Common interfaces & sepolicies for tensor-based Google Pixel devices
Find a file
jonerlin d76dcdca38 add sepolicy rules for bluetooth common hal
10-21 17:44:33.052  8548  8548 W binder:8548_2: type=1400 audit(0.0:181): avc:  denied  { open } for  path="/dev/wbrc" dev="tmpfs" ino=1653 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:wb_coexistence_dev:s0 tclass=chr_file permissive=0
10-21 17:44:33.056  8548  8548 W binder:8548_2: type=1400 audit(0.0:182): avc:  denied  { call } for  scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=0
10-21 14:33:39.544   491   491 E SELinux : avc:  denied  { add } for pid=889 uid=1002 name=vendor.google.bluetooth_ext.IBluetoothCcc/default scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:hal_bluetooth_coexistence_service:s0 tclass=service_manager permissive=0
10-21 14:33:39.547   491   491 E SELinux : avc:  denied  { add } for pid=889 uid=1002 name=vendor.google.bluetooth_ext.IBluetoothExt/default scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:hal_bluetooth_coexistence_service:s0 tclass=service_manager permissive=0
10-21 14:33:39.548   491   491 E SELinux : avc:  denied  { add } for pid=889 uid=1002 name=vendor.google.bluetooth_ext.IBluetoothEwp/default scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:hal_bluetooth_coexistence_service:s0 tclass=service_manager permissive=0
10-21 14:33:39.548   491   491 E SELinux : avc:  denied  { add } for pid=889 uid=1002 name=vendor.google.bluetooth_ext.IBluetoothFinder/default scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:hal_bluetooth_coexistence_service:s0 tclass=service_manager permissive=0
10-21 14:33:39.549   491   491 E SELinux : avc:  denied  { add } for pid=889 uid=1002 name=vendor.google.bluetooth_ext.IBluetoothSar/default scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:hal_bluetooth_coexistence_service:s0 tclass=service_manager permissive=0
10-21 14:33:39.550   491   491 E SELinux : avc:  denied  { add } for pid=889 uid=1002 name=vendor.google.bluetooth_ext.IBTChannelAvoidance/default scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:hal_bluetooth_coexistence_service:s0 tclass=service_manager permissive=0
10-21 14:34:29.557   491   491 E SELinux : avc:  denied  { find } for pid=11758 uid=1002 name=power.stats-vendor scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:hal_power_stats_vendor_service:s0 tclass=service_manager permissive=0
10-21 14:34:29.558   491   491 E SELinux : avc:  denied  { add } for pid=11758 uid=1002 name=vendor.google.bluetooth_ext.IBluetoothExt/default scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:hal_bluetooth_coexistence_service:s0 tclass=service_manager permissive=0
10-21 14:34:29.848 11758 11758 W binder:11758_2: type=1400 audit(0.0:317): avc:  denied  { read write } for  name="wbrc" dev="tmpfs" ino=1654 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:wb_coexistence_dev:s0 tclass=chr_file permissive=0
10-21 14:34:29.948 11758 11758 W binder:11758_2: type=1400 audit(0.0:318): avc:  denied  { read write } for  name="wbrc" dev="tmpfs" ino=1654 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:wb_coexistence_dev:s0 tclass=chr_file permissive=0
10-22 21:43:21.504000  1002   874   874 I auditd  : type=1400 audit(0.0:7): avc:  denied  { search } for  comm="android.hardwar" name="aconfig" dev="sda10" ino=18 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:aconfig_storage_metadata_file:s0 tclass=dir permissive=0
10-22 21:43:21.504000  1002   874   874 W android.hardwar: type=1400 audit(0.0:7): avc:  denied  { search } for  name="aconfig" dev="sda10" ino=18 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:aconfig_storage_metadata_file:s0 tclass=dir permissive=0
