Commit graph

630 commits

Author SHA1 Message Date
chungkai
96e63091b4 sepolicy: fix avc denials am: d80900ae17 am: efb75b5ced
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17764688

Change-Id: Ie80951fd60033081bda78a7cdb327ff0a7f5fe5e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 07:01:26 +00:00
chungkai
efb75b5ced sepolicy: fix avc denials am: d80900ae17
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17764688

Change-Id: I13bbf5aaa37f0855cce70a0ef06ac50fc1ad9006
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 06:39:45 +00:00
chungkai
d80900ae17 sepolicy: fix avc denials
add potential paths for i2c peripheral devices
sine we enable parallel module loading

Bug: 228947596
Test: do bugreport without avc denials
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I2e9fa011c049e32011c5880218dd679e03316e24
2022-04-15 02:56:55 +00:00
chungkai
56b70920b6 sepolicy: fix avc denials am: d37777dd33 am: 49e28ad8c1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17755771

Change-Id: I0f1e5b791a88ab62c3432307b6ea12f8e2165264
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:21:37 +00:00
Harpreet Eli Sangha
9ec5f1f14f Add CccDkTimeSyncService for Digital Key Support am: 1a0b0ce0c4 am: a7eb4ce4f2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17755764

Change-Id: I5f488b8c72afa86fabea4ac23e6fe6f87ce0b3d2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:21:29 +00:00
sukiliu
24a55545cc Update avc error on ROM 8453400 am: 81d9623cbe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17755772

Change-Id: I8173752a333d620cba87995bda69117903496671
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:21:11 +00:00
chungkai
49e28ad8c1 sepolicy: fix avc denials am: d37777dd33
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17755771

Change-Id: I59b89c687d44c371fed1e83d2a8bce057bb88179
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:07:33 +00:00
chungkai
d37777dd33 sepolicy: fix avc denials
add potential paths for i2c peripheral devices
sine we enable parallel module loading

Bug: 226887726
Test: do bugreport without avc denials
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: If2ac4c137c1ea074907c363424e6018a5fd646e8
2022-04-15 01:01:47 +00:00
Harpreet Eli Sangha
a7eb4ce4f2 Add CccDkTimeSyncService for Digital Key Support am: 1a0b0ce0c4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17755764

Change-Id: If10fb742322ba2bb732bd222990b00e712d00c54
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:00:36 +00:00
sukiliu
81d9623cbe Update avc error on ROM 8453400
Bug: 229209076
Test: PtsSELinuxTestCases
Change-Id: I05f06fe0d62cbfbd4783ba9c57dea7d7a7a35fca
2022-04-15 00:52:48 +00:00
Harpreet Eli Sangha
1a0b0ce0c4 Add CccDkTimeSyncService for Digital Key Support
Test: Build and Run
Bug: 226659256
Signed-off-by: Harpreet Eli Sangha <eliptus@google.com>
Change-Id: I9dd53a864d53e525282bc49c13b09157fc8d2ece
2022-04-15 00:28:13 +00:00
Anthony Stange
5e69e1c762 Update SELinux to allow CHRE to talk to the Wifi HAL am: 403643929d am: abb060273b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17715921

Change-Id: I842c5555f62e5cb6a9ae6138bb8c96d6ec7fd478
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 16:36:02 +00:00
Anthony Stange
abb060273b Update SELinux to allow CHRE to talk to the Wifi HAL am: 403643929d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17715921

Change-Id: I2fc02c0b95b50587e57dcd4070977c9f0f8cf34f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 16:14:08 +00:00
Anthony Stange
403643929d Update SELinux to allow CHRE to talk to the Wifi HAL
Bug: 206614765
Test: Run locally
Change-Id: I2cab195d533e3e2c390094bd09b15b5e761eadf0
2022-04-14 15:23:22 +00:00
chungkai
757a3fc7d9 sepolicy: fix avc denials am: fbdb09a2f0 am: d45cf4d6d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17750772

Change-Id: I51f07ba55b537303804b46034de3b000588a8cc9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 10:05:04 +00:00
chungkai
d45cf4d6d3 sepolicy: fix avc denials am: fbdb09a2f0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17750772

Change-Id: I60f7a16bec1ac56aace2cde31a17afb009387a62
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 09:42:49 +00:00
chungkai
fbdb09a2f0 sepolicy: fix avc denials
add potential paths for i2c peripheral devices
sine we enable parallel module loading

Bug: 226887726
Test: do bugreport without avc denials
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: Ifc618e315e9d28cab6f602ce2c99ac7fe35fc189
2022-04-14 07:24:58 +00:00
TeYuan Wang
ec0b702744 sepolicy: label AUR as sysfs_thermal am: 951bad233c am: 28432f8076
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17731168

Change-Id: Iff17f7bb5babeb0465e974ff187efd2012bbd6f6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 07:10:46 +00:00
TeYuan Wang
28432f8076 sepolicy: label AUR as sysfs_thermal am: 951bad233c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17731168

