Commit graph

1034 commits

Author SHA1 Message Date
Adam Shih
fe7901612d update error on ROM am: 41e9042885 am: efc2edd3ce
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2375476

Change-Id: Id9d12d795091bf84b5a8d53767a7a265646f1a5d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-06 05:22:28 +00:00
Adam Shih
efc2edd3ce update error on ROM am: 41e9042885
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2375476

Change-Id: Ia39df8949eeb41c458baab106e4f98851ce7b496
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-06 04:50:57 +00:00
Adam Shih
41e9042885 update error on ROM
Bug: 242203678
Test: pass boot test
Change-Id: I4b9aefdea9b54b4fb1743af6c7e7169c210c7ad0
Merged-In: Iadd90d55aca37fead3e5528d39df7866c9807205
2023-01-06 02:42:49 +00:00
Stephen Crane
c430f27151 [automerger skipped] Allow Trusty storageproxy property am: 37b0c417d1 -s ours
am skip reason: Merged-In I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d with SHA-1 5cd114d3a0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20600484

Change-Id: I516c0e02b2870767fed94431145b6be655cb20fa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-21 04:06:01 +00:00
Stephen Crane
37b0c417d1 Allow Trusty storageproxy property
Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready
when the data filesystems are ready for use, and allows vendor init to
query and wait on this property.

Test: build, flash, test app loading
Bug: 258018785
Change-Id: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
Merged-In: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
2022-12-21 03:42:07 +00:00
Devin Moore
35a55fd27f Allow pixelstats hal to talk to the new AIDL sensorservice am: 691897a0bf am: bfa91d7e21
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2363266

Change-Id: Ifd7d2166a166e40e9685ba4e2d04ffb66f9478a8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-20 20:57:22 +00:00
Devin Moore
bfa91d7e21 Allow pixelstats hal to talk to the new AIDL sensorservice am: 691897a0bf
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2363266

Change-Id: I6162c76ddc3ee581a782d176507d6b93cb8ce07c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-20 20:20:51 +00:00
Devin Moore
691897a0bf Allow pixelstats hal to talk to the new AIDL sensorservice
This is being used in libsensorndkbridge now, so permissions are
required.

Test: m
Bug: 205764765
Change-Id: Ife9688c62398bef83ae5636e915568658098e12d
2022-12-19 23:05:38 +00:00
Jenny Ho
0e90b55ed9 Add sepolicy rule to allow dump battery maxfg history am: f5a88c35a4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20729299

Change-Id: I983b69e606a1e257380abcfaefacfcbd4aea651d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-16 07:26:40 +00:00
Jenny Ho
f5a88c35a4 Add sepolicy rule to allow dump battery maxfg history
android.hardwar: type=1400 audit(0.0:7): avc: denied { getattr } for path="/dev/maxfg_history" dev="tmpfs" ino=580 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0 bug=b/240632721

Bug: 254164096
Change-Id: I64ff95ba8db62a8f831d012b4cdf4e6ec973f086
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2022-12-15 03:03:01 +00:00
Jack Wu
dd9d20b242 [automerger skipped] ignore shell access on wlc am: 812312fb1c am: e5974267f8 am: 810a7c5988 -s ours
am skip reason: Merged-In I5f1d321df2daa2ec785e2ad1ac2e02478568b688 with SHA-1 72a65a0100 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20677740

Change-Id: I74f7c32fc56171592567e8f84457fa894ebc9d06
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 08:32:05 +00:00
Jack Wu
810a7c5988 ignore shell access on wlc am: 812312fb1c am: e5974267f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20677740

Change-Id: Ic9e3f1e1c7d029268a6430eda9bfdd8873c30ede
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 07:55:16 +00:00
Jack Wu
e5974267f8 ignore shell access on wlc am: 812312fb1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20677740

Change-Id: I12bf3f89227c1d3cab0ea2ac5863bfbcaf7eb6f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 06:50:08 +00:00
Jack Wu
343ef77907 ignore shell access on wlc am: 72a65a0100 am: 800574a31d
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2276118

