Commit graph

2415 commits

Author SHA1 Message Date
Vinay Kalia
68849437bd Allow mediacodec to access the vframe-secure DMA-BUF heap
This patch fixes the following denial:

HwBinder:751_2: type=1400 audit(0.0:9): avc: denied { open } for
path="/dev/dma_heap/vframe-secure" dev="tmpfs" ino=734
scontext=u:r:mediacodec:s0 tcontext=u:object_r:vframe_heap_device:s0
tclass=chr_file permissive=0

Bug: 188121584
Test: AV1 secure video playback

Signed-off-by: Vinay Kalia <vinaykalia@google.com>
Change-Id: I455b39914dd4316a427f5f756b4fb94a2c4db204
2021-05-24 23:57:28 +00:00
Ines Ayara
dfb3783187 Merge "Transition to using libedgetpu_util.so instead of libedgetpu_darwinn2.so. bug: b/182303547" into sc-dev 2021-05-24 23:55:32 +00:00
Roger Fang
a97bfcc1e1 sepolicy: gs101: add permission for the hardware info dsp part number
Bug: 188757638
Test: Manually test passed

Signed-off-by: Roger Fang <rogerfang@google.com>
Change-Id: Id0c3226411b058b613b92e67174f14e64c6c3a2b
2021-05-24 08:16:34 +00:00
Chase Wu
0924a30a37 Merge "genfs_contexts: fix path for cs40l25a i2c devices" into sc-v2-dev am: 80ab102382 am: 373fed0402
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14675588

Change-Id: I4c5e3bd7131eeca02c6acf1dcb0220dca87c8fc5
2021-05-24 01:35:39 +00:00
Chase Wu
373fed0402 Merge "genfs_contexts: fix path for cs40l25a i2c devices" into sc-v2-dev am: 80ab102382
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14675588

Change-Id: Id5204cd25e6fa512e485fc771cd1982b0e8f55dd
2021-05-24 01:20:31 +00:00
Chase Wu
80ab102382 Merge "genfs_contexts: fix path for cs40l25a i2c devices" into sc-v2-dev 2021-05-24 01:03:51 +00:00
Rick Yiu
5aeb1b9e45 gs101-sepolicy: Allow dumping vendor groups values
Fix:
avc: denied { read } for name="vendor_sched" dev="sysfs" ino=45566 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0

avc: denied { read } for name="dump_task_group_ta" dev="proc" ino=4026532542 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:proc:s0 tclass=file permissive=0

Bug: 172112042
Test: dump data as expected
Change-Id: I9945953dba4afddd34c1535c12193b1f00fdcef9
2021-05-22 21:30:47 +08:00
Grace Chen
9aac443958 Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c am: f8cf5a7354 am: 2930cbecc8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I3690feb255d227aebef57b9f33656590f5dcafc8
2021-05-21 19:54:23 +00:00
Grace Chen
b5b17de9f7 Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c am: ebadda8749 am: cd5abb427f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I6203e687fa579baa11bbe551cb1c0964f0d82791
2021-05-21 19:53:43 +00:00
Grace Chen
2930cbecc8 Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c am: f8cf5a7354
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I60b4d83788f3a3050341d5fea90500d193b69405
2021-05-21 19:39:12 +00:00
Grace Chen
cd5abb427f Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c am: ebadda8749
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I911c9d6ce67e9632b51dd1b6395cd59f59e1b29f
2021-05-21 19:37:36 +00:00
Grace Chen
ebadda8749 Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I62e7a0b9ff71f63221d6eaaad17a9333183912ec
2021-05-21 19:15:18 +00:00
Grace Chen
f8cf5a7354 Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I3ea91e07cb86b9ccbe5c27fdbd29eee2cb4512c6
2021-05-21 19:14:16 +00:00
Grace Chen
16a38b2b6c Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev 2021-05-21 19:10:52 +00:00
chasewu
168a6b0c72 genfs_contexts: fix path for cs40l25a i2c devices
Due to recent changes which modifies the device name for i2c devices,
cs40l25a device names are now changed from ?-0043 and ?-0042 to
"i2c-cs40l25a" and "i2c-cs40l25a-dual"

