Commit graph

3844 commits

Author SHA1 Message Date
Ken Tsou
3194ab09f9 [DO NOT MERGE] hal_health_default: access persist.vendor.shutdown.*
msg='avc: denied { set } for property=persist.vendor.shutdown.voltage_avg pid=908 uid=1000 gid=1000 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:vendor_default_prop:s0 tclass=property_service permissive=0'

Bug: 266181615
Change-Id: Ia87610f0363bbfbe4fe446244b44818c273841f4
Signed-off-by: Ken Tsou <kentsou@google.com>
2023-02-17 10:28:27 +00:00
Ken Tsou
6964113b1c hal_health_default: allow to access persist.vendor.shutdown.*
msg='avc: denied { set } for property=persist.vendor.shutdown.voltage_avg pid=908 uid=1000 gid=1000 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:vendor_default_prop:s0 tclass=property_service permissive=0'

Bug: 266181615
Change-Id: Ia87610f0363bbfbe4fe446244b44818c273841f4
Signed-off-by: Ken Tsou <kentsou@google.com>
2023-02-17 07:02:01 +00:00
Lucas Wei
6ef92ee0d1 Merge "votable: Update don't audit file entry" 2023-02-16 06:00:51 +00:00
TreeHugger Robot
afafde41a1 Merge "Update SELinux error" 2023-02-15 03:53:59 +00:00
Treehugger Robot
6c53f05cae Merge "Remove bug_map entry for incident" am: bc70a9f3df am: dfd9324aca am: 05d473ec62
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2436853

Change-Id: Ic2399bc1d08f5b79ac19e083595a0f0e3ba9233e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-15 03:27:43 +00:00
Lucas Wei
5a70bbb335 votable: Update don't audit file entry
Test: No votable avc errors in dmesg
Bug: 247905787
Change-Id: I95ab4dd7750e9b0f26d41fece50dc6d0aa73dd41
Signed-off-by: Lucas Wei <lucaswei@google.com>
2023-02-15 02:49:08 +00:00
leochuang
e5b2d04476 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 269218654
Test: scanBugreport
Bug: 269370106
Bug: 269045042
Change-Id: Ief58a1f19580251476c71602951550388015df01
2023-02-15 10:25:40 +08:00
Treehugger Robot
05d473ec62 Merge "Remove bug_map entry for incident" am: bc70a9f3df am: dfd9324aca
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2436853

Change-Id: I0c0386e02131db6c353f059ad1320f51027d9e6d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-15 02:23:51 +00:00
Treehugger Robot
dfd9324aca Merge "Remove bug_map entry for incident" am: bc70a9f3df
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2436853

Change-Id: I435bdfe151ffbb88e2b3e2f8360acfaf42093ee4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-15 01:36:50 +00:00
Treehugger Robot
bc70a9f3df Merge "Remove bug_map entry for incident" 2023-02-15 00:31:13 +00:00
Thiébaud Weksteen
10d08a16e1 Remove bug_map entry for incident
Bug: 238570971
Bug: 238571324
Bug: 238571420
Test: presubmit
Change-Id: Ib24d85aaed87e6e5dc0b0281d65407e8c45e017c
2023-02-15 10:19:58 +11:00
TreeHugger Robot
a6f9e17cd4 Merge "Update SELinux error" 2023-02-14 22:56:03 +00:00
Treehugger Robot
580fb1061d Merge "Map AIDL Gatekeeper to same policy as HIDL version" am: b72bb4c53f am: 114e2a377f am: 60fc07a2f5
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2424201

Change-Id: I269fe35ddd8dc13df7b275a84f86955e2853563a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-14 20:44:30 +00:00
Treehugger Robot
60fc07a2f5 Merge "Map AIDL Gatekeeper to same policy as HIDL version" am: b72bb4c53f am: 114e2a377f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2424201

Change-Id: I624db1bdd6fbe5de7d774954f5390fb0af884b77
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-14 19:41:20 +00:00
Treehugger Robot
114e2a377f Merge "Map AIDL Gatekeeper to same policy as HIDL version" am: b72bb4c53f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2424201

Change-Id: Ib469bb013d0c7335e2da4f429cde4c5df9395ed5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-14 18:56:35 +00:00
Android Build Coastguard Worker
50b0c84d12 Merge cherrypicks of ['googleplex-android-review.googlesource.com/21219300'] into tm-qpr2-release.
Change-Id: Iba513e117f9749ea342aa573120c758f4a14ba68
2023-02-14 18:20:12 +00:00
Ray Chi
beacc5b05f [ DO NOT MERGE ] usb: Add sepolicy for extcon access
USB gadget hal will access extcon folder so that this patch
will add new rule to allow USB gadget hal to access extcon.

