Alex Hong
4443c79bbb
Remove the sepolicy for tetheroffload service
...
Test: m checkvintf
run vts -m VtsHalTetheroffloadControlV1_0TargetTest
Bug: 207076973
Bug: 214494717
Change-Id: I5ecec46512ff4e1ae6c52147cfa0179e5fc93420
Merged-In: I5ecec46512ff4e1ae6c52147cfa0179e5fc93420
2022-02-24 04:03:32 +00:00
Jinting Lin
4859443fe4
[automerger skipped] Adds mnt file and batt info permissions for modem app am: e6af74a6c4
-s ours
...
am skip reason: Merged-In Icd02d4f8757719afed020c27a90812921d5f37ec with SHA-1 2c914cd02c
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16984429
Change-Id: I104197e4346c57a6bd8ea7acc0245c025841c42f
2022-02-24 04:03:03 +00:00
Krzysztof Kosiński
62f0ad72b9
Camera: re-add TEE access. am: 3884738538
am: 084defd392
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16980638
Change-Id: Idbc0156037e4583d366664547d79d03ada12c3b1
2022-02-24 03:06:26 +00:00
Joseph Jang
5523e01f2c
identity: Add sepolicy permission for hal_identity_citadel to find hal_remotelyprovisionedcomponent_service am: 5fb066e143
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16984428
Change-Id: I7e43e5ece9d6f552a69905ceeb271a6e0d319a5e
2022-02-24 02:52:40 +00:00
Joseph Jang
5fb066e143
identity: Add sepolicy permission for hal_identity_citadel to find hal_remotelyprovisionedcomponent_service
...
log:
SELinux : avc: denied { find } for pid=885 uid=9999
name=android.hardware.security.keymint.IRemotelyProvisionedComponent/strongbox
scontext=u:r:hal_identity_citadel:s0
tcontext=u:object_r:hal_remotelyprovisionedcomponent_service:s0
tclass=service_manager permissive=0
Bug: 218613398
Change-Id: I124ea5898609a3f68bee13b6db931878252d4081
2022-02-24 02:20:37 +00:00
Jinting Lin
0022390c95
[automerger skipped] Adds logging related properties for logger app am: 7ba8b12bb8
-s ours
...
am skip reason: Merged-In I3917ce13f51a5ccb3304eb2db860f4da8424438b with SHA-1 e65363450c
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16983456
Change-Id: Ife58cc0ac85ee0154c335950c161ae5008cfaa65
2022-02-24 02:08:25 +00:00
Krzysztof Kosiński
5eae12b451
Camera: re-add TEE access. am: 3884738538
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16980638
Change-Id: Idfdd081b47c1a747f11352a8b2beaa0bdc6ba2df
2022-02-24 01:56:26 +00:00
Adam Shih
a7bd615bd6
[automerger skipped] avoid pixellogger from crashing am: b158d7b088
am: 79481cc1b3
-s ours
...
am skip reason: skipped by user adamshih
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16983453
Change-Id: Id3fe0b0c2910f9555e6ca50476276b522e34b428
2022-02-24 01:46:20 +00:00
Jack Yu
769645d0c1
uwb: permissions for factory uwb calibration file am: 97a25bf259
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16986452
Change-Id: Ie1aba2e1a2bb3c9d79caa04f454df271a531a9b0
2022-02-24 01:34:13 +00:00
Darren Hsu
7306a159f7
Allow hal_power_stats to read UWB sysfs nodes am: 8f90cf5408
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16986443
Change-Id: If507662ac99de839314da9d03df7f3b7eb44bafb
2022-02-24 01:33:49 +00:00
Jinting Lin
b9b03f61f8
Adds mnt file and batt info permissions for modem app am: e6af74a6c4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16984429
Change-Id: Ie7d2cfab67eaf4ec2477f4dbaccc056b42b9df3a
2022-02-24 01:32:56 +00:00
Jack Yu
97a25bf259
uwb: permissions for factory uwb calibration file
...
Allow nfc hal accessing /data/vendor/uwb.
Bug: 220167093
Test: build pass
Merged-In: I33093231577b71c24d5bf6f980c7021cc546fa98
Change-Id: I33093231577b71c24d5bf6f980c7021cc546fa98
2022-02-24 01:02:52 +00:00
Darren Hsu
8f90cf5408
Allow hal_power_stats to read UWB sysfs nodes
...
