TreeHugger Robot
9c97417d3a
Merge "Allow boot color propagation" into sc-qpr1-dev
2021-08-19 22:52:31 +00:00
David Chen
9778b7a237
[automerger skipped] resolve merge conflicts of c0922582bc
to sc-v2-dev am: 462d4b1bcd
-s ours am: 381a1043e1
-s ours
...
am skip reason: Merged-In Ib95debbc9ce10919c5f935e8f70b340bb293b54a with SHA-1 c0922582bc
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15618916
Change-Id: I1d76d0032294bdb093426eab11720d9d8e788832
2021-08-19 08:52:39 +00:00
David Chen
381a1043e1
[automerger skipped] resolve merge conflicts of c0922582bc
to sc-v2-dev am: 462d4b1bcd
-s ours
...
am skip reason: Merged-In Ib95debbc9ce10919c5f935e8f70b340bb293b54a with SHA-1 c0922582bc
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15618916
Change-Id: I4cf911eb3be87f95df8310888a4b4d211fc576fb
2021-08-19 08:37:09 +00:00
David Chen
d4cef608f5
[automerger skipped] resolve merge conflicts of 945de94222
to sc-v2-dev-plus-aosp am: 28cd716faa
-s ours
...
am skip reason: Merged-In Ib95debbc9ce10919c5f935e8f70b340bb293b54a with SHA-1 6e7338095b
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15618917
Change-Id: I5e2af865dcdd230b501f6256af12396eb0a877e5
2021-08-19 04:14:39 +00:00
David Chen
462d4b1bcd
resolve merge conflicts of c0922582bc
to sc-v2-dev
...
Bug: 197164878
Change-Id: Ibc7ea7ffe9c30912c8e12d081a6b110f8e73f29f
Merged-In: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
2021-08-19 02:25:56 +00:00
David Chen
28cd716faa
resolve merge conflicts of 945de94222
to sc-v2-dev-plus-aosp
...
Bug: 197166084
Change-Id: I4b8b2d99db133be4c96853f072e3b10dbac39b92
Merged-In: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
2021-08-19 02:25:12 +00:00
davidycchen
945de94222
Allow twoshay to access fwk_stats_service and system_server am: c0922582bc
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15605516
Change-Id: I8a500539a2738d27fa47d2d3f45cfe5e68bfe099
2021-08-19 01:30:20 +00:00
Horng Chuang
b43621dd40
Merge "sepolicy: gs101: Grant permission for more camera device nodes"
2021-08-18 06:16:25 +00:00
Rick Yiu
076106a43b
Merge "gs101-sepolicy: Remove private/mediaprovider_app.te" into sc-v2-dev am: 26fec151ec
am: 7fcca345b0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15595122
Change-Id: Ib0b444122bc33f26149f5a655a3ed10496b7529e
2021-08-18 04:23:21 +00:00
Rick Yiu
7fcca345b0
Merge "gs101-sepolicy: Remove private/mediaprovider_app.te" into sc-v2-dev am: 26fec151ec
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15595122
Change-Id: Ic7d8107ef2e16a57e00de5080a86cdffa50c6791
2021-08-18 04:06:09 +00:00
Rick Yiu
26fec151ec
Merge "gs101-sepolicy: Remove private/mediaprovider_app.te" into sc-v2-dev
2021-08-18 03:46:01 +00:00
davidycchen
c0922582bc
Allow twoshay to access fwk_stats_service and system_server
...
avc: denied { find } for pid=813 uid=0
name=android.frameworks.stats.IStats/default scontext=u:r:twoshay:s0
tcontext=u:object_r:fwk_stats_service:s0 tclass=service_manager
avc: denied { call } for scontext=u:r:twoshay:s0
tcontext=u:r:system_server:s0 tclass=binder
Bug: 179334953
Test: Make selinux_policy and push related files to the device.
