Kyle Tso
46b42ac02b
Merge "Add logbuffer_pogo_transfer file_contexts" am: 418d114796
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098016
Change-Id: Ide608651968b6eb137aa55791074d66e3e27f947
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 07:56:40 +00:00
George Chang
8985f2ae28
Update nfc from hidl to aidl service am: d6a8c63837
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098014
Change-Id: If2212cb63fdf409ee7f5fbf78994c58c09caa8ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 07:55:22 +00:00
Kyle Tso
418d114796
Merge "Add logbuffer_pogo_transfer file_contexts"
2022-05-19 02:22:56 +00:00
Kyle Tso
94e2cdeb6e
Add logbuffer_pogo_transfer file_contexts
...
Bug: 232556226
Signed-off-by: Kyle Tso <kyletso@google.com>
Change-Id: I1037d39f4187807e6aa9753339fae29e3bc89359
2022-05-17 16:01:46 +08:00
George Chang
d6a8c63837
Update nfc from hidl to aidl service
...
Bug: 216290344
Test: atest NfcNciInstrumentationTests
Test: atest VtsAidlHalNfcTargetTest
Merged-In: I288474f691670655516728fe0e164a3e5689875c
Change-Id: I288474f691670655516728fe0e164a3e5689875c
2022-05-17 12:16:39 +08:00
Orion Hodson
4fa31df30e
Remove incidentd denial for apex_info_file am: 400d4fb7f4
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098049
Change-Id: I7b0683e254c0edd4f5dc60924f01fd36c0f8722c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-16 16:32:06 +00:00
Orion Hodson
400d4fb7f4
Remove incidentd denial for apex_info_file
...
Underlying issue addressed by https://r.android.com/1849822 which
gives incidentd r_file_perms for apex_info_file:file.
Fix: 187015816
Test: atest incidentd_test; adb logcat | grep denied
Change-Id: I90b57a5f01c97c8488c10692208080557a863051
2022-05-16 14:45:53 +01:00
Ray Chi
9a2c989fb7
Revert "add sepolicy for set_usb_irq.sh" am: bf9ec40ab7
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2086225
Change-Id: Id9ebe6c1a58dbd45fe2dc381cf79f8be2fbb2287
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 06:52:05 +00:00
Ray Chi
98225a40ac
Allow hal_usb_gadget_impl to access proc_irq am: d99789413d
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2086224
Change-Id: Iac35a7fc9508e991f03bd9142a552f3e4e43981c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 06:52:04 +00:00
Ray Chi
bf9ec40ab7
Revert "add sepolicy for set_usb_irq.sh"
...
This reverts commit 714075eba7
.
Bug: 194346886
Test: build pass
Change-Id: Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af
2022-05-04 09:49:17 +08:00
Ray Chi
d99789413d
Allow hal_usb_gadget_impl to access proc_irq
...
Bug: 220996010
Test: build pass
Change-Id: Id9a9adbdc921629b6e89d0850dd8acaf76b1a891
(cherry picked from commit 455c3c165348fa9ea65c65b004d4dda1426d04be)
2022-05-04 09:46:39 +08:00
Albert Wang
84866a80c1
Merge "Expand the xHCI wakeup path for suspend_control" am: 77db706d9b
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2075870
Change-Id: I53ad439a4804bd84c02adce154d182ba2fa79554
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 07:40:48 +00:00
Albert Wang
77db706d9b
Merge "Expand the xHCI wakeup path for suspend_control"
2022-05-03 07:14:40 +00:00
Asad Ali
bc040f306d
Allow chre to communicate with fwk_stats_service. am: c6ea8d1656
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2077138
Change-Id: I54420bcfe55250683a2afd25a85242cdf5056e5c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-02 21:33:11 +00:00
Asad Ali
c6ea8d1656
Allow chre to communicate with fwk_stats_service.
...
Bug: 230788686
Test: Logged atoms using CHRE + log atom extension.
Change-Id: I0683a224d61cdc8c927360ebad3de115ed431e1a
2022-04-28 22:27:57 +00:00
Treehugger Robot
e07bb61a68
Merge "hal_sensors_default: Allow sensors HAL to access AoC properties." am: f939ebb650
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2076498
Change-Id: I5d54cc895fe44f3f64c987644910bb9cced2ab01
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 11:41:37 +00:00
Treehugger Robot
f939ebb650
Merge "hal_sensors_default: Allow sensors HAL to access AoC properties."
