qinyiyan
ee4e7f45ce
Revert the unnecessary sepolicy rules for hal_neuralnetworks_darwinn.
...
Bug: 194241380
Test: flashed forrest build and ran PtsSELinuxTestCases
Change-Id: Ie2f0572a368f09e522bc2cdfdf9da1859c1c44e7
2021-07-30 23:36:06 +00:00
Michael Eastwood
30bd5e8ed6
Allow hal_dumpstate_default to access vendor_camera_debug_prop
...
Bug: 193365129
Test: atest com.google.android.selinux.pts.SELinuxTest#scanBugreport
Change-Id: I43e389d46e8116844bb9ca4259e5ea28e86c50f4
2021-07-27 17:22:47 -07:00
sukiliu
411aa59779
Update avc error on ROM 7566803
...
avc: denied { read } for name="platform:1cc40000.sysmmu--platform:1ce00000.abrolhos" dev="sysfs" ino=21006 scontext=u:r:hal_neuralnetworks_darwinn:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
Bug: 194241380
Test: PtsSELinuxTestCases
Change-Id: If7ee99a36bca88fffc37c12dc306e0453afb1395
2021-07-21 09:36:05 +08:00
sukiliu
06ea8d9432
Update avc error on ROM 7550575
...
Bug: 193726003
Bug: 193633303
Bug: 193548421
Test: PtsSELinuxTestCases
Change-Id: Id6cb13602eb9a69f7815a0301a5708577c663bd2
2021-07-15 09:33:58 +08:00
TreeHugger Robot
0afce44985
Merge "Revert "Update avc error on ROM 7526917"" into sc-dev
2021-07-13 17:03:43 +00:00
Michael Ayoubi
04d9f1ac13
Revert "Update avc error on ROM 7526917"
...
This reverts commit 81a8e5b4ce
.
Reason for revert: <Qorvo Version P2-S4(ag/15139489) which caused these errors got reverted from sc-dev in ag/15224151. It will now go into master>
Bug: 192924316
Change-Id: I772053cf512ba555a5fa657d39f957ac51f013c1
2021-07-13 17:03:26 +00:00
Adam Shih
9d7e88c27e
suppress error for ag/15263334
...
Bug: 193474772
Test: boot with no relevant error found
Change-Id: Ia3f49fbf9e623c6b81d6c595e19e275f64521dfe
2021-07-13 09:57:18 +08:00
sukiliu
a06677ce7a
Update avc error on ROM 7539530
...
avc: denied { read } for name="u:object_r:vendor_camera_debug_prop:s0" dev="tmpfs" ino=300 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:vendor_camera_debug_prop:s0 tclass=file permissive=0
avc: denied { read } for comm="dumpstate@1.1-s" name="u:object_r:vendor_camera_debug_prop:s0" dev="tmpfs" ino=300 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:vendor_camera_debug_prop:s0 tclass=file permissive=0
Bug: 193365129
Test: PtsSELinuxTestCases
Change-Id: I1d0258ec4ce2abbf8f899add86be2076c0c72be0
2021-07-12 09:49:17 +08:00
SHUCHI LILU
54780f7ae3
Merge "Update avc error on ROM 7527858" into sc-dev
2021-07-08 02:53:28 +00:00
KRIS CHEN
ba9051de47
Merge "Add sepolicy rules for fingerprint hal" into sc-dev
2021-07-08 02:05:03 +00:00
Kris Chen
a5c9028ced
Add sepolicy rules for fingerprint hal
...
Fix following avc denial:
servicemanager: type=1400 audit(0.0:8): avc: denied { call } for scontext=u:r:servicemanager:s0 tcontext=u:r:hal_fingerprint_default:s0 tclass=binder permissive=0
Bug: 192040144
Test: No above avc denial in logcat.
Change-Id: I1b93474cac4ccb24736bc97665a7ca533ef0a7d3
2021-07-08 00:59:49 +08:00
sukiliu
a2d9731099
Update avc error on ROM 7527858
...
avc: denied { find } for pid=2874 uid=1083 name=isub scontext=u:r:uwb_vendor_app:s0:c59,c260,c512,c768 tcontext=u:object_r:radio_service:s0 tclass=service_manager permissive=0
Bug: 193009345
Bug: 192924316
Test: PtsSELinuxTestCases
Change-Id: I694c1a98ab57123c44717d2af5e57cfc486f76a1
2021-07-07 20:01:18 +08:00
SHUCHI LILU
72bc4971df
Merge "Update avc error on ROM 7526917" into sc-dev
2021-07-07 07:33:25 +00:00
sukiliu
81a8e5b4ce
Update avc error on ROM 7526917
...
