Commit graph

118 commits

Author SHA1 Message Date
Ken Chen
dce5aed49a fix sepolicy for net devices am: d0bbe71217 am: 879752df15 am: 819f8714d7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18821530

Change-Id: I6590305eba442878f3e06c69b82f991b37a9778c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 15:36:34 +00:00
Ken Chen
d0bbe71217 fix sepolicy for net devices
bug: 222232008
Test: atest NetdSELinuxTest#CheckProperMTULabels
Change-Id: I99f70eefa3259a2da556fed6ced70f32d03ff4bb
2022-06-10 18:20:19 +08:00
Ankit Goyal
c4a5886408 Add SE policies for memtrack HAL am: 5be857af43 am: b6ff456519 am: ab71f17d11
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18638327

Change-Id: Ib44be45f890b5c1913a05c5bf928b26830dbfd2c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-01 00:24:42 +00:00
Ankit Goyal
5be857af43 Add SE policies for memtrack HAL
Bug: 220360577
Test: adb shell dumpsys meminfo
Change-Id: I4dfc0c016ccf980b4f7dabd2fb70d2466b69b5cc
2022-05-31 23:25:27 +00:00
Taeju Park
561f288e51 Pixel-EM-DriverV2: sepolicy: allows Power HAL to am: eb4d432dd8 am: f292277bbd am: 57f67fa7a1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18635845

Change-Id: Idaeec47d1883e0ad3c7883ed4a5a027647f28b5a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-31 22:08:18 +00:00
Taeju Park
eb4d432dd8 Pixel-EM-DriverV2: sepolicy: allows Power HAL to
modify em_profile related sysfs nodes

Bug: 170647767
Signed-off-by: Taeju Park <taeju@google.com>
Change-Id: I160741f172a5713535852e7fb0d12126ddf0395e
2022-05-31 20:38:29 +00:00
Jenny Ho
b5d2b601bb sepolicy: allow access debugfs charger register dump am: 5e426a95d0 am: ff33c561a8 am: c26bb54bb0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18013064

Change-Id: Ic874dc00411a152cb84a5c66742743dffd467ccc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 08:45:49 +00:00
Jenny Ho
5e426a95d0 sepolicy: allow access debugfs charger register dump
Bug: 230360103
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: Ieedff4d6475706d4d932913e6d647ca401e56966
2022-05-03 06:54:05 +00:00
Labib
ea9c058272 Give RadioExt permission to write to sysfs node am: 4c8dbb65b8 am: b68668828d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17981512

Change-Id: I1a3b4c1c894a547a2a4f4e34270124476f3b2568
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 05:30:34 +00:00
Labib
177a3796e8 Give RadioExt permission to write to sysfs node am: 4c8dbb65b8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17981512

Change-Id: Iec721cea68d7eae8715537b887911c0f848e1e6d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 05:07:36 +00:00
Labib
4c8dbb65b8 Give RadioExt permission to write to sysfs node
Bug: 212601547
Test: Manual
Change-Id: I8c7341833aeacebfedba6e8e05d2696012043d32
2022-04-28 16:58:34 +08:00
Stephane Lee
7a62941f36 Fix permissions for ODPM permanently by adding all buses am: 85e5caf85e am: df77f4ec83 am: bd30d9e7f2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17966244

Change-Id: I9e510554eae6ceeb0189d390384dae21a46bf4af
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-27 02:36:48 +00:00
Stephane Lee
85e5caf85e Fix permissions for ODPM permanently by adding all buses
You don't need wildcards on genfs, just need the base path

Bug: 229895015
Test: Ensure the device boots, verify permissions with ls -AlZ
Change-Id: Ib59693f0404db4e28b9959fcdf1cc4d483c5d1b1
2022-04-27 01:06:36 +00:00
Wei Wang
8307f850e0 Grant trusty to power hal am: 90f4106b80 am: 6c85eeac05 am: ae95ea381c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17928564

Change-Id: Ia44c194133e280d40fa6964e933e9b43cb551423
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 18:00:44 +00:00
Wei Wang
90f4106b80 Grant trusty to power hal
Bug: 229350721
Test: UDFPS with stress
Signed-off-by: Wei Wang <wvw@google.com>
Change-Id: Ia88d6cff1d21940e22ae5122dbfcf52de27ad700
2022-04-23 21:53:44 -07:00
Chung-Kai (Michael) Mei
263a0fbc7d Revert "genfs_contexts: fix path for i2c peripheral device" am: ac45672cc5 am: 30daffff0f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17865266

Change-Id: Ie01963871c54ed681f56929ff3dc1e0fff439db5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 09:16:04 +00:00
Chung-Kai (Michael) Mei
26b3d89302 Revert "genfs_contexts: fix path for i2c peripheral device" am: ac45672cc5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17865266

Change-Id: I5b4670792368963bd1fe1b6015523bd9dd0f00d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 08:02:41 +00:00
Chung-Kai (Michael) Mei
ac45672cc5 Revert "genfs_contexts: fix path for i2c peripheral device"
This reverts commit 4db0feed32.

