Adam Shih
0ae5acc904
fix graphics_composer services denials
...
10-25 11:28:32.230 438 438 E SELinux : avc: denied { add } for pid=500 uid=1000 name=com.google.hardware.pixel.display.IDisplay/default scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:hal_pixel_display_service:s0 tclass=service_manager permissive=1
10-25 11:28:33.787 438 438 E SELinux : avc: denied { find } for pid=500 uid=1000 name=android.hardware.power.IPower/default scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:hal_power_service:s0 tclass=service_manager permissive=1
Bug: 202906947
Test: boot with no graphics_composer errors
Change-Id: I4174cbcacb7149427814ca67703799ab02b992e4
2021-10-25 11:31:39 +08:00
Adam Shih
be8aedd6ac
fix hal_fingerprint_default denails
...
10-25 11:19:03.649 430 430 E SELinux : avc: denied { find } for pid=958 uid=1000 name=android.hardware.power.IPower/default scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:hal_power_service:s0 tclass=service_manager permissive=1
10-25 11:19:04.509 430 430 E SELinux : avc: denied { find } for pid=958 uid=1000 name=android.frameworks.stats.IStats/default scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:fwk_stats_service:s0 tclass=service_manager permissive=1
Bug: 202906981
Test: boot with no fingerprint errors
Change-Id: I95dcda0698c7fcec1e4874b95b598bc987e83e58
2021-10-25 11:24:26 +08:00
Adam Shih
9cb1f625ba
fix hal_weaver_citadel denials
...
Bug: 202907040
Test: boot with nno relevant errors
Change-Id: Ieb7a57518b433cc6cd2849afb58c8616b409db13
2021-10-25 11:09:06 +08:00
Adam Shih
fc1ec67aa4
fix init_citadel service access
...
Bug: 202906904
Test: boot to home with no relevant error
Change-Id: I6729ced49cbbecbc33234e311fb81652a065fe39
2021-10-20 10:41:56 +08:00
Adam Shih
ecc3a24449
fix identity service access
...
10-20 10:32:58.701 438 438 E SELinux : avc: denied { find } for pid=742 uid=9999 name=android.hardware.citadel.ICitadeld scontext=u:r:hal_identity_citadel:s0 tcontext=u:object_r:citadeld_service:s0 tclass=service_manager permissive=1
Bug: 202906902
Test: boot to home with no relevant error
Change-Id: Ia6e09343843f9a5c96e06998ba5c50fb64948d7f
2021-10-20 10:35:18 +08:00
Adam Shih
4c20c40f50
Fix hal_keymint_citadel service access
...
10-20 10:24:31.155 432 432 E SELinux : avc: denied { find } for pid=481 uid=1064 name=android.hardware.citadel.ICitadeld scontext=u:r:hal_keymint_citadel:s0 tcontext=u:object_r:citadeld_service:s0 tclass=service_manager permissive=1
Bug: 202907039
Test: boot to home with no keymint errors
Change-Id: I7935fe52a9774f8fca67336be9c9d47fe2675756
2021-10-20 10:26:18 +08:00
Adam Shih
e9d02e08f5
fix widevine drm access
...
Bug: 202906980
Test: boot with no relevant logs
Change-Id: Idc37f7e1441d9fae1f570bc53ff67a7a48656ed3
2021-10-20 10:06:10 +08:00
Adam Shih
56bef214d3
fix citadeld's service access
...
Bug: 202906931
Test: boot with no relevant logs
Change-Id: Ic65c6f218f69a1afa14fcd1b6eb0feacf48ea54f
2021-10-20 09:54:52 +08:00
Adam Shih
a39f2e902e
remove unlabeled dontaudits
...
The log shows up when we remount the phone, causing modem images going
back to default file contexts: "unlabeled"
Bug: 202906831
Test: Boot to home with no relevant log
Change-Id: I69baced268782d9b38c1a56c62b3c63ae55733e4
2021-10-20 09:46:02 +08:00
Adam Shih
bfd5097be2
dispatch service related error
...
Bug: 202906787
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ifbdf1de156994572b8fedfd18180d3821ef1594c
2021-10-14 10:50:12 +08:00
Adam Shih
c1ffe9c177
Initialize gs201 to zero
...
Bug: 196916111
Test: boot to home with all services launched
Change-Id: I3453fc01cec5fd7b2b2a44a6f20c64e818ce1acd
2021-08-18 09:46:14 +08:00
Ocean Chen
827b204adb
storage: update sepolicy for hardwareinfoservice
...
Bug: 188793183
Test: run pixel/022
Change-Id: I921c4eae0744278896007183a7947f281925b24f
2021-08-17 16:25:46 +00:00
Richard Hsu
02ccab0539
[Bringup] Update SEPolicy for TPU (Janeiro) for PRO.
...
Reuse the same SEPolicy for edgetpu gs101 for gs201.
1. gs101 sepolicy has been refactored into an edgetpu directory, which
is meant to be reused. We only need to match the gs201 side to mirror
that. This CL references Adam's ag/14911633.
2. In a separete CL, add /dev/janeiro into the common gs101 sepolicy.
Bug: 191185522
Test: run_tflite_test_odc passes.
https://paste.googleplex.com/5466657955774464
Change-Id: Idd9e47a3c8da70f9dd4696cb7db7d4439e9897d6
2021-06-17 17:22:43 -07:00
Pat Tjin
d3a63de64b
clone sepolicy from gs101
...
s/gs101/gs201/g
Bug: 186836335
Test: Boot
Signed-off-by: Pat Tjin <pattjin@google.com>
Change-Id: Ifa0d083f7317c38eb02c8228c2804cbd4d5ee19f
2021-05-20 17:51:49 -07:00
