Evolution-X-Tensor/device_google_gs101
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2933 commits 1 branch 0 tags 494 MiB
Commit graph

2933 commits

This branch
This branch
All branches
Author SHA1 Message Date
Anthony Stange
0cfdc0266c Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" into tm-dev 2022-04-14 15:23:23 +00:00
chungkai
953583844f genfs_contexts: fix path for i2c peripheral device 
paths are changed when we enable parallel module loading and
reorder the initializtaion of devices.

Test: without avc denial on R4/O6 when booting
Bug: 22754176
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: Ibcd5138170449e24115a0de5c3beda79914d1dc1
 2022-04-14 04:45:41 +00:00
Anthony Stange
613bdcdec8 Update SELinux to allow CHRE to talk to the Wifi HAL 
Bug: 206614765
Test: Run locally
Change-Id: I73bcf96ed1cab0a101e5f84852a1d82258b9c690
 2022-04-12 20:58:12 +00:00
TreeHugger Robot
4e91f5530e Merge "sepolicy: Add policy for persist.vendor.udfps" into tm-dev 2022-04-12 10:56:32 +00:00
Darren Hsu
acb5cc9e03 sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5 am: 4df95c6d08 am: 9b9e2b4f3c 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630

Change-Id: Ib0aa15719df8e4e0e7eb673b389d4e0b6be99640
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-04-12 04:19:48 +00:00
Darren Hsu
9b9e2b4f3c sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5 am: 4df95c6d08 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630

Change-Id: I6648d98e50b0c8c01206071537fedbe4083e1f11
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-04-12 04:04:56 +00:00
Darren Hsu
4df95c6d08 sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630

Change-Id: I058cb3909d972cc5784e507fcb26b46196c33aa4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-04-12 03:39:39 +00:00
Badhri Jagan Sridharan
93b8189c2b Merge "Allow usb hal to read contaminantdisable property" into tm-dev 2022-04-11 22:22:28 +00:00
Patty
40cd670c9f Grant policy for EWP feature 
Bug: 220121592
Test: Manual
Change-Id: I274a9519c40915cf65de45a3d8cf452faf16c8b4
 2022-04-11 14:40:02 +08:00
Darren Hsu
3c11d8d1c5 sepolicy: label charger wakeups for system suspend 
Bug: 226887726
Test: do bugreport without avc denials
Change-Id: I779b646846da90cdc710145e959644efc4733b3b
Signed-off-by: Darren Hsu <darrenhsu@google.com>
 2022-04-11 10:56:33 +08:00
Badhri Jagan Sridharan
8606aa8a51 Allow usb hal to read contaminantdisable property 
avc: denied { read } for comm="android.hardwar" name="u:object_r:vendor_usb_config_prop:s0"
dev="tmpfs" ino=367 scontext=u:r:hal_usb_impl:s0
tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=file permissive=0

Bug: 227792357
Change-Id: Id4d5ef7c214f0c0f672db28991b9fbe0152530b7
 2022-04-07 17:21:15 -07:00
Chung-Kai (Michael) Mei
9a909d4058 Merge changes from topic "gs101_parallel_load_sepolicy" into tm-dev 
* changes:
  sepolicy: ignore avc denial
  genfs_contexts: fix path for i2c peripheral devices
 2022-04-07 09:33:26 +00:00
Siddharth Kapoor
9d3a25fb29 Merge "Revert "Move ODPM file rule to pixel sepolicy"" into tm-dev 2022-04-07 04:06:31 +00:00
Siddharth Kapoor
13f85a37f3 Revert "Move ODPM file rule to pixel sepolicy" 
Revert "Move ODPM file rule to pixel sepolicy"

Revert submission 17215583-odpm_sepolicy_refactor-tm-dev

Reason for revert: build failure tracked in b/228261711
Reverted Changes:
Ic9a89950a:Move ODPM file rule to pixel sepolicy
I24105669b:Move ODPM file rule to pixel sepolicy
I044a285ff:Move ODPM file rule to pixel sepolicy

Change-Id: I36abfddaa5903739f9c5bf65d3c1cd506db9e604
 2022-04-07 03:29:56 +00:00
chungkai
384218408f sepolicy: ignore avc denial 
dont audit since it's debugfs

Bug: 228181404
Test: forrest with boot test
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I7f2a85e2a405c78c9d8d11e9c2fdfdc5e87f7931
 2022-04-06 09:21:24 +00:00
chungkai
8a19d8be9c genfs_contexts: fix path for i2c peripheral devices 
paths are changed when we enable parallel module loading and
reorder the initializtaion of devices.