10-22 05:51:56.052000  1002   890   890 I auditd  : type=1400 audit(0.0:30): avc:  denied  { read } for  comm="binder:890_2" name="logbuffer_tty18" dev="tmpfs" ino=1297 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=0
10-22 05:51:56.052000  1002   890   890 W binder:890_2: type=1400 audit(0.0:30): avc:  denied  { read } for  name="logbuffer_tty18" dev="tmpfs" ino=1297 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=0
10-22 22:35:30.176   871   871 I binder:871_2: type=1400 audit(0.0:122): avc:  denied  { search } for  name="coredump" dev="dm-52" ino=426 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:sscoredump_vendor_data_coredump_file:s0 tclass=dir permissive=1
10-22 22:35:30.176   871   871 I binder:871_2: type=1400 audit(0.0:123): avc:  denied  { write } for  name="coredump" dev="dm-52" ino=426 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:sscoredump_vendor_data_coredump_file:s0 tclass=dir permissive=1
10-22 22:35:30.176   871   871 I binder:871_2: type=1400 audit(0.0:124): avc:  denied  { add_name } for  name="coredump_bt_2024-10-22_22-35-30.bin" scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:sscoredump_vendor_data_coredump_file:s0 tclass=dir permissive=1
10-22 22:35:30.176   871   871 I binder:871_2: type=1400 audit(0.0:125): avc:  denied  { create } for  name="coredump_bt_2024-10-22_22-35-30.bin" scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:sscoredump_vendor_data_coredump_file:s0 tclass=file permissive=1
10-22 22:35:30.176   871   871 I binder:871_2: type=1400 audit(0.0:126): avc:  denied  { read write open } for  path="/data/vendor/ssrdump/coredump/coredump_bt_2024-10-22_22-35-30.bin" dev="dm-52" ino=18673 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:sscoredump_vendor_data_coredump_file:s0 tclass=file permissive=1
10-22 22:35:30.176   871   871 I binder:871_2: type=1400 audit(0.0:127): avc:  denied  { setattr } for  name="coredump_bt_2024-10-22_22-35-30.bin" dev="dm-52" ino=18673 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:sscoredump_vendor_data_coredump_file:s0 tclass=file permissive=1
10-23 13:34:22.908   873   873 I binder:873_3: type=1400 audit(0.0:5101): avc:  denied  { read } for  name="logbuffer_tty18" dev="tmpfs" ino=1264 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=1
10-23 13:34:22.908   873   873 I binder:873_3: type=1400 audit(0.0:5102): avc:  denied  { open } for  path="/dev/logbuffer_tty18" dev="tmpfs" ino=1264 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=1
10-23 13:34:22.908   873   873 I binder:873_3: type=1400 audit(0.0:5103): avc:  denied  { getattr } for  path="/dev/logbuffer_tty18" dev="tmpfs" ino=1264 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=1
10-23 13:34:22.908   873   873 I binder:873_3: type=1400 audit(0.0:5104): avc:  denied  { ioctl } for  path="/dev/logbuffer_tty18" dev="tmpfs" ino=1264 ioctlcmd=0x5401 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=1
10-23 13:34:22.912   873   873 I binder:873_3: type=1400 audit(0.0:5105): avc:  denied  { read } for  name="ssrdump" dev="dm-52" ino=425 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:sscoredump_vendor_data_crashinfo_file:s0 tclass=dir permissive=1
[  354.876922] type=1400 audit(1729656523.440:124): avc:  denied  { search } for  comm="binder:873_2" name="ssrdump" dev="dm-52" ino=425 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:sscoredump_vendor_data_crashinfo_file:s0 tclass=dir permissive=1
[  354.879606] type=1400 audit(1729656523.444:126): avc:  denied  { write } for  comm="binder:873_2" name="coredump" dev="dm-52" ino=426 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:sscoredump_vendor_data_coredump_file:s0 tclass=dir permissive=1
