Commit graph

630 commits

Author SHA1 Message Date
SHUCHI LILU
f2bc0d7bd7 Merge "Update avc error on ROM 7444346" into sc-dev am: 61843906c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928573

Change-Id: I4ea6afe2de9a03eca793775f14ea24b8678931cf
2021-06-10 11:22:24 +00:00
SHUCHI LILU
61843906c0 Merge "Update avc error on ROM 7444346" into sc-dev 2021-06-10 11:06:35 +00:00
TreeHugger Robot
e7d53d61b0 Merge "gs101-sepolicy: Fix avc denial for sysfs_vendor_sched" into sc-dev am: a501b656dd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911637

Change-Id: I64965eae7d9d39ed1495bb87b51358a55c894301
2021-06-10 07:39:05 +00:00
TreeHugger Robot
a501b656dd Merge "gs101-sepolicy: Fix avc denial for sysfs_vendor_sched" into sc-dev 2021-06-10 07:20:58 +00:00
sukiliu
d27e574f3e Update avc error on ROM 7444346
Bug: 190672147
Bug: 190671898
Test: Test: PtsSELinuxTestCases
Change-Id: Ie9400df24f30474915d757b61ddb1c3fb77903c5
2021-06-10 15:16:37 +08:00
Adam Shih
922b7f6057 Merge "reorganize trusty_metricsd settings" into sc-dev am: a81732dd6f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911639

Change-Id: I668f8e93d4edf03746aea4cf76155af17df5fb50
2021-06-10 06:13:24 +00:00
Adam Shih
a81732dd6f Merge "reorganize trusty_metricsd settings" into sc-dev 2021-06-10 05:52:40 +00:00
TreeHugger Robot
15c7fdc5bb Merge "update wakeup node" into sc-dev am: d3b0256025
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928571

Change-Id: I787229985b0214fff17ea2feae9b4788e9a35d95
2021-06-10 04:12:58 +00:00
Rick Yiu
797b646234 gs101-sepolicy: Fix avc denial for sysfs_vendor_sched
Fix mediaprovider_app and bluetooth

Bug: 190563839
Bug: 190563916
Test: build pass
Change-Id: I477325ee812d1362db4d5005e999cba989a44216
2021-06-10 04:10:24 +00:00
TreeHugger Robot
d3b0256025 Merge "update wakeup node" into sc-dev 2021-06-10 03:56:50 +00:00
Adam Shih
ef113ab8ac update wakeup node
Bug: 190672147
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I3a8e8fa8b9007f556a5bfb402c4e8c726499d66f
2021-06-10 03:23:52 +00:00
Adam Shih
6f1be4dcf7 Merge "organize EdgeTPU modules and sepolicy" into sc-dev am: 22fae537b5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911633

Change-Id: I4e35a44d8e36220eb05fd478cbdfe8a264d90c29
2021-06-10 03:12:38 +00:00
Adam Shih
8947d2dfeb reorganize trusty_metricsd settings
Bug: 190331503
Test: build ROM and see the file and sepolicy settings are still there
Change-Id: Ib157f64428166232c3bbbd176d3c1fbed4ac31d6
2021-06-10 02:54:00 +00:00
Adam Shih
22fae537b5 Merge "organize EdgeTPU modules and sepolicy" into sc-dev 2021-06-10 02:53:28 +00:00
SHUCHI LILU
c5a1aeaf18 Merge "Update avc error on ROM 7440434" into sc-dev am: e5c8613686
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911640

Change-Id: Id833703d833b14d5a2411c06d021e51bc3790328
2021-06-09 12:28:28 +00:00
SHUCHI LILU
e5c8613686 Merge "Update avc error on ROM 7440434" into sc-dev 2021-06-09 12:05:04 +00:00
TreeHugger Robot
54420d120a Merge "Grant powerhal access to thermal_link_device and sysfs_thermal" into sc-dev am: 3c66c45102
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14731906