Bug: 219369324
Test: Dump power stats and see no avc denials
Change-Id: Ib1ac15867f51069bef3f68e91bf65b842b7c0734
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-02-24 01:02:11 +00:00
Jinting Lin
43dd982131
Adds logging related properties for logger app am: 7ba8b12bb8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16983456
Change-Id: I4de5106dddc7252b298fd12496afae00f2464ca3
2022-02-23 17:29:05 +00:00
Krzysztof Kosiński
084defd392
Camera: re-add TEE access. am: 3884738538
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16980638
Change-Id: I6f455d8b6bb2d558ce9fbf5a1aaea66674fc43be
2022-02-23 17:24:31 +00:00
Adam Shih
79481cc1b3
avoid pixellogger from crashing am: b158d7b088
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16983453
Change-Id: I15f04a00b6e2ac537bf565423f3b190b1869e3ab
2022-02-23 17:18:06 +00:00
Jinting Lin
e6af74a6c4
Adds mnt file and batt info permissions for modem app
...
Bug: 220076340
Merged-In: Icd02d4f8757719afed020c27a90812921d5f37ec
Change-Id: Icd02d4f8757719afed020c27a90812921d5f37ec
(cherry picked from commit 2c914cd02c
)
2022-02-23 05:55:57 +00:00
Jinting Lin
7ba8b12bb8
Adds logging related properties for logger app
...
Bug: 220073302
Merged-In: I3917ce13f51a5ccb3304eb2db860f4da8424438b
Change-Id: I3917ce13f51a5ccb3304eb2db860f4da8424438b
(cherry picked from commit e65363450c
)
2022-02-23 03:16:00 +00:00
Krzysztof Kosiński
3884738538
Camera: re-add TEE access.
...
Face auth is being investigated for Android T, so this access
is still needed. It was initially omitted from ag/16719985 because
it did not launch in Android S.
Bug: 220886644
Test: build for P10
Change-Id: I61ecc685397fcab6f356e98abfc88e8cb34254f4
2022-02-23 02:51:40 +00:00
Adam Shih
b158d7b088
avoid pixellogger from crashing
...
Bug: 220935985
Test: pixellogger stays alive for 2 minutes
Change-Id: I9f70f1a936731332ada3abfa945e60f8aff58279
2022-02-23 09:58:37 +08:00
Robb Glasser
340ceb1bfb
Fix sensors_hal selinux denials. am: 727d070b13
am: b273426e98
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16945897
Change-Id: I2dd11ffcf9de7efd0f58fd809dca79c92687846f
2022-02-22 20:39:55 +00:00
Robb Glasser
b273426e98
Fix sensors_hal selinux denials. am: 727d070b13
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16945897
Change-Id: Ic2597d188b9f5b4fd8d779d22ec8bc57ab02d16a
2022-02-22 19:46:30 +00:00
Robb Glasser
727d070b13
Fix sensors_hal selinux denials.
...
Bug: 214473093
Bug: 218930975
Bug: 210067282
Test: com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: Ifd865efd0544f246d1c188f3edce9f05f27313d2
2022-02-22 19:25:50 +00:00
Krzysztof Kosiński
9257cd2a09
Camera: add setsched capability. am: 7997d6a8a0
am: 5975dd89c8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16943772
Change-Id: I18ad1039c0bd0d91d42d6acb27f6e1da412f7c6b
2022-02-22 10:26:21 +00:00
Ted Lin
5b6a5292c3
hal_health_default: Fix avc denials
...
