Inseob Kim
5eb322b197
Move coredomain seapp contexts to system_ext am: ac8048a4f7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24354514
Change-Id: I94af7d6ba7a52b5747781bb763f05e5c05b65715
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-09 03:56:23 +00:00
Inseob Kim
ac8048a4f7
Move coredomain seapp contexts to system_ext
...
Coredomain apps shouldn't be labeled with vendor sepolicy, due to Treble
violation.
Bug: 280547417
Test: TH
Change-Id: Ib8d191a6c07278b51eec88cd8142adf6c1a45668
Merged-In: Ib8d191a6c07278b51eec88cd8142adf6c1a45668
2023-08-08 15:11:08 +00:00
Wilson Sung
e93cda1238
Supress kernel avc log before SELinux initialized am: 2d2ec40c1a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24319337
Change-Id: I9df6960739466feb4e249141d16d0b2d2e3b7467
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-07 03:59:19 +00:00
Wilson Sung
2d2ec40c1a
Supress kernel avc log before SELinux initialized
...
Fix: 281814849
Fix: 292059050
Change-Id: Ie83557668ded8ab17bf77e60ed21db33e9f4f580
2023-08-04 07:32:39 +00:00
Treehugger Robot
1b1abb7ac9
Merge "gps: maintain one solution" into udc-qpr-dev am: 61939d2308
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24259847
Change-Id: Ie350939f0b0fb03dfc400e7ca89cf3b46214ecac
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 05:15:48 +00:00
Treehugger Robot
61939d2308
Merge "gps: maintain one solution" into udc-qpr-dev
2023-08-01 04:40:51 +00:00
Cheng Chang
cd3d87535f
gps: maintain one solution
...
Bug: 288813677
Test: compile for different devices and check binary.
Test: verification test at b/288813677.
Change-Id: I7ee13ab2641aee0256d4ddb5ba27070b51dbc5e5
2023-07-31 02:26:40 +00:00
Treehugger Robot
e1153b6555
Merge "Revert "Update SELinux error"" into udc-d1-dev am: 0f46a31902
am: 91cd7cbad8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24178926
Change-Id: If65e8446a432d2466a306da78ca40e04ece27efc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 18:17:35 +00:00
Treehugger Robot
91cd7cbad8
Merge "Revert "Update SELinux error"" into udc-d1-dev am: 0f46a31902
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24178926
Change-Id: I2aaa3eee203c5859a8f6cb57ee3612498f2d882e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 18:02:52 +00:00
Treehugger Robot
563532e1a2
Merge "Revert "Update SELinux error"" into udc-d1-dev am: 0f46a31902
am: 3377a38d65
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24178926
Change-Id: I87762ed51ab7acc8d9889e8565451badeba56610
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 10:32:14 +00:00
Treehugger Robot
3377a38d65
Merge "Revert "Update SELinux error"" into udc-d1-dev am: 0f46a31902
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24178926
Change-Id: I68f3638898f861784276508406773649d6d21c21
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 09:49:05 +00:00
Treehugger Robot
0f46a31902
Merge "Revert "Update SELinux error"" into udc-d1-dev
2023-07-28 00:06:22 +00:00
Jason Chiu
5eb65dec3a
Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488
am: 65ce874b81
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123
Change-Id: I4f3d173599f6c719baba66dd8f2fdae854a00371
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 13:12:23 +00:00
Jason Chiu
b7f9178a76
remove rule for bootctrl hidl version 1.2 am: 54b0343059
am: 27e2aeafa7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702
Change-Id: Ic3e8ecf57f805fd32e6973dbfc708704002753bd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 13:12:19 +00:00
Jason Chiu
d88644ea2f
Add rule for bootctrl AIDL am: 17fa2e6fe5
am: 36dc08bf81
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842
Change-Id: Iafe0815e93e1a7b8e00b729acff21253a40cf748
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 13:12:11 +00:00
Jason Chiu
65ce874b81
Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123
Change-Id: I72d2747b0751ff8b462e59abf974dc3a1a1a1aea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 12:28:20 +00:00
Jason Chiu
27e2aeafa7
remove rule for bootctrl hidl version 1.2 am: 54b0343059
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702
Change-Id: I43897ecaaae1ecbcb30479f510637e2680406c40
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 12:28:18 +00:00
Jason Chiu
36dc08bf81
Add rule for bootctrl AIDL am: 17fa2e6fe5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842
Change-Id: Ic0fa67cd73840070825f3cb197ad00656b4c296b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 12:28:16 +00:00
Jason Chiu
fe9e70cbbb
Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488
am: 7aa9a5e3c0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123
Change-Id: I8f36ce99361c4ce5d54b0ca52ff6f790de495457
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-25 19:41:50 +00:00
Jason Chiu
8bceac530e
remove rule for bootctrl hidl version 1.2 am: 54b0343059
am: b9e73326ee
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702
Change-Id: Ib1165fd100b06806f479b42785c1b68149cac6d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-25 19:41:48 +00:00
Jason Chiu
1882450326
Add rule for bootctrl AIDL am: 17fa2e6fe5
am: cbb8fed21e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842
Change-Id: If43e26b093fe9f77712a03e54506f86702be9485
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-25 19:41:45 +00:00
Yunju Lee
72f7cbe324
Revert "Update SELinux error"
...
