Commit graph

623 commits

Author SHA1 Message Date
Adam Shih
a39f2e902e remove unlabeled dontaudits
The log shows up when we remount the phone, causing modem images going
back to default file contexts: "unlabeled"
Bug: 202906831
Test: Boot to home with no relevant log

Change-Id: I69baced268782d9b38c1a56c62b3c63ae55733e4
2021-10-20 09:46:02 +08:00
Adam Shih
a5f61547cf remove legacy folder
Bug: 196916111
Test: boot to home
Change-Id: I33e4cf4a339092a31c951098e982c0bd38e53852
2021-10-20 09:33:29 +08:00
Adam Shih
862eca1510 remove redundant bluetooth sepolicy
Bug: 202790744
Test: boot with bluetooth hal started

Change-Id: Ie78cb9caeabd6b202ff99f9896fe0ae6e57cabfe
2021-10-18 12:02:08 +08:00
Adam Shih
e0107f4952 remove legacy sepolicy to have a clean start
Bug: 196916111
Test: build pass and boot to home
Change-Id: Idb220db3c1f8b35a9dfac15caf6114fa2e6737fe
2021-10-18 12:01:54 +08:00
Adam Shih
90068020c3 review property settings
Bug: 203025336
Test: build pass
Change-Id: I48bc1b0a5ffc4631fec04750c9b58bed8f15d39d
2021-10-18 12:01:42 +08:00
Adam Shih
503d402cb2 review the rest of file declaration
Bug: 203025336
Test: build pass
Change-Id: I330a8dd46bdf6b731d4f7f61544e1d1f1e59876c
2021-10-18 12:01:13 +08:00
Adam Shih
37e4973df6 review file declaration
Bug: 203025336
Test: build pass
Change-Id: I8cfec54ac035f41ccafc58f1ec0b125613e0742b
2021-10-18 10:31:31 +08:00
Adam Shih
11c3b49e36 review file_contexts
Bug: 203025336
Test: check if every path exists
Change-Id: I156c4953a50d888e54249038b45992d134b4aaca
2021-10-18 00:46:45 +00:00
Adam Shih
e5b1c96b00 review genfs_contexts besides bluetooth
Bug: 203025336
Test: check each path's existence
Change-Id: I0b45434f544fb243bd2810ea7abdb896056aed0e
2021-10-15 03:45:59 +00:00
Adam Shih
37a0cb7547 review sys file nodes
Bug: 203025336
Test: check if the paths exist
Change-Id: I5141545211e19d3c18b2c3bb315c10d33d5e3774
2021-10-15 03:45:59 +00:00
Adam Shih
cf06f9ccbf review proc, tracefs, and system_suspend nodes
Bug: 203025336
Test: check if each file path exists
Change-Id: I980742978599c162a6c0d09fa2a3a07d97434981
2021-10-15 03:45:59 +00:00
Bart Van Assche
c6a7058dc3 Stop using the bdev_type SELinux attribute
The bdev_type is being removed from all SELinux policy files. Hence this
patch.

Bug: 202520796
Test: Treehugger
Change-Id: I475ff63b3f77f1bfe49519b76bb31b90c3216105
Signed-off-by: Bart Van Assche <bvanassche@google.com>
2021-10-15 01:52:10 +00:00
Adam Shih
0b4e85afe7 review debugfs
Bug: 203025336
Test: Boot to home with those files labeled
Change-Id: Ibe758555512417953eb9726bdba05c4ac2ff2ccf
2021-10-14 13:57:18 +08:00
Adam Shih
0b42f3ba82 review file_contexts
Bug: 203025336
Test: boot to home and check if the files are there
Change-Id: I2b748b18cca389d7fdd8b1b472dcb1605e0ddaaa
2021-10-14 13:34:33 +08:00
Adam Shih
0a570d1bc1 review hw service settings
Bug: 196916111
Test: boot to home
Change-Id: I63bc13119cee3564fd577b12aba9042f484ec18f
2021-10-14 04:01:42 +00:00
Adam Shih
bfd5097be2 dispatch service related error
Bug: 202906787
Test: pts-tradefed run pts -m PtsSELinuxTest

Change-Id: Ifbdf1de156994572b8fedfd18180d3821ef1594c
2021-10-14 10:50:12 +08:00
Jaegeuk Kim
bf900e2ae5 allow to convert /efs to f2fs
Bug: 201348703
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
Change-Id: If69f1443a0ee4d46a468a33524e8a51f774b2d28
2021-10-14 02:17:56 +00:00
Konstantin Vyshetsky
54b0addb16 convert_to_f2fs.sh: add sepolicy
Add entries for convert_to_f2fs.sh executable.

