Darren Hsu
a7e3b39ca4
sepolicy: allow PowerStats HAL to call BT HAL
...
Bug: 205904367
Test: dump power stats with no relevant avc error
Change-Id: Idc7ecbc7e3571011c8c12c421bdce0015e78135f
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-01-24 02:04:21 +00:00
Adam Shih
13bd5ff5df
let vendor_init set usb property
...
[ 6.419785] type=1107 audit(1642741073.304:7): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.usb.rndis.config pid=352 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=property_service permissive=0'
Bug: 205214899
Test: unplug and plug in usb with no relevant error
Change-Id: I8104ba9f0e0cb5b8b0d5e66964d9306d39d4c296
Change-Id: Ib76f7cae9015bcbd255d79edc099072a58860028
2022-01-21 07:03:22 +00:00
Adam Shih
cf275e10c6
fix sim card related permission
...
[ 21.176786] type=1107 audit(1642737478.108:25): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.radio.allowed_types_loaded0 pid=1931 uid=10205 gid=10205 scontext=u:r:oemrilservice_app:s0:c205,c256,c512,c768 tcontext=u:object_r:vendor_rild_prop:s0 tclass=property_service permissive=1'
[ 32.319439] type=1400 audit(1642737489.248:28): avc: denied { read } for comm="pool-4-thread-1" name="u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=321 scontext=u:r:vendor_ims_app:s0:c212,c256,c512,c768 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=1 app=com.shannon.imsservice
Bug: 205214899
Test: boot to home with sim card inserted
Change-Id: Id54441adc109d6977013abdc94c31d9b46bc203b
2022-01-21 07:03:02 +00:00
William Tai
492f8a39f4
allow android.hardware.power.stats-service.pixel to access sysfs_leds
...
01-20 15:26:18.272 760 760 I android.hardwar: type=1400 audit(0.0:8): avc: denied { search } for name="backlight" dev="sysfs" ino=69387 scontext=u:r:hal_power_stats_default:s0 tcontext=u:object_r:sysfs_leds:s0 tclass=dir permissive=1
01-20 15:26:18.272 760 760 I android.hardwar: type=1400 audit(0.0:9): avc: denied { read } for name="state" dev="sysfs" ino=69419 scontext=u:r:hal_power_stats_default:s0 tcontext=u:object_r:sysfs_leds:s0 tclass=file permissive=1
01-20 15:26:18.272 760 760 I android.hardwar: type=1400 audit(0.0:10): avc: denied { open } for path="/sys/devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/backlight/panel0-backlight/state" dev="sysfs" ino=69419 scontext=u:r:hal_power_stats_default:s0 tcontext=u:object_r:sysfs_leds:s0 tclass=file permissive=1
Bug: 214473005
Test: no avc denied error during bootup
Change-Id: I5b8a232202a8f1c5b10878c10be9bec3329fb7ad
2022-01-21 06:14:32 +00:00
Devika Krishnadas
35abe98124
Edit vframe-secure policy
...
Bug: 215417614
Test: GL2SecureRendering.apk
Signed-off-by: Devika Krishnadas <kdevika@google.com>
Change-Id: Ief75b8581887d28916d512ec90acc575311276db
2022-01-21 04:47:21 +00:00
Adam Shih
3062ac34cd
allow storageproxyd to set itself to system
...
Bug: 205904330
Test: boot to home under enforcing mode
Change-Id: I48272f6507f6cdb930f734b86d3b21b0e553cac0
2022-01-20 14:48:49 +08:00
Adam Shih
26778aff7b
be able to dump camera info
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: I90a4c971c50290c38f7913dc18404daf0270b907
2022-01-20 14:17:00 +08:00
Adam Shih
f56dba1b24
be able to dump CPU info
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: I14abe138b6ad4a842edb143318cc5d867d575ec3
2022-01-20 14:11:25 +08:00
Adam Shih
36dc06e08a
be able to dump debugfs info
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: I4f7fc7a8f0029f1c1f398403d938bd6b7b96a43e
2022-01-20 11:12:06 +08:00
Adam Shih
8209221242
be able to run usf dump binary
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: I83687a284c4a27e723e31ce19edd2cbceaa69ab8
2022-01-20 11:12:06 +08:00
Adam Shih
f6dd48e07b
be able to dump modem silent log
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: Iec520b21d904fa4119a4111fe4de659c28634826
2022-01-20 11:12:06 +08:00
Adam Shih
0e96eb0865
be able to dump rfsd info
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: Idbe125d76392a8c04b3fa5f475e0c3aa2f9a199c
2022-01-20 11:12:06 +08:00
Adam Shih
43d7a148d5
be able to dump GPS
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: Ied6d86090e3ae29c0b49c4880a515669940c5706
2022-01-20 11:12:06 +08:00
Adam Shih
bfe1d014a2
be able to dump chip id
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: Ie539ab9afac80ea58e418a6fbe503ad822299b3f
2022-01-20 11:12:06 +08:00
