Commit graph

1066 commits

Author SHA1 Message Date
Jeffrey Carlyle
a658683689 dck: allow st54spi devivce to be accessed by recovery and fastbootd
This is needed so that Digital Car Keys can be cleared from the ST54
during a user data wipe.

Bug: 203234558
Test: data wipe in Android recovery mode on raven
Test: data wipe in Android recovery mode on c10
Test: data wipe in user mode fastbootd mode on raven
Test: data wipe in user mode fastbootd mode on c10
Signed-off-by: Jeffrey Carlyle <jcarlyle@google.com>
Change-Id: Icaa3d62aa6b3b88b8db6c1c11807907a06e51019
2022-09-08 21:58:52 +00:00
JJ Lee
749dbdb873 sepolicy: add nodes for aoc memory votes stats am: 4b3ae5b9bf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19712556

Change-Id: I3592111f07154b84c74de89c980679437bf71073
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-08 05:02:44 +00:00
JJ Lee
4b3ae5b9bf sepolicy: add nodes for aoc memory votes stats
Bug: 223674292
Test: build pass, not blocking bugreport
Change-Id: Iae1c5dc42b3e6213d4399025cb91dc57822fd2cc
Signed-off-by: JJ Lee <leejj@google.com>
2022-09-08 04:45:32 +00:00
Jack Wu
980e37d3df remove selinux avc error am: c252f3ffa8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19880471

Change-Id: Ib213543c3f2a3c155a1b296eea0d223dcefa4374
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-08 02:16:19 +00:00
Jack Wu
c252f3ffa8 remove selinux avc error
Bug: 238398889
Test: no avc denied in TreeHugger verified
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: Icf2a89462574e2f0eea29d0601e77728d67e6e0d
2022-09-07 11:57:09 +08:00
Robb Glasser
272b649cee Give permissions to save usf stats and dump them in bugreports. am: feba667c23
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19672405

Change-Id: I3f77d4619266c84e36586697cb79c96334abb010
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-25 03:38:28 +00:00
Robb Glasser
feba667c23 Give permissions to save usf stats and dump them in bugreports.
Creating a mechanism to save some USF stat history to device and pipe it
to bugreports. Granting permissions so that this can work.

Bug: 242320914
Test: Stats save and are visible in a bugreport.
Change-Id: Ie08fce80e79bd564ea58dab66ce8f0d9892d7020
2022-08-25 02:47:58 +00:00
Jinting Lin
fbbcaeb8d2 Fix avc denied for vendor telephony debug app am: b69195ebe9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19600258

Change-Id: I26041b2e32da5bdf97c24deb1a70e1e1e594060d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-24 03:50:30 +00:00
Jinting Lin
b69195ebe9 Fix avc denied for vendor telephony debug app
avc:  denied  { find } for interface=vendor.samsung_slsi.telephony.hardware.radioExternal::IOemSlsiRadioExternal sid=u:r:vendor_telephony_debug_app:s0:c232,c259,c512,c768 pid=8533 scontext=u:r:vendor_telephony_debug_app:s0:c232,c259,c512,c768 tcontext=u:object_r:hal_exynos_rild_hwservice:s0 tclass=hwservice_manager permissive=0
avc: denied { getattr } for path="/data/user/0/com.samsung.slsi.sysdebugmode" dev="dm-39" ino=7431 scontext=u:r:vendor_telephony_debug_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0
avc: denied { search } for name="com.samsung.slsi.sysdebugmode" dev="dm-39" ino=7431 scontext=u:r:vendor_telephony_debug_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0
avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=150 scontext=u:r:vendor_telephony_debug_app:s0:c232,c259,c512,c768 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0
avc: denied { getattr } for path="/data/user/0/com.samsung.slsi.sysdebugmode" dev="dm-39" ino=7431 scontext=u:r:vendor_telephony_debug_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0
avc: denied { read } for name="u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=344 scontext=u:r:vendor_telephony_debug_app:s0:c232,c259,c512,c768 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=0
avc: denied { write } for name="property_service" dev="tmpfs" ino=379 scontext=u:r:vendor_telephony_debug_app:s0:c232,c259,c512,c768 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0

