Commit graph

2937 commits

Author SHA1 Message Date
Randall Huang
68ffcb774d Fix health HAL avc denied when running idle-maint
Log:
avc: denied { read } for comm="android.hardwar" name="wb_avail_buf"
dev="sysfs" ino=59061 scontext=u:r:hal_health_storage_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 206741894
Test: adb shell sm idle-maint run
Signed-off-by: Randall Huang <huangrandall@google.com>
Change-Id: I79e7763df16816e6799f288d2f8b7e26c204cbc4
2021-11-23 03:17:54 +00:00
Xin Li
f7cbb95722 [automerger skipped] Merge sc-qpr1-dev-plus-aosp-without-vendor@7810918 am: 856fe3d040 -s ours am: 4613d25f07 -s ours am: 50628a78a8 -s ours
am skip reason: Merged-In I8f9932ad8885aaefde9548f87c6d2c6cc148cd4c with SHA-1 7bfec1ad53 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16278444

Change-Id: I1833320006dedc84f6f5ef8a3809f256369b5cfd
2021-11-18 22:37:51 +00:00
Xin Li
50628a78a8 [automerger skipped] Merge sc-qpr1-dev-plus-aosp-without-vendor@7810918 am: 856fe3d040 -s ours am: 4613d25f07 -s ours
am skip reason: Merged-In I8f9932ad8885aaefde9548f87c6d2c6cc148cd4c with SHA-1 7bfec1ad53 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16278444

Change-Id: Ib19bc7987a5b32c39431ebdce2923541a944f608
2021-11-18 22:25:11 +00:00
Xin Li
4613d25f07 [automerger skipped] Merge sc-qpr1-dev-plus-aosp-without-vendor@7810918 am: 856fe3d040 -s ours
am skip reason: Merged-In I8f9932ad8885aaefde9548f87c6d2c6cc148cd4c with SHA-1 7bfec1ad53 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16278444

Change-Id: I3f0e4f5e9f26b048b89f495b7d79d9ceffb61f80
2021-11-18 22:00:55 +00:00
chenpaul
d7947930ec Remove wifi_logger related sepolicy settings
Due to the fact that /vendor/bin/wifi_logger no longer exists
on the P21 master branch any more, we remove obsolete sepolicy.

Bug: 201599426
Test: wlan_logger in Pixel Logger is workable
Change-Id: I22d99c3577f3cceb786e2ffd01c327a67d420202
2021-11-17 17:24:59 +08:00
Albert Wang
05ce6e603d [automerger skipped] [RESTRICT AUTOMERGE] Allow suspend_control to access xHCI wakeup node am: e6fb90425d am: 8bdcb60170 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16246250

Change-Id: I3b44efc984435e14dbdce60c7fbf7f0bfe4e4b82
2021-11-17 09:07:56 +00:00
Albert Wang
8bdcb60170 [RESTRICT AUTOMERGE] Allow suspend_control to access xHCI wakeup node am: e6fb90425d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16246250

Change-Id: If82693c02020cc701953dcb12412fa0fe132f16b
2021-11-17 08:51:05 +00:00
Albert Wang
e6fb90425d [RESTRICT AUTOMERGE] Allow suspend_control to access xHCI wakeup node
Bug: 205138535
Test: n/a
Signed-off-by: Albert Wang <albertccwang@google.com>
Change-Id: I6e012fea56c50656c8f26216199459092dcfc0f9
Merged-In: I6e012fea56c50656c8f26216199459092dcfc0f9
2021-11-17 07:18:29 +00:00
yixuanjiang
002907fb12 aoc: add audio property for audio aocdump feature
Bug: 204080552
Test: local
Signed-off-by: yixuanjiang <yixuanjiang@google.com>
Change-Id: I79b960cf5e88856c37f7901d718ac8f14e44b812
2021-11-16 14:55:26 +08:00
Albert Wang
c0ad9b7e8a Allow suspend_control to access xHCI wakeup node
Bug: 205138535
Test: n/a
Signed-off-by: Albert Wang <albertccwang@google.com>
Change-Id: I6e012fea56c50656c8f26216199459092dcfc0f9
2021-11-16 12:23:33 +08:00
chenpaul
37d4cfa648 Remove wifi_logger related sepolicy settings
Due to the fact that /vendor/bin/wifi_logger no longer exists
on the P21 master branch any more, we remove obsolete sepolicy.

