Commit graph

35 commits

Author SHA1 Message Date
Android Build Coastguard Worker
b8f0730d14 Snap for 12319578 from 83232d7bdf to 25D4-release
Change-Id: Ic44d926e35545ce279a73bcf82359f5c8ec72b81
2024-09-04 23:04:54 +00:00
Wilson Sung
83232d7bdf Update SELinux error
Test: scanBugreport
Bug: 364446770
Test: scanAvcDeniedLogRightAfterReboot
Bug: 364446680
Flag: EXEMPT sepolicy bugFix
Change-Id: Ie75428e754dab7e6f75e6a0e71b5036903f48424
2024-09-04 08:53:41 +00:00
Android Build Coastguard Worker
6dc61d9bfc Snap for 12298409 from b0fc4e7390 to 25D4-release
Change-Id: Ia8607eb837e31ce372d9e34aa008bcc57de7d8fa
2024-08-30 01:03:21 +00:00
Frank Yu
b0fc4e7390 Move hal_radio_ext_service related policy to gs-common.
Bug: 361210953
Flag: EXEMPT sepolicy refactor
Change-Id: Ife1f85269e086cba19c87ca1da20a219f68ada2c
Test: Verify with test ROM
2024-08-28 11:56:46 +00:00
Android Build Coastguard Worker
0412b0e3f8 Snap for 12228752 from 86744204b3 to 25D4-release
Change-Id: Ia95a6c0393026c773cabff63b84b33c21aa260e2
2024-08-14 23:04:00 +00:00
Android Build Coastguard Worker
f7dd272fa5 Snap for 12223800 from 94f5344dbf to 25D4-release
Change-Id: I9eb1ce6117b0a0e53e2c4b0b16139f37d77a8504
2024-08-13 23:03:55 +00:00
Tim Lin
86744204b3 Remove obsolete entries
Fixed by ag/28780271

Bug: 359428163
Change-Id: I6282035e5d2624220b4ffde7bf674aeca7cdc961
Test: SELinuxUncheckedDenialBootTest
Flag: EXEMPT bugfix
2024-08-13 14:28:01 +00:00
Wilson Sung
94f5344dbf Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 359428163
Flag: EXEMPT bugFix
Change-Id: I92f34e1b9794ed5eace45410c265b8c4d3934704
2024-08-13 08:52:57 +00:00
Android Build Coastguard Worker
f38aaeeac7 Snap for 12037182 from 81f405049f to 25D4-release
Change-Id: I0fd63076ff2b4dbe105c05c61d02510c8ba86937
2024-07-01 23:09:31 +00:00
Frank Yu
81f405049f Update sepolicy for grilservie_app to call twoshay service.
Related avc error log:
auditd  : type=1400 audit(0.0:7): avc:  denied  { call } for  comm="pool-2-thread-1" scontext=u:r:grilservice_app:s0:c248,c256,c512,c768 tcontext=u:r:twoshay:s0 tclass=binder permissive=0 app=com.google.android.grilservice
Bug: 347853101
Test: Manual test and tested v2/pixel-health-guard/device-boot-health-check-extra on abtd. No error log after this update.

Change-Id: I5083e0ce549fd98d3d12f5005c02abe0fd988208
2024-06-28 06:48:32 +00:00
Android Build Coastguard Worker
708c952cd2 Snap for 11988867 from b45ba6253a to 25D4-release
Change-Id: Ia2bb90b13babd8da49284a5a401ecd59de922c3a
2024-06-19 04:16:32 +00:00
Sergey Volk
b45ba6253a tegu: Add sepolicy for drmdp wakeup node
DisplayPort driver has recently added a wakeup node init code, so we
need to add it to sepolicy.

Bug: 347852488
Test: None
Flag: NONE (follow up fix for merged non-flagged CL pa/2839256)
Change-Id: I7f0cd7a80ab67f14fe1551434709e4f19983197e
2024-06-18 21:05:52 +00:00
Android Build Coastguard Worker
03a61537ec Snap for 11962436 from 0429564c5a to 25D4-release
Change-Id: If035a3908b689d383d5b136815c77645baee9c54
2024-06-13 01:03:55 +00:00
Treehugger Robot
0429564c5a Merge "selinux: label sysfs_wlc with static i2c" into main 2024-06-12 17:35:22 +00:00
YiKai Peng
546fb5912e selinux: label sysfs_wlc with static i2c
Bug: 346493425
Test: v2/pixel-health-guard/device-boot-health-check-extra
Change-Id: I031516772e8c8c80f00d1afa7c6565fc917cb5f0
Signed-off-by: YiKai Peng <kenpeng@google.com>
2024-06-12 06:15:23 +00:00
Android Build Coastguard Worker
f6d1804355 Snap for 11931036 from 281f3af6a6 to 25D4-release
Change-Id: Ia861bbab6569df711cdd697c20181d52af213ce2
2024-06-05 23:08:44 +00:00
Frank Yu
281f3af6a6 Update sepolicy for radioext AIDL service.
avc logs for each rule:

SELinux : avc:  denied  { find } for pid=1965 uid=10238 name=vendor.google.radio_ext.IRadioExt/default scontext=u:r:grilservice_app:s0:c238,c256,c512,c768 tcontext=u:object_r:default_android_service:s0 tclass=service_manager permissive=0

auditd  : type=1400 audit(0.0:12): avc:  denied  { call } for  comm="oid.grilservice" scontext=u:r:grilservice_app:s0:c238,c256,c512,c768 tcontext=u:r:hal_radio_ext:s0 tclass=binder permissive=0 app=com.google.android.grilservice

