Darren Hsu
6f45c41a76
sepolicy: allow binder call for hal_power_stats and hal_bluetooth
...
avc: denied { call } for comm="bluetooth@1.1-s"
scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=0
avc: denied { call } for scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=1
avc: denied { read } for comm="android.hardwar"
name="u:object_r:boot_status_prop:s0" dev="tmpfs" ino=109
scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:object_r:boot_status_prop:s0 tclass=file permissive=0
Bug: 215487801 , 262386677
Test: captured bugreport and didn't see powerstats avc denials
Change-Id: I34840b7f8031084270477635c2bde5d702a0507c
Signed-off-by: Darren Hsu <darrenhsu@google.com>
(cherry picked from commit ccd9f49f2b
)
2022-12-14 07:23:00 +00:00
Super Liu
7e82edd07a
[automerger skipped] [DO NOT MERGE] Suppress linux denials am: 6f12e9fcaf
am: 00462a693c
-s ours
...
am skip reason: subject contains skip directive
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20713030
Change-Id: I3fce041816bcd64a56adf2732ca8e2ab178d0dcf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-13 08:59:24 +00:00
Super Liu
00462a693c
[DO NOT MERGE] Suppress linux denials am: 6f12e9fcaf
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20713030
Change-Id: Ib1725c3e5dec65be9f50342228ec4e3d901c1b35
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-13 08:21:20 +00:00
Super Liu
6f12e9fcaf
[DO NOT MERGE] Suppress linux denials
...
Bug: 262179373
Test: TreeHugger build.
Change-Id: I40cbdb22976fdb233a3f23868cde688b3b263e13
Signed-off-by: Super Liu <supercjliu@google.com>
2022-12-13 05:58:49 +00:00
Mariia Sandrikova
11808aa59b
[1/2][Pro] Set orientation for boot animation and default display rotation.
...
Introduce ro.bootanim.set_orientation_<display_id> sysprop that allows to change the default display rotation value and boot animation orientation to be different from the natural display orientation
Context: go/tangor-natural-orientation
Bug: 260627934
Test: manual test with all 4 values
Change-Id: I14461e143c37440c4a655a1b175add86b60233b2
2022-12-11 13:55:43 +00:00
Mariia Sandrikova
965a3fb846
[5/n][Pro] Change natural device orientation to portrait.
...
Introduce debug.sf.ignore_hwc_physical_display_orientation to allow ignoring physical orientation provided through hwc API in favour of 'ro.surface_flinger.primary_display_orientation' to avoid breaking the build even for a short period of time since there is no direct way to synchronize landing of this CLs chain with pa/2342172
Test: manual
Bug: 246793311
Change-Id: Iffbdc13149f517f0b59b313f1fe1f7900cc8597e
2022-12-07 20:10:00 +00:00
Sandeep Vijayasekar
9a42f28172
[AudioProxy] SEPolicy for AudioProxy am: 0fe5303cf5
am: 4851980569
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20238256
Change-Id: Icc2362b6ebaa9259583f75dd8677c77721f6c45e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-07 19:22:45 +00:00
Sandeep Vijayasekar
4851980569
[AudioProxy] SEPolicy for AudioProxy am: 0fe5303cf5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20238256
Change-Id: Ided84755137fa4daa12b3c965e92b15b618128aa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-07 18:58:42 +00:00
Adam Shih
483f42925d
align sysfs_touch_gti type
...
Bug: 256521567
Test: build pass
Change-Id: I2452e2551ea47a3bbf1c4b084259e73c37e02f04
2022-12-06 12:01:08 +08:00
Adam Shih
d5db8fa0e2
rename sysfs_touch
...
Bug: 256521567
Test: adb bugreport
Change-Id: Ic10339198209b7e1c8874610f69c515a95d6e7da
2022-12-02 13:08:28 +08:00
Adam Shih
33c84b77d2
fix declaration missing error
...
Bug: 260175281
Test: build pass
Change-Id: Ibe07a278639afa3d0783785374502607ba81eb6e
2022-11-25 14:09:21 +08:00
Adam Shih
e1e330d587
remove obsolete entry
...
