Commit graph

143 commits

Author SHA1 Message Date
Ken Yang
bbf47c75cf selinux: label the I2C 0x36 0x69 wakeup node
1. add the additional 10 I2C address
2. correct the bus id from 10c90000 to 10cb0000

Bug: 316561238
Signed-off-by: Ken Yang <yangken@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:5a7f8ab5ac5272bcabd850c39b30cce679001932)
Merged-In: I6971dfcbc9bf0eeae5620eb280a5af2f623be54e
Change-Id: I6971dfcbc9bf0eeae5620eb280a5af2f623be54e
2024-01-12 03:15:28 +00:00
Ken Yang
70054ef36c selinux: label the I2C 0x36 0x69 wakeup node
Bug: 316561238
Signed-off-by: Ken Yang <yangken@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:d4feec6a39a07d5d43233a8858a675b1359b448d)
Merged-In: I05f0d910d684854929205f001041755dfa7648aa
Change-Id: I05f0d910d684854929205f001041755dfa7648aa
2024-01-11 04:15:46 +00:00
Jack Wu
2597333531 [automerger skipped] SELinux: fix avc denials am: a8cd93be09 am: 912c13b4b7 -s ours
am skip reason: Merged-In Ib0b8383158aa5ef987ca03a6951bab378c48dbd4 with SHA-1 c2ff1a167b is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25755027

Change-Id: I69cca8e42ceacfcf94d8e467309c96236e6ee8b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-29 03:49:55 +00:00
Jack Wu
912c13b4b7 SELinux: fix avc denials am: a8cd93be09
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25755027

Change-Id: I90e1a9dcef4a9dbb1d0207145dd013259aa218a5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-29 03:19:58 +00:00
Jack Wu
a8cd93be09 SELinux: fix avc denials
Fix the avc denials for sysfs_wakeup

bug: 317314288
Test: no avc denials for sysfs_wakeup
Change-Id: Ib0b8383158aa5ef987ca03a6951bab378c48dbd4
Merged-In: Ib0b8383158aa5ef987ca03a6951bab378c48dbd4
Signed-off-by: Jack Wu <wjack@google.com>
2023-12-27 07:43:44 +00:00
Jack Wu
c2ff1a167b SELinux: fix avc denials
Fix the avc denials for sysfs_wakeup

bug: 317314288
Test: no avc denials for sysfs_wakeup
Change-Id: Ib0b8383158aa5ef987ca03a6951bab378c48dbd4
Signed-off-by: Jack Wu <wjack@google.com>
2023-12-27 15:41:08 +08:00
Jack Wu
22e231b72d SELinux: fix avc denials
Fix the avc denials for sysfs_wakeup

bug: 317314288
Test: no avc denials for sysfs_wakeup
Change-Id: Ib3eaee7216b91e8e58a71e017bdcddca8c43a801
Signed-off-by: Jack Wu <wjack@google.com>
2023-12-26 09:34:59 +00:00
Treehugger Robot
3158e2d46e Merge "Revert "allow vendor init to access percpu_pagelist_high_fraction"" into main 2023-11-27 01:45:54 +00:00
Cheng Chang
0da0d6c1af sepolicy: allow hal_gnss_default call am: f438970a99 am: 0684e61ccb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25446022

Change-Id: Ia4a149652ee4966ceb7d738466a66e6205796db5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-24 12:29:44 +00:00
Cheng Chang
0684e61ccb sepolicy: allow hal_gnss_default call am: f438970a99
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25446022

Change-Id: I7ebb825c62673fc0e8e74c30a6cfddfb25d4b6a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-24 11:58:18 +00:00
Cheng Chang
f438970a99 sepolicy: allow hal_gnss_default call
avc:  denied  { call } for  comm="servicemanager"
scontext=u:r:servicemanager:s0 tcontext=u:r:hal_gnss_default:s0
tclass=binder permissive=0

Bug: 312647680
Test: verify no avc denied with patch
Change-Id: If9b02634dd34ec5ca5300f4d110725b99345df5e
2023-11-23 00:58:43 +00:00
Martin Liu
0470d3d03c Revert "allow vendor init to access percpu_pagelist_high_fraction"
This reverts commit 83d9e5bd31.

Bug: 309409009
Reason for revert: move to common pixel policy ag/25305147

Change-Id: Ia1f40f02dd6ce8575356a578dc6b14094428a1d7
2023-11-21 09:33:28 +00:00
Darren Hsu
846c562d3e sepolicy: allow hal_power_stats to read GPS files am: adb42e4290 am: f688bcc60e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/24677347

Change-Id: I12125ee29d4a9fd6aeb3e1729db5d8738b28ba73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 09:05:04 +00:00
Darren Hsu
f688bcc60e sepolicy: allow hal_power_stats to read GPS files am: adb42e4290
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/24677347

