Commit graph

3468 commits

Author SHA1 Message Date
TreeHugger Robot
4e4b697ebc Merge "Allow radioext to communicate with bt hal" into sc-dev am: c03c055812
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456718

Change-Id: Ieab3a480c6a09103b09b09f5f238f975ee4845ad
2021-05-08 19:09:55 +00:00
TreeHugger Robot
c03c055812 Merge "Allow radioext to communicate with bt hal" into sc-dev 2021-05-08 18:59:51 +00:00
TreeHugger Robot
73e866b8c8 Merge "iwlan: update sepolicy for qualifiednetworksservice" into sc-dev am: 296f8ddc5d am: cb8de215f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14440528

Change-Id: I5f0f438dd488cb64579f777809ddf2ab31fd9926
2021-05-07 23:59:40 +00:00
TreeHugger Robot
cb8de215f8 Merge "iwlan: update sepolicy for qualifiednetworksservice" into sc-dev am: 296f8ddc5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14440528

Change-Id: I99470e75b9839107b8ea89232437d3c91a722a23
2021-05-07 23:45:52 +00:00
TreeHugger Robot
978d75fba7 Merge "iwlan: update sepolicy for qualifiednetworksservice" into sc-dev am: 296f8ddc5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14440528

Change-Id: I336b1e613abebe0e56faf3732dce5d3fea52b0dc
2021-05-07 23:43:53 +00:00
TreeHugger Robot
776d3de596 Merge "iwlan: update sepolicy for qualifiednetworksservice" into sc-dev am: 296f8ddc5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14440528

Change-Id: I99208ec0b4e5af7ae08b16e7bc4dc2e1c1a9894d
2021-05-07 23:43:49 +00:00
TreeHugger Robot
296f8ddc5d Merge "iwlan: update sepolicy for qualifiednetworksservice" into sc-dev 2021-05-07 23:29:31 +00:00
chasewu
59161a5745 vibrator: Remove temporary method
Bug: 177176811
Test: no avc denied logs
Signed-off-by: chasewu <chasewu@google.com>
Change-Id: I424e15037b3e20824f5e072d88bdf71a50cfdabf
2021-05-07 18:33:15 +08:00
Seungah Lim
72e6339123 iwlan: update sepolicy for qualifiednetworksservice
Bug: 185942456
Test: VoLTE/VoWifi

Change-Id: I352bb933e577b11bb052a297d17776ff0a5f3a75
Signed-off-by: Seungah Lim <sss.lim@samsung.com>
2021-05-07 17:14:00 +08:00
Tai Kuo
8e3aaa30ff Remove dumpstate AVC denials dontaudit for twoshay
Bug: 187014717
Test: pts-tradefed run pts -m PtsSELinuxTest -t \
  com.google.android.selinux.pts.SELinuxTest#scanBugreport
Signed-off-by: Tai Kuo <taikuo@google.com>
Change-Id: Ic697ffe8f6ee15fb9d9330173a3c92aeca61de67
2021-05-07 14:56:22 +08:00
Tai Kuo
0e68aed154 Allow dumpstate to access twoshay
Bug: 173330981
Bug: 187014717
Test: no avc denials for twoshay was found.
Signed-off-by: Tai Kuo <taikuo@google.com>
Change-Id: Idcf38e0921fb4d6d617e7cd443425193aea3fe91
2021-05-07 14:55:43 +08:00
Jia-yi Chen
15c046878b Add high_capacity_start_cpu to u:object_r:sysfs_vendor_sched:s0
Bug: 186564130
Test: Boot & check powerhal log
Change-Id: I1a828f113266d4b3386b2f6fa74df050255113a9
2021-05-06 21:00:08 -07:00
Labib
a27f8c4480 Allow radioext to communicate with bt hal
Bug: 187447420
Change-Id: I1a1626502a6c3913846b957c3c0a31fdd99feb31
2021-05-07 09:20:02 +08:00
Tri Vo
b38ed0c788 Merge "trusty: sepolicy for metrics reporter" into sc-dev am: f7bec8b3c6 am: f40a4f7416
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14286451

