Darren Hsu
9b9e2b4f3c
sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5
am: 4df95c6d08
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630
Change-Id: I6648d98e50b0c8c01206071537fedbe4083e1f11
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 04:04:56 +00:00
Darren Hsu
4df95c6d08
sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630
Change-Id: I058cb3909d972cc5784e507fcb26b46196c33aa4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 03:39:39 +00:00
Badhri Jagan Sridharan
798cd60026
Merge "Allow usb hal to read contaminantdisable property" into tm-dev am: 93b8189c2b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17649293
Change-Id: I334c2578b4f6ad9488c670f5ea0c4a470cb30cdb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-11 22:44:22 +00:00
Badhri Jagan Sridharan
93b8189c2b
Merge "Allow usb hal to read contaminantdisable property" into tm-dev
2022-04-11 22:22:28 +00:00
Patty
40cd670c9f
Grant policy for EWP feature
...
Bug: 220121592
Test: Manual
Change-Id: I274a9519c40915cf65de45a3d8cf452faf16c8b4
2022-04-11 14:40:02 +08:00
Darren Hsu
3c11d8d1c5
sepolicy: label charger wakeups for system suspend
...
Bug: 226887726
Test: do bugreport without avc denials
Change-Id: I779b646846da90cdc710145e959644efc4733b3b
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-04-11 10:56:33 +08:00
Badhri Jagan Sridharan
a2f5fc80f4
[automerge] Allow usb hal to read contaminantdisable property 2p: 8606aa8a51
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17649293
Bug: 227792357
Change-Id: I0c6937f89bfadf38eb55dbb42a5d55ba8419750d
2022-04-08 00:26:04 +00:00
Badhri Jagan Sridharan
8606aa8a51
Allow usb hal to read contaminantdisable property
...
avc: denied { read } for comm="android.hardwar" name="u:object_r:vendor_usb_config_prop:s0"
dev="tmpfs" ino=367 scontext=u:r:hal_usb_impl:s0
tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=file permissive=0
Bug: 227792357
Change-Id: Id4d5ef7c214f0c0f672db28991b9fbe0152530b7
2022-04-07 17:21:15 -07:00
Chung-Kai (Michael) Mei
64e14e7379
Merge changes from topic "gs101_parallel_load_sepolicy" into tm-dev am: 9a909d4058
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17614589
Change-Id: I815bb946971fca3762647a3de3e00690557ecb95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 10:30:36 +00:00
Chung-Kai (Michael) Mei
9a909d4058
Merge changes from topic "gs101_parallel_load_sepolicy" into tm-dev
...
* changes:
sepolicy: ignore avc denial
genfs_contexts: fix path for i2c peripheral devices
2022-04-07 09:33:26 +00:00
Siddharth Kapoor
c4db9c9fee
Merge "Revert "Move ODPM file rule to pixel sepolicy"" into tm-dev am: 9d3a25fb29
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17609198
Change-Id: I74da1b4b3bcb1f7c7625c01a61590e8ea24da47c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 04:22:33 +00:00
Siddharth Kapoor
9d3a25fb29
Merge "Revert "Move ODPM file rule to pixel sepolicy"" into tm-dev
2022-04-07 04:06:31 +00:00
Siddharth Kapoor
86e649b033
[automerge] Revert "Move ODPM file rule to pixel sepolicy" 2p: 13f85a37f3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17609198
Change-Id: I1c17b6ecf4850e214e5c3beb88d26c70a368368c
2022-04-07 03:30:21 +00:00
Siddharth Kapoor
13f85a37f3
Revert "Move ODPM file rule to pixel sepolicy"
...