Test: without avc denial on Raven
Bug: 227541760
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I7d835205696fd727e9be24fcf010ed44bcd5d6ae
 2022-04-06 09:15:46 +00:00
Albert Wang
7839be7474 Add more xHCI wakeup path for suspend_control am: e60773b926 am: 092298b579 am: aed8848fb0 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478

Change-Id: I251a791b13d863de275ceffc3ba926db9a458c07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-04-06 08:42:39 +00:00
Albert Wang
aed8848fb0 Add more xHCI wakeup path for suspend_control am: e60773b926 am: 092298b579 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478

Change-Id: Ieaa74f326039e13ec8409167112c11b16cb47480
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-04-06 08:15:54 +00:00
Albert Wang
092298b579 Add more xHCI wakeup path for suspend_control am: e60773b926 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478

Change-Id: Ib07b92bf159c8b69dcdc7bc17e7f19a44aab20f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-04-06 08:00:41 +00:00
Sam Ou
de81154964 Merge "Move ODPM file rule to pixel sepolicy" into tm-dev 2022-04-06 02:09:38 +00:00
Xin Li
6c7329e78a [automerger skipped] Merge Android 12 QPR3 ab/8391262 am: 815b133c28 -s ours am: 4295b8c5bb -s ours 
am skip reason: Merged-In I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7 with SHA-1 24b4d1b601 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17543362

Change-Id: Iccd31c0bb403d722d24d093730327b024e4342ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-04-03 07:43:50 +00:00
Xin Li
4295b8c5bb [automerger skipped] Merge Android 12 QPR3 ab/8391262 am: 815b133c28 -s ours 
am skip reason: Merged-In I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7 with SHA-1 24b4d1b601 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17543362

Change-Id: I3183293f6ba3e1858233ce35170f935f3b03c1ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-04-03 07:11:50 +00:00
Xin Li
815b133c28 Merge Android 12 QPR3 ab/8391262 
Bug: 226662282
Merged-In: I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7
Change-Id: Iccdf8b6a16f1d7a9ae0c9fd8cab14c5c55c6e64a
 2022-04-01 20:32:12 +00:00
Albert Wang
e60773b926 Add more xHCI wakeup path for suspend_control 
To addressdd the xHCI wakeup nodes permission problem, add new nodes:
/devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb2/wakeup
/devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb3/wakeup

avc: denied { read } for name="wakeup175" dev="sysfs" ino=162091
scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
android.system.suspend@1.0-service: Error opening kernel wakelock stats for: wakeup175
(../../devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb2/wakeup/
wakeup175): Permission denied
avc: denied { read } for name="wakeup176" dev="sysfs" ino=162107
scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
android.system.suspend@1.0-service: Error opening kernel wakelock stats for: wakeup176
(../../devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb3/wakeup/
wakeup176): Permission denied

Bug: 226056256
Test: test build to verify sepolicy log
Signed-off-by: Albert Wang <albertccwang@google.com>
Change-Id: I7f65597f91db5a16d4f9de4f6bb018bd5b50a965
 2022-04-01 09:43:40 +08:00
sukiliu
ed3ac0623b Update avc error on ROM 8386107 
Bug: 226717475
Test: PtsSELinuxTestCases
Change-Id: Ia366a4ad0f193858960b7c5df34096bd2d4eada5
 2022-03-31 15:48:04 +08:00
chungkai
de44d766e4 sched: move sysfs to procfs 
Modify name from sysfs_vendor_sched to proc_vendor_sched

Test: without avc denial
Bug: 216207007
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: Ic113b2d8ee1d3ae1ced9985636b17ef1e7657a84
 2022-03-29 09:43:32 +00:00
KRIS CHEN
572a8a3372 Merge "Allow hal_fingerprint_default to access sysfs_display" into tm-dev 2022-03-29 01:39:34 +00:00
Badhri Jagan Sridharan
a4b9ad439b android.hardware.usb.IUsb AIDL migration 
android.hardware.usb.IUsb is migrated to AIDL and runs in
its own process. android.hardware.usb.gadget.IUsbGadget
is now published in its own exclusive process
(android.hardware.usb.gadget-service). Creating
file_context and moving the selinux linux rules
for IUsbGadget implementation.