Reason for revert: related patch is merged, so it's duplicated

Fix: 229940065
Change-Id: I898dd52f4857983323fec9f72e797bd2f759f724
2022-04-21 07:28:09 +00:00
chungkai
671bbb1107 genfs_contexts: fix path for i2c peripheral device am: 4db0feed32 am: e9b8bcee10
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17866185

Change-Id: Id01cb27905686589b839a59d0d80fe6838cfc6d0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 07:06:31 +00:00
Stephane Lee
fa50c902b1 Fix boot issues with hal_thermal_default am: 9fdfcb53b5 am: 1b99d23ddd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17877853

Change-Id: Ibcdb13986b535c1d839838222c41bd438883d8c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 07:06:24 +00:00
chungkai
75b598a98b genfs_contexts: fix path for i2c peripheral device am: 4db0feed32
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17866185

Change-Id: Ie6c3f511a21fa3c50af2c8a138ca81c601eb26ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 06:49:05 +00:00
Stephane Lee
adc37c2bdf Fix boot issues with hal_thermal_default am: 9fdfcb53b5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17877853

Change-Id: Ie32473dbd4dd7f663da8a7cd687ffb548a717034
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 06:48:59 +00:00
chungkai
4db0feed32 genfs_contexts: fix path for i2c peripheral device
add original paths since we reverted enable load
module in parallel for other issues

Test: without avc denial
Bug: 229670628
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: Ie7a2a78eae5d6965beedc0de640ec56acb6a7b2a
2022-04-21 06:33:21 +00:00
Stephane Lee
9fdfcb53b5 Fix boot issues with hal_thermal_default
Bug: 229895015
Test: Ensure the device boots, verify permissions with ls -AlZ
Change-Id: I0f95bb7eb58e6ce22a0f66a70408fdf56d94b1b3
2022-04-21 06:30:34 +00:00
chungkai
3902918365 sepolicy: fix avc denials am: 32bf1ffbf7 am: 3a8df849f1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17800453

Change-Id: I78260403080263c6f8971c1d0c4a3b72b59d899b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 03:28:27 +00:00
chungkai
3ab10a4ca3 sepolicy: fix avc denials am: 32bf1ffbf7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17800453

Change-Id: Iafb00b0878360210b8c55ca21f90cb814758eeab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 03:02:50 +00:00
chungkai
32bf1ffbf7 sepolicy: fix avc denials
add potential paths for i2c peripheral devices
sine we enable parallel module loading

Bug: 226887726
Test: do bugreport without avc denials
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I4af39bb6e620a59e02417a06c1dabd45df360fc3
2022-04-20 02:22:31 +00:00
chungkai
319be9e317 sepolicy: fix avc denials am: d80900ae17 am: beefac99c7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17764688

Change-Id: I77bbb44d3cb34d695e34712e02abcfbc7cff5c99
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 07:01:04 +00:00
chungkai
efb75b5ced sepolicy: fix avc denials am: d80900ae17
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17764688

Change-Id: I13bbf5aaa37f0855cce70a0ef06ac50fc1ad9006
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 06:39:45 +00:00
chungkai
d80900ae17 sepolicy: fix avc denials
add potential paths for i2c peripheral devices
sine we enable parallel module loading

Bug: 228947596
Test: do bugreport without avc denials
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I2e9fa011c049e32011c5880218dd679e03316e24
2022-04-15 02:56:55 +00:00
chungkai
7c43e4e343 sepolicy: fix avc denials am: d37777dd33 am: e240db0a69
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17755771

Change-Id: I797704ae23193241683e11714866745cbebe0599
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:28:11 +00:00
chungkai
49e28ad8c1 sepolicy: fix avc denials am: d37777dd33
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17755771

Change-Id: I59b89c687d44c371fed1e83d2a8bce057bb88179
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:07:33 +00:00
chungkai
d37777dd33 sepolicy: fix avc denials
add potential paths for i2c peripheral devices
sine we enable parallel module loading

Bug: 226887726
Test: do bugreport without avc denials
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: If2ac4c137c1ea074907c363424e6018a5fd646e8
2022-04-15 01:01:47 +00:00
chungkai
6e56ba1c25 sepolicy: fix avc denials am: fbdb09a2f0 am: 0653304229
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17750772

Change-Id: Icdef8f232937f8fe76a2aea73314a10c9b6c9f66
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 10:06:01 +00:00
chungkai
d45cf4d6d3 sepolicy: fix avc denials am: fbdb09a2f0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17750772

Change-Id: I60f7a16bec1ac56aace2cde31a17afb009387a62
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 09:42:49 +00:00
chungkai
fbdb09a2f0 sepolicy: fix avc denials
add potential paths for i2c peripheral devices
sine we enable parallel module loading

