Jinting Lin
03f471518a
Merge "Allows modem_svc to read the logging related properties" into tm-qpr-dev am: d255ed1576
am: 230b907ae1
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19967636
Change-Id: I2e6a0cf2f7558c40e68030649d1c663db5bcd3db
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-22 16:12:50 +00:00
Jinting Lin
230b907ae1
Merge "Allows modem_svc to read the logging related properties" into tm-qpr-dev am: d255ed1576
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19967636
Change-Id: Ic7a7ec1e03af32e88989f32452c2c255e1419a36
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-22 15:35:53 +00:00
Jinting Lin
d255ed1576
Merge "Allows modem_svc to read the logging related properties" into tm-qpr-dev
2022-09-22 14:30:32 +00:00
Eden Su
dbbe57546a
[automerger skipped] Merge changes from topic "gs101_network_access" into tm-qpr-dev am: c3c4aa626b
-s ours am: 4cb7381067
-s ours
...
am skip reason: Merged-In Id9ba79ba87010326c53b6aec408e5cdb291122a6 with SHA-1 09e0e1b280
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19771223
Change-Id: Ie3457178a2ae2977b529a69b89cb65bb2e45f0ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-20 01:31:58 +00:00
Hana Kim
d6a82ec69f
[automerger skipped] Sepolicy: add permission to allow create, connect udp socket am: 060b562310
-s ours am: da15cf3c35
-s ours
...
am skip reason: Merged-In Id9ba79ba87010326c53b6aec408e5cdb291122a6 with SHA-1 09e0e1b280
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19771223
Change-Id: I9c9138a16df8e34bd1fdaa326bdd9e46c1d29ac5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-20 01:31:56 +00:00
Eden Su
4cb7381067
[automerger skipped] Merge changes from topic "gs101_network_access" into tm-qpr-dev am: c3c4aa626b
-s ours
...
am skip reason: Merged-In Id9ba79ba87010326c53b6aec408e5cdb291122a6 with SHA-1 09e0e1b280
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19771223
Change-Id: I9ba0932f49df3b5c042c5b3271dc41a2e1ecf6f8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-20 01:01:03 +00:00
Hana Kim
da15cf3c35
[automerger skipped] Sepolicy: add permission to allow create, connect udp socket am: 060b562310
-s ours
...
am skip reason: Merged-In Id9ba79ba87010326c53b6aec408e5cdb291122a6 with SHA-1 09e0e1b280
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19771223
Change-Id: I0ee313ca921ff8001ba64e7c0b38dc4551687aa5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-20 01:01:02 +00:00
Eden Su
c3c4aa626b
Merge changes from topic "gs101_network_access" into tm-qpr-dev
...
* changes:
Sepolicy: add permission to allow create, connect udp socket
sepolicy: gs101: allowed permissions required for network access
2022-09-20 00:34:18 +00:00
jintinglin
9a4545eafa
Allows modem_svc to read the logging related properties
...
avc: denied { read } for comm="modem_svc_sit" name="u:object_r:vendor_logger_prop:s0" dev="tmpfs" ino=347 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_logger_prop:s0 tclass=file permissive=0
Bug: 243039758
Change-Id: I80a6971a2c3e09320e780d1eff24e040cd8b3541
2022-09-19 05:31:09 +00:00
Hana Kim
060b562310
Sepolicy: add permission to allow create, connect udp socket
...
