Nattharat Jariyanuntanaet
1492b4913a
Update sepolicy for nfc antenna selftest values
...
Allow persist.vendor.nfc.antenna. to be vendor public values for NFC
companion app to access from userdebug or eng builds
avc: denied { read } for name="u:object_r:vendor_nfc_antenna_prop:s0" dev="tmpfs" ino=414 scontext=u:r:untrusted_app:s0:c79,c257,c512,c768 tcontext=u:object_r:vendor_nfc_antenna_prop:s0 tclass=file permissive=0 app=com.google.android.apps.internal.nfcassistancetool
Bug: 361050657
Test: m selinux_policy
Flag: NONE add permission
Change-Id: I47c54642dbc801dfcaee8330e75a29d11030337c
2024-09-12 20:17:39 +00:00
Xin Li
5b80168d54
[automerger skipped] Merge 24Q3 to AOSP main am: 39d96988e3
-s ours am: d1f03df8fc
-s ours
...
am skip reason: Merged-In I9181b2344f2448b9debe1522528545ce90de8768 with SHA-1 fb98394c54
is already in history
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3258561
Change-Id: I411d96644364dcb9efdea5c1fe708b9651f8c12d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-07 03:29:31 +00:00
Xin Li
d1f03df8fc
[automerger skipped] Merge 24Q3 to AOSP main am: 39d96988e3
-s ours
...
am skip reason: Merged-In I9181b2344f2448b9debe1522528545ce90de8768 with SHA-1 fb98394c54
is already in history
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3258561
Change-Id: Iedc2cb039f534e4d1e7b873bec0f4f4d41fb4ab6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-07 02:51:35 +00:00
Xin Li
39d96988e3
Merge 24Q3 to AOSP main
...
Bug: 357762254
Merged-In: I9181b2344f2448b9debe1522528545ce90de8768
Change-Id: Ic5351ce6b46a46820c6d73d4f924c6b92d30b06d
2024-09-05 17:02:39 -07:00
Randall Huang
a73414799e
storage: move storage related device type to common folder
...
Bug: 364225000
Test: forrest build
Change-Id: I60597a3ad6f674b93267f41b3a27fdee6e923e59
Signed-off-by: Randall Huang <huangrandall@google.com>
2024-09-04 10:44:21 +08:00
Attis Chen
8297fee02b
Merge "Label sysfs node power_mode as sysfs_display." into main
2024-09-02 04:54:18 +00:00
Wilson Sung
432980a323
Update SELinux error
...
Test: scanBugreport
Bug: 361725982
Bug: 359428180
Test: scanAvcDeniedLogRightAfterReboot
Bug: 359428180
Flag: EXEMPT bugFix
Change-Id: I7e3ce34fdc02932250bcbd71e0a8864cfffaadff
2024-08-23 09:46:52 +00:00
Roy Luo
371f678632
Revert^2 "Add udc sysfs to udc_sysfs fs context"
...
This reverts commit 66ba3214b8
.
Reason for revert: fix breakage in next build with build-time flag in
selinux policy.
Fixed the following audit logs:
[ 285.983545] type=1400 audit(1724270284.724:31): avc: denied { read } for comm="android.hardwar" name="state" dev="sysfs" ino=85740 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:sysfs_udc:s0 tclass=file permissive=0
Bug: 339241080
Test: tested on Shiba trunk_staging and next builds
Flag: build.RELEASE_USB_UDC_SYSFS_SELINUX_POLICY_ENABLED
Change-Id: Ie4979f408a5bca0bb9b9762048ab716ddeeb4d2f
2024-08-21 22:15:22 +00:00
attis
5bf0b2bd07
Label sysfs node power_mode as sysfs_display.
...
Label power_mode to sysfs_panel to let it be allowed in dumpstate.
avc log:
08-20 20:24:11.292 9339 9339 W dump_display: type=1400 audit(0.0:2372): avc: denied { read } for name="power_mode" dev="sysfs" ino=85501 scontext=u:r:dump_display:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
Test: ls -Z, adb bugreport.
