Edwin Wong
1407c2c46c
Merge "whitechapel: sepolicy for Widevine AIDL HAL" into tm-dev am: 6b7fff8497
am: 511fa44942
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16952398
Change-Id: Ia16c7a2038f770433749016f9b848c77b4400cc3
2022-02-23 17:47:34 +00:00
Edwin Wong
511fa44942
Merge "whitechapel: sepolicy for Widevine AIDL HAL" into tm-dev am: 6b7fff8497
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16952398
Change-Id: Ib242c34e2529238d776ec2bfaa3df9d262ae9bbd
2022-02-23 17:18:39 +00:00
Edwin Wong
7fa281bef7
Merge changes from topic "gs101-drm-aidl-tm-dev" into tm-mainline-prod am: 04f5b072fe
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16952398
Change-Id: I49312e57c049080aa458630cde2eb0937b7f28f7
2022-02-23 16:50:03 +00:00
Edwin Wong
6b7fff8497
Merge "whitechapel: sepolicy for Widevine AIDL HAL" into tm-dev
2022-02-23 01:08:19 +00:00
Edwin Wong
04f5b072fe
Merge changes from topic "gs101-drm-aidl-tm-dev" into tm-mainline-prod
...
* changes:
[automerge] whitechapel: sepolicy for Widevine AIDL HAL 2p: cb04f5981f
whitechapel: sepolicy for Widevine AIDL HAL
2022-02-23 01:08:19 +00:00
Edwin Wong
e5b9a2dd37
Merge changes from topic "gs101-drm-aidl-tm-dev"
...
* changes:
[automerge] whitechapel: sepolicy for Widevine AIDL HAL 2p: cb04f5981f
2p: cd2ded60aa
[automerge] whitechapel: sepolicy for Widevine AIDL HAL 2p: cb04f5981f
whitechapel: sepolicy for Widevine AIDL HAL
2022-02-23 01:08:19 +00:00
Aaron Tsai
dfd957cf04
[automerger skipped] Fix selinux error for system_app am: 05565c1f14
am: d2d83c8e2d
am: 84bacff9ab
am: e704af0ed7
am: 4aadbb9b12
-s ours
...
am skip reason: Merged-In I73d45f3cf1fe0bd918bb4856ce554e81702e4ff9 with SHA-1 05565c1f14
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1992670
Change-Id: I2df36cd58685e606a240a79f401d6fb4d70235db
2022-02-22 03:46:45 +00:00
Aaron Tsai
c308db7b79
Fix selinux error for system_app am: 05565c1f14
am: d2d83c8e2d
am: 84bacff9ab
am: e704af0ed7
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1992670
Change-Id: Ib123b407465af30ad4cabc2520f165651b856e48
2022-02-22 02:50:12 +00:00
Aaron Tsai
4aadbb9b12
Fix selinux error for system_app am: 05565c1f14
am: d2d83c8e2d
am: 84bacff9ab
am: e704af0ed7
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1992670
Change-Id: If65e0ca5ffae9149ed910919734ab0c295e68b4e
2022-02-22 02:48:51 +00:00
Aaron Tsai
e704af0ed7
Fix selinux error for system_app am: 05565c1f14
am: d2d83c8e2d
am: 84bacff9ab
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1992670
Change-Id: I6e91791926ff7d840c7317fbf5d9656338960132
2022-02-22 02:29:22 +00:00
Aaron Tsai
84bacff9ab
Fix selinux error for system_app am: 05565c1f14
am: d2d83c8e2d
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1992670
Change-Id: Ibdbeeee937e4c856adfebad71a956a343b820dfa
2022-02-22 01:56:28 +00:00
Aaron Tsai
d2d83c8e2d
Fix selinux error for system_app am: 05565c1f14
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1992670
Change-Id: Ia3c6c0aae82c19a5d1c019cce2700c5e64c8bb11
2022-02-22 01:35:41 +00:00
TreeHugger Robot
34d31c907b
Merge "[automerge] Temporarily don't audit hal_fingerprint to fix avc denial 2p: 5e2e261148
"
2022-02-21 16:17:54 +00:00
Shubham Dubey
7384b16034
[automerge] Temporarily don't audit hal_fingerprint to fix avc denial 2p: 5e2e261148
2p: 207c47f797
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16963324
Change-Id: I07d124191b6dd6e4a29834b1a62122cd787779af
2022-02-21 13:07:41 +00:00
Presubmit Automerger Backend
207c47f797
[automerge] Temporarily don't audit hal_fingerprint to fix avc denial 2p: 5e2e261148
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16963324
Change-Id: I7bec529ed0e22e9f7cee5d3d10312f2ed782082c
2022-02-21 13:07:35 +00:00
Presubmit Automerger Backend
aa76244476
[automerge] Temporarily don't audit hal_fingerprint to fix avc denial 2p: 5e2e261148
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16963324
Change-Id: Ibb2d6ae298945f1d3478a896a2ae796359d3c535
2022-02-21 13:07:35 +00:00
Shubham Dubey
5e2e261148
Temporarily don't audit hal_fingerprint to fix avc denial
...
