Commit graph

2485 commits

Author SHA1 Message Date
Wilson Sung
2747579f1e Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 329380891
Test: scanBugreport
Bug: 329381126
Test: scanAvcDeniedLogRightAfterReboot
Bug: 329380363
Change-Id: I604c091a24f3f13f7a354c08c210deeaa9ac9cb1
2024-03-13 09:28:36 +00:00
Thiébaud Weksteen
d01ca34870 [automerger skipped] Remove persist.bootanim.color property definitions am: ece5909d1c am: e1d9702dad -s ours
am skip reason: Merged-In I9d92456d7e790398a79a941738e3290975f7b659 with SHA-1 4baa59a176 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2995061

Change-Id: Ifb107af725886c5c99d4c4d37224e712bdb87913
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 06:40:18 +00:00
Thiébaud Weksteen
e1d9702dad Remove persist.bootanim.color property definitions am: ece5909d1c
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2995061

Change-Id: I63f41da6a07965a0a4584a27a386fd736e42721d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 05:57:14 +00:00
Thiébaud Weksteen
ece5909d1c Remove persist.bootanim.color property definitions
These now belong to the platform policy.

Bug: 321088135
Test: build
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:4baa59a176f6c4d287871f297b1d6481c8882379)
Merged-In: I9d92456d7e790398a79a941738e3290975f7b659
Change-Id: I9d92456d7e790398a79a941738e3290975f7b659
2024-03-08 01:38:12 +00:00
Xin Li
002d891a05 [automerger skipped] Merge Android 14 QPR2 to AOSP main am: a4ca12105a -s ours am: 5fc9504894 -s ours
am skip reason: Merged-In I75fb73fcb7f1adbcc511fec0e64c9fbd311e5e0c with SHA-1 0395eebcad is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2989097

Change-Id: I28dd491e45593d69fa8a4679bd4905bb76980731
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 10:46:21 +00:00
Xin Li
5fc9504894 [automerger skipped] Merge Android 14 QPR2 to AOSP main am: a4ca12105a -s ours
am skip reason: Merged-In I75fb73fcb7f1adbcc511fec0e64c9fbd311e5e0c with SHA-1 0395eebcad is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2989097

Change-Id: I3978083a92f1c630eedbf1d293fc19c0485dac0c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 09:54:55 +00:00
Xin Li
a4ca12105a Merge Android 14 QPR2 to AOSP main
Bug: 319669529
Merged-In: I75fb73fcb7f1adbcc511fec0e64c9fbd311e5e0c
Change-Id: I1f1180e489bba5e4f74339bc7b1f076c4efb52e3
2024-03-06 09:29:48 -08:00
Sungtak Lee
9088b1a9be Add AIDL media.c2 into service_contexts
Bug: 321808716
Change-Id: Ib2426b1997517b23d1301f3a1a30d9029d129971
2024-03-05 06:16:54 +00:00
Peter Lin
1c7d8f80f2 add dsim wakeup labels
Bug: 322035303
Bug: 321733124
test: ls sys/devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/wakeup -Z
Change-Id: Ifcf73176620f44743a8aa252f8afed85c3af475c
2024-03-04 03:02:14 +00:00
Nathan Kulczak
1e0e9963e3 Remove SELinux exception
Remove SELinux dontaudit section after cl to fix race condition was merged.

Bug: 306344298
Test: Passed on local and automated SELinuxUncheckedDenialBootTest
Change-Id: I5b17c49d47775253491c61e54f1a268fd16081a1
Signed-off-by: Nathan Kulczak <nathankulczak@google.com>
2024-02-27 05:27:01 +00:00
Thiébaud Weksteen
988131fe3d Revert^2 "Remove persist.bootanim.color property definitions"
d9b51a61ce

Change-Id: I18c3a290947c21a572754eeecd1d5204c2cbe523
2024-02-25 23:58:59 +00:00
Rubin Xu
d9b51a61ce Revert "Remove persist.bootanim.color property definitions"
Revert submission 26301396-bootanim_prop

Reason for revert: DroidMonitor-triggered revert due to breakage https://android-build.corp.google.com/quarterdeck/?branch=git_main&target=sdk_goog3_x86_64-trunk_staging-userdebug&lkgb=11487950&lkbb=11488141&fkbb=11488141

Bug: 326521604

Reverted changes: /q/submissionid:26301396-bootanim_prop

Change-Id: Ia393a62bd05546f19e326cce013a009ad77c5d52
2024-02-23 12:25:04 +00:00
Thiébaud Weksteen
4baa59a176 Remove persist.bootanim.color property definitions
These now belong to the platform policy.

