Commit graph

2415 commits

Author SHA1 Message Date
Rick Yiu
fa5d13d6e1 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 7b8fe23d74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I2837b12374957c35725af2f4aed49ada200810ff
2021-08-16 14:11:31 +00:00
Rick Yiu
1f4c69a11d gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I54a069f83c389b69a73d9d4d64a34177ba652d1c
2021-08-16 13:54:58 +00:00
Rick Yiu
7b8fe23d74 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I1870542193c2b06de1f1e53f38e84fb800a74839
2021-08-16 13:54:01 +00:00
Rick Yiu
2ef3daba50 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials
Use untrusted_app_all to cover all Use untrusted_app versions.

Bug: 196109806
Test: no untrusted_app denials for vendor_sched
Change-Id: Ic6426b26b8a05f8a0bc7e2a4a4a293b2988812d3
2021-08-16 13:40:32 +00:00
horngchuang
e212167642 sepolicy: gs101: Grant permission for more camera device nodes
Bug: 193103432
Test: aosp camera
Change-Id: Ic921200f05092c217d9c3d859ed33b5dc8e5b44b
2021-08-16 08:40:25 +00:00
Victor Liu
4c1a135b46 allow uwb hal sys_nice access am: 39b5815a1e am: 9d2d70e09b am: 9d0c136cf6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: I7022d884e08a03739fa753b606bab9c3bafae882
2021-08-14 00:21:46 +00:00
Victor Liu
ee1c9d29b2 uwb: allow uwb to access the radio service am: 0c429efc07 am: e4ee9723f4 am: 2fdbcbea3e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I068782dac351717c63def8cec0057f1425ddf9c4
2021-08-13 23:42:43 +00:00
Victor Liu
9d0c136cf6 allow uwb hal sys_nice access am: 39b5815a1e am: 9d2d70e09b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: I64e3b902d5a83a50d296439779dc252f159ba66d
2021-08-13 23:39:35 +00:00
Victor Liu
2fdbcbea3e uwb: allow uwb to access the radio service am: 0c429efc07 am: e4ee9723f4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: Ie3cb7e9c74f07966c249bf67e50a80af810f6e38
2021-08-13 23:34:11 +00:00
Victor Liu
d75e7326f1 allow uwb hal sys_nice access am: 39b5815a1e am: 21d74ff50f am: ecceee1ddc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: I0379b550ceea8c5656d9fc26a556c0fbb48e0150
2021-08-13 22:09:09 +00:00
Victor Liu
ecceee1ddc allow uwb hal sys_nice access am: 39b5815a1e am: 21d74ff50f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: Ie7d5132a50e0d0f7e8db35d512a70ef6b932ab68
2021-08-13 22:07:02 +00:00
Victor Liu
de55d68c2f uwb: allow uwb to access the radio service am: 0c429efc07 am: 19b1a2feef am: 243649da79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I8909e4d78ea1b2dd3bc0ae7492f2c6b846f6f253
2021-08-13 22:03:02 +00:00
Lucas Dupin
8a586e6786 Allow boot color propagation
Allows SystemUI to write the boot color sysprop

Test: manual
Bug: 190093578
Change-Id: I844a4dae87fe09a09ff3368c540ffab5f745d455
2021-08-13 21:52:50 +00:00
Victor Liu
243649da79 uwb: allow uwb to access the radio service am: 0c429efc07 am: 19b1a2feef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I264015c73d5a4a61712726192c7ee3160704dc02
2021-08-13 21:31:06 +00:00
Victor Liu
9d2d70e09b allow uwb hal sys_nice access am: 39b5815a1e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: Ib8b61cc66bd2919360e05434f147f495fcacb156
2021-08-13 02:41:53 +00:00
Victor Liu
21d74ff50f allow uwb hal sys_nice access am: 39b5815a1e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: Ib6d841a96f4ce29a077ec11d10d411e985b110f0
2021-08-13 02:41:52 +00:00
Victor Liu
39b5815a1e allow uwb hal sys_nice access
hardware.qorvo.: type=1400 audit(0.0:9): avc: denied { sys_nice } for capability=23 scontext=u:r:hal_uwb_default:s0 tcontext=u:r:hal_uwb_default:s0 tclass=capability permissive=0
hardware.qorvo.: type=1400 audit(0.0:9): avc: denied { setsched } for scontext=u:r:hal_uwb_default:s0 tcontext=u:r:kernel:s0 tclass=process permissive=0

