Commit graph

977 commits

Author SHA1 Message Date
TreeHugger Robot
b79874f1b2 Merge "logger_app: Fix avc error" into sc-dev am: dc4db7d1cc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14636312

Change-Id: I4ec355ab7418f960c967984aded20fa9322030b7
2021-05-19 08:43:40 +00:00
TreeHugger Robot
dc4db7d1cc Merge "logger_app: Fix avc error" into sc-dev 2021-05-19 08:31:39 +00:00
yixuanjiang
826c703c8c Add sepolicy for aocdump to access wlan_logs folder am: 494ac0cfe3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14636311

Change-Id: Iefe2f8ef7f6cda5896da75634a3eaa9560be44ff
2021-05-19 08:10:35 +00:00
SalmaxChang
b486ddedc5 logger_app: Fix avc error
avc: denied { search } for name="ramdump" dev="dm-7" ino=316 scontext=u:r:logger_app:s0:c17,c257,c512,c768 tcontext=u:object_r:ramdump_vendor_data_file:s0 tclass=dir permissive=0
avc: denied { search } for name="ssrdump" dev="dm-11" ino=292 scontext=u:r:logger_app:s0:c23,c257,c512,c768 tcontext=u:object_r:sscoredump_vendor_data_crashinfo_file:s0 tclass=dir permissive=0

Bug: 188601292
Bug: 188611595

Change-Id: If6b204bf0d5c502cf09c9fe70bcd572cfe2db016
2021-05-19 07:39:36 +00:00
yixuanjiang
494ac0cfe3 Add sepolicy for aocdump to access wlan_logs folder
Add related sepolicies on aoc dump when pixel logger using
wlan config

Bug: 188411088
Signed-off-by: yixuanjiang <yixuanjiang@google.com>
Change-Id: I7a786f25b9094cc9ebeef79e4aff5522bde17d19
2021-05-19 14:11:42 +08:00
Jinting Lin
2ffb2eb505 Merge "logger_app: Fix avc errors" into sc-dev am: c57a3fc989
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608140

Change-Id: Id284f7befba9cc5f404087efab266d2a94b983e7
2021-05-19 02:39:22 +00:00
Jinting Lin
c57a3fc989 Merge "logger_app: Fix avc errors" into sc-dev 2021-05-19 02:18:39 +00:00
Tri Vo
00566d516b Merge "Fix file_contexts path for trusty_metricsd" into sc-dev am: 6a558ac02b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14605122

Change-Id: I73654ca4cb0e8dac699db1b99a1722b85101f2f4
2021-05-18 22:38:38 +00:00
Tri Vo
6a558ac02b Merge "Fix file_contexts path for trusty_metricsd" into sc-dev 2021-05-18 22:18:39 +00:00
Tri Vo
970f15b13d Fix file_contexts path for trusty_metricsd
Bug: 188417701
Bug: 173423860
Test: trusty_metricsd starts
Change-Id: I212c2d449441ac4b9238c8f7171982b253d4b6e0
2021-05-18 19:39:42 +00:00
Yu-Chi Cheng
8f44cf052c Merge "Renamed edgetpu_service to edgetpu_app_service." into sc-dev am: 8ebeb48b39
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14607191

Change-Id: I9c17d89a677f02dfb329933db057fcf9257ce68b
2021-05-18 19:23:15 +00:00
Yu-Chi Cheng
8ebeb48b39 Merge "Renamed edgetpu_service to edgetpu_app_service." into sc-dev 2021-05-18 19:13:21 +00:00
Roger Fang
3d9dfa1e58 Merge changes from topic "IAudioMetricExt@1.0" into sc-dev am: 834331af79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14281930

Change-Id: If56802dd85f6a6be85982ff7bbd2139f7a5518ea
2021-05-18 17:38:54 +00:00
Gary Jian
b724a106ed Add permission to access audiometricext hal for grilservice_app am: b9e4f7a759
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13885467