Bug: 343576955
Test: Manual. grilservice_app invoke method in radio ext
successfully.
Change-Id: I7cff95231430d78a7e2436b2ba10acf45cd5dbd8

Change-Id: Ide8934503593804fcc141cd87e3eeffc0f5f55e2
2024-05-31 10:36:18 +00:00
Android Build Coastguard Worker
469c96311f Snap for 11908675 from 74ef7dcad5 to 25D4-release
Change-Id: I52f6b175d31b4ac3daa08f87721bf2f4e3715e40
2024-05-31 01:03:28 +00:00
Treehugger Robot
74ef7dcad5 Merge "Switch makefile owners to MK_OWNERS" into main 2024-05-30 08:16:17 +00:00
Android Build Coastguard Worker
0428cc0405 Snap for 11889377 from e727025165 to 25D4-release
Change-Id: Ia9adeb3e10e69aa463e52e21ed36950ac74d302c
2024-05-25 03:03:29 +00:00
Cyan_Hsieh
cfb03f0a5d Switch makefile owners to MK_OWNERS
Bug: 278167548
Change-Id: I728c4b4150029efe70a0d2f8d0ff5fe9e6ff2a25
2024-05-24 15:54:03 +08:00
Blackbear Chou
e727025165 sepolicy: add wakeup sepolicy for spi20
Bug: 341854820
Test: build, make sepolicy

Change-Id: Ie8940d36f21fbaef8c24633d771b33031ee25310
Signed-off-by: Blackbear Chou <blackbearchou@google.com>
2024-05-23 17:13:00 +08:00
Android Build Coastguard Worker
933765a9f8 Snap for 11811699 from f7603040fc to 25D4-release
Change-Id: I5a996a1cb4287cde5a27c065f8676918bdb6d6bf
2024-05-07 23:08:03 +00:00
YiKai Peng
f7603040fc selinux: allow sysfs read for hal_health_default
Bug: 338487056
Test: v2/pixel-health-guard/device-boot-health-check-extra
Change-Id: I5a97403fcb5773f86349cbcc1308741fdb255328
Signed-off-by: YiKai Peng <kenpeng@google.com>
2024-05-06 15:05:49 +00:00
YiKai Peng
032063e1bc selinux: label wakeup for BMS gccd
Bug: 338487056
Test: v2/pixel-health-guard/device-boot-health-check-extra
Change-Id: Ia3f1ef388f74c6dc387824c0851fc63377013257
Signed-off-by: YiKai Peng <kenpeng@google.com>
2024-05-06 09:52:45 +00:00
Android Build Coastguard Worker
5712d6e10b Snap for 11617373 from 35858317eb to 25D4-release
Change-Id: I6c5666ba509679e1d45d3390eeda5e3009c41c89
2024-03-23 01:03:21 +00:00
YiHsiang Peng
35858317eb Fix WLC charging sign
android.hardwar: type=1400 audit(0.0:4): avc:  denied  { getattr } for  path="/sys/devices/platform/10ca0000.hsi2c/i2c-10/10-0061/power_supply/wireless/capacity" dev="sysfs" ino=79124 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 329564860
Change-Id: Ia5d5e2e1b05f64ae14afaa0c25deee31a859dcbc
Signed-off-by: YiHsiang Peng <yihsiangpeng@google.com>
2024-03-22 03:18:37 +00:00
Wayne Lin
5ea33555b2 gps: use common gps sepolicy
Bug: 323105941
Test: build pass and device boot up without problem
Change-Id: Ic680c41cd1726ab998d8d8e9f58aaad7e2734cb2
2024-02-01 08:28:52 +00:00
Joe Huang
a2f203e90f gps: add sepolicy rules for gps
Bug: 314051269
Test: Test GPS
Change-Id: I525172bebe931c6611730758691b1bfe2e80455f
2023-12-11 15:20:18 +08:00
Wilson Sung
499a8cf3ce Add tegu vendor folder
Bug: 296187211
Change-Id: Iad3ed3ff3b11fda32c02654d2d1f0160031b62b6
2023-12-06 06:31:02 +00:00
Kamal Shafi
2d10925a7a sepolicy: migrate zumapro devices sepolicy
- Move device specific sepolicy

Bug: 312869113
Test: build
Change-Id: Ic84b8765d0794249347069d518c2be25f2791f92
2023-11-27 10:00:06 +00:00
Wilson Sung
cbc7768ed9 Initial SEpolicy tracking_denials
Bug: 296187211
Change-Id: I129f00a1d90d46dee99bc74a89bd7ebb94ef9b36
2023-10-25 08:14:57 +00:00
Maciej Żenczykowski
54fd016eec OWNERS: master -> main
Change-Id: I8f782bd4f895613f75fc0481bd075dea104eb442
2023-09-28 00:29:43 +00:00
Wilson Sung
674448e17b Initialize Tegu
Bug: 298309659
Change-Id: I8b6498685893b6f8009dd48b6259ebae7523cc4e
2023-09-14 22:59:43 +08:00
Inna Palant
b8c6a55162 Initial empty repository 2023-09-05 13:10:44 -07:00