Treehugger Robot
421b5abf97
Merge "zuma: move sepolicy related to bootctrl hal to gs-common" into main
2023-12-01 03:57:28 +00:00
Treehugger Robot
124e7aa639
Merge "Suppress avc error log on debugfs's usb folder." into main
2023-11-30 23:26:22 +00:00
Luis Delgado De Mendoza
76972151b2
Merge "Add sepolicy entries for new BT channel" into main
2023-11-30 16:21:41 +00:00
Wilson Sung
14dda6e255
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 314054292
Test: scanBugreport
Bug: 313804706
Bug: 312894238
Change-Id: Ibf9517b585dcd8e06c62075d85dc55eb8ed7d18d
2023-11-30 07:14:04 +00:00
Khoa Hong
fb1c8b60bb
Suppress avc error log on debugfs's usb folder.
...
The XHCI driver in kernel will write debugging information to DebugFS on
some USB host operations (for example: plugging in a USB headphone). We
are not using those information right now.
Bug: 311088739
Test: No error when plugging a USB headphone in.
Change-Id: I3a8e2290e97967c02453eadff440d8bbeefa31b1
2023-11-30 14:50:52 +08:00
Jason Chiu
23feade4db
zuma: move sepolicy related to bootctrl hal to gs-common
...
Bug: 265063384
Change-Id: I230ca394c5d1b6e68dd8b4d51ea06568810eb4e0
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-11-27 17:45:29 +08:00
Treehugger Robot
9c8cb72283
Merge "allow vendor init to access percpu_pagelist_high_fraction" into main
2023-11-27 01:45:54 +00:00
Kyle Tso
9bd6f5ebd1
hal_usb_impl: Add get_prop for vendor_usb_config_prop am: 5775ea074a
am: 2816dc3328
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25353179
Change-Id: I8745571157eb29f5809b338383c11aa64a1c67ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-23 14:58:34 +00:00
Kyle Tso
2816dc3328
hal_usb_impl: Add get_prop for vendor_usb_config_prop am: 5775ea074a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25353179
Change-Id: Ie03d8b8da3e6ca672906764bebfc29ef6d3cf97e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-23 14:25:25 +00:00
Kyle Tso
5775ea074a
hal_usb_impl: Add get_prop for vendor_usb_config_prop
...
avc: denied { read } for comm="android.hardwar" name="u:object_r:vendor_usb_config_prop:s0" dev="tmpfs" ino=391 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=file permissive=0
Bug: 310560098
Change-Id: I86588715cae2696dd0e045c5b75dde55e0f84c1e
Signed-off-by: Kyle Tso <kyletso@google.com>
2023-11-23 08:33:04 +00:00
Chia-Chi Teng
59af5f70be
Merge "Revert^3 "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev am: edac582d40
am: 650409d4b4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25400378
Change-Id: I2003f92080f61363c0549d36a2a95c0ddf651a6a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-23 08:11:42 +00:00
Chia-Chi Teng
650409d4b4
Merge "Revert^3 "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev am: edac582d40
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25400378
Change-Id: I92c8528073ca783dba8f9de5c51dde3616da47c9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-23 07:39:22 +00:00
Martin Liu
b25d110b38
allow vendor init to access percpu_pagelist_high_fraction
...
Bug: 309409009
Test: boot
Change-Id: I2a4b34e3318b5de8688fe25133d7839165a2566d
Signed-off-by: Martin Liu <liumartin@google.com>
2023-11-23 15:35:07 +08:00
Chia-Chi Teng
edac582d40
Merge "Revert^3 "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev
2023-11-23 07:07:04 +00:00
Randall Huang
60b467ac40
Move sg_device related policy
...
Bug: 312582937
Test: make selinux_policy
Change-Id: Ic6e1f6228764cd2ddc96d574a10838ca4bc05332
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-11-22 14:21:06 +08:00
Wilson Sung
039124e7a4
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 312590044
Change-Id: I24e5462f111f05d051d398487a5931d808cf3002
2023-11-22 03:15:40 +00:00
Bryan Lavrich
70a5a27331
Merge "aoc: add sysfs file entry" into main
2023-11-20 20:22:27 +00:00
Devika Krishnadas
9fcc03e099
Merge "Add Pixel Mapper as a sp-HAL" into main
2023-11-20 18:17:28 +00:00
Luis Delgado de Mendoza
e5f95d1fc7
Add sepolicy entries for new BT channel
...
Bug: 308452948
Test: Validated locally on husky.
Change-Id: I68bce4f12b086168bdcbe6193b07dd1c11097c2d
2023-11-17 20:03:39 -08:00
Kyle Tso
658c20d024
dontaudit on dir search for vendor_votable_debugfs
...
Bug: 305880925
Bug: 310539058
Change-Id: I5e13370fe5430f3dfbf73ccff787986fbe80f9ea
Signed-off-by: Kyle Tso <kyletso@google.com>
2023-11-17 05:21:48 +00:00
Kyle Tso
0c0ce3699a
Merge "hal_usb_impl: Add get_prop for vendor_usb_config_prop" into main
2023-11-17 03:51:44 +00:00
Chia-Chi Teng
d240d1b4e2
Revert^3 "bluetooth: Allow triggering AOC reset from BT HAL"
...
eb2dcaedc8
Change-Id: Idb64a3e6d60747273159682102a5367b99fe6833
2023-11-16 22:37:36 +00:00
Devika Krishnadas
b5c8a252b2
Add Pixel Mapper as a sp-HAL
...
Bug: 267352318
Change-Id: I3068038eb51f1a78a2cd300a6b71d96a2647b641
Signed-off-by: Devika Krishnadas <kdevika@google.com>
2023-11-16 01:25:45 +00:00
Angela Wu
ca8e0baee7
[automerger skipped] Allows GCA to access the hw_jpeg /dev/video12. am: 77ce612093
-s ours am: 4746ff1aee
-s ours
...
am skip reason: Merged-In I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6 with SHA-1 6216625ef8
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25321138
Change-Id: Ia2f1c97331008bae978881fb6e3708f93964332b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 09:56:28 +00:00
Angela Wu
4746ff1aee
[automerger skipped] Allows GCA to access the hw_jpeg /dev/video12. am: 77ce612093
-s ours
...
am skip reason: Merged-In I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6 with SHA-1 6216625ef8
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25321138
Change-Id: Iad6a9cc9166ae916b05fc137d5c39ed315f01309
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 09:06:56 +00:00
Angela Wu
77ce612093
Allows GCA to access the hw_jpeg /dev/video12.
...
Bug: 309578078
Test: https://android-build.corp.google.com/builds/abtd/run/L41100030000291922
Merged-In: I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6
Change-Id: I5b1649ec393d2f998159299b0f4feddcde4da80f
2023-11-15 06:28:23 +00:00
Kyle Tso
8912975a8b
hal_usb_impl: Add get_prop for vendor_usb_config_prop
...
avc: denied { read } for comm="android.hardwar" name="u:object_r:vendor_usb_config_prop:s0" dev="tmpfs" ino=391 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=file permissive=0
Bug: 310560098
Change-Id: I86588715cae2696dd0e045c5b75dde55e0f84c1e
Signed-off-by: Kyle Tso <kyletso@google.com>
2023-11-14 02:15:14 +00:00
Daniel Norman
8ff4604573
Removes duplicate hidraw_device type definition.
...
This type is now defined by the platform.
Bug: 303522222
Change-Id: Ic46a7327bb2dab89f424cde2682a40f2b28a04db
Test: ls -z /dev/hidraw0
2023-11-10 22:52:00 +00:00
Alex Iacobucci
ca145d66c3
aoc: add sysfs file entry
...
Test: on device
Bug: 309950738
Change-Id: Iddaf30fce0bfd88d275d577b71bedd826b7a3ee6
Signed-off-by: Alex Iacobucci <alexiacobucci@google.com>
2023-11-10 18:27:42 +00:00
Angela Wu
0774e72816
Allows GCA to access the hw_jpeg /dev/video12. am: 6216625ef8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25311860
Change-Id: I2d7bf8ff4ff6dc07bffc1aa43c966a4a6ccda05f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-10 03:19:12 +00:00
Angela Wu
6216625ef8
Allows GCA to access the hw_jpeg /dev/video12.
...
Bug: 309578078
Test: https://android-build.corp.google.com/builds/abtd/run/L93200030000133974
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:0dde58951666a96f788a8a75bf63cde34079d48a )
Merged-In: I5b1649ec393d2f998159299b0f4feddcde4da80f
Change-Id: I5b1649ec393d2f998159299b0f4feddcde4da80f
This change is essentially a re-submission of ag/25305073 to an upstream branch.
Change-Id: I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6
2023-11-09 10:09:31 +00:00
Mike Wang
d6f83eba29
Merge "Change the MDS to platform app in selinux ap context." into main
2023-11-08 07:05:09 +00:00
Angela Wu
2e724b4b7f
Merge "Allows GCA to access the hw_jpeg /dev/video12." into main
2023-11-08 05:20:21 +00:00
Treehugger Robot
0418f329cf
Merge "Allow HWC to access display refresh control" into main
2023-11-08 04:20:23 +00:00
Mike Wang
96bac14cb1
Change the MDS to platform app in selinux ap context.
...
The MDS will be signed with platform key and become a platform app. To
make the selinux rules for modem_diagnostic_app work, need to set it to
platform app in app context.
Bug: 287683516
Test: Tested with both dev key or platform key signed MDS apps and the selinux rules works.
Change-Id: I375f57537a81514d3a6230ca042a4407accd6c15
2023-11-08 04:01:26 +00:00
Angela Wu
73caf508ec
Allows GCA to access the hw_jpeg /dev/video12.
...
Bug: 309578078
Change-Id: Ic243a8dc0d6b2decd0ac70d076a456296936e9af
Test: https://android-build.corp.google.com/builds/abtd/run/L93200030000133974
2023-11-08 03:36:48 +00:00
Treehugger Robot
d76fa68860
Merge "sensors: Move USF related sepolicy to gs-common." into main
2023-11-07 06:49:08 +00:00
Rick Chen
587903f7c4
sensors: Move USF related sepolicy to gs-common.
...
Bug: 305120274
Test: Compile pass. Flash the build to ZUMA devices and no sensor
related avc denied log.
Change-Id: I6911992b59802b62ffd206fd53e678da65ef1363
Signed-off-by: Rick Chen <rickctchen@google.com>
2023-11-06 23:20:16 +08:00
Sam Ou
c3d0ba2da2
Merge changes from topic "thismeal_enhancement" into main
...
* changes:
Allow dump_power to create thismeal.txt by executing battery_mitigation
Update odpm scale value sepolicy
2023-11-06 10:36:49 +00:00
Chris Lu
c13e6b0d82
Allow HWC to access display refresh control
...
Bug: 295603692
Test: write the node successfully
Change-Id: Ie900a9de4c23201ddefd61456bb2b8a80ba1945a
2023-11-06 09:28:09 +00:00
Mike Wang
7d43b5edb6
Merge "Add selinux policy change to allow MDS access Samsung OemRil hal." into main
2023-11-06 02:30:55 +00:00
samou
90ef181121
Allow dump_power to create thismeal.txt by executing battery_mitigation
...
Bug: 293899466
Change-Id: I88d4e3bcf18e818e9ee53ed69e522c9678c6edff
Signed-off-by: samou <samou@google.com>
2023-11-03 09:59:05 +00:00
mikeyuewang
b066861a22
Add selinux policy change to allow MDS access Samsung OemRil hal.
...
Bug: 301641283
selinux log:
11-03 15:32:38.850 2643 2643 I auditd : type=1400 audit(0.0:1616): avc: denied { call } for comm="binder:2643_3" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.850 2643 2643 I binder:2643_3: type=1400 audit(0.0:1616): avc: denied { call } for scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854 2643 2643 I auditd : type=1400 audit(0.0:1617): avc: denied { transfer } for comm="binder:2643_3" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854 2643 2643 I binder:2643_3: type=1400 audit(0.0:1617): avc: denied { transfer } for scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854 1095 1095 I auditd : type=1400 audit(0.0:1618): avc: denied { call } for comm="HwBinder:1095_1" scontext=u:r:rild:s0 tcontext=u:r:modem_diagnostic_app:s0:c512,c768 tclass=binder permissive=1
11-03 15:32:38.854 1095 1095 I HwBinder:1095_1: type=1400 audit(0.0:1618): avc: denied { call } for scontext=u:r:rild:s0 tcontext=u:r:modem_diagnostic_app:s0:c512,c768 tclass=binder permissive=1
Change-Id: Ia71844db230302fd3120b28b3ade2e55443ec078
2023-11-03 07:42:38 +00:00
Chia-Chi Teng
244aed251d
Revert^2 "bluetooth: Allow triggering AOC reset from BT HAL" am: eb2dcaedc8
am: 5c827dca3a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25205134
Change-Id: Ief73384699e0dfba3d3b8a79545bb3a3ad27c4c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 19:03:04 +00:00
Chia-Chi Teng
5c827dca3a
Revert^2 "bluetooth: Allow triggering AOC reset from BT HAL" am: eb2dcaedc8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25205134
Change-Id: I075a05a8ccf755700923c9de7106b57f7f876830
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 17:56:21 +00:00
samou
3f67ca9478
Update odpm scale value sepolicy
...
Bug: 290149543
Change-Id: I66108d908ffa5cc6853b1e8280a5568c92a2e66f
Signed-off-by: samou <samou@google.com>
2023-10-31 12:13:45 +00:00
Chia-Chi Teng
eb2dcaedc8
Revert^2 "bluetooth: Allow triggering AOC reset from BT HAL"
...
This reverts commit 0aa787efa8
.
Reason for revert: Debug BT HCI timeout on UD2A build and P23 on main
Bug: 306646797
Test: presubmit PTS
Change-Id: Ia72ea9d0ba0209cce483d220b420933b243e05b3
2023-10-27 22:53:17 +00:00
Daniel Okazaki
11ea7dd6d6
dump_power: adding dwell defend logs sepolicy
...
Bug: 306108267
Test: build/flash
Test: adb bugreport
Change-Id: Idb0571b6a974b98649f9cc071d506a8be94966f5
Signed-off-by: Daniel Okazaki <dtokazaki@google.com>
2023-10-27 18:45:43 +00:00
Chris Lu
32d99c3e05
Set context for sysfs file panel_pwr_vreg
...
Bug: 296978805
Test: read panel_pwr_vreg by dumpstate
Change-Id: Idc4845cadb278ef6406003cb3e55bfbdba758b4b
2023-10-27 07:46:46 +00:00
Sam Ou
5d83d85ad2
Merge "Allow battery_motigation to access gpu cur_freq" into main
2023-10-27 02:33:00 +00:00