Fix: 220263520
Change-Id: Ic06981fdc071c5027e6ccd137c1a2d19b9366c98
2022-02-21 13:07:23 +00:00
Aaron Tsai
05565c1f14
Fix selinux error for system_app
...
01-26 05:04:53.364 440 440 I auditd : avc: denied { find } for interface=vendor.samsung_slsi.telephony.hardware.radioExternal::IOemSlsiRadioExternal sid=u:r:system_app:s0 pid=3063 scontext=u:r:system_app:s0 tcontext=u:object_r:hal_exynos_rild_hwservice:s0 tclass=hwservice_manager permissive=0
Bug: 216531913
Test: verified with the forrest ROM and error log gone
Change-Id: I73d45f3cf1fe0bd918bb4856ce554e81702e4ff9
Merged-In: I73d45f3cf1fe0bd918bb4856ce554e81702e4ff9
2022-02-21 12:16:45 +08:00
Robert Shih
2427a4eb35
[automerge] whitechapel: sepolicy for Widevine AIDL HAL 2p: cb04f5981f
2p: cd2ded60aa
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16952398
Bug: 219538389
Change-Id: I1ac033f48b132f61e16d8f55bfaa265ddf9f1dea
2022-02-20 20:39:14 +00:00
Robert Shih
cd2ded60aa
[automerge] whitechapel: sepolicy for Widevine AIDL HAL 2p: cb04f5981f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16952398
Bug: 219538389
Change-Id: Ic0d398eb11da8a88e7c2f504a1131bc388008f3c
2022-02-20 20:39:03 +00:00
Robert Shih
cb04f5981f
whitechapel: sepolicy for Widevine AIDL HAL
...
Bug: 219538389
Test: atest GtsMediaTestCases
Change-Id: I431554dcbef014f8235f048ee062a218a2131f9c
2022-02-20 12:35:22 -08:00
Junkyu Kang
1b3242e008
[automerger skipped] Add persist.vendor.gps to sepolicy am: 9244051b35
am: a5b052c132
am: 86d20c2552
-s ours am: 07f17be3f3
-s ours am: 4e4ffaf6bc
-s ours
...
am skip reason: Merged-In I3fdaf564eacec340003eed0b5845a2c08922362c with SHA-1 b9ad182d4a
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1989989
Change-Id: I5ba0f0673c4b634ade8f81990812df02f3810b2d
2022-02-18 08:29:19 +00:00
Junkyu Kang
19479f5721
[automerger skipped] Add persist.vendor.gps to sepolicy am: 9244051b35
am: a5b052c132
am: 86d20c2552
-s ours am: 07f17be3f3
-s ours
...
am skip reason: Merged-In I3fdaf564eacec340003eed0b5845a2c08922362c with SHA-1 b9ad182d4a
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1989989
Change-Id: I152a68c9e339e0ac5101f684a4f540c5f4d504c4
2022-02-18 07:58:51 +00:00
Junkyu Kang
4e4ffaf6bc
[automerger skipped] Add persist.vendor.gps to sepolicy am: 9244051b35
am: a5b052c132
am: 86d20c2552
-s ours am: 07f17be3f3
-s ours
...
