Jason Chiu
5eb65dec3a
Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488
am: 65ce874b81
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123
Change-Id: I4f3d173599f6c719baba66dd8f2fdae854a00371
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 13:12:23 +00:00
Jason Chiu
b7f9178a76
remove rule for bootctrl hidl version 1.2 am: 54b0343059
am: 27e2aeafa7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702
Change-Id: Ic3e8ecf57f805fd32e6973dbfc708704002753bd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 13:12:19 +00:00
Jason Chiu
d88644ea2f
Add rule for bootctrl AIDL am: 17fa2e6fe5
am: 36dc08bf81
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842
Change-Id: Iafe0815e93e1a7b8e00b729acff21253a40cf748
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 13:12:11 +00:00
Jason Chiu
65ce874b81
Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123
Change-Id: I72d2747b0751ff8b462e59abf974dc3a1a1a1aea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 12:28:20 +00:00
Jason Chiu
27e2aeafa7
remove rule for bootctrl hidl version 1.2 am: 54b0343059
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702
Change-Id: I43897ecaaae1ecbcb30479f510637e2680406c40
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 12:28:18 +00:00
Jason Chiu
36dc08bf81
Add rule for bootctrl AIDL am: 17fa2e6fe5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842
Change-Id: Ic0fa67cd73840070825f3cb197ad00656b4c296b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 12:28:16 +00:00
Jason Chiu
fe9e70cbbb
Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488
am: 7aa9a5e3c0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123
Change-Id: I8f36ce99361c4ce5d54b0ca52ff6f790de495457
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-25 19:41:50 +00:00
Jason Chiu
8bceac530e
remove rule for bootctrl hidl version 1.2 am: 54b0343059
am: b9e73326ee
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702
Change-Id: Ib1165fd100b06806f479b42785c1b68149cac6d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-25 19:41:48 +00:00
Jason Chiu
1882450326
Add rule for bootctrl AIDL am: 17fa2e6fe5
am: cbb8fed21e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842
Change-Id: If43e26b093fe9f77712a03e54506f86702be9485
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-25 19:41:45 +00:00
Jason Chiu
7aa9a5e3c0
Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123
Change-Id: I3bc9799d166ad41bbbb547884a9993a352b3f6c3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-21 02:59:19 +00:00
Jason Chiu
b9e73326ee
remove rule for bootctrl hidl version 1.2 am: 54b0343059
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702
Change-Id: Ia4efc4cdc0cb92c62c4ddcb7b6f458c4149657a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-21 02:59:16 +00:00
Jason Chiu
cbb8fed21e
Add rule for bootctrl AIDL am: 17fa2e6fe5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842
Change-Id: Idbac1303702c0845fd549564f28b20f2bf9f0a03
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-21 02:59:13 +00:00
Jason Chiu
90a1f80488
Add hal_bootctl_default read permission to rootfs in Recovery mode
...
Fix the following avc denial:
avc: denied { read } for pid=485 comm="android.hardwar" name="bin" dev="rootfs" ino=9529 scontext=u:r:hal_bootctl_default:s0 tcontext=u:object_r:rootfs:s0 tclass=dir permissive=0
Bug: 282670401
Change-Id: I23ab086ba21d6ffea8b48b4208933c031effc4d4
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 12:56:47 +00:00
Jason Chiu
54b0343059
remove rule for bootctrl hidl version 1.2
...
Bug: 282670401
Change-Id: I25d169c335fb551cf1862fdf6e6540485a2b8016
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 12:56:38 +00:00
Jason Chiu
17fa2e6fe5
Add rule for bootctrl AIDL
...
Bug: 282670401
Change-Id: I1b4c5e7ced0fe67bbbaca2b607e4ca7422e170e1
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 20:53:04 +08:00
Utku Utkan
4f7d7213fe
Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices" am: 62b083db4d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24124264
Change-Id: Iafecf9b6bfcc9982ca7ad609c7d4242df71a745c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 18:49:46 +00:00
Utku Utkan
62b083db4d
Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices"
...
