Commit graph

1434 commits

Author SHA1 Message Date
SalmaxChang
8bbd5d3430 hal_dumpstate_default: fix avc error am: de88097de5 am: 12053bbe8d am: ba3c6036fc
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2130236

Change-Id: I1fafe1f2fe007191a32368f82b06985038ea029c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-21 02:41:35 +00:00
SalmaxChang
ba3c6036fc hal_dumpstate_default: fix avc error am: de88097de5 am: 12053bbe8d
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2130236

Change-Id: I9167e7032d77a57f41f2592378b551b60f09a375
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-21 02:24:59 +00:00
SalmaxChang
de88097de5 hal_dumpstate_default: fix avc error
avc: denied { search } for comm="dumpstate@1.1-s" name="modem_stat" dev="dm-44" ino=341 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:modem_stat_data_file:s0 tclass=dir

Bug: 235963885
Change-Id: Ib9625eefc367738bcd6594884b1f3b5e3ab5be54
2022-06-20 15:55:16 +08:00
Xin Li
cd158e3668 Merge "Merge Android 12 QPR 3" 2022-06-16 18:51:58 +00:00
TreeHugger Robot
5944f43530 Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: 2948419ca7 am: 263a6b0f8a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: Ib00d0945b6ad99f81d54888c9cf54788c8f51241
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 13:00:38 +00:00
TreeHugger Robot
e8bc84e9cd Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: f3cb1d1dbd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: Iff89da5b97cdb5c0d84042e4fbacae3fbeb9ae32
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 12:36:42 +00:00
TreeHugger Robot
263a6b0f8a Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: 2948419ca7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: Ia303c50a81833a4abe489682f9ce4755f5660a88
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 12:36:40 +00:00
TreeHugger Robot
906d963a47 Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: 59ae6f320e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: I8a6b5bd58c6001584d5e41f4d9d81fc524e3d430
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 12:36:03 +00:00
TreeHugger Robot
2948419ca7 Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: Ibe17ec9f6c2a396dc5f7b6e35e1b07b3b6b3356a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 12:19:33 +00:00
TreeHugger Robot
f3cb1d1dbd Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: Ibd20fe601db9a6c55bf665cd61c4f93866987a7b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 12:18:03 +00:00
TreeHugger Robot
b20c0652ad Merge "allow rlsservice read vendor camera property" into tm-dev 2022-06-16 12:02:28 +00:00
Jidong Sun
81d0d5f20f Merge "gs101: Allow BootControl to access sysfs blow_ar" 2022-06-15 20:53:26 +00:00
matthuang
bf1333f881 Add acd-com.google.usf.non_wake_up file to AoC file context.
Bug: 195077076
Test: ls -lZ dev/acd-com.google.usf.non_wake_up
Change-Id: If9add3528bde47a618bd884ce28121b6fa32754c
2022-06-14 10:00:35 +00:00
Adam Shih
d472e161ae mute update_engine probing mnt_vendor_file am: 5889704eff am: 203f473af5 am: c68fe289e3 am: 5bf5ffc8d3 am: d8d5fd4374
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2124912

Change-Id: I75a4589877c5803c6facbb189bd36662c66d2274
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-14 06:29:36 +00:00
Adam Shih
d8d5fd4374 mute update_engine probing mnt_vendor_file am: 5889704eff am: 203f473af5 am: c68fe289e3 am: 5bf5ffc8d3
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2124912

Change-Id: I782454658aaca803869555cfc1179c2901ff3dc8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-14 06:10:27 +00:00
Adam Shih
5bf5ffc8d3 mute update_engine probing mnt_vendor_file am: 5889704eff am: 203f473af5 am: c68fe289e3
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2124912

Change-Id: I2afec41baa838d8db9ab23d9d01def68249d99c5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-14 05:44:54 +00:00
Adam Shih
c68fe289e3 mute update_engine probing mnt_vendor_file am: 5889704eff am: 203f473af5
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2124912

Change-Id: I15a18379ff4969dcb043e2fae94cf6c9f13ac834
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-14 05:18:34 +00:00
Adam Shih
203f473af5 mute update_engine probing mnt_vendor_file am: 5889704eff
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2124912

Change-Id: I289ba5aa69251d8575f4bd65fbeb7a38c3e03886
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-14 04:58:45 +00:00
Adam Shih
5889704eff mute update_engine probing mnt_vendor_file
Bug: 187016910
Test: boot to home
Change-Id: I5f7141f817b543a1499ef5826177f3ac4945e857
2022-06-14 02:58:58 +00:00
JimiChen
143668225a allow rlsservice read vendor camera property
Bug: 233020488
Test: no avc denied
Change-Id: I96dee4482d4c0ff5b7852db635dc100a7ea4874c
2022-06-11 15:39:19 +08:00
Krzysztof Kosiński
17b9e03aa4 gs101: Add dontaudit statements to camera HAL policy. am: fbcf66a04a am: fd0bf19589
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18817845