Bug: 263435622
Test: verified pass
Change-Id: I8c265919f7ae4b18aa304b0a584536d2a0f4b27a
(cherry picked from commit 9828cc747a)
Merged-In: I8c265919f7ae4b18aa304b0a584536d2a0f4b27a
2023-02-14 18:13:34 +00:00
Treehugger Robot
b72bb4c53f Merge "Map AIDL Gatekeeper to same policy as HIDL version" 2023-02-14 17:48:17 +00:00
leochuang
14c66190df Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 269218654
Test: scanBugreport
Bug: 269218638
Change-Id: If7d4633aa4f4f10cf3b56640ae6661a2a9b20b91
2023-02-14 15:46:17 +08:00
Adam Shih
bd3291b1c0 Merge "Move memory dump to gs-common" 2023-02-14 07:22:12 +00:00
Adam Shih
9a7bb8df86 Move memory dump to gs-common
Bug: 240530709
Test: adb bugreport
Change-Id: I78433d8d170af54a4daee6c9a9218ce35e78e730
2023-02-13 14:56:30 +08:00
sukiliu
d48a10f9b0 Update SELinux error
Test: scanBugreport
Bug: 269045042
Change-Id: I6291a7d3fd3b75d68548bd2fb7287b8ff754684a
2023-02-13 10:41:23 +08:00
sukiliu
8835275413 Update SELinux error
Test: scanBugreport
Bug: 268411073
Bug: 268147283
Bug: 268146971
Change-Id: I60fdc8e3d44da7632522f57adc01c0e6879be83c
2023-02-10 10:20:35 +08:00
Subrahmanyaman
b4ec2efe4b Map AIDL Gatekeeper to same policy as HIDL version
Bug: 268342724
Test: VtsHalGatekeeperTargetTest
Change-Id: I050860bfeb0e87830e554ed19bc1efe54e7db0a5
2023-02-08 18:37:15 +00:00
Ken Yang
8e9fa12996 Merge "WLC: Add required sysfs_wlc sepolicies" 2023-02-05 02:30:37 +00:00
TreeHugger Robot
0e10d6a3d4 [automerger skipped] Merge "[ DO NOT MERGE ] usb: Add sepolicy for extcon access" into tm-qpr-dev am: 5dbdb799e8 am: 51d695553c -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21219300

Change-Id: I0205dc11ca3217914f9a13e38e7f4a05ccb4a128
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-04 05:07:14 +00:00
Ray Chi
809cff1a98 [automerger skipped] [ DO NOT MERGE ] usb: Add sepolicy for extcon access am: 9828cc747a am: 4003532648 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21219300

Change-Id: I68ba4f60cc25597b16c41da55c1bde935284fa07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-04 05:06:51 +00:00
TreeHugger Robot
51d695553c Merge "[ DO NOT MERGE ] usb: Add sepolicy for extcon access" into tm-qpr-dev am: 5dbdb799e8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21219300

Change-Id: Ia05aa347d9c71ab2cdf0b511c7d77ba5ab5b83e7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-04 04:37:07 +00:00
Ray Chi
4003532648 [ DO NOT MERGE ] usb: Add sepolicy for extcon access am: 9828cc747a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21219300

Change-Id: I2c4f5571065ac696d32f5050d6b94f7957ddce3c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-04 04:37:04 +00:00
Nicolas Geoffray
f485d48f43 Allow ssr_detector_app directory creation in system_app_data_file. am: 514eb95f8e am: 0090218108 am: fa4c9c92e0
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2419089

Change-Id: Ia166fb782bc79702f9f064cf326af5872bfc1fb4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-03 16:54:42 +00:00
Nicolas Geoffray
fa4c9c92e0 Allow ssr_detector_app directory creation in system_app_data_file. am: 514eb95f8e am: 0090218108
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2419089

Change-Id: Iab23f2032100e1105e1f1edaee8a4dd90f7ec2d9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-03 16:25:08 +00:00
Nicolas Geoffray
0090218108 Allow ssr_detector_app directory creation in system_app_data_file. am: 514eb95f8e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2419089

Change-Id: I510f6f8cc0dc2c609ec46a901738374bfd9d3217
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-03 15:34:58 +00:00
TreeHugger Robot
5dbdb799e8 Merge "[ DO NOT MERGE ] usb: Add sepolicy for extcon access" into tm-qpr-dev 2023-02-03 14:47:47 +00:00
Taylor Nelms
1a402cb6ba [automerger skipped] Modify permissions to allow dumpstate process to access decon_counters node am: ae39e117c1 am: c2769f1ede -s ours
am skip reason: Merged-In I71883632857e76cfead39b16560b3695e13a6746 with SHA-1 807f7b2efa is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21041858

Change-Id: I4349a6213feb8bc0700b769c66fb88582bbbb7f2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-03 14:17:03 +00:00
Taylor Nelms
c2769f1ede Modify permissions to allow dumpstate process to access decon_counters node am: ae39e117c1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21041858

Change-Id: I469375e8d9bf2fed575bbb9f972f4eeaa45fbb15
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-03 13:47:31 +00:00
Nicolas Geoffray
514eb95f8e Allow ssr_detector_app directory creation in system_app_data_file.
Bug: 260557058
Test: m
Change-Id: Iad7bb0609d7ca3ae89d6583ba3638e36300538a1
2023-02-03 13:06:50 +00:00
Ray Chi
9828cc747a [ DO NOT MERGE ] usb: Add sepolicy for extcon access
USB gadget hal will access extcon folder so that this patch
will add new rule to allow USB gadget hal to access extcon.

