Leo Hsieh
3443d6d373
Merge "Allow hal_fingerprint_default to access sysfs_aoc_udfps"
2023-05-25 00:58:34 +00:00
Jimmy Hu
a6b09ce04e
Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev am: 86cb19bb2f
am: 9279426af4
am: 41369192ab
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23341842
Change-Id: Ic4b1dd6c02cffaf4ec285e49e5ba6763c020b531
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 09:34:07 +00:00
Jimmy Hu
86cb19bb2f
Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev
2023-05-24 08:14:01 +00:00
Kenny Root
107d3314a4
Merge "Add GSA logs policy" into udc-d1-dev
2023-05-22 05:14:11 +00:00
Jimmy Hu
70e6dd395b
Set sepolicy for shell script of disabling contaminant detection
...
(ported from Ib2e3cf498851c0c9e5e74aacc9bf391549c0ad1a)
Bug: 263916675
Bug: 264231895
Test: setprop vendor.usb.contaminantdisable true
Change-Id: Ia451a6abc4a3c872c002efa323d06e9179bd656b
Signed-off-by: Jimmy Hu <hhhuuu@google.com>
2023-05-19 09:54:23 +00:00
Kenny Root
7be3a71942
Add GSA logs policy
...
This adds a label to the sysfs files for GSA logs to allow dumpstate to
read them during a bugreport.
(cherry picked from commit 076591d107
)
Bug: 271125313
Test: adb shell dumpstate
Change-Id: I8842c0bec972c4cfad15ca689f8e4ae7fa99e179
Merged-In: I8842c0bec972c4cfad15ca689f8e4ae7fa99e179
2023-05-17 17:36:35 +00:00
Luke Chang
3d16072afb
Merge "sepolicy: label cpd cl2 & cl1 target_residency" into udc-d1-dev
2023-05-17 10:09:06 +00:00
lukechang
73e88c0a83
sepolicy: label cpd cl2 & cl1 target_residency
...
Test: build and boot to home
Bug: 277390134
Merged-In: I127ffc74aa68976de4aaa4a750b4043def4e2759
Change-Id: I127ffc74aa68976de4aaa4a750b4043def4e2759
Signed-off-by: lukechang <lukechang@google.com>
2023-05-17 02:11:41 +00:00
Luke Chang
c371a4da4a
Merge "sepolicy: label cpd cl2 & cl1 target_residency"
2023-05-17 02:05:30 +00:00
Luis Delgado de Mendoza Garcia
a3f0628f68
Add chre channel sepolicy entries
...
Bug: 275143652
Fix: 275143652
Test: in-device verification.
Change-Id: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
Merged-In: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
2023-05-16 21:43:09 +00:00
lukechang
b7f556c9cb
sepolicy: label cpd cl2 & cl1 target_residency
...
Test: build and boot to home
Bug: 277390134
Change-Id: I127ffc74aa68976de4aaa4a750b4043def4e2759
Signed-off-by: lukechang <lukechang@google.com>
2023-05-16 09:11:25 +00:00
Luis Delgado de Mendoza Garcia
2a06b44cdc
Add chre channel sepolicy entries
...
Bug: 241960170
Test: in-device verification.
Change-Id: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
2023-05-10 17:35:01 +00:00
leohsieh
b7db7f8eae
Allow hal_fingerprint_default to access sysfs_aoc_udfps
...
Fix the following avc denial:
avc: denied { search } for name="17000000.aoc" dev="sysfs" ino=22035 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc:s0 tclass=dir permissive=0
avc: denied { write } for name="udfps_set_clock_source" dev="sysfs" ino=106891 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc_udfps:s0 tclass=file permissive=0
avc: denied { read } for name="udfps_get_disp_freq" dev="sysfs" ino=106893 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc_udfps:s0 tclass=file permissive=0
Bug: 267271482
Test: Verify fingerprint HAL process can read/write to the sysfs node.
Change-Id: I39a2e69b1c314d52944bb16ada61e7e6761561cf
2023-05-10 14:50:56 +08:00
lukechang
35f3c85c09
sepolicy: label cpd cl2 & cl1
...
Test: build and boot to home
Bug: 277390134
Change-Id: Iad525a9c556ee436afb8cbd29156b6b593329e83
Signed-off-by: lukechang <lukechang@google.com>
2023-05-08 08:49:45 +00:00
lukechang
9d44de7ecf
sepolicy: label cpd cl2 & cl1
...
Test: build and boot to home
Bug: 277390134
Merged-In: Iad525a9c556ee436afb8cbd29156b6b593329e83
Change-Id: Iad525a9c556ee436afb8cbd29156b6b593329e83
Signed-off-by: lukechang <lukechang@google.com>
2023-05-08 08:39:21 +00:00
TreeHugger Robot
27d8b200d6
Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev am: 1db3ac365d
am: 55ecf93b7d
am: 5b6de1f086
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22589719
Change-Id: I70e686a83c79305cd21fe972748c72056e64c433
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 07:34:49 +00:00
TreeHugger Robot
1db3ac365d
Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev
2023-05-05 05:35:55 +00:00
Manali Bhutiyani
cf161d6ce3
[display-stats] enable pixelstats access to display metrics on Zuma devices.