Change-Id: Ib9af5b903bd9a70cd27448af38a167659c6bc867
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 21:38:34 +00:00
Krzysztof Kosiński
bdd4ecc51c gs101: Add dontaudit statements to camera HAL policy. am: fbcf66a04a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18817845

Change-Id: I6138022efbcdc8ce149123399d3a8277e69c64b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 21:04:38 +00:00
Krzysztof Kosiński
fd0bf19589 gs101: Add dontaudit statements to camera HAL policy. am: fbcf66a04a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18817845

Change-Id: Ib4b8f284129e9c32dc5c4d4a145634f46ea346eb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 21:04:37 +00:00
Adam Shih
a4fbd61988 suppress warning on writing key am: d34b17e30e am: b982767162 am: f6c8f2e547 am: 2227e772cd am: a7f0c51176
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2122355

Change-Id: I6e5d3b9cbe22976677739bcaeed54ee2f179a65d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 09:31:44 +00:00
Adam Shih
a7f0c51176 suppress warning on writing key am: d34b17e30e am: b982767162 am: f6c8f2e547 am: 2227e772cd
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2122355

Change-Id: If4d03859fea11711c90b20ee2b52bc2e3fe26b14
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 09:05:17 +00:00
Adam Shih
f6c8f2e547 suppress warning on writing key am: d34b17e30e am: b982767162
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2122355

Change-Id: I4fcb994efe51982b529dcc608fd9d30cd6b16291
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 08:25:25 +00:00
Adam Shih
b982767162 suppress warning on writing key am: d34b17e30e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2122355

Change-Id: Ic03d08a0f370647ccb0e4e06643b430b3337af69
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 08:05:26 +00:00
Adam Shih
d34b17e30e suppress warning on writing key
Bug: 235553565
Test: boot to home with no relevant error
Change-Id: I43bd360eabb55f504b48bb940d951d197256c593
2022-06-10 06:29:39 +00:00
Jidong Sun
61b72806e8 gs101: Allow BootControl to access sysfs blow_ar
Bug: 232277507
Signed-off-by: Jidong Sun <jidong@google.com>
Merged-In: I120672722a5ab8b5cadf0dce6d872e00c9fae642
Change-Id: I120672722a5ab8b5cadf0dce6d872e00c9fae642
2022-06-10 06:02:53 +00:00
Krzysztof Kosiński
fbcf66a04a gs101: Add dontaudit statements to camera HAL policy.
The autogenerated dontaudit statements in tracking_denials are
actually the correct policy. Move them to the correct file and
add comments.

Fix: 178980085
Fix: 180567725
Fix: 218585004
Test: build & camera check on raven
Change-Id: I3f3a1f64d403182d4f592f1cacc6ef8d1418062d
(cherry picked from commit b71d24d62c)
2022-06-09 20:53:05 +00:00
Jidong Sun
921ddd49e4 gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: 1745c41b8a am: 4f67f60276
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: If2428dba144e5bff4eeb305318083e40cd82997f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 21:47:43 +00:00
Jidong Sun
804b82350b gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: cb8342916d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: I2c6c3670ba5045c508efdd93756c80aed45ddf9b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 21:27:28 +00:00
Jidong Sun
4f67f60276 gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: 1745c41b8a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: I8629636e059bf5c2a58c1c91dd10c9a1da7b2109
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 21:23:49 +00:00
Jidong Sun
1ca6610378 gs101: Allow BootControl to access sysfs blow_ar am: f276625942
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: Ie359bb975e3e5315e910f33f3c69e16a9a0b2e32
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 20:30:32 +00:00
SalmaxChang
33cd2234df modem_svc: Fix avc error am: 1be95c2e33 am: cc38423bee am: b518f1e783 am: 1973c230c4 am: 70f66a06d4
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2116498

Change-Id: I5573e961fba98a34ffd4a4465ba980294b1514cf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-07 09:05:15 +00:00
SalmaxChang
70f66a06d4 modem_svc: Fix avc error am: 1be95c2e33 am: cc38423bee am: b518f1e783 am: 1973c230c4
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2116498

Change-Id: If2b5397b8379c08620b2a9b4b79c9381f8e94a14
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-07 08:40:21 +00:00
SalmaxChang
b518f1e783 modem_svc: Fix avc error am: 1be95c2e33 am: cc38423bee
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2116498

Change-Id: Ib768682c1848e24f7e78ecd20ce4041f368d8f2b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-07 07:48:21 +00:00
SalmaxChang
cc38423bee modem_svc: Fix avc error am: 1be95c2e33
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2116498

