TeYuan Wang
3ddc4c7bf8
Move libperfmgr thermal rules to pixel-sepolicy am: f7aba10674
am: fe826745b3
am: faec59da79
am: 6052118e99
am: 812fd9c717
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2020535
Change-Id: If4ea1e049cb1abaa5bc3e291f9c7851fced2451b
2022-03-14 07:06:06 +00:00
TeYuan Wang
b264420d23
Move libperfmgr thermal rules to pixel-sepolicy am: f7aba10674
am: fe826745b3
am: faec59da79
am: 6052118e99
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2020535
Change-Id: Ie4e7b40564d2cd1d48c987a3f6fe5f7bceeba96e
2022-03-14 06:45:37 +00:00
TeYuan Wang
812fd9c717
Move libperfmgr thermal rules to pixel-sepolicy am: f7aba10674
am: fe826745b3
am: faec59da79
am: 6052118e99
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2020535
Change-Id: Ia3e15c8a4af73167f65c5933b14fdecf06b64b45
2022-03-14 06:44:14 +00:00
TeYuan Wang
6052118e99
Move libperfmgr thermal rules to pixel-sepolicy am: f7aba10674
am: fe826745b3
am: faec59da79
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2020535
Change-Id: I44c643184de6294c407c9fc1670b0631faac3e45
2022-03-14 06:22:59 +00:00
TeYuan Wang
faec59da79
Move libperfmgr thermal rules to pixel-sepolicy am: f7aba10674
am: fe826745b3
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2020535
Change-Id: I919c688388bcd8cc320068f6139432b58b3f0ea4
2022-03-14 06:02:51 +00:00
TeYuan Wang
fe826745b3
Move libperfmgr thermal rules to pixel-sepolicy am: f7aba10674
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2020535
Change-Id: Ie191a767c8b3450df75a37e36deebf5f20242575
2022-03-14 05:40:21 +00:00
Kris Chen
bd8bdfb845
Allow hal_fingerprint_default to access fwk_sensor_hwservice am: 9b54bf3665
am: 41ecb11342
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17149561
Change-Id: I5218f78ad72eb5fee7674910e18ff38c51fa543c
2022-03-14 03:11:10 +00:00
Kris Chen
41ecb11342
Allow hal_fingerprint_default to access fwk_sensor_hwservice am: 9b54bf3665
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17149561
Change-Id: I61c3a00cd9e0ce8b8a6adfbf0310459afe9112df
2022-03-14 02:59:35 +00:00
Kris Chen
a79e5a21d1
Allow hal_fingerprint_default to access fwk_sensor_hwservice am: 9b54bf3665
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17149561
Change-Id: I3443e7e27508ae8fc5cc119ce1e722fdc36c2818
2022-03-14 02:59:29 +00:00
TeYuan Wang
f7aba10674
Move libperfmgr thermal rules to pixel-sepolicy
...
Bug: 213257759
Bug: 188579571
Test: build
Change-Id: I9893d53055594bfb4e4dba3d68b53f0fe132617d
2022-03-10 21:28:33 +08:00
Kris Chen
9b54bf3665
Allow hal_fingerprint_default to access fwk_sensor_hwservice
...
Fix the following avc denial:
avc: denied { find } for interface=android.frameworks.sensorservice::ISensorManager sid=u:r:hal_fingerprint_default:s0 pid=1258 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:fwk_sensor_hwservice:s0 tclass=hwservice_manager permissive=0
Bug: 197789721
Test: build and test fingerprint on device.