Bug: 201599426
Test: wlan_logger in Pixel Logger is workable
Change-Id: I22d99c3577f3cceb786e2ffd01c327a67d420202
2021-11-15 02:05:06 +00:00
Michael Ayoubi
d44433c07a Merge "Allow uwb_vendor_app to get SE properties" into sc-v2-dev am: e7a17433a0 am: 11bb305754
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16244622

Change-Id: I8051477b4e70d61b8d137823bb22411fbddf647f
2021-11-12 05:18:53 +00:00
Michael Ayoubi
11bb305754 Merge "Allow uwb_vendor_app to get SE properties" into sc-v2-dev am: e7a17433a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16233414

Change-Id: Ibac4fbebf2f14157e1ac32585e4da68b61acea19
2021-11-12 01:48:47 +00:00
Michael Ayoubi
e7a17433a0 Merge "Allow uwb_vendor_app to get SE properties" into sc-v2-dev 2021-11-12 01:24:43 +00:00
Oleg Matcovschi
0684e81d5f gs101:ssr_detector: Allow access to aoc properties in user builds am: 63d04e1e02 am: 2eced57692
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16236498

Change-Id: Id2054c9819186424a08e6f4836042dde5ce36c62
2021-11-11 23:33:41 +00:00
Oleg Matcovschi
2eced57692 gs101:ssr_detector: Allow access to aoc properties in user builds am: 63d04e1e02
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16236498

Change-Id: I80dc34c15c60f80ddde869c6895d1afe53e8bf3e
2021-11-11 23:14:23 +00:00
Oleg Matcovschi
63d04e1e02 gs101:ssr_detector: Allow access to aoc properties in user builds
Bug: 205755422
Signed-off-by: Oleg Matcovschi <omatcovschi@google.com>
Change-Id: I684590a2ee91cf6d1edfc8a606f3a9e6672ca46f
2021-11-11 06:13:44 +00:00
Michael Ayoubi
a8e745039f Allow uwb_vendor_app to get SE properties
Bug: 205770401
Test: Build and flash on device.
Change-Id: Ic98f394434fad12e7d8ef804ecfd694a55ee8190
Merged-In: Ic98f394434fad12e7d8ef804ecfd694a55ee8190
2021-11-11 00:50:08 +00:00
Michael Ayoubi
18d2a96a11 Allow uwb_vendor_app to get SE properties
Bug: 205770401
Test: Build and flash on device.
Change-Id: Ic98f394434fad12e7d8ef804ecfd694a55ee8190
2021-11-11 00:48:21 +00:00
Xin Li
856fe3d040 Merge sc-qpr1-dev-plus-aosp-without-vendor@7810918
Bug: 205056467
Merged-In: I8f9932ad8885aaefde9548f87c6d2c6cc148cd4c
Change-Id: Ie31b278a639fd5a9e249ca934d543de770fb3217
2021-11-10 08:06:11 +00:00
Sean Wang
4c314ece36 Merge "Grant selinux permission to com.google.edgetpu_vendor_service-V2-ndk.so" 2021-11-08 03:33:51 +00:00
Ted Lin
2a0ec83aad Using dontaudit to fix the avc on boot test am: 3d463050a2 am: ee9b913bb7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16175460

Change-Id: I95f9c6fdeea59ace0dc0b41a4a244383b24e0ac4
2021-11-04 17:07:40 +00:00
Ted Lin
ee9b913bb7 Using dontaudit to fix the avc on boot test am: 3d463050a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16175460

Change-Id: I00cfd7b47b7e2c6718e8211809e1ddb20e19656b
2021-11-04 16:46:45 +00:00
Ted Lin
3d463050a2 Using dontaudit to fix the avc on boot test
avc: denied { search } for comm="kworker/6:2" name="google_battery" dev="debugfs" ino=32648 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_battery_debugfs:s0 tclass=dir permissive=1

Bug:200739262
Test: Check bugreport
Change-Id: I50a96bab88f564fef0eda9a23bb77dc6ffed357f
Signed-off-by: Ted Lin <tedlin@google.com>
(cherry picked from commit 951ce82739)
2021-11-03 03:20:45 +00:00
Sean Wang
9a94f84d7b Grant selinux permission to com.google.edgetpu_vendor_service-V2-ndk.so
This change is related to ag/16062268 with modifications to the edgetpu_vendor_service

