Commit graph

152 commits

Author SHA1 Message Date
Cheng Chang
d1f3ee501f sepolicy: Allow PixelGnss to connect to Chre HAL
avc:  denied  { call } for  scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0

Bug: 330120749
Test: Verify PixelGnss HAL can connect to Chre HAL.
Test: Function test verification b/330120749.
Test: b/330120749#comment24 health boot check.
Test: b/330120749#comment25 health boot check.
Change-Id: Ida89c542e8dc4ce29011357255385a0661962e16
2024-04-25 07:49:38 +00:00
Priyanka Advani
ee7637c438 Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"
Revert submission 26593083-lassen_pps

Reason for revert: Culprit for test breakages in b/331680556. Will be verifying through ABTD for confirmation and before submitting the revert.

Bug: b/331680556
Reverted changes: /q/submissionid:26593083-lassen_pps

Change-Id: I8d9f5b6dcf799c428f9689949a3c6989d2ac07a0
2024-03-28 19:53:27 +00:00
Cheng Chang
d64a87cc93 sepolicy: Allow PixelGnss to connect to Chre HAL
avc:  denied  { call } for  scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0

Bug: 316227249
Test: Verify PixelGnss HAL can connect to Chre HAL.
Change-Id: Ia957163eee7c6db726087ed16a2512e1d5cdf556
2024-03-25 06:58:40 +00:00
Ken Yang
6df3cdacbb [automerger skipped] selinux: label the I2C 0x36 0x69 wakeup node am: 920e2cc3d6 am: dc3ab3174d -s ours
am skip reason: Merged-In I6971dfcbc9bf0eeae5620eb280a5af2f623be54e with SHA-1 bbf47c75cf is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25868963

Change-Id: Iced90f01e976651ab75bc5cecd04b8b0572d61a9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-12 09:22:20 +00:00
Ken Yang
dc3ab3174d selinux: label the I2C 0x36 0x69 wakeup node am: 920e2cc3d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25868963

Change-Id: I9104fe04cf35962a55a2df4ab04d4e3fc1cda7e0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-12 08:34:28 +00:00
Ken Yang
026df07b9a [automerger skipped] selinux: label the I2C 0x36 0x69 wakeup node am: 4175f1cfde am: 04627ae9c5 -s ours
am skip reason: Merged-In I05f0d910d684854929205f001041755dfa7648aa with SHA-1 70054ef36c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25859540

Change-Id: I2df1b2cf40311f5ced8775f16f724946d0d3d3b0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-12 05:36:16 +00:00
Ken Yang
04627ae9c5 selinux: label the I2C 0x36 0x69 wakeup node am: 4175f1cfde
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25859540

Change-Id: Ib6898a028613d21ee91680425c3433e7d1185ba6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-12 04:31:05 +00:00
Ken Yang
920e2cc3d6 selinux: label the I2C 0x36 0x69 wakeup node
1. add the additional 10 and 11 I2C address
2. correct the bus id from 10c90000 to 10cb0000

Bug: 316561238
Change-Id: I6971dfcbc9bf0eeae5620eb280a5af2f623be54e
Merged-In: I6971dfcbc9bf0eeae5620eb280a5af2f623be54e
Signed-off-by: Ken Yang <yangken@google.com>
2024-01-12 04:24:40 +00:00
Ken Yang
bbf47c75cf selinux: label the I2C 0x36 0x69 wakeup node
1. add the additional 10 I2C address
2. correct the bus id from 10c90000 to 10cb0000