Bug: 192980495
Bug: 192980564
Bug: 192924316
Test: PtsSELinuxTestCases
Change-Id: If1042973df8d8eac24065e50e64d5a60c5a4dc49
2021-07-07 10:57:30 +08:00
Randall Huang
d328008234
Fix overlayfs avc denied
...
avc: denied { rename } for comm="init" name="#b" dev="dm-6" ino=52
scontext=u:r:init:s0 tcontext=u:object_r:overlayfs_file:s0
tclass=file permissive=1
avc: denied { unlink } for comm="init" name="#b" dev="dm-6" ino=53
scontext=u:r:init:s0 tcontext=u:object_r:overlayfs_file:s0
tclass=chr_file permissive=1
Bug: 192617244
Test: boot & adb remount
Signed-off-by: Randall Huang <huangrandall@google.com>
Change-Id: I740ff317520439034d2bf6e0659b1418bf6dac5c
2021-07-06 18:19:04 +08:00
sukiliu
755c601dd8
Update avc error on ROM 7515047
...
Bug: 192617242
Bug: 192617244
Test: PtsSELinuxTestCases
Change-Id: I94f7fa36632147676adc46f520e9a2a4f9b413cd
2021-07-02 10:34:49 +08:00
TreeHugger Robot
846cba7286
Merge "Fix hal_uwb_default dumpstate SELinux errors" into sc-dev
2021-07-01 08:07:05 +00:00
Michael Ayoubi
56beb62f69
Fix hal_uwb_default dumpstate SELinux errors
...
Fixes: b/192026913
Test: Run dumpstate and confirm no avc denials
Signed-off-by: Michael Ayoubi <mayoubi@google.com>
Change-Id: I3d818fb066a834663dc63b8757bd16c08a1a0e9e
2021-07-01 06:55:42 +00:00
TreeHugger Robot
5b4e06670f
Merge "remove obsolete errors" into sc-dev
2021-07-01 04:01:19 +00:00
Adam Shih
1a2d199a28
remove obsolete errors
...
Bug: 183338543
Bug: 187015705
Bug: 191133059
Bug: 180963348
Bug: 187016930
Bug: 190563838
Test: boot with no relevant error
Change-Id: I8d194415dc823da9dec5c315a6068d0d2c2d4a6c
2021-07-01 10:49:59 +08:00
Ted Lin
cb3ca1e87b
Remove dontaudit form tracking_denials for maxfg and regmap
...
Bug:190337297
Test: Check the bugreport
Change-Id: I0887e6256b4f158bd525ed66475cd1ef5672c9df
Signed-off-by: Ted Lin <tedlin@google.com>
2021-06-30 11:11:22 +08:00
TreeHugger Robot
15f7a61603
Merge "Sepolicy: Remove permission for fuel gauge" into sc-dev
2021-06-29 01:48:34 +00:00
TreeHugger Robot
a63fbd68d4
Merge "Hardwareinfo: battery info porting" into sc-dev
2021-06-28 16:20:12 +00:00
sukiliu
7ea816284d
Update avc error on ROM 7492139
...
avc: denied { call } for comm="servicemanager" scontext=u:r:servicemanager:s0 tcontext=u:r:hal_fingerprint_default:s0 tclass=binder permissive=0
Bug: 192040144
Test: PtsSELinuxTestCases
Change-Id: I2de11d2706222a88c4234d99399b7b2437f36e31
2021-06-25 14:40:17 +08:00
sukiliu
e31c8840de
Update avc error on ROM 7490489
...
avc: denied { call } for scontext=u:r:dumpstate:s0 tcontext=u:r:hal_uwb_default:s0 tclass=binder permissive=0
avc: denied { call } for comm="dumpstate" scontext=u:r:dumpstate:s0 tcontext=u:r:hal_uwb_default:s0 tclass=binder permissive=0
Bug: 192026913
Test: PtsSELinuxTestCases
Change-Id: Ieca08e87db1b46f3b7fc7de1492e45d4a5bec868
2021-06-25 09:42:51 +08:00
Ilya Matyukhin
2460cdcc9f
raviole: transition SystemUI to use HWC for LHBM
...
This change removes direct access to the LHBM sysfs node from SystemUI,
but allows SystemUI to make binder calls to the hardware composer (HWC),
which can be used to enable or disable LHBM.