Flag: EXEMPT bugfix
Bug: 358505990
Change-Id: I7b6051de3e8f1b2813c681a176266fe3c7518991
Signed-off-by: attis <attis@google.com>
2024-08-21 17:08:49 +08:00
Wilson Sung
22ca32df91
Merge "Update SELinux error" into main
2024-08-19 06:14:28 +00:00
Xiaofan Jiang
390674b749
Merge "Revert^2 "zuma: update modem_svc sepolicy for UMI"" into main
2024-08-15 20:44:27 +00:00
Xiaofan Jiang
515a102ac8
Revert^2 "zuma: update modem_svc sepolicy for UMI"
...
c653101290
Change-Id: Ib1d18e33b87f03ee52bcbdff129c6d56b8a63a61
2024-08-15 19:25:35 +00:00
Priyanka Advani (xWF)
61ddb69d2c
Merge "Revert "zuma: update modem_svc sepolicy for UMI"" into main
2024-08-15 18:30:35 +00:00
Priyanka Advani (xWF)
c653101290
Revert "zuma: update modem_svc sepolicy for UMI"
...
Revert submission 28762313
Reason for revert: Droidmonitor created revert due to b/360059249.
Reverted changes: /q/submissionid:28762313
Change-Id: I88cd8603351f5c5e1a546872f4f3aa1cae75dcd5
2024-08-15 16:14:57 +00:00
Wilson Sung
e24c2a8265
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 360060606
Test: scanBugreport
Bug: 360060992
Bug: 359428180
Test: scanAvcDeniedLogRightAfterReboot
Bug: 360060606
Bug: 359428180
Flag: EXEMPT bugFix
Change-Id: I3dfb16fdb309f01f543c826b155fc774b76faade
2024-08-15 09:25:35 +00:00
Xiaofan Jiang
dac2c5438b
Merge "zuma: update modem_svc sepolicy for UMI" into main
2024-08-15 04:01:13 +00:00
Xiaofan Jiang
08b3cf20a7
zuma: update modem_svc sepolicy for UMI
...
Bug: 357139752
Flag: EXEMPT sepolicy
[ 68.189198] type=1400 audit(1722986580.568:59): avc: denied { unlink } for comm="binder:892_2" name="modem_svc_socket" dev="dm-52" ino=20239 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=sock_file permissive=1
[ 68.189448] type=1400 audit(1722986580.568:60): avc: denied { create } for comm="binder:892_2" name="modem_svc_socket" scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=sock_file permissive=1
Change-Id: I7cccb22ef31e88eebae664dcd937553c7ed9428f
2024-08-15 03:53:07 +00:00
Gil Liu
cab53ff9d9
Merge "add hal_graphics_composer to access thermal temperature" into main
2024-07-29 06:10:29 +00:00
Treehugger Robot
6dd8b82b22
Merge "Correct the path of tcpm-source-psy device" into main
2024-07-26 02:04:31 +00:00
Mike Wang
a689f70d3c
Merge "Add the selinux policy to allow the gril get/set vendor log properties." into main
2024-07-26 01:15:34 +00:00
Manali Bhutiyani
faaaf11fd9
Merge "DisplayPort Stats: add sysfs access permission on Zuma devices" into main
2024-07-25 15:46:01 +00:00
Carlos Rodriguez
6e54536670
DisplayPort Stats: add sysfs access permission on Zuma devices
...
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:48): avc: denied { read } for name="fec_dsc_supported" dev="sysfs" ino=71618 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:49): avc: denied { read } for name="fec_dsc_not_supported" dev="sysfs" ino=71619 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:50): avc: denied { read } for name="max_res_other" dev="sysfs" ino=71617 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:51): avc: denied { read } for name="max_res_1366_768" dev="sysfs" ino=71607 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:52): avc: denied { read } for name="max_res_1440_900" dev="sysfs" ino=71608 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:53): avc: denied { read } for name="max_res_1600_900" dev="sysfs" ino=71609 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:54): avc: denied { read } for name="max_res_1920_1080" dev="sysfs" ino=71610 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:55): avc: denied { read } for name="max_res_2560_1080" dev="sysfs" ino=71611 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:56): avc: denied { read } for name="max_res_2560_1440" dev="sysfs" ino=71612 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
.....
