Commit graph

28 commits

Author SHA1 Message Date
Sam Dubey
befa27b85e Merge "Revert "Allow selinux for gril to use radio ext aidl"" into udc-qpr-dev 2023-10-04 14:34:18 +00:00
Sam Dubey
31d1e1160b Revert "Allow selinux for gril to use radio ext aidl"
Revert submission 24799507-ak3_ssc_aidl

Reason for revert: Broke next target, b/303392497

Reverted changes: /q/submissionid:24799507-ak3_ssc_aidl

Change-Id: Ib2a84012f953683308b906193e457ef8a479867f
2023-10-04 13:11:40 +00:00
Shinru Han
4f1985f354 Merge "gps: pixel gnss aidl service (sepolicy)" into udc-qpr-dev 2023-10-04 09:06:22 +00:00
Shinru Han
69d9e01e8a gps: pixel gnss aidl service (sepolicy)
avc:  denied  { call } for  scontext=u:r:servicemanager:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0
avc:  denied  { call } for  scontext=u:r:hal_gnss_pixel:s0 tcontext=u:r:hal_gnss_default:s0 tclass=binder permissive=0
avc:  denied  { call } for  scontext=u:r:hal_gnss_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0
avc:  denied  { read } for  name="modem_state" dev="sysfs" ino=66325 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
avc:  denied  { open } for  path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=66325 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
avc:  denied  { getattr } for  path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=66325 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

Bug: 298924540
Test: No avc deny
Change-Id: I77ec1cb171781dd3c671a975a5c049a48d5bcccb
2023-10-03 08:53:15 +00:00
Alan Chen
2d635d58d3 Allow selinux for gril to use radio ext aidl
Test: manual - verified there are no avc denied logs
Bug: 285459428
Change-Id: I38c88d82860f37e34772b786a8940db02dc17ac6
2023-10-03 05:22:32 +00:00
Edwin Tung
76686f69d9 gps: gnss aidl service (sepolicy)
avc:  denied  { read } for  name="u:object_r:vendor_gps_prop:s0" dev="tmpfs" ino=372 scontext=u:r:hal_gnss_default:s0 tcontext=u:object_r:vendor_gps_prop:s0 tclass=file permissive=0

Bug: 295810526
Test: No avc denied
Change-Id: I686cd19143dc58706af8b43a4b87a73e23a43fd3
2023-09-29 11:59:47 +08:00
Edwin Tung
f4405c835b gps: allow vendor_init to set gps debug prop
Bug: 298871633

Test: build pass, check sepolicy
and gps log in bugreport

Change-Id: Ice46d0ae5ddd0b7e7362684917b0b0e7c7183db9
2023-09-05 13:05:47 +08:00
Edwin Tung
10251376c0 gps: remove unused sepolicy
Bug: 246482115
Test: gps works
Change-Id: I43ba2a4dad4034b953ed6608c93a5ff1abe16bd2
2023-08-07 18:10:02 +08:00
Edwin Tung
a648924b14 gps: Add sepolicy for gps
Bug: 294482059
Bug: 294481452
Bug: 294175645

Test: Fix data/vendor/gps avc denied
Change-Id: I3a93b7b8c8e6aff3fbd114fa5bf49ed0f8140258
2023-08-04 17:00:56 +08:00
Edwin Tung
e19e985013 Add sepolicy for gnssd
Bug: 265391808
Test: No avc denied
Change-Id: Ib4645bc0f26ac261c7aae6f1b621303e88e09690
2023-07-17 11:32:31 +08:00
Ken Yang
c5e2845283 SELinux: fix the avc denial
Bug: 289856364
Change-Id: Ib3b1ea0b578f72a422be6f94d94cf8ddf5523ae2
Signed-off-by: Ken Yang <yangken@google.com>
2023-07-05 22:47:38 +00:00
Darren Hsu
566095b9ae sepolicy: allow system_suspend to read gnss sysfs
avc:  denied  { read } for  name="wakeup61" dev="sysfs" ino=65863
scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir
permissive=0 bug=b/288984031

Bug: 288984031
Test: capture a bug report and check there is no
avc denial related to gnss
Change-Id: Iab3e835ae1d3b874eb8acbe18278b5ba1d7cb126
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-06-30 07:23:11 +08:00
Ken Yang
560e733bec SELinux: fix avc denials
Fix the avc denials for sysfs_wakeup

Bug: 288049074
Change-Id: Ibc0d59597373d9ec378c90c7b372876b846b4338
Signed-off-by: Ken Yang <yangken@google.com>
2023-06-29 06:59:30 +00:00
Android Culprit Assistant
8cc94857ed Revert "SELinux: fix avc denials"
This revert was created by Android Culprit Assistant. The culprit was identified in the following culprit search session (http://go/aca-get/ad8a70f9-8859-4f13-b4b4-2a7903a68e85).

