Commit graph

3869 commits

Author SHA1 Message Date
allieliu
1836eef208 vendor_init: add esim_modem_prop am: a1f81bef7a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I42e56be7d2bfd15a024662ffb5d878c167aef455
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:42:35 +00:00
allieliu
a1f81bef7a vendor_init: add esim_modem_prop
Bug: 279988311

Change-Id: I5f8759baff65073b758ce335772e72a383827d05
Signed-off-by: allieliu <allieliu@google.com>
2023-05-16 00:58:49 +00:00
Adam Shih
7264b96871 introduce a new sepolicy owner am: 69e2720089 am: 4d493ff000 am: 4a3413c202
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2583990

Change-Id: I8e3dee21b5840bf4566d73c885231b4d4c19793c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 04:22:09 +00:00
Adam Shih
4a3413c202 introduce a new sepolicy owner am: 69e2720089 am: 4d493ff000
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2583990

Change-Id: I019861c4f4d32d3e8ad83298b1a8b4a85f365a43
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 03:37:47 +00:00
Adam Shih
4d493ff000 introduce a new sepolicy owner am: 69e2720089
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2583990

Change-Id: Ibdb2717e2f65dce5ad30e62e61803dedf7d8ec3e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 02:59:33 +00:00
Wilson Sung
224f05b22c Update SELinux error am: 20364fe3b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: Ic6cf256dc83f0248067a315dc58504b246fa6365
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 03:31:44 +00:00
Wilson Sung
20364fe3b3 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 281814691
Change-Id: I2f73f5b75aec1145dee615499a7442400defbf8a
2023-05-11 06:43:02 +00:00
Adam Shih
69e2720089 introduce a new sepolicy owner
Bug: 281631102
Test: N/A
Change-Id: Ie1221e85bbfabf18c3bdd1a248b768e92f092426
2023-05-10 01:48:48 +00:00
Jinyoung Jeong
ce1800b5f6 Fix LPA crash due to selinux denial am: d3a0214801
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22948153

Change-Id: I026ba91f588c849694a158205b815b4f49217747
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:53:20 +00:00
Jinyoung Jeong
d3a0214801 Fix LPA crash due to selinux denial
Bug: 280336861
Test: No crash found during LPA basic tests: download eSIM,
enable/disalbe eSIM.

Change-Id: I15227415993ef3975e183f500711416f8eb8e62c
2023-05-02 11:02:39 +00:00
TreeHugger Robot
c97416242b Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev am: eccb905391
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I472d9ffb5c3311e8c6e64e7ae306980696de92b9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 06:59:23 +00:00
TreeHugger Robot
eccb905391 Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev 2023-05-02 03:16:03 +00:00
Jin Jeong
8028eaadab Merge "Fix SELinux error for com.google.android.euicc" into udc-dev am: 5b3b2c2b1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22878977

Change-Id: I68cae549366196d90584d83ce006647abc621856
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 03:19:13 +00:00
Jin Jeong
5b3b2c2b1c Merge "Fix SELinux error for com.google.android.euicc" into udc-dev 2023-04-30 02:51:46 +00:00
martinwu
3785b0d271 [TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common
Bug: 264490014
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949
Merged-In: Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949
2023-04-29 13:03:01 +00:00
Jinyoung Jeong
42a0c82065 Fix SELinux error for com.google.android.euicc
bug: 279548423
Test: http://fusion2/bb76429b-7d84-4e14-b127-8458abb3e2ed
Change-Id: I00bdf71f04eec985147189eb1b474c7ff6797023
2023-04-28 13:39:35 +00:00
Bruno BELANYI
11b0981e1c Merge changes from topic "hal_neuralnetworks_armnn-selinux-exceptions - udc" into udc-dev am: 88f5acac54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22787136

Change-Id: Ibf47223785237dc1f5a933216d708184fd2dc249
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:40:50 +00:00
Bruno BELANYI
113ff4c81d Remove 'hal_neuralnetworks_armnn' sysprop exceptions am: b4001ec206
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786209

Change-Id: I476f226c90990b96cb2bb60dd79236096392d6a9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:40:47 +00:00
Bruno BELANYI
c58fe6e7a4 Add ArmNN config sysprops SELinux rules am: a668555419
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786488

Change-Id: I85259c5a10a36cf530488f92e69b288fb9767f5b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:40:38 +00:00
Bruno BELANYI
88f5acac54 Merge changes from topic "hal_neuralnetworks_armnn-selinux-exceptions - udc" into udc-dev
* changes:
  Remove 'hal_neuralnetworks_armnn' '/data' access exception
  Remove 'hal_neuralnetworks_armnn' sysprop exceptions
  Add ArmNN config sysprops SELinux rules
2023-04-27 08:06:48 +00:00
Martin Wu
26ca98b36b Revert "Remove tcpdump sepolicy from gs101 and move sepolicy to ..." am: e30ee618d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22891379

