Commit graph

2415 commits

Author SHA1 Message Date
Ted Lin
951ce82739 Using dontaudit to fix the avc on boot test
avc: denied { search } for comm="kworker/6:2" name="google_battery" dev="debugfs" ino=32648 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_battery_debugfs:s0 tclass=dir permissive=1

Bug:200739262
Test: Check bugreport
Change-Id: I50a96bab88f564fef0eda9a23bb77dc6ffed357f
Signed-off-by: Ted Lin <tedlin@google.com>
2021-09-28 03:21:38 +00:00
TreeHugger Robot
b608691d92 Merge "Add Context Hub AIDL to gs101 sepolicy" 2021-09-23 17:14:54 +00:00
Arthur Ishiguro
2bc80fd0e7 Add Context Hub AIDL to gs101 sepolicy
Bug: 194285834
Test: None
Change-Id: I8f9ef02c51d3f06bbfa94e9ce006cd2a0ee59c73
2021-09-23 08:16:01 -07:00
Erik Staats
2f3c410332 Revert "Allow the sensor HAL to access dynamic sensor properties." am: aef1a206a7 am: f66955e015
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15886140

Change-Id: I9ff54bc3528ad381e8b871f8fccdf1579e4dac43
2021-09-22 18:28:17 +00:00
Erik Staats
f66955e015 Revert "Allow the sensor HAL to access dynamic sensor properties." am: aef1a206a7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15886140

Change-Id: I8fa160db43cbe237c73cb103e6e212e1aa0df7a0
2021-09-22 18:11:29 +00:00
Erik Staats
aef1a206a7 Revert "Allow the sensor HAL to access dynamic sensor properties."
Revert "dynamic_sensor: Add sensor manager init to sub-HAL 2.1."

Revert submission 15874906-bug_195964858.2

Reason for revert: b/200815351
Reverted Changes:
I76a60f7fb:Allow the sensor HAL to access dynamic sensor prop...
I5d587dc46:dynamic_sensor: Add sensor manager init to sub-HAL...

Change-Id: Ib29649b058ec6f329958e1dfcba0c2e35ea79306
2021-09-22 17:53:58 +00:00
Erik Staats
0489fa3d2a Allow the sensor HAL to access dynamic sensor properties. am: fba4a09331 am: 9cadbdc347
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15874927

Change-Id: I252e8f01842ba5929dba7d8465140170e2a3f177
2021-09-22 12:58:02 +00:00
Erik Staats
9cadbdc347 Allow the sensor HAL to access dynamic sensor properties. am: fba4a09331
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15874927

Change-Id: I9022c4d8e270af3a0d369692a6996dd046c732c4
2021-09-22 12:40:34 +00:00
TreeHugger Robot
f89b55dcb0 Merge "organize wifi_sniffer" 2021-09-22 04:56:04 +00:00
Erik Staats
fba4a09331 Allow the sensor HAL to access dynamic sensor properties.
Bug: 195964858
Test: Verified dynamic sensor manager is present in sensor list and that
 no SELinux violations occur.
Test: See details in testing done comment in
 https://googleplex-android-review.git.corp.google.com/15874927 .
Change-Id: I76a60f7fbd113059156ccaea2c4f98580cb0836a
2021-09-20 16:53:16 -07:00
TreeHugger Robot
3b65e6f197 Merge "Split bluetooth sepolicy file to avoid conflict" 2021-09-17 08:46:42 +00:00
Adam Shih
22ed933f97 label extcon files
Bug: 199987074
Test: boot with no relevant errors
Change-Id: Idd26d8675c332043b1066e3eba1706527254eb03
2021-09-16 10:02:11 +08:00
sukiliu
2d2d6999d2 Update avc error on ROM 7733084
avc: denied { read } for comm="android.ui" name="extcon0" dev="sysfs" ino=72527 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0

Bug: 199987074
Test: PtsSELinuxTestCases
Change-Id: I1d160b06b4b0bba9402ae3de5f564d6f893505c1
2021-09-15 14:41:46 +08:00
Patty
9795c12e8f Split bluetooth sepolicy file to avoid conflict
- Move bluetooth related config to bluetooth folder

Bug: 196308076
Test: make; boot with service btlinux started
Change-Id: I8d40697f20a916fc154f0b60851abecd1deadc0d
2021-09-15 10:50:39 +08:00
Adam Shih
f97138a6bb organize wifi_sniffer
Bug: 196916111
Test: boot with wifi_sniffer started

Change-Id: If12fb0499c749e4e8379a5c2095fbf9cd2ca624e
2021-09-14 13:35:31 +08:00
Jonglin Lee
af3a79ed68 Merge "Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."" 2021-09-10 21:31:23 +00:00
Jonglin Lee
7254de258a Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."
Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."

Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."

Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."

Revert "Move sepolicy for _touchflow targets."

Revert submission 15676823-reflector-sepolicy

Reason for revert: breaking several builds in git_master-without-vendor
Reverted Changes:
Ifecfc81f0:Move twoshay definitions to hardware/google/pixel-...
Idfd81131c:Move twoshay definitions to hardware/google/pixel-...
Id2b0e1db3:Move twoshay definitions to hardware/google/pixel-...
I43ac6337f:Move twoshay definitions to hardware/google/pixel-...
If95e6e788:Move twoshay definitions to hardware/google/pixel-...
I07ab95780:Move sepolicy for _touchflow targets.
I01f378b51:Move sepolicy for _touchflow targets.

Bug: 199548147
Change-Id: I84f106c24bd47fd171788301415c0eabafe9254f
2021-09-10 21:23:57 +00:00
Philip Quinn
5c58949ac6 Merge "Move twoshay definitions to hardware/google/pixel-sepolicy/input." 2021-09-10 17:15:05 +00:00
Adam Shih
778f7da931 label Extcon files
Bug: 199218084
Test: Boot with target files labeled correctly
Change-Id: I7d8c4ecb23a5717e2265cfd66b161fb46717615f
2021-09-09 13:05:36 +08:00
Philip Quinn
d1dd6bac2a Move twoshay definitions to hardware/google/pixel-sepolicy/input.
Bug: 187654303
Test: twoshay works on r4
Change-Id: Id2b0e1db3e1cb9ddf579ea7ed74493464d13fc84
2021-09-08 13:22:24 -07:00
Adam Shih
82db60c2d4 remove obsolete devices
Bug: 196916111
Test: No file on the path
Change-Id: If8e54bd161bc955424b40023d94f15bf6b82cc8f
2021-09-08 13:15:44 +08:00
Mark Chang
0782cab4f0 Merge "sepolicy: Add "dontaudit" for twoshay dac_override." 2021-09-08 01:28:34 +00:00
Jenny Ho
7d27682911 sepolicy: add rule for new debug file node am: 17e518038e am: ee73f40872
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15756806

Change-Id: Ie03501a815a501184142af5f8dd0e4aa1df97729
2021-09-07 14:33:01 +00:00
Jenny Ho
ee73f40872 sepolicy: add rule for new debug file node am: 17e518038e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15756806

Change-Id: Ie913098b9b31e3c042abe13672fddc726cf4aef0
2021-09-07 14:21:17 +00:00
Mark Chang
8a5863ab6d sepolicy: Add "dontaudit" for twoshay dac_override.
Bug: 198755236
Test: build pass and boot to home
Signed-off-by: Mark Chang <changmark@google.com>
Change-Id: I5c330564cc026e113c5d33d5d093dbcdb3ede5e4
(cherry picked from commit a1aab562ca)
2021-09-06 13:08:59 +00:00
Jenny Ho
17e518038e sepolicy: add rule for new debug file node
W dumpstate@1.1-s: type=1400 audit(0.0:7): avc: denied { read } for name="logbuffer_maxfg_monitor" dev="tmpfs" ino=500 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0

Bug: 196755019
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: I0ddf68d5e15fe8d77d8d61287f65621c14024f46
2021-09-06 06:21:34 +00:00
Roshan Pius
a84423801e [automerger skipped] gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor am: 9c96111094 -s ours
am skip reason: Merged-In Ief48eacde68b062b2199b20c0c1bb3af23795240 with SHA-1 a3f040d2ac is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15686198

Change-Id: I33396a2698acc529851ddb4207168790540bcd14
2021-08-26 21:52:28 +00:00
Roshan Pius
9c96111094 gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor
Since we are now creating an AOSP HAL for uwb. Rename qorvo's internal
HAL to hal_uwb_vendor to avoid conflicts with the AOSP HAL sepolicy
rules.