Change-Id: Ib20c62afe9107e5765c9198ff33d9d09f68380dd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 08:34:58 +00:00
Treehugger Robot
0eaa882878 Merge "allow vendor init to access percpu_pagelist_high_fraction" into main 2023-11-10 03:14:25 +00:00
Martin Liu
83d9e5bd31 allow vendor init to access percpu_pagelist_high_fraction
Bug: 309409009
Test: boot
Change-Id: Ie5b10d435f043da635b4de8d50ff01f6f221c119
Signed-off-by: Martin Liu <liumartin@google.com>
2023-11-10 10:18:28 +08:00
Darren Hsu
adb42e4290 sepolicy: allow hal_power_stats to read GPS files
avc:  denied  { search } for  name="gps" dev="dm-46" ino=373
scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:vendor_gps_file:s0 tclass=dir permissive=0

Bug: 289764363
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Ie362e06c51c87c34c11551d3b13278d21c7222fc
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-11-08 02:35:50 +00:00
Treehugger Robot
e707e07235 [automerger skipped] Merge "[DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction" into udc-qpr-dev am: 467d378ae4 am: a59caa830d -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883

Change-Id: Ie3bc110da3ed45e1aba98670406b4b717d225ee0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 02:20:35 +00:00
Martin Liu
d9e7a7abc1 [automerger skipped] [DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction am: 3a5a9ab8c0 am: 2d26bdeecd -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883

Change-Id: Ic11867b42b7abffc8415424093243be57297bfe9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 02:20:32 +00:00
Treehugger Robot
a59caa830d Merge "[DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction" into udc-qpr-dev am: 467d378ae4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883

Change-Id: I7fe5af7c9c3e1a750e9f0945b81998ebe1c3b8a7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 01:42:43 +00:00
Martin Liu
2d26bdeecd [DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction am: 3a5a9ab8c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883

Change-Id: I6d9d9aafb6bd3929d5e4bbbbba7f06ce80f5273b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 01:42:40 +00:00
Treehugger Robot
467d378ae4 Merge "[DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction" into udc-qpr-dev 2023-11-08 01:20:26 +00:00
Cheng Chang
8722b4cbe6 gps: Allow hal_gnss_pixel toggle coredump node am: 82ddd40aeb am: a7d7e6d944
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25229055

Change-Id: I18fb493f3c365e6ba14cc88b95a46a135673a840
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-07 10:54:44 +00:00
Cheng Chang
a7d7e6d944 gps: Allow hal_gnss_pixel toggle coredump node am: 82ddd40aeb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25229055

Change-Id: I17ba97826a98760dce40c967065b717d62049f4b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-07 10:16:14 +00:00
Martin Liu
3a5a9ab8c0 [DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction
Bug: 309409009
Test: boot
Change-Id: Iec26ef9650d06f265bf484d66cec0ef4bb365bee
Signed-off-by: Martin Liu <liumartin@google.com>
2023-11-07 15:46:51 +08:00
Cheng Chang
82ddd40aeb gps: Allow hal_gnss_pixel toggle coredump node
Bug: 308527972
Test: b/308527972#comment12
Change-Id: I9060ce551b42a3c1f1482bbe734dec393ff48de5
2023-11-02 23:25:37 +00:00
Treehugger Robot
83e72138ec Merge "gps: allow hal_gnss_default to use coredump node" into udc-qpr-dev am: 09c658415f am: f65707cb65
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25030388

Change-Id: Ie269d04adfdf7d51c7bdc2ab1181c0179d8e09ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 12:57:44 +00:00
Treehugger Robot
f65707cb65 Merge "gps: allow hal_gnss_default to use coredump node" into udc-qpr-dev am: 09c658415f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25030388

Change-Id: I78ea9a897ebbdfc065d73dfe39f7d1ef7e8daee4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 12:24:45 +00:00
Treehugger Robot
09c658415f Merge "gps: allow hal_gnss_default to use coredump node" into udc-qpr-dev 2023-10-31 12:00:06 +00:00
Cheng Chang
41202d39da gps: allow hal_gnss_default to use coredump node
Bug: 307461066
Test: b/307461066 verified the SIGABRT/SIGSEGV signal
Test: b/307461066 verification test
Change-Id: I46aa1450cb42c5e7e3d5a01dabae499f2af46b26
2023-10-25 08:04:44 +00:00
Avinash Malipatil
07c53a3298 SEPolicy change to allow ImsMedia to set priority of audio threads. am: 79c86953ca am: be2cac8910
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25123539

Change-Id: I7a18fbc155d977136c23036217e9e354dd470223
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-25 03:21:13 +00:00
Avinash Malipatil
be2cac8910 SEPolicy change to allow ImsMedia to set priority of audio threads. am: 79c86953ca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25123539

Change-Id: Ie003d2d620faa0fac18b2971c8539ba2dbd1c8ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-25 02:53:37 +00:00
Avinash Malipatil
79c86953ca SEPolicy change to allow ImsMedia to set priority of audio threads.
Setting real-time thread priority for audio threads is a must to handle voice stream during vowifi calls.

