Commit graph

1122 commits

Author SHA1 Message Date
Treehugger Robot
910018de64 [automerger skipped] Merge "Allow Trusty storageproxy property" am: e1a152fc98 -s ours
am skip reason: Merged-In I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d with SHA-1 37b0c417d1 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2322222

Change-Id: I64496de69383a5eb374622b48570f5c751405061
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-10 18:45:43 +00:00
Stephen Crane
bccd56c75d [automerger skipped] Allow Trusty storageproxy property am: f70e73af58 -s ours
am skip reason: Merged-In I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d with SHA-1 37b0c417d1 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2322222

Change-Id: I01c24fc940fc419732131690efcd060ee5565e08
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-10 18:45:41 +00:00
Treehugger Robot
e1a152fc98 Merge "Allow Trusty storageproxy property" 2023-01-10 18:15:28 +00:00
Super Liu
b705c1a215 [DO NOT MERGE] Add sepolicy for procfs_touch_gti type am: 946b7e5e36
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20811209

Change-Id: Ifdfe12568635a069098a085f247ff8502aa76189
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-09 01:34:28 +00:00
Adam Shih
fe7901612d update error on ROM am: 41e9042885 am: efc2edd3ce
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2375476

Change-Id: Id9d12d795091bf84b5a8d53767a7a265646f1a5d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-06 05:22:28 +00:00
Adam Shih
efc2edd3ce update error on ROM am: 41e9042885
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2375476

Change-Id: Ia39df8949eeb41c458baab106e4f98851ce7b496
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-06 04:50:57 +00:00
Adam Shih
41e9042885 update error on ROM
Bug: 242203678
Test: pass boot test
Change-Id: I4b9aefdea9b54b4fb1743af6c7e7169c210c7ad0
Merged-In: Iadd90d55aca37fead3e5528d39df7866c9807205
2023-01-06 02:42:49 +00:00
Super Liu
946b7e5e36 [DO NOT MERGE] Add sepolicy for procfs_touch_gti type
Bug: 262796907
Test: TreeHugger build pass.
Change-Id: I2b89aa6e0e9b8fbe42121f34e4c70639bdc225d2
2022-12-26 02:23:59 +00:00
Stephen Crane
c430f27151 [automerger skipped] Allow Trusty storageproxy property am: 37b0c417d1 -s ours
am skip reason: Merged-In I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d with SHA-1 5cd114d3a0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20600484

Change-Id: I516c0e02b2870767fed94431145b6be655cb20fa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-21 04:06:01 +00:00
Stephen Crane
f70e73af58 Allow Trusty storageproxy property
Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready
when the data filesystems are ready for use, and allows vendor init to
query and wait on this property.

Test: build, flash, test app loading
Bug: 258018785
Change-Id: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
Merged-In: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
2022-12-21 03:43:20 +00:00
Stephen Crane
37b0c417d1 Allow Trusty storageproxy property
Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready
when the data filesystems are ready for use, and allows vendor init to
query and wait on this property.

Test: build, flash, test app loading
Bug: 258018785
Change-Id: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
Merged-In: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
2022-12-21 03:42:07 +00:00
Devin Moore
35a55fd27f Allow pixelstats hal to talk to the new AIDL sensorservice am: 691897a0bf am: bfa91d7e21
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2363266

Change-Id: Ifd7d2166a166e40e9685ba4e2d04ffb66f9478a8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-20 20:57:22 +00:00
Devin Moore
bfa91d7e21 Allow pixelstats hal to talk to the new AIDL sensorservice am: 691897a0bf
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2363266

Change-Id: I6162c76ddc3ee581a782d176507d6b93cb8ce07c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-20 20:20:51 +00:00
Devin Moore
691897a0bf Allow pixelstats hal to talk to the new AIDL sensorservice
This is being used in libsensorndkbridge now, so permissions are
required.

