Commit graph

2507 commits

Author SHA1 Message Date
Android Build Coastguard Worker
6eb2cfbd4a Snap for 11704135 from 66254ad14d to 24Q3-release
Change-Id: I733a6e86a3dd10ec59e4937ed313f6f2234805d1
2024-04-11 23:02:16 +00:00
Enzo Liao
66254ad14d Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common.
New paths (ag/26620507):
  RamdumpService: device/google/gs-common/ramdump_app
  SSRestartDetector: device/google/gs-common/ssr_detector_app

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
Change-Id: I57f9b8b77aa070ad2216cae1e84630a26a03618d
2024-04-11 02:03:11 +00:00
Android Build Coastguard Worker
585c01604c Snap for 11666018 from 8d9a941f43 to 24Q3-release
Change-Id: Ia2183042796e20b45f4719938f141c94e966f09d
2024-04-03 23:02:09 +00:00
Spade Lee
8d9a941f43 sepolicy: allow kernel to search vendor debugfs am: 17ab68a5ac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/26793540

Change-Id: Iebcb71b3121e90acb4c1744f6b3eb6ca1db7206f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-03 04:24:44 +00:00
Spade Lee
17ab68a5ac sepolicy: allow kernel to search vendor debugfs
audit: type=1400 audit(1710259012.824:4): avc:  denied  { search } for  pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc:  denied  { search } for  pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc:  denied  { search } for  pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1

Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: I7ca3804056bbfd8459bac2c029a494767f3ae1a6
Signed-off-by: Spade Lee <spadelee@google.com>
2024-04-02 07:35:39 +00:00
Android Build Coastguard Worker
53ec29b4ab Snap for 11654651 from 60c66448ef to 24Q3-release
Change-Id: Ia3e4a4de979d4794a88cda931795d17eb8f0be6d
2024-04-01 23:02:00 +00:00
kadirpili
60c66448ef gs201: telephony property for cbd
Bug: 315104803
Change-Id: I2560871e9477a5f8dcd9519b6c60353e89c5df82
2024-04-01 05:12:58 +00:00
Android Build Coastguard Worker
1d6a2716bf Snap for 11619294 from 2b9b7cc688 to 24Q3-release
Change-Id: I8a4ca7264b820802acb74b8c3b4c247922d7cb84
2024-03-23 21:01:54 +00:00
Android Build Coastguard Worker
4a08590c62 Snap for 11617975 from 596f6ab199 to 24Q3-release
Change-Id: Ib8ecb6cac024d03a91615e5b4ace5e66d9dc4230
2024-03-23 01:01:54 +00:00
Hungyen Weng
2b9b7cc688 Allow modem_svc to access modem files and perfetto
Bug: 330730987

Test: Confirmed that modem_svc is able to access token db files in modem partition
Test: Confiemed that modem_svc can send traces to perfetto

Change-Id: Id50a1fc3b343be9eec834418638c689d8ea56b35
2024-03-22 23:53:34 +00:00
Spade Lee
596f6ab199 pixelstats_vendor: add logbuffer_device r_file_perms
avc: denied { read } for name="logbuffer_maxfg_monitor" dev="tmpfs" ino=1034 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=0

Bug: 329174074
Test: no denied log, and able to read logbuffer in pixelstats_vendor
Change-Id: Ia591a091fe470c2c367b80b8f1ef9eea6002462c
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-22 07:30:26 +00:00
Android Build Coastguard Worker
c9b03707e2 Snap for 11610847 from 269f1640d8 to 24Q3-release
Change-Id: I9448601862609ae9c1d729a7d376a7e02a9c3313
2024-03-21 23:02:01 +00:00
Spade Lee
269f1640d8 sepolicy: allow kernel to search vendor debugfs
audit: type=1400 audit(1710259012.824:4): avc:  denied  { search } for  pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc:  denied  { search } for  pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc:  denied  { search } for  pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1

Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: I7ca3804056bbfd8459bac2c029a494767f3ae1a6
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-20 18:17:15 +00:00
Android Build Coastguard Worker
4be3c5082f Snap for 11571437 from 2747579f1e to 24Q3-release
Change-Id: I36fd5548fa045008aca2579f23919b11648c3457
2024-03-13 23:02:06 +00:00
Wilson Sung
2747579f1e Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 329380891
Test: scanBugreport
Bug: 329381126
Test: scanAvcDeniedLogRightAfterReboot
Bug: 329380363
Change-Id: I604c091a24f3f13f7a354c08c210deeaa9ac9cb1
2024-03-13 09:28:36 +00:00
Android Build Coastguard Worker
fb3267e969 Snap for 11565217 from d01ca34870 to 24Q3-release
Change-Id: Ice5f115a9a32c94c5b58b1785afabfc7e0616160
2024-03-12 23:02:22 +00:00
Thiébaud Weksteen
d01ca34870 [automerger skipped] Remove persist.bootanim.color property definitions am: ece5909d1c am: e1d9702dad -s ours
am skip reason: Merged-In I9d92456d7e790398a79a941738e3290975f7b659 with SHA-1 4baa59a176 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2995061

Change-Id: Ifb107af725886c5c99d4c4d37224e712bdb87913
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 06:40:18 +00:00
Thiébaud Weksteen
e1d9702dad Remove persist.bootanim.color property definitions am: ece5909d1c
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2995061

Change-Id: I63f41da6a07965a0a4584a27a386fd736e42721d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 05:57:14 +00:00
Thiébaud Weksteen
ece5909d1c Remove persist.bootanim.color property definitions
These now belong to the platform policy.

Bug: 321088135
Test: build
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:4baa59a176f6c4d287871f297b1d6481c8882379)
Merged-In: I9d92456d7e790398a79a941738e3290975f7b659
Change-Id: I9d92456d7e790398a79a941738e3290975f7b659
2024-03-08 01:38:12 +00:00
Android Build Coastguard Worker
8c9b7435e5 Snap for 11545716 from 002d891a05 to 24Q3-release
Change-Id: I1e9bd99e914a6b99204e0859bf8b90f179d27b79
2024-03-08 00:01:56 +00:00
Xin Li
002d891a05 [automerger skipped] Merge Android 14 QPR2 to AOSP main am: a4ca12105a -s ours am: 5fc9504894 -s ours
am skip reason: Merged-In I75fb73fcb7f1adbcc511fec0e64c9fbd311e5e0c with SHA-1 0395eebcad is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2989097

Change-Id: I28dd491e45593d69fa8a4679bd4905bb76980731
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 10:46:21 +00:00
Xin Li
5fc9504894 [automerger skipped] Merge Android 14 QPR2 to AOSP main am: a4ca12105a -s ours
am skip reason: Merged-In I75fb73fcb7f1adbcc511fec0e64c9fbd311e5e0c with SHA-1 0395eebcad is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2989097

Change-Id: I3978083a92f1c630eedbf1d293fc19c0485dac0c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 09:54:55 +00:00
Xin Li
a4ca12105a Merge Android 14 QPR2 to AOSP main
Bug: 319669529
Merged-In: I75fb73fcb7f1adbcc511fec0e64c9fbd311e5e0c
Change-Id: I1f1180e489bba5e4f74339bc7b1f076c4efb52e3
2024-03-06 09:29:48 -08:00
Android Build Coastguard Worker
88f1ffda41 Snap for 11533280 from 9088b1a9be to 24Q3-release
Change-Id: I48154565ccdce3ce0db7b98d8b9823d07f9961e0
2024-03-06 00:02:05 +00:00
Sungtak Lee
9088b1a9be Add AIDL media.c2 into service_contexts
Bug: 321808716
Change-Id: Ib2426b1997517b23d1301f3a1a30d9029d129971
2024-03-05 06:16:54 +00:00
Android Build Coastguard Worker
7a6395dde5 Snap for 11526283 from 1c7d8f80f2 to 24Q3-release
Change-Id: Ia8ee5c75f662e087055fe161d28e8098252b3d87
2024-03-05 00:26:05 +00:00
Peter Lin
1c7d8f80f2 add dsim wakeup labels
Bug: 322035303
Bug: 321733124
test: ls sys/devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/wakeup -Z
Change-Id: Ifcf73176620f44743a8aa252f8afed85c3af475c
2024-03-04 03:02:14 +00:00
Android Build Coastguard Worker
a94b81f42a Snap for 11504269 from 1e0e9963e3 to 24Q3-release
Change-Id: Ic15394d37eefad92f0bdc9143119684f946102e1
2024-02-28 00:02:51 +00:00
Nathan Kulczak
1e0e9963e3 Remove SELinux exception
Remove SELinux dontaudit section after cl to fix race condition was merged.

