Commit graph

292 commits

Author SHA1 Message Date
Bruno BELANYI
9702cb57f2 Remove 'hal_neuralnetworks_armnn' '/data' access exception
The mali driver has been configured not to look there anymore.

Bug: 205779871
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:347dfbe925e2218189d82d37697540af25401a22)
Merged-In: Ic8bf0d51414461689ee5768821a2a1acda923c41
Change-Id: Ic8bf0d51414461689ee5768821a2a1acda923c41
2023-04-26 17:21:18 +00:00
Bruno BELANYI
b4001ec206 Remove 'hal_neuralnetworks_armnn' sysprop exceptions
Bug: 205202540
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:e4254a16aa516f5960f48732b078aad4ed63df6f)
Merged-In: Ied38dc6b323911aa909f4f42b66ee404fc7062fa
Change-Id: Ied38dc6b323911aa909f4f42b66ee404fc7062fa
2023-04-26 17:20:54 +00:00
Adam Shih
843b0ad6b4 Update error on ROM 9930000
Bug: 277989397
Bug: 277155042
Bug: 277989067
Test: scanBugreport
Change-Id: I38a3f852e2f5f0f6895db15141825909361a267d
Merged-In: I38a3f852e2f5f0f6895db15141825909361a267d
2023-04-24 09:58:14 +08:00
Bruno BELANYI
347dfbe925 Remove 'hal_neuralnetworks_armnn' '/data' access exception
The mali driver has been configured not to look there anymore.

Bug: b/205779871
Test: manual - reboot device and check the absence of AVC denials
Change-Id: Ic8bf0d51414461689ee5768821a2a1acda923c41
2023-04-20 09:15:03 +00:00
Bruno BELANYI
e4254a16aa Remove 'hal_neuralnetworks_armnn' sysprop exceptions
Bug: b/205202540
Test: manual - reboot device and check the absence of AVC denials
Change-Id: Ied38dc6b323911aa909f4f42b66ee404fc7062fa
2023-04-19 11:31:03 +00:00
Treehugger Robot
cb29d1729a Merge "Update error on ROM 9930000" into udc-d1-dev am: f57e39a7a1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22601619

Change-Id: I24c7525779db72feb6e3467fe2b26ed3db099d90
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-13 04:38:53 +00:00
Adam Shih
e10e338032 Update error on ROM 9930000
Bug: 277989397
Bug: 277155042
Bug: 277989067
Test: scanBugreport
Change-Id: I38a3f852e2f5f0f6895db15141825909361a267d
2023-04-13 10:15:11 +08:00
Adam Shih
69f0507e29 Remove obsolete entries
Bug: 269218638
Bug: 269218638
Bug: 269370106
Bug: 268411073
Bug: 276385941
Bug: 276385941
Bug: 268147283
Bug: 269045042
Bug: 238263438
Bug: 238143262
Bug: 264483156
Bug: 264483673
Bug: 269045042
Bug: 270247432
Test: adb bugreport
Change-Id: I29268e10a370146b5d3405edfdec35645a3adc35
Merged-In: If99cfe07ec85c285d2acdc712d5120c7ee6f06d9
2023-04-12 08:44:44 +08:00
Adam Shih
b2c082f631 Remove obsolete entries
Bug: 270080367
Bug: 270080367
Bug: 269218638
Bug: 269964913
Bug: 269218638
Bug: 269370106
Bug: 268411073
Bug: 276385941
Bug: 276385941
Bug: 277528855
Bug: 277528855
Bug: 268147283
Bug: 269045042
Bug: 238263438
Bug: 238143262
Bug: 264483156
Bug: 264483673
Bug: 275002227
Bug: 275002227
Bug: 232714489
Bug: 269045042
Bug: 270247432
Bug: 240632824
Bug: 238263568
Bug: 268146971
Bug: 185723618
Bug: 277155042
Test: adb bugreport
Change-Id: If99cfe07ec85c285d2acdc712d5120c7ee6f06d9
2023-04-11 03:48:08 +00:00
Wilson Sung
38f8d12aa6 Update SELinux error am: c41cb55d4f am: 9f61b3a044
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22530832