Bug: 226412527
Test: The tester verified IMS didn't crash and no avc denied log
Signed-off-by: Hana Kim <hanaa.kim@samsung.com>
Change-Id: Id9ba79ba87010326c53b6aec408e5cdb291122a6
Merged-In: Id9ba79ba87010326c53b6aec408e5cdb291122a6
2022-09-19 04:58:00 +00:00
Jinhee Kim
ea1f7edaae
sepolicy: gs101: allowed permissions required for network access am: 653e53d11d
am: 9ca55393c9
am: a62f7495fb
am: 11149a00ca
am: fd941e1c1a
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2214621
Change-Id: I32eb6c697ec317f6ca40a0b82544a7a9116ac154
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 12:46:04 +00:00
Hana Kim
89c07daec3
Sepolicy: add permission to allow create, connect udp socket am: 09e0e1b280
am: 6c17e1e6f5
am: 19e9846ba8
am: 6b1cbfe260
am: a29b3c8ca1
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2200444
Change-Id: I2544779da7c13c7b1a8383b8c786bb2c39716a98
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 12:46:02 +00:00
Jinhee Kim
fd941e1c1a
sepolicy: gs101: allowed permissions required for network access am: 653e53d11d
am: 9ca55393c9
am: a62f7495fb
am: 11149a00ca
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2214621
Change-Id: Iee88f3f9d98f1b1f1568613b81542560e42ee25d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 12:18:57 +00:00
Hana Kim
a29b3c8ca1
Sepolicy: add permission to allow create, connect udp socket am: 09e0e1b280
am: 6c17e1e6f5
am: 19e9846ba8
am: 6b1cbfe260
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2200444
Change-Id: I50d573cc65874987be884d83b72f4aaaa71c8818
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 12:18:56 +00:00
Jinhee Kim
11149a00ca
sepolicy: gs101: allowed permissions required for network access am: 653e53d11d
am: 9ca55393c9
am: a62f7495fb
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2214621
Change-Id: I1da45f9173b7812ab45d8b503af446689a2e7fe4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 11:49:03 +00:00
Hana Kim
6b1cbfe260
Sepolicy: add permission to allow create, connect udp socket am: 09e0e1b280
am: 6c17e1e6f5
am: 19e9846ba8
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2200444
Change-Id: I9074a2aaab6ef1916fc3fa9a0c1f3e5e3fe610a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 11:49:01 +00:00
Jinhee Kim
a62f7495fb
sepolicy: gs101: allowed permissions required for network access am: 653e53d11d
am: 9ca55393c9
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2214621
Change-Id: Ib062d4ee9a01a39c1b8db50b4bd47c45ed8f2fc6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 10:54:14 +00:00
Hana Kim
19e9846ba8
Sepolicy: add permission to allow create, connect udp socket am: 09e0e1b280
am: 6c17e1e6f5
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2200444
Change-Id: I0ea2a78c506c360ac10958b08304c6b62167946b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 10:54:11 +00:00
Jinhee Kim
9ca55393c9
sepolicy: gs101: allowed permissions required for network access am: 653e53d11d
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2214621
Change-Id: Icc54f4ea60062d0b56ac88692803b1171e8fb345
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 10:26:20 +00:00
Hana Kim
6c17e1e6f5
Sepolicy: add permission to allow create, connect udp socket am: 09e0e1b280
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2200444
Change-Id: I929947f0b0ee7c969530343fd779fb88a411a7bb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 10:26:19 +00:00
Jinhee Kim
908a8fcf14
sepolicy: gs101: allowed permissions required for network access
...
avc: denied { write } for comm="Thread-102" name="dnsproxyd" dev="tmpfs" ino=1022 scontext=u:r:vendor_ims_app:s0:c251,c256,c512,c768 tcontext=u:object_r:dnsproxyd_socket:s0 tclass=sock_file permissive=0 app=com.shannon.imsservice
avc: denied { node_bind } for comm="Thread-102" src=50174 scontext=u:r:vendor_ims_app:s0:c251,c256,c512,c768 tcontext=u:object_r:node:s0 tclass=udp_socket permissive=0 app=com.shannon.imsservice
Bug: 242231557
Test: The tester verified IMS didn't crash and no avc denied log
Change-Id: Icc3762cef7f9766d845f1e1a56af1315fc97163b
Signed-off-by: Jinhee Kim <jinhee.k@samsung.com>
Signed-off-by: Kukjin Kim <kgene.kim@samsung.com>
Merged-In: Icc3762cef7f9766d845f1e1a56af1315fc97163b
2022-09-16 08:51:52 +00:00
Estefany Torres
0ea1dac214
Merge "Add rules for letting logger app send the command to ril" into tm-qpr-dev am: 0ec93ed8cd
am: 899574b2d8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19912324
Change-Id: Idd3a937c7da2388a32f59f265705bcc84c54bf8b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-15 15:03:57 +00:00
Estefany Torres
899574b2d8
Merge "Add rules for letting logger app send the command to ril" into tm-qpr-dev am: 0ec93ed8cd
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19912324
Change-Id: I14947b4a9dc41ffdb9afef580597ee0d4798443f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-15 14:35:07 +00:00
Estefany Torres
0ec93ed8cd
Merge "Add rules for letting logger app send the command to ril" into tm-qpr-dev
2022-09-15 14:09:07 +00:00
TreeHugger Robot
3aaefbe1fc
Merge "aoc: add audio property for pixellogger update control" into tm-qpr-dev am: 75f908a8ed
am: a106f636f8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19533964
Change-Id: I86804c96c940ced146e25a411560fe7ac06e5e77
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-14 02:54:01 +00:00
TreeHugger Robot
a106f636f8
Merge "aoc: add audio property for pixellogger update control" into tm-qpr-dev am: 75f908a8ed
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19533964
Change-Id: I347bbb35b216896a87b3b2edc96af57d6dadfe80
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-14 02:23:57 +00:00
TreeHugger Robot
75f908a8ed
Merge "aoc: add audio property for pixellogger update control" into tm-qpr-dev
2022-09-14 01:48:40 +00:00
Jinhee Kim
653e53d11d
sepolicy: gs101: allowed permissions required for network access
...
