Hyungjun Park
6de0a33f0a
Remove old secure_element HIDL permission
...
AIDL HAL is used in the new project and remove the old HIDL part.
Bug: 280530945
Test: VTS pass
Change-Id: Idd38fc59d7e89e2cafab5f4693d00abd6d4fb138
Signed-off-by: Hyungjun Park <hjun78.park@samsung.com>
2023-05-31 03:12:02 +00:00
Chung-Kai (Michael) Mei
ca068bf60b
Merge "sepolicy: ignore avc denial" into udc-d1-dev
2023-05-29 05:47:43 +00:00
Chungkai Mei
e97101a6e8
sepolicy: ignore avc denial
...
ignore avc denial since it's debugfs
Bug: 271931921
Test: device-boot-health-check-extra test show passed https://android-build.googleplex.com/builds/abtd/run/L74000000960917226
Change-Id: I5f491f02c99776251cf3893de6224fb0f02cb320
Signed-off-by: Chungkai Mei <chungkai@google.com>
2023-05-29 03:11:41 +00:00
Donnie Pollitz
9fc92bdb28
Merge "Allow vendor_init to fix permissions of TEE data file" into udc-d1-dev
2023-05-26 07:17:41 +00:00
TreeHugger Robot
df113325a5
Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-d1-dev
2023-05-25 05:28:46 +00:00
Donnie Pollitz
16440338de
Allow vendor_init to fix permissions of TEE data file
...
Background:
* vendor_init needs to be able to possibly fix ownership of
tee_data_file
Bug: 280325952
Test: Changed permissions and confirmed user transitions
Change-Id: I2363f9ff695209bbf7b6661c8e9eb3b376b84ace
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-05-24 16:45:28 +02:00
Jimmy Hu
86cb19bb2f
Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev
2023-05-24 08:14:01 +00:00
Jin Jeong
f77e90366d
Merge "Revert "[Zuma] Fix SeLinux error"" into udc-d1-dev
2023-05-24 01:07:12 +00:00
Wilson Sung
d73217d81f
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 283725554
Test: scanBugreport
Bug: 283725554
Bug: 283725302
Test: scanAvcDeniedLogRightAfterReboot
Bug: 283725554
Change-Id: Ie482a46311c1dc1153ef04889e82971a09361e49
2023-05-22 15:01:49 +08:00
Kenny Root
107d3314a4
Merge "Add GSA logs policy" into udc-d1-dev
2023-05-22 05:14:11 +00:00
Lawrence Huang
7bf6643438
Merge "Add net_domain for GCA on zuma devices" into udc-d1-dev
2023-05-19 19:59:58 +00:00
Jimmy Hu
70e6dd395b
Set sepolicy for shell script of disabling contaminant detection
...
(ported from Ib2e3cf498851c0c9e5e74aacc9bf391549c0ad1a)
Bug: 263916675
Bug: 264231895
Test: setprop vendor.usb.contaminantdisable true
Change-Id: Ia451a6abc4a3c872c002efa323d06e9179bd656b
Signed-off-by: Jimmy Hu <hhhuuu@google.com>
2023-05-19 09:54:23 +00:00
Treehugger Robot
b295326a78
Merge "Remove selinux error bug reference after fixing" into udc-d1-dev
2023-05-19 03:07:49 +00:00
Lawrence Huang
c64c508a51
Add net_domain for GCA on zuma devices
...
Bug: 277097939
Change-Id: Iadfc1be5f9e6830693aed9d9b619815c7d1f9caf
(cherry picked from commit e979543b99
)
2023-05-19 01:53:03 +00:00
Grace Chen
e151f78f5a
Remove selinux error bug reference after fixing
...
Bug: 264483151
Test: None, simple bug removal
Change-Id: Id93085566c772e6b434777955b62b1ccaba64ae2
2023-05-18 17:54:20 -07:00
Prasanna Prapancham
9138d3d1de
add 8411 to logbuffer
...
Test: Flash local build and collect bugreport
Bug: 277799048
Change-Id: I877a91999a2f17df5ea90d3d2257b93bfd67e8e6
Signed-off-by: Prasanna Prapancham <prapancham@google.com>
(cherry picked from commit c1715483d1
)
2023-05-17 22:52:57 +00:00
Kenny Root
7be3a71942
Add GSA logs policy
...
This adds a label to the sysfs files for GSA logs to allow dumpstate to
read them during a bugreport.
