Commit graph

183 commits

Author SHA1 Message Date
eddielan
1ef0169b1f Correct fps sepolicy error
E SELinux : avc:  denied  { find }
name=android.frameworks.sensorservice.ISensorManager/default
scontext=u:r:hal_fingerprint_capacitance:s0
tcontext=u:object_r:fwk_sensor_service:s0
tclass=service_manager permissive=0

Bug: 294959986
Test: make selinux_policy -j128
Change-Id: I987349032bdf7b79e1985a321949987860a08098
2023-08-08 17:37:51 +08:00
Nikhil Kumar
076dee1318 Tracked SELinux denials for HSUM tangorpro mode
Bug: 289358324
Test: Run the boot health test to verify if the Denials are ignored.
Change-Id: I74063ed1634dc4b9bff524203e537b0dfc36b02e
2023-06-30 16:17:50 +01:00
Luis Delgado de Mendoza Garcia
c48ffc1632 Remove bugmap for aoc sepolicy error. am: 468e83b490 am: b71b1e2ae2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/23263337

Change-Id: I44bd5c2c759c32e9dfa5c8148c238c00286d9fbf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 19:02:33 +00:00
Luis Delgado de Mendoza Garcia
b71b1e2ae2 Remove bugmap for aoc sepolicy error. am: 468e83b490
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/23263337

Change-Id: Ic9f4d215ec1fd5cd511a5b182a1243ac4ffb95f1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 18:28:39 +00:00
Luis Delgado de Mendoza Garcia
468e83b490 Remove bugmap for aoc sepolicy error.
The sepolicy error was fixed by adding the necessary entries to
the gs201 sepolicy. Removing the bug map.

Bug: 281814892
Test: N/A
Change-Id: I0650636d7177ea7748f3690eef98ccb47a1eaf1b
2023-05-16 08:54:29 -07:00
Wilson Sung
ea154c2063 Update SELinux error am: 6a684e0fcc am: 11825fdf95
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/23123011

Change-Id: I0c2328e138fa679fe431513e31b4e8f87fee0ec3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 01:35:30 +00:00
Wilson Sung
11825fdf95 Update SELinux error am: 6a684e0fcc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/23123011

Change-Id: Icb34b3ba1974c83d72ba21fb9d1e86898056b642
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-10 22:55:25 +00:00
Wilson Sung
6a684e0fcc Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 281814892
Fix: 281663915
Change-Id: Ib2cd9aa4e42441c1d7bdb9c7df20f7ab2108cda4
2023-05-10 12:05:04 +00:00
matthuang
1527b47070 [automerger skipped] Allow sensor hal to access uhid devices. am: 7e7ab2d604 am: c31a17278a -s ours am: 82c89ad06f -s ours
am skip reason: Merged-In I2031c167f242b10b0a03076f0bc4184dd21e2cd5 with SHA-1 306f6c5e8c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/22163454

Change-Id: I50bdebf28a8cedefe796d6a186d61ea60f1fe0f3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-30 20:59:26 +00:00
matthuang
82c89ad06f [automerger skipped] Allow sensor hal to access uhid devices. am: 7e7ab2d604 am: c31a17278a -s ours
am skip reason: Merged-In I2031c167f242b10b0a03076f0bc4184dd21e2cd5 with SHA-1 306f6c5e8c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/22163454

Change-Id: I32129f8db32c9b9285cc6a44add2f68ec7002014
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-30 17:16:56 +00:00
matthuang
c31a17278a Allow sensor hal to access uhid devices. am: 7e7ab2d604
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/22163454

Change-Id: Id8e8918fc05caab71376e1da997e64fe1bff7bad
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-30 16:29:14 +00:00
Wilson Sung
5abdd96451 Update SELinux error am: 5acd6da793
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/22236037

