Commit graph

30 commits

Author SHA1 Message Date
Wilson Sung
546b787a40 Add SSR property access and remove obsolete denials
Bug: 268572164
Change-Id: I5756510b2eb2696aade93dd6b15a111f5dca58ef
2023-02-24 10:33:45 +00:00
Wilson Sung
6f141a6526 Remove camera dontaudit
Bug: 267843409
Bug: 268226491
Change-Id: Idce5518072fc266b45c2fbc5269915b19ceb19e8
2023-02-23 11:04:47 +08:00
Wilson Sung
cc76d0f05b Revert "Revert "update error on ROM 9588633""
This reverts commit 9290d7c45b.
Add hal_googlebattery related denied to bug_map

Bug: 268566583
Bug: 268572197
Bug: 268572164
Change-Id: Iabfcfb28f69c118707fb64c34e2882ea0a49a776
2023-02-14 15:05:12 +08:00
Andrew Chant
f861570a64 Merge "Revert "update error on ROM 9588633"" 2023-02-11 01:33:03 +00:00
Andrew Chant
9290d7c45b Revert "update error on ROM 9588633"
This reverts commit 8c2f12f39d.

Reason for revert: Broke the zuma build
Bug: 268566583

device/google/zuma-sepolicy/tracking_denials/systemui_app.te:6:ERROR 'unknown type hal_googlebattery' at token ';' on line 100380:
dontaudit systemui_app hal_googlebattery:binder { call };
dontaudit systemui_app default_android_service:service_manager { find };
checkpolicy:  error(s) encountered while parsing configuration

Change-Id: I1286020227bdd73c14833489613237f82573d02f
2023-02-11 01:27:19 +00:00
Wilson Sung
e338667584 vendor_init: Add getattr to sg
Bug: 260522244
Change-Id: I9f447ecb635280048ca0d785f00b6c851a9dedf3
2023-02-10 18:35:47 +08:00
Wilson Sung
6cf7ce5cc0 Allow vendor_init chown gvotables
Bug: 267736435
Bug: 260366195
Change-Id: I0a27a7fb3719d57449fb3d7f4c4d746d09419a75
2023-02-10 18:34:51 +08:00
Wilson Sung
594dee4dc4 Allow vendor_init create link for bootdevice_sysdev
Bug: 263185566
Change-Id: I3a041c8dbd33c538d3971b793c64e4ea7c310190
2023-02-10 16:24:06 +08:00
Wilson Sung
8c2f12f39d update error on ROM 9588633
Bug: 268566583
Bug: 268572197
Bug: 268572164
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I6eba194f27258a0c2acbcb739c3a69dfa7b77b56
2023-02-10 11:57:07 +08:00
Wilson Sung
da49f90167 Allow vendor_init to set slog properties
Bug: 267843409
Change-Id: Ib98b7127bb4381ce5dfb5522b3652637a533f593
2023-02-08 15:32:26 +08:00
Wilson Sung
adfddd8d3b Allow vendor_init to set modem vendor_logger_prop
Bug: 267843409
Change-Id: I47d1e4aec04dfcf1223e4e4d828d7da5af243e9c
2023-02-08 15:31:54 +08:00
Wilson Sung
3c6fa1dfb5 Allow vendor_init to set vendor_logger_prop
Bug: 267843409
Change-Id: I99a52a5d0d24f604cf3f0872d4066e1de5256e2f
2023-02-08 15:31:36 +08:00
Tai Kuo
cecd829f6f Remove hal_vibrator_default and vendor_init tracking_denials
Build P23 CS40l26 project from
hardware/google/pixel/vibrator/cs40l26/device.mk and use the sepolicy
from hardware/google/pixel-sepolicy/vibrator/cs40l26 and
hardware/google/pixel-sepolicy/vibrator/common.