Bug: 260175281
Test: build pass
Change-Id: I0f6d070416b5fac8711434b84fc9c552b8a6a64d
2022-11-24 10:55:04 +08:00
Sandeep Vijayasekar
0fe5303cf5
[AudioProxy] SEPolicy for AudioProxy
...
1. MediaShell use its own selinux domain mediashell_app.
2. Allow mediashell_app to access AudioProxy service.
Bug: 197547824
Bug: 254515298
Test: Build and local run
Change-Id: Ia543225e2cbdbfc7296a101372d203274b108af4
2022-11-18 06:45:57 +00:00
eddielan
846a1546df
sepolicy: Allow fingerprint to access fwk hwservice am: 58e5a0da26
am: a0a9c3e30f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20450227
Change-Id: Ib4308de034b18b5beab7a9d37e00d446d4240ef1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-17 04:24:06 +00:00
eddielan
a0a9c3e30f
sepolicy: Allow fingerprint to access fwk hwservice am: 58e5a0da26
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20450227
Change-Id: I916d728f43839266b5619195e613c6034d320e34
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-17 03:29:37 +00:00
eddielan
58e5a0da26
sepolicy: Allow fingerprint to access fwk hwservice
...
11-11 19:57:30.203 464 464 E SELinux : avc:
denied { find } for interface=android.frameworks.sensorservice::ISensorManager
sid=u:r:hal_fingerprint_capacitance:s0 pid=903
scontext=u:r:hal_fingerprint_capacitance:s0
tcontext=u:object_r:fwk_sensor_hwservice:s0
tclass=hwservice_manager permissive=0
Bug: 258783592
Test: Build pass
Change-Id: If2185f8f8a095f68ecb70df82c3253f3d5ee32cc
2022-11-11 20:09:32 +08:00
eddielan
874e238442
Fix FPS servicemanager sepolicy issue am: 8b78d57efa
am: f464f3f2c0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20278507
Change-Id: I92a533dc2aefe4d6eeece43c3985320c9bfb2661
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-27 03:48:46 +00:00
eddielan
f464f3f2c0
Fix FPS servicemanager sepolicy issue am: 8b78d57efa
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20278507
Change-Id: If565ff408be265d856dfc5193112ab8a9d030a66
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-27 03:12:02 +00:00
eddielan
8b78d57efa
Fix FPS servicemanager sepolicy issue
...
10-25 03:25:07.740 429 429 I auditd : type=1400 audit(0.0:4):
avc: denied { call } for comm="servicemanager"
scontext=u:r:servicemanager:s0
tcontext=u:r:hal_fingerprint_capacitance:s0
tclass=binder permissive=0
Bug: 253533883
Test: make selinux_policy -j128 && check log on device
Change-Id: Iea8655fead4398317f0d682e632df8377883d1ea
2022-10-26 14:09:12 +08:00
eddielan
ba38cbe06d
Fix FPS hwservice sepolicy issue am: bfba5df7e5
am: d115259d9e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20207303
Change-Id: I0fcaa595a18089800256b6ac489d6048a5e9e2fb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-18 03:47:48 +00:00
eddielan
d115259d9e
Fix FPS hwservice sepolicy issue am: bfba5df7e5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20207303
Change-Id: I361bbefb1d4f7bfc46c3f61471cd500db5370543
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-18 03:15:38 +00:00
eddielan
bfba5df7e5
Fix FPS hwservice sepolicy issue
...