Bug: 306344298
Test: Passed on local and automated SELinuxUncheckedDenialBootTest
Change-Id: I5b17c49d47775253491c61e54f1a268fd16081a1
Signed-off-by: Nathan Kulczak <nathankulczak@google.com>
2024-02-27 05:27:01 +00:00
Thiébaud Weksteen
988131fe3d Revert^2 "Remove persist.bootanim.color property definitions"
d9b51a61ce

Change-Id: I18c3a290947c21a572754eeecd1d5204c2cbe523
2024-02-25 23:58:59 +00:00
Android Build Coastguard Worker
cec3e4ccf3 Snap for 11492556 from d9b51a61ce to 24Q3-release
Change-Id: If2b481ec36dcb7a1efd9e35c3b7bcbfe3172e991
2024-02-24 02:16:48 +00:00
Rubin Xu
d9b51a61ce Revert "Remove persist.bootanim.color property definitions"
Revert submission 26301396-bootanim_prop

Reason for revert: DroidMonitor-triggered revert due to breakage https://android-build.corp.google.com/quarterdeck/?branch=git_main&target=sdk_goog3_x86_64-trunk_staging-userdebug&lkgb=11487950&lkbb=11488141&fkbb=11488141

Bug: 326521604

Reverted changes: /q/submissionid:26301396-bootanim_prop

Change-Id: Ia393a62bd05546f19e326cce013a009ad77c5d52
2024-02-23 12:25:04 +00:00
Thiébaud Weksteen
4baa59a176 Remove persist.bootanim.color property definitions
These now belong to the platform policy.

Bug: 321088135
Test: build
Change-Id: I9d92456d7e790398a79a941738e3290975f7b659
2024-02-23 02:59:53 +00:00
Android Build Coastguard Worker
eb50eb567f Snap for 11486189 from 9be1081f00 to 24Q3-release
Change-Id: Iab3d35a07bb437b4824012e9322205fe0679947a
2024-02-23 00:02:45 +00:00
Will McVicker
9be1081f00 Update tcpm i2c sepolicy with new device name
The new name fixes uninformative kernel wakelock names.

Bug: 315190967
Bug: 323447554
Change-Id: I88ecec344fd1eb84c5ca12a6bd3fad38cc40295b
2024-02-22 17:54:36 +00:00
Android Build Coastguard Worker
2fab474142 Snap for 11479750 from 967204e373 to 24Q3-release
Change-Id: I7b9be722eedbba4061a912126c1eb79c4a56fdcb
2024-02-22 00:03:02 +00:00
Lei Ju
967204e373 [gs201] Use common settings for Contexthub HAL
The change also labeled files under /data/vendor/chre/ to grant
required access.

Test: compilation
Bug: 248615564
Change-Id: Ia96b7a592523e7b5e64acb8cb7ae4f0f1fc3a78b
2024-02-18 11:43:27 -08:00
Jacky Liu
28c042f51a Update i2c device paths
Update i2c device paths with static bus numbers.

