Commit graph

888 commits

Author SHA1 Message Date
TreeHugger Robot
899d3062b6 Merge "Add tele sensor sepolicy permission" into udc-d1-dev am: b417627fb8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020018

Change-Id: I2b27f715f84d664965ce7dfef14d59cee4788b22
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-08 02:32:21 +00:00
TreeHugger Robot
b417627fb8 Merge "Add tele sensor sepolicy permission" into udc-d1-dev 2023-05-08 02:00:59 +00:00
Treehugger Robot
0c91639fd5 Merge "Add sepolicy permission of new camera components" into udc-d1-dev am: 74e0e5fc37
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982823

Change-Id: Ic57a119ec1d8bd364567cb99ff603a703b1b6767
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:47:47 +00:00
Ted Wang
08f24f30a6 Merge "Add sepolicy for aidl bt extension hal" into udc-d1-dev am: be9ee4c01d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22344152

Change-Id: Ib6a3152e7cdaa68a880fe0e94c7a5ea633db24e1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:47:14 +00:00
Treehugger Robot
74e0e5fc37 Merge "Add sepolicy permission of new camera components" into udc-d1-dev 2023-05-05 06:27:43 +00:00
Ted Wang
be9ee4c01d Merge "Add sepolicy for aidl bt extension hal" into udc-d1-dev 2023-05-05 06:19:10 +00:00
TreeHugger Robot
55ecf93b7d Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev am: 1db3ac365d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22589719

Change-Id: I9c31d1f117be3993b6114a7b636095a9229050b0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:05:33 +00:00
TreeHugger Robot
1db3ac365d Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev 2023-05-05 05:35:55 +00:00
George Chang
74937b19bb Allow systemui_app to access Nfc service am: 178e94cb81
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020017

Change-Id: Ia2a718ce595dbb51c0a4b7fac05a8f5053547b8a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 00:18:59 +00:00
Manali Bhutiyani
cf161d6ce3 [display-stats] enable pixelstats access to display metrics on Zuma devices.
Bug: 259554507
Test: Build and boot on device
adb shell cmd stats print-stats | grep -i <atom-id>

Change-Id: Ifc47211063b98f727b3b0eb7f7ebd42e3c7bb99b
2023-05-04 20:56:24 +00:00
George Chang
178e94cb81 Allow systemui_app to access Nfc service
avc:  denied  { find } for pid=1867 uid=10249 name=nfc
scontext=u:r:systemui_app:s0:c249,c256,c512,c768
tcontext=u:object_r:nfc_service:s0 tclass=service_manager
permissive=0

Bug: 280531969
Test: manually check nfc signal after battery share on
Change-Id: I7c9092388d031e8714b8f3f4738db77776c66326
2023-05-04 09:52:14 +00:00
Kamal Shafi
e1464f8e53 Add tele sensor sepolicy permission
Bug: 280370254
Test: build pass
Change-Id: If76c157e272f40159bcd6aac08d4b3bc88991338
2023-05-04 09:18:55 +00:00
horngchuang
5e6e5b568b Add sepolicy permission of new camera components
Bug: 279885244
Bug: 280392819
Test: Build and test for sensor denials
Change-Id: Ib29b0287bc52f9c0fe6e3c18c272e6593507371b
2023-05-04 07:38:46 +00:00
Treehugger Robot
fdb7364a3f Merge "Allow accessing dumpstate from hal_usb_impl" into udc-d1-dev am: b3c7fb06fa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982957

Change-Id: Ia74b455412d430da3ea5a3509d087d9c82aea521
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 16:12:47 +00:00
Treehugger Robot
b3c7fb06fa Merge "Allow accessing dumpstate from hal_usb_impl" into udc-d1-dev 2023-05-03 15:42:14 +00:00
Jack Wu
923f9f2f5e sepolicy: allows pixelstat to access pca file nodes am: 8d45937a38
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22987856

Change-Id: I05c8ca4fcd1273a5636d9ccff229aff5ec0ae807
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 14:06:07 +00:00
Jack Wu
8d45937a38 sepolicy: allows pixelstat to access pca file nodes
Bug: 262520811
Test: no Permission denied while accessing the file node
Change-Id: I0b50d85ea7002c9ee16f4c34b472b45def7f374e
Signed-off-by: Jack Wu <wjack@google.com>
2023-05-03 09:31:08 +00:00
Treehugger Robot
a43377782f Merge "Correct sepolicy permission for new UW cam EEPROM" into udc-d1-dev am: cdb62d5474
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22896105

