Commit graph

647 commits

Author SHA1 Message Date
TreeHugger Robot
0578de6766 Merge "Allow mediacodec to access the vframe-secure DMA-BUF heap" into sc-dev am: 477e19f032 am: a85442bd10
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14704012

Change-Id: Id12fcf0e304c0bf06261ec1032a7b12577e6b4b8
2021-05-25 19:30:55 +00:00
TreeHugger Robot
efe8194fe0 Merge "Allow mediacodec to access the vframe-secure DMA-BUF heap" into sc-dev am: 477e19f032 am: 1e8934b03c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14704012

Change-Id: I728c697e49d26bc6d69d207d65599ca3e9a058c9
2021-05-25 19:29:59 +00:00
TreeHugger Robot
1e8934b03c Merge "Allow mediacodec to access the vframe-secure DMA-BUF heap" into sc-dev am: 477e19f032
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14704012

Change-Id: Id748c228fb796c76ccc01d3b19f829928c185adf
2021-05-25 19:07:26 +00:00
TreeHugger Robot
a85442bd10 Merge "Allow mediacodec to access the vframe-secure DMA-BUF heap" into sc-dev am: 477e19f032
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14704012

Change-Id: Ib1fe025493a3021d69bf7f79c8809098933ba1b8
2021-05-25 19:05:23 +00:00
TreeHugger Robot
477e19f032 Merge "Allow mediacodec to access the vframe-secure DMA-BUF heap" into sc-dev 2021-05-25 18:45:37 +00:00
TreeHugger Robot
be0ea48cef Merge "dumpstate: add sepolicy for hal_dumpstate to access sysfs_display" into sc-dev am: 57eefb5b13 am: cb80570b92
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608138

Change-Id: Ifa1536ee09f4cd8b3c048001798d5a2b6368bd70
2021-05-25 11:58:29 +00:00
TreeHugger Robot
667ba8cb19 Merge "dumpstate: add sepolicy for hal_dumpstate to access sysfs_display" into sc-dev am: 57eefb5b13 am: eeb41949c2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608138

Change-Id: I87d15c071e3de40b367badbe185db35cc14bb332
2021-05-25 11:51:11 +00:00
TreeHugger Robot
cb80570b92 Merge "dumpstate: add sepolicy for hal_dumpstate to access sysfs_display" into sc-dev am: 57eefb5b13
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608138

Change-Id: I594759be23e922d975f395da8a1d363925dc30ca
2021-05-25 11:50:55 +00:00
TreeHugger Robot
eeb41949c2 Merge "dumpstate: add sepolicy for hal_dumpstate to access sysfs_display" into sc-dev am: 57eefb5b13
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608138

Change-Id: I7a32e0b2bcef407665e75e58d0af2db52c08323b
2021-05-25 11:49:35 +00:00
TreeHugger Robot
57eefb5b13 Merge "dumpstate: add sepolicy for hal_dumpstate to access sysfs_display" into sc-dev 2021-05-25 10:12:38 +00:00
Roger Fang
594eecad3e Merge "sepolicy: gs101: add permission for the hardware info dsp part number" into sc-dev am: 56cbfd5a0a am: 21d7509c17
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696016

Change-Id: I1d70340b2152d73bec3d51651bb10f68e91952ae
2021-05-25 01:49:44 +00:00
Roger Fang
8522122b5f Merge "sepolicy: gs101: add permission for the hardware info dsp part number" into sc-dev am: 56cbfd5a0a am: 292faf8ed3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696016

Change-Id: I9278fff7d05c8e65bd8a9e4d39cc4a1a380ca10f
2021-05-25 01:47:48 +00:00
Roger Fang
292faf8ed3 Merge "sepolicy: gs101: add permission for the hardware info dsp part number" into sc-dev am: 56cbfd5a0a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696016

Change-Id: I929b5c4b1f37c2e0d8bee655fc0141a5a0bbbd4e
2021-05-25 01:24:04 +00:00
Roger Fang
21d7509c17 Merge "sepolicy: gs101: add permission for the hardware info dsp part number" into sc-dev am: 56cbfd5a0a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696016

