Commit graph

11403 commits

Author SHA1 Message Date
TreeHugger Robot
72c6df70bf Merge "Remove tracking_denials/bootanim.te" into sc-dev am: e8ac32ef2e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13979105

Change-Id: I1190b5b123aea72d0e569e292537fec5fa5291b3
2021-03-24 05:45:24 +00:00
TreeHugger Robot
5a5f5b98d5 Merge "work around for uwb" into sc-dev am: 9e41379b9e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960253

Change-Id: I9490b8021f180b9b5aec5db98a7ee49453497993
2021-03-24 05:44:46 +00:00
TreeHugger Robot
e8ac32ef2e Merge "Remove tracking_denials/bootanim.te" into sc-dev 2021-03-24 05:06:44 +00:00
TreeHugger Robot
9e41379b9e Merge "work around for uwb" into sc-dev 2021-03-24 05:01:12 +00:00
Daeho Jeong
f8abad83e4 init.rc: change the ownership of compression sysfs nodes am: e966b2a635
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13921154

Change-Id: I7c533d3a05bc1275a5d99fcd8a2ee2b9185d2eb9
2021-03-24 04:19:42 +00:00
SalmaxChang
dfd490b604 vendor_init: Update tracking denials am: 14d068b640
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13899374

Change-Id: If2aa80b11fe37122ce072c2a019dbe2aaea3aa2e
2021-03-24 04:02:11 +00:00
SalmaxChang
15ef0fcb99 init: Remove duplicated folders creation am: 080d173c55
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13895469

Change-Id: I90bc184382e01128dd65e9b84951d2b6b859178f
2021-03-24 04:02:11 +00:00
TreeHugger Robot
57226560a8 Merge "update error on ROM 7230950" into sc-dev am: 1bc06a6de6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13977868

Change-Id: I3ae2d34b90ddc511af1056141d5decee00dcf2bc
2021-03-24 04:01:31 +00:00
Daeho Jeong
e966b2a635 init.rc: change the ownership of compression sysfs nodes
Changed the ownership of compression sysfs nodes for Pixelstats to reset
these values after reading them.

Test: check the ownership of /dev/sys/fs/by-name/userdata/compr_*
Bug: 173399386
Bug: 170789472
Signed-off-by: Daeho Jeong <daehojeong@google.com>
Change-Id: I25bd80fb4b3db855de3c536084cf4b3c14bc8d74
2021-03-24 03:57:45 +00:00
SalmaxChang
14d068b640 vendor_init: Update tracking denials
Bug: 176528556
Change-Id: I1ad621c14a1705420f63aeb63b0c68452d991f93
2021-03-24 03:49:03 +00:00
SalmaxChang
080d173c55 init: Remove duplicated folders creation
The fstab will auto create folder as mount.

Bug: 176528556
Change-Id: I78ef08e0b904b4e58541a92775c9918f2538fa77
2021-03-24 03:48:55 +00:00
Jesse Hall
6efd563361 Remove tracking_denials/bootanim.te
The action that was being denied no longer occurs.

Bug: 180567480
Test: boot past bootanim, check audit log
Change-Id: I58a1b307538a1198d69120c0797a9e0542f30bdf
2021-03-23 20:43:59 -07:00
TreeHugger Robot
1bc06a6de6 Merge "update error on ROM 7230950" into sc-dev 2021-03-24 03:28:03 +00:00
TreeHugger Robot
e1a5e4c82c Merge "Add se-policy for new GRIL service and RadioExt hal APIs" into sc-dev am: fb3fe04feb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13974811

Change-Id: I6ab45de430900ff6c0ce18eedf678d34fac1cbcd
2021-03-24 02:55:47 +00:00
TreeHugger Robot
abb3620d8f Merge "Add the sepolicy for UWB hal" into sc-dev am: 40df476219
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13874847

Change-Id: I9c6caf5690cb247d9d2ec079cbe829169e60f181
2021-03-24 02:55:02 +00:00
TreeHugger Robot
fb3fe04feb Merge "Add se-policy for new GRIL service and RadioExt hal APIs" into sc-dev 2021-03-24 02:39:23 +00:00
TreeHugger Robot
40df476219 Merge "Add the sepolicy for UWB hal" into sc-dev 2021-03-24 02:13:43 +00:00
Adam Shih
d28724fdb1 update error on ROM 7230950
Bug: 183560076
Bug: 183560282
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I329cd3f1e4c5eed986c21724bf42730bed46ab3b
2021-03-24 10:03:35 +08:00
TreeHugger Robot
3a05b06511 Merge "Fix denials for ril_config_service_app" into sc-dev am: 835a255138
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960264

Change-Id: I5494cde9c8f7b4c04220d19e5b614a7560407445
2021-03-24 01:35:47 +00:00
TreeHugger Robot
13b3e58059 Merge "Allow Exoplayer access to the vstream-secure heap for secure playback" into sc-dev am: d70813575b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13974361

