Commit graph

2950 commits

Author SHA1 Message Date
Orion Hodson
01f27c4a23 Merge "Remove odsign_prop denial for postinstall_dexopt" am: 1bd3118215 am: bf8031994e am: 61ccfcc43e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098050

Change-Id: Idcb71b060d974a8621eab3ad841cb2ee64243bf8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-23 08:48:30 +00:00
Orion Hodson
61ccfcc43e Merge "Remove odsign_prop denial for postinstall_dexopt" am: 1bd3118215 am: bf8031994e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098050

Change-Id: Ia1f584c3f55b58286ae45a4f48da201b0b76e515
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-23 08:24:08 +00:00
Orion Hodson
bf8031994e Merge "Remove odsign_prop denial for postinstall_dexopt" am: 1bd3118215
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098050

Change-Id: Ic44fc34c502779eeb2428dc1d8061cc3eada80a9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-23 08:05:29 +00:00
Orion Hodson
1bd3118215 Merge "Remove odsign_prop denial for postinstall_dexopt" 2022-05-23 07:38:01 +00:00
Joner Lin
a7b74cf99c Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e am: c9e77cd61c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: I9565966371f23d4008b557e5f505cdc87b868c7f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 12:57:20 +00:00
Joner Lin
176327b908 Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e am: 9955721f73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: Ib903eae506382e8ba93d829392b18402028a1d1c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 12:48:37 +00:00
Joner Lin
c9e77cd61c Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: I43e3a84a2c6080b17a2a69660bb5f93d0864ba13
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 12:23:25 +00:00
Joner Lin
9955721f73 Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: If769c5b2f24bbb04f842c65e1e71bf21e86c4078
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 12:20:46 +00:00
Joner Lin
5a222bc64e Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev 2022-05-20 05:06:32 +00:00
George Chang
853b440b6f Merge "Revert "Update nfc from hidl to aidl service"" am: 610af798f5 am: bd74710d56 am: b75f28c76d
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098183

Change-Id: Id3c8add8dd9f3ae88b425d5c355dddaac0ca7b2e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 17:08:19 +00:00
George Chang
b75f28c76d Merge "Revert "Update nfc from hidl to aidl service"" am: 610af798f5 am: bd74710d56
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098183

Change-Id: I8a52af1a6344042571a4804c16c681d7981f38a6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 16:34:07 +00:00
George Chang
bd74710d56 Merge "Revert "Update nfc from hidl to aidl service"" am: 610af798f5
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098183

Change-Id: I6db59e3a762df7b4906b0c14a7324b5955951c3d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 16:05:46 +00:00
George Chang
610af798f5 Merge "Revert "Update nfc from hidl to aidl service"" 2022-05-19 15:38:39 +00:00
George Chang
71db4c206b Revert "Update nfc from hidl to aidl service"
Revert submission 2098739-nfc_aidl_switch_gs101

Reason for revert: broken tests
Reverted Changes:
Ifde6ab418:Switch NFC from HIDL to AIDL
I288474f69:Update nfc from hidl to aidl service
Bug: 233194621
Change-Id: I1dad9c64073c8baffdf5f491c38bf1e568c9af29
2022-05-19 13:45:18 +00:00
Kyle Tso
d5e2b40846 Merge "Add logbuffer_pogo_transfer file_contexts" am: 418d114796 am: 46b42ac02b am: 50797d0f2f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098016

Change-Id: I321062c6de323fb11f2cda5300abd35ce1d0ea9d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:54:59 +00:00
George Chang
1a71964f04 Update nfc from hidl to aidl service am: d6a8c63837 am: 8985f2ae28 am: 4b9fecbe3a
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098014

Change-Id: I254dda0055b8f8067675dfa3e65560a7a8ff9324
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:54:31 +00:00
Kyle Tso
50797d0f2f Merge "Add logbuffer_pogo_transfer file_contexts" am: 418d114796 am: 46b42ac02b
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098016

Change-Id: I41ef4daefa6a78ca4e3f7fa9a6464d43feda07ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:35:59 +00:00
George Chang
4b9fecbe3a Update nfc from hidl to aidl service am: d6a8c63837 am: 8985f2ae28
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098014

Change-Id: I8e04549075ae47a89994e2eed9b5e7f8eac170e8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:35:44 +00:00
Kyle Tso
46b42ac02b Merge "Add logbuffer_pogo_transfer file_contexts" am: 418d114796
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098016

