Michael Ayoubi
0536297aed
Merge "allow recovery and fastboot to access secure elment" into sc-dev am: 075ba05575
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15152134
Change-Id: I46ad2d1546b4145d8408aee5677b4395c4d8e1d6
2021-06-30 17:56:53 +00:00
Michael Ayoubi
075ba05575
Merge "allow recovery and fastboot to access secure elment" into sc-dev
2021-06-30 17:39:40 +00:00
Jeffrey Carlyle
14fcd5ffaf
allow recovery and fastboot to access secure elment
...
This is to enable clearing of secure element during a master reset.
Bug: 182508814
Test: master reset on device with keys; verified no keys after reset
Signed-off-by: Jeffrey Carlyle <jcarlyle@google.com>
Change-Id: I9bb569e09f8cd6f5640757bd0d10a14ef32946ff
2021-06-30 15:19:22 +09:00
Gazi Yamin Iqbal
7edd8a7f81
Merge "gs101-sepolicy: allow rlsservice to read display status files" into sc-dev am: 2e1cafdfd8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100489
Change-Id: Idc69fa1c2e71dfa8ec660a52d4157a68afc1e27f
2021-06-30 05:57:03 +00:00
Gazi Yamin Iqbal
2e1cafdfd8
Merge "gs101-sepolicy: allow rlsservice to read display status files" into sc-dev
2021-06-30 05:41:19 +00:00
Ted Lin
cb3ca1e87b
Remove dontaudit form tracking_denials for maxfg and regmap
...
Bug:190337297
Test: Check the bugreport
Change-Id: I0887e6256b4f158bd525ed66475cd1ef5672c9df
Signed-off-by: Ted Lin <tedlin@google.com>
2021-06-30 11:11:22 +08:00
Adam Shih
90ec2412b3
Merge "Avoid VTS testDataTypeViolators failure" into sc-dev am: 3ded724256
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15126901
Change-Id: I3e3e0e580afbe6ccc971de2e81329495424c3b49
2021-06-30 02:04:32 +00:00
Adam Shih
3ded724256
Merge "Avoid VTS testDataTypeViolators failure" into sc-dev
2021-06-30 01:45:29 +00:00
George Lee
4aa936d63b
pixelstats: add bcl directory permission
...
Bug: 186806028
Test: Local test
$>cmd stats print-logs
$>logcat | grep <atom id>
Signed-off-by: George Lee <geolee@google.com>
Change-Id: I7288a9ab44e2387d37c5442297cf80f5b5428c8f
2021-06-29 16:08:38 -07:00
Kevin Han
fc0c3c4939
Merge "Revert "allow recovery and fastboot to access secure elment"" into sc-dev am: 1d54c8dd21
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145159
Change-Id: I70e74a9964444a39f9d0eeaca82394a8c6bbdc71
2021-06-29 19:50:38 +00:00
Kevin Han
1d54c8dd21
Merge "Revert "allow recovery and fastboot to access secure elment"" into sc-dev
2021-06-29 19:33:01 +00:00
Kevin Han
fd47b11162
Revert "allow recovery and fastboot to access secure elment"
...
Revert "add gs101-specific recovery library"
Revert "recovery: enable support for device-specific WipeSe impl..."
Revert "clear secure element of Digital Car Keys during factory ..."
Revert submission 14983788-clear_keys
Reason for revert: b/192373955
Reverted Changes:
Ia8fc29e6c:add gs101-specific recovery library
Icc1eabfd4:clear secure element of Digital Car Keys during fa...
I943d97b26:recovery: enable support for device-specific WipeS...
I15c7fbd7f:allow recovery and fastboot to access secure elmen...
Change-Id: Ic576b40641171298ad840bedbd4a9f7b67052d95
2021-06-29 19:19:24 +00:00
TreeHugger Robot
f65af527f1
Merge "allow recovery and fastboot to access secure elment" into sc-dev am: be3d2bf325
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14681841
Change-Id: I77eaf28b2117143037257359078954d8c0e27dd1
2021-06-29 18:03:22 +00:00
TreeHugger Robot
be3d2bf325
Merge "allow recovery and fastboot to access secure elment" into sc-dev
2021-06-29 17:50:35 +00:00
TreeHugger Robot
b9ab0e9c9d
Merge "Fix denial when flashing vendor_boot in fastbootd." into sc-dev am: 432ed9b527
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15135682
Change-Id: Ie2926714d97074c33ad052ff6ec87545451db8fb
2021-06-29 17:22:35 +00:00
TreeHugger Robot
432ed9b527
Merge "Fix denial when flashing vendor_boot in fastbootd." into sc-dev
2021-06-29 17:04:07 +00:00
David Anderson
2354e3a924
Fix denial when flashing vendor_boot in fastbootd.
