Commit graph

4597 commits

Author SHA1 Message Date
Xin Li
52e447a377 [automerger skipped] Merge Android 24Q1 Release (ab/11220357) am: 1911f171f7 -s ours
am skip reason: Merged-In Ib110dee4622befb0e4a04ade1c1805e822ce3b2e with SHA-1 9fa7db53a1 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/25972547

Change-Id: I91a069f383163226912b4dc3b2778a88d142787b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-31 02:02:53 +00:00
Wonsik Kim
811682e50f Add AIDL media.c2 into service_contexts
Bug: 321808716
Test: adb shell dumpsys android.hardware.media.c2.IComponentStore/default
Test: adb shell dumpsys android.hardware.media.c2.IComponentStore/default1
Change-Id: Ifef80e6d12e1b0c9e5d2ce6b33a61b51239683de
2024-01-29 22:43:51 +00:00
Darren Hsu
7ea71a9c1c sepolicy: allow hal_power_stats to read sysfs_display
avc:  denied  { read } for  name="available_disp_stats"
dev="sysfs" ino=76162 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 321848496
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: I869e80af8994408e7eef279b6a5eb59d6d2c406b
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2024-01-29 11:49:47 +08:00
Wilson Sung
3116a34269 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Test: scanBugreport
Bug: 321730881
Bug: 316817111
Test: scanAvcDeniedLogRightAfterReboot
Bug: 316817111
Change-Id: I6f7abbb5402fd991d174a79a81c2d5e6c41c71d8
2024-01-22 17:53:08 +00:00
Treehugger Robot
59e8449b01 Merge "Correct the path of tcpm wakelock" into main 2024-01-18 10:16:20 +00:00
Xin Li
1911f171f7 Merge Android 24Q1 Release (ab/11220357)
Bug: 319669529
Merged-In: Ib110dee4622befb0e4a04ade1c1805e822ce3b2e
Change-Id: Ifb5d71336bd21aa8d8de377bf128758240ce1206
2024-01-17 22:12:35 -08:00
Kyle Tso
29021574e6 Correct the path of tcpm wakelock
Bug: 315190967
Change-Id: I01f8da9e0467f34cd0229bf9c5370d062ca78130
Signed-off-by: Kyle Tso <kyletso@google.com>
2024-01-15 15:56:39 +08:00
Mahesh Kallelil
dc869395ad Merge "Fix SELinux error in dump_modem" into main 2024-01-12 06:36:51 +00:00
Mahesh Kallelil
ea7ccea15c Fix SELinux error in dump_modem
The cpif logbuffer did not have the right context and was
missing as part of the bugreport.

Test: Tested bugreport on device
Bug: 305600375
Change-Id: I2101037d0044e706969f2582e29f923ae029458b
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2024-01-11 09:24:22 -08:00
Ken Yang
6073bb0ff8 selinux: label wakeup for BMS I2C 0x36, 0x69
Bug: 319035561
Change-Id: Ib339ce27cc89a02825be51f1bf49fe727ac9fb67
Signed-off-by: Ken Yang <yangken@google.com>
2024-01-10 06:13:47 +00:00
Wen Chang Liu
4a0a6e1d78 Merge "gs101: move mediacodec_samsung sepolicy to gs-common" into main 2024-01-09 14:49:59 +00:00
wenchangliu
da91eed387 gs101: move mediacodec_samsung sepolicy to gs-common
remove mediacodec_samsung sepolicy in legacy path since we will include it from gs-common.

Bug: 318793681
Test: build pass, camera record, youtube
Change-Id: Idc0e19348d1e113e95305279aebbbaf82c79d730
2024-01-05 10:14:32 +00:00
timtmlin
c4181c461d Remove obsolete entries
Bug: 315720636
Bug: 315720725
Test: make
Change-Id: I485bbd472314199106a6f92f08796762cb440952
2023-12-27 15:44:26 +08:00
Wilson Sung
52fc41b1c2 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 317734923
Test: scanBugreport
Bug: 317734418
Bug: 316817111
Test: scanAvcDeniedLogRightAfterReboot
Bug: 317734489
Bug: 316817111
Change-Id: Ibc5c35c327cbb1fb4433c63a9073503037d9c8cf
2023-12-26 03:44:21 +00:00
Chi Zhang
7a00cea0a7 Merge "Allow GRIL to get power stats." into main 2023-12-22 19:29:06 +00:00
Wilson Sung
64e2ac2aa0 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 317316478
Test: scanBugreport
Bug: 316817111
Test: scanAvcDeniedLogRightAfterReboot
Bug: 316817111
Change-Id: I0eaf3217d077d2465a2f4ac3f1e3b15b9236df4f
2023-12-21 07:37:17 +00:00
Chi Zhang
0212befe1e Allow GRIL to get power stats.
AVC log: SELinux : avc:  denied  { find } for pid=3147 uid=10219 name=android.hardware.power.stats.IPowerStats/default scontext=u:r:grilservice_app:s0:c219,c256,c512,c768 tcontext=u:object_r:hal_power_stats_service:s0 tclass=service_manager permissive=0