Change-Id: I03c47276db396ec87b7f6bb27af99fa4033e7b52
2021-05-06 16:29:52 +00:00
Tri Vo
f40a4f7416 Merge "trusty: sepolicy for metrics reporter" into sc-dev am: f7bec8b3c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14286451

Change-Id: I9723772bdbd3c02e6af0e7348d45a3717a19cc0c
2021-05-06 16:09:53 +00:00
Tri Vo
7c585329ec Merge "trusty: sepolicy for metrics reporter" into sc-dev am: f7bec8b3c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14286451

Change-Id: I65819ea555dafbd575e26c1f9e45fbb1ce8617ff
2021-05-06 16:08:19 +00:00
Tri Vo
da485f1270 Merge "trusty: sepolicy for metrics reporter" into sc-dev am: f7bec8b3c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14286451

Change-Id: I3442adb02d7ae36f4533c2b94154a7c32ca9ea6f
2021-05-06 16:08:09 +00:00
Tri Vo
f7bec8b3c6 Merge "trusty: sepolicy for metrics reporter" into sc-dev 2021-05-06 15:52:51 +00:00
JJ Lee
43735f0fc3 sepolicy: gs101: allow audio hal to use wakelock
Bug: 178789331
Test: build pass
Signed-off-by: JJ Lee <leejj@google.com>
Change-Id: I1d5c9ea8726f2e53bc05e0ecd5dedddede274794
2021-05-06 19:43:24 +08:00
Aaron Tsai
e4773d1db2 Fix avc denied for shannon-ims am: 6a9a85cd07 am: 71aa99edff
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410097

Change-Id: I8935b75ce3632935b127d7c1a4038886d40461bf
2021-05-06 11:07:46 +00:00
Aaron Tsai
71aa99edff Fix avc denied for shannon-ims am: 6a9a85cd07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410097

Change-Id: I84e986338a7985fe26cdf179bd1734771956defa
2021-05-06 10:53:09 +00:00
Aaron Tsai
c49f82b712 Fix avc denied for shannon-ims am: 6a9a85cd07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410097

Change-Id: I480df5510301d889390c92f2cad68c0fb4e489e5
2021-05-06 10:51:12 +00:00
Aaron Tsai
2cea3621b0 Fix avc denied for shannon-ims am: 6a9a85cd07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410097

Change-Id: I5289bf698f1bfad5074d446beff9aeeace50e27d
2021-05-06 10:49:37 +00:00
Aaron Tsai
6a9a85cd07 Fix avc denied for shannon-ims
04-01 19:10:22.956 10272  2327  2327 W Binder:2327_4: type=1400 audit(0.0:8): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=139 scontext=u:r:vendor_ims_app:s0:c16,c257,c512,c768 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0 app=com.shannon.imsservice
04-01 19:10:22.960 10272  2327  4608 E libc    : Access denied finding property "persist.dbg.wfc_avail_ovr0"
04-01 19:10:22.981 10272  2327  4608 E libc    : Access denied finding property "persist.dbg.vt_avail_ovr0"
04-01 19:10:22.982 10272  2327  4980 E libc    : Access denied finding property "persist.dbg.volte_avail_ovr0"

Bug: 183935382
Bug: 184858478
Test: verified with the forrest ROM and error log goneFix
Change-Id: I0754c6be7f74ed73533e9570c7d1916320ab2897
2021-05-06 09:04:03 +00:00
TreeHugger Robot
647dcaf48d Merge "HardwareInfo: Add sepolicy for display" into sc-dev am: 6978eeaea4 am: 5bb2c8ab79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824666