This reverts commit 8f56fc9709
.
Reason for revert: b/291237127 is fixed
Bug: 291237127
Change-Id: I58e2636fb2ef1113a4305152948e07ed8a27a7d9
2023-07-24 15:10:01 +00:00
Jason Chiu
7aa9a5e3c0
Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123
Change-Id: I3bc9799d166ad41bbbb547884a9993a352b3f6c3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-21 02:59:19 +00:00
Jason Chiu
b9e73326ee
remove rule for bootctrl hidl version 1.2 am: 54b0343059
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702
Change-Id: Ia4efc4cdc0cb92c62c4ddcb7b6f458c4149657a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-21 02:59:16 +00:00
Jason Chiu
cbb8fed21e
Add rule for bootctrl AIDL am: 17fa2e6fe5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842
Change-Id: Idbac1303702c0845fd549564f28b20f2bf9f0a03
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-21 02:59:13 +00:00
Jason Chiu
90a1f80488
Add hal_bootctl_default read permission to rootfs in Recovery mode
...
Fix the following avc denial:
avc: denied { read } for pid=485 comm="android.hardwar" name="bin" dev="rootfs" ino=9529 scontext=u:r:hal_bootctl_default:s0 tcontext=u:object_r:rootfs:s0 tclass=dir permissive=0
Bug: 282670401
Change-Id: I23ab086ba21d6ffea8b48b4208933c031effc4d4
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 12:56:47 +00:00
Jason Chiu
54b0343059
remove rule for bootctrl hidl version 1.2
...
Bug: 282670401
Change-Id: I25d169c335fb551cf1862fdf6e6540485a2b8016
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 12:56:38 +00:00
Jason Chiu
17fa2e6fe5
Add rule for bootctrl AIDL
...
Bug: 282670401
Change-Id: I1b4c5e7ced0fe67bbbaca2b607e4ca7422e170e1
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 20:53:04 +08:00
Utku Utkan
4f7d7213fe
Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices" am: 62b083db4d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24124264
Change-Id: Iafecf9b6bfcc9982ca7ad609c7d4242df71a745c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 18:49:46 +00:00
Utku Utkan
62b083db4d
Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices"
...
Revert submission 24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL
Reason for revert: Relanding the original topic after copying the certificates under `device/google` for `without-vendor` branches
Reverted changes: /q/submissionid:24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL
Bug: 287069860
Test: m && flashall
Change-Id: Icc801ca310c0e512769ed84d185dd6149ae5f22b
2023-07-18 20:37:42 -07:00
Inseob Kim
ef514a009d
Revert "Introduce CameraServices seinfo tag for PixelCameraServices" am: 1ef04d8dda
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24122567
Change-Id: Icc8049a6eb58141c8ab7109f5810306492f2f3d5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 02:50:44 +00:00
Inseob Kim
1ef04d8dda
Revert "Introduce CameraServices seinfo tag for PixelCameraServices"
...