Change-Id: Ia1484018dfaae55e4c2054139883fc1518c200d3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-10 06:08:03 +00:00
Wilson Sung
c41cb55d4f Update SELinux error
Test: scanBugreport
Bug: 277528855
Change-Id: Ia59cd4045433f2e82a602672fe533e27e87b0275
2023-04-10 11:02:52 +08:00
Wilson Sung
e050af1279 Update error on ROM 9891405 am: 816622f352 am: cf49233ca2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22525943

Change-Id: I7e8a1c45f21e19655d6fc07a8877b0f12fc8d2f1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-07 09:12:04 +00:00
Wilson Sung
816622f352 Update error on ROM 9891405
Bug: 277155042
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ic2129188db52ec85a8afaf92c507a42695e82804
2023-04-07 14:56:21 +08:00
Wilson Sung
a0e1e4cc3b Merge "Update SELinux error" into udc-dev am: 083b5fe640 am: 5ac120e63d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22371623

Change-Id: I0c86f2b0aed23ff3a1ac35034973e5459f0d825c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-31 11:15:47 +00:00
Wilson Sung
083b5fe640 Merge "Update SELinux error" into udc-dev 2023-03-31 10:18:47 +00:00
Wilson Sung
95aec4308e Merge "Update SELinux error" into master
Test: SELinuxUncheckedDenialBootTest
Bug: 275002227
Change-Id: If2133d83efbfa00ee9643a25047f465c60d2d3c4
2023-03-31 03:48:00 +00:00
Wilson Sung
accb299d5d Update SELinux error
Test: scanBugreport
Bug: 276385941
Change-Id: I54627db892f95ac7ee6e9b08762b7a72793d4a00
2023-03-31 10:55:58 +08:00
Wilson Sung
28afe7393f Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 275002227
Change-Id: If2133d83efbfa00ee9643a25047f465c60d2d3c4
2023-03-29 06:34:07 +00:00
TreeHugger Robot
658cff8660 Merge "Remove tracking_denials/hal_fingerprint_default.te" into udc-dev am: feef477d2f am: 423272104f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241485

Change-Id: I3b7b7c8d0af20c40e71f63933a11bfbff2580f6f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 02:21:49 +00:00
chenkris
2bd6ae14f3 Remove tracking_denials/hal_fingerprint_default.te
Bug: 187015705
Bug: 183338543
Test: build and test fingerprint on device.
Test: no fingerprint avc denials in logcat.
Change-Id: I1dde2c0d8c8ab2610c2b8147c15ac5c9f813345a
2023-03-24 07:40:05 +00:00
Woody Lin
687bb4fae4 Revert "Update SELinux error"
This reverts commit 46285b5dd5.

Reason for revert: fixed by aosp/2422419

Bug: 260366497
Bug: 264600011
Change-Id: I1c5962ab5900d5b2342411b352b502a6545eb0ad
2023-03-14 09:49:34 +08:00
Woody Lin
89581ecfe5 Revert "Update SELinux error"
This reverts commit afe63f78cc.

Reason for revert: fixed by aosp/2422419

Bug: 260366497
Bug: 264600011
Change-Id: I4877527b78f99da935548a1e5b70dab4009ed0bf
2023-03-14 09:47:59 +08:00
leochuang
2925bec4e5 Update SELinux error am: 4fe64170d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21533865