am skip reason: Merged-In I3fdaf564eacec340003eed0b5845a2c08922362c with SHA-1 b9ad182d4a
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1989989
Change-Id: I3c19666a52df166e21dde1d58d77381d0fccd7ce
2022-02-18 07:57:31 +00:00
Junkyu Kang
07f17be3f3
[automerger skipped] Add persist.vendor.gps to sepolicy am: 9244051b35
am: a5b052c132
am: 86d20c2552
-s ours
...
am skip reason: Merged-In I3fdaf564eacec340003eed0b5845a2c08922362c with SHA-1 b9ad182d4a
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1989989
Change-Id: I6f04e1a3b94eda3ddc3ace332aaebaa0da1e9501
2022-02-18 07:37:40 +00:00
Junkyu Kang
86d20c2552
Add persist.vendor.gps to sepolicy am: 9244051b35
am: a5b052c132
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1989989
Change-Id: I0844fbc02141fc6efa77d0cd47d00fd56a15f3e2
2022-02-18 07:12:19 +00:00
Junkyu Kang
a5b052c132
Add persist.vendor.gps to sepolicy am: 9244051b35
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1989989
Change-Id: Ibb1a3b4cca8fa3549eeef548d0939829413e8af1
2022-02-18 06:50:19 +00:00
TreeHugger Robot
d95da03285
Merge "Add hal_usb_impl permission"
2022-02-17 16:42:12 +00:00
Midas Chien
943cb1278a
Merge "Allow composer to read panel_idle sysfs node"
2022-02-17 09:17:44 +00:00
Junkyu Kang
9244051b35
Add persist.vendor.gps to sepolicy
...
Bug: 196002632
Test: PixelLogger can modify persist.vendor.gps.*
Change-Id: I3fdaf564eacec340003eed0b5845a2c08922362c
Merged-In: I3fdaf564eacec340003eed0b5845a2c08922362c
2022-02-17 08:55:49 +00:00
Midas Chien
32307ac30d
Allow composer to read panel_idle sysfs node
...
Change panel_idle selinux type to sysfs_display to allow composer can
read it.
Bug: 198808492
Bug: 219857957
Test: ls -Z to check selinux type
Test: make sure init(write) and composer(read) can access it
Change-Id: I77ae701a73a047b26b4ebb3c9d482c8cb9220999
2022-02-16 16:28:06 +08:00
Junkyu Kang
26e6d6f2b6
Merge "Add persist.vendor.gps to sepolicy"
2022-02-16 08:16:05 +00:00
Ricky Niu
05eb29e217
Add hal_usb_impl permission
...
Add hal_usb_impl get below permission
allow hal_usb_impl configfs:dir rw_dir_perms;
allow hal_usb_impl configfs:file create_file_perms;
avc denied
02-16 12:05:19.820 788 788 I android.hardwar: type=1400 audit(0.0:4882): avc: denied { search } for name="/" dev="configfs" ino=13419 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:configfs:s0 tclass=dir permissive=1
02-16 12:05:19.820 788 788 I android.hardwar: type=1400 audit(0.0:4883): avc: denied { write } for name="g1" dev="configfs" ino=38003 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:configfs:s0 tclass=dir permissive=1
02-16 12:05:19.820 788 788 I android.hardwar: type=1400 audit(0.0:4884): avc: denied { add_name } for name="UDC" scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:configfs:s0 tclass=dir permissive=1
02-16 12:05:19.820 788 788 I android.hardwar: type=1400 audit(0.0:4885): avc: denied { create } for name="UDC" scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:configfs:s0 tclass=file permissive=1
02-16 12:05:19.820 788 788 I android.hardwar: type=1400 audit(0.0:4886): avc: denied { write } for name="UDC" dev="configfs" ino=106988 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:configfs:s0 tclass=file permissive=1
Bug: 218997592
Signed-off-by: Ricky Niu <rickyniu@google.com>
Change-Id: I854479cef1a0b8ad518814fb9d20558cf52202e7
2022-02-16 14:27:36 +08:00
Xin Li
78a2d63a45
[automerger skipped] Merge sc-v2-dev-plus-aosp-without-vendor@8084891 am: 81caef24ad
-s ours am: 14abf01391
-s ours
...