Signed-off-by: davidycchen <davidycchen@google.com>
Change-Id: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
Merged-In: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
2021-08-18 09:47:01 +08:00
Bart Van Assche
0b8782525b
Add the 'bdev_type' attribute to all block device types am: 37b5741301
am: 239bcceb78
am: 7513cd7ad6
am: 6828588c74
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922
Change-Id: I6b1d77a15fd0a9839e6aac3313fe2ed2148f8693
2021-08-18 01:36:09 +00:00
Bart Van Assche
23e753a813
Add the 'bdev_type' attribute to all block device types am: 37b5741301
am: 79b41e3c3a
am: 742ff4f98c
am: 65b8e1e433
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922
Change-Id: I370eedd4c90af9043c9d96b73c16e1aaf13bb835
2021-08-18 01:35:01 +00:00
Bart Van Assche
eeccb9bc7a
Add the 'bdev_type' attribute to all block device types am: 37b5741301
am: 239bcceb78
am: ea25044059
am: 07751567ad
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922
Change-Id: Ifac56b5f8a8e14ca55419e3009771644c3041df2
2021-08-18 01:32:55 +00:00
Bart Van Assche
6828588c74
Add the 'bdev_type' attribute to all block device types am: 37b5741301
am: 239bcceb78
am: 7513cd7ad6
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922
Change-Id: I5c32e5d3fdb511b5103dc2e0a24f837e714943b7
2021-08-18 01:26:07 +00:00
Bart Van Assche
65b8e1e433
Add the 'bdev_type' attribute to all block device types am: 37b5741301
am: 79b41e3c3a
am: 742ff4f98c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922
Change-Id: Ie24dd9a6de1a644b15eed4da713089cc6bcbefe6
2021-08-18 01:20:26 +00:00
Bart Van Assche
07751567ad
Add the 'bdev_type' attribute to all block device types am: 37b5741301
am: 239bcceb78
am: ea25044059
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922
Change-Id: I5d46eab501e1ce290570a69dde5450813eff0bf0
2021-08-18 01:20:15 +00:00
Bart Van Assche
742ff4f98c
Add the 'bdev_type' attribute to all block device types am: 37b5741301
am: 79b41e3c3a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922
Change-Id: I693db84157721b8ff20ae7bd8da213469352cc75
2021-08-18 01:01:59 +00:00
Bart Van Assche
7513cd7ad6
Add the 'bdev_type' attribute to all block device types am: 37b5741301
am: 239bcceb78
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922
Change-Id: Iedf50eb9fc1c205eb584c4c53ad7de45c06b695d
2021-08-18 00:56:43 +00:00
Bart Van Assche
ea25044059
Add the 'bdev_type' attribute to all block device types am: 37b5741301
am: 239bcceb78
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922
Change-Id: I0ca50d490ad5aa49bcc2f1c7db52f5b81a44dcd2
2021-08-18 00:56:43 +00:00
Bart Van Assche
239bcceb78
Add the 'bdev_type' attribute to all block device types am: 37b5741301
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922
Change-Id: I19d709e960fe8ccf066bdbd20dc6817ee20e55d0
2021-08-18 00:34:10 +00:00
Bart Van Assche
79b41e3c3a
Add the 'bdev_type' attribute to all block device types am: 37b5741301
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922
Change-Id: I52ac9161ae22eafecd60a8317370ddc3b243263d
2021-08-18 00:31:25 +00:00
Bart Van Assche
37b5741301
Add the 'bdev_type' attribute to all block device types
...
The following patch introduces code that iterates over all block
devices:
https://android-review.googlesource.com/c/platform/system/core/+/1783847/9
The following patch grants 'init' and 'apexd' permission to iterate over
all block devices:
https://android-review.googlesource.com/c/platform/system/sepolicy/+/1783947
The above SELinux policy change requires to add the 'bdev_type'
attribute to all block devices. Hence this patch.
Bug: 194450129
Bug: 196982345
Test: Built Android images that include this change and verified that neither init nor apexd triggers any SELinux access denied errors.
Change-Id: I6ce1127f199c5b33812f15fe280d86594d7d7ebf
Signed-off-by: Bart Van Assche <bvanassche@google.com>
2021-08-17 15:23:23 -07:00
Lucas Dupin
6e887cf3a0
Allow boot color propagation
...
Allows SystemUI to write the boot color sysprop
Test: manual
Bug: 190093578
Change-Id: I844a4dae87fe09a09ff3368c540ffab5f745d455
(cherry picked from commit 8a586e6786
)
2021-08-17 21:06:23 +00:00
Rick Yiu
6224fa9354
gs101-sepolicy: Remove private/mediaprovider_app.te
...
Moved to system/sepolicy to solve GSI avc denials.
Bug: 196326750
Test: build pass
Change-Id: I4bdcc1d49bf9550297687534074fd3fc526d3acc
2021-08-17 21:09:20 +08:00
TreeHugger Robot
deba8c8ff8
Merge "sepolicy: gs101: allows dock power supply permission"
2021-08-17 12:10:07 +00:00
TreeHugger Robot
e610648768
Merge "Allow boot color propagation"
2021-08-17 06:24:21 +00:00
Jack Wu
941a3bcd44
sepolicy: gs101: allows dock power supply permission
...