Revert "Move ODPM file rule to pixel sepolicy"
Revert submission 17215583-odpm_sepolicy_refactor-tm-dev
Reason for revert: build failure tracked in b/228261711
Reverted Changes:
Ic9a89950a:Move ODPM file rule to pixel sepolicy
I24105669b:Move ODPM file rule to pixel sepolicy
I044a285ff:Move ODPM file rule to pixel sepolicy
Change-Id: I36abfddaa5903739f9c5bf65d3c1cd506db9e604
2022-04-07 03:29:56 +00:00
chungkai
384218408f
sepolicy: ignore avc denial
...
dont audit since it's debugfs
Bug: 228181404
Test: forrest with boot test
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I7f2a85e2a405c78c9d8d11e9c2fdfdc5e87f7931
2022-04-06 09:21:24 +00:00
chungkai
8a19d8be9c
genfs_contexts: fix path for i2c peripheral devices
...
paths are changed when we enable parallel module loading and
reorder the initializtaion of devices.
Test: without avc denial on Raven
Bug: 227541760
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I7d835205696fd727e9be24fcf010ed44bcd5d6ae
2022-04-06 09:15:46 +00:00
Albert Wang
cd8219c7be
Add more xHCI wakeup path for suspend_control am: e60773b926
am: 092298b579
am: aed8848fb0
am: 7839be7474
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478
Change-Id: I1cfb6ac90a4eb6b3d9d6f046b30622936c27244e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 09:03:45 +00:00
Albert Wang
7839be7474
Add more xHCI wakeup path for suspend_control am: e60773b926
am: 092298b579
am: aed8848fb0
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478
Change-Id: I251a791b13d863de275ceffc3ba926db9a458c07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 08:42:39 +00:00
Albert Wang
aed8848fb0
Add more xHCI wakeup path for suspend_control am: e60773b926
am: 092298b579
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478
Change-Id: Ieaa74f326039e13ec8409167112c11b16cb47480
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 08:15:54 +00:00
Albert Wang
092298b579
Add more xHCI wakeup path for suspend_control am: e60773b926
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478
Change-Id: Ib07b92bf159c8b69dcdc7bc17e7f19a44aab20f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 08:00:41 +00:00
Sam Ou
24ef7db4f3
Merge "Move ODPM file rule to pixel sepolicy" into tm-dev am: de81154964
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17215583
Change-Id: I277d684d530ac6e4e96138c80bdc2021a7067220
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 02:37:54 +00:00
Sam Ou
de81154964
Merge "Move ODPM file rule to pixel sepolicy" into tm-dev
2022-04-06 02:09:38 +00:00
Xin Li
ed68f78914
[automerger skipped] Merge Android 12 QPR3 ab/8391262 am: 815b133c28
-s ours am: 4295b8c5bb
-s ours am: 6c7329e78a
-s ours
...
am skip reason: Merged-In I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7 with SHA-1 24b4d1b601
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17543362
Change-Id: Ibfff57b71a0653f295b56b6f55e8b46d6029cddb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-03 08:29:44 +00:00
Xin Li
6c7329e78a
[automerger skipped] Merge Android 12 QPR3 ab/8391262 am: 815b133c28
-s ours am: 4295b8c5bb
-s ours
...
am skip reason: Merged-In I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7 with SHA-1 24b4d1b601
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17543362
Change-Id: Iccd31c0bb403d722d24d093730327b024e4342ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-03 07:43:50 +00:00
Xin Li
4295b8c5bb
[automerger skipped] Merge Android 12 QPR3 ab/8391262 am: 815b133c28
-s ours
...
am skip reason: Merged-In I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7 with SHA-1 24b4d1b601
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17543362
Change-Id: I3183293f6ba3e1858233ce35170f935f3b03c1ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-03 07:11:50 +00:00
Xin Li
815b133c28
Merge Android 12 QPR3 ab/8391262
...
Bug: 226662282
Merged-In: I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7
Change-Id: Iccdf8b6a16f1d7a9ae0c9fd8cab14c5c55c6e64a
2022-04-01 20:32:12 +00:00
Albert Wang
e60773b926
Add more xHCI wakeup path for suspend_control
...