Adam Shih
8518e2e1ce
be able to dump wireless charging info
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: Ie4e19a322a312e183e23197f600a527ee5ceed4d
2022-01-20 11:12:06 +08:00
Adam Shih
75ad9a3fcc
be able to dump exynos info
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: I72ca4c8715130558d8dd3dccbf941dde6b9f064e
2022-01-20 11:12:05 +08:00
Adam Shih
93000fdd06
be able to dump aoc info
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: I60cb5cce8b6cb7e417ee3efdeceeaafc2f071dfa
2022-01-20 11:12:05 +08:00
Adam Shih
2417726674
be able to dump crashinfo
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: Id01348da754d39f36262a7757d8c65ee746032c3
2022-01-20 11:12:05 +08:00
Adam Shih
dee839cecd
be able to dump thermal
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: I6f8e2ce3b64220efba4172ef6fe05cc3fdbb6cf3
2022-01-20 11:12:05 +08:00
Adam Shih
f884bc1f19
be able to dump wifi info
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: I3d0c257a20cfd6da6572cd01e76416dfa56c3c23
2022-01-20 11:12:05 +08:00
Adam Shih
e8da0e146f
be able to dump bcl in userdebug ROM only
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: Id8127d495ff1b332284beda1e411b2327ec8625f
2022-01-20 11:12:05 +08:00
Adam Shih
db22459b69
be able to dump battery info
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: I3705ee59b37d34c7d676943ca8f0c9995ef0262e
2022-01-20 11:12:05 +08:00
Adam Shih
7717461bb2
be able to dump acpm
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: I2435fea779977313e2f731733463c5c4313fda3c
2022-01-20 11:12:05 +08:00
Adam Shih
7897e0f6ca
Be able to dump ramdump info
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: I0cd8ca483df669505f11ff6fdd19cc15cb9959e1
2022-01-19 05:38:52 +00:00
Adam Shih
03fbacc6ac
Be able to dump radio info
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: I6a83029e9e0d0c42892b64a8acfa60cc514efba9
2022-01-19 05:38:52 +00:00
Adam Shih
f72d021bd0
Be able to dump modem info
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: I0b9384ec4ddda5d3d49a451c529c03fc4d53da8f
2022-01-19 05:38:52 +00:00
Adam Shih
5b00a6c8a2
Be able to dump logbuffer
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: Ieae4d64b497e911a6c8048f789e364cd1b9d2f4b
2022-01-19 05:38:52 +00:00
Adam Shih
b8053f6b6e
Be able to dump citadel info
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: I4f76a17004b81adbddeb7557e50f488b471aa3c7
2022-01-19 05:38:52 +00:00
Adam Shih
11d9e265ee
be able to dump aoc device
...
Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: Icbb2364638dbabe9bcccd744413d5c679b35d058
2022-01-19 05:38:52 +00:00
Chris Lu
ca13b6a9bf
hardwareinfo: add sepolicy for display
...
Bug: 203593024
Test: 1. rm -r /data/data/com.google.android.hardwareinfo/
2. Connect wifi and reboot
3. Check hardwareinfo, there is no avc denied logs
Change-Id: I44db881286946a283f320302efd6e662fcdae683
2022-01-19 04:27:22 +00:00
Adam Shih
b2f810f9dd
sort tracking file to review it easily
...
Bug: 208909124
Bug: 208721677
Test: boot with no relevant error when taking a bugreport
Change-Id: I5dc5d5cdbae329372f58f056dcf10e205ee7e02a
2022-01-18 08:30:45 +00:00
Adam Shih
72a1bebd3d
update error on ROM 8088139
...
Bug: 215042694
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I741e1e101f050fe915142ec1699d2bbc553f14d7
2022-01-18 05:42:55 +00:00
Matt Buckley
59a7bf0bb7
SEPolicy access issue for hal_graphics_composer_default should be fixed
...
with ag/16631829
Bug: b/214473134
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Id790bbfb9db534b86c4c5ae4564cfb2d5771ec4b
2022-01-17 20:51:58 +00:00
joenchen
dd55e32ba1
Label min_vrefresh and idle_delay_ms as sysfs_display
...
Bug: 213299701
Test: Check the files label by "adb shell ls -Z"
Change-Id: I4c10582ec7dee516b54fb8aac77dafa825aaa93d
2022-01-17 10:21:16 +00:00
Adam Shih
56df08e495
fix dumpstate permission
...
Bug: 208721809
Test: run bugreport under enforcing mode and found no relevant errors
Change-Id: I106d95fd01b321af815ef8e580305702be716021
2022-01-17 14:54:54 +08:00
Adam Shih
d9a2fb8506
grant systemui app access to touch service
...
Bug: 204718221
Test: boot with no relevant error
Change-Id: Ic320cf682e481522ef9acad6c4eb63891c84c80c
2022-01-17 11:20:07 +08:00
linjoey
42ac322b3d
Add vulkan and gralloc sepolicy.
...
Bug: 206891640
Test: Test CTS testVulkanHardwareFeatures passed.
