Commit graph

1256 commits

Author SHA1 Message Date
Adam Shih
5bf5ffc8d3 mute update_engine probing mnt_vendor_file am: 5889704eff am: 203f473af5 am: c68fe289e3
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2124912

Change-Id: I2afec41baa838d8db9ab23d9d01def68249d99c5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-14 05:44:54 +00:00
Adam Shih
c68fe289e3 mute update_engine probing mnt_vendor_file am: 5889704eff am: 203f473af5
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2124912

Change-Id: I15a18379ff4969dcb043e2fae94cf6c9f13ac834
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-14 05:18:34 +00:00
Adam Shih
203f473af5 mute update_engine probing mnt_vendor_file am: 5889704eff
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2124912

Change-Id: I289ba5aa69251d8575f4bd65fbeb7a38c3e03886
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-14 04:58:45 +00:00
Adam Shih
5889704eff mute update_engine probing mnt_vendor_file
Bug: 187016910
Test: boot to home
Change-Id: I5f7141f817b543a1499ef5826177f3ac4945e857
2022-06-14 02:58:58 +00:00
JimiChen
143668225a allow rlsservice read vendor camera property
Bug: 233020488
Test: no avc denied
Change-Id: I96dee4482d4c0ff5b7852db635dc100a7ea4874c
2022-06-11 15:39:19 +08:00
Krzysztof Kosiński
17b9e03aa4 gs101: Add dontaudit statements to camera HAL policy. am: fbcf66a04a am: fd0bf19589
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18817845

Change-Id: Ib9af5b903bd9a70cd27448af38a167659c6bc867
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 21:38:34 +00:00
Krzysztof Kosiński
bdd4ecc51c gs101: Add dontaudit statements to camera HAL policy. am: fbcf66a04a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18817845

Change-Id: I6138022efbcdc8ce149123399d3a8277e69c64b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 21:04:38 +00:00
Krzysztof Kosiński
fd0bf19589 gs101: Add dontaudit statements to camera HAL policy. am: fbcf66a04a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18817845

Change-Id: Ib4b8f284129e9c32dc5c4d4a145634f46ea346eb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 21:04:37 +00:00
Adam Shih
a7f0c51176 suppress warning on writing key am: d34b17e30e am: b982767162 am: f6c8f2e547 am: 2227e772cd
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2122355

Change-Id: If4d03859fea11711c90b20ee2b52bc2e3fe26b14
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 09:05:17 +00:00
Adam Shih
f6c8f2e547 suppress warning on writing key am: d34b17e30e am: b982767162
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2122355

Change-Id: I4fcb994efe51982b529dcc608fd9d30cd6b16291
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 08:25:25 +00:00
Adam Shih
b982767162 suppress warning on writing key am: d34b17e30e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2122355

Change-Id: Ic03d08a0f370647ccb0e4e06643b430b3337af69
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 08:05:26 +00:00
Adam Shih
d34b17e30e suppress warning on writing key
Bug: 235553565
Test: boot to home with no relevant error
Change-Id: I43bd360eabb55f504b48bb940d951d197256c593
2022-06-10 06:29:39 +00:00
Jidong Sun
61b72806e8 gs101: Allow BootControl to access sysfs blow_ar
Bug: 232277507
Signed-off-by: Jidong Sun <jidong@google.com>
Merged-In: I120672722a5ab8b5cadf0dce6d872e00c9fae642
Change-Id: I120672722a5ab8b5cadf0dce6d872e00c9fae642
2022-06-10 06:02:53 +00:00
Krzysztof Kosiński
fbcf66a04a gs101: Add dontaudit statements to camera HAL policy.
The autogenerated dontaudit statements in tracking_denials are
actually the correct policy. Move them to the correct file and
add comments.

Fix: 178980085
Fix: 180567725
Fix: 218585004
Test: build & camera check on raven
Change-Id: I3f3a1f64d403182d4f592f1cacc6ef8d1418062d
(cherry picked from commit b71d24d62c)
2022-06-09 20:53:05 +00:00
Jidong Sun
921ddd49e4 gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: 1745c41b8a am: 4f67f60276
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: If2428dba144e5bff4eeb305318083e40cd82997f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 21:47:43 +00:00
Jidong Sun
4f67f60276 gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: 1745c41b8a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: I8629636e059bf5c2a58c1c91dd10c9a1da7b2109
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 21:23:49 +00:00
Jidong Sun
1ca6610378 gs101: Allow BootControl to access sysfs blow_ar am: f276625942
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: Ie359bb975e3e5315e910f33f3c69e16a9a0b2e32
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 20:30:32 +00:00
SalmaxChang
70f66a06d4 modem_svc: Fix avc error am: 1be95c2e33 am: cc38423bee am: b518f1e783 am: 1973c230c4
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2116498

