Commit graph

2133 commits

Author SHA1 Message Date
Leo Liou
fc3bc416f2 gs201: ufs_firmware_update: add scsi directory permission am: e39998954f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24752203

Change-Id: Iad507da50c43cc68cf37a7733c3b4d432008d9a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-19 04:27:42 +00:00
Leo Liou
e39998954f gs201: ufs_firmware_update: add scsi directory permission
Bug: 273305600
Test: run ufs ffu flow
Change-Id: I36715c1b3500da64863db4cbec08c037df74d3e6
Signed-off-by: Leo Liou <leoliou@google.com>
2023-09-15 15:12:31 +08:00
Wilson Sung
60dd68913e [automerger skipped] Move uwb to system_ext am: 02343c4ca2 -s ours am: 5816c3ef40 -s ours am: e94124ff4f -s ours am: 9fe26fea11 -s ours
am skip reason: Merged-In I00a1c45f05cc52a9ce93234921d0b759a3143f16 with SHA-1 93f3237f8a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2740413

Change-Id: I1099ba12b190cedd65600c11c9e8e8e688946e23
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-06 01:38:40 +00:00
Wilson Sung
9fe26fea11 [automerger skipped] Move uwb to system_ext am: 02343c4ca2 -s ours am: 5816c3ef40 -s ours am: e94124ff4f -s ours
am skip reason: Merged-In I00a1c45f05cc52a9ce93234921d0b759a3143f16 with SHA-1 93f3237f8a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2740413

Change-Id: I139c87346517a3dc83eead612cb5e323d6b69a58
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-06 01:03:30 +00:00
Wilson Sung
e94124ff4f [automerger skipped] Move uwb to system_ext am: 02343c4ca2 -s ours am: 5816c3ef40 -s ours
am skip reason: Merged-In I00a1c45f05cc52a9ce93234921d0b759a3143f16 with SHA-1 93f3237f8a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2740413

Change-Id: I8b2ae64f8ab308f2106e4f1e895f71577722df74
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-06 00:18:14 +00:00
Wilson Sung
5816c3ef40 [automerger skipped] Move uwb to system_ext am: 02343c4ca2 -s ours
am skip reason: Merged-In I00a1c45f05cc52a9ce93234921d0b759a3143f16 with SHA-1 93f3237f8a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2740413

Change-Id: Ibadd9409861b8f9be13ca0a29541732295ad655a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-05 23:26:40 +00:00
Wilson Sung
17ebe78899 Move uwb to system_ext am: 93f3237f8a am: 01996371c8 am: 1b3cee89b1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24611215

Change-Id: Icbfe98948cdd507c715cef727367197208bc8cc7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-05 23:19:21 +00:00
Wilson Sung
1b3cee89b1 Move uwb to system_ext am: 93f3237f8a am: 01996371c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24611215

Change-Id: I82f7ad32188476614af6e6a8a4a63be572c853a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-05 22:45:04 +00:00
Wilson Sung
01996371c8 Move uwb to system_ext am: 93f3237f8a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24611215

Change-Id: If2818394361d060d6bcc40bc7a4513a45f992d69
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-05 22:00:18 +00:00
Wilson Sung
212bd9a779 Move uwb to system_ext am: 5e75eaa1a5 am: a7fd020e52
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24660422

Change-Id: Ie0e020624f04ee835d414ff467ff937a6e7783bb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-05 21:48:16 +00:00
Wilson Sung
a7fd020e52 Move uwb to system_ext am: 5e75eaa1a5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24660422

Change-Id: Icf239b4a7ffa79cfe8b7db705e0cd0df279e0198
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-05 21:13:51 +00:00
Wilson Sung
02343c4ca2 Move uwb to system_ext
Bug: 290766628
Test: boot-to-home
Merged-In: I00a1c45f05cc52a9ce93234921d0b759a3143f16
Change-Id: I00a1c45f05cc52a9ce93234921d0b759a3143f16
2023-09-05 20:55:59 +00:00
Wilson Sung
5e75eaa1a5 Move uwb to system_ext
Bug: 290766628
Test: Boot-to-home, no uwb related avc error
Change-Id: I00a1c45f05cc52a9ce93234921d0b759a3143f16
2023-09-05 20:43:35 +00:00
Wilson Sung
93f3237f8a Move uwb to system_ext
Bug: 290766628
Change-Id: I00a1c45f05cc52a9ce93234921d0b759a3143f16
2023-09-05 20:19:02 +08:00
Wilson Sung
ea97df2725 Update SELinux error am: f4eada749f am: 9461aea1a2 am: 801570790f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24622013

