Midas Chien
c88435dc47
Merge "Allowed PowerHAL service access Display node" into sc-dev am: b610fd307e
am: d2e21ded9a
am: c5d3b92fe5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14308761
Change-Id: I0e8573afece7fe30bb218bde22510bfeb29935bd
2021-05-18 13:28:28 +00:00
SalmaxChang
f4b979cf7f
rfsd: fix permission error am: 30b9f8f277
am: 272b4e5590
am: 4c134fec1b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467419
Change-Id: I0d3ee4e34ea238c410222c8caabe52573af06bb1
2021-05-18 13:28:21 +00:00
Manish Varma
6021febd2c
genfs_contexts: fix path for st21nfc i2c devices am: 705ecbe0ab
am: 4aa4640559
am: a5a368cdfc
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538367
Change-Id: I2f4729c09419c0c852e1e5e47d8232deac3fcb25
2021-05-18 13:28:13 +00:00
Manish Varma
3f343b7b2c
genfs_contexts: fix path for s2mpg1X i2c devices am: fd2a6b9a74
am: a592b23a80
am: 03657f8e3a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538366
Change-Id: I51931583362903d08cc8962eb38f499493d7145d
2021-05-18 13:28:12 +00:00
Manish Varma
1f6bee9cb4
genfs_contexts: fix path for cs40l25a i2c devices am: 194fef8b5a
am: 67d28bdf03
am: 459bdb2a40
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538365
Change-Id: I9c538a63d33730aea7175754625d7af2fcdf028e
2021-05-18 13:28:11 +00:00
Manish Varma
739bbced69
genfs_contexts: fix path for max77759tcpc i2c devices am: 3868f8aa88
am: aaee225e77
am: db3f825375
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538364
Change-Id: Ide601be79ed433a0831c0b1432e5efa524dac52b
2021-05-18 13:28:10 +00:00
Manish Varma
a08d344be1
genfs_contexts: fix path for p9412 i2c devices am: b08c98c2b4
am: 9ba9e2a783
am: 529d215c31
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14535947
Change-Id: I653d91e668e5fbaa3004fbc0ecdc499a53b8aa19
2021-05-18 13:28:09 +00:00
TreeHugger Robot
8b4923b7c8
Merge changes from topic "186500818-set1" into sc-dev am: 775771b811
am: a019f35a3b
am: c833549d8c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14490413
Change-Id: I24fc274705adfec6ee3060a67829a9e6726550b6
2021-05-18 13:27:55 +00:00
Vineeta Srivastava
0bf4c5c898
Merge "Add sepolicy for the UDFPS antispoof property" into sc-dev am: 14a07e230a
am: 4d42a986f8
am: 5e7734b411
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467424
Change-Id: I6251fb8f52360cfa753797212ad088ad3ff7fb54
2021-05-18 13:26:17 +00:00
jintinglin
3be06b2ec9
logger_app: Fix avc errors
...
avc: denied { read } for name="level" dev="sysfs" ino=57112 scontext=u:r:logger_app:s0:c29,c257,c512,c768 tcontext=u:object_r:sysfs_sscoredump_level:s0 tclass=file permissive=0 app=com.android.pixellogger
Bug: 187909426
Change-Id: I2037b1d2613736c8e1789bc96bfd4be0168444e0
2021-05-18 18:46:00 +08:00
Roger Fang
9de2688cd4
sepolicy: gs101: add IAudioMetricExt settings
...
E init : Could not start service 'audiometricext' as part of class 'hal': File /vendor/bin/hw/vendor.google.audiometricext@1.0-service-vendor(labeled "u:object_r:vendor_file:s0")
vendor.google.a: type=1400 audit(0.0:3): avc: denied { read } for name="u:object_r:hwservicemanager_prop:s0" dev="tmpfs" ino=188 scontext=u:r:hal_audiometricext_default:s0 tcontext=u:object_r:hwservicemanager_prop:s0 tclass=file permissive=1
E SELinux : avc: denied { find } for interface=vendor.google.audiometricext::IAudioMetricExt sid=u:r:hal_audiometricext_default:s0 pid=819 scontext=u:r:hal_audiometricext_default:s0 tcontext=u:object_r:default_android_hwservice:s0 tclass=hwservice_manager permissive=1
E SELinux : avc: denied { add } for interface=android.hidl.base::IBase sid=u:r:hal_audiometricext_default:s0 pid=795 scontext=u:r:hal_audiometricext_default:s0 tcontext=u:object_r:hidl_base_hwservice:s0 tclass=hwservice_manager permissive=1
Bug: 180627405
Test: manually test passed
Signed-off-by: Roger Fang <rogerfang@google.com>
Change-Id: I91d76eb0ad5850e75ad865304d83f3025b981915
2021-05-18 05:06:58 +00:00
Gary Jian
b9e4f7a759
Add permission to access audiometricext hal for grilservice_app
...