avc: denied { write } for comm="Thread-102" name="dnsproxyd" dev="tmpfs" ino=1022 scontext=u:r:vendor_ims_app:s0:c251,c256,c512,c768 tcontext=u:object_r:dnsproxyd_socket:s0 tclass=sock_file permissive=0 app=com.shannon.imsservice
avc: denied { node_bind } for comm="Thread-102" src=50174 scontext=u:r:vendor_ims_app:s0:c251,c256,c512,c768 tcontext=u:object_r:node:s0 tclass=udp_socket permissive=0 app=com.shannon.imsservice
Bug: 242231557
Test: Build
Change-Id: Icc3762cef7f9766d845f1e1a56af1315fc97163b
Signed-off-by: Jinhee Kim <jinhee.k@samsung.com>
Signed-off-by: Kukjin Kim <kgene.kim@samsung.com>
2022-09-12 15:18:32 +08:00
Hana Kim
09e0e1b280
Sepolicy: add permission to allow create, connect udp socket
...
Bug: 226412527
Test: Build
Signed-off-by: Hana Kim <hanaa.kim@samsung.com>
Change-Id: Id9ba79ba87010326c53b6aec408e5cdb291122a6
2022-09-12 15:17:44 +08:00
Estefany Torres
7b5ed95fdd
Add rules for letting logger app send the command to ril
...
08-31 23:40:57.354 458 458 E SELinux : avc: denied { find } for interface=vendor.samsung_slsi.telephony.hardware.radioExternal::IOemSlsiRadioExternal sid=u:r:logger_app:s0:c252,c256,c512,c768 pid=2901 scontext=u:r:logger_app:s0:c252,c256,c512,c768 tcontext=u:object_r:hal_exynos_rild_hwservice:s0 tclass=hwservice_manager permissive=0
09-01 00:08:19.600 2881 2881 W oid.pixellogger: type=1400 audit(0.0:10): avc: denied { call } for scontext=u:r:logger_app:s0:c252,c256,c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=0 app=com.android.pixellogger
Bug: 241412942
Test: tested in C10 with pixel logger change
Change-Id: Idcd693790d654d0a9b7aba46a41764d65867a61c
2022-09-09 17:35:19 +00:00
JJ Lee
8c36ac66d8
sepolicy: add nodes for aoc memory votes stats am: f07279785d
am: 479f2286d7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19739216
Change-Id: Icdd11f323d212c2e10a42108afbd91674dce7a3c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-08 06:00:10 +00:00
JJ Lee
479f2286d7
sepolicy: add nodes for aoc memory votes stats am: f07279785d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19739216
Change-Id: I795b972da3d42e7394fbd954f041934370fbd77a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-08 05:16:23 +00:00
TreeHugger Robot
ae2feed036
Merge "Add SE policies for HWC logs"
2022-09-07 12:28:32 +00:00
JJ Lee
f07279785d
sepolicy: add nodes for aoc memory votes stats
...
Bug: 223674292
Test: build pass, not blocking bugreport
Change-Id: I4732c8b3271f553edc423ac115eb8a6afaebff37
Signed-off-by: JJ Lee <leejj@google.com>
2022-09-07 11:45:18 +00:00
Adam Shih
c08f9cf882
move insert module script sepolicy to gs-common
...
Bug: 243763292
Test: boot to home with no relevant SELinux error
Change-Id: I52fe6631b3ec806a5624375457874d9248927b00
2022-09-06 10:40:01 +08:00
Adam Shih
5742be1014
move insmod script to gs-common
...
