Commit graph

92 commits

Author SHA1 Message Date
Android Build Coastguard Worker
a676ca8a62 Snap for 11973804 from c402c9159a to 24Q3-release
Change-Id: I12d44abb97886f18bfb4273f1df57ffe9c2e2844
2024-06-15 01:01:46 +00:00
Kiwon Park
c402c9159a Merge "Revert^2 "Allow vendor_init to set setupwizard prop"" into main 2024-06-14 00:06:27 +00:00
Android Build Coastguard Worker
dcf1238e1f Snap for 11967491 from 6c099c76c3 to 24Q3-release
Change-Id: Ie0abf28db9b12d0d766c3e3b7d9fa62e414df94a
2024-06-13 23:01:41 +00:00
Kiwon Park
2eea667ffc Revert^2 "Allow vendor_init to set setupwizard prop"
This reverts commit 28599c27ff.

Reason for revert: Doesn't fix the issues in factory testing

Change-Id: I7a46078fb68b61b608296c1a1c509dd5cedfd1e2
2024-06-13 17:37:24 +00:00
Zheng Pan
6c099c76c3 [automerger skipped] Add DP wakeup file permission am: 4dffc584be -s ours
am skip reason: Merged-In I8f85b79aedc640d22982855a099b2448f93b29a3 with SHA-1 423a870ad4 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/comet-sepolicy/+/27813145

Change-Id: I87a5783c22460cdef54277500ee32ef8182d53aa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-12 23:05:38 +00:00
Zheng Pan
423a870ad4 Add DP wakeup file permission
Bug: 346660264
Test: None
Change-Id: I8f85b79aedc640d22982855a099b2448f93b29a3
2024-06-12 20:34:06 +00:00
Zheng Pan
4dffc584be Add DP wakeup file permission
Bug: 346660264
Test: None
Change-Id: I8f85b79aedc640d22982855a099b2448f93b29a3
Merged-In: I8f85b79aedc640d22982855a099b2448f93b29a3
2024-06-12 20:25:37 +00:00
Android Build Coastguard Worker
c2d32b076b Snap for 11954976 from 2db7d7d7d2 to 24Q3-release
Change-Id: Ic432cfd03939a5b72ec7b542d55d7a874af4ff3e
2024-06-11 23:02:16 +00:00
Kiwon Park
2db7d7d7d2 [automerger skipped] Revert "Allow vendor_init to set setupwizard prop" am: dd5d44c6f6 -s ours
am skip reason: Merged-In I0ee3ff036b5d51b532c59e427ca2b3942b5377ee with SHA-1 28599c27ff is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/comet-sepolicy/+/27717640

Change-Id: Id677de15926f92de09ba680e45218d502686767d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-11 00:27:38 +00:00
Android Build Coastguard Worker
361174a7ad Snap for 11944020 from 28599c27ff to 24Q3-release
Change-Id: Ic193608b1b6f95ba886c7a09159a8520609fa1e2
2024-06-08 01:02:10 +00:00
Kiwon Park
dd5d44c6f6 Revert "Allow vendor_init to set setupwizard prop"
This reverts commit 432fb7298d.

Reason for revert: consolidating it in zumapro sepolicy: ag/27701196
Bug: 336903409
Change-Id: I0ee3ff036b5d51b532c59e427ca2b3942b5377ee
Merged-In: I0ee3ff036b5d51b532c59e427ca2b3942b5377ee
2024-06-07 13:55:10 +00:00
Kiwon Park
28599c27ff Revert "Allow vendor_init to set setupwizard prop"
This reverts commit 432fb7298d.

Reason for revert: consolidating it in zumapro sepolicy: ag/27701196

Bug: 336903409
Change-Id: I0ee3ff036b5d51b532c59e427ca2b3942b5377ee
2024-06-07 13:53:30 +00:00
Android Build Coastguard Worker
617960edfe Snap for 11892734 from 86312b5986 to 24Q3-release
Change-Id: I2762999020f7742d4899e371d4a2a24178619d89
2024-05-27 23:01:48 +00:00
jimsun
86312b5986 Allow vendor_init to set setupwizard prop am: 432fb7298d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/comet-sepolicy/+/27391555

Change-Id: Ib292998cbca4e4eb21e2458e8e786891f407bf37
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-27 06:04:42 +00:00
jimsun
432fb7298d Allow vendor_init to set setupwizard prop
05-16 17:07:33.099472  root   351   351 E init    : Unable to set property 'setupwizard.feature.provisioning_profile_mode' from uid:0 gid:0 pid:352: SELinux permission check failed
05-16 17:07:33.095723  root   352   352 W libc    : Unable to set property "setupwizard.feature.provisioning_profile_mode" to "true": error code: 0x18

Bug: 339918070
Test: manual
Change-Id: Ie1737d7632e11de9750305df4255da55b4a0c426
2024-05-24 13:44:22 +08:00
Android Build Coastguard Worker
1267425586 Snap for 11822896 from b8838772c2 to 24Q3-release
Change-Id: I43521ccf8b74c00f6adacf20943d85bbe8b7f588
2024-05-09 23:06:38 +00:00
Shiyong Li
b8838772c2 Merge "Add sepolicy for power_state node" into 24D1-dev am: f23f1fc4fa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/comet-sepolicy/+/27057167