Change-Id: I7b4da71ea18f09d42bacffd9aa28644b38b92513
2021-05-18 17:38:52 +00:00
Roger Fang
834331af79 Merge changes from topic "IAudioMetricExt@1.0" into sc-dev
* changes:
  sepolicy: gs101: add IAudioMetricExt settings
  Add permission to access audiometricext hal for grilservice_app
2021-05-18 17:21:48 +00:00
Kevin DuBois
0afea3c02d Merge "sepolicy: update gpu nnhal file" into sc-dev am: 811dbd6611
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14551347

Change-Id: Ia73a117f48808441194e827384ebf88ee671c127
2021-05-18 15:28:16 +00:00
Kevin DuBois
811dbd6611 Merge "sepolicy: update gpu nnhal file" into sc-dev 2021-05-18 15:07:05 +00:00
jintinglin
3be06b2ec9 logger_app: Fix avc errors
avc: denied { read } for name="level" dev="sysfs" ino=57112 scontext=u:r:logger_app:s0:c29,c257,c512,c768 tcontext=u:object_r:sysfs_sscoredump_level:s0 tclass=file permissive=0 app=com.android.pixellogger

Bug: 187909426
Change-Id: I2037b1d2613736c8e1789bc96bfd4be0168444e0
2021-05-18 18:46:00 +08:00
Roger Fang
9de2688cd4 sepolicy: gs101: add IAudioMetricExt settings
E init    : Could not start service 'audiometricext' as part of class 'hal': File /vendor/bin/hw/vendor.google.audiometricext@1.0-service-vendor(labeled "u:object_r:vendor_file:s0")

vendor.google.a: type=1400 audit(0.0:3): avc: denied { read } for name="u:object_r:hwservicemanager_prop:s0" dev="tmpfs" ino=188 scontext=u:r:hal_audiometricext_default:s0 tcontext=u:object_r:hwservicemanager_prop:s0 tclass=file permissive=1

E SELinux : avc:  denied  { find } for interface=vendor.google.audiometricext::IAudioMetricExt sid=u:r:hal_audiometricext_default:s0 pid=819 scontext=u:r:hal_audiometricext_default:s0 tcontext=u:object_r:default_android_hwservice:s0 tclass=hwservice_manager permissive=1

E SELinux : avc:  denied  { add } for interface=android.hidl.base::IBase sid=u:r:hal_audiometricext_default:s0 pid=795 scontext=u:r:hal_audiometricext_default:s0 tcontext=u:object_r:hidl_base_hwservice:s0 tclass=hwservice_manager permissive=1

Bug: 180627405
Test: manually test passed
Signed-off-by: Roger Fang <rogerfang@google.com>
Change-Id: I91d76eb0ad5850e75ad865304d83f3025b981915
2021-05-18 05:06:58 +00:00
Gary Jian
b9e4f7a759 Add permission to access audiometricext hal for grilservice_app
Bug: 182526894
Test: Manual
Change-Id: I3ca85be7e5ab244e2dea2c6f7768f59c07b44525
2021-05-18 02:18:56 +00:00
TreeHugger Robot
3075216794 Merge "genfs_contexts: Specify correct GPU clock hint node" into sc-dev am: ac53196839
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14599591

Change-Id: Ifc1411973f3dcb258d3673e05d8d519e9132cd64
2021-05-18 00:54:21 +00:00
TreeHugger Robot
843c90e0ae Merge "Grant dumpstate hal read permission of camera hal dump files" into sc-dev am: 09a98d233d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604511

Change-Id: I96a4843b04f81194053e1c552757b76bb6f0a134
2021-05-18 00:53:51 +00:00
TreeHugger Robot
ac53196839 Merge "genfs_contexts: Specify correct GPU clock hint node" into sc-dev 2021-05-18 00:50:53 +00:00
TreeHugger Robot
09a98d233d Merge "Grant dumpstate hal read permission of camera hal dump files" into sc-dev 2021-05-18 00:42:12 +00:00
Yu-Chi Cheng
e8ee41f9af Renamed edgetpu_service to edgetpu_app_service.
edgetpu_service was splitted into two in previous change:
edgetpu_service and edgetpu_vendor_service, where the new
vendor service for vendor clients, and the old service keeps
serving app clients.