(cherry picked from commit 076591d107
)
Bug: 271125313
Test: adb shell dumpstate
Change-Id: I8842c0bec972c4cfad15ca689f8e4ae7fa99e179
Merged-In: I8842c0bec972c4cfad15ca689f8e4ae7fa99e179
2023-05-17 17:36:35 +00:00
Xu Han
639d91fb93
Merge "Add permission for nautilus devices" into udc-d1-dev
2023-05-17 16:48:55 +00:00
Luke Chang
3d16072afb
Merge "sepolicy: label cpd cl2 & cl1 target_residency" into udc-d1-dev
2023-05-17 10:09:06 +00:00
Xu Han
bdc91f6477
Add permission for nautilus devices
...
Bug: 283015605
Test: Build
Change-Id: I986a2798a4a5ca927a1a2aaea61edca9fa59b2c5
2023-05-17 03:59:43 +00:00
lukechang
73e88c0a83
sepolicy: label cpd cl2 & cl1 target_residency
...
Test: build and boot to home
Bug: 277390134
Merged-In: I127ffc74aa68976de4aaa4a750b4043def4e2759
Change-Id: I127ffc74aa68976de4aaa4a750b4043def4e2759
Signed-off-by: lukechang <lukechang@google.com>
2023-05-17 02:11:41 +00:00
TreeHugger Robot
3203ccc21a
Merge "Add chre channel sepolicy entries" into udc-d1-dev
2023-05-16 23:04:18 +00:00
Luis Delgado de Mendoza Garcia
a3f0628f68
Add chre channel sepolicy entries
...
Bug: 275143652
Fix: 275143652
Test: in-device verification.
Change-Id: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
Merged-In: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
2023-05-16 21:43:09 +00:00
Treehugger Robot
05abdf9f26
Merge "uwb: add permissions for factory uwb calib file" into udc-d1-dev
2023-05-15 16:54:11 +00:00
Jin Jeong
b3c701b9c4
Revert "[Zuma] Fix SeLinux error"
...
This reverts commit 709ad06c0e
.
Reason for revert: b/279988311 we rename the vendor.modem property so we don't need to add the new rules
Change-Id: Ibe56941737506158ef963bba2ae00035c5c11069
2023-05-12 04:20:27 +00:00
Wilson Sung
2e511cf418
Remove fixed SELinux bug from bug_map
...
Fix: 280706292
Bug: 280522410
Change-Id: I5b35759d2b89246e65683fbbc3ca877af04ef25b
2023-05-11 14:10:41 +08:00
Wilson Sung
17a784cf97
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 281815594
Test: scanBugreport
Bug: 281815594
Bug: 281815537
Test: scanAvcDeniedLogRightAfterReboot
Bug: 281815594
Fix: 281645191
Change-Id: Ia1e72cdee3ca535eb978ad8becad94c9c4d8c2cd
2023-05-11 04:06:31 +00:00
Zixuan Lan
288623d4d4
remove fixed selinux bug from bug map.
...
TPU permission was fixed to avoid error in hal_camera_defaul.The corresponding bug for tracking should be removed from the bug map. Please see bug for more details.
Bug: 275001641
Test: logcat grep for selinux error
Change-Id: I3622a1877f94b41d03d1bcb1c16a404db4b3ea8d
2023-05-09 16:38:38 -07:00
Zheng Pan
705cc4abf8
Merge "Allow systemui to find adbd" into udc-d1-dev
2023-05-09 20:21:14 +00:00
Wilson Sung
e797557f08
Merge "Update SELinux error" into udc-d1-dev
2023-05-09 10:06:38 +00:00
Mahesh Kallelil
1f885d0bcd
Allow dump_modem to read logbuffer and wakeup events
...
Updating sepolicy for dump_modem to read /dev/logbuffer_cpif. This is
required as part of bugreport.
Test: Tested bugreport on P23
Bug: 278501642
Change-Id: I102583e37ec2e3852fd901a75bbb06de9ac6f77c
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2023-05-09 00:20:07 -07:00
Treehugger Robot
254911d666
Merge "Update SELinux error" into udc-d1-dev
2023-05-09 07:15:25 +00:00
Luke Chang
f86a07903b
Merge "sepolicy: label cpd cl2 & cl1" into udc-d1-dev
2023-05-09 06:09:33 +00:00
Wilson Sung
fd60d077ad
Allow systemui to find adbd
...
