TreeHugger Robot
b596f9dbd5
Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299
Change-Id: Id800243025f0eb916789582f6c9925924e94e4ec
2021-06-23 11:33:09 +00:00
TreeHugger Robot
99b2f78bde
Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299
Change-Id: I9ca9b992d8f0c428bd36e437d8fc018f395ff8a0
2021-06-23 11:32:03 +00:00
TreeHugger Robot
c431abb5bf
Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev
2021-06-23 11:20:51 +00:00
Denny cy Lee
1777ff558f
Pixelstat: battery history access premission am: 0b21a2d44a
am: 632e7b95ab
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520
Change-Id: Ibb82df26953257cbf0575e81d67c22ec72cedd8f
2021-06-23 08:58:21 +00:00
Denny cy Lee
4ac1899651
Pixelstat: battery history access premission am: 0b21a2d44a
am: 7185538f79
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520
Change-Id: Id1ce31235e04afd6571cca48c3aa9a9cc1cc4a5e
2021-06-23 08:57:50 +00:00
Sungwoo choi
5aaa0f6044
gs101-sepolicy: add oemrilservice_app.te
...
Seperate oemrilservice_app.te from vendor_telephony_app.te.
- target process: com.samsung.slsi.telephony.oemril
- selabel: oemrilservice_app
- allow to find app_api_service
- allow to find radio_service
- allow to find vendor HAL
- a binder communication with rild
Bug: 191830874
Test: Manual
Signed-off-by: Sungwoo choi <sungwoo48.choi@samsung.com>
Change-Id: I5e31b4a16f0b4d25bf4889da0150084937354808
2021-06-23 16:51:57 +08:00
Denny cy Lee
7185538f79
Pixelstat: battery history access premission am: 0b21a2d44a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520
Change-Id: Ida0cfc72b0bfcfc0943f012edc093f8d1d936679
2021-06-23 08:33:25 +00:00
Denny cy Lee
632e7b95ab
Pixelstat: battery history access premission am: 0b21a2d44a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520
Change-Id: I8c5f44af025177d9c6063ae3c8b174118a100e3d
2021-06-23 08:32:29 +00:00
Kris Chen
a23d1bb37b
Allow fingerprint hal to read sysfs_chosen
...
Fixes the following avc denial:
android.hardwar: type=1400 audit(0.0:49): avc: denied { search } for name="chosen" dev="sysfs" ino=9575 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=dir permissive=1
android.hardwar: type=1400 audit(0.0:50): avc: denied { read } for name="platform" dev="sysfs" ino=9591 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=file permissive=1
android.hardwar: type=1400 audit(0.0:51): avc: denied { open } for path="/sys/firmware/devicetree/base/chosen/plat/platform" dev="sysfs" ino=9591 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=file permissive=1
Bug: 191832617
Test: Enroll and authenticate fingerprints.
Change-Id: I5c576cc210d9e85b1999655bdc27736183db8aed
2021-06-23 16:20:57 +08:00
Denny cy Lee
433aeb2d4d
Sepolicy: Pixel stats wireless charger sepolicy
...
Bug: 171853251
Bug: 188601686
Test: manually, do wirelees charge, check logcat
Change-Id: I4cbd7da038365ae92e34780131056da61b9a55dc
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-23 06:48:42 +00:00
Denny cy Lee
0b21a2d44a
Pixelstat: battery history access premission
...
Test: manually, relate seploicy not show; battery history log printed
05-24 13:29:19.637 2829 2829 D pixelstats_BatteryEEPROM:
checkAndReport: 0940 0a80 0500 0200 0200 0000
Bug: 189050725
Change-Id: I20567e168db43fe2168a9a30ac7a4b0cec65a665
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-23 13:50:32 +08:00
Adam Shih
a70819d2f0
modularize pktrouter
...
Bug: 190331212
Test: make sure pktrouter gets initialized
06-23 13:21:19.372 1 1 I init : Parsing file /vendor/etc/init/pktrouter.rc...
06-23 13:21:23.510 1 1 I init : processing action (vendor.pktrouter=1) from (/vendor/etc/init/pktrouter.rc:7)
06-23 13:21:23.510 1 1 I init : starting service 'pktrouter'...
Change-Id: Icc7ab88505aea47cfed5ffc5182d0625b7a7609d
2021-06-23 05:24:01 +00:00
Adam Shih
9b7b36093f
modulize init.radio.sh am: d74e989739
am: af082207ce
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203
Change-Id: I0e41b10f40aeed53c2c4a15d27e4a04fb0c9478a
2021-06-23 03:36:08 +00:00
Adam Shih
4d69f3c773
modulize init.radio.sh am: d74e989739
am: 2812270759
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203
Change-Id: Icb720abe930291037a1b3da65a52d8b94e6e8b69
2021-06-23 03:30:58 +00:00
Adam Shih
2812270759
modulize init.radio.sh am: d74e989739
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203
Change-Id: Ifae088c8915f6920de295286e6c34a9af17de8b3
2021-06-23 03:17:48 +00:00
Adam Shih
af082207ce
modulize init.radio.sh am: d74e989739
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203
Change-Id: I9fd2463183e0b630daca6503b1655fd3bd88227f
2021-06-23 03:16:54 +00:00
SalmaxChang
a926055749
vendor_init/dumpstate: Grant to access logger prop
...
