Commit graph

580 commits

Author SHA1 Message Date
Chung-Kai (Michael) Mei
ac45672cc5 Revert "genfs_contexts: fix path for i2c peripheral device"
This reverts commit 4db0feed32.

Reason for revert: related patch is merged, so it's duplicated

Fix: 229940065
Change-Id: I898dd52f4857983323fec9f72e797bd2f759f724
2022-04-21 07:28:09 +00:00
chungkai
671bbb1107 genfs_contexts: fix path for i2c peripheral device am: 4db0feed32 am: e9b8bcee10
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17866185

Change-Id: Id01cb27905686589b839a59d0d80fe6838cfc6d0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 07:06:31 +00:00
Stephane Lee
fa50c902b1 Fix boot issues with hal_thermal_default am: 9fdfcb53b5 am: 1b99d23ddd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17877853

Change-Id: Ibcdb13986b535c1d839838222c41bd438883d8c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 07:06:24 +00:00
Dinesh Yadav
e03d243a4f Add SEPolicy settings for android logging/tracing service for GXP am: 5f4f4de205 am: e5a286a8ef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17818623

Change-Id: Ic27ba76e3fa0bff100b35848a3fc346526e1eced
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 06:58:42 +00:00
chungkai
75b598a98b genfs_contexts: fix path for i2c peripheral device am: 4db0feed32
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17866185

Change-Id: Ie6c3f511a21fa3c50af2c8a138ca81c601eb26ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 06:49:05 +00:00
Stephane Lee
adc37c2bdf Fix boot issues with hal_thermal_default am: 9fdfcb53b5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17877853

Change-Id: Ie32473dbd4dd7f663da8a7cd687ffb548a717034
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 06:48:59 +00:00
chungkai
4db0feed32 genfs_contexts: fix path for i2c peripheral device
add original paths since we reverted enable load
module in parallel for other issues

Test: without avc denial
Bug: 229670628
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: Ie7a2a78eae5d6965beedc0de640ec56acb6a7b2a
2022-04-21 06:33:21 +00:00
Stephane Lee
9fdfcb53b5 Fix boot issues with hal_thermal_default
Bug: 229895015
Test: Ensure the device boots, verify permissions with ls -AlZ
Change-Id: I0f95bb7eb58e6ce22a0f66a70408fdf56d94b1b3
2022-04-21 06:30:34 +00:00
Dinesh Yadav
5f4f4de205 Add SEPolicy settings for android logging/tracing service for GXP
Change-Id: I3c9574dca5e52356b77172c886ac8971584d3012
2022-04-21 06:22:37 +00:00
Wayne Lin
1e586bcfd6 gps: refine gps sepolicy am: 5c9592e973 am: 49f83a1e9f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17699753

Change-Id: I41559fff04d40a26ff71c24de4a9214255b36704
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 02:41:54 +00:00
Stephane Lee
cda428263f Add hwservicemanager to pixelstats permissions am: 3a95426f78 am: 012609ce74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17831450

Change-Id: Ic3e6b289ea00e4bc1f875bccd97a4227993feb8a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 02:41:28 +00:00
Wayne Lin
52af682ee3 gps: refine gps sepolicy am: 5c9592e973
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17699753

Change-Id: Ic804efd9b7077145d1d12b1ec00999195a9fc5d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 02:22:16 +00:00
Stephane Lee
f397f35b2e Add hwservicemanager to pixelstats permissions am: 3a95426f78
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17831450

Change-Id: I7765947eb081be8869b038981d2ddfc104bdcadc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 02:21:48 +00:00
Wayne Lin
5c9592e973 gps: refine gps sepolicy
Bug: 228903885
Test: build pass and no avc denied in gpsd
Change-Id: Id0821b1335d316899e3a32b56a0e1c0feb4ba2b6
2022-04-21 01:47:37 +00:00
Stephane Lee
3a95426f78 Add hwservicemanager to pixelstats permissions
Bug: 227199213
Test: Ensure there are no more selinux errors
Change-Id: I1d961096df49f82302d7ff14fec809232e5afd28
2022-04-21 01:42:17 +00:00
Labib
40018f3bc7 Let RadioExt talk to bt hal am: 2b189b45af am: 8f63e40658
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17821687

Change-Id: Ib4e91ac07e6aa4e5fed224c6a953490ae0668273
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 04:31:50 +00:00
Labib
b4c3e55628 Let RadioExt talk to bt hal am: 2b189b45af
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17821687

Change-Id: Ia79174e3f47e9cd7b1c9c2bd12c91da7543e2baf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 03:58:47 +00:00
chungkai
3902918365 sepolicy: fix avc denials am: 32bf1ffbf7 am: 3a8df849f1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17800453

Change-Id: I78260403080263c6f8971c1d0c4a3b72b59d899b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 03:28:27 +00:00
Labib
2b189b45af Let RadioExt talk to bt hal
Bug: 227122249
Test: Manual
Change-Id: I9f41615e8e862af147d6f47e5e4c4e0dde40c233
2022-04-20 03:20:39 +00:00
chungkai
3ab10a4ca3 sepolicy: fix avc denials am: 32bf1ffbf7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17800453