Bug: 321088135
Test: build
Change-Id: I9d92456d7e790398a79a941738e3290975f7b659
2024-02-23 02:59:53 +00:00
Will McVicker
9be1081f00 Update tcpm i2c sepolicy with new device name
The new name fixes uninformative kernel wakelock names.

Bug: 315190967
Bug: 323447554
Change-Id: I88ecec344fd1eb84c5ca12a6bd3fad38cc40295b
2024-02-22 17:54:36 +00:00
Lei Ju
967204e373 [gs201] Use common settings for Contexthub HAL
The change also labeled files under /data/vendor/chre/ to grant
required access.

Test: compilation
Bug: 248615564
Change-Id: Ia96b7a592523e7b5e64acb8cb7ae4f0f1fc3a78b
2024-02-18 11:43:27 -08:00
Jacky Liu
28c042f51a Update i2c device paths
Update i2c device paths with static bus numbers.

Bug: 323447554
Test: Boot to home
Change-Id: I3d41e1819aa7df896322a0dca44449c1e871dff8
2024-02-06 16:16:53 +00:00
Wilson Sung
51d66f9b58 Update SELinux error
Test: scanBugreport
Bug: 323086890
Test: scanAvcDeniedLogRightAfterReboot
Bug: 323086703
Change-Id: Idfe9e28e668b0b268acbaa68ae23083972dd146f
2024-01-31 02:58:24 +00:00
Xin Li
f3a672ab0c [automerger skipped] Merge Android 24Q1 Release (ab/11220357) am: 0395eebcad -s ours
am skip reason: Merged-In I3381aaa1e08637c1cc8eb278bd775c81b32ed3bd with SHA-1 04bc1d210a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/25973468

Change-Id: I737857f2de84411f52bf91c44c0b1b2527bf86ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-31 02:03:14 +00:00
Darren Hsu
1f8b299ace sepolicy: allow hal_power_stats to read sysfs_display
avc:  denied  { read } for  name="available_disp_stats"
dev="sysfs" ino=76162 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 317767775
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: I272f69f4c4720eb4800a8a13ef62e1ab34cbaedf
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2024-01-29 05:59:52 +00:00
Jack Wu
f32bd56cb0 dontaudit on dir search for vendor_charger_debugfs
Bug: 307863370
Change-Id: I6da7b9426cdcc6152ff05ef7cd0cf18b718ab875
Signed-off-by: Jack Wu <wjack@google.com>
2024-01-26 20:13:23 +08:00
Wilson Sung
bbb8e0618f Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 322036333
Test: scanBugreport
Bug: 322035303
Bug: 315104803
Test: scanAvcDeniedLogRightAfterReboot
Bug: 322036333
Bug: 315104803
Change-Id: Ide2a5f5d6636d0374e724de9991a71123396a85f
2024-01-23 22:22:36 +00:00
Wilson Sung
f52acbf0cf Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 321731318
Test: scanBugreport
Bug: 315104803
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315104803
Change-Id: I5fc3c161edc102c2418145c69c1f94125d73783e
2024-01-22 17:41:28 +00:00
Xin Li
0395eebcad Merge Android 24Q1 Release (ab/11220357)
Bug: 319669529
Merged-In: I3381aaa1e08637c1cc8eb278bd775c81b32ed3bd
Change-Id: I75fb73fcb7f1adbcc511fec0e64c9fbd311e5e0c
2024-01-17 22:12:36 -08:00
Wilson Sung
25835bcc61 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 319403445
Test: scanBugreport
Bug: 319403445
Test: scanAvcDeniedLogRightAfterReboot
Bug: 319403445
Change-Id: I739ae803828538555a92989e71d85df5c77c0bd2
2024-01-16 20:01:43 +00:00
Mahesh Kallelil
00d82676e9 Remove modem_svc selinux error from denials bug_map
This property was removed and is not being used anymore. So
modem_svc will not need to read it.