Change-Id: Iad5319efdd82be6d1349fb7b4ec05b8bc17b500e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 08:54:01 +00:00
Treehugger Robot
cdb62d5474 Merge "Correct sepolicy permission for new UW cam EEPROM" into udc-d1-dev 2023-05-03 08:20:05 +00:00
Horng Chuang
0f17ef32db Merge "Add sepolicy permission for new svarog sensor" into udc-d1-dev am: 5a2189a5ae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22668237

Change-Id: I83d5b0218b54bcac0a31a34971f7f5b9c39879ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 04:22:11 +00:00
Horng Chuang
5a2189a5ae Merge "Add sepolicy permission for new svarog sensor" into udc-d1-dev 2023-05-03 03:26:50 +00:00
Kyle Tso
649f19fc94 Allow accessing dumpstate from hal_usb_impl
Fix SELinux errors.

Bug: 267261163
Change-Id: I73a311d796eb520ede3849edc6384c965ec5c915
Signed-off-by: Kyle Tso <kyletso@google.com>
2023-05-03 11:23:52 +08:00
Tommy Kardach
1e317a26ad Merge "Allow P23 Camera HAL to acquire wake locks" into udc-d1-dev am: 6bf3b733ac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22915638

Change-Id: I2d66703cd4fe7ac51373bb704c441bf6282d561f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 22:45:42 +00:00
Tommy Kardach
6bf3b733ac Merge "Allow P23 Camera HAL to acquire wake locks" into udc-d1-dev 2023-05-02 22:23:36 +00:00
Tommy Kardach
659c17d428 Allow P23 Camera HAL to acquire wake locks
Bug: 279977277
Test: mm && flash/test
Change-Id: I6150ccf788d5074ab9e2d29c6866c8a477a3ef71
2023-05-02 17:25:51 +00:00
Dan Moore
57bea4ff01 Merge "Allow sensor HAL access to thermal HAL" into udc-d1-dev am: 47eea99fb2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22932758

Change-Id: I3f450687c9be51b9c1d9cb7cb691f6535e011004
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 15:36:56 +00:00
Dan Moore
47eea99fb2 Merge "Allow sensor HAL access to thermal HAL" into udc-d1-dev 2023-05-02 15:00:31 +00:00
Treehugger Robot
6b61366417 Merge "Remove obsolete tracking entry" into udc-d1-dev am: 11ea9b76d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22880900

Change-Id: I73a0f09e483cb91805b3530ab513ee39529f4146
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 09:40:27 +00:00
Treehugger Robot
03f88f77fc Merge "Enforce fastbootd" into udc-d1-dev am: 470eda92e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22649706

Change-Id: Ib41b87547cb4610fa30cbb49a79bf72e9944b7e2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 09:34:22 +00:00
Treehugger Robot
dc5aac4409 Merge "sepolicy: ignore avc denial" into udc-d1-dev am: 5c70865797
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22246611

Change-Id: Ia489a4cd3d15e82f6d506bacedcadb514367eb14
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 09:07:40 +00:00
Tom Huang
5c0053c5ec Merge "Add hidraw device sepolicy for headtracking" into udc-d1-dev am: dd5df5791f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22874908

Change-Id: I4f083a33f9e8a5af927496df1189d1085f19e616
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 09:07:31 +00:00
Treehugger Robot
11ea9b76d6 Merge "Remove obsolete tracking entry" into udc-d1-dev 2023-05-02 07:12:52 +00:00
Treehugger Robot
470eda92e4 Merge "Enforce fastbootd" into udc-d1-dev 2023-05-02 04:54:37 +00:00
Treehugger Robot
5c70865797 Merge "sepolicy: ignore avc denial" into udc-d1-dev 2023-05-02 04:36:22 +00:00
Tom Huang
dd5df5791f Merge "Add hidraw device sepolicy for headtracking" into udc-d1-dev 2023-05-02 04:07:15 +00:00
Wilson Sung
8080b95d06 Enforce fastbootd
Fix: 264489957
Test: flash and no related avc error
Change-Id: Ibf616a98e9341310e18db6dda27d86adbf24deac
2023-05-02 11:42:59 +08:00
horngchuang
a6d7203408 Add sepolicy permission for new svarog sensor
Bug: 278473644
Test: Build and test for sensor denials
Change-Id: I2816a2ada49d4369b975ac22693994cff5cd6aec
2023-05-01 15:34:33 +00:00
Krzysztof Kosiński
bc2fb0e761 Merge "Enforce sepolicy for Google Camera App." into udc-d1-dev am: 9f7dec1023
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22908419