Bug: 182526894
Test: Manual
Change-Id: I3ca85be7e5ab244e2dea2c6f7768f59c07b44525
2021-05-18 02:18:56 +00:00
TreeHugger Robot
3075216794
Merge "genfs_contexts: Specify correct GPU clock hint node" into sc-dev am: ac53196839
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14599591
Change-Id: Ifc1411973f3dcb258d3673e05d8d519e9132cd64
2021-05-18 00:54:21 +00:00
TreeHugger Robot
843c90e0ae
Merge "Grant dumpstate hal read permission of camera hal dump files" into sc-dev am: 09a98d233d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604511
Change-Id: I96a4843b04f81194053e1c552757b76bb6f0a134
2021-05-18 00:53:51 +00:00
TreeHugger Robot
ac53196839
Merge "genfs_contexts: Specify correct GPU clock hint node" into sc-dev
2021-05-18 00:50:53 +00:00
TreeHugger Robot
09a98d233d
Merge "Grant dumpstate hal read permission of camera hal dump files" into sc-dev
2021-05-18 00:42:12 +00:00
Yu-Chi Cheng
e8ee41f9af
Renamed edgetpu_service to edgetpu_app_service.
...
edgetpu_service was splitted into two in previous change:
edgetpu_service and edgetpu_vendor_service, where the new
vendor service for vendor clients, and the old service keeps
serving app clients.
This change updated the SELinux policy to rename the edgetpu_service
into edgetpu_app_service to make the purpose clearer.
Bug: 188463446
Test: Oriole + GCA
Change-Id: I3a133319edc84fc02ef211934d0542575580da14
2021-05-17 15:38:24 -07:00
Zhijun He
a8ceb3a751
Grant dumpstate hal read permission of camera hal dump files
...
Test: Build and capture bugreport
Bug: 178737594
Change-Id: Iae9792a75dec574ff9fe0d246a7c166221565b16
2021-05-17 14:23:46 -07:00
Minchan Kim
2d7105504c
sepolicy: gs101: allow duump page_pinner am: 304a32c17e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14472545
Change-Id: Ibae22fcdcc54e799d249da2049877764ff81f79f
2021-05-17 18:49:05 +00:00
TreeHugger Robot
cf875452ff
Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: d4f9ef4303
am: 1fbb91ef97
am: 292337148c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14512449
Change-Id: I550e0ba737fe9c66aa6e9eb906d4a49f6d501f64
2021-05-17 17:02:21 +00:00
TreeHugger Robot
832ffb5dc7
Merge "Add SELinux policy for allowing dumping GSC info" into sc-dev am: 1f594ec562
am: e723f80ba9
am: 6432a7bc7a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14491675
Change-Id: Ie16aea227c99d56ed832c48de1b1565bf82c4830
2021-05-17 17:02:02 +00:00
TreeHugger Robot
f7019f3647
Merge "correctly label networking gadgets" into sc-dev am: 7fd939fdd7
am: b3ae9a8c03
am: 8a1ed47bba
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14495070
Change-Id: I86101c58b829c283d05e3b7ff3225e331d74e856
2021-05-17 17:01:48 +00:00
TreeHugger Robot
ae5a7ec6ed
Merge "bthal: allow bthal to access bluetooth kernel driver logbuffer_btlpm and logbuffer_btuart device node" into sc-dev am: 9b8e2b7ba8
am: e7fe59fb13
am: 0c4611ecb0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14009545
Change-Id: Iaa8806ecaae37a4097ac122a34b41d8949e2fd3a
2021-05-17 17:00:43 +00:00
Minchan Kim
304a32c17e
sepolicy: gs101: allow duump page_pinner
...
Provide necessary sepolicy for dumpreport to access page_pinner
information in /sys/kernel/debug/page_pinner/{longterm_pinner,
alloc_contig_failed}
Bug: 187552095
Test: Run "adb bugreport <zip>" and verify it contains the output
from page_pinner.