Change-Id: I30ae225a60b80f8167c4dd9a3723725d6e53ab3c
2021-05-06 06:31:05 +00:00
TreeHugger Robot
51380a7089 Merge "wlc fwupdate implementation" into sc-dev am: 577f562727 am: 9fccfb01ce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14063269

Change-Id: Ie01bf8328923a33c63ae7070dac41e687afdeec5
2021-05-06 06:30:22 +00:00
TreeHugger Robot
5f2f2a672b Merge "HardwareInfo: Add sepolicy for display" into sc-dev am: 6978eeaea4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824666

Change-Id: I79da8abcc3cdaab61fe2932fa8da8ab9f6400eef
2021-05-06 06:13:04 +00:00
TreeHugger Robot
89e2f50371 Merge "HardwareInfo: Add sepolicy for display" into sc-dev am: 6978eeaea4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824666

Change-Id: Id3e71b7c4c9b920ec277716861ec6a9b2e6b12a4
2021-05-06 06:12:55 +00:00
TreeHugger Robot
5bb2c8ab79 Merge "HardwareInfo: Add sepolicy for display" into sc-dev am: 6978eeaea4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824666

Change-Id: Ifa6682feee948555974d8776d60accb4cc3b356e
2021-05-06 06:07:06 +00:00
TreeHugger Robot
6978eeaea4 Merge "HardwareInfo: Add sepolicy for display" into sc-dev 2021-05-06 06:03:18 +00:00
TreeHugger Robot
9fccfb01ce Merge "wlc fwupdate implementation" into sc-dev am: 577f562727
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14063269

Change-Id: I2fa4b8768369139bb9d0ea226b6e98ecd38e2ee0
2021-05-06 05:59:24 +00:00
TreeHugger Robot
4a6a02638b Merge "wlc fwupdate implementation" into sc-dev am: 577f562727
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14063269

Change-Id: I62224845358e55795a969607313d0e69215b4e36
2021-05-06 05:57:43 +00:00
TreeHugger Robot
eca11f8843 Merge "wlc fwupdate implementation" into sc-dev am: 577f562727
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14063269

Change-Id: I0ab5c9fb9f10820fda8bfd7e9e4fefc2f36e423a
2021-05-06 05:57:17 +00:00
TreeHugger Robot
577f562727 Merge "wlc fwupdate implementation" into sc-dev 2021-05-06 05:41:01 +00:00
SalmaxChang
12593ef488 logger_app: Fix avc errors am: ab97657410 am: ebf55ff9f1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439439

Change-Id: I066f7b1bbcde9324172955b9997c65554c66709f
2021-05-06 04:41:26 +00:00
SalmaxChang
ebf55ff9f1 logger_app: Fix avc errors am: ab97657410
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439439

Change-Id: Ia96374b57725305faa7c900ee4702bc2167fde7c
2021-05-06 04:16:28 +00:00
SalmaxChang
747868bae7 logger_app: Fix avc errors am: ab97657410
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439439

Change-Id: I359355128d4569832e88bf1f188275610c6c3dd6
2021-05-06 04:14:44 +00:00
SalmaxChang
48327b8da1 logger_app: Fix avc errors am: ab97657410
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439439

Change-Id: I53a9905e749c8b6647b42e70f87a221751fb0432
2021-05-06 04:14:28 +00:00
SalmaxChang
ab97657410 logger_app: Fix avc errors
avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=141 scontext=u:r:logger_app:s0:c21,c257,c512,c768 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0 app=com.android.pixellogger
Access denied finding property "viewroot.profile_rendering"
Access denied finding property "ro.input.resampling"
Access denied finding property "persist.input.velocitytracker.strategy"

avc: denied { read } for comm="oid.pixellogger" name="u:object_r:usb_control_prop:s0" dev="tmpfs" ino=281 scontext=u:r:logger_app:s0:c21,c257,c512,c768 tcontext=u:object_r:usb_control_prop:s0 tclass=file permissive=0 app=com.android.pixellogger

