TreeHugger Robot
c83e5be8d9
Merge "comply with VTS requirements" into udc-dev
2023-03-27 06:05:51 +00:00
Gina Ko
7a32ef8f12
Merge "Allow systemui to find cameraserver_service" into udc-d1-dev am: 5821d671f3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22270826
Change-Id: Id6c48fa93ffdf03e50925cec717fe971e6b63cb6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 05:57:43 +00:00
Gina Ko
5821d671f3
Merge "Allow systemui to find cameraserver_service" into udc-d1-dev
2023-03-27 05:32:14 +00:00
Neo Yu
69b786f1a1
Merge "Remove the bug of hal_radioext_default because the fix is merged." into udc-d1-dev am: e9aabf7e9e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22286082
Change-Id: I66001f37eb2bf0626f14fc3b92beb34ac77f6d00
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 04:46:22 +00:00
Neo Yu
e9aabf7e9e
Merge "Remove the bug of hal_radioext_default because the fix is merged." into udc-d1-dev
2023-03-27 04:17:02 +00:00
Adam Shih
e124d5aea9
comply with VTS requirements
...
Bug: 275036679
Bug: 275034315
Test:
atest VtsHalDumpstateTargetTest:PerInstanceAndMode/DumpstateAidlPerModeTest#TestOk/0_android_hardware_dumpstate_IDumpstateDevice_default_FULL
atest VtsHalDumpstateTargetTest:PerInstance/DumpstateAidlGeneralTest#TestInvalidModeArgument_Negative/0_android_hardware_dumpstate_IDumpstateDevice_default
Change-Id: I1c89d7662351ffae5409c3f81b4360579fdc00ae
2023-03-27 12:07:24 +08:00
Wilson Sung
c705e81227
Merge "Move OTA context out of legacy folder" to master
...
Bug: 275143841
Test: OTA
Change-Id: I4774b7c48c075afc1b02d8c34fded212cd0efffb
2023-03-27 11:46:05 +08:00
Wilson Sung
6acea9d647
Move OTA context out of legacy folder
...
Bug: 275143841
Test: OTA
Change-Id: I4774b7c48c075afc1b02d8c34fded212cd0efffb
2023-03-27 11:44:51 +08:00
Dinesh Yadav
81ad90854c
Merge "Add certificate & label for GCA-ENG & GCA-Next" into udc-d1-dev am: 4a01ae23ad
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22246482
Change-Id: Iee99f93a8a15d9f723d849f22565ce30ac552885
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:34:15 +00:00
Automerger Merge Worker
7f35172103
Merge "Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f
am: bd22079636
"
2023-03-27 03:33:59 +00:00
Neo Yu
d870375a14
Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f
am: bd22079636
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22222570
Change-Id: Ib82e2caabcaea504cb673e1323795c728bbf3ead
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:33:56 +00:00
Neo Yu
879b137a93
Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f
am: 70749d1b96
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22222570
Change-Id: I5d6c405caddfb607f0ab094c82e6344b1579c042
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:33:53 +00:00
Dinesh Yadav
4a01ae23ad
Merge "Add certificate & label for GCA-ENG & GCA-Next" into udc-d1-dev
2023-03-27 03:13:24 +00:00
Neo Yu
58ff635b67
Remove the bug of hal_radioext_default because the fix is merged.
...
Bug: 274374768
Test: verify by test rom
Change-Id: Ia9665e5223997cf498f9320dfd0b1dbdacaae0b2
2023-03-27 11:08:25 +08:00
Neo Yu
bd22079636
Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22222570
Change-Id: I0fb5f8c60d68f9b33af85531c2865db2a20c1c93
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:07:44 +00:00
Neo Yu
70749d1b96
Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22222570
Change-Id: I2d2a07056322f6971050e9299e17201b95773eaf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:07:31 +00:00
Neo Yu
5b1689534f
Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev
2023-03-27 02:36:56 +00:00
Gina Ko
ce85639700
Allow systemui to find cameraserver_service
...
avc: denied { find } for pid=2435 uid=10235 name=media.camera
scontext=u:r:systemui_app:s0:c235,c256,c512,c768
tcontext=u:object_r:cameraserver_service:s0 tclass=service_manager permissive=0
Bug: 272628174
Bug: 269964574
Bug: 274734888
Test: Manual. Able to turn on/off flashlight from QS.
Change-Id: Icedf70b06bd06eb5b819a00c9157b4f475e9a126
2023-03-25 00:18:23 -07:00
feiyuchen
f0dc7907b0
Allow camera HAL to access edgetpu_app_service
...
