Stephane Lee
aacf5c43fc
Bug fixed in ag/19153533
...
Bug: 238260742
Test: N/A
Change-Id: I4f7494eb37b04f994e14b7ff418bc9e2819e25cb
2022-07-22 16:59:10 -07:00
Tri Vo
13f3fdc8ff
storageproxyd: Remove setuid/setgid SELinux permissions
...
Bug: 205904330
Test: fingerprint enrollment/authentication
Change-Id: Ied64163f1142c1dd05274867c2863592e49042f3
2022-07-22 17:30:42 +00:00
sukiliu
eabd743991
Remove regmap from list
...
Bug: 227286343
Test: PtsSELinuxTestCases
Change-Id: I0df048e6944623d992f66688550e534c038714d9
2022-07-22 04:19:13 +00:00
Jack Wu
49b9a9a859
Update SELinux error am: c50018a543
am: fb3b2b7988
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19379646
Change-Id: I2319322791af38d9d4e44591a18f56d1a8f6dd3b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-21 18:42:52 +00:00
Jack Wu
c50018a543
Update SELinux error
...
Bug: 238398889
Test: no avc denied in TreeHugger verified
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: Ia18714461cb9f30fe110917489adddee98de194f
2022-07-21 21:44:03 +08:00
Adam Shih
ebd7170495
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 239632439
Change-Id: I42608d6fc5b3128915f7801e9000548a12ce7efa
2022-07-20 09:12:17 +08:00
Adam Shih
2c3812aac3
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 239484651
Bug: 239484612
Change-Id: If07a3611f40324d985a387c6dd7f2570c90c7c11
2022-07-19 09:07:27 +08:00
Adam Shih
52ec99ce41
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 239364360
Change-Id: I6ea0b1a4fabd7ac29470afa48a0d84beccf0af28
2022-07-18 10:55:53 +08:00
Adam Shih
5eda61d1e0
Update SELinux error
...
Bug: 234547283
Change-Id: I81b2885e2b7c7f77f76bc6048c901dfc4226a4fb
2022-07-15 00:30:06 +00:00
Robb Glasser
6652430fc4
Remove HAL sensors dontaudits. am: 46c4571485
am: b93c3b981b
am: 5325bbdf2f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19281889
Change-Id: Ifed619dba499bd940ff2c7019b7c3d6ef6e5998e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-14 02:53:05 +00:00
Robb Glasser
46c4571485
Remove HAL sensors dontaudits.
...
Sensors HAL sepolicy is written, but the dontaudit parts were not
cleaned up at the time. Removing these as they are no longer needed.
Bug: 227695036
Test: No denials as expected.
Change-Id: Idc0ed7f380cb07bfc7695ef3019f335fd8fad0a2
2022-07-13 11:06:04 -07:00
Adam Shih
9899069adb
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 238705599
Change-Id: Ia78ce7f5b2adc41f7d64b99279681acce647e8bb
2022-07-12 12:49:17 +08:00
Adam Shih
1e606d96f1
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 238571150
Change-Id: Idb8c4f3e99d23e73fe2e63beec1142d1207c0a05
2022-07-11 10:24:25 +08:00
Daniel Angell
3adb31f004
Remove dontaudit rules related to storageproxyd's /data access.
...
Removing dontaudits for both tracking_denials/tee.te and
whitechapel_pro/tee.te results in no new audit log messages related to
storageproxyd, so they can both be removed.
Bug: 215649571
Test: adb logcat | grep -iE 'storageproxyd'
Change-Id: I8dc735bcaf0725c8d4eab4587f7a7fce21f4e25c
2022-07-07 18:37:23 +00:00
Jenny Ho
eeced97ca9
fix avc error for fg_model/registers
...
remove tracking with fix http://ag/19145061
Bug: 226271913
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: Idaa9e75a013dc7c78234bff041819c3c131f3793
2022-07-07 06:14:42 +00:00
Adam Shih
e87fbe539d
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 238260726
Bug: 238260742
Bug: 238260741
Change-Id: Ia3796d62a044b6c0e55c280918251f48143cfd0f
2022-07-07 10:23:05 +08:00
Adam Shih
2bd613cfe6
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 227121550
Change-Id: I3e5c653a63b099aa44a880c4d1b2a327415f4d97
2022-07-06 01:24:15 +00:00
Denny cy Lee
7bb9a6aaf4
HwInfo: remove -sepolicy/tracking_denials/hardware_info_app.te
...
Bug: 208909060
Test: not avc log for hardware_info_app
Change-Id: I52dd55bcea0dd70f60d9156937861ef2036dc46d
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2022-07-06 01:24:08 +00:00
Adam Shih
74ff6db973
Update error on ROM 8765438
...
Bug: 238037492
Bug: 237093466
Test: SELinuxUncheckedDenialBootTest
Change-Id: I4b067085dc0c9f79b715505a5831cab63fda6381
Merged-In: I4b067085dc0c9f79b715505a5831cab63fda6381
2022-07-05 03:11:33 +00:00
Adam Shih
c0ec14b9b1
Update error on ROM 8765438
...