Bug: 176176656
Change-Id: I551ccfac57d983aab95aa23e1f350f78ee0a159f
2021-06-23 10:06:09 +08:00
Michael Ayoubi
cebbf14174
Add support for non-su hal_uwb
...
Bug: 187386527
Test: Boot and confirm HAL is up
Signed-off-by: Michael Ayoubi <mayoubi@google.com>
Change-Id: Ia9f3f90fba6981762fe375aa37c81f8474ad9c53
2021-06-23 01:26:25 +00:00
Adam Shih
d74e989739
modulize init.radio.sh
...
Bug: 190331600
Test: build ROM and make sure the file is there and functional.
Change-Id: Icb3e0e590ae315d53eb5251fd5e74d6aacab1fe2
2021-06-23 01:07:26 +00:00
TreeHugger Robot
2719d2f8ae
Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca
am: 7ad9e45515
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575
Change-Id: Ide59cfb052e501d809cb9a263297c5c6dd999ea2
2021-06-22 12:45:15 +00:00
TreeHugger Robot
e5febaf579
Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca
am: 7559eac0df
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575
Change-Id: I13e1fa6cdd1c266ae3f60fbd4569b0e39f82bcf4
2021-06-22 12:41:20 +00:00
TreeHugger Robot
7ad9e45515
Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575
Change-Id: I1922239b616469f421d75ac35a392d65d2521cc4
2021-06-22 12:30:09 +00:00
TreeHugger Robot
7559eac0df
Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575
Change-Id: I053b84d7c183802f0e78511de11e18b60ad68709
2021-06-22 12:26:37 +00:00
TreeHugger Robot
e2ef28efca
Merge "Allow camera hal to access devfreq query" into sc-dev
2021-06-22 12:06:16 +00:00
Speth Chang
419019a71a
Allow camera hal to access devfreq query
...
Bug: 190687351
Test: p21 checklist
Change-Id: Id0cb74b483882a6ede93cadc475a7be334ecf20d
2021-06-22 10:19:49 +00:00
Alex Hong
902f2cf23c
Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2
am: 710cc3863d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028
Change-Id: Ie84cb1af05a719443261aebd22fabd03368d580d
2021-06-22 03:38:06 +00:00
Alex Hong
a23e74f7d3
Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2
am: fd43ace221
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028
Change-Id: Ib4bd5ba999bbc150892b332b59fc0dc2368e706e
2021-06-22 03:37:52 +00:00
Alex Hong
fd43ace221
Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028
Change-Id: I79ce5df849956b3b000ff6241ef0c20dd0a32f7c
2021-06-22 03:20:34 +00:00
Alex Hong
710cc3863d
Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028
Change-Id: I3f65c53287d4ba739d640e40a458e169c92b78f6
2021-06-22 03:19:49 +00:00
Alex Hong
1f17829dc2
Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev
2021-06-22 03:01:07 +00:00
Srinivas Patibandla
df7ad071fa
Update time sync seinfo to not use platform signature am: 51c891fa7b
am: 38b0a12272
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432
Change-Id: Ie351ebfccec59c70a5287ddb5e11004a7df7cc5d
2021-06-21 20:22:06 +00:00
Srinivas Patibandla
ea69d530a0
Update time sync seinfo to not use platform signature am: 51c891fa7b
am: 0d3d449ced
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432
Change-Id: I5bed4668b0e413af4251fd73dc05908e194d68ed
2021-06-21 20:12:47 +00:00
Srinivas Patibandla
38b0a12272
Update time sync seinfo to not use platform signature am: 51c891fa7b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432
Change-Id: Ia0719062e6021fb25aa88183eec92740c1e0bf3d
2021-06-21 19:56:40 +00:00
Srinivas Patibandla
0d3d449ced
Update time sync seinfo to not use platform signature am: 51c891fa7b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432
Change-Id: I1ae881f223b3e014b74af2495255ef18c0e30ffc
2021-06-21 19:54:51 +00:00
Alex Hong
c598db170c
Move the genfs_contexts of sched nodes from vendor to product
...
For sched nodes, "proc_vendor_sched" and "sysfs_vendor_sched",
their type definition is in product sepolicy,
while genfs_contexts is in vendor sepolicy.
In this case, genfs_contexts cannot be resolved after product sepolicy
is replaced by Dynamic System Update.
Need to keep the type definition and genfs_contexts in the same partition.
Now move genfs_contexts because the type definition has to be in product for now
since other private domains are accessing these sched nodes.
Test: $ make selinux_policy
The device can boot to home after replacing with GSI.
