Commit graph

2338 commits

Author SHA1 Message Date
TreeHugger Robot
deba8c8ff8 Merge "sepolicy: gs101: allows dock power supply permission" 2021-08-17 12:10:07 +00:00
TreeHugger Robot
e610648768 Merge "Allow boot color propagation" 2021-08-17 06:24:21 +00:00
Jack Wu
941a3bcd44 sepolicy: gs101: allows dock power supply permission
Bug: 196017001
Test: can dump dock power supply in dumpstate
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: Ie2781da77da0f181665974c335998a6dcb0e8ad2
2021-08-17 03:48:48 +00:00
Edmond Chung
3942238884 Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: c45a1b5828 am: 36f756e44b am: eb1a9fd509
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: I7535c119284ad37ac37bce996a4ec102a988f481
2021-08-16 23:37:41 +00:00
Edmond Chung
e8738b4d9b Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: c45a1b5828 am: 07fbe5b0d8 am: 4ee5ff59a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: Ic29fbf1c300b42bcf3ec3dbef460030989ce5ea5
2021-08-16 23:37:35 +00:00
Edmond Chung
25ccfad161 Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: d5f9036c8e am: 9bde9324fe am: ff5c485ddc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: I0f9314f34e796e55e0adc47779f5e342ca6b3b84
2021-08-16 23:37:27 +00:00
Edmond Chung
eb1a9fd509 Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: c45a1b5828 am: 36f756e44b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: I27bc0b77a3438fcaf6cbdf209945f6c7a360771c
2021-08-16 22:45:38 +00:00
Edmond Chung
4ee5ff59a0 Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: c45a1b5828 am: 07fbe5b0d8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: I91b59573968bb3ad15f7785ac155809ae9a7cfdc
2021-08-16 22:45:01 +00:00
Edmond Chung
ff5c485ddc Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: d5f9036c8e am: 9bde9324fe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: I90884f92df1e42fa5b60ad47e914ed1460b40c04
2021-08-16 22:44:58 +00:00
Edmond Chung
36f756e44b Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: c45a1b5828
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: Id66f403466d50ea3beb4663cc137e551a92e16f3
2021-08-16 22:32:00 +00:00
Edmond Chung
07fbe5b0d8 Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: c45a1b5828
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: Ia7663a410cd3ffcbb554dc653c2470e53efa2f4b
2021-08-16 22:32:00 +00:00
Edmond Chung
9bde9324fe Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: d5f9036c8e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: Ib347e1a8fbee1822542adf48a03f92dbdac3a302
2021-08-16 22:31:40 +00:00
Edmond Chung
c45a1b5828 Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: I97f8f143230d13f64b34ee11c7a46cfcc5f2f3f9
2021-08-16 22:17:00 +00:00
Edmond Chung
d5f9036c8e Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: Icf58b2d5fef01a62ef5ec8c5009690224a15a939
2021-08-16 22:16:13 +00:00
Edmond Chung
7e581b9a7b Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev 2021-08-16 22:01:46 +00:00
Edmond Chung
6b30dbc54c gs101: Allow camera HAL to access interrupt handles
This is to allow camera HAL to modify IRQ affinity for different use
cases.

