Mark su
725f5b8df8
Add video12 as hw_jpg_device and enable it for debug_camera_app am: 51c91e5bdf
am: cbc15223d5
am: 870eb2484d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23053881
Change-Id: If4516eb1c6fcf0dfd20c9d04a76092fb9300a7d6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 09:06:22 +00:00
TreeHugger Robot
2df1fd9399
Merge "Remove old secure_element HIDL permission" into udc-d1-dev am: 23440aa9df
am: ae82081798
am: 55c2250a35
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23466920
Change-Id: I0972ca583406d0dbfba0528515890bb1b0946097
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 07:57:20 +00:00
Mark su
51c91e5bdf
Add video12 as hw_jpg_device and enable it for debug_camera_app
...
Test: 05-05 05:07:06.652 4616 4616 W FinishThread: type=1400 audit(0.0:24): avc: denied { read write } for name="video12" dev="tmpfs" ino=646 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:video_device:s0 tclass=chr_file permissive=0 app=com.google.android.GoogleCameraEng
05-08 22:00:59.000 7323 7323 I FinishThread: type=1400 audit(0.0:36): avc: denied { read } for name="lib_jpg_encoder.so"
dev="dm-45" ino=25639 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera_data_file:s0 tcl
ass=file permissive=1 app=com.google.android.GoogleCameraEng
05-08 22:00:59.000 7323 7323 I FinishThread: type=1400 audit(0.0:37): avc: denied { open } for path="/vendor/lib64/lib_j
pg_encoder.so" dev="dm-45" ino=25639 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera_da
ta_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng
05-08 22:46:00.260 4784 4784 I FinishThread: type=1400 audit(0.0:29): avc: denied { execute } for path="/vendor/lib64/
libhwjpeg.so" dev="dm-50" ino=55596 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera_d
ata_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng
05-08 22:33:30.504 7436 7436 I FinishThread: type=1400 audit(0.0:36): avc: denied { getattr } for path="/vendor/lib64/
lib_jpg_encoder.so" dev="dm-50" ino=53765 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_ca
mera_data_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng
05-08 22:33:30.504 7436 7436 I FinishThread: type=1400 audit(0.0:37): avc: denied { map } for path="/vendor/lib64/lib_
jpg_encoder.so" dev="dm-50" ino=53765 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera
_data_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng
binder:7312_2: type=1400 audit(0.0:18): avc: denied { read write } for name="video12" dev="tmpfs" ino=680 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hw_jpg_device:s0 tclass=chr_file permissive=1
05-08 22:28:37.692 7312 7312 I binder:7312_2: type=1400 audit(0.0:19): avc: denied { open } for path="/dev/video12" dev="tmpfs" ino=680 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hw_jpg_device:s0 tclass=chr_file permissive=1
05-08 22:28:37.692 7312 7312 I binder:7312_2: type=1400 audit(0.0:20): avc: denied { ioctl } for path="/dev/video12" dev="tmpfs" ino=680 ioctlcmd=0x5600 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hw_jpg_device:s0 tclass=chr_file permissive=1
05-08 22:28:37.700 7312 7312 I binder:7312_2: type=1400 audit(0.0:21): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=167 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=1
Bug: 267820687
Change-Id: I69f502d721f683d3532038d618f5fafc83f38b6b
2023-05-31 06:08:46 +00:00
TreeHugger Robot
23440aa9df
Merge "Remove old secure_element HIDL permission" into udc-d1-dev
2023-05-31 05:27:32 +00:00
Dinesh Yadav
55064ee2f6
Merge "Add SEPolicy for gxp_metrics_logger.so logging to stats service" into udc-d1-dev am: 15f5afcfab
am: 489a7de117
am: 87199f3e5a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23265297
Change-Id: I9db72caf2b829f6cd05b57267a12be49acdc6695
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 04:57:46 +00:00
Hyungjun Park
6de0a33f0a
Remove old secure_element HIDL permission
...
AIDL HAL is used in the new project and remove the old HIDL part.
