Commit graph

2358 commits

Author SHA1 Message Date
Utku Utkan
27ce9336a3 Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices" am: 34bda7b2b8 am: 2fb35adebd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24124266

Change-Id: I5b7b0b5af1b0eac9513897494da5201f4fea6332
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 19:58:34 +00:00
Utku Utkan
2fb35adebd Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices" am: 34bda7b2b8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24124266

Change-Id: I0675ba6da1fff3561ec1ab23711526657ccc3c93
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 18:49:47 +00:00
Utku Utkan
34bda7b2b8 Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices"
Revert submission 24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL

Reason for revert: Relanding the original topic after copying the certificates under `device/google` for `without-vendor` branches

Reverted changes: /q/submissionid:24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL

Bug: 287069860
Test: m && flashall
Change-Id: I5326b61822d367beaff0ac97a34708d306c60007
2023-07-18 20:37:28 -07:00
Inseob Kim
1dae17837d Revert "Introduce CameraServices seinfo tag for PixelCameraServices" am: c420cef154 am: 3539653f98
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24122569

Change-Id: I15231b5d87ef4c47bf2413c28b48974fda7f10c1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 03:33:47 +00:00
Inseob Kim
3539653f98 Revert "Introduce CameraServices seinfo tag for PixelCameraServices" am: c420cef154
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24122569

Change-Id: I192d7d1ba78d7381d3dd122cacbdd7a37d16d67d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 02:50:45 +00:00
Inseob Kim
c420cef154 Revert "Introduce CameraServices seinfo tag for PixelCameraServices"
Revert submission 24056607-pixel-camera-services-extensions-sepolicy

Reason for revert: build breakage on git_main-without-vendor

Reverted changes: /q/submissionid:24056607-pixel-camera-services-extensions-sepolicy

Change-Id: I9869874507230f59ac3b8cdc2538e4f223216b45
2023-07-19 01:15:39 +00:00
Utku Utkan
c1f776c272 Introduce CameraServices seinfo tag for PixelCameraServices am: d45ff39442 am: 47f7d7ef72
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24030396

Change-Id: Ie157ffc9d3d457df512c8c84eff1bd09634e627a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-18 22:35:37 +00:00
Utku Utkan
47f7d7ef72 Introduce CameraServices seinfo tag for PixelCameraServices am: d45ff39442
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24030396

Change-Id: I1ecfa136567806f140067eaed98766c6da66d2ee
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-18 21:49:07 +00:00
Dinesh Yadav
b29cf7645a [Cleanup]: Move gxp sepolicies to gs-common for P22
These policies are moved to gs-common as part of ag/24002524

Bug: 288368306
Change-Id: If7466983009021c642db998e1c30071ee548846e
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-07-14 04:00:23 +00:00
Utku Utkan
d45ff39442 Introduce CameraServices seinfo tag for PixelCameraServices
Bug: 287069860
Test: m && flashall && check against 'avc: denied' errors
Change-Id: I41b435ae0a34fe9c797b9316887c4b56091a26a5
2023-07-13 09:11:06 -07:00
David Anderson
91768e10c9 Allow fastbootd to flash dtbo. am: e96a14a9d2 am: 439827c49d am: a03ec9af21 am: a7e9f0a873 am: 96009e517c am: d06d2415a5
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: I74bd7c4a44e03d77acbc8207a6c848b990f1afc8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 01:31:45 +00:00
David Anderson
d06d2415a5 Allow fastbootd to flash dtbo. am: e96a14a9d2 am: 439827c49d am: a03ec9af21 am: a7e9f0a873 am: 96009e517c
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: I1ccfdb2e8605b5cec757b8ad8d7be6fb414cb9c9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 00:52:30 +00:00
David Anderson
96009e517c Allow fastbootd to flash dtbo. am: e96a14a9d2 am: 439827c49d am: a03ec9af21 am: a7e9f0a873
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: Ie086b1fb169292469ec153039beee50ae782276d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 00:07:32 +00:00
David Anderson
a7e9f0a873 Allow fastbootd to flash dtbo. am: e96a14a9d2 am: 439827c49d am: a03ec9af21
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: I29b1070280c3e88e976dab3c02b110786ca8f11b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 23:22:17 +00:00
David Anderson
a03ec9af21 Allow fastbootd to flash dtbo. am: e96a14a9d2 am: 439827c49d
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: Id20a32d6a80e058caebf2047e59a1b5a3e519f43
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 22:41:44 +00:00
David Anderson
439827c49d Allow fastbootd to flash dtbo. am: e96a14a9d2
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: Ifc30a96202cbeb38896f3545502b582168dcf53e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 21:57:26 +00:00
David Anderson
e96a14a9d2 Allow fastbootd to flash dtbo.
This line is copied from gs101-sepolicy, and fixes the following denial:

audit: type=1400 audit(1689093038.396:14): avc:  denied  { write } for  pid=409 comm="fastbootd" name="sda24" dev="tmpfs" ino=493 scontext=u:r:fastbootd:s0 tcontext=u:object_r:custom_ab_block_device:s0 tclass=blk_file permissive=0

Bug: N/A
Test: fastboot flashall in fastbootd
Change-Id: I765aedeb204cc862434a56a97f242640465f84b8
2023-07-11 10:27:47 -07:00
Samuel Huang
77de7a48b1 Revert "Revert "Create telephony.ril.silent_reset system_ext pro..." am: d02a8eef29 am: e4b6e55e35
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23841769

Change-Id: I07665711913e1cddd8d8e2968bfa340f8d77f232
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-07 03:10:44 +00:00
Samuel Huang
e4b6e55e35 Revert "Revert "Create telephony.ril.silent_reset system_ext pro..." am: d02a8eef29
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23841769

Change-Id: I09f53d8147f813aaaeea55b57d1cfb97b0dd0001
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-07 02:32:58 +00:00
Samuel Huang
d02a8eef29 Revert "Revert "Create telephony.ril.silent_reset system_ext pro..."
Revert submission 23817868-revert-23736941-tpsr-ril-property-WQVGKEVBKX

Reason for revert: The root cause is missing property definition in gs101-sepolicy. This CL can be merged safely. Verified by abtd run: https://android-build.googleplex.com/builds/abtd/run/L48900000961646046

Reverted changes: /q/submissionid:23817868-revert-23736941-tpsr-ril-property-WQVGKEVBKX

Bug: 286476107
Change-Id: Ia80e4400ff555a637c42193cab3e3acf72bc36a2
2023-07-07 01:45:23 +00:00
Sebastian Pickl
91585993ad Revert "Allow bthal to access vendor bluetooth folder" am: 41ed8e83ea am: d3ef7a804c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23874549

Change-Id: I67ec25d1297413c4504f6830f766d086585667e6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-05 12:43:27 +00:00
Sebastian Pickl
d3ef7a804c Revert "Allow bthal to access vendor bluetooth folder" am: 41ed8e83ea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23874549

Change-Id: Ib4ecdceb5d125c05bce9a6c9edc4b24cbc53a8c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-05 12:02:20 +00:00
Sebastian Pickl
41ed8e83ea Revert "Allow bthal to access vendor bluetooth folder"
Revert submission 23844270-P22-vendor-log-udc-qpr

Reason for revert: causes selinux tests to fail b/289989584

go/abtd: https://android-build.googleplex.com/builds/abtd/run/L37600000961782595

Bug:289989584

Reverted changes: /q/submissionid:23844270-P22-vendor-log-udc-qpr

Change-Id: I4e9ccf17050702a6405c549340e7fe97eba0eb65
2023-07-05 10:11:12 +00:00
Patty Huang
8bece71dbe Allow bthal to access vendor bluetooth folder am: 1a52c8b952 am: 3e1348f4fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23854004

Change-Id: I2349fab8fc749e60ce6c2425ea4af9a4f9cbca6e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-05 07:49:36 +00:00
Patty Huang
3e1348f4fc Allow bthal to access vendor bluetooth folder am: 1a52c8b952
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23854004

Change-Id: I0d9ef1e480423715137fcbf7b9651753a9c8fa24
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-05 07:07:56 +00:00
Patty Huang
1a52c8b952 Allow bthal to access vendor bluetooth folder
Bug:289055382
Test: enable vendor debug log and check the vendor snoop log contain the
vendor log

Change-Id: I89164330998d7fbea45dab65931c2a3db22a4c92
2023-06-30 11:55:35 +08:00
DesmondH
3219a0a19f Remove obsolete entries
Fix: 274727778
Change-Id: I1334cd68043d6ef8c36a42fb47d888f9b061bfb4
2023-06-28 05:28:11 +00:00
Sebastian Pickl
706b9b4328 Revert "Create telephony.ril.silent_reset system_ext property fo..." am: 4d0eeef36f am: b617ab420a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23817869

Change-Id: I3c55e93124e9fb9b86ee4a9eeebf524d3b6e309a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 12:03:39 +00:00
Sebastian Pickl
b617ab420a Revert "Create telephony.ril.silent_reset system_ext property fo..." am: 4d0eeef36f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23817869

Change-Id: I032ae4c04d68265389f8575378bc9364af6f897b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 11:16:33 +00:00
Sebastian Pickl
4d0eeef36f Revert "Create telephony.ril.silent_reset system_ext property fo..."
Revert submission 23736941-tpsr-ril-property

Reason for revert: culprit for b/289014054 verified by abtd run: https://android-build.googleplex.com/builds/abtd/run/L54800000961620143

Bug: 289014054

Reverted changes: /q/submissionid:23736941-tpsr-ril-property

Change-Id: I4fa5b2803392e0db03bb622392f3d4afab6a45ea
2023-06-27 10:05:45 +00:00
Xin Li
d16b5fbdf9 [automerger skipped] Merge Android 13 QPR3 am: aaef0b7773 -s ours am: 7e4592c70a -s ours am: dc4a87253c -s ours am: c9d5097e56 -s ours am: 645f996b23 -s ours am: 041513071c -s ours
am skip reason: Merged-In Idc925c7a1f1111840a64664aa50c39442c3a0f8f with SHA-1 307e2c2fc8 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2635310

Change-Id: I1ac1cb0f39b271cea2fbd871da4806295fab199e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 08:05:58 +00:00
Xin Li
041513071c [automerger skipped] Merge Android 13 QPR3 am: aaef0b7773 -s ours am: 7e4592c70a -s ours am: dc4a87253c -s ours am: c9d5097e56 -s ours am: 645f996b23 -s ours
am skip reason: Merged-In Idc925c7a1f1111840a64664aa50c39442c3a0f8f with SHA-1 307e2c2fc8 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2635310

Change-Id: I79e95a7ffa397de68457910bd23b1117806e018c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 07:25:45 +00:00
Samuel Huang
4ad090fbed Create telephony.ril.silent_reset system_ext property for RILD restart am: 513fa361c8 am: 5e8765956e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23748040

Change-Id: I07a7f558bb96efb5fa164db6a2041883853cb948
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 03:55:53 +00:00
Samuel Huang
5e8765956e Create telephony.ril.silent_reset system_ext property for RILD restart am: 513fa361c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23748040

Change-Id: I543184268827663ee5bbd96299a3e5d109f6807d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 03:07:56 +00:00
Xin Li
645f996b23 [automerger skipped] Merge Android 13 QPR3 am: aaef0b7773 -s ours am: 7e4592c70a -s ours am: dc4a87253c -s ours am: c9d5097e56 -s ours
am skip reason: Merged-In Idc925c7a1f1111840a64664aa50c39442c3a0f8f with SHA-1 307e2c2fc8 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2635310

Change-Id: I702a5374d5ddff6d17ae5f49e79654ab7d85ab81
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 01:14:07 +00:00
Xin Li
c9d5097e56 [automerger skipped] Merge Android 13 QPR3 am: aaef0b7773 -s ours am: 7e4592c70a -s ours am: dc4a87253c -s ours
am skip reason: Merged-In Idc925c7a1f1111840a64664aa50c39442c3a0f8f with SHA-1 307e2c2fc8 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2635310

Change-Id: I903de348dca44cf893578b33b13743269685a480
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 00:32:37 +00:00
Xin Li
dc4a87253c [automerger skipped] Merge Android 13 QPR3 am: aaef0b7773 -s ours am: 7e4592c70a -s ours
am skip reason: Merged-In Idc925c7a1f1111840a64664aa50c39442c3a0f8f with SHA-1 307e2c2fc8 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2635310