Bug: 316816342
Change-Id: I9fe6002e34f7dd5fea0371d41d417c778c3d0905
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2024-01-12 06:43:47 +00:00
Ken Yang
f1c2498079 selinux: label wakeup for BMS I2C 0x36, 0x69
Bug: 319035561
Change-Id: I45a80157d2a1d12a27a748aed31bb0ae5b08e7b5
Signed-off-by: Ken Yang <yangken@google.com>
2024-01-10 06:12:19 +00:00
wenchangliu
997782c603 gs201: move mediacodec_samsung sepolicy to gs-common
remove mediacodec_samsung sepolicy in legacy path since we will include it from gs-common.

Bug: 318793681
Test: build pass, camera record, youtube
Change-Id: I08a9ce89155324b0ac749bde4a9d205585a57320
Signed-off-by: wenchangliu <wenchangliu@google.com>
2024-01-09 14:49:56 +00:00
timtmlin
8c955289ca Remove obsolete entries
Bug: 315720727
Bug: 315721328
Test: make
Change-Id: I176dd469a78d8c6c80bdfc72f377951955ffd543
2023-12-27 15:42:02 +08:00
Wilson Sung
8751aabb8a Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 317734397
Test: scanBugreport
Bug: 317734683
Bug: 315104803
Test: scanAvcDeniedLogRightAfterReboot
Bug: 317734963
Bug: 315104803
Change-Id: If88b24f947ed750b9e6ca8d83c1762e09b9cfebb
2023-12-26 03:43:31 +00:00
Chi Zhang
c45f36f10e Allow GRIL to get power stats.
SELinux : avc:  denied  { find } for pid=3147 uid=10219 name=android.hardware.power.stats.IPowerStats/default scontext=u:r:grilservice_app:s0:c219,c256,c512,c768 tcontext=u:object_r:hal_power_stats_service:s0 tclass=service_manager permissive=1

Bug: 286187143
Test: build and boot
Change-Id: I4588708267fc0f582c767a93e5a422a6e40b6369
2023-12-19 12:21:45 -08:00
Wilson Sung
c131634ccf Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 316816342
Test: scanBugreport
Bug: 316817103
Bug: 315104803
Test: scanAvcDeniedLogRightAfterReboot
Bug: 316816342
Bug: 315104803
Change-Id: I4806c007ce70fab72a3754afbf3cf218dfc4b4fc
2023-12-18 03:26:48 +00:00
Jenny Ho
04bc1d210a sepolicy: add read wlc sysfs permission
12-12 18:33:17.960000  1000   906   906 I auditd  : type=1400 audit(0.0:10): avc:  denied  { read } for  comm="android.hardwar" name="type" dev="sysfs" ino=75851 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0

Bug: 306534100
Change-Id: I3381aaa1e08637c1cc8eb278bd775c81b32ed3bd
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2023-12-13 07:31:13 +00:00
Xin Li
ea3f55a026 [automerger skipped] Merge Android 14 QPR1 am: 5f9cc46c75 -s ours am: 7af1b9d304 -s ours am: e8cb7392ba -s ours
am skip reason: Merged-In I8ee515e5ae5498296342d1f432ba9fa5716f221d with SHA-1 3dbfb9e35f is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2866361

Change-Id: I2dfdcd71b09693fc3e9f6de7f3c376b94ee43846
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-11 22:57:29 +00:00
Xin Li
e8cb7392ba [automerger skipped] Merge Android 14 QPR1 am: 5f9cc46c75 -s ours am: 7af1b9d304 -s ours
am skip reason: Merged-In I8ee515e5ae5498296342d1f432ba9fa5716f221d with SHA-1 3dbfb9e35f is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2866361

Change-Id: If5980ad15bebe1ae2b83e8ea8971044658c1cbd8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-11 22:02:16 +00:00
Xin Li
7af1b9d304 [automerger skipped] Merge Android 14 QPR1 am: 5f9cc46c75 -s ours
am skip reason: Merged-In I8ee515e5ae5498296342d1f432ba9fa5716f221d with SHA-1 3dbfb9e35f is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2866361

Change-Id: Iee7d406102b238debd416fed74724025a032c946
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-11 21:16:27 +00:00
Boon Jun Soh
a4fa4427bc Fix rlsservice sepolicy
Allows bugreport generation