Test: m
Bug: 205764765
Change-Id: Ife9688c62398bef83ae5636e915568658098e12d
2022-12-19 23:05:38 +00:00
Android Build Coastguard Worker
bfcae7eb32 Snap for 9414670 from f5a88c35a4 to tm-qpr2-release
Change-Id: I78749312c952346ab00f38c0145e5cab9e014c02
2022-12-17 02:02:55 +00:00
Jenny Ho
0e90b55ed9 Add sepolicy rule to allow dump battery maxfg history am: f5a88c35a4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20729299

Change-Id: I983b69e606a1e257380abcfaefacfcbd4aea651d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-16 07:26:40 +00:00
Jenny Ho
f5a88c35a4 Add sepolicy rule to allow dump battery maxfg history
android.hardwar: type=1400 audit(0.0:7): avc: denied { getattr } for path="/dev/maxfg_history" dev="tmpfs" ino=580 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0 bug=b/240632721

Bug: 254164096
Change-Id: I64ff95ba8db62a8f831d012b4cdf4e6ec973f086
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2022-12-15 03:03:01 +00:00
Android Build Coastguard Worker
683adbb75b Snap for 9397138 from 810a7c5988 to tm-qpr2-release
Change-Id: I44abf5e6db8ba1b7072f43dc7484df4001f3220d
2022-12-13 03:46:28 +00:00
Jack Wu
dd9d20b242 [automerger skipped] ignore shell access on wlc am: 812312fb1c am: e5974267f8 am: 810a7c5988 -s ours
am skip reason: Merged-In I5f1d321df2daa2ec785e2ad1ac2e02478568b688 with SHA-1 72a65a0100 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20677740

Change-Id: I74f7c32fc56171592567e8f84457fa894ebc9d06
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 08:32:05 +00:00
Jack Wu
810a7c5988 ignore shell access on wlc am: 812312fb1c am: e5974267f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20677740

Change-Id: Ic9e3f1e1c7d029268a6430eda9bfdd8873c30ede
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 07:55:16 +00:00
Jack Wu
e5974267f8 ignore shell access on wlc am: 812312fb1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20677740

Change-Id: I12bf3f89227c1d3cab0ea2ac5863bfbcaf7eb6f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 06:50:08 +00:00
Jack Wu
343ef77907 ignore shell access on wlc am: 72a65a0100 am: 800574a31d
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2276118

Change-Id: I7fb4d5ca9bb191b2568c60890983671e3a421788
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 03:43:55 +00:00
Jack Wu
800574a31d ignore shell access on wlc am: 72a65a0100
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2276118

Change-Id: I7d3f7611f7bd26cde474bfae8ab8ed7fcae5d95b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 03:14:19 +00:00
Jack Wu
72a65a0100 ignore shell access on wlc
Bug: 238260741
Test: boot
Change-Id: I5f1d321df2daa2ec785e2ad1ac2e02478568b688
Merged-In: I5f1d321df2daa2ec785e2ad1ac2e02478568b688
Signed-off-by: Jack Wu <wjack@google.com>
2022-12-12 09:28:24 +08:00
Automerger Merge Worker
159684c0d9 Merge "[automerger skipped] Merge Android 13 QPR1 am: a895073188 -s ours" into stage-aosp-master am: 40d65d57a9 -s ours
am skip reason: Merged-In Idb145723d053eb93dbae2b71f7204347253c8a50 with SHA-1 123262b869 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2337016

Change-Id: I1e2d84021562ea9e6cb27189f7a1be3247d1577e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-10 01:57:13 +00:00
Xin Li
4c5a9c7e12 [automerger skipped] Merge Android 13 QPR1 am: a895073188 -s ours am: b6b7e42179 -s ours
am skip reason: Merged-In Idb145723d053eb93dbae2b71f7204347253c8a50 with SHA-1 123262b869 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2337016

