aml_tz6_351400020 (13155446,com.google.android.go.tzdata6,com.google.android.tzdata6)
-----BEGIN PGP SIGNATURE----- iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ9i73wAKCRDorT+BmrEO eFcxAJ9FjuwU+gpMXe30sSxhISfEmxN2owCeLtsSixLCQo0oS2uAROPj1Ss1KYw= =RGaz -----END PGP SIGNATURE----- gpgsig -----BEGIN SSH SIGNATURE----- U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgPpdpjxPACTIhnlvYz0GM4BR7FJ +rYv3jMbfxNKD3JvcAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5 AAAAQC7FLLvbTyY+Y0GgJwfye1ptLJo2ym+en0NNcqdLYFxdLEwpT6vJHXfoQ8Bhe9m5jb jbgV599CsKeg7Lho0yJgg= -----END SSH SIGNATURE----- Merge tag 'aml_tz6_351400020' into staging/lineage-23.0_merge-aml_tz6_351400020 aml_tz6_351400020 (13155446,com.google.android.go.tzdata6,com.google.android.tzdata6) # -----BEGIN PGP SIGNATURE----- # # iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ9i73wAKCRDorT+BmrEO # eFcxAJ9FjuwU+gpMXe30sSxhISfEmxN2owCeLtsSixLCQo0oS2uAROPj1Ss1KYw= # =RGaz # -----END PGP SIGNATURE----- # gpg: Signature made Tue Mar 18 02:18:39 2025 EET # gpg: using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78 # gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [ultimate] # By Nina Chen (3) and others # Via Android Build Coastguard Worker (8) and others * tag 'aml_tz6_351400020': Add udc sysfs to udc_sysfs fs context Update SELinux error Remove chre vendor_data_file from tracking denials bug map RamdumpService: Fix the SELinux errors from introducing Firebase Analytics. init-display-sh: Don't audit writing to kmsg gs101: update selinux to allow UMI on user build Remove sced sepolicy rule whi: Add selinux permission for fth sepolicy: gs101: add genfscon wireless into sysfs_batteryinfo Update SELinux error Update SELinux error Revert "Remove hal_camera_default aconfig_storage_metadata_file ..." Remove hal_camera_default aconfig_storage_metadata_file from bugmap Update SELinux error Change-Id: Idee2829022f41f42017aab5ab99e5043767fd8e0
This commit is contained in:
commit
2909c91023
9 changed files with 18 additions and 31 deletions
|
@ -2,7 +2,6 @@
|
|||
battery_mitigation sysfs file b/364446534
|
||||
bluetooth audio_config_prop file b/379226761
|
||||
bluetooth audio_config_prop file b/379245675
|
||||
chre vendor_data_file dir b/301948771
|
||||
dump_display sysfs file b/340722772
|
||||
dump_modem sscoredump_vendor_data_coredump_file dir b/366115873
|
||||
dump_modem sscoredump_vendor_data_logcat_file dir b/366115873
|
||||
|
@ -25,6 +24,7 @@ priv_app audio_config_prop file b/379226710
|
|||
priv_app audio_config_prop file b/379246066
|
||||
radio audio_config_prop file b/379227275
|
||||
ramdump ramdump capability b/369538457
|
||||
ramdump_app default_prop file b/386149238
|
||||
rfsd vendor_cbd_prop file b/317734418
|
||||
shell sysfs_net file b/329380904
|
||||
ssr_detector_app default_prop file b/350831964
|
||||
|
@ -47,4 +47,6 @@ vendor_init default_prop property_service b/366115458
|
|||
vendor_init default_prop property_service b/366116214
|
||||
vendor_init default_prop property_service b/369735133
|
||||