Revert submission 24056607-pixel-camera-services-extensions-sepolicy
Reason for revert: build breakage on git_main-without-vendor
Reverted changes: /q/submissionid:24056607-pixel-camera-services-extensions-sepolicy
Change-Id: I42e68b982d521acb9b9a088d58ff521be25beb7e
2023-07-19 01:15:27 +00:00
Utku Utkan
5dfb9ad64d
Introduce CameraServices seinfo tag for PixelCameraServices am: c3cf1b7cf0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24030833
Change-Id: I3ba20fc4bca8798a1bb84ace89f6097ea268041b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-18 21:49:07 +00:00
Utku Utkan
c3cf1b7cf0
Introduce CameraServices seinfo tag for PixelCameraServices
...
Bug: 287069860
Test: m && flashall && check against 'avc: denied' errors
Change-Id: I843c7e0577d88a7e84cb939135fe89f5923ea294
2023-07-18 12:18:35 -07:00
Wilson Sung
eb7e1f003a
Update SELinux error am: 8f56fc9709
am: 40759437ea
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780
Change-Id: Ia16972d5a05cca4c250ccb6d2e10749556cd17c5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 10:08:50 +00:00
Wilson Sung
4e94cbac7c
Update SELinux error am: 8f56fc9709
am: 358275a825
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780
Change-Id: If8899f2fa1458fd7b0d376b72ef50cdc14a7d993
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 10:00:58 +00:00
Wilson Sung
40759437ea
Update SELinux error am: 8f56fc9709
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780
Change-Id: I0713b4a21b1df066a4c6ed72be62a50cd89050fc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 09:17:57 +00:00
Wilson Sung
358275a825
Update SELinux error am: 8f56fc9709
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780
Change-Id: I971f8532161a1e9e25fc3015a26bd497a9176be6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 09:15:38 +00:00
Wilson Sung
8f56fc9709
Update SELinux error
...
Test: scanBugreport
Bug: 291237127
Change-Id: Iacb47dce94f8ee2f71d382a9d0a22a6570345e2d
2023-07-17 13:50:09 +08:00
Krzysztof Kosiński
3d97096517
Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c
am: 8e0c6c3838
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721
Change-Id: Id7d5c1f05cf53c6417142ae2522f748ad16ff95b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 23:07:08 +00:00
Krzysztof Kosiński
def8ee2ded
Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c
am: b069918c11
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721
Change-Id: I4c54779e8cbb4c1dea697d02564fc1488ff80133
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 23:04:08 +00:00
Krzysztof Kosiński
8e0c6c3838
Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721
Change-Id: I364339a11ddaeec5dc2e71b3add58b20384a532a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 22:14:09 +00:00
Krzysztof Kosiński
b069918c11
Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721
Change-Id: I3397af974f95726b175abcea36a44a02e304cb5d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 22:12:18 +00:00
Krzysztof Kosiński
583baf021c
Remove bug map entry for unknown property reads in camera HAL.
...
Fixed by avoiding reading a property with the name "218".
Bug: 286508419
Test: check log for denials when running the camera on zuma device.
Change-Id: I3632868187d263ed787f5abf729c4e5c10a4f4c4
2023-07-14 07:12:51 +00:00
Treehugger Robot
0e9bd10bb6
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242
am: 7eba1f29bc
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602
Change-Id: I6c96a540b0c2214c93f11856c12930bbecd4ec2b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 20:09:14 +00:00
Treehugger Robot
d079eb063f
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242
am: a5187246a1
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602
Change-Id: I2f92a0f4c5a54e73ca000b0d57a72366034999e6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 19:09:55 +00:00
Badhri Jagan Sridharan
0079a99873
[automerger skipped] Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev am: 20eade41f0
am: 5958be5bd0
-s ours
...
am skip reason: Merged-In I72711aea571dad5be7ff36ca7a7c59240aaa2226 with SHA-1 62e714d81c
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23864376
Change-Id: I5190546cac91a0859b9b24f321cf4f4d22beca20
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 19:09:35 +00:00
Treehugger Robot
a5187246a1
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602
Change-Id: I5662604da8561e8e8729cd494ba35d1797339e82
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 19:02:40 +00:00
Treehugger Robot
7eba1f29bc
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602
Change-Id: I21783e724b86aa309cdd464420858f543f549e68
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 19:00:41 +00:00
Badhri Jagan Sridharan
cd3f2ab5c5
Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev am: 20eade41f0
am: 3e1e0b9b68
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23864376
Change-Id: Ia0fa536f5e6dfe951fab287f39bc938b67780818
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 18:16:09 +00:00