Bug: 186612284
Change-Id: I15f00d9ed3cc0c0657c854292caad60e3f7a3011
2021-05-06 03:57:01 +00:00
Jack Wu
8afb8bee7b sepolicy: gs101: Fix hal_health_default avc denials am: 2c1ecf3a54 am: 388860a7ba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439451

Change-Id: I08759859df54a805168b3ee1aa5a1c9fa7d0ffea
2021-05-05 22:30:20 +00:00
Jack Wu
388860a7ba sepolicy: gs101: Fix hal_health_default avc denials am: 2c1ecf3a54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439451

Change-Id: I9c4332385e1a22043938a022c2074d34b490adbf
2021-05-05 22:16:08 +00:00
Jack Wu
41284f3e10 sepolicy: gs101: Fix hal_health_default avc denials am: 2c1ecf3a54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439451

Change-Id: I65455bb121c39aafc58a087645aecbed71505ecd
2021-05-05 22:14:02 +00:00
Jack Wu
9ac90fc4c1 sepolicy: gs101: Fix hal_health_default avc denials am: 2c1ecf3a54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439451

Change-Id: I3a8dfac579c6d631faa4b11a0a2dc2f2669647d5
2021-05-05 22:13:35 +00:00
Jack Wu
2c1ecf3a54 sepolicy: gs101: Fix hal_health_default avc denials
01-01 12:00:08.752  1000   682   682 I android.hardwar: type=1400 audit(0.0:3): avc: denied { read } for name="type" dev="sysfs" ino=68812 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
01-01 12:00:08.752  1000   682   682 I android.hardwar: type=1400 audit(0.0:4): avc: denied { open } for path="/sys/devices/platform/10d50000.hsi2c/i2c-7/7-0069/power_supply/dc/type" dev="sysfs" ino=68812 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
01-01 12:00:08.752  1000   682   682 I android.hardwar: type=1400 audit(0.0:5): avc: denied { getattr } for path="/sys/devices/platform/10d50000.hsi2c/i2c-7/7-0069/power_supply/dc/type" dev="sysfs" ino=68812 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

Bug: 184429394
Test: Verify pass by checking device log are w/o above errors after
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: If1253c902af1723ca80d31223f51ebf439404527
2021-05-06 00:26:14 +08:00
Alex Hong
ef86b642ad Merge "sepolicy: Update dumpstate HAL to V1.1" into sc-dev am: be17ec14cc am: a0e4da3cb4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14424440

Change-Id: I89c2aacb07e5c2d4cc15e1cfa74933dc0d6fc216
2021-05-05 07:00:22 +00:00
Alex Hong
a0e4da3cb4 Merge "sepolicy: Update dumpstate HAL to V1.1" into sc-dev am: be17ec14cc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14424440

Change-Id: I381c9f63d18cd7568f3ea912e5a77010909a1fbf
2021-05-05 06:31:55 +00:00
Alex Hong
00279692ff Merge "sepolicy: Update dumpstate HAL to V1.1" into sc-dev am: be17ec14cc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14424440

Change-Id: I70997d234403030cb0e06d51dad4bad965e39758
2021-05-05 06:30:01 +00:00
Alex Hong
ad3113cee8 Merge "sepolicy: Update dumpstate HAL to V1.1" into sc-dev am: be17ec14cc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14424440

Change-Id: I449c5e89858a5365961c82c4ac8a8a87c9de9438
2021-05-05 06:30:00 +00:00
Alex Hong
be17ec14cc Merge "sepolicy: Update dumpstate HAL to V1.1" into sc-dev 2021-05-05 06:09:11 +00:00
Tri Vo
1dac39e833 trusty: sepolicy for metrics reporter
Bug: 173423860
Test: m
Change-Id: I42d646c6c9453662e670e7c22712f2bde2368bba
2021-05-05 05:38:34 +00:00