Bug: 263435622
Test: verified pass
Change-Id: I8c265919f7ae4b18aa304b0a584536d2a0f4b27a
2023-02-02 15:22:33 +08:00
Ken Yang
fcb9c033a1 WLC: Add required sysfs_wlc sepolicies
The sysfs_wlc is still required for certain services like
hal_health_default. Add these sepolicies to pass the tests.

Bug: 267171670
Change-Id: Ic4dca7a34e8ed9b096a650b1df4bb58290425117
Signed-off-by: Ken Yang <yangken@google.com>
2023-01-31 15:02:51 +00:00
Long Ling
fc3e9e0070 display: set context for sysfs file refresh_rate
Bug: 263821118
Change-Id: I125f8d0ed2f9197041f0913097d15a696c01a516
2023-01-26 18:45:53 -08:00
Victor Barr
0485b4848f Merge "Move Support for DBA HAL in common edgetpu packages" 2023-01-19 21:52:38 +00:00
Taylor Nelms
ae39e117c1 Modify permissions to allow dumpstate process to access decon_counters node
Bug: 240346564
Test: Build for Oriole device with "user" build,
check bugreport for decon_counters content
Merged-In: I71883632857e76cfead39b16560b3695e13a6746
Change-Id: I010a9e8809192a5a1ee5842d5ac973d874836cea
Signed-off-by: Taylor Nelms <tknelms@google.com>
2023-01-19 14:14:25 +00:00
Orion Hodson
5785d77564 Remove the dontaudit suppressions for dex2oat.te am: ad0f7df5bc am: a368aaa8ec am: 9d7b025bae
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2387656

Change-Id: I4552d3768617e79d04765aa29d7df332c5d7d665
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-18 14:00:09 +00:00
Orion Hodson
9d7b025bae Remove the dontaudit suppressions for dex2oat.te am: ad0f7df5bc am: a368aaa8ec
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2387656

Change-Id: If5d57e7c780fe8e9009e4c2ee4c3684a09e77e2b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-18 13:07:38 +00:00
Orion Hodson
a368aaa8ec Remove the dontaudit suppressions for dex2oat.te am: ad0f7df5bc
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2387656

Change-Id: I602d92ed12eadec42212dd2e43f6ea0f79ceadcb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-18 12:36:57 +00:00
Victor Barr
5eea830c6e Move Support for DBA HAL in common edgetpu packages
Previously supported in some cases. Now extend it to all common cases.

Bug: 263394888
Test: Built and ran DBA HAL on Android Device
Change-Id: I70db1fae6b9f5787c635bb2fcbabc7ee0e064a9f
2023-01-17 18:42:26 +00:00
Orion Hodson
ad0f7df5bc Remove the dontaudit suppressions for dex2oat.te
`system/sepolicy/private/dex2oat.te` has rules for these now.

Bug: 187016929
Test: m
Change-Id: Idb34a644af6620c45f044f98c3d2686fca8ced05
2023-01-17 15:02:07 +00:00
Xin Li
08d99bb5d8 [automerger skipped] Merge tm-qpr-dev-plus-aosp-without-vendor@9467136 am: 5fdee26b3a -s ours am: 5018f86e1b -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 1d7352fb4d is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20948074

Change-Id: I066524c9e981955ed37cba34cbda0651bbf82b98
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-13 21:35:43 +00:00
Ken Yang
fc2efe09bd Merge "WLC: Cleanup the sysfs_wlc policies" 2023-01-13 14:41:30 +00:00
Xin Li
5018f86e1b [automerger skipped] Merge tm-qpr-dev-plus-aosp-without-vendor@9467136 am: 5fdee26b3a -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 1d7352fb4d is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20948074

Change-Id: I6c28e85d988fc6a39b2162312b3a03ebba01f69a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-13 08:08:23 +00:00
Xin Li
5fdee26b3a Merge tm-qpr-dev-plus-aosp-without-vendor@9467136
Bug: 264720040
Merged-In: I09b67ca07d7f9573d77f64686fb818d4dc1753cc
Change-Id: Icb4114a0d002ce6bfe3f44e8d1a334fcd2d7fedd
2023-01-11 22:46:18 -08:00