Change-Id: Ic382ac504a384ec963ab0288d8730b35a470b34e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 08:03:52 +00:00
leochuang
4fe64170d3 Update SELinux error
Test: scanBugreport
Bug: 270247432
Change-Id: Ia5e76ee1c027ac2b1cbbbc6a20a20f3ea609a1b7
2023-02-22 10:30:02 +08:00
leochuang
b5b0e0908f Update SELinux error
Test: scanBugreport
Bug: 270080367
Change-Id: Ifed87779021a6faa4cd8d0ea3431436acd1de365
2023-02-21 08:50:06 +08:00
leochuang
ba6c4e189c Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 269964825
Test: scanBugreport
Bug: 269964913
Change-Id: Ie0086b87af77e8b6feb86d796c7fa897038f973b
2023-02-20 01:04:46 +00:00
Lucas Wei
6ef92ee0d1 Merge "votable: Update don't audit file entry" 2023-02-16 06:00:51 +00:00
TreeHugger Robot
afafde41a1 Merge "Update SELinux error" 2023-02-15 03:53:59 +00:00
Treehugger Robot
6c53f05cae Merge "Remove bug_map entry for incident" am: bc70a9f3df am: dfd9324aca am: 05d473ec62
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2436853

Change-Id: Ic2399bc1d08f5b79ac19e083595a0f0e3ba9233e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-15 03:27:43 +00:00
Lucas Wei
5a70bbb335 votable: Update don't audit file entry
Test: No votable avc errors in dmesg
Bug: 247905787
Change-Id: I95ab4dd7750e9b0f26d41fece50dc6d0aa73dd41
Signed-off-by: Lucas Wei <lucaswei@google.com>
2023-02-15 02:49:08 +00:00
leochuang
e5b2d04476 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 269218654
Test: scanBugreport
Bug: 269370106
Bug: 269045042
Change-Id: Ief58a1f19580251476c71602951550388015df01
2023-02-15 10:25:40 +08:00
Treehugger Robot
dfd9324aca Merge "Remove bug_map entry for incident" am: bc70a9f3df
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2436853

Change-Id: I435bdfe151ffbb88e2b3e2f8360acfaf42093ee4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-15 01:36:50 +00:00
Thiébaud Weksteen
10d08a16e1 Remove bug_map entry for incident
Bug: 238570971
Bug: 238571324
Bug: 238571420
Test: presubmit
Change-Id: Ib24d85aaed87e6e5dc0b0281d65407e8c45e017c
2023-02-15 10:19:58 +11:00
leochuang
14c66190df Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 269218654
Test: scanBugreport
Bug: 269218638
Change-Id: If7d4633aa4f4f10cf3b56640ae6661a2a9b20b91
2023-02-14 15:46:17 +08:00
sukiliu
d48a10f9b0 Update SELinux error
Test: scanBugreport
Bug: 269045042
Change-Id: I6291a7d3fd3b75d68548bd2fb7287b8ff754684a
2023-02-13 10:41:23 +08:00
sukiliu
8835275413 Update SELinux error
Test: scanBugreport
Bug: 268411073
Bug: 268147283
Bug: 268146971
Change-Id: I60fdc8e3d44da7632522f57adc01c0e6879be83c
2023-02-10 10:20:35 +08:00
Kyle Zhang
bfbf488408 Merge "Add hal_drm_widevine for Widevine exec sepolicy" 2023-01-11 05:37:46 +00:00
Adam Shih
d246880b0d update error on ROM am: 776148c936 am: 6dcabc08bf
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2376986

