Commit graph

4670 commits

Author SHA1 Message Date
Android Build Coastguard Worker
4f22836dba Snap for 13025264 from bc8263d2ff to mainline-tzdata6-release
Change-Id: I24969d1f96f5749b1c73d0630e8b7156d5cce328
2025-02-06 14:21:01 -08:00
Roy Luo
bc8263d2ff Merge "Add udc sysfs to udc_sysfs fs context" into main 2025-02-06 10:27:37 -08:00
Roy Luo
5a75cda76d Add udc sysfs to udc_sysfs fs context
Meeded for system server to monitor usb gadget state.
Grant hal_usb_impl read access as it's needed by UsbDataSessionMonitor.
Starting at board level api 202504 due to its dependency on aosp/3337514

10956 10956 W android.hardwar: type=1400 audit(0.0:327): avc:  denied  { read } for  name="state" dev="sysfs" ino=84394 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:sysfs_udc:s0 tclass=file permissive=0

Bug: 339241080
Test: tested on Oriole
Flag: android.hardware.usb.flags.enable_udc_sysfs_usb_state_update
Change-Id: Iac9384cc81090d71e0cda8a6ba83476af865fe33
2025-02-05 11:32:57 -08:00
Nina Chen
2f510558b1 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 394433509
FLag: EXEMPT bugfix
Change-Id: If192082b7d675bb41d91bf4eaf727d43b8df54a7
2025-02-04 18:56:53 -08:00
yixuanwang
503ffc6d56 Remove chre vendor_data_file from tracking denials bug map
Flag: EXEMPT remove bug map only
Bug: 301948771
Test: presubmit
Change-Id: I1a41fc646cb337c28d100af31138e5cdf7726cf7
2025-01-28 23:15:27 +00:00
Enzo Liao
249369ecab RamdumpService: Fix the SELinux errors from introducing Firebase Analytics.
Fix it by ag/31334770 and remove the tracking bug number.

Bug: 386149238
Flag: EXEMPT bugfix
Change-Id: Icbf1745ced50ce2a2fa8ae48598c126580aa82eb
2025-01-21 14:13:18 +08:00
Yi-Yo Chiang
e1c9a3383e init-display-sh: Don't audit writing to kmsg am: 829c6fb863 am: 70df5492b9
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/3444579

Change-Id: I0f84fe4430931119f095c0ff6e3133855a5b2575
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-01-20 21:43:41 -08:00
Yi-Yo Chiang
70df5492b9 init-display-sh: Don't audit writing to kmsg am: 829c6fb863
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/3444579

Change-Id: I6b7f5d20252648e8e35b85d803ae834bc5a39f74
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-01-20 21:19:12 -08:00
Yi-Yo Chiang
829c6fb863 init-display-sh: Don't audit writing to kmsg
modprobe would log errors to /dev/kmsg, need to explicit allow this.

```
avc:  denied  { write } for  comm="modprobe" name="kmsg" dev="tmpfs" ino=5 scontext=u:r:init-display-sh:s0 tcontext=u:object_r:kmsg_device:s0 tclass=chr_file permissive=0
```

Bug: 388717752
Test: DeviceBootTest#SELinuxUncheckedDenialBootTest
Change-Id: I62a43416291d4d79164765004f156f2bdb69b0b5
2025-01-20 01:38:19 -08:00
Treehugger Robot
ccf51fc02b Merge "Remove sced sepolicy rule" into main 2025-01-14 23:40:47 -08:00
Xiaofan Jiang
e521ebbc45 gs101: update selinux to allow UMI on user build
Bug: 375335464

[   68.189198] type=1400 audit(1722986580.568:59): avc:  denied  { unlink } for  comm="binder:892_2" name="modem_svc_socket" dev="dm-52" ino=20239 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=sock_file permissive=1
[   68.189448] type=1400 audit(1722986580.568:60): avc:  denied  { create } for  comm="binder:892_2" name="modem_svc_socket" scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=sock_file permissive=1
[   68.189448] type=1400 audit(1722986580.568:60): avc:  denied  { write } for  comm="binder:892_2" name="modem_svc_socket" scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=sock_file permissive=1