Revert submission 24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL
Reason for revert: Relanding the original topic after copying the certificates under `device/google` for `without-vendor` branches
Reverted changes: /q/submissionid:24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL
Bug: 287069860
Test: m && flashall
Change-Id: Icc801ca310c0e512769ed84d185dd6149ae5f22b
2023-07-18 20:37:42 -07:00
Inseob Kim
ef514a009d
Revert "Introduce CameraServices seinfo tag for PixelCameraServices" am: 1ef04d8dda
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24122567
Change-Id: Icc8049a6eb58141c8ab7109f5810306492f2f3d5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 02:50:44 +00:00
Inseob Kim
1ef04d8dda
Revert "Introduce CameraServices seinfo tag for PixelCameraServices"
...
Revert submission 24056607-pixel-camera-services-extensions-sepolicy
Reason for revert: build breakage on git_main-without-vendor
Reverted changes: /q/submissionid:24056607-pixel-camera-services-extensions-sepolicy
Change-Id: I42e68b982d521acb9b9a088d58ff521be25beb7e
2023-07-19 01:15:27 +00:00
Utku Utkan
5dfb9ad64d
Introduce CameraServices seinfo tag for PixelCameraServices am: c3cf1b7cf0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24030833
Change-Id: I3ba20fc4bca8798a1bb84ace89f6097ea268041b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-18 21:49:07 +00:00
Utku Utkan
c3cf1b7cf0
Introduce CameraServices seinfo tag for PixelCameraServices
...
Bug: 287069860
Test: m && flashall && check against 'avc: denied' errors
Change-Id: I843c7e0577d88a7e84cb939135fe89f5923ea294
2023-07-18 12:18:35 -07:00
Wilson Sung
eb7e1f003a
Update SELinux error am: 8f56fc9709
am: 40759437ea
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780
Change-Id: Ia16972d5a05cca4c250ccb6d2e10749556cd17c5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 10:08:50 +00:00
Wilson Sung
4e94cbac7c
Update SELinux error am: 8f56fc9709
am: 358275a825
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780
Change-Id: If8899f2fa1458fd7b0d376b72ef50cdc14a7d993
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 10:00:58 +00:00
Wilson Sung
40759437ea
Update SELinux error am: 8f56fc9709
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780
Change-Id: I0713b4a21b1df066a4c6ed72be62a50cd89050fc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 09:17:57 +00:00
Wilson Sung
358275a825
Update SELinux error am: 8f56fc9709
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780
Change-Id: I971f8532161a1e9e25fc3015a26bd497a9176be6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 09:15:38 +00:00
Wilson Sung
8f56fc9709
Update SELinux error
...
Test: scanBugreport
Bug: 291237127
Change-Id: Iacb47dce94f8ee2f71d382a9d0a22a6570345e2d
2023-07-17 13:50:09 +08:00
Krzysztof Kosiński
3d97096517
Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c
am: 8e0c6c3838
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721
Change-Id: Id7d5c1f05cf53c6417142ae2522f748ad16ff95b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 23:07:08 +00:00
Krzysztof Kosiński
def8ee2ded
Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c
am: b069918c11
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721
Change-Id: I4c54779e8cbb4c1dea697d02564fc1488ff80133
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 23:04:08 +00:00
Krzysztof Kosiński
8e0c6c3838
Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721
Change-Id: I364339a11ddaeec5dc2e71b3add58b20384a532a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 22:14:09 +00:00
Krzysztof Kosiński
b069918c11
Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721
Change-Id: I3397af974f95726b175abcea36a44a02e304cb5d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 22:12:18 +00:00
Krzysztof Kosiński
583baf021c
Remove bug map entry for unknown property reads in camera HAL.
...
Fixed by avoiding reading a property with the name "218".
Bug: 286508419
Test: check log for denials when running the camera on zuma device.