Change-Id: I546135adca5de40c7792405ba32d4f4cc8328424
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-06 05:05:08 +00:00
Kyle Zhang
902db3961f Add hal_drm_widevine for Widevine exec sepolicy
Bug: 243699259
Test: atp v2/widevine-eng/drm_compliance
Change-Id: Ifede19e690cb7b7333016df08fb146a0ec8f7409
2023-01-06 03:14:20 +00:00
Adam Shih
776148c936 update error on ROM
Bug: 242203678
Test: pass boot test
Change-Id: Ib50c5aed2787d068e589491373a75de47cbe48ee
Merged-In: Ifa7de8df3b09eabee7df8008dbb381854e18f48f
2023-01-06 02:42:14 +00:00
Adam Shih
afe63f78cc Update SELinux error
Test: scanBugreport
Bug: 264483673
Test: scanAvcDeniedLogRightAfterReboot
Change-Id: I954f764f035fcffa06c1c940bece36f0d7e42711
2023-01-05 13:38:16 +08:00
Adam Shih
46285b5dd5 Update SELinux error
Test: scanBugreport
Bug: 264483156
Change-Id: Ifa7de8df3b09eabee7df8008dbb381854e18f48f
2023-01-05 11:04:58 +08:00
Lucas Wei
8a9fd1b4aa votable: update SEpolicy error am: 5851e17605
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20265110

Change-Id: I3d444fed3a236050d00988b59a4237df3815f2e4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-24 03:28:26 +00:00
Lucas Wei
5851e17605 votable: update SEpolicy error
Bug: 247905787
Signed-off-by: Lucas Wei <lucaswei@google.com>
Change-Id: Ia6dfb7796ab46b0ac339b98465ccd91624b655ed
2022-10-23 23:23:41 +08:00
Thiébaud Weksteen
7d6c449261 Revert "Update SELinux error"
This reverts commit 286d40c81b.

Test: TH
Bug: 241172186
Bug: 241172220
Bug: 241172337
Bug: 241172391
Bug: 241172490
Change-Id: Id3453e85aee3ee8e0255d3e53f37ca4488d7c9f9
2022-08-15 13:47:56 +10:00
Adam Shih
286d40c81b Update SELinux error
Test: checkSensors
Bug: 241172337
Test: scanBugreport
Bug: 241172490
Test: testAtomicWrite
Bug: 241172490
Test: testConfigMaxSectorsKB
Bug: 241172490
Test: testDirectWriteNormalReadInEncryptedDir
Bug: 241172391
Test: testInvalidWrite
Bug: 241172490
Test: testLoopMaxPartDefined
Bug: 241172391
Test: testNormalWriteDirectReadInEncryptedDir
Bug: 241172490
Test: testPinFile
Bug: 241172490
Test: testSmallFileInEncryptedDir
Bug: 241172490
Change-Id: Iee5a8e6fff46b62ec0a448b05db64a788b7d08fb
2022-08-03 01:09:57 +00:00
Adam Shih
479986a020 Update SELinux error
Test: checkSensors
Bug: 240632824
Test: checkLockScreen
Bug: 240632824
Test: scanBugreport
Bug: 240632824
Change-Id: I4fee87636dc65765e4ab3e10e0b7080d7b4d44b2
2022-07-29 10:18:10 +08:00
Kyle Lin
3014f97824 Merge "Remove dontaudit since read early_wakeup completed" 2022-07-28 02:51:37 +00:00
Stephane Lee
faec9385c4 Bug fixed in ag/19153533
Bug: 238143381
Test: N/A
Change-Id: If527ea681abaa221e55533a3dab1371ecac7a3b2
2022-07-22 16:55:24 -07:00
Jimmy Shiu
55d41f1a3e Remove dontaudit since read early_wakeup completed
The display file node, early_wakeup, just for trigger the worker for
display and it doesn't have meaningful read function. But PowerHAL read
all nodes and try to dump their valuesi while triggering bugreport. As
the read operation has been completed, so we can remove the clause.

07-02 00:53:56.888   522   522 W android.hardwar: type=1400 audit(0.0:8): avc: denied { dac_read_search } for capability=2 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0
07-02 00:53:56.888   522   522 W android.hardwar: type=1400 audit(0.0:9): avc: denied { dac_override } for capability=1 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0

Bug: 221384860
Bug: 192617242
Bug: 171760921
Test: adb shell dumpsys android.hardware.power.IPower/default
Change-Id: If0018499cc19f79819ef69794d7672d5a53de74e
2022-07-18 11:08:58 +08:00