Bug: 315255760
Bug: 309379465
Test: abd bugreport & ensure lack of rls avc denied logs
Change-Id: Ic390d6ddd6bac78e5979c78bc6d02262f08b3468
2023-12-11 07:30:24 +00:00
Wilson Sung
c118ee96ab Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 315720727
Test: scanBugreport
Bug: 315721328
Bug: 315104479
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315104479
Bug: 315720727
Change-Id: I936dba39a2d2cfbd6c2924aed7c1e2f8b9e00fb2
2023-12-11 02:54:55 +00:00
Xin Li
5f9cc46c75 Merge Android 14 QPR1
Merged-In: I8ee515e5ae5498296342d1f432ba9fa5716f221d
Bug: 315507370
Change-Id: Ifae34bf7561f1fd8f5997b3690ac0d9e5a0c3335
2023-12-08 13:13:24 -08:00
Wilson Sung
bf2cd60aaa Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 315104803
Test: scanBugreport
Bug: 315104594
Bug: 315104803
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315104803
Change-Id: Iad6a4ea7a3a58c161359a87a6083a015665d5b14
2023-12-06 10:43:28 +00:00
David Drysdale
eca39285c5 Add Secretkeeper HAL
Test: VtsAidlAuthGraphSessionTest
Bug: 306364873
Change-Id: I84d4098960d6445da1eb7e58e25a015cd591d6b3
2023-12-06 10:21:00 +00:00
Jason Chiu
e2d9795558 gs201: move sepolicy related to bootctrl hal to gs-common
Bug: 265063384
Change-Id: I30a71900c2a305b05ae6e17d658df32d95097d14
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-12-05 01:21:53 +08:00
Daniel Norman
505ad2718a [automerger skipped] Removes duplicate hidraw_device type definition. am: da3e268e93 am: bd29602190 -s ours am: 5d4faaf6e3 -s ours
am skip reason: Merged-In Ia2f817ce99548c30f39a5164c8f6ec323db66155 with SHA-1 da3e268e93 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2855385

Change-Id: I719477aa9af015d4939c978a01dbbafac5569c4c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:29:26 +00:00
Daniel Norman
5d4faaf6e3 [automerger skipped] Removes duplicate hidraw_device type definition. am: da3e268e93 am: bd29602190 -s ours
am skip reason: Merged-In Ia2f817ce99548c30f39a5164c8f6ec323db66155 with SHA-1 da3e268e93 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2855385

Change-Id: I7df8e98a28dbd73224a9ea246e704d077043018e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:24:43 +00:00
Daniel Norman
839207f924 [automerger skipped] Removes duplicate hidraw_device type definition. am: da3e268e93 am: 3dbfb9e35f am: 15b83914ec -s ours
am skip reason: Merged-In Ia2f817ce99548c30f39a5164c8f6ec323db66155 with SHA-1 b204558a73 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2855385

Change-Id: I2ff31ebd9a9938a13c752d86c11e840a97420e0d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:23:58 +00:00
Daniel Norman
bd29602190 Removes duplicate hidraw_device type definition. am: da3e268e93
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2855385

Change-Id: Ibde6e0c05689f4849c37564e310859d82af26c69
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:51:10 +00:00
Daniel Norman
15b83914ec Removes duplicate hidraw_device type definition. am: da3e268e93 am: 3dbfb9e35f
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2855385

Change-Id: I5a54857df8d56e73b69d2f14eb39c7c58eb58fa8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:48:23 +00:00
Daniel Norman
3dbfb9e35f Removes duplicate hidraw_device type definition. am: da3e268e93
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2855385

Change-Id: I8ee515e5ae5498296342d1f432ba9fa5716f221d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:45:34 +00:00
Daniel Norman
da3e268e93 Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Test: ls -z /dev/hidraw0
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:b204558a731d6a6a79b701dc8d7c017f59e9af93)
Merged-In: Ia2f817ce99548c30f39a5164c8f6ec323db66155
Change-Id: Ia2f817ce99548c30f39a5164c8f6ec323db66155
2023-11-30 23:27:56 +00:00
Khoa Hong
a2847d4475 Suppress avc error log on debugfs's usb folder.
The XHCI driver in kernel will write debugging information to DebugFS on
some USB host operations (for example: plugging in a USB headphone). We
are not using those information right now.

Bug: 305880925
Bug: 311088739
Test: No error when plugging a USB headphone in.
Change-Id: I3b53a3924a1fb3f2a37b0d8a1ae9df037cbc1dd2
2023-11-30 14:59:09 +08:00
Randall Huang
2bd12254f4 Move sg_device related policy
Bug: 312582937
Test: make selinux_policy
Change-Id: I18617643e66d6d2fe5ff19e440dea204206b3035
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-11-22 14:16:38 +08:00