Marco Nelissen
7df1fa1574
Allow logd to read the Trusty log
...
Bug: 190050919
Test: build
Change-Id: I8a42cd90b1581272f4dafc37d6eb29a98e1fa2e3
2022-02-03 10:37:13 -08:00
Stephen Crane
e48d11c26c
[automerged blank] Allow TEE storageproxyd permissions needed for DSU handling 2p: b9beafc9fa
...
Blank merge reason: Change-Id I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b with SHA-1 3f9a11fa0b
is in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16727208
Bug: 203719297
Change-Id: I337cd189a9a8ffa6d58f0e1284e09884f8fb86f5
2022-01-26 22:12:29 +00:00
Stephen Crane
b9beafc9fa
Allow TEE storageproxyd permissions needed for DSU handling
...
Allows the vendor TEE access to GSI metadata files (which are publicly
readable). Storageproxyd needs access to this metadata to determine if a
GSI image is currently booted. Also allows the TEE domain to make new
directories in its data path.
Includes the fixed directory creation permission change from
Ifcc3e5f82b68a506ff99469d2f3df6ab1440b42a.
Test: access /metadata/gsi/dsu/booted from storageproxyd
Bug: 203719297
Merged-In: I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b
Merged-In: Ifcc3e5f82b68a506ff99469d2f3df6ab1440b42a
Change-Id: I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b
(cherry picked from commit b69ac35ff0
)
2022-01-26 14:00:44 -08:00
Treehugger Robot
35d7efaf11
Merge "Allow storageproxyd to create directories in its data location" am: 423a9a467b
am: 0e4789159c
am: 26f020fc70
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960462
Change-Id: I91b0e8f0033c4736516f9341a5b6166f14f7894f
2022-01-26 21:26:26 +00:00
Treehugger Robot
26f020fc70
Merge "Allow storageproxyd to create directories in its data location" am: 423a9a467b
am: 0e4789159c
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960462
Change-Id: Ie20d1e1d6037a42acba87ab92007657f4f6be83d
2022-01-26 21:07:28 +00:00
Treehugger Robot
0e4789159c
Merge "Allow storageproxyd to create directories in its data location" am: 423a9a467b
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960462
Change-Id: I021cffca681495143a279470e73e194cd5faf635
2022-01-26 20:44:17 +00:00
Treehugger Robot
423a9a467b
Merge "Allow storageproxyd to create directories in its data location"
2022-01-26 20:29:27 +00:00
Stephen Crane
45850f812e
Allow storageproxyd to create directories in its data location
...
storageproxyd already has rw_dir_perms for tee_data_file from
vendor/tee.te in platform. We need create_dir_perms to make the
"alternate/" directory for handling DSU correctly.
Test: m dist, flash, and test DSU
Bug: 203719297
Change-Id: Ifcc3e5f82b68a506ff99469d2f3df6ab1440b42a
2022-01-25 17:54:22 -08:00
TeYuan Wang
e925f85169
Move thermal netlink socket sepolicy rules to pixel sepolicy am: 66f1d74123
am: 8cb5857dac
am: 0fe33df6c0
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1958926
Change-Id: I86642d387feb6f99939ffb52341e26ba4faef082
2022-01-25 12:05:36 +00:00
TeYuan Wang
0fe33df6c0
Move thermal netlink socket sepolicy rules to pixel sepolicy am: 66f1d74123
am: 8cb5857dac
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1958926
Change-Id: I08f70c5940c8d7f8d40fb97791b762a935ac5dfa
2022-01-25 11:47:21 +00:00
TeYuan Wang
8cb5857dac
Move thermal netlink socket sepolicy rules to pixel sepolicy am: 66f1d74123
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1958926
Change-Id: I5b35f6bb9f7a5ff6ab3abaeac370384125c60abf
2022-01-25 10:39:06 +00:00
TeYuan Wang
66f1d74123
Move thermal netlink socket sepolicy rules to pixel sepolicy
...
Bug: 213257759
Test: verified genlink function with emul_temp under enforcing mode
Change-Id: I8f5518e5f866ed0813be1e6630c6a9aefaf06e63
2022-01-25 11:59:06 +08:00
linpeter
7931384a9d
atc context change am: 85d5a9a60a
am: af647ece2f
am: 39363f3e1a
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1951025
Change-Id: I35e7cfe6ec8a3b959dbae7f2aa7d9cbf4de219dd
2022-01-21 22:47:46 +00:00
Treehugger Robot
b0ecddbd4e
Merge "Allow TEE storageproxyd permissions needed for DSU handling" am: 05ca30173e
am: 3cde81c794
am: 5dd5b0dd29
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1923363
Change-Id: I0190a5a7017d8cfa34932ecdbe9c85587408af85
2022-01-21 22:47:37 +00:00
TeYuan Wang
5c9ca15d60
Label TMU as sysfs_thermal am: 32458cdc49
am: a76533f48b
am: 27eae23a3f
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1937119
Change-Id: I78fdf05253972c617a124165a6d880083e7c0310
2022-01-21 22:47:28 +00:00
Yabin Cui
b48e33f29f
Merge "Add SOC specific ETM sysfs paths" am: 9ee70a3d7f
am: 1a59c0625f
am: c581535e5c
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1943866
Change-Id: I391bab4a982ec03d1904d59aa2376a3d3c816c40
2022-01-21 22:47:19 +00:00
Jasmine Cha
0bfc811257
audio: add sepolicy for getting thermal event am: 2abecb1519
am: 54e84e9978
am: d57668f3cc
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1944690
Change-Id: Idb58719a8511be2f750c8e4a11421d147801b57c
2022-01-21 22:47:00 +00:00
Jasmine Cha
6a1155a468
[automerger skipped] audio: add permission to request health/sensor data am: a21b7f8800
am: cdcccbbd02
am: 8b5831f247
-s ours
...