Change-Id: I391939c276294a3508cc2b2ed4e02f4a17df74c6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-04 13:06:22 +00:00
Wilson Sung
801570790f Update SELinux error am: f4eada749f am: 9461aea1a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24622013

Change-Id: I7ed7f9368741a797f4cf11488437e821863a057c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-04 12:27:14 +00:00
Wilson Sung
9461aea1a2 Update SELinux error am: f4eada749f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24622013

Change-Id: I821697bec0b8b52adcb6215eb68ff5d2db2541c1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-04 11:37:44 +00:00
Wilson Sung
f4eada749f Update SELinux error
Bug: 290766628
Merged-In: If623bee7f1050f814a2a3531bfa5de414fa32104
Change-Id: I13d2fb464c80b0be2d6524a58b441fcd8eaaa830
2023-09-04 07:45:14 +00:00
Xin Li
c11c70d45f [automerger skipped] Merge Android U (ab/10368041) am: 70d0cf7ca5 -s ours am: 6e7ca6c43a -s ours am: 42bdbb4eee -s ours
am skip reason: Merged-In I899bc4150d6d32b0ede035c96487da50849b6256 with SHA-1 3ab8be18a5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24181570

Change-Id: I6e0239c3d00792042c1a75214ecbfa32f95d8ddd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-29 01:11:05 +00:00
Xin Li
42bdbb4eee [automerger skipped] Merge Android U (ab/10368041) am: 70d0cf7ca5 -s ours am: 6e7ca6c43a -s ours
am skip reason: Merged-In I899bc4150d6d32b0ede035c96487da50849b6256 with SHA-1 3ab8be18a5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24181570

Change-Id: I3ad2be39f493dabf7dc18615feeedbb87b8575c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-29 00:35:21 +00:00
Xin Li
6e7ca6c43a [automerger skipped] Merge Android U (ab/10368041) am: 70d0cf7ca5 -s ours
am skip reason: Merged-In I899bc4150d6d32b0ede035c96487da50849b6256 with SHA-1 3ab8be18a5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24181570

Change-Id: I8c8b0810b4f857d2f21fec85cf184ab95de80427
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-28 23:59:22 +00:00
Xin Li
70d0cf7ca5 Merge Android U (ab/10368041)
Bug: 291102124
Merged-In: I899bc4150d6d32b0ede035c96487da50849b6256
Change-Id: I2d7cb958d68b1b20b31921f04c77a5ff91aca8eb
2023-08-15 00:04:03 -07:00
Inseob Kim
25680a4b79 [automerger skipped] Move coredomain policies to system_ext/product am: 656f7b5aa1 am: c83b44626a -s ours am: a3707836b2 -s ours am: 5ddd880bb1 -s ours
am skip reason: Merged-In If768b5cb9f3b4024893117d8e3bf49adb7c5b070 with SHA-1 da30985fa5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2671075

Change-Id: I78a2f50e6c14ceae77bfa29e179f8ab0e653da6b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-11 06:01:49 +00:00
Inseob Kim
5ddd880bb1 [automerger skipped] Move coredomain policies to system_ext/product am: 656f7b5aa1 am: c83b44626a -s ours am: a3707836b2 -s ours
am skip reason: Merged-In If768b5cb9f3b4024893117d8e3bf49adb7c5b070 with SHA-1 da30985fa5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2671075

Change-Id: I5386db73205854348d31612667b69c4b43f66270
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-11 05:20:02 +00:00
Inseob Kim
a3707836b2 [automerger skipped] Move coredomain policies to system_ext/product am: 656f7b5aa1 am: c83b44626a -s ours
am skip reason: Merged-In If768b5cb9f3b4024893117d8e3bf49adb7c5b070 with SHA-1 da30985fa5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2671075

