Commit graph

4574 commits

Author SHA1 Message Date
Wilson Sung
c42d6625f5 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 315720636
Bug: 315104713
Test: scanBugreport
Bug: 315720725
Bug: 315104713
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315720636
Bug: 315104713
Change-Id: I6fdd21dd1d78aee006d3d5dbeb57ae6912f9b42e
2023-12-11 02:54:34 +00:00
Xin Li
de4dc819b4 Merge Android 14 QPR1
Merged-In: Icf6128476f1f669918bc20d3eecd40c89893443f
Bug: 315507370
Change-Id: I1b9c6fbde63c54d034b44dae2c2cc7268393df53
2023-12-08 13:13:24 -08:00
David Drysdale
422638059a Merge "Add Secretkeeper HAL" into main 2023-12-06 10:21:03 +00:00
David Drysdale
03785012ed Add Secretkeeper HAL
Test: VtsAidlAuthGraphSessionTest
Bug: 306364873
Change-Id: I72d9d9afd57d265bd2a019a02d6aa364deb4acb4
2023-12-05 10:38:01 +00:00
Jason Chiu
3f3bfddaff gs101: move common sepolicy related to bootctrl hal to gs-common
Bug: 265063384
Change-Id: I2e7bee9c6be4a6802a759bf52fb412dd73f868bd
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-12-05 01:24:03 +08:00
Treehugger Robot
cc9b389190 Merge "Update SELinux error" into main 2023-12-04 03:04:27 +00:00
Daniel Norman
021d2647eb [automerger skipped] Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: c245d0e88d -s ours am: 9b4fe94bf1 -s ours
am skip reason: Merged-In I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f with SHA-1 60940a7ad7 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Ic3a394f5a74163608a4d845aceb7d871e0217546
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:29:26 +00:00
Daniel Norman
9b4fe94bf1 [automerger skipped] Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: c245d0e88d -s ours
am skip reason: Merged-In I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f with SHA-1 60940a7ad7 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Ic8e813b3a6450aa3b3bd075a967e760a398ec1c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:24:42 +00:00
Daniel Norman
7ca6403290 [automerger skipped] Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: 9278e0c263 am: 8498e6db38 -s ours
am skip reason: Merged-In I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f with SHA-1 e948bb326a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Idddce5b8ce8ac127893dfcf018ac81f2b6bdcbf4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:23:58 +00:00
Daniel Norman
c245d0e88d Removes duplicate hidraw_device type definition. am: 60940a7ad7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: I3c06b0e9bbcf7c10c60eef3b4b4c78d825ba8e8e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:51:10 +00:00
Daniel Norman
8498e6db38 Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: 9278e0c263
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: I02aa44c368e2d7df030bfd68bdd60d700bba2c51
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:48:23 +00:00
Daniel Norman
9278e0c263 Removes duplicate hidraw_device type definition. am: 60940a7ad7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Icf6128476f1f669918bc20d3eecd40c89893443f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:45:33 +00:00
Daniel Norman
60940a7ad7 Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Test: ls -z /dev/hidraw0
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:e948bb326a518bd2f7f92410c4f2d0ae6f6d146a)
Merged-In: I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f
Change-Id: I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f
2023-11-30 23:27:49 +00:00
Wilson Sung
484f609dee Update SELinux error
Test: scanBugreport
Bug: 312894628
Bug: 313804340
Change-Id: I87b384eac0c734444f0d722955b341a4611b7842
2023-11-30 07:14:31 +00:00
Khoa Hong
213b76e9b8 Suppress avc error log on debugfs's usb folder.
The XHCI driver in kernel will write debugging information to DebugFS on
some USB host operations (for example: plugging in a USB headphone). We
are not using those information right now.