Bug: 316561238
Signed-off-by: Ken Yang <yangken@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:5a7f8ab5ac5272bcabd850c39b30cce679001932)
Merged-In: I6971dfcbc9bf0eeae5620eb280a5af2f623be54e
Change-Id: I6971dfcbc9bf0eeae5620eb280a5af2f623be54e
2024-01-12 03:15:28 +00:00
Ken Yang
4175f1cfde selinux: label the I2C 0x36 0x69 wakeup node
Bug: 316561238
Change-Id: I05f0d910d684854929205f001041755dfa7648aa
Merged-In: I05f0d910d684854929205f001041755dfa7648aa
Signed-off-by: Ken Yang <yangken@google.com>
2024-01-11 04:17:34 +00:00
Ken Yang
70054ef36c selinux: label the I2C 0x36 0x69 wakeup node
Bug: 316561238
Signed-off-by: Ken Yang <yangken@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:d4feec6a39a07d5d43233a8858a675b1359b448d)
Merged-In: I05f0d910d684854929205f001041755dfa7648aa
Change-Id: I05f0d910d684854929205f001041755dfa7648aa
2024-01-11 04:15:46 +00:00
Jack Wu
2597333531 [automerger skipped] SELinux: fix avc denials am: a8cd93be09 am: 912c13b4b7 -s ours
am skip reason: Merged-In Ib0b8383158aa5ef987ca03a6951bab378c48dbd4 with SHA-1 c2ff1a167b is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25755027

Change-Id: I69cca8e42ceacfcf94d8e467309c96236e6ee8b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-29 03:49:55 +00:00
Jack Wu
912c13b4b7 SELinux: fix avc denials am: a8cd93be09
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25755027

Change-Id: I90e1a9dcef4a9dbb1d0207145dd013259aa218a5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-29 03:19:58 +00:00
Jack Wu
a8cd93be09 SELinux: fix avc denials
Fix the avc denials for sysfs_wakeup

bug: 317314288
Test: no avc denials for sysfs_wakeup
Change-Id: Ib0b8383158aa5ef987ca03a6951bab378c48dbd4
Merged-In: Ib0b8383158aa5ef987ca03a6951bab378c48dbd4
Signed-off-by: Jack Wu <wjack@google.com>
2023-12-27 07:43:44 +00:00
Jack Wu
c2ff1a167b SELinux: fix avc denials
Fix the avc denials for sysfs_wakeup

bug: 317314288
Test: no avc denials for sysfs_wakeup
Change-Id: Ib0b8383158aa5ef987ca03a6951bab378c48dbd4
Signed-off-by: Jack Wu <wjack@google.com>
2023-12-27 15:41:08 +08:00
Jack Wu
22e231b72d SELinux: fix avc denials
Fix the avc denials for sysfs_wakeup

bug: 317314288
Test: no avc denials for sysfs_wakeup
Change-Id: Ib3eaee7216b91e8e58a71e017bdcddca8c43a801
Signed-off-by: Jack Wu <wjack@google.com>
2023-12-26 09:34:59 +00:00
Treehugger Robot
3158e2d46e Merge "Revert "allow vendor init to access percpu_pagelist_high_fraction"" into main 2023-11-27 01:45:54 +00:00
Cheng Chang
0da0d6c1af sepolicy: allow hal_gnss_default call am: f438970a99 am: 0684e61ccb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25446022

Change-Id: Ia4a149652ee4966ceb7d738466a66e6205796db5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-24 12:29:44 +00:00
Cheng Chang
0684e61ccb sepolicy: allow hal_gnss_default call am: f438970a99
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25446022

Change-Id: I7ebb825c62673fc0e8e74c30a6cfddfb25d4b6a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-24 11:58:18 +00:00
Cheng Chang
f438970a99 sepolicy: allow hal_gnss_default call
avc:  denied  { call } for  comm="servicemanager"
scontext=u:r:servicemanager:s0 tcontext=u:r:hal_gnss_default:s0
tclass=binder permissive=0

Bug: 312647680
Test: verify no avc denied with patch
Change-Id: If9b02634dd34ec5ca5300f4d110725b99345df5e
2023-11-23 00:58:43 +00:00
Martin Liu
0470d3d03c Revert "allow vendor init to access percpu_pagelist_high_fraction"
This reverts commit 83d9e5bd31.