Signed-off-by: Minchan Kim <minchan@google.com>
Change-Id: I2abc48f2a156718fd4bed3b51bdd285c6bf9f175
2021-05-17 09:18:50 -07:00
TreeHugger Robot
9164ea0848
Merge "com.qorvo.uwb: signed with dedicated key and running as android.uid.uwb uid" into sc-dev am: e2a0158fdf
am: 6d2c152bcf
am: 7a4d420378
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506301
Change-Id: Ie10fdf67607a0cdf76e9b6877f296a1370a978ba
2021-05-17 15:45:06 +00:00
Wei Wang
f89b58e4ac
Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev am: 53ae55618a
am: c515c8345d
am: 6883250a44
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14509955
Change-Id: Ib553fe84ec690d58c491e017ae3ca1e385bb2d70
2021-05-17 15:05:41 +00:00
TreeHugger Robot
74b9e1e145
Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev am: 004c299011
am: 223f9da106
am: 8966b0738f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14485438
Change-Id: I8d91d3c920f066cb7ed12e247e29e6d30e438c31
2021-05-17 14:51:52 +00:00
Sidath Senanayake
828114d410
genfs_contexts: Specify correct GPU clock hint node
...
Bug: 188404581
Bug: 188034128
Signed-off-by: Sidath Senanayake <sidaths@google.com>
Change-Id: Id69f5cf8c95081fea7784520838a3f85aa58589c
2021-05-17 15:44:19 +01:00
Wei Wang
cb3efaa340
Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: 3a2d20a1a2
am: a04548a17c
am: 82e3d3146f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14462495
Change-Id: Id16c3fd3cd5370c86c9ffbeedc4ff5141960f097
2021-05-17 14:28:15 +00:00
sukiliu
8ed18dc446
Update avc error on ROM 7349999 am: 99853e483b
am: d5d461cc4e
am: 7a1938e846
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14500956
Change-Id: I8db5256fde25bf063f6407e48c9234232df5785a
2021-05-17 14:06:04 +00:00
Peter Csaszar
c1f4edead1
pixel-selinux: add SJTAG policies am: bc525e1a49
am: 6ff24d2a06
am: d39d9e517f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14489636
Change-Id: I30814d03394d87a1009618b709d7bc0a26cf0018
2021-05-17 12:05:19 +00:00
Wei Wang
d348574869
Merge "Add policy for memlat governor needs create/delete perf events" into sc-dev am: 551505ae05
am: 8181bbaaac
am: ff1bb37173
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14486216
Change-Id: I9b0844c573b6742b6a9b2b44bf9ed0b5048eecfb
2021-05-17 07:08:20 +00:00
Jia-yi Chen
14fe4108f0
Merge "Add high_capacity_start_cpu to u:object_r:sysfs_vendor_sched:s0" into sc-dev am: 06a0792bf1
am: 1912dc976e
am: 344b354f8b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14460156
Change-Id: I710d900d9b1ac49bf038abc6aa2d46bae943a9d7
2021-05-17 07:08:11 +00:00
JJ Lee
66d7ed975d
Merge "sepolicy: gs101: allow audio hal to use wakelock" into sc-dev am: df02b6ef77
am: 51c75a291e
am: 2a2ce4a0ae
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14452416
Change-Id: I9455603978406f34f41be37124ae0ef340321dc7
2021-05-17 07:07:28 +00:00
TreeHugger Robot
b3d62141dc
Merge "vibrator: Remove temporary method" into sc-dev am: ec3144742f
am: e853b4335e
am: df80f0be9f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467421
Change-Id: I4cc152563263416ae2601e16303e3d0e81c51c65
2021-05-17 07:07:08 +00:00
TreeHugger Robot
f909b51e46
Merge changes Ic697ffe8,Idcf38e09 into sc-dev am: a2d2ebd508
am: 41d657e591
am: eb15c49e77
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456725
Change-Id: Ib2667e9dbe8bc98e9651fafeba9aa143740a59a7
2021-05-17 07:07:03 +00:00
TreeHugger Robot
e248e30edb
Merge "Allow radioext to communicate with bt hal" into sc-dev am: c03c055812
am: 93008dc81a
am: 73f7604819
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456718