Bug: 198131843
Test: tested on oriole
Change-Id: Ic512e5878a4d6af3aeaa939868b07dd449948f45
2021-11-02 09:06:16 +00:00
Automerger Merge Worker
626001e1c4 Merge "Label GPU power_policy sysfs node am: a7aa46862d am: 3e1bd82949" into sc-v2-dev-plus-aosp am: 16a5af35e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16091105

Change-Id: I24b7373a260bfe94c6ea1f42959f0c63aa7a3df0
2021-11-02 05:28:32 +00:00
Siddharth Kapoor
6e8c9ad774 Label GPU power_policy sysfs node am: a7aa46862d am: 00ceb78ed2 am: 7ff374ff1f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16091105

Change-Id: I0bf19341373059bc50fb5f937eb4132d1cf144ac
2021-11-02 05:28:12 +00:00
Automerger Merge Worker
16a5af35e1 Merge "Label GPU power_policy sysfs node am: a7aa46862d am: 3e1bd82949" into sc-v2-dev-plus-aosp 2021-11-02 05:14:28 +00:00
Siddharth Kapoor
74dbf5739c Label GPU power_policy sysfs node am: a7aa46862d am: 3e1bd82949
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16091105

Change-Id: I3134c1ea8b6970fba3044042142ec4e656e31c9c
2021-11-02 05:14:26 +00:00
Siddharth Kapoor
7ff374ff1f Label GPU power_policy sysfs node am: a7aa46862d am: 00ceb78ed2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16091105

Change-Id: I5b87ce21380b0a390e684ac55862dae0f86cd7bb
2021-11-02 05:14:23 +00:00
Siddharth Kapoor
3e1bd82949 Label GPU power_policy sysfs node am: a7aa46862d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16091105

Change-Id: Ia0a271554b8640cd32f1293c8e96405abf9f31b6
2021-11-02 05:03:27 +00:00
Siddharth Kapoor
00ceb78ed2 Label GPU power_policy sysfs node am: a7aa46862d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16091105

Change-Id: Iad4caeea7667379e15b69b9a2694a31d759c9dab
2021-11-02 05:03:24 +00:00
TreeHugger Robot
eeaf013788 Merge "Grant selinux permission to com.google.edgetpu_app_service-V2-ndk.so" 2021-11-01 01:28:53 +00:00
qinyiyan
d60240f504 Grant selinux permission to com.google.edgetpu_app_service-V2-ndk.so
Bug: 204528053
Test: forrest build with the change. AVC denials don't show up.
Change-Id: Ic3fafeb749156967d772d5288ecf99a44ebc7031
2021-10-29 15:04:31 -07:00
Siddharth Kapoor
6d1da2c994 Label GPU power_policy sysfs node am: f94633e718 am: 62460926d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16123766

Change-Id: Ic0715cc18f5848e694d40f3633c005cf7964791c
2021-10-28 01:27:24 +00:00
Siddharth Kapoor
62460926d3 Label GPU power_policy sysfs node am: f94633e718
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16123766

Change-Id: Ia753ea69fb270e2bbeca29f2275b84482cc77ec3
2021-10-28 01:08:49 +00:00
Jiyong Park
b928ceec0c [automerger skipped] Remove ndk_platform backend. Use the ndk backend. am: 90d1e82ae6 am: caf102afda am: 02048701de am: d753a4e82d -s ours
am skip reason: Merged-In Icc9af3798ac89742fa56b1cb37d8116d99b4a9c2 with SHA-1 5cc5d52bd7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16119648

Change-Id: Ia2728528486c77d026aedf9ff702bed77b56c4f8
2021-10-27 07:24:20 +00:00
Jiyong Park
d753a4e82d Remove ndk_platform backend. Use the ndk backend. am: 90d1e82ae6 am: caf102afda am: 02048701de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16119648

Change-Id: I7714a03deb27225af3ddaebdcb523fee20f27069
2021-10-27 07:02:59 +00:00
Jiyong Park
02048701de Remove ndk_platform backend. Use the ndk backend. am: 90d1e82ae6 am: caf102afda
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16119648

