Commit graph

1096 commits

Author SHA1 Message Date
Jack Wu
e2aaccb114 sepolicy: gs101: allows pixelstat to access wlc file nodes am: 2794370557
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14732233

Change-Id: I8b9f1e8b1dc1e945ef0f24431610d43f19aafa38
2021-06-19 02:57:02 +00:00
Jack Wu
2794370557 sepolicy: gs101: allows pixelstat to access wlc file nodes
05-31 11:14:57.280  1000  3126  3126 W pixelstats-vend: type=1400 audit(0.0:162): avc: denied { search } for name="i2c-p9412" dev="sysfs" ino=60862 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=0
05-31 11:14:57.280  1000  3126  3126 W pixelstats-vend: type=1400 audit(0.0:163): avc: denied { search } for name="i2c-p9412" dev="sysfs" ino=60862 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=0

05-31 13:12:23.940  1000  2838  2838 W pixelstats-vend: type=1400 audit(0.0:182): avc: denied { read } for name="charge_stats" dev="sysfs" ino=73276 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0

05-31 15:02:02.215  1000 13169 13169 W pixelstats-vend: type=1400 audit(0.0:166): avc: denied { write } for name="charge_stats" dev="sysfs" ino=73483 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
05-31 15:02:02.215  1000 13169 13169 W pixelstats-vend: type=1400 audit(0.0:167): avc: denied { write } for name="charge_stats" dev="sysfs" ino=73483 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0

Bug: 176195960
Test: manually test, no avc: denied
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I0af03dd8099e246c5f94e8e8530d7b2bcf50ff95
2021-06-18 13:50:59 +00:00
Franklin He
7881005a7d Merge "Add new sepolicy to allow Power Hint" into sc-dev am: 6a488b8a81 am: d743a1a37b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14997453

Change-Id: I937e3238dfa7658b59570b9a254124b81b342f66
2021-06-18 09:06:47 +00:00
Franklin He
69d006583f Merge "Add new sepolicy to allow Power Hint" into sc-dev am: 6a488b8a81 am: e2757f1a2f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14997453

Change-Id: I7ac8d183e3189a0e8b66d6331c90549344d091f8
2021-06-18 09:05:50 +00:00
Franklin He
e2757f1a2f Merge "Add new sepolicy to allow Power Hint" into sc-dev am: 6a488b8a81
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14997453

Change-Id: I4fa13dd60ca94612acad3e5c2cce085a3499b164
2021-06-18 08:51:48 +00:00
Franklin He
d743a1a37b Merge "Add new sepolicy to allow Power Hint" into sc-dev am: 6a488b8a81
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14997453

Change-Id: Ib88e7249a095c051820f47ebedbc5b902490e3ab
2021-06-18 08:50:56 +00:00
Franklin He
6a488b8a81 Merge "Add new sepolicy to allow Power Hint" into sc-dev 2021-06-18 08:37:19 +00:00
Krzysztof Kosiński
13354ee040 Merge changes I18cbcf1b,I28a27741 into sc-dev am: c18265aaaa am: e154e0957c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15020911

Change-Id: Ic57e29a616eb4cd07094ea1fee7b0cef51657f9a
2021-06-18 08:18:26 +00:00
Krzysztof Kosiński
543113672a Merge changes I18cbcf1b,I28a27741 into sc-dev am: c18265aaaa am: 2bdd262506
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15020911

Change-Id: Ia5237cf578159d4eff38b518d64d4e9d0ab38f48
2021-06-18 08:14:49 +00:00
Krzysztof Kosiński
e154e0957c Merge changes I18cbcf1b,I28a27741 into sc-dev am: c18265aaaa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15020911

Change-Id: Ibdc7bbd8f3943e08f3202e15f8a6eff51dd65d7b
2021-06-18 08:05:55 +00:00
Krzysztof Kosiński
2bdd262506 Merge changes I18cbcf1b,I28a27741 into sc-dev am: c18265aaaa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15020911

