Commit graph

4482 commits

Author SHA1 Message Date
Xin Li
1a5459b192 Merge Android 14 QPR2 to AOSP main
Bug: 319669529
Merged-In: Ifb5d71336bd21aa8d8de377bf128758240ce1206
Change-Id: Ie8eca71839331df5a9d7306d574f6bd8951eab3b
2024-03-06 09:29:48 -08:00
Xin Li
1911f171f7 Merge Android 24Q1 Release (ab/11220357)
Bug: 319669529
Merged-In: Ib110dee4622befb0e4a04ade1c1805e822ce3b2e
Change-Id: Ifb5d71336bd21aa8d8de377bf128758240ce1206
2024-01-17 22:12:35 -08:00
Wilson Sung
9fa7db53a1 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 315907959
Test: scanBugreport
Bug: 315104713
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315104713
Change-Id: Ib110dee4622befb0e4a04ade1c1805e822ce3b2e
2023-12-12 06:34:48 +00:00
Xin Li
9b55292c7e [automerger skipped] Merge Android 14 QPR1 am: de4dc819b4 -s ours am: 83dca5bda2 -s ours am: 5bdc2b25ae -s ours
am skip reason: Merged-In Icf6128476f1f669918bc20d3eecd40c89893443f with SHA-1 9278e0c263 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2865760

Change-Id: Id33e5a1b2f4bf66182fff901edc98d0e783a38ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-11 22:57:51 +00:00
Xin Li
5bdc2b25ae [automerger skipped] Merge Android 14 QPR1 am: de4dc819b4 -s ours am: 83dca5bda2 -s ours
am skip reason: Merged-In Icf6128476f1f669918bc20d3eecd40c89893443f with SHA-1 9278e0c263 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2865760

Change-Id: I976a0db1da02934ee283984f69981bba537de3d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-11 22:02:39 +00:00
Xin Li
83dca5bda2 [automerger skipped] Merge Android 14 QPR1 am: de4dc819b4 -s ours
am skip reason: Merged-In Icf6128476f1f669918bc20d3eecd40c89893443f with SHA-1 9278e0c263 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2865760

Change-Id: Iae3de3a1ce50d4a45f2a7170ced3203e0494fc26
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-11 21:16:49 +00:00
Treehugger Robot
46cd746012 Merge "Fix rlsservice sepolicy" into main 2023-12-11 07:31:03 +00:00
Boon Jun Soh
548c2f184d Fix rlsservice sepolicy
Allows bugreport generation

Bug: 315255760
Bug: 309379598
Test: abd bugreport & ensure lack of rls avc denied logs
Change-Id: Ib3fc7b089c7aea4aea69f219d4c19847d39b0729
2023-12-11 14:39:32 +08:00
Wilson Sung
c42d6625f5 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 315720636
Bug: 315104713
Test: scanBugreport
Bug: 315720725
Bug: 315104713
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315720636
Bug: 315104713
Change-Id: I6fdd21dd1d78aee006d3d5dbeb57ae6912f9b42e
2023-12-11 02:54:34 +00:00
Xin Li
de4dc819b4 Merge Android 14 QPR1
Merged-In: Icf6128476f1f669918bc20d3eecd40c89893443f
Bug: 315507370
Change-Id: I1b9c6fbde63c54d034b44dae2c2cc7268393df53
2023-12-08 13:13:24 -08:00
David Drysdale
422638059a Merge "Add Secretkeeper HAL" into main 2023-12-06 10:21:03 +00:00
David Drysdale
03785012ed Add Secretkeeper HAL
Test: VtsAidlAuthGraphSessionTest
Bug: 306364873
Change-Id: I72d9d9afd57d265bd2a019a02d6aa364deb4acb4
2023-12-05 10:38:01 +00:00
Jason Chiu
3f3bfddaff gs101: move common sepolicy related to bootctrl hal to gs-common
Bug: 265063384
Change-Id: I2e7bee9c6be4a6802a759bf52fb412dd73f868bd
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-12-05 01:24:03 +08:00
Treehugger Robot
cc9b389190 Merge "Update SELinux error" into main 2023-12-04 03:04:27 +00:00
Daniel Norman
021d2647eb [automerger skipped] Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: c245d0e88d -s ours am: 9b4fe94bf1 -s ours
am skip reason: Merged-In I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f with SHA-1 60940a7ad7 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Ic3a394f5a74163608a4d845aceb7d871e0217546
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:29:26 +00:00
Daniel Norman
9b4fe94bf1 [automerger skipped] Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: c245d0e88d -s ours
am skip reason: Merged-In I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f with SHA-1 60940a7ad7 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Ic8e813b3a6450aa3b3bd075a967e760a398ec1c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:24:42 +00:00
Daniel Norman
7ca6403290 [automerger skipped] Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: 9278e0c263 am: 8498e6db38 -s ours
am skip reason: Merged-In I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f with SHA-1 e948bb326a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Idddce5b8ce8ac127893dfcf018ac81f2b6bdcbf4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:23:58 +00:00
Daniel Norman
c245d0e88d Removes duplicate hidraw_device type definition. am: 60940a7ad7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: I3c06b0e9bbcf7c10c60eef3b4b4c78d825ba8e8e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:51:10 +00:00
Daniel Norman
8498e6db38 Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: 9278e0c263
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: I02aa44c368e2d7df030bfd68bdd60d700bba2c51
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:48:23 +00:00
Daniel Norman
9278e0c263 Removes duplicate hidraw_device type definition. am: 60940a7ad7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Icf6128476f1f669918bc20d3eecd40c89893443f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:45:33 +00:00
Daniel Norman
60940a7ad7 Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Test: ls -z /dev/hidraw0
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:e948bb326a518bd2f7f92410c4f2d0ae6f6d146a)
Merged-In: I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f
Change-Id: I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f
2023-11-30 23:27:49 +00:00
Wilson Sung
484f609dee Update SELinux error
Test: scanBugreport
Bug: 312894628
Bug: 313804340
Change-Id: I87b384eac0c734444f0d722955b341a4611b7842
2023-11-30 07:14:31 +00:00
Khoa Hong
213b76e9b8 Suppress avc error log on debugfs's usb folder.
The XHCI driver in kernel will write debugging information to DebugFS on
some USB host operations (for example: plugging in a USB headphone). We
are not using those information right now.