Change-Id: Idcf669fc6a732228fed63e9e0517cae913829914
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 07:11:46 +00:00
Martin Wu
e30ee618d6 Revert "Remove tcpdump sepolicy from gs101 and move sepolicy to ..."
Revert submission 22814097-Fix-tcpdump-sepolicy

Reason for revert: build break

Reverted changes: /q/submissionid:22814097-Fix-tcpdump-sepolicy

Change-Id: I3d47d22250b435416c4ca44ff1956569662591ee
2023-04-27 02:20:55 +00:00
martinwu
8e667e4f78 Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 6be45972bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22814097

Change-Id: Iede02f52dfb079eb65796f849431985f62363bac
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:18:16 +00:00
martinwu
6be45972bb Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common
Bug: 264490014
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: I3d0cb388cf9b7c96d2856f46c0440b4017477480
2023-04-27 01:38:04 +00:00
Bruno BELANYI
9702cb57f2 Remove 'hal_neuralnetworks_armnn' '/data' access exception
The mali driver has been configured not to look there anymore.

Bug: 205779871
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:347dfbe925e2218189d82d37697540af25401a22)
Merged-In: Ic8bf0d51414461689ee5768821a2a1acda923c41
Change-Id: Ic8bf0d51414461689ee5768821a2a1acda923c41
2023-04-26 17:21:18 +00:00
Bruno BELANYI
b4001ec206 Remove 'hal_neuralnetworks_armnn' sysprop exceptions
Bug: 205202540
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:e4254a16aa516f5960f48732b078aad4ed63df6f)
Merged-In: Ied38dc6b323911aa909f4f42b66ee404fc7062fa
Change-Id: Ied38dc6b323911aa909f4f42b66ee404fc7062fa
2023-04-26 17:20:54 +00:00
Bruno BELANYI
a668555419 Add ArmNN config sysprops SELinux rules
Bug: 205202540
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:0f99f3e63450befc661d38827e9afc853ca9257a)
Merged-In: I70c89dcc4b2bbe665d69cc4be1ac2f6cf8155a10
Change-Id: I70c89dcc4b2bbe665d69cc4be1ac2f6cf8155a10
2023-04-26 08:12:54 +00:00
Joseph Jang
b7dc8e13de Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-dev am: 37e90d3f3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22808538

Change-Id: I280f6280400602ee9ef6c980fcf8f645fd603368
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 04:07:33 +00:00
Joseph Jang
37e90d3f3a Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-dev 2023-04-26 03:24:40 +00:00
Joseph Jang
ac6f4e0d00 Move recovery.te to device/google/gs-common/dauntless/sepolicy
Bug: 279381809
Change-Id: If41449f97e729053caa98930cc7f2ef9fd6d844e
2023-04-24 08:09:23 +00:00
Adam Shih
b515f71918 Update error on ROM 9930000 am: 843b0ad6b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22802738

Change-Id: Id0a018e58bafe93b87e7c1ebdccabf389088cef2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-24 03:42:59 +00:00
Adam Shih
843b0ad6b4 Update error on ROM 9930000
Bug: 277989397
Bug: 277155042
Bug: 277989067
Test: scanBugreport
Change-Id: I38a3f852e2f5f0f6895db15141825909361a267d
Merged-In: I38a3f852e2f5f0f6895db15141825909361a267d
2023-04-24 09:58:14 +08:00
Xin Li
ab04ca6af0 [automerger skipped] Merge Android 13 QPR3 tm-qpr-dev-plus-aosp-without-vendor@9936994 am: 054c89fdad -s ours am: e0887325f5 -s ours
am skip reason: Merged-In I1c9544ca2ebe1857c439f00c4589f739aca8e157 with SHA-1 893d8ddff7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22724789

Change-Id: I1c8a8f3601a437caed6423b08fa15c2c2aa937c7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 22:34:34 +00:00
Xin Li
e0887325f5 [automerger skipped] Merge Android 13 QPR3 tm-qpr-dev-plus-aosp-without-vendor@9936994 am: 054c89fdad -s ours
am skip reason: Merged-In I1c9544ca2ebe1857c439f00c4589f739aca8e157 with SHA-1 893d8ddff7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22724789

Change-Id: I1b8a0ebbcf60fd773379708434a05452cf6d4d06
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 18:15:50 +00:00
Xin Li
054c89fdad Merge Android 13 QPR3 tm-qpr-dev-plus-aosp-without-vendor@9936994
Bug: 275386652
Merged-In: I1c9544ca2ebe1857c439f00c4589f739aca8e157
Change-Id: Ib7236e8f3c5929dd76ad1644511724d618821373
2023-04-18 16:32:08 -07:00
jimsun
26e3d2abd0 rild: allow rild to ptrace
06-20 18:47:41.940000  8708  8708 I auditd  : type=1400 audit(0.0:7): avc: denied { ptrace } for comm="libmemunreachab" scontext=u:r:rild:s0 tcontext=u:r:rild:s0 tclass=process permissive=0
06-20 18:47:41.940000  8708  8708 W libmemunreachab: type=1400 audit(0.0:7): avc: denied { ptrace } for scontext=u:r:rild:s0 tcontext=u:r:rild:s0 tclass=process permissive=0