...
Bug: 259554507
Test: Build and boot on device
adb shell cmd stats print-stats | grep -i <atom-id>
Change-Id: Ifc47211063b98f727b3b0eb7f7ebd42e3c7bb99b
2023-05-04 20:56:24 +00:00
Jack Wu
06bd429e9e
sepolicy: allows pixelstat to access pca file nodes am: 8d45937a38
am: 923f9f2f5e
am: 4b33e0e2d2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22987856
Change-Id: I79ee04faddffa909f5529a81af5fdf68c3a2a879
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 15:33:44 +00:00
Jack Wu
8d45937a38
sepolicy: allows pixelstat to access pca file nodes
...
Bug: 262520811
Test: no Permission denied while accessing the file node
Change-Id: I0b50d85ea7002c9ee16f4c34b472b45def7f374e
Signed-off-by: Jack Wu <wjack@google.com>
2023-05-03 09:31:08 +00:00
TreeHugger Robot
0c8288d278
Merge "Add memtrack" into udc-d1-dev am: d1c31b785d
am: e23db371db
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22780494
Change-Id: Ida509a8cc023577b896d3df8f60e15f61421cf13
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 00:37:20 +00:00
Ankit Goyal
5e4db7517c
Add memtrack
...
Bug: 279108265
Test: dumpsys meminfo
Change-Id: Ib46c89811aa3aa1a5573076f9dc69e7222f56ea4
2023-04-20 23:18:56 -07:00
Minchan Kim
a382f85f96
move vendor_cma_debugfs into gs-common
...
The CMA dump is common feature for pixel devices so move
it to gs-common.
Bug: 276901078
Test: dumpstate_board.txt on adb bugreport includes the info
Change-Id: I46be7899939da3ae7e9323a0d3ee92f4b3759acf
Signed-off-by: Minchan Kim <minchan@google.com>
(cherry picked from commit afb8d91c5dd0df836c6c8a53963b44e23005efb7)
2023-04-12 13:25:46 +00:00
Minchan Kim
11e5da54ef
Merge "remove dump_cma"
2023-04-12 03:25:58 +00:00
Treehugger Robot
eefef62f70
Merge "Add btbcm wakelock node context" into udc-d1-dev am: bc7379022a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22572817
Change-Id: Ie49fcc84a41c924558050f7d4a283a915bc68b84
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 01:40:12 +00:00
Minchan Kim
1b4fae5ce3
remove dump_cma
...
We will introduce it into gs-common
Bug: 276901078
Change-Id: I56a0c67fb09563baacbabf738625bf748ab80378
Signed-off-by: Minchan Kim <minchan@google.com>
2023-04-12 01:22:08 +00:00
Treehugger Robot
bc7379022a
Merge "Add btbcm wakelock node context" into udc-d1-dev
2023-04-12 00:32:46 +00:00
Wei Wang
87214b4c2c
Merge "sepolicy: label bci and dsu max frequency" into udc-d1-dev am: 4cd8d2fef9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22497095
Change-Id: I27ceda44c1a2baeb2450c56cbfed0762b68274ab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-11 17:05:18 +00:00
Wilson Sung
2e19e54fe5
Add btbcm wakelock node context
...
avc: denied { read } for name="wakeup178" dev="sysfs" ino=119871 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0
Bug: 277717252
Test: boot-to-home and no avc error
Change-Id: I82ed45ff6bf28c0cf2237098c54b6ead59c6c284
2023-04-11 11:02:26 +00:00
Ali K. Zadeh
1f56ec32b6
sepolicy: label bci and dsu max frequency
...
Bug: 274005880
Test: powerhint is able to change the bci/dsu max frequency
Change-Id: I8d59450878ba8e349d7f797cc74f0f1cc00c6187
2023-04-10 23:24:55 +00:00
Darren Hsu
bc15f1c8ee
sepolicy: fix VTS failure for system suspend [RESTRICT AUTOMERGE]
...
Bug: 275143652
Test: run vts -m SuspendSepolicyTests
Change-Id: I7cb5fdb18e7b16d98961bfed11da21496e8fa026
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-03-29 18:46:56 +08:00
Wilson Sung
c705e81227
Merge "Move OTA context out of legacy folder" to master
...
Bug: 275143841
Test: OTA
Change-Id: I4774b7c48c075afc1b02d8c34fded212cd0efffb
2023-03-27 11:46:05 +08:00
Wilson Sung
6acea9d647
Move OTA context out of legacy folder
...