Bug: 195308730
Test: Compiles
Change-Id: Ief48eacde68b062b2199b20c0c1bb3af23795240
Merged-In: Ief48eacde68b062b2199b20c0c1bb3af23795240
2021-08-26 20:02:20 +00:00
Roshan Pius
62f6dbd236 [automerger skipped] gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor am: a3f040d2ac -s ours am: 545771e074 -s ours
am skip reason: Merged-In Ief48eacde68b062b2199b20c0c1bb3af23795240 with SHA-1 04fbca104c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15678068

Change-Id: I5776eafb0a6ca87ba12432bfd8b24405b699311a
2021-08-26 04:25:54 +00:00
Roshan Pius
545771e074 [automerger skipped] gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor am: a3f040d2ac -s ours
am skip reason: Merged-In Ief48eacde68b062b2199b20c0c1bb3af23795240 with SHA-1 04fbca104c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15678068

Change-Id: I1ff7de7eba82ec1d804aa4d2e481303a6ed63252
2021-08-26 04:07:26 +00:00
Roshan Pius
dd586eb7b4 [automerger skipped] gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor am: 04fbca104c -s ours am: 4eeb587d95 -s ours am: 063cbb1b8f -s ours
am skip reason: skipped by user rpius

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15675687

Change-Id: I1f9c3293fa679d604f521115f4308aea6072ef4b
2021-08-26 01:36:02 +00:00
Roshan Pius
063cbb1b8f [automerger skipped] gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor am: 04fbca104c -s ours am: 4eeb587d95 -s ours
am skip reason: skipped by user rpius

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15675687

Change-Id: Ib6dafd7313c358327c24aa15196cd53d0d3c9840
2021-08-26 01:17:34 +00:00
Roshan Pius
a3f040d2ac gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor
Since we are now creating an AOSP HAL for uwb. Rename qorvo's internal
HAL to hal_uwb_vendor to avoid conflicts with the AOSP HAL sepolicy
rules.

Bug: 195308730
Test: Compiles
Change-Id: Ief48eacde68b062b2199b20c0c1bb3af23795240
Merged-In: Ief48eacde68b062b2199b20c0c1bb3af23795240
2021-08-26 01:07:43 +00:00
Roshan Pius
4eeb587d95 [automerger skipped] gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor am: 04fbca104c -s ours
am skip reason: skipped by user rpius

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15675687

Change-Id: I2d51df14c755847d1a270bdb98e9b702e22f8b7f
2021-08-26 01:01:24 +00:00
Victor Liu
16092c7774 [automerger skipped] uwb: permissions for factory uwb calibration file am: 29aa981623 am: 7a06a7a434 -s ours am: 441d9430ab -s ours
am skip reason: Merged-In I3e5282477fd391b483e03242ce0b806bd447dc54 with SHA-1 29aa981623 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315

Change-Id: I8e7f08993339f6cd1e6d39e7d8eaf1008827f4f1
2021-08-25 23:59:12 +00:00
Victor Liu
684c5ff75b [automerger skipped] uwb: permissions for factory uwb calibration file am: 29aa981623 am: 5dfabe8acf am: e877511429 -s ours
am skip reason: Merged-In I3e5282477fd391b483e03242ce0b806bd447dc54 with SHA-1 8383d9e13f is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315

Change-Id: Ie2eef5d497c17c4538febae8fb96e4d69d1caf10
2021-08-25 23:59:00 +00:00
Victor Liu
441d9430ab [automerger skipped] uwb: permissions for factory uwb calibration file am: 29aa981623 am: 7a06a7a434 -s ours
am skip reason: Merged-In I3e5282477fd391b483e03242ce0b806bd447dc54 with SHA-1 29aa981623 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315

Change-Id: I24b2da33bda30d057dab6812ec886615a3febb45
2021-08-25 23:42:11 +00:00
Victor Liu
e877511429 uwb: permissions for factory uwb calibration file am: 29aa981623 am: 5dfabe8acf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315

