07 15:46:51 +08:00
Cheng Chang
82ddd40aeb
gps: Allow hal_gnss_pixel toggle coredump node
...
Bug: 308527972
Test: b/308527972#comment12
Change-Id: I9060ce551b42a3c1f1482bbe734dec393ff48de5
2023-11-02 23:25:37 +00:00
Treehugger Robot
83e72138ec
Merge "gps: allow hal_gnss_default to use coredump node" into udc-qpr-dev am: 09c658415f
am: f65707cb65
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25030388
Change-Id: Ie269d04adfdf7d51c7bdc2ab1181c0179d8e09ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 12:57:44 +00:00
Treehugger Robot
f65707cb65
Merge "gps: allow hal_gnss_default to use coredump node" into udc-qpr-dev am: 09c658415f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25030388
Change-Id: I78ea9a897ebbdfc065d73dfe39f7d1ef7e8daee4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 12:24:45 +00:00
Treehugger Robot
09c658415f
Merge "gps: allow hal_gnss_default to use coredump node" into udc-qpr-dev
2023-10-31 12:00:06 +00:00
Cheng Chang
41202d39da
gps: allow hal_gnss_default to use coredump node
...
Bug: 307461066
Test: b/307461066 verified the SIGABRT/SIGSEGV signal
Test: b/307461066 verification test
Change-Id: I46aa1450cb42c5e7e3d5a01dabae499f2af46b26
2023-10-25 08:04:44 +00:00
Avinash Malipatil
07c53a3298
SEPolicy change to allow ImsMedia to set priority of audio threads. am: 79c86953ca
am: be2cac8910
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25123539
Change-Id: I7a18fbc155d977136c23036217e9e354dd470223
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-25 03:21:13 +00:00
Avinash Malipatil
be2cac8910
SEPolicy change to allow ImsMedia to set priority of audio threads. am: 79c86953ca
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25123539
Change-Id: Ie003d2d620faa0fac18b2971c8539ba2dbd1c8ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-25 02:53:37 +00:00
Avinash Malipatil
79c86953ca
SEPolicy change to allow ImsMedia to set priority of audio threads.
...
Setting real-time thread priority for audio threads is a must to handle voice stream during vowifi calls.
AVC Error: auditd : avc: denied { find } for pid=9346 uid=1001 name=scheduling_policy scontext=u:r:radio:s0 tcontext=u:object_r:scheduling_policy_service:s0 tclass=service_manager permissive=0
Bug: 306298801
Test: adb shell 'ps -Tl -p '
Change-Id: I69742ae8c5f1017fc45e24c417fc6e1875fe3e14
2023-10-23 14:48:48 +00:00