To addressdd the xHCI wakeup nodes permission problem, add new nodes:
/devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb2/wakeup
/devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb3/wakeup
avc: denied { read } for name="wakeup175" dev="sysfs" ino=162091
scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
android.system.suspend@1.0-service: Error opening kernel wakelock stats for: wakeup175
(../../devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb2/wakeup/
wakeup175): Permission denied
avc: denied { read } for name="wakeup176" dev="sysfs" ino=162107
scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
android.system.suspend@1.0-service: Error opening kernel wakelock stats for: wakeup176
(../../devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb3/wakeup/
wakeup176): Permission denied
Bug: 226056256
Test: test build to verify sepolicy log
Signed-off-by: Albert Wang <albertccwang@google.com>
Change-Id: I7f65597f91db5a16d4f9de4f6bb018bd5b50a965
2022-04-01 09:43:40 +08:00
sukiliu
5399644caa
Update avc error on ROM 8386107 am: ed3ac0623b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17517644
Change-Id: I7704592714dd04d336218bec57e252e0380ce7bf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-01 01:11:57 +00:00
sukiliu
ed3ac0623b
Update avc error on ROM 8386107
...
Bug: 226717475
Test: PtsSELinuxTestCases
Change-Id: Ia366a4ad0f193858960b7c5df34096bd2d4eada5
2022-03-31 15:48:04 +08:00
chungkai
7aca716ea5
sched: move sysfs to procfs am: de44d766e4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17347010
Change-Id: Idda51d821f6de51e84c02604aca300596712343b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-29 09:59:06 +00:00
chungkai
de44d766e4
sched: move sysfs to procfs
...
Modify name from sysfs_vendor_sched to proc_vendor_sched
Test: without avc denial
Bug: 216207007
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: Ic113b2d8ee1d3ae1ced9985636b17ef1e7657a84
2022-03-29 09:43:32 +00:00
KRIS CHEN
06394d5b72
Merge "Allow hal_fingerprint_default to access sysfs_display" into tm-dev am: 572a8a3372
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17397164
Change-Id: I8ffe6976412222ef7bbf553a5fd2e6c1d929ce2f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-29 02:06:05 +00:00
KRIS CHEN
572a8a3372
Merge "Allow hal_fingerprint_default to access sysfs_display" into tm-dev
2022-03-29 01:39:34 +00:00
KRIS CHEN
8c045a9bd7
Merge changes from topic "udfps-read-panel-name" into tm-mainline-prod
...
* changes:
[automerge] Allow hal_fingerprint_default to access sysfs_display 2p: 3df0d7812b
Allow hal_fingerprint_default to access sysfs_display
2022-03-29 01:39:34 +00:00
Darren Hsu
480c186de3
Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae
am: a0592e36d2
am: 24b4d1b601
am: 2650d53059
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864
Change-Id: I5fa279be9ddc199b16618cdd893a018576e05979
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-28 09:09:26 +00:00
Darren Hsu
2650d53059
Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae
am: a0592e36d2
am: 24b4d1b601
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864
Change-Id: Iacfa20c771905827c1299527dc2c66646ae18506
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-28 08:41:17 +00:00
Darren Hsu
24b4d1b601
Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae
am: a0592e36d2
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864
Change-Id: I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-28 08:17:33 +00:00
Darren Hsu
a0592e36d2
Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864
Change-Id: I3b5f155658676081c3248e67ee512c1ce301ab07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-28 07:51:38 +00:00
Chris Kuiper
db21528c29
Merge "Allow Sensor HAL access to display sysfs panel_name file." into tm-dev am: dfcef044a2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17308483
Change-Id: I90a697c2b3becf2a1f5e7275e395554798c02c82
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-25 17:07:24 +00:00
Chris Kuiper
dfcef044a2
Merge "Allow Sensor HAL access to display sysfs panel_name file." into tm-dev
2022-03-25 16:49:40 +00:00
Chris Kuiper
8cda712ebd
Merge changes from topic "alsp_g10_support" into tm-mainline-prod
...