Change-Id: Iafb00b0878360210b8c55ca21f90cb814758eeab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 03:02:50 +00:00
chungkai
32bf1ffbf7 sepolicy: fix avc denials
add potential paths for i2c peripheral devices
sine we enable parallel module loading

Bug: 226887726
Test: do bugreport without avc denials
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I4af39bb6e620a59e02417a06c1dabd45df360fc3
2022-04-20 02:22:31 +00:00
Jason Macnak
8ff82017cf Remove sysfs_gpu type definition am: a77fc2a6df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17007102

Change-Id: I09a5e41666931c7bb6f4bdaa67f8507aec59c7cc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 16:25:31 +00:00
Jason Macnak
a77fc2a6df Remove sysfs_gpu type definition
... as it has moved to system/sepolicy.

Bug: b/161819018
Test: presubmit
Change-Id: I107f92617bea56590b5af351341cc1c3b2844360
Merged-In: I107f92617bea56590b5af351341cc1c3b2844360
2022-04-19 15:59:04 +00:00
Ted Lin
6c6ab958bd Sepolicy: add the system_app.te for hal_wlc am: 55f4e61c8c am: e5213f1820
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17750775

Change-Id: I14946c7478a76bcb2aed53ca616e52e91be4ca80
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 06:56:26 +00:00
Ted Lin
d2abadeef2 Sepolicy: add the system_app.te for hal_wlc am: 55f4e61c8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17750775

Change-Id: I6bb1ca09ec11fa990f15f2c40ac4eaaf57f2b4a3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 06:34:39 +00:00
Ted Lin
55f4e61c8c Sepolicy: add the system_app.te for hal_wlc
04-11 20:28:15.435   523   523 I auditd  : avc:  denied  { find } for interface=vendor.google.wireless_charger::IWirelessCharger sid=u:r:system_app:s0 pid=3755 scontext=u:r:system_app:s0 tcontext=u:object_r:hal_wlc_hwservice:s0 tclass=hwservice_manager permissive=0

Bug:229036607
Test: adb bugreport
Change-Id: I40562204b3517b2861b2a52466f9cde04a5321c5
Signed-off-by: Ted Lin <tedlin@google.com>
2022-04-19 06:11:19 +00:00
chiayupei
44c3d78413 hal_sensors_default: Allow sensors HAL to access AoC sysfs and properties. am: eaeec28c23 am: 8686077cf1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17799083

Change-Id: I46720865410689fa8a562eedecf9aa082393a881
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 02:38:56 +00:00
chiayupei
eaeec28c23 hal_sensors_default: Allow sensors HAL to access AoC sysfs and properties.
Bug: 202901227
Test: Verify pass by checking device log.

Signed-off-by: chiayupei <chiayupei@google.com>
Change-Id: I67e0fcc4ad89ff3c1945f6fdd83d01f14fcdcbec
2022-04-19 01:57:08 +00:00
Jason Macnak
6ab671ae18 Remove sysfs_gpu type definition
... as it has moved to system/sepolicy.

Bug: b/161819018
Test: presubmit
Change-Id: I107f92617bea56590b5af351341cc1c3b2844360
2022-04-18 22:48:37 +00:00
Alex Hong
c51ef5da57 Update the SELinux context for dumpstate HAL service am: 09ef2e08c5 am: 572c9385f2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17699359

Change-Id: I4011892e01d20c35f43a397dc141f3baf6279eef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-18 13:33:38 +00:00
Alex Hong
09ef2e08c5 Update the SELinux context for dumpstate HAL service
Test: atest VtsHalDumpstateTargetTest pass
Bug: 223118410
Change-Id: Ie237579f974bab8bf8d35211367457be178a262b
2022-04-18 07:45:28 +00:00
Jerry Huang
1d04d76967 Allow mediacodec_google to access gpu_device am: 9bc45b2d60 am: f5bbe7b88a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17731167

Change-Id: Ibcfbd72b04db4c68a8b84c050451429a8bec521d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-18 07:42:26 +00:00
Jerry Huang
907fa780c6 Allow mediacodec_google to access gpu_device am: 9bc45b2d60
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17731167

Change-Id: I4dc3946a1ac18c1c1b88c4c9dbf9baa6612d7cfd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-18 07:20:30 +00:00
Jerry Huang
9bc45b2d60 Allow mediacodec_google to access gpu_device
Bug: 228794372
Test: android.media.decoder.cts.DecoderTest#testAV1HdrToSdr

