TreeHugger Robot
72c6df70bf
Merge "Remove tracking_denials/bootanim.te" into sc-dev am: e8ac32ef2e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13979105
Change-Id: I1190b5b123aea72d0e569e292537fec5fa5291b3
2021-03-24 05:45:24 +00:00
TreeHugger Robot
5a5f5b98d5
Merge "work around for uwb" into sc-dev am: 9e41379b9e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960253
Change-Id: I9490b8021f180b9b5aec5db98a7ee49453497993
2021-03-24 05:44:46 +00:00
TreeHugger Robot
e8ac32ef2e
Merge "Remove tracking_denials/bootanim.te" into sc-dev
2021-03-24 05:06:44 +00:00
TreeHugger Robot
9e41379b9e
Merge "work around for uwb" into sc-dev
2021-03-24 05:01:12 +00:00
Daeho Jeong
f8abad83e4
init.rc: change the ownership of compression sysfs nodes am: e966b2a635
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13921154
Change-Id: I7c533d3a05bc1275a5d99fcd8a2ee2b9185d2eb9
2021-03-24 04:19:42 +00:00
SalmaxChang
dfd490b604
vendor_init: Update tracking denials am: 14d068b640
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13899374
Change-Id: If2aa80b11fe37122ce072c2a019dbe2aaea3aa2e
2021-03-24 04:02:11 +00:00
SalmaxChang
15ef0fcb99
init: Remove duplicated folders creation am: 080d173c55
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13895469
Change-Id: I90bc184382e01128dd65e9b84951d2b6b859178f
2021-03-24 04:02:11 +00:00
TreeHugger Robot
57226560a8
Merge "update error on ROM 7230950" into sc-dev am: 1bc06a6de6
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13977868
Change-Id: I3ae2d34b90ddc511af1056141d5decee00dcf2bc
2021-03-24 04:01:31 +00:00
Daeho Jeong
e966b2a635
init.rc: change the ownership of compression sysfs nodes
...
Changed the ownership of compression sysfs nodes for Pixelstats to reset
these values after reading them.
Test: check the ownership of /dev/sys/fs/by-name/userdata/compr_*
Bug: 173399386
Bug: 170789472
Signed-off-by: Daeho Jeong <daehojeong@google.com>
Change-Id: I25bd80fb4b3db855de3c536084cf4b3c14bc8d74
2021-03-24 03:57:45 +00:00
SalmaxChang
14d068b640
vendor_init: Update tracking denials
...
Bug: 176528556
Change-Id: I1ad621c14a1705420f63aeb63b0c68452d991f93
2021-03-24 03:49:03 +00:00
SalmaxChang
080d173c55
init: Remove duplicated folders creation
...
The fstab will auto create folder as mount.
Bug: 176528556
Change-Id: I78ef08e0b904b4e58541a92775c9918f2538fa77
2021-03-24 03:48:55 +00:00
Jesse Hall
6efd563361
Remove tracking_denials/bootanim.te
...
The action that was being denied no longer occurs.
Bug: 180567480
Test: boot past bootanim, check audit log
Change-Id: I58a1b307538a1198d69120c0797a9e0542f30bdf
2021-03-23 20:43:59 -07:00
TreeHugger Robot
1bc06a6de6
Merge "update error on ROM 7230950" into sc-dev
2021-03-24 03:28:03 +00:00
TreeHugger Robot
e1a5e4c82c
Merge "Add se-policy for new GRIL service and RadioExt hal APIs" into sc-dev am: fb3fe04feb
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13974811
Change-Id: I6ab45de430900ff6c0ce18eedf678d34fac1cbcd
2021-03-24 02:55:47 +00:00
TreeHugger Robot
abb3620d8f
Merge "Add the sepolicy for UWB hal" into sc-dev am: 40df476219
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13874847
Change-Id: I9c6caf5690cb247d9d2ec079cbe829169e60f181
2021-03-24 02:55:02 +00:00
TreeHugger Robot
fb3fe04feb
Merge "Add se-policy for new GRIL service and RadioExt hal APIs" into sc-dev
2021-03-24 02:39:23 +00:00
TreeHugger Robot
40df476219
Merge "Add the sepolicy for UWB hal" into sc-dev
2021-03-24 02:13:43 +00:00
Adam Shih
d28724fdb1
update error on ROM 7230950
...
Bug: 183560076
Bug: 183560282
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I329cd3f1e4c5eed986c21724bf42730bed46ab3b
2021-03-24 10:03:35 +08:00
TreeHugger Robot
3a05b06511
Merge "Fix denials for ril_config_service_app" into sc-dev am: 835a255138
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960264
Change-Id: I5494cde9c8f7b4c04220d19e5b614a7560407445
2021-03-24 01:35:47 +00:00
TreeHugger Robot
13b3e58059
Merge "Allow Exoplayer access to the vstream-secure heap for secure playback" into sc-dev am: d70813575b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13974361
Change-Id: I5b7c199261a4f46f3ab6ca6caa019a41889cf7cc
2021-03-24 01:23:22 +00:00
Adam Shih
77f6de6ea6
work around for uwb
...