Bug: 309409009
Reason for revert: move to common pixel policy ag/25305147

Change-Id: Ia1f40f02dd6ce8575356a578dc6b14094428a1d7
2023-11-21 09:33:28 +00:00
Darren Hsu
846c562d3e sepolicy: allow hal_power_stats to read GPS files am: adb42e4290 am: f688bcc60e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/24677347

Change-Id: I12125ee29d4a9fd6aeb3e1729db5d8738b28ba73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 09:05:04 +00:00
Darren Hsu
f688bcc60e sepolicy: allow hal_power_stats to read GPS files am: adb42e4290
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/24677347

Change-Id: Ib20c62afe9107e5765c9198ff33d9d09f68380dd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 08:34:58 +00:00
Treehugger Robot
0eaa882878 Merge "allow vendor init to access percpu_pagelist_high_fraction" into main 2023-11-10 03:14:25 +00:00
Martin Liu
83d9e5bd31 allow vendor init to access percpu_pagelist_high_fraction
Bug: 309409009
Test: boot
Change-Id: Ie5b10d435f043da635b4de8d50ff01f6f221c119
Signed-off-by: Martin Liu <liumartin@google.com>
2023-11-10 10:18:28 +08:00
Darren Hsu
adb42e4290 sepolicy: allow hal_power_stats to read GPS files
avc:  denied  { search } for  name="gps" dev="dm-46" ino=373
scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:vendor_gps_file:s0 tclass=dir permissive=0

Bug: 289764363
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Ie362e06c51c87c34c11551d3b13278d21c7222fc
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-11-08 02:35:50 +00:00
Treehugger Robot
e707e07235 [automerger skipped] Merge "[DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction" into udc-qpr-dev am: 467d378ae4 am: a59caa830d -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883

Change-Id: Ie3bc110da3ed45e1aba98670406b4b717d225ee0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 02:20:35 +00:00
Martin Liu
d9e7a7abc1 [automerger skipped] [DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction am: 3a5a9ab8c0 am: 2d26bdeecd -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883

Change-Id: Ic11867b42b7abffc8415424093243be57297bfe9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 02:20:32 +00:00
Treehugger Robot
a59caa830d Merge "[DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction" into udc-qpr-dev am: 467d378ae4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883

Change-Id: I7fe5af7c9c3e1a750e9f0945b81998ebe1c3b8a7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 01:42:43 +00:00
Martin Liu
2d26bdeecd [DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction am: 3a5a9ab8c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25280883

Change-Id: I6d9d9aafb6bd3929d5e4bbbbba7f06ce80f5273b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-08 01:42:40 +00:00
Treehugger Robot
467d378ae4 Merge "[DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction" into udc-qpr-dev 2023-11-08 01:20:26 +00:00
Cheng Chang
8722b4cbe6 gps: Allow hal_gnss_pixel toggle coredump node am: 82ddd40aeb am: a7d7e6d944
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25229055

Change-Id: I18fb493f3c365e6ba14cc88b95a46a135673a840
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-07 10:54:44 +00:00
Cheng Chang
a7d7e6d944 gps: Allow hal_gnss_pixel toggle coredump node am: 82ddd40aeb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25229055

Change-Id: I17ba97826a98760dce40c967065b717d62049f4b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-07 10:16:14 +00:00
Martin Liu
3a5a9ab8c0 [DO NOT MERGE] allow vendor init to access percpu_pagelist_high_fraction
Bug: 309409009
Test: boot
Change-Id: Iec26ef9650d06f265bf484d66cec0ef4bb365bee
Signed-off-by: Martin Liu <liumartin@google.com>
2023-11-07 15:46:51 +08:00
Cheng Chang
82ddd40aeb gps: Allow hal_gnss_pixel toggle coredump node
Bug: 308527972
Test: b/308527972#comment12
Change-Id: I9060ce551b42a3c1f1482bbe734dec393ff48de5
2023-11-02 23:25:37 +00:00
Treehugger Robot
83e72138ec Merge "gps: allow hal_gnss_default to use coredump node" into udc-qpr-dev am: 09c658415f am: f65707cb65
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25030388

Change-Id: Ie269d04adfdf7d51c7bdc2ab1181c0179d8e09ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 12:57:44 +00:00
Treehugger Robot
f65707cb65 Merge "gps: allow hal_gnss_default to use coredump node" into udc-qpr-dev am: 09c658415f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25030388