The change is for following error:
04-08 17:02:44.020  1046  7284  7284 W HwBinder:7284_3: type=1400 audit(0.0:70491): avc: denied { getattr } for path="/dev/mali0" dev="tmpfs" ino=1052 scontext=u:r:mediacodec_google:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file permissive=0
04-08 17:02:44.028  1046  7284  7284 W HwBinder:7284_3: type=1400 audit(0.0:70492): avc: denied { getattr } for path="/dev/mali0" dev="tmpfs" ino=1052 scontext=u:r:mediacodec_google:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file permissive=0
04-08 17:02:44.040  1046  7284  7284 W HwBinder:7284_3: type=1400 audit(0.0:70493): avc: denied { getattr } for path="/dev/mali0" dev="tmpfs" ino=1052 scontext=u:r:mediacodec_google:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file permissive=0
04-08 17:02:44.048  1046  7284  7284 W HwBinder:7284_3: type=1400 audit(0.0:70494): avc: denied { getattr } for path="/dev/mali0" dev="tmpfs" ino=1052 scontext=u:r:mediacodec_google:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file permissive=0

Change-Id: Ie22903807fcc12d931cbdd36678ae1d4a3776a3d
2022-04-18 13:34:04 +08:00
Oleg Matcovschi
81ed057c7d selinux: remove dpm_[ab] from custom_ab_block_device's am: a79b98eb25 am: cddeaf3f73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17764346

Change-Id: Iac746a89d0f4205b16ed7bc8e4855cdff5ca7ebe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 20:11:24 +00:00
Oleg Matcovschi
a79b98eb25 selinux: remove dpm_[ab] from custom_ab_block_device's
Signed-off-by: Oleg Matcovschi <omatcovschi@google.com>
Change-Id: I774065f331b1f2970b0fee5a41faa097fa88caf8
2022-04-15 19:08:17 +00:00
chungkai
319be9e317 sepolicy: fix avc denials am: d80900ae17 am: beefac99c7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17764688

Change-Id: I77bbb44d3cb34d695e34712e02abcfbc7cff5c99
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 07:01:04 +00:00
chungkai
efb75b5ced sepolicy: fix avc denials am: d80900ae17
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17764688

Change-Id: I13bbf5aaa37f0855cce70a0ef06ac50fc1ad9006
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 06:39:45 +00:00
chungkai
d80900ae17 sepolicy: fix avc denials
add potential paths for i2c peripheral devices
sine we enable parallel module loading

Bug: 228947596
Test: do bugreport without avc denials
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I2e9fa011c049e32011c5880218dd679e03316e24
2022-04-15 02:56:55 +00:00
chungkai
7c43e4e343 sepolicy: fix avc denials am: d37777dd33 am: e240db0a69
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17755771

Change-Id: I797704ae23193241683e11714866745cbebe0599
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:28:11 +00:00
Harpreet Eli Sangha
545ae1e2d2 Add CccDkTimeSyncService for Digital Key Support am: 1a0b0ce0c4 am: 559e696193
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17755764

Change-Id: I7150f2c558f08444d32a2fb93469897d449572cc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:28:00 +00:00
chungkai
49e28ad8c1 sepolicy: fix avc denials am: d37777dd33
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17755771

Change-Id: I59b89c687d44c371fed1e83d2a8bce057bb88179
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:07:33 +00:00
chungkai
d37777dd33 sepolicy: fix avc denials
add potential paths for i2c peripheral devices
sine we enable parallel module loading

Bug: 226887726
Test: do bugreport without avc denials
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: If2ac4c137c1ea074907c363424e6018a5fd646e8
2022-04-15 01:01:47 +00:00
Harpreet Eli Sangha
a7eb4ce4f2 Add CccDkTimeSyncService for Digital Key Support am: 1a0b0ce0c4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17755764

Change-Id: If10fb742322ba2bb732bd222990b00e712d00c54
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:00:36 +00:00
Harpreet Eli Sangha
1a0b0ce0c4 Add CccDkTimeSyncService for Digital Key Support
Test: Build and Run
Bug: 226659256
Signed-off-by: Harpreet Eli Sangha <eliptus@google.com>
Change-Id: I9dd53a864d53e525282bc49c13b09157fc8d2ece
2022-04-15 00:28:13 +00:00
Anthony Stange
018d0f66a3 Update SELinux to allow CHRE to talk to the Wifi HAL am: 403643929d am: 4e2f01d0af
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17715921

Change-Id: Ifdbf239cbd97cede68b4b24c68b0f7adad9ccba2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 16:34:26 +00:00
Anthony Stange
abb060273b Update SELinux to allow CHRE to talk to the Wifi HAL am: 403643929d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17715921

Change-Id: I2fc02c0b95b50587e57dcd4070977c9f0f8cf34f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 16:14:08 +00:00
Anthony Stange
403643929d Update SELinux to allow CHRE to talk to the Wifi HAL
Bug: 206614765
Test: Run locally
Change-Id: I2cab195d533e3e2c390094bd09b15b5e761eadf0
2022-04-14 15:23:22 +00:00
chungkai
6e56ba1c25 sepolicy: fix avc denials am: fbdb09a2f0 am: 0653304229
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17750772

Change-Id: Icdef8f232937f8fe76a2aea73314a10c9b6c9f66
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 10:06:01 +00:00
chungkai
d45cf4d6d3 sepolicy: fix avc denials am: fbdb09a2f0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17750772

Change-Id: I60f7a16bec1ac56aace2cde31a17afb009387a62
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 09:42:49 +00:00