Bug: 343602691
Bug: 317486088
Flag: EXEMPT bugfix
Test: Built and flashed, errors are gone.
Change-Id: I49d177d2a997698b05f27bd4c448847ed3110e59
2024-07-24 23:49:52 +00:00
Daniel Chapin
cfbbd040df
Merge "Revert "trusty: storageproxy: add fs_ready_rw property context"" into main
2024-07-24 21:48:57 +00:00
Daniel Chapin
6d6f71b74a
Revert "trusty: storageproxy: add fs_ready_rw property context"
...
Revert submission 28318041-rw_storage
Reason for revert: Droidfood blocking bug b/355163562
Reverted changes: /q/submissionid:28318041-rw_storage
Change-Id: I0fa3edda88677966d42576d76616b837a4bbe70b
2024-07-24 20:17:33 +00:00
Kyle Tso
4358dc4f7e
Correct the path of tcpm-source-psy device
...
Bug: 353804370
Flag: EXEMPT bugfix
Change-Id: I059a652d13ffdf186fb36edb11ef4c1dc6ac8648
Signed-off-by: Kyle Tso <kyletso@google.com>
2024-07-24 02:13:54 +00:00
Mike McTernan
b188015fba
Merge "trusty: storageproxy: add fs_ready_rw property context" into main
2024-07-23 10:02:28 +00:00
gilliu
1dde3ea2ff
add hal_graphics_composer to access thermal temperature
...
type=1400 audit(0.0:77): avc: denied { search } for name="thermal"
dev="tmpfs" ino=1618 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:thermal_link_device:s0 tclass=dir permissive=0
type=1400 audit(0.0:74): avc: denied { search } for name="thermal"
dev="sysfs" ino=21594 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:sysfs_thermal:s0 tclass=dir permissive=0
type=1400 audit(0.0:74): avc: denied { read } for name="temp"
dev="sysfs" ino=73536 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=0
type=1400 audit(0.0:74): avc: denied { getattr } for
path="/sys/devices/virtual/thermal/thermal_zone12/temp" dev="sysfs"
ino=73537 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=0
Bug: 343141590
Test: check no avc pattern on logcat from test image
Flag: NONE add permission
Change-Id: I87fce47644b07342d756e7594685eea0dded1926
2024-07-23 09:05:16 +00:00
Roy Luo
66ba3214b8
Revert "Add udc sysfs to udc_sysfs fs context"
...
Revert submission 27445245-339241080
Reason for revert: break husky-next-user (linux) build 12111903
Reverted changes: /q/submissionid:27445245-339241080
Bug: 339241080
Change-Id: If558e5bef47a0e617e4b4997f0ad9c8154b43ee9
2024-07-19 01:16:47 +00:00
Roy Luo
eb5a3cd47a
Add udc sysfs to udc_sysfs fs context
...
This is needed for system server to monitor usb gadget state.
Grant hal_usb_impl read access as it's needed by UsbDataSessionMonitor.
Bug: 339241080
Test: tested on Shiba
Flag: android.hardware.usb.flags.enable_udc_sysfs_usb_state_update
Change-Id: Iab3c20569cb22d7524ca303f6cb3eaf40aa2161d
2024-07-18 22:56:15 +00:00
Sergey Volk
7c7ec16cad
[automerger skipped] Add sepolicy for DisplayPort wakeup node am: fb98394c54
-s ours
...
am skip reason: Merged-In I9181b2344f2448b9debe1522528545ce90de8768 with SHA-1 77518a2614
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/28360816
Change-Id: I2bda43ad3b6983cae7aa2e7dd4dfb836ebee226c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-18 13:08:49 +00:00
Mike Wang
ef8937f64c
Add the selinux policy to allow the gril get/set vendor log properties.