Change-Id: I7494f28e69e5a1b660dc7fbaa528b1088048723b
2022-03-10 16:53:22 +08:00
TreeHugger Robot
d6dc27040e
Merge "Update avc error on ROM 8276520" into tm-dev am: a1f73d0faa
am: e2d47ba125
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17131103
Change-Id: I54ac7763edfcfa31912694e524e626caa2cdbb6c
2022-03-10 03:27:29 +00:00
TreeHugger Robot
85f4543496
Merge "Update avc error on ROM 8276520" into tm-dev am: a1f73d0faa
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17131103
Change-Id: I255ba3211db9c8422e041e65f36db7141379b724
2022-03-10 03:00:41 +00:00
TreeHugger Robot
e2d47ba125
Merge "Update avc error on ROM 8276520" into tm-dev am: a1f73d0faa
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17131103
Change-Id: Ie0ebdab2e78f4dfd8612b2c5a346fbc2328a22ae
2022-03-10 03:00:35 +00:00
TreeHugger Robot
a1f73d0faa
Merge "Update avc error on ROM 8276520" into tm-dev
2022-03-10 02:40:10 +00:00
Michael Eastwood
58b95e5278
Merge "Update SELinux policy to allow camera HAL to send Perfetto trace packets" am: 82a110ba3b
am: a45d075fd0
am: ada03db5e0
am: ecb7a69d78
am: bcf33b6879
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2016899
Change-Id: Ife60bc844b1e6be460dcd6140ef9092ed43325b6
2022-03-09 19:53:07 +00:00
Michael Eastwood
bcf33b6879
Merge "Update SELinux policy to allow camera HAL to send Perfetto trace packets" am: 82a110ba3b
am: a45d075fd0
am: ada03db5e0
am: ecb7a69d78
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2016899
Change-Id: I278288a3290cb78ffcfefaf2fd7eb6a5d67a1a13
2022-03-09 19:31:05 +00:00
Michael Eastwood
d947ec661c
Merge "Update SELinux policy to allow camera HAL to send Perfetto trace packets" am: 82a110ba3b
am: a45d075fd0
am: ada03db5e0
am: ecb7a69d78
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2016899
Change-Id: I9df6016d123bc1f71601d3e518e97ab1fa205c10
2022-03-09 19:30:27 +00:00
Michael Eastwood
ecb7a69d78
Merge "Update SELinux policy to allow camera HAL to send Perfetto trace packets" am: 82a110ba3b
am: a45d075fd0
am: ada03db5e0
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2016899
Change-Id: Ic6e51b5ea87b5d682f406a9711d39d80c4b29a9c
2022-03-09 18:55:19 +00:00
Michael Eastwood
ada03db5e0
Merge "Update SELinux policy to allow camera HAL to send Perfetto trace packets" am: 82a110ba3b
am: a45d075fd0
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2016899
Change-Id: I2b73c3f4576a4f42f76afbf7b8e75fd3be838107
2022-03-09 18:32:59 +00:00
Michael Eastwood
a45d075fd0
Merge "Update SELinux policy to allow camera HAL to send Perfetto trace packets" am: 82a110ba3b
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2016899
Change-Id: I55cfbec1df5a5b3952e02875860d25db44b64b98
2022-03-09 18:00:28 +00:00
Michael Eastwood
82a110ba3b
Merge "Update SELinux policy to allow camera HAL to send Perfetto trace packets"
2022-03-09 17:31:28 +00:00
Xin Li
b8f4b3d29c
[automerger skipped] Merge Android 12L am: 22c3ab8b6b
-s ours am: 594011b90b
-s ours am: 0e86159889
-s ours am: 6bc47cde6f
-s ours am: a78738e763
-s ours
...
am skip reason: Merged-In I7b9186af0cb135241e23504fa9d6f7c3d6718c7c with SHA-1 22f2ffcbee
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2012332
Change-Id: I01d9d28f8f24a01d95b4816428ec961487489e6b
2022-03-09 12:06:39 +00:00
Xin Li
d299c8c1b6
[automerger skipped] Merge Android 12L am: 22c3ab8b6b
-s ours am: 594011b90b
-s ours am: 0e86159889
-s ours am: 6bc47cde6f
-s ours
...
am skip reason: Merged-In I7b9186af0cb135241e23504fa9d6f7c3d6718c7c with SHA-1 22f2ffcbee
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2012332
Change-Id: Ief16a611fa732ecc93b9810bcf6e349978d8ebe7
2022-03-09 11:36:48 +00:00
Xin Li
a78738e763
[automerger skipped] Merge Android 12L am: 22c3ab8b6b
-s ours am: 594011b90b
-s ours am: 0e86159889
-s ours am: 6bc47cde6f
-s ours
...
am skip reason: Merged-In I7b9186af0cb135241e23504fa9d6f7c3d6718c7c with SHA-1 22f2ffcbee
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2012332
Change-Id: I11d278c39c1961aeb00f2f6d67c60bcf6a627e6b
2022-03-09 11:36:34 +00:00
Xin Li
6bc47cde6f
[automerger skipped] Merge Android 12L am: 22c3ab8b6b
-s ours am: 594011b90b
-s ours am: 0e86159889
-s ours
...
am skip reason: Merged-In I7b9186af0cb135241e23504fa9d6f7c3d6718c7c with SHA-1 22f2ffcbee
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2012332
Change-Id: I53a128252845f7a2403302749aae2e6e43bce8bd
2022-03-09 10:02:38 +00:00
sukiliu
037f9cda4e
Update avc error on ROM 8276520
...