2022-04-28 11:08:06 +00:00
Asad Ali
a9528564c0
Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" am: a022023a90
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2077149
Change-Id: I196d9c8349e352c630b11441bf3280d456a75118
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 07:51:24 +00:00
Asad Ali
a022023a90
Merge "Update SELinux to allow CHRE to talk to the Wifi HAL"
2022-04-28 07:05:14 +00:00
Albert Wang
ee1758317e
Expand the xHCI wakeup path for suspend_control
...
Error log:
Error opening kernel wakelock stats for: wakeup132 (../../devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb2/2-1/wakeup/wakeup132): Permission denied
avc: denied { read } for name="wakeup132" dev="sysfs" ino=3607558 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
Bug: 209745132
Test: test build to verify sepolicy log
Signed-off-by: Albert Wang <albertccwang@google.com>
Change-Id: I6c70272a79059f7ca4e3b0e525bbc09625e25135
2022-04-28 06:41:24 +00:00
Treehugger Robot
fd65b31055
Merge "android.hardware.usb.IUsb AIDL migration" am: c49520d66e
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044871
Change-Id: Ib0ea1d39f90456062a1d18ac86ff8c6140cb29eb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-27 17:39:58 +00:00
Treehugger Robot
c49520d66e
Merge "android.hardware.usb.IUsb AIDL migration"
2022-04-27 16:21:29 +00:00
Anthony Stange
8c311f981b
Update SELinux to allow CHRE to talk to the Wifi HAL
...
Bug: 206614765
Test: Run locally
Change-Id: I73bcf96ed1cab0a101e5f84852a1d82258b9c690
Merged-In: I73bcf96ed1cab0a101e5f84852a1d82258b9c690
2022-04-27 06:13:14 +00:00
Edmond Chung
a287bef991
Camera: add setsched capability. am: 99b4aebb6a
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2076040
Change-Id: I2b276fc1165bcd66d9075566d50f0971e1447811
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 20:19:27 +00:00
chiayupei
a53690ac43
hal_sensors_default: Allow sensors HAL to access AoC properties.
...
Bug: 202901227
Test: Verify pass by checking device log.
Signed-off-by: chiayupei <chiayupei@google.com>
Change-Id: I917362ddf4b8e61810d2dd27da2b7775f1aec1e7
2022-04-26 17:50:44 +08:00
Edmond Chung
99b4aebb6a
Camera: add setsched capability.
...
The camera HAL needs to configure schedule policies for
performance optimizations.
Bug: 228632527
Test: adb logcat
Change-Id: Ifbf433c026549ca774a9521704d0b0b75c9e9f23
Merged-In: Ifbf433c026549ca774a9521704d0b0b75c9e9f23
Signed-off-by: Edmond Chung <edmondchung@google.com>
2022-04-25 15:25:01 -07:00
Alistair Delva
f482ea00d9
Merge "Remove sysfs_gpu type definition" am: e48b455651
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630
Change-Id: I144bf39a8eb4c8fda36cfbceb03e7813faf31f3a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 04:43:57 +00:00
Alistair Delva
e48b455651
Merge "Remove sysfs_gpu type definition"
2022-04-21 04:21:45 +00:00
Xin Li
7a573b067c
Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047
...
Bug: 226662282
Merged-In: I7f65597f91db5a16d4f9de4f6bb018bd5b50a965
Change-Id: I9a8579c87c05c1329fd5670f63d1edd848782334
2022-04-18 20:43:19 +00:00
Darren Hsu
4df95c6d08
sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630
Change-Id: I058cb3909d972cc5784e507fcb26b46196c33aa4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 03:39:39 +00:00
Darren Hsu
3c11d8d1c5
sepolicy: label charger wakeups for system suspend
...
