Commit graph

1627 commits

Author SHA1 Message Date
Gary Jian
7566282022 Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev am: 9b5a97d65e am: 7adebe6c62
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15327671

Change-Id: I367078bd8adfdc278647ba8f6b19e845b064e5f0
2021-07-22 09:05:53 +00:00
Gary Jian
de4bd33a04 Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev am: 9b5a97d65e am: 11d8a4eb7e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15327671

Change-Id: I3c1e0377927df7e55a85a7d1609b08d0279afd5b
2021-07-22 08:46:11 +00:00
Gary Jian
7adebe6c62 Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev am: 9b5a97d65e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15327671

Change-Id: I942e721133992a86b4cab295e09a5fb99e5fa814
2021-07-22 08:42:08 +00:00
Gary Jian
11d8a4eb7e Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev am: 9b5a97d65e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15327671

Change-Id: I8e2e152f7ca71a0e5aa462093ebc10604d408814
2021-07-22 08:27:53 +00:00
Gary Jian
9b5a97d65e Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev 2021-07-22 08:16:42 +00:00
chened
561ce13d59 gs101: Allow camera hal to create file in persist camera folder
Test: build pass, no cts regression
Bug: 189844464
Change-Id: If150a94f184424f21c509a44001192e36b6ee24a
2021-07-22 07:11:05 +00:00
Petri Gynther
ed848b779b Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0 am: 056fbce364
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573

Change-Id: If619e378579d32cb1734dd69350b702006991f75
2021-07-22 00:23:54 +00:00
Petri Gynther
61f76249ec Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0 am: adee4062ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573

Change-Id: Id2cbb2f9059a0cb3250582df866292f9fa7f795f
2021-07-22 00:22:42 +00:00
Petri Gynther
adee4062ad Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573

Change-Id: Ie5f417c81373d599403646c90ddeda78b84c0b7a
2021-07-21 23:50:44 +00:00
Petri Gynther
056fbce364 Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573

Change-Id: I7a64114eed37ee384dba61a492fbb58cc2a30831
2021-07-21 23:46:06 +00:00
Badhri Jagan Sridharan
1ebd84703b Update Usb hal permissions to allow pushing overheat suez events
Usb hal now pushes the Usb port overheat event through statsd.
Usb hal also accesses usbc-throttling stats to gather info.

Bug: 193615568
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
Change-Id: I4918458bc7a8a25d7655b66d1fe40eafc7ccb070
2021-07-21 14:38:55 -07:00
Sungwoo choi
b47cdf282a Allow to set vendor_rild_prop for oemrilservice_app
Bug: 193367138
Test: make sure no denied logs in oemrilservice_app when access the
radio property

Signed-off-by: Sungwoo choi <sungwoo48.choi@samsung.com>
Change-Id: I9014002476df7b4e650f7a5a2f153e4eca47d23d
2021-07-21 08:01:44 +00:00
Petri Gynther
d12714ccc0 Add vbmeta_vendor_[ab] to file_contexts
Bug: 181909612
Test: build + install + boot to home
Change-Id: Ibb7bd8e5a61d86de1b51a3780a5bfa8cf4caf59b
2021-07-20 23:41:31 -07:00
sukiliu
8db9300fee Update avc error on ROM 7566803 am: 411aa59779 am: 8dfbba48d1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: I38bb7bb68cf50cbb03652809e7dddadb44328346
2021-07-21 06:14:01 +00:00
sukiliu
f7c4032235 Update avc error on ROM 7566803 am: 411aa59779 am: d1f198d5eb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: Id602f32ef1157321a7bc399bfb5398ccec4f3ca4
2021-07-21 06:13:41 +00:00
sukiliu
d1f198d5eb Update avc error on ROM 7566803 am: 411aa59779
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: I71dbe7cfb4ff8f409e9565e4a636ca8c4a3844ce
2021-07-21 06:02:08 +00:00
sukiliu
8dfbba48d1 Update avc error on ROM 7566803 am: 411aa59779
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: I5a350cde5a79354fa11d1892425ca0f98e64003c
2021-07-21 06:00:47 +00:00
sukiliu
411aa59779 Update avc error on ROM 7566803
avc: denied { read } for name="platform:1cc40000.sysmmu--platform:1ce00000.abrolhos" dev="sysfs" ino=21006 scontext=u:r:hal_neuralnetworks_darwinn:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0