Change-Id: Id230b3dc859469b64df2245efd82d3a92cefafe4
2023-06-28 12:59:43 +00:00
Ken Yang
253a4052cc SELinux: fix avc denials
Fix the avc denials fof sysfs_wakeup

Bug: 288049074
Change-Id: I646047b9114884a33cc36035eaa1d1d5d9f99d1c
Signed-off-by: Ken Yang <yangken@google.com>
2023-06-28 02:30:48 +00:00
Colin Ko
1ccc2906ef Allow vendor_init to set camera debug prop am: 1605f391a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/akita-sepolicy/+/23688444

Change-Id: I3cf62a4de16608a6a0f28bad9c95541fc125a98f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-14 08:40:37 +00:00
Colin Ko
1605f391a2 Allow vendor_init to set camera debug prop
Bug: 286780112
Test: build pass, check sepolicy
Change-Id: I67d940524e4d6d14d9d589230dacad1778fa48ab
2023-06-14 06:22:57 +00:00
Edwin Tung
c2b07bc5f6 Add sepolicy for gnssd
Bug: 265391808
Test: build pass
Change-Id: I27d4ebe455967ffd732cea05d7375fbe7be5ab62
2023-06-05 10:43:33 +08:00
Edwin Tung
1be1e15c26 Add sepolicy for gnssd
Bug: 269987831
Test: build pass
Change-Id: I3b852b7c7b7f1813830a9ceca476d658099a2c55
2023-05-09 22:32:49 +08:00
yihsiangpeng
63679bd1c6 Add sepolicy for wireless charging nodes
Bug: 274992535
Change-Id: Iab70a6ca65ee862ecaede7f3b48db1558523aff0
Signed-off-by: yihsiangpeng <yihsiangpeng@google.com>
2023-03-30 15:05:15 +08:00
Ken Tsou
bb41a39452 sepolicy: update WLC i2c path
The wrong path makes healthd unable to get the wireless status, so there
is no wireless charging detection notification on the UI.

Bug: 268556382
Change-Id: I8c99276050a9fca08f5782621452f92c3bb74565
Signed-off-by: Ken Tsou <kentsou@google.com>
2023-02-10 08:48:25 +08:00
Tai Kuo
5c0cf72611 Update vibrator SEPolicy for possible paths
Bug: 264625320
Test: Check sysfs path with ls -Z.
Change-Id: I897c614139a9cf56db298164bc2325d57a8e3949
2023-01-31 17:12:09 +08:00
Ken Yang
79305057ba Merge "WLC: Cleanup the sysfs_wlc policies" 2023-01-13 14:41:30 +00:00
Ken Yang
35abedfc90 WLC: Cleanup the sysfs_wlc policies
Bug: 263830018
Change-Id: Ia0f5b6b15e0dc3fb503b78a1a3db4e3e47e85a41
Signed-off-by: Ken Yang <yangken@google.com>
2023-01-06 19:59:51 +00:00
Edwin Tung
76c4fbe080 gps: add gnssd initial sepolicy
Bug: 261364552
Test: build pass
Change-Id: Ieaf9a12445e4b53d05a707fe0029db4e87ed0b8b
2023-01-05 13:42:36 +08:00
kuanyuhuang
3e2f786213 Add sepolicy for allowing accessing bluetooth uart and lpm related device nodes
set /dev/ttySAC18, /dev/logbuffer_tty18 and /dev/logbuffer_btlpm
device node permission

Bug: 261526478
Test: manual
Change-Id: I1011caef3a00048dca117e7d51e049f6f202278e
2022-12-08 05:50:50 +00:00
Chase Wu
4d6ced5764 cs40l26: Add haptics initial sepolicy
Bug: 258559924
Test: build pass
Change-Id: I8a3de447362bb338562df0416dbef173f95aa362
Signed-off-by: Chase Wu <chasewu@google.com>
2022-11-14 14:42:49 +08:00
Cyan_Hsieh
4ace6462dc Initial device akita sepolicy
Bug: 249656909
Change-Id: I5097753f3daa8bf7c83c4a09f86877d823e01bb7
2022-10-14 17:27:15 +08:00