Commit graph

2870 commits

Author SHA1 Message Date
Ray Chi
972e56e23e Allow hal_usb_gadget_impl to access proc_irq am: 7ac349e932
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17313628

Change-Id: I279c114f9ca5e8a9c78bf309e85d5b6acf95015d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 07:26:01 +00:00
Yichi Chen
25475ecc20 Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I4a7129b5a0603adfb240b40d4e387ca2d37606b0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 02:18:56 +00:00
Yichi Chen
650209645c Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev 2022-05-05 02:03:49 +00:00
William McVicker
c8483e6a7c Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: Id24eac6f29579f72012ba3bdd01e31764698ff5a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 16:38:52 +00:00
William McVicker
e6250cd86e Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev 2022-05-04 16:10:16 +00:00
Ray Chi
7ac349e932 Allow hal_usb_gadget_impl to access proc_irq
Bug: 224699556
Test: build pass
Change-Id: Id9a9adbdc921629b6e89d0850dd8acaf76b1a891
Merged-In: Id9a9adbdc921629b6e89d0850dd8acaf76b1a891
(cherry picked from commit 455c3c165348fa9ea65c65b004d4dda1426d04be)
2022-05-04 11:45:08 +00:00
Jenny Ho
eb4f7b7fcd Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: Ie8419db47dad53d206c2e124ef4de498f6980ed7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 13:31:17 +00:00
Jenny Ho
9b27bbdab6 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev 2022-05-03 10:39:21 +00:00
Will McVicker
12b3700a38 genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes
This adds the [067]-001f and [178]-002f raw i2c numberings to the
sepolicy for the P21-mainline driver which doesn't use the i2c vendor
hook to rename these numberings. This is required for the thermal hal to
work.

Bug: 231155356
Signed-off-by: Will McVicker <willmcvicker@google.com>
Change-Id: I8e4bbbd0768e63e708f46eb42bddb5fc28b29caa
2022-05-02 10:12:15 -07:00
Kris Chen
c6eea8a657 Allow hal_fingerprint_default to access hal_pixel_display_service
Fix the following avc denial:
avc: denied  { find } for pid=1158 uid=1000 name=com.google.hardware.pixel.display.IDisplay/default scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:hal_pixel_display_service:s0 tclass=service_manager permissive=0
avc: denied { call } for scontext=u:r:hal_fingerprint_default:s0 tcontext=u:r:hal_graphics_composer_default:s0 tclass=binder permissive=0

Bug: 229716695
Bug: 224573604
Test: build and test fingerprint on device.
Change-Id: Id24e65213221048d6dfdeae6ed2bcb7b762a0f75
2022-04-28 03:08:47 +00:00
Wei Wang
a68059705b allow udfps hal to access trusty am: 615f85c22d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I1859ad36b4a2e48d87533f22e777112fe6ac031b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 01:14:47 +00:00
Wei Wang
615f85c22d allow udfps hal to access trusty
Bug: 229350721
Bug: 230492593
Test: UDFPS with stress
Signed-off-by: Wei Wang <wvw@google.com>
Change-Id: Ib1abe0e0318689528a6658f3597f1c11ad9fa1c3
2022-04-27 20:20:43 +00:00
Jenny Ho
15036785cf sepolicy: allow access debugfs charger register dump
[  438.549652] type=1400 audit(1651035282.616:8): avc: denied { read } for comm="dumpstate@1.1-s" name="registers" dev="debugfs" ino=31549 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:debugfs:s0 tclass=file permissive=0
[  438.550252] type=1400 audit(1651035282.616:9): avc: denied { read } for comm="dumpstate@1.1-s" name="registers" dev="debugfs" ino=31532 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:debugfs:s0 tclass=file permissive=0

Bug: 230360103
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: I102a159ca23a65d99a52cac3d011f5ce535a37e7
2022-04-27 10:09:48 +00:00
Wei Wang
c0ed4a78b8 Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: Ic574e1c04ce02a80576bfaccad973636f33c0c6b
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 17:09:16 +00:00
Wei Wang
5e9a38799a Merge "Grant trusty to power hal" into tm-dev 2022-04-26 16:47:14 +00:00
Edmond Chung
2f238e9f71 Camera: add setsched capability. am: 2715a08a73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: Ia3a4c1e389e425634212e7579fade187243efcbe
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 08:29:17 +00:00
Edmond Chung
2715a08a73 Camera: add setsched capability.
The camera HAL needs to configure schedule policies for
performance optimizations.

