Super Liu
6f12e9fcaf
[DO NOT MERGE] Suppress linux denials
...
Bug: 262179373
Test: TreeHugger build.
Change-Id: I40cbdb22976fdb233a3f23868cde688b3b263e13
Signed-off-by: Super Liu <supercjliu@google.com>
2022-12-13 05:58:49 +00:00
Sandeep Vijayasekar
0fe5303cf5
[AudioProxy] SEPolicy for AudioProxy
...
1. MediaShell use its own selinux domain mediashell_app.
2. Allow mediashell_app to access AudioProxy service.
Bug: 197547824
Bug: 254515298
Test: Build and local run
Change-Id: Ia543225e2cbdbfc7296a101372d203274b108af4
2022-11-18 06:45:57 +00:00
eddielan
58e5a0da26
sepolicy: Allow fingerprint to access fwk hwservice
...
11-11 19:57:30.203 464 464 E SELinux : avc:
denied { find } for interface=android.frameworks.sensorservice::ISensorManager
sid=u:r:hal_fingerprint_capacitance:s0 pid=903
scontext=u:r:hal_fingerprint_capacitance:s0
tcontext=u:object_r:fwk_sensor_hwservice:s0
tclass=hwservice_manager permissive=0
Bug: 258783592
Test: Build pass
Change-Id: If2185f8f8a095f68ecb70df82c3253f3d5ee32cc
2022-11-11 20:09:32 +08:00
eddielan
8b78d57efa
Fix FPS servicemanager sepolicy issue
...
10-25 03:25:07.740 429 429 I auditd : type=1400 audit(0.0:4):
avc: denied { call } for comm="servicemanager"
scontext=u:r:servicemanager:s0
tcontext=u:r:hal_fingerprint_capacitance:s0
tclass=binder permissive=0
Bug: 253533883
Test: make selinux_policy -j128 && check log on device
Change-Id: Iea8655fead4398317f0d682e632df8377883d1ea
2022-10-26 14:09:12 +08:00
eddielan
bfba5df7e5
Fix FPS hwservice sepolicy issue
...
avc: denied { find } for interface=com.fingerprints42.extension::IFingerprintEngineering sid=u:r:hal_fingerprint_capacitance:s0 pid=895 scontext=u:r:hal_fingerprint_capacitance:s0 tcontext=u:object_r:default_android_hwservice:s0 tclass=hwservice_manager permissive=0
Bug: 253533883
Test: make selinux_policy -j128
Change-Id: I745e01fa2337843a8f16dadb71a07706a6681284
2022-10-17 15:07:54 +08:00
Ryan Ki Sing Chung
c3ea668daa
Revert "Revert "CastAuth: SELinux rules for the MediaDrm plugin""
...
This reverts commit fae580c5ce
.
Reason for revert: Relanding with fix
Bug: 250900568
Change-Id: I242a8b710d7d44e7390a1d63e39f7ebd7d406a4c
2022-10-05 01:10:00 +00:00
Ryan Ki Sing Chung
fae580c5ce
Revert "CastAuth: SELinux rules for the MediaDrm plugin"
...
This reverts commit c579440a1f
.
Reason for revert: Broke continuous build
Bug: 250900568
Change-Id: I69982e605c645373c38040d4b8527180a4efcecc
2022-10-04 19:19:26 +00:00
Ryan Ki Sing Chung
bf74335744
Merge "CastAuth: SELinux rules for the MediaDrm plugin" into tm-qpr-dev
2022-10-04 16:00:28 +00:00
Ryan Chung
c579440a1f
CastAuth: SELinux rules for the MediaDrm plugin
...
Bug: 229298787
Test: Access Cast creds with MediaDrm plugin
Change-Id: Iff9386dc1223a9f5a088d7ba2d2bc8bd73eebc00
2022-09-29 18:15:15 -07:00
TreeHugger Robot
9ed2e6925e
Merge "Sepolicy for hall effect notification." into tm-qpr-dev
2022-09-29 16:17:51 +00:00
matthuang
938a12a2dc
Sepolicy for hall effect notification.
...
Bug: 241474630
Test: Check selinux log.
Change-Id: Ia4dc303849c98a7c067a2fb0426b7a7b6d3d0301
2022-09-28 10:54:39 +08:00
Darren Hsu
36714befbb
sepolicy: add sysfs_wakeup labels for acpm
...
Bug: 248974063
Test: run vts -m SuspendSepolicyTests
Change-Id: Ie96d282d7a6b61bafff4b66f63ff320d80a3b4f2
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-09-28 09:49:33 +08:00
kuanyuhuang
39b4f3823a
Add binder call for grilservice and hal_bluetooth
...
Gril calls setBluetoothModeBasedTxPowerCap to bluetooh HAL
for SAR feature.
Bug: 244409539
Test: build pass and check grilservice can bind with IBluetoothSar
Change-Id: Ie563cdbe126371d50bb996a0d4d10fd5f52e8d6f
2022-09-21 08:47:27 +00:00
TreeHugger Robot
5c4efb3f22
Merge "RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth" into tm-qpr-dev
2022-09-16 03:15:08 +00:00
Darren Hsu
ccd9f49f2b
RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth
...
avc: denied { call } for comm="bluetooth@1.1-s"
scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=0
avc: denied { call } for scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=1
avc: denied { read } for comm="android.hardwar"
name="u:object_r:boot_status_prop:s0" dev="tmpfs" ino=109
scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:object_r:boot_status_prop:s0 tclass=file permissive=0
Bug: 215487801
Test: captured bugreport and didn't see powerstats avc denials
Change-Id: I34840b7f8031084270477635c2bde5d702a0507c
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-09-14 10:44:38 +00:00
TreeHugger Robot
30226d2510
Merge "Migrate LED sepolicy used by dumpstate to gs201" into tm-qpr-dev
2022-09-14 02:59:20 +00:00
Darren Hsu
f3b6df78da
sepolicy: add missing sysfs_wakeup labels
...