Test: manual test

Bug: 241976048
Change-Id: I5aa49a8e243d212180c7da6f65da9021164fca44
2022-08-24 01:54:34 +00:00
Roger Fang
f210a000be sepolicy: add permission for AMS rate of pixelstats-vend am: 74eb33d057
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19674281

Change-Id: Id9f6161c35be164ac61c5cb866a80eb3c883a77d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-23 21:12:53 +00:00
Roger Fang
74eb33d057 sepolicy: add permission for AMS rate of pixelstats-vend
pixelstats-vend: type=1400 audit(0.0:618): avc: denied { read } for name="ams_rate_read_once" dev="sysfs" ino=100493 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
pixelstats-vend: type=1400 audit(0.0:619): avc: denied { open } for path="/sys/devices/platform/audiometrics/ams_rate_read_once" dev="sysfs" ino=100493 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
pixelstats-vend: type=1400 audit(0.0:620): avc: denied { getattr } for path="/sys/devices/platform/audiometrics/ams_rate_read_once"

Bug: 239508478
Test: Manually test passed

Signed-off-by: Roger Fang <rogerfang@google.com>
Change-Id: I3e171b35ebdcf11b0da559361f382f1cf01b0f2f
2022-08-23 19:56:37 +00:00
Weizhung Ding
4b26119d0e Add coredomain for hbmsvmanager am: 4e46081859
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19415495

Change-Id: Ie8966a5b2d077fc8901472721b8ad1deb7c6c0a0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-23 01:57:42 +00:00
Weizhung Ding
4e46081859 Add coredomain for hbmsvmanager
Sync the coredomain from gs101

Bug: 239902607
Test: without denied log
Change-Id: I220ce6b2f67877637189fcfcc0f6b328c8be6eae
2022-08-23 01:39:53 +00:00
Wei Wang
e9d5556ad2 Label GPU dvfs period setting am: b5fcd3b4db am: 4a56314a9c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19564662

Change-Id: I0378c43bb45f5a92b12ea16259fc59b91333619d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-10 23:34:12 +00:00
Wei Wang
33c574db0c Label GPU dvfs period setting am: b5fcd3b4db am: d28c59ec92
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19564662

Change-Id: I579136ad0c09962de6c067b832dfc729af1ff3a8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-10 23:33:50 +00:00
Wei Wang
d28c59ec92 Label GPU dvfs period setting am: b5fcd3b4db
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19564662

Change-Id: I616aa04aa91a262e00dd0d611d486edccf463a29
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-10 23:03:28 +00:00
Wei Wang
4a56314a9c Label GPU dvfs period setting am: b5fcd3b4db
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19564662

Change-Id: Ia58bb1e41f2c4e1f8330672545d91779f96daa8d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-10 23:02:35 +00:00
Wei Wang
b5fcd3b4db Label GPU dvfs period setting
Bug: 239887528
Test: Build
Signed-off-by: Wei Wang <wvw@google.com>
Change-Id: I35766555f13f586e37d03843dae153d02f189976
2022-08-09 23:52:57 +00:00
Konstantin Vyshetsky
537e037e9a convert_to_ext4.sh: suppress test error am: 27f55d7da7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19563471

Change-Id: Id4814a8d1e5f06f1ccba3d8ba1f5de3fb798174f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-09 05:41:27 +00:00
Konstantin Vyshetsky
27f55d7da7 convert_to_ext4.sh: suppress test error
Add exclusion to fix issue with SELinuxUncheckedDenialBootTest

Bug: 241072524
Signed-off-by: Konstantin Vyshetsky <vkon@google.com>
Change-Id: Id9088f728c34d3c764e1aef66a5e1a126f6243e9
2022-08-09 05:27:21 +00:00
TeYuan Wang
f5764ecee6 sepolicy: fix odpm avc denials am: 5ef0888e04
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19446216

Change-Id: I1cccc3f4c7aa8b4fc0127ead61ed54b4ce060280
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-09 03:18:47 +00:00
Adam Shih
ccc53e1ad7 Update error on ROM 8892407 am: 2e4daadb2e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19533960