Bug: 311088739
Test: No error when plugging a USB headphone in.
Change-Id: If7c511f4466959d819f2672ae8f82a8a8dae83e4
2023-11-30 15:01:37 +08:00
Randall Huang
ec6ba5806d Move sg_device related policy
Bug: 312582937
Test: make selinux_policy
Change-Id: I27a86d47777a6d769b93fc1c40ae27dacf83ab10
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-11-22 14:01:33 +08:00
Bryan Lavrich
a1bff1c2e9 Merge "aoc: add sysfs file entry" into main 2023-11-20 20:22:27 +00:00
Devika Krishnadas
4ed070d0aa Merge "Add Pixel Mapper as a sp-HAL" into main 2023-11-20 18:17:28 +00:00
Devika Krishnadas
1f9e3a93e1 Add Pixel Mapper as a sp-HAL
Bug: 267352318

Change-Id: I77b064c3eae2b47677ee83df8483e6f7aba08e6e
Signed-off-by: Devika Krishnadas <kdevika@google.com>
2023-11-16 01:17:05 +00:00
Daniel Norman
c9fcb3e550 Merge "Removes duplicate hidraw_device type definition." into main 2023-11-14 19:05:05 +00:00
Lei Ju
406bfbcee7 Merge "Set up sepolicy for CHRE HAL process" into main 2023-11-14 17:58:30 +00:00
Daniel Norman
e948bb326a Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Change-Id: I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f
Test: ls -z /dev/hidraw0
2023-11-10 22:53:15 +00:00
Lei Ju
89dd17c9ad Set up sepolicy for CHRE HAL process
Contexthub (CHRE) team is removing the chre daemon and incorporating
its functionalities into the next gen HAL. This CL copied the
permissions we received in whitechapel/vendor/google/chre.te to
hal_contexthub.te to enable the same set of permissions on gs101.

Bug: 247124878
Test: launch the hal process on oriole and verify it can perform
required operations such as loading nanoapps holding wakelocks,
query nanoapps, etc.

Change-Id: I8ce6b4f7f411e50cf454bb5f1286f73d4d46aced
2023-11-10 14:18:05 -08:00
Alex Iacobucci
8966bfa237 aoc: add sysfs file entry
Test: on device
Bug: 309950738
Change-Id: I7e2ceaa61c7870ace37014ad39f3a119f3712569
Signed-off-by: Alex Iacobucci <alexiacobucci@google.com>
2023-11-10 18:28:51 +00:00
Mike Wang
a6c7f726b5 Change the MDS to platform app in selinux ap context.
The MDS will be signed with platform key and become a platform app. To
make the selinux rules for modem_diagnostic_app work, need to set it to
platform app in app context.

