Maciej Żenczykowski
0dba97d5f2
R4/raven: correctly label wpan0 device as networking am: b22c6cd04a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14889941
Change-Id: Idae2b832bff3c3d4ed5f22d49c0d0d4538efbc1a
2021-06-08 05:35:03 +00:00
Maciej Żenczykowski
064f02f407
R4/raven: correctly label wpan0 device as networking am: b22c6cd04a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14889941
Change-Id: I72c70a56bd785377984de6149dd13a9123e3a59c
2021-06-08 05:33:23 +00:00
sukiliu
bb8b462d7a
Update avc error on ROM 7432667
...
Bug: b/190337281
Bug: b/190337282
Bug: b/190336524
Bug: b/190337295
Bug: b/190337296
Bug: b/190337283
Bug: b/190336723
Bug: b/190336841
Bug: b/190337297
Bug: b/190336525
Test: PtsSELinuxTestCases
Change-Id: I2edda1bf554c0239953b8a31152a09045fb1f15a
2021-06-08 12:48:06 +08:00
Adam Shih
a94bbaea55
Remove obsolete context am: c8b02fc4c3
am: 3cca7c4a0d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881658
Change-Id: I20fbc91781cb27fc0dba606be0b2edc2735e3df9
2021-06-08 04:18:23 +00:00
Adam Shih
8395d25ad8
Remove obsolete context am: c8b02fc4c3
am: bd69cf5ab8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881658
Change-Id: I57d0aea0885aaa03165b1b0f2def479898b74640
2021-06-08 04:17:26 +00:00
Adam Shih
bd69cf5ab8
Remove obsolete context am: c8b02fc4c3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881658
Change-Id: I70fa03febaac4737747d3ad97edec659a33e5918
2021-06-08 03:59:19 +00:00
Adam Shih
3cca7c4a0d
Remove obsolete context am: c8b02fc4c3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881658
Change-Id: I4ac714dcf0033fc5fff07e6a3aabc76db1f7dee0
2021-06-08 03:57:29 +00:00
Maciej Żenczykowski
b22c6cd04a
R4/raven: correctly label wpan0 device as networking
...
Test: atest, TreeHugger, manual observation of labeling
Bug: 185962988
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I068b7da17590fc9dc914db80263b72cc7536c095
2021-06-07 20:34:05 -07:00
Adam Shih
02f93b6096
modulize hal_neuralnetwork_armnn
...
Bug: 189895314
Bug: 171160755
Bug: 171670122
Bug: 180858476
Test: make sure all affected devices' armnn module has the right label
Change-Id: I6ca736f156497738167ba5eea5606a0e654611b9
2021-06-08 11:17:22 +08:00
Adam Shih
c8b02fc4c3
Remove obsolete context
...
Bug: 190330778
Test: make selinux_policy with such entry gone
Change-Id: I28844c361a951de35d509ce042e64e090188e755
2021-06-08 11:17:17 +08:00
TreeHugger Robot
9586364cc9
Merge "Remove unnecessary rules for vendor rcs app" into sc-dev am: 17b8f5cd4e
am: 8026fa508e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14848259
Change-Id: I7c6fb3cc48856464c9f4fea11f86d75f1378ba45
2021-06-07 19:50:58 +00:00
TreeHugger Robot
72743e8cae
Merge "Remove unnecessary rules for vendor rcs app" into sc-dev am: 17b8f5cd4e
am: 293917d723
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14848259
Change-Id: I356823d3183ca8031f445438f66a7e92356c7c15
2021-06-07 19:49:53 +00:00
TreeHugger Robot
293917d723
Merge "Remove unnecessary rules for vendor rcs app" into sc-dev am: 17b8f5cd4e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14848259
Change-Id: Ic3608b4cd9e2271de3db934f188f5c3a8a540b86
2021-06-07 19:29:29 +00:00
TreeHugger Robot
8026fa508e
Merge "Remove unnecessary rules for vendor rcs app" into sc-dev am: 17b8f5cd4e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14848259
Change-Id: I898b08642de6800f22f19cd1b385d5f61cd492bb
2021-06-07 19:27:49 +00:00
TreeHugger Robot
17b8f5cd4e
Merge "Remove unnecessary rules for vendor rcs app" into sc-dev
2021-06-07 19:01:45 +00:00
Long Ling
68dad3b3ab
Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev am: 5afbe4584f
am: 0fcd3a3b25
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14877618
Change-Id: If3488019c253463a715c9bb0a6107c7ea5cabc9f
2021-06-07 17:26:01 +00:00
Long Ling
46fabd3655
Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev am: 5afbe4584f
am: a2d45360d3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14877618
Change-Id: I542813f1b1fde1a914d608100d43af0c9ba95655
2021-06-07 17:19:14 +00:00
Long Ling
0fcd3a3b25
Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev am: 5afbe4584f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14877618
Change-Id: Icb822dbf08c25a1caf7148c0317ac92e56150f50
2021-06-07 17:07:54 +00:00
Long Ling
a2d45360d3
Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev am: 5afbe4584f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14877618