Change-Id: If2b5397b8379c08620b2a9b4b79c9381f8e94a14
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-07 08:40:21 +00:00
SalmaxChang
b518f1e783 modem_svc: Fix avc error am: 1be95c2e33 am: cc38423bee
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2116498

Change-Id: Ib768682c1848e24f7e78ecd20ce4041f368d8f2b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-07 07:48:21 +00:00
SalmaxChang
cc38423bee modem_svc: Fix avc error am: 1be95c2e33
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2116498

Change-Id: I2099f2e0371d6bfa2eb0e0784c9b6f38055ac09f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-07 07:29:39 +00:00
SalmaxChang
1be95c2e33 modem_svc: Fix avc error
avc: denied { write } for comm="modem_svc_sit" name="modem_stat" dev="dm-42" ino=331 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_data_file:s0 tclass=dir permissive=0

Bug: 234844823
Change-Id: I51db41d73be317cc7fc84981ac5f04e254a360d0
2022-06-06 20:36:44 +08:00
Jidong Sun
f276625942 gs101: Allow BootControl to access sysfs blow_ar
Bug: 232277507
Signed-off-by: Jidong Sun <jidong@google.com>
Change-Id: I120672722a5ab8b5cadf0dce6d872e00c9fae642
2022-06-04 01:23:40 +00:00
George Chang
3b0a628ef4 Update nfc from hidl to aidl service
Bug: 216290344
Test: atest NfcNciInstrumentationTests
Test: atest VtsAidlHalNfcTargetTest
Merged-In: I288474f691670655516728fe0e164a3e5689875c
Change-Id: I288474f691670655516728fe0e164a3e5689875c
2022-06-01 16:00:07 +00:00
George Chang
16cc944791 Merge "Update nfc from hidl to aidl service" into tm-qpr-dev 2022-06-01 06:19:39 +00:00
Kyle Tso
5cd6559689 Add logbuffer_pogo_transfer file_contexts am: 7347d18b73 am: caa8dc57b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: I181abe83407195830c74490f4f5ca9790f1925c3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 01:25:51 +00:00
Kyle Tso
7347d18b73 Add logbuffer_pogo_transfer file_contexts
Bug: 232556226
Signed-off-by: Kyle Tso <kyletso@google.com>
Change-Id: I1037d39f4187807e6aa9753339fae29e3bc89359
Merged-In: I1037d39f4187807e6aa9753339fae29e3bc89359
2022-05-21 15:25:58 +00:00
George Chang
b75f28c76d Merge "Revert "Update nfc from hidl to aidl service"" am: 610af798f5 am: bd74710d56
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098183

Change-Id: I8a52af1a6344042571a4804c16c681d7981f38a6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 16:34:07 +00:00
George Chang
bd74710d56 Merge "Revert "Update nfc from hidl to aidl service"" am: 610af798f5
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098183

Change-Id: I6db59e3a762df7b4906b0c14a7324b5955951c3d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 16:05:46 +00:00
George Chang
610af798f5 Merge "Revert "Update nfc from hidl to aidl service"" 2022-05-19 15:38:39 +00:00
George Chang
71db4c206b Revert "Update nfc from hidl to aidl service"
Revert submission 2098739-nfc_aidl_switch_gs101

Reason for revert: broken tests
Reverted Changes:
Ifde6ab418:Switch NFC from HIDL to AIDL
I288474f69:Update nfc from hidl to aidl service
Bug: 233194621
Change-Id: I1dad9c64073c8baffdf5f491c38bf1e568c9af29
2022-05-19 13:45:18 +00:00
Kyle Tso
50797d0f2f Merge "Add logbuffer_pogo_transfer file_contexts" am: 418d114796 am: 46b42ac02b
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098016

Change-Id: I41ef4daefa6a78ca4e3f7fa9a6464d43feda07ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:35:59 +00:00
George Chang
4b9fecbe3a Update nfc from hidl to aidl service am: d6a8c63837 am: 8985f2ae28
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098014

Change-Id: I8e04549075ae47a89994e2eed9b5e7f8eac170e8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:35:44 +00:00
Kyle Tso
46b42ac02b Merge "Add logbuffer_pogo_transfer file_contexts" am: 418d114796
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098016