Change-Id: Iaf6051e44cd3378c415db967aeed879a0a51a734
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-11 04:35:44 +00:00
Inseob Kim
c83b44626a Move coredomain policies to system_ext/product am: 656f7b5aa1
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2671075

Change-Id: I707df3267d51354e846376617b59943af6c04e30
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-11 03:49:14 +00:00
Inseob Kim
0a40b3bb98 Move coredomain policies to system_ext/product am: da30985fa5 am: 0827b82595
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24354374

Change-Id: I21a6ae897a80a8954639e15ebb16218a0e324350
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-09 07:35:43 +00:00
Inseob Kim
0827b82595 Move coredomain policies to system_ext/product am: da30985fa5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24354374

Change-Id: I527239025a4b81d9d989dcba6ba2c63d6840a683
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-09 06:50:56 +00:00
Inseob Kim
656f7b5aa1 Move coredomain policies to system_ext/product
Coredomain apps shouldn't be labeled with vendor sepolicy, due to Treble
violation.

Bug: 280547417
Test: TH
Change-Id: If768b5cb9f3b4024893117d8e3bf49adb7c5b070
Merged-In: If768b5cb9f3b4024893117d8e3bf49adb7c5b070
(cherry picked from commit da30985fa5)
2023-08-09 15:06:04 +09:00
Inseob Kim
da30985fa5 Move coredomain policies to system_ext/product
Coredomain apps shouldn't be labeled with vendor sepolicy, due to Treble
violation.

Bug: 280547417
Test: TH
Change-Id: If768b5cb9f3b4024893117d8e3bf49adb7c5b070
Merged-In: If768b5cb9f3b4024893117d8e3bf49adb7c5b070
2023-08-08 14:37:48 +00:00
Ken Yang
89e7477c43 SELinux: fix the wakeup avc denials am: 3054cb6eec am: f0c6f18d7d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24192194

Change-Id: I7888b49da09ad91b2d6b31d2c335841edd5a6514
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-26 03:13:07 +00:00
Ken Yang
f0c6f18d7d SELinux: fix the wakeup avc denials am: 3054cb6eec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24192194

Change-Id: Ia49778517e9c64e4b7539fa81ec4170cef01961c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-26 02:30:35 +00:00
Ken Yang
3054cb6eec SELinux: fix the wakeup avc denials
Fix the wakeup avc denials in a more common place

Bug: 292076108
Change-Id: I52627f19cb0fec3dd0851d21d0608048ebc7d45d
Signed-off-by: Ken Yang <yangken@google.com>
2023-07-25 13:12:32 +00:00
Utku Utkan
2fb35adebd Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices" am: 34bda7b2b8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24124266

Change-Id: I0675ba6da1fff3561ec1ab23711526657ccc3c93
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 18:49:47 +00:00
Utku Utkan
34bda7b2b8 Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices"
Revert submission 24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL

Reason for revert: Relanding the original topic after copying the certificates under `device/google` for `without-vendor` branches

Reverted changes: /q/submissionid:24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL

Bug: 287069860
Test: m && flashall
Change-Id: I5326b61822d367beaff0ac97a34708d306c60007
2023-07-18 20:37:28 -07:00
Inseob Kim
3539653f98 Revert "Introduce CameraServices seinfo tag for PixelCameraServices" am: c420cef154
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24122569

Change-Id: I192d7d1ba78d7381d3dd122cacbdd7a37d16d67d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 02:50:45 +00:00
Inseob Kim
c420cef154 Revert "Introduce CameraServices seinfo tag for PixelCameraServices"
Revert submission 24056607-pixel-camera-services-extensions-sepolicy

Reason for revert: build breakage on git_main-without-vendor

Reverted changes: /q/submissionid:24056607-pixel-camera-services-extensions-sepolicy

Change-Id: I9869874507230f59ac3b8cdc2538e4f223216b45
2023-07-19 01:15:39 +00:00
Utku Utkan
47f7d7ef72 Introduce CameraServices seinfo tag for PixelCameraServices am: d45ff39442
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24030396

