Commit graph

277 commits

Author SHA1 Message Date
eddielan
f464f3f2c0 Fix FPS servicemanager sepolicy issue am: 8b78d57efa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20278507

Change-Id: If565ff408be265d856dfc5193112ab8a9d030a66
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-27 03:12:02 +00:00
eddielan
8b78d57efa Fix FPS servicemanager sepolicy issue
10-25 03:25:07.740   429   429 I auditd  : type=1400 audit(0.0:4):
avc: denied { call } for comm="servicemanager"
scontext=u:r:servicemanager:s0
tcontext=u:r:hal_fingerprint_capacitance:s0
tclass=binder permissive=0

Bug: 253533883
Test: make selinux_policy -j128 && check log on device
Change-Id: Iea8655fead4398317f0d682e632df8377883d1ea
2022-10-26 14:09:12 +08:00
eddielan
ba38cbe06d Fix FPS hwservice sepolicy issue am: bfba5df7e5 am: d115259d9e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20207303

Change-Id: I0fcaa595a18089800256b6ac489d6048a5e9e2fb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-18 03:47:48 +00:00
eddielan
d115259d9e Fix FPS hwservice sepolicy issue am: bfba5df7e5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20207303

Change-Id: I361bbefb1d4f7bfc46c3f61471cd500db5370543
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-18 03:15:38 +00:00
eddielan
bfba5df7e5 Fix FPS hwservice sepolicy issue
avc:  denied  { find } for interface=com.fingerprints42.extension::IFingerprintEngineering sid=u:r:hal_fingerprint_capacitance:s0 pid=895 scontext=u:r:hal_fingerprint_capacitance:s0 tcontext=u:object_r:default_android_hwservice:s0 tclass=hwservice_manager permissive=0

Bug: 253533883
Test: make selinux_policy -j128
Change-Id: I745e01fa2337843a8f16dadb71a07706a6681284
2022-10-17 15:07:54 +08:00
Ryan Ki Sing Chung
48d74244ca Revert "Revert "CastAuth: SELinux rules for the MediaDrm plugin"" am: c3ea668daa am: 5e4bde23de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20116451

Change-Id: I18383b804b1c3206111fdffa0c7caf29309f5a0a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-05 04:38:36 +00:00
Ryan Ki Sing Chung
5e4bde23de Revert "Revert "CastAuth: SELinux rules for the MediaDrm plugin"" am: c3ea668daa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20116451

Change-Id: I4aa02c9c5c3333c23cd6ed4fb052785a2fbfde9c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-05 04:07:02 +00:00
Ryan Ki Sing Chung
68f76df95e Revert "CastAuth: SELinux rules for the MediaDrm plugin" am: fae580c5ce am: abd3be9d76
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20110003

Change-Id: I0ad5e50db923d6125e8557f640a85808bd2b5644
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-05 02:41:59 +00:00
Ryan Ki Sing Chung
abd3be9d76 Revert "CastAuth: SELinux rules for the MediaDrm plugin" am: fae580c5ce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20110003

Change-Id: I7b35558ccda6c8bc1b54de48664d0571df4d0d58
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-05 02:10:48 +00:00
Ryan Ki Sing Chung
c3ea668daa Revert "Revert "CastAuth: SELinux rules for the MediaDrm plugin""
This reverts commit fae580c5ce.

Reason for revert: Relanding with fix

Bug: 250900568
Change-Id: I242a8b710d7d44e7390a1d63e39f7ebd7d406a4c
2022-10-05 01:10:00 +00:00
Ryan Ki Sing Chung
fae580c5ce Revert "CastAuth: SELinux rules for the MediaDrm plugin"
This reverts commit c579440a1f.

Reason for revert: Broke continuous build
Bug: 250900568

Change-Id: I69982e605c645373c38040d4b8527180a4efcecc
2022-10-04 19:19:26 +00:00
Ryan Ki Sing Chung
62a04bd5d1 Merge "CastAuth: SELinux rules for the MediaDrm plugin" into tm-qpr-dev am: bf74335744 am: 5d7e5c4958
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20068298

Change-Id: I04f822bc4483599375e8d68c1242dc67f265b495
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-04 17:38:52 +00:00
Ryan Ki Sing Chung
5d7e5c4958 Merge "CastAuth: SELinux rules for the MediaDrm plugin" into tm-qpr-dev am: bf74335744
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20068298

Change-Id: I4134f4c6034bbeb5c18c929bf7a2d475691457e8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-04 17:04:26 +00:00
Ryan Ki Sing Chung
bf74335744 Merge "CastAuth: SELinux rules for the MediaDrm plugin" into tm-qpr-dev 2022-10-04 16:00:28 +00:00
Ryan Chung
c579440a1f CastAuth: SELinux rules for the MediaDrm plugin
Bug: 229298787
Test: Access Cast creds with MediaDrm plugin
Change-Id: Iff9386dc1223a9f5a088d7ba2d2bc8bd73eebc00
2022-09-29 18:15:15 -07:00
TreeHugger Robot
a7dc42a1de Merge "Sepolicy for hall effect notification." into tm-qpr-dev am: 9ed2e6925e am: 47d4948fd9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20060645