Bug: 263757077
Test: manual
Change-Id: I35ad31e6cc4e2942c671e51720f28a9abce3dcca
2023-04-18 07:48:32 +00:00
Bruno BELANYI
bf8675143b Merge "Use restricted vendor property for ARM runtime options" into udc-dev 2023-04-17 10:59:23 +00:00
Xin Li
ab4e3e986a [automerger skipped] Merge TQ2A.230405.003 am: 82232b6423 am: 26cfa34cb7 -s ours am: 9505121ada -s ours
am skip reason: Merged-In I8c265919f7ae4b18aa304b0a584536d2a0f4b27a with SHA-1 9828cc747a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2530520

Change-Id: I07cabb680ee2172a60bdc37f9a61a2af528844d1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 20:57:06 +00:00
Xin Li
9505121ada [automerger skipped] Merge TQ2A.230405.003 am: 82232b6423 am: 26cfa34cb7 -s ours
am skip reason: Merged-In I8c265919f7ae4b18aa304b0a584536d2a0f4b27a with SHA-1 9828cc747a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2530520

Change-Id: Ie91202c445df25847c5bcd37cf8224e7bae6536e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 20:22:54 +00:00
Xin Li
26cfa34cb7 Merge TQ2A.230405.003 am: 82232b6423
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2530520

Change-Id: I92a1d4dff4571e4aa8f11ca6f71978d549bfc812
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 19:00:54 +00:00
Mike McTernan
b46b936df8 confirmationui: Allow securedpud to access the systemsuspend HAL.
In order to use a wakelock, securedpud needs access to binder and the
system_suspend_service HAL.

Bug: 274851247
Test: manual, trigger TUI and check for AVC denials
Change-Id: Ibd27d32e092269f91d6557ebddcd27d4ccf1355a
2023-04-11 13:04:53 +00:00
Xin Li
82232b6423 Merge TQ2A.230405.003
Bug: 271343657
Merged-In: I8c265919f7ae4b18aa304b0a584536d2a0f4b27a
Change-Id: I61dd94e23d10e5405135626487ddadddb1f89f9f
2023-04-10 23:55:29 -07:00
Wilson Sung
c41cb55d4f Update SELinux error
Test: scanBugreport
Bug: 277528855
Change-Id: Ia59cd4045433f2e82a602672fe533e27e87b0275
2023-04-10 11:02:52 +08:00
Adam Shih
d186da49ea Merge "use dumpsate from gs-common" into udc-dev 2023-04-10 01:11:17 +00:00
Wilson Sung
816622f352 Update error on ROM 9891405
Bug: 277155042
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ic2129188db52ec85a8afaf92c507a42695e82804
2023-04-07 14:56:21 +08:00
Adam Shih
240c435174 use dumpsate from gs-common
Bug: 273380985
Test: adb bugreport
Change-Id: I9092e2e004e3ad0b3667b948ed4d633cd50d088c
2023-04-07 13:02:21 +08:00
Victor Liu
d87df92740 Merge "uwb: add permission for ccc ranging" into udc-dev 2023-04-06 20:57:49 +00:00
feiyuchen
391f954d5d Allow camera HAL to access edgetpu_app_service in gs101
We are seeing SELinux error b/276911450. It turns out that I only added the SE policy for 2023 device ag/22248613, but I forgot to add it for gs101 and gs201. So I created this CL.

See more background in ag/22248613.

Test: For gs201, I tested on my Pixel7 and I saw no more error. For gs101, I just did mm.
Bug: 275016466
Bug: 276911450
Change-Id: I3d691128daa2d7115f80c378f7b42de334cd8ed5
2023-04-04 21:32:36 +00:00
Bruno BELANYI
7838603828 Use restricted vendor property for ARM runtime options
They need to be read by everything that links with libmali, but we don't
expect anybody to actually write to them.

Bug: b/272740524
Test: CtsDeqpTestCases (dEQP-VK.protected_memory.stack.stacksize_*)
Change-Id: I963fb55fb92ef5f91426dbec913c901e58cacf64
2023-04-04 13:04:00 +00:00
Victor Liu
a55bb8682c uwb: add permission for ccc ranging
Bug: 255649425
Change-Id: I05aac586146bf25569b5f6251d2fd62b921631be
2023-03-31 14:04:13 -07:00