Change-Id: I1ecfa136567806f140067eaed98766c6da66d2ee
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-18 21:49:07 +00:00
Utku Utkan
d45ff39442 Introduce CameraServices seinfo tag for PixelCameraServices
Bug: 287069860
Test: m && flashall && check against 'avc: denied' errors
Change-Id: I41b435ae0a34fe9c797b9316887c4b56091a26a5
2023-07-13 09:11:06 -07:00
David Anderson
d06d2415a5 Allow fastbootd to flash dtbo. am: e96a14a9d2 am: 439827c49d am: a03ec9af21 am: a7e9f0a873 am: 96009e517c
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: I1ccfdb2e8605b5cec757b8ad8d7be6fb414cb9c9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 00:52:30 +00:00
David Anderson
96009e517c Allow fastbootd to flash dtbo. am: e96a14a9d2 am: 439827c49d am: a03ec9af21 am: a7e9f0a873
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: Ie086b1fb169292469ec153039beee50ae782276d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 00:07:32 +00:00
David Anderson
a7e9f0a873 Allow fastbootd to flash dtbo. am: e96a14a9d2 am: 439827c49d am: a03ec9af21
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: I29b1070280c3e88e976dab3c02b110786ca8f11b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 23:22:17 +00:00
David Anderson
a03ec9af21 Allow fastbootd to flash dtbo. am: e96a14a9d2 am: 439827c49d
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: Id20a32d6a80e058caebf2047e59a1b5a3e519f43
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 22:41:44 +00:00
David Anderson
439827c49d Allow fastbootd to flash dtbo. am: e96a14a9d2
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: Ifc30a96202cbeb38896f3545502b582168dcf53e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 21:57:26 +00:00
David Anderson
e96a14a9d2 Allow fastbootd to flash dtbo.
This line is copied from gs101-sepolicy, and fixes the following denial:

audit: type=1400 audit(1689093038.396:14): avc:  denied  { write } for  pid=409 comm="fastbootd" name="sda24" dev="tmpfs" ino=493 scontext=u:r:fastbootd:s0 tcontext=u:object_r:custom_ab_block_device:s0 tclass=blk_file permissive=0

Bug: N/A
Test: fastboot flashall in fastbootd
Change-Id: I765aedeb204cc862434a56a97f242640465f84b8
2023-07-11 10:27:47 -07:00
Samuel Huang
e4b6e55e35 Revert "Revert "Create telephony.ril.silent_reset system_ext pro..." am: d02a8eef29
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23841769

Change-Id: I09f53d8147f813aaaeea55b57d1cfb97b0dd0001
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-07 02:32:58 +00:00
Samuel Huang
d02a8eef29 Revert "Revert "Create telephony.ril.silent_reset system_ext pro..."
Revert submission 23817868-revert-23736941-tpsr-ril-property-WQVGKEVBKX

Reason for revert: The root cause is missing property definition in gs101-sepolicy. This CL can be merged safely. Verified by abtd run: https://android-build.googleplex.com/builds/abtd/run/L48900000961646046

Reverted changes: /q/submissionid:23817868-revert-23736941-tpsr-ril-property-WQVGKEVBKX

Bug: 286476107
Change-Id: Ia80e4400ff555a637c42193cab3e3acf72bc36a2
2023-07-07 01:45:23 +00:00
Sebastian Pickl
d3ef7a804c Revert "Allow bthal to access vendor bluetooth folder" am: 41ed8e83ea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23874549

Change-Id: Ib4ecdceb5d125c05bce9a6c9edc4b24cbc53a8c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-05 12:02:20 +00:00
Sebastian Pickl
41ed8e83ea Revert "Allow bthal to access vendor bluetooth folder"
Revert submission 23844270-P22-vendor-log-udc-qpr

Reason for revert: causes selinux tests to fail b/289989584

go/abtd: https://android-build.googleplex.com/builds/abtd/run/L37600000961782595

Bug:289989584

Reverted changes: /q/submissionid:23844270-P22-vendor-log-udc-qpr

Change-Id: I4e9ccf17050702a6405c549340e7fe97eba0eb65
2023-07-05 10:11:12 +00:00
Patty Huang
3e1348f4fc Allow bthal to access vendor bluetooth folder am: 1a52c8b952
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23854004

Change-Id: I0d9ef1e480423715137fcbf7b9651753a9c8fa24
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-05 07:07:56 +00:00