Change-Id: Iba57e60d01874c335e23fcd24bbd9adc4809db49
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-29 17:14:22 +00:00
TreeHugger Robot
47d4948fd9 Merge "Sepolicy for hall effect notification." into tm-qpr-dev am: 9ed2e6925e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20060645

Change-Id: Iae8cb2bf76a38385f44f6cd46f744dd76c996e9b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-29 16:41:51 +00:00
TreeHugger Robot
9ed2e6925e Merge "Sepolicy for hall effect notification." into tm-qpr-dev 2022-09-29 16:17:51 +00:00
Darren Hsu
e6e557f360 sepolicy: add sysfs_wakeup labels for acpm am: 36714befbb am: bf82087232
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20070665

Change-Id: I66f48db7ac9e29fb1d8dde70879412111ac28dd8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-29 04:05:09 +00:00
Darren Hsu
bf82087232 sepolicy: add sysfs_wakeup labels for acpm am: 36714befbb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20070665

Change-Id: I716180e133650a3e605ccd3265969d721106ea0d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-29 03:35:17 +00:00
matthuang
938a12a2dc Sepolicy for hall effect notification.
Bug: 241474630
Test: Check selinux log.
Change-Id: Ia4dc303849c98a7c067a2fb0426b7a7b6d3d0301
2022-09-28 10:54:39 +08:00
Darren Hsu
36714befbb sepolicy: add sysfs_wakeup labels for acpm
Bug: 248974063
Test: run vts -m SuspendSepolicyTests
Change-Id: Ie96d282d7a6b61bafff4b66f63ff320d80a3b4f2
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-09-28 09:49:33 +08:00
kuanyuhuang
9db85e1f94 Add binder call for grilservice and hal_bluetooth am: 39b4f3823a am: 67f5891c35
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19998306

Change-Id: Ic92294881b2d9d8e65a455fe009e11aeb6e511bd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-22 03:44:08 +00:00
kuanyuhuang
67f5891c35 Add binder call for grilservice and hal_bluetooth am: 39b4f3823a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19998306

Change-Id: I1d23ccf34b4d5c2052c1cc5803c358b6471fe81c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-22 02:45:36 +00:00
kuanyuhuang
39b4f3823a Add binder call for grilservice and hal_bluetooth
Gril calls setBluetoothModeBasedTxPowerCap to bluetooh HAL
for SAR feature.

Bug: 244409539
Test: build pass and check grilservice can bind with IBluetoothSar
Change-Id: Ie563cdbe126371d50bb996a0d4d10fd5f52e8d6f
2022-09-21 08:47:27 +00:00
TreeHugger Robot
8d49353027 [automerger skipped] Merge "RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth" into tm-qpr-dev am: 5c4efb3f22 am: 3625437c32 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19928508

Change-Id: If14843beee61cb46a6030cfa5af783785e82da11
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 04:54:34 +00:00
Darren Hsu
be1bfc4e15 [automerger skipped] RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth am: ccd9f49f2b am: 0696f7c503 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19928508

Change-Id: Ied0b940e5c29d05a7ccc15fe72bd266a41ce7180
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 04:54:31 +00:00
TreeHugger Robot
3625437c32 Merge "RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth" into tm-qpr-dev am: 5c4efb3f22
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19928508

Change-Id: Iaf6e89850a393ac8c6c638854f83000e343bf0e3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 04:10:27 +00:00
Darren Hsu
0696f7c503 RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth am: ccd9f49f2b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19928508

Change-Id: I8a7c73669d875d2e2ff4cf090307a20fb1022345
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 04:10:25 +00:00
TreeHugger Robot
5c4efb3f22 Merge "RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth" into tm-qpr-dev 2022-09-16 03:15:08 +00:00
Darren Hsu
ccd9f49f2b RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth
avc: denied { call } for comm="bluetooth@1.1-s"
scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=0

avc: denied { call } for scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=1

avc: denied { read } for comm="android.hardwar"
name="u:object_r:boot_status_prop:s0" dev="tmpfs" ino=109
scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:object_r:boot_status_prop:s0 tclass=file permissive=0

Bug: 215487801
Test: captured bugreport and didn't see powerstats avc denials
Change-Id: I34840b7f8031084270477635c2bde5d702a0507c
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-09-14 10:44:38 +00:00
TreeHugger Robot
da66cb2254 Merge "Migrate LED sepolicy used by dumpstate to gs201" into tm-qpr-dev am: 30226d2510 am: 5c72944799
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19894290

Change-Id: Idcdb2dd357c31fae74da9fb2a91188dd8314e956
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-14 04:03:34 +00:00
TreeHugger Robot
5c72944799 Merge "Migrate LED sepolicy used by dumpstate to gs201" into tm-qpr-dev am: 30226d2510
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19894290

