Wenhao Wang
e4e2f33f14
Merge "Add wakelock access for storageproxyd" into sc-dev am: 5305955a86
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15306271
Change-Id: I133982ece59c9dc571b858b189375d31b4f02542
2021-07-16 17:30:31 +00:00
Wenhao Wang
5305955a86
Merge "Add wakelock access for storageproxyd" into sc-dev
2021-07-16 17:12:01 +00:00
Alex Hong
77236f96d6
Merge "sepolicy: gs101: support tetheroffload hal version 1.y" into sc-dev am: ea6934fda9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15296508
Change-Id: Id9c0bdad2c43886630107cbbbc7f51459481ddf9
2021-07-16 06:46:06 +00:00
Alex Hong
ea6934fda9
Merge "sepolicy: gs101: support tetheroffload hal version 1.y" into sc-dev
2021-07-16 06:28:32 +00:00
Namkyu Kim
4055c31faf
sepolicy: gs101: support tetheroffload hal version 1.y
...
Support both 1.0 and 1.1.
Bug: 186539538
Test: run vts -m VtsHalTetheroffloadControlV1_0TargetTest
run vts -m VtsHalTetheroffloadControlV1_1TargetTest
Signed-off-by: Namkyu Kim <namkyu78.kim@samsung.com>
Change-Id: I76a26dcd22e1c8985d470a39b9aeae618f459d00
2021-07-16 04:05:21 +00:00
Stephane Lee
b37fe8c071
Merge "odpm: Rename the odpm_config sepolicies to be more consistent" into sc-dev am: ea6996bc52
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15289584
Change-Id: I587aad68aafb8b4229fd76f2a35d94ccc4a51987
2021-07-16 02:11:29 +00:00
Stephane Lee
ea6996bc52
Merge "odpm: Rename the odpm_config sepolicies to be more consistent" into sc-dev
2021-07-16 01:55:33 +00:00
Wenhao Wang
5c009fb96f
Add wakelock access for storageproxyd
...
The storageproxyd needs a wakelock around the sequence of UFS commands
Bug: 193456223
Test: Trusty storage tests
Change-Id: I1efe3144c8bcc17c056fc3b9b796e080f77991d5
2021-07-15 17:10:31 -07:00
TreeHugger Robot
18ba5fc434
Merge "Set sepolicy for shell script of disabling contaminant detection" into sc-dev am: f0dd8e2957
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15269315
Change-Id: I6c76bc3520f86a8aa85172a38fbfe8ebec6d934c
2021-07-15 16:32:23 +00:00
TreeHugger Robot
f0dd8e2957
Merge "Set sepolicy for shell script of disabling contaminant detection" into sc-dev
2021-07-15 16:17:40 +00:00
sukiliu
65cda2d3a4
Update avc error on ROM 7550575 am: 06ea8d9432
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283866
Change-Id: I5fd96bc2ab734e30683c77519fdf45594cb7904d
2021-07-15 09:01:40 +00:00
Darren Hsu
3050ed8ed9
Set sepolicy for shell script of disabling contaminant detection
...
The avc denials are listed in b/192208389#comment10.
Bug: 192208389
Test: Manually tested
Change-Id: Ib2e3cf498851c0c9e5e74aacc9bf391549c0ad1a
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2021-07-15 11:11:11 +08:00
sukiliu
06ea8d9432
Update avc error on ROM 7550575
...
Bug: 193726003
Bug: 193633303
Bug: 193548421
Test: PtsSELinuxTestCases
Change-Id: Id6cb13602eb9a69f7815a0301a5708577c663bd2
2021-07-15 09:33:58 +08:00
Stephane Lee
c7342a7824
odpm: Rename the odpm_config sepolicies to be more consistent
...
Test: Ensure that there are no sepolicy errors on odpm_config
Bug: 192674986
Change-Id: I3043a544511c8c3051e1bd10e9f6b668b251cf5f
2021-07-14 16:11:51 -07:00
Orion Hodson
b611de527f
Merge "Revert "Update avc error on ROM 7522385"" into sc-dev am: d4a7e81293
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15235283
Change-Id: I404a023228cee821b97a72b29394f81e517d56c7
2021-07-14 09:23:21 +00:00
Orion Hodson
d4a7e81293
Merge "Revert "Update avc error on ROM 7522385"" into sc-dev
2021-07-14 09:08:32 +00:00
TreeHugger Robot
67dfb20473
Merge "Add create perm for tee" into sc-dev am: e7aab2cbdd
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276267
Change-Id: Id0970b0bfb90adb33206450bd88b823d8742fc47
2021-07-14 01:21:36 +00:00
TreeHugger Robot
e7aab2cbdd
Merge "Add create perm for tee" into sc-dev
2021-07-14 01:01:53 +00:00
Wenhao Wang
c60e44c29e
Add create perm for tee
...