Bug: 228632527
Test: GCA, adb logcat
Change-Id: Ifbf433c026549ca774a9521704d0b0b75c9e9f23
2022-04-24 23:08:42 +00:00
Wei Wang
1291c3cec9 Grant trusty to power hal
Bug: 229350721
Test: UDFPS with stress
Signed-off-by: Wei Wang <wvw@google.com>
Change-Id: Ia88d6cff1d21940e22ae5122dbfcf52de27ad700
2022-04-24 04:30:03 +00:00
chungkai
4f616aa515 sepolicy: Remove tracking denials files and fix avc problems am: 11770d9dfe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17874685

Change-Id: I85c2fa79161454f0b62fb26e5d4d6e1eda119062
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 07:46:52 +00:00
chungkai
11770d9dfe sepolicy: Remove tracking denials files and fix avc problems
04-19 10:53:57.364 W binder:575_2: type=1400 audit(0.0:17):
avc: denied { read } for name="wakeup11" dev="sysfs" ino=59892
scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir
permissive=0

Bug: 229670628
Test: pass
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I6a83b77c4a4bb836e4014cf865cb720a360fd981
2022-04-21 07:24:21 +00:00
Alistair Delva
c7ce4cc172 [automerger skipped] Merge "Remove sysfs_gpu type definition" am: e48b455651 am: f482ea00d9 am: 4f17770b62 -s ours am: 0007374b65 -s ours
am skip reason: Merged-In I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7 with SHA-1 f2be252260 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I137bebf3cb1b4846e96a793c57ae1c37a83ae86d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 05:28:14 +00:00
Alistair Delva
0007374b65 [automerger skipped] Merge "Remove sysfs_gpu type definition" am: e48b455651 am: f482ea00d9 am: 4f17770b62 -s ours
am skip reason: Merged-In I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7 with SHA-1 f2be252260 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I5e6e351d60353e593234ccb3732ee147c2e7d2d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 05:13:13 +00:00
Alistair Delva
4f17770b62 Merge "Remove sysfs_gpu type definition" am: e48b455651 am: f482ea00d9
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I0edd9718f21b1f31801a793a79dad5d3708b9c10
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 04:58:50 +00:00
Alistair Delva
f482ea00d9 Merge "Remove sysfs_gpu type definition" am: e48b455651
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I144bf39a8eb4c8fda36cfbceb03e7813faf31f3a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 04:43:57 +00:00
Alistair Delva
e48b455651 Merge "Remove sysfs_gpu type definition" 2022-04-21 04:21:45 +00:00
Xin Li
aa2787c19b [automerger skipped] Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047 am: 7a573b067c -s ours am: 104e2d21c2 -s ours am: 7111ceb7e8 -s ours
am skip reason: Merged-In I7f65597f91db5a16d4f9de4f6bb018bd5b50a965 with SHA-1 e60773b926 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17805214

Change-Id: If7d12942a5f6ab72e9f8d4d4c0f3699462dcb063
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 13:54:16 +00:00
Xin Li
7111ceb7e8 [automerger skipped] Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047 am: 7a573b067c -s ours am: 104e2d21c2 -s ours
am skip reason: Merged-In I7f65597f91db5a16d4f9de4f6bb018bd5b50a965 with SHA-1 e60773b926 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17805214

Change-Id: Icd2489bcc9f6e26fb8e76c0a774ca174e38fada5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 05:55:38 +00:00
Chung-Kai (Michael) Mei
0dc722363f Merge "sepolicy: fix avc denials" into tm-dev am: 1875f214c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17800050

Change-Id: I1952ee068a8dd42b7503cebe6bbb428194e5b3ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 03:02:04 +00:00
Chung-Kai (Michael) Mei
1875f214c6 Merge "sepolicy: fix avc denials" into tm-dev 2022-04-20 02:21:49 +00:00
Jason Macnak
d069ba4218 Merge "Remove sysfs_gpu type definition" into tm-dev am: d02d83f5c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17006942

Change-Id: I795ccdf8ba183f1d17ec21bba043826ff20819d9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 16:24:56 +00:00
Jason Macnak
d02d83f5c0 Merge "Remove sysfs_gpu type definition" into tm-dev 2022-04-19 15:59:07 +00:00
TreeHugger Robot
d7e21baa91 Merge "Grant policy for EWP feature" into tm-dev am: dd5c94ef1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17614595

