Commit graph

1413 commits

Author SHA1 Message Date
Chiawei Wang
a1a00508b1 Merge "pixelstats: fix permission errors" into sc-dev am: 9cfc661bee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14781915

Change-Id: I89bbeeca2f88a9a82b5d7a1a66a70d16f79627ce
2021-06-03 09:03:14 +00:00
Chiawei Wang
9cfc661bee Merge "pixelstats: fix permission errors" into sc-dev 2021-06-03 08:45:12 +00:00
Chiawei Wang
9d5830ac19 pixelstats: fix permission errors
1. sysfs_dma_heap erros are fixed by ag/13926718
2. debugfs_mgm error is fixed by ag/14683912

Bug: 188114896
Bug: 183338421
Bug: 188495492
Test: pts-tradefed run pts -m PtsSELinuxTest
      http://sponge2/6cbd0af0-5414-4f2c-aea0-99b4981360a4

Signed-off-by: Chiawei Wang <chiaweiwang@google.com>
Change-Id: Icd2fa4e7f168d15fd4cec3000bc0e7a33eab4d3e
2021-06-03 02:52:33 +00:00
Rick Yiu
13a2d518cc Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f am: 3ad28926f7 am: 85aaaab7bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943

Change-Id: I392863914a6a87bcae0bcf5b0918372ad3d0ff10
2021-06-03 02:04:21 +00:00
Rick Yiu
92f4310aef Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f am: b6b7564259 am: ca8dc8bfe3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943

Change-Id: Iac5edca6ef8448f81a82ef720cf23587576abb98
2021-06-03 02:04:10 +00:00
Rick Yiu
85aaaab7bb Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f am: 3ad28926f7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943

Change-Id: Ia9a01e54849d669e01f97bff67570a3fcb2ae6c6
2021-06-03 01:37:53 +00:00
Rick Yiu
ca8dc8bfe3 Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f am: b6b7564259
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943

Change-Id: If3c7cef9f544fd8e038969952183e7f56b76a7a2
2021-06-03 01:36:08 +00:00
Rick Yiu
b6b7564259 Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943

Change-Id: Id352df8328a33017692f2a0df544b9db1556d1cf
2021-06-03 01:20:00 +00:00
Rick Yiu
3ad28926f7 Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943

Change-Id: I47a0e9367819d6ddd3b384f93c7199dead2e809e
2021-06-03 01:16:38 +00:00
Rick Yiu
b530a26f1f Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev 2021-06-03 00:56:00 +00:00
Peter Csaszar
44a98c9c17 pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719 am: c9da551db2 am: a6bde7a1d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010

Change-Id: Idbe7ddb81cf5c61e6ff1af3bbb2cedd88108459f
2021-06-02 21:35:09 +00:00
Peter Csaszar
2063a7ea18 pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719 am: 7a3703432e am: 72500dfbe6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010

Change-Id: I4d704e4a0b953b2fb78487252a1296ace9c208fb
2021-06-02 21:34:03 +00:00
Peter Csaszar
a6bde7a1d6 pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719 am: c9da551db2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010

Change-Id: Iac6d4896dcb274355ba690604399586e7923e49f
2021-06-02 21:17:34 +00:00
Peter Csaszar
72500dfbe6 pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719 am: 7a3703432e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010

Change-Id: I4f26f81458ce2205236a945fc8e0a236746a7921
2021-06-02 21:15:33 +00:00
Peter Csaszar
7a3703432e pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010

Change-Id: I943d236681c0c24d2c6f6a70eda2081c78abf9df
2021-06-02 20:59:29 +00:00
Peter Csaszar
c9da551db2 pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010

Change-Id: I2b1b51ecfec820558988666ab03082951dd21fec
2021-06-02 20:56:54 +00:00
Peter Csaszar
7ea6a44719 pixel-selinux: Add mlstrustedobject for SJTAG
This CL adds the "mlstrustedobject" to types for files involved in the
SJTAG authentication flow, in order to address MLS-based AVC denials.