This change updated the SELinux policy to rename the edgetpu_service
into edgetpu_app_service to make the purpose clearer.

Bug: 188463446
Test: Oriole + GCA
Change-Id: I3a133319edc84fc02ef211934d0542575580da14
2021-05-17 15:38:24 -07:00
Zhijun He
a8ceb3a751 Grant dumpstate hal read permission of camera hal dump files
Test: Build and capture bugreport
Bug: 178737594
Change-Id: Iae9792a75dec574ff9fe0d246a7c166221565b16
2021-05-17 14:23:46 -07:00
Minchan Kim
2d7105504c sepolicy: gs101: allow duump page_pinner am: 304a32c17e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14472545

Change-Id: Ibae22fcdcc54e799d249da2049877764ff81f79f
2021-05-17 18:49:05 +00:00
Minchan Kim
304a32c17e sepolicy: gs101: allow duump page_pinner
Provide necessary sepolicy for dumpreport to access page_pinner
information in /sys/kernel/debug/page_pinner/{longterm_pinner,
alloc_contig_failed}

Bug: 187552095
Test: Run "adb bugreport <zip>" and verify it contains the output
      from page_pinner.
Signed-off-by: Minchan Kim <minchan@google.com>
Change-Id: I2abc48f2a156718fd4bed3b51bdd285c6bf9f175
2021-05-17 09:18:50 -07:00
Sidath Senanayake
828114d410 genfs_contexts: Specify correct GPU clock hint node
Bug: 188404581
Bug: 188034128
Signed-off-by: Sidath Senanayake <sidaths@google.com>
Change-Id: Id69f5cf8c95081fea7784520838a3f85aa58589c
2021-05-17 15:44:19 +01:00
qinyiyan
8c575a737d Allows the edgetpu_logging service to write to the edgetpu sysfs. am: bfbf29c18c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14554224

Change-Id: Id78817a5c8d6fe6bbbeec7a300e057d8b22b73dd
2021-05-17 05:35:46 +00:00
qinyiyan
bfbf29c18c Allows the edgetpu_logging service to write to the edgetpu sysfs.
Test: make selinux_policy -j128
Bug: 151063663
Change-Id: I5ac619b34bb6fb17caa4c00ac62ac6802c776d84
2021-05-14 13:54:04 -07:00
Quinn Yan
73b67b2d9f Merge "Add the TPU AIDL NNAPI HAL to the sepolicy." into sc-dev am: d2558a05b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506028

Change-Id: I45981dd19e54cae6d96b6cde5ab33a81d81d222f
2021-05-14 20:44:45 +00:00
Quinn Yan
d2558a05b3 Merge "Add the TPU AIDL NNAPI HAL to the sepolicy." into sc-dev 2021-05-14 20:15:37 +00:00
Kevin DuBois
82408c931b sepolicy: update gpu nnhal file
GPU nnhal needed a file update when update upgrading to 1.3 revision,
modify this so the device uses all the 1.2 rules.

Fixes: 187981206
Test: make sure hal starts
Change-Id: Ie1054fc092f1aa459cd36b6eb0f0a1a5cc032dbc
2021-05-14 10:55:25 -07:00
SHUCHI LILU
d081badaa2 Merge "Update avc error on ROM 7358093" into sc-dev am: 60bf6343be
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542522

Change-Id: I6d37300c7842d194db5ed736eac8137aec105b0e
2021-05-14 09:35:54 +00:00
SHUCHI LILU
60bf6343be Merge "Update avc error on ROM 7358093" into sc-dev 2021-05-14 08:31:59 +00:00
sukiliu
53c9a79002 Update avc error on ROM 7358093
Bug: 188114822
Bug: 188114896
Test: PtsSELinuxTestCases
Change-Id: Ic5e865a921d0db981acfd936e1599a0ab220b975
2021-05-14 14:23:22 +08:00
Midas Chien
3c7b2a49d5 Merge "Allowed PowerHAL service access Display node" into sc-dev am: b610fd307e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14308761