Flag: EXEMPT Critical modem system service
Change-Id: Iedda88ebf6d03ea8218ae7843a226be8021491c0
2025-01-09 19:13:05 -08:00
Terry Huang
e1977e8287 Remove sced sepolicy rule
Bug: 381778782
Test: gts pass
Flag: EXEMPT bugfix

Change-Id: I2c75c28ddf2ded0c8902acc2b2ded845da5e4464
2025-01-09 09:04:10 +08:00
Android Build Coastguard Worker
fe2d679530 Snap for 12872597 from 276946c265 to mainline-tzdata6-release
Change-Id: I6266ea52576e17f950c0a6ec73284932ee19d336
2025-01-06 04:35:07 -08:00
chenkris
276946c265 whi: Add selinux permission for fth
Fix the following avc denials:
avc:  denied  { open } for  path="/dev/fth_fd" dev="tmpfs" ino=1575 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1
avc:  denied  { read } for  name="wakeup96" dev="sysfs" ino=101698 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0

Bug: 383048849
Test: ls -lZ /sys/devices/platform/odm//odm:fps_touch_handler/wakeup
Test: authenticate fingerprint
Flag: EXEMPT NDK
Change-Id: I97305f6ac077e114624674e18b5d0718771a5e3a
2025-01-03 04:29:02 +00:00
YiKai Peng
5f1c4ee7f7 Merge "sepolicy: gs101: add genfscon wireless into sysfs_batteryinfo" into main 2024-12-30 19:34:28 -08:00
YiKai Peng
b807c761ff sepolicy: gs101: add genfscon wireless into sysfs_batteryinfo
Bug: 377264254
Flag: EXEMPT bugfix
Test: ABTD
Change-Id: Iaaa20ac86422fe4052c9f4c263a23b06a9a5bcf3
Signed-off-by: YiKai Peng <kenpeng@google.com>
2024-12-30 05:06:09 -08:00
Wilson Sung
5dbf8b9836 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 386149238
Flag: EXEMPT update sepolicy
Change-Id: I903a71b445af846a3fc290c572c9a7faba1a0e47
2024-12-26 00:33:09 -08:00
Nina Chen
efcb01f9a3 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 385977809
Flag: EXEMPT bugfix
Change-Id: I0882cc3e0cbb2fa3761811f1492158e1ca62eb9d
2024-12-24 19:20:19 -08:00
Timmy Li
5be4b5d997 Merge "Revert "Remove hal_camera_default aconfig_storage_metadata_file ..."" into main 2024-12-16 18:34:16 -08:00
Timmy Li
99e1afe75d Revert "Remove hal_camera_default aconfig_storage_metadata_file ..."
Revert submission 30930671-hal_camera_default_ aconfig_storage_metadata_file2

Reason for revert: b/384580942

Reverted changes: /q/submissionid:30930671-hal_camera_default_+aconfig_storage_metadata_file2

Change-Id: Ic505a8cdb84c48dd622e51ba0193ae1a4141784c
2024-12-16 16:34:52 -08:00
Timmy Li
934be8f5b2 Merge "Remove hal_camera_default aconfig_storage_metadata_file from bugmap" into main 2024-12-16 10:14:02 -08:00
timmyli
5c7033096b Remove hal_camera_default aconfig_storage_metadata_file from bugmap
Bug: 383013727
Test: compiles
Flag: EXEMPT refactor
Change-Id: I67c8f502e590297a1720ffb64d2c402a23ad7806
2024-12-16 06:50:39 +00:00
Xin Li
7112c15bfc [automerger skipped] Merge 24Q4 into AOSP main am: 4969643398 -s ours am: c9dd8dcf36 -s ours
am skip reason: Merged-In I195f779cc6588c37ccdbe4bb8b29ee8f2edd861a with SHA-1 bc766489dc is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/29888759

Change-Id: I70acd758bbffaba7d6496724a4aa5a154717bb91
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-13 20:47:20 -08:00
Xin Li
c9dd8dcf36 [automerger skipped] Merge 24Q4 into AOSP main am: 4969643398 -s ours
am skip reason: Merged-In I195f779cc6588c37ccdbe4bb8b29ee8f2edd861a with SHA-1 bc766489dc is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/3413479