...
avc logs:
2024-07-17 06:00:41.024 8674-8674 binder:8674_1 com.google.android.grilservice W type=1400 audit(0.0:96): avc: denied { read } for name="u:object_r:vendor_logger_prop:s0" dev="tmpfs" ino=416 scontext=u:r:grilservice_app:s0:c238,c256,c512,c768 tcontext=u:object_r:vendor_logger_prop:s0 tclass=file permissive=0 app=com.google.android.grilservice
2024-07-17 06:00:41.024 8674-8674 binder:8674_1 com.google.android.grilservice W type=1400 audit(0.0:97): avc: denied { read } for name="u:object_r:vendor_modem_prop:s0" dev="tmpfs" ino=418 scontext=u:r:grilservice_app:s0:c238,c256,c512,c768 tcontext=u:object_r:vendor_modem_prop:s0 tclass=file permissive=0 app=com.google.android.grilservice
2024-07-17 06:00:49.592 8674-8674 binder:8674_1 com.google.android.grilservice W type=1400 audit(0.0:99): avc: denied { write } for name="property_service" dev="tmpfs" ino=861 scontext=u:r:grilservice_app:s0:c238,c256,c512,c768 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0 app=com.google.android.grilservice
2024-07-17 16:46:54.748 1-1 /system/bin/init init I type=1107 audit(0.0:103): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=persist.vendor.verbose_logging_enabled pid=2152 uid=10238 gid=10238 scontext=u:r:grilservice_app:s0:c238,c256,c512,c768 tcontext=u:object_r:vendor_logger_prop:s0 tclass=property_service permissive=1'
2024-07-17 16:49:33.256 1-1 /system/bin/init init I type=1107 audit(0.0:116): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=persist.vendor.modem.extensive_logging_enabled pid=2152 uid=10238 gid=10238 scontext=u:r:grilservice_app:s0:c238,c256,c512,c768 tcontext=u:object_r:vendor_modem_prop:s0 tclass=property_service permissive=1'
Bug: 293947661
Change-Id: Iec1cc221a543543da28416a5bc7d7ddacde959c5
2024-07-17 20:23:43 +00:00
Sergey Volk
fb98394c54
Add sepolicy for DisplayPort wakeup node
...
Bug: 348125717
Test: ls -Z /sys/devices/platform/110f0000.drmdp/wakeup
Flag: NONE (follow up fix for merged non-flagged CL pa/2839256)
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:77518a261471f7884e5b7c8ca73442df5c11e48e )
Merged-In: I9181b2344f2448b9debe1522528545ce90de8768
Change-Id: I9181b2344f2448b9debe1522528545ce90de8768
2024-07-17 14:37:46 +00:00
Mike McTernan
49c9c8c3d7
trusty: storageproxy: add fs_ready_rw property context
...
Flag: EXEMPT bug fix
Bug: 350362101
Test: ABTD
Change-Id: I397a89ceb5a6a832043abb3792b0101ad89c97a7
2024-07-15 10:13:47 +01:00
Aaron Tsai
489a6e7843
Add permission for setting gril property
...
05-22 18:20:50.608 914 914 I auditd : type=1400 audit(0.0:97): avc: denied { write } for comm="radioext@1.0-se" name="property_service" dev="tmpfs" ino=849 scontext=u:r:hal_radioext_default:s0 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0
Bug: 343012301
Bug: 203824024
Test: manual test
Flag: EXEMPT bugfix
Change-Id: Ic08a1e1c6a0db29e329f121c813bebadbee5a5e9
2024-07-12 03:17:06 +00:00
Liana Kazanova
7334ac44b3
[automerger skipped] Revert "Delete sepolicy for legacy VR services." am: 6b8e432e3e
am: 8bb7844138
-s ours
...
am skip reason: Merged-In I79bc66b80c36df398fe872f4e99b86e9a828479c with SHA-1 09d569ecde
is already in history. Merged-In was found from reverted change.
Reverted change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3163729
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3168500
Change-Id: I154da94bae3e3abd483c0f586820589937b424af
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-11 23:32:22 +00:00
Liana Kazanova
8bb7844138
Revert "Delete sepolicy for legacy VR services." am: 6b8e432e3e
...
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3168500
Change-Id: I8a7841bfc2b850111a3688b18fb11eb260fd4a40
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-11 23:06:02 +00:00
Liana Kazanova
6b8e432e3e
Revert "Delete sepolicy for legacy VR services."
...
This reverts commit 8a81e8bf61
.