Change-Id: I7fb4d5ca9bb191b2568c60890983671e3a421788
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 03:43:55 +00:00
Jack Wu
800574a31d ignore shell access on wlc am: 72a65a0100
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2276118

Change-Id: I7d3f7611f7bd26cde474bfae8ab8ed7fcae5d95b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 03:14:19 +00:00
Jack Wu
72a65a0100 ignore shell access on wlc
Bug: 238260741
Test: boot
Change-Id: I5f1d321df2daa2ec785e2ad1ac2e02478568b688
Merged-In: I5f1d321df2daa2ec785e2ad1ac2e02478568b688
Signed-off-by: Jack Wu <wjack@google.com>
2022-12-12 09:28:24 +08:00
Automerger Merge Worker
159684c0d9 Merge "[automerger skipped] Merge Android 13 QPR1 am: a895073188 -s ours" into stage-aosp-master am: 40d65d57a9 -s ours
am skip reason: Merged-In Idb145723d053eb93dbae2b71f7204347253c8a50 with SHA-1 123262b869 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2337016

Change-Id: I1e2d84021562ea9e6cb27189f7a1be3247d1577e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-10 01:57:13 +00:00
Xin Li
4c5a9c7e12 [automerger skipped] Merge Android 13 QPR1 am: a895073188 -s ours am: b6b7e42179 -s ours
am skip reason: Merged-In Idb145723d053eb93dbae2b71f7204347253c8a50 with SHA-1 123262b869 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2337016

Change-Id: I14be64d8b1129673d2dd45f93fe218481e4b85de
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-10 00:24:33 +00:00
Automerger Merge Worker
40d65d57a9 Merge "[automerger skipped] Merge Android 13 QPR1 am: a895073188 -s ours" into stage-aosp-master 2022-12-09 23:29:33 +00:00
Xin Li
f2706b36cc [automerger skipped] Merge Android 13 QPR1 am: a895073188 -s ours
am skip reason: Merged-In Idb145723d053eb93dbae2b71f7204347253c8a50 with SHA-1 123262b869 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2337016

Change-Id: Ib55c87abcfe45f8ea877a34002002cb0d12b43b2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-09 23:19:11 +00:00
Xin Li
b6b7e42179 [automerger skipped] Merge Android 13 QPR1 am: a895073188 -s ours
am skip reason: Merged-In Idb145723d053eb93dbae2b71f7204347253c8a50 with SHA-1 123262b869 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2337016

Change-Id: Ifd93ba6d6aaf3efca62c484c0582bd9399b1eea3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-09 23:14:27 +00:00
Xin Li
a895073188 Merge Android 13 QPR1
Bug: 261731544
Merged-In: Idb145723d053eb93dbae2b71f7204347253c8a50
Change-Id: I81e178b27ef30d184e5e12844c64e5b897d97168
2022-12-09 10:24:38 -08:00
Nicolas Geoffray
da3eb0b7c5 Also put .ShannonImsService in the vendor_ims_app domain. am: 123262b869 am: 99159a832b
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2335385

Change-Id: I76302558055df38134731cddc25a9ee84074dafd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-08 20:17:12 +00:00
Nicolas Geoffray
99159a832b Also put .ShannonImsService in the vendor_ims_app domain. am: 123262b869
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2335385

Change-Id: I0967cfff61ba4576130772ddf66c297ea6edf508
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-08 19:32:29 +00:00
Nicolas Geoffray
123262b869 Also put .ShannonImsService in the vendor_ims_app domain.
For consistency when running com.shannon.imsservice code.