Change-Id: Ide608651968b6eb137aa55791074d66e3e27f947
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 07:56:40 +00:00
George Chang
8985f2ae28 Update nfc from hidl to aidl service am: d6a8c63837
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098014

Change-Id: If2212cb63fdf409ee7f5fbf78994c58c09caa8ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 07:55:22 +00:00
Kyle Tso
418d114796 Merge "Add logbuffer_pogo_transfer file_contexts" 2022-05-19 02:22:56 +00:00
jonerlin
9f214e0453 Grant policy for BluetoothHal Extionsion feature
Bug: 228943442
Test: Manually
Change-Id: I00b37c1f74ca9b904df2319d2c58d34228e9678b
2022-05-19 09:59:56 +08:00
Kyle Tso
94e2cdeb6e Add logbuffer_pogo_transfer file_contexts
Bug: 232556226
Signed-off-by: Kyle Tso <kyletso@google.com>
Change-Id: I1037d39f4187807e6aa9753339fae29e3bc89359
2022-05-17 16:01:46 +08:00
George Chang
d6a8c63837 Update nfc from hidl to aidl service
Bug: 216290344
Test: atest NfcNciInstrumentationTests
Test: atest VtsAidlHalNfcTargetTest
Merged-In: I288474f691670655516728fe0e164a3e5689875c
Change-Id: I288474f691670655516728fe0e164a3e5689875c
2022-05-17 12:16:39 +08:00
Orion Hodson
32a87f289f Remove incidentd denial for apex_info_file am: 400d4fb7f4 am: 4fa31df30e am: 71f450f955
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098049

Change-Id: I91d505f428945306b9f747db018f7fbb3f0003a5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-16 18:24:33 +00:00
Orion Hodson
71f450f955 Remove incidentd denial for apex_info_file am: 400d4fb7f4 am: 4fa31df30e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098049

Change-Id: I7dc2d9dc20e060c9c2db2b9f98bd1292e0677033
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-16 16:59:14 +00:00
Orion Hodson
4fa31df30e Remove incidentd denial for apex_info_file am: 400d4fb7f4
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098049

Change-Id: I7b0683e254c0edd4f5dc60924f01fd36c0f8722c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-16 16:32:06 +00:00
Orion Hodson
50ac49e196 Remove odsign_prop denial for postinstall_dexopt
Issue fixed in https://r.android.com/1771328.

Fix: 194142604
Test: N/A
Change-Id: Ib8f8c07dce9c5d393b858e4234e6da66513d181f
2022-05-16 14:53:44 +01:00
Orion Hodson
400d4fb7f4 Remove incidentd denial for apex_info_file
Underlying issue addressed by https://r.android.com/1849822 which
gives incidentd r_file_perms for apex_info_file:file.

Fix: 187015816
Test: atest incidentd_test; adb logcat | grep denied
Change-Id: I90b57a5f01c97c8488c10692208080557a863051
2022-05-16 14:45:53 +01:00
TreeHugger Robot
c92b8764b6 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f am: e9a23e8017
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I5d173aaed6b692627ff0ac1b2a240af59076dee3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 10:39:59 +00:00
TreeHugger Robot
6ef9e20467 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f am: ed1ec96363
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: If0c21f56ade626fffe26b15730a6322bb5464eb9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 10:39:45 +00:00
TreeHugger Robot
ed1ec96363 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: Iffeee5071854c1f2af2cad5c7a5783421980b153
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 09:49:23 +00:00
TreeHugger Robot
e9a23e8017 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I6aa2cd70650dcebab561faf257d22d526a352052
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 09:48:07 +00:00
TreeHugger Robot
c0d38cbc9f Merge "Allow mediacodec to access vendor_data_file" into tm-dev 2022-05-13 09:24:01 +00:00
Lily Lin
116c811861 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468 am: d5f5a51c51
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: Ia85d3582512ba32c0f27a251632a84973603442e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:25:49 +00:00
Lily Lin
44f06f26eb Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468 am: 5389123249
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: Iae98aba8421ca1264e642a3e20968b52eed337d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:25:08 +00:00
Will McVicker
6a0c568372 genfs_contexts: fix more i2c raw paths am: 9cbc9eceec am: 6c256f9fee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: I0e76fe6cc152545ad1fe57f9b14a757835a65926
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:24:52 +00:00
Lily Lin
5389123249 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: Ib4dd93e176fe6bf1ead64e4ed55999d4afa2fd59
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 01:58:06 +00:00
Will McVicker
6c256f9fee genfs_contexts: fix more i2c raw paths am: 9cbc9eceec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: Ia370a2ce14f323d16f3e34a8e4d0ef9ff9fd12d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 01:57:53 +00:00
Lily Lin
d5f5a51c51 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: Ib7ad61c19257b34ca9028d2b0f3fd4ee76e37c89
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 01:56:03 +00:00
Lily Lin
e910a12468 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev 2022-05-11 01:22:36 +00:00
Will McVicker
21d41d6f22 genfs_contexts: fix more i2c raw paths am: 9cbc9eceec am: f78f5ab19a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: I5a62703488a4c211bc3bf19bcb4c4837b41fd162
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-10 23:25:36 +00:00
Will McVicker
f78f5ab19a genfs_contexts: fix more i2c raw paths am: 9cbc9eceec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: If52caa5df6e4008c9c038fe128f7e4f1e1f56c30
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-10 22:55:56 +00:00
Jerry Huang
a5e9b426eb Allow mediacodec to access vendor_data_file
For dumping output buffer of HDR to SDR fliter.