Bug: 189466122
Test: No more AVC denials when activating SJTAG in BetterBug
Signed-off-by: Peter Csaszar <pcsaszar@google.com>
Change-Id: Ieb88653830ce95751eee5cf26c26fd6302067bce
2021-06-02 12:23:01 -07:00
Aaron Ding
8e334be407 pixel-selinux: add SJTAG policies am: 9f8d552411 am: 9a43bd9ead am: a260db294e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132

Change-Id: I647dfacb8ac1e72300dca6e61346d485524929f1
2021-06-02 07:10:34 +00:00
Aaron Ding
bbba17dde3 remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943 am: 2f3336940b am: 15e36312cd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004

Change-Id: If213a0c164c7bfeacee2779cb9391ce207998960
2021-06-02 07:10:30 +00:00
Aaron Ding
c1748eb562 pixel-selinux: add SJTAG policies am: 9f8d552411 am: 86e17fa6a1 am: ae49d5d313
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132

Change-Id: Ia90da11b5ff23e67d81d453b9b091f60e92db65c
2021-06-02 07:10:25 +00:00
Aaron Ding
b31322c604 remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943 am: 59a7ae7afe am: 28493f84c5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004

Change-Id: I19fd48abfa9f918f2628c234cbd7b98e9d8b915f
2021-06-02 07:10:15 +00:00
Aaron Ding
a260db294e pixel-selinux: add SJTAG policies am: 9f8d552411 am: 9a43bd9ead
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132

Change-Id: If999a72b561a4e3f0ebf9ce2ec1f082cb98adaa4
2021-06-02 06:51:46 +00:00
Aaron Ding
15e36312cd remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943 am: 2f3336940b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004

Change-Id: I21cad6d28945ae9cbb26e586d86ab1a02dbebb1e
2021-06-02 06:51:41 +00:00
Aaron Ding
ae49d5d313 pixel-selinux: add SJTAG policies am: 9f8d552411 am: 86e17fa6a1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132

Change-Id: I0c1b46866c6813baac6e409924bc5928e3b85d86
2021-06-02 06:48:58 +00:00
Aaron Ding
28493f84c5 remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943 am: 59a7ae7afe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004

Change-Id: I46dbfe1f8d6830eed0d651a291d90f7a2279ae07
2021-06-02 06:48:54 +00:00
Aaron Ding
86e17fa6a1 pixel-selinux: add SJTAG policies am: 9f8d552411
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132

Change-Id: I6ffbe3fc2053c12c4ef0138a9add21674955f2cb
2021-06-02 06:28:53 +00:00
Aaron Ding
59a7ae7afe remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004

Change-Id: Ifad186cc34fef21b4686fe328ca904b62ae86357
2021-06-02 06:28:49 +00:00
Aaron Ding
9a43bd9ead pixel-selinux: add SJTAG policies am: 9f8d552411
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132

Change-Id: Ia7c9bd89f0c958eeed16828186948a045044223a
2021-06-02 06:23:03 +00:00
Aaron Ding
2f3336940b remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004

Change-Id: I12715f8c51af7decc14aedf173e3bb13c8f51c1d
2021-06-02 06:22:59 +00:00
Rick Yiu
9e8bd699e9 gs101-sepolicy: Refine policy for sysfs_vendor_sched
Chagne it to directory based.

Bug: 182509410
Test: device boot normally
Change-Id: I1cfaa95cf07e1e829e747eb99ed39ab64d3ddac1
2021-06-02 04:52:45 +00:00
Aaron Ding
9f8d552411 pixel-selinux: add SJTAG policies
This reverts commit b078284e5d.

Bug: 184768605
Change-Id: Ib0080e2ba3edf7fa654155fb4a7403d52ad2494a
2021-06-02 10:25:51 +08:00
Aaron Ding
2dbe515943 remove sysfs_type from vendor_page_pinner_debugfs
Bug: 186500818
Change-Id: If97126a3d46d96342faf89b9698218b6a480a84b
2021-06-01 17:38:28 +08:00
Aaron Ding
badf5a5b1c Revert "pixel-selinux: add SJTAG policies" am: b078284e5d am: 2d35ae6cb8 am: da4f353e42
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664

Change-Id: I964163241b814415d6bfe9f45d66a224b1c773ae
2021-05-31 19:41:54 +00:00
Aaron Ding
ffe0233223 Revert "pixel-selinux: add SJTAG policies" am: b078284e5d am: 5825ee37e3 am: 2a1f5eb8b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664

