JimiChen
4f1d96210d
Update SELinux policies for rlsservice
...
1. Move rls_service context from vndservice_contexts to
service_contexts.
2. Allow binder calls from rlsservice to servicemanager
3. Change rls_service type from vndservice_manager_type to
service_manager_type.
Bug: 301520085
Test: GCA
Change-Id: Ief845b5691487f48d570c531de1ea99945087e42
2023-11-03 03:33:52 +00:00
Ken Yang
b3bbcd4554
WLC: Cleanup the sysfs_wlc policies
...
The sepolicy must be self-contained without including wirelss_charger to
avoid build break in AOSP
Bug: 263830018
Change-Id: Ib3e36c9bb4b3048ce97592c3f68260035a32239d
Signed-off-by: Ken Yang <yangken@google.com>
2023-01-13 14:41:12 +00:00
Roshan Pius
046601d414
gs-policy: Remove obsolete uwb vendor service rules
...
This service no longer exists in the UCI stack.
Bug: 186585880
Test: Manual UWB tests
Change-Id: I279824be6f51470364ad61833b797aa23cbea859
2022-03-21 09:18:28 -07:00
Roshan Pius
c5710ad18e
gs-sepolicy(uwb): Changes for new UCI stack
...
1. Rename uwb vendor app.
2. Rename uwb vendor HAL binary name & service name.
3. Allow vendor HAL to host the AOSP UWB HAL service.
4. Allow NFC HAL to access uwb calibration files.
Bug: 186585880
Bug: 204718220
Bug: 206045367
Test: Manual Tests
Change-Id: Ib0456617d0f5cf116d11a9412f47f36e2b8df570
2022-03-14 16:09:02 +00:00
davidycchen
7b7394be79
Remove touch_service
...
Remove touch_service here because we already define in
hardware/google/pixel-sepolicy/input and add by ag/16251913.
Bug: 199104528
Test: No any related error.
Signed-off-by: davidycchen <davidycchen@google.com>
Change-Id: I3e5f705f6d3cde18d9495cb110e16c4152fe3d4f
2022-02-11 02:36:29 +00:00
Adam Shih
e72ecd59d8
fix UWB app settings and zygote library access
...
11-16 14:46:01.647 446 446 E SELinux : avc: denied { add } for pid=2502 uid=1083 name=uwb_vendor scontext=u:r:uwb_vendor_app:s0:c59,c260,c512,c768 tcontext=u:object_r:default_android_service:s0 tclass=service_manager permissive=1
11-16 14:41:41.238 440 440 E SELinux : avc: denied { find } for pid=2555 uid=1083 name=hardware.qorvo.uwb.IUwb/default scontext=u:r:uwb_vendor_app:s0:c59,c260,c512,c768 tcontext=u:object_r:default_android_service:s0 tclass=service_manager permissive=1
Bug: 206331617
Bug: 206045471
Bug: 205904384
Test: boot with no zygote errors
Change-Id: I5fe048434d430120334d172481b9cc07cff141dd
2021-11-18 02:20:49 +00:00
Adam Shih
8cc3f28ac1
fix wlc_hwservice access
...
10-29 10:38:01.270 440 440 E SELinux : avc: denied { find } for pid=1594 uid=10210 name=com.google.input.ITouchContextService/default scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:touch_service:s0 tclass=service_manager permissive=1
10-29 10:38:01.277 440 440 E SELinux : avc: denied { find } for pid=1594 uid=10210 name=com.google.hardware.pixel.display.IDisplay/default scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:hal_pixel_display_service:s0 tclass=service_manager permissive=1
Bug: 202906787
Test: boot with no relevant error
Change-Id: I47ea0f1dfe6f3f7b024d4512e0ccd94bc0da93a1
2021-10-29 10:57:39 +08:00
Adam Shih
bfd5097be2
dispatch service related error
...
Bug: 202906787
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ifbdf1de156994572b8fedfd18180d3821ef1594c
2021-10-14 10:50:12 +08:00