Change-Id: I3632868187d263ed787f5abf729c4e5c10a4f4c4
2023-07-14 07:12:51 +00:00
Treehugger Robot
0e9bd10bb6
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242
am: 7eba1f29bc
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602
Change-Id: I6c96a540b0c2214c93f11856c12930bbecd4ec2b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 20:09:14 +00:00
Treehugger Robot
d079eb063f
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242
am: a5187246a1
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602
Change-Id: I2f92a0f4c5a54e73ca000b0d57a72366034999e6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 19:09:55 +00:00
Badhri Jagan Sridharan
0079a99873
[automerger skipped] Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev am: 20eade41f0
am: 5958be5bd0
-s ours
...
am skip reason: Merged-In I72711aea571dad5be7ff36ca7a7c59240aaa2226 with SHA-1 62e714d81c
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23864376
Change-Id: I5190546cac91a0859b9b24f321cf4f4d22beca20
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 19:09:35 +00:00
Treehugger Robot
a5187246a1
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602
Change-Id: I5662604da8561e8e8729cd494ba35d1797339e82
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 19:02:40 +00:00
Treehugger Robot
7eba1f29bc
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602
Change-Id: I21783e724b86aa309cdd464420858f543f549e68
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 19:00:41 +00:00
Badhri Jagan Sridharan
cd3f2ab5c5
Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev am: 20eade41f0
am: 3e1e0b9b68
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23864376
Change-Id: Ia0fa536f5e6dfe951fab287f39bc938b67780818
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 18:16:09 +00:00
Treehugger Robot
8bcc8a1242
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev
2023-07-13 17:47:48 +00:00
Badhri Jagan Sridharan
5958be5bd0
Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev am: 20eade41f0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23864376
Change-Id: I512b4db16ff18acc313dc0d0c94f78bf4743ddcc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 17:34:05 +00:00
Badhri Jagan Sridharan
3e1e0b9b68
Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev am: 20eade41f0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23864376
Change-Id: Ie727156612f14c298a032468ca8c4567d6341f58
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 17:31:26 +00:00
Badhri Jagan Sridharan
20eade41f0
Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev
2023-07-13 16:43:18 +00:00
Wilson Sung
9975c3e8f1
Move systemui seapp_contexts to private am: 5c63d0ef54
am: 4c3281ff67
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24018505
Change-Id: I509a29a79857e76a55310b683ae3e5278bfd2b71
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 07:51:03 +00:00
Wilson Sung
2d80278b62
Move systemui seapp_contexts to private am: 5c63d0ef54
am: f33940a050
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24018505
Change-Id: I843d0640c84539163a3dafb1b48847d735c2a6d0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 07:48:18 +00:00
Wilson Sung
4c3281ff67
Move systemui seapp_contexts to private am: 5c63d0ef54
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24018505
Change-Id: I4ca08dc42bf7ce9ff292336d3863c2152afc5145
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 07:05:59 +00:00
Wilson Sung
f33940a050
Move systemui seapp_contexts to private am: 5c63d0ef54
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24018505
Change-Id: Ibb9b6cb84e984021e632d14323d622b549e40179
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 07:03:26 +00:00
Hasan Awais
484e16d61b
uwb: add permission to read SELinux state am: 4640c96bb4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24007918
Change-Id: Ie5b1758ea190103d6f7005246e3d2e37e6344fc7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 17:33:16 +00:00
Wilson Sung
5c63d0ef54
Move systemui seapp_contexts to private
...
Fix: 289480799
Bug: 288227521
Change-Id: Ifc4288125d454569a66151c3c61e000ffd3526ac
2023-07-11 15:24:10 +08:00
Hasan Awais
4640c96bb4
uwb: add permission to read SELinux state
...
Allows UWB HAL to read selinuxfs to determine the state
Used for controlling access to debugfs
Bug: 288049522
Test: local build pass
Change-Id: I1237d001d27999c796bbb28629847f5a5639cd3e
Signed-off-by: Hasan Awais <hasanawais@google.com>
2023-07-10 17:12:33 +00:00
Wilson Sung
e0c443771a
Update SELinux error am: 83671d2646
am: 01714c600b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24002585
Change-Id: Ib508bbbdf4dcaf39f96ee371cff499c041aa9f83
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-10 11:08:31 +00:00
Wilson Sung
5ca7dc1f44
Update SELinux error am: 83671d2646
am: 1c8431e2b4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24002585
Change-Id: I8e6d9974c86df95b0b6a44343d1c59469c4b664a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-10 11:02:48 +00:00