Commit graph

239 commits

Author SHA1 Message Date
Wilson Sung
0457dcec4d Update SELinux error am: 6efcea55dc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24079205

Change-Id: I10ce0072ec24ce79d565fbe485461325acd201df
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 14:37:05 +00:00
Wilson Sung
6efcea55dc Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 291237382
Change-Id: Ie3f2e61a1103edcaeffb985a926de1480f2ea7ef
2023-07-14 20:16:05 +08:00
Wilson Sung
1a71a9f40c Revert "Update SELinux error" am: 31e0460cba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23875101

Change-Id: Ia246bb019f0f7ebc4a0b7f14e993313480f48991
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 02:59:22 +00:00
Wilson Sung
31e0460cba Revert "Update SELinux error"
This reverts commit 12abc8ef4a.

Bug: 287169829
Change-Id: If92a6a0fc90d70a49999ce6004bcbd5d58565e51
2023-07-05 08:06:38 +00:00
Treehugger Robot
07ac120b87 Merge "Update SELinux error" into udc-dev am: bd7780a58a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: Ic4e1022e2a0aece2d52f141a133170fc06afbd9d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 02:11:35 +00:00
Wilson Sung
12abc8ef4a Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 287169829
Change-Id: I0a245d81ae243a0461c19583e19912566062bb71
2023-06-14 15:30:31 +08:00
Wilson Sung
0cb392ee18 Update SELinux error am: 20364fe3b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: I702a3d3ff9d5610173a5e9b7c69313bdf3e9af94
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 03:38:02 +00:00
Wilson Sung
20364fe3b3 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 281814691
Change-Id: I2f73f5b75aec1145dee615499a7442400defbf8a
2023-05-11 06:43:02 +00:00
Bruno BELANYI
af47588653 Merge changes from topic "hal_neuralnetworks_armnn-selinux-exceptions - udc" into udc-dev am: 88f5acac54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22787136

Change-Id: I9adc7d9c66163cc8f169d42d3561419593a4bb18
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:45:03 +00:00
Bruno BELANYI
0fa2fea833 Remove 'hal_neuralnetworks_armnn' sysprop exceptions am: b4001ec206
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786209

Change-Id: Ib278d5fc1ea4684f340cbf67ede663ac7c6d8494
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:44:56 +00:00
Bruno BELANYI
88f5acac54 Merge changes from topic "hal_neuralnetworks_armnn-selinux-exceptions - udc" into udc-dev
* changes:
  Remove 'hal_neuralnetworks_armnn' '/data' access exception
  Remove 'hal_neuralnetworks_armnn' sysprop exceptions
  Add ArmNN config sysprops SELinux rules
2023-04-27 08:06:48 +00:00
Bruno BELANYI
9702cb57f2 Remove 'hal_neuralnetworks_armnn' '/data' access exception
The mali driver has been configured not to look there anymore.

