Wilson Sung
2d2ec40c1a
Supress kernel avc log before SELinux initialized
...
Fix: 281814849
Fix: 292059050
Change-Id: Ie83557668ded8ab17bf77e60ed21db33e9f4f580
2023-08-04 07:32:39 +00:00
Treehugger Robot
61939d2308
Merge "gps: maintain one solution" into udc-qpr-dev
2023-08-01 04:40:51 +00:00
Cheng Chang
cd3d87535f
gps: maintain one solution
...
Bug: 288813677
Test: compile for different devices and check binary.
Test: verification test at b/288813677.
Change-Id: I7ee13ab2641aee0256d4ddb5ba27070b51dbc5e5
2023-07-31 02:26:40 +00:00
Treehugger Robot
91cd7cbad8
Merge "Revert "Update SELinux error"" into udc-d1-dev am: 0f46a31902
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24178926
Change-Id: I2aaa3eee203c5859a8f6cb57ee3612498f2d882e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 18:02:52 +00:00
Treehugger Robot
0f46a31902
Merge "Revert "Update SELinux error"" into udc-d1-dev
2023-07-28 00:06:22 +00:00
Yunju Lee
72f7cbe324
Revert "Update SELinux error"
...
This reverts commit 8f56fc9709
.
Reason for revert: b/291237127 is fixed
Bug: 291237127
Change-Id: I58e2636fb2ef1113a4305152948e07ed8a27a7d9
2023-07-24 15:10:01 +00:00
Jason Chiu
7aa9a5e3c0
Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123
Change-Id: I3bc9799d166ad41bbbb547884a9993a352b3f6c3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-21 02:59:19 +00:00
Jason Chiu
b9e73326ee
remove rule for bootctrl hidl version 1.2 am: 54b0343059
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702
Change-Id: Ia4efc4cdc0cb92c62c4ddcb7b6f458c4149657a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-21 02:59:16 +00:00
Jason Chiu
cbb8fed21e
Add rule for bootctrl AIDL am: 17fa2e6fe5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842
Change-Id: Idbac1303702c0845fd549564f28b20f2bf9f0a03
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-21 02:59:13 +00:00
Jason Chiu
90a1f80488
Add hal_bootctl_default read permission to rootfs in Recovery mode
...
Fix the following avc denial:
avc: denied { read } for pid=485 comm="android.hardwar" name="bin" dev="rootfs" ino=9529 scontext=u:r:hal_bootctl_default:s0 tcontext=u:object_r:rootfs:s0 tclass=dir permissive=0
Bug: 282670401
Change-Id: I23ab086ba21d6ffea8b48b4208933c031effc4d4
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 12:56:47 +00:00
Jason Chiu
54b0343059
remove rule for bootctrl hidl version 1.2
...
Bug: 282670401
Change-Id: I25d169c335fb551cf1862fdf6e6540485a2b8016
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 12:56:38 +00:00
Jason Chiu
17fa2e6fe5
Add rule for bootctrl AIDL
...
Bug: 282670401
Change-Id: I1b4c5e7ced0fe67bbbaca2b607e4ca7422e170e1
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 20:53:04 +08:00
Utku Utkan
62b083db4d
Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices"
...
Revert submission 24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL
Reason for revert: Relanding the original topic after copying the certificates under `device/google` for `without-vendor` branches
Reverted changes: /q/submissionid:24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL
Bug: 287069860
Test: m && flashall
Change-Id: Icc801ca310c0e512769ed84d185dd6149ae5f22b
2023-07-18 20:37:42 -07:00
Inseob Kim
1ef04d8dda
Revert "Introduce CameraServices seinfo tag for PixelCameraServices"
...
Revert submission 24056607-pixel-camera-services-extensions-sepolicy
Reason for revert: build breakage on git_main-without-vendor
Reverted changes: /q/submissionid:24056607-pixel-camera-services-extensions-sepolicy
Change-Id: I42e68b982d521acb9b9a088d58ff521be25beb7e
2023-07-19 01:15:27 +00:00
Utku Utkan
c3cf1b7cf0
Introduce CameraServices seinfo tag for PixelCameraServices
...
Bug: 287069860
Test: m && flashall && check against 'avc: denied' errors
Change-Id: I843c7e0577d88a7e84cb939135fe89f5923ea294
2023-07-18 12:18:35 -07:00
Wilson Sung
40759437ea
Update SELinux error am: 8f56fc9709
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780
Change-Id: I0713b4a21b1df066a4c6ed72be62a50cd89050fc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 09:17:57 +00:00
Wilson Sung
8f56fc9709
Update SELinux error
...