Change-Id: I1a273dbcaf6e738d04009152926d8d296ec549d6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-13 19:55:50 -08:00
Xin Li
4969643398 Merge 24Q4 into AOSP main
Bug: 370570306
Merged-In: I195f779cc6588c37ccdbe4bb8b29ee8f2edd861a
Change-Id: I589a40cba254050bc510e87cecc6eec908d2c862
2024-12-13 11:15:09 -08:00
Nina Chen
a920c3e875 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Flag: EXEMPT sepolicy
Bug: 383949055
Change-Id: Ibb64328a31a16fb930f459a6c4f299b40ce2af92
2024-12-12 22:40:51 -08:00
Eileen Lai
a5c47896c3 Merge "modem_svc: move shared_modem_platform related sepolicy to gs-common" into main 2024-12-09 15:09:36 +00:00
Nina Chen
5f17f078a9 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 383013727
Flag: EXEMPT sepolicy
Change-Id: Ie3297ad375423764a7ac504d60bf87c67c728aae
2024-12-09 03:32:04 +00:00
Eileen Lai
f20c8a9072 modem_svc: move shared_modem_platform related sepolicy to gs-common
Bug: 372400955

Change-Id: I10410974041146ad508ca6748549507183cc1239
Flag: NONE local testing only
2024-12-08 06:51:47 +00:00
Nina Chen
4a732d5e79 Update SELinux error
Remove b/317316478 as it is closed

Flag: EXEMPT sepolicy
Test: SELinuxUncheckedDenialBootTest
Bug: 382362462
Change-Id: I84b9676e21243e68aeae7eed787d43d537c3fdc8
2024-12-05 12:55:36 +08:00
Xin Li
4648b6714e [automerger skipped] Merge ab/AP4A.241205.013 into aosp-main-future am: b55ad960ba -s ours
am skip reason: Merged-In I195f779cc6588c37ccdbe4bb8b29ee8f2edd861a with SHA-1 e746382d78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/30626026

Change-Id: I9dbe8645ca39bd25a8f0765d45592748985b3759
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 18:22:20 +00:00
Xin Li
b55ad960ba Merge ab/AP4A.241205.013 into aosp-main-future
Bug: 370570306
Merged-In: I195f779cc6588c37ccdbe4bb8b29ee8f2edd861a
Change-Id: I4ef5ab22379c7c42e0b3dfbf4862e118b2ce6300
2024-11-27 12:53:10 -08:00
Liana Kazanova (xWF)
9d43b259d2 Revert "modem_svc: move shared_modem_platform related sepolicy t..."
Revert submission 30519089-move_modem_sepolicy

Reason for revert: DroidMonitor: Potential culprit for http://b/380274930 - verifying through ABTD before revert submission. This is part of the standard investigation process, and does not mean your CL will be reverted.

Reverted changes: /q/submissionid:30519089-move_modem_sepolicy

Change-Id: Iadc8ec2e01336d746a7b34c8b05bd51df440c422
2024-11-21 17:54:01 +00:00
Eileen Lai
94e8fa7a6a modem_svc: move shared_modem_platform related sepolicy to gs-common
Bug: 372400955

Change-Id: I52d2a6dacb59dd796d008c4a48cdea218fd11a27
Flag: NONE local testing only
2024-11-21 05:50:44 +00:00
Nina Chen
c8cc2683b5 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 379591559
Bug: 379591519
Flag: EXEMPT NDK
Change-Id: Ia18661bf52755dec67b0551b217124b0485bdd6e
2024-11-18 14:43:52 +08:00
Treehugger Robot
db4385e02d Merge "Update ldaf sensor device filename" into main 2024-11-18 03:36:23 +00:00
Nina Chen
a6019b0cb0 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 379246143
Bug: 379245675
Bug: 379246066
Bug: 379246340

