Commit graph

2350 commits

Author SHA1 Message Date
Petri Gynther
61f76249ec Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0 am: adee4062ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573

Change-Id: Id2cbb2f9059a0cb3250582df866292f9fa7f795f
2021-07-22 00:22:42 +00:00
Petri Gynther
adee4062ad Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573

Change-Id: Ie5f417c81373d599403646c90ddeda78b84c0b7a
2021-07-21 23:50:44 +00:00
Petri Gynther
056fbce364 Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573

Change-Id: I7a64114eed37ee384dba61a492fbb58cc2a30831
2021-07-21 23:46:06 +00:00
Badhri Jagan Sridharan
1ebd84703b Update Usb hal permissions to allow pushing overheat suez events
Usb hal now pushes the Usb port overheat event through statsd.
Usb hal also accesses usbc-throttling stats to gather info.

Bug: 193615568
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
Change-Id: I4918458bc7a8a25d7655b66d1fe40eafc7ccb070
2021-07-21 14:38:55 -07:00
Sungwoo choi
b47cdf282a Allow to set vendor_rild_prop for oemrilservice_app
Bug: 193367138
Test: make sure no denied logs in oemrilservice_app when access the
radio property

Signed-off-by: Sungwoo choi <sungwoo48.choi@samsung.com>
Change-Id: I9014002476df7b4e650f7a5a2f153e4eca47d23d
2021-07-21 08:01:44 +00:00
Petri Gynther
d12714ccc0 Add vbmeta_vendor_[ab] to file_contexts
Bug: 181909612
Test: build + install + boot to home
Change-Id: Ibb7bd8e5a61d86de1b51a3780a5bfa8cf4caf59b
2021-07-20 23:41:31 -07:00
sukiliu
900722b46d Update avc error on ROM 7566803 am: 411aa59779 am: 8dfbba48d1 am: 8db9300fee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: I4b698ad6de11442b6f520fc6ec077c554bf52aca
2021-07-21 06:35:39 +00:00
sukiliu
ed55111a75 Update avc error on ROM 7566803 am: 411aa59779 am: d1f198d5eb am: f7c4032235
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: I6575e49f8d021d766f92de89c934858668ebbb27
2021-07-21 06:35:34 +00:00
sukiliu
8db9300fee Update avc error on ROM 7566803 am: 411aa59779 am: 8dfbba48d1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: I38bb7bb68cf50cbb03652809e7dddadb44328346
2021-07-21 06:14:01 +00:00
sukiliu
f7c4032235 Update avc error on ROM 7566803 am: 411aa59779 am: d1f198d5eb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: Id602f32ef1157321a7bc399bfb5398ccec4f3ca4
2021-07-21 06:13:41 +00:00
sukiliu
d1f198d5eb Update avc error on ROM 7566803 am: 411aa59779
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: I71dbe7cfb4ff8f409e9565e4a636ca8c4a3844ce
2021-07-21 06:02:08 +00:00
sukiliu
8dfbba48d1 Update avc error on ROM 7566803 am: 411aa59779
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: I5a350cde5a79354fa11d1892425ca0f98e64003c
2021-07-21 06:00:47 +00:00
sukiliu
411aa59779 Update avc error on ROM 7566803
avc: denied { read } for name="platform:1cc40000.sysmmu--platform:1ce00000.abrolhos" dev="sysfs" ino=21006 scontext=u:r:hal_neuralnetworks_darwinn:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0