Change-Id: I5b7c199261a4f46f3ab6ca6caa019a41889cf7cc
2021-03-24 01:23:22 +00:00
Adam Shih
77f6de6ea6 work around for uwb
Bug: 171943668
Test: dw3000 kthread and uwb service came up fine
Change-Id: I4288e07b9b9a2741bfe64b35bd4681ffe4a66039
2021-03-24 00:41:27 +00:00
TreeHugger Robot
835a255138 Merge "Fix denials for ril_config_service_app" into sc-dev 2021-03-24 00:41:22 +00:00
TreeHugger Robot
d70813575b Merge "Allow Exoplayer access to the vstream-secure heap for secure playback" into sc-dev 2021-03-24 00:26:19 +00:00
Oleg Matcovschi
eb87ec1558 BoardConfig: move androidboot.console to cmdline am: 9963cf04e0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13973937

Change-Id: I4819dc478581600f3f24075626ea57e212790bda
2021-03-23 23:14:35 +00:00
Christine Franks
697b71b400 Merge "Add uhid access for exo" into sc-dev am: 28ab0ae8c3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13933043

Change-Id: Idb4c0e31fa115cc5ff381ed17872f8dce21a2590
2021-03-23 22:33:21 +00:00
labib
a0c5ec2305 Add se-policy for new GRIL service and RadioExt hal APIs
Bug: 172294179
Change-Id: Ief4c7ec7959676126f35037006016e1454a34f5e
2021-03-24 06:16:03 +08:00
Christine Franks
28ab0ae8c3 Merge "Add uhid access for exo" into sc-dev 2021-03-23 21:57:15 +00:00
Hridya Valsaraju
fb862c0888 Allow Exoplayer access to the vstream-secure heap for secure playback
Fixes the following denials:

avc: denied { read } for name="vstream-secure" dev="tmpfs"
ino=736 scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:dmabuf_heap_device:s0 tclass=chr_file permissive=0
app=com.google.android.exoplayer.demo
avc: denied { read } for name="vstream-secure" dev="tmpfs" ino=736
scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:dmabuf_heap_device:s0
tclass=chr_file permissive=0 app=com.google.android.exoplayer.demo
avc: denied { read } for name="vstream-secure" dev="tmpfs" ino=736
scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:dmabuf_heap_device:s0
tclass=chr_file permissive=0 app=com.google.android.exoplayer.demo

Bug: 178865267
Test: no more denials
Change-Id: I6612bd56c49558b13e2ae72cfbf3552715729e7a
Signed-off-by: Hridya Valsaraju <hridya@google.com>
2021-03-23 14:37:01 -07:00
Oleg Matcovschi
9963cf04e0 BoardConfig: move androidboot.console to cmdline
Bug: 183531243
Change-Id: Ida1dd4c8f3a2b57a64955f6002c6bace1d0b40c9
2021-03-23 14:08:58 -07:00
Stephane Lee
81ba287759 Add UeventListener to pixelstats in gs101 am: 33a1ce7421
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13906565

Change-Id: I674fadd4b9dafff509137ed9569d6a42e5f6bb8a
2021-03-23 20:08:21 +00:00
Greg Kaiser
d10bc2029c Merge "Revert "Add se-policy for new GRIL service and RadioExt hal APIs"" into sc-dev am: 9ec1be4eb9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13974086

Change-Id: Ie04f0e9e1d4df1d225a53da99d6b8b9a81710659
2021-03-23 19:49:49 +00:00
Greg Kaiser
9ec1be4eb9 Merge "Revert "Add se-policy for new GRIL service and RadioExt hal APIs"" into sc-dev 2021-03-23 19:12:13 +00:00
LABIB MD RASHID
97bfa35d4f Revert "Add se-policy for new GRIL service and RadioExt hal APIs"
Revert "BT SAR client implementation for GRIL"

Revert submission 13944227-gril-bt-sar

Reason for revert: TreeHugger builds failing due to changes requiring se-linux permissions for GRIL. Need to add permissions for more devices before attempting this change again.

Reverted Changes:
I556657928:Add se-policy for new GRIL service and RadioExt ha...
I96cf9176a:BT SAR client implementation for GRIL

Change-Id: Ib800962d07d305a5a42ee40f019535f663beacd1
2021-03-23 19:00:57 +00:00
Stephane Lee
33a1ce7421 Add UeventListener to pixelstats in gs101
Bug: 171793497
Test: Ensure that uevent listener reports data to statsd
Change-Id: I9e90f8483298934a78320f37dbf5eb1ac38e8f97
2021-03-23 17:23:03 +00:00
TreeHugger Robot
f87d5740f6 Merge "Add se-policy for new GRIL service and RadioExt hal APIs" into sc-dev am: 25e39f7d37
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13944227