Bug: 275143841
Test: OTA
Change-Id: I4774b7c48c075afc1b02d8c34fded212cd0efffb
2023-03-27 11:44:51 +08:00
TreeHugger Robot
48b6856587
Merge "sepolicy: label odpm paths for system suspend" into udc-d1-dev am: b76a3b6257
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22189946
Change-Id: I16131bd8b5cde5325378a6f22bca3042dd1fdf05
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 07:46:35 +00:00
Darren Hsu
8e028f0a03
sepolicy: label odpm paths for system suspend
...
Bug: 272166423
Test: run singleCommand pts -m PtsSELinuxTestCases
Change-Id: I0295cc09cd8eb46b19edcec0d74440e497440423
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-03-23 14:13:43 +08:00
Chungkai Mei
5bedd6391a
genfs_contexts: fix path for i2c peripheral device [DO NOT MERGE]
...
correct path for i2c devices
Test: without avc denial when booting
Bug: 240641235
Change-Id: Iabb7bdac51c2877a9b254bb287361c58f16a353f
Signed-off-by: Chungkai Mei <chungkai@google.com>
2023-03-21 01:17:40 +00:00
Alice Sheng
c3288bb774
Merge "Add sepolicy for RA9530 nodes."
2023-03-15 17:57:24 +00:00
TreeHugger Robot
e83033d9f1
Merge "sepolicy: label dsu and bci" into udc-d1-dev am: 35b10634bf
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21981985
Change-Id: I0eb26b8dc03fdef37e8ff4e80d4024ce0485dfab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 03:15:50 +00:00
Quinn Yan
542f3553c7
Merge "Remove the tracking_denials for edgetpu project. Fix the wrong sysfs directory for edgetpu." into udc-dev am: fe4ffed5de
am: b1ebacbd43
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22082013
Change-Id: I17f0e8c9a9d98a0b67a2c3dbdd4fa9c7be427626
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 03:02:33 +00:00
TreeHugger Robot
35b10634bf
Merge "sepolicy: label dsu and bci" into udc-d1-dev
2023-03-15 02:28:38 +00:00
Quinn Yan
e825edbf28
Merge "Remove the tracking_denials for edgetpu project. Fix the wrong sysfs directory for edgetpu." into udc-dev am: fe4ffed5de
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22082013
Change-Id: I3a6e12bb4e7f9e81deb4b0cf9c1d59102370efef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 01:42:42 +00:00
Quinn Yan
fe4ffed5de
Merge "Remove the tracking_denials for edgetpu project. Fix the wrong sysfs directory for edgetpu." into udc-dev
2023-03-15 01:26:24 +00:00
qinyiyan
1f30d7d1f9
Remove the tracking_denials for edgetpu project.
...
Fix the wrong sysfs directory for edgetpu.
Test: No avc denails seen with the selinx=enforcing
Bug: 264489387,264489676
Change-Id: I5d4d249a0b906e3e5d765ed8830fd915db8aa66e
2023-03-14 17:01:19 -07:00
Kyle Lin
ed9bcae5ba
sepolicy: label dsu and bci
...
Bug: 272750446
Bug: 269809407
Bug: 258100337
Test: build and boot
Change-Id: Ica7902851c307fcf71d3ad09befdff6bdcc7a72c
2023-03-14 11:48:23 +08:00
Jeremy DeHaan
09e286f1ca
Merge "Allow HWC to access panel model" into udc-dev am: 3a29cc604b
am: dbe0ec8114
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21776404
Change-Id: Iff8da61c479f876d643a06bee39eeeae3b9c640b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 19:13:19 +00:00
Jeremy DeHaan
83126173b7
Merge "Allow HWC to access panel model" into udc-dev am: 3a29cc604b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21776404
Change-Id: I4c16dc7e470a1f07fafd29996502bdba66dd88ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 18:18:27 +00:00
Jeremy DeHaan
3a29cc604b
Merge "Allow HWC to access panel model" into udc-dev
2023-03-10 17:48:34 +00:00
Alice Sheng
726291157f
Add sepolicy for RA9530 nodes.
...
Bug: 270440233
Test: No selinux denials related to wireless
Change-Id: I790052270a20c3324c7b9a9f674dc48a7d003c6f
2023-03-09 14:34:13 -08:00
Darren Hsu
080b747bcd
Merge "sepolicy: label more paths for sysfs_odpm" into udc-dev am: 3867f2f21f
am: 2caf9aa778
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21912561
Change-Id: I6c058342009fbeed632fbc03a519ce7fa77bcc43
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 08:26:58 +00:00
Darren Hsu
055b52e584
Merge "sepolicy: label more paths for sysfs_odpm" into udc-dev am: 3867f2f21f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21912561
Change-Id: I2e1cde774f763e3f30b0e50484824483d5319c08
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 07:54:54 +00:00