Bug: 286187143
Test: build and boot
Change-Id: Iff51df55ad0011815b764b334801dedc6a6d1cbc
2023-12-19 12:20:20 -08:00
Wilson Sung
9fa7db53a1 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 315907959
Test: scanBugreport
Bug: 315104713
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315104713
Change-Id: Ib110dee4622befb0e4a04ade1c1805e822ce3b2e
2023-12-12 06:34:48 +00:00
Xin Li
9b55292c7e [automerger skipped] Merge Android 14 QPR1 am: de4dc819b4 -s ours am: 83dca5bda2 -s ours am: 5bdc2b25ae -s ours
am skip reason: Merged-In Icf6128476f1f669918bc20d3eecd40c89893443f with SHA-1 9278e0c263 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2865760

Change-Id: Id33e5a1b2f4bf66182fff901edc98d0e783a38ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-11 22:57:51 +00:00
Xin Li
5bdc2b25ae [automerger skipped] Merge Android 14 QPR1 am: de4dc819b4 -s ours am: 83dca5bda2 -s ours
am skip reason: Merged-In Icf6128476f1f669918bc20d3eecd40c89893443f with SHA-1 9278e0c263 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2865760

Change-Id: I976a0db1da02934ee283984f69981bba537de3d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-11 22:02:39 +00:00
Xin Li
83dca5bda2 [automerger skipped] Merge Android 14 QPR1 am: de4dc819b4 -s ours
am skip reason: Merged-In Icf6128476f1f669918bc20d3eecd40c89893443f with SHA-1 9278e0c263 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2865760

Change-Id: Iae3de3a1ce50d4a45f2a7170ced3203e0494fc26
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-11 21:16:49 +00:00
Treehugger Robot
46cd746012 Merge "Fix rlsservice sepolicy" into main 2023-12-11 07:31:03 +00:00
Boon Jun Soh
548c2f184d Fix rlsservice sepolicy
Allows bugreport generation

Bug: 315255760
Bug: 309379598
Test: abd bugreport & ensure lack of rls avc denied logs
Change-Id: Ib3fc7b089c7aea4aea69f219d4c19847d39b0729
2023-12-11 14:39:32 +08:00
Wilson Sung
c42d6625f5 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 315720636
Bug: 315104713
Test: scanBugreport
Bug: 315720725
Bug: 315104713
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315720636
Bug: 315104713
Change-Id: I6fdd21dd1d78aee006d3d5dbeb57ae6912f9b42e
2023-12-11 02:54:34 +00:00
Xin Li
de4dc819b4 Merge Android 14 QPR1
Merged-In: Icf6128476f1f669918bc20d3eecd40c89893443f
Bug: 315507370
Change-Id: I1b9c6fbde63c54d034b44dae2c2cc7268393df53
2023-12-08 13:13:24 -08:00
David Drysdale
422638059a Merge "Add Secretkeeper HAL" into main 2023-12-06 10:21:03 +00:00
David Drysdale
03785012ed Add Secretkeeper HAL
Test: VtsAidlAuthGraphSessionTest
Bug: 306364873
Change-Id: I72d9d9afd57d265bd2a019a02d6aa364deb4acb4
2023-12-05 10:38:01 +00:00
Jason Chiu
3f3bfddaff gs101: move common sepolicy related to bootctrl hal to gs-common
Bug: 265063384
Change-Id: I2e7bee9c6be4a6802a759bf52fb412dd73f868bd
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-12-05 01:24:03 +08:00
Treehugger Robot
cc9b389190 Merge "Update SELinux error" into main 2023-12-04 03:04:27 +00:00
Daniel Norman
021d2647eb [automerger skipped] Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: c245d0e88d -s ours am: 9b4fe94bf1 -s ours
am skip reason: Merged-In I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f with SHA-1 60940a7ad7 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Ic3a394f5a74163608a4d845aceb7d871e0217546
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:29:26 +00:00
Daniel Norman
9b4fe94bf1 [automerger skipped] Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: c245d0e88d -s ours
am skip reason: Merged-In I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f with SHA-1 60940a7ad7 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Ic8e813b3a6450aa3b3bd075a967e760a398ec1c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:24:42 +00:00
Daniel Norman
7ca6403290 [automerger skipped] Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: 9278e0c263 am: 8498e6db38 -s ours
am skip reason: Merged-In I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f with SHA-1 e948bb326a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Idddce5b8ce8ac127893dfcf018ac81f2b6bdcbf4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:23:58 +00:00
Daniel Norman
c245d0e88d Removes duplicate hidraw_device type definition. am: 60940a7ad7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: I3c06b0e9bbcf7c10c60eef3b4b4c78d825ba8e8e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:51:10 +00:00
Daniel Norman
8498e6db38 Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: 9278e0c263
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: I02aa44c368e2d7df030bfd68bdd60d700bba2c51
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:48:23 +00:00
Daniel Norman
9278e0c263 Removes duplicate hidraw_device type definition. am: 60940a7ad7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Icf6128476f1f669918bc20d3eecd40c89893443f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:45:33 +00:00
Daniel Norman
60940a7ad7 Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Test: ls -z /dev/hidraw0
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:e948bb326a518bd2f7f92410c4f2d0ae6f6d146a)
Merged-In: I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f
Change-Id: I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f
2023-11-30 23:27:49 +00:00
Wilson Sung
484f609dee Update SELinux error
Test: scanBugreport
Bug: 312894628
Bug: 313804340
Change-Id: I87b384eac0c734444f0d722955b341a4611b7842
2023-11-30 07:14:31 +00:00
Khoa Hong
213b76e9b8 Suppress avc error log on debugfs's usb folder.
The XHCI driver in kernel will write debugging information to DebugFS on
some USB host operations (for example: plugging in a USB headphone). We
are not using those information right now.