Change-Id: Ic93bf422660a5423f29807f2b3858d6c5dc75c81
2021-05-14 06:03:07 +00:00
Midas Chien
b610fd307e Merge "Allowed PowerHAL service access Display node" into sc-dev 2021-05-14 05:47:32 +00:00
qinyiyan
989855def7 Add the TPU AIDL NNAPI HAL to the sepolicy.
Test: Created Forrest build and flashed to phone.
Bug: 187846367
Change-Id: I3ada9ecf3f94a594185049ddb95f13a6853841ba
2021-05-13 22:23:48 -07:00
SalmaxChang
1b6d7e0442 rfsd: fix permission error am: 30b9f8f277
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467419

Change-Id: Ie2c37b65f1d83e86eb9da49b8585e67bb4a83f59
2021-05-14 04:45:39 +00:00
SalmaxChang
30b9f8f277 rfsd: fix permission error
[RfsService::File] Failed to open file (4) (reason:Permission denied)

Bug: 187148595
Change-Id: Ia553bbc1e1c86b7740b3925679a2da65d3314714
2021-05-14 04:19:50 +00:00
Manish Varma
6dce8344b1 genfs_contexts: fix path for st21nfc i2c devices am: 705ecbe0ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538367

Change-Id: I5a7c64dc777368bed360839d9906bc60db0b3a9f
2021-05-14 03:00:39 +00:00
Manish Varma
babe6566a2 genfs_contexts: fix path for s2mpg1X i2c devices am: fd2a6b9a74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538366

Change-Id: I625538f50d3498a38552e8b43ea69898d1f02d6c
2021-05-14 03:00:38 +00:00
Manish Varma
b6aae5a059 genfs_contexts: fix path for cs40l25a i2c devices am: 194fef8b5a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538365

Change-Id: Ic58f5ad1a500a1f00caa16e1368a7392968f13d9
2021-05-14 03:00:38 +00:00
Manish Varma
81a8741a5d genfs_contexts: fix path for max77759tcpc i2c devices am: 3868f8aa88
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538364

Change-Id: Id7a7f9879b4f37978dcd61ba8a97fb275ef3b3f4
2021-05-14 03:00:36 +00:00
Manish Varma
bf803a2bef genfs_contexts: fix path for p9412 i2c devices am: b08c98c2b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14535947

Change-Id: If85a1882e5716cc31b8d1a46f3e60a95895c8352
2021-05-14 03:00:35 +00:00
Manish Varma
705ecbe0ab genfs_contexts: fix path for st21nfc i2c devices
Due to recent changes which modifies the device name for i2c devices,
st21nfc device names are now changed from ?-0008 to "i2c-st21nfc"

Bug: 188078957
Test: Verified haptic works and no avc denials when running following command:
$ dmesg | grep avc | grep sysfs
Signed-off-by: Manish Varma <varmam@google.com>
Change-Id: I17464d2d01fb64447dd8828eb8f91e38717fac4c
2021-05-13 17:43:26 -07:00
Manish Varma
fd2a6b9a74 genfs_contexts: fix path for s2mpg1X i2c devices
Due to recent changes which modifies the device name for i2c devices,
s2mpg1xmfd device names are now changed from ?-00?f to "i2c-s2mpg10mfd" or
"i2c-s2mpg11mfd"

Bug: 188078957
Test: Verified no avc denials when running following command:
$ dmesg | grep avc | grep sysfs

Signed-off-by: Manish Varma <varmam@google.com>
Change-Id: I2c58773613071147336b4f338e4c4034ce90e9bd
2021-05-13 17:42:08 -07:00
Manish Varma
194fef8b5a genfs_contexts: fix path for cs40l25a i2c devices
Due to recent changes which modifies the device name for i2c devices,
cs40l25a device names are now changed from ?-0043 to "i2c-cs40l25a"

Bug: 188078957
Test: Verified haptic works and no avc denials when running following command:
$ dmesg | grep avc | grep sysfs

Signed-off-by: Manish Varma <varmam@google.com>
Change-Id: I47c423661d788c467d4cd1602fbc145bd715c67a
2021-05-13 17:37:32 -07:00