Commit graph

1384 commits

Author SHA1 Message Date
Badhri Jagan Sridharan
b401becb46 Allow gadget hal to search i2c dir and write to usb_limit_accessory_enable am: 91a1f49a8a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18553772

Change-Id: Iebf866721ef7f9529c848fa8ee201dfd0d021adb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 00:54:43 +00:00
Badhri Jagan Sridharan
91a1f49a8a Allow gadget hal to search i2c dir and write to usb_limit_accessory_enable
auditd  : type=1400 audit(0.0:4): avc: denied { search } for comm="HwBinder:879_1"
name="10d60000.hsi2c" dev="sysfs" ino=23606 scontext=u:r:hal_usb_gadget_impl:s0
tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0

Bug: 206635552
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
Change-Id: Ibc4ec27ad7d1b7a26c9935aa0c4aff5f03a8d59c
2022-05-23 23:59:44 +00:00
Dinesh Yadav
9427f7fcc7 Add SEPolicy for gxp_metrics_logger.so logging to stats service am: 6513479fe8 am: 9e2930ae12 am: a0cb296dc1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18482687

Change-Id: I7252a62faec659faf8d513b26a667e5f80aee79f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 17:51:35 +00:00
Dinesh Yadav
69671716f1 Add SEPolicy for gxp_metrics_logger.so logging to stats service am: 6513479fe8 am: 822e3afdd3 am: 7fdf368bdb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18482687

Change-Id: Ie3792b2d9b8cde8ece6273fd4da901faf0d90dad
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 17:51:24 +00:00
Dinesh Yadav
a0cb296dc1 Add SEPolicy for gxp_metrics_logger.so logging to stats service am: 6513479fe8 am: 9e2930ae12
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18482687

Change-Id: I1593ff4a2e7d705e1b5e3f44c624a735f60f0231
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 17:48:08 +00:00
Dinesh Yadav
7fdf368bdb Add SEPolicy for gxp_metrics_logger.so logging to stats service am: 6513479fe8 am: 822e3afdd3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18482687

Change-Id: I55e34c0d69c29133ad0e6b9a1eda7430c009b12c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 17:47:53 +00:00
Dinesh Yadav
9e2930ae12 Add SEPolicy for gxp_metrics_logger.so logging to stats service am: 6513479fe8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18482687

Change-Id: I172bb36fa05aa7bff9baf2c864c134a6b942519e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 17:24:21 +00:00
Dinesh Yadav
822e3afdd3 Add SEPolicy for gxp_metrics_logger.so logging to stats service am: 6513479fe8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18482687

Change-Id: I300a7aeb35771c540f6f127e4e972b92dc42d4fe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 17:24:17 +00:00
Dinesh Yadav
6513479fe8 Add SEPolicy for gxp_metrics_logger.so logging to stats service
In order to access the gxp metrics library from the google camera
app (product partition), we need to create an SELinux exception for
the related shared library (in vendor) it uses.
This CL adds the same_process_hal_file tag to allow this exception.

Bug: 177236353

Test: App can load the .so and creates a VLOG message after this change.
Before: No permission to access namespace.
After: GCA able to access the gxp_metrics_logger.so
Change-Id: I453b66b30eb51ebd22fda750d272cf35574301f6
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2022-05-20 17:05:23 +00:00
Jacqueline Wong
21d977a985 be able to dump coredump am: c169cd75ce am: 431dadf5fd am: 3ffe740922
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18485733

Change-Id: I2744ad50f9e9267b21d7e05927e7648258aeb8e9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 00:31:04 +00:00
Jacqueline Wong
e9af19d6bc be able to dump coredump am: c169cd75ce am: 8efadaab80 am: 6754335678
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18485733

Change-Id: Id429bbbf012d0642e982636e3e979d1394db02bb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 00:30:29 +00:00
Jacqueline Wong
3ffe740922 be able to dump coredump am: c169cd75ce am: 431dadf5fd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18485733

Change-Id: I4d2e3d06f604effedf436b563bb6b9db400094b2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 00:01:23 +00:00
Jacqueline Wong
6754335678 be able to dump coredump am: c169cd75ce am: 8efadaab80
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18485733

Change-Id: Iccc3b4abadaf6bcc4ef0d89ab99590e0a403523f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 00:01:13 +00:00
Jacqueline Wong
431dadf5fd be able to dump coredump am: c169cd75ce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18485733

Change-Id: Ia515d657c4a626f0722cc4cfa991e06e2bfe5fd1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 23:31:57 +00:00
Jacqueline Wong
8efadaab80 be able to dump coredump am: c169cd75ce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18485733

Change-Id: Iea9f96f30173d183b8ef962919b53e91674cf036
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 23:31:39 +00:00
Jacqueline Wong
4364d96ac8 be able to dump coredump
Bug: 218358165
Test: adb root; adb remount -R; adb bugreport
Signed-off-by: Jacqueline Wong <jacqwong@google.com>
Change-Id: I42c2db7902064e1508676ad93def2e0e4f5c2b28
2022-05-19 17:20:56 +00:00
Dinesh Yadav
497c10781a Add SEPolicy settings for android logging/tracing service for GXP am: e40cd2ac42 am: d668e27252 am: 200fc56ffd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18155927

Change-Id: Iab88719e03094552ca67c8394a0de12c01156b6c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 09:00:08 +00:00
Nishok Kumar S
17612a2bb8 Add label for GCA fishfood app built with debug keys - label as am: 43e827c01a am: e828f4b81f am: cca61f2d4d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18403423

Change-Id: Ice26a053adbb03561fcef165b160401c0e9b6ef1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:53:37 +00:00
Dinesh Yadav
0beacc6feb Add SEPolicy settings for android logging/tracing service for GXP am: e40cd2ac42 am: f66e6cedf3 am: 37f2542e8e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18155927

Change-Id: Idd6aec2f8071137056871758303e7b10fddb37e7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:53:26 +00:00
Nishok Kumar S
58da081fa7 Add label for GCA fishfood app built with debug keys - label as am: 43e827c01a am: 0cd372af58 am: 016359a231
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18403423

Change-Id: I5bbdf302e9aa8dcda084703feefe0eff80affb1f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:53:17 +00:00
Dinesh Yadav
200fc56ffd Add SEPolicy settings for android logging/tracing service for GXP am: e40cd2ac42 am: d668e27252
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18155927

Change-Id: I7eaefd90bf92bcff7aa09d86031769e9cb4ca712
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:36:33 +00:00
Nishok Kumar S
cca61f2d4d Add label for GCA fishfood app built with debug keys - label as am: 43e827c01a am: e828f4b81f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18403423

Change-Id: Id8f646f50b3e094dea7123f54c90dcadb075b36e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:36:09 +00:00
Dinesh Yadav
37f2542e8e Add SEPolicy settings for android logging/tracing service for GXP am: e40cd2ac42 am: f66e6cedf3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18155927

Change-Id: I210bf7e0480a9ffd63cd5ab9b7781a73c3ebe5b6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:35:27 +00:00
Nishok Kumar S
016359a231 Add label for GCA fishfood app built with debug keys - label as am: 43e827c01a am: 0cd372af58
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18403423

Change-Id: I2556052d5fde1cde80667b214472e77fb770bdc4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:35:19 +00:00
Dinesh Yadav
f66e6cedf3 Add SEPolicy settings for android logging/tracing service for GXP am: e40cd2ac42
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18155927

Change-Id: I28abf12f78287639b1314dfbdfabe09405bbb0f0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 07:58:30 +00:00
Nishok Kumar S
0cd372af58 Add label for GCA fishfood app built with debug keys - label as am: 43e827c01a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18403423

Change-Id: I0beaa21082bb2ed8faf68710846025470b1cbe9b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 07:58:00 +00:00
Dinesh Yadav
d668e27252 Add SEPolicy settings for android logging/tracing service for GXP am: e40cd2ac42
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18155927

Change-Id: I05d7ceee3b7e7c08098e9ea62531b60928a7d711
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 07:57:36 +00:00
Nishok Kumar S
e828f4b81f Add label for GCA fishfood app built with debug keys - label as am: 43e827c01a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18403423

Change-Id: Idaf0347c250257220eccdd80d923c322fba0e85c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 07:57:02 +00:00
Jacqueline Wong
c169cd75ce be able to dump coredump
Bug: 218358165
Test: adb root; adb remount -R; adb bugreport
Signed-off-by: Jacqueline Wong <jacqwong@google.com>
Change-Id: I42c2db7902064e1508676ad93def2e0e4f5c2b28
2022-05-19 05:37:50 +00:00
Dinesh Yadav
e40cd2ac42 Add SEPolicy settings for android logging/tracing service for GXP
This change also adds support for SEPolicy to access perfetto which was
missing in ag/17818623.

Bug: 217289052

Change-Id: Ic5599d0be783b65102b3b0ffef27e66f1f6904da
2022-05-19 03:31:32 +00:00
George Lee
d524cd7a8e dumpstate: Add BCL mitigation info to user build am: b6971e353f am: 654a7cdf85 am: 21dd5b9cec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18408238

Change-Id: Ifc69384eb83074eaf2060bfb11554793c6e20141
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-17 02:45:33 +00:00
George Lee
2230fc3035 dumpstate: Add BCL mitigation info to user build am: b6971e353f am: a0126d5b0f am: 0d19d65aee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18408238

Change-Id: Ifa0eacde398761b6034660c300177cb4b9a8471d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-17 02:45:09 +00:00
Nishok Kumar S
43e827c01a Add label for GCA fishfood app built with debug keys - label as
debug_camera_app.

Test: Build GCA-Next manually and install on device. Test with selinux
on.
Bug: 230773733

Change-Id: Ifc2fd29a74bf66444501327feac391ddf812c867
2022-05-17 02:42:05 +00:00
George Lee
21dd5b9cec dumpstate: Add BCL mitigation info to user build am: b6971e353f am: 654a7cdf85
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18408238

Change-Id: I656f05b7f6b4aae4cba8a1e1ba610b9556cfed2f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-17 02:17:42 +00:00
George Lee
0d19d65aee dumpstate: Add BCL mitigation info to user build am: b6971e353f am: a0126d5b0f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18408238

Change-Id: I40fdc1c7ffd1638b87489969e705b3f11f1233fd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-17 02:17:27 +00:00
George Lee
a0126d5b0f dumpstate: Add BCL mitigation info to user build am: b6971e353f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18408238

Change-Id: Id0d1772cc33c495b6ad525946b40f02a768ddc86
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-17 01:38:06 +00:00
George Lee
654a7cdf85 dumpstate: Add BCL mitigation info to user build am: b6971e353f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18408238

Change-Id: Ice2833b22caf809ce7139b90b223a6ebf4bee756
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-17 01:38:02 +00:00
George Lee
b6971e353f dumpstate: Add BCL mitigation info to user build
Bug: 232793927
Test: Confirm user build bugreport has mitigation info
Signed-off-by: George Lee <geolee@google.com>
Change-Id: I9945a0f005bee6e25580c122df4c8932607fa51a
2022-05-17 00:42:57 +00:00
Austin Wang
af5ca62844 Add P22 reverse wireless charging selinux policy am: e5f8377849 am: 46d2740350 am: f2336f95c4 am: 1ff3f98444
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18350566

Change-Id: I37fc55ff48e2e9aba7ae40e0b89b13f726cdc8f0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 23:59:22 +00:00
Austin Wang
b2e728b3d2 Add P22 reverse wireless charging selinux policy am: e5f8377849 am: 53a167fcf0 am: eb52e384fc am: 45e1a1111c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18350566

Change-Id: I58fa69eb2d4a1eacfadc8096bcbfffe4acf59158
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 23:48:07 +00:00
Automerger Merge Worker
bd74848627 Merge "Allow mediacodec to access vendor_data_file am: 95845654bf am: 65993e19e8" into tm-d1-dev-plus-aosp am: 032ce42cd3 am: 8b8d1c2c99
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18188091

Change-Id: I7be28383c28ce7cb8d584f4a69c58c82b1f37fa5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 23:27:01 +00:00
Austin Wang
d94b8efbaf Add P22 reverse wireless charging selinux policy am: e5f8377849 am: 53a167fcf0 am: 84ae81f114 am: bf00994e42
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18350566

Change-Id: I5640a44a57f425b5e6219f38f7b2ebd6c4b3af4e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 23:03:05 +00:00
Jerry Huang
d54ff414e0 Allow mediacodec to access vendor_data_file am: 95845654bf am: dafeb57668 am: b9d25e06d8 am: a1b11f5923
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18188091

Change-Id: I607b7f64a01d080d0ca37b6755bad7fc5f54ead7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 22:41:14 +00:00
Jerry Huang
3aee1552e3 Allow mediacodec to access vendor_data_file am: 95845654bf am: dafeb57668 am: 29d8fcfa03 am: c9ee2df4d2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18188091

Change-Id: I37700ca9ad8d5b58bee1a6b7017a179379e39822
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 19:10:31 +00:00
Nishok Kumar S
a2df60c650 Use google_camera_app label for GCA-Next fishfood app. am: 145f7b5b93 am: ebb393aac0 am: cae3a0b2a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18344645

Change-Id: I62904cdc8fa7092f10c1945e45167d06f8f327c2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 16:21:45 +00:00
Nishok Kumar S
0f45121ab7 Label GCA-Eng app am: 4a6cfb5a9c am: f021ddaf55 am: 00ce8ef6c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18331264

Change-Id: I165b4f7d003fb3ec99f569b6c4105013793b0444
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 16:21:44 +00:00
Nishok Kumar S
18eb1d466e Use google_camera_app label for GCA-Next fishfood app. am: 145f7b5b93 am: b4db422486 am: dd9262e2ca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18344645

Change-Id: I780108a56e43a5e81e12739c7e5c09265156ec90
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 14:30:56 +00:00
Nishok Kumar S
e6b4f216de Label GCA-Eng app am: 4a6cfb5a9c am: a96da52aca am: 52f975bec0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18331264

Change-Id: I51a33ed10f3997b5f8c2515947a0377668c1f923
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 14:30:55 +00:00
Austin Wang
1ff3f98444 Add P22 reverse wireless charging selinux policy am: e5f8377849 am: 46d2740350 am: f2336f95c4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18350566

Change-Id: Ibf27c6e00a355bfa3eed50b0b968685717d9b05d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 11:07:54 +00:00
Austin Wang
45e1a1111c Add P22 reverse wireless charging selinux policy am: e5f8377849 am: 53a167fcf0 am: eb52e384fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18350566

Change-Id: I6e5583b12edecbf9b60503cd8e5f0d669ed4f17b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 11:07:41 +00:00