Bug: 238037492
Bug: 237093466
Test: SELinuxUncheckedDenialBootTest
Change-Id: I4b067085dc0c9f79b715505a5831cab63fda6381
2022-07-05 11:10:34 +08:00
Alex Hong
3439f51f28
Remove googlebattery from dontaduit list
...
Bug: 237700766
Bug: 237491814
Test: PtsSELinuxTestCases
Change-Id: Ic4119e552827a490ba829a80cd10c5fc3ba1d35e
2022-07-01 16:59:04 +08:00
SalmaxChang
5631fe741c
ssr_detector_app: remove tracking denials
...
Avc errors already fixed. Remove tracking denials.
Bug: 205202542
Change-Id: I08522d563de58e4bc2be2c4a1bea54bbeac6adb8
2022-06-30 07:39:34 +00:00
sukiliu
b5edce085f
Update avc error on ROM 8780665
...
Bug: 237491813
Bug: 237492145
Bug: 237491814
Bug: 237492146
Bug: 237492091
Test: PtsSELinuxTestCases
Change-Id: I615453d58ea17306ceefe6195bc95974de0f259b
2022-06-30 05:53:29 +00:00
SalmaxChang
a7127617ba
ssr_detector_app: remove tracking denials
...
Avc errors already fixed. Remove tracking denials.
Bug: 207571417
Bug: 205202542
Change-Id: I97d5f732e038dbdaf7885bdb9ca63bc518a97d51
2022-06-29 15:52:43 +00:00
sukiliu
1f681630c4
[Do not merge] Remove regmap from list
...
Bug: 227286343
Test: PtsSELinuxTestCases
Change-Id: If32c472dcd6c0e0b83008a660ca6bbe6d79f44e3
2022-06-27 03:33:16 +00:00
jimmyshiu
ffec0c64b4
Remove dontaudit since read early_wakeup completed
...
The display file node, early_wakeup, just for trigger the worker for
display and it doesn't have meaningful read function. But PowerHAL read
all nodes and try to dump their valuesi while triggering bugreport. As
the read operation has been completed, so we can remove the clause.
07-02 00:53:56.888 522 522 W android.hardwar: type=1400 audit(0.0:8): avc: denied { dac_read_search } for capability=2 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0
07-02 00:53:56.888 522 522 W android.hardwar: type=1400 audit(0.0:9): avc: denied { dac_override } for capability=1 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0
Bug: 192617242
Bug: 208909174
Bug: 221384860
Test: adb shell dumpsys android.hardware.power.IPower/default
Change-Id: Ice57c5cda51db150ec313337bb2385503f43529f
2022-06-27 02:11:57 +00:00
Peter Csaszar
d893b6e7f8
Remove ssr_detector_app dontaudits
...
Bug: 207571417
Test: pts-tradefed run pts -m PtsSELinuxTest
Signed-off-by: Peter Csaszar <pcsaszar@google.com>
Change-Id: I2e92edf4d22a142a3817b5f399edd65ebbe4b32f
2022-06-24 04:38:18 +00:00
Jinting Lin
515e981d41
Remove obsolete sepolicy of silentlogging am: d3d4af1aac
am: dad0dce95f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735
Change-Id: Ib5d064fe80ca94ef0b1ba7b2f3712ad453066d66
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 06:46:34 +00:00
Jinting Lin
6769f9e352
Remove obsolete sepolicy of silentlogging am: d3d4af1aac
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735
Change-Id: I7fbe60eee731c910d75113b2b7b1de9f10b227ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 06:28:50 +00:00
Jinting Lin
d3d4af1aac
Remove obsolete sepolicy of silentlogging
...
Bug: 221384996
Test: adb bugreport
Change-Id: I35a9dae665f11196ec900346c41a3c786bfdf5fa
2022-06-20 05:48:22 +00:00
Siarhei Vishniakou
555d8a9aca
Revert "Update avc error on ROM 8732242"
...
This reverts commit 6e578b6825
.
Bug: 236200710
Test: verified locally
Reason for revert: sepolicy was fixed, no more need for the exception
Change-Id: Ic343b513c5426e5caca77bcd8c56f7336834b4ec
2022-06-20 00:21:50 +00:00
sukiliu
c25afee26a
[Do not merge]Update avc error on ROM 8732242
...
Bug: 236200710
Test: PtsSELinuxTestCases
Merged-In: I9b4b487aa78a69fe981a542aef1a7dbe368a30ce
Change-Id: I9b4b487aa78a69fe981a542aef1a7dbe368a30ce
2022-06-16 03:24:58 +00:00
sukiliu
6e578b6825
Update avc error on ROM 8732242
...
Bug: 236200710
Test: PtsSELinuxTestCases
Change-Id: I9b4b487aa78a69fe981a542aef1a7dbe368a30ce
2022-06-16 03:13:44 +00:00
Nucca Chen
1b954eef3b
Remove clatd tracking_denial
...