Bug: 379248992
Bug: 379249291
Flag: EXEMPT NDK
Change-Id: Ibc136376c0a0734a2cdac3e543b90f1932e6e4c3
2024-11-15 11:06:33 +00:00
Nina Chen
4e105e14dc Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 379226761
Bug: 379226710
Bug: 379227275
Bug: 379226644
Flag: EXEMPT NDK
Change-Id: I8ef5317b2e63571ea6437014e4ae5cc281a1a5b9
2024-11-15 07:18:25 +00:00
Xin Li
b524a1802a [automerger skipped] Merge 24Q4 (ab/12406339) into aosp-main-future am: 86288119b4 -s ours
am skip reason: Merged-In I8a46aae725a9e912681068df9c219e5a91784305 with SHA-1 9e9fa88ba6 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/30284974

Change-Id: I3d1436c45eac59b6cc98f27b2000d837fc110d8d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-11-14 01:22:19 +00:00
Boon Jun
1df8457f5e Update ldaf sensor device filename
LDAF sensor device filename changed after kernel upgrade
from v5.10 to v6.1 in some of our in-market devices.
We need to update the device filename to access the LDAF
with this new kernel version.

Bug: 378045567
Test: Open camera, and observe available LDAF sensor in logs
Flag: EXEMPT bugfix
Change-Id: I1d366ea6a104fcf2cb1393ad26d3c6c6d39ff910
2024-11-11 07:08:09 +00:00
Xin Li
86288119b4 Merge 24Q4 (ab/12406339) into aosp-main-future
Bug: 370570306
Merged-In: I8a46aae725a9e912681068df9c219e5a91784305
Change-Id: I9639177ef81917e51470e586aa4c3144fbb4f3be
2024-11-06 10:31:19 -08:00
Android Build Coastguard Worker
0ebb2343e8 Snap for 12605939 from 541b51e17b to mainline-tzdata6-release
Change-Id: I6b635a329677d54c17bbdff5b9434d5275127afe
2024-11-05 10:09:29 +00:00
Spade Lee
c025f4915b sepolicy: allow dump_power to read debugfs
11-01 11:59:42.836 11781 11781 W dump_power: type=1400 audit(0.0:46): avc:  denied  { search } for  name="usb" dev="debugfs" ino=2059 scontext=u:r:dump_power:s0 tcontext=u:object_r:vendor_usb_debugfs:s0 tclass=dir permissive=0
11-01 11:59:42.844 11781 11781 W dump_power: type=1400 audit(0.0:47): avc:  denied  { search } for  name="google_battery" dev="debugfs" ino=18509 scontext=u:r:dump_power:s0 tcontext=u:object_r:vendor_battery_debugfs:s0 tclass=dir permissive=0
11-01 11:59:42.844 11781 11781 W dump_power: type=1400 audit(0.0:48): avc:  denied  { read } for  name="maxfg" dev="debugfs" ino=16428 scontext=u:r:dump_power:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
11-01 11:59:42.844 11781 11781 W dump_power: type=1400 audit(0.0:49): avc:  denied  { read } for  name="/" dev="debugfs" ino=1 scontext=u:r:dump_power:s0 tcontext=u:object_r:debugfs:s0 tclass=dir permissive=0
11-01 11:59:42.844 11781 11781 W dump_power: type=1400 audit(0.0:50): avc:  denied  { read } for  name="/" dev="debugfs" ino=1 scontext=u:r:dump_power:s0 tcontext=u:object_r:debugfs:s0 tclass=dir permissive=0
11-01 11:59:42.844 11781 11781 W dump_power: type=1400 audit(0.0:51): avc:  denied  { read } for  name="/" dev="debugfs" ino=1 scontext=u:r:dump_power:s0 tcontext=u:object_r:debugfs:s0 tclass=dir permissive=0