Change-Id: I73d93eb1dcd00fe439dd0522f0a85489cb1ba704
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-09 03:10:19 +00:00
TeYuan Wang
5ef0888e04 sepolicy: fix odpm avc denials
Fix permissions for ODPM by adding additional bus path

Bug: 240380970
Test: Build
Change-Id: I7bf02ce016f2cdbf4b45f1a797896a00fb8aa454
2022-08-09 03:08:54 +00:00
Adam Shih
2e4daadb2e Update error on ROM 8892407
Bug: 241714943
Bug: 241714944
Bug: 240297563
Test: SELinuxUncheckedDenialBootTest
Change-Id: I0aab196ab21ec411540b7a033578a1670e83187a
Merged-In: I38e6cc9da23c72aed05e79346a3a6c8188fc8556
2022-08-08 07:08:17 +00:00
Bruce Po
3e06a3d9e7 Allow aocd to access acd-offload nodes am: d4e0af0105
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19472441

Change-Id: Ibe3b6ff746eb1a7775182b75d6d49c7a289482b5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-03 00:49:29 +00:00
Bruce Po
d4e0af0105 Allow aocd to access acd-offload nodes
For 3-ch hotword feature, aocd daemon will access two new file nodes
(b/235648212), which will be used for transmitting audio to/from AOC.

BUG: 240744178
Change-Id: I67b6d6b539f1e436eacfd80d0e1299e1d63b4a1d
2022-08-03 00:12:15 +00:00
Konstantin Vyshetsky
6d48c8c71b convert_to_ext4.sh: modify sepolicy am: c44f96b66a am: 7f2edf52ce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19492175

Change-Id: Iaa929e781bdc0b028725ae849a9950576587e2e4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-02 03:35:33 +00:00
Konstantin Vyshetsky
9db8c9aa5f convert_to_ext4.sh: modify sepolicy am: c44f96b66a am: 906b9d1aab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19492175

Change-Id: Idd9f41af48cfcbf2e581a8fd7182d0aff0aa3979
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-02 03:34:48 +00:00
Konstantin Vyshetsky
7f2edf52ce convert_to_ext4.sh: modify sepolicy am: c44f96b66a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19492175

Change-Id: I51a6b4a8d407ee7e2fbc84b7472e72d5337eb911
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-02 03:19:38 +00:00
Konstantin Vyshetsky
906b9d1aab convert_to_ext4.sh: modify sepolicy am: c44f96b66a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19492175

Change-Id: I8c2bb52cd2c273dc224432f9e84008b0d79cdadc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-02 03:19:20 +00:00
Konstantin Vyshetsky
c44f96b66a convert_to_ext4.sh: modify sepolicy
Combine individual rules under persist into vendor_persist_type.

Bug: 239632964
Signed-off-by: Konstantin Vyshetsky <vkon@google.com>
Change-Id: I4f90a3b30f9d0dd8b8386ef57728fa098a630081
2022-08-01 18:51:42 -07:00
Konstantin Vyshetsky
79cda1d834 convert_to_ext4.sh: add sepolicy am: 07af2808d5 am: a16b2ac404
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19391424

Change-Id: I65721d846426ae91db09b22eaccaf3e6ad1c7686
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 18:40:52 +00:00
Konstantin Vyshetsky
d01c7c938b convert_to_ext4.sh: add sepolicy am: 07af2808d5 am: a8e3ff791c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19391424

Change-Id: I05cf9212bb0c85ddf082e90146fe1a2cb9ef322b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 18:32:08 +00:00
Konstantin Vyshetsky
a16b2ac404 convert_to_ext4.sh: add sepolicy am: 07af2808d5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19391424

Change-Id: I19364ae4fa02a74996d14eeadf3f6ee89311bfc9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 18:17:39 +00:00
Konstantin Vyshetsky
a8e3ff791c convert_to_ext4.sh: add sepolicy am: 07af2808d5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19391424

Change-Id: Id303addc42a444642f827605404dca79044efd37
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 18:17:27 +00:00
Konstantin Vyshetsky
07af2808d5 convert_to_ext4.sh: add sepolicy
Add entries for convert_to_ext4.sh executable.