Today the EdgeTpu metrics logging library (used by EdgeTpu library used by camera HAL) has a dependency on edgetpu_app_service, in order to call its UserIsAuthorized API to know whether to log the metrics (We don't want to log metrics for 3P apps), see b/275016466.
This is not ideal, because strictly speaking, camera HAL doesn't need such dependency.
Still, this is fine and there is no security risk, because today even untrusted apps can call edgetpu_app_service: http://cs/android-internal/device/google/gs-common/edgetpu/sepolicy/untrusted_app_all.te;l=2;rcl=f4b62d12c171d4e294d8251e34197ab555c40673
Bug: 266084950
Test: Just mm
Change-Id: I6c0e4411370e4b300b9ceb3ad804688d873371cd
2023-03-24 17:01:49 +00:00
Dinesh Yadav
84aa699ac8
Add certificate & label for GCA-ENG & GCA-Next
...
This commit makes following changes:
- Add selinux policies for GCA-Eng & GCA-Next to access GXP device &
edgetpu services.
- Refactor code to push policies for Google Camera app from
legacy/whitechapel_pro/* to vendor/*
Tested:
- flashed both GCA-Eng & GCA-Next apps and observed no crashes due to gxp or edgetpu.
- scontext changed from "untrusted_app_32" to "debug_camera_app" in both cases.
Bug: 264490031
Change-Id: I51f69168eebd6c7e54e512b7abde8dd6bbe7c443
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-03-24 12:56:53 +00:00
Nicolas Geoffray
af3702bffd
Remove old debug map entries.
...
Bug: 264483352
Change-Id: Ie47107328f58dc4f1d4070e93c0cd09e88cee021
2023-03-24 08:16:00 +00:00
Automerger Merge Worker
c9f1b9e1eb
Merge changes from topic "am-d3a7fa5895ee4cec8bfdf44b308cc221"
...
* changes:
[automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1
-s ours am: d2ec06c722
-s ours
[automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da
-s ours am: 24656c3354
-s ours
2023-03-24 07:05:47 +00:00
Adam Shih
0253a82992
[automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1
-s ours am: d2ec06c722
-s ours
...
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029
Change-Id: Ibe3213924821184c0aaea408646a9fddf24fec28
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 07:05:36 +00:00
Adam Shih
a21760aee5
[automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da
-s ours am: 24656c3354
-s ours
...
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029
Change-Id: Id56ab87ccba7c0554bcdf08f72d1989b3ba2204e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 07:05:35 +00:00
Adam Shih
6e634640d9
[automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1
-s ours am: ebc5ee8dab
-s ours
...
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029
Change-Id: I9ac1838eccd3d571ca85855884e9542353d8e484
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 07:05:29 +00:00
Adam Shih
8ba9109c37
[automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da
-s ours am: 79ea18119e
-s ours
...
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029
Change-Id: If93f6a1a2ebba149bcb8f208a2d7bc84251876ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 07:05:27 +00:00
Adam Shih
ebc5ee8dab
[automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1
-s ours
...
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029
Change-Id: I6d02ee84161d92b4b2723cf6b08ccc76bc51ab81
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 06:23:08 +00:00
Adam Shih
79ea18119e
[automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da
-s ours
...
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029
Change-Id: Ia5202a87a85fa610fc08f0b9ec8be23592c98585
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 06:23:07 +00:00
Adam Shih
d2ec06c722
[automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1
-s ours
...
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029
Change-Id: I0318c2e1d5b68b41634d5a51528c0322718325da
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 06:23:04 +00:00
Adam Shih
24656c3354
[automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da
-s ours
...
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029
Change-Id: Iadaf733efce7927fe53d7228ccd8d088717cf45a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 06:23:03 +00:00
Adam Shih
2b921528f1
Merge "Move pixel dumpstate to gs-common" into udc-dev
2023-03-24 05:54:52 +00:00
TreeHugger Robot
36dba99911
Merge "Update SELinux error" into udc-d1-dev am: b5a5ffb5e7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236036
Change-Id: I9fefd92f37973c746ad518c6f5d74d993a310fec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 05:23:48 +00:00
Darren Hsu
fa57721d19
sepolicy: remove power stats from bug map am: 2965ba405c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236038
Change-Id: I4c17a46bc4749812b0a15f19e54c48edc42bd9c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 05:23:35 +00:00
TreeHugger Robot
b5a5ffb5e7
Merge "Update SELinux error" into udc-d1-dev
2023-03-24 05:07:42 +00:00
Darren Hsu
2965ba405c
sepolicy: remove power stats from bug map
...
