Commit graph

1906 commits

Author SHA1 Message Date
Sam Ou
e85fc072c7 sepolicy: fix odpm avc denials am: 65bdbc4862 am: eee2b6fe84 am: c12c06c778
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19035052

Change-Id: Ie39212fd1352be7e25f1d0f428787c03698e1578
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 07:28:37 +00:00
Sam Ou
da2ba2a04c sepolicy: fix odpm avc denials am: 65bdbc4862 am: 30d46d274b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19035052

Change-Id: Ibd2aea9997607f1b444ca652a98ac84a877548b4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 07:11:22 +00:00
Sam Ou
c12c06c778 sepolicy: fix odpm avc denials am: 65bdbc4862 am: eee2b6fe84
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19035052

Change-Id: Ic9b3c402e49d92a64bbe432fe2c1dc8d9e26b6fe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 07:11:02 +00:00
Sam Ou
30d46d274b sepolicy: fix odpm avc denials am: 65bdbc4862
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19035052

Change-Id: Ieb89884ee444ba9eb06e23f8ab4d20a96fa8c323
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 06:48:52 +00:00
Sam Ou
eee2b6fe84 sepolicy: fix odpm avc denials am: 65bdbc4862
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19035052

Change-Id: I4b40035d0cfe661da8f78d81fdc500f27f2ca619
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 06:48:49 +00:00
Sam Ou
65bdbc4862 sepolicy: fix odpm avc denials
add wakeup permissions for odpm driver
since we update acc_data based on alarmtimer

Bug: 236798116
Change-Id: Ib898eeebf0e26a723f260a2a8ddb5e5f64d255ed
Signed-off-by: Sam Ou <samou@google.com>
2022-06-27 06:29:03 +00:00
sukiliu
b018d1469e [automerger skipped] [Do not merge] Remove regmap from list am: 1f681630c4 am: 9eadb411f8 am: c9d05f0e26 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18845251

Change-Id: I3e360001cae829f62dcb11fdd5a4e81e65215b03
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 04:35:27 +00:00
sukiliu
2c9df67e81 [automerger skipped] [Do not merge] Remove regmap from list am: 1f681630c4 am: 1a1716f53e am: 4e9fbe7074 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18845251

Change-Id: I70a89b0bb732d8f960e2f57b1f2f930a8bd67855
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 04:35:20 +00:00
sukiliu
c9d05f0e26 [Do not merge] Remove regmap from list am: 1f681630c4 am: 9eadb411f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18845251

Change-Id: I933bdd49496eb4a5ca9aaf03c78ce40153bb8de4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 04:18:01 +00:00
sukiliu
4e9fbe7074 [Do not merge] Remove regmap from list am: 1f681630c4 am: 1a1716f53e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18845251

Change-Id: I9c5f9b9f083074d932233c365d31b4b8894dbc0d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 04:17:44 +00:00
sukiliu
9eadb411f8 [Do not merge] Remove regmap from list am: 1f681630c4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18845251

Change-Id: I16cbf31a5f95822ad89b4622e18a015f63875f7e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 03:55:38 +00:00
sukiliu
1a1716f53e [Do not merge] Remove regmap from list am: 1f681630c4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18845251

Change-Id: I2abb680107e22c5bae8576906d011ca44599748a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 03:55:35 +00:00
sukiliu
1f681630c4 [Do not merge] Remove regmap from list
Bug: 227286343
Test: PtsSELinuxTestCases
Change-Id: If32c472dcd6c0e0b83008a660ca6bbe6d79f44e3
2022-06-27 03:33:16 +00:00
jimmyshiu
ffec0c64b4 Remove dontaudit since read early_wakeup completed
The display file node, early_wakeup, just for trigger the worker for
display and it doesn't have meaningful read function. But PowerHAL read
all nodes and try to dump their valuesi while triggering bugreport. As
the read operation has been completed, so we can remove the clause.

07-02 00:53:56.888   522   522 W android.hardwar: type=1400 audit(0.0:8): avc: denied { dac_read_search } for capability=2 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0
07-02 00:53:56.888   522   522 W android.hardwar: type=1400 audit(0.0:9): avc: denied { dac_override } for capability=1 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0

Bug: 192617242
Bug: 208909174
Bug: 221384860
Test: adb shell dumpsys android.hardware.power.IPower/default
Change-Id: Ice57c5cda51db150ec313337bb2385503f43529f
2022-06-27 02:11:57 +00:00
Peter Csaszar
d893b6e7f8 Remove ssr_detector_app dontaudits
Bug: 207571417
Test: pts-tradefed run pts -m PtsSELinuxTest
Signed-off-by: Peter Csaszar <pcsaszar@google.com>
Change-Id: I2e92edf4d22a142a3817b5f399edd65ebbe4b32f
2022-06-24 04:38:18 +00:00
Carter Hsu
0cdeaa262d audio: allow Audio HAL to write the audio vendor property am: a48fe668fe am: 5e15c15486
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18740329

