Commit graph

27 commits

Author SHA1 Message Date
Jacky Liu
b60e65b48c Update sepolicy for new static i2c bus numbers
Bug: 305242309
Test: Boot to home
Change-Id: I0cf68195432a65270a5f72eda2c97eeca82fc08e
2023-10-19 17:39:29 +08:00
Steve Pfetsch
5536f04a93 Merge "DiagnosticsTool permissions for accessing touch calibration interface" into udc-qpr-dev am: 8b350cc57d am: bcb0118d1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/shusky-sepolicy/+/24813119

Change-Id: I3e98bed1eefb24a9a0a022f61b9666b0b857745a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-21 22:19:06 +00:00
Steve Pfetsch
bcb0118d1c Merge "DiagnosticsTool permissions for accessing touch calibration interface" into udc-qpr-dev am: 8b350cc57d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/shusky-sepolicy/+/24813119

Change-Id: Id1fdba7bbc23db1783c6b856fed5d1d9e7091e1c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-21 21:23:02 +00:00
Steve Pfetsch
8b350cc57d Merge "DiagnosticsTool permissions for accessing touch calibration interface" into udc-qpr-dev 2023-09-21 20:14:24 +00:00
Steve Pfetsch
ab87043117 DiagnosticsTool permissions for accessing touch calibration interface
Grant the DiagnosticsTool (priv_app domain) access to the GTI touch
driver's interactive_calibration interface. This patch does not create a
domain for the DaignosticsTool (see b/301300623).

Fixes these denials:
avc:  denied  { write } for  comm="diagnosticstool" name="interactive_calibrate" dev="sysfs" ino=105273 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:sysfs_touch_gti:s0 tclass=file permissive=1 app=com.google.android.apps.diagnosticstool
avc:  denied  { open } for  comm="diagnosticstool" path="/sys/devices/virtual/goog_touch_interface/gti.0/interactive_calibrate" dev="sysfs" ino=105273 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:sysfs_touch_gti:s0 tclass=file permissive=1 app=com.google.android.apps.diagnosticstool
avc:  denied  { getattr } for  comm="diagnosticstool" path="/sys/devices/virtual/goog_touch_interface/gti.0/interactive_calibrate" dev="sysfs" ino=105273 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:sysfs_touch_gti:s0 tclass=file permissive=1 app=com.google.android.apps.diagnosticstool
avc:  denied  { read } for  comm="diagnosticstool" name="interactive_calibrate" dev="sysfs" ino=105273 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:sysfs_touch_gti:s0 tclass=file permissive=1 app=com.google.android.apps.diagnosticstool

Without mlstrustedobject, this denial occurs:
avc:  denied  { write } for  comm="diagnosticstool" name="interactive_calibrate" dev="sysfs" ino=106943 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:sysfs_touch_gti:s0 tclass=file permissive=0 app=com.google.android.apps.diagnosticstool

Bug: 230050981
Change-Id: I6acbb83c5b4100cb1ae332412b2e4d7f163d300a
Signed-off-by: Steve Pfetsch <spfetsch@google.com>
2023-09-20 13:05:11 -07:00
Cheng Chang
6b1665276c gps: maintain one solution am: ae8f93dfb9 am: 146cb6177f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/shusky-sepolicy/+/24250047

Change-Id: I96a1ccdb6fb95cbdec22270f3292068550345538
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 05:56:24 +00:00
Cheng Chang
146cb6177f gps: maintain one solution am: ae8f93dfb9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/shusky-sepolicy/+/24250047

Change-Id: I6ab4ed7b79c62a050397950a6d8a081c1223a915
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 05:15:49 +00:00
Cheng Chang
ae8f93dfb9 gps: maintain one solution
Bug: 288813677
Test: compile for different devices and check binary.
Test: verification test at b/288813677.
Change-Id: Ie82ccd2570c36a7fe65a3d7148fa438b736a7261
2023-07-31 02:27:24 +00:00
Alice Sheng
44bed1b584 Add sepolicy related to RA9530 am: db0953db64 am: 2a720a38e4 am: 65e405269a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/shusky-sepolicy/+/23694231

Change-Id: I3dd8271b555bfe0420586e2497ca561475a861ed
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-15 11:45:07 +00:00
Alice Sheng
5ff71d5594 Add sepolicy related to RA9530 am: db0953db64 am: 3e69314048 am: 3a1b8cb495
Original change: https://googleplex-android-review.googlesource.com/c/device/google/shusky-sepolicy/+/23694231

Change-Id: Id1b9aaf173f55e23babebfc4a294183d32ef81f0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-15 11:43:56 +00:00
Alice Sheng
65e405269a Add sepolicy related to RA9530 am: db0953db64 am: 2a720a38e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/shusky-sepolicy/+/23694231