Bug: 210363983
Change-Id: Ie3a38ef9cdb4447a3684912d2a65b0167c484cc6
Test: boot with no relevant error log
2022-06-14 17:37:46 +00:00
Adam Shih
2005390966
remove obsolete entry
...
Bug: 228181404
Test: boot with no avc error log
Change-Id: Ic8d71ef8ddb99eafb366929af695a50d4779ac0c
2022-06-14 11:32:27 +08:00
Adam Shih
8d011823ed
allow dumpstate to access sde partition
...
Bug: 221384768
Test: do bugreport without relevant error log
Change-Id: I26b0246f8d99a5efce8f7d1b65fa50faafb599e2
2022-06-13 13:11:12 +08:00
Adam Shih
dc339dc780
remove obsolete entry
...
Bug: 229354991
Test: take a bug report without showing relevant logs
Change-Id: I3c75ca4e79085205f50c07b8ceea9757760a8763
2022-06-13 11:09:23 +08:00
Krzysztof Kosiński
2d44b5d5d0
Add dontaudit statements to camera HAL policy.
...
The autogenerated dontaudit statements in tracking_denials are
actually the correct policy. Move them to the correct file and
add comments.
Bug: 218585004
Test: build & camera check
Change-Id: Ie0338f0d2a6fd0c589777a82c22a014e462bd5c2
(cherry picked from commit 26b2d2e33e
)
2022-06-10 20:19:12 +00:00
Adam Shih
ec7b23cf03
remove obsolete entries
...
Bug: 227694693
Bug: 226850644
Bug: 227121550
Bug: 229677756
Bug: 234547497
Test: adb bugreport
Change-Id: I94a7466ece0a1e79dc31d737b89845343ea7d301
2022-06-09 05:35:40 +00:00
Adam Shih
b66ae2f304
update error on ROM 8666963 am: 2a7ecbdce0
am: a038a3604c
am: 0c2906ad8f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18683654
Change-Id: I78170999211b22a3941ca2fb5294ee84ea36afcd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-01 09:48:01 +00:00
Adam Shih
2a7ecbdce0
update error on ROM 8666963
...
Bug: 234547497
Test: boot
Change-Id: Ic5a9d39449af035a32aaea71b06d7bd33e16cf4b
2022-06-01 08:35:23 +00:00
Krzysztof Kosiński
26b2d2e33e
Add dontaudit statements to camera HAL policy.
...
The autogenerated dontaudit statements in tracking_denials are
actually the correct policy. Move them to the correct file and
add comments.
Bug: 205780065
Bug: 218585004
Test: build & camera check
Change-Id: Ie0338f0d2a6fd0c589777a82c22a014e462bd5c2
2022-05-10 05:36:53 +00:00
George Chang
3135c26574
Remove st33spi tracking_denial
...
Fixed by remove property access from st33spi hal
aosp/2064213
Bug: 229167195
Test: PtsSELinuxTestCases
Change-Id: Icee8bea36ad68e60a32cfa8c35a2ab9ff6ee515a
2022-04-21 08:27:28 +00:00
Labib
b4c3e55628
Let RadioExt talk to bt hal am: 2b189b45af
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17821687
Change-Id: Ia79174e3f47e9cd7b1c9c2bd12c91da7543e2baf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 03:58:47 +00:00
Labib
2b189b45af
Let RadioExt talk to bt hal
...
Bug: 227122249
Test: Manual
Change-Id: I9f41615e8e862af147d6f47e5e4c4e0dde40c233
2022-04-20 03:20:39 +00:00
sukiliu
abdd44b0fd
Update avc error on ROM 8468959
...
Bug: 229677756
Test: PtsSELinuxTestCases
Change-Id: I0423fa9c02e1e16ecf8ec32d89046704f2667d64
2022-04-20 01:53:16 +00:00
sukiliu
aa794b4e43
Update avc error on ROM 8459635
...
Bug: 229354991
Test: PtsSELinuxTestCases
Change-Id: I6b5d7d5b1368021bd927dedf786081c600289974
2022-04-18 01:05:57 +00:00
sukiliu
81d9623cbe
Update avc error on ROM 8453400
...
Bug: 229209076
Test: PtsSELinuxTestCases
Change-Id: I05f06fe0d62cbfbd4783ba9c57dea7d7a7a35fca
2022-04-15 00:52:48 +00:00
sukiliu
f0810342eb
Update avc error on ROM 8449600
...
Bug: 229167195
Test: PtsSELinuxTestCases
Change-Id: I0b6cb1142aff6fbfbe828e014a5d9aad91b9817f
2022-04-14 05:58:56 +00:00
Jenny Ho
f1a9fb4da2
sepolicy: add sepolicy for disable.battery.defender
...
Bug: 221384939
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: Iba8f4e7abca98b5805eb75ba386c90581269f749
2022-04-14 01:06:58 +00:00