Change-Id: I90c7de97164a2da58f79d361173d21c40adc3b4c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 06:48:20 +00:00
sukiliu
792db15271 Update avc error on ROM 8449600 am: f0810342eb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17750769

Change-Id: If6eab7cb601ee0b5b78e09cc9c90bd305e480b4f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 06:24:53 +00:00
TeYuan Wang
951bad233c sepolicy: label AUR as sysfs_thermal
Bug: 171499494
Test: adb shell ls -Z /sys/devices/platform/100b0000.AUR
Change-Id: I0aa1b95c11d2af5fa2175c582068daad51360485
2022-04-14 06:23:35 +00:00
sukiliu
f0810342eb Update avc error on ROM 8449600
Bug: 229167195
Test: PtsSELinuxTestCases
Change-Id: I0b6cb1142aff6fbfbe828e014a5d9aad91b9817f
2022-04-14 05:58:56 +00:00
Denny cy Lee
469ce3962b Sepolicy: Pixel stats orientationCollector sepolicy am: d8eab32b49 am: 2c4cc89cdd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17652447

Change-Id: I7849c0b24b6ac1813ac71b1a914e3cfd043f3d5e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 03:09:14 +00:00
Denny cy Lee
2c4cc89cdd Sepolicy: Pixel stats orientationCollector sepolicy am: d8eab32b49
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17652447

Change-Id: Iec661711780385e125c324d6b057e74a4996eb19
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 02:49:17 +00:00
Denny cy Lee
d8eab32b49 Sepolicy: Pixel stats orientationCollector sepolicy
Bug: 228547969
Test: adb shell cmd stats print-logs;[do wireless charge], and below log
found
03-31 22:52:21.798   801   809 I statsd  : { uid(1000) 1648738341
240287209019 (105009)0x10000->[S] 0x20000->0[I]  }

Signed-off-by: Denny cy Lee <dennycylee@google.com>
Change-Id: I5ef5279ba7c8bf0fd3d4cf0155f5bcad79eeb6b2
2022-04-14 02:01:13 +00:00
Jenny Ho
62e6c46060 sepolicy: add sepolicy for disable.battery.defender am: f1a9fb4da2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17699361

Change-Id: I84efbf136d3024c3deb8a39d6bc1157ab298834a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 01:34:46 +00:00
Jenny Ho
f1a9fb4da2 sepolicy: add sepolicy for disable.battery.defender
Bug: 221384939
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: Iba8f4e7abca98b5805eb75ba386c90581269f749
2022-04-14 01:06:58 +00:00
Robert Shih
651b7a0ffa Pixel 2022: MediaDrm AIDL sepolicy am: 38151187bf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17592563

Change-Id: I1c17646ed0ba9ba8b05be9cf280e62ff711deef2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-13 19:10:14 +00:00
Robert Shih
38151187bf Pixel 2022: MediaDrm AIDL sepolicy
Bug: 219538389
Bug: 221180205
Change-Id: I985230093d692fcf948049455fa465fce116d2a6
Test: atest VtsAidlHalDrmTargetTest
2022-04-13 18:38:21 +00:00
Darren Hsu
a709963403 sepolicy: lable p9412 wakeup for system suspend am: cf2cc47e79 am: 8af71b59c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17731166

Change-Id: I3c20b7252a31152e1c4e5d4a2d71fa186a95aa45
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-13 11:20:26 +00:00
Darren Hsu
8af71b59c0 sepolicy: lable p9412 wakeup for system suspend am: cf2cc47e79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17731166

Change-Id: Ic0c96ad1ef2bc91f5fce9196c4133b39c6a33a50
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-13 10:20:02 +00:00
Darren Hsu
cf2cc47e79 sepolicy: lable p9412 wakeup for system suspend
Bug: 226887726
Bug: 228947596
Test: do bugreport without avc denials
Change-Id: Ic8eab625a20c60a4bf78403ef10465074d782821
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-04-13 13:39:02 +08:00
Wayne Lin
059af1fafb gps: allow system server to send sensor data callback to GPS am: aab4f72223 am: 1ae80c59a7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17699754

Change-Id: I53819b994893a89ece85497ee52d4aaeba408ba3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-13 03:51:07 +00:00
Wayne Lin
1ae80c59a7 gps: allow system server to send sensor data callback to GPS am: aab4f72223
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17699754

Change-Id: I4d29356b95bb185182a24190bc9c7ca5075e5ed2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-13 03:14:34 +00:00
Wayne Lin
aab4f72223 gps: allow system server to send sensor data callback to GPS
avc: denied { call } for scontext=u:r:system_server:s0 tcontext=u:r:gpsd:s0 tclass=binder permissive=0