Bug: 280530945
Test: VTS pass
Change-Id: Idd38fc59d7e89e2cafab5f4693d00abd6d4fb138
Signed-off-by: Hyungjun Park <hjun78.park@samsung.com>
2023-05-31 03:12:02 +00:00
Yixuan Wang
8a16687b51
Merge "Add selinux policy for chre vendor data directory"
2023-05-31 01:24:48 +00:00
Yixuan Wang
7530c4bc13
Add selinux policy for chre vendor data directory
...
Bug: 278114604
Test: on device test
Change-Id: I1ac96655571f811c116540aec3a1626d5cca1b16
2023-05-30 21:16:26 +00:00
Dinesh Yadav
e6d2f01a89
Add SEPolicy for gxp_metrics_logger.so logging to stats service
...
In order to access the gxp metrics library from the google camera
app (product partition), we need to create an SELinux exception for
the related shared library (in vendor) it uses.
This CL adds the same_process_hal_file tag to allow this exception.
Bug: 278516358
Change-Id: I42d41243d3ee47ebff4f766cd769b5387fd20852
2023-05-26 04:01:09 +00:00
Jimmy Hu
a6b09ce04e
Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev am: 86cb19bb2f
am: 9279426af4
am: 41369192ab
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23341842
Change-Id: Ic4b1dd6c02cffaf4ec285e49e5ba6763c020b531
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 09:34:07 +00:00
Jimmy Hu
86cb19bb2f
Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev
2023-05-24 08:14:01 +00:00
Kenny Root
107d3314a4
Merge "Add GSA logs policy" into udc-d1-dev
2023-05-22 05:14:11 +00:00
Jimmy Hu
70e6dd395b
Set sepolicy for shell script of disabling contaminant detection
...
(ported from Ib2e3cf498851c0c9e5e74aacc9bf391549c0ad1a)
Bug: 263916675
Bug: 264231895
Test: setprop vendor.usb.contaminantdisable true
Change-Id: Ia451a6abc4a3c872c002efa323d06e9179bd656b
Signed-off-by: Jimmy Hu <hhhuuu@google.com>
2023-05-19 09:54:23 +00:00
Prasanna Prapancham
9138d3d1de
add 8411 to logbuffer
...
Test: Flash local build and collect bugreport
Bug: 277799048
Change-Id: I877a91999a2f17df5ea90d3d2257b93bfd67e8e6
Signed-off-by: Prasanna Prapancham <prapancham@google.com>
(cherry picked from commit c1715483d1
)
2023-05-17 22:52:57 +00:00
Xu Han
01b692295a
Merge "Add permission for nautilus devices" into udc-d1-dev am: 639d91fb93
am: cb92b8fcdc
am: 6c5f7b4982
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23279761
Change-Id: I0e08457034c3abb712d3abf9bd0eb2f75c3a526b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 19:02:42 +00:00
Kenny Root
7be3a71942
Add GSA logs policy
...
This adds a label to the sysfs files for GSA logs to allow dumpstate to
read them during a bugreport.
(cherry picked from commit 076591d107
)
Bug: 271125313
Test: adb shell dumpstate
Change-Id: I8842c0bec972c4cfad15ca689f8e4ae7fa99e179
Merged-In: I8842c0bec972c4cfad15ca689f8e4ae7fa99e179
2023-05-17 17:36:35 +00:00
Xu Han
639d91fb93
Merge "Add permission for nautilus devices" into udc-d1-dev
2023-05-17 16:48:55 +00:00
Xu Han
bdc91f6477
Add permission for nautilus devices
...
Bug: 283015605
Test: Build
Change-Id: I986a2798a4a5ca927a1a2aaea61edca9fa59b2c5
2023-05-17 03:59:43 +00:00
Treehugger Robot
8768ad1049
Merge "uwb: add permissions for factory uwb calib file" into udc-d1-dev am: 05abdf9f26
am: e1766dcd82
am: a521555ae0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980180
Change-Id: Ice663723abb01c161ba1f3431d92e12fbf20711a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 18:43:50 +00:00
Treehugger Robot
05abdf9f26
Merge "uwb: add permissions for factory uwb calib file" into udc-d1-dev
2023-05-15 16:54:11 +00:00
Mahesh Kallelil
8e513c2155
Allow dump_modem to read logbuffer and wakeup events am: 1f885d0bcd
am: 56184ab96e
am: af236c3219
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22834646
Change-Id: I38d6bd8125af59ec6373d699e58d6a2461eedc5e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 12:42:59 +00:00
Mahesh Kallelil
1f885d0bcd
Allow dump_modem to read logbuffer and wakeup events
...