Change-Id: I14be64d8b1129673d2dd45f93fe218481e4b85de
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-10 00:24:33 +00:00
Automerger Merge Worker
40d65d57a9 Merge "[automerger skipped] Merge Android 13 QPR1 am: a895073188 -s ours" into stage-aosp-master 2022-12-09 23:29:33 +00:00
Xin Li
f2706b36cc [automerger skipped] Merge Android 13 QPR1 am: a895073188 -s ours
am skip reason: Merged-In Idb145723d053eb93dbae2b71f7204347253c8a50 with SHA-1 123262b869 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2337016

Change-Id: Ib55c87abcfe45f8ea877a34002002cb0d12b43b2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-09 23:19:11 +00:00
Xin Li
b6b7e42179 [automerger skipped] Merge Android 13 QPR1 am: a895073188 -s ours
am skip reason: Merged-In Idb145723d053eb93dbae2b71f7204347253c8a50 with SHA-1 123262b869 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2337016

Change-Id: Ifd93ba6d6aaf3efca62c484c0582bd9399b1eea3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-09 23:14:27 +00:00
Xin Li
a895073188 Merge Android 13 QPR1
Bug: 261731544
Merged-In: Idb145723d053eb93dbae2b71f7204347253c8a50
Change-Id: I81e178b27ef30d184e5e12844c64e5b897d97168
2022-12-09 10:24:38 -08:00
Android Build Coastguard Worker
88b834523d Snap for 9385690 from 5df8045c3b to tm-qpr2-release
Change-Id: I2f7ad0a9350d7befc417667ea7114be279536869
2022-12-09 00:03:20 +00:00
Nicolas Geoffray
da3eb0b7c5 Also put .ShannonImsService in the vendor_ims_app domain. am: 123262b869 am: 99159a832b
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2335385

Change-Id: I76302558055df38134731cddc25a9ee84074dafd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-08 20:17:12 +00:00
Nicolas Geoffray
99159a832b Also put .ShannonImsService in the vendor_ims_app domain. am: 123262b869
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2335385

Change-Id: I0967cfff61ba4576130772ddf66c297ea6edf508
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-08 19:32:29 +00:00
Nicolas Geoffray
123262b869 Also put .ShannonImsService in the vendor_ims_app domain.
For consistency when running com.shannon.imsservice code.

Test: m
Bug: 260557058
Change-Id: Idb145723d053eb93dbae2b71f7204347253c8a50
2022-12-08 14:49:22 +00:00
Jack Wu
812312fb1c ignore shell access on wlc
Bug: 261804136
Test: boot
Change-Id: I5f1d321df2daa2ec785e2ad1ac2e02478568b688
Merged-In: I5f1d321df2daa2ec785e2ad1ac2e02478568b688
Signed-off-by: Jack Wu <wjack@google.com>
2022-12-08 17:58:26 +08:00
chiayupei
c1191eef16 hal_sensors_default: Add sepolicy for MagCC. am: 5df8045c3b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20458112

Change-Id: I4f87b4c1977fe7aace7d1da49a7d8ed46512b809
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-08 08:31:55 +00:00
chiayupei
5df8045c3b hal_sensors_default: Add sepolicy for MagCC.
avc: denied { search } for name="battery" dev="sysfs" ino=78703 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1
avc: denied { read } for name="status" dev="sysfs" ino=78714 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
avc: denied { open } for path="/sys/devices/platform/google,battery/power_supply/battery/status" dev="sysfs" ino=78714 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
avc: denied { getattr } for path="/sys/devices/platform/google,battery/power_supply/battery/status" dev="sysfs" ino=78714 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
avc: denied { read } for name="status" dev="sysfs" ino=78714 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
avc: denied { search } for name="i2c-p9222" dev="sysfs" ino=69679 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=1
Bug: 254155730
Test: Manually test no avc denied for MagCC

Change-Id: Ie5261b39187ffcdf645ae64727c54643bdbc1c47
Signed-off-by: chiayupei <chiayupei@google.com>
2022-12-08 07:56:50 +00:00
Android Build Coastguard Worker
f5a1f66b9f Snap for 9371302 from 271a845885 to tm-qpr2-release
Change-Id: I61dfe152be4f25a2cdee0e308a6f8b2bda3cdf7b
2022-12-06 00:03:08 +00:00
Nicolas Geoffray
0bd5e91ed1 Allow ssr_detector_app to create files of type system_app_data_file. am: 48acf9683f am: a350889233
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2328073