12-02 11:15:45.224 756 756 I health@2.1-serv: type=1400 audit(0.0:2270): avc: denied { search } for name="thermal" dev="tmpfs" ino=1028 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:thermal_link_device:s0 tclass=dir permissive=1
12-02 11:15:45.224 756 756 I health@2.1-serv: type=1400 audit(0.0:2271): avc: denied { search } for name="thermal" dev="sysfs" ino=16790 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=dir permissive=1
12-02 11:15:45.224 756 756 I health@2.1-serv: type=1400 audit(0.0:2273): avc: denied { open } for path="/sys/devices/virtual/thermal/thermal_zone13/mode" dev="sysfs" ino=17285 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=1
12-02 11:15:45.224 756 756 I health@2.1-serv: type=1400 audit(0.0:2272): avc: denied { write } for name="mode" dev="sysfs" ino=17285 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=1
Bug:208721638
Test: adb bugreport
Change-Id: I4d9491862ff1bcc88f89b1478497ac569e3d1df1
Signed-off-by: Ted Lin <tedlin@google.com>
2022-02-22 09:11:43 +00:00
Krzysztof Kosiński
7fa1b979e3
Camera: add setsched capability. am: 7997d6a8a0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16943772
Change-Id: I3cf5fac31683c37c05f427d8226e013f11e3f5a2
2022-02-22 08:51:22 +00:00
Adam Shih
f3a6247154
Let GPU reload am: b322df9960
am: 37c001e736
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16972944
Change-Id: I23b27fef19cd8bbfdd81c23f72562cc48ffc6ab9
2022-02-22 08:49:00 +00:00
Krzysztof Kosiński
5975dd89c8
Camera: add setsched capability. am: 7997d6a8a0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16943772
Change-Id: I0dd3ce7386c49db308618ceb5b75c04e1c58c5fe
2022-02-22 08:48:23 +00:00
Krzysztof Kosiński
7997d6a8a0
Camera: add setsched capability.
...
The camera HAL needs to increase the priority of some threads
to reduce frame drops.
Bug: 205072921
Test: Inspected logcat on P10
Change-Id: Ife5194c780a91f32d718f8db38e41f2f47fb929f
2022-02-22 08:12:57 +00:00
Adam Shih
37c001e736
Let GPU reload am: b322df9960
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16972944
Change-Id: I378151b91d62b5c0eca3f876a82a5d73886dbe18
2022-02-22 07:43:55 +00:00
Adam Shih
b322df9960
Let GPU reload
...
02-22 12:59:47.955 15 15 I mali 28000000.mali: reloading firmware
02-22 12:59:47.955 15 15 W mali 28000000.mali: loading /vendor/firmware/mali_csffw.bin failed with error -13
02-22 12:59:47.955 15 15 W mali 28000000.mali: Direct firmware load for mali_csffw.bin failed with error -2
02-22 12:59:47.955 15 15 E mali 28000000.mali: Failed to reload firmware image 'mali_csffw.bin'
02-22 12:59:47.920 15 15 W kworker/0:1: type=1400 audit(0.0:10): avc: denied { read } for name="mali_csffw.bin" dev="dm-4" ino=5689716 scontext=u:r:kernel:s0 tcontext=u:object_r:same_process_hal_file:s0 tclass=file permissive=0
Bug: 220801802
Test: device can resume after an hour of suspend.
Change-Id: Ib252d6b1ac50ba7578a2ebf8cd8745004c385378
2022-02-22 07:05:54 +00:00
neoyu
3cbca42df5
Fix SELinux errors for ims am: 9d12b77b67
am: faac353bfb
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962938
Change-Id: Icf4c3c27289c35edafa7f1d17d1a8ad52a62af73
2022-02-22 03:10:32 +00:00
neoyu
faac353bfb
Fix SELinux errors for ims am: 9d12b77b67
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962938
Change-Id: I9cc01f3a6b6ef01dbe3e6356e124c55354510559
2022-02-22 02:27:58 +00:00
neoyu
9d12b77b67
Fix SELinux errors for ims
...
Sync different parts from P21 to P22
Bug: 220244357
Test: manual
Change-Id: Idf8e5e612b46370812be0907e75e9ae43f37ab7b
2022-02-22 01:43:29 +00:00
Jack Yu
62d5b40d35
uwb: permissions for factory uwb calibration file
...
Allow nfc hal accessing /data/vendor/uwb.
Bug: 220167093
Test: build pass
Change-Id: I33093231577b71c24d5bf6f980c7021cc546fa98
2022-02-22 01:24:47 +00:00
Jinting Lin
2c914cd02c
Adds mnt file and batt info permissions for modem app
...