This patch fixes the following denial:

05-06 15:26:54.248  1046   856   856 W HwBinder:856_4: type=1400 audit(0.0:174404): avc: denied { getattr } for name="/" dev="dmabuf" ino=1 scontext=u:r:mediacodec:s0 tcontext=u:object_r:unlabeled:s0 tclass=filesystem permissive=0

Bug: 229360116
Change-Id: I41acb29407a7ddb27279a834e27c5ee515efe666
2022-05-10 09:22:12 +00:00
Lily Lin
59f29edf92 Add selinux permissions to r/w sysfs st33spi_state
Bug: 228655141
Test: Confirm can read/write st33spi_state
Change-Id: I65299414d6268580dc532170759459147378418b
2022-05-10 16:32:45 +08:00
Richard Hsu
2177d5ec61 Merge "[SELinux] Allow NNAPI HAL to log traces to perfetto under userdebug builds" into tm-d1-dev am: 4f5bb2c0aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18214742

Change-Id: If9a244192cefa7c87521b7dd47b2d501f6377021
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-09 19:50:54 +00:00
Richard Hsu
4f5bb2c0aa Merge "[SELinux] Allow NNAPI HAL to log traces to perfetto under userdebug builds" into tm-d1-dev 2022-05-09 17:55:47 +00:00
Richard Hsu
5675757d41 [SELinux] Allow NNAPI HAL to log traces to perfetto under userdebug builds
Allows DarwiNN NNAPI HAL to log traces to perfetto only under userdebug builds. This is similar to the camera HAL fix in ag/17080874

Error message:
TracingMuxer: type=1400 audit(0.0:486): avc: denied { write } for name="traced_producer" dev="tmpfs" ino=1116 scontext=u:r:hal_neuralnetworks_darwinn:s0

This rule is common for EdgeTPU in both WHI and PRO.

Bug: 231838536

Test: tested on PRO before and after the change, and the traces now shows up.

Example: https://ui.perfetto.dev/#!/?s=ab911b3972bc16a1a831e148a7446c09757a08426bbe3c3b16d31a728b1d923
https://screenshot.googleplex.com/3roWETkTFyiDjW9

Change-Id: I8d4a57e262087aa4ec6670a487d7b06d2f2cde69
2022-05-07 22:28:22 -07:00
Will McVicker
9cbc9eceec genfs_contexts: fix more i2c raw paths
These were added in commit 8a19d8be9c ("genfs_contexts: fix path for
i2c peripheral devices") to address missing i2c paths when kernel
modules are loaded in parallel. The raw i2c paths were not added in that
commit. So add them here in order to fix a vibrator crash for
P21-mainline due to not having the named i2c paths.

Bug: 231637004
Fixes: 8a19d8be9c ("genfs_contexts: fix path for i2c peripheral devices")
Change-Id: I02dfff504704f761c99c328b39595789c2cbeef5
2022-05-05 16:04:31 -07:00
Automerger Merge Worker
3104c4a127 Merge changes from topic "am-0bfd604f0d864cebafcc014a9d92c68f" into tm-d1-dev-plus-aosp
* changes:
  [automerger skipped] Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d am: 82a83b366a -s ours
  [automerger skipped] Allow hal_usb_gadget_impl to access proc_irq am: 7ac349e932 am: b5c3f6e0ba -s ours
2022-05-05 08:45:19 +00:00