Bug: 276415118
Fix: 272628396
Test: connect to adb with no avc error
Change-Id: I07496d663628f62ed975785d794854d1cdc77040
2023-05-09 05:22:16 +00:00
Wilson Sung
6ee8a855f9
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 280706211
Test: scanBugreport
Bug: 280706211
Bug: 280705998
Test: scanAvcDeniedLogRightAfterReboot
Bug: 280706211
Change-Id: I84d50fc4e4f05d0228bc3713cf1b216bf12a72cd
2023-05-09 10:07:46 +08:00
Hasan Awais
14b2c135bb
uwb: add permissions for factory uwb calib file
...
needed for copying the factory calib file from persist to
/data/vendor/uwb, along with converting the file to a valid format
for uwb HAL
Bug: 274513871
Bug: 279820265
Test: local build passed
Change-Id: I4c4286cd5c200475cac3b9d58a81724d631c49e0
Signed-off-by: Hasan Awais <hasanawais@google.com>
2023-05-09 00:27:47 +00:00
Jin Jeong
e22788ae78
Merge "[Zuma] Fix SeLinux error" into udc-d1-dev
2023-05-08 23:37:28 +00:00
lukechang
9d44de7ecf
sepolicy: label cpd cl2 & cl1
...
Test: build and boot to home
Bug: 277390134
Merged-In: Iad525a9c556ee436afb8cbd29156b6b593329e83
Change-Id: Iad525a9c556ee436afb8cbd29156b6b593329e83
Signed-off-by: lukechang <lukechang@google.com>
2023-05-08 08:39:21 +00:00
sashwinbalaji
771b533133
thermal: thermal_metrics: Update selinux to reset stats
...
Bug: 193833982
Test: Local build and verify statsD logs
adb shell cmd stats print-logs && adb logcat -b all | grep -i 105045
Change-Id: I09afbea9386724f0abf6b9cab5838e89a060a5fd
2023-05-08 05:15:39 +00:00
TreeHugger Robot
b417627fb8
Merge "Add tele sensor sepolicy permission" into udc-d1-dev
2023-05-08 02:00:59 +00:00
Treehugger Robot
74e0e5fc37
Merge "Add sepolicy permission of new camera components" into udc-d1-dev
2023-05-05 06:27:43 +00:00
Ted Wang
be9ee4c01d
Merge "Add sepolicy for aidl bt extension hal" into udc-d1-dev
2023-05-05 06:19:10 +00:00
TreeHugger Robot
1db3ac365d
Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev
2023-05-05 05:35:55 +00:00
Manali Bhutiyani
cf161d6ce3
[display-stats] enable pixelstats access to display metrics on Zuma devices.
...
Bug: 259554507
Test: Build and boot on device
adb shell cmd stats print-stats | grep -i <atom-id>
Change-Id: Ifc47211063b98f727b3b0eb7f7ebd42e3c7bb99b
2023-05-04 20:56:24 +00:00
George Chang
178e94cb81
Allow systemui_app to access Nfc service
...
avc: denied { find } for pid=1867 uid=10249 name=nfc
scontext=u:r:systemui_app:s0:c249,c256,c512,c768
tcontext=u:object_r:nfc_service:s0 tclass=service_manager
permissive=0
Bug: 280531969
Test: manually check nfc signal after battery share on
Change-Id: I7c9092388d031e8714b8f3f4738db77776c66326
2023-05-04 09:52:14 +00:00
Kamal Shafi
e1464f8e53
Add tele sensor sepolicy permission
...
Bug: 280370254
Test: build pass
Change-Id: If76c157e272f40159bcd6aac08d4b3bc88991338
2023-05-04 09:18:55 +00:00
horngchuang
5e6e5b568b
Add sepolicy permission of new camera components
...
Bug: 279885244
Bug: 280392819
Test: Build and test for sensor denials
Change-Id: Ib29b0287bc52f9c0fe6e3c18c272e6593507371b
2023-05-04 07:38:46 +00:00
Wilson Sung
e7a70d62b5
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 280706211
Bug: 280706292
Test: scanBugreport
Bug: 280706211
Bug: 280706610
Bug: 280705998
Test: scanAvcDeniedLogRightAfterReboot
Bug: 280706211
Change-Id: I67e0d2ec15b3ea057688644ba5c41c8fb5755128
2023-05-04 12:40:51 +08:00
Treehugger Robot
b3c7fb06fa
Merge "Allow accessing dumpstate from hal_usb_impl" into udc-d1-dev
2023-05-03 15:42:14 +00:00
Jack Wu
8d45937a38
sepolicy: allows pixelstat to access pca file nodes
...
Bug: 262520811
Test: no Permission denied while accessing the file node
Change-Id: I0b50d85ea7002c9ee16f4c34b472b45def7f374e
Signed-off-by: Jack Wu <wjack@google.com>
2023-05-03 09:31:08 +00:00