avc: denied { find } for interface=com.fingerprints42.extension::IFingerprintEngineering sid=u:r:hal_fingerprint_capacitance:s0 pid=895 scontext=u:r:hal_fingerprint_capacitance:s0 tcontext=u:object_r:default_android_hwservice:s0 tclass=hwservice_manager permissive=0
Bug: 253533883
Test: make selinux_policy -j128
Change-Id: I745e01fa2337843a8f16dadb71a07706a6681284
2022-10-17 15:07:54 +08:00
Ryan Ki Sing Chung
48d74244ca
Revert "Revert "CastAuth: SELinux rules for the MediaDrm plugin"" am: c3ea668daa
am: 5e4bde23de
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20116451
Change-Id: I18383b804b1c3206111fdffa0c7caf29309f5a0a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-05 04:38:36 +00:00
Ryan Ki Sing Chung
5e4bde23de
Revert "Revert "CastAuth: SELinux rules for the MediaDrm plugin"" am: c3ea668daa
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20116451
Change-Id: I4aa02c9c5c3333c23cd6ed4fb052785a2fbfde9c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-05 04:07:02 +00:00
Ryan Ki Sing Chung
68f76df95e
Revert "CastAuth: SELinux rules for the MediaDrm plugin" am: fae580c5ce
am: abd3be9d76
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20110003
Change-Id: I0ad5e50db923d6125e8557f640a85808bd2b5644
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-05 02:41:59 +00:00
Ryan Ki Sing Chung
abd3be9d76
Revert "CastAuth: SELinux rules for the MediaDrm plugin" am: fae580c5ce
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20110003
Change-Id: I7b35558ccda6c8bc1b54de48664d0571df4d0d58
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-05 02:10:48 +00:00
Ryan Ki Sing Chung
c3ea668daa
Revert "Revert "CastAuth: SELinux rules for the MediaDrm plugin""
...
This reverts commit fae580c5ce
.
Reason for revert: Relanding with fix
Bug: 250900568
Change-Id: I242a8b710d7d44e7390a1d63e39f7ebd7d406a4c
2022-10-05 01:10:00 +00:00
Ryan Ki Sing Chung
fae580c5ce
Revert "CastAuth: SELinux rules for the MediaDrm plugin"
...
This reverts commit c579440a1f
.
Reason for revert: Broke continuous build
Bug: 250900568
Change-Id: I69982e605c645373c38040d4b8527180a4efcecc
2022-10-04 19:19:26 +00:00
Ryan Ki Sing Chung
62a04bd5d1
Merge "CastAuth: SELinux rules for the MediaDrm plugin" into tm-qpr-dev am: bf74335744
am: 5d7e5c4958
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20068298
Change-Id: I04f822bc4483599375e8d68c1242dc67f265b495
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-04 17:38:52 +00:00
Ryan Ki Sing Chung
5d7e5c4958
Merge "CastAuth: SELinux rules for the MediaDrm plugin" into tm-qpr-dev am: bf74335744
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20068298
Change-Id: I4134f4c6034bbeb5c18c929bf7a2d475691457e8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-04 17:04:26 +00:00
Ryan Ki Sing Chung
bf74335744
Merge "CastAuth: SELinux rules for the MediaDrm plugin" into tm-qpr-dev
2022-10-04 16:00:28 +00:00
Ryan Chung
c579440a1f
CastAuth: SELinux rules for the MediaDrm plugin
...
Bug: 229298787
Test: Access Cast creds with MediaDrm plugin
Change-Id: Iff9386dc1223a9f5a088d7ba2d2bc8bd73eebc00
2022-09-29 18:15:15 -07:00
TreeHugger Robot
a7dc42a1de
Merge "Sepolicy for hall effect notification." into tm-qpr-dev am: 9ed2e6925e
am: 47d4948fd9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20060645
Change-Id: Iba57e60d01874c335e23fcd24bbd9adc4809db49
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-29 17:14:22 +00:00
TreeHugger Robot
47d4948fd9
Merge "Sepolicy for hall effect notification." into tm-qpr-dev am: 9ed2e6925e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20060645
Change-Id: Iae8cb2bf76a38385f44f6cd46f744dd76c996e9b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-29 16:41:51 +00:00
TreeHugger Robot
9ed2e6925e
Merge "Sepolicy for hall effect notification." into tm-qpr-dev
2022-09-29 16:17:51 +00:00
Darren Hsu
e6e557f360
sepolicy: add sysfs_wakeup labels for acpm am: 36714befbb
am: bf82087232
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20070665
Change-Id: I66f48db7ac9e29fb1d8dde70879412111ac28dd8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-29 04:05:09 +00:00
Darren Hsu
bf82087232
sepolicy: add sysfs_wakeup labels for acpm am: 36714befbb
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/20070665
Change-Id: I716180e133650a3e605ccd3265969d721106ea0d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-29 03:35:17 +00:00
matthuang
938a12a2dc
Sepolicy for hall effect notification.