Bug: 188078957
Bug: 188651116
Test: manual check avc denied logs
Signed-off-by: chasewu <chasewu@google.com>
Change-Id: I97d3a030c94166f8e2cda7daa38166b1532b6d9f
2021-05-21 17:32:53 +08:00
TreeHugger Robot
af3d05b467 Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e am: 62e330941f am: 2181d522f2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: I7666583ab9d9d165f4438c6f5f116eb7f1203fa3
2021-05-21 07:35:50 +00:00
TreeHugger Robot
fe9ca33bd0 Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e am: 257af6acb7 am: dc8c0f809d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: I32937a8dc1ed31ece7ec8e83f0d03349c5c90c13
2021-05-21 07:35:12 +00:00
TreeHugger Robot
2181d522f2 Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e am: 62e330941f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: I63745fe15fde523fadda9500cd759c9b71e12ee7
2021-05-21 07:21:25 +00:00
TreeHugger Robot
dc8c0f809d Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e am: 257af6acb7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: Ib3e9bc54dc3bb1e8bbebe07fe75ed5c23a132076
2021-05-21 07:19:35 +00:00
TreeHugger Robot
257af6acb7 Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: I57862e73bb90e64631501678dac852a7e4d96d45
2021-05-21 06:59:14 +00:00
TreeHugger Robot
62e330941f Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: I1f5224c5e295837500f52c7f2a91c7cf0c12e748
2021-05-21 06:57:16 +00:00
TreeHugger Robot
b42a03fa9e Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev 2021-05-21 06:41:20 +00:00
SHUCHI LILU
85c06dce3c Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7 am: d041f55312 am: c685a924df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: Icc29858c5a94063aeec2f8647eafaf207bbe5bcc
2021-05-21 02:53:56 +00:00
SHUCHI LILU
f680c33593 Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7 am: aeb7f90af4 am: 119ce0c72d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: I857f5300f91a604aacc0154ec0c9fa3f11ff39bf
2021-05-21 02:53:03 +00:00
SHUCHI LILU
c685a924df Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7 am: d041f55312
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: Id1b3d85c7bd1ad4e4c223d0b8664f04ba519294e
2021-05-21 02:45:49 +00:00
SHUCHI LILU
119ce0c72d Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7 am: aeb7f90af4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: I24ff7f799fb7fbcf9ef61d95670f8838d7c8f361
2021-05-21 02:40:37 +00:00
SHUCHI LILU
d041f55312 Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: Ifa70b0837abb760f0d98ed67c2ecb00687e4ba04
2021-05-21 02:24:48 +00:00
SHUCHI LILU
aeb7f90af4 Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: I9ec909e4a4d07e8a46e6e4508b43a0ca8e5a5374
2021-05-21 02:22:40 +00:00
SHUCHI LILU
5128ec7db7 Merge "Update avc error on ROM 7380236" into sc-dev 2021-05-21 02:08:56 +00:00
TreeHugger Robot
fb3ed5bb15 Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c am: 91bf8bf616 am: 029e66f94a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: I0f7a9863564725aeffafb09d810342675932d319
2021-05-21 01:53:15 +00:00
TreeHugger Robot
c2f9f2d9cb Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c am: 69ccb014e3 am: addf784b3c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: I222d2ff6cf74f7d1d15c1e92fba62337fe9c3760
2021-05-21 01:51:59 +00:00
TreeHugger Robot
029e66f94a Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c am: 91bf8bf616
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: I256ec8b202ec7c76556be2bb6d80e414fde91b9d
2021-05-21 01:30:21 +00:00
TreeHugger Robot
addf784b3c Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c am: 69ccb014e3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: Ibb80f378387945abfefb7f33c53a297c3cdd0f7b