Bug: 196438549
Signed-off-by: Victor Liu <victorliu@google.com>
Change-Id: I742bae701cfcc7b4842cd63abbc8c275d82c8ba1
2021-08-12 16:11:06 -07:00
Victor Liu
19b1a2feef uwb: allow uwb to access the radio service am: 0c429efc07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I9814b50afb037f6ac6405d3bcc16b3b10723fa3a
2021-08-12 21:57:11 +00:00
Victor Liu
e4ee9723f4 uwb: allow uwb to access the radio service am: 0c429efc07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I4bc3d385c8895137bf62640c06592907ccd495b0
2021-08-12 21:57:10 +00:00
Victor Liu
0c429efc07 uwb: allow uwb to access the radio service
07-07 18:28:28.391   409   409 E SELinux : avc:  denied  { find } for pid=4609 uid=1083 name=isub scontext=u:r:uwb_vendor_app:s0:c59,c260,c512,c768 tcontext=u:object_r:radio_service:s0 tclass=service_manager permissive=0

Bug: 192833779
Test: on device, no avc denied message
Change-Id: I4a6b778dce6f493093d3a05683473bb60e9cfa5c
2021-08-10 22:47:35 +00:00
TreeHugger Robot
ff88615a29 Merge "Remove ndk_platform backend. Use the ndk backend." 2021-08-10 04:36:22 +00:00
Siqi Lin
65c8707a99 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e am: c8836d9832 am: a77182f6d7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I196c7a0ba2852258a62df0ef090017d97e53608c
2021-08-09 20:52:35 +00:00
Siqi Lin
0d2d997d5d Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e am: b8d0fd0524 am: 142fb69223
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I01455ac7bea1764b52efbcf5d20f588c6ad8c567
2021-08-09 20:52:19 +00:00
Siqi Lin
2af36e8664 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 1a27d3d66e am: 4ae3686490 am: c5ba760b93
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: Iaa4691b168df18a81701230c9f2ce1647b234b90
2021-08-09 20:52:07 +00:00
Siqi Lin
a77182f6d7 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e am: c8836d9832
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: Id49e827dbe531c49a04406988a406ea56c9d8cd9
2021-08-09 20:35:04 +00:00
Siqi Lin
142fb69223 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e am: b8d0fd0524
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I6520f674c942b505cffc597b649b628b68cb543b
2021-08-09 20:34:32 +00:00
Siqi Lin
c5ba760b93 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 1a27d3d66e am: 4ae3686490
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I34c4308d929e5582bf499d424fcf8a2a050d9d55
2021-08-09 20:34:24 +00:00
Siqi Lin
b8d0fd0524 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I53399fad7b0eff5eca806a42d359e403cab58305
2021-08-09 20:20:19 +00:00
Siqi Lin
c8836d9832 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I16b13385bd0a66983999b3b2f4518c0a07387068
2021-08-09 20:20:19 +00:00
Siqi Lin
4ae3686490 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 1a27d3d66e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I238779e171a5600af4c94e9d72fd38b1c71c23f7
2021-08-09 20:20:00 +00:00
Siqi Lin
505d9d692e Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I7c546f38519158fa1237e713bb1200e304a82650
2021-08-09 20:05:08 +00:00
Siqi Lin
1a27d3d66e Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I3f6115d79ff01ba2afb58704fd1fba63a0c3acab
2021-08-09 20:03:56 +00:00
Siqi Lin
df73384b2e Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev 2021-08-09 19:52:02 +00:00
TreeHugger Robot
729a089db3 Merge "Add sepolicy to allow camera HAL to read display backlight" into sc-dev am: cfcf725081 am: 6727e33988 am: fc17b58a75
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15453996

Change-Id: I665e79870ddc3cfccc96401b1cfbe638d8ebf0a4
2021-08-06 14:49:34 +00:00
TreeHugger Robot
30f9fc6299 Merge "Add sepolicy to allow camera HAL to read display backlight" into sc-dev am: cfcf725081 am: f30a67df8a am: 89a3d8f1e0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15453996

Change-Id: I538d9c42acc9ae78657c34718fd7cb3b0a8ec475
2021-08-06 14:49:23 +00:00
TreeHugger Robot
fc17b58a75 Merge "Add sepolicy to allow camera HAL to read display backlight" into sc-dev am: cfcf725081 am: 6727e33988
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15453996