Bug: 239632964
Signed-off-by: Konstantin Vyshetsky <vkon@google.com>
Change-Id: I0d89aa88dab0ae5a4cf3d7b2e4423d1761868bea
2022-08-01 18:00:49 +00:00
lucaslin
bff13cbb06 [automerger skipped] Add sepolicy for dumpstate to zip tcpdump into bugreport am: 81616f3ad0 am: e798862ff6 -s ours
am skip reason: Merged-In I01b9b25a6236bcfa1ce2b89afb3ed1bc2ef49cae with SHA-1 81616f3ad0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19466304

Change-Id: Idbb6775c21f72db8e2a93a87d3d379f5878ade99
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 13:11:31 +00:00
lucaslin
b4a1e44f64 Add sepolicy for dumpstate to zip tcpdump into bugreport am: 81616f3ad0 am: 2bfca77c08
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19466304

Change-Id: I7ca58e12747568d1fb7e31c0321c899955785c4c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 13:11:26 +00:00
lucaslin
e798862ff6 Add sepolicy for dumpstate to zip tcpdump into bugreport am: 81616f3ad0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19466304

Change-Id: I97d34e9e6d64f470e79d33bd0d277d9f3694d03a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 12:46:32 +00:00
lucaslin
2bfca77c08 Add sepolicy for dumpstate to zip tcpdump into bugreport am: 81616f3ad0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19466304

Change-Id: I8b70cb968c26cc1b5705c308e29a0c4e0bf53e0a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 12:46:23 +00:00
lucaslin
81616f3ad0 Add sepolicy for dumpstate to zip tcpdump into bugreport
Bug: 239634976
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: I01b9b25a6236bcfa1ce2b89afb3ed1bc2ef49cae
Merged-In: I01b9b25a6236bcfa1ce2b89afb3ed1bc2ef49cae
(cherry picked from commit ee1b7d6bb4)
2022-08-01 03:00:17 +00:00
Steven Moreland
be28c1d05c Remove vendor_service. am: f10b9bf2cd am: 82c366063e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19441143

Change-Id: I40c6999858b58274485e150fb2c108a099331b2f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-28 01:58:01 +00:00
Steven Moreland
82c366063e Remove vendor_service. am: f10b9bf2cd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19441143

Change-Id: Ib8a9d7fec295cdc8a9581f042bc082d83612d33a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-28 01:07:53 +00:00
Steven Moreland
f10b9bf2cd Remove vendor_service.
We want to avoid associating types with where they can be used.

Bug: 237115222
Test: build
Change-Id: I6795d960aa2a3b3832be8e0f6a11cb0fc3337982
2022-07-26 23:53:54 +00:00
Adam Shih
5208624c3e sync bug_map with downstream am: b34d1c1ed0 am: fcb18faeb1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19349280

Change-Id: I8e49824f8c4c68d3af28cee59da2b2aece8fa0b2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-25 21:56:10 +00:00
Adam Shih
05991af46f sync bug_map with downstream am: b34d1c1ed0 am: 813e69784d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19349280

Change-Id: I93d1b34ef647501e7c99eed163a79f9b190f0b75
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-25 21:55:38 +00:00
Adam Shih
fcb18faeb1 sync bug_map with downstream am: b34d1c1ed0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19349280

Change-Id: Id6d9092dd4f1e1b59b911a4bba12aca4f238248e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-25 21:32:08 +00:00
Adam Shih
813e69784d sync bug_map with downstream am: b34d1c1ed0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19349280

Change-Id: I11105def02ffc78d663ebfdf9548cf111429120b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-25 21:31:56 +00:00
Adam Shih
b34d1c1ed0 sync bug_map with downstream
Bug: 239403666
Test: boot
Change-Id: I7e95cc5169ce56f1bba031b4d8a83ab1d5c80b26
Merged-In: If07a3611f40324d985a387c6dd7f2570c90c7c11
2022-07-25 21:05:38 +00:00
Edmond Chung
087f96ccf0 Allow vendor_init to set camera properties am: c09b0f9873 am: ed1f75b8aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19381316

Change-Id: Ic462b751b4d3e3d2d18da39e76d5bf7dd1696a3c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-22 02:18:35 +00:00