Bug: 311088739
Test: No error when plugging a USB headphone in.
Change-Id: If7c511f4466959d819f2672ae8f82a8a8dae83e4
2023-11-30 15:01:37 +08:00
Randall Huang
ec6ba5806d Move sg_device related policy
Bug: 312582937
Test: make selinux_policy
Change-Id: I27a86d47777a6d769b93fc1c40ae27dacf83ab10
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-11-22 14:01:33 +08:00
Bryan Lavrich
a1bff1c2e9 Merge "aoc: add sysfs file entry" into main 2023-11-20 20:22:27 +00:00
Devika Krishnadas
4ed070d0aa Merge "Add Pixel Mapper as a sp-HAL" into main 2023-11-20 18:17:28 +00:00
Devika Krishnadas
1f9e3a93e1 Add Pixel Mapper as a sp-HAL
Bug: 267352318

Change-Id: I77b064c3eae2b47677ee83df8483e6f7aba08e6e
Signed-off-by: Devika Krishnadas <kdevika@google.com>
2023-11-16 01:17:05 +00:00
Daniel Norman
c9fcb3e550 Merge "Removes duplicate hidraw_device type definition." into main 2023-11-14 19:05:05 +00:00
Lei Ju
406bfbcee7 Merge "Set up sepolicy for CHRE HAL process" into main 2023-11-14 17:58:30 +00:00
Daniel Norman
e948bb326a Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Change-Id: I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f
Test: ls -z /dev/hidraw0
2023-11-10 22:53:15 +00:00
Lei Ju
89dd17c9ad Set up sepolicy for CHRE HAL process
Contexthub (CHRE) team is removing the chre daemon and incorporating
its functionalities into the next gen HAL. This CL copied the
permissions we received in whitechapel/vendor/google/chre.te to
hal_contexthub.te to enable the same set of permissions on gs101.

Bug: 247124878
Test: launch the hal process on oriole and verify it can perform
required operations such as loading nanoapps holding wakelocks,
query nanoapps, etc.

Change-Id: I8ce6b4f7f411e50cf454bb5f1286f73d4d46aced
2023-11-10 14:18:05 -08:00
Alex Iacobucci
8966bfa237 aoc: add sysfs file entry
Test: on device
Bug: 309950738
Change-Id: I7e2ceaa61c7870ace37014ad39f3a119f3712569
Signed-off-by: Alex Iacobucci <alexiacobucci@google.com>
2023-11-10 18:28:51 +00:00
Mike Wang
a6c7f726b5 Change the MDS to platform app in selinux ap context.
The MDS will be signed with platform key and become a platform app. To
make the selinux rules for modem_diagnostic_app work, need to set it to
platform app in app context.

Bug: 287683516

Test: Tested with both dev key or platform key signed MDS apps and the selinux rules works.
Change-Id: If890f7caaac33e5ddc6c02cc8084654a10cea416
2023-11-09 07:17:07 +00:00
Treehugger Robot
f237b33c72 Merge "sensors: Move USF related sepolicy to gs-common." into main 2023-11-07 06:49:08 +00:00
Rick Chen
04e4ac1717 sensors: Move USF related sepolicy to gs-common.
Bug: 305120274
Test: Compile pass. Flash the build to WHI devices and no sensor
      related avc denied log.
Change-Id: I56174a24d159968c01d1572e84f4bcdd7930a709
Signed-off-by: Rick Chen <rickctchen@google.com>
2023-11-07 10:50:48 +08:00
Wilson Sung
c11845e69e Update SELinux error
Test: scanBugreport
Bug: 309379598
Change-Id: I9c334cdb5e98c71a70f079fb984e57c154ab6a99
2023-11-06 08:01:12 +00:00
JimiChen
ea198bd127 Update SELinux policies for rlsservice
1. Move rls_service context from vndservice_contexts to
   service_contexts.
2. Allow binder calls from rlsservice to servicemanager
3. Change rls_service type from vndservice_manager_type to
   service_manager_type.