Bug: 202511062
Signed-off-by: Konstantin Vyshetsky <vkon@google.com>
Change-Id: I76ca5e169efec06f7a856e3938f50cfee5e6a7f3
2021-10-14 02:17:56 +00:00
Adam Shih
dfbc96da03 remove redundant exo sepolicy
All exo sepolicy live in gs101
Bug: 196916111
Test: build pass

Change-Id: I5c9a8af806c62ee74b4f2ab23bd60cd9706b2dae
2021-10-14 02:14:56 +00:00
Adam Shih
4d8c9e5940 review legacy contexts and keys
Bug: 196916111
Test: build pass and boot to home
Change-Id: I1b709cf6617668418150f269359eaa28421c1d43
2021-10-14 10:09:05 +08:00
Adam Shih
5b51181f96 review grilservice_app
Bug: 198532074
Test: boot with gril app started
Change-Id: I9e21bee23ad2cbb7e6d0e7363780ba0fbf5adb3b
2021-10-14 10:08:56 +08:00
Shiyong Li
cc27fae6e5 allow hwc to access displaycolor service
Fix the following violations:
SELinux : avc:  denied  { add } for pid=487 uid=1000 name=displaycolor
scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:vendor_displaycolor_service:s0 tclass=service_manager
permissive=1
SELinux : avc:  denied  { find } for pid=487 uid=1000 name=displaycolor
scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:vendor_displaycolor_service:s0 tclass=service_manager
permissive=1

Bug: 199467938
Test: check avc denials while hwc loads calibration file
Signed-off-by: Shiyong Li <shiyongli@google.com>
Change-Id: I43865b0a0fc406dc1955b58a80295c556d650797
2021-10-13 17:21:58 +00:00
Adam Shih
1aaa9d5be9 review hardware_info_app
Bug: 196916111
Test: boot with app correctly labeled
Change-Id: I31335fff6356edeedc10ebd2e55b8ed62e39ee02
2021-10-08 11:39:38 +08:00
Adam Shih
9e0b7599b4 review logger_app
Bug: 196916111
Test: boot to home
Change-Id: I882d0c302a44eb6c3467ced6fefa4437469d4c44
2021-10-08 11:33:40 +08:00
Adam Shih
37ca0bdfa4 review pixelstats_vendor
Bug: 202462997
Test: boot with pixelstats_vendor started
Change-Id: I1cd14413ea05362f3760e61b2d0d7b1db164a31c
2021-10-08 10:56:54 +08:00
Adam Shih
a787a30f8d review trusty domains
Bug: 198723116
Test: boot to home with trusty domains started
Change-Id: If5c6c0a75b6ad0eb032f637fd51ab2e4cea1e389
2021-10-08 10:48:04 +08:00
Adam Shih
34693feadc review mediacodec
Bug: 196916111
Test: boot with google and samsung mediacodec running
Change-Id: I7aaee5def774c8b7c19699f4da9b0b51f4869be9
2021-10-06 00:47:41 +00:00
Adam Shih
791aeae701 review ramdump_app
Bug: 196916111
Test: boot to home
Change-Id: I756f9022a7c20392dd8d07d2be7c972395176629
2021-10-06 00:47:41 +00:00
Adam Shih
1d0b6d22bc remove uwb app
uwb app does not exist on ROM 7793030
Bug: 196916111
Test: boot to home

Change-Id: I37d02e98589c7b3e894defa04de709ae0d904f09
2021-10-06 00:47:41 +00:00
Adam Shih
9c8da5b91c remove uwb
No uwb hal were found on ROM 7793030
Bug: 196916111
Test: Boot to home

Change-Id: I89ce68505c13b8de080d7aec5fc594fd2ada11c6
2021-10-06 00:47:41 +00:00
Kris Chen
fc82a2b242 fingerprint: Fix SELinux error
Fix the following SELinux error:
E init    : Could not start service 'vendor.fps_hal' as part of class 'late_start': File /vendor/bin/hw/android.hardware.biometrics.fingerprint@2.1-service.goodix(labeled "u:object_r:vendor_file:s0") has incorrect label or no domain transition from u:r:init:s0 to another SELinux domain defined.

Bug: 201500671
Test: build and run on DUT.
Change-Id: I85bd89edfaa6aaca003a5be21f4a045ce5944ab9
2021-10-05 03:44:27 +00:00
Adam Shih
16c10d6a33 review init-insmod-sh
Bug: 196916111
Test: boot to home
Change-Id: I085ff319e08c65cfc3d51fb480259fa137f8e3f3
2021-10-05 01:42:16 +00:00
Adam Shih
cccebb9eaf remove bugreport related sepolicy
Bug: 196916111
Test: adb bugreport
Change-Id: If52a43baed4022ffb3ecb248067eb1f4712c5feb
2021-10-05 01:42:16 +00:00
Adam Shih
798b72ad9c review hal_tetheroffload_default
Bug: 201599426
Test: boot to home with hal_tetheroffload_default started
Change-Id: I85491753dc7336eff285f61c71ad51840a13d7c3
2021-10-05 01:42:16 +00:00
Adam Shih
0a4f633d40 remove hal_wifi_ext
This is a shared module across qcom and google platform.
It is hard to tell whether it always behaves the same.
Bug: 201599426
Test: boot to home with hal_wifi_ext started