Change-Id: If394b6c1a719b26a295b97980b94fb217442ef76
2021-05-25 01:22:03 +00:00
Roger Fang
56cbfd5a0a Merge "sepolicy: gs101: add permission for the hardware info dsp part number" into sc-dev 2021-05-25 01:02:39 +00:00
Ines Ayara
b311856023 Merge "Transition to using libedgetpu_util.so instead of libedgetpu_darwinn2.so. bug: b/182303547" into sc-dev am: dfb3783187 am: 304a92ea86
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14652412

Change-Id: I1c76cbd2013a9a3b4c8ca34184796a5a2719fdba
2021-05-25 00:41:40 +00:00
Ines Ayara
23ccf9362e Merge "Transition to using libedgetpu_util.so instead of libedgetpu_darwinn2.so. bug: b/182303547" into sc-dev am: dfb3783187 am: 1a7f873b06
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14652412

Change-Id: I330983da9a9c6d35f341c15cb5c367e3be7a6ce7
2021-05-25 00:39:48 +00:00
Ines Ayara
1a7f873b06 Merge "Transition to using libedgetpu_util.so instead of libedgetpu_darwinn2.so. bug: b/182303547" into sc-dev am: dfb3783187
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14652412

Change-Id: I46ee22509e42f4baf7df226b2e2eedcf3ecfaa6c
2021-05-25 00:18:54 +00:00
Ines Ayara
304a92ea86 Merge "Transition to using libedgetpu_util.so instead of libedgetpu_darwinn2.so. bug: b/182303547" into sc-dev am: dfb3783187
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14652412

Change-Id: Ie52a7d786c4344a7ba0e8bf6bbba87ae7f9d0999
2021-05-25 00:16:44 +00:00
Vinay Kalia
68849437bd Allow mediacodec to access the vframe-secure DMA-BUF heap
This patch fixes the following denial:

HwBinder:751_2: type=1400 audit(0.0:9): avc: denied { open } for
path="/dev/dma_heap/vframe-secure" dev="tmpfs" ino=734
scontext=u:r:mediacodec:s0 tcontext=u:object_r:vframe_heap_device:s0
tclass=chr_file permissive=0

Bug: 188121584
Test: AV1 secure video playback

Signed-off-by: Vinay Kalia <vinaykalia@google.com>
Change-Id: I455b39914dd4316a427f5f756b4fb94a2c4db204
2021-05-24 23:57:28 +00:00
Ines Ayara
dfb3783187 Merge "Transition to using libedgetpu_util.so instead of libedgetpu_darwinn2.so. bug: b/182303547" into sc-dev 2021-05-24 23:55:32 +00:00
Roger Fang
a97bfcc1e1 sepolicy: gs101: add permission for the hardware info dsp part number
Bug: 188757638
Test: Manually test passed

Signed-off-by: Roger Fang <rogerfang@google.com>
Change-Id: Id0c3226411b058b613b92e67174f14e64c6c3a2b
2021-05-24 08:16:34 +00:00
Chase Wu
373fed0402 Merge "genfs_contexts: fix path for cs40l25a i2c devices" into sc-v2-dev am: 80ab102382
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14675588

Change-Id: Id5204cd25e6fa512e485fc771cd1982b0e8f55dd
2021-05-24 01:20:31 +00:00
Chase Wu
80ab102382 Merge "genfs_contexts: fix path for cs40l25a i2c devices" into sc-v2-dev 2021-05-24 01:03:51 +00:00
Grace Chen
2930cbecc8 Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c am: f8cf5a7354
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I60b4d83788f3a3050341d5fea90500d193b69405
2021-05-21 19:39:12 +00:00
Grace Chen
cd5abb427f Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c am: ebadda8749
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I911c9d6ce67e9632b51dd1b6395cd59f59e1b29f
2021-05-21 19:37:36 +00:00
Grace Chen
ebadda8749 Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I62e7a0b9ff71f63221d6eaaad17a9333183912ec
2021-05-21 19:15:18 +00:00
Grace Chen
f8cf5a7354 Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I3ea91e07cb86b9ccbe5c27fdbd29eee2cb4512c6
2021-05-21 19:14:16 +00:00
Grace Chen
16a38b2b6c Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev 2021-05-21 19:10:52 +00:00
chasewu
168a6b0c72 genfs_contexts: fix path for cs40l25a i2c devices
Due to recent changes which modifies the device name for i2c devices,
cs40l25a device names are now changed from ?-0043 and ?-0042 to
"i2c-cs40l25a" and "i2c-cs40l25a-dual"

