Maciej Żenczykowski
0c2228d79e
allow hal_usb_impl configfs:dir { create rmdir }; am: 729e8901ab
am: f0b64bb73f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542109
Change-Id: I0d5bd327f4e91a743c7d6c43dfe76c1e7e197967
2021-06-04 07:06:10 +00:00
TreeHugger Robot
233f69af0e
Merge "[RCS] Add sepolicy for RCS as non-system app" into sc-dev am: be1f56dba1
am: 54767e9f18
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14719163
Change-Id: I9a63898e64a78b2dc6de8e561144d2c66507f45b
2021-06-04 06:59:50 +00:00
Maciej Żenczykowski
df4893b27d
allow hal_usb_impl configfs:dir { create rmdir }; am: 729e8901ab
am: bfebab07d6
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542109
Change-Id: I1360e670af6fd7f5efa5db9118ee24cc665568a7
2021-06-04 06:59:41 +00:00
TreeHugger Robot
a19e1a15e9
Merge "[RCS] Add sepolicy for RCS as non-system app" into sc-dev am: be1f56dba1
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14719163
Change-Id: I9b46f94b8a8b12fed6f388b5591c809f18e3adb4
2021-06-04 06:44:11 +00:00
Maciej Żenczykowski
f0b64bb73f
allow hal_usb_impl configfs:dir { create rmdir }; am: 729e8901ab
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542109
Change-Id: Idd9e05143cf953dbba1c56deedd54264d8ea6ffc
2021-06-04 06:44:01 +00:00
TreeHugger Robot
54767e9f18
Merge "[RCS] Add sepolicy for RCS as non-system app" into sc-dev am: be1f56dba1
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14719163
Change-Id: Ic7ee2c3ff0a036229000191881e0255fee2f6b56
2021-06-04 06:42:19 +00:00
Maciej Żenczykowski
bfebab07d6
allow hal_usb_impl configfs:dir { create rmdir }; am: 729e8901ab
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542109
Change-Id: I0803ce3e0ab48c7d1f258789dcb0d3b12fc4ede6
2021-06-04 06:42:09 +00:00
TreeHugger Robot
be1f56dba1
Merge "[RCS] Add sepolicy for RCS as non-system app" into sc-dev
2021-06-04 06:22:03 +00:00
Maciej Żenczykowski
729e8901ab
allow hal_usb_impl configfs:dir { create rmdir };
...
This is needed to allow USB HAL to create multi-config gadget
(ie. rndis + ncm).
Bug: 172793258
Test: built and booted on oriole
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Ifb98b23138122ad4e0aeea8dd9c93d7b3e16d3aa
2021-06-04 02:53:11 +00:00
jznpark
3d127f9224
[RCS] Add sepolicy for RCS as non-system app
...
As shannon-rcs has been changed from system app
to non-system app, sepolicy has to be updated.
Bug: 186135775
Bug: 189707387
Test: sanity test
Signed-off-by: jznpark <jzn.park@samsung.com>
Change-Id: I32cce90611c619494136a6b1d01b3fb48330d169
2021-06-03 13:30:26 -07:00
Rick Yiu
a4dbe2ef40
gs101-sepolicy: Fix avc denials for sysfs_vendor_sched
...
Bug: 190011861
Bug: 190011862
Bug: 190011863
Bug: 190012301
Bug: 190012320
Test: boot to home
Change-Id: Icddb42fb194547211e33cf1d871e839a954b0919
2021-06-03 17:55:17 +08:00
Chiawei Wang
bc80f56382
Merge "pixelstats: fix permission errors" into sc-dev am: 9cfc661bee
am: a1a00508b1
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14781915
Change-Id: I3c76cb431b38fc09508198ba6bfc6aef43d36493
2021-06-03 09:41:59 +00:00
Chiawei Wang
ccb61d83df
Merge "pixelstats: fix permission errors" into sc-dev am: 9cfc661bee
am: 2d240b30a8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14781915
Change-Id: Ie91ad4bf9eefd33df53f9f2f26aa7b95c7cf7811
2021-06-03 09:30:21 +00:00
Chiawei Wang
2d240b30a8
Merge "pixelstats: fix permission errors" into sc-dev am: 9cfc661bee
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14781915
Change-Id: I74c9d026da00446746d0e2cbd4eb3570b99e0527
2021-06-03 09:06:10 +00:00
Chiawei Wang
a1a00508b1
Merge "pixelstats: fix permission errors" into sc-dev am: 9cfc661bee
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14781915
Change-Id: I89bbeeca2f88a9a82b5d7a1a66a70d16f79627ce
2021-06-03 09:03:14 +00:00
Chiawei Wang
9cfc661bee
Merge "pixelstats: fix permission errors" into sc-dev
2021-06-03 08:45:12 +00:00
Chiawei Wang
9d5830ac19
pixelstats: fix permission errors
...