Bug: 191132545
Bug: 190563896
Bug: 184768835
Test: no avc denials
Change-Id: I5417377ff096e869ad772e4fd2fb23f8c1fd4f1e
2021-06-23 23:38:27 -07:00
Craig Dooley
7fe9d053e8
Merge "Allow hal_dumpstate to collect AoC statistics" into sc-dev
2021-06-17 16:32:38 +00:00
Craig Dooley
3031b077a3
Allow hal_dumpstate to collect AoC statistics
...
Bug: 188114650
Signed-off-by: Craig Dooley <dooleyc@google.com>
Change-Id: Iba5525af2c651070b9a5f7769c0439ef320d666b
2021-06-16 17:18:55 +00:00
sukiliu
673b8f1014
Update avc error on ROM 7457955
...
Bug: 191132545
Bug: 191133059
Test: PtsSELinuxTestCases
Change-Id: I6a8e7924819734e38c2b6f761eb738f3e4d21c32
2021-06-15 23:23:43 +08:00
Adam Shih
d00aafac75
remove obsolete entries
...
Bug: 190672147
Bug: 173969091
Bug: 171760921
Bug: 178331773
Bug: 178752616
Bug: 188752940
Bug: 184005231
Bug: 182086688
Bug: 177176899
Bug: 182953825
Bug: 176528557
Bug: 183935382
Test: boot and do bugreport with no relevant error showed up
Change-Id: I869db698e96d2d6cfd533b7fd24c8c88d39fd0eb
2021-06-11 10:35:59 +08:00
Denny cy Lee
25373353a7
Sepolicy: Remove permission for fuel gauge
...
Bug: 189811224
Test: manually, read success in enforcing mode
Change-Id: Ie56179980a9946010fb25683e3819cddbfb93cfb
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-11 09:39:53 +08:00
Rick Yiu
797b646234
gs101-sepolicy: Fix avc denial for sysfs_vendor_sched
...
Fix mediaprovider_app and bluetooth
Bug: 190563839
Bug: 190563916
Test: build pass
Change-Id: I477325ee812d1362db4d5005e999cba989a44216
2021-06-10 04:10:24 +00:00
Adam Shih
22fae537b5
Merge "organize EdgeTPU modules and sepolicy" into sc-dev
2021-06-10 02:53:28 +00:00
sukiliu
6ce3aa9d75
Update avc error on ROM 7440434
...
Bug: b/190563838
Bug: b/190563916
Bug: b/190563896
Bug: b/190563897
Test: Test: PtsSELinuxTestCases
Change-Id: Idbd0bc0f9a4770b3f976196058a311820e6e3c11
2021-06-09 16:07:32 +08:00
Rick Yiu
2332c6a43f
Merge "gs101-sepolicy: Fix tracking_denials of sysfs_vendor_sched" into sc-dev
2021-06-09 03:02:37 +00:00
Adam Shih
e7ed46c52c
organize EdgeTPU modules and sepolicy
...
Bug: 190331327
Bug: 190331548
Bug: 189895600
Bug: 190331108
Bug: 182524105
Bug: 183935302
Test: build ROM and check if the modules and sepolicy are still there
Change-Id: I40391a239a16c4fe79d58fab209dcbd1a8f25ede
2021-06-09 10:39:04 +08:00
Rick Yiu
a457b1d640
gs101-sepolicy: Fix tracking_denials of sysfs_vendor_sched
...
Bug: 190368350
Test: build pass
Change-Id: Id742e8328f63c04e5448225975897d8f6adc1e13
2021-06-09 01:34:50 +00:00
Adam Shih
86c45c70e6
Merge "modulize hal_neuralnetwork_armnn" into sc-dev
2021-06-08 23:03:04 +00:00
Denny cy Lee
1eb6bfcd3e
Hardwareinfo: battery info porting
...
Test: No read error in logcat
Bug: 171947164
Bug: 181915166
Bug: 181177926
Bug: 181914888
Bug: 188627513
Change-Id: Ibbed06cc7e6eb00c8611cdc8bc95356b17c7e043
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-08 15:34:31 +08:00
SHUCHI LILU
699d68a092
Merge "Update avc error on ROM 7432667" into sc-dev
2021-06-08 05:50:50 +00:00
sukiliu
bb8b462d7a
Update avc error on ROM 7432667
...
Bug: b/190337281
Bug: b/190337282
Bug: b/190336524
Bug: b/190337295
Bug: b/190337296
Bug: b/190337283
Bug: b/190336723
Bug: b/190336841
Bug: b/190337297
Bug: b/190336525
Test: PtsSELinuxTestCases
Change-Id: I2edda1bf554c0239953b8a31152a09045fb1f15a
2021-06-08 12:48:06 +08:00
Adam Shih
02f93b6096
modulize hal_neuralnetwork_armnn
...