Bug: 323447554
Test: Boot to home
Change-Id: I3d41e1819aa7df896322a0dca44449c1e871dff8
2024-02-06 16:16:53 +00:00
Wilson Sung
51d66f9b58 Update SELinux error
Test: scanBugreport
Bug: 323086890
Test: scanAvcDeniedLogRightAfterReboot
Bug: 323086703
Change-Id: Idfe9e28e668b0b268acbaa68ae23083972dd146f
2024-01-31 02:58:24 +00:00
Xin Li
f3a672ab0c [automerger skipped] Merge Android 24Q1 Release (ab/11220357) am: 0395eebcad -s ours
am skip reason: Merged-In I3381aaa1e08637c1cc8eb278bd775c81b32ed3bd with SHA-1 04bc1d210a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/25973468

Change-Id: I737857f2de84411f52bf91c44c0b1b2527bf86ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-31 02:03:14 +00:00
Darren Hsu
1f8b299ace sepolicy: allow hal_power_stats to read sysfs_display
avc:  denied  { read } for  name="available_disp_stats"
dev="sysfs" ino=76162 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 317767775
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: I272f69f4c4720eb4800a8a13ef62e1ab34cbaedf
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2024-01-29 05:59:52 +00:00
Jack Wu
f32bd56cb0 dontaudit on dir search for vendor_charger_debugfs
Bug: 307863370
Change-Id: I6da7b9426cdcc6152ff05ef7cd0cf18b718ab875
Signed-off-by: Jack Wu <wjack@google.com>
2024-01-26 20:13:23 +08:00
Wilson Sung
bbb8e0618f Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 322036333
Test: scanBugreport
Bug: 322035303
Bug: 315104803
Test: scanAvcDeniedLogRightAfterReboot
Bug: 322036333
Bug: 315104803
Change-Id: Ide2a5f5d6636d0374e724de9991a71123396a85f
2024-01-23 22:22:36 +00:00
Wilson Sung
f52acbf0cf Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 321731318
Test: scanBugreport
Bug: 315104803
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315104803
Change-Id: I5fc3c161edc102c2418145c69c1f94125d73783e
2024-01-22 17:41:28 +00:00
Xin Li
0395eebcad Merge Android 24Q1 Release (ab/11220357)
Bug: 319669529
Merged-In: I3381aaa1e08637c1cc8eb278bd775c81b32ed3bd
Change-Id: I75fb73fcb7f1adbcc511fec0e64c9fbd311e5e0c
2024-01-17 22:12:36 -08:00
Wilson Sung
25835bcc61 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 319403445
Test: scanBugreport
Bug: 319403445
Test: scanAvcDeniedLogRightAfterReboot
Bug: 319403445
Change-Id: I739ae803828538555a92989e71d85df5c77c0bd2
2024-01-16 20:01:43 +00:00
Mahesh Kallelil
00d82676e9 Remove modem_svc selinux error from denials bug_map
This property was removed and is not being used anymore. So
modem_svc will not need to read it.

Bug: 316816342
Change-Id: I9fe6002e34f7dd5fea0371d41d417c778c3d0905
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2024-01-12 06:43:47 +00:00
Ken Yang
f1c2498079 selinux: label wakeup for BMS I2C 0x36, 0x69
Bug: 319035561
Change-Id: I45a80157d2a1d12a27a748aed31bb0ae5b08e7b5
Signed-off-by: Ken Yang <yangken@google.com>
2024-01-10 06:12:19 +00:00
wenchangliu
997782c603 gs201: move mediacodec_samsung sepolicy to gs-common
remove mediacodec_samsung sepolicy in legacy path since we will include it from gs-common.

Bug: 318793681
Test: build pass, camera record, youtube
Change-Id: I08a9ce89155324b0ac749bde4a9d205585a57320
Signed-off-by: wenchangliu <wenchangliu@google.com>
2024-01-09 14:49:56 +00:00
timtmlin
8c955289ca Remove obsolete entries
Bug: 315720727
Bug: 315721328
Test: make
Change-Id: I176dd469a78d8c6c80bdfc72f377951955ffd543
2023-12-27 15:42:02 +08:00