Change-Id: Ia14aa691d6dbfad40344895c9e6a63a267754864
2022-01-17 02:21:04 +00:00
Adam Shih
0b322cac3d
make GPU mali firmware accessible
...
Bug: 205779849
Test: boot with no relevant log.
Change-Id: I0cc1c1f84df44b5fbed239d6771937f62861bdb2
2022-01-17 02:11:39 +00:00
Matt Buckley
5bf8862b01
Allow HWC to get device_config_surface_flinger_native_boot_prop for adpf flags
...
For the hardware composer and surfaceflinger to coordinate on certain features, it is necessary for the hardware composer to be able to read the surface_flinger_native_boot_prop to know what should be enabled.
Bug: b/214473134
Test: None
Change-Id: If03dae54ea17a8131c489f56092c0edd974ea41b
2022-01-14 20:20:24 +00:00
Xu Han
9633922461
Fix rlsserive selinux denials
...
Bug: 213817228
Test: check "avc denied" log with camera streaming.
Change-Id: Id255ffab3ca145cb0708b701e2afccdcd76ef4ea
2022-01-14 10:22:40 -08:00
Adam Shih
22786d49a4
update error on ROM 8078837
...
Bug: 214473134
Bug: 214473005
Bug: 214473093
Bug: 214472867
Bug: 214472869
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I8a84883655b6b259b0079d947496616974beb944
2022-01-14 05:44:13 +00:00
Siddharth Kapoor
8b241f5c35
Update selinux for init-insmod-sh needed for gpu probe
...
Bug: 207062151
Test: related avc denials not noticed in the device logs
Change-Id: I87ff2251fd7d92f8b0eb3fac43889758788b702f
Signed-off-by: Siddharth Kapoor <ksiddharth@google.com>
2022-01-14 04:24:52 +00:00
chloedai
f442239ffd
Remove nfc.te
...
type=1400 audit(0.0:186): avc: denied { transfer } for
scontext=u:r:nfc:s0 tcontext=u:r:zygote:s0
tclass=binder permissive=1
type=1400 audit(1636594745.812:186): avc: denied { transfer } for
comm="Binder:2617_2" scontext=u:r:nfc:s0 tcontext=u:r:zygote:s0
tclass=binder permissive=1
Bug: 205904208
Test: Run test and check "avc: denied { transfer }" error in avc log
Change-Id: I38f396de7d18eb32cc1c6ff6b30ee51122f4c3b0
2022-01-13 13:00:14 +00:00
Jasmine Cha
431ba37038
audio: add sepolicy for getting thermal event
...
type=1400 audit(0.0:15): avc: denied { call } for scontext=u:r:hal_audio_default:s0
tcontext=u:r:hal_thermal_default:s0 tclass=binder permissive=1
type=1400 audit(0.0:16): avc: denied { transfer } for scontext=u:r:hal_audio_default:s0
tcontext=u:r:hal_thermal_default:s0 tclass=binder permissive=1
Bug: 204271308
Test: build pass
Signed-off-by: Jasmine Cha <chajasmine@google.com>
Change-Id: I73070815b1ab73a58fd776e1301a5d4a8e198109
2022-01-12 11:32:47 +00:00
linpeter
72dc78222f
update display sepolicy
...
Bug: 205073165
Bug: 205656937
Bug: 205779906
Bug: 205904436
Bug: 207062172
Bug: 208721526
Bug: 204718757
Bug: 205904380
Bug: 213133646
test: check avc denied with hal_graphics_composer_default, hbmsvmanager_app
Change-Id: I964a62fa6570fd9056b420efae7bf2fcbbe9fc9f
2022-01-12 08:10:50 +00:00
Adam Shih
673d412421
update error on ROM 8069652
...
Bug: 214121738
Bug: 214122471
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I8db4e1c7d5a2cf50798c63a3a1eda0fa82b89f5a
2022-01-12 11:14:35 +08:00
Yifan Hong
d799f2f773
Implement health AIDL HAL.
...
Test: VTS
Test: manual charger mode
Test: recovery
Bug: 213273090
Change-Id: I823e202f8877ad04e7fb5508358682bc6458f7c1
2022-01-11 21:39:14 +00:00
TeYuan Wang
89bec046aa
Label TMU as sysfs_thermal
...
Bug: 202805103
Test: switch thermal tj property and check thermal threshold
Change-Id: Ie1d20912f6111cbb85c04fce5a39e2be803e530f
2022-01-11 05:52:04 +00:00
Ray Chi
9b8f698ee8
Fix avc denials for USB hals
...
Bug: 205073230
Bug: 207062542
Bug: 208527968
Test: no avc log for hal_usb_impl
Change-Id: I840d8cb69ed9189f2697d13ae43b4bdeb25cd616
2022-01-10 18:33:56 +08:00
Adam Shih
af12430ab3
update error on ROM 8058425
...
Bug: 213817227
Bug: 213817228
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I8d4eaf583b7b012e55705eb99684f97af2dd611f
2022-01-10 06:56:02 +00:00