Bug: 311088739
Test: No error when plugging a USB headphone in.
Change-Id: If7c511f4466959d819f2672ae8f82a8a8dae83e4
2023-11-30 15:01:37 +08:00
Randall Huang
ec6ba5806d Move sg_device related policy
Bug: 312582937
Test: make selinux_policy
Change-Id: I27a86d47777a6d769b93fc1c40ae27dacf83ab10
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-11-22 14:01:33 +08:00
Bryan Lavrich
a1bff1c2e9 Merge "aoc: add sysfs file entry" into main 2023-11-20 20:22:27 +00:00
Devika Krishnadas
4ed070d0aa Merge "Add Pixel Mapper as a sp-HAL" into main 2023-11-20 18:17:28 +00:00
Devika Krishnadas
1f9e3a93e1 Add Pixel Mapper as a sp-HAL
Bug: 267352318

Change-Id: I77b064c3eae2b47677ee83df8483e6f7aba08e6e
Signed-off-by: Devika Krishnadas <kdevika@google.com>
2023-11-16 01:17:05 +00:00
Daniel Norman
c9fcb3e550 Merge "Removes duplicate hidraw_device type definition." into main 2023-11-14 19:05:05 +00:00
Lei Ju
406bfbcee7 Merge "Set up sepolicy for CHRE HAL process" into main 2023-11-14 17:58:30 +00:00
Daniel Norman
e948bb326a Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Change-Id: I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f
Test: ls -z /dev/hidraw0
2023-11-10 22:53:15 +00:00
Lei Ju
89dd17c9ad Set up sepolicy for CHRE HAL process
Contexthub (CHRE) team is removing the chre daemon and incorporating
its functionalities into the next gen HAL. This CL copied the
permissions we received in whitechapel/vendor/google/chre.te to
hal_contexthub.te to enable the same set of permissions on gs101.

Bug: 247124878
Test: launch the hal process on oriole and verify it can perform
required operations such as loading nanoapps holding wakelocks,
query nanoapps, etc.

Change-Id: I8ce6b4f7f411e50cf454bb5f1286f73d4d46aced
2023-11-10 14:18:05 -08:00
Alex Iacobucci
8966bfa237 aoc: add sysfs file entry
Test: on device
Bug: 309950738
Change-Id: I7e2ceaa61c7870ace37014ad39f3a119f3712569
Signed-off-by: Alex Iacobucci <alexiacobucci@google.com>
2023-11-10 18:28:51 +00:00
Mike Wang
a6c7f726b5 Change the MDS to platform app in selinux ap context.
The MDS will be signed with platform key and become a platform app. To
make the selinux rules for modem_diagnostic_app work, need to set it to
platform app in app context.

Bug: 287683516

Test: Tested with both dev key or platform key signed MDS apps and the selinux rules works.
Change-Id: If890f7caaac33e5ddc6c02cc8084654a10cea416
2023-11-09 07:17:07 +00:00
Treehugger Robot
f237b33c72 Merge "sensors: Move USF related sepolicy to gs-common." into main 2023-11-07 06:49:08 +00:00
Rick Chen
04e4ac1717 sensors: Move USF related sepolicy to gs-common.
Bug: 305120274
Test: Compile pass. Flash the build to WHI devices and no sensor
      related avc denied log.
Change-Id: I56174a24d159968c01d1572e84f4bcdd7930a709
Signed-off-by: Rick Chen <rickctchen@google.com>
2023-11-07 10:50:48 +08:00