Change-Id: If57e9679a73833f2b3b9061a0baf765bc1c4cc6c
2021-06-18 08:03:54 +00:00
Krzysztof Kosiński
c18265aaaa Merge changes I18cbcf1b,I28a27741 into sc-dev
* changes:
  Allow camera HAL to set vendor.camera properties
  Allow rlsservice/camera HAL to read /apex/apex-info-list.xml
2021-06-18 07:46:33 +00:00
Adam Shih
6b19178428 organize confirmationui settings am: d77bc5a970 am: 5f89bc8b4b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15021790

Change-Id: I4b0f27c6bc8914838ce3697cb40cfe9eb9b785f4
2021-06-18 07:18:53 +00:00
Adam Shih
d3b52eeb7a organize confirmationui settings am: d77bc5a970 am: 5e7be474d4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15021790

Change-Id: If42f6ebaf1bef4b71831702611ed2dc619771e51
2021-06-18 07:18:30 +00:00
Adam Shih
5e7be474d4 organize confirmationui settings am: d77bc5a970
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15021790

Change-Id: I759065d2cbd5c0e8a5fc7153273c3f1016137000
2021-06-18 06:57:36 +00:00
Thiébaud Weksteen
7e232446dc Fix access permissions for sysfs_aoc_reset
avc: denied { getattr } for comm="UsfHalWorker" path="/sys/devices/platform/19000000.aoc/reset" dev="sysfs" ino=69873 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_aoc_reset:s0 tclass=file permissive=0

Bug: 190712449
Bug: 191415949
Change-Id: Ibad4e75aa60b06129221086031289c855c561e96
2021-06-18 08:56:59 +02:00
Adam Shih
5f89bc8b4b organize confirmationui settings am: d77bc5a970
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15021790

Change-Id: I9a10630cf9dd31ad3dca60c40e1c175da28deab2
2021-06-18 06:56:41 +00:00
Yuriy Romanenko
6bf4661e8f Allow camera HAL to set vendor.camera properties
Bug: 188246923
Test: See topic
Change-Id: I18cbcf1b622ad7cd6d6bd1ea258b3d537db54412
2021-06-17 21:58:54 -07:00
Adam Shih
d77bc5a970 organize confirmationui settings
Bug: 190331547
Bug: 190331370
Test: build ROM and make sure file and sepolicy is still there
Change-Id: I4cabf9280ab5e21038bcb72615799b7ed0fb1670
2021-06-18 12:56:05 +08:00
Badhri Jagan Sridharan
1963b6b258 Merge "Add file context for /dev/logbuffer_tcpm" into sc-dev am: d9876fd266 am: 04302e6743
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15019635

Change-Id: I5bab0be22f017491d8b38770682e60b3dd1843d2
2021-06-18 04:10:47 +00:00
Badhri Jagan Sridharan
1711a13dcc Merge "Add file context for /dev/logbuffer_tcpm" into sc-dev am: d9876fd266 am: 4632b7aa7d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15019635

Change-Id: Iecd2b65a1da20773557741b1e6971b63d6e2f3ef
2021-06-18 04:08:42 +00:00
Badhri Jagan Sridharan
04302e6743 Merge "Add file context for /dev/logbuffer_tcpm" into sc-dev am: d9876fd266
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15019635

Change-Id: Ibd2e13f7069bec378076c40f187d9707c85f6227
2021-06-18 03:55:10 +00:00
Badhri Jagan Sridharan
4632b7aa7d Merge "Add file context for /dev/logbuffer_tcpm" into sc-dev am: d9876fd266
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15019635

Change-Id: Ie59d003bc6d1e74f1b37f440b9f27059156503f6
2021-06-18 03:53:45 +00:00
Badhri Jagan Sridharan
d9876fd266 Merge "Add file context for /dev/logbuffer_tcpm" into sc-dev 2021-06-18 03:38:35 +00:00
Badhri Jagan Sridharan
eb3881dbe7 Add file context for /dev/logbuffer_tcpm
/dev/logbuffer_tcpm gets accessed by dumpstate while bugreport
generation.