Bug: 243763292
Test: boot to home
Change-Id: If676806d806adcd7f1fcecc1199255788e8858ef
2022-09-05 12:21:43 +08:00
Timmy Li
e6e9e34d22
Merge "Change SElinux so Aswang can be accessed"
2022-09-01 20:37:25 +00:00
Adam Shih
f55fb71bf0
Merge "Move dauntless settings to gs-common"
2022-08-31 23:49:37 +00:00
Roger Fang
d5e2902e91
sepolicy: add permission for AMS rate of pixelstats-vend am: a8eab1aaaf
am: 5321008d5c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19711052
Change-Id: If5dad118d1a1c845a84d3b53baff485c58cce03c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-30 05:45:30 +00:00
Roger Fang
5321008d5c
sepolicy: add permission for AMS rate of pixelstats-vend am: a8eab1aaaf
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19711052
Change-Id: I61f3cfbb14f0f34bf0af2eaba1922b9aed4b7948
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-30 05:15:55 +00:00
Roger Fang
a8eab1aaaf
sepolicy: add permission for AMS rate of pixelstats-vend
...
I pixelstats-vend: type=1400 audit(0.0:1025): avc: denied { read } for name="ams_rate_read_once" dev="sysfs" ino=79714 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I pixelstats-vend: type=1400 audit(0.0:1026): avc: denied { open } for path="/sys/devices/platform/audiometrics/ams_rate_read_once" dev="sysfs" ino=79714 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
pixelstats-vend: type=1400 audit(0.0:1027): avc: denied { getattr } for path="/sys/devices/platform/audiometrics/ams_rate_read_once" dev="sysfs" ino=79714 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
Bug: 239508478
Test: Manually test passed
Signed-off-by: Roger Fang <rogerfang@google.com>
Change-Id: I5c47003bed664f2cd9b6fe3630a6445aca27d10d
2022-08-30 04:36:41 +00:00
Adam Shih
a5cbf912ce
Move dauntless settings to gs-common
...
Bug: 242479757
Test: build pass on all Gchip devices
Change-Id: I9751e59b751f867d4cf734ffe7497a2e22c0c6f9
2022-08-30 12:29:54 +08:00
Robb Glasser
94f9358eed
Give permissions to save usf stats and dump them in bugreports. am: 4b4afb2eea
am: 6ce1ff96e4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19672464
Change-Id: Idbd78e19d1b642d3cfc306ad69ded4515a14985d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-25 04:06:32 +00:00
Robb Glasser
6ce1ff96e4
Give permissions to save usf stats and dump them in bugreports. am: 4b4afb2eea
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19672464
Change-Id: Iacf95664f2ba6bf126b82e2e2d73bddcddb70422
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-25 03:38:27 +00:00
Adam Shih
19e6be23a9
Merge "move bcmbt settings to gs-common"
2022-08-25 00:07:01 +00:00
Robb Glasser
4b4afb2eea
Give permissions to save usf stats and dump them in bugreports.
...
Creating a mechanism to save some USF stat history to device and pipe it
to bugreports. Granting permissions so that this can work.
Bug: 242320914
Test: Stats save and are visible in a bugreport.
Change-Id: Ia1973800ed053f54da043d306e11c0a7b10132a7
2022-08-24 22:39:16 +00:00
Treehugger Robot
c8a49f6246
[automerger skipped] Merge "Add security context for com.google.usf.non_wake_up/wakeup." am: d6ff29d1ca
am: a4d246abac
am: 6481874c77
am: 4c9a910a60
-s ours am: 8a978f91ea
-s ours
...
am skip reason: Merged-In I8600283d9ff2ebcb45df95e5259484a60921fb1a with SHA-1 c96220c282
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2183507
Change-Id: I9a78d1d459dc6b6101450e7d656d204e5a3ab8c1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-22 08:40:12 +00:00
Treehugger Robot
8a978f91ea
[automerger skipped] Merge "Add security context for com.google.usf.non_wake_up/wakeup." am: d6ff29d1ca
am: a4d246abac
am: 6481874c77
am: 4c9a910a60
-s ours
...
am skip reason: Merged-In I8600283d9ff2ebcb45df95e5259484a60921fb1a with SHA-1 c96220c282
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2183507
Change-Id: Ieeb614105a88c6dd27a46a49b2a2bff8d2252892
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-22 08:13:18 +00:00
Treehugger Robot
4c9a910a60
Merge "Add security context for com.google.usf.non_wake_up/wakeup." am: d6ff29d1ca
am: a4d246abac
am: 6481874c77
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2183507
Change-Id: Ica06811653100886c99ea2d01ab09edfdd83585f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-22 07:46:49 +00:00
Treehugger Robot
6481874c77
Merge "Add security context for com.google.usf.non_wake_up/wakeup." am: d6ff29d1ca
am: a4d246abac
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2183507
Change-Id: Ib9ba46ae5b7e0454927f18e48a85f03f6847ef83
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-22 07:29:18 +00:00