[  354.879747] type=1400 audit(1729656523.444:127): avc:  denied  { add_name } for  comm="binder:873_2" name="coredump_bt_2024-10-23_12-08-43.bin" scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:sscoredump_vendor_data_coredump_file:s0 tclass=dir permissive=1
[  710.811807] type=1400 audit(1729656879.376:1045): avc:  denied  { getattr } for  comm="dump_modem" path="/data/vendor/ssrdump/coredump" dev="dm-52" ino=426 scontext=u:r:dump_modem:s0 tcontext=u:object_r:sscoredump_vendor_data_coredump_file:s0 tclass=dir permissive=1 bug=b/361725982
[  738.329130] type=1400 audit(1729656906.892:2083): avc:  denied  { read } for  comm="binder:873_3" name="logbuffer_tty18" dev="tmpfs" ino=1264 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=1
[  738.329926] type=1400 audit(1729656906.892:2084): avc:  denied  { open } for  comm="binder:873_3" path="/dev/logbuffer_tty18" dev="tmpfs" ino=1264 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=1
[  738.330266] type=1400 audit(1729656906.892:2085): avc:  denied  { getattr } for  comm="binder:873_3" path="/dev/logbuffer_tty18" dev="tmpfs" ino=1264 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=1
[  738.330724] type=1400 audit(1729656906.892:2086): avc:  denied  { ioctl } for  comm="binder:873_3" path="/dev/logbuffer_tty18" dev="tmpfs" ino=1264 ioctlcmd=0x5401 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=1
[  738.332303] type=1400 audit(1729656906.896:2087): avc:  denied  { read } for  comm="binder:873_3" name="ssrdump" dev="dm-52" ino=425 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:sscoredump_vendor_data_crashinfo_file:s0 tclass=dir permissive=1

Bug: 374695851
Bug: 372146292
Test: build pass, enable/disable Bluetooth and Pair new device, make
bt firmware crash to get the firmware dump file
Flag: EXEMPT, mechanical change.

Change-Id: Ia5b2b8485c53dd677a39268438a9507817908f4f
2024-10-23 09:24:14 +00:00
aoc Fix aocx selinux dumpstate permissions 2024-06-14 15:36:14 -07:00
audio audio: allow set_prop for vendor_audio_prop_restricted 2024-09-12 09:07:45 +00:00
battery_mitigation sepolicy: fix dump_power policy 2024-09-04 16:15:06 +00:00
bcmbt [BT] change # of copy file when crash 2024-07-17 03:23:38 +00:00
betterbug Apply flag RELEASE_PACKAGE_BETTER_BUG 2024-07-16 23:10:34 +00:00
bluetooth add sepolicy rules for bluetooth common hal 2024-10-23 09:24:14 +00:00
bootctrl bootctrl: fixed OOB read in BootControl 2024-08-28 12:44:34 -07:00
camera Use Build-Time flag to choose build from source or use prebuilt 2024-08-13 15:05:46 +00:00
check_current_prebuilt check_current_prebuilt: Symlink current prebuilt folder to android root 2024-09-06 09:35:30 +00:00
chre Allow sensor hal to connect to CHRE HAL 2024-02-07 15:36:08 -08:00
dauntless Move PRODUCT_COPY_FILES from each board>device-vendor.mk here 2024-08-30 04:28:47 +00:00
display Add dump of panel power_mode. 2024-08-26 12:13:48 +00:00
display_logbuffer dumpstate: add logbuffer support for display 2023-12-13 06:12:51 +00:00
edgetpu Add sepolicy for NNAPI HAL to access hal_graphics_allocator_service, 2024-09-09 06:32:45 +00:00
esim Add eSIM directory and disable bootstrap when bootloader is unlocked in user build 2024-08-30 10:28:16 -07:00
euiccpixel_app gs-common: add rules for euiccpixel_app 2024-09-13 14:09:38 +00:00
fingerprint gs-common: add fingerprint dump 2024-06-11 13:35:04 +00:00
gcam_app Add sepolicy for gcam app 2024-09-07 01:16:23 +00:00
gear Create an isolated copy of vendor dumpstate from all devices 2024-05-20 01:59:27 +00:00
gps gps: Allow gnss hal access vendor_gps_prop 2024-08-30 06:05:32 +00:00
gpu Add GPU team owners for mk files am: 1d82070ee9 am: 9747c1bb8d 2024-09-04 16:49:25 +00:00