Reason for revert: Droidmonitor created revert due to b/352465601. Will be verifying through ABTD before submission
Change-Id: I7543fe9078e88300d12c8a09867bdd1ecf5c8005
2024-07-11 20:56:43 +00:00
PODISHETTY KUMAR
2bbbc8b955
Merge "Revert "Delete sepolicy for legacy VR services."" into main
2024-07-11 14:50:32 +00:00
PODISHETTY KUMAR
62fd727327
Revert "Delete sepolicy for legacy VR services."
...
This reverts commit 09d569ecde
.
Reason for revert: <Droidmonitor created revert due to b/352465601. Will be verifying through ABTD before submission.>
Change-Id: Ia71e697e180b569480be9f029d9e729f42d5f855
2024-07-11 14:43:27 +00:00
Krzysztof Kosiński
2b44cfa2c1
[automerger skipped] Delete sepolicy for legacy VR services. am: 8a81e8bf61
am: e7a890e411
-s ours
...
am skip reason: Merged-In I79bc66b80c36df398fe872f4e99b86e9a828479c with SHA-1 09d569ecde
is already in history
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3163729
Change-Id: I3aef53b57d614687bd9e20985541a2256018cdd3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-11 08:58:24 +00:00
Krzysztof Kosiński
e7a890e411
Delete sepolicy for legacy VR services. am: 8a81e8bf61
...
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3163729
Change-Id: I42d710d82d1e43c88df080460be760c59ba50d4f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-11 08:24:38 +00:00
Krzysztof Kosiński
8a81e8bf61
Delete sepolicy for legacy VR services.
...
None of the zuma devices include these services.
Bug: 234559097
Test: presubmit
Flag: EXEMPT dead code removal
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:09d569ecdeaba2951e005a713ec82bded4be234e )
Merged-In: I79bc66b80c36df398fe872f4e99b86e9a828479c
Change-Id: I79bc66b80c36df398fe872f4e99b86e9a828479c
2024-07-11 07:25:53 +00:00
Treehugger Robot
d49d60035c
Merge "Delete sepolicy for legacy VR services." into main
2024-07-11 03:56:40 +00:00
Krzysztof Kosiński
09d569ecde
Delete sepolicy for legacy VR services.
...
None of the zuma devices include these services.
Bug: 234559097
Test: presubmit
Flag: EXEMPT dead code removal
Change-Id: I79bc66b80c36df398fe872f4e99b86e9a828479c
2024-07-10 22:19:13 +00:00
Vishvam Mazumdar
c802ed6d63
Merge "Add SELinux policy to allow CPU Idle Histogram Stats in dumpstate." into main
2024-07-10 21:41:10 +00:00
Vishvam Mazumdar
1dac9a1726
Add SELinux policy to allow CPU Idle Histogram Stats in dumpstate.
...
This change is to allow the CPU Idle Histogram Stats to be dumped in
bugreports so that there is more insight into the idle behavior of
devices in the field.
Test: build/flash
Test: adb bugreport
Bug: 344908619
Flag: EXEMPT bugfix
Change-Id: Ic1096564423a009a0180d7f771da8184688c1842
Signed-off-by: Vishvam Mazumdar <vmazumdar@google.com>
2024-07-10 21:39:07 +00:00
Wilson Sung
ea95f2b4a4
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 350832030
Bug: 350832258
Change-Id: Idd45bcee641af96f442ec2cd4443a3964d73f429
2024-07-03 02:05:06 +00:00
Treehugger Robot
a44d754cfa
Merge "Give bthal permission to read AoC version." into main
2024-06-28 05:50:59 +00:00
Madhav Iyengar
00484704f8
Give bthal permission to read AoC version.
...
Bug: 349661931
Flag: com.android.bluetooth.hal.flags.pixel_bt_aoc_offload_efw_xport
Test: Allows bthal to choose between USF and EFW transports to
communicate with AoC based on version.
Change-Id: I3edbcafd4ee5d0c875618c1a1c1b89e1bbd4d1ec
2024-06-28 01:15:50 +00:00
Sergey Volk
e406b07a85
Merge "Add sepolicy for DisplayPort wakeup node" into main
2024-06-28 00:30:01 +00:00