Change-Id: I13e36ee7e00f0466e46d0ae340571342fcae197a
2021-06-09 08:08:15 +00:00
sukiliu
6ce3aa9d75 Update avc error on ROM 7440434
Bug: b/190563838
Bug: b/190563916
Bug: b/190563896
Bug: b/190563897
Test: Test: PtsSELinuxTestCases
Change-Id: Idbd0bc0f9a4770b3f976196058a311820e6e3c11
2021-06-09 16:07:32 +08:00
TreeHugger Robot
3c66c45102 Merge "Grant powerhal access to thermal_link_device and sysfs_thermal" into sc-dev 2021-06-09 07:46:26 +00:00
TreeHugger Robot
08f92cd2bd Merge "Add sysfs_camera label for powerhint flow to access intcam & tnr clock" into sc-dev am: c5d10f245a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795451

Change-Id: Iafa97d33e0ecefa938654e15ce0c1e2f4c1660c8
2021-06-09 04:37:08 +00:00
TreeHugger Robot
c5d10f245a Merge "Add sysfs_camera label for powerhint flow to access intcam & tnr clock" into sc-dev 2021-06-09 04:18:05 +00:00
Rick Yiu
e6deaa6d99 Merge "gs101-sepolicy: Fix tracking_denials of sysfs_vendor_sched" into sc-dev am: 2332c6a43f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881664

Change-Id: Idbf01bc803152688c07777fe18fd3d67034d5897
2021-06-09 03:37:29 +00:00
Adam Shih
3277c46446 Merge "modulize hal_neuralnetwork_armnn" into sc-dev am: 86c45c70e6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881659

Change-Id: Id271462cc29108a306f703f7de3ba8499606332e
2021-06-09 03:37:23 +00:00
Rick Yiu
2332c6a43f Merge "gs101-sepolicy: Fix tracking_denials of sysfs_vendor_sched" into sc-dev 2021-06-09 03:02:37 +00:00
Adam Shih
e7ed46c52c organize EdgeTPU modules and sepolicy
Bug: 190331327
Bug: 190331548
Bug: 189895600
Bug: 190331108
Bug: 182524105
Bug: 183935302
Test: build ROM and check if the modules and sepolicy are still there
Change-Id: I40391a239a16c4fe79d58fab209dcbd1a8f25ede
2021-06-09 10:39:04 +08:00
Rick Yiu
a457b1d640 gs101-sepolicy: Fix tracking_denials of sysfs_vendor_sched
Bug: 190368350
Test: build pass
Change-Id: Id742e8328f63c04e5448225975897d8f6adc1e13
2021-06-09 01:34:50 +00:00
Adam Shih
86c45c70e6 Merge "modulize hal_neuralnetwork_armnn" into sc-dev 2021-06-08 23:03:04 +00:00
SHUCHI LILU
0969a773c2 Merge "Update avc error on ROM 7432667" into sc-dev am: 699d68a092
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14860443

Change-Id: Iaef188dc7364e163a4f37c4029d5ac21bd4443a2
2021-06-08 06:08:26 +00:00
SHUCHI LILU
699d68a092 Merge "Update avc error on ROM 7432667" into sc-dev 2021-06-08 05:50:50 +00:00
Maciej Żenczykowski
0dba97d5f2 R4/raven: correctly label wpan0 device as networking am: b22c6cd04a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14889941

Change-Id: Idae2b832bff3c3d4ed5f22d49c0d0d4538efbc1a
2021-06-08 05:35:03 +00:00
sukiliu
bb8b462d7a Update avc error on ROM 7432667
Bug: b/190337281
Bug: b/190337282
Bug: b/190336524
Bug: b/190337295
Bug: b/190337296
Bug: b/190337283
Bug: b/190336723
Bug: b/190336841
Bug: b/190337297
Bug: b/190336525
Test: PtsSELinuxTestCases
Change-Id: I2edda1bf554c0239953b8a31152a09045fb1f15a
2021-06-08 12:48:06 +08:00
Adam Shih
bd69cf5ab8 Remove obsolete context am: c8b02fc4c3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881658

Change-Id: I70fa03febaac4737747d3ad97edec659a33e5918
2021-06-08 03:59:19 +00:00
Maciej Żenczykowski
b22c6cd04a R4/raven: correctly label wpan0 device as networking
Test: atest, TreeHugger, manual observation of labeling
Bug: 185962988
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I068b7da17590fc9dc914db80263b72cc7536c095
2021-06-07 20:34:05 -07:00
Adam Shih
02f93b6096 modulize hal_neuralnetwork_armnn
Bug: 189895314
Bug: 171160755
Bug: 171670122
Bug: 180858476
Test: make sure all affected devices' armnn module has the right label
Change-Id: I6ca736f156497738167ba5eea5606a0e654611b9
2021-06-08 11:17:22 +08:00
Adam Shih
c8b02fc4c3 Remove obsolete context
Bug: 190330778
Test: make selinux_policy with such entry gone
Change-Id: I28844c361a951de35d509ce042e64e090188e755
2021-06-08 11:17:17 +08:00
TreeHugger Robot
293917d723 Merge "Remove unnecessary rules for vendor rcs app" into sc-dev am: 17b8f5cd4e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14848259