Change-Id: I2099f2e0371d6bfa2eb0e0784c9b6f38055ac09f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-07 07:29:39 +00:00
SalmaxChang
1be95c2e33 modem_svc: Fix avc error
avc: denied { write } for comm="modem_svc_sit" name="modem_stat" dev="dm-42" ino=331 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_data_file:s0 tclass=dir permissive=0

Bug: 234844823
Change-Id: I51db41d73be317cc7fc84981ac5f04e254a360d0
2022-06-06 20:36:44 +08:00
Jidong Sun
f276625942 gs101: Allow BootControl to access sysfs blow_ar
Bug: 232277507
Signed-off-by: Jidong Sun <jidong@google.com>
Change-Id: I120672722a5ab8b5cadf0dce6d872e00c9fae642
2022-06-04 01:23:40 +00:00
George Chang
3b0a628ef4 Update nfc from hidl to aidl service
Bug: 216290344
Test: atest NfcNciInstrumentationTests
Test: atest VtsAidlHalNfcTargetTest
Merged-In: I288474f691670655516728fe0e164a3e5689875c
Change-Id: I288474f691670655516728fe0e164a3e5689875c
2022-06-01 16:00:07 +00:00
George Chang
16cc944791 Merge "Update nfc from hidl to aidl service" into tm-qpr-dev 2022-06-01 06:19:39 +00:00
Jaegeuk Kim
3531538a25 Allow sysfs_devices_block to f2fs-tools
The fsck.f2fs checks the sysfs entries of block devices to get disk
information. Note that, the block device entries are device-specific.

1. fsck.f2fs
avc: denied { search } for comm="fsck.f2fs" name="0:0:0:0" dev="sysfs" ino=59803 scontext=u:r:fsck:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=dir permissive=0
avc: denied { getattr } for comm="fsck.f2fs" path="/sys/devices/platform/14700000.ufs/host0/target0:0:0/0:0:0:0/block/sda/sda7/partition" dev="sysfs" ino=60672 scontext=u:r:fsck:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0

2. mkfs.f2fs
avc: denied { search } for comm="make_f2fs" name="0:0:0:0" dev="sysfs" ino=59803 scontext=u:r:e2fs:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=dir permissive=0
avc: denied { getattr } for comm="make_f2fs" path="/sys/devices/platform/14700000.ufs/host0/target0:0:0/0:0:0:0/block/sda/sda8/partition" dev="sysfs" ino=61046 scontext=u:r:e2fs:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0

Bug: 172377740
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
Change-Id: I409feec84565f965baa96b06a5b08bcfc1a8db02
2022-05-24 14:08:14 -07:00
Kyle Tso
5cd6559689 Add logbuffer_pogo_transfer file_contexts am: 7347d18b73 am: caa8dc57b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: I181abe83407195830c74490f4f5ca9790f1925c3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 01:25:51 +00:00
Kyle Tso
7347d18b73 Add logbuffer_pogo_transfer file_contexts
Bug: 232556226
Signed-off-by: Kyle Tso <kyletso@google.com>
Change-Id: I1037d39f4187807e6aa9753339fae29e3bc89359
Merged-In: I1037d39f4187807e6aa9753339fae29e3bc89359
2022-05-21 15:25:58 +00:00
George Chang
b75f28c76d Merge "Revert "Update nfc from hidl to aidl service"" am: 610af798f5 am: bd74710d56
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098183

Change-Id: I8a52af1a6344042571a4804c16c681d7981f38a6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 16:34:07 +00:00
George Chang
bd74710d56 Merge "Revert "Update nfc from hidl to aidl service"" am: 610af798f5
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098183

Change-Id: I6db59e3a762df7b4906b0c14a7324b5955951c3d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 16:05:46 +00:00
George Chang
610af798f5 Merge "Revert "Update nfc from hidl to aidl service"" 2022-05-19 15:38:39 +00:00
George Chang
71db4c206b Revert "Update nfc from hidl to aidl service"
Revert submission 2098739-nfc_aidl_switch_gs101

Reason for revert: broken tests
Reverted Changes:
Ifde6ab418:Switch NFC from HIDL to AIDL
I288474f69:Update nfc from hidl to aidl service
Bug: 233194621
Change-Id: I1dad9c64073c8baffdf5f491c38bf1e568c9af29
2022-05-19 13:45:18 +00:00
Kyle Tso
a69cc7ca48 Merge "Add logbuffer_pogo_transfer file_contexts" am: 418d114796 am: 46b42ac02b am: 50797d0f2f am: d5e2b40846 am: 1f4c55de34
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098016

Change-Id: If2c8497fa93a0eff0edd91b3d8cc33151b9fc81b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 09:43:54 +00:00