2021-05-21 01:28:45 +00:00
TreeHugger Robot
69ccb014e3 Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: Idf3d758f0b1f6781bd8771d8bc82af7f599a42be
2021-05-21 01:14:52 +00:00
TreeHugger Robot
91bf8bf616 Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: I462cc640fc849f81ecf49e3f39e802e7ab5fa483
2021-05-21 01:12:47 +00:00
TreeHugger Robot
73b7ad4a3c Merge "pixel-selinux: add SJTAG policies" into sc-dev 2021-05-21 00:49:42 +00:00
Maurice Lam
c0709a94c5 [automerger skipped] Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da -s ours am: 370ca9d7c9 am: d6ab0639e5 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: Ib7964ac511b3d3e29b8deb366bce4089c17b2196
2021-05-20 18:44:05 +00:00
Maurice Lam
a7e7b50ca6 [automerger skipped] Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da am: feba9d73d4 -s ours am: 93e06391c7 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: Ie4b0156aded91e90e3a276e8948fe57b18c00fbd
2021-05-20 18:43:44 +00:00
Maurice Lam
967e2b67cb [automerger skipped] DO NOT MERGE. Revert Exo selinux policies for S am: a1bf959f13 am: cfee7fe9bc -s ours am: a8607c248f -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: Id6387adf7313d0e16951c4728fb07e4be838ff7f
2021-05-20 18:43:43 +00:00
Maurice Lam
d6ab0639e5 [automerger skipped] Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da -s ours am: 370ca9d7c9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: I166892d8e696ee7f25ea415f4de1a474f8b8f75a
2021-05-20 18:13:42 +00:00
Maurice Lam
93e06391c7 [automerger skipped] Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da am: feba9d73d4 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: I85bc048c45e44478850f465ab715b2696d2bf9fa
2021-05-20 18:08:01 +00:00
Maurice Lam
a8607c248f [automerger skipped] DO NOT MERGE. Revert Exo selinux policies for S am: a1bf959f13 am: cfee7fe9bc -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: I05835e12536db178fbfc9fdfeade2be4dbe8e57a
2021-05-20 18:08:00 +00:00
Maurice Lam
370ca9d7c9 [automerger skipped] Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: I58c7628b630bb1c3b0d1433aa3dc0f5bf08a1c0a
2021-05-20 17:51:46 +00:00
Maurice Lam
feba9d73d4 Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: Id77a1e6b874638e4f12e2e885d1ccde957cb496c
2021-05-20 17:50:09 +00:00
Maurice Lam
cfee7fe9bc DO NOT MERGE. Revert Exo selinux policies for S am: a1bf959f13
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: I5bf8406b143b44e5b7442963d5174e3409726710
2021-05-20 17:50:08 +00:00
Maurice Lam
32848785da Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev 2021-05-20 17:31:08 +00:00
George Lee
f976b61580 Merge "power: mod sysfs_bcl path" into sc-dev am: 3561520ae2 am: a3b5872145 am: 754e75ce51
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14655334

Change-Id: Idcf8b2754c31c9709598d7881c2ef24a30f9f9a3
2021-05-20 16:00:08 +00:00
George Lee
1a9f861aaa Merge "power: mod sysfs_bcl path" into sc-dev am: 3561520ae2 am: aa5dc74e98 am: b32fe91162
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14655334

Change-Id: Ia9b2d1aad8103193a83feee1848ac169d34226cc
2021-05-20 15:59:58 +00:00
George Lee
754e75ce51 Merge "power: mod sysfs_bcl path" into sc-dev am: 3561520ae2 am: a3b5872145
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14655334

Change-Id: Ib058f0f463a099431e260816c68e58e08afbfc70
2021-05-20 15:51:57 +00:00
George Lee
b32fe91162 Merge "power: mod sysfs_bcl path" into sc-dev am: 3561520ae2 am: aa5dc74e98
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14655334

Change-Id: Ia749b07fe87455d6fe3bef4dbaaa480e362c672f
2021-05-20 15:46:08 +00:00