Change-Id: I835ab82a42372389e9b143fa98c4f04064cfe0bb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 05:24:18 +00:00
Wilson Sung
5acd6da793 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 275001805
Change-Id: Ia930f873d1471bf38416e74b7c1dcf23da0470c0
2023-03-24 11:12:09 +08:00
matthuang
7e7ab2d604 Allow sensor hal to access uhid devices.
Bug: 262056923
Bug: 274537630
Test: Screen is off when put a magnet close to hall sensor.
Change-Id: I2031c167f242b10b0a03076f0bc4184dd21e2cd5
Merged-In: I2031c167f242b10b0a03076f0bc4184dd21e2cd5
2023-03-22 03:45:38 +00:00
Marcello Galhardo
67f232aa2f Allow platform_app:systemui to access system_update info am: 7e59945dbb am: ddf255dc1e am: 0b98c52dfc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/22086254

Change-Id: I54088cd2aecf5b287ee7263ce35fec71f660cc4a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 23:11:28 +00:00
Marcello Galhardo
0b98c52dfc Allow platform_app:systemui to access system_update info am: 7e59945dbb am: ddf255dc1e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/22086254

Change-Id: Idb27dcfcf2d900cd9da0d1c7d15b91e7fc61e005
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 22:33:23 +00:00
Marcello Galhardo
ddf255dc1e Allow platform_app:systemui to access system_update info am: 7e59945dbb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/22086254

Change-Id: I655ec7bf295f1a77f8af89546d2190930bfaa3ea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 21:56:23 +00:00
Marcello Galhardo
7e59945dbb Allow platform_app:systemui to access system_update info
Test: manual

Bug: 273684235
Change-Id: I516e792e926827471b04b336038fab1b1cd540ec
2023-03-15 11:45:10 +00:00
leochuang
a32c0da2f6 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 264823366
Change-Id: I9b6c67192c19d74429606653cd322a4686a21e4d
2023-02-22 10:30:21 +08:00
Super Liu
a026b453c4 Remove unnecessary denials.
Bug: 263430971
Test: TreeHugger build.
Signed-off-by: Super Liu <supercjliu@google.com>
Change-Id: Icd6a9e1ba2f779ad20be44e186919cb621705c21
2023-02-14 08:47:16 +00:00
eddielan
efb19b6d76 fingerprint: Allow fps HAL to access sysfs_batteryinfo am: add3a60535 am: bb3aff7cb7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/21309530

Change-Id: I5d6455863aa95faaf57d10459d68937ed86a794d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-08 05:49:17 +00:00
eddielan
bb3aff7cb7 fingerprint: Allow fps HAL to access sysfs_batteryinfo am: add3a60535
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/21309530

Change-Id: I59fa51da0877d90c7a35f87513a106fd98d1c17d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-08 05:08:27 +00:00
eddielan
add3a60535 fingerprint: Allow fps HAL to access sysfs_batteryinfo
avc: denied { search } for name="dock" dev="sysfs" ino=68869
scontext=u:r:hal_fingerprint_capacitance:s0
tcontext=u:object_r:sysfs_batteryinfo:s0
tclass=dir permissive=1

Bug: 268158443
Test: make selinux_policy -j112
Change-Id: I28a50a68019bdf474df4de27d31df06ec13b2a7a
2023-02-07 17:52:35 +08:00
matthuang
306f6c5e8c Allow sensor hal to access uhid devices.
Bug: 262056923
Test: Screen is off when put a magnet close to hall sensor.
Change-Id: I2031c167f242b10b0a03076f0bc4184dd21e2cd5
2023-01-31 17:30:19 +08:00
Mariia Sandrikova
c81e6d423f [automerger skipped] Merge "DO NOT MERGE Revert "Revert "Clean up debug.sf.ignore_hwc_physical_display_or..."" into tm-qpr-dev am: 1dacfd5541 am: ea86adbe43 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/21071003

Change-Id: I16ae8c24997ca05f09d4f94746d06e9303e543fa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-23 19:30:23 +00:00
Mariia Sandrikova
83f511434f [automerger skipped] DO NOT MERGE Revert "Revert "Clean up debug.sf.ignore_hwc_physical_display_or..." am: 0f733764c2 am: de873ad131 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/21071003