Bug: 171943668
Test: dw3000 kthread and uwb service came up fine
Change-Id: I4288e07b9b9a2741bfe64b35bd4681ffe4a66039
2021-03-24 00:41:27 +00:00
TreeHugger Robot
835a255138
Merge "Fix denials for ril_config_service_app" into sc-dev
2021-03-24 00:41:22 +00:00
TreeHugger Robot
d70813575b
Merge "Allow Exoplayer access to the vstream-secure heap for secure playback" into sc-dev
2021-03-24 00:26:19 +00:00
Oleg Matcovschi
eb87ec1558
BoardConfig: move androidboot.console to cmdline am: 9963cf04e0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13973937
Change-Id: I4819dc478581600f3f24075626ea57e212790bda
2021-03-23 23:14:35 +00:00
Christine Franks
697b71b400
Merge "Add uhid access for exo" into sc-dev am: 28ab0ae8c3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13933043
Change-Id: Idb4c0e31fa115cc5ff381ed17872f8dce21a2590
2021-03-23 22:33:21 +00:00
labib
a0c5ec2305
Add se-policy for new GRIL service and RadioExt hal APIs
...
Bug: 172294179
Change-Id: Ief4c7ec7959676126f35037006016e1454a34f5e
2021-03-24 06:16:03 +08:00
Christine Franks
28ab0ae8c3
Merge "Add uhid access for exo" into sc-dev
2021-03-23 21:57:15 +00:00
Hridya Valsaraju
fb862c0888
Allow Exoplayer access to the vstream-secure heap for secure playback
...
Fixes the following denials:
avc: denied { read } for name="vstream-secure" dev="tmpfs"
ino=736 scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:dmabuf_heap_device:s0 tclass=chr_file permissive=0
app=com.google.android.exoplayer.demo
avc: denied { read } for name="vstream-secure" dev="tmpfs" ino=736
scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:dmabuf_heap_device:s0
tclass=chr_file permissive=0 app=com.google.android.exoplayer.demo
avc: denied { read } for name="vstream-secure" dev="tmpfs" ino=736
scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:dmabuf_heap_device:s0
tclass=chr_file permissive=0 app=com.google.android.exoplayer.demo
Bug: 178865267
Test: no more denials
Change-Id: I6612bd56c49558b13e2ae72cfbf3552715729e7a
Signed-off-by: Hridya Valsaraju <hridya@google.com>
2021-03-23 14:37:01 -07:00
Oleg Matcovschi
9963cf04e0
BoardConfig: move androidboot.console to cmdline
...
Bug: 183531243
Change-Id: Ida1dd4c8f3a2b57a64955f6002c6bace1d0b40c9
2021-03-23 14:08:58 -07:00
Stephane Lee
81ba287759
Add UeventListener to pixelstats in gs101 am: 33a1ce7421
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13906565
Change-Id: I674fadd4b9dafff509137ed9569d6a42e5f6bb8a
2021-03-23 20:08:21 +00:00
Greg Kaiser
d10bc2029c
Merge "Revert "Add se-policy for new GRIL service and RadioExt hal APIs"" into sc-dev am: 9ec1be4eb9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13974086
Change-Id: Ie04f0e9e1d4df1d225a53da99d6b8b9a81710659
2021-03-23 19:49:49 +00:00
Greg Kaiser
9ec1be4eb9
Merge "Revert "Add se-policy for new GRIL service and RadioExt hal APIs"" into sc-dev
2021-03-23 19:12:13 +00:00
LABIB MD RASHID
97bfa35d4f
Revert "Add se-policy for new GRIL service and RadioExt hal APIs"
...
Revert "BT SAR client implementation for GRIL"
Revert submission 13944227-gril-bt-sar
Reason for revert: TreeHugger builds failing due to changes requiring se-linux permissions for GRIL. Need to add permissions for more devices before attempting this change again.
Reverted Changes:
I556657928:Add se-policy for new GRIL service and RadioExt ha...
I96cf9176a:BT SAR client implementation for GRIL
Change-Id: Ib800962d07d305a5a42ee40f019535f663beacd1
2021-03-23 19:00:57 +00:00
Stephane Lee
33a1ce7421
Add UeventListener to pixelstats in gs101
...