Bug: 188078957
Bug: 188651116
Test: manual check avc denied logs
Signed-off-by: chasewu <chasewu@google.com>
Change-Id: I97d3a030c94166f8e2cda7daa38166b1532b6d9f
2021-05-21 17:32:53 +08:00
TreeHugger Robot
2181d522f2 Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e am: 62e330941f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: I63745fe15fde523fadda9500cd759c9b71e12ee7
2021-05-21 07:21:25 +00:00
TreeHugger Robot
dc8c0f809d Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e am: 257af6acb7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: Ib3e9bc54dc3bb1e8bbebe07fe75ed5c23a132076
2021-05-21 07:19:35 +00:00
TreeHugger Robot
257af6acb7 Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: I57862e73bb90e64631501678dac852a7e4d96d45
2021-05-21 06:59:14 +00:00
TreeHugger Robot
62e330941f Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: I1f5224c5e295837500f52c7f2a91c7cf0c12e748
2021-05-21 06:57:16 +00:00
TreeHugger Robot
b42a03fa9e Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev 2021-05-21 06:41:20 +00:00
SHUCHI LILU
c685a924df Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7 am: d041f55312
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: Id1b3d85c7bd1ad4e4c223d0b8664f04ba519294e
2021-05-21 02:45:49 +00:00
SHUCHI LILU
119ce0c72d Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7 am: aeb7f90af4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: I24ff7f799fb7fbcf9ef61d95670f8838d7c8f361
2021-05-21 02:40:37 +00:00
SHUCHI LILU
d041f55312 Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: Ifa70b0837abb760f0d98ed67c2ecb00687e4ba04
2021-05-21 02:24:48 +00:00
SHUCHI LILU
aeb7f90af4 Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: I9ec909e4a4d07e8a46e6e4508b43a0ca8e5a5374
2021-05-21 02:22:40 +00:00
SHUCHI LILU
5128ec7db7 Merge "Update avc error on ROM 7380236" into sc-dev 2021-05-21 02:08:56 +00:00
TreeHugger Robot
029e66f94a Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c am: 91bf8bf616
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: I256ec8b202ec7c76556be2bb6d80e414fde91b9d
2021-05-21 01:30:21 +00:00
TreeHugger Robot
addf784b3c Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c am: 69ccb014e3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: Ibb80f378387945abfefb7f33c53a297c3cdd0f7b
2021-05-21 01:28:45 +00:00
TreeHugger Robot
69ccb014e3 Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: Idf3d758f0b1f6781bd8771d8bc82af7f599a42be
2021-05-21 01:14:52 +00:00
TreeHugger Robot
91bf8bf616 Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: I462cc640fc849f81ecf49e3f39e802e7ab5fa483
2021-05-21 01:12:47 +00:00
TreeHugger Robot
73b7ad4a3c Merge "pixel-selinux: add SJTAG policies" into sc-dev 2021-05-21 00:49:42 +00:00
Maurice Lam
d6ab0639e5 [automerger skipped] Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da -s ours am: 370ca9d7c9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: I166892d8e696ee7f25ea415f4de1a474f8b8f75a
2021-05-20 18:13:42 +00:00
Maurice Lam
93e06391c7 [automerger skipped] Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da am: feba9d73d4 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: I85bc048c45e44478850f465ab715b2696d2bf9fa
2021-05-20 18:08:01 +00:00
Maurice Lam
a8607c248f [automerger skipped] DO NOT MERGE. Revert Exo selinux policies for S am: a1bf959f13 am: cfee7fe9bc -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: I05835e12536db178fbfc9fdfeade2be4dbe8e57a
2021-05-20 18:08:00 +00:00
Maurice Lam
370ca9d7c9 [automerger skipped] Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: I58c7628b630bb1c3b0d1433aa3dc0f5bf08a1c0a
2021-05-20 17:51:46 +00:00
Maurice Lam
feba9d73d4 Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: Id77a1e6b874638e4f12e2e885d1ccde957cb496c
2021-05-20 17:50:09 +00:00