Adam Shih
46fd63b761
comply with VTS requirements am: 22e1c0756a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22344148
Change-Id: I02d1e5a2af5bb6d3009d2b7687dff6080f56724f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 03:08:17 +00:00
Adam Shih
7da5e7b6aa
comply with VTS requirements am: 22e1c0756a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22344148
Change-Id: I07f9f243f5157e406e34cdd97197e144f41197cb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 03:07:55 +00:00
Dinesh Yadav
0829947959
Merge "Allow google_camera_app to access edgetpu" into udc-d1-dev am: d9a75c1639
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22286148
Change-Id: I46aa0db686e57dfcf9daaf7d302ec6754c86d630
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 03:06:08 +00:00
Dinesh Yadav
d9a75c1639
Merge "Allow google_camera_app to access edgetpu" into udc-d1-dev
2023-04-06 02:34:35 +00:00
Sayanna Chandula
bfef2f5cea
Remove hal_thermal_default bug from bug_map am: 387145ed85
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22465501
Change-Id: Ie87df886d0451eb8aa9b3110b67fabaa11b28a76
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 00:22:02 +00:00
Sayanna Chandula
387145ed85
Remove hal_thermal_default bug from bug_map
...
SELinux errors are fixed and hence removing from bug map
Bug: 272166987
Test: Build and boot on device
Change-Id: Ic0d314486a2ed6fbc1c4497b122827b17f5b9022
Signed-off-by: Sayanna Chandula <sayanna@google.com>
2023-04-05 22:26:40 +00:00
Dinesh Yadav
478b11708f
Allow google_camera_app to access edgetpu
...
These permissions are needed by GCA-release & GCA-dogfood to access
edgetpu.
Bug: 264490031
Change-Id: Idd9dff906c86f9e83f1dc67698c23387e174d99c
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-04-04 06:11:47 +00:00
TreeHugger Robot
192019b3dc
[automerger skipped] Merge "sepolicy: fix VTS failure for system suspend [RESTRICT AUTOMERGE]" into udc-d1-dev am: 8041addc24
-s ours
...
am skip reason: subject contains skip directive
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22323886
Change-Id: I31e5f993af8aa0f0447b39a9e307bc08a08dbfda
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-30 17:53:22 +00:00
Darren Hsu
150006a5c5
[automerger skipped] sepolicy: fix VTS failure for system suspend [RESTRICT AUTOMERGE] am: bc15f1c8ee
-s ours
...
am skip reason: subject contains skip directive
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22323886
Change-Id: I7204f00718465596b3dee251f93273e699510094
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-30 17:53:21 +00:00
TreeHugger Robot
b99f943900
Merge "Add logd selinux allow permissions" into udc-d1-dev am: 4bb2e02b1c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22307864
Change-Id: I7f9a2c6d4af714625fb4d347c0988052d8f77852
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-30 17:17:02 +00:00
Adam Shih
22e1c0756a
comply with VTS requirements
...
Bug: 275142299
Test:
atest VtsHalDumpstateTargetTest:PerInstanceAndMode/DumpstateAidlPerModeTest#TestOk/0_android_hardware_dumpstate_IDumpstateDevice_default_FULL
atest VtsHalDumpstateTargetTest:PerInstance/DumpstateAidlGeneralTest#TestInvalidModeArgument_Negative/0_android_hardware_dumpstate_IDumpstateDevice_default
Built pass on target-userdebug and aosp_target-userdebug
Change-Id: I6a114aa2aa92f7b06cfd5bbd1f73d34b5477b109
2023-03-30 13:28:43 +08:00
TreeHugger Robot
8041addc24
Merge "sepolicy: fix VTS failure for system suspend [RESTRICT AUTOMERGE]" into udc-d1-dev
2023-03-30 01:52:41 +00:00
TreeHugger Robot
4bb2e02b1c
Merge "Add logd selinux allow permissions" into udc-d1-dev
2023-03-30 01:44:29 +00:00
TreeHugger Robot
522e64b511
[automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-d1-dev am: 6cbdc36e1b
-s ours
...
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22294472
Change-Id: I0fbb14762fd3b91b8223e9f366c00a80a9c16c31
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 16:52:08 +00:00
Adam Shih
5429ced32b
[automerger skipped] Move pixel dumpstate to gs-common am: 036fb44a5d
-s ours
...
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22294472
Change-Id: I59b9dce74ac2dca22869bbe927f75fa4cdc705fb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 16:52:07 +00:00
TreeHugger Robot
6cbdc36e1b
Merge "Move pixel dumpstate to gs-common" into udc-d1-dev
2023-03-29 16:06:45 +00:00
Darren Hsu
bc15f1c8ee
sepolicy: fix VTS failure for system suspend [RESTRICT AUTOMERGE]
...
Bug: 275143652
Test: run vts -m SuspendSepolicyTests
Change-Id: I7cb5fdb18e7b16d98961bfed11da21496e8fa026
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-03-29 18:46:56 +08:00
Donnie Pollitz
885a790f2d
Add logd selinux allow permissions
...