Bug: 267843409
Fix: 260366169
Fix: 264490051
Test: HAL init properly
Test: dumpsys android.hardware.vibrator.IVibrator/default
Test: m atest && atest-dev \
  com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Test: m atest && atest-dev \
  com.google.android.selinux.pts.SELinuxTest#scanBugreport
Change-Id: I4448bbdb03b0a06080d5bccf2708c86c10d4fb26
2023-02-08 14:11:27 +08:00
TreeHugger Robot
d33ee1d1d3 Merge "Remove dontaudit vendor_init to set ssr properties" 2023-02-08 05:52:44 +00:00
Wilson Sung
fd39573ce5 Remove dontaudit vendor_init to set ssr properties
Bug: 267843409
Change-Id: I74a222e90b3dd0e2dad91632b73fcad1211a7974
2023-02-08 12:44:56 +08:00
Wilson Sung
5dbc57e7ae Allow vendor_init to modify proc_sched
Bug: 263185566
Change-Id: I4a333ffd423e88af81e4c244cc7140ebd826a170
2023-02-08 12:28:31 +08:00
Wilson Sung
df495af425 vendor_init: Add getattr to modem_img
Bug: 63185566
Change-Id: I29fd72ba5e1482d629bc28edfd7782c6f24fe68f
2023-02-08 12:26:10 +08:00
Wilson Sung
926deec5d4 Allow vendor_init to modify read_ahead_kb
Bug: 264489786
Change-Id: I26d5682b3b056c8c8e00fc08581c96dcbaa27ef9
2023-02-08 04:07:22 +00:00
George Lee
0322b923b7 Remove tracking denial for system_boot_reason
Bug: 263525155
Test: Local boot
Change-Id: Iab1411871a66c60a604ee8b0fce0505a88973792
Signed-off-by: George Lee <geolee@google.com>
2023-02-07 17:07:19 +00:00
sukiliu
341afe161d Update error on ROM 9558720
Bug: 267843291
Bug: 267843408
Bug: 267843310
Bug: 267843409
Test: SELinuxUncheckedDenialBootTest
Change-Id: I4d8f448d9019232222f2e8385bb2f4b3cf5f5336
2023-02-07 11:29:45 +08:00
Jenny Ho
31f750da2b sepolicy: add sepolicy for disable.battery.defender
[    7.536208] type=1107 audit(1671575809.144:22): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.battery.defender.disable pid=381 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=property_service permissive=1'

Bug: 263305106
Change-Id: Ia7adfe7f128c6390128447b9363ecd3615694fb1
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2023-02-05 13:09:28 +08:00
Adam Shih
16452851f3 dispatch domains to owner via bugs
Bug: 264484544
Bug: 264489606
Bug: 264489743
Bug: 264489675
Bug: 264489633
Bug: 264489777
Bug: 264489520
Bug: 264489270
Bug: 264489387
Bug: 264489745
Bug: 264489957
Bug: 264489521
Bug: 264490031
Bug: 264489388
Bug: 264489608
Bug: 264489609
Bug: 264489778
Bug: 264489634
Bug: 264489794
Bug: 264489795
Bug: 264489559
Bug: 264489636
Bug: 264489746
Bug: 264490032
Bug: 264489188
Bug: 264489676
Bug: 264489779
Bug: 264489189
Bug: 264489677
Bug: 264489780
Bug: 264489637
Bug: 264490033
Bug: 264489390
Bug: 264489561
Bug: 264489750
Bug: 264489190
Bug: 264490051
Bug: 264489958
Bug: 264489610
Bug: 264489562
Bug: 264489797
Bug: 264489781
Bug: 264490034
Bug: 264489678
Bug: 264490091
Bug: 264490035
Bug: 264490011
Bug: 264490052
Bug: 264489639
Bug: 264489961
Bug: 264490072
Bug: 264490012
Bug: 264489523
Bug: 264489679
Bug: 264490053
Bug: 264489564
Bug: 264489783
Bug: 264490036
Bug: 264490074
Bug: 264490054
Bug: 264489565
Bug: 264490092
Bug: 264490075
Bug: 264489641
Bug: 264490093
Bug: 264489962
Bug: 264489784
Bug: 264489567
Bug: 264490076
Bug: 264489786
Bug: 264490014
Bug: 264489524
Bug: 264490055
Bug: 264489569
Bug: 264489526
Bug: 264489642
Bug: 264489681
Bug: 264489963
Bug: 264489787
Bug: 264490095
Bug: 264489799
Bug: 264490077
Test: boot to home in enforcing mode
Change-Id: I784ee1653800119308c22c85652764a99ca076e4
2023-01-05 13:15:51 +08:00
Adam Shih
d045e5ac5e Update error on ROM 9431928
Bug: 263525155
Test: scanAvcDeniedLogRightAfterReboot
Change-Id: Ie309aafff8d3772f19c28e3d3b049b642bd2c221
2022-12-23 08:19:30 +08:00
Adam Shih
f0d101b3e7 Update error on ROM 9423786
Bug: 263304957
Bug: 263305034
Bug: 263305106
Bug: 263305225
Bug: 263305107
Bug: 263305203
Test: scanAvcDeniedLogRightAfterReboot
Change-Id: Iea85cf823b04f73d58ffab84f4b06dce39e80fc9
2022-12-21 08:44:19 +08:00
Adam Shih
2682fc7fc4 update error on ROM 9420981
Bug: 263185135
Bug: 263184738
Bug: 263185136
Bug: 263185161
Bug: 263185431
Bug: 263185547
Bug: 263185432
Bug: 263185565
Bug: 263184920
Bug: 263185566
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ia305204ccda294f7ad38edb669c85907485e4db3
2022-12-20 08:38:41 +08:00
Adam Shih
ec17f1a125 update error on ROM 9336524
Bug: 260522279
Bug: 260522435
Bug: 260522413
Bug: 260522434
Bug: 260522436
Bug: 260522378
Bug: 260522202
Bug: 260522245
Bug: 260522268
Bug: 260522282
Bug: 260522040
Bug: 260522041
Bug: 260522244
Bug: 260522203
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ib61f9c376c1351e1619621c79506396f6c291eed
2022-11-28 09:51:25 +08:00
Adam Shih
d48baf4a6b update error on ROM 9321621
Bug: 260366279
Bug: 260365725
Bug: 260366029
Bug: 260366438
Bug: 260366177
Bug: 260366126
Bug: 260366519
Bug: 260366399
Bug: 260366065
Bug: 260366169
Bug: 260366297
Bug: 260366066
Bug: 260366439
Bug: 260366322
Bug: 260366281
Bug: 260366398
Bug: 260366278
Bug: 260366344
Bug: 260366321
Bug: 260363384
Bug: 260366030
Bug: 260366031
Bug: 260366195
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I2ef4a0dc4a2ff373151feb11e1d52e9931d7c0a2
2022-11-25 11:42:44 +08:00
Adam Shih
9c81dc8d56 isolate legacy sepolicy to start reviewing while letting others work
Bug: 254378739
Test: boot, camera, google map, play youtube
Change-Id: If8ee7c64c0f7534a7e918f36a0e785b0ee9cd11f
2022-10-24 11:40:47 +08:00
Jenny Ho
782f4952ff fix avc error for fg_model/registers
remove tracking with fix http://ag/19446314

Bug: 226271913
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: I745654dea17f87df0956f3a326d0c0346fd59ec6
2022-07-27 06:16:43 +00:00
Aaron Ding
e47b3d9991 Branch zuma from gs201
Branch zuma from gs201 sha1 63751751aa91275b083797278d638078b3a0bf7a

cp/pantah/ripcurrent
cp/gs201/zuma

Bug: 229340586
Change-Id: Ie692d8dbbf0fc4d3b376dc9fe3e930bd3955a88e
Signed-off-by: Aaron Ding <aaronding@google.com>
2022-04-19 14:10:58 +08:00