Bug: 301520085
Test: GCA
Change-Id: I7badfe2ddb73b13884b54d2c8972e1921af6ea38
2023-11-01 18:20:45 +08:00
Xin Li
aa6b15007d [automerger skipped] Merge 10952656 am: a17ff7b552 -s ours am: c7ea7da26a -s ours
am skip reason: Merged-In Id8af985f49aafa9966da448443421888817bdb34 with SHA-1 1ac7c592e6 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/25092663

Change-Id: I33180129dea5c82e473ef3c9bf21f3e6f4570448
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-19 23:54:51 +00:00
Xin Li
c7ea7da26a [automerger skipped] Merge 10952656 am: a17ff7b552 -s ours
am skip reason: Merged-In Id8af985f49aafa9966da448443421888817bdb34 with SHA-1 1ac7c592e6 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/25092663

Change-Id: I4724a9ef5b19adc68ff7bb54e97ad2f179dc9223
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-19 18:48:06 +00:00
Xin Li
a17ff7b552 Merge 10952656
Merged-In: Id8af985f49aafa9966da448443421888817bdb34
Change-Id: Ifbd9589b149d126f212eddda871aaf550f589ac8
2023-10-17 10:06:29 -07:00
Wilson Sung
0c5fff7954 Update SELinux error
Test: scanBugreport
Bug: 305600375
Bug: 305600845
Bug: 305600595
Change-Id: I6bd13a82d02eb063435520be7705c67408b0269f
2023-10-16 05:53:42 +00:00
Xin Li
c7a1c28200 [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours am: 071bca5489 -s ours am: 14f6e3dd7d -s ours am: bba70e6241 -s ours am: 1ac7c592e6 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: I03e153000fc167622dd2ff19693bca57c5739c96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-07 00:19:55 +00:00
Xin Li
1ac7c592e6 [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours am: 071bca5489 -s ours am: 14f6e3dd7d -s ours am: bba70e6241 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: Id8af985f49aafa9966da448443421888817bdb34
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-06 11:00:25 +00:00
Xin Li
bba70e6241 [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours am: 071bca5489 -s ours am: 14f6e3dd7d -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: I8f2846beec57d58761717c294fb4e74beae7732f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-06 09:50:34 +00:00
Xin Li
14f6e3dd7d [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours am: 071bca5489 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: I44e5ece889b19439ab5ad57e2b228b6f7c026a09
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-06 08:59:00 +00:00
Xin Li
071bca5489 [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: Iea3ff52c8c300b083c2de5b2ecf45856ae49ba96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-06 07:51:54 +00:00
Xin Li
7fabb8cee6 Merge Android 14
Bug: 298295554
Merged-In: I48441749de4eb1de90ce5a307b1d47ae3cb9592d
Change-Id: Ica95e66a8aaacda0452f0025b73835b63855f30a
2023-10-05 15:33:38 -07:00
Wilson Sung
fb1d860be3 Merge "Update SELinux error" into main 2023-10-05 02:17:39 +00:00
Wilson Sung
15261ed885 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 303391666
Bug: 303391687
Bug: 301948771
Change-Id: I16e38ca15d7a9995f7922b9c3be6a6f2f2238c2a
2023-10-04 11:53:34 +00:00
Will McVicker
f0047396de Move i2c-cs40l26a to gs101-sepolicy
The i2c-7/7-0043 label is shared with both i2c-7/i2c-cs40l25a and
i2c-7/i2c-cs40l26a nodes. To make it clear that these all are related,
let's move i2c-7/i2c-cs40l26a to gs101-sepolicy and have all the gs101
vibrator policy labels together.

Bug: 302549624
Bug: 291606723
Test: Verify i2c nodes on r4
Fixes: ccdd975a88d0 ("Update the cs40l26a i2c device node sepolicy labeling")
Change-Id: I2950a2c064e31e300d07f124cf1a7bfc00ae58c3
2023-09-29 09:21:48 -07:00
Will McVicker
d17c49fd0a Update the i2c device node sepolicy labeling
This change needs to be merged with the corresponding kernel change that
sets the i2c bus aliases correctly to match the existing v5.10 bus
probe ordering.