vendor_init default_prop property_service b/369735170
|
||||
zygote aconfig_storage_metadata_file dir b/383949055
|
||||
zygote media_config_prop file b/394433509
|
||||
zygote zygote capability b/379591519
|
||||
|
|
1
sepolicy/whitechapel/vendor/google/file.te
vendored
1
sepolicy/whitechapel/vendor/google/file.te
vendored
|
@ -9,7 +9,6 @@ type vendor_dmd_log_file, file_type, data_file_type;
|
|||
type vendor_rfsd_log_file, file_type, data_file_type;
|
||||
type vendor_dump_log_file, file_type, data_file_type;
|
||||
type vendor_rild_log_file, file_type, data_file_type;
|
||||
type vendor_sced_log_file, file_type, data_file_type;
|
||||
type vendor_telephony_log_file, file_type, data_file_type;
|
||||
|
||||
# app data files
|
||||
|
|
|
@ -136,7 +136,6 @@
|
|||
/(vendor|system/vendor)/bin/cbd u:object_r:cbd_exec:s0
|
||||
/(vendor|system/vendor)/bin/hw/rild_exynos u:object_r:rild_exec:s0
|
||||
/(vendor|system/vendor)/bin/rfsd u:object_r:rfsd_exec:s0
|
||||
/(vendor|system/vendor)/bin/sced u:object_r:sced_exec:s0
|
||||
/(vendor|system/vendor)/bin/bipchmgr u:object_r:bipchmgr_exec:s0
|
||||
|
||||
#
|
||||
|
@ -148,7 +147,6 @@
|
|||
/data/vendor/log/rfsd(/.*)? u:object_r:vendor_rfsd_log_file:s0
|
||||
/data/vendor/log/dump(/.*)? u:object_r:vendor_dump_log_file:s0
|
||||
/data/vendor/log/rild(/.*)? u:object_r:vendor_rild_log_file:s0
|
||||
/data/vendor/log/sced(/.*)? u:object_r:vendor_sced_log_file:s0
|
||||
|
||||
/persist/sensorcal\.json u:object_r:sensors_cal_file:s0
|
||||
|
||||
|
@ -360,6 +358,7 @@
|
|||
/dev/bigocean u:object_r:video_device:s0
|
||||
|
||||
# Fingerprint
|
||||
/dev/fth_fd u:object_r:fingerprint_device:s0
|
||||
/dev/goodix_fp u:object_r:fingerprint_device:s0
|
||||
/data/vendor/fingerprint(/.*)? u:object_r:fingerprint_vendor_data_file:s0
|
||||
|
||||
|
|
|
@ -33,6 +33,10 @@ genfscon sysfs /devices/platform/google,dock/power_supply/dock
|
|||
|
||||
genfscon sysfs /devices/platform/10d50000.hsi2c u:object_r:sysfs_batteryinfo:s0
|
||||
|
||||
genfscon sysfs /class/power_supply/wireless/device/version u:object_r:sysfs_batteryinfo:s0
|
||||
genfscon sysfs /class/power_supply/wireless/device/status u:object_r:sysfs_batteryinfo:s0
|
||||
genfscon sysfs /class/power_supply/wireless/device/fw_rev u:object_r:sysfs_batteryinfo:s0
|
||||
|
||||
# Slider
|
||||
genfscon sysfs /devices/platform/10d10000.hsi2c/i2c-0/0-003c u:object_r:sysfs_wlc:s0
|
||||
genfscon sysfs /devices/platform/10d10000.hsi2c/i2c-0/0-003c/power_supply u:object_r:sysfs_batteryinfo:s0
|
||||
|
@ -128,6 +132,9 @@ genfscon sysfs /devices/platform/sound-aoc/wakeup
|
|||
genfscon sysfs /devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/wakeup u:object_r:sysfs_wakeup:s0
|
||||
genfscon sysfs /devices/platform/1c2d0000.drmdsim/1c2d0000.drmdsim.0/wakeup u:object_r:sysfs_wakeup:s0
|
||||
|
||||
genfscon sysfs /devices/platform/odm/odm:fps_touch_handler/power/wakeup u:object_r:sysfs_wakeup:s0
|
||||
genfscon sysfs /devices/platform/odm/odm:fps_touch_handler/wakeup u:object_r:sysfs_wakeup:s0
|
||||
|
||||
# Input
|