Change-Id: Iff61f9a3261d931609797e3c61ea7d0533d7c061
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-14 03:34:32 +00:00
TreeHugger Robot
30226d2510 Merge "Migrate LED sepolicy used by dumpstate to gs201" into tm-qpr-dev 2022-09-14 02:59:20 +00:00
Darren Hsu
e946d52939 sepolicy: add missing sysfs_wakeup labels am: f3b6df78da am: 3d731e788e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19919168

Change-Id: I225158513df197f5c43d341a8ad27f5d73737b93
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-12 13:39:15 +00:00
Darren Hsu
3d731e788e sepolicy: add missing sysfs_wakeup labels am: f3b6df78da
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19919168

Change-Id: Iaca299d87f5bf1bc5c9466af47100d17155677f1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-12 13:09:27 +00:00
Darren Hsu
f3b6df78da sepolicy: add missing sysfs_wakeup labels
Bug: 245434941
Test: run vts -m SuspendSepolicyTests
Change-Id: I4873bbba4e6e276722037680056d4e003f8a0da9
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-09-12 16:04:21 +08:00
Chungjui Fan
f7be842d13 Migrate LED sepolicy used by dumpstate to gs201
Bug: 242300919
Change-Id: I1b7f4be6670ef645df932207ece4746fcedb9e39
2022-09-08 09:12:30 +00:00
Badhri Jagan Sridharan
d701d4fdd9 Port pogo sepolicy for target am: aebc367bfa am: 3a0a52c18d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19719626

Change-Id: I30c7f56b041ab98cf88ec59cc5de13b31cdc0128
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-25 01:07:14 +00:00
Badhri Jagan Sridharan
3a0a52c18d Port pogo sepolicy for target am: aebc367bfa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19719626

Change-Id: I3557361371c3dc07651da4d523ea37ac158d620d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-25 00:47:43 +00:00
Badhri Jagan Sridharan
aebc367bfa Port pogo sepolicy for target
This is port of <0fe78c45624ac71c303f28d214d04f5382744110>
and <b85ae23600ba9db57d9ea4343769f928e5dc58dd> from previous
target.

Bug: 242751127
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
Change-Id: I20205c63dc226c6863215b29e11b8c4b626b6010
2022-08-24 21:05:19 +00:00
Super Liu
68c9bf9fbc Allow vendor_init to read gesture_prop. am: 834dc1b842 am: 471e100517
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19293223

Change-Id: If71ee78e834cf3f04cbebc45bed9a4b95588a0c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-18 09:44:35 +00:00
Super Liu
471e100517 Allow vendor_init to read gesture_prop. am: 834dc1b842
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19293223

Change-Id: I0b549fb47b8616fe93e2a5d0e92e24e56e5f08cf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-18 09:27:36 +00:00
Super Liu
834dc1b842 Allow vendor_init to read gesture_prop.
Logs:
07-15 04:04:39.052     1     1 I auditd  : type=1107 audit(0.0:4): uid=0
auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { read
} for property=persist.sys.tap_gesture pid=0 uid=0 gid=0
scontext=u:r:vendor_init:s0 tcontext=u:object_r:gesture_prop:s0
tclass=file permissive=0'
07-15 04:04:39.087     1     1 E init    :
/vendor/etc/init/hw/init.tangorpro.rc: 48: ParseTriggers() failed:
unexported property trigger found: persist.sys.tap_gesture

Test: check Treehugger build for sepolicy.
Bug: 201610482
Signed-off-by: Super Liu <supercjliu@google.com>
Change-Id: I2072ce786bf9f3590487b1807672e993764cc6f0
2022-07-18 10:26:10 +08:00
Adam Shih
4ba9cbef16 Update SELinux error am: 5cc0905307 am: 09553e4379
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19295507

Change-Id: I11f0e0fb9563f11c7e8032578bd653d581ce59b6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-18 00:51:58 +00:00
Adam Shih
09553e4379 Update SELinux error am: 5cc0905307
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19295507

Change-Id: I11e651f1b714fb48a4cfd870c9280fb908b963fd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-18 00:33:26 +00:00
Adam Shih
5cc0905307 Update SELinux error
Test: checkSensors
Bug: 239115418
Test: checkLockScreen
Bug: 239115418
Test: scanBugreport
Bug: 239115418
Change-Id: I36ba54820939f24d8f5293e1ba252fd0f6a9e970
2022-07-15 10:23:55 +08:00
Adam Shih
94c5db3c52 Setup tracking folder am: 3c989e7f01 am: 05574bc45b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19273075

Change-Id: I325264798d0191b14b5ddfa862d489c287f365ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-14 18:16:37 +00:00
Adam Shih
05574bc45b Setup tracking folder am: 3c989e7f01
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19273075

Change-Id: I3dd8ee8304d80cbc297328246ae5cbba063bf9ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-14 17:57:26 +00:00
Adam Shih
3c989e7f01 Setup tracking folder
Bug: 234547283
Test: build pass
Change-Id: I30b74797c2556fcf19636ed2cea401d58f85cbc2
2022-07-14 13:02:07 +08:00