Commit graph

2044 commits

Author SHA1 Message Date
martinwu
69cfcbc635 Remove tcpdump sepolicy from gs201 and move sepolicy to gs-common am: b7e90ec616 am: 67495c9b14
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22817736

Change-Id: I8955e62665e7bcd64f07b9350b6a98afcf9b8418
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:57:54 +00:00
martinwu
67495c9b14 Remove tcpdump sepolicy from gs201 and move sepolicy to gs-common am: b7e90ec616
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22817736

Change-Id: Ie81e23d283b5e728296390ba7ced6508e15afc40
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:17:57 +00:00
martinwu
b7e90ec616 Remove tcpdump sepolicy from gs201 and move sepolicy to gs-common
Bug: 264490014
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: I0eb9352e349ae8f06e469e953f137b00204f1c3b
2023-04-27 01:38:24 +00:00
Wilson Sung
2d40a3dbd1 Update error on ROM 9784808 am: 2b913d29a9 am: f5c3a99197 am: a247b136b6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791801

Change-Id: I3bcb5b72e8b2ba1ac1594dc95fe951af1dd4f271
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 09:02:54 +00:00
Wilson Sung
64f8546c97 Update error on ROM 9784808 am: 2b913d29a9 am: 67082a4a05 am: 9ee7c5b95a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791801

Change-Id: Ief787c893a34bf516c6e7d5ad2cf324ba8dbf0f0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 09:01:01 +00:00
Wilson Sung
a247b136b6 Update error on ROM 9784808 am: 2b913d29a9 am: f5c3a99197
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791801

Change-Id: If4a2f3c68104cdf0538734b689541f4ef5106059
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 08:25:13 +00:00
Wilson Sung
9ee7c5b95a Update error on ROM 9784808 am: 2b913d29a9 am: 67082a4a05
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791801

Change-Id: Ica90a6404e513ccdb25b09727f1804258f5b2cd4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 08:19:50 +00:00
Wilson Sung
b78ea852cb Update error on ROM 9784808 am: 2b913d29a9 am: 2daec05481
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791801

Change-Id: I7ecb3c0e20f7f437de983652ffc3034804deb652
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 08:19:46 +00:00
Wilson Sung
2daec05481 Update error on ROM 9784808 am: 2b913d29a9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791801

Change-Id: I53f57effc548b312b1447a513d39c0cedc40510b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 07:43:23 +00:00
Wilson Sung
67082a4a05 Update error on ROM 9784808 am: 2b913d29a9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791801

Change-Id: I9c166ebbe791eb5948fd8676fd8e463d3891ba33
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 07:42:38 +00:00
Wilson Sung
f5c3a99197 Update error on ROM 9784808 am: 2b913d29a9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791801

Change-Id: I24e473bc7a18028dada6465d2e6333fce7433a6f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 07:37:59 +00:00
Wilson Sung
2b913d29a9 Update error on ROM 9784808
Bug: 274727778
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I56784948658365e8c9ecdf63d163109d8f29e5c3
2023-04-26 07:00:21 +00:00
Joseph Jang
b318c16604 Move recovery.te to device/google/gs-common/dauntless/sepolicy am: 2a5c26c9b4 am: eaee6f1757 am: 6f322ec5e3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791802

Change-Id: I5245cdac8b2fd2574cfc157e5dda139ae9d52452
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:32:08 +00:00
Joseph Jang
280d6abe33 Move recovery.te to device/google/gs-common/dauntless/sepolicy am: 2a5c26c9b4 am: 457cf699d8 am: cc7c5c6395
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791802

Change-Id: I6cc1acb5a45b44e577081a2cd6f4556ee9046e8d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:31:47 +00:00
Joseph Jang
6f322ec5e3 Move recovery.te to device/google/gs-common/dauntless/sepolicy am: 2a5c26c9b4 am: eaee6f1757
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791802

Change-Id: Ibb543ab386fc9ad28096d1d9f01be71aa78e5650
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 04:54:27 +00:00
Joseph Jang
109357f53e Move recovery.te to device/google/gs-common/dauntless/sepolicy am: 2a5c26c9b4 am: 1a82f277a8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791802

Change-Id: I73fce1e46771b04745fd86ece9f8252bbac145d1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 04:49:49 +00:00
Joseph Jang
cc7c5c6395 Move recovery.te to device/google/gs-common/dauntless/sepolicy am: 2a5c26c9b4 am: 457cf699d8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791802

Change-Id: Id9637e504519b1c750e63a2ec64aabee8910567d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 04:49:48 +00:00
Joseph Jang
457cf699d8 Move recovery.te to device/google/gs-common/dauntless/sepolicy am: 2a5c26c9b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791802

Change-Id: I7202f910327717069a0d925c1268bb66aacee2e3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 04:11:57 +00:00
Joseph Jang
1a82f277a8 Move recovery.te to device/google/gs-common/dauntless/sepolicy am: 2a5c26c9b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791802

Change-Id: If26d8b1d603af03114155180884efaaba2de27f8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 04:11:52 +00:00
Joseph Jang
eaee6f1757 Move recovery.te to device/google/gs-common/dauntless/sepolicy am: 2a5c26c9b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22791802

Change-Id: I9af98e544063fdcd2e77ad2a0a48de99489ff310
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 04:07:33 +00:00
Joseph Jang
2a5c26c9b4 Move recovery.te to device/google/gs-common/dauntless/sepolicy
Bug: 279381809
Change-Id: I80fbd9ef0c7e988de21d07ada57fc6a038b9b585
2023-04-24 08:05:10 +00:00
Xin Li
df58c50f4e [automerger skipped] Merge Android 13 QPR3 tm-qpr-dev-plus-aosp-without-vendor@9936994 am: 3ea4094def -s ours am: 31724cdda3 -s ours am: e97e77fc5d -s ours am: d07f0c1243 -s ours
am skip reason: Merged-In I0ecc64407118107860db434f0eb22cab0f55a2ba with SHA-1 b38886146a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22723205

Change-Id: I5bf6d4b969f7ed25500dcace18173513dd46162f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 23:52:29 +00:00
Xin Li
d07f0c1243 [automerger skipped] Merge Android 13 QPR3 tm-qpr-dev-plus-aosp-without-vendor@9936994 am: 3ea4094def -s ours am: 31724cdda3 -s ours am: e97e77fc5d -s ours
am skip reason: Merged-In I0ecc64407118107860db434f0eb22cab0f55a2ba with SHA-1 b38886146a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22723205

Change-Id: I41e7a30281f6bba495bea79e821d1c857759799f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 23:11:50 +00:00
Xin Li
e97e77fc5d [automerger skipped] Merge Android 13 QPR3 tm-qpr-dev-plus-aosp-without-vendor@9936994 am: 3ea4094def -s ours am: 31724cdda3 -s ours
am skip reason: Merged-In I0ecc64407118107860db434f0eb22cab0f55a2ba with SHA-1 b38886146a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22723205

Change-Id: I116084046971ddbe9391a67ea014620df2e8578e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 22:34:05 +00:00
Xin Li
31724cdda3 [automerger skipped] Merge Android 13 QPR3 tm-qpr-dev-plus-aosp-without-vendor@9936994 am: 3ea4094def -s ours
am skip reason: Merged-In I0ecc64407118107860db434f0eb22cab0f55a2ba with SHA-1 b38886146a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22723205

Change-Id: I6218c957148b75ac9f341107dc809176d232a90a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 18:15:13 +00:00
Bruno BELANYI
bb69b32fc5 Remove 'hal_neuralnetworks_armnn' '/data' access exception
The mali driver has been configured not to look there anymore.

Bug: b/205779871
Test: manual - reboot device and check the absence of AVC denials
Change-Id: Ie651cd788e6f057cd902d1c14880bd1ad71ec5a5
2023-04-20 09:14:27 +00:00
Bruno BELANYI
4f1ca4a7ad Remove 'hal_neuralnetworks_armnn' sysprop exceptions
Bug: b/205202540
Test: manual - reboot device and check the absence of AVC denials
Change-Id: Ief9f33ea3aca3f6b0756c92feb1753462e86b894
2023-04-20 08:14:00 +00:00
Bruno BELANYI
9d61da55a1 Add ArmNN config sysprops SELinux rules
Bug: b/205202540
Test: manual - reboot device and check the absence of AVC denials
Change-Id: I90af8201d5fae44f73d709491f272a113b44ca67
2023-04-20 08:14:00 +00:00
Automerger Merge Worker
6a80261045 Merge "rild: allow rild to ptrace am: 0f6b14dc95 am: 5bdbb594be" 2023-04-20 07:39:20 +00:00
jimsun
66c391efa8 rild: allow rild to ptrace am: 0f6b14dc95 am: 5bdbb594be
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/21876774

Change-Id: Iecc9dd879234cacb2d340e6534a07ebf9994bf2e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-20 07:39:03 +00:00
jimsun
7aa6e4812e rild: allow rild to ptrace am: 0f6b14dc95 am: c477b46828
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/21876774

Change-Id: Ib212d5935c8076fe7f03224c85e4c3621de53b11
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-20 07:38:55 +00:00
jimsun
c477b46828 rild: allow rild to ptrace am: 0f6b14dc95
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/21876774

Change-Id: I47c2a25b8105a26be3579b00a089529f11750f00
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-20 07:01:15 +00:00
jimsun
5bdbb594be rild: allow rild to ptrace am: 0f6b14dc95
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/21876774

Change-Id: I4ec24257f452e475272a9535e1dd21cecf94595a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-20 07:01:14 +00:00
Xin Li
3ea4094def Merge Android 13 QPR3 tm-qpr-dev-plus-aosp-without-vendor@9936994
Bug: 275386652
Merged-In: I0ecc64407118107860db434f0eb22cab0f55a2ba
Change-Id: I639a8e3b3933efe9b7fc0fff92aef8bead4bd8a1
2023-04-18 16:32:09 -07:00
jimsun
0f6b14dc95 rild: allow rild to ptrace
06-20 18:47:41.940000  8708  8708 I auditd  : type=1400 audit(0.0:7): avc: denied { ptrace } for comm="libmemunreachab" scontext=u:r:rild:s0 tcontext=u:r:rild:s0 tclass=process permissive=0
06-20 18:47:41.940000  8708  8708 W libmemunreachab: type=1400 audit(0.0:7): avc: denied { ptrace } for scontext=u:r:rild:s0 tcontext=u:r:rild:s0 tclass=process permissive=0

Bug: 263757077
Test: manual
Change-Id: I4720650488eca100372d148313e04d6d8950ead5
2023-04-18 07:48:20 +00:00
Wilson Sung
cc307ef1b9 Update error on ROM 9954737 am: 4cc8eec22d am: 2edb9d804a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22696721

Change-Id: I0ffec124348a2094806b4205e3147ecbd1b88750
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-18 05:48:06 +00:00
Wilson Sung
4fe1b3fea4 Update error on ROM 9954737 am: 4cc8eec22d am: b70e63a6de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22696721

Change-Id: Iedce528a9e19fd3ee5f04b355619916bfbc612d0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-18 05:46:35 +00:00
Wilson Sung
b70e63a6de Update error on ROM 9954737 am: 4cc8eec22d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22696721

Change-Id: I21e6891828e09955d72558eb942578a13861cd8b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-18 05:06:12 +00:00
Wilson Sung
2edb9d804a Update error on ROM 9954737 am: 4cc8eec22d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22696721

Change-Id: I5e9980ccb32216b6ee8f504f657bcb4f15ccd7f8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-18 05:06:01 +00:00
Wilson Sung
4cc8eec22d Update error on ROM 9954737
Bug: 278639040
Bug: 278639040
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I0d71ec80ea0136f90336d8f80cb75b38b61ebced
2023-04-18 11:27:57 +08:00
Bruno BELANYI
d0d4e2338f Use restricted vendor property for ARM runtime options am: c1ee9afdef am: be0ea597f0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22381562

Change-Id: If5465a44d746b4acea2136e78c3bfcef22781e86
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 11:57:00 +00:00
Bruno BELANYI
c3ca4867a3 Use restricted vendor property for ARM runtime options am: c1ee9afdef am: 36acecbde7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22381562

Change-Id: I3e55005cbbfc690ac134f2d9bdc8976118e7005f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 11:55:44 +00:00
Bruno BELANYI
be0ea597f0 Use restricted vendor property for ARM runtime options am: c1ee9afdef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22381562

Change-Id: If2ae2398fae5c8b39e51c2f2f47fb11a95b5b033
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 11:29:24 +00:00
Bruno BELANYI
36acecbde7 Use restricted vendor property for ARM runtime options am: c1ee9afdef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22381562

Change-Id: I46c362e310af43993bf1b8ae25548933bc5eed80
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 11:28:51 +00:00
Bruno BELANYI
c1ee9afdef Use restricted vendor property for ARM runtime options
They need to be read by everything that links with libmali, but we don't
expect anybody to actually write to them.

Bug: b/272740524
Test: CtsDeqpTestCases (dEQP-VK.protected_memory.stack.stacksize_*)
Change-Id: I4cd468302da02603cccd9b4b98cb95745129daf5
2023-04-17 10:59:19 +00:00
Automerger Merge Worker
d433ceedbe Merge "gs201: add sepolicy for ufs_firmware_update process am: 5adecc7433 am: 640fe3d54b" 2023-04-17 10:55:18 +00:00
Leo Liou
eb902aeacf gs201: add sepolicy for ufs_firmware_update process am: 5adecc7433 am: 71068ddd6d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22132666

Change-Id: Ie567ee751958ba760d1bcb28a1271e07604a940e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 10:55:02 +00:00
Leo Liou
f01258567a gs201: add sepolicy for ufs_firmware_update process am: 5adecc7433 am: 640fe3d54b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22132666

Change-Id: I739e82c8f7ba264a2508c53f5873b3698838c9e5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 10:55:01 +00:00
Leo Liou
640fe3d54b gs201: add sepolicy for ufs_firmware_update process am: 5adecc7433
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22132666

Change-Id: I5525cba7db182410722e9deb22e490bbec6ed23b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 10:26:03 +00:00
Leo Liou
71068ddd6d gs201: add sepolicy for ufs_firmware_update process am: 5adecc7433
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22132666

Change-Id: I85257a9819bffd0b5a92d3ec1296fc161595a38f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 10:26:02 +00:00