||||
genfscon sysfs /devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.4.auto/usb2/2-1 u:object_r:sysfs_uhid:s0
|
||||
genfscon sysfs /devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb2/2-1 u:object_r:sysfs_uhid:s0
|
||||
|
@ -345,3 +352,6 @@ genfscon sysfs /devices/platform/25f40000.etm u:object_r:sysfs_devices_cs_etm
|
|||
|
||||
# BootControl
|
||||
genfscon sysfs /kernel/boot_control/blow_ar u:object_r:sysfs_bootctl:s0
|
||||
|
||||
# USB
|
||||
genfscon sysfs /devices/platform/11110000.usb/11110000.dwc3/udc/11110000.dwc3/state u:object_r:sysfs_udc:s0
|
||||
|
|
|
@ -30,3 +30,4 @@ get_prop(hal_usb_impl, vendor_usb_config_prop);
|
|||
# For monitoring usb sysfs attributes
|
||||
allow hal_usb_impl sysfs_wakeup:dir search;
|
||||
allow hal_usb_impl sysfs_wakeup:file r_file_perms;
|
||||
allow hal_usb_impl sysfs_udc:file r_file_perms;
|
||||
|
|
|
@ -8,3 +8,5 @@ allow init-display-sh vendor_toolbox_exec:file execute_no_trans;
|
|||
|
||||
dontaudit init-display-sh proc_cmdline:file r_file_perms;
|
||||
|
||||
# Allow modprobe to log to kmsg.
|
||||
allow init-display-sh kmsg_device:chr_file w_file_perms;
|
||||
|
|
|
@ -45,7 +45,5 @@ allow modem_svc_sit modem_img_file:file r_file_perms;
|
|||
allow modem_svc_sit modem_img_file:lnk_file r_file_perms;
|
||||
|
||||
# Allow modem_svc_sit to access socket for UMI
|
||||
userdebug_or_eng(`
|
||||
allow modem_svc_sit radio_vendor_data_file:sock_file { create unlink };
|
||||
')
|
||||
allow modem_svc_sit radio_vendor_data_file:sock_file { create unlink write};
|
||||
|
||||
|
|
23
sepolicy/whitechapel/vendor/google/sced.te
vendored
23
sepolicy/whitechapel/vendor/google/sced.te
vendored
|
@ -1,23 +0,0 @@
|
|||
type sced, domain;
|
||||
type sced_exec, vendor_file_type, exec_type, file_type;
|
||||
init_daemon_domain(sced)
|
||||
|
||||
userdebug_or_eng(`
|
||||
typeattribute sced vendor_executes_system_violators;
|
||||
|
||||
hwbinder_use(sced)
|
||||
binder_call(sced, dmd)
|
||||
binder_call(sced, vendor_telephony_app)
|
||||
|
||||
get_prop(sced, hwservicemanager_prop)
|
||||
allow sced self:packet_socket create_socket_perms_no_ioctl;
|
||||
|
||||
allow sced self:capability net_raw;
|
||||
allow sced shell_exec:file rx_file_perms;
|
||||
allow sced tcpdump_exec:file rx_file_perms;
|
||||
allow sced vendor_shell_exec:file x_file_perms;
|
||||
allow sced vendor_slog_file:dir create_dir_perms;
|
||||
allow sced vendor_slog_file:file create_file_perms;
|
||||
allow sced hidl_base_hwservice:hwservice_manager add;
|
||||
allow sced hal_vendor_oem_hwservice:hwservice_manager { add find };
|
||||
')
|
|
@ -12,7 +12,6 @@ allow vendor_telephony_app vendor_slog_file:file create_file_perms;
|
|||
allow vendor_telephony_app app_api_service:service_manager find;
|
||||
allow vendor_telephony_app hal_vendor_oem_hwservice:hwservice_manager find;
|
||||
binder_call(vendor_telephony_app, dmd)
|
||||
binder_call(vendor_telephony_app, sced)
|
||||
|
||||
userdebug_or_eng(`
|
||||
# Silent Logging
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue