Commit graph

854 commits

Author SHA1 Message Date
Treehugger Robot
03f88f77fc Merge "Enforce fastbootd" into udc-d1-dev am: 470eda92e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22649706

Change-Id: Ib41b87547cb4610fa30cbb49a79bf72e9944b7e2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 09:34:22 +00:00
Treehugger Robot
dc5aac4409 Merge "sepolicy: ignore avc denial" into udc-d1-dev am: 5c70865797
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22246611

Change-Id: Ia489a4cd3d15e82f6d506bacedcadb514367eb14
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 09:07:40 +00:00
Tom Huang
5c0053c5ec Merge "Add hidraw device sepolicy for headtracking" into udc-d1-dev am: dd5df5791f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22874908

Change-Id: I4f083a33f9e8a5af927496df1189d1085f19e616
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 09:07:31 +00:00
Treehugger Robot
470eda92e4 Merge "Enforce fastbootd" into udc-d1-dev 2023-05-02 04:54:37 +00:00
Treehugger Robot
5c70865797 Merge "sepolicy: ignore avc denial" into udc-d1-dev 2023-05-02 04:36:22 +00:00
Tom Huang
dd5df5791f Merge "Add hidraw device sepolicy for headtracking" into udc-d1-dev 2023-05-02 04:07:15 +00:00
Wilson Sung
8080b95d06 Enforce fastbootd
Fix: 264489957
Test: flash and no related avc error
Change-Id: Ibf616a98e9341310e18db6dda27d86adbf24deac
2023-05-02 11:42:59 +08:00
Krzysztof Kosiński
bc2fb0e761 Merge "Enforce sepolicy for Google Camera App." into udc-d1-dev am: 9f7dec1023
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22908419

Change-Id: I871183bddb6cca48ce185235fcab8a8509959a48
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-28 23:00:27 +00:00
Krzysztof Kosiński
9f7dec1023 Merge "Enforce sepolicy for Google Camera App." into udc-d1-dev 2023-04-28 22:18:37 +00:00
martinwu
149ac2a92e [TSV2] Add sepolicy for dumpstate to zip tcpdump into bugreport am: 09aaf3dfbc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22899260

Change-Id: I0a894186a7b618d703fb4aeefcac5e62d7e472f6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-28 07:16:37 +00:00
Krzysztof Kosiński
5b2134d5c5 Enforce sepolicy for Google Camera App.
Added missing statement allowing GXP firmware access.

Bug: 264489778
Test: GCA smoke test in setenforce mode.
Change-Id: Ied2f675a2e11f7aebcf4e1e6ac49fc2e39dd2ecf
2023-04-27 19:53:25 +00:00
Chungkai Mei
fdd0ef451e sepolicy: ignore avc denial
ignore avc denial since it is debugfs

Bug: 271931921
Test: pass boot health check extra test https://android-build.googleplex.com/builds/abtd/run/L49300000960255489
Change-Id: Iceee4d347b5e90bce6d16054c6ee0c8091652a9b
Signed-off-by: Chungkai Mei <chungkai@google.com>
2023-04-27 14:24:40 +00:00
martinwu
09aaf3dfbc [TSV2] Add sepolicy for dumpstate to zip tcpdump into bugreport
Bug: 264490014
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: I45c894fa9378a7878bc853f7723162ebd6141115
2023-04-27 13:47:34 +00:00
Bruno BELANYI
9c4ffd3dd2 Merge "Add ArmNN config sysprops SELinux rules" into udc-d1-dev am: 83087bd818
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22786211

Change-Id: I08085e0fb372ded139063aeedb3b7dd38e1da2c1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:36:53 +00:00
Bruno BELANYI
83087bd818 Merge "Add ArmNN config sysprops SELinux rules" into udc-d1-dev 2023-04-27 08:06:48 +00:00
Carol Cheng
fd882830cc Merge "Revert "Add sepolicy for dumpstate to zip tcpdump into bugreport"" into udc-d1-dev am: bb1f0f25bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22891380

Change-Id: Ie0a44ba0d36b95a842a28b47d5a62f78cf30f6e2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 07:11:50 +00:00
Carol Cheng
bb1f0f25bb Merge "Revert "Add sepolicy for dumpstate to zip tcpdump into bugreport"" into udc-d1-dev 2023-04-27 06:36:48 +00:00
Martin Wu
4e2023c263 Revert "Add sepolicy for dumpstate to zip tcpdump into bugreport"
Revert submission 22814097-Fix-tcpdump-sepolicy

Reason for revert: build break

Reverted changes: /q/submissionid:22814097-Fix-tcpdump-sepolicy

Change-Id: I795de89a17c5ccee702fa3a59af03d48d89fbaf2
2023-04-27 02:21:00 +00:00
Andrew Chant
ffa498bd79 Merge "Use tof sensor codenames" into udc-d1-dev am: 6641141f91
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22307463

Change-Id: Ic8acdfb36ad3945c93bf336b91ef9cd2a69a8bd8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:20:37 +00:00
Andrew Chant
6641141f91 Merge "Use tof sensor codenames" into udc-d1-dev 2023-04-27 02:07:29 +00:00
Treehugger Robot
8a3c78df60 Merge "Add sepolicy for dumpstate to zip tcpdump into bugreport" into udc-d1-dev am: fe27339606
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22838381

Change-Id: I69f575b3857d391561c1f214833e28d3bee2eb30
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 01:56:24 +00:00
Kamal Shafi
fedde4710a Add sepolicy permission for new UW camera am: eb22b7d648
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22880541

Change-Id: Icf6c3862d91bd7312bc822772314c2816b16f596
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 01:55:40 +00:00
Treehugger Robot
fe27339606 Merge "Add sepolicy for dumpstate to zip tcpdump into bugreport" into udc-d1-dev 2023-04-27 01:43:58 +00:00
martinwu
da1f9ffa79 Add sepolicy for dumpstate to zip tcpdump into bugreport
Bug: 264490014
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: I04ca96860c78baf24afd7deecff7dd4d470d9539
2023-04-26 14:17:56 +00:00
Kamal Shafi
eb22b7d648 Add sepolicy permission for new UW camera
sepolicy including imentet camera sensor and gt24p64e EEPROM

Bug: 277988592
Bug: 279547216
Test: build pass
Change-Id: I01e2bc558eba7cf03c11818d9c806e6053808fd1
2023-04-26 11:32:33 +00:00
Wilson Sung
3107cd8aa5 Update SELinux error am: 74494540d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22873618

Change-Id: I624f57e7815c7617e8956de1f5144c3e167637c1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 09:51:05 +00:00
kuanyuhuang
477d58d695 Add hidraw device sepolicy for headtracking
Test: make and incoming HID data from Pixel Buds Pro
Bug: 276163506
Change-Id: I10833e215962ad007ad32a0d713e9b37ae888fdb
2023-04-26 09:20:11 +00:00
Bruno BELANYI
61df5feff7 Add ArmNN config sysprops SELinux rules
Bug: 205202540
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:aac79fd4d9bec6517b2932cfca1e1c84b7711cc8)
Merged-In: I77b29468258520265e5f660452794aff068ca07d
Change-Id: I77b29468258520265e5f660452794aff068ca07d
2023-04-26 08:12:29 +00:00
Wilson Sung
74494540d6 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 279680070
Test: scanBugreport
Bug: 279680070
Bug: 279680213
Bug: 279680264
Test: scanAvcDeniedLogRightAfterReboot
Bug: 279680070
Change-Id: I0a5aadfed90377aeee60a15aaab212c7709d091a
2023-04-26 15:10:44 +08:00
Treehugger Robot
74272bfe60 Merge "Remove 'hal_neuralnetworks_armnn' '/data' access exception" into udc-d1-dev am: 8ebffeef84
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22786212

Change-Id: If5fe6067ec2fcea498366aeb59feb5ab9f403e26
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:13:10 +00:00
Treehugger Robot
381f2fb49e Merge "Remove hal_power_default bug from bug_map" into udc-d1-dev am: 8f8f545307
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22873619

Change-Id: I592a54f761941a31cbbe69ba18e21bc2dc1f0a37
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:12:34 +00:00
Treehugger Robot
f69eaca047 Merge "Remove old debug map entries." into udc-d1-dev am: 471a0c621a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22874902

Change-Id: I9b1d926ebd6a33269d3c2cf754eebf638cab7aec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:11:59 +00:00
Joseph Jang
b777b6c4f4 Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-d1-dev am: 49269dd7dc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22787680

Change-Id: Iffe6499c41302c285d40c3d1fb9cd31aa5d5aa9d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:11:02 +00:00
Treehugger Robot
8ebffeef84 Merge "Remove 'hal_neuralnetworks_armnn' '/data' access exception" into udc-d1-dev 2023-04-26 05:07:41 +00:00
Treehugger Robot
8f8f545307 Merge "Remove hal_power_default bug from bug_map" into udc-d1-dev 2023-04-26 04:59:43 +00:00
Treehugger Robot
471a0c621a Merge "Remove old debug map entries." into udc-d1-dev 2023-04-26 04:59:25 +00:00
Joseph Jang
49269dd7dc Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-d1-dev 2023-04-26 04:41:05 +00:00
Bruno BELANYI
f9d70ef1b2 Remove 'hal_neuralnetworks_armnn' '/data' access exception
The mali driver has been configured not to look there anymore.

Fix: 205779871
Test: manual - reboot device and check the absence of AVC denials
Change-Id: I7bf68036522553a2919076fc6243a577086ffb3a
Merged-In: I7bf68036522553a2919076fc6243a577086ffb3a
(cherry picked from commit deec8fec9d)
2023-04-26 03:35:52 +00:00
Nicolas Geoffray
42b382da0c Remove old debug map entries.
Fix: 264483352
Change-Id: Ie47107328f58dc4f1d4070e93c0cd09e88cee021
Merged-In: Ie47107328f58dc4f1d4070e93c0cd09e88cee021
(cherry picked from commit af3702bffd)
2023-04-26 03:33:31 +00:00
Chungkai Mei
c01d4b7d9b Remove hal_power_default bug from bug_map
SELinux errors are fixed and hence removing from bug map

Bug: 273638876
Test: Build and boot on device
Change-Id: I4ca6180ad286970d36ce204cd4c44e75962b26e0
Merged-In: I4ca6180ad286970d36ce204cd4c44e75962b26e0
Signed-off-by: Chungkai Mei <chungkai@google.com>
(cherry picked from commit 8051a8759a)
2023-04-26 03:32:21 +00:00
Treehugger Robot
b00e740e38 Merge "Add sepolicy permission for new project" into udc-d1-dev am: dd9d69e132
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22839998

Change-Id: I3f8d423a56f4fa3c8305b0ecd6fc79715d716697
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 03:05:01 +00:00
Treehugger Robot
175d165ded Merge "Remove dontaudit since read early_wakeup completed" into udc-d1-dev am: e94c391ebb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22819356

Change-Id: Ia10e80313407c749bfd6018318878228d3786a99
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 03:04:45 +00:00
Treehugger Robot
bb8e835b7d Merge "Allow InputProcessor HAL to read display resolution" into udc-d1-dev am: 0cdcdbf433
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22830940

Change-Id: Ibda1fcc2bd040922d31e5bb9c24b2c2b7b84d8fa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 03:02:20 +00:00
Treehugger Robot
dd9d69e132 Merge "Add sepolicy permission for new project" into udc-d1-dev 2023-04-26 02:34:56 +00:00
Treehugger Robot
e94c391ebb Merge "Remove dontaudit since read early_wakeup completed" into udc-d1-dev 2023-04-26 02:25:01 +00:00
Treehugger Robot
0cdcdbf433 Merge "Allow InputProcessor HAL to read display resolution" into udc-d1-dev 2023-04-26 02:19:40 +00:00
TreeHugger Robot
e23db371db Merge "Add memtrack" into udc-d1-dev am: d1c31b785d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22780494

Change-Id: Ide9394cba29e3efa76453ae917a8446d638c9922
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-25 22:25:02 +00:00
TreeHugger Robot
d1c31b785d Merge "Add memtrack" into udc-d1-dev 2023-04-25 21:44:08 +00:00
timmyli
783a1cf431 Allow camera hal to access aoc device am: c09931ad38
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22735036

Change-Id: I4d2ea0de7bbb0867859fad4a0bd8715fa437cdd6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-25 19:32:37 +00:00
horngchuang
4c3cd890be Add sepolicy permission for new project
Bug: 279542096
Test: Build and test for sensor denials
Change-Id: I3d6b7ce33e101bd9eeacefae128239af3512b67f
2023-04-25 08:09:29 +00:00