gril Revert^2 "Allow devices that use HIDL to find AIDL radio_ext_service" 2024-09-16 16:58:16 +00:00
gs_watchdogd Explicitly set user root for the gs_watchdogd service. am: f25cb6895f 2024-08-30 09:29:18 +00:00
gsa dumpstate: gsa: Add GSA logs to dumpstate 2024-09-05 14:24:35 +00:00
gxp Limit maxGxpDebugDumps to 4 2024-05-09 12:33:01 +00:00
gyotaku_app [dump_gyotaku] Add collect odpm logs for dump_gyotaku. 2024-06-07 03:33:43 +00:00
insmod Revert "Add a different implementation of insmod.sh" 2024-07-09 23:46:49 +00:00
led create led dump 2023-02-13 12:48:47 +08:00
mediacodec mediacodec: fix perfetto trace permission 2024-08-28 10:27:52 +00:00
misc_writer Sepolicy: allow vendor_misc_writer to get sota_prop 2023-06-29 20:47:51 +00:00
modem Merge "Revert^2 "Allow devices that use HIDL to find AIDL radio_ext_service"" into main 2024-09-16 21:10:24 +00:00
mte Revert "Enable MTE workaround for b/324412910" 2024-03-20 14:54:04 +00:00
nfc gs-common: nfc: st21nfc: Add rules for android.hardware.nfc-service.st 2024-09-04 06:20:49 +00:00
pcie dumpstate: Collect PCIe link statistics 2023-02-10 09:08:10 -06:00
performance Move compaction_proactiveness to vendor sepolicy 2024-09-01 08:06:04 +00:00
pixel_metrics gs-common: dumpstate: Add RT Runnable stats into bugreport 2023-11-13 17:53:18 +00:00
pixel_ril pixel_ril: make VINTF target level specify by device 2023-05-10 18:43:58 +08:00
pixelsupport Add SEPolicy domain for cavalry app 2024-03-28 09:43:36 +00:00
power Create power folder and align pm_freeze_timeout settings with p22 2024-06-28 23:08:06 +00:00
powerstats powerstats: sort frequencies in descending order 2023-12-25 15:04:50 +08:00
radio Move the sysfs_modem_state from a product folder to gs-common 2024-03-28 21:10:23 +00:00
ramdump_and_coredump Remove unused apps (RamdumpService and SSRestartDetector) from factory build targets. 2024-05-06 19:58:06 +08:00
recorder Recorder: add sepolicy for Google Recorder app 2024-06-04 14:57:11 +08:00
sensors sensors: Support registry dump on DEV device. 2024-07-30 20:08:40 +08:00
sepolicy Export build flag to selinux policy for sysfs_udc fscontext 2024-08-21 01:12:43 +00:00
soc Change bash script to C++ implementation 2023-07-19 13:20:59 +08:00
sota_app Add a factoryota-watch.mk file to include the OtaClient for wearable 2024-03-27 03:11:31 +00:00
storage storage: fix ota selinux error 2024-09-09 12:48:43 +08:00
thermal thermal: allow thermal_hal to read sysfs_gpu 2024-04-29 05:37:09 +00:00
touch Label touch_property_type to associate with vendor_gti_prop 2024-08-28 23:20:52 +00:00
trusty rpmb_dev: add rpmb_dev package 2024-03-13 17:49:16 +01:00
tts Updates TTS voice packs in gs-common 202407 2024-07-15 04:00:32 +00:00
umfw_stat dump_umfw_stat: Reduce timeout to 0.5 seconds 2024-04-25 16:43:16 +00:00
widevine Add widevine SELinux permissions 2024-09-03 13:40:57 +00:00
wireless_charger WLC: service: update AIDL manifest version to 1-2 2024-08-08 04:58:14 +00:00
wlan create wlan dump 2023-03-31 06:28:07 +08:00
Android.bp gs-common: add device_google_gs-common_license 2023-12-05 00:46:19 +08:00
device.mk Revert^2 "Add one variable to decide if need TTS voice packs" 2024-06-13 01:37:43 +00:00
FSTAB_OWNERS Add FSTAB_OWNERS and update OWNERS to include Android.bp 2024-08-02 11:39:01 +00:00
MK_OWNERS Add MK_OWNERS as owners file for makefile 2024-05-24 08:01:37 +00:00
NOTICE gs-common: add device_google_gs-common_license 2023-12-05 00:46:19 +08:00
OWNERS Add FSTAB_OWNERS and update OWNERS to include Android.bp 2024-08-02 11:39:01 +00:00
README.txt add owners to manage gs-common 2022-08-12 09:55:21 +08:00

Please refer to go/pixel-recycle to modularize your code in this space.