Ken Yang
b3bbcd4554
WLC: Cleanup the sysfs_wlc policies
...
The sepolicy must be self-contained without including wirelss_charger to
avoid build break in AOSP
Bug: 263830018
Change-Id: Ib3e36c9bb4b3048ce97592c3f68260035a32239d
Signed-off-by: Ken Yang <yangken@google.com>
2023-01-13 14:41:12 +00:00
Amith Dsouza
be2e1b2ede
Fix untracked SELinux denials on boot
...
Error:
avc: denied { find } for interface=vendor.samsung_slsi.telephony.hardware.radioExternal::IOemSlsiRadioExternal sid=u:r:platform_app:s0:c512,c768 pid=2641 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:hal_exynos_rild_hwservice:s0 tclass=hwservice_manager permissive=0
Bug: 254453654
Test: Flash device, rebuild driver blobs, check logs after boot
Change-Id: I43d524f781c1dda1d3d5291f661bc549fdbb99d6
2022-11-02 00:55:45 +00:00
chungkai
4fa67857c3
sched: move sysfs to procfs
...
Modify name from sysfs_vendor_sched to proc_vendor_sched
Test: without avc denial
Bug: 216207007
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I96dc6eb76dd533ff6fd54c27be7e4bc32bf5dbc7
2022-03-24 17:44:37 +00:00
Jack Yu
450f61d51b
Allow platform_app to access Nfc service
...
Fix selinux denial below.
avc: denied { find } for pid=11183 uid=10224 name=nfc
scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:nfc_service:s0 tclass=service_manager
permissive=0
Bug: 222387662
Test: build pass
Change-Id: If97d8141acab23b4e13ea65ce28589195ef7ad9e
2022-03-04 02:46:29 +00:00
davidycchen
7b7394be79
Remove touch_service
...
Remove touch_service here because we already define in
hardware/google/pixel-sepolicy/input and add by ag/16251913.
Bug: 199104528
Test: No any related error.
Signed-off-by: davidycchen <davidycchen@google.com>
Change-Id: I3e5f705f6d3cde18d9495cb110e16c4152fe3d4f
2022-02-11 02:36:29 +00:00
Adam Shih
d9a2fb8506
grant systemui app access to touch service
...
Bug: 204718221
Test: boot with no relevant error
Change-Id: Ic320cf682e481522ef9acad6c4eb63891c84c80c
2022-01-17 11:20:07 +08:00
chungkai
9721a3076e
Fix avc denials for sysfs_vendor_sched
...
Bug: 207300315
Bug: 207062875
Bug: 207062781
Test: build pass
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I17212c840c725f66d91f337c57af8e72e5e08b8c
2021-11-29 03:42:14 +00:00
Shiyong Li
11994a8ca0
allow systemui to toggle display lhbm node
...
Fix the following selinux violation:
avc: denied { call } for scontext=u:r:platform_app:s0:c512,c768
tcontext=u:r:hal_graphics_composer_default:s0 tclass=binder
permissive=1 app=com.android.systemui
Bug: 205640231
Test: check avc logs while using udfps
Signed-off-by: Shiyong Li <shiyongli@google.com>
Change-Id: I196ade950541d56affd3dc38568b0275f159c799
2021-11-18 17:36:48 +00:00
Adam Shih
d66ba1bd25
allow system ui to call hal_wlc
...
Bug: 205904327
Test: Boot with no relevant error log
Change-Id: Ieeb3a27266055ead7fd8e0bb5aaa85c4137bccef
2021-11-16 02:13:04 +00:00
Adam Shih
4c9dd893b8
fix platform_app property access
...
Bug: 205073024
Test: boot with no relevant error log
Change-Id: Ia230b025b89981ed797c95cdf76fe7efd56d3fa7
2021-11-05 11:24:57 +08:00
Adam Shih
8cc3f28ac1
fix wlc_hwservice access
...
10-29 10:38:01.270 440 440 E SELinux : avc: denied { find } for pid=1594 uid=10210 name=com.google.input.ITouchContextService/default scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:touch_service:s0 tclass=service_manager permissive=1
10-29 10:38:01.277 440 440 E SELinux : avc: denied { find } for pid=1594 uid=10210 name=com.google.hardware.pixel.display.IDisplay/default scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:hal_pixel_display_service:s0 tclass=service_manager permissive=1
Bug: 202906787
Test: boot with no relevant error
Change-Id: I47ea0f1dfe6f3f7b024d4512e0ccd94bc0da93a1
2021-10-29 10:57:39 +08:00