Bug: 245434941
Test: run vts -m SuspendSepolicyTests
Change-Id: I4873bbba4e6e276722037680056d4e003f8a0da9
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-09-12 16:04:21 +08:00
Chungjui Fan
f7be842d13
Migrate LED sepolicy used by dumpstate to gs201
...
Bug: 242300919
Change-Id: I1b7f4be6670ef645df932207ece4746fcedb9e39
2022-09-08 09:12:30 +00:00
Badhri Jagan Sridharan
aebc367bfa
Port pogo sepolicy for target
...
This is port of <0fe78c45624ac71c303f28d214d04f5382744110>
and <b85ae23600ba9db57d9ea4343769f928e5dc58dd> from previous
target.
Bug: 242751127
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
Change-Id: I20205c63dc226c6863215b29e11b8c4b626b6010
2022-08-24 21:05:19 +00:00
Super Liu
834dc1b842
Allow vendor_init to read gesture_prop.
...
Logs:
07-15 04:04:39.052 1 1 I auditd : type=1107 audit(0.0:4): uid=0
auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { read
} for property=persist.sys.tap_gesture pid=0 uid=0 gid=0
scontext=u:r:vendor_init:s0 tcontext=u:object_r:gesture_prop:s0
tclass=file permissive=0'
07-15 04:04:39.087 1 1 E init :
/vendor/etc/init/hw/init.tangorpro.rc: 48: ParseTriggers() failed:
unexported property trigger found: persist.sys.tap_gesture
Test: check Treehugger build for sepolicy.
Bug: 201610482
Signed-off-by: Super Liu <supercjliu@google.com>
Change-Id: I2072ce786bf9f3590487b1807672e993764cc6f0
2022-07-18 10:26:10 +08:00
Adam Shih
5cc0905307
Update SELinux error
...
Test: checkSensors
Bug: 239115418
Test: checkLockScreen
Bug: 239115418
Test: scanBugreport
Bug: 239115418
Change-Id: I36ba54820939f24d8f5293e1ba252fd0f6a9e970
2022-07-15 10:23:55 +08:00
Adam Shih
3c989e7f01
Setup tracking folder
...
Bug: 234547283
Test: build pass
Change-Id: I30b74797c2556fcf19636ed2cea401d58f85cbc2
2022-07-14 13:02:07 +08:00
TreeHugger Robot
32185368bd
Merge "Add sepolicy to support lights HAL" into tm-qpr-dev
2022-07-06 04:46:25 +00:00
horngchuang
ae3a1d0737
sepolicy: Correct the camera sepolicy for T6Pro
...
Bug: 233171614
Test: local build Pass, boot to Home
Change-Id: Id0af2fb48e4e79e7900a9e3fb33224e5f8f52bc4
2022-06-29 07:46:20 +00:00
Chungjui Fan
24d426e003
Add sepolicy to support lights HAL
...
Bug: 230288032
Test: atest VtsHalLightTargetTest
Change-Id: I4fd54341d4ef6a91cb84f0881725985f05abf2d5
2022-06-29 14:33:33 +08:00
eddielan
904d1b1e5b
fingerprint: Add new lable for capacitance fingerprint
...
u:object_r:hal_fingerprint_capacitance_exec:s0
android.hardware.biometrics.fingerprint-service.fpc42
Bug: 232500959
Test: make selinux_policy -j128
Test: Check binary sepolicy on device
Change-Id: I565030896b6e3ce2d0eec380415148ebfb623469
2022-06-28 18:51:16 +08:00
Jack Wu
07b7d71e5b
sepolicy: allows dock power supply permission
...
Bug: 232723240
Test: can dump dock power supply in dumpstate
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I955d72393bbe3413e56e6931a35e8cfa046001be
Signed-off-by: Jonglin Lee <jonglin@google.com>
2022-06-22 17:05:36 -07:00
Himanshu Rawat
37bb48c05e
T6Pro Bluetooth bringup
...
SE policy update for Synaptics BT HAL
Bug: 224685891
Test: Manual
Change-Id: Ib80bece50509d01828b3f6e8c3794ee3d3ed1e56
2022-06-16 08:42:22 +00:00
Super Liu
2d23765f0b
sepolicy: allow system_server to read sysfs_touch.
...
Bug: 231385413
Test: presubmit pass.
Signed-off-by: Super Liu <supercjliu@google.com>
Change-Id: Ica2e457d951e3de28fa7271eef03437c3203a373
2022-05-04 13:27:00 +08:00
Super Liu
b72de76e7b
Initial touch sepolicy.
...
Bug: 193467774
Test: check touch sepolicy attribute from TreeHugger build rom.
Signed-off-by: Super Liu <supercjliu@google.com>
Change-Id: Ie3ccb47133dd9812ea91df59e1f9124bea1867c6
2022-05-04 11:07:08 +08:00
Roger Liao
aa2098ee18
Initial device tangorpro sepolicy
...
Bug: 220073297
Change-Id: Icbae09127d46c74aaa49bf417be263e62ce0c0ca
2022-03-09 15:50:55 +08:00
Bill Rassieur
eeb18c67fd
Initial empty repository
2022-02-22 14:32:34 -08:00