Change-Id: I1b5491335981d38723d132ee178e107c9df354bb
2021-08-06 14:33:17 +00:00
TreeHugger Robot
89a3d8f1e0 Merge "Add sepolicy to allow camera HAL to read display backlight" into sc-dev am: cfcf725081 am: f30a67df8a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15453996

Change-Id: I1ce748fa2ccad6668f826e2ef2b2b54635f40cbc
2021-08-06 14:32:57 +00:00
TreeHugger Robot
f30a67df8a Merge "Add sepolicy to allow camera HAL to read display backlight" into sc-dev am: cfcf725081
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15453996

Change-Id: I495b9411ea69f6aca5a201c3f6b4e8c464906a9f
2021-08-06 14:17:49 +00:00
TreeHugger Robot
6727e33988 Merge "Add sepolicy to allow camera HAL to read display backlight" into sc-dev am: cfcf725081
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15453996

Change-Id: I98b62dffd1fa65bd69bff78b0a5fe11a841efdfb
2021-08-06 14:16:48 +00:00
TreeHugger Robot
cfcf725081 Merge "Add sepolicy to allow camera HAL to read display backlight" into sc-dev 2021-08-06 14:04:38 +00:00
Jiyong Park
5cc5d52bd7 Remove ndk_platform backend. Use the ndk backend.
The ndk_platform backend will soon be deprecated because the ndk backend
can serve the same purpose. This is to eliminate the confusion about
having two variants (ndk and ndk_platform) for the same ndk backend.

Bug: 161456198
Test: m

Change-Id: Icc9af3798ac89742fa56b1cb37d8116d99b4a9c2
2021-08-06 19:58:01 +09:00
Siqi Lin
57d81aa6c1 sepolicy: gs101: allow dumpstate to access AoC stats
Add AP wakeups from AoC DRAM exceptions to bugreports.

Bug: 186456919
Change-Id: I31df82addf1b5024b8e33c6284e5da1f473ac5d9
2021-08-05 10:47:13 -07:00
Alice Yang
0d7ab6ea8b Add sepolicy to allow camera HAL to read display backlight
Add sepolicy to allow camera HAL to read display backlight to use in
gabc algorithm.

Bug: 187917645
Test: build pass,  go/p21-camera-test-checklist
Change-Id: I628ee2dedd48dd1360d0818137ba9139ae194029
2021-08-03 16:31:12 +00:00
Erik Staats
f12ab4e795 Merge "Allow sensor HAL to read AoC dumpstate." into sc-dev am: 1b7ae244b0 am: 0bb21fc708 am: 72af0dda60
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15444398

Change-Id: Ic5c473755a1b4de7d6771f5ac47360387933cce4
2021-08-03 16:19:24 +00:00
Erik Staats
e91814f278 Merge "Allow sensor HAL to read AoC dumpstate." into sc-dev am: 1b7ae244b0 am: 0965462752 am: 9c236ad524
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15444398

Change-Id: Ia0073382a4b065fdff267fc53f56a8200493e1b0
2021-08-03 16:18:56 +00:00
Erik Staats
72af0dda60 Merge "Allow sensor HAL to read AoC dumpstate." into sc-dev am: 1b7ae244b0 am: 0bb21fc708
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15444398

Change-Id: Idc01ba0b18e3bb496a1be4a69e2d5d4dd2cf9989
2021-08-03 16:05:10 +00:00
Erik Staats
9c236ad524 Merge "Allow sensor HAL to read AoC dumpstate." into sc-dev am: 1b7ae244b0 am: 0965462752
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15444398

Change-Id: I0e34dd9fad73d3e21af3b1618c34290863c6160c
2021-08-03 16:04:39 +00:00
Erik Staats
0965462752 Merge "Allow sensor HAL to read AoC dumpstate." into sc-dev am: 1b7ae244b0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15444398

Change-Id: I0a50040b067368b556535064a715cbdeb0782a19
2021-08-03 15:49:33 +00:00
Erik Staats
0bb21fc708 Merge "Allow sensor HAL to read AoC dumpstate." into sc-dev am: 1b7ae244b0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15444398

Change-Id: Ie5f9c63a4e4eba2c74b667fa8bd5a50a716d3ee9
2021-08-03 15:47:34 +00:00
Erik Staats
1b7ae244b0 Merge "Allow sensor HAL to read AoC dumpstate." into sc-dev 2021-08-03 15:27:12 +00:00