...
This mirrors the same sepolicy line in previous Pixel devices.
Bug: 189493387
Test: fastboot flash vendor_boot on r4
Change-Id: Ie15c8e6e5c01b249e1e5e244666c461253279f0b
2021-06-28 21:06:05 -07:00
Neo Yu
590f6c96f8
Merge "Fix avc denied for getprop "vendor.radio.call_end_reason"" into sc-dev am: 9c27ce91c8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15126897
Change-Id: I585e6631ce4c913405d3b5fe2296391d30fe6c52
2021-06-29 03:20:31 +00:00
Neo Yu
9c27ce91c8
Merge "Fix avc denied for getprop "vendor.radio.call_end_reason"" into sc-dev
2021-06-29 03:05:02 +00:00
TreeHugger Robot
64bc4eef75
Merge "Sepolicy: Remove permission for fuel gauge" into sc-dev am: 15f7a61603
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782008
Change-Id: I4e3ad8b720a7b0436eca036ff61da27f0f559de8
2021-06-29 02:00:54 +00:00
TreeHugger Robot
15f7a61603
Merge "Sepolicy: Remove permission for fuel gauge" into sc-dev
2021-06-29 01:48:34 +00:00
TreeHugger Robot
960aaab672
Merge "Sepolicy: Pixel stats wireless charger sepolicy" into sc-dev am: 22f27cb215
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456728
Change-Id: I747f7ab531ed52ce6f8312ed5360a9cd79d3ed29
2021-06-29 01:30:30 +00:00
neoyu
93944a8b1c
Fix avc denied for getprop "vendor.radio.call_end_reason"
...
06-10 11:13:02.867 10224 2377 2377 W libc : Access denied finding property "vendor.radio.call_end_reason"
Bug: 191204793
Test: error is gone with this fix
Change-Id: I50c1d21ba4e2343aa2cee0c533b8c3dbe535e4b5
2021-06-29 01:18:12 +00:00
TreeHugger Robot
22f27cb215
Merge "Sepolicy: Pixel stats wireless charger sepolicy" into sc-dev
2021-06-29 01:16:35 +00:00
Adam Shih
f9501fc87c
Avoid VTS testDataTypeViolators failure
...
Bug: 192209720
Test: run -m CtsSecurityHostTestCases -t android.security.cts.SELinuxHostTest
Change-Id: I9043c5adfb544179bceb0f6e5cf73c2b2ddd3d02
2021-06-29 07:58:57 +08:00
David Lin
4b6bc8cb32
ssr_detector_app: Add additional vendor dir and crgroup allow for debug
...
Bug: 192126013
Signed-off-by: David Lin <dtwlin@google.com>
Change-Id: Idadf81cf92099804f300f87fb1bedf9bed7decbd
2021-06-28 21:52:51 +00:00
TreeHugger Robot
8d6a3d96a2
Merge "Hardwareinfo: battery info porting" into sc-dev am: a63fbd68d4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608134
Change-Id: I9c8d1f7b0b57fa279557525d15cb307442390232
2021-06-28 16:33:20 +00:00
TreeHugger Robot
a63fbd68d4
Merge "Hardwareinfo: battery info porting" into sc-dev
2021-06-28 16:20:12 +00:00
Gazi Yamin Iqbal
4ea317bb6a
gs101-sepolicy: allow rlsservice to read display status files
...
major changes:
1. This change is to allow rlsservice to read the status of
display status file. Similar method was employed in previous
pixels.
Bug: 191122203
Test: p21 camera test checklist
Change-Id: I09483881294fd6dde46d4d0b7283311a2d20c404
2021-06-28 22:15:08 +08:00
TreeHugger Robot
25fa293ed4
Merge "gs101-sepolicy: add oemrilservice_app.te" into sc-dev am: 407d0cf58d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072301
Change-Id: Id862fe0bb0c01337a933653f6885bde170cd0324
2021-06-27 01:56:09 +00:00
TreeHugger Robot
407d0cf58d
Merge "gs101-sepolicy: add oemrilservice_app.te" into sc-dev
2021-06-27 01:47:21 +00:00
Jeffrey Carlyle
9ac870aa22
allow recovery and fastboot to access secure elment
...
This is to enable clearing of secure element during a master reset.