Bug: 194241380
Test: PtsSELinuxTestCases
Change-Id: If7ee99a36bca88fffc37c12dc306e0453afb1395
2021-07-21 09:36:05 +08:00
TreeHugger Robot
3692a146d3 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b am: 2260028f16 am: e813912c48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: Ic99027407b05745f4a6717e53d2db72a2a1c2f4c
2021-07-20 13:41:18 +00:00
Alex Hong
e8b1b7f221 Allow suspend_control to access the AOC wakeup node am: f0589d11df am: 2727807154 am: 361ee2d046
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: I62bc9380e42c9fb1446373ce37479df447a5df43
2021-07-20 13:41:14 +00:00
TreeHugger Robot
14fdf8b899 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b am: 0c411447d7 am: 090c2fb351
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: Ia3cf294164bea8d150a763baa2ecd831f65acf26
2021-07-20 13:41:09 +00:00
Alex Hong
4daa5b0914 Allow suspend_control to access the AOC wakeup node am: f0589d11df am: 5cc647e87d am: 10892fb570
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: I60bc7ac257b46bd9d30e9176afb401b415d1e6c8
2021-07-20 13:41:04 +00:00
TreeHugger Robot
e813912c48 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b am: 2260028f16
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: Ibb4101ddaebda394a4a678633fb27f57842e54a1
2021-07-20 13:30:51 +00:00
Alex Hong
361ee2d046 Allow suspend_control to access the AOC wakeup node am: f0589d11df am: 2727807154
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: I56d662d091bca5b89103868724caaa92aefd2075
2021-07-20 13:30:49 +00:00
TreeHugger Robot
090c2fb351 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b am: 0c411447d7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: I42629d18ea3fe0bf41db5800fad4529308128578
2021-07-20 13:30:34 +00:00
Alex Hong
10892fb570 Allow suspend_control to access the AOC wakeup node am: f0589d11df am: 5cc647e87d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: I19641fc130eb75e7220b4a070de6dd95f8f6a0a8
2021-07-20 13:30:29 +00:00
TreeHugger Robot
0c411447d7 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: Ie50b322dca7fc0292a200a721870c6679456c5b5
2021-07-20 13:13:02 +00:00
Alex Hong
5cc647e87d Allow suspend_control to access the AOC wakeup node am: f0589d11df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: Ibfbe41ba694a27408dbd3ff6bdb5632d55a9a05e
2021-07-20 13:12:56 +00:00
TreeHugger Robot
2260028f16 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: Ib3679aac5321fee05088ae34fd6aee63e9345599
2021-07-20 13:12:08 +00:00
Alex Hong
2727807154 Allow suspend_control to access the AOC wakeup node am: f0589d11df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: I5279e246ce4ce654b76dc8fb213833c60ea32430
2021-07-20 13:12:04 +00:00
TreeHugger Robot
b3cc71258b Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev 2021-07-20 13:00:25 +00:00
Sungjun Park
0612b5aa85 ims: allow finding mediametrics_service for vendor_ims_app
For generate dtmf tone, ImsService find mediametrics_service.
So, added the seplicy rule for finding mediametrics_service.

<Related log>
07-14 15:37:21.391   411   411 E SELinux : avc:  denied  { find } for
pid=2263 uid=10217 name=media.metrics scontext=u:r:vendor_ims_app:s0:
c217,c256,c512,c768 tcontext=u:object_r:mediametrics_service:s0 tclass
=service_manager permissive=0

Bug: 192543653
Signed-off-by: Sungjun Park <sj19385.park@samsung.com>
Change-Id: Ia0f6610ecc454533d9584367694228245afe46e4
2021-07-20 09:35:23 +00:00
Alex Hong
f0589d11df Allow suspend_control to access the AOC wakeup node
Test: Check avc denials during boot
      $ adb shell su 0 dumpsys suspend_control
Bug: 194164089