Change-Id: I201f737fd913061524d1f5a2fc7859920d3b0513
2021-06-07 17:03:36 +00:00
Long Ling
5afbe4584f
Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev
2021-06-07 16:36:32 +00:00
SalmaxChang
b6ecd6f406
cbd: Fix avc error am: 7865bf8577
am: 8c50ba3b67
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14847064
Change-Id: Ifa1fbdae32a36105529d7d3c6b26a3c4f0e0a9ca
2021-06-07 11:48:59 +00:00
SalmaxChang
1429a9a2d7
cbd: Fix avc error am: 7865bf8577
am: 5103918441
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14847064
Change-Id: Ied974f9f2d387ec4e1577a1063710e2f8f54aa86
2021-06-07 11:44:05 +00:00
SalmaxChang
8c50ba3b67
cbd: Fix avc error am: 7865bf8577
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14847064
Change-Id: Ie2c42d0aff8e56e9edcb2d7bcf76a17cc546ac88
2021-06-07 11:30:07 +00:00
SalmaxChang
5103918441
cbd: Fix avc error am: 7865bf8577
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14847064
Change-Id: I02c860658a85721b71e5e5d4f8ee1befe7d4a9cd
2021-06-07 11:28:29 +00:00
Yu(Swim) Chih Ren
d45ada475b
Add sysfs_camera label for powerhint flow to access intcam & tnr clock
...
Test: 1. build selinux and push related files to phone
2. Use ls -Z "file" to check if selinux content of file is
expected
3. P21 camera checklist
Bug: 168654554
Change-Id: Ie757dd3e8adc151c6340e9ca662efbdf0ccb6110
2021-06-07 06:31:09 +00:00
Long Ling
1064df0f26
sepolicy: gs101: display: fix dumpstate of displaycolor
...
displaycolor service runs in HW Composer. This change allow displaycolor
to output to dumpstate via pipe fd.
Bug: 189846843
Test: adb bugreport and check displaycolor dump in dumpstate_board.txt
Change-Id: I109db9374124caf9053a9fd7ba6159f83c372038
2021-06-06 22:20:19 -07:00
SalmaxChang
7865bf8577
cbd: Fix avc error
...
avc: denied { search } for comm="cbd" name="/" dev="sda1" ino=2 scontext=u:r:cbd:s0 tcontext=u:object_r:persist_file:s0 tclass=dir permissive=0
Bug: 180687795
Change-Id: I149163760fa47378d03dc2d8c8a00c590788796c
2021-06-07 01:40:59 +00:00
Rick Yiu
f763985cba
Merge "gs101-sepolicy: Fix avc denials for sysfs_vendor_sched" into sc-dev am: f275064208
am: a6143b9039
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14814591
Change-Id: I9f14b0c89a85d50d218b59d93b90256c43b39a05
2021-06-07 01:20:54 +00:00
Rick Yiu
6a7eacb184
Merge "gs101-sepolicy: Fix avc denials for sysfs_vendor_sched" into sc-dev am: f275064208
am: d5fa128a7d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14814591
Change-Id: I17b8291843c6c5b98fc74382de631a412c45e04d
2021-06-07 01:14:09 +00:00
Rick Yiu
a6143b9039
Merge "gs101-sepolicy: Fix avc denials for sysfs_vendor_sched" into sc-dev am: f275064208
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14814591
Change-Id: Ie6a563b2454d7d542b4d2050734f5a7928c80b11
2021-06-07 01:00:08 +00:00
Rick Yiu
d5fa128a7d
Merge "gs101-sepolicy: Fix avc denials for sysfs_vendor_sched" into sc-dev am: f275064208
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14814591
Change-Id: I87ce390d45ce8fda3a90cebf126922a76f0470e2
2021-06-07 00:58:53 +00:00
Rick Yiu
f275064208
Merge "gs101-sepolicy: Fix avc denials for sysfs_vendor_sched" into sc-dev
2021-06-07 00:38:36 +00:00
TreeHugger Robot
09c1394813
Merge "Add CccDkTimeSyncService" into sc-dev am: 77cbbc1237
am: 3c2d8cd22c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14273480
Change-Id: Id392b06f621ba4fd28770afee965d53f6b46a420
2021-06-04 22:05:20 +00:00
TreeHugger Robot
33e88263c9
Merge "Add CccDkTimeSyncService" into sc-dev am: 77cbbc1237
am: ce3aeb1167
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14273480
Change-Id: Ide671423fb2e80d07ee432efaec806dedac28dae
2021-06-04 22:04:23 +00:00
TreeHugger Robot
ce3aeb1167
Merge "Add CccDkTimeSyncService" into sc-dev am: 77cbbc1237
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14273480
Change-Id: I96d9ae4694d61f85c12cc5a7703987e2126390e4
2021-06-04 21:50:06 +00:00
TreeHugger Robot
3c2d8cd22c
Merge "Add CccDkTimeSyncService" into sc-dev am: 77cbbc1237
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14273480
Change-Id: I77d39d4b2d1b2bf19407e63444c0e4fb26b6742d
2021-06-04 21:45:42 +00:00
TreeHugger Robot
77cbbc1237
Merge "Add CccDkTimeSyncService" into sc-dev
2021-06-04 21:23:24 +00:00
Hui Wang
724ea61092
Remove unnecessary rules for vendor rcs app
...