Bug: 261105354
Bug: 264489639
Test: Ran atest SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I377dbb3bbdecd6780c1bdfb3aab53ee3c754c163
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-03-29 09:24:47 +02:00
TreeHugger Robot
de4eba7c13
Merge "Update SELinux error" into udc-d1-dev am: 866b23080c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22328782
Change-Id: I03be4caa61b5a6f1d075cc3373df73ac1b58277b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 06:04:15 +00:00
TreeHugger Robot
866b23080c
Merge "Update SELinux error" into udc-d1-dev
2023-03-29 05:35:51 +00:00
Wilson Sung
5227dfe6ab
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 275646098
Test: scanBugreport
Bug: 275646003
Test: scanAvcDeniedLogRightAfterReboot
Bug: 275645636
Change-Id: Iedd660e3937792d5ac58f384605300b39f6dfcb0
2023-03-29 12:17:48 +08:00
Adam Shih
f69b2e8ea2
Merge "Revert "comply with VTS requirements"" into udc-dev am: 97c56013be
am: 4c696710f0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22328024
Change-Id: Ib367aa0cf7f745a9b1f7c186e7364402f3a6a109
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:39:30 +00:00
Adam Shih
6cd3c54b5c
Merge "Revert "comply with VTS requirements"" into udc-dev am: 97c56013be
am: b19966b929
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22328024
Change-Id: I3a4852f87c9e557f4b7275790c24013bf8412755
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:29:36 +00:00
TreeHugger Robot
b8afba5124
Merge "Keep name "dmabuf_system_secure_heap_device" for secure playback" into udc-d1-dev am: 83588e636f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22185170
Change-Id: I8ae4c6a6f1c4e63adddc3fcdea47143e0e5e22d7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:27:57 +00:00
Adam Shih
4c696710f0
Merge "Revert "comply with VTS requirements"" into udc-dev am: 97c56013be
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22328024
Change-Id: I203fbebe2e02e378bd452b7b7a49c33dbec8e079
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:12:09 +00:00
Adam Shih
b19966b929
Merge "Revert "comply with VTS requirements"" into udc-dev am: 97c56013be
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22328024
Change-Id: Ic5841fefdd7576548fff66fc340259814e542df9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:12:09 +00:00
TreeHugger Robot
83588e636f
Merge "Keep name "dmabuf_system_secure_heap_device" for secure playback" into udc-d1-dev
2023-03-29 02:56:22 +00:00
Adam Shih
97c56013be
Merge "Revert "comply with VTS requirements"" into udc-dev
2023-03-29 02:49:09 +00:00
Adam Shih
a0b5162488
Revert "comply with VTS requirements"
...
Revert submission 22302106-dumpstate aidl
Reason for revert: build failed on udc-d1-dev
Reverted changes: /q/submissionid:22302106-dumpstate+aidl
Change-Id: I6bd0ec81272827498ce36bee556fd89acc6b20ca
2023-03-29 02:45:20 +00:00
Adam Shih
23df08855d
Merge "comply with VTS requirements" into udc-dev am: 7cb203f3c2
am: a6e1f1d73a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22306662
Change-Id: Ic81ea0708a327ca91a9015f23f00eeb29eb136e3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 01:11:07 +00:00
Adam Shih
08f6892075
Merge "comply with VTS requirements" into udc-dev am: 7cb203f3c2
am: 026cb8d935
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22306662
Change-Id: I83f6834fbb0e0ce6341b55c7d5be42612b2baa84
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 00:59:00 +00:00
TreeHugger Robot
a0beb1cf16
Merge "Allow bootctl to access trusty device" into udc-d1-dev am: 5d6157b523
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22307863
Change-Id: Icab0b0b06400d4b7c362813726b878d59a7d7f7c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 00:56:36 +00:00
Adam Shih
026cb8d935
Merge "comply with VTS requirements" into udc-dev am: 7cb203f3c2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22306662
Change-Id: I03432b1457e7b251ac5f5f9d7e10e3b4485260cf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 00:47:11 +00:00
Adam Shih
a6e1f1d73a
Merge "comply with VTS requirements" into udc-dev am: 7cb203f3c2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22306662
Change-Id: Idca826f6b8dbe93be52c40f3898d24e763d30f07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 00:45:26 +00:00
TreeHugger Robot
5d6157b523
Merge "Allow bootctl to access trusty device" into udc-d1-dev
2023-03-29 00:00:55 +00:00
Adam Shih
7cb203f3c2
Merge "comply with VTS requirements" into udc-dev
2023-03-28 23:58:03 +00:00
Mingguang Xu
2adc8d37d1
Merge "Add permissions to connect radioext to twoshay." into udc-dev am: 57e322c17c
am: 203dd313e7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21956466
Change-Id: I1033c49660ac5bec257a8d8865637689962ec493