Test: m
Bug: 260557058
Change-Id: Idb145723d053eb93dbae2b71f7204347253c8a50
2022-12-08 14:49:22 +00:00
Jack Wu
812312fb1c ignore shell access on wlc
Bug: 261804136
Test: boot
Change-Id: I5f1d321df2daa2ec785e2ad1ac2e02478568b688
Merged-In: I5f1d321df2daa2ec785e2ad1ac2e02478568b688
Signed-off-by: Jack Wu <wjack@google.com>
2022-12-08 17:58:26 +08:00
chiayupei
c1191eef16 hal_sensors_default: Add sepolicy for MagCC. am: 5df8045c3b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20458112

Change-Id: I4f87b4c1977fe7aace7d1da49a7d8ed46512b809
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-08 08:31:55 +00:00
chiayupei
5df8045c3b hal_sensors_default: Add sepolicy for MagCC.
avc: denied { search } for name="battery" dev="sysfs" ino=78703 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1
avc: denied { read } for name="status" dev="sysfs" ino=78714 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
avc: denied { open } for path="/sys/devices/platform/google,battery/power_supply/battery/status" dev="sysfs" ino=78714 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
avc: denied { getattr } for path="/sys/devices/platform/google,battery/power_supply/battery/status" dev="sysfs" ino=78714 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
avc: denied { read } for name="status" dev="sysfs" ino=78714 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
avc: denied { search } for name="i2c-p9222" dev="sysfs" ino=69679 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=1
Bug: 254155730
Test: Manually test no avc denied for MagCC

Change-Id: Ie5261b39187ffcdf645ae64727c54643bdbc1c47
Signed-off-by: chiayupei <chiayupei@google.com>
2022-12-08 07:56:50 +00:00
Nicolas Geoffray
0bd5e91ed1 Allow ssr_detector_app to create files of type system_app_data_file. am: 48acf9683f am: a350889233
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2328073

Change-Id: I3e904889634887ad719519b70fe5f48953f09534
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 16:19:12 +00:00
Nicolas Geoffray
a350889233 Allow ssr_detector_app to create files of type system_app_data_file. am: 48acf9683f
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2328073

Change-Id: I1d28a6bc1bab970eef702a8c8a0f9b3d8bfe2123
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 15:48:47 +00:00
Nicolas Geoffray
48acf9683f Allow ssr_detector_app to create files of type system_app_data_file.
Bug: 260557058
Test: m
Change-Id: I0ff85b542a84ed7d5e5ffd1010ca1a9f7f86c8f1
2022-12-05 13:58:36 +00:00
Wasb Liu
d90c1c4c22 hal_health_default: updated sepolicy am: daeff5e18c am: 88e9fb512d am: 271a845885
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20610808

Change-Id: Ifca6b7ec1ade7be5d28d619c18af27d537699eda
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 05:34:08 +00:00
Wasb Liu
271a845885 hal_health_default: updated sepolicy am: daeff5e18c am: 88e9fb512d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20610808

Change-Id: I4f4cc732f46d00a7c18dc1fb691436aa826e441a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 04:56:13 +00:00
Wasb Liu
88e9fb512d hal_health_default: updated sepolicy am: daeff5e18c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20610808

Change-Id: Idb7b4ffa9a74638247fc9bbaa4f697c9945e4c2e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 03:51:20 +00:00
George Lee
cd346126ec Battery Mitigation: Use Brownout Reason - sepolicy am: 0237351f52
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20614653

Change-Id: I0bd44a43a191724cb3a882e87ae988545e207154
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-02 07:05:12 +00:00
George Lee
0237351f52 Battery Mitigation: Use Brownout Reason - sepolicy
Brownout Reason replaces startup_bugreport_requested.  Battery
Mitigation needs to be updated.

Bug: 237287659
Test: Ensure lastmeal.txt is properly generated.
Merged-In: Ia03da290f5cb90ebbc7616d46e90064e346a402c
Change-Id: Ic123d704e37aa6d1dcd7377c291b537069ede829
Signed-off-by: George Lee <geolee@google.com>
2022-12-02 05:13:57 +00:00
Wasb Liu
daeff5e18c hal_health_default: updated sepolicy
allow android.hardware.health service to access persist_battery_file

11-14 13:53:39.242   872   872 W android.hardwar: type=1400 audit(0.0:17): avc: denied { search } for name="battery" dev="sda1" ino=84 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=dir permissive=0