Bug: 272166847
Test: N/A
Change-Id: If920d18418f87f14a1826dbe061cef4632a9646f
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-03-24 11:43:42 +08:00
Wilson Sung
599f4f5382
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 275001641
Test: scanBugreport
Bug: 268566481
Test: scanAvcDeniedLogRightAfterReboot
Bug: 268566481
Change-Id: I5a7ea66483985b6ca99162666d155fef69d65360
2023-03-24 11:11:17 +08:00
Automerger Merge Worker
5333bed98e
Merge "Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3
am: 4f15bf412d
"
2023-03-24 03:09:25 +00:00
KRIS CHEN
30adddd3c0
Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3
am: 4f15bf412d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22178643
Change-Id: Ic65859abe754b1340d414fe471d74f959745e1ac
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 03:09:06 +00:00
KRIS CHEN
355457bf9d
Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3
am: 24b32ddd4c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22178643
Change-Id: I0b1312780a03417859f9203ee8e1d34bca1ec2a4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 03:09:02 +00:00
Adam Shih
8538fd33da
Move pixel dumpstate to gs-common
...
Bug: 240530709
Test: adb bugreport
Change-Id: I10f98673ea507f841d9d3f33d737c4e73c1b5b19
Merged-In: I4c46a2495ea07b9e44f56c4c6be726621e0ebf65
2023-03-24 02:55:51 +00:00
KRIS CHEN
24b32ddd4c
Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22178643
Change-Id: I6fce057e9a6aef6d370bbf820818761fee8e615b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 02:41:38 +00:00
KRIS CHEN
4f15bf412d
Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22178643
Change-Id: Ic8a12d3e5a4d79ef5edbe17fc340c54760cf8998
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 02:41:26 +00:00
KRIS CHEN
dba88b81d3
Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev
2023-03-24 02:06:37 +00:00
Darren Hsu
1e254e01b3
Merge "Revert "Enforce system ui app"" into udc-d1-dev am: 128550da69
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22225579
Change-Id: Ica4b4787254f02f8c7fa361b238197918d1b4404
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 01:30:58 +00:00
Darren Hsu
128550da69
Merge "Revert "Enforce system ui app"" into udc-d1-dev
2023-03-24 00:48:36 +00:00
Dave Mankoff
eeeae0265a
Revert "Enforce system ui app"
...
This reverts commit ba953cdb9a
.
Reason for revert: http://b/274366326#comment22 . We can check this back in once we know what's going on.
Bug: 274366326
Bug: 264266705
Change-Id: I879cdec377e71af9142c82078bd3c022295c98c5
2023-03-23 19:44:22 +00:00
neoyu
44ee5a2fb2
sepolicy: allow hal_radioext_default binder call with servicemanager
...
avc: denied { call } for comm="binder:795_2" scontext=u:r:hal_radioext_default:s0 tcontext=u:r:servicemanager:s0 tclass=binder permissive=0
Bug: 274374768
Test: verify by test rom
Change-Id: I31cfbd234756fdc41663cec766f6b3bf23063bc7
2023-03-24 02:30:44 +08:00
TreeHugger Robot
8aa4f265eb
[automerger skipped] Merge "Revert "Move pixel dumpstate to gs-common"" into udc-dev am: 3fae47e04b
am: e12572cc98
-s ours
...
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 9844033c0a
is already in history. Merged-In was found from reverted change.
Reverted change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22188471
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22215371
Change-Id: I90e20e3eb64f6fca00fd5818f923a9cc5fdf2a11
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 09:01:05 +00:00
Mark Chang
75f77b7bc6
Merge "Add IScreenProtectorDetectorService policy for systemui_app." into udc-d1-dev am: 3c027fdc6e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22197842
Change-Id: I084554e9af7107be6c13aace51cab06c4bf614b0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 09:00:24 +00:00
TreeHugger Robot
e646905a73
[automerger skipped] Merge "Revert "Move pixel dumpstate to gs-common"" into udc-dev am: 3fae47e04b
am: 24536aa24c
-s ours
...
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 9844033c0a
is already in history. Merged-In was found from reverted change.
Reverted change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22188471
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22215371
Change-Id: I95db412852e139f1ddc4f3790d1ce65adcf87eab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 08:59:54 +00:00