The storageproxyd needs to create persist/ss from scratch.
So we add the create perm.
Bug: 193489307
Test: Trusty storage tests
Change-Id: Ida1c07acac26494ae6bba0392fb2da0425803608
2021-07-13 16:26:17 -07:00
TreeHugger Robot
64e79c3514
Merge "Revert "Update avc error on ROM 7526917"" into sc-dev am: 0afce44985
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15265928
Change-Id: Ic78c1af03bc8a748db3198dae28e5a104f9d4b45
2021-07-13 17:19:02 +00:00
TreeHugger Robot
0afce44985
Merge "Revert "Update avc error on ROM 7526917"" into sc-dev
2021-07-13 17:03:43 +00:00
Michael Ayoubi
04d9f1ac13
Revert "Update avc error on ROM 7526917"
...
This reverts commit 81a8e5b4ce
.
Reason for revert: <Qorvo Version P2-S4(ag/15139489) which caused these errors got reverted from sc-dev in ag/15224151. It will now go into master>
Bug: 192924316
Change-Id: I772053cf512ba555a5fa657d39f957ac51f013c1
2021-07-13 17:03:26 +00:00
Chris Fries
44e0728dac
Merge "suppress error for ag/15263334" into sc-dev am: 5de8701fae
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15258522
Change-Id: Idc466d8e5dd5e3733a840cf78e3dad02b9486fab
2021-07-13 15:52:31 +00:00
Chris Fries
5de8701fae
Merge "suppress error for ag/15263334" into sc-dev
2021-07-13 15:37:16 +00:00
Stephane Lee
ec44f8bfd2
Add DC Charging to server configurable parameters; ensure the sysfs node is writable am: 2046513eb7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15180033
Change-Id: I3cd66320c887223d53506cb2ce741a1e04c02afd
2021-07-13 08:47:59 +00:00
Adam Shih
9d7e88c27e
suppress error for ag/15263334
...
Bug: 193474772
Test: boot with no relevant error found
Change-Id: Ia3f49fbf9e623c6b81d6c595e19e275f64521dfe
2021-07-13 09:57:18 +08:00
Stephane Lee
2046513eb7
Add DC Charging to server configurable parameters; ensure the sysfs node is writable
...
hal_googlebattery will be writing to:
/sys/devices/platform/google,cpm/dc_ctl
Test: Ensure there are no errors on logcat | grep google_battery@
Bug: 183772980
Change-Id: Id4490d6de161eefe63c36c01d497696b16c6292d
2021-07-12 13:27:54 -07:00
SHUCHI LILU
961b0a8689
Merge "Update avc error on ROM 7539530" into sc-dev am: 4aa650714c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15250405
Change-Id: Ifeccd2009a20300026813565692ffb69aef971bd
2021-07-12 04:05:36 +00:00
SHUCHI LILU
4aa650714c
Merge "Update avc error on ROM 7539530" into sc-dev
2021-07-12 03:45:34 +00:00
Salmax Chang
75e43acd87
Merge "init: change overlayfs_file rule to dontaudit" into sc-dev am: 3582ffbdbf
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15243218
Change-Id: Ie4fbc4fdc55beb1e3cabb65f9454fccde8b1aa2d
2021-07-12 02:55:35 +00:00
Salmax Chang
3582ffbdbf
Merge "init: change overlayfs_file rule to dontaudit" into sc-dev
2021-07-12 02:40:43 +00:00
sukiliu
a06677ce7a
Update avc error on ROM 7539530
...
avc: denied { read } for name="u:object_r:vendor_camera_debug_prop:s0" dev="tmpfs" ino=300 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:vendor_camera_debug_prop:s0 tclass=file permissive=0
avc: denied { read } for comm="dumpstate@1.1-s" name="u:object_r:vendor_camera_debug_prop:s0" dev="tmpfs" ino=300 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:vendor_camera_debug_prop:s0 tclass=file permissive=0
Bug: 193365129
Test: PtsSELinuxTestCases
Change-Id: I1d0258ec4ce2abbf8f899add86be2076c0c72be0
2021-07-12 09:49:17 +08:00
Long Ling
deec54fbfd
Merge "Allowed HWC HAL access TUI status node" into sc-dev am: 5a7c666290
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15177771
Change-Id: I7eb405191f7ef5e6e6d35cb4edda78a904484db2
2021-07-10 02:36:51 +00:00
Long Ling
5a7c666290
Merge "Allowed HWC HAL access TUI status node" into sc-dev
2021-07-10 02:19:43 +00:00
SalmaxChang
12370586c9
init: change overlayfs_file rule to dontaudit
...