Bug: 226887726
Test: do bugreport without avc denials
Change-Id: I779b646846da90cdc710145e959644efc4733b3b
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-04-11 10:56:33 +08:00
Albert Wang
aed8848fb0
Add more xHCI wakeup path for suspend_control am: e60773b926
am: 092298b579
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478
Change-Id: Ieaa74f326039e13ec8409167112c11b16cb47480
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 08:15:54 +00:00
Albert Wang
092298b579
Add more xHCI wakeup path for suspend_control am: e60773b926
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478
Change-Id: Ib07b92bf159c8b69dcdc7bc17e7f19a44aab20f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 08:00:41 +00:00
Xin Li
4295b8c5bb
[automerger skipped] Merge Android 12 QPR3 ab/8391262 am: 815b133c28
-s ours
...
am skip reason: Merged-In I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7 with SHA-1 24b4d1b601
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17543362
Change-Id: I3183293f6ba3e1858233ce35170f935f3b03c1ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-03 07:11:50 +00:00
Xin Li
815b133c28
Merge Android 12 QPR3 ab/8391262
...
Bug: 226662282
Merged-In: I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7
Change-Id: Iccdf8b6a16f1d7a9ae0c9fd8cab14c5c55c6e64a
2022-04-01 20:32:12 +00:00
Albert Wang
e60773b926
Add more xHCI wakeup path for suspend_control
...
To addressdd the xHCI wakeup nodes permission problem, add new nodes:
/devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb2/wakeup
/devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb3/wakeup
avc: denied { read } for name="wakeup175" dev="sysfs" ino=162091
scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
android.system.suspend@1.0-service: Error opening kernel wakelock stats for: wakeup175
(../../devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb2/wakeup/
wakeup175): Permission denied
avc: denied { read } for name="wakeup176" dev="sysfs" ino=162107
scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
android.system.suspend@1.0-service: Error opening kernel wakelock stats for: wakeup176
(../../devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb3/wakeup/
wakeup176): Permission denied
Bug: 226056256
Test: test build to verify sepolicy log
Signed-off-by: Albert Wang <albertccwang@google.com>
Change-Id: I7f65597f91db5a16d4f9de4f6bb018bd5b50a965
2022-04-01 09:43:40 +08:00
Badhri Jagan Sridharan
a4b9ad439b
android.hardware.usb.IUsb AIDL migration
...
android.hardware.usb.IUsb is migrated to AIDL and runs in
its own process. android.hardware.usb.gadget.IUsbGadget
is now published in its own exclusive process
(android.hardware.usb.gadget-service). Creating
file_context and moving the selinux linux rules
for IUsbGadget implementation.
Bug: 200993386
Change-Id: Ia8c24610244856490c8271433710afb57d3da157
Merged-In: Ia8c24610244856490c8271433710afb57d3da157
(cherry picked from commit 51735ba3ab
)
2022-03-28 17:01:45 +08:00
Darren Hsu
24b4d1b601
Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae
am: a0592e36d2
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864
Change-Id: I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-28 08:17:33 +00:00
Darren Hsu
a0592e36d2
Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864
Change-Id: I3b5f155658676081c3248e67ee512c1ce301ab07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-28 07:51:38 +00:00
Darren Hsu
f11f53a3ae
Allow hal_power_stats to read sysfs_aoc_dumpstate
...
avc: denied { read } for comm="android.hardwar" name="restart_count"
dev="sysfs" ino=72823 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs_aoc_dumpstate:s0 tclass=file permissive=0
Bug: 226173008
Test: check bugreport without avc denials
Change-Id: Ife3a7e00a1ffbcbed7fd8b744f2ac8910931a5fb
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-03-25 11:19:20 +08:00
Stephane Lee
620e6038e2
Fix off-mode (charger) sepolicy for the health interface am: 84a06151a3
am: c35357078d
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039624
Change-Id: Ia59f2cdb6b014a802edad3b76f135a69c21002e9
2022-03-24 04:37:58 +00:00
Jack Wu
d43cfef11c
sepolicy: gs101: fix charger_vendor permission denied am: b67138e8ae
am: 28efee70de
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039623
Change-Id: I1802a01e50797f41a63ba0073f5f032a8d49939b
2022-03-24 04:37:57 +00:00
Stephane Lee
c35357078d
Fix off-mode (charger) sepolicy for the health interface am: 84a06151a3
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039624
Change-Id: Ia2c26cc56c09a535aae2d7b4e8e46ff77b79616e
2022-03-24 04:06:54 +00:00
Jack Wu
28efee70de
sepolicy: gs101: fix charger_vendor permission denied am: b67138e8ae
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039623
Change-Id: I70510310fad5fb164c3a420685fbad7c1e1e1e71
2022-03-24 04:06:53 +00:00
Stephane Lee
84a06151a3
Fix off-mode (charger) sepolicy for the health interface
...