Bug: 171793497
Test: Ensure that uevent listener reports data to statsd
Change-Id: I9e90f8483298934a78320f37dbf5eb1ac38e8f97
2021-03-23 17:23:03 +00:00
TreeHugger Robot
f87d5740f6
Merge "Add se-policy for new GRIL service and RadioExt hal APIs" into sc-dev am: 25e39f7d37
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13944227
Change-Id: If101de29d62c1fa07ba39c501c9954fbc2510630
2021-03-23 16:30:55 +00:00
TreeHugger Robot
25e39f7d37
Merge "Add se-policy for new GRIL service and RadioExt hal APIs" into sc-dev
2021-03-23 16:02:35 +00:00
TreeHugger Robot
fcf368d2dd
Merge "modem_svc_sit: Fix avc errors" into sc-dev am: 3bf9cddeb7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960255
Change-Id: Icf37a2009e9fe585e703d0492686643100ba35a5
2021-03-23 11:47:41 +00:00
TreeHugger Robot
6ba162f8c3
Merge "update error on ROM 7228492" into sc-dev am: 1cf98386f6
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960254
Change-Id: I7609764ad40566346526f40be15310492598bca3
2021-03-23 11:47:16 +00:00
TreeHugger Robot
3bf9cddeb7
Merge "modem_svc_sit: Fix avc errors" into sc-dev
2021-03-23 11:16:25 +00:00
TreeHugger Robot
1cf98386f6
Merge "update error on ROM 7228492" into sc-dev
2021-03-23 11:16:22 +00:00
Hongbo Zeng
4211025746
Fix denials for ril_config_service_app
...
- RilConfigService is a common google project in vendor/google/tools,
sync related rules from the previous project(ag/6697240, ag/7153946)
to allow it to:
(1) receive intents
(2) update database files under /data/vendor/radio
(3) update RIL properties
- Two new denials found in this project only:
avc: denied { search } for name="data" dev="dm-7" ino=93
scontext=u:r:ril_config_service_app:s0
tcontext=u:object_r:system_data_file:s0:c512,c768 tclass=dir permissive=1
avc: denied { search } for name="0" dev="dm-7" ino=192
scontext=u:r:ril_config_service_app:s0
tcontext=u:object_r:user_profile_root_file:s0:c512,c768 tclass=dir permissive=1
Bug: 182715439
Test: apply these rules and check there is no denial for
RilConfigService finally
Change-Id: Icfb0e121d0d11600bda900dff0511187518105ab
2021-03-23 17:22:33 +08:00
labib
6516f369ff
Add se-policy for new GRIL service and RadioExt hal APIs
...
Bug: 172294179
Change-Id: I556657928caa441b3530bb371902d5f4ce0be257
2021-03-23 09:20:18 +00:00
linpeter
6112567189
init: set dimming_on node permission before start hwcompower am: d95bbb9740
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13782440
Change-Id: I6c8cb9898052b4363702aa673e96f696d95834d7
2021-03-23 09:05:00 +00:00
Adam Shih
b182a7166e
permission required for adb sideload to work am: fd45b5ef27
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960252
Change-Id: Ib93eae652d1e1c3cf636a3e53cd0593ade481c64
2021-03-23 08:40:29 +00:00
SalmaxChang
b4fbecb9fb
modem_svc_sit: Fix avc errors
...
avc: denied { search } for comm="modem_svc_sit" name="vendor" dev="tmpfs" ino=2 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir
avc: denied { write open } for path="/mnt/vendor/modem_userdata/replay/dds.bin" dev="sda7" ino=14 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:modem_userdata_file:s0 tclass=file
avc: denied { remove_name } for name="dds.bin" dev="sda7" ino=14 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:modem_userdata_file:s0 tclass=dir
Bug: 183467321
Change-Id: Ic5b8fcf324bb0a8b0f6312b3ae755d73a53f0e9c
2021-03-23 15:11:38 +08:00
Adam Shih
01376cbe06
update error on ROM 7228492
...
Bug: 183467306
Bug: 183467321
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ia8473c1a4e1f56cc52bc765dea56e3bc497c7cc9
2021-03-23 15:11:24 +08:00
Adam Shih
fd45b5ef27
permission required for adb sideload to work
...
Bug: 183174452
Test: do adb sideload under enforcing mode
Change-Id: I2ba05b22729894d2677859fd33a6370f2ff9d409
2021-03-23 14:23:44 +08:00
linpeter
d95bbb9740
init: set dimming_on node permission before start hwcompower
...
Give dimming_on node sutiable permission to allow
hwcomposer to set dimming_on to display driver.
Bug: 177141990
test: check file node permission
Change-Id: I1f78b77884d619f1e48a63ac11c4201089010a0d
2021-03-23 05:55:01 +00:00
Adam Shih
5462e092fb
Align modem's DAC setting with other AB partitions am: 777c58e8ae
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13959270
Change-Id: If68d156b8c1e7447e680cd7f66387387af9ab372
2021-03-23 05:27:00 +00:00
TreeHugger Robot
22ab0cc731
Merge "permissions required for OTA" into sc-dev am: 9c46632091
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960245
Change-Id: I2b125c5603680ecbea34ceb6ef0ccf89533540aa
2021-03-23 05:08:23 +00:00