am skip reason: Merged-In I8e8a512cfbd6be814c98bac75ff6c0e5db028db2 with SHA-1 27a4afc1a9
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1944689
Change-Id: Ib2f5a7ce0376aeedc3c2afb23862ee42e85cb493
2022-01-21 22:46:31 +00:00
David Anderson
9e40c2e027
Fix sepolicy denial in update_engine. am: 2fe229352b
am: e999b85d07
am: b7b8477e12
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1934897
Change-Id: I8f97a3527ec13132ddbba7a0981619f55e0e0f9d
2022-01-21 22:46:11 +00:00
Matt Buckley
69b607c877
Allow HWC to get device_config_surface_flinger_native_boot_prop for adpf flags am: 317166636f
am: 8670a782de
am: 773506d408
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1934617
Change-Id: Ie88713a1f13dc5e90f0bc928dc2312625bcca096
2022-01-21 22:45:33 +00:00
Joel Galenson
651a6b8631
Include core policy OWNERS. am: b287da183e
am: 453006460d
am: 047d2a31ed
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1931017
Change-Id: I7a1f6fb78088aca3c2c748106f8d4cb424c73c23
2022-01-21 22:45:06 +00:00
Xin Li
1a9568121f
[automerger skipped] Merge Android 12 QPR1 am: 0d05632eb8
-s ours am: 01d5ec6d2a
-s ours am: 4f9be8d5b2
-s ours
...
am skip reason: Merged-In Ie31b278a639fd5a9e249ca934d543de770fb3217 with SHA-1 856fe3d040
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1921233
Change-Id: Ic2096a0d1be12d0b8295af1bf852fb5df383c0bb
2022-01-21 22:44:34 +00:00
chenpaul
cdab1fefb6
Remove wifi_logger related sepolicy settings am: 37d4cfa648
am: 9a9bf7fc09
am: ebc02c3437
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1881116
Change-Id: I036388f399ef567dc4eb32d1c4799e58eb8815af
2022-01-21 22:43:56 +00:00
linpeter
39363f3e1a
atc context change am: 85d5a9a60a
am: af647ece2f
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1951025
Change-Id: I3232bbc6eb0672acce9c8a90c603bee69e388a93
2022-01-21 22:30:32 +00:00
Treehugger Robot
5dd5b0dd29
Merge "Allow TEE storageproxyd permissions needed for DSU handling" am: 05ca30173e
am: 3cde81c794
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1923363
Change-Id: I5e75aabf2f88f5611f8c4406d7bb81de77d3800f
2022-01-21 22:30:24 +00:00
TeYuan Wang
27eae23a3f
Label TMU as sysfs_thermal am: 32458cdc49
am: a76533f48b
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1937119
Change-Id: Ica3d0e3c016616052f18b880cd22e9da8ca1515e
2022-01-21 22:30:16 +00:00
Yabin Cui
c581535e5c
Merge "Add SOC specific ETM sysfs paths" am: 9ee70a3d7f
am: 1a59c0625f
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1943866
Change-Id: If31d085e00b660262575ab11decb61b372597ceb
2022-01-21 22:29:59 +00:00
Jasmine Cha
d57668f3cc
audio: add sepolicy for getting thermal event am: 2abecb1519
am: 54e84e9978
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1944690
Change-Id: Iddcd4b760301c761c273d53231147a6c1b0927da
2022-01-21 22:29:29 +00:00
Jasmine Cha
8b5831f247
audio: add permission to request health/sensor data am: a21b7f8800
am: cdcccbbd02
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1944689
Change-Id: I16f8196bfe5e3b49575b936ee6d2376e878aa9be
2022-01-21 22:29:12 +00:00
David Anderson
b7b8477e12
Fix sepolicy denial in update_engine. am: 2fe229352b
am: e999b85d07
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1934897
Change-Id: I45ccf375ccb5b97f848a1db62de77271de5c0b86
2022-01-21 22:28:55 +00:00
Matt Buckley
773506d408
Allow HWC to get device_config_surface_flinger_native_boot_prop for adpf flags am: 317166636f
am: 8670a782de
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1934617
Change-Id: I2478a1ce77383d66cd7cb677406920b25bf165da
2022-01-21 22:28:26 +00:00
Joel Galenson
047d2a31ed
Include core policy OWNERS. am: b287da183e
am: 453006460d
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1931017
Change-Id: Ia079ef87912e57d704629f397bf6054a83f394bb
2022-01-21 22:27:53 +00:00
Xin Li
4f9be8d5b2
[automerger skipped] Merge Android 12 QPR1 am: 0d05632eb8
-s ours am: 01d5ec6d2a
-s ours
...