Bug: 223537397
Test: Ensure that there are no selinux errors for sysfs_batteryinfo in
off-mode charging
Change-Id: I46fa1b7552eb0655d0545538142131465a337f23
Merged-In: I46fa1b7552eb0655d0545538142131465a337f23
2022-03-23 11:30:31 -07:00
Jack Wu
b67138e8ae
sepolicy: gs101: fix charger_vendor permission denied
...
[ 27.025458][ T443] type=1400 audit(1644391560.640:11): avc: denied { search } for comm="android.hardwar" name="vendor" dev="tmpfs" ino=2 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=0
[ 26.563658][ T447] type=1400 audit(1644397622.588:5): avc: denied { search } for comm="android.hardwar" name="/" dev="sda1" ino=2 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_file:s0 tclass=dir permissive=0
[ 27.198144][ T442] type=1400 audit(1644398156.152:5): avc: denied { search } for comm="android.hardwar" name="battery" dev="sda1" ino=12 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=dir permissive=0
[ 27.327035][ T443] type=1400 audit(1644398785.276:5): avc: denied { read } for comm="android.hardwar" name="defender_active_time" dev="sda1" ino=17 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=file permissive=0
[ 27.355009][ T443] type=1400 audit(1644398785.276:6): avc: denied { write } for comm="android.hardwar" name="defender_charger_time" dev="sda1" ino=16 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=file permissive=0
[ 26.771705][ T444] type=1400 audit(1644379988.804:4): avc: denied { read } for comm="android.hardwar" name="specification_version" dev="sysfs" ino=56257 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0
[ 27.898684][ T445] type=1400 audit(1644392754.928:8): avc: denied { read } for comm="android.hardwar" name="thermal_zone6" dev="sysfs" ino=15901 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=lnk_file permissive=0
[ 29.180076][ T447] type=1400 audit(1644397625.200:9): avc: denied { write } for comm="android.hardwar" name="mode" dev="sysfs" ino=15915 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=0
[ 27.043845][ T444] type=1400 audit(1644379988.808:9): avc: denied { search } for comm="android.hardwar" name="thermal" dev="tmpfs" ino=899 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:thermal_link_device:s0 tclass=dir permissive=0
[ 27.064916][ T444] type=1400 audit(1644379988.808:10): avc: denied { read } for comm="android.hardwar" name="u:object_r:vendor_battery_defender_prop:s0" dev="tmpfs" ino=306 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=file permissive=0
[ 27.356266][ T444] type=1107 audit(1644404450.376:4): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.battery.defender.state pid=457 uid=1000 gid=1000 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=property_service permissive=0'
Bug: 218485039
Test: manually test, no avc: denied
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I091dbbca35fb833e59fdbc234d74b90bfe74014c
Merged-In: I091dbbca35fb833e59fdbc234d74b90bfe74014c
2022-03-23 11:27:45 -07:00
Armelle Laine
92707e72ab
Merge changes from topic "trusty-dsu_fix-sc-qpr3" into sc-v2-dev-plus-aosp
...
* changes:
[automerged blank] Allow TEE storageproxyd permissions needed for DSU handling 2p: b9beafc9fa
Allow TEE storageproxyd permissions needed for DSU handling
2022-03-18 04:14:36 +00:00
Darren Hsu
186f2306d7
sepolicy: reorder genfs labels for system suspend am: 2018f942a7
am: 83e88065fc
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2026063
Change-Id: I732b1d982c15846e2b9ae1365894b4d0ea0f424f
2022-03-17 03:55:26 +00:00
Darren Hsu
83e88065fc
sepolicy: reorder genfs labels for system suspend am: 2018f942a7
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2026063
Change-Id: Ic1a74c930cc6ade12dc6ea7a42f9ed347a491c95
2022-03-17 02:49:16 +00:00
Darren Hsu
2018f942a7
sepolicy: reorder genfs labels for system suspend
...
Bug: 223683748
Test: check bugreport without relevant avc denials
Change-Id: I66ede69d94bb3cb1a446e1cd5f3250b6f9b7f7e9
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-03-15 11:48:39 +08:00