Change-Id: Ibe8208dd8146eb1147829d55d4fbce296d400718
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-09 05:21:38 +00:00
Shiyong Li
f23f1fc4fa Merge "Add sepolicy for power_state node" into 24D1-dev 2024-05-09 05:16:16 +00:00
Android Build Coastguard Worker
cbb51b158f Snap for 11816316 from 9e42f59b99 to 24Q3-release
Change-Id: I768012bfd9ddbbbefcd1a6c43efae1b9a70d450f
2024-05-08 23:02:00 +00:00
Frank Yu
9e42f59b99 Support register AntennaTuningService. am: 9667a21442
Original change: https://googleplex-android-review.googlesource.com/c/device/google/comet-sepolicy/+/27083958

Change-Id: I9d76bb1dbf98c8874c82a2c0e4ccd27a49ffceae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-08 03:01:28 +00:00
Frank Yu
9667a21442 Support register AntennaTuningService.
The devices uses RadioExt 1.7 should have grilservice_app register antennaTuningCallbacks.

The avc error log:

avc:  denied  { find } for pid=3441 uid=10273 name=com.google.input.algos.gril.IGrilAntennaTuningService/default scontext=u:r:grilservice_app:s0:c17,c257,c512,c768 tcontext=u:object_r:gril_antenna_tuning_service:s0 tclass=service_manager permissive=0

[   22.019071] type=1400 audit(1714448048.956:7): avc:  denied  { call } for  comm="pool-2-thread-1" scontext=u:r:grilservice_app:s0:c254,c256,c512,c768 tcontext=u:r:twoshay:s0 tclass=binder permissive=0 app=com.google.android.grilservice

Test: Manual. Without sepolicy error.
Bug: 321790599
Change-Id: Ie2cecaea493d37cd3009bcf9bab942a62212641f
2024-05-03 07:10:01 +00:00
Android Build Coastguard Worker
5cb4e4556d Snap for 11778614 from 221e792107 to 24Q3-release
Change-Id: I0713ab1e835222a13e57fddb9d2b33612f9e86a1
2024-04-29 23:01:56 +00:00
YiKai Peng
221e792107 selinux: move wlc 0x61 wakeup to zumapro
Bug: 335557235
Test: v2/pixel-health-guard/device-boot-health-check-extra
Change-Id: I1ad5bf17dae71ec5e8b6756a8eadf26878afad22
Signed-off-by: YiKai Peng <kenpeng@google.com>
2024-04-26 13:05:02 +00:00
Kevin Ying
203b4dd470 Add sepolicy for power_state node
Bug: 329703995
Test: manual - used camera
Change-Id: I3764557b98334ec73ba94a691f0cbdbacb5c8400
Signed-off-by: Kevin Ying <kevinying@google.com>
2024-04-24 19:09:45 +00:00
Android Build Coastguard Worker
8595f339cf Snap for 11697857 from 5d55f75794 to 24Q3-release
Change-Id: I3c9c19dd99dd74507cf69245f3819c9b4f5dcc22
2024-04-10 23:01:52 +00:00
Cheng Chang
5d55f75794 sepolicy: Move the gnssif/wakeup to zumapro am: 229a44dbf9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/comet-sepolicy/+/26795569

Change-Id: Id24c2213bfb14a60c6ca99081637202bcc1ba356
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-10 03:47:51 +00:00
Cheng Chang
229a44dbf9 sepolicy: Move the gnssif/wakeup to zumapro
Bug: 329334328
Test: abtd device-boot-health-check-extra under b/329334328.
Test: boot and check the logcat avc.
Change-Id: Ieb02d6232186a3d0ee43b2b6c96b0db7ad4534f9
2024-04-02 09:04:33 +00:00
Android Build Coastguard Worker
263ecf83d3 Snap for 11617975 from 5767edc092 to 24Q3-release
Change-Id: I622c52bbc49086473ec9026c0f951ee0ea52bca9
2024-03-23 01:01:35 +00:00
derickhong
5767edc092 Allow HWC to access display refresh control am: 7cf67c1e9a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/comet-sepolicy/+/26642567

Change-Id: I82410cc0b6667c86809615a53155527b0c383ebd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-22 04:03:41 +00:00
derickhong
7cf67c1e9a Allow HWC to access display refresh control
Bug: 326869289
Test: adb shell dmesg | grep avc ; adb logcat -d | grep avc
Change-Id: I353139e97728486f2a8b6c5f593cddf51adb7804
2024-03-20 07:39:32 +00:00
Android Build Coastguard Worker
9600e38773 Snap for 11533280 from c7eddf0a58 to 24Q3-release
Change-Id: I477387346e3a876d155cbbaa7b2745cfad663306
2024-03-06 00:01:48 +00:00
Mark Chang
c7eddf0a58 Merge "Add device specific entry back." into main 2024-03-05 05:31:46 +00:00
Derick Hong
9a45b19a5d Merge "Allow HWC to access display refresh control" into main 2024-03-05 03:05:10 +00:00
Mark Chang
c65c619458 Add device specific entry back.
Bug: 325422902
Test: Manual, system booted without sepolicy denied error.