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 23:42:42 +00:00
Mingguang Xu
afdff68774
Merge "Add permissions to connect radioext to twoshay." into udc-dev am: 57e322c17c
am: e283627fac
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21956466
Change-Id: Id3525c06cc58f816eee7797145fbb301c4208ac7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 23:34:30 +00:00
Mingguang Xu
e283627fac
Merge "Add permissions to connect radioext to twoshay." into udc-dev am: 57e322c17c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21956466
Change-Id: Iac8bc11118a1c8f6f401f938039899f03bdeea95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 23:16:41 +00:00
Mingguang Xu
203dd313e7
Merge "Add permissions to connect radioext to twoshay." into udc-dev am: 57e322c17c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21956466
Change-Id: Ib70d523bc36e1a789b003374207094f2eaf722d5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 23:09:15 +00:00
Mingguang Xu
57e322c17c
Merge "Add permissions to connect radioext to twoshay." into udc-dev
2023-03-28 23:03:46 +00:00
Feiyu Chen
65eaace67a
Merge "Allow camera HAL to access edgetpu_app_service" into udc-dev am: 2d34b0b1f6
am: 719b7aae1f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22248613
Change-Id: I6a52cb8f2237f500eeee0d74cfd587f31e2a500a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 09:47:43 +00:00
Feiyu Chen
67f06b0a3d
Merge "Allow camera HAL to access edgetpu_app_service" into udc-dev am: 2d34b0b1f6
am: 02cc06b4ab
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22248613
Change-Id: I7cd7a542c4d855dac45e34b698303e18847057f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 09:47:10 +00:00
Feiyu Chen
02cc06b4ab
Merge "Allow camera HAL to access edgetpu_app_service" into udc-dev am: 2d34b0b1f6
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22248613
Change-Id: Icf1b60bc90121ad358639abe52ea15b4b69bb652
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 09:19:09 +00:00
Feiyu Chen
719b7aae1f
Merge "Allow camera HAL to access edgetpu_app_service" into udc-dev am: 2d34b0b1f6
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22248613
Change-Id: Ia56751b481fd666dedec73f11ee2ee5ff7e4d088
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 09:18:37 +00:00
Feiyu Chen
2d34b0b1f6
Merge "Allow camera HAL to access edgetpu_app_service" into udc-dev
2023-03-28 08:43:23 +00:00
Donnie Pollitz
74e0bf60c2
Allow bootctl to access trusty device
...
Background:
* Boot Control needs to be able to blow AR fuses, which requires access
to the OTP port on trusty.
Bug: 267714941
Test: AVC denial doesn't show up in log
Change-Id: I5635f2358b379ae0ffe882ca9ee162a455f554f0
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-03-28 09:58:16 +02:00
Jerry Huang
912984c964
Keep name "dmabuf_system_secure_heap_device" for secure playback
...
Fixes the following denials:
03-13 14:31:22.796 W CodecLooper: type=1400 audit(0.0:284): avc: denied { read } for name="vstream-secure" dev="tmpfs" ino=865 scontext=u:r:untrusted_app_29:s0:c49,c257,c512,c768 tcontext=u:object_r:video_secure_heap_device:s0 tclass=chr_file permissive=0 app=com.google.android.exoplayer2.demo
03-13 14:31:22.796 I auditd : type=1400 audit(0.0:281): avc: denied { read } for comm="CodecLooper" name="vstream-secure" dev="tmpfs" ino=865 scontext=u:r:untrusted_app_29:s0:c49,c257,c512,c768 tcontext=u:object_r:video_secure_heap_device:s0 tclass=chr_file permissive=0 app=com.google.android.exoplayer2.demo
03-14 15:01:48.069 1429 1429 W CodecLooper: type=1400 audit(0.0:1469): avc: denied { read } for name="vstream-secure" dev="tmpfs" ino=807 scontext=u:r:untrusted_app_32:s0:c65,c257,c512,c768 tcontext=u:object_r:video_secure_heap_device:s0 tclass=chr_file permissive=0 app=com.disney.disneyplus
Bug: 268197530
Test: secure playback
Change-Id: I09a24fcf03f1f66b4c85d3b3949f33ad0d0f8dac
2023-03-28 15:04:43 +08:00
Adam Shih
d4a7ff694a
comply with VTS requirements
...
Bug: 275142299
Test:
atest VtsHalDumpstateTargetTest:PerInstanceAndMode/DumpstateAidlPerModeTest#TestOk/0_android_hardware_dumpstate_IDumpstateDevice_default_FULL
atest VtsHalDumpstateTargetTest:PerInstance/DumpstateAidlGeneralTest#TestInvalidModeArgument_Negative/0_android_hardware_dumpstate_IDumpstateDevice_default
Built pass on target-userdebug and aosp_target-userdebug
Change-Id: Ifd75afdf2365687eed9598f74dd4cf3241be2964
2023-03-28 03:28:55 +00:00
RD Babiera
43d5907677
Merge "Revert "comply with VTS requirements"" into udc-dev am: 3616de2c26
am: a82406ee28
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22298904
Change-Id: Ied2273b7d9bffe51d3b906d760aaa954180b3227
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 22:59:12 +00:00