Change-Id: Iba5b4d0e03c7649dd7dfdbdde8da56e8d144688b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-15 11:03:05 +00:00
Alice Sheng
3a1b8cb495 Add sepolicy related to RA9530 am: db0953db64 am: 3e69314048
Original change: https://googleplex-android-review.googlesource.com/c/device/google/shusky-sepolicy/+/23694231

Change-Id: Ifcc53a50ac6ccfc32d626ce0583154ae3574f66c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-15 10:57:32 +00:00
Alice Sheng
2a720a38e4 Add sepolicy related to RA9530 am: db0953db64
Original change: https://googleplex-android-review.googlesource.com/c/device/google/shusky-sepolicy/+/23694231

Change-Id: I6ba4d136ad04c1852c0ec43f47390fb43b9e5bd2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-15 10:15:26 +00:00
Alice Sheng
3e69314048 Add sepolicy related to RA9530 am: db0953db64
Original change: https://googleplex-android-review.googlesource.com/c/device/google/shusky-sepolicy/+/23694231

Change-Id: Ife2a2db6536a76b0386cb5400c18fd68b75de5eb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-15 10:11:04 +00:00
Alice Sheng
db0953db64 Add sepolicy related to RA9530
Bug: 270440233
Test: No selinux denials related to wireless
Change-Id: I3ca5cbe6ed312ce404a25f2fda254001a3e6795b
(cherry picked from commit a6d059a84f)
2023-06-15 08:18:57 +00:00
Adam Shih
30661fe08c introduce a new sepolicy owner
Bug: 281631102
Test: N/A
Change-Id: Ic5ea569372bc31b6469cfb29fcfe918d25659c6c
2023-05-12 02:28:03 +00:00
joenchen
2818bd88fb RRS: allow init to set display properties am: 7abfb1174b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/shusky-sepolicy/+/21976623

Change-Id: I92706dcdcbffcc04f57d0100474cd94a648cbd69
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-17 21:11:39 +00:00
joenchen
7abfb1174b RRS: allow init to set display properties
Test: Boot w/ and w/o user selected configs and check the resolution
Bug: 243689199
Change-Id: I9dc9f98e880bf88c52de3a17d27d338cdf65f61f
2023-03-12 09:06:15 +00:00
Alice Sheng
a6d059a84f Add sepolicy related to RA9530
Bug: 270440233
Test: No selinux denials related to wireless
Change-Id: I3ca5cbe6ed312ce404a25f2fda254001a3e6795b
2023-03-09 14:35:19 -08:00
Tai Kuo
64170f1eb3 Update vibrator SEPolicy for possible paths
Bug: 264625320
Test: Check sysfs path with ls -Z.
Change-Id: Ieaa9e915901d7b8791ec50bae91c8d25f1e3db0f
2023-01-16 15:54:35 +08:00
Ken Yang
7f4cb6885f WLC: Cleanup the sysfs_wlc policies
Bug: 263830018
Change-Id: I49cda67298164ffa162481a28b7197c4772eeacb
Signed-off-by: Ken Yang <yangken@google.com>
2023-01-06 20:05:09 +00:00
Ken Yang
25fbcb8c93 Merge "WLC: Add device specific sepolicy for wireless_charger" 2022-12-21 08:36:14 +00:00
Denny cylee
476d3d1925 Sepolicy: Pixelstats: Sepolicy init
avc: denied { open } for
path="/sys/devices/platform/10c90000.hsi2c/i2c-7/7-003c/charge_stats"
dev="sysfs" ino=71508 scontext=u:r:pixelstats_vendor:s0
tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=1

Bug: 260366322
Test: No more battery seplocy error found
Change-Id: Ia0e2a6ad7d62f7f4895182627b0147db2f60993e
Signed-off-by: Denny cylee <dennycylee@google.com>
2022-12-20 04:27:51 +00:00
Ken Yang
beb210db16 WLC: Add device specific sepolicy for wireless_charger
Bug: 237600973
Change-Id: Iacbc5566e86360ab2d99a4742263876b1da18704
Signed-off-by: Ken Yang <yangken@google.com>
2022-12-20 01:01:28 +00:00
Robin Peng
e533e18f61 Initialize device folder
from: e9419111f49c3305cbf35b4bfb709d986ece96a8
with updated device path

Bug: 248399843
Change-Id: I409445ad16bb30d0ac9ccd18618df5826c963e62
2022-10-30 15:38:55 +00:00
Robin Peng
0578047397 Add OWNERS file before open for change
Bug: 248399843
Change-Id: I4534d38316b35fade684f644079fc53428cf3b7e
2022-09-23 03:54:47 +00:00
Umer Abdullah
92ddcc44ac Initial empty repository 2022-09-15 18:21:17 +00:00