To verify the sepolicy labeling doesn't change, run the below commands
and diff the stdout on builds with and without the changes. For extra
credit, verify the nodes are labeled the same when upgrading the kernel
to v6.1 (with the correct i2c aliases to match the existing policy):

  acpm_bus_array=("acpm_mfd_bus@17500000" "acpm_mfd_bus@17510000")
  for bus in ${acpm_bus_array[@]}; do
    adb shell ls -ZR /sys/devices/platform/${bus}/i2c-*;
  done

  bus_array=("10960000" "10970000" "10d50000" "10900000")
  for bus in ${bus_array[@]}; do
    adb shell ls -ZR /sys/devices/platform/${bus}.hsi2c/i2c-*;
  done

Test: verify on r4
Bug: 291606723
Change-Id: Ifbfc53fbeb39a47cda4263fc706f11af6675d90e
2023-09-29 09:21:44 -07:00
Roy Luo
fb8d2f7d73 Revert "Update the i2c device node sepolicy labeling"
Revert submission 24855741-gs101-i2c-bus-fixes

Reason for revert: DroidMonitor-triggered revert due to breakage https://android-build.corp.google.com/builds/quarterdeck?branch=git_main&target=bluejay-trunk_food-userdebug&lkgb=10876543&lkbb=10876988&fkbb=10876587, bug b/302549624.

Reverted changes: /q/submissionid:24855741-gs101-i2c-bus-fixes

Change-Id: Iea8fe5b374609225ab07aa13effcb1d6e8d13468
BUG: 302549624
2023-09-28 18:00:13 +00:00
Will McVicker
421a5fef33 Update the i2c device node sepolicy labeling
This change needs to be merged with the corresponding kernel change that
sets the i2c bus aliases correctly to match the existing v5.10 bus
probe ordering.

To verify the sepolicy labeling doesn't change, run the below commands
and diff the stdout on builds with and without the changes. For extra
credit, verify the nodes are labeled the same when upgrading the kernel
to v6.1 (with the correct i2c aliases to match the existing policy):

  acpm_bus_array=("acpm_mfd_bus@17500000" "acpm_mfd_bus@17510000")
  for bus in ${acpm_bus_array[@]}; do
    adb shell ls -ZR /sys/devices/platform/${bus}/i2c-*;
  done

  bus_array=("10960000" "10970000" "10d50000" "10900000")
  for bus in ${bus_array[@]}; do
    adb shell ls -ZR /sys/devices/platform/${bus}.hsi2c/i2c-*;
  done

Test: verify on r4
Bug: 291606723
Change-Id: Id5b9021cdbf4b9d3578d5e9ee655463ab62dcd12
2023-09-25 13:04:31 -07:00
Treehugger Robot
42fbe059c3 [automerger skipped] Merge "Move coredomain seapp ctx and types to system_ext" into main am: 11a443f3f2 -s ours am: b0da3e388d -s ours am: bc069c8249 -s ours am: 6d0480d3f8 -s ours am: 2787c32dcc -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: I533006b40e96b2d1d7cc8bff0591e2c33e0542e0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 08:59:52 +00:00
Inseob Kim
9446a9c3dc [automerger skipped] Move coredomain seapp ctx and types to system_ext am: 502fd30697 -s ours am: 6b26ff4db7 -s ours am: 95d726a7c1 -s ours am: 0917c71c70 -s ours am: 74e4bbaaff -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: I0b8d04a7cd046a7fcd76d2fd06345922aa530299
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 08:59:49 +00:00
Treehugger Robot
2787c32dcc [automerger skipped] Merge "Move coredomain seapp ctx and types to system_ext" into main am: 11a443f3f2 -s ours am: b0da3e388d -s ours am: bc069c8249 -s ours am: 6d0480d3f8 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: I40a235b0baaf9b4ebc1076a7dd5882a00e1538ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 07:55:31 +00:00
Inseob Kim
74e4bbaaff [automerger skipped] Move coredomain seapp ctx and types to system_ext am: 502fd30697 -s ours am: 6b26ff4db7 -s ours am: 95d726a7c1 -s ours am: 0917c71c70 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: I1a06945bf1b20abf63cbefc425e823acc242810e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 07:55:28 +00:00
Treehugger Robot
6d0480d3f8 [automerger skipped] Merge "Move coredomain seapp ctx and types to system_ext" into main am: 11a443f3f2 -s ours am: b0da3e388d -s ours am: bc069c8249 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: I8fbbaacca0bfac26c62a0066dab8ba9c5e975a8f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 07:15:12 +00:00