Bug: 223502652
Bug: 223330933
Test: PtsSELinuxTestCases
Change-Id: Ib8c14c4928410ee5ed4626e95e2882b89341ee9a
2022-03-09 14:16:33 +08:00
Darren Hsu
28feed2df5
sepolicy: fix VTS failure for SuspendSepolicyTests am: c3d3c574f4
am: f0805e42df
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17118111
Change-Id: I6ddf4ad2f2016def7258fcc12265243f3658d978
2022-03-09 04:15:34 +00:00
Darren Hsu
f0805e42df
sepolicy: fix VTS failure for SuspendSepolicyTests am: c3d3c574f4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17118111
Change-Id: I405782f527555e9a965f858048dc44517fb14007
2022-03-09 03:52:38 +00:00
Darren Hsu
a26d7c6c2f
sepolicy: fix VTS failure for SuspendSepolicyTests am: c3d3c574f4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17118111
Change-Id: I318f81f0feec7e3894460156c93df63fdcb94f2b
2022-03-09 03:52:14 +00:00
Michael Eastwood
f648f3c989
Update SELinux policy to allow camera HAL to send Perfetto trace packets
...
Example denials:
03-04 04:25:37.524 823 823 I TracingMuxer: type=1400 audit(0.0:31): avc: denied { use } for path=2F6D656D66643A706572666574746F5F73686D656D202864656C6574656429 dev="tmpfs" ino=20229 scontext=u:r:hal_camera_default:s0 tcontext=u:r:tr
aced:s0 tclass=fd permissive=1
03-04 04:25:37.524 823 823 I TracingMuxer: type=1400 audit(0.0:32): avc: denied { read write } for path=2F6D656D66643A706572666574746F5F73686D656D202864656C6574656429 dev="tmpfs" ino=20229 scontext=u:r:hal_camera_default:s0 tcontext
=u:object_r:traced_tmpfs:s0 tclass=file permissive=1
03-04 04:25:37.524 823 823 I TracingMuxer: type=1400 audit(0.0:33): avc: denied { getattr } for path=2F6D656D66643A706572666574746F5F73686D656D202864656C6574656429 dev="tmpfs" ino=20229 scontext=u:r:hal_camera_default:s0 tcontext=u:
object_r:traced_tmpfs:s0 tclass=file permissive=1
03-04 04:25:37.524 823 823 I TracingMuxer: type=1400 audit(0.0:34): avc: denied { map } for path=2F6D656D66643A706572666574746F5F73686D656D202864656C6574656429 dev="tmpfs" ino=20229 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:traced_tmpfs:s0 tclass=file permissive=1
Bug: 222684359
Test: Build and push new SELinux policy. Verify that trace packets are received by Perfetto.
Change-Id: I0180c6bccf8cb65f444b8fb687ab48422c211bac
2022-03-08 13:54:34 -08:00
Darren Hsu
c3d3c574f4
sepolicy: fix VTS failure for SuspendSepolicyTests
...
Label the common parent wakeup path instead of each
individual wakeup source to avoid bloating the genfs
contexts.
Bug: 221174227
Test: run vts -m SuspendSepolicyTests
Change-Id: I83a074840198aba323805fd455ee78a0e57174ac
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-03-08 20:57:42 +08:00
Xin Li
0e86159889
[automerger skipped] Merge Android 12L am: 22c3ab8b6b
-s ours am: 594011b90b
-s ours
...
am skip reason: Merged-In I7b9186af0cb135241e23504fa9d6f7c3d6718c7c with SHA-1 22f2ffcbee
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2012332
Change-Id: If0e4880aa30ddfcc89e252de3f041da19401d4bc
2022-03-08 11:04:07 +00:00
Xin Li
594011b90b
[automerger skipped] Merge Android 12L am: 22c3ab8b6b
-s ours
...
am skip reason: Merged-In I7b9186af0cb135241e23504fa9d6f7c3d6718c7c with SHA-1 22f2ffcbee
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2012332
Change-Id: Ic29497624866c936ddf7a7f34f9539de55d73eb9
2022-03-08 10:19:17 +00:00
Xin Li
22c3ab8b6b
Merge Android 12L
...