Change-Id: Ie342c6da79a973407ea16d29659f4ff15d64a144
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-23 19:30:22 +00:00
Mariia Sandrikova
ea86adbe43 Merge "DO NOT MERGE Revert "Revert "Clean up debug.sf.ignore_hwc_physical_display_or..."" into tm-qpr-dev am: 1dacfd5541
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/21071003

Change-Id: I32741e5dab8a9793555d045159d48192477f8a6e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-23 18:42:09 +00:00
Mariia Sandrikova
de873ad131 DO NOT MERGE Revert "Revert "Clean up debug.sf.ignore_hwc_physical_display_or..." am: 0f733764c2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/21071003

Change-Id: I5b67f0c6c0077a01bd8b89240d6181afd48dcf60
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-23 18:42:08 +00:00
Mariia Sandrikova
1dacfd5541 Merge "DO NOT MERGE Revert "Revert "Clean up debug.sf.ignore_hwc_physical_display_or..."" into tm-qpr-dev 2023-01-23 18:00:57 +00:00
Mariia Sandrikova
0f733764c2 DO NOT MERGE Revert "Revert "Clean up debug.sf.ignore_hwc_physical_display_or..."
Clean up debug.sf.ignore_hwc_physical_display_orientation

Temporary property was introduced in Iffbdc13149f517f0b59b313f1fe1f7900cc8597e

Test: manual
Bug: 246793311

Revert submission 20920163-revert-20881991-clean-up-temp-sysprop-FZOZHLNEBL

Reason for revert: Revert a revert of I000feb9e54a9f3b897eb4867fb285788cdb2fc46 to land it again

Reverted changes: /q/submissionid:20920163-revert-20881991-clean-up-temp-sysprop-FZOZHLNEBL

Change-Id: Id4658d31b73adfa9e0996891d0529a7277043ed3
2023-01-23 11:42:58 +00:00
Ken Yang
22698e6f3d Merge "WLC: Remove unused wireless_charger policies" 2023-01-13 14:41:31 +00:00
Myles Watson
bc6b0f11da [automerger skipped] TangorPro: Use common sepolicy for bt_device am: bb7ac209e5 -s ours
am skip reason: Merged-In I29ca448d60af312d7dbe241f93592233d16bfcbe with SHA-1 dc359f2178 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20965395

Change-Id: I67d8a0c5fab66b1aba459336f36257842269159f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-12 23:35:11 +00:00
Myles Watson
bb7ac209e5 TangorPro: Use common sepolicy for bt_device
Bug: 205758693
Test: build
Ignore-AOSP-First: Some devices in internal define bt_device
Change-Id: I29ca448d60af312d7dbe241f93592233d16bfcbe
(cherry picked from commit dc359f2178)
Merged-In: I29ca448d60af312d7dbe241f93592233d16bfcbe
2023-01-12 21:30:20 +00:00
Myles Watson
71e0e3a27c Merge "TangorPro: Use common sepolicy for bt_device" 2023-01-12 18:56:04 +00:00
Joshua Mccloskey
9126a81818 [automerger skipped] Merge "Allow SystemUI to access fp hal." into tm-qpr-dev am: def8493a1e am: 48ed8f6f41 -s ours
am skip reason: Merged-In If1a2c7debafad70b6aece6c8ac63852e4b2b6276 with SHA-1 a6ce6beb10 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20918834

Change-Id: Ic5dd96c6821c791a19e3720d2ce74fcc07955d37
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-11 04:30:31 +00:00
Joshua Mccloskey
48ed8f6f41 Merge "Allow SystemUI to access fp hal." into tm-qpr-dev am: def8493a1e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20918834