Change-Id: I328e5b79750f7d282bcb7655af0d0705c90a9dfd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-23 07:08:11 +00:00
Carter Hsu
5e15c15486 audio: allow Audio HAL to write the audio vendor property am: a48fe668fe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18740329

Change-Id: I0211329e21d25f788c26138a3e992d2784ea668c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-23 06:50:41 +00:00
Carter Hsu
a48fe668fe audio: allow Audio HAL to write the audio vendor property
Bug: 206065000
Test: use test build to check the property
Signed-off-by: Carter Hsu <carterhsu@google.com>
Change-Id: I0007459fcfd3a4718af9af00de9f54d125627dd2
2022-06-23 06:29:22 +00:00
Jinting Lin
35a40f176e Remove obsolete sepolicy of silentlogging am: d3d4af1aac am: 6769f9e352 am: c61dbcf620 am: 92db15f711
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735

Change-Id: Ic6621fc41a3a6ebc569e5fa5b94e9a74de772244
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 07:24:53 +00:00
Jinting Lin
2ff985aa03 Remove obsolete sepolicy of silentlogging am: d3d4af1aac am: 6769f9e352 am: f099a07968 am: f8cbf74e11
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735

Change-Id: I48ba15da07e27c12fcd3dc9f1c06911c491b9f2d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 07:24:32 +00:00
Jinting Lin
629e2b55dd Remove obsolete sepolicy of silentlogging am: d3d4af1aac am: b924e94b8e am: 5d40c0ab34 am: d9cea4060a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735

Change-Id: Ifd541beab0b1d646144f13855b4c3c0b2b79c660
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 07:24:08 +00:00
Jinting Lin
92db15f711 Remove obsolete sepolicy of silentlogging am: d3d4af1aac am: 6769f9e352 am: c61dbcf620
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735

Change-Id: I50aeb5cc7f43287251807dd61bf09984050bc496
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 07:22:35 +00:00
Jinting Lin
f8cbf74e11 Remove obsolete sepolicy of silentlogging am: d3d4af1aac am: 6769f9e352 am: f099a07968
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735

Change-Id: Id30139dd0821546b37973089864d0d71098429f2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 07:04:01 +00:00
Jinting Lin
d9cea4060a Remove obsolete sepolicy of silentlogging am: d3d4af1aac am: b924e94b8e am: 5d40c0ab34
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735

Change-Id: I9dcfa3940b386f8442b53421c8ed4a557c773a25
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 07:03:47 +00:00
Jinting Lin
f099a07968 Remove obsolete sepolicy of silentlogging am: d3d4af1aac am: 6769f9e352
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735

Change-Id: I153545fae767387a65fd5d7a0cce7a0c15eeb58b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 06:56:54 +00:00
Jinting Lin
c61dbcf620 Remove obsolete sepolicy of silentlogging am: d3d4af1aac am: 6769f9e352
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735

Change-Id: I3bf4717214fc82e3415bfb4f55a846c3b190834f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 06:56:52 +00:00
Jinting Lin
5d40c0ab34 Remove obsolete sepolicy of silentlogging am: d3d4af1aac am: b924e94b8e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735

Change-Id: Ib995967d386d737a905142dbb69ce2f88fe29c83
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 06:47:04 +00:00
Jinting Lin
515e981d41 Remove obsolete sepolicy of silentlogging am: d3d4af1aac am: dad0dce95f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735

Change-Id: Ib5d064fe80ca94ef0b1ba7b2f3712ad453066d66
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 06:46:34 +00:00
Jinting Lin
6769f9e352 Remove obsolete sepolicy of silentlogging am: d3d4af1aac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735

Change-Id: I7fbe60eee731c910d75113b2b7b1de9f10b227ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 06:28:50 +00:00
Jinting Lin
dad0dce95f Remove obsolete sepolicy of silentlogging am: d3d4af1aac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735

Change-Id: I7f681c030067d327fa92352e76cf8ab84127b316
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 06:27:47 +00:00
Jinting Lin
b924e94b8e Remove obsolete sepolicy of silentlogging am: d3d4af1aac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18871735

Change-Id: I76365c02940cad7c9495ffa3b98e974ed3e51111
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-20 06:27:24 +00:00
Jinting Lin
d3d4af1aac Remove obsolete sepolicy of silentlogging
Bug: 221384996

Test: adb bugreport
Change-Id: I35a9dae665f11196ec900346c41a3c786bfdf5fa
2022-06-20 05:48:22 +00:00
Siarhei Vishniakou
555d8a9aca Revert "Update avc error on ROM 8732242"
This reverts commit 6e578b6825.