Bug: 224772976
Test: build pass, verify no avc denied and gpsd can receive sensor callback
Change-Id: If3b58b5527f67732ea60b3dd943ae472aebb7aed
2022-04-13 02:54:24 +00:00
Albert Wang
75ee2a71a3 Add more xHCI wakeup path for suspend_control am: e914d6fcc3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17686710

Change-Id: I1991f78ae1dbbfe166e2f8f139f74912ea67cdff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 09:48:02 +00:00
Albert Wang
e914d6fcc3 Add more xHCI wakeup path for suspend_control
To addressdd the xHCI wakeup nodes permission problem, add new nodes:
/devices/platform/11210000.usb/11210000.dwc3/xhci-hcd-exynos.4.auto/wakeup
/devices/platform/11210000.usb/11210000.dwc3/xhci-hcd-exynos.4.auto/usb2
/devices/platform/11210000.usb/11210000.dwc3/xhci-hcd-exynos.4.auto/usb3
/devices/platform/11210000.usb/11210000.dwc3/xhci-hcd-exynos.5.auto/wakeup
/devices/platform/11210000.usb/11210000.dwc3/xhci-hcd-exynos.5.auto/usb2
/devices/platform/11210000.usb/11210000.dwc3/xhci-hcd-exynos.5.auto/usb3
/devices/platform/11210000.usb/wakeup

Bug: 228791172
Test: verified with forrest test build
Signed-off-by: Albert Wang <albertccwang@google.com>
Change-Id: I457e64c252ec3573ab15923898c469472fc3b9b6
2022-04-12 15:07:04 +08:00
Darren Hsu
f611530b69 sepolicy: label charger wakeup for system suspend am: 68f1d4fb71 am: 88dc029b88
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17686708

Change-Id: I67783d724652ba090d0b5de319c98eb69db6d6c9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 04:20:45 +00:00
Darren Hsu
88dc029b88 sepolicy: label charger wakeup for system suspend am: 68f1d4fb71
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17686708

Change-Id: Ia0c3065b170d6be3823dff7b4c4e650396df9c97
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 04:05:03 +00:00
Darren Hsu
68f1d4fb71 sepolicy: label charger wakeup for system suspend
Bug: 226887726
Test: do bugreport without avc denials
Change-Id: I0b57cfdddb81c1685f6a054944c064e02c099637
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-04-12 07:43:30 +08:00
Grace Chen
f38a4e9217 Add selinux permissions to r/w sysfs st33spi_state am: 2a8ed004f6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17653782

Change-Id: I7faf3de35fa80000ab91dc8dd73ded06b6d22e93
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-11 21:26:45 +00:00
Grace Chen
2a8ed004f6 Add selinux permissions to r/w sysfs st33spi_state
Bug: 228508704
Test: Confirm can r/w to sysfs file
Change-Id: If96f15f53ee510bf361a2bec5f006d67b178981e
2022-04-11 21:00:50 +00:00
Darren Hsu
6cd7fc1d19 Label AoC wakeup for system suspend am: c750a64e4c am: 7903dbb74c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17652444

Change-Id: Id439b82bbc3537ca33675e91a304b9667cbfc5b8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-11 09:07:45 +00:00
Darren Hsu
7903dbb74c Label AoC wakeup for system suspend am: c750a64e4c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17652444

Change-Id: I63c19ed0fb37137c0561b62a3fc2cebe5dabc458
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-11 08:18:19 +00:00
Darren Hsu
c750a64e4c Label AoC wakeup for system suspend
Bug: 227531769
Test: do bugreport without avc denials
Change-Id: Ie3efd407ff629b583e37c0b5af430c9a9daf8691
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-04-11 15:54:59 +08:00
Adam Shih
a0a04923c8 remove obsolete error am: 28a0ab4015
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17686703

Change-Id: Ice8313bee0f45ed509494a6b370f68591321aef6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-11 05:19:18 +00:00
Adam Shih
28a0ab4015 remove obsolete error
Bug: 207062833
Bug: 210363938
Bug: 220636850
Test: boot with no relevant error log
Change-Id: I4901be83358e860b4a699ce44013fa1b255ceaa5
2022-04-11 11:05:15 +08:00
Stephane Lee
b6bd708203 Fix off-mode (charger) sepolicy for the health interface am: 73b95396fd am: ddbaf098f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17350882

Change-Id: I2dc024c51555249d279cd54a9e844d7e148a3ef8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-08 03:38:19 +00:00
Stephane Lee
94be7a849d ODPM: Add ODPM config file to be read by powerstats 2.0 am: 5ce2f99f38 am: 4b99160e35
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17621550

Change-Id: I9a1f4a756d0ccdfe8a7698c644087a4406524d41
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-08 03:38:11 +00:00
chungkai
d6cdacea46 sepolicy: ignore avc denial am: 2a3100de6e am: 1aa53c1f48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17617704

Change-Id: I13c195e318c3e514ff69b7add78f7f27ccaac1cb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-08 03:37:47 +00:00