Bug: 196058977
Test: Camera use cases
Change-Id: I498b0ac763b735d05299e1f4b09de14e131fd6e3
2021-08-16 10:52:27 -07:00
Rick Yiu
86d3394ebc gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 1f4c69a11d am: 9c7ca5fdd3 am: 6ce26f4ea0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I7376da420b0720982e60b884aa392718d3997eb9
2021-08-16 14:40:42 +00:00
Rick Yiu
13c53ac53b gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 1f4c69a11d am: d2f6cfc831 am: c3a47b14d5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: Iea2ef6b78268f27e480a97a8699df8d65fcc6153
2021-08-16 14:40:37 +00:00
Rick Yiu
63a624e811 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 7b8fe23d74 am: fa5d13d6e1 am: 7b0fa572c3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I985dde431db9fa2f03f6036c139c6a653f3fe755
2021-08-16 14:40:25 +00:00
Rick Yiu
6ce26f4ea0 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 1f4c69a11d am: 9c7ca5fdd3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I005a8c793d4d8919a1b8cb74528bb7063a7498cb
2021-08-16 14:26:27 +00:00
Rick Yiu
c3a47b14d5 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 1f4c69a11d am: d2f6cfc831
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I64c32ca8b100ae5de316130875593ad6e1753744
2021-08-16 14:26:05 +00:00
Rick Yiu
7b0fa572c3 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 7b8fe23d74 am: fa5d13d6e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: Ia05c12145187f2500010827b6e28ce5b56039511
2021-08-16 14:25:57 +00:00
Rick Yiu
9c7ca5fdd3 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 1f4c69a11d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I59e7baee2e2c5a80d53b5a6f5c8712a2b09a36d3
2021-08-16 14:11:45 +00:00
Rick Yiu
d2f6cfc831 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 1f4c69a11d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: Ie4daa316c73721aa8cb9d87d262ba754fd926356
2021-08-16 14:11:43 +00:00
Rick Yiu
fa5d13d6e1 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 7b8fe23d74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I2837b12374957c35725af2f4aed49ada200810ff
2021-08-16 14:11:31 +00:00
Rick Yiu
1f4c69a11d gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I54a069f83c389b69a73d9d4d64a34177ba652d1c
2021-08-16 13:54:58 +00:00
Rick Yiu
7b8fe23d74 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I1870542193c2b06de1f1e53f38e84fb800a74839
2021-08-16 13:54:01 +00:00
Rick Yiu
2ef3daba50 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials
Use untrusted_app_all to cover all Use untrusted_app versions.

Bug: 196109806
Test: no untrusted_app denials for vendor_sched
Change-Id: Ic6426b26b8a05f8a0bc7e2a4a4a293b2988812d3
2021-08-16 13:40:32 +00:00
Victor Liu
4c1a135b46 allow uwb hal sys_nice access am: 39b5815a1e am: 9d2d70e09b am: 9d0c136cf6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: I7022d884e08a03739fa753b606bab9c3bafae882
2021-08-14 00:21:46 +00:00
Victor Liu
ee1c9d29b2 uwb: allow uwb to access the radio service am: 0c429efc07 am: e4ee9723f4 am: 2fdbcbea3e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I068782dac351717c63def8cec0057f1425ddf9c4
2021-08-13 23:42:43 +00:00
Victor Liu
9d0c136cf6 allow uwb hal sys_nice access am: 39b5815a1e am: 9d2d70e09b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: I64e3b902d5a83a50d296439779dc252f159ba66d
2021-08-13 23:39:35 +00:00
Victor Liu
2fdbcbea3e uwb: allow uwb to access the radio service am: 0c429efc07 am: e4ee9723f4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: Ie3cb7e9c74f07966c249bf67e50a80af810f6e38
2021-08-13 23:34:11 +00:00
Victor Liu
d75e7326f1 allow uwb hal sys_nice access am: 39b5815a1e am: 21d74ff50f am: ecceee1ddc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: I0379b550ceea8c5656d9fc26a556c0fbb48e0150
2021-08-13 22:09:09 +00:00
Victor Liu
ecceee1ddc allow uwb hal sys_nice access am: 39b5815a1e am: 21d74ff50f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: Ie7d5132a50e0d0f7e8db35d512a70ef6b932ab68
2021-08-13 22:07:02 +00:00
Victor Liu
de55d68c2f uwb: allow uwb to access the radio service am: 0c429efc07 am: 19b1a2feef am: 243649da79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I8909e4d78ea1b2dd3bc0ae7492f2c6b846f6f253
2021-08-13 22:03:02 +00:00
Lucas Dupin
8a586e6786 Allow boot color propagation
Allows SystemUI to write the boot color sysprop