Change-Id: I3e904889634887ad719519b70fe5f48953f09534
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 16:19:12 +00:00
Nicolas Geoffray
a350889233 Allow ssr_detector_app to create files of type system_app_data_file. am: 48acf9683f
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2328073

Change-Id: I1d28a6bc1bab970eef702a8c8a0f9b3d8bfe2123
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 15:48:47 +00:00
Nicolas Geoffray
48acf9683f Allow ssr_detector_app to create files of type system_app_data_file.
Bug: 260557058
Test: m
Change-Id: I0ff85b542a84ed7d5e5ffd1010ca1a9f7f86c8f1
2022-12-05 13:58:36 +00:00
Wasb Liu
d90c1c4c22 hal_health_default: updated sepolicy am: daeff5e18c am: 88e9fb512d am: 271a845885
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20610808

Change-Id: Ifca6b7ec1ade7be5d28d619c18af27d537699eda
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 05:34:08 +00:00
Wasb Liu
271a845885 hal_health_default: updated sepolicy am: daeff5e18c am: 88e9fb512d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20610808

Change-Id: I4f4cc732f46d00a7c18dc1fb691436aa826e441a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 04:56:13 +00:00
Wasb Liu
88e9fb512d hal_health_default: updated sepolicy am: daeff5e18c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20610808

Change-Id: Idb7b4ffa9a74638247fc9bbaa4f697c9945e4c2e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 03:51:20 +00:00
Android Build Coastguard Worker
f3c943685a Snap for 9364794 from 0237351f52 to tm-qpr2-release
Change-Id: I8f8ce64b50abcb979c2cb84392519bca060edc7f
2022-12-03 02:03:18 +00:00
George Lee
cd346126ec Battery Mitigation: Use Brownout Reason - sepolicy am: 0237351f52
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20614653

Change-Id: I0bd44a43a191724cb3a882e87ae988545e207154
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-02 07:05:12 +00:00
George Lee
0237351f52 Battery Mitigation: Use Brownout Reason - sepolicy
Brownout Reason replaces startup_bugreport_requested.  Battery
Mitigation needs to be updated.

Bug: 237287659
Test: Ensure lastmeal.txt is properly generated.
Merged-In: Ia03da290f5cb90ebbc7616d46e90064e346a402c
Change-Id: Ic123d704e37aa6d1dcd7377c291b537069ede829
Signed-off-by: George Lee <geolee@google.com>
2022-12-02 05:13:57 +00:00
Wasb Liu
daeff5e18c hal_health_default: updated sepolicy
allow android.hardware.health service to access persist_battery_file

11-14 13:53:39.242   872   872 W android.hardwar: type=1400 audit(0.0:17): avc: denied { search } for name="battery" dev="sda1" ino=84 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=dir permissive=0

Bug: 258535661
Bug: 260878511
Test: check for no avc denied on persist_battery_file
Change-Id: I7564b03339e17f9eea4aa5a8feda31bcfdd6100c
Signed-off-by: Wasb Liu <wasbliu@google.com>
Signed-off-by: Ken Tsou <kentsou@google.com>
(cherry picked from commit 24cfe388c5)
2022-12-02 02:01:24 +00:00
Android Build Coastguard Worker
ef183ee898 Snap for 9358956 from 30e01ffb8c to tm-qpr2-release
Change-Id: I37ad3f8227c7836253c1734b3b848ae2832658f3
2022-12-02 00:03:25 +00:00
Ziyi Cui
71d22f91d6 [ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to perf-metrics am: 30e01ffb8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20133843

Change-Id: I4a4b1d228816a46749ce0d125d86c29c272e4a57
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 07:03:11 +00:00