Bug: 258535661
Bug: 260878511
Test: check for no avc denied on persist_battery_file
Change-Id: I7564b03339e17f9eea4aa5a8feda31bcfdd6100c
Signed-off-by: Wasb Liu <wasbliu@google.com>
Signed-off-by: Ken Tsou <kentsou@google.com>
(cherry picked from commit 24cfe388c5)
2022-12-02 02:01:24 +00:00
Ziyi Cui
71d22f91d6 [ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to perf-metrics am: 30e01ffb8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20133843

Change-Id: I4a4b1d228816a46749ce0d125d86c29c272e4a57
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 07:03:11 +00:00
Ziyi Cui
1f90d9e929 gs201-sepolicy:dumpstate: allow dumpstate access sysfs_vendor_metrics am: 521334a366
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20475259

Change-Id: Ibf21ea0b6647865f38d04930ff1ccf6dc5377b29
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 06:59:41 +00:00
Ziyi Cui
8d2a5bdcf7 [ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to temp-residency-metrics am: 2d4a9c02fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20431038

Change-Id: I68342b66f1c1588f0b924531a9a23f8cce47c922
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 06:59:37 +00:00
Ziyi Cui
30e01ffb8c [ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to perf-metrics
enable pixelstats access to sysfs path, define sysfs_perfmetrics

Bug: 227809911
Bug: 232541623
Test: Verified the existence of atom and correctness of resume latency, irq stats
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: If1b95148b59a6816c6795921018dfae68d80550b
2022-12-01 06:31:22 +00:00
Ziyi Cui
521334a366 gs201-sepolicy:dumpstate: allow dumpstate access sysfs_vendor_metrics
Test: "adb bugreport" includes metrics capture.

Bug: 246799997
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: I1c2f4aaf1cd875a37497ca8beacb555d39eeb51e
2022-12-01 06:27:22 +00:00
Ziyi Cui
2d4a9c02fc [ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to temp-residency-metrics
enable pixelstats access to sysfs path
Bug: 246799997
Test: Verified the existence of atom and correctness of atom stats
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: I4a731d40a586e01c484cf95c57fb16a03f5e6ceb
2022-12-01 06:27:22 +00:00
Wasb Liu
c7f12f5aa9 hal_health_default: updated sepolicy am: 24cfe388c5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20476525

Change-Id: I31449984e30724ba883a04c16b179641f6d92cbc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 09:59:32 +00:00
Wasb Liu
24cfe388c5 hal_health_default: updated sepolicy
allow android.hardware.health service to access persist_battery_file

11-14 13:53:39.242   872   872 W android.hardwar: type=1400 audit(0.0:17): avc: denied { search } for name="battery" dev="sda1" ino=84 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=dir permissive=0

Bug: 258535661
Test: check for no avc denied on persist_battery_file
Change-Id: I7564b03339e17f9eea4aa5a8feda31bcfdd6100c
Signed-off-by: Wasb Liu <wasbliu@google.com>
2022-11-30 09:44:34 +00:00
Stephen Crane
9fb7618e6b Allow Trusty storageproxy property am: 5cd114d3a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20545996

Change-Id: I76672b0e56c352e1991811bcaddac660fe05d0b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 01:15:18 +00:00
Nicolas Geoffray
b84e18b8ae Merge "Allow ssr_detector_app writes to system_app_data_file." am: 073de4fba6 am: 0590da44cf
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2319817

Change-Id: I5c11172d6fb7b167500633ebba07c48281cd5296
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 10:11:54 +00:00
Nicolas Geoffray
0590da44cf Merge "Allow ssr_detector_app writes to system_app_data_file." am: 073de4fba6
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2319817

Change-Id: I0e29c8a6435b71ff567d03572606cbcba3f76c1b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 09:43:15 +00:00
Nicolas Geoffray
073de4fba6 Merge "Allow ssr_detector_app writes to system_app_data_file." 2022-11-29 09:00:12 +00:00
Sandeep Dhavale
537b43c395 Add fastboot sepolicy changes to allow wiping of device am: 89f5fff668 am: 6f2812426a
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2316638

Change-Id: I129d2a7ab2effbcb93b15a21b539da1e11b8861f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-28 23:36:23 +00:00