Commit graph

3833 commits

Author SHA1 Message Date
Adam Shih
69f0507e29 Remove obsolete entries
Bug: 269218638
Bug: 269218638
Bug: 269370106
Bug: 268411073
Bug: 276385941
Bug: 276385941
Bug: 268147283
Bug: 269045042
Bug: 238263438
Bug: 238143262
Bug: 264483156
Bug: 264483673
Bug: 269045042
Bug: 270247432
Test: adb bugreport
Change-Id: I29268e10a370146b5d3405edfdec35645a3adc35
Merged-In: If99cfe07ec85c285d2acdc712d5120c7ee6f06d9
2023-04-12 08:44:44 +08:00
Wilson Sung
9f61b3a044 Update SELinux error am: c41cb55d4f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22530832

Change-Id: I3de424a9d10ead26317a288a82965ceff4ce49be
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-10 05:24:56 +00:00
Wilson Sung
c41cb55d4f Update SELinux error
Test: scanBugreport
Bug: 277528855
Change-Id: Ia59cd4045433f2e82a602672fe533e27e87b0275
2023-04-10 11:02:52 +08:00
Adam Shih
9360e36aeb Merge "use dumpsate from gs-common" into udc-dev am: d186da49ea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22328249

Change-Id: I6a0697a450ea04aa578c4883330c0b6f0a8511fa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-10 01:46:26 +00:00
Adam Shih
d186da49ea Merge "use dumpsate from gs-common" into udc-dev 2023-04-10 01:11:17 +00:00
Wilson Sung
cf49233ca2 Update error on ROM 9891405 am: 816622f352
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22525943

Change-Id: I8cfb59b5e72b508c4d67b5fa8d6b382b60827428
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-07 08:44:03 +00:00
Wilson Sung
816622f352 Update error on ROM 9891405
Bug: 277155042
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ic2129188db52ec85a8afaf92c507a42695e82804
2023-04-07 14:56:21 +08:00
Adam Shih
240c435174 use dumpsate from gs-common
Bug: 273380985
Test: adb bugreport
Change-Id: I9092e2e004e3ad0b3667b948ed4d633cd50d088c
2023-04-07 13:02:21 +08:00
Victor Liu
2af298588a Merge "uwb: add permission for ccc ranging" into udc-dev am: d87df92740
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21965690

Change-Id: Iee589f33b02bf5a052469fde2bd6b29e0f364512
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 21:29:09 +00:00
Victor Liu
d87df92740 Merge "uwb: add permission for ccc ranging" into udc-dev 2023-04-06 20:57:49 +00:00
feiyuchen
97df720a19 Allow camera HAL to access edgetpu_app_service in gs101 am: 391f954d5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22463634

Change-Id: If16892c57abf4d38fac27012783a2e97c50ce07e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-05 23:24:05 +00:00
feiyuchen
391f954d5d Allow camera HAL to access edgetpu_app_service in gs101
We are seeing SELinux error b/276911450. It turns out that I only added the SE policy for 2023 device ag/22248613, but I forgot to add it for gs101 and gs201. So I created this CL.

See more background in ag/22248613.

Test: For gs201, I tested on my Pixel7 and I saw no more error. For gs101, I just did mm.
Bug: 275016466
Bug: 276911450
Change-Id: I3d691128daa2d7115f80c378f7b42de334cd8ed5
2023-04-04 21:32:36 +00:00
Victor Liu
a55bb8682c uwb: add permission for ccc ranging
Bug: 255649425
Change-Id: I05aac586146bf25569b5f6251d2fd62b921631be
2023-03-31 14:04:13 -07:00
Wilson Sung
fa24247c90 Merge "Update SELinux error" into udc-dev am: 083b5fe640
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22371623

Change-Id: Iad86d5505a210d5320cb35bab875bdeacd7af180
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-31 10:50:19 +00:00
Wilson Sung
d00d896387 Update SELinux error am: 28afe7393f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241484

Change-Id: I03fe9842ff4ae8127ff3abd124c80131ff1fb1d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-31 10:48:32 +00:00
Wilson Sung
083b5fe640 Merge "Update SELinux error" into udc-dev 2023-03-31 10:18:47 +00:00
Wilson Sung
accb299d5d Update SELinux error
Test: scanBugreport
Bug: 276385941
Change-Id: I54627db892f95ac7ee6e9b08762b7a72793d4a00
2023-03-31 10:55:58 +08:00
Wilson Sung
28afe7393f Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 275002227
Change-Id: If2133d83efbfa00ee9643a25047f465c60d2d3c4
2023-03-29 06:34:07 +00:00
Adam Shih
2dd38e68a3 Move power dump text section out of hal_dumpstate_default am: 7cc3817f71
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22305190