1. sysfs_dma_heap erros are fixed by ag/13926718
2. debugfs_mgm error is fixed by ag/14683912
Bug: 188114896
Bug: 183338421
Bug: 188495492
Test: pts-tradefed run pts -m PtsSELinuxTest
http://sponge2/6cbd0af0-5414-4f2c-aea0-99b4981360a4
Signed-off-by: Chiawei Wang <chiaweiwang@google.com>
Change-Id: Icd2fa4e7f168d15fd4cec3000bc0e7a33eab4d3e
2021-06-03 02:52:33 +00:00
Rick Yiu
85aaaab7bb
Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f
am: 3ad28926f7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943
Change-Id: Ia9a01e54849d669e01f97bff67570a3fcb2ae6c6
2021-06-03 01:37:53 +00:00
Rick Yiu
ca8dc8bfe3
Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f
am: b6b7564259
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943
Change-Id: If3c7cef9f544fd8e038969952183e7f56b76a7a2
2021-06-03 01:36:08 +00:00
Rick Yiu
b6b7564259
Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943
Change-Id: Id352df8328a33017692f2a0df544b9db1556d1cf
2021-06-03 01:20:00 +00:00
Rick Yiu
3ad28926f7
Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943
Change-Id: I47a0e9367819d6ddd3b384f93c7199dead2e809e
2021-06-03 01:16:38 +00:00
Rick Yiu
b530a26f1f
Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev
2021-06-03 00:56:00 +00:00
Peter Csaszar
a6bde7a1d6
pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719
am: c9da551db2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010
Change-Id: Iac6d4896dcb274355ba690604399586e7923e49f
2021-06-02 21:17:34 +00:00
Peter Csaszar
72500dfbe6
pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719
am: 7a3703432e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010
Change-Id: I4f26f81458ce2205236a945fc8e0a236746a7921
2021-06-02 21:15:33 +00:00
Peter Csaszar
7a3703432e
pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010
Change-Id: I943d236681c0c24d2c6f6a70eda2081c78abf9df
2021-06-02 20:59:29 +00:00
Peter Csaszar
c9da551db2
pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010
Change-Id: I2b1b51ecfec820558988666ab03082951dd21fec
2021-06-02 20:56:54 +00:00
Peter Csaszar
7ea6a44719
pixel-selinux: Add mlstrustedobject for SJTAG
...
This CL adds the "mlstrustedobject" to types for files involved in the
SJTAG authentication flow, in order to address MLS-based AVC denials.
Bug: 189466122
Test: No more AVC denials when activating SJTAG in BetterBug
Signed-off-by: Peter Csaszar <pcsaszar@google.com>
Change-Id: Ieb88653830ce95751eee5cf26c26fd6302067bce
2021-06-02 12:23:01 -07:00
Aaron Ding
a260db294e
pixel-selinux: add SJTAG policies am: 9f8d552411
am: 9a43bd9ead
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132
Change-Id: If999a72b561a4e3f0ebf9ce2ec1f082cb98adaa4
2021-06-02 06:51:46 +00:00
Aaron Ding
15e36312cd
remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943
am: 2f3336940b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004
Change-Id: I21cad6d28945ae9cbb26e586d86ab1a02dbebb1e
2021-06-02 06:51:41 +00:00
Aaron Ding
ae49d5d313
pixel-selinux: add SJTAG policies am: 9f8d552411
am: 86e17fa6a1
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132
Change-Id: I0c1b46866c6813baac6e409924bc5928e3b85d86
2021-06-02 06:48:58 +00:00
Aaron Ding
28493f84c5
remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943
am: 59a7ae7afe
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004
Change-Id: I46dbfe1f8d6830eed0d651a291d90f7a2279ae07
2021-06-02 06:48:54 +00:00
Aaron Ding
86e17fa6a1
pixel-selinux: add SJTAG policies am: 9f8d552411
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132
Change-Id: I6ffbe3fc2053c12c4ef0138a9add21674955f2cb
2021-06-02 06:28:53 +00:00
Aaron Ding
59a7ae7afe
remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004
Change-Id: Ifad186cc34fef21b4686fe328ca904b62ae86357
2021-06-02 06:28:49 +00:00
Aaron Ding
9a43bd9ead
pixel-selinux: add SJTAG policies am: 9f8d552411
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132
Change-Id: Ia7c9bd89f0c958eeed16828186948a045044223a
2021-06-02 06:23:03 +00:00
Aaron Ding
2f3336940b
remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004
Change-Id: I12715f8c51af7decc14aedf173e3bb13c8f51c1d
2021-06-02 06:22:59 +00:00
Rick Yiu
9e8bd699e9
gs101-sepolicy: Refine policy for sysfs_vendor_sched
...