Bug: 182508814
Test: master reset on device with keys; verified no keys after reset
Signed-off-by: Jeffrey Carlyle <jcarlyle@google.com>
Change-Id: I15c7fbd7f2c4fb34dcad0ae4f5cee3238f526fa5
2021-06-25 17:54:29 -07:00
sukiliu
6a881fe7d8
Update avc error on ROM 7492139 am: 7ea816284d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100479
Change-Id: I8c91559f00aca5f79f366cc99d23290f04a9e159
2021-06-25 08:11:34 +00:00
sukiliu
7ea816284d
Update avc error on ROM 7492139
...
avc: denied { call } for comm="servicemanager" scontext=u:r:servicemanager:s0 tcontext=u:r:hal_fingerprint_default:s0 tclass=binder permissive=0
Bug: 192040144
Test: PtsSELinuxTestCases
Change-Id: I2de11d2706222a88c4234d99399b7b2437f36e31
2021-06-25 14:40:17 +08:00
sukiliu
48a2a83361
Update avc error on ROM 7490489 am: e31c8840de
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100471
Change-Id: Ia5c201aeb91106643b2825bf3c530444af8ce7ec
2021-06-25 03:10:23 +00:00
sukiliu
e31c8840de
Update avc error on ROM 7490489
...
avc: denied { call } for scontext=u:r:dumpstate:s0 tcontext=u:r:hal_uwb_default:s0 tclass=binder permissive=0
avc: denied { call } for comm="dumpstate" scontext=u:r:dumpstate:s0 tcontext=u:r:hal_uwb_default:s0 tclass=binder permissive=0
Bug: 192026913
Test: PtsSELinuxTestCases
Change-Id: Ieca08e87db1b46f3b7fc7de1492e45d4a5bec868
2021-06-25 09:42:51 +08:00
Ilya Matyukhin
bb50dd08c0
Merge "raviole: transition SystemUI to use HWC for LHBM" into sc-dev am: f9828a9944
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15085906
Change-Id: If4a97f8c91b5bb1c65506ff89d5bb811d0ec3366
2021-06-25 01:27:08 +00:00
Adam Shih
425d7cb7d4
Merge "modularize dmd" into sc-dev am: 99bfde4f38
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072291
Change-Id: If964605afd24a9c716e562a8e0ae541451e7a6f4
2021-06-25 01:26:54 +00:00
Ilya Matyukhin
f9828a9944
Merge "raviole: transition SystemUI to use HWC for LHBM" into sc-dev
2021-06-25 01:12:52 +00:00
Adam Shih
99bfde4f38
Merge "modularize dmd" into sc-dev
2021-06-25 01:12:50 +00:00
TreeHugger Robot
c882714de8
Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev am: 655f5cfd8f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072290
Change-Id: Iebe2d27156e2dcb801cbf1a535fdd6e06826b814
2021-06-24 10:20:01 +00:00
TreeHugger Robot
655f5cfd8f
Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev
2021-06-24 10:02:11 +00:00
Adam Shih
7e1e8dfecf
Merge "modularize pktrouter" into sc-dev am: 9b0b96b907
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048206
Change-Id: Ia5c07a79795fb692ac65185a8ffa311bdca8a4e6
2021-06-24 07:40:06 +00:00
Adam Shih
9b0b96b907
Merge "modularize pktrouter" into sc-dev
2021-06-24 07:24:45 +00:00
Ilya Matyukhin
2460cdcc9f
raviole: transition SystemUI to use HWC for LHBM
...
This change removes direct access to the LHBM sysfs node from SystemUI,
but allows SystemUI to make binder calls to the hardware composer (HWC),
which can be used to enable or disable LHBM.
Bug: 191132545
Bug: 190563896
Bug: 184768835
Test: no avc denials
Change-Id: I5417377ff096e869ad772e4fd2fb23f8c1fd4f1e
2021-06-23 23:38:27 -07:00
Adam Shih
8b326703e1
modularize dmd
...
Bug: 190331463
Test: build ROM and make sure dmd is launched
Change-Id: If1e51b6bc100e870a15a40f5e0d93a75fe68bac3
2021-06-24 14:17:29 +08:00
Alex Hong
b053769bd3
Merge "Move the type definition of properties from product to vendor" into sc-dev am: d912300853
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15080406
Change-Id: I0f9867b9d5a0159a78c972695fad80365d259279
2021-06-24 02:18:16 +00:00
Minchan Kim
98d9d3971f
Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev am: 650cf48406
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15081303
Change-Id: I6381f743dc34009706f2581d613df88384dad3fe
2021-06-24 02:17:25 +00:00
Alex Hong
d912300853
Merge "Move the type definition of properties from product to vendor" into sc-dev
2021-06-24 02:15:36 +00:00
Alex Hong
e44e432672
Move the type definition of properties from product to vendor
...
These properties cannot be resolved after product sepolicy is replaced.
vendor_persist_config_default_prop
vendor_rild_prop
Test: The device can boot to home after replacing with GSI
Bug: 191236468
Change-Id: Ib797601a44306987e5a85897c7b6cd7827ad91b2
2021-06-24 02:01:20 +00:00