Change-Id: I88cffb5d7aff00f407ad6264df2155d799515231
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:26:43 +00:00
Adam Shih
7cc3817f71 Move power dump text section out of hal_dumpstate_default
Bug: 273380985
Test: adb bugreport
Change-Id: I77b59ea719055972429b2b8a1349e52e0e1fe395
2023-03-28 15:03:22 +08:00
Adam Shih
6e46c16735 Move camera text dump to dump_gs101 am: 5bfe1bdd6d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241495

Change-Id: I923cb67cbeac5363082581b0542c0761e0916b82
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 02:47:13 +00:00
Adam Shih
5bfe1bdd6d Move camera text dump to dump_gs101
Bug: 273380985
Test: adb bugreport
Change-Id: Iba138e608885a1215515ec8cc5f5e997dfcfcf3f
2023-03-27 10:37:02 +08:00
TreeHugger Robot
27d3d6bdad Merge "Remove tracking_denials/hal_fingerprint_default.te" into udc-dev am: feef477d2f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241485

Change-Id: Id4230b4c7267644533e6c3a2db3d5b163ac75b6d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 01:53:20 +00:00
Adam Shih
eb9b56a10d Move cma dump to itself am: e7ea94d8e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241488

Change-Id: I20ef8777e4da8756fd97180307b40883e60c5916
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 01:52:42 +00:00
TreeHugger Robot
feef477d2f Merge "Remove tracking_denials/hal_fingerprint_default.te" into udc-dev 2023-03-27 01:37:37 +00:00
chenkris
2bd6ae14f3 Remove tracking_denials/hal_fingerprint_default.te
Bug: 187015705
Bug: 183338543
Test: build and test fingerprint on device.
Test: no fingerprint avc denials in logcat.
Change-Id: I1dde2c0d8c8ab2610c2b8147c15ac5c9f813345a
2023-03-24 07:40:05 +00:00
Adam Shih
e7ea94d8e1 Move cma dump to itself
Bug: 273380985
Test: adb bugreport
Change-Id: I40ecb631c7fbbea216f5c56857b92152c997e466
2023-03-24 13:56:31 +08:00
KRIS CHEN
1501f5458b Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: 2f8f23232a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22178646

Change-Id: Ifde56bf07622f05ecc86caece163d72b2f1dde0f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 02:41:26 +00:00
KRIS CHEN
2f8f23232a Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev 2023-03-24 02:06:37 +00:00
Jörg Wagner
cefbf93aaf Update Mali DDK to r40 : Additional SELinux settings am: cb6bad65e7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22170060

Change-Id: I883c67b413abdd2d5a638f62784099de9afe37d2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 15:15:21 +00:00
Kris Chen
d678ee3226 Allow fingerprint hal to read sysfs_leds
Fix the following avc denials:
avc: denied { search } for name="backlight" dev="sysfs" ino=79316
scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_leds:s0
tclass=dir permissive=1

avc: denied { read } for name="state" dev="sysfs" ino=79365
scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_leds:s0
tclass=file permissive=1

Bug: 271072126
Test: Authenticate fingerprint.
Change-Id: I67f5502bc7b4b1d6e14cf493f1bc6575980bcd0d
2023-03-21 12:19:07 +00:00
Jörg Wagner
cb6bad65e7 Update Mali DDK to r40 : Additional SELinux settings
Expose DDK's dynamic configuration options through the Android Sysprop
interface, following recommendations from Arm's Android Integration
Manual.

Bug: 261718474

(cherry picked from commit 74d31a1568)
Merged-In: I5c69a8bafe3a4c738c124facb1f437ec721cc3ea
Change-Id: I7e6734cb79b38898eb65a0194b37381a1367fc36
2023-03-21 10:31:51 +00:00
Adam Shih
1b0cecc49f use devfreq dump from gs-common am: 4d9aa0b28f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22175766

Change-Id: Ib07707b9eadf2caa57daadce6a9ee548001329d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 08:29:53 +00:00
Adam Shih
4d9aa0b28f use devfreq dump from gs-common
Bug: 273380985
Test: adb bugreport
Change-Id: I0ea6767fd7640c2ee1be66f659f94c15cb4766cd
2023-03-21 12:41:23 +08:00
Enzo Liao
1eb912223d SSRestarDetector: modify the SELinux policy to allow access files owned by system for Whitechapel. am: 893d8ddff7 am: 2bc1af0adf am: 2110a1db8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21937144