Change-Id: I2e2fb9e52a52f4fbf24cf077d1b6ce24e305cbce
2021-05-31 19:41:44 +00:00
Aaron Ding
da4f353e42 Revert "pixel-selinux: add SJTAG policies" am: b078284e5d am: 2d35ae6cb8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664

Change-Id: Ib6b5b24801f721891ab64e09259217ca9d3ab954
2021-05-31 19:20:35 +00:00
Aaron Ding
2a1f5eb8b3 Revert "pixel-selinux: add SJTAG policies" am: b078284e5d am: 5825ee37e3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664

Change-Id: I3647845eba2262b9701d8c0a4c028473ba500a04
2021-05-31 19:17:45 +00:00
Aaron Ding
5825ee37e3 Revert "pixel-selinux: add SJTAG policies" am: b078284e5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664

Change-Id: I05c1e374972a89fe6d5dcd75f4c8fe41b383f3ff
2021-05-31 18:46:59 +00:00
Aaron Ding
2d35ae6cb8 Revert "pixel-selinux: add SJTAG policies" am: b078284e5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664

Change-Id: I819e31237595331138b5230a77d5f85dbd368bc0
2021-05-31 18:43:52 +00:00
Aaron Ding
b078284e5d Revert "pixel-selinux: add SJTAG policies"
This reverts commit bc525e1a49.

Bug: 186500818
Change-Id: I0bab67d42530270a819598ac320a5946e5d7aa6d
Signed-off-by: Aaron Ding <aaronding@google.com>
2021-06-01 01:21:14 +08:00
Vova Sharaienko
2aa6db04f9 Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a am: 977bc88d0b am: a4660c88a9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712

Change-Id: I4b945f561a0e50e7c057802dbe45fc57ca28054a
2021-05-28 18:45:35 +00:00
Vova Sharaienko
88bdaf0aa3 Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a am: e133184c45 am: d0fa6b0ab5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712

Change-Id: I1fe4d64caac6bb4ca7a5387484f44511f2e4e83b
2021-05-28 18:45:29 +00:00
Vova Sharaienko
a4660c88a9 Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a am: 977bc88d0b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712

Change-Id: I75846a70a82ecd1762fb9dbd20117d8627d8998e
2021-05-28 18:29:50 +00:00
Vova Sharaienko
d0fa6b0ab5 Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a am: e133184c45
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712

Change-Id: I9358a2cc6de91a13c46e868d8b80ae4cedc00758
2021-05-28 18:19:43 +00:00
Vova Sharaienko
977bc88d0b Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712

Change-Id: I4ea468c2ebfdec8a35bfb02897f411bb8c814f22
2021-05-28 18:06:52 +00:00
Vova Sharaienko
e133184c45 Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712

Change-Id: I19ce2ef9b6f771d35036dcd5fd8217bc8eb8219a
2021-05-28 17:59:27 +00:00
Vova Sharaienko
ce4002966a Merge "hal_health_default: updated sepolicy" into sc-dev 2021-05-28 17:42:45 +00:00
Rick Yiu
b92e2a4989 Merge "gs101-sepolicy: Allow dumping vendor groups values" into sc-dev am: 6c5779d0af am: 8b7354ea6c am: 25f9147d6e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692150

Change-Id: Ibb4c135171b788ed1aeb1db7273788d1be986f43
2021-05-28 02:33:58 +00:00
Rick Yiu
6d1fe62c79 Merge "gs101-sepolicy: Allow dumping vendor groups values" into sc-dev am: 6c5779d0af am: 32838e85d8 am: 94af2e728b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692150

Change-Id: Ie628b9da89e14551bfdba3777c0df783b39983f3
2021-05-28 02:33:26 +00:00
Rick Yiu
25f9147d6e Merge "gs101-sepolicy: Allow dumping vendor groups values" into sc-dev am: 6c5779d0af am: 8b7354ea6c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692150

Change-Id: I3a8ec644efa86e0e059ff043edfcce44e7e871d1
2021-05-28 02:09:45 +00:00
Rick Yiu
94af2e728b Merge "gs101-sepolicy: Allow dumping vendor groups values" into sc-dev am: 6c5779d0af am: 32838e85d8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692150

Change-Id: I4723916265a0301e4cb5b0bfac9e71e5c86acbc2
2021-05-28 02:06:23 +00:00