am skip reason: Merged-In Icecca9f69ee9b57d43aa2864864951bf66c4905f with SHA-1 ca06222472
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16844142
Change-Id: I1d3f3dc99e04d19b61696677a4bf1fd87a168fe4
2022-02-14 18:21:12 +00:00
Xin Li
14abf01391
[automerger skipped] Merge sc-v2-dev-plus-aosp-without-vendor@8084891 am: 81caef24ad
-s ours
...
am skip reason: Merged-In Icecca9f69ee9b57d43aa2864864951bf66c4905f with SHA-1 ca06222472
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16844142
Change-Id: I12d27f867dd598e669aa86e1bec26c3aafbef4a3
2022-02-14 18:03:48 +00:00
Xin Li
81caef24ad
Merge sc-v2-dev-plus-aosp-without-vendor@8084891
...
Bug: 214455710
Merged-In: Icecca9f69ee9b57d43aa2864864951bf66c4905f
Change-Id: Ibf8d551c16f8f941cfc8072a29ef5c57e8bef170
2022-02-11 07:12:06 +00:00
Ankit Goyal
9e7ecb5fae
Merge "Rename vulkan library to be platform agnostic"
2022-02-11 00:52:58 +00:00
Jack Wu
dcb05d1377
sepolicy: gs101: fix charger_vendor permission denied
...
[ 27.025458][ T443] type=1400 audit(1644391560.640:11): avc: denied { search } for comm="android.hardwar" name="vendor" dev="tmpfs" ino=2 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=0
[ 26.563658][ T447] type=1400 audit(1644397622.588:5): avc: denied { search } for comm="android.hardwar" name="/" dev="sda1" ino=2 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_file:s0 tclass=dir permissive=0
[ 27.198144][ T442] type=1400 audit(1644398156.152:5): avc: denied { search } for comm="android.hardwar" name="battery" dev="sda1" ino=12 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=dir permissive=0
[ 27.327035][ T443] type=1400 audit(1644398785.276:5): avc: denied { read } for comm="android.hardwar" name="defender_active_time" dev="sda1" ino=17 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=file permissive=0
[ 27.355009][ T443] type=1400 audit(1644398785.276:6): avc: denied { write } for comm="android.hardwar" name="defender_charger_time" dev="sda1" ino=16 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=file permissive=0
[ 26.771705][ T444] type=1400 audit(1644379988.804:4): avc: denied { read } for comm="android.hardwar" name="specification_version" dev="sysfs" ino=56257 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0
[ 27.898684][ T445] type=1400 audit(1644392754.928:8): avc: denied { read } for comm="android.hardwar" name="thermal_zone6" dev="sysfs" ino=15901 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=lnk_file permissive=0
[ 29.180076][ T447] type=1400 audit(1644397625.200:9): avc: denied { write } for comm="android.hardwar" name="mode" dev="sysfs" ino=15915 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=0
[ 27.043845][ T444] type=1400 audit(1644379988.808:9): avc: denied { search } for comm="android.hardwar" name="thermal" dev="tmpfs" ino=899 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:thermal_link_device:s0 tclass=dir permissive=0
[ 27.064916][ T444] type=1400 audit(1644379988.808:10): avc: denied { read } for comm="android.hardwar" name="u:object_r:vendor_battery_defender_prop:s0" dev="tmpfs" ino=306 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=file permissive=0
[ 27.356266][ T444] type=1107 audit(1644404450.376:4): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.battery.defender.state pid=457 uid=1000 gid=1000 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=property_service permissive=0'