Bug: 376080915
Test: adb bugreport without audit
Flag: EXEMPT bugfix
Change-Id: I7ae11300cd45f7e8c05c0dcf46d5dfda5c777400
Signed-off-by: Spade Lee <spadelee@google.com>
2024-11-01 18:05:40 +00:00
Thiébaud Weksteen
541b51e17b Merge "Remove duplicate service entries" into main 2024-10-18 00:56:10 +00:00
Treehugger Robot
172a703bbf Merge "Remove cgroup_desc_file bugs." into main 2024-10-16 11:02:04 +00:00
Android Build Coastguard Worker
a255f26ca3 Merge cherrypicks of ['googleplex-android-review.googlesource.com/29699292'] into 24Q4-release.
Change-Id: If0bed40e379de3c888b5bf9c6c0e84547c25491f
2024-10-15 23:38:17 +00:00
samou
bc766489dc sepolicy: allow dumpstate to execute dump_power
10-04 19:36:47.308  7141  7141 I android.hardwar: type=1400 audit(0.0:6974): avc:  denied  { execute_no_trans } for  path="/vendor/bin/dump/dump_power" dev="overlay" ino=91 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6975): avc:  denied  { read } for  name="acpm_stats" dev="sysfs" ino=29227 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6976): avc:  denied  { open } for  path="/sys/devices/platform/acpm_stats" dev="sysfs" ino=29227 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6977): avc:  denied  { search } for  name="acpm_stats" dev="sysfs" ino=29227 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6978): avc:  denied  { read } for  name="core_stats" dev="sysfs" ino=57472 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6979): avc:  denied  { open } for  path="/sys/devices/platform/acpm_stats/core_stats" dev="sysfs" ino=57472 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6980): avc:  denied  { getattr } for  path="/sys/devices/platform/acpm_stats/core_stats" dev="sysfs" ino=57472 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-04 19:36:47.336  7141  7141 I dump_power: type=1400 audit(0.0:6981): avc:  denied  { read } for  name="time_in_state" dev="sysfs" ino=50604 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_cpu:s0 tclass=file permissive=1
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:25): avc:  denied  { read } for  name="version" dev="sysfs" ino=62887 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:26): avc:  denied  { read } for  name="version" dev="sysfs" ino=62887 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:27): avc:  denied  { read } for  name="status" dev="sysfs" ino=62888 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:28): avc:  denied  { read } for  name="status" dev="sysfs" ino=62888 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:29): avc:  denied  { read } for  name="fw_rev" dev="sysfs" ino=62915 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:30): avc:  denied  { read } for  name="fw_rev" dev="sysfs" ino=62915 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:29): avc:  denied  { search } for  name="battery" dev="sysfs" ino=63428 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:30): avc:  denied  { search } for  name="10d50000.hsi2c" dev="sysfs" ino=21301 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:31): avc:  denied  { search } for  name="power_supply" dev="sysfs" ino=79013 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:32): avc:  denied  { search } for  name="power_supply" dev="sysfs" ino=79013 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:33): avc:  denied  { search } for  name="10d50000.hsi2c" dev="sysfs" ino=21301 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:51:18.168 14936 14936 I dump_power: type=1400 audit(0.0:18792): avc:  denied  { search } for  name="battery" dev="sysfs" ino=63428 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1
10-04 21:51:18.168 14936 14936 I dump_power: type=1400 audit(0.0:18793): avc:  denied  { read } for  name="uevent" dev="sysfs" ino=63429 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
10-04 21:51:18.168 14936 14936 I dump_power: type=1400 audit(0.0:18794): avc:  denied  { open } for  path="/sys/devices/platform/google,battery/power_supply/battery/uevent" dev="sysfs" ino=63429 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
10-04 21:51:18.168 14936 14936 I dump_power: type=1400 audit(0.0:18795): avc:  denied  { getattr } for  path="/sys/devices/platform/google,battery/power_supply/battery/uevent" dev="sysfs" ino=63429 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
10-04 21:51:18.184 14936 14936 I dump_power: type=1400 audit(0.0:18796): avc:  denied  { search } for  name="8-003c" dev="sysfs" ino=55942 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=1
10-04 21:51:18.184 14936 14936 I dump_power: type=1400 audit(0.0:18797): avc:  denied  { read } for  name="maxfg" dev="sysfs" ino=62568 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1
10-04 21:51:18.184 14936 14936 I dump_power: type=1400 audit(0.0:18798): avc:  denied  { read } for  name="logbuffer_tcpm" dev="tmpfs" ino=1285 scontext=u:r:dump_power:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=1