Change-Id: I07063c3d9cf1418132ec611701713baa7b783f59
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-26 23:10:28 +00:00
Xin Li
7e4592c70a [automerger skipped] Merge Android 13 QPR3 am: aaef0b7773 -s ours
am skip reason: Merged-In Idc925c7a1f1111840a64664aa50c39442c3a0f8f with SHA-1 307e2c2fc8 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2635310

Change-Id: I27e4864161d3db815ad9cedad4da2af6ee082826
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-26 22:57:43 +00:00
Xin Li
aaef0b7773 Merge Android 13 QPR3
Bug: 275386652
Merged-In: Idc925c7a1f1111840a64664aa50c39442c3a0f8f
Change-Id: I2f0a022715577d395a6d9d2c8ec6b9a7f37fe509
2023-06-21 15:14:53 -07:00
Samuel Huang
513fa361c8 Create telephony.ril.silent_reset system_ext property for RILD restart
RILD listens for changes to this property. If the value changes to 1, RILD will restart itself and set this property back to 0.

The TelephonyGoogle app will set this property to 1 when it receives a request from the SCONE app. Since TelephonyGoogle runs in the com.android.phone process, we also need to give the radio domain permission to set the telephony.ril.silent_reset property.

Bug: 286476107
Test: manual
Change-Id: I689e75f4ebf3f44915bd7f795755f297935e7946
2023-06-21 06:34:45 +00:00
DesmondH
a66e949591 Remove fixed or obsolete entries
Bug: 227121550
Bug: 237491813
Change-Id: I6e3ca53d92ae0a1db1565feb7e70d72b57f697e1
2023-06-15 04:14:11 +00:00
changyan
c3c3f7fd0c Fix avc denied for cat_engine_service_app
Test: SELinuxUncheckedDenialBootTest
Bug: 282626814
Change-Id: I742e2b20bff09812d2a3ae07903b29e8eae45915
2023-06-15 03:31:36 +00:00
changyan
61abd02cd3 Updating sepolicy for dump_modem to read /dev/logbuffer_cpif. This is
required as part of bugreport.

Test: Pts SELinuxTest#scanBugreport
Bug: 277300226
Fix: 282626702
Change-Id: I129116ab78ec89da1529e33be1cfd403715889af
2023-06-14 07:58:46 +00:00
Jenny Ho
8b8342d351 Add permissions for maxfg_base/maxfg_secondary am: ee160b5880 am: 6067855d5c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23467290

Change-Id: Id4ace18bf58015a16a9d2853e9a6e4454b9bf133
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-09 10:36:57 +00:00
Donnie Pollitz
ea402405b9 Allow vendor_init to fix permissions of TEE data file am: 955ae6825f am: b30363a096
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23412161

Change-Id: I42cae3d9674713d499c3ab62932f6385a0901df3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-09 07:13:16 +00:00
sashwinbalaji
df1869708b thermal: thermal_metrics: Update selinux to reset stats am: 1113c66dea am: 29900c796a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23078641

Change-Id: I43475c66886b75f839a66b4c4bdbec3fc6ef9bdf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-09 04:46:45 +00:00
Jin Jeong
2ef7f3800c Revert "Fix SELinux error for com.google.android.euicc" am: 10ef6d8619 am: c281730f15
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23163634

Change-Id: Ifed88b292601d6e7bf3d7457d2f1e1ca1b345b9c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-09 04:43:38 +00:00
Jin Jeong
94e0acb7e7 Revert "Fix LPA crash due to selinux denial" am: 980c71bea4 am: a5149fb731
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23167565

Change-Id: I2ed7e1ef04acf8cbf3b5355ad2f662ff22dd40e8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-09 04:43:32 +00:00
Anthony Zhang
c68578d4e0 [automerger skipped] [DO NOT MERGE] Allow fingerprint to access persist property am: 7f19e81d61 am: d2a2b8c339 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23286924

Change-Id: If408ce422d46065337412bc6d79244107f94f459
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-09 04:37:06 +00:00
Luis Delgado de Mendoza Garcia
230b6b1e95 [automerger skipped] Add chre channel sepolicy entries am: 3992c42501 am: 7ac088bb18 -s ours
am skip reason: Merged-In I3151d25c4a1cd7a858b84e0c8989dc160d368ca5 with SHA-1 3992c42501 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22829545

Change-Id: Icc50942ccf66eb0c242c977c020aca137f53f75b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-09 04:36:56 +00:00