Commit graph

32 commits

Author SHA1 Message Date
Super Liu
6f12e9fcaf [DO NOT MERGE] Suppress linux denials
Bug: 262179373
Test: TreeHugger build.
Change-Id: I40cbdb22976fdb233a3f23868cde688b3b263e13
Signed-off-by: Super Liu <supercjliu@google.com>
2022-12-13 05:58:49 +00:00
Sandeep Vijayasekar
0fe5303cf5 [AudioProxy] SEPolicy for AudioProxy
1. MediaShell use its own selinux domain mediashell_app.
2. Allow mediashell_app to access AudioProxy service.

Bug: 197547824
Bug: 254515298
Test: Build and local run
Change-Id: Ia543225e2cbdbfc7296a101372d203274b108af4
2022-11-18 06:45:57 +00:00
eddielan
58e5a0da26 sepolicy: Allow fingerprint to access fwk hwservice
11-11 19:57:30.203   464   464 E SELinux : avc:
denied  { find } for interface=android.frameworks.sensorservice::ISensorManager
sid=u:r:hal_fingerprint_capacitance:s0 pid=903
scontext=u:r:hal_fingerprint_capacitance:s0
tcontext=u:object_r:fwk_sensor_hwservice:s0
tclass=hwservice_manager permissive=0

Bug: 258783592
Test: Build pass
Change-Id: If2185f8f8a095f68ecb70df82c3253f3d5ee32cc
2022-11-11 20:09:32 +08:00
eddielan
8b78d57efa Fix FPS servicemanager sepolicy issue
10-25 03:25:07.740   429   429 I auditd  : type=1400 audit(0.0:4):
avc: denied { call } for comm="servicemanager"
scontext=u:r:servicemanager:s0
tcontext=u:r:hal_fingerprint_capacitance:s0
tclass=binder permissive=0

Bug: 253533883
Test: make selinux_policy -j128 && check log on device
Change-Id: Iea8655fead4398317f0d682e632df8377883d1ea
2022-10-26 14:09:12 +08:00
eddielan
bfba5df7e5 Fix FPS hwservice sepolicy issue
avc:  denied  { find } for interface=com.fingerprints42.extension::IFingerprintEngineering sid=u:r:hal_fingerprint_capacitance:s0 pid=895 scontext=u:r:hal_fingerprint_capacitance:s0 tcontext=u:object_r:default_android_hwservice:s0 tclass=hwservice_manager permissive=0

Bug: 253533883
Test: make selinux_policy -j128
Change-Id: I745e01fa2337843a8f16dadb71a07706a6681284
2022-10-17 15:07:54 +08:00
Ryan Ki Sing Chung
c3ea668daa Revert "Revert "CastAuth: SELinux rules for the MediaDrm plugin""
This reverts commit fae580c5ce.

Reason for revert: Relanding with fix

Bug: 250900568
Change-Id: I242a8b710d7d44e7390a1d63e39f7ebd7d406a4c
2022-10-05 01:10:00 +00:00
Ryan Ki Sing Chung
fae580c5ce Revert "CastAuth: SELinux rules for the MediaDrm plugin"
This reverts commit c579440a1f.

Reason for revert: Broke continuous build
Bug: 250900568

Change-Id: I69982e605c645373c38040d4b8527180a4efcecc
2022-10-04 19:19:26 +00:00
Ryan Ki Sing Chung
bf74335744 Merge "CastAuth: SELinux rules for the MediaDrm plugin" into tm-qpr-dev 2022-10-04 16:00:28 +00:00
Ryan Chung
c579440a1f CastAuth: SELinux rules for the MediaDrm plugin
Bug: 229298787
Test: Access Cast creds with MediaDrm plugin
Change-Id: Iff9386dc1223a9f5a088d7ba2d2bc8bd73eebc00
2022-09-29 18:15:15 -07:00
TreeHugger Robot
9ed2e6925e Merge "Sepolicy for hall effect notification." into tm-qpr-dev 2022-09-29 16:17:51 +00:00
matthuang
938a12a2dc Sepolicy for hall effect notification.
Bug: 241474630
Test: Check selinux log.
Change-Id: Ia4dc303849c98a7c067a2fb0426b7a7b6d3d0301
2022-09-28 10:54:39 +08:00
Darren Hsu
36714befbb sepolicy: add sysfs_wakeup labels for acpm
Bug: 248974063
Test: run vts -m SuspendSepolicyTests
Change-Id: Ie96d282d7a6b61bafff4b66f63ff320d80a3b4f2
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-09-28 09:49:33 +08:00
kuanyuhuang
39b4f3823a Add binder call for grilservice and hal_bluetooth
Gril calls setBluetoothModeBasedTxPowerCap to bluetooh HAL
for SAR feature.