Change-Id: Ic3608b4cd9e2271de3db934f188f5c3a8a540b86
2021-06-07 19:29:29 +00:00
TreeHugger Robot
17b8f5cd4e Merge "Remove unnecessary rules for vendor rcs app" into sc-dev 2021-06-07 19:01:45 +00:00
Long Ling
0fcd3a3b25 Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev am: 5afbe4584f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14877618

Change-Id: Icb822dbf08c25a1caf7148c0317ac92e56150f50
2021-06-07 17:07:54 +00:00
Long Ling
5afbe4584f Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev 2021-06-07 16:36:32 +00:00
SalmaxChang
8c50ba3b67 cbd: Fix avc error am: 7865bf8577
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14847064

Change-Id: Ie2c42d0aff8e56e9edcb2d7bcf76a17cc546ac88
2021-06-07 11:30:07 +00:00
Yu(Swim) Chih Ren
d45ada475b Add sysfs_camera label for powerhint flow to access intcam & tnr clock
Test: 1. build selinux and push related files to phone
      2. Use ls -Z "file" to check if selinux content of file is
      expected
      3. P21 camera checklist
Bug: 168654554

Change-Id: Ie757dd3e8adc151c6340e9ca662efbdf0ccb6110
2021-06-07 06:31:09 +00:00
Long Ling
1064df0f26 sepolicy: gs101: display: fix dumpstate of displaycolor
displaycolor service runs in HW Composer. This change allow displaycolor
to output to dumpstate via pipe fd.

Bug: 189846843
Test: adb bugreport and check displaycolor dump in dumpstate_board.txt
Change-Id: I109db9374124caf9053a9fd7ba6159f83c372038
2021-06-06 22:20:19 -07:00
SalmaxChang
7865bf8577 cbd: Fix avc error
avc: denied { search } for comm="cbd" name="/" dev="sda1" ino=2 scontext=u:r:cbd:s0 tcontext=u:object_r:persist_file:s0 tclass=dir permissive=0

Bug: 180687795
Change-Id: I149163760fa47378d03dc2d8c8a00c590788796c
2021-06-07 01:40:59 +00:00
Rick Yiu
a6143b9039 Merge "gs101-sepolicy: Fix avc denials for sysfs_vendor_sched" into sc-dev am: f275064208
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14814591

Change-Id: Ie6a563b2454d7d542b4d2050734f5a7928c80b11
2021-06-07 01:00:08 +00:00
Rick Yiu
f275064208 Merge "gs101-sepolicy: Fix avc denials for sysfs_vendor_sched" into sc-dev 2021-06-07 00:38:36 +00:00
TreeHugger Robot
ce3aeb1167 Merge "Add CccDkTimeSyncService" into sc-dev am: 77cbbc1237
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14273480

Change-Id: I96d9ae4694d61f85c12cc5a7703987e2126390e4
2021-06-04 21:50:06 +00:00
TreeHugger Robot
77cbbc1237 Merge "Add CccDkTimeSyncService" into sc-dev 2021-06-04 21:23:24 +00:00
Hui Wang
724ea61092 Remove unnecessary rules for vendor rcs app
Bug: 190194610
Test: make, manual
Change-Id: I99f624a70a36ad6cf47806faf0eed693383dac5f
2021-06-04 14:03:31 -07:00
TreeHugger Robot
dc56bccef6 Merge "whitechapel: make vframe-secure a system heap" into sc-dev am: aa7a8405e2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14083385

Change-Id: I1923a0062cb753d9a4ce53d900a83a1eed14e59b
2021-06-04 18:21:04 +00:00
TreeHugger Robot
aa7a8405e2 Merge "whitechapel: make vframe-secure a system heap" into sc-dev 2021-06-04 18:02:34 +00:00