Bug: 218485039
Test: manually test, no avc: denied
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I091dbbca35fb833e59fdbc234d74b90bfe74014c
2022-02-09 19:16:22 +08:00
TeYuan Wang
2d02b11311
move vendor_thermal_prop rules to pixel-sepolicy am: c292dd65ba
am: aeebc898cb
am: 912673f8ce
am: 9ad50b3952
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960120
Change-Id: I8c46cd1a01c86d453886e246e000d90974cd8806
2022-02-08 12:07:35 +00:00
TeYuan Wang
9ad50b3952
move vendor_thermal_prop rules to pixel-sepolicy am: c292dd65ba
am: aeebc898cb
am: 912673f8ce
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960120
Change-Id: Iaf7721a2b7a2f4def1a302c71d6f293b371b7661
2022-02-08 11:51:56 +00:00
TeYuan Wang
912673f8ce
move vendor_thermal_prop rules to pixel-sepolicy am: c292dd65ba
am: aeebc898cb
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960120
Change-Id: Ib49a0a78843456c9b170dd968259e9e1d51e6317
2022-02-08 11:40:52 +00:00
TeYuan Wang
aeebc898cb
move vendor_thermal_prop rules to pixel-sepolicy am: c292dd65ba
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960120
Change-Id: Id7692611610e82be8489a0c73e2040d15101e09b
2022-02-08 10:04:37 +00:00
TeYuan Wang
c292dd65ba
move vendor_thermal_prop rules to pixel-sepolicy
...
Bug: 213257759
Test: no denied log after "setprop persist.vendor.disable.thermal.control 1"
Change-Id: Ic150959bc6084034d9afcc70bf446692fbe22d11
2022-02-08 08:10:32 +00:00
Treehugger Robot
91dcb418e2
Merge "genfs_contexts: add paths for unnamed cs40l25a i2c devices" am: 2c1750e537
am: 02e7ad9fb5
am: d70a957518
am: 674aa657fb
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1972966
Change-Id: I796f41b8ac07406a747dde6cd77c9878339e2de7
2022-02-08 02:12:46 +00:00
Treehugger Robot
674aa657fb
Merge "genfs_contexts: add paths for unnamed cs40l25a i2c devices" am: 2c1750e537
am: 02e7ad9fb5
am: d70a957518
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1972966
Change-Id: I109245e668ffa38851ced506270ec6d6d1d29fd1
2022-02-08 01:49:40 +00:00
Treehugger Robot
d70a957518
Merge "genfs_contexts: add paths for unnamed cs40l25a i2c devices" am: 2c1750e537
am: 02e7ad9fb5
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1972966
Change-Id: I1da16035bcc4af82e8c671398b76daf7cc8efd28
2022-02-08 01:26:58 +00:00
Treehugger Robot
02e7ad9fb5
Merge "genfs_contexts: add paths for unnamed cs40l25a i2c devices" am: 2c1750e537
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1972966
Change-Id: I2807e116f14305f0e829eec6907db6c817f000c3
2022-02-08 01:08:56 +00:00
Treehugger Robot
2c1750e537
Merge "genfs_contexts: add paths for unnamed cs40l25a i2c devices"
2022-02-08 00:53:08 +00:00
Will McVicker
5a88ee6af1
genfs_contexts: add paths for unnamed cs40l25a i2c devices
...
In the 5.10 kernel, the i2c paths are named using an out-of-tree patch
[1]. For kernels that don't support that, let's add the unnamed sysfs
paths as well to the selinux policy.
[1] https://android-review.googlesource.com/c/kernel/common/+/1646148
Bug: 217774013
Change-Id: I3a1f279270d22bf82144ce60a08c215308764be3
2022-02-04 11:54:06 -08:00
Marco Nelissen
126a85b4ec
Allow logd to read the Trusty log am: 7df1fa1574
am: 983f5f2d96
am: 6072583f8a
am: a9004241c2
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1971381
Change-Id: Ie626aaa3652cb8aa47062f32c38d658d5f1ce251
2022-02-04 02:34:39 +00:00