Bug: 190194610
Test: make, manual
Change-Id: I99f624a70a36ad6cf47806faf0eed693383dac5f
2021-06-04 14:03:31 -07:00
TreeHugger Robot
8399e7d79a
Merge "whitechapel: make vframe-secure a system heap" into sc-dev am: aa7a8405e2
am: c6db38ea50
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14083385
Change-Id: Ie69fe90bb28368ec21e66ab91e0f046a4360ab40
2021-06-04 18:36:10 +00:00
TreeHugger Robot
df281bc423
Merge "whitechapel: make vframe-secure a system heap" into sc-dev am: aa7a8405e2
am: dc56bccef6
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14083385
Change-Id: Ife047e32c6d92289d4e783525827e3524bd6405f
2021-06-04 18:34:36 +00:00
TreeHugger Robot
dc56bccef6
Merge "whitechapel: make vframe-secure a system heap" into sc-dev am: aa7a8405e2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14083385
Change-Id: I1923a0062cb753d9a4ce53d900a83a1eed14e59b
2021-06-04 18:21:04 +00:00
TreeHugger Robot
c6db38ea50
Merge "whitechapel: make vframe-secure a system heap" into sc-dev am: aa7a8405e2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14083385
Change-Id: I57abe05ecdb311160459a3a3c7dc1fcdf58293ef
2021-06-04 18:19:15 +00:00
TreeHugger Robot
aa7a8405e2
Merge "whitechapel: make vframe-secure a system heap" into sc-dev
2021-06-04 18:02:34 +00:00
Sean Callanan
77432c5015
whitechapel: make vframe-secure a system heap
...
The GPU driver uses vframe-secure for secure allocations, so the
corresponding DMA heap file should be visible to all processes so
use the dmabuf_system_secure_heap_device type instead.
In order for this type to be used, we need to ensure that the HAL
Allocator has access to it, so update hal_graphics_allocator_default.te
Finally, since there are no longer any buffer types associated with the
vframe_heap_device type, remove it.
Bug: 182090311
Test: run cts-dev -m CtsDeqpTestCases --module-arg CtsDeqpTestCases:include-filter:dEQP-VK.protected_memory.stack.stacksize_64 and ensure secure allocations succeed
Test: Play DRM-protected video in ExoPlayer and ensure videos render correctly via MFC->DPU.
Change-Id: Id341e52322a438974d4634a4274a7be2ddb4c9fe
2021-06-04 18:01:34 +00:00
TreeHugger Robot
0d618d40de
Merge "storage: update sepolicy for hardwareinfoservice" into sc-dev am: 29a5be5603
am: 86bc19fafb
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696013
Change-Id: I391bc888b2c6e7abbed53c55c2e67370f5e28a89
2021-06-04 11:22:22 +00:00
TreeHugger Robot
a6c61c6f9e
Merge "storage: update sepolicy for hardwareinfoservice" into sc-dev am: 29a5be5603
am: eaa781a17f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696013
Change-Id: Ia8e362c4fb790085da4cbc470b542abcf1e6b58d
2021-06-04 11:21:30 +00:00
TreeHugger Robot
eaa781a17f
Merge "storage: update sepolicy for hardwareinfoservice" into sc-dev am: 29a5be5603
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696013
Change-Id: Iefaf730047553bbeac9788869b91679fc787c78d
2021-06-04 11:04:23 +00:00
TreeHugger Robot
86bc19fafb
Merge "storage: update sepolicy for hardwareinfoservice" into sc-dev am: 29a5be5603
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696013
Change-Id: I11ed5570c71bbb4f1dd80ff0411587aceabc6dc9
2021-06-04 11:02:36 +00:00
TreeHugger Robot
29a5be5603
Merge "storage: update sepolicy for hardwareinfoservice" into sc-dev
2021-06-04 10:45:34 +00:00
TreeHugger Robot
63fceb570c
Merge "[RCS] Add sepolicy for RCS as non-system app" into sc-dev am: be1f56dba1
am: a19e1a15e9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14719163
Change-Id: Ia4d933dee8d7dab96a0aa3679a1c09d59e344bb9
2021-06-04 07:06:20 +00:00