Change-Id: I871183bddb6cca48ce185235fcab8a8509959a48
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-28 23:00:27 +00:00
Krzysztof Kosiński
9f7dec1023 Merge "Enforce sepolicy for Google Camera App." into udc-d1-dev 2023-04-28 22:18:37 +00:00
Dan Moore
4a0259ff34 Allow sensor HAL access to thermal HAL
The FIR temperature sensor must report an estimate of window temperature
so that the BTS SaMD can determine if the boundary condition between the
sensor and window is within accuracy specification.

Test: logcat previously reported access denied to thermal HAL. Access is
now granted and the Twindow elements are accessible.

Bug: 276738070
Change-Id: I72846053840e36ba8d3d59df9ba580c6c416e867
2023-04-28 12:13:32 -04:00
martinwu
149ac2a92e [TSV2] Add sepolicy for dumpstate to zip tcpdump into bugreport am: 09aaf3dfbc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22899260

Change-Id: I0a894186a7b618d703fb4aeefcac5e62d7e472f6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-28 07:16:37 +00:00
Ted Wang
8831352474 Add sepolicy for aidl bt extension hal
Bug: 274906319
Test: build pass and manual test
Change-Id: Id54796fec22e790a197255f2db4ba23b4a58212d
2023-04-28 04:48:33 +00:00
Kamal Shafi
47f407fa8d Correct sepolicy permission for new UW cam EEPROM
change imentet camera sensor EEPROM naming to its codename.

Bug: 279547216
Test: build pass
Change-Id: Ib831119318a0b4467f81f93c009a28831cebac25
2023-04-28 02:56:30 +00:00
Krzysztof Kosiński
5b2134d5c5 Enforce sepolicy for Google Camera App.
Added missing statement allowing GXP firmware access.

Bug: 264489778
Test: GCA smoke test in setenforce mode.
Change-Id: Ied2f675a2e11f7aebcf4e1e6ac49fc2e39dd2ecf
2023-04-27 19:53:25 +00:00
Chungkai Mei
fdd0ef451e sepolicy: ignore avc denial
ignore avc denial since it is debugfs

Bug: 271931921
Test: pass boot health check extra test https://android-build.googleplex.com/builds/abtd/run/L49300000960255489
Change-Id: Iceee4d347b5e90bce6d16054c6ee0c8091652a9b
Signed-off-by: Chungkai Mei <chungkai@google.com>
2023-04-27 14:24:40 +00:00
martinwu
09aaf3dfbc [TSV2] Add sepolicy for dumpstate to zip tcpdump into bugreport
Bug: 264490014
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: I45c894fa9378a7878bc853f7723162ebd6141115
2023-04-27 13:47:34 +00:00
Bruno BELANYI
9c4ffd3dd2 Merge "Add ArmNN config sysprops SELinux rules" into udc-d1-dev am: 83087bd818
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22786211

Change-Id: I08085e0fb372ded139063aeedb3b7dd38e1da2c1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:36:53 +00:00
Bruno BELANYI
83087bd818 Merge "Add ArmNN config sysprops SELinux rules" into udc-d1-dev 2023-04-27 08:06:48 +00:00
Carol Cheng
fd882830cc Merge "Revert "Add sepolicy for dumpstate to zip tcpdump into bugreport"" into udc-d1-dev am: bb1f0f25bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22891380

Change-Id: Ie0a44ba0d36b95a842a28b47d5a62f78cf30f6e2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 07:11:50 +00:00
Carol Cheng
bb1f0f25bb Merge "Revert "Add sepolicy for dumpstate to zip tcpdump into bugreport"" into udc-d1-dev 2023-04-27 06:36:48 +00:00