Test: scanBugreport
Bug: 291237127
Change-Id: Iacb47dce94f8ee2f71d382a9d0a22a6570345e2d
2023-07-17 13:50:09 +08:00
Krzysztof Kosiński
8e0c6c3838
Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721
Change-Id: I364339a11ddaeec5dc2e71b3add58b20384a532a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 22:14:09 +00:00
Krzysztof Kosiński
583baf021c
Remove bug map entry for unknown property reads in camera HAL.
...
Fixed by avoiding reading a property with the name "218".
Bug: 286508419
Test: check log for denials when running the camera on zuma device.
Change-Id: I3632868187d263ed787f5abf729c4e5c10a4f4c4
2023-07-14 07:12:51 +00:00
Treehugger Robot
a5187246a1
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602
Change-Id: I5662604da8561e8e8729cd494ba35d1797339e82
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 19:02:40 +00:00
Treehugger Robot
8bcc8a1242
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev
2023-07-13 17:47:48 +00:00
Badhri Jagan Sridharan
5958be5bd0
Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev am: 20eade41f0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23864376
Change-Id: I512b4db16ff18acc313dc0d0c94f78bf4743ddcc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 17:34:05 +00:00
Badhri Jagan Sridharan
20eade41f0
Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev
2023-07-13 16:43:18 +00:00
Wilson Sung
4c3281ff67
Move systemui seapp_contexts to private am: 5c63d0ef54
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24018505
Change-Id: I4ca08dc42bf7ce9ff292336d3863c2152afc5145
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 07:05:59 +00:00
Wilson Sung
5c63d0ef54
Move systemui seapp_contexts to private
...
Fix: 289480799
Bug: 288227521
Change-Id: Ifc4288125d454569a66151c3c61e000ffd3526ac
2023-07-11 15:24:10 +08:00
Hasan Awais
4640c96bb4
uwb: add permission to read SELinux state
...
Allows UWB HAL to read selinuxfs to determine the state
Used for controlling access to debugfs
Bug: 288049522
Test: local build pass
Change-Id: I1237d001d27999c796bbb28629847f5a5639cd3e
Signed-off-by: Hasan Awais <hasanawais@google.com>
2023-07-10 17:12:33 +00:00
Wilson Sung
01714c600b
Update SELinux error am: 83671d2646
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24002585
Change-Id: I2bf029eace9344aa077b358085736df271264c5a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-10 10:23:10 +00:00
Wilson Sung
83671d2646
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 289480799
Change-Id: I6c013d99b9b004b0a39d0b1861fa89da46bc846d
2023-07-10 14:21:22 +08:00
Yunju Lee
0a86789618
Add GPU power hint sysfs node to sepolicy for Zuma
...
Bug: 228076319
Bug: 278493002
Test: Perfetto trace inspection
Change-Id: I2f78c2e9175faa3f8af4b55e93e9b0f3d6bebdf2
2023-07-07 21:40:20 +00:00
Samuel Huang
f65918769f
Merge "Revert "Revert "Create telephony.ril.silent_reset system_ext pro..."" into udc-qpr-dev
2023-07-07 01:45:24 +00:00
Treehugger Robot
304b7da426
Merge "Update SELinux error" into udc-d1-dev am: 58c254fcaa
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23875908
Change-Id: Ic709ca1a390ba7aa81492fcc93ee34c1a2a4372f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 16:14:12 +00:00
Treehugger Robot
58c254fcaa
Merge "Update SELinux error" into udc-d1-dev
2023-07-06 15:09:35 +00:00
Ruofei Ma
99ff7c4007
Merge "Dec: SELinux policy change to allow uclamp.min set" into udc-d1-dev am: f3258b9e00
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23852417
Change-Id: I0976a47af9e3ccab16a391c9835885b88166ac95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 03:33:06 +00:00
Ruofei Ma
4471c5e525
Merge "Revert "mediacodec_google: add hal_power"" into udc-d1-dev am: aa2084fe54
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23850445
Change-Id: I28bbba859b673990f752fed64098a8e56a9cb99a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 03:32:45 +00:00
Ruofei Ma
f3258b9e00
Merge "Dec: SELinux policy change to allow uclamp.min set" into udc-d1-dev
2023-07-06 02:49:56 +00:00
Ruofei Ma
aa2084fe54
Merge "Revert "mediacodec_google: add hal_power"" into udc-d1-dev
2023-07-06 02:49:51 +00:00
Wilson Sung
7a77620145
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 289856761
Test: scanBugreport
Bug: 289856761
Test: scanAvcDeniedLogRightAfterReboot
Bug: 289856761
Change-Id: I4a3dcd037b1f63b8d06edab5a5ef4919ce75b8bc
2023-07-04 11:17:41 +08:00
Badhri Jagan Sridharan
62e714d81c
Add USB wakeup sources sepolicy contexts
...