Bug: 236200710
Test: verified locally
Reason for revert: sepolicy was fixed, no more need for the exception

Change-Id: Ic343b513c5426e5caca77bcd8c56f7336834b4ec
2022-06-20 00:21:50 +00:00
Siarhei Vishniakou
b16785049d [automerger skipped] Allow InputProcessor HAL to read display resolution am: 8b103bff07 am: 7e6f33e969 -s ours am: 6b7a848391 -s ours
am skip reason: Merged-In I23285c21a82748c63fbe20988af42884b9261b66 with SHA-1 8b103bff07 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18962799

Change-Id: I9b3a01d2da0e427197b9af99713965bd4e9b292a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 22:01:37 +00:00
Siarhei Vishniakou
4fa63d9bfb [automerger skipped] Allow InputProcessor HAL to read display resolution am: 8b103bff07 am: 1fa5ab3ecc am: 3275970329 -s ours
am skip reason: Merged-In I23285c21a82748c63fbe20988af42884b9261b66 with SHA-1 ced9e0ebbf is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18962799

Change-Id: Ic3c4aecb3f061cf70d3093178153137b0eb0a2ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 21:59:22 +00:00
Siarhei Vishniakou
6b7a848391 [automerger skipped] Allow InputProcessor HAL to read display resolution am: 8b103bff07 am: 7e6f33e969 -s ours
am skip reason: Merged-In I23285c21a82748c63fbe20988af42884b9261b66 with SHA-1 8b103bff07 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18962799

Change-Id: I4318f12389d9bbe099d9204c03cc2463ac9acb86
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 21:23:32 +00:00
Siarhei Vishniakou
3275970329 Allow InputProcessor HAL to read display resolution am: 8b103bff07 am: 1fa5ab3ecc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18962799

Change-Id: I330c93e6ff540efd4762ae94c4a8f7c5a6bc2f22
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 21:00:08 +00:00
Siarhei Vishniakou
1fa5ab3ecc Allow InputProcessor HAL to read display resolution am: 8b103bff07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18962799

Change-Id: I56cd9e5dcd25278448c7cd864cf3b023c343cc20
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 20:58:50 +00:00
Siarhei Vishniakou
7e6f33e969 Allow InputProcessor HAL to read display resolution am: 8b103bff07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18962799

Change-Id: I2984c0da74ad2985be47bf4ba0fbc27397e9189b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 20:58:44 +00:00
Lawrence Huang
8dfb8693ff Add network permissions for google camera am: 2c5af2b633 am: a2dfbccafd am: a3f48befef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18803934

Change-Id: I65cd709e9b57ca96600e2b76d354fc8e3f845843
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 20:34:41 +00:00
Jack Wu
3acd9670ae sepolicy: allows pixelstat to access pca file nodes am: 2ee67a6bf3 am: b0f67d6ab5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18868952

Change-Id: I8a18598a13eefd92de22e87166c1aba4f63cff39
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 20:34:16 +00:00
Lawrence Huang
3c87b55431 Add network permissions for google camera am: 2c5af2b633 am: 8810a2f193 am: d28cda0c75
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18803934

Change-Id: I24222b5678c2e6d935caa57b6d1306e79aea0688
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 20:32:16 +00:00
Siarhei Vishniakou
8b103bff07 Allow InputProcessor HAL to read display resolution
Currently, there's no API to read the resolution from the system domain,
so the HAL has to read this from the sysprop provided by the display
code.

Allow the HAL to do so in this CL.

Bug: 236200710
Test: adb shell dmesg | grep input_processor
Change-Id: I23285c21a82748c63fbe20988af42884b9261b66
Merged-In: I23285c21a82748c63fbe20988af42884b9261b66
2022-06-17 20:31:42 +00:00
Lawrence Huang
a3f48befef Add network permissions for google camera am: 2c5af2b633 am: a2dfbccafd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18803934

Change-Id: I8f5f3bb2313a21902956e42319229ed1d30c3f90
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 20:23:13 +00:00
Jack Wu
b0f67d6ab5 sepolicy: allows pixelstat to access pca file nodes am: 2ee67a6bf3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18868952

Change-Id: I7c9f976140f3b5aa3ba325a44c876703128b2e33
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 20:21:28 +00:00
Lawrence Huang
d28cda0c75 Add network permissions for google camera am: 2c5af2b633 am: 8810a2f193
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18803934

Change-Id: Ia2cfe7206c29707ec6bbbaea4a9e10ee5b9b2620
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 20:03:59 +00:00
Lawrence Huang
a2dfbccafd Add network permissions for google camera am: 2c5af2b633
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18803934

Change-Id: I36d7f88c4eab1981bea90ced28df3c7eb7766b27
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 19:38:54 +00:00
Lawrence Huang
8810a2f193 Add network permissions for google camera am: 2c5af2b633
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18803934

Change-Id: I779fe88a1361b51118d95e2af6da595dff8cf2c7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 19:38:42 +00:00
Lawrence Huang
2c5af2b633 Add network permissions for google camera
Investigation here:
https://docs.google.com/document/d/1dARYZBxeJFPTEIMr-0U80Ka68BoPY6-h9VcBDZ8Uon8/edit#

Bug: 230434151
Change-Id: I9b37906ba4c7ba2cdbb23fc7a07f1e9e2aa8d1ab
Test: no more avc errors
2022-06-17 18:59:12 +00:00
Jack Wu
2ee67a6bf3 sepolicy: allows pixelstat to access pca file nodes
Bug: 235050913
Test: no Permission denied while accessing the file node
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I7de0a374e1c98f4e9bbf36e39cb0131b0e9ffebc
2022-06-17 02:52:35 +00:00