Commit graph

1967 commits

Author SHA1 Message Date
Adam Shih
e1025bc8e3 Introduce new sepoilcy owner am: 5cd759d295 am: 307e2c2fc8 am: 5e82524935 am: 2d2286d7c2
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2586605

Change-Id: Ib77def42f7b7ff2582cc04795a5b8356fd35d024
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 05:04:33 +00:00
Adam Shih
2d2286d7c2 Introduce new sepoilcy owner am: 5cd759d295 am: 307e2c2fc8 am: 5e82524935
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2586605

Change-Id: I2b7511a7aefba2354513e21ff49169637367451e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 04:22:40 +00:00
Adam Shih
5e82524935 Introduce new sepoilcy owner am: 5cd759d295 am: 307e2c2fc8
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2586605

Change-Id: I8509e07c52ca5a75b4a9c10ffc3398a7c608c441
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 03:37:37 +00:00
Adam Shih
307e2c2fc8 Introduce new sepoilcy owner am: 5cd759d295
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2586605

Change-Id: Idc925c7a1f1111840a64664aa50c39442c3a0f8f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 02:59:55 +00:00
Adam Shih
5cd759d295 Introduce new sepoilcy owner
Bug: 281631102
Test: N/A
Change-Id: I9bb7c6299f970a410481dd541523bec6df68cf23
2023-05-12 02:11:38 +00:00
Adam Shih
e6521d1eeb add missing permission for gs201 power dump am: 2a02fe5fc5 am: b39ed5f5ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23125499

Change-Id: I0cd46891bdd61f271854e4b9533eea425c3f577b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 06:23:48 +00:00
Adam Shih
1baad470b5 add missing permission for gs201 power dump am: 2a02fe5fc5 am: b6d409b1bd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23125499

Change-Id: I6afaf7ab7241db613674a0fdf2f93cc937d1f2b9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 06:18:30 +00:00
Adam Shih
b39ed5f5ab add missing permission for gs201 power dump am: 2a02fe5fc5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23125499

Change-Id: I9fa0c89636bf3b961733ba91e5079d900ee031b0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 05:38:59 +00:00
Adam Shih
b6d409b1bd add missing permission for gs201 power dump am: 2a02fe5fc5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23125499

Change-Id: I50c8f3cf3bdfcd595266c9abbc38806e6eb53dc7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 05:37:52 +00:00
Adam Shih
2a02fe5fc5 add missing permission for gs201 power dump
Bug: 281602658
Test: adb bugreport
Change-Id: Ibf765c9da65d2c9f6a3825c91cb22771f583457a
2023-05-10 10:56:55 +08:00
Zixuan Lan
5c070074e3 remove fixed selinux bug from bug map. am: 96789e18c7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23039510

Change-Id: I9dd1bdada302b06a3040240efbbb357f7cbce315
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-10 01:08:27 +00:00
Zixuan Lan
96789e18c7 remove fixed selinux bug from bug map.
TPU permission was fixed to avoid error in hal_camera_defaul.The corresponding bug for tracking should be removed from the bug map. Please see bug for more details.
Bug: 275001783
Test: logcat grep for selinux error

Change-Id: I7a1bf9fd994187f969b68b9fc3504a5411b0807f
2023-05-04 22:36:33 +00:00
Jinyoung Jeong
df53b1478e Fix LPA crash due to selinux denial am: 2d7181e3fc am: b662770e6e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22949545

Change-Id: I4e44837e17465e7cfa5ee2a8c4e8d92f8196c583
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 15:16:03 +00:00
Jinyoung Jeong
30851e681f Fix LPA crash due to selinux denial am: 2d7181e3fc am: cc89605283
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22949545

Change-Id: Ie95dcb0f635c164956ea0b33e250efb5cf822210
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 15:00:38 +00:00
Hongbo Zeng
2d245e4418 Fix denials for radio service to access files under /data/venodr/radio am: 306bf73c79 am: 3d706a6ba4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22899484

Change-Id: Ic9d883adb00706ded4872c78dc7658bf5e370574
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:58:46 +00:00
Jinyoung Jeong
b662770e6e Fix LPA crash due to selinux denial am: 2d7181e3fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22949545

Change-Id: I483b75a2278f74e6377757665170cb46c52866b1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:57:35 +00:00
Hongbo Zeng
b3af9ae200 Fix denials for radio service to access files under /data/venodr/radio am: 306bf73c79 am: 2fa90460e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22899484

Change-Id: I9fd1cb9f8ae5833eea1ef0c311e30d2dea2bb904
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:54:41 +00:00
Jinyoung Jeong
cc89605283 Fix LPA crash due to selinux denial am: 2d7181e3fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22949545

Change-Id: I161d19ec1cc786e85a6bf1ccfe5f0bed76ac98bc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:53:21 +00:00
Jinyoung Jeong
2d7181e3fc Fix LPA crash due to selinux denial
Bug: 280336861
Test: No crash found during LPA basic tests: download eSIM,
enable/disalbe eSIM.