Bug: 222710654
Merged-In: I7b9186af0cb135241e23504fa9d6f7c3d6718c7c
Change-Id: I60cda8853fd8575beb8617025479d08ccf816fbb
2022-03-08 00:15:28 +00:00
Tri Vo
da64016221
Merge "Don't audit storageproxyd unlabeled access" am: fbf92e2ada
am: 22f2ffcbee
am: a5ccc7efa8
am: 56b17a34c8
am: ece657656a
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2007441
Change-Id: I4faaa95f8a3c8531470ed81f11c8b39ca558b23f
2022-03-04 19:59:13 +00:00
Tri Vo
adfd900367
Merge "Don't audit storageproxyd unlabeled access" am: fbf92e2ada
am: 22f2ffcbee
am: a5ccc7efa8
am: 56b17a34c8
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2007441
Change-Id: Ifbf1caca3b35aa80897b7555000ed8a5b82a1a2e
2022-03-04 19:26:55 +00:00
Tri Vo
ece657656a
Merge "Don't audit storageproxyd unlabeled access" am: fbf92e2ada
am: 22f2ffcbee
am: a5ccc7efa8
am: 56b17a34c8
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2007441
Change-Id: I5829427d16236a1652301713f5a1bb4dc76d1420
2022-03-04 19:26:20 +00:00
Tri Vo
56b17a34c8
Merge "Don't audit storageproxyd unlabeled access" am: fbf92e2ada
am: 22f2ffcbee
am: a5ccc7efa8
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2007441
Change-Id: I58998bc0820db2eeb6f2362a604aaff81159594e
2022-03-04 18:50:56 +00:00
Tri Vo
a5ccc7efa8
Merge "Don't audit storageproxyd unlabeled access" am: fbf92e2ada
am: 22f2ffcbee
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2007441
Change-Id: Ie2af054a900f32cbde1352ba9f708e163f76d86c
2022-03-04 18:29:27 +00:00
Tri Vo
22f2ffcbee
Merge "Don't audit storageproxyd unlabeled access" am: fbf92e2ada
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2007441
Change-Id: I7b9186af0cb135241e23504fa9d6f7c3d6718c7c
2022-03-04 18:06:53 +00:00
Tri Vo
fbf92e2ada
Merge "Don't audit storageproxyd unlabeled access"
2022-03-04 17:45:37 +00:00
Midas Chien
7dea42d711
[automerger skipped] [Do Not Merge] Allow composer to read panel_idle_handle_exit sysfs node am: 0e1e0e2830
-s ours am: b637545191
-s ours am: 9285045f0b
-s ours am: 5e5133e7f6
-s ours am: 8b1611fbdc
-s ours
...
am skip reason: subject contains skip directive
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2009176
Change-Id: Id5d23953f719aa78c8a7f1761a9bb249e682d02b
2022-03-04 13:54:27 +00:00
Midas Chien
8b1611fbdc
[automerger skipped] [Do Not Merge] Allow composer to read panel_idle_handle_exit sysfs node am: 0e1e0e2830
-s ours am: b637545191
-s ours am: 9285045f0b
-s ours am: 5e5133e7f6
-s ours
...
am skip reason: subject contains skip directive
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2009176
Change-Id: Ie922a17aa95c184a762bb6004982d11c0a39f888
2022-03-04 13:32:08 +00:00
Midas Chien
8c32b2ae3f
[automerger skipped] [Do Not Merge] Allow composer to read panel_idle_handle_exit sysfs node am: 0e1e0e2830
-s ours am: b637545191
-s ours am: 9285045f0b
-s ours am: 5e5133e7f6
-s ours
...
am skip reason: subject contains skip directive
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2009176
Change-Id: I8a7bcd3f93b1a8d9757302558859642a57e624d6
2022-03-04 13:31:58 +00:00
Midas Chien
5e5133e7f6
[automerger skipped] [Do Not Merge] Allow composer to read panel_idle_handle_exit sysfs node am: 0e1e0e2830
-s ours am: b637545191
-s ours am: 9285045f0b
-s ours
...
am skip reason: subject contains skip directive
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2009176
Change-Id: I29262cf0b26426b83493008aa2e569548e2fa436
2022-03-04 13:10:39 +00:00
Midas Chien
9285045f0b
[automerger skipped] [Do Not Merge] Allow composer to read panel_idle_handle_exit sysfs node am: 0e1e0e2830
-s ours am: b637545191
-s ours
...
am skip reason: subject contains skip directive
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2009176
Change-Id: Iaf03b02cd8feadc0da6b1f7cb4d0d25f47907f39
2022-03-04 12:50:47 +00:00
Midas Chien
b637545191
[automerger skipped] [Do Not Merge] Allow composer to read panel_idle_handle_exit sysfs node am: 0e1e0e2830
-s ours
...
am skip reason: subject contains skip directive
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2009176
Change-Id: I5771c4702d7e76db359bba65f059f913d69d774f
2022-03-04 12:29:41 +00:00
Midas Chien
0e1e0e2830
[Do Not Merge] Allow composer to read panel_idle_handle_exit sysfs node
...
Change panel_idle_exit_handle selinux type to sysfs_display to allow
composer to access it.
Bug: 202182467
Test: ls -Z to check selinux type
Test: composer can access it in enforce mode
Merged-In: I5ca811f9500dc452fe6832dd772376da51f675a8
Change-Id: I5ca811f9500dc452fe6832dd772376da51f675a8
2022-03-04 10:48:08 +00:00
Midas Chien
77aa7d778e
Merge "Allow composer to read panel_idle_handle_exit sysfs node" into tm-dev am: 08c3646fc1
am: 2aef601024
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17005478
Change-Id: Id81b8895f498599251947e6f32dcce2ab15214e3
2022-03-04 07:45:10 +00:00