Change-Id: I9edcf6398f61daec6fdde0f7ac69ddd5d275f753
2021-07-20 09:29:15 +00:00
TreeHugger Robot
7d2d731c50 Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc am: 8be9d35300 am: b53f02ed98
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: I4191c08a3b70c48bb438e7d542d0a478ee29936c
2021-07-20 06:47:13 +00:00
TreeHugger Robot
a8686b425c Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc am: 5c2f8d4ba6 am: 40be34ec64
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: Id31de032364cd3866d24f8a196589b2b11122947
2021-07-20 06:47:05 +00:00
TreeHugger Robot
b53f02ed98 Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc am: 8be9d35300
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: I45ec1aca94b08fe5c363567df3a03097b4470e53
2021-07-20 06:35:28 +00:00
TreeHugger Robot
40be34ec64 Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc am: 5c2f8d4ba6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: I0507619c0246eb44bab1edfcb878c03cdaf0a113
2021-07-20 06:31:18 +00:00
TreeHugger Robot
8be9d35300 Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: Ifdd759f02d516efa1691833b84e9129ed7136fe8
2021-07-20 06:23:08 +00:00
TreeHugger Robot
5c2f8d4ba6 Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: I95b78d239e03912b0ecbaf17645a414f157a5320
2021-07-20 06:21:36 +00:00
TreeHugger Robot
fa62e602fc Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev 2021-07-20 06:09:35 +00:00
sukiliu
6d2e9331c6 Update avc error on ROM 7562467 am: d9309ef34d am: f89cc13852 am: e7a39a73f3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: I8c668ae87781d3b19a1516e3ab730531b4966a1a
2021-07-20 05:09:19 +00:00
sukiliu
49c7f0c978 Update avc error on ROM 7562467 am: d9309ef34d am: 909d2db713 am: ee3af65a55
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: I7083342fc615f04384dac46061fe5a4424787bc7
2021-07-20 05:09:12 +00:00
sukiliu
e7a39a73f3 Update avc error on ROM 7562467 am: d9309ef34d am: f89cc13852
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: I3745256ac645b80f60815bc002f7ac5c1d9a091e
2021-07-20 04:55:35 +00:00
sukiliu
ee3af65a55 Update avc error on ROM 7562467 am: d9309ef34d am: 909d2db713
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: Ie4f2b994297a682dfcec4306df1ad24dd9eb9bb3
2021-07-20 04:55:09 +00:00
sukiliu
909d2db713 Update avc error on ROM 7562467 am: d9309ef34d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: Ida52f53a71258077d8163be3984c006e1d905f00
2021-07-20 04:37:32 +00:00
sukiliu
f89cc13852 Update avc error on ROM 7562467 am: d9309ef34d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: I5e5e3cb6af90ed614aeb32aca5697f903ccfa46b
2021-07-20 04:36:34 +00:00
sukiliu
d9309ef34d Update avc error on ROM 7562467
avc: denied { read } for name="u:object_r:odsign_prop:s0" dev="tmpfs" ino=229 scontext=u:r:postinstall_dexopt:s0 tcontext=u:object_r:odsign_prop:s0 tclass=file permissive=0
avc: denied { read } for comm="otapreopt" name="u:object_r:odsign_prop:s0" dev="tmpfs" ino=229 scontext=u:r:postinstall_dexopt:s0 tcontext=u:object_r:odsign_prop:s0 tclass=file permissive=0

Bug: 194142604
Bug: 194065991
Test: PtsSELinuxTestCases
Change-Id: Ic3bb544f05ffff0df42f820d2f9cf6cd7cb24879
2021-07-20 10:03:30 +08:00
TreeHugger Robot
5ca9d3123e Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53 am: 8b76ff03de am: 35ccf64620
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: I5374e770b6403c3e80526d21baf2088f9e6dc6c0
2021-07-19 21:40:17 +00:00
TreeHugger Robot
8f3b454362 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53 am: dd0acb63a4 am: 2706f2f475
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: I534de4958cc7e3ea0b024dedd9edf07febec0434
2021-07-19 21:40:02 +00:00
Craig Dooley
12a162fde5 Merge "Add AoC wakeup stats to dump state" 2021-07-19 21:36:17 +00:00
TreeHugger Robot
35ccf64620 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53 am: 8b76ff03de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: I5b462c51cf2b8024506b4907392a18d6d204b830
2021-07-19 21:22:48 +00:00
TreeHugger Robot
2706f2f475 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53 am: dd0acb63a4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: I9409592f8dfe46bfad18e232dbf313d084348260
2021-07-19 21:22:23 +00:00
TreeHugger Robot
dd0acb63a4 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: Ia0bf59df027d801313955161d53139b7176c8b19
2021-07-19 21:10:22 +00:00
TreeHugger Robot
8b76ff03de Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: I0f77c7bfc41db1bdd361708218d5dd5750d5c682
2021-07-19 21:09:31 +00:00
TreeHugger Robot
f8b8e0cb53 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev 2021-07-19 20:54:38 +00:00