Bug: 244409539
Test: build pass and check grilservice can bind with IBluetoothSar
Change-Id: Ie563cdbe126371d50bb996a0d4d10fd5f52e8d6f
2022-09-21 08:47:27 +00:00
TreeHugger Robot
5c4efb3f22 Merge "RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth" into tm-qpr-dev 2022-09-16 03:15:08 +00:00
Darren Hsu
ccd9f49f2b RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth
avc: denied { call } for comm="bluetooth@1.1-s"
scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=0

avc: denied { call } for scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=1

avc: denied { read } for comm="android.hardwar"
name="u:object_r:boot_status_prop:s0" dev="tmpfs" ino=109
scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:object_r:boot_status_prop:s0 tclass=file permissive=0

Bug: 215487801
Test: captured bugreport and didn't see powerstats avc denials
Change-Id: I34840b7f8031084270477635c2bde5d702a0507c
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-09-14 10:44:38 +00:00
TreeHugger Robot
30226d2510 Merge "Migrate LED sepolicy used by dumpstate to gs201" into tm-qpr-dev 2022-09-14 02:59:20 +00:00
Darren Hsu
f3b6df78da sepolicy: add missing sysfs_wakeup labels
Bug: 245434941
Test: run vts -m SuspendSepolicyTests
Change-Id: I4873bbba4e6e276722037680056d4e003f8a0da9
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-09-12 16:04:21 +08:00
Chungjui Fan
f7be842d13 Migrate LED sepolicy used by dumpstate to gs201
Bug: 242300919
Change-Id: I1b7f4be6670ef645df932207ece4746fcedb9e39
2022-09-08 09:12:30 +00:00
Badhri Jagan Sridharan
aebc367bfa Port pogo sepolicy for target
This is port of <0fe78c45624ac71c303f28d214d04f5382744110>
and <b85ae23600ba9db57d9ea4343769f928e5dc58dd> from previous
target.

Bug: 242751127
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
Change-Id: I20205c63dc226c6863215b29e11b8c4b626b6010
2022-08-24 21:05:19 +00:00
Super Liu
834dc1b842 Allow vendor_init to read gesture_prop.
Logs:
07-15 04:04:39.052     1     1 I auditd  : type=1107 audit(0.0:4): uid=0
auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { read
} for property=persist.sys.tap_gesture pid=0 uid=0 gid=0
scontext=u:r:vendor_init:s0 tcontext=u:object_r:gesture_prop:s0
tclass=file permissive=0'
07-15 04:04:39.087     1     1 E init    :
/vendor/etc/init/hw/init.tangorpro.rc: 48: ParseTriggers() failed:
unexported property trigger found: persist.sys.tap_gesture

Test: check Treehugger build for sepolicy.
Bug: 201610482
Signed-off-by: Super Liu <supercjliu@google.com>
Change-Id: I2072ce786bf9f3590487b1807672e993764cc6f0
2022-07-18 10:26:10 +08:00
Adam Shih
5cc0905307 Update SELinux error
Test: checkSensors
Bug: 239115418
Test: checkLockScreen
Bug: 239115418
Test: scanBugreport
Bug: 239115418
Change-Id: I36ba54820939f24d8f5293e1ba252fd0f6a9e970
2022-07-15 10:23:55 +08:00
Adam Shih
3c989e7f01 Setup tracking folder
Bug: 234547283
Test: build pass
Change-Id: I30b74797c2556fcf19636ed2cea401d58f85cbc2
2022-07-14 13:02:07 +08:00
TreeHugger Robot
32185368bd Merge "Add sepolicy to support lights HAL" into tm-qpr-dev 2022-07-06 04:46:25 +00:00
horngchuang
ae3a1d0737 sepolicy: Correct the camera sepolicy for T6Pro
Bug: 233171614
Test: local build Pass, boot to Home
Change-Id: Id0af2fb48e4e79e7900a9e3fb33224e5f8f52bc4
2022-06-29 07:46:20 +00:00
Chungjui Fan
24d426e003 Add sepolicy to support lights HAL
Bug: 230288032
Test: atest VtsHalLightTargetTest
Change-Id: I4fd54341d4ef6a91cb84f0881725985f05abf2d5
2022-06-29 14:33:33 +08:00
eddielan
904d1b1e5b fingerprint: Add new lable for capacitance fingerprint
u:object_r:hal_fingerprint_capacitance_exec:s0
android.hardware.biometrics.fingerprint-service.fpc42

Bug: 232500959
Test: make selinux_policy -j128
Test: Check binary sepolicy on device
Change-Id: I565030896b6e3ce2d0eec380415148ebfb623469
2022-06-28 18:51:16 +08:00
Jack Wu
07b7d71e5b sepolicy: allows dock power supply permission
Bug: 232723240
Test: can dump dock power supply in dumpstate
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I955d72393bbe3413e56e6931a35e8cfa046001be
Signed-off-by: Jonglin Lee <jonglin@google.com>
2022-06-22 17:05:36 -07:00
Himanshu Rawat
37bb48c05e T6Pro Bluetooth bringup
SE policy update for Synaptics BT HAL

Bug: 224685891
Test: Manual
Change-Id: Ib80bece50509d01828b3f6e8c3794ee3d3ed1e56
2022-06-16 08:42:22 +00:00
Super Liu
2d23765f0b sepolicy: allow system_server to read sysfs_touch.
Bug: 231385413
Test: presubmit pass.
Signed-off-by: Super Liu <supercjliu@google.com>
Change-Id: Ica2e457d951e3de28fa7271eef03437c3203a373
2022-05-04 13:27:00 +08:00
Super Liu
b72de76e7b Initial touch sepolicy.
Bug: 193467774
Test: check touch sepolicy attribute from TreeHugger build rom.
Signed-off-by: Super Liu <supercjliu@google.com>
Change-Id: Ie3ccb47133dd9812ea91df59e1f9124bea1867c6
2022-05-04 11:07:08 +08:00
Roger Liao
aa2098ee18 Initial device tangorpro sepolicy
Bug: 220073297
Change-Id: Icbae09127d46c74aaa49bf417be263e62ce0c0ca
2022-03-09 15:50:55 +08:00
Bill Rassieur
eeb18c67fd Initial empty repository 2022-02-22 14:32:34 -08:00