...
Bug: 241474630
Test: Check selinux log.
Change-Id: Ia4dc303849c98a7c067a2fb0426b7a7b6d3d0301
2022-09-28 10:54:39 +08:00
Darren Hsu
36714befbb
sepolicy: add sysfs_wakeup labels for acpm
...
Bug: 248974063
Test: run vts -m SuspendSepolicyTests
Change-Id: Ie96d282d7a6b61bafff4b66f63ff320d80a3b4f2
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-09-28 09:49:33 +08:00
kuanyuhuang
9db85e1f94
Add binder call for grilservice and hal_bluetooth am: 39b4f3823a
am: 67f5891c35
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19998306
Change-Id: Ic92294881b2d9d8e65a455fe009e11aeb6e511bd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-22 03:44:08 +00:00
kuanyuhuang
67f5891c35
Add binder call for grilservice and hal_bluetooth am: 39b4f3823a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19998306
Change-Id: I1d23ccf34b4d5c2052c1cc5803c358b6471fe81c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-22 02:45:36 +00:00
kuanyuhuang
39b4f3823a
Add binder call for grilservice and hal_bluetooth
...
Gril calls setBluetoothModeBasedTxPowerCap to bluetooh HAL
for SAR feature.
Bug: 244409539
Test: build pass and check grilservice can bind with IBluetoothSar
Change-Id: Ie563cdbe126371d50bb996a0d4d10fd5f52e8d6f
2022-09-21 08:47:27 +00:00
TreeHugger Robot
8d49353027
[automerger skipped] Merge "RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth" into tm-qpr-dev am: 5c4efb3f22
am: 3625437c32
-s ours
...
am skip reason: subject contains skip directive
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19928508
Change-Id: If14843beee61cb46a6030cfa5af783785e82da11
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 04:54:34 +00:00
Darren Hsu
be1bfc4e15
[automerger skipped] RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth am: ccd9f49f2b
am: 0696f7c503
-s ours
...
am skip reason: subject contains skip directive
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19928508
Change-Id: Ied0b940e5c29d05a7ccc15fe72bd266a41ce7180
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 04:54:31 +00:00
TreeHugger Robot
3625437c32
Merge "RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth" into tm-qpr-dev am: 5c4efb3f22
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19928508
Change-Id: Iaf6e89850a393ac8c6c638854f83000e343bf0e3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 04:10:27 +00:00
Darren Hsu
0696f7c503
RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth am: ccd9f49f2b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19928508
Change-Id: I8a7c73669d875d2e2ff4cf090307a20fb1022345
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 04:10:25 +00:00
TreeHugger Robot
5c4efb3f22
Merge "RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth" into tm-qpr-dev
2022-09-16 03:15:08 +00:00
Darren Hsu
ccd9f49f2b
RESTRICT AUTOMERGE sepolicy: allow binder call for hal_power_stats and hal_bluetooth
...
avc: denied { call } for comm="bluetooth@1.1-s"
scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=0
avc: denied { call } for scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=1
avc: denied { read } for comm="android.hardwar"
name="u:object_r:boot_status_prop:s0" dev="tmpfs" ino=109
scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:object_r:boot_status_prop:s0 tclass=file permissive=0
Bug: 215487801
Test: captured bugreport and didn't see powerstats avc denials
Change-Id: I34840b7f8031084270477635c2bde5d702a0507c
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-09-14 10:44:38 +00:00
TreeHugger Robot
da66cb2254
Merge "Migrate LED sepolicy used by dumpstate to gs201" into tm-qpr-dev am: 30226d2510
am: 5c72944799
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19894290
Change-Id: Idcdb2dd357c31fae74da9fb2a91188dd8314e956
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-14 04:03:34 +00:00
TreeHugger Robot
5c72944799
Merge "Migrate LED sepolicy used by dumpstate to gs201" into tm-qpr-dev am: 30226d2510
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/19894290
Change-Id: Iff61f9a3261d931609797e3c61ea7d0533d7c061
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-14 03:34:32 +00:00