Bug: 189792358
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
Change-Id: Ica0f3557ad9c41844f8411b0bdf68d66fbba00e5
2021-06-17 16:11:28 -07:00
Craig Dooley
87afb33cf7 Merge "Allow hal_dumpstate to collect AoC statistics" into sc-dev am: 7fe9d053e8 am: dfdc21e14f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15000356

Change-Id: I5f83bd88db00833accbb504debbca17a2cdf77af
2021-06-17 17:06:58 +00:00
Craig Dooley
9bbd6fae7a Merge "Allow hal_dumpstate to collect AoC statistics" into sc-dev am: 7fe9d053e8 am: 5f7548f746
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15000356

Change-Id: I6a33091f024ceb928ac83a2db4ce393d433384f4
2021-06-17 17:06:42 +00:00
Craig Dooley
5f7548f746 Merge "Allow hal_dumpstate to collect AoC statistics" into sc-dev am: 7fe9d053e8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15000356

Change-Id: I41d370542b4be1b052ba863df7c28c265ccd036c
2021-06-17 16:49:11 +00:00
Craig Dooley
dfdc21e14f Merge "Allow hal_dumpstate to collect AoC statistics" into sc-dev am: 7fe9d053e8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15000356

Change-Id: I77b03e12df36cdf81bddd1d51d64ea50800d9102
2021-06-17 16:48:35 +00:00
Craig Dooley
7fe9d053e8 Merge "Allow hal_dumpstate to collect AoC statistics" into sc-dev 2021-06-17 16:32:38 +00:00
Franklin He
c53c03b843 Add new sepolicy to allow Power Hint
SELinux policy changes to work with https://googleplex-android-review.git.corp.google.com/c/device/google/gs101/+/14997393
This allows the NNAPI HAL to make IPC calls to the Power HAL in order to request power hints

Bug: 191241561
Test: Pushed new SEPolicy to device, verified no AVC problems when making IPC calls
Change-Id: I8209b3677bedf908901389c07304f4478d0431b0
2021-06-17 07:59:11 +00:00
Yuriy Romanenko
14786d9b40 Allow rlsservice/camera HAL to read /apex/apex-info-list.xml
To detect apex updates

Bug: 188246923
Test: See topic
Change-Id: I28a27741c1c285f8b49a2aa50bc0665143c1b7cb
2021-06-16 20:55:38 -07:00
TreeHugger Robot
9f15636f26 Merge "vendor_telephony_app.te: add selinuxfs:file" into sc-dev am: 502b653380 am: a62f3266fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963703

Change-Id: Idd8908e2cc25bcdafcc932e09335ccc6bf037dc7
2021-06-17 02:05:07 +00:00
TreeHugger Robot
00d192d4d7 Merge "vendor_telephony_app.te: add selinuxfs:file" into sc-dev am: 502b653380 am: c3d33dfd8f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963703

Change-Id: I197b8a0d86df33a98610bbcbf6b7567a23319862
2021-06-17 02:04:42 +00:00
TreeHugger Robot
c3d33dfd8f Merge "vendor_telephony_app.te: add selinuxfs:file" into sc-dev am: 502b653380
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963703

Change-Id: Id126e3c4849db6a693458c67215c81e08c33c1a2
2021-06-17 01:44:20 +00:00
TreeHugger Robot
a62f3266fc Merge "vendor_telephony_app.te: add selinuxfs:file" into sc-dev am: 502b653380
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963703

Change-Id: Id09fec7d2642bf8e67bd9425240408bc40728164
2021-06-17 01:43:19 +00:00
Yu-Chi Cheng
101842ba63 Allowed EdgeTPU compilation services (tflite and nnapi) to access am: 643e5a7123 am: 067e314a35
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15004632