Change-Id: If101de29d62c1fa07ba39c501c9954fbc2510630
2021-03-23 16:30:55 +00:00
TreeHugger Robot
25e39f7d37 Merge "Add se-policy for new GRIL service and RadioExt hal APIs" into sc-dev 2021-03-23 16:02:35 +00:00
TreeHugger Robot
fcf368d2dd Merge "modem_svc_sit: Fix avc errors" into sc-dev am: 3bf9cddeb7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960255

Change-Id: Icf37a2009e9fe585e703d0492686643100ba35a5
2021-03-23 11:47:41 +00:00
TreeHugger Robot
6ba162f8c3 Merge "update error on ROM 7228492" into sc-dev am: 1cf98386f6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960254

Change-Id: I7609764ad40566346526f40be15310492598bca3
2021-03-23 11:47:16 +00:00
TreeHugger Robot
3bf9cddeb7 Merge "modem_svc_sit: Fix avc errors" into sc-dev 2021-03-23 11:16:25 +00:00
TreeHugger Robot
1cf98386f6 Merge "update error on ROM 7228492" into sc-dev 2021-03-23 11:16:22 +00:00
Hongbo Zeng
4211025746 Fix denials for ril_config_service_app
- RilConfigService is a common google project in vendor/google/tools,
  sync related rules from the previous project(ag/6697240, ag/7153946)
  to allow it to:
  (1) receive intents
  (2) update database files under /data/vendor/radio
  (3) update RIL properties
- Two new denials found in this project only:
  avc: denied { search } for name="data" dev="dm-7" ino=93
      scontext=u:r:ril_config_service_app:s0
      tcontext=u:object_r:system_data_file:s0:c512,c768 tclass=dir permissive=1
  avc: denied { search } for name="0" dev="dm-7" ino=192
      scontext=u:r:ril_config_service_app:s0
      tcontext=u:object_r:user_profile_root_file:s0:c512,c768 tclass=dir permissive=1

Bug: 182715439
Test: apply these rules and check there is no denial for
      RilConfigService finally
Change-Id: Icfb0e121d0d11600bda900dff0511187518105ab
2021-03-23 17:22:33 +08:00
labib
6516f369ff Add se-policy for new GRIL service and RadioExt hal APIs
Bug: 172294179
Change-Id: I556657928caa441b3530bb371902d5f4ce0be257
2021-03-23 09:20:18 +00:00
linpeter
6112567189 init: set dimming_on node permission before start hwcompower am: d95bbb9740
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13782440

Change-Id: I6c8cb9898052b4363702aa673e96f696d95834d7
2021-03-23 09:05:00 +00:00
Adam Shih
b182a7166e permission required for adb sideload to work am: fd45b5ef27
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960252

Change-Id: Ib93eae652d1e1c3cf636a3e53cd0593ade481c64
2021-03-23 08:40:29 +00:00
SalmaxChang
b4fbecb9fb modem_svc_sit: Fix avc errors
avc: denied { search } for comm="modem_svc_sit" name="vendor" dev="tmpfs" ino=2 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir
avc: denied { write open } for path="/mnt/vendor/modem_userdata/replay/dds.bin" dev="sda7" ino=14 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:modem_userdata_file:s0 tclass=file
avc: denied { remove_name } for name="dds.bin" dev="sda7" ino=14 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:modem_userdata_file:s0 tclass=dir

Bug: 183467321
Change-Id: Ic5b8fcf324bb0a8b0f6312b3ae755d73a53f0e9c
2021-03-23 15:11:38 +08:00
Adam Shih
01376cbe06 update error on ROM 7228492
Bug: 183467306
Bug: 183467321
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ia8473c1a4e1f56cc52bc765dea56e3bc497c7cc9
2021-03-23 15:11:24 +08:00
Adam Shih
fd45b5ef27 permission required for adb sideload to work
Bug: 183174452
Test: do adb sideload under enforcing mode
Change-Id: I2ba05b22729894d2677859fd33a6370f2ff9d409
2021-03-23 14:23:44 +08:00
linpeter
d95bbb9740 init: set dimming_on node permission before start hwcompower
Give dimming_on node sutiable permission to allow
hwcomposer to set dimming_on to display driver.

Bug: 177141990
test: check file node permission
Change-Id: I1f78b77884d619f1e48a63ac11c4201089010a0d
2021-03-23 05:55:01 +00:00
Adam Shih
5462e092fb Align modem's DAC setting with other AB partitions am: 777c58e8ae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13959270

Change-Id: If68d156b8c1e7447e680cd7f66387387af9ab372
2021-03-23 05:27:00 +00:00
TreeHugger Robot
22ab0cc731 Merge "permissions required for OTA" into sc-dev am: 9c46632091
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960245

Change-Id: I2b125c5603680ecbea34ceb6ef0ccf89533540aa
2021-03-23 05:08:23 +00:00