Bug: 200993386
Change-Id: Ia8c24610244856490c8271433710afb57d3da157
Merged-In: Ia8c24610244856490c8271433710afb57d3da157
(cherry picked from commit 51735ba3ab)
 2022-03-28 17:01:45 +08:00
Darren Hsu
2650d53059 Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae am: a0592e36d2 am: 24b4d1b601 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864

Change-Id: Iacfa20c771905827c1299527dc2c66646ae18506
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-03-28 08:41:17 +00:00
Darren Hsu
24b4d1b601 Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae am: a0592e36d2 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864

Change-Id: I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-03-28 08:17:33 +00:00
Darren Hsu
a0592e36d2 Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864

Change-Id: I3b5f155658676081c3248e67ee512c1ce301ab07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-03-28 07:51:38 +00:00
Chris Kuiper
dfcef044a2 Merge "Allow Sensor HAL access to display sysfs panel_name file." into tm-dev 2022-03-25 16:49:40 +00:00
Kris Chen
3df0d7812b Allow hal_fingerprint_default to access sysfs_display 
Fix the following avc denial:
avc: denied { read } for name="panel_name" dev="sysfs" ino=71133 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_display:s0 tclass=file permissive=0

Bug: 223687187
Test: build and test fingerprint on device.
Change-Id: Ic2b2cadb97f36643b79de6a8ebfe2232093fe7d7
 2022-03-25 14:53:53 +08:00
Darren Hsu
f11f53a3ae Allow hal_power_stats to read sysfs_aoc_dumpstate 
avc: denied { read } for comm="android.hardwar" name="restart_count"
dev="sysfs" ino=72823 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs_aoc_dumpstate:s0 tclass=file permissive=0

Bug: 226173008
Test: check bugreport without avc denials
Change-Id: Ife3a7e00a1ffbcbed7fd8b744f2ac8910931a5fb
Signed-off-by: Darren Hsu <darrenhsu@google.com>
 2022-03-25 11:19:20 +08:00
Chris Kuiper
28ddd3bf9f Allow Sensor HAL access to display sysfs panel_name file. 
Bug: 208926536
Test: Accessed the display sysfs from sensor HAL correctly.
Change-Id: Ide86813de20a1240f8ac55322b017329f30b296e
 2022-03-24 17:55:43 -07:00
Darren Hsu
22def09e8a Allow hal_power_stats to read sysfs_aoc_dumpstate 
avc: denied { read } for comm="android.hardwar" name="restart_count"
dev="sysfs" ino=72823 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs_aoc_dumpstate:s0 tclass=file permissive=0

Bug: 226173008
Test: check bugreport without avc denials
Change-Id: Iccd8e4475ba6055d07aedc43de72bd39e6674469
Signed-off-by: Darren Hsu <darrenhsu@google.com>
 2022-03-24 14:53:24 +08:00
Stephane Lee
282c77a88f Fix off-mode (charger) sepolicy for the health interface am: 84a06151a3 am: c35357078d am: 620e6038e2 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039624

Change-Id: I1da177501cfa887962e7a8133e4b568db9624025
 2022-03-24 05:14:06 +00:00
Jack Wu
6abc9f674c [automerger skipped] sepolicy: gs101: fix charger_vendor permission denied am: b67138e8ae am: 28efee70de am: d43cfef11c -s ours 
am skip reason: Merged-In I091dbbca35fb833e59fdbc234d74b90bfe74014c with SHA-1 dcb05d1377 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039623

Change-Id: I01702f92f112bd722cfe3852af74aa79bfaaecef
 2022-03-24 05:14:05 +00:00
Stephane Lee
620e6038e2 Fix off-mode (charger) sepolicy for the health interface am: 84a06151a3 am: c35357078d 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039624

Change-Id: Ia59f2cdb6b014a802edad3b76f135a69c21002e9
 2022-03-24 04:37:58 +00:00
Jack Wu
d43cfef11c sepolicy: gs101: fix charger_vendor permission denied am: b67138e8ae am: 28efee70de 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039623

Change-Id: I1802a01e50797f41a63ba0073f5f032a8d49939b
 2022-03-24 04:37:57 +00:00
Stephane Lee
c35357078d Fix off-mode (charger) sepolicy for the health interface am: 84a06151a3 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039624

Change-Id: Ia2c26cc56c09a535aae2d7b4e8e46ff77b79616e
 2022-03-24 04:06:54 +00:00
Jack Wu
28efee70de sepolicy: gs101: fix charger_vendor permission denied am: b67138e8ae 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039623

Change-Id: I70510310fad5fb164c3a420685fbad7c1e1e1e71
 2022-03-24 04:06:53 +00:00
Stephane Lee
84a06151a3 Fix off-mode (charger) sepolicy for the health interface 
Bug: 223537397
Test: Ensure that there are no selinux errors for sysfs_batteryinfo in
   off-mode charging