Change-Id: I1695975184868790666c489c97d4c76dc215e892
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 12:03:58 +00:00
TreeHugger Robot
dd5c94ef1c Merge "Grant policy for EWP feature" into tm-dev 2022-04-19 11:40:02 +00:00
chungkai
19073ba66c sepolicy: fix avc denials
add potential paths for i2c peripheral devices
sine we enable parallel module loading

Bug: 229670628
Test: do bugreport without avc denials
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I6747e6d36731664d7f2fd88382c8a6189c936860
2022-04-19 06:10:34 +00:00
Xin Li
104e2d21c2 [automerger skipped] Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047 am: 7a573b067c -s ours
am skip reason: Merged-In I7f65597f91db5a16d4f9de4f6bb018bd5b50a965 with SHA-1 e60773b926 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17805214

Change-Id: I403afd3d5e0c240130d398c28118334b3d8934bd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 04:21:15 +00:00
Jason Macnak
f2be252260 Remove sysfs_gpu type definition
... as it has moved to system/sepolicy.

Bug: b/161819018
Test: presubmit
Change-Id: I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7
Merged-In: I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7
2022-04-18 22:45:55 +00:00
Xin Li
7a573b067c Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047
Bug: 226662282
Merged-In: I7f65597f91db5a16d4f9de4f6bb018bd5b50a965
Change-Id: I9a8579c87c05c1329fd5670f63d1edd848782334
2022-04-18 20:43:19 +00:00
Joshua Mccloskey
3a5f0310bf Merge "Allow platform apps to access FP Hal" into tm-dev am: 23d2a657fe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17624936

Change-Id: I7010b533a8d2b7ad8e406c7fb09db37cd780417e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 22:12:14 +00:00
Joshua Mccloskey
23d2a657fe Merge "Allow platform apps to access FP Hal" into tm-dev 2022-04-15 21:39:59 +00:00
Chung-Kai (Michael) Mei
51066df6e8 Merge "genfs_contexts: fix path for i2c peripheral device" into tm-dev am: 9309ec2609
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17751064

Change-Id: I688e2b44600519afdd1e218ff08f31c091851b4e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:28:21 +00:00
Chung-Kai (Michael) Mei
9309ec2609 Merge "genfs_contexts: fix path for i2c peripheral device" into tm-dev 2022-04-15 01:01:25 +00:00
Joshua McCloskey
517ab7da4d Allow platform apps to access FP Hal
Bug: 227247855
Test: Verified manually that the fingerprint extension is working.
Change-Id: Ia8fedcb373e23bf2103803195f844bf90b1807bc
2022-04-14 21:44:11 +00:00
Anthony Stange
53775b7e66 Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" into tm-dev am: 0cfdc0266c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17722708

Change-Id: I3a38beec03eee17f5d770832be5d8a83e654633b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 16:14:06 +00:00
Anthony Stange
0cfdc0266c Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" into tm-dev 2022-04-14 15:23:23 +00:00
chungkai
953583844f genfs_contexts: fix path for i2c peripheral device
paths are changed when we enable parallel module loading and
reorder the initializtaion of devices.

Test: without avc denial on R4/O6 when booting
Bug: 22754176
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: Ibcd5138170449e24115a0de5c3beda79914d1dc1
2022-04-14 04:45:41 +00:00
Anthony Stange
613bdcdec8 Update SELinux to allow CHRE to talk to the Wifi HAL
Bug: 206614765
Test: Run locally
Change-Id: I73bcf96ed1cab0a101e5f84852a1d82258b9c690
2022-04-12 20:58:12 +00:00
TreeHugger Robot
cc3d4cb61c Merge "sepolicy: Add policy for persist.vendor.udfps" into tm-dev am: 4e91f5530e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17180644

Change-Id: Ia1944b5875693f9aaddec3fcf5ba9a3bf29d0d5a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 11:16:04 +00:00
TreeHugger Robot
4e91f5530e Merge "sepolicy: Add policy for persist.vendor.udfps" into tm-dev 2022-04-12 10:56:32 +00:00
Darren Hsu
bf9775b008 sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5 am: 4df95c6d08 am: 9b9e2b4f3c am: acb5cc9e03
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630

Change-Id: I8d5451d9f90035d9a2096da9f93b1236c956c25b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 04:49:28 +00:00
Darren Hsu
acb5cc9e03 sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5 am: 4df95c6d08 am: 9b9e2b4f3c
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630

Change-Id: Ib0aa15719df8e4e0e7eb673b389d4e0b6be99640
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 04:19:48 +00:00