Bug: 196017001
Test: can dump dock power supply in dumpstate
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: Ie2781da77da0f181665974c335998a6dcb0e8ad2
2021-08-17 03:48:48 +00:00
Edmond Chung
3942238884
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
am: c45a1b5828
am: 36f756e44b
am: eb1a9fd509
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: I7535c119284ad37ac37bce996a4ec102a988f481
2021-08-16 23:37:41 +00:00
Edmond Chung
e8738b4d9b
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
am: c45a1b5828
am: 07fbe5b0d8
am: 4ee5ff59a0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: Ic29fbf1c300b42bcf3ec3dbef460030989ce5ea5
2021-08-16 23:37:35 +00:00
Edmond Chung
25ccfad161
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
am: d5f9036c8e
am: 9bde9324fe
am: ff5c485ddc
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: I0f9314f34e796e55e0adc47779f5e342ca6b3b84
2021-08-16 23:37:27 +00:00
Edmond Chung
eb1a9fd509
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
am: c45a1b5828
am: 36f756e44b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: I27bc0b77a3438fcaf6cbdf209945f6c7a360771c
2021-08-16 22:45:38 +00:00
Edmond Chung
4ee5ff59a0
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
am: c45a1b5828
am: 07fbe5b0d8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: I91b59573968bb3ad15f7785ac155809ae9a7cfdc
2021-08-16 22:45:01 +00:00
Edmond Chung
ff5c485ddc
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
am: d5f9036c8e
am: 9bde9324fe
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: I90884f92df1e42fa5b60ad47e914ed1460b40c04
2021-08-16 22:44:58 +00:00
Edmond Chung
36f756e44b
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
am: c45a1b5828
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: Id66f403466d50ea3beb4663cc137e551a92e16f3
2021-08-16 22:32:00 +00:00
Edmond Chung
07fbe5b0d8
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
am: c45a1b5828
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: Ia7663a410cd3ffcbb554dc653c2470e53efa2f4b
2021-08-16 22:32:00 +00:00
Edmond Chung
9bde9324fe
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
am: d5f9036c8e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: Ib347e1a8fbee1822542adf48a03f92dbdac3a302
2021-08-16 22:31:40 +00:00
Edmond Chung
c45a1b5828
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: I97f8f143230d13f64b34ee11c7a46cfcc5f2f3f9
2021-08-16 22:17:00 +00:00
Edmond Chung
d5f9036c8e
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: Icf58b2d5fef01a62ef5ec8c5009690224a15a939
2021-08-16 22:16:13 +00:00
Edmond Chung
7e581b9a7b
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev
2021-08-16 22:01:46 +00:00
Edmond Chung
6b30dbc54c
gs101: Allow camera HAL to access interrupt handles
...
This is to allow camera HAL to modify IRQ affinity for different use
cases.
Bug: 196058977
Test: Camera use cases
Change-Id: I498b0ac763b735d05299e1f4b09de14e131fd6e3
2021-08-16 10:52:27 -07:00
Rick Yiu
86d3394ebc
gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
am: 1f4c69a11d
am: 9c7ca5fdd3
am: 6ce26f4ea0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061
Change-Id: I7376da420b0720982e60b884aa392718d3997eb9
2021-08-16 14:40:42 +00:00
Rick Yiu
13c53ac53b
gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
am: 1f4c69a11d
am: d2f6cfc831
am: c3a47b14d5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061
Change-Id: Iea2ef6b78268f27e480a97a8699df8d65fcc6153
2021-08-16 14:40:37 +00:00
Rick Yiu
63a624e811
gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
am: 7b8fe23d74
am: fa5d13d6e1
am: 7b0fa572c3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061
Change-Id: I985dde431db9fa2f03f6036c139c6a653f3fe755
2021-08-16 14:40:25 +00:00
Rick Yiu
6ce26f4ea0
gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
am: 1f4c69a11d
am: 9c7ca5fdd3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061
Change-Id: I005a8c793d4d8919a1b8cb74528bb7063a7498cb
2021-08-16 14:26:27 +00:00
Rick Yiu
c3a47b14d5
gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
am: 1f4c69a11d
am: d2f6cfc831
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061
Change-Id: I64c32ca8b100ae5de316130875593ad6e1753744
2021-08-16 14:26:05 +00:00
Rick Yiu
7b0fa572c3
gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
am: 7b8fe23d74
am: fa5d13d6e1
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061
Change-Id: Ia05c12145187f2500010827b6e28ce5b56039511
2021-08-16 14:25:57 +00:00
Rick Yiu
9c7ca5fdd3
gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
am: 1f4c69a11d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061
Change-Id: I59e7baee2e2c5a80d53b5a6f5c8712a2b09a36d3
2021-08-16 14:11:45 +00:00
Rick Yiu
d2f6cfc831
gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
am: 1f4c69a11d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061
Change-Id: Ie4daa316c73721aa8cb9d87d262ba754fd926356
2021-08-16 14:11:43 +00:00