Change-Id: Ica8fa1168ecc07e3fed34bfad1c8d113e42bef22
2021-10-05 01:42:16 +00:00
Adam Shih
3f619c21ad centralize wifi_ext config
Bug: 201599426
Test: boot with wifi_ext started
Change-Id: I100363628bed970628cd3312a73f6d39bca533ef
2021-10-05 01:38:45 +00:00
Adam Shih
618ea304d4 review tcpdump_logger
Bug: 201599426
Test: boot with tcpdump_logger started
Change-Id: I023f48ea45b8d5a2180c91577241e9d9410469a4
2021-09-30 14:40:10 +08:00
Adam Shih
5ec277bf7c review hal_wifi
Bug: 201599426
Test: boot to home
Change-Id: I05538169275a7e8dc7638e075114440abda8c11b
2021-09-30 11:13:35 +08:00
Adam Shih
82cdc92c84 review hal_usb
Bug: 201599187
Test: boot with hal_usb_impl started
Change-Id: I77875c6911f6582454d666a57ed59cc1e386885b
2021-09-30 11:00:43 +08:00
Adam Shih
7ac4d6ae8c review hal_power_stats_default
Bug: 201230944
Test: make sure all file contexts took effect
Change-Id: Ifefb09f69b722747ccbb1c8cfbd423b27204e4e4
2021-09-28 14:42:35 +08:00
Adam Shih
fb11c9aaa0 restore rlsservice
01-01 20:00:12.304   425   425 E SELinux : avc:  denied  { add } for pid=704 uid=1000 name=rlsservice scontext=u:r:rlsservice:s0 tcontext=u:object_r:default_android_vndservice:s0 tclass=service_manager permissive=1
01-01 20:00:11.374     1     1 I SELinux : Context u:object_r:rlsservice_exec:s0 is not valid (left unmapped).
rlsservice uses apex, that's why it cannot be found in vendor.img
Bug: 196916111
Test: boot with rlsservice started

Change-Id: I8e052d75473f9431bbaeafb74d0e4043b02a1b51
2021-09-28 14:23:36 +08:00
Adam Shih
758dd9c309 review hal_power_default related contexts
Bug: 201230944
Test: make sure all contexts setting take effect
Change-Id: I1e3be99700560583153e70efdd21de5356b97c74
2021-09-28 13:54:03 +08:00
Adam Shih
cc911a8963 remove obsolete setting
Bug: 196916111
Test: boot to home
Change-Id: I7488b9d0789a002457891e0287d394ca281e945d
2021-09-28 13:19:35 +08:00
Adam Shih
8c532b1a65 remove un-reviewable sepolicy
Bug: 196916111
Test: boot to home
Change-Id: Idac79eece3a2e36eca8ad1b1e0ffc8d771f445d3
2021-09-28 08:04:57 +08:00
Adam Shih
ad68e7dc96 remove hal_health_default
It will be easier to review it through boot test
Bug: 201230944
Test: boot to home

Change-Id: I5008c4054ce04f062a8ca01a1e2bfd4cfe8daf70
2021-09-28 08:04:38 +08:00
Adam Shih
962e580a3c review hal_wlc
Bug: 201230944
Test: boot with hal_wlc started
Change-Id: I81d5ff7ed4745fb6d760f59c6acc50cc1732c95e
2021-09-28 08:03:15 +08:00
Adam Shih
53641894eb use gs101 neuralnetwork armnn
Bug: 196916111
Test: boot with armnn started
Change-Id: I50b1968034c60f922e679205e68841d63aadf5ae
2021-09-27 23:54:37 +00:00
Arthur Ishiguro
81ab5aceb9 Add Context Hub AIDL to gs201 sepolicy
Bug: 194285834
Test: None
Change-Id: Ife9b43cad3b3c500f549e72b4deda1836f6d79a0
2021-09-23 21:05:19 +00:00
Adam Shih
76b0758e9e review hal_thermal_default
Bug: 196916111
Test: boot to home
Change-Id: I6e804abe5761dae7a2563fbb514da293e7988fce
2021-09-23 00:25:52 +00:00
Adam Shih
48a9994ea4 remove obsolete sepolicy setting
ROM 7726471 does not have wlcfwupdate
Bug: 196916111
Test: build pass

Change-Id: I390552aa75a0139be2e23074f781c5aba513b4d5
2021-09-23 00:25:52 +00:00