Change-Id: Ie4fd8fccce5ec98cf0b2afff9a41f27206e52626
2023-05-02 14:10:00 +00:00
Hongbo Zeng
3d706a6ba4 Fix denials for radio service to access files under /data/venodr/radio am: 306bf73c79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22899484

Change-Id: I1131ba266eb951d636cc5fc96bb8e370f87dc414
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 13:00:38 +00:00
Hongbo Zeng
2fa90460e1 Fix denials for radio service to access files under /data/venodr/radio am: 306bf73c79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22899484

Change-Id: I90966fc0a068091900b8229762c7c03427b39890
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 12:34:24 +00:00
martinwu
9d5825c166 [automerger skipped] [TSV2] Remove tcpdump sepolicy from gs201 and move sepolicy to gs-common am: 5f9732a97a -s ours am: d5f7c7d958 -s ours
am skip reason: Merged-In Ic804a3a4739ec5a9604320cb8e0fdae91b8429c1 with SHA-1 ee611cfb51 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22938357

Change-Id: Ice7d37298740cb61caa1c485f623281e84f15be1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 09:23:00 +00:00
martinwu
b25fc7b7db [automerger skipped] [TSV2] Remove tcpdump sepolicy from gs201 and move sepolicy to gs-common am: 5f9732a97a am: 25b8c58d06 -s ours
am skip reason: Merged-In Ic804a3a4739ec5a9604320cb8e0fdae91b8429c1 with SHA-1 ee611cfb51 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22938357

Change-Id: I6de1d5de68fa4f36001d965d9497109b4843deae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 08:31:56 +00:00
Hongbo Zeng
306bf73c79 Fix denials for radio service to access files under /data/venodr/radio
Bug: 270561266
Test: get PASS result with go/ril-config-service-test and the original
      denial logs in http://b/270561266#comment8 are gone

Change-Id: I17155852bb2408b4389a86d32228292885e14c46
2023-05-02 08:05:31 +00:00
martinwu
25b8c58d06 [TSV2] Remove tcpdump sepolicy from gs201 and move sepolicy to gs-common am: 5f9732a97a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22938357

Change-Id: Ic6b7025f009b00532c5669400090c0c5136707b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 06:59:24 +00:00
martinwu
d5f7c7d958 [automerger skipped] [TSV2] Remove tcpdump sepolicy from gs201 and move sepolicy to gs-common am: 5f9732a97a -s ours
am skip reason: Merged-In Ic804a3a4739ec5a9604320cb8e0fdae91b8429c1 with SHA-1 ee611cfb51 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22938357

Change-Id: Ia2c8274ad5f9aacc3f9cf7e309476e1713319d00
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 06:57:13 +00:00
martinwu
5f9732a97a [TSV2] Remove tcpdump sepolicy from gs201 and move sepolicy to gs-common
Bug: 264490014
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: Ic804a3a4739ec5a9604320cb8e0fdae91b8429c1
Merged-In: Ic804a3a4739ec5a9604320cb8e0fdae91b8429c1
2023-05-02 03:16:02 +00:00
Jinyoung Jeong
21b719cf5a Fix SELinux error for com.google.android.euicc am: f265749f1d am: 225f248217
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22874711

Change-Id: Ia0e36a8c155cb05f00c39b30f401442456f5afea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 04:01:24 +00:00
Jinyoung Jeong
8c7a63a654 Fix SELinux error for com.google.android.euicc am: f265749f1d am: 13cb55bee1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22874711

Change-Id: I73344fc365824886ea32934869591985ea2ffe47
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 03:44:54 +00:00
Jinyoung Jeong
225f248217 Fix SELinux error for com.google.android.euicc am: f265749f1d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22874711

Change-Id: Iafdb146e4a11cb17c47509a567fe338df242b76a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 03:23:24 +00:00
Jinyoung Jeong
13cb55bee1 Fix SELinux error for com.google.android.euicc am: f265749f1d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22874711

Change-Id: I3d72968e6cf50c8db5a61269f52c2e7ed57888c1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 03:19:13 +00:00
Jinyoung Jeong
f265749f1d Fix SELinux error for com.google.android.euicc
Bug: 279548423
Test: http://fusion2/b7c803be-2dca-4195-b91f-6c4939746b5b
Change-Id: Idd231c2412e8f597dea1bfa11f9d1a0fa1e17034
2023-04-30 02:51:45 +00:00
martinwu
d78620c18d [TSV2] Remove tcpdump sepolicy from gs201 and move sepolicy to gs-common am: ee611cfb51
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22891266

Change-Id: I421c48072554bed4f2ec6e4bf57cfac4699fc23f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-28 07:16:38 +00:00
martinwu
ee611cfb51 [TSV2] Remove tcpdump sepolicy from gs201 and move sepolicy to gs-common
Bug: 264490014
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: Ic804a3a4739ec5a9604320cb8e0fdae91b8429c1
2023-04-27 13:43:26 +00:00
Bruno BELANYI
b78a6effc8 [automerger skipped] Remove 'hal_neuralnetworks_armnn' '/data' access exception am: a43d300aff am: 0676395ee0 -s ours
am skip reason: Merged-In Ie651cd788e6f057cd902d1c14880bd1ad71ec5a5 with SHA-1 a43d300aff is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22786254