Bug: 191236468
Change-Id: I02ea78b04dfcade4ceb426ff6ebf498daa81ac32
2021-06-21 14:55:08 +00:00
Srinivas Patibandla
51c891fa7b
Update time sync seinfo to not use platform signature
...
Bug: b/190695230
Change-Id: I2dbee2e624c8794b3aa9ff85d8985a15ee159a0f
2021-06-21 14:47:28 +00:00
Thiebaud Weksteen
bf58949ba3
Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev am: c4d98b5c11
am: 24b135a5ba
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15018192
Change-Id: I869dcdb0a0419de8c7d61cfeff45676ca44e6c8a
2021-06-21 09:21:00 +00:00
Thiebaud Weksteen
344792d48a
Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev am: c4d98b5c11
am: e6f8977370
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15018192
Change-Id: I7de56040c97e5bd6c8cc1d8099e94a567817a5d6
2021-06-21 09:20:33 +00:00
Thiebaud Weksteen
e6f8977370
Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev am: c4d98b5c11
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15018192
Change-Id: Ia6ed028f32448e2475784a8e9406092b7ea6572e
2021-06-21 08:56:38 +00:00
Thiebaud Weksteen
24b135a5ba
Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev am: c4d98b5c11
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15018192
Change-Id: Id422825604c3df974fbcd225c966742ceb1f6a7f
2021-06-21 08:55:44 +00:00
Thiebaud Weksteen
c4d98b5c11
Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev
2021-06-21 08:38:37 +00:00
Jack Wu
3fa70601e4
sepolicy: gs101: allows pixelstat to access wlc file nodes am: 2794370557
am: e2aaccb114
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14732233
Change-Id: Ie4a85317295dc803b406b652fbbaedb4fe0555ef
2021-06-19 03:12:57 +00:00
Jack Wu
e96cd5e870
sepolicy: gs101: allows pixelstat to access wlc file nodes am: 2794370557
am: 4266de165e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14732233
Change-Id: Ibbb209fbbf878133292377a3a1ca23c41cac97b7
2021-06-19 03:12:25 +00:00
Jack Wu
4266de165e
sepolicy: gs101: allows pixelstat to access wlc file nodes am: 2794370557
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14732233
Change-Id: I1568bee94e97333056a76bddf174a8dd75926e5a
2021-06-19 02:58:13 +00:00
Jack Wu
e2aaccb114
sepolicy: gs101: allows pixelstat to access wlc file nodes am: 2794370557
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14732233
Change-Id: I8b9f1e8b1dc1e945ef0f24431610d43f19aafa38
2021-06-19 02:57:02 +00:00
Jack Wu
2794370557
sepolicy: gs101: allows pixelstat to access wlc file nodes
...
05-31 11:14:57.280 1000 3126 3126 W pixelstats-vend: type=1400 audit(0.0:162): avc: denied { search } for name="i2c-p9412" dev="sysfs" ino=60862 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=0
05-31 11:14:57.280 1000 3126 3126 W pixelstats-vend: type=1400 audit(0.0:163): avc: denied { search } for name="i2c-p9412" dev="sysfs" ino=60862 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=0
05-31 13:12:23.940 1000 2838 2838 W pixelstats-vend: type=1400 audit(0.0:182): avc: denied { read } for name="charge_stats" dev="sysfs" ino=73276 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
05-31 15:02:02.215 1000 13169 13169 W pixelstats-vend: type=1400 audit(0.0:166): avc: denied { write } for name="charge_stats" dev="sysfs" ino=73483 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
05-31 15:02:02.215 1000 13169 13169 W pixelstats-vend: type=1400 audit(0.0:167): avc: denied { write } for name="charge_stats" dev="sysfs" ino=73483 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
Bug: 176195960
Test: manually test, no avc: denied
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I0af03dd8099e246c5f94e8e8530d7b2bcf50ff95
2021-06-18 13:50:59 +00:00
Franklin He
7881005a7d
Merge "Add new sepolicy to allow Power Hint" into sc-dev am: 6a488b8a81
am: d743a1a37b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14997453
Change-Id: I937e3238dfa7658b59570b9a254124b81b342f66
2021-06-18 09:06:47 +00:00
Franklin He
69d006583f
Merge "Add new sepolicy to allow Power Hint" into sc-dev am: 6a488b8a81
am: e2757f1a2f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14997453
Change-Id: I7ac8d183e3189a0e8b66d6331c90549344d091f8
2021-06-18 09:05:50 +00:00
Franklin He
e2757f1a2f
Merge "Add new sepolicy to allow Power Hint" into sc-dev am: 6a488b8a81
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14997453
Change-Id: I4fa13dd60ca94612acad3e5c2cce085a3499b164
2021-06-18 08:51:48 +00:00
Franklin He
d743a1a37b
Merge "Add new sepolicy to allow Power Hint" into sc-dev am: 6a488b8a81
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14997453
Change-Id: Ib88e7249a095c051820f47ebedbc5b902490e3ab
2021-06-18 08:50:56 +00:00