Change-Id: I35c0484a84695969e5f1f3e7cf2e8c7c06b4df3e
2021-08-25 23:41:44 +00:00
Victor Liu
7a06a7a434 uwb: permissions for factory uwb calibration file am: 29aa981623
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315

Change-Id: I9755128c2a7a1039cb3b1c5a2e3913a0965540d9
2021-08-25 23:29:50 +00:00
Victor Liu
5dfabe8acf uwb: permissions for factory uwb calibration file am: 29aa981623
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315

Change-Id: Ifa053b14b8fe06af7d076b103657ec7232aa8510
2021-08-25 23:29:46 +00:00
Victor Liu
29aa981623 uwb: permissions for factory uwb calibration file
add permission to:
copy factory uwb calib files from persist to /data/vendor/uwb
convert copied file to proper format for uwb stack to consume

Bug: 195659525
Signed-off-by: Victor Liu <victorliu@google.com>
Change-Id: I3e5282477fd391b483e03242ce0b806bd447dc54
Merged-In: I3e5282477fd391b483e03242ce0b806bd447dc54
2021-08-25 19:14:10 +00:00
Victor Liu
8383d9e13f uwb: permissions for factory uwb calibration file
add permission to:
copy factory uwb calib files from persist to /data/vendor/uwb
convert copied file to proper format for uwb stack to consume

Bug: 195659525
Signed-off-by: Victor Liu <victorliu@google.com>
Change-Id: I3e5282477fd391b483e03242ce0b806bd447dc54
2021-08-25 19:12:44 +00:00
Roshan Pius
04fbca104c gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor
Since we are now creating an AOSP HAL for uwb. Rename qorvo's internal
HAL to hal_uwb_vendor to avoid conflicts with the AOSP HAL sepolicy
rules.

Bug: 195308730
Test: Compiles
Change-Id: Ief48eacde68b062b2199b20c0c1bb3af23795240
Merged-In: Ief48eacde68b062b2199b20c0c1bb3af23795240
2021-08-25 17:32:53 +00:00
Roshan Pius
515c17c4e3 gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor
Since we are now creating an AOSP HAL for uwb. Rename qorvo's internal
HAL to hal_uwb_vendor to avoid conflicts with the AOSP HAL sepolicy
rules.

Bug: 195308730
Test: Compiles
Change-Id: Ief48eacde68b062b2199b20c0c1bb3af23795240
2021-08-23 09:03:06 -07:00
TreeHugger Robot
c507d41193 Merge "Allow boot color propagation" into sc-qpr1-dev am: 9c97417d3a am: c9690b1256 am: f3993d4555
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15600825

Change-Id: I7400f05e41c5bbb8bdf080879f41a429b0c2ba07
2021-08-21 17:14:18 +00:00
TreeHugger Robot
a6f6fe4d93 Merge "Allow boot color propagation" into sc-qpr1-dev am: 9c97417d3a am: c3521edd8c am: 4dce16cfef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15600825

Change-Id: I15e30c3a32ca4fb4777fae9d3bfb4d92c5c45205
2021-08-21 17:10:24 +00:00
TreeHugger Robot
f3993d4555 Merge "Allow boot color propagation" into sc-qpr1-dev am: 9c97417d3a am: c9690b1256
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15600825

Change-Id: I6d8905a45f5195294ca67d8cf21917779c6c3a0c
2021-08-21 17:10:21 +00:00
TreeHugger Robot
4dce16cfef Merge "Allow boot color propagation" into sc-qpr1-dev am: 9c97417d3a am: c3521edd8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15600825

Change-Id: Ie7fde3e797a018b74849b74543a1a0564d9141fd
2021-08-19 23:24:40 +00:00
TreeHugger Robot
c3521edd8c Merge "Allow boot color propagation" into sc-qpr1-dev am: 9c97417d3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15600825

Change-Id: Ibef6a94ac176f32b8bb0a87d3eb8283573bbcc74
2021-08-19 23:12:37 +00:00
TreeHugger Robot
c9690b1256 Merge "Allow boot color propagation" into sc-qpr1-dev am: 9c97417d3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15600825

Change-Id: I7c3f9be67d2e2ae13c034e4909c9ec589e38ccf2
2021-08-19 23:12:30 +00:00