AVC Error: auditd  : avc:  denied  { find } for pid=9346 uid=1001 name=scheduling_policy scontext=u:r:radio:s0 tcontext=u:object_r:scheduling_policy_service:s0 tclass=service_manager permissive=0

Bug: 306298801

Test: adb shell 'ps -Tl -p '
Change-Id: I69742ae8c5f1017fc45e24c417fc6e1875fe3e14
2023-10-23 14:48:48 +00:00
Jacky Liu
67550d367a Update sepolicy for new static i2c bus numbers
Bug: 305242309
Test: Boot to home
Change-Id: I0d819246d9e8859a720a711368a1d01100607f65
2023-10-23 14:28:10 +08:00
Ken Yang
2b138648af SELinux: fix wakeup selinux issue
Bug: 305600876
Change-Id: I6335c8a5e16c6fb3287a533c56a78c712c9cbc1b
Signed-off-by: Ken Yang <yangken@google.com>
2023-10-20 12:28:27 +00:00
Ken Yang
60c5f59d49 Revert "SELinux: fix wakeup selinux issue"
This reverts commit 9b6820b26f.

Reason for revert: duplicated SELinux entries in zuma-sepolicy

Change-Id: I059f64483702de033c698e5f21810aba0cb4f3e1
2023-10-20 09:36:35 +00:00
Ken Yang
9b6820b26f SELinux: fix wakeup selinux issue
Bug: 305600876
Change-Id: I4be4254eb511b283a48bd6d561745e920e568ef0
Signed-off-by: Ken Yang <yangken@google.com>
2023-10-20 05:45:16 +00:00
Alan Chen
7f7c1cabeb [automerger skipped] Allow gril to use radio ext aidl am: c723e3e5a2 am: a06f6aec98 -s ours
am skip reason: Merged-In If72630b90eb1f15a832a936cd080604a486cd17f with SHA-1 32e2b620d1 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25109723

Change-Id: Ide00a776de463cbecd670292b88c10d60aa3bd55
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-20 05:21:21 +00:00
Alan Chen
a06f6aec98 Allow gril to use radio ext aidl am: c723e3e5a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25109723

Change-Id: I9a9b218342e459cadd1880f038506627c93a5e7f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-20 04:19:29 +00:00
Alan Chen
c723e3e5a2 Allow gril to use radio ext aidl
These changes are copied from the reverted commit
2d635d58d3 (ag/24847488).

Bug: 285459428
Test: manual - verified there are no avc denied logs
Change-Id: If72630b90eb1f15a832a936cd080604a486cd17f
Merged-In: If72630b90eb1f15a832a936cd080604a486cd17f
2023-10-19 08:32:58 +00:00
Alan Chen
32e2b620d1 Allow gril to use radio ext aidl
These changes are copied from the reverted commit
2d635d58d3 (ag/24847488).

Bug: 285459428
Test: manual - verified there are no avc denied logs
Change-Id: If72630b90eb1f15a832a936cd080604a486cd17f
2023-10-18 03:57:06 +00:00
Shinru Han
f36237cfee gps: Allow vendor_init set gps property am: aeb740e7c4 am: 1cd4799530
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25068816

Change-Id: I126208700ff0dc1e7e9b6e053bdae433c0db9ee8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-18 03:36:34 +00:00
Shinru Han
1cd4799530 gps: Allow vendor_init set gps property am: aeb740e7c4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25068816

Change-Id: I4cf8d9527eaa49386233240965ef886da5c8abab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-18 02:51:55 +00:00
Shinru Han
aeb740e7c4 gps: Allow vendor_init set gps property
W /system/bin/init: type=1107 audit(0.0:4): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc:  denied  { set } for property=persist.vendor.gps.hal.service.name pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_gps_prop:s0 tclass=property_service permissive=0'

Test: gps property is present on user build
Test: atest VtsHalGnssTargetTest on user build
Bug: 305162098
Change-Id: Ic56413182d0d721a1543b3b510e17f39813c7ad3
2023-10-17 08:12:48 +00:00
Wilson Sung
8664ef6d50 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 305600460
Bug: 305600876
Change-Id: I110045274188a16264a90317d208c8b895addcb0
2023-10-16 05:59:40 +00:00
Cheng Chang
f4886a36cc gps: add sepolicy to coredump node am: 1ee114f4d7 am: d42a620d41
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/24918561

Change-Id: I3f6440accd1b4930d89db93fbfe78be164807d5d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-05 16:23:44 +00:00
Cheng Chang
d42a620d41 gps: add sepolicy to coredump node am: 1ee114f4d7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/24918561

Change-Id: Id9c4b2ad71d998d96e46b7d0b459241b2f22b98c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-05 15:51:45 +00:00
Cheng Chang
1ee114f4d7 gps: add sepolicy to coredump node
Bug: 303343788
Test: b/303343788 verified the SIGABRT/SIGSEGV signal
Change-Id: I5587f632d4cbd2d9210e37c08a19981fb9967a80
2023-10-05 02:47:11 +00:00
Sam Dubey
9af43574a6 Merge "Revert "Allow selinux for gril to use radio ext aidl"" into main 2023-10-04 15:41:04 +00:00
Sam Dubey
1a7ca8326d Merge "Revert "Allow selinux for gril to use radio ext aidl"" into udc-qpr-dev am: befa27b85e am: ff4852d13b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/24940170

Change-Id: I1a1e5d6839fe445b84097b5bb7508e9a4d65f948
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-04 15:38:53 +00:00