Change-Id: I887964815acf4b80d14c51bec8cf21978fe54ad7
2021-06-17 01:29:36 +00:00
Yu-Chi Cheng
a46c57c1b2 Allowed EdgeTPU compilation services (tflite and nnapi) to access am: 643e5a7123 am: 66aac3e71f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15004632

Change-Id: Ia5c85b77e9dc6a4458c1e2f79b590f556c95569d
2021-06-17 01:29:19 +00:00
TreeHugger Robot
502b653380 Merge "vendor_telephony_app.te: add selinuxfs:file" into sc-dev 2021-06-17 01:14:20 +00:00
Yu-Chi Cheng
66aac3e71f Allowed EdgeTPU compilation services (tflite and nnapi) to access am: 643e5a7123
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15004632

Change-Id: I6d0883541ad8f5796cc0ef7ae8ca7fb9827ce5f2
2021-06-17 01:09:50 +00:00
Yu-Chi Cheng
067e314a35 Allowed EdgeTPU compilation services (tflite and nnapi) to access am: 643e5a7123
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15004632

Change-Id: I1c51e2b2c1d0afb0f3660ccc30cf1db51888d644
2021-06-17 01:08:59 +00:00
Yu-Chi Cheng
643e5a7123 Allowed EdgeTPU compilation services (tflite and nnapi) to access
overcommit_memory info.

This is required as part of the compilation process, likely part of
the jemalloc which was added recently.

Bug: 190790251
Test: verified on local P21 device.
Change-Id: I4d90ea92afd7beaa4c4efa6ed509d703764932a1
2021-06-16 16:17:14 -07:00
Craig Dooley
3031b077a3 Allow hal_dumpstate to collect AoC statistics
Bug: 188114650
Signed-off-by: Craig Dooley <dooleyc@google.com>
Change-Id: Iba5525af2c651070b9a5f7769c0439ef320d666b
2021-06-16 17:18:55 +00:00
TreeHugger Robot
939fb40006 Merge "Add sepolicy for hwcomposer to access lhbm sysfs" into sc-dev am: 11ebd6122e am: 632d66fb17
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14234767

Change-Id: Iaa50e2fe622b0ddf8f4a04a4a84d152c90c4c58d
2021-06-16 14:24:41 +00:00
TreeHugger Robot
fc7440d590 Merge "Add sepolicy for hwcomposer to access lhbm sysfs" into sc-dev am: 11ebd6122e am: 41e4576f08
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14234767

Change-Id: Ibd1300cb652041eaf78338aeb386bb1b1587c403
2021-06-16 14:21:03 +00:00
TreeHugger Robot
632d66fb17 Merge "Add sepolicy for hwcomposer to access lhbm sysfs" into sc-dev am: 11ebd6122e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14234767

Change-Id: Id3396b6103d217649292ec4338e72d4a52fdf18e
2021-06-16 14:05:25 +00:00
TreeHugger Robot
41e4576f08 Merge "Add sepolicy for hwcomposer to access lhbm sysfs" into sc-dev am: 11ebd6122e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14234767

Change-Id: I68363c30b1d6c3668434d277c542ef31a0d2419b
2021-06-16 14:04:36 +00:00
TreeHugger Robot
11ebd6122e Merge "Add sepolicy for hwcomposer to access lhbm sysfs" into sc-dev 2021-06-16 13:51:37 +00:00
Adam Shih
31bf6f0384 Merge "remove vcd from user ROM" into sc-dev am: 2cdde93f15 am: f6940b0869
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14934449

Change-Id: Ieffc9613783fbbfe0f77202cb5c9fbaea2e25cf7
2021-06-16 07:09:38 +00:00
Adam Shih
ee90e93ae7 Merge "remove vcd from user ROM" into sc-dev am: 2cdde93f15 am: 56f9c7730f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14934449

Change-Id: I1a765518eb1b37354ba9ea0d5cd75e913de448cd
2021-06-16 07:09:17 +00:00