Change-Id: I2373f111c9b6abd064a1095b004caae3be525361
Signed-off-by: Mark Chang <changmark@google.com>
2024-03-01 12:45:33 +00:00
Android Build Coastguard Worker
31133d55d2 Snap for 11510413 from d6ab9d280a to 24Q3-release
Change-Id: I22be52b04a40a7ef2104fe7760b6f500665d76a6
2024-02-29 00:02:30 +00:00
Android Build Coastguard Worker
2b1a969fb2 Snap for 11504269 from d3fe6924aa to 24Q3-release
Change-Id: I9f3192ba87cf0bc70046211be0d69634d0c3aed6
2024-02-28 00:02:35 +00:00
Liana Kazanova
d6ab9d280a Revert "Add device specific entry back."
Revert submission 26288713-twoshay-sepolicy-24

Reason for revert: DroidMonitor: Potential culprit for b/327235315 - verifying through ABTD before revert submission. This is part of the standard investigation process, and does not mean your CL will be reverted.

Bug:327235315

Reverted changes: /q/submissionid:26288713-twoshay-sepolicy-24

Change-Id: I651bf3e08f3c97aad8627d4d471a4ee97e3b2d44
2024-02-27 21:20:09 +00:00
derickhong
09458f6fc0 Allow HWC to access display refresh control
Bug: 326869289
Test: adb shell dmesg | grep avc ; adb logcat -d | grep avc
Change-Id: I353139e97728486f2a8b6c5f593cddf51adb7804
2024-02-27 16:19:22 +08:00
Mark Chang
d3fe6924aa Add device specific entry back.
Bug: 325422902
Test: Manual, system booted without sepolicy denied error.
Change-Id: Ife1ceda42146f2021cf15015a25a8bf6f0a754b0
Signed-off-by: Mark Chang <changmark@google.com>
2024-02-19 05:57:21 +00:00
Wayne Lin
13470b8cec gps: refine iGNSS build system - sepolicy
Bug: 318310869
Bug: 315915958
Test: build pass and GPS function works
Change-Id: Ie98482de964c8478f94886cd1494c6362e2c86d9
2024-01-28 23:37:03 +08:00
Darren Hsu
9b03fffd65 sepolicy: label required display paths for hal_power_stats
Bug: 321871758
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Ic7f4271730b851194eaf42d3752c834ae85831bc
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2024-01-25 17:22:47 +08:00
Kai Chang
20aa003baa Merge "fingerprint: Allow fps to access wakeup node" into main 2024-01-12 09:25:50 +00:00
eddielan
6b25e7527c fingerprint: Allow fps to access wakeup node
01-12 08:01:43.652  1852  1852 W android.hardwar: type=1400 audit(0.0:38):
avc:  denied  { write } for  name="wakeup_enable" dev="sysfs" ino=97986
scontext=u:r:hal_fingerprint_capacitance:s0
tcontext=u:object_r:sysfs_wakeup:s0 tclass=file permissive=0

Bug: 319578405
Test: Build pass & check on device
Change-Id: I31380020ac5fe61bb976954d03a9449bbe6c287d
2024-01-12 08:20:52 +00:00
Wilson Sung
52692f5cc7 Label and sort wakeup nodes
Bug: 318032188
Test: make sepolicy
Change-Id: I5477cee657942e1b2eb87f250adba4048c5b7696
2024-01-08 17:06:23 +08:00
Wilson Sung
76a6fad054 Move fingerprint to each device sepolicy folder
Bug: 312322769
Test: make sepolicy
Change-Id: I5f0032655f97e01cd18fdabb9d909e9e2295744d
2023-12-19 03:51:26 +00:00
sashwinbalaji
05f2f5195b sepolicy: thermal: add init_thermal policies
Bug: 315096213
Test: Build and verify for avc errors
Change-Id: Idf032c9ce1544253cebd82fda24bcd4582c95111
2023-12-18 19:28:13 +08:00
Vincent Wang
6366ddba28 Add SEPoilcy for comet to access FingerprintHal from Settings
Bug: 315927727
Test: Check SettingsGoogle could access FPHal via FingerprintExt
Change-Id: I462cb3847e424c1ccb7e8f06c2449b25308db96b
2023-12-13 09:55:31 +00:00
Kamal Shafi
b66a9c1e64 sepolicy: migrate zumapro devices sepolicy
- Move device specific sepolicy

Bug: 312869113
Test: build
Change-Id: I6f9228ba62d18cbcb6b8618b3ff7078b50daabbe
2023-11-27 06:24:33 +00:00
Treehugger Robot
bb0a18f99c Merge "comet-sepolicy: Enable Lbe atc on secondary display" into main 2023-11-20 06:05:05 +00:00
Joe Huang
ca8e1ec77b Merge "Add sepolicy rules for gnss" into main 2023-11-03 02:39:12 +00:00