Bug: 205779871
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:347dfbe925e2218189d82d37697540af25401a22)
Merged-In: Ic8bf0d51414461689ee5768821a2a1acda923c41
Change-Id: Ic8bf0d51414461689ee5768821a2a1acda923c41
2023-04-26 17:21:18 +00:00
Bruno BELANYI
b4001ec206 Remove 'hal_neuralnetworks_armnn' sysprop exceptions
Bug: 205202540
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:e4254a16aa516f5960f48732b078aad4ed63df6f)
Merged-In: Ied38dc6b323911aa909f4f42b66ee404fc7062fa
Change-Id: Ied38dc6b323911aa909f4f42b66ee404fc7062fa
2023-04-26 17:20:54 +00:00
Adam Shih
843b0ad6b4 Update error on ROM 9930000
Bug: 277989397
Bug: 277155042
Bug: 277989067
Test: scanBugreport
Change-Id: I38a3f852e2f5f0f6895db15141825909361a267d
Merged-In: I38a3f852e2f5f0f6895db15141825909361a267d
2023-04-24 09:58:14 +08:00
Adam Shih
e10e338032 Update error on ROM 9930000
Bug: 277989397
Bug: 277155042
Bug: 277989067
Test: scanBugreport
Change-Id: I38a3f852e2f5f0f6895db15141825909361a267d
2023-04-13 10:15:11 +08:00
Adam Shih
69f0507e29 Remove obsolete entries
Bug: 269218638
Bug: 269218638
Bug: 269370106
Bug: 268411073
Bug: 276385941
Bug: 276385941
Bug: 268147283
Bug: 269045042
Bug: 238263438
Bug: 238143262
Bug: 264483156
Bug: 264483673
Bug: 269045042
Bug: 270247432
Test: adb bugreport
Change-Id: I29268e10a370146b5d3405edfdec35645a3adc35
Merged-In: If99cfe07ec85c285d2acdc712d5120c7ee6f06d9
2023-04-12 08:44:44 +08:00
Wilson Sung
c41cb55d4f Update SELinux error
Test: scanBugreport
Bug: 277528855
Change-Id: Ia59cd4045433f2e82a602672fe533e27e87b0275
2023-04-10 11:02:52 +08:00
Wilson Sung
816622f352 Update error on ROM 9891405
Bug: 277155042
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ic2129188db52ec85a8afaf92c507a42695e82804
2023-04-07 14:56:21 +08:00
Wilson Sung
083b5fe640 Merge "Update SELinux error" into udc-dev 2023-03-31 10:18:47 +00:00
Wilson Sung
accb299d5d Update SELinux error
Test: scanBugreport
Bug: 276385941
Change-Id: I54627db892f95ac7ee6e9b08762b7a72793d4a00
2023-03-31 10:55:58 +08:00
Wilson Sung
28afe7393f Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 275002227
Change-Id: If2133d83efbfa00ee9643a25047f465c60d2d3c4
2023-03-29 06:34:07 +00:00
chenkris
2bd6ae14f3 Remove tracking_denials/hal_fingerprint_default.te
Bug: 187015705
Bug: 183338543
Test: build and test fingerprint on device.
Test: no fingerprint avc denials in logcat.
Change-Id: I1dde2c0d8c8ab2610c2b8147c15ac5c9f813345a
2023-03-24 07:40:05 +00:00
leochuang
4fe64170d3 Update SELinux error
Test: scanBugreport
Bug: 270247432
Change-Id: Ia5e76ee1c027ac2b1cbbbc6a20a20f3ea609a1b7
2023-02-22 10:30:02 +08:00
Lucas Wei
6ef92ee0d1 Merge "votable: Update don't audit file entry" 2023-02-16 06:00:51 +00:00
TreeHugger Robot
afafde41a1 Merge "Update SELinux error" 2023-02-15 03:53:59 +00:00
Treehugger Robot
6c53f05cae Merge "Remove bug_map entry for incident" am: bc70a9f3df am: dfd9324aca am: 05d473ec62
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2436853

Change-Id: Ic2399bc1d08f5b79ac19e083595a0f0e3ba9233e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-15 03:27:43 +00:00
Lucas Wei
5a70bbb335 votable: Update don't audit file entry
Test: No votable avc errors in dmesg
Bug: 247905787
Change-Id: I95ab4dd7750e9b0f26d41fece50dc6d0aa73dd41
Signed-off-by: Lucas Wei <lucaswei@google.com>
2023-02-15 02:49:08 +00:00
leochuang
e5b2d04476 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 269218654
Test: scanBugreport
Bug: 269370106
Bug: 269045042
Change-Id: Ief58a1f19580251476c71602951550388015df01
2023-02-15 10:25:40 +08:00
Treehugger Robot
dfd9324aca Merge "Remove bug_map entry for incident" am: bc70a9f3df
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2436853

Change-Id: I435bdfe151ffbb88e2b3e2f8360acfaf42093ee4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-15 01:36:50 +00:00
Thiébaud Weksteen
10d08a16e1 Remove bug_map entry for incident
Bug: 238570971
Bug: 238571324
Bug: 238571420
Test: presubmit
Change-Id: Ib24d85aaed87e6e5dc0b0281d65407e8c45e017c
2023-02-15 10:19:58 +11:00
leochuang
14c66190df Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 269218654
Test: scanBugreport
Bug: 269218638
Change-Id: If7d4633aa4f4f10cf3b56640ae6661a2a9b20b91
2023-02-14 15:46:17 +08:00
sukiliu
d48a10f9b0 Update SELinux error
Test: scanBugreport
Bug: 269045042
Change-Id: I6291a7d3fd3b75d68548bd2fb7287b8ff754684a
2023-02-13 10:41:23 +08:00
sukiliu
8835275413 Update SELinux error
Test: scanBugreport
Bug: 268411073
Bug: 268147283
Bug: 268146971
Change-Id: I60fdc8e3d44da7632522f57adc01c0e6879be83c
2023-02-10 10:20:35 +08:00
Kyle Zhang
bfbf488408 Merge "Add hal_drm_widevine for Widevine exec sepolicy" 2023-01-11 05:37:46 +00:00
Adam Shih
d246880b0d update error on ROM am: 776148c936 am: 6dcabc08bf
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2376986