* changes:
[automerge] Allow Sensor HAL access to display sysfs panel_name file. 2p: 28ddd3bf9f
Allow Sensor HAL access to display sysfs panel_name file.
2022-03-25 16:49:40 +00:00
Darren Hsu
aa644eeff6
Allow hal_power_stats to read sysfs_aoc_dumpstate am: 22def09e8a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17369587
Change-Id: I561057f688cffae94b613ef851963b77c961d5e8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-25 07:19:07 +00:00
Kris Chen
04ee13801b
[automerge] Allow hal_fingerprint_default to access sysfs_display 2p: 3df0d7812b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17397164
Bug: 223687187
Change-Id: Iddbb92bafceeed18afd86990f147695e06e093e0
2022-03-25 06:56:53 +00:00
Kris Chen
3df0d7812b
Allow hal_fingerprint_default to access sysfs_display
...
Fix the following avc denial:
avc: denied { read } for name="panel_name" dev="sysfs" ino=71133 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_display:s0 tclass=file permissive=0
Bug: 223687187
Test: build and test fingerprint on device.
Change-Id: Ic2b2cadb97f36643b79de6a8ebfe2232093fe7d7
2022-03-25 14:53:53 +08:00
Darren Hsu
f11f53a3ae
Allow hal_power_stats to read sysfs_aoc_dumpstate
...
avc: denied { read } for comm="android.hardwar" name="restart_count"
dev="sysfs" ino=72823 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs_aoc_dumpstate:s0 tclass=file permissive=0
Bug: 226173008
Test: check bugreport without avc denials
Change-Id: Ife3a7e00a1ffbcbed7fd8b744f2ac8910931a5fb
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-03-25 11:19:20 +08:00
Presubmit Automerger Backend
205a9c66bf
[automerge] Allow Sensor HAL access to display sysfs panel_name file. 2p: 28ddd3bf9f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17308483
Bug: 208926536
Change-Id: I4980d9c85cc71e5b373c76ed43ed03191d92b0c1
2022-03-25 01:03:03 +00:00
Chris Kuiper
28ddd3bf9f
Allow Sensor HAL access to display sysfs panel_name file.
...
Bug: 208926536
Test: Accessed the display sysfs from sensor HAL correctly.
Change-Id: Ide86813de20a1240f8ac55322b017329f30b296e
2022-03-24 17:55:43 -07:00
Darren Hsu
22def09e8a
Allow hal_power_stats to read sysfs_aoc_dumpstate
...
avc: denied { read } for comm="android.hardwar" name="restart_count"
dev="sysfs" ino=72823 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs_aoc_dumpstate:s0 tclass=file permissive=0
Bug: 226173008
Test: check bugreport without avc denials
Change-Id: Iccd8e4475ba6055d07aedc43de72bd39e6674469
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-03-24 14:53:24 +08:00
Stephane Lee
693413dc29
Fix off-mode (charger) sepolicy for the health interface am: 84a06151a3
am: c35357078d
am: 620e6038e2
am: 282c77a88f
...
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039624
Change-Id: I87fd048c19ca3c30cb6a3bbc0b6e366221bf9aad
2022-03-24 05:31:14 +00:00
Jack Wu
c842deb7b2
[automerger skipped] sepolicy: gs101: fix charger_vendor permission denied am: b67138e8ae
am: 28efee70de
am: d43cfef11c
-s ours am: 6abc9f674c
-s ours
...
am skip reason: Merged-In I091dbbca35fb833e59fdbc234d74b90bfe74014c with SHA-1 dcb05d1377
is already in history
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039623
Change-Id: Ia87df8c47b934dd1aebb551ed7da27dd0c896d54
2022-03-24 05:31:12 +00:00