Change-Id: I46fa1b7552eb0655d0545538142131465a337f23
Merged-In: I46fa1b7552eb0655d0545538142131465a337f23
 2022-03-23 11:30:31 -07:00
Jack Wu
b67138e8ae sepolicy: gs101: fix charger_vendor permission denied 
[   27.025458][  T443] type=1400 audit(1644391560.640:11): avc: denied { search } for comm="android.hardwar" name="vendor" dev="tmpfs" ino=2 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=0
[   26.563658][  T447] type=1400 audit(1644397622.588:5): avc: denied { search } for comm="android.hardwar" name="/" dev="sda1" ino=2 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_file:s0 tclass=dir permissive=0
[   27.198144][  T442] type=1400 audit(1644398156.152:5): avc: denied { search } for comm="android.hardwar" name="battery" dev="sda1" ino=12 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=dir permissive=0
[   27.327035][  T443] type=1400 audit(1644398785.276:5): avc: denied { read } for comm="android.hardwar" name="defender_active_time" dev="sda1" ino=17 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=file permissive=0
[   27.355009][  T443] type=1400 audit(1644398785.276:6): avc: denied { write } for comm="android.hardwar" name="defender_charger_time" dev="sda1" ino=16 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=file permissive=0
[   26.771705][  T444] type=1400 audit(1644379988.804:4): avc: denied { read } for comm="android.hardwar" name="specification_version" dev="sysfs" ino=56257 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0
[   27.898684][  T445] type=1400 audit(1644392754.928:8): avc: denied { read } for comm="android.hardwar" name="thermal_zone6" dev="sysfs" ino=15901 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=lnk_file permissive=0
[   29.180076][  T447] type=1400 audit(1644397625.200:9): avc: denied { write } for comm="android.hardwar" name="mode" dev="sysfs" ino=15915 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=0
[   27.043845][  T444] type=1400 audit(1644379988.808:9): avc: denied { search } for comm="android.hardwar" name="thermal" dev="tmpfs" ino=899 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:thermal_link_device:s0 tclass=dir permissive=0
[   27.064916][  T444] type=1400 audit(1644379988.808:10): avc: denied { read } for comm="android.hardwar" name="u:object_r:vendor_battery_defender_prop:s0" dev="tmpfs" ino=306 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=file permissive=0
[   27.356266][  T444] type=1107 audit(1644404450.376:4): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.battery.defender.state pid=457 uid=1000 gid=1000 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=property_service permissive=0'

Bug: 218485039
Test: manually test, no avc: denied
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I091dbbca35fb833e59fdbc234d74b90bfe74014c
Merged-In: I091dbbca35fb833e59fdbc234d74b90bfe74014c
 2022-03-23 11:27:45 -07:00
Roshan Pius
3ffd8035a2 gs-policy: Remove obsolete uwb vendor service rules 
This service no longer exists in the UCI stack.

Bug: 186585880
Test: Manual UWB tests
Change-Id: I198a20f85cb24f9e38035fa037609d6541640d9e
 2022-03-21 09:19:16 -07:00
Armelle Laine
fcc7d1dbae [automerger skipped] Merge changes from topic "trusty-dsu_fix-sc-qpr3" into sc-v2-dev-plus-aosp am: 92707e72ab -s ours 
am skip reason: Merged-In I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b with SHA-1 b69ac35ff0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16727208

Change-Id: I485b582f2dd3df1d6c9f25e3df31094e82e8bfc0
 2022-03-18 04:31:42 +00:00
Stephen Crane
8a0cbfea6d [automerger skipped] [automerged blank] Allow TEE storageproxyd permissions needed for DSU handling 2p: b9beafc9fa am: e48d11c26c -s ours 
am skip reason: Merged-In I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b with SHA-1 b69ac35ff0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16727208

Change-Id: I4e9ded6165f8e1db1aed145f8156347de70d5e73
 2022-03-18 04:31:40 +00:00
Armelle Laine
92707e72ab Merge changes from topic "trusty-dsu_fix-sc-qpr3" into sc-v2-dev-plus-aosp 
* changes:
  [automerged blank] Allow TEE storageproxyd permissions needed for DSU handling 2p: b9beafc9fa
  Allow TEE storageproxyd permissions needed for DSU handling
 2022-03-18 04:14:36 +00:00
Darren Hsu
61e944b081 sepolicy: reorder genfs labels for system suspend am: 2018f942a7 am: 83e88065fc am: 186f2306d7 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2026063

Change-Id: Ieebbc5aafe7ddabe3560310dd599573d0ced3caf
 2022-03-17 04:54:29 +00:00
Darren Hsu
186f2306d7 sepolicy: reorder genfs labels for system suspend am: 2018f942a7 am: 83e88065fc 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2026063

Change-Id: I732b1d982c15846e2b9ae1365894b4d0ea0f424f
 2022-03-17 03:55:26 +00:00