Test: manual
Bug: 190093578
Change-Id: I844a4dae87fe09a09ff3368c540ffab5f745d455
2021-08-13 21:52:50 +00:00
Victor Liu
243649da79 uwb: allow uwb to access the radio service am: 0c429efc07 am: 19b1a2feef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I264015c73d5a4a61712726192c7ee3160704dc02
2021-08-13 21:31:06 +00:00
Victor Liu
9d2d70e09b allow uwb hal sys_nice access am: 39b5815a1e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: Ib8b61cc66bd2919360e05434f147f495fcacb156
2021-08-13 02:41:53 +00:00
Victor Liu
21d74ff50f allow uwb hal sys_nice access am: 39b5815a1e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: Ib6d841a96f4ce29a077ec11d10d411e985b110f0
2021-08-13 02:41:52 +00:00
Victor Liu
39b5815a1e allow uwb hal sys_nice access
hardware.qorvo.: type=1400 audit(0.0:9): avc: denied { sys_nice } for capability=23 scontext=u:r:hal_uwb_default:s0 tcontext=u:r:hal_uwb_default:s0 tclass=capability permissive=0
hardware.qorvo.: type=1400 audit(0.0:9): avc: denied { setsched } for scontext=u:r:hal_uwb_default:s0 tcontext=u:r:kernel:s0 tclass=process permissive=0

Bug: 196438549
Signed-off-by: Victor Liu <victorliu@google.com>
Change-Id: I742bae701cfcc7b4842cd63abbc8c275d82c8ba1
2021-08-12 16:11:06 -07:00
Victor Liu
19b1a2feef uwb: allow uwb to access the radio service am: 0c429efc07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I9814b50afb037f6ac6405d3bcc16b3b10723fa3a
2021-08-12 21:57:11 +00:00
Victor Liu
e4ee9723f4 uwb: allow uwb to access the radio service am: 0c429efc07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I4bc3d385c8895137bf62640c06592907ccd495b0
2021-08-12 21:57:10 +00:00
Victor Liu
0c429efc07 uwb: allow uwb to access the radio service
07-07 18:28:28.391   409   409 E SELinux : avc:  denied  { find } for pid=4609 uid=1083 name=isub scontext=u:r:uwb_vendor_app:s0:c59,c260,c512,c768 tcontext=u:object_r:radio_service:s0 tclass=service_manager permissive=0

Bug: 192833779
Test: on device, no avc denied message
Change-Id: I4a6b778dce6f493093d3a05683473bb60e9cfa5c
2021-08-10 22:47:35 +00:00
TreeHugger Robot
ff88615a29 Merge "Remove ndk_platform backend. Use the ndk backend." 2021-08-10 04:36:22 +00:00
Siqi Lin
65c8707a99 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e am: c8836d9832 am: a77182f6d7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I196c7a0ba2852258a62df0ef090017d97e53608c
2021-08-09 20:52:35 +00:00
Siqi Lin
0d2d997d5d Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e am: b8d0fd0524 am: 142fb69223
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I01455ac7bea1764b52efbcf5d20f588c6ad8c567
2021-08-09 20:52:19 +00:00
Siqi Lin
2af36e8664 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 1a27d3d66e am: 4ae3686490 am: c5ba760b93
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: Iaa4691b168df18a81701230c9f2ce1647b234b90
2021-08-09 20:52:07 +00:00
Siqi Lin
a77182f6d7 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e am: c8836d9832
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: Id49e827dbe531c49a04406988a406ea56c9d8cd9
2021-08-09 20:35:04 +00:00
Siqi Lin
142fb69223 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e am: b8d0fd0524
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I6520f674c942b505cffc597b649b628b68cb543b
2021-08-09 20:34:32 +00:00
Siqi Lin
c5ba760b93 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 1a27d3d66e am: 4ae3686490
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I34c4308d929e5582bf499d424fcf8a2a050d9d55
2021-08-09 20:34:24 +00:00