10-04 21:51:18.184 14936 14936 I dump_power: type=1400 audit(0.0:18799): avc:  denied  { open } for  path="/dev/logbuffer_tcpm" dev="tmpfs" ino=1285 scontext=u:r:dump_power:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6191): avc:  denied  { search } for  name="mitigation" dev="dm-50" ino=3758 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=dir permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6192): avc:  denied  { read } for  name="thismeal.txt" dev="dm-50" ino=28765 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6193): avc:  denied  { open } for  path="/data/vendor/mitigation/thismeal.txt" dev="dm-50" ino=28765 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6194): avc:  denied  { getattr } for  path="/data/vendor/mitigation/thismeal.txt" dev="dm-50" ino=28765 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6195): avc:  denied  { search } for  name="mitigation" dev="sysfs" ino=85222 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_bcl:s0 tclass=dir permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6196): avc:  denied  { read } for  name="last_triggered_count" dev="sysfs" ino=85275 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_bcl:s0 tclass=dir permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6197): avc:  denied  { open } for  path="/sys/devices/virtual/pmic/mitigation/last_triggered_count" dev="sysfs" ino=85275 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_bcl:s0 tclass=dir permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6198): avc:  denied  { read } for  name="batoilo_count" dev="sysfs" ino=85287 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_bcl:s0 tclass=file permissive=1
10-04 23:49:14.616  6976  6976 I dump_power: type=1400 audit(0.0:875): avc:  denied  { read } for  name="thismeal.txt" dev="dm-57" ino=15028 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 23:49:14.616  6976  6976 I dump_power: type=1400 audit(0.0:876): avc:  denied  { open } for  path="/data/vendor/mitigation/thismeal.txt" dev="dm-57" ino=15028 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 23:49:14.616  6976  6976 I dump_power: type=1400 audit(0.0:877): avc:  denied  { getattr } for  path="/data/vendor/mitigation/thismeal.txt" dev="dm-57" ino=15028 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-05 00:00:44.540  7085  7085 I dump_power: type=1400 audit(0.0:878): avc:  denied  { read } for  name="acpm_stats" dev="sysfs" ino=25439 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-05 00:00:44.540  7085  7085 I dump_power: type=1400 audit(0.0:879): avc:  denied  { open } for  path="/sys/devices/platform/acpm_stats" dev="sysfs" ino=25439 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-05 00:00:44.540  7085  7085 I dump_power: type=1400 audit(0.0:880): avc:  denied  { search } for  name="acpm_stats" dev="sysfs" ino=25439 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:881): avc:  denied  { read } for  name="core_stats" dev="sysfs" ino=53039 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:882): avc:  denied  { open } for  path="/sys/devices/platform/acpm_stats/core_stats" dev="sysfs" ino=53039 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:883): avc:  denied  { getattr } for  path="/sys/devices/platform/acpm_stats/core_stats" dev="sysfs" ino=53039 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:884): avc:  denied  { read } for  name="time_in_state" dev="sysfs" ino=45585 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_cpu:s0 tclass=file permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:885): avc:  denied  { open } for  path="/sys/devices/platform/cpupm/cpupm/time_in_state" dev="sysfs" ino=45585 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_cpu:s0 tclass=file permissive=1

Flag: EXEMPT refactor
Bug: 364989823
Signed-off-by: samou <samou@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:e746382d7834745023401c638e5367ed2b48a163)
Merged-In: I195f779cc6588c37ccdbe4bb8b29ee8f2edd861a
Change-Id: I195f779cc6588c37ccdbe4bb8b29ee8f2edd861a
2024-10-15 23:37:11 +00:00
Krzysztof Kosiński
c8f947bea6 Remove cgroup_desc_file bugs.
These denials were caused by b/372273614. The culprit CL
has been reverted and the denials do not reproduce on HEAD.

Fix: 372347927
Test: presubmit
Flag: EXEMPT sepolicy bug map update
Change-Id: Ic83101b2b64a96f7e37349f30a902789f05bb26e
2024-10-15 06:26:15 +00:00
Eileen Lai
34b85728f7 Merge "modem_svc: use shared_modem_platform to replace all modem_svc_sit" into main 2024-10-14 07:27:51 +00:00
Eileen Lai
af68091abc modem_svc: use shared_modem_platform to replace all modem_svc_sit
Bug: 368257019

Flag: NONE local testing only
Change-Id: I657afb4a6271865d62f63c67d3096714e525a689
2024-10-09 08:25:55 +00:00