Bug: 287683516

Test: Tested with both dev key or platform key signed MDS apps and the selinux rules works.
Change-Id: If890f7caaac33e5ddc6c02cc8084654a10cea416
2023-11-09 07:17:07 +00:00
Treehugger Robot
f237b33c72 Merge "sensors: Move USF related sepolicy to gs-common." into main 2023-11-07 06:49:08 +00:00
Rick Chen
04e4ac1717 sensors: Move USF related sepolicy to gs-common.
Bug: 305120274
Test: Compile pass. Flash the build to WHI devices and no sensor
      related avc denied log.
Change-Id: I56174a24d159968c01d1572e84f4bcdd7930a709
Signed-off-by: Rick Chen <rickctchen@google.com>
2023-11-07 10:50:48 +08:00
Wilson Sung
c11845e69e Update SELinux error
Test: scanBugreport
Bug: 309379598
Change-Id: I9c334cdb5e98c71a70f079fb984e57c154ab6a99
2023-11-06 08:01:12 +00:00
JimiChen
ea198bd127 Update SELinux policies for rlsservice
1. Move rls_service context from vndservice_contexts to
   service_contexts.
2. Allow binder calls from rlsservice to servicemanager
3. Change rls_service type from vndservice_manager_type to
   service_manager_type.

Bug: 301520085
Test: GCA
Change-Id: I7badfe2ddb73b13884b54d2c8972e1921af6ea38
2023-11-01 18:20:45 +08:00
Xin Li
aa6b15007d [automerger skipped] Merge 10952656 am: a17ff7b552 -s ours am: c7ea7da26a -s ours
am skip reason: Merged-In Id8af985f49aafa9966da448443421888817bdb34 with SHA-1 1ac7c592e6 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/25092663

Change-Id: I33180129dea5c82e473ef3c9bf21f3e6f4570448
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-19 23:54:51 +00:00
Xin Li
c7ea7da26a [automerger skipped] Merge 10952656 am: a17ff7b552 -s ours
am skip reason: Merged-In Id8af985f49aafa9966da448443421888817bdb34 with SHA-1 1ac7c592e6 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/25092663

Change-Id: I4724a9ef5b19adc68ff7bb54e97ad2f179dc9223
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-19 18:48:06 +00:00
Xin Li
a17ff7b552 Merge 10952656
Merged-In: Id8af985f49aafa9966da448443421888817bdb34
Change-Id: Ifbd9589b149d126f212eddda871aaf550f589ac8
2023-10-17 10:06:29 -07:00
Wilson Sung
0c5fff7954 Update SELinux error
Test: scanBugreport
Bug: 305600375
Bug: 305600845
Bug: 305600595
Change-Id: I6bd13a82d02eb063435520be7705c67408b0269f
2023-10-16 05:53:42 +00:00
Xin Li
c7a1c28200 [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours am: 071bca5489 -s ours am: 14f6e3dd7d -s ours am: bba70e6241 -s ours am: 1ac7c592e6 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: I03e153000fc167622dd2ff19693bca57c5739c96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-07 00:19:55 +00:00
Xin Li
1ac7c592e6 [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours am: 071bca5489 -s ours am: 14f6e3dd7d -s ours am: bba70e6241 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: Id8af985f49aafa9966da448443421888817bdb34
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-06 11:00:25 +00:00
Xin Li
bba70e6241 [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours am: 071bca5489 -s ours am: 14f6e3dd7d -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: I8f2846beec57d58761717c294fb4e74beae7732f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-06 09:50:34 +00:00
Xin Li
14f6e3dd7d [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours am: 071bca5489 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: I44e5ece889b19439ab5ad57e2b228b6f7c026a09
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-06 08:59:00 +00:00
Xin Li
071bca5489 [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: Iea3ff52c8c300b083c2de5b2ecf45856ae49ba96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-06 07:51:54 +00:00
Xin Li
7fabb8cee6 Merge Android 14
Bug: 298295554
Merged-In: I48441749de4eb1de90ce5a307b1d47ae3cb9592d
Change-Id: Ica95e66a8aaacda0452f0025b73835b63855f30a
2023-10-05 15:33:38 -07:00
Wilson Sung
fb1d860be3 Merge "Update SELinux error" into main 2023-10-05 02:17:39 +00:00
Wilson Sung
15261ed885 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 303391666
Bug: 303391687
Bug: 301948771
Change-Id: I16e38ca15d7a9995f7922b9c3be6a6f2f2238c2a
2023-10-04 11:53:34 +00:00
Will McVicker
f0047396de Move i2c-cs40l26a to gs101-sepolicy
The i2c-7/7-0043 label is shared with both i2c-7/i2c-cs40l25a and
i2c-7/i2c-cs40l26a nodes. To make it clear that these all are related,
let's move i2c-7/i2c-cs40l26a to gs101-sepolicy and have all the gs101
vibrator policy labels together.

Bug: 302549624
Bug: 291606723
Test: Verify i2c nodes on r4
Fixes: ccdd975a88d0 ("Update the cs40l26a i2c device node sepolicy labeling")
Change-Id: I2950a2c064e31e300d07f124cf1a7bfc00ae58c3
2023-09-29 09:21:48 -07:00