Bug: 220076340
Change-Id: Icd02d4f8757719afed020c27a90812921d5f37ec
2022-02-22 01:16:41 +00:00
neoyu
1bdb2ced7c
Fix SELinux errors for vendor_init am: 7a34798ea4
am: d889ee6353
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962933
Change-Id: I71911df1c95d7f1570d49eb50490039c7352c2d0
2022-02-21 12:02:00 +00:00
neoyu
d889ee6353
Fix SELinux errors for vendor_init am: 7a34798ea4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962933
Change-Id: I22d3af89dd84fab0330f1180b39a55157add6f33
2022-02-21 10:32:55 +00:00
neoyu
662c55b911
Fix SELinux errors for rild am: 26aa7c150e
am: 05fbdcedc3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962925
Change-Id: I6b323d560fe4fc45c009dd3e32659b12d2d6ba41
2022-02-21 07:34:49 +00:00
Tai Kuo
528d78f539
Remove hal_vibrator_default avc tracking denials am: bc3924f61d
am: 373795e6a5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16939010
Change-Id: Icb76e10d0fb5a72ab54b4d069cd3cdf71d6bc530
2022-02-21 07:33:50 +00:00
wenchangliu
8087834fce
Allow hal_graphics_allocator to access vscaler_heap_device am: 84d53775e1
am: 44eba6830b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962930
Change-Id: Ia4cec67bee98b0921b5b8c6875a26d00a90c387d
2022-02-21 07:23:25 +00:00
wenchangliu
2638c815af
Allow hal_graphics_allocator to access dmabuf_system_secure_heap_device am: ad0a033f97
am: 258318a4af
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962929
Change-Id: I1639ad7fa458d8174194973f547f12a9eb1c2492
2022-02-21 07:23:24 +00:00
neoyu
05fbdcedc3
Fix SELinux errors for rild am: 26aa7c150e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962925
Change-Id: I288eca3c6e1e92558775082bbeac8c371d549379
2022-02-21 07:01:27 +00:00
Tai Kuo
373795e6a5
Remove hal_vibrator_default avc tracking denials am: bc3924f61d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16939010
Change-Id: I6a962e36cee9d8f402e1386f3736219e9a15b8a7
2022-02-21 07:01:17 +00:00
wenchangliu
44eba6830b
Allow hal_graphics_allocator to access vscaler_heap_device am: 84d53775e1
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962930
Change-Id: I6524c426deb02574346c67e66e81c8caa226d731
2022-02-21 07:01:04 +00:00
wenchangliu
258318a4af
Allow hal_graphics_allocator to access dmabuf_system_secure_heap_device am: ad0a033f97
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962929
Change-Id: Ic9b9d211039819015f0a432d6ec703d259cb5677
2022-02-21 07:01:04 +00:00
neoyu
7a34798ea4
Fix SELinux errors for vendor_init
...
avc: denied { set } for property=logd.logpersistd pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:logpersistd_logging_prop:s0 tclass=property_service permissive=0'
avc: denied { set } for property=logd.logpersistd.size pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:logpersistd_logging_prop:s0 tclass=property_service permissive=0'
avc: denied { set } for property=persist.vendor.ril.use.iccid_to_plmn pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=property_service permissive=0'
avc: denied { set } for property=persist.vendor.ril.emergencynumber.mode pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=property_service permissive=0'
avc: denied { set } for property=persist.vendor.ril.log_mask pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=property_service permissive=0'
avc: denied { set } for property=persist.vendor.ril.log.base_dir pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=property_service permissive=0'
avc: denied { set } for property=persist.vendor.ril.log.chunk_size pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=property_service permissive=0'
Bug: 220261262
Test: manual
Change-Id: Ieb6673234f913af25e275e61404098a0deccbed2
2022-02-21 14:58:29 +08:00
neoyu
dffd11e39f
[automerger skipped] Fix SELinux errors for ims am: e909ddabea
am: bf6cd933e7
-s ours
...
am skip reason: Merged-In I3e7f6781718c3967f7842b074b0ef91818508af2 with SHA-1 e909ddabea
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962927
Change-Id: If504e329add9e6a18766a60dcbbab83cc4a1b3ce
2022-02-21 06:50:47 +00:00
neoyu
0123c39413
Fix SELinux errors for rild am: 26aa7c150e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962925
Change-Id: Ib2262bfdebeb032a401037aa1bfad9bf8159b74a
2022-02-21 06:42:31 +00:00
Tai Kuo
f65f586495
Remove hal_vibrator_default avc tracking denials am: bc3924f61d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16939010
Change-Id: I09aab5de63058d127791e41a7fa2dcfe08e283a0
2022-02-21 06:42:00 +00:00