Change-Id: I3d314fdaeb1f325906ed8482f141a44c8997ae29
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:23:34 +00:00
Bruno BELANYI
8d02cffc9e [automerger skipped] Remove 'hal_neuralnetworks_armnn' sysprop exceptions am: 01a2e70a17 am: 93ef539d30 -s ours
am skip reason: Merged-In Ief9f33ea3aca3f6b0756c92feb1753462e86b894 with SHA-1 01a2e70a17 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22786660

Change-Id: Icebe169540f5cad22cf030e79de328534fb462bb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:23:29 +00:00
Bruno BELANYI
6c9cc0c01f [automerger skipped] Add ArmNN config sysprops SELinux rules am: ee3fe73de0 am: bd3d06a0af -s ours
am skip reason: Merged-In I90af8201d5fae44f73d709491f272a113b44ca67 with SHA-1 ee3fe73de0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22786979

Change-Id: I40e970d1a8b882e0b4eda16255343c8f020e03e0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:23:27 +00:00
Bruno BELANYI
515cf2c110 Remove 'hal_neuralnetworks_armnn' '/data' access exception am: a43d300aff am: 1f70adac2c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22786254

Change-Id: Ie5bf5d771e114b487e3abf2f3cd4e69fc680f156
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:20:28 +00:00
Bruno BELANYI
86f78f09ff Remove 'hal_neuralnetworks_armnn' sysprop exceptions am: 01a2e70a17 am: e213052ee3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22786660

Change-Id: Ibcc4b4dec18db3a1d739aa97317d4c983912afb3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:20:24 +00:00
Bruno BELANYI
bf0f2e0947 Add ArmNN config sysprops SELinux rules am: ee3fe73de0 am: 86f6851961
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22786979

Change-Id: Iad2b1e74a444dc9625318a1359fbd9fe17db39ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:20:20 +00:00
Bruno BELANYI
1f70adac2c Remove 'hal_neuralnetworks_armnn' '/data' access exception am: a43d300aff
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22786254

Change-Id: Ifb381f79a52d93792e6f7197b96318fe497b954d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:45:05 +00:00
Bruno BELANYI
e213052ee3 Remove 'hal_neuralnetworks_armnn' sysprop exceptions am: 01a2e70a17
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22786660

Change-Id: I7d2962067bb15252010771386faa91f654cf4948
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:45:00 +00:00
Bruno BELANYI
86f6851961 Add ArmNN config sysprops SELinux rules am: ee3fe73de0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22786979

Change-Id: I257d7dccaf726da56b5f8125f9cd9bcf9b90003b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:44:55 +00:00
Bruno BELANYI
0676395ee0 Remove 'hal_neuralnetworks_armnn' '/data' access exception am: a43d300aff
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22786254

Change-Id: Ibe2bf72c2ab156f6c3e08a2dacdb29df51edfdbf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:40:48 +00:00
Bruno BELANYI
93ef539d30 Remove 'hal_neuralnetworks_armnn' sysprop exceptions am: 01a2e70a17
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22786660

Change-Id: I7d58cb0fab0fa4fdba7362b5733248a8cf3dad09
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:40:42 +00:00
Bruno BELANYI
bd3d06a0af Add ArmNN config sysprops SELinux rules am: ee3fe73de0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22786979

Change-Id: I9f5909ed237c73266372bb22dc2378dc14f62a79
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:40:38 +00:00
Bruno BELANYI
a43d300aff Remove 'hal_neuralnetworks_armnn' '/data' access exception
The mali driver has been configured not to look there anymore.

Bug: 205779871
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:bb69b32fc5b6f468561017f6bd5628626a571696)
Merged-In: Ie651cd788e6f057cd902d1c14880bd1ad71ec5a5
Change-Id: Ie651cd788e6f057cd902d1c14880bd1ad71ec5a5
2023-04-27 08:06:38 +00:00
Bruno BELANYI
01a2e70a17 Remove 'hal_neuralnetworks_armnn' sysprop exceptions
Bug: 205202540
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:4f1ca4a7ad3895f5a5adc25fc2cf3a532eac79f6)
Merged-In: Ief9f33ea3aca3f6b0756c92feb1753462e86b894
Change-Id: Ief9f33ea3aca3f6b0756c92feb1753462e86b894
2023-04-27 08:06:38 +00:00
Bruno BELANYI
ee3fe73de0 Add ArmNN config sysprops SELinux rules
Bug: 205202540
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:9d61da55a193a12b7552e67e67d968c46d4dec86)
Merged-In: I90af8201d5fae44f73d709491f272a113b44ca67
Change-Id: I90af8201d5fae44f73d709491f272a113b44ca67
2023-04-27 08:06:38 +00:00
Martin Wu
13f5aae4c9 Revert "Remove tcpdump sepolicy from gs201 and move sepolicy to ..." am: c6d08c1781 am: ce4a8fe577
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/22891378

Change-Id: I16c9bca5782bcbdb221a2c6fe374a7795ce29c2e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 07:58:41 +00:00