Bug: 289376260
Change-Id: I72711aea571dad5be7ff36ca7a7c59240aaa2226
Merged-In: I72711aea571dad5be7ff36ca7a7c59240aaa2226
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
2023-06-30 19:36:01 +00:00
Wilson Sung
bd6892b9d3
Move sysUI contexts to system_ext am: 4862829753
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23840925
Change-Id: Iae1889fe451b09d41160689c24d2888a1a4da796
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-29 04:17:50 +00:00
Ruofei Ma
4ee8ce9cd6
Dec: SELinux policy change to allow uclamp.min set
...
To get better performance for 4K60FPS HDR video, we need
to boost the cpu when the load is too heavy for Bigwave
decoder.
Bug: 274736629
Change-Id: I32d683084dd55354002d4fd4c266492df3839a35
Signed-off-by: Ruofei Ma <ruofeim@google.com>
2023-06-29 00:22:24 +00:00
Ruofei Ma
4bb2aa413d
Revert "mediacodec_google: add hal_power"
...
This reverts commit 3346e879e6
.
Reason for revert: This change is not needed since the performance boost implementation has changed
Change-Id: Icda43f23354e70503d3bb2efe0631a2d754a4920
2023-06-29 00:22:11 +00:00
Samuel Huang
0166c5fe0a
Revert "Revert "Create telephony.ril.silent_reset system_ext pro..."
...
Revert submission 23817868-revert-23736941-tpsr-ril-property-WQVGKEVBKX
Reason for revert: The root cause is missing property definition in gs101-sepolicy. This CL can be merged safely. Verified by abtd run: https://android-build.googleplex.com/builds/abtd/run/L48900000961646046
Reverted changes: /q/submissionid:23817868-revert-23736941-tpsr-ril-property-WQVGKEVBKX
Bug: 286476107
Change-Id: I6dde24447cb7caae0bf35d8b0342985e8c2f434a
2023-06-28 10:28:24 +00:00
Wilson Sung
4862829753
Move sysUI contexts to system_ext
...
Bug: 288227521
Change-Id: I3e5f2e76bf067f98b191b3b8ee6010c1abd95cb0
2023-06-28 14:10:06 +08:00
Sebastian Pickl
6f65e69366
Merge "Revert "Create telephony.ril.silent_reset system_ext property fo..."" into udc-qpr-dev
2023-06-27 10:37:16 +00:00
Sebastian Pickl
a14eb4e6b5
Revert "Create telephony.ril.silent_reset system_ext property fo..."
...
Revert submission 23736941-tpsr-ril-property
Reason for revert: culprit for b/289014054 verified by abtd run: https://android-build.googleplex.com/builds/abtd/run/L54800000961620143
Bug: 289014054
Reverted changes: /q/submissionid:23736941-tpsr-ril-property
Change-Id: I6bd6b1e890fa77140d2d0e33ce6ae8a8a03e16f6
2023-06-27 10:05:32 +00:00
Samuel Huang
6a7b19e2dc
Merge "Create telephony.ril.silent_reset system_ext property for RILD restart" into udc-qpr-dev
2023-06-27 02:21:20 +00:00
TreeHugger Robot
62b8a1fed8
Merge "Add kernel vendor_fw_file dir read permission" into udc-d1-dev am: 043ae16d5f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23753755
Change-Id: I64ce27f29959da86f4a3effdc2700c9edd12c365
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 11:02:13 +00:00
TreeHugger Robot
043ae16d5f
Merge "Add kernel vendor_fw_file dir read permission" into udc-d1-dev
2023-06-21 10:47:39 +00:00
Treehugger Robot
e25310025c
Merge "Supress kernel avc log before SELinux initialized" into udc-d1-dev am: d8b11ef832
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23753754
Change-Id: I7c9fa2e932b7547fee5aacf6a82177513f8d59ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 10:38:30 +00:00
Treehugger Robot
d8b11ef832
Merge "Supress kernel avc log before SELinux initialized" into udc-d1-dev
2023-06-21 09:59:33 +00:00