Bug: 189895314
Bug: 171160755
Bug: 171670122
Bug: 180858476
Test: make sure all affected devices' armnn module has the right label
Change-Id: I6ca736f156497738167ba5eea5606a0e654611b9
2021-06-08 11:17:22 +08:00
Long Ling
5afbe4584f
Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev
2021-06-07 16:36:32 +00:00
Long Ling
1064df0f26
sepolicy: gs101: display: fix dumpstate of displaycolor
...
displaycolor service runs in HW Composer. This change allow displaycolor
to output to dumpstate via pipe fd.
Bug: 189846843
Test: adb bugreport and check displaycolor dump in dumpstate_board.txt
Change-Id: I109db9374124caf9053a9fd7ba6159f83c372038
2021-06-06 22:20:19 -07:00
TreeHugger Robot
29a5be5603
Merge "storage: update sepolicy for hardwareinfoservice" into sc-dev
2021-06-04 10:45:34 +00:00
jznpark
3d127f9224
[RCS] Add sepolicy for RCS as non-system app
...
As shannon-rcs has been changed from system app
to non-system app, sepolicy has to be updated.
Bug: 186135775
Bug: 189707387
Test: sanity test
Signed-off-by: jznpark <jzn.park@samsung.com>
Change-Id: I32cce90611c619494136a6b1d01b3fb48330d169
2021-06-03 13:30:26 -07:00
Chiawei Wang
9d5830ac19
pixelstats: fix permission errors
...
1. sysfs_dma_heap erros are fixed by ag/13926718
2. debugfs_mgm error is fixed by ag/14683912
Bug: 188114896
Bug: 183338421
Bug: 188495492
Test: pts-tradefed run pts -m PtsSELinuxTest
http://sponge2/6cbd0af0-5414-4f2c-aea0-99b4981360a4
Signed-off-by: Chiawei Wang <chiaweiwang@google.com>
Change-Id: Icd2fa4e7f168d15fd4cec3000bc0e7a33eab4d3e
2021-06-03 02:52:33 +00:00
sukiliu
073a0f5ed1
Update avc error on ROM 7395282
...
avc: denied { dac_override } for comm="rebalance_inter" capability=1 scontext=u:r:rebalance_interrupts_vendor:s0 tcontext=u:r:rebalance_interrupts_vendor:s0 tclass=capability permissive=0
Bug: 189275648
Test: PtsSELinuxTestCases
Change-Id: I637f1fcd901b8bf59096ba83c927b4d353f0405b
2021-05-26 11:11:03 +08:00
Ocean Chen
b8aebc85e1
storage: update sepolicy for hardwareinfoservice
...
avc: denied { search } for name="0:0:0:0" dev="sysfs" ino=57525 scontext=u:r:hardware_info_app:s0:c512,c768 avc: denied { search } for name="health_descriptor" dev="sysfs" ino=57017 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=dir permissive=0 app=com.google.android.hardwareinfo
avc: denied { search } for name="health_descriptor" dev="sysfs" ino=57017 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=dir permissive=0 app=com.google.android.hardwareinfo
avc: denied { read } for name="vpd_pg80" dev="sysfs" ino=57559 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0 app=com.google.android.hardwareinfo
avc: denied { read } for name="model" dev="sysfs" ino=57534 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0 app=com.google.android.hardwareinfo
avc: denied { read } for name="vendor" dev="sysfs" ino=57533 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0 app=com.google.android.hardwareinfo
avc: denied { read } for name="rev" dev="sysfs" ino=57535 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0 app=com.google.android.hardwareinfo
avc: denied { read } for name="eol_info" dev="sysfs" ino=57020 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0 app=com.google.android.hardwareinfo
avc: denied { read } for name="life_time_estimation_a" dev="sysfs" ino=57021 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0 app=com.google.android.hardwareinfo
Bug: 188755652
Test: reboot then check hardwareinfo and avc denined log
Change-Id: Ia03ebdd6b0b46b4c9ace5fbf1fc47a455a55abcb
2021-05-25 16:57:20 +08:00
sukiliu
ba92629794
Update avc error on ROM 7380236
...
Bug: 188752787
Bug: 188752940
Test: PtsSELinuxTestCases
Change-Id: I5b674d4696ef470956301388f3d0fcc4883010c6
2021-05-20 16:52:43 +08:00