TreeHugger Robot
2391c852bd
Merge "Add sepolicy for sensor HAL accessing AOC sysfs node." into sc-dev
2021-05-03 07:42:00 +00:00
Chia-Ching Yu
3f91d6417a
Add sepolicy for sensor HAL to read lhbm
...
04-23 08:54:18.000 742 742 I /vendor/bin/hw/android.hardware.sensors@2.0-service.multihal: type=1400 audit(0.0:23): avc: denied { read } for comm=504F5349582074696D6572203430 name="local_hbm_mode" dev="sysfs" ino=70515 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_lhbm:s0 tclass=file permissive=1
Bug: 181617640
Test: Forrest build with this patch(ab/P22167685).
No local_hbm_mode related avc deined log.
Change-Id: Ibac3317cbca8652885310b1f5af8f4ea4d44a5c4
2021-04-29 03:00:19 +00:00
chiayupei
3fefc8a57b
Add sepolicy for sensor HAL accessing AOC sysfs node.
...
Bug: 177943509
Test: make selinux_policy -j128 and push to device.
No hal_sensors_default related avc deined log while suez polling.
Signed-off-by: chiayupei <chiayupei@google.com>
Change-Id: Ie32eaccf551fcb9f2d7bc763c801891f637ccc1a
2021-04-28 03:50:26 +08:00
Max Shi
55bd05960f
Add sepolicy for sensor HAL accessing AOC reset sysfs node.
...
Bug: 184858369
Test: Verify sensor HAL process can write to the sysfs node.
Change-Id: I9700323bafa413b88f25e4117499bcc936bce9c6
2021-04-15 23:37:15 +00:00
Vova Sharaienko
a0a8cb2dff
Stats: removed obsolete IStats HIDL sepolicies
...
Bug: 181887265
Test: Build, flash, and logcat for sepolicies messages
Change-Id: I702a8d59fadf04658addd6e3acf3a126a0a4cae7
2021-04-15 01:42:45 +00:00
Erik Staats
1082e886c0
Add policy for USF low latency transport gralloc usage.
...
Bug: 183233052
Test: Verified regular and direct report sampling on Raven with shared
memory transport enabled.
Test: See details in testing done comment in
https://googleplex-android-review.git.corp.google.com/14144079 .
Change-Id: Ia852a4a9ca6e8eacb0fb465884d17f95445a6822
2021-04-12 01:33:52 +00:00
Rick Chen
78047fa17b
sensors: Add sensor related rule to chre.
...
[ 8.417813] type=1400 audit(1615518074.988:4): avc: denied { write } for comm="sensors@2.0-ser" name="chre" dev="tmpfs" ino=908 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:chre_socket:s0 tclass=sock_file permissive=1
[ 8.418075] type=1400 audit(1615518074.988:5): avc: denied { connectto } for comm="sensors@2.0-ser" path="/dev/socket/chre" scontext=u:r:hal_sensors_default:s0 tcontext=u:r:chre:s0 tclass=unix_stream_socket permissive=1
03-12 11:01:14.988 694 694 I sensors@2.0-ser: type=1400 audit(0.0:5): avc: denied { connectto } for path="/dev/socket/chre" scontext=u:r:hal_sensors_default:s0 tcontext=u:r:chre:s0 tclass=unix_stream_socket permissive=1
Also merge two sensor_hal related files into single file.
Bug: 182523946
Test: make selinux_policy -j128 and push to device.
No hal_sensors_default related avc deined log during boot.
Signed-off-by: Rick Chen <rickctchen@google.com>
Change-Id: I49ce71ba4703528fb2e26dd8956c4ed741337ffc
2021-03-17 10:34:14 +08:00
Robin Peng
5009efa776
Move slider-sepolicy into gs101-sepolicy
...
from: 71e609c24c97fc8d44843af30527cbeb90d5dcdf
Bug: 167996145
Change-Id: Ie00e7e0983a3ca695bbd5140c929d07a80144301
2021-03-06 16:15:39 +08:00