Workaround for modem_img being unlabeled after disable-verity.
Bug: 193113005
Change-Id: I64b528d9952849ff73bcd583211d33c3b220438d
2021-07-09 23:27:30 +08:00
Orion Hodson
da1f469dc8
Revert "Update avc error on ROM 7522385"
...
This reverts commit 46dfc784f5
.
Bug: 192895524
Test: PtsSELinuxTestCases
Change-Id: Iaf00b567fbd3df575ea009036c2e35f6a7a87d90
2021-07-09 15:51:12 +01:00
Meng Wang
7fb6fd8f29
Merge "[RCS] Update sepolicy for RCS" into sc-dev am: 1c6e5c01eb
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15185251
Change-Id: Id84850bf689dd9b060fa3ef12dcb31937f84eab7
2021-07-08 17:29:20 +00:00
Meng Wang
1c6e5c01eb
Merge "[RCS] Update sepolicy for RCS" into sc-dev
2021-07-08 17:14:51 +00:00
TreeHugger Robot
3d080673a4
Merge "[3A Coordinator] Enable to property_set for log.tag. prefix" into sc-dev am: 95756a2c79
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15223178
Change-Id: I31a476f1d9db6714eb7a229639da600ed70c4877
2021-07-08 07:00:51 +00:00
TreeHugger Robot
95756a2c79
Merge "[3A Coordinator] Enable to property_set for log.tag. prefix" into sc-dev
2021-07-08 05:55:52 +00:00
SHUCHI LILU
889d8d67b4
Merge "Update avc error on ROM 7527858" into sc-dev am: 54780f7ae3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15222136
Change-Id: I6d978bcf07c78945666eb1b56454f7f457145dcc
2021-07-08 03:05:31 +00:00
SHUCHI LILU
54780f7ae3
Merge "Update avc error on ROM 7527858" into sc-dev
2021-07-08 02:53:28 +00:00
KRIS CHEN
4108dc59c6
Merge "Add sepolicy rules for fingerprint hal" into sc-dev am: ba9051de47
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15223175
Change-Id: I610ada122ff075bff8ef9e446fa91ceac293bf09
2021-07-08 02:22:04 +00:00
Bo-Yuan Ye
20dd1ef66c
[3A Coordinator] Enable to property_set for log.tag. prefix
...
major changes:
1. add log_tag_prop for hal_camera_default
Test: go/p21-camera-test-checklist
Bug: 191923902
Change-Id: I767c235666c6761af6d21178d829a0f7cb8d42c8
2021-07-08 10:15:23 +08:00
KRIS CHEN
ba9051de47
Merge "Add sepolicy rules for fingerprint hal" into sc-dev
2021-07-08 02:05:03 +00:00
Myung-jong Kim
99e75b6ab9
[RCS] Update sepolicy for RCS
...
Fix seapp_contexts sepolicy for shannon-rcs, where
:shannonrcsservice process exceptions are not handled
Bug: 190581528
Signed-off-by: Myung-jong Kim <mj610.kim@samsung.com>
Change-Id: I15cbf103cea70f6db878305a8fca6b35aa521f9b
2021-07-07 10:57:12 -07:00
Kris Chen
a5c9028ced
Add sepolicy rules for fingerprint hal
...
Fix following avc denial:
servicemanager: type=1400 audit(0.0:8): avc: denied { call } for scontext=u:r:servicemanager:s0 tcontext=u:r:hal_fingerprint_default:s0 tclass=binder permissive=0
Bug: 192040144
Test: No above avc denial in logcat.
Change-Id: I1b93474cac4ccb24736bc97665a7ca533ef0a7d3
2021-07-08 00:59:49 +08:00
Maciej Zenczykowski
1886ddd1af
Merge "add sepolicy for set_usb_irq.sh" into sc-dev am: 9b270f0fc5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15219696
Change-Id: I02f1d2dd5a9837c90a67db03f83cb9d8e7e6708a
2021-07-07 16:36:33 +00:00
Maciej Zenczykowski
9b270f0fc5
Merge "add sepolicy for set_usb_irq.sh" into sc-dev
2021-07-07 16:23:13 +00:00
Maciej Żenczykowski
714075eba7
add sepolicy for set_usb_irq.sh
...
Bug: 185092876
Test: TreeHugger, booted on oriole, enabled/disabled tethering
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I7361a4390197e04b27eaf153a696e3f800f79b55
2021-07-07 16:22:33 +00:00