Change-Id: I9742f6b11c4b07698f597aeac36aa55686dd8b3f
2021-10-27 06:46:14 +00:00
Jiyong Park
caf102afda Remove ndk_platform backend. Use the ndk backend. am: 90d1e82ae6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16119648

Change-Id: I9a01c4e883cf1903eab8589c4eeca1d60d9fb741
2021-10-27 06:27:12 +00:00
TreeHugger Robot
f0e660c212 Merge "Add touch procfs and sysfs sepolicy." 2021-10-27 02:13:02 +00:00
Siddharth Kapoor
f94633e718 Label GPU power_policy sysfs node
Bug: 201718421
Test: trace while App launch
Change-Id: Icd85b8611632e4638946b492740e509baf2714ce
Signed-off-by: Siddharth Kapoor <ksiddharth@google.com>
2021-10-27 01:59:23 +00:00
Steve Pfetsch
a461a356e2 [automerger skipped] Merge "Move twoshay definitions to hardware/google/pixel-sepolicy/input." into sc-v2-dev am: 421cbb2f61 -s ours am: 30ec086c5d -s ours
am skip reason: Merged-In I2cada463fcbfd3b52230430b12b091a655e2abbb with SHA-1 b834b1d008 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16095720

Change-Id: I5bb16849ceee69c0c3bffcd25f3dd04d17cfbe13
2021-10-27 00:50:09 +00:00
Steve Pfetsch
30ec086c5d [automerger skipped] Merge "Move twoshay definitions to hardware/google/pixel-sepolicy/input." into sc-v2-dev am: 421cbb2f61 -s ours
am skip reason: Merged-In I2cada463fcbfd3b52230430b12b091a655e2abbb with SHA-1 b834b1d008 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16095720

Change-Id: I7144920413f461fee6f59eebf1b2e865ce652854
2021-10-27 00:28:58 +00:00
Steve Pfetsch
421cbb2f61 Merge "Move twoshay definitions to hardware/google/pixel-sepolicy/input." into sc-v2-dev 2021-10-27 00:14:20 +00:00
Philip Quinn
fcc9f6c3f0 [automerger skipped] Move twoshay definitions to hardware/google/pixel-sepolicy/input. am: b834b1d008 -s ours
am skip reason: Merged-In I2cada463fcbfd3b52230430b12b091a655e2abbb with SHA-1 d5ac0ac3ce is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16120231

Change-Id: I6f2e4f7eabef2a6f3b604bb63fc05598ced9490f
2021-10-26 20:11:05 +00:00
Jiyong Park
90d1e82ae6 Remove ndk_platform backend. Use the ndk backend.
The ndk_platform backend will soon be deprecated because the ndk backend
can serve the same purpose. This is to eliminate the confusion about
having two variants (ndk and ndk_platform) for the same ndk backend.

Bug: 161456198
Test: m

Merged-In: Icc9af3798ac89742fa56b1cb37d8116d99b4a9c2
Change-Id: Icc9af3798ac89742fa56b1cb37d8116d99b4a9c2
(cherry picked from commit 5cc5d52bd7)
2021-10-26 14:59:28 +09:00
Philip Quinn
b834b1d008 Move twoshay definitions to hardware/google/pixel-sepolicy/input.
Bug: 187654303
Test: twoshay works on R4, B3, P7
Change-Id: I2cada463fcbfd3b52230430b12b091a655e2abbb
Merged-In: I2cada463fcbfd3b52230430b12b091a655e2abbb
2021-10-26 02:06:20 +00:00
Super Liu
c8220eea82 Add touch procfs and sysfs sepolicy.
Bug: 193467774
Test: TH build pass.
Signed-off-by: Super Liu <supercjliu@google.com>
Change-Id: I25c4d9422966e8603f12222e93ca7b6d6ea6f566
2021-10-25 17:01:52 +08:00
Siddharth Kapoor
a7aa46862d Label GPU power_policy sysfs node
Bug: 201718421
Test: trace while App launch
Change-Id: Icd85b8611632e4638946b492740e509baf2714ce
Signed-off-by: Siddharth Kapoor <ksiddharth@google.com>
2021-10-21 14:23:00 +08:00