Bug: 194241380
Test: PtsSELinuxTestCases
Change-Id: If7ee99a36bca88fffc37c12dc306e0453afb1395
2021-07-21 09:36:05 +08:00
TreeHugger Robot
e813912c48 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b am: 2260028f16
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: Ibb4101ddaebda394a4a678633fb27f57842e54a1
2021-07-20 13:30:51 +00:00
Alex Hong
361ee2d046 Allow suspend_control to access the AOC wakeup node am: f0589d11df am: 2727807154
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: I56d662d091bca5b89103868724caaa92aefd2075
2021-07-20 13:30:49 +00:00
TreeHugger Robot
090c2fb351 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b am: 0c411447d7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: I42629d18ea3fe0bf41db5800fad4529308128578
2021-07-20 13:30:34 +00:00
Alex Hong
10892fb570 Allow suspend_control to access the AOC wakeup node am: f0589d11df am: 5cc647e87d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: I19641fc130eb75e7220b4a070de6dd95f8f6a0a8
2021-07-20 13:30:29 +00:00
TreeHugger Robot
0c411447d7 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: Ie50b322dca7fc0292a200a721870c6679456c5b5
2021-07-20 13:13:02 +00:00
Alex Hong
5cc647e87d Allow suspend_control to access the AOC wakeup node am: f0589d11df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: Ibfbe41ba694a27408dbd3ff6bdb5632d55a9a05e
2021-07-20 13:12:56 +00:00
TreeHugger Robot
2260028f16 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: Ib3679aac5321fee05088ae34fd6aee63e9345599
2021-07-20 13:12:08 +00:00
Alex Hong
2727807154 Allow suspend_control to access the AOC wakeup node am: f0589d11df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: I5279e246ce4ce654b76dc8fb213833c60ea32430
2021-07-20 13:12:04 +00:00
TreeHugger Robot
b3cc71258b Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev 2021-07-20 13:00:25 +00:00
Sungjun Park
0612b5aa85 ims: allow finding mediametrics_service for vendor_ims_app
For generate dtmf tone, ImsService find mediametrics_service.
So, added the seplicy rule for finding mediametrics_service.

<Related log>
07-14 15:37:21.391   411   411 E SELinux : avc:  denied  { find } for
pid=2263 uid=10217 name=media.metrics scontext=u:r:vendor_ims_app:s0:
c217,c256,c512,c768 tcontext=u:object_r:mediametrics_service:s0 tclass
=service_manager permissive=0

Bug: 192543653
Signed-off-by: Sungjun Park <sj19385.park@samsung.com>
Change-Id: Ia0f6610ecc454533d9584367694228245afe46e4
2021-07-20 09:35:23 +00:00
Alex Hong
f0589d11df Allow suspend_control to access the AOC wakeup node
Test: Check avc denials during boot
      $ adb shell su 0 dumpsys suspend_control
Bug: 194164089