Bug: 226887726
Test: do bugreport without avc denials
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: Ifc618e315e9d28cab6f602ce2c99ac7fe35fc189
2022-04-14 07:24:58 +00:00
TeYuan Wang
55af6cbfe5 sepolicy: label AUR as sysfs_thermal am: 951bad233c am: 5389906449
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17731168

Change-Id: I57b4e2d0e4b9eccfad70b2aa84827919c9e97b00
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 07:10:17 +00:00
TeYuan Wang
28432f8076 sepolicy: label AUR as sysfs_thermal am: 951bad233c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17731168

Change-Id: I90c7de97164a2da58f79d361173d21c40adc3b4c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 06:48:20 +00:00
TeYuan Wang
951bad233c sepolicy: label AUR as sysfs_thermal
Bug: 171499494
Test: adb shell ls -Z /sys/devices/platform/100b0000.AUR
Change-Id: I0aa1b95c11d2af5fa2175c582068daad51360485
2022-04-14 06:23:35 +00:00
Darren Hsu
65fabe6774 sepolicy: lable p9412 wakeup for system suspend am: cf2cc47e79 am: 5da7e0aa7c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17731166

Change-Id: I60d970421cc78253c01d6611afa427451cc7c70b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-13 11:03:58 +00:00
Darren Hsu
8af71b59c0 sepolicy: lable p9412 wakeup for system suspend am: cf2cc47e79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17731166

Change-Id: Ic0c96ad1ef2bc91f5fce9196c4133b39c6a33a50
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-13 10:20:02 +00:00
Darren Hsu
cf2cc47e79 sepolicy: lable p9412 wakeup for system suspend
Bug: 226887726
Bug: 228947596
Test: do bugreport without avc denials
Change-Id: Ic8eab625a20c60a4bf78403ef10465074d782821
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-04-13 13:39:02 +08:00
Albert Wang
44db109410 Add more xHCI wakeup path for suspend_control am: e914d6fcc3 am: 75ee2a71a3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17686710

Change-Id: I2119c5c796a50c1ed52cf7ee610b243a21cdbe29
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 10:10:24 +00:00
Albert Wang
e914d6fcc3 Add more xHCI wakeup path for suspend_control
To addressdd the xHCI wakeup nodes permission problem, add new nodes:
/devices/platform/11210000.usb/11210000.dwc3/xhci-hcd-exynos.4.auto/wakeup
/devices/platform/11210000.usb/11210000.dwc3/xhci-hcd-exynos.4.auto/usb2
/devices/platform/11210000.usb/11210000.dwc3/xhci-hcd-exynos.4.auto/usb3
/devices/platform/11210000.usb/11210000.dwc3/xhci-hcd-exynos.5.auto/wakeup
/devices/platform/11210000.usb/11210000.dwc3/xhci-hcd-exynos.5.auto/usb2
/devices/platform/11210000.usb/11210000.dwc3/xhci-hcd-exynos.5.auto/usb3
/devices/platform/11210000.usb/wakeup

Bug: 228791172
Test: verified with forrest test build
Signed-off-by: Albert Wang <albertccwang@google.com>
Change-Id: I457e64c252ec3573ab15923898c469472fc3b9b6
2022-04-12 15:07:04 +08:00
Darren Hsu
51171f681c sepolicy: label charger wakeup for system suspend am: 68f1d4fb71 am: 8171577cf2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17686708

Change-Id: I07b76609f3c238474b29ae23e5899715b73b3198
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 04:20:06 +00:00
Darren Hsu
88dc029b88 sepolicy: label charger wakeup for system suspend am: 68f1d4fb71
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17686708

Change-Id: Ia0c3065b170d6be3823dff7b4c4e650396df9c97
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 04:05:03 +00:00
Darren Hsu
68f1d4fb71 sepolicy: label charger wakeup for system suspend
Bug: 226887726
Test: do bugreport without avc denials
Change-Id: I0b57cfdddb81c1685f6a054944c064e02c099637
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-04-12 07:43:30 +08:00
Darren Hsu
3fcd2a33a6 Label AoC wakeup for system suspend am: c750a64e4c am: 1b64a4529a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17652444

Change-Id: Ia10de2572c08bcf067016c528a989b41e13516de
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-11 09:07:19 +00:00
Darren Hsu
7903dbb74c Label AoC wakeup for system suspend am: c750a64e4c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17652444

Change-Id: I63c19ed0fb37137c0561b62a3fc2cebe5dabc458
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-11 08:18:19 +00:00
Darren Hsu
c750a64e4c Label AoC wakeup for system suspend
Bug: 227531769
Test: do bugreport without avc denials
Change-Id: Ie3efd407ff629b583e37c0b5af430c9a9daf8691
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-04-11 15:54:59 +08:00