Change-Id: Ie375c0b56617064e9a55763659a4f238f5b42802
2021-05-17 07:06:58 +00:00
TreeHugger Robot
d31171629a
Merge "iwlan: update sepolicy for qualifiednetworksservice" into sc-dev am: 296f8ddc5d
am: cb8de215f8
am: 73e866b8c8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14440528
Change-Id: I7b561e1688c0da825498186427c798ce12f01f12
2021-05-17 07:06:51 +00:00
qinyiyan
8c575a737d
Allows the edgetpu_logging service to write to the edgetpu sysfs. am: bfbf29c18c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14554224
Change-Id: Id78817a5c8d6fe6bbbeec7a300e057d8b22b73dd
2021-05-17 05:35:46 +00:00
Tri Vo
c9d3d82697
Merge "trusty: sepolicy for metrics reporter" into sc-dev am: f7bec8b3c6
am: f40a4f7416
am: b38ed0c788
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14286451
Change-Id: I325bf45753fd872d7fa3242acfcb8aa925ba5f96
2021-05-17 01:20:16 +00:00
Aaron Tsai
caefc1e4f0
Fix avc denied for shannon-ims am: 6a9a85cd07
am: 71aa99edff
am: e4773d1db2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410097
Change-Id: Id2f9da7949b464cd3844ff83aea27f243db2a68c
2021-05-17 01:20:09 +00:00
TreeHugger Robot
1475a1287a
Merge "HardwareInfo: Add sepolicy for display" into sc-dev am: 6978eeaea4
am: 5bb2c8ab79
am: 647dcaf48d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824666
Change-Id: I3b19e9fb32d884a9712c10f36094e805ed9bc928
2021-05-17 01:19:40 +00:00
TreeHugger Robot
4c84d700b2
Merge "wlc fwupdate implementation" into sc-dev am: 577f562727
am: 9fccfb01ce
am: 51380a7089
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14063269
Change-Id: I6a70d0de2f8eb390908310dae1bd3a5ea250d200
2021-05-17 00:12:35 +00:00
SalmaxChang
354e935eb8
logger_app: Fix avc errors am: ab97657410
am: ebf55ff9f1
am: 12593ef488
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439439
Change-Id: I3c0ca482cfcd290838d610797db853310b386c39
2021-05-16 23:48:56 +00:00
Jack Wu
b00f1351a8
sepolicy: gs101: Fix hal_health_default avc denials am: 2c1ecf3a54
am: 388860a7ba
am: 8afb8bee7b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439451
Change-Id: I984d0bf8dba0ac3de6996984a35ca8d268ad7abe
2021-05-16 23:48:51 +00:00
Alex Hong
f47e5ae394
Merge "sepolicy: Update dumpstate HAL to V1.1" into sc-dev am: be17ec14cc
am: a0e4da3cb4
am: ef86b642ad
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14424440
Change-Id: Ibf1518eddd12e55a0805d4812cfc4925ac606a31
2021-05-16 23:48:44 +00:00
TreeHugger Robot
7830ec50a1
Merge "add sepolicy for dump TRICKLE/TEMP/DWELL defend config" into sc-dev am: 6978cd7220
am: fed9fee663
am: 263452b0f9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14419455
Change-Id: I520d23d1a11c2791716b863dcd1b02a387fdd73b
2021-05-16 23:48:32 +00:00
qinyiyan
bb199be00c
[SEPolicy] Allow EdgeTPU related service to log to stats service am: 9eeae92ade
am: ac59670250
am: c28198ce01
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14431799
Change-Id: I60c1de7edc2c02bc04dd3ab965b6cd683ace6f89
2021-05-16 22:18:04 +00:00
Chris Kuiper
bf2cfb4d6e
Merge "sepolicy: gs101: allow usf_reg_edit to run" into sc-dev am: d0d0304443
am: adb83f2a07
am: 5db8d9f987
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14415568
Change-Id: I6e2b296cf991cb37183883ffd93f23a3d43d9e47
2021-05-16 22:18:00 +00:00
Yu-Chi Cheng
6da18fabe1
Merge "Added the SELinux rule for the EdgeTPU vendor service." into sc-dev am: 7eef8643a3
am: b989b6c2d5
am: 99d5b083f8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299125
Change-Id: I0e1e47b7f1d491a281fab391db67486c31cbc549
2021-05-16 22:17:52 +00:00