Change-Id: I78ea9a897ebbdfc065d73dfe39f7d1ef7e8daee4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 12:24:45 +00:00
Treehugger Robot
09c658415f Merge "gps: allow hal_gnss_default to use coredump node" into udc-qpr-dev 2023-10-31 12:00:06 +00:00
Cheng Chang
41202d39da gps: allow hal_gnss_default to use coredump node
Bug: 307461066
Test: b/307461066 verified the SIGABRT/SIGSEGV signal
Test: b/307461066 verification test
Change-Id: I46aa1450cb42c5e7e3d5a01dabae499f2af46b26
2023-10-25 08:04:44 +00:00
Avinash Malipatil
07c53a3298 SEPolicy change to allow ImsMedia to set priority of audio threads. am: 79c86953ca am: be2cac8910
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25123539

Change-Id: I7a18fbc155d977136c23036217e9e354dd470223
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-25 03:21:13 +00:00
Avinash Malipatil
be2cac8910 SEPolicy change to allow ImsMedia to set priority of audio threads. am: 79c86953ca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25123539

Change-Id: Ie003d2d620faa0fac18b2971c8539ba2dbd1c8ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-25 02:53:37 +00:00
Avinash Malipatil
79c86953ca SEPolicy change to allow ImsMedia to set priority of audio threads.
Setting real-time thread priority for audio threads is a must to handle voice stream during vowifi calls.

AVC Error: auditd  : avc:  denied  { find } for pid=9346 uid=1001 name=scheduling_policy scontext=u:r:radio:s0 tcontext=u:object_r:scheduling_policy_service:s0 tclass=service_manager permissive=0

Bug: 306298801

Test: adb shell 'ps -Tl -p '
Change-Id: I69742ae8c5f1017fc45e24c417fc6e1875fe3e14
2023-10-23 14:48:48 +00:00
Jacky Liu
67550d367a Update sepolicy for new static i2c bus numbers
Bug: 305242309
Test: Boot to home
Change-Id: I0d819246d9e8859a720a711368a1d01100607f65
2023-10-23 14:28:10 +08:00
Ken Yang
2b138648af SELinux: fix wakeup selinux issue
Bug: 305600876
Change-Id: I6335c8a5e16c6fb3287a533c56a78c712c9cbc1b
Signed-off-by: Ken Yang <yangken@google.com>
2023-10-20 12:28:27 +00:00
Ken Yang
60c5f59d49 Revert "SELinux: fix wakeup selinux issue"
This reverts commit 9b6820b26f.

Reason for revert: duplicated SELinux entries in zuma-sepolicy

Change-Id: I059f64483702de033c698e5f21810aba0cb4f3e1
2023-10-20 09:36:35 +00:00
Ken Yang
9b6820b26f SELinux: fix wakeup selinux issue
Bug: 305600876
Change-Id: I4be4254eb511b283a48bd6d561745e920e568ef0
Signed-off-by: Ken Yang <yangken@google.com>
2023-10-20 05:45:16 +00:00
Alan Chen
7f7c1cabeb [automerger skipped] Allow gril to use radio ext aidl am: c723e3e5a2 am: a06f6aec98 -s ours
am skip reason: Merged-In If72630b90eb1f15a832a936cd080604a486cd17f with SHA-1 32e2b620d1 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25109723

Change-Id: Ide00a776de463cbecd670292b88c10d60aa3bd55
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-20 05:21:21 +00:00
Alan Chen
a06f6aec98 Allow gril to use radio ext aidl am: c723e3e5a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/25109723

Change-Id: I9a9b218342e459cadd1880f038506627c93a5e7f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-20 04:19:29 +00:00
Alan Chen
c723e3e5a2 Allow gril to use radio ext aidl
These changes are copied from the reverted commit
2d635d58d3 (ag/24847488).

Bug: 285459428
Test: manual - verified there are no avc denied logs
Change-Id: If72630b90eb1f15a832a936cd080604a486cd17f
Merged-In: If72630b90eb1f15a832a936cd080604a486cd17f
2023-10-19 08:32:58 +00:00
Alan Chen
32e2b620d1 Allow gril to use radio ext aidl
These changes are copied from the reverted commit
2d635d58d3 (ag/24847488).

Bug: 285459428
Test: manual - verified there are no avc denied logs
Change-Id: If72630b90eb1f15a832a936cd080604a486cd17f
2023-10-18 03:57:06 +00:00