Chagne it to directory based.
Bug: 182509410
Test: device boot normally
Change-Id: I1cfaa95cf07e1e829e747eb99ed39ab64d3ddac1
2021-06-02 04:52:45 +00:00
Aaron Ding
9f8d552411
pixel-selinux: add SJTAG policies
...
This reverts commit b078284e5d
.
Bug: 184768605
Change-Id: Ib0080e2ba3edf7fa654155fb4a7403d52ad2494a
2021-06-02 10:25:51 +08:00
Aaron Ding
2dbe515943
remove sysfs_type from vendor_page_pinner_debugfs
...
Bug: 186500818
Change-Id: If97126a3d46d96342faf89b9698218b6a480a84b
2021-06-01 17:38:28 +08:00
David Chao
6026cf5181
Grant powerhal access to thermal_link_device and sysfs_thermal
...
Bug: 188579571
Test: boot
Change-Id: I8e4675e2817fe3778236618e0dba76f1233e77e2
2021-06-01 05:17:13 +00:00
Aaron Ding
da4f353e42
Revert "pixel-selinux: add SJTAG policies" am: b078284e5d
am: 2d35ae6cb8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664
Change-Id: Ib6b5b24801f721891ab64e09259217ca9d3ab954
2021-05-31 19:20:35 +00:00
Aaron Ding
2a1f5eb8b3
Revert "pixel-selinux: add SJTAG policies" am: b078284e5d
am: 5825ee37e3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664
Change-Id: I3647845eba2262b9701d8c0a4c028473ba500a04
2021-05-31 19:17:45 +00:00
Aaron Ding
5825ee37e3
Revert "pixel-selinux: add SJTAG policies" am: b078284e5d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664
Change-Id: I05c1e374972a89fe6d5dcd75f4c8fe41b383f3ff
2021-05-31 18:46:59 +00:00
Aaron Ding
2d35ae6cb8
Revert "pixel-selinux: add SJTAG policies" am: b078284e5d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664
Change-Id: I819e31237595331138b5230a77d5f85dbd368bc0
2021-05-31 18:43:52 +00:00
Aaron Ding
b078284e5d
Revert "pixel-selinux: add SJTAG policies"
...
This reverts commit bc525e1a49
.
Bug: 186500818
Change-Id: I0bab67d42530270a819598ac320a5946e5d7aa6d
Signed-off-by: Aaron Ding <aaronding@google.com>
2021-06-01 01:21:14 +08:00
Vova Sharaienko
a4660c88a9
Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a
am: 977bc88d0b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712
Change-Id: I75846a70a82ecd1762fb9dbd20117d8627d8998e
2021-05-28 18:29:50 +00:00
Vova Sharaienko
d0fa6b0ab5
Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a
am: e133184c45
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712
Change-Id: I9358a2cc6de91a13c46e868d8b80ae4cedc00758
2021-05-28 18:19:43 +00:00
Vova Sharaienko
977bc88d0b
Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712
Change-Id: I4ea468c2ebfdec8a35bfb02897f411bb8c814f22
2021-05-28 18:06:52 +00:00
Vova Sharaienko
e133184c45
Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712
Change-Id: I19ce2ef9b6f771d35036dcd5fd8217bc8eb8219a
2021-05-28 17:59:27 +00:00
Vova Sharaienko
ce4002966a
Merge "hal_health_default: updated sepolicy" into sc-dev
2021-05-28 17:42:45 +00:00
Rick Yiu
25f9147d6e
Merge "gs101-sepolicy: Allow dumping vendor groups values" into sc-dev am: 6c5779d0af
am: 8b7354ea6c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692150
Change-Id: I3a8ec644efa86e0e059ff043edfcce44e7e871d1
2021-05-28 02:09:45 +00:00