am skip reason: Merged-In Ie31b278a639fd5a9e249ca934d543de770fb3217 with SHA-1 856fe3d040
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1921233
Change-Id: I716fc9fc6a34b69afcdfb0332b3870e19f536f1a
2022-01-21 22:26:43 +00:00
chenpaul
ebc02c3437
Remove wifi_logger related sepolicy settings am: 37d4cfa648
am: 9a9bf7fc09
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1881116
Change-Id: I6402127385b8141c67e44d7f0c8e6d5625fbdc2e
2022-01-21 22:25:47 +00:00
linpeter
af647ece2f
atc context change am: 85d5a9a60a
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1951025
Change-Id: I04d30ff685f7ad74d9f5eff43ff360edf7cf0fd3
2022-01-21 22:12:40 +00:00
Treehugger Robot
3cde81c794
Merge "Allow TEE storageproxyd permissions needed for DSU handling" am: 05ca30173e
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1923363
Change-Id: I38635cce32595befc29dc3319ba5dd48a5010023
2022-01-21 22:12:31 +00:00
TeYuan Wang
a76533f48b
Label TMU as sysfs_thermal am: 32458cdc49
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1937119
Change-Id: Idc76bdeb58cdff9eb83ae817d8ed01dee9253032
2022-01-21 22:12:21 +00:00
Yabin Cui
1a59c0625f
Merge "Add SOC specific ETM sysfs paths" am: 9ee70a3d7f
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1943866
Change-Id: I89a806d01292ec28a0b22bef7833fae566d1d941
2022-01-21 22:12:12 +00:00
Jasmine Cha
54e84e9978
audio: add sepolicy for getting thermal event am: 2abecb1519
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1944690
Change-Id: I7d33c5cf635907493462d49d8b3a2ceacc128f00
2022-01-21 22:12:02 +00:00
Jasmine Cha
cdcccbbd02
audio: add permission to request health/sensor data am: a21b7f8800
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1944689
Change-Id: I0ec1f8e2c389b199e0b0646397bdd40593b3c374
2022-01-21 22:11:55 +00:00
David Anderson
e999b85d07
Fix sepolicy denial in update_engine. am: 2fe229352b
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1934897
Change-Id: Ie42aaf3f8b972471ccf43fda689e32bc4b388bf8
2022-01-21 22:11:24 +00:00
Matt Buckley
8670a782de
Allow HWC to get device_config_surface_flinger_native_boot_prop for adpf flags am: 317166636f
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1934617
Change-Id: I20977b9d52ecd10ce3feac4111677e278cadd3c2
2022-01-21 22:11:00 +00:00
Joel Galenson
453006460d
Include core policy OWNERS. am: b287da183e
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1931017
Change-Id: I91c6a5a9e6fde086d82b2def66207b938f18adae
2022-01-21 22:10:13 +00:00
Xin Li
01d5ec6d2a
[automerger skipped] Merge Android 12 QPR1 am: 0d05632eb8
-s ours
...
am skip reason: Merged-In Ie31b278a639fd5a9e249ca934d543de770fb3217 with SHA-1 856fe3d040
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1921233
Change-Id: Icf501a9eaa676a0fbf49f2862e76fe482dfa6238
2022-01-21 22:09:34 +00:00
chenpaul
9a9bf7fc09
Remove wifi_logger related sepolicy settings am: 37d4cfa648
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1881116
Change-Id: I4537982542fcf8f47e7b9fbaacf326db2cc12dc7
2022-01-21 22:08:19 +00:00
Presubmit Automerger Backend
bb9f892d56
[automerge] Add vendor SELinux denial to allowlist 2p: ed2c8d78ae
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16672552
Bug: 215640468
Change-Id: Ie94576056af0683b0cb23b51ae8543ef14b2bca7
2022-01-21 03:37:25 +00:00
eddielan
ed2c8d78ae
Add vendor SELinux denial to allowlist
...
Bug: 215640468
Test: Build Pass
Change-Id: I8c2aa5ce4c6cc229837f763c6a20a1c27e1978a6
2022-01-21 03:37:16 +00:00
linpeter
85d5a9a60a
atc context change
...
Give atc nodes are changed to dqe0 form.
Bug: 213133646
test: test: check avc denied
Change-Id: Ibbcb7538b7874912f8c7e19a77ae6dd32f097ab0
2022-01-17 16:53:53 +08:00
Treehugger Robot
05ca30173e
Merge "Allow TEE storageproxyd permissions needed for DSU handling"
2022-01-12 23:34:32 +00:00
YiHo Cheng
b4024884f1
Merge "thermal: Label tmu register dump sysfs" into sc-v2-dev am: e400db11ba
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16569088
Change-Id: I3c9929f0ec857786766b892e415d4b58163797be
2022-01-12 23:14:55 +00:00