Change-Id: I2e75924b54089d8568dc6fabc76d201e71fc2925
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-11 04:05:05 +00:00
Joshua Mccloskey
def8493a1e Merge "Allow SystemUI to access fp hal." into tm-qpr-dev 2023-01-11 03:56:47 +00:00
Sandeep Vijayasekar
aa1e6be9eb Merge "Revert^3 "Add SElinux policy for mediashell suffix property"" into tm-qpr-dev am: f7be904b78 am: 358ad366cc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20833725

Change-Id: Ia2582a6f70f7417ec3926e8fdf2abfca79237a89
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-11 02:50:31 +00:00
Sandeep Vijayasekar
358ad366cc Merge "Revert^3 "Add SElinux policy for mediashell suffix property"" into tm-qpr-dev am: f7be904b78
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20833725

Change-Id: Iae6382e639b9d564c2382edd8fbbe06f0eb64fb5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-11 01:52:15 +00:00
Sandeep Vijayasekar
f7be904b78 Merge "Revert^3 "Add SElinux policy for mediashell suffix property"" into tm-qpr-dev 2023-01-11 01:00:04 +00:00
Sandeep Vijayasekar
d83126782f Revert^3 "Add SElinux policy for mediashell suffix property"
Bug: 263263027
Test: mediashell can read this property

Change-Id: Iebf5ced8e5c81777a7e14ed3c6d63aee8ff409b2
2023-01-10 20:32:17 +00:00
Myles Watson
dc359f2178 TangorPro: Use common sepolicy for bt_device
Bug: 205758693
Test: build
Ignore-AOSP-First: Some devices in internal define bt_device
Change-Id: I29ca448d60af312d7dbe241f93592233d16bfcbe
2023-01-10 06:45:19 -08:00
Neha Jain
e08c3c7ccf Merge "Revert "Clean up debug.sf.ignore_hwc_physical_display_orientation"" into tm-qpr-dev am: 23fc1ea69c am: 9d952e006f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20920162

Change-Id: I5bcbaf855233de429c4e0d1552c2af2dfb549e28
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-10 05:59:28 +00:00
Neha Jain
9d952e006f Merge "Revert "Clean up debug.sf.ignore_hwc_physical_display_orientation"" into tm-qpr-dev am: 23fc1ea69c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20920162

Change-Id: Ie771a582af5dbdd9ae9bc3252c4107d2c3924ff9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-10 05:06:20 +00:00
Neha Jain
23fc1ea69c Merge "Revert "Clean up debug.sf.ignore_hwc_physical_display_orientation"" into tm-qpr-dev 2023-01-10 04:23:45 +00:00
Joshua McCloskey
9a9efabc88 Allow SystemUI to access fp hal.
Bug: 261209932
Test: Verified SystemUI can access HAL extension.
Change-Id: If1a2c7debafad70b6aece6c8ac63852e4b2b6276
Merged-In: If1a2c7debafad70b6aece6c8ac63852e4b2b6276
2023-01-10 01:40:02 +00:00
Joshua Mccloskey
0148d999a2 Merge "Allow SystemUI to access fp hal." 2023-01-10 01:38:27 +00:00
Neha Jain
d8820e6b69 Revert "Clean up debug.sf.ignore_hwc_physical_display_orientation"
Revert submission 20881991-clean-up-temp-sysprop

Reason for revert: b/264735287

Reverted changes: /q/submissionid:20881991-clean-up-temp-sysprop

Change-Id: Id102118883fa35e99e16b6cbe26cae9d009fa4f9
2023-01-09 23:10:42 +00:00
Joshua McCloskey
a6ce6beb10 Allow SystemUI to access fp hal.
Bug: 261209932
Test: Verified SystemUI can access HAL extension.
Change-Id: If1a2c7debafad70b6aece6c8ac63852e4b2b6276
2023-01-09 18:03:13 +00:00
Eddie Lan
d0e89db5e7 Merge "fingerprint: allow fps to access sysfs_leds" into tm-qpr-dev am: 08b041020f am: cd365867c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20743208

Change-Id: I197ac3e4d739b1bd716d36e60048d59e90a7cebe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-09 13:14:59 +00:00