Change-Id: I9edcf6398f61daec6fdde0f7ac69ddd5d275f753
2021-07-20 09:29:15 +00:00
TreeHugger Robot
b53f02ed98 Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc am: 8be9d35300
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: I45ec1aca94b08fe5c363567df3a03097b4470e53
2021-07-20 06:35:28 +00:00
TreeHugger Robot
40be34ec64 Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc am: 5c2f8d4ba6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: I0507619c0246eb44bab1edfcb878c03cdaf0a113
2021-07-20 06:31:18 +00:00
TreeHugger Robot
8be9d35300 Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: Ifdd759f02d516efa1691833b84e9129ed7136fe8
2021-07-20 06:23:08 +00:00
TreeHugger Robot
5c2f8d4ba6 Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: I95b78d239e03912b0ecbaf17645a414f157a5320
2021-07-20 06:21:36 +00:00
TreeHugger Robot
fa62e602fc Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev 2021-07-20 06:09:35 +00:00
sukiliu
e7a39a73f3 Update avc error on ROM 7562467 am: d9309ef34d am: f89cc13852
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: I3745256ac645b80f60815bc002f7ac5c1d9a091e
2021-07-20 04:55:35 +00:00
sukiliu
ee3af65a55 Update avc error on ROM 7562467 am: d9309ef34d am: 909d2db713
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: Ie4f2b994297a682dfcec4306df1ad24dd9eb9bb3
2021-07-20 04:55:09 +00:00
sukiliu
909d2db713 Update avc error on ROM 7562467 am: d9309ef34d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: Ida52f53a71258077d8163be3984c006e1d905f00
2021-07-20 04:37:32 +00:00
sukiliu
f89cc13852 Update avc error on ROM 7562467 am: d9309ef34d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: I5e5e3cb6af90ed614aeb32aca5697f903ccfa46b
2021-07-20 04:36:34 +00:00
sukiliu
d9309ef34d Update avc error on ROM 7562467
avc: denied { read } for name="u:object_r:odsign_prop:s0" dev="tmpfs" ino=229 scontext=u:r:postinstall_dexopt:s0 tcontext=u:object_r:odsign_prop:s0 tclass=file permissive=0
avc: denied { read } for comm="otapreopt" name="u:object_r:odsign_prop:s0" dev="tmpfs" ino=229 scontext=u:r:postinstall_dexopt:s0 tcontext=u:object_r:odsign_prop:s0 tclass=file permissive=0

Bug: 194142604
Bug: 194065991
Test: PtsSELinuxTestCases
Change-Id: Ic3bb544f05ffff0df42f820d2f9cf6cd7cb24879
2021-07-20 10:03:30 +08:00
TreeHugger Robot
35ccf64620 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53 am: 8b76ff03de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: I5b462c51cf2b8024506b4907392a18d6d204b830
2021-07-19 21:22:48 +00:00
TreeHugger Robot
2706f2f475 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53 am: dd0acb63a4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: I9409592f8dfe46bfad18e232dbf313d084348260
2021-07-19 21:22:23 +00:00
TreeHugger Robot
dd0acb63a4 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: Ia0bf59df027d801313955161d53139b7176c8b19
2021-07-19 21:10:22 +00:00
TreeHugger Robot
8b76ff03de Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: I0f77c7bfc41db1bdd361708218d5dd5750d5c682
2021-07-19 21:09:31 +00:00
TreeHugger Robot
f8b8e0cb53 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev 2021-07-19 20:54:38 +00:00
TreeHugger Robot
b6ca87033f Merge "Allow HAL to access sysfs." into sc-dev am: fc321aabe2 am: 56491c6712
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15308771

Change-Id: I83158b17a617cba5e70a0c68b4c6bc9bd4deae14
2021-07-19 19:07:59 +00:00
TreeHugger Robot
a4a693bcd5 Merge "Allow HAL to access sysfs." into sc-dev am: fc321aabe2 am: 299745791f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15308771

Change-Id: Ie869d006d0a5023eae8e1ce0a37d5691e98603a9
2021-07-19 19:07:21 +00:00
TreeHugger Robot
299745791f Merge "Allow HAL to access sysfs." into sc-dev am: fc321aabe2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15308771

Change-Id: If129d2a57a6d94ef42cc187b7d53eb5c5a536d80
2021-07-19 18:39:57 +00:00
TreeHugger Robot
56491c6712 Merge "Allow HAL to access sysfs." into sc-dev am: fc321aabe2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15308771

Change-Id: I2254f63fc551654694fa5ecda3b78cda80c76d5c
2021-07-19 18:39:16 +00:00
Andrew LeCain
4e4a1ba28e Merge "sepolicy allow fingerprint hal to read mfg_data" into sc-dev am: ff13d1adee am: d297941975
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15292860

Change-Id: Id7851b07a3dea8f10c8fbc92076d392efbb7362c
2021-07-19 18:23:25 +00:00
TreeHugger Robot
fc321aabe2 Merge "Allow HAL to access sysfs." into sc-dev 2021-07-19 18:22:13 +00:00