Change-Id: Icaa70fa36b8e959c91954b5641e6e7fe0aec3e2b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 05:53:07 +00:00
Enzo Liao
2110a1db8c SSRestarDetector: modify the SELinux policy to allow access files owned by system for Whitechapel. am: 893d8ddff7 am: 2bc1af0adf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21937144

Change-Id: Ic08044ef00fef5fab0a52fe8375f3a7aa1a51924
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 05:14:54 +00:00
Enzo Liao
2bc1af0adf SSRestarDetector: modify the SELinux policy to allow access files owned by system for Whitechapel. am: 893d8ddff7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21937144

Change-Id: Ibd95511a2d3a6e1cdebac8a20238c2ecfa876e27
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 04:38:41 +00:00
Enzo Liao
893d8ddff7 SSRestarDetector: modify the SELinux policy to allow access files owned by system for Whitechapel.
It needs to access a file pushed by hosts of test suites (details: http://go/pd-client-for-lab#heading=h.wtp07hbqvwgx)

Bug: 234359369
Design: http://go/pd-client-for-lab
Test: manual (http://b/271555983#comment3)
Change-Id: I1c9544ca2ebe1857c439f00c4589f739aca8e157
2023-03-15 03:52:17 +00:00
Xin Li
10b03660f2 [automerger skipped] Merge Android 13 QPR2 am: f703b89586 -s ours am: af9a0596e4 -s ours am: f782184f62 -s ours am: 0ff740c68d -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 85bd1b8441 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2486782

Change-Id: Ie9a9afc06082ffd1f145d91547fabbcb8df98b83
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 01:10:51 +00:00
Xin Li
0ff740c68d [automerger skipped] Merge Android 13 QPR2 am: f703b89586 -s ours am: af9a0596e4 -s ours am: f782184f62 -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 85bd1b8441 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2486782

Change-Id: Ie37f36262dee71729e90a28da38d1ebf8439713e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 00:06:22 +00:00
Xin Li
f782184f62 [automerger skipped] Merge Android 13 QPR2 am: f703b89586 -s ours am: af9a0596e4 -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 85bd1b8441 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2486782

Change-Id: I3eb89a6c5cdb182b2e340d61458fcbe804d156d0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 23:06:15 +00:00
Xin Li
af9a0596e4 [automerger skipped] Merge Android 13 QPR2 am: f703b89586 -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 85bd1b8441 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2486782

Change-Id: I8e0f4144027a594f78e29bde8407d130509ac6e5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 22:32:23 +00:00
Xin Li
f703b89586 Merge Android 13 QPR2
Bug: 273316506
Merged-In: I09b67ca07d7f9573d77f64686fb818d4dc1753cc
Change-Id: I4dfcfac354c52a6bf2828558dd44e1acca0b550a
2023-03-13 23:09:33 -07:00
Jasmine Cha
5b90d7c3a3 Merge "audio: move sepolicy about audio to gs-common" into udc-dev am: 3b3aa9e921
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21913160

Change-Id: Ifdcd71f609cdcce59e5139e01f50ae77949d7f52
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 02:19:45 +00:00
Jasmine Cha
3b3aa9e921 Merge "audio: move sepolicy about audio to gs-common" into udc-dev 2023-03-10 02:06:05 +00:00
Adam Shih
80de558c18 Move display dump to gs-common am: 7d3f25d95b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21806784

Change-Id: Ie1a549f1f550e8263f2b3c01433097e0e06c3192
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 05:29:16 +00:00
Jasmine Cha
b263562360 audio: move sepolicy about audio to gs-common
Bug: 259161622
Test: build pass and check with audio ext hidl/aidl

Change-Id: Ie1499be82e405c2ddf4cd1a62ee7ff2823befd8e
Signed-off-by: Jasmine Cha <chajasmine@google.com>
2023-03-09 10:10:18 +08:00
Adam Shih
7d3f25d95b Move display dump to gs-common
Bug: 269212897
Test: adb bugreport
Change-Id: Id40661687bbd04d7eba4790dc5fe17ca5c79e47d
2023-03-07 13:01:05 +08:00
leochuang
4fe64170d3 Update SELinux error
Test: scanBugreport
Bug: 270247432
Change-Id: Ia5e76ee1c027ac2b1cbbbc6a20a20f3ea609a1b7
2023-02-22 10:30:02 +08:00
Ken Tsou
cd826e0365 [automerger skipped] [DO NOT MERGE] hal_health_default: access persist.vendor.shutdown.* am: 3194ab09f9 am: c02d353334 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21457164

Change-Id: I313ea2cb154644b1a61f40e08e0cd6f41868b5ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 15:53:31 +00:00