Change-Id: I546135adca5de40c7792405ba32d4f4cc8328424
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-06 05:05:08 +00:00
Kyle Zhang
902db3961f Add hal_drm_widevine for Widevine exec sepolicy
Bug: 243699259
Test: atp v2/widevine-eng/drm_compliance
Change-Id: Ifede19e690cb7b7333016df08fb146a0ec8f7409
2023-01-06 03:14:20 +00:00
Adam Shih
776148c936 update error on ROM
Bug: 242203678
Test: pass boot test
Change-Id: Ib50c5aed2787d068e589491373a75de47cbe48ee
Merged-In: Ifa7de8df3b09eabee7df8008dbb381854e18f48f
2023-01-06 02:42:14 +00:00
Adam Shih
afe63f78cc Update SELinux error
Test: scanBugreport
Bug: 264483673
Test: scanAvcDeniedLogRightAfterReboot
Change-Id: I954f764f035fcffa06c1c940bece36f0d7e42711
2023-01-05 13:38:16 +08:00
Adam Shih
46285b5dd5 Update SELinux error
Test: scanBugreport
Bug: 264483156
Change-Id: Ifa7de8df3b09eabee7df8008dbb381854e18f48f
2023-01-05 11:04:58 +08:00
Lucas Wei
8a9fd1b4aa votable: update SEpolicy error am: 5851e17605
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20265110

Change-Id: I3d444fed3a236050d00988b59a4237df3815f2e4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-24 03:28:26 +00:00
Lucas Wei
5851e17605 votable: update SEpolicy error
Bug: 247905787
Signed-off-by: Lucas Wei <lucaswei@google.com>
Change-Id: Ia6dfb7796ab46b0ac339b98465ccd91624b655ed
2022-10-23 23:23:41 +08:00
Thiébaud Weksteen
7d6c449261 Revert "Update SELinux error"
This reverts commit 286d40c81b.

Test: TH
Bug: 241172186
Bug: 241172220
Bug: 241172337
Bug: 241172391
Bug: 241172490
Change-Id: Id3453e85aee3ee8e0255d3e53f37ca4488d7c9f9
2022-08-15 13:47:56 +10:00
Adam Shih
286d40c81b Update SELinux error
Test: checkSensors
Bug: 241172337
Test: scanBugreport
Bug: 241172490
Test: testAtomicWrite
Bug: 241172490
Test: testConfigMaxSectorsKB
Bug: 241172490
Test: testDirectWriteNormalReadInEncryptedDir
Bug: 241172391
Test: testInvalidWrite
Bug: 241172490
Test: testLoopMaxPartDefined
Bug: 241172391
Test: testNormalWriteDirectReadInEncryptedDir
Bug: 241172490
Test: testPinFile
Bug: 241172490
Test: testSmallFileInEncryptedDir
Bug: 241172490
Change-Id: Iee5a8e6fff46b62ec0a448b05db64a788b7d08fb
2022-08-03 01:09:57 +00:00
Adam Shih
479986a020 Update SELinux error
Test: checkSensors
Bug: 240632824
Test: checkLockScreen
Bug: 240632824
Test: scanBugreport
Bug: 240632824
Change-Id: I4fee87636dc65765e4ab3e10e0b7080d7b4d44b2
2022-07-29 10:18:10 +08:00
Kyle Lin
3014f97824 Merge "Remove dontaudit since read early_wakeup completed" 2022-07-28 02:51:37 +00:00
Stephane Lee
faec9385c4 Bug fixed in ag/19153533
Bug: 238143381
Test: N/A
Change-Id: If527ea681abaa221e55533a3dab1371ecac7a3b2
2022-07-22 16:55:24 -07:00
Jimmy Shiu
55d41f1a3e Remove dontaudit since read early_wakeup completed
The display file node, early_wakeup, just for trigger the worker for
display and it doesn't have meaningful read function. But PowerHAL read
all nodes and try to dump their valuesi while triggering bugreport. As
the read operation has been completed, so we can remove the clause.

07-02 00:53:56.888   522   522 W android.hardwar: type=1400 audit(0.0:8): avc: denied { dac_read_search } for capability=2 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0
07-02 00:53:56.888   522   522 W android.hardwar: type=1400 audit(0.0:9): avc: denied { dac_override } for capability=1 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0

Bug: 221384860
Bug: 192617242
Bug: 171760921
Test: adb shell dumpsys android.hardware.power.IPower/default
Change-Id: If0018499cc19f79819ef69794d7672d5a53de74e
2022-07-18 11:08:58 +08:00
Minchan Kim
86ef69850b Remove vendor_init.te from tracking_denials
Since last error fixed, remove the vendor_init.te from tracking_denials.

Bug: 190337297
Signed-off-by: Minchan Kim <minchan@google.com>
Change-Id: I5178c864a70748c1dddf8c08baa8d653cd0225d9
2022-07-15 05:10:55 +00:00
Adam Shih
32d987cd24 Update SELinux error
Bug: 234547283
Change-Id: I50bd66a22755eefe7aa24ec1042e3b6cb627ad3d
2022-07-15 00:30:47 +00:00
Adam Shih
74d2d8963f Update error on ROM 8820442
Bug: 238825802
Test: testSysfsHealth
Change-Id: I607f78de19b18b258309f89669ded393dd74a2a7
2022-07-13 11:01:28 +08:00