Updating sepolicy for dump_modem to read /dev/logbuffer_cpif. This is
required as part of bugreport.
Test: Tested bugreport on P23
Bug: 278501642
Change-Id: I102583e37ec2e3852fd901a75bbb06de9ac6f77c
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2023-05-09 00:20:07 -07:00
Hasan Awais
14b2c135bb
uwb: add permissions for factory uwb calib file
...
needed for copying the factory calib file from persist to
/data/vendor/uwb, along with converting the file to a valid format
for uwb HAL
Bug: 274513871
Bug: 279820265
Test: local build passed
Change-Id: I4c4286cd5c200475cac3b9d58a81724d631c49e0
Signed-off-by: Hasan Awais <hasanawais@google.com>
2023-05-09 00:27:47 +00:00
TreeHugger Robot
99c3feb294
Merge "Add tele sensor sepolicy permission" into udc-d1-dev am: b417627fb8
am: 899d3062b6
am: ebb31ef6bb
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020018
Change-Id: I2c9c384487f02bf9d8a12db6121982a611a903f1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-08 04:00:55 +00:00
TreeHugger Robot
b417627fb8
Merge "Add tele sensor sepolicy permission" into udc-d1-dev
2023-05-08 02:00:59 +00:00
Treehugger Robot
ab47a1ae3b
Merge "Add sepolicy permission of new camera components" into udc-d1-dev am: 74e0e5fc37
am: ad2c33b44a
am: 76ab0fefef
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982823
Change-Id: Ia805db6bdaa4a25a8606473eb668ab9bcf029590
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 07:36:25 +00:00
Kamal Shafi
e1464f8e53
Add tele sensor sepolicy permission
...
Bug: 280370254
Test: build pass
Change-Id: If76c157e272f40159bcd6aac08d4b3bc88991338
2023-05-04 09:18:55 +00:00
horngchuang
5e6e5b568b
Add sepolicy permission of new camera components
...
Bug: 279885244
Bug: 280392819
Test: Build and test for sensor denials
Change-Id: Ib29b0287bc52f9c0fe6e3c18c272e6593507371b
2023-05-04 07:38:46 +00:00
Treehugger Robot
03abfd7621
Merge "Correct sepolicy permission for new UW cam EEPROM" into udc-d1-dev am: cdb62d5474
am: a43377782f
am: 8efc7938fe
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22896105
Change-Id: Id34f927edf557c108df3e70acb5e8fe57ddae3d7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 10:27:45 +00:00
Treehugger Robot
cdb62d5474
Merge "Correct sepolicy permission for new UW cam EEPROM" into udc-d1-dev
2023-05-03 08:20:05 +00:00
Horng Chuang
bf13c5b01c
Merge "Add sepolicy permission for new svarog sensor" into udc-d1-dev am: 5a2189a5ae
am: 0f17ef32db
am: de56475f2b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22668237
Change-Id: Idc51f1cac6f6f8b441a90372de16d129c152c7ea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 05:48:17 +00:00
Horng Chuang
5a2189a5ae
Merge "Add sepolicy permission for new svarog sensor" into udc-d1-dev
2023-05-03 03:26:50 +00:00
Tom Huang
8fde4edfbf
Merge "Add hidraw device sepolicy for headtracking" into udc-d1-dev am: dd5df5791f
am: 5c0053c5ec
am: 34dd9a81d9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22874908
Change-Id: Id094f59aa2876b5742ae239f0f546ca9cda868e4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 12:37:13 +00:00
Tom Huang
dd5df5791f
Merge "Add hidraw device sepolicy for headtracking" into udc-d1-dev
2023-05-02 04:07:15 +00:00
horngchuang
a6d7203408
Add sepolicy permission for new svarog sensor
...