Change-Id: Ide608651968b6eb137aa55791074d66e3e27f947
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 07:56:40 +00:00
George Chang
8985f2ae28 Update nfc from hidl to aidl service am: d6a8c63837
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098014

Change-Id: If2212cb63fdf409ee7f5fbf78994c58c09caa8ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 07:55:22 +00:00
Kyle Tso
418d114796 Merge "Add logbuffer_pogo_transfer file_contexts" 2022-05-19 02:22:56 +00:00
Kyle Tso
94e2cdeb6e Add logbuffer_pogo_transfer file_contexts
Bug: 232556226
Signed-off-by: Kyle Tso <kyletso@google.com>
Change-Id: I1037d39f4187807e6aa9753339fae29e3bc89359
2022-05-17 16:01:46 +08:00
George Chang
d6a8c63837 Update nfc from hidl to aidl service
Bug: 216290344
Test: atest NfcNciInstrumentationTests
Test: atest VtsAidlHalNfcTargetTest
Merged-In: I288474f691670655516728fe0e164a3e5689875c
Change-Id: I288474f691670655516728fe0e164a3e5689875c
2022-05-17 12:16:39 +08:00
George Chang
d479f730b0 Update nfc from hidl to aidl service
Bug: 216290344
Test: atest NfcNciInstrumentationTests
Test: atest VtsAidlHalNfcTargetTest
Merged-In: I288474f691670655516728fe0e164a3e5689875c
Change-Id: I288474f691670655516728fe0e164a3e5689875c
2022-05-17 04:14:57 +00:00
TreeHugger Robot
a48761315f Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f am: ed1ec96363
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I294f324c4c26521cb7d8553e6127281826c30a1d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 10:39:44 +00:00
TreeHugger Robot
e9a23e8017 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I6aa2cd70650dcebab561faf257d22d526a352052
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 09:48:07 +00:00
TreeHugger Robot
c0d38cbc9f Merge "Allow mediacodec to access vendor_data_file" into tm-dev 2022-05-13 09:24:01 +00:00
Lily Lin
ca85474dbe Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468 am: 5389123249
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: I619b1afeebbe51d58ba0b60fbe3dc2ac3733bc23
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:25:08 +00:00
Will McVicker
3dbfde7852 genfs_contexts: fix more i2c raw paths am: 9cbc9eceec am: 6c256f9fee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: I4e9c3bf9cbe7e3d5d34fa0bda3d4260cc40cc479
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:25:02 +00:00
Lily Lin
d5f5a51c51 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: Ib7ad61c19257b34ca9028d2b0f3fd4ee76e37c89
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 01:56:03 +00:00
Lily Lin
e910a12468 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev 2022-05-11 01:22:36 +00:00
Will McVicker
f78f5ab19a genfs_contexts: fix more i2c raw paths am: 9cbc9eceec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: If52caa5df6e4008c9c038fe128f7e4f1e1f56c30
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-10 22:55:56 +00:00
Jerry Huang
a5e9b426eb Allow mediacodec to access vendor_data_file
For dumping output buffer of HDR to SDR fliter.

This patch fixes the following denial:

05-06 15:26:54.248  1046   856   856 W HwBinder:856_4: type=1400 audit(0.0:174404): avc: denied { getattr } for name="/" dev="dmabuf" ino=1 scontext=u:r:mediacodec:s0 tcontext=u:object_r:unlabeled:s0 tclass=filesystem permissive=0

Bug: 229360116
Change-Id: I41acb29407a7ddb27279a834e27c5ee515efe666
2022-05-10 09:22:12 +00:00
Lily Lin
59f29edf92 Add selinux permissions to r/w sysfs st33spi_state
Bug: 228655141
Test: Confirm can read/write st33spi_state
Change-Id: I65299414d6268580dc532170759459147378418b
2022-05-10 16:32:45 +08:00
Will McVicker
9cbc9eceec genfs_contexts: fix more i2c raw paths
These were added in commit 8a19d8be9c ("genfs_contexts: fix path for
i2c peripheral devices") to address missing i2c paths when kernel
modules are loaded in parallel. The raw i2c paths were not added in that
commit. So add them here in order to fix a vibrator crash for
P21-mainline due to not having the named i2c paths.

Bug: 231637004
Fixes: 8a19d8be9c ("genfs_contexts: fix path for i2c peripheral devices")
Change-Id: I02dfff504704f761c99c328b39595789c2cbeef5
2022-05-05 16:04:31 -07:00
TreeHugger Robot
bbe95c3a79 Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d am: 82a83b366a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: Ia31705514741c26b3ab34ecc21edb45e57ef89c2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 08:46:04 +00:00