Bug: 278473644
Test: Build and test for sensor denials
Change-Id: I2816a2ada49d4369b975ac22693994cff5cd6aec
2023-05-01 15:34:33 +00:00
Kamal Shafi
47f407fa8d
Correct sepolicy permission for new UW cam EEPROM
...
change imentet camera sensor EEPROM naming to its codename.
Bug: 279547216
Test: build pass
Change-Id: Ib831119318a0b4467f81f93c009a28831cebac25
2023-04-28 02:56:30 +00:00
Andrew Chant
4f15fe1b3c
Merge "Use tof sensor codenames" into udc-d1-dev am: 6641141f91
am: ffa498bd79
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22307463
Change-Id: Ia9f66a6de0435447964bbaca863318d44e0e889f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:41:14 +00:00
Kamal Shafi
36cf79f233
Add sepolicy permission for new UW camera am: eb22b7d648
am: fedde4710a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22880541
Change-Id: I49afec0ddae190e345d286f2e267852a3698aef8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:38:58 +00:00
Andrew Chant
6641141f91
Merge "Use tof sensor codenames" into udc-d1-dev
2023-04-27 02:07:29 +00:00
Kamal Shafi
eb22b7d648
Add sepolicy permission for new UW camera
...
sepolicy including imentet camera sensor and gt24p64e EEPROM
Bug: 277988592
Bug: 279547216
Test: build pass
Change-Id: I01e2bc558eba7cf03c11818d9c806e6053808fd1
2023-04-26 11:32:33 +00:00
kuanyuhuang
477d58d695
Add hidraw device sepolicy for headtracking
...
Test: make and incoming HID data from Pixel Buds Pro
Bug: 276163506
Change-Id: I10833e215962ad007ad32a0d713e9b37ae888fdb
2023-04-26 09:20:11 +00:00
Treehugger Robot
57eb37c05b
Merge "Add sepolicy permission for new project" into udc-d1-dev am: dd9d69e132
am: b00e740e38
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22839998
Change-Id: Id3c71d2796366c78ced9b77cc1003c32c9fb65f4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 03:57:50 +00:00
Treehugger Robot
dd9d69e132
Merge "Add sepolicy permission for new project" into udc-d1-dev
2023-04-26 02:34:56 +00:00
TreeHugger Robot
0c8288d278
Merge "Add memtrack" into udc-d1-dev am: d1c31b785d
am: e23db371db
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22780494
Change-Id: Ida509a8cc023577b896d3df8f60e15f61421cf13
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 00:37:20 +00:00
TreeHugger Robot
d1c31b785d
Merge "Add memtrack" into udc-d1-dev
2023-04-25 21:44:08 +00:00
Prasanna Prapancham
43abed40a0
Merge "add 8411 to logbuffer"
2023-04-25 18:06:51 +00:00
horngchuang
4c3cd890be
Add sepolicy permission for new project
...
Bug: 279542096
Test: Build and test for sensor denials
Change-Id: I3d6b7ce33e101bd9eeacefae128239af3512b67f
2023-04-25 08:09:29 +00:00
Ankit Goyal
5e4db7517c
Add memtrack
...
Bug: 279108265
Test: dumpsys meminfo
Change-Id: Ib46c89811aa3aa1a5573076f9dc69e7222f56ea4
2023-04-20 23:18:56 -07:00
Ankit Goyal
33999737a0
Merge "Mark video secure devices as default dmabuf heaps" into udc-d1-dev am: 2f30e8ca85
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22743596
Change-Id: Iae3c3b2e55eb6dd245beb941d2a935d695a0939c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-20 17:44:04 +00:00
Prasanna Prapancham
c1715483d1
add 8411 to logbuffer
...
Test: Flash local build and collect bugreport
Bug: 277799048
Change-Id: I877a91999a2f17df5ea90d3d2257b93bfd67e8e6
Signed-off-by: Prasanna Prapancham <prapancham@google.com>
2023-04-20 17:43:30 +00:00