Commit graph

330 commits

Author SHA1 Message Date
Miranda Kephart
04ac3ce7f5 Fix screenshot shutter sound on P23 devices am: 8cc50336c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22200827

Change-Id: I1bc148a562bc22bdab4be3984f1394ecf0da364f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 04:13:55 +00:00
Miranda Kephart
8cc50336c8 Fix screenshot shutter sound on P23 devices
SystemUI didn't have permission to access media server or the audio
server. Looks like both are required (and sufficient).

Bug: 273688513
Bug: 272628174
Fix: 273688513
Test: manual; take a screenshot with ringer on and verify it
makes a sound

Change-Id: Ibbe54db8cbf78ed199cb329804221709a2822242
2023-03-22 18:40:47 +00:00
Adam Shih
9844033c0a Move pixel dumpstate to gs-common
Bug: 240530709
Test: adb bugreport
Change-Id: I4c46a2495ea07b9e44f56c4c6be726621e0ebf65
2023-03-22 13:05:44 +08:00
TreeHugger Robot
7cd8b7fd2f Merge "change device type for /dev/stmvl53l1_ranging" into udc-d1-dev am: 03d439f0e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22167058

Change-Id: I40aab624c447d94be30d25ea2b256f289c576f7e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-22 03:09:42 +00:00
TreeHugger Robot
03d439f0e1 Merge "change device type for /dev/stmvl53l1_ranging" into udc-d1-dev 2023-03-22 02:36:37 +00:00
Joerg Wagner
6351914802 Merge "Update Mali DDK to r40 : Additional SELinux settings" into udc-d1-dev 2023-03-21 14:36:16 +00:00
JimiChen
ee1df407be change device type for /dev/stmvl53l1_ranging
It was a rls_device. Move to lwis_device now.

Bug: 274552433
Test: launch GCA
Change-Id: Id920583cc06b09063de85b160c12a5c3a5468c11
2023-03-21 20:00:00 +08:00
TreeHugger Robot
d5ac6d9962 Merge "Allow regmap debugfs permission" into udc-d1-dev am: 504b4cc2eb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22133445

Change-Id: I483874eb28c4db9377ce3d7b616262d81d4e70ab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 08:27:11 +00:00
TreeHugger Robot
504b4cc2eb Merge "Allow regmap debugfs permission" into udc-d1-dev 2023-03-21 08:00:49 +00:00
Robert Lee
78603ddb7e Allow regmap debugfs permission
auditd  : type=1400 audit(0.0:7): avc: denied { search } for comm="kworker/u18:1" name="regmap" dev="debugfs" ino=1049 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_regmap_debugfs:s0 tclass=dir permissive=0

Bug: 273891639
Test: builds
Change-Id: I9700d34e4d8a9d96d904fe5119a8bf4601bf8ea6
Signed-off-by: Robert Lee <lerobert@google.com>
2023-03-21 14:17:00 +08:00
TreeHugger Robot
2ecbb84226 Merge "Allow systemui find radio_service" into udc-d1-dev am: 7ca4d7ceb7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22161791

Change-Id: I281b02bfe57536093f3fd1821ad6b2d31e2a7ba0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 03:35:10 +00:00
TreeHugger Robot
7ca4d7ceb7 Merge "Allow systemui find radio_service" into udc-d1-dev 2023-03-21 03:19:59 +00:00
Chung-Kai (Michael) Mei
4766cf456b Merge "genfs_contexts: fix path for i2c peripheral device [DO NOT MERGE]" into udc-d1-dev 2023-03-21 02:31:55 +00:00
Darren Hsu
ba74fadb54 dumpstate: Suppress avc denial for power stats am: 0198a5224a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22119720

Change-Id: Ic216d075f84190d5d2c66cd2c7e46efc65d40989
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 02:20:37 +00:00
Wilson Sung
aa45dde84e Allow systemui find radio_service
avc:  denied  { find } for pid=1810 uid=10231 name=phone scontext=u:r:systemui_app:s0:c231,c256,c512,c768 tcontext=u:object_r:radio_service:s0 tclass=service_manager permissive=0

Bug: 272628174
Bug: 272628396
Bug: 273674238
Test: boot-to-home and sim icon showed up
Change-Id: Ia7f84f53f131d868d356fd6d358188748c723757
2023-03-21 02:13:46 +00:00
Chungkai Mei
5bedd6391a genfs_contexts: fix path for i2c peripheral device [DO NOT MERGE]
correct path for i2c devices

Test: without avc denial when booting
Bug: 240641235
Change-Id: Iabb7bdac51c2877a9b254bb287361c58f16a353f
Signed-off-by: Chungkai Mei <chungkai@google.com>
2023-03-21 01:17:40 +00:00
Darren Hsu
0198a5224a dumpstate: Suppress avc denial for power stats
Bug: 273639264
Test: presubmit test
Change-Id: I0b1d8b7516dc9bdfae6b8bca644b6ab52b971615
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-03-20 15:09:41 +08:00
Welly Hsu
7d03b1841e Move euiccpixel_app dontaudit items out of tracking_denials am: 97b397fc5e am: a8df97fe32
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22133463

Change-Id: I6992f0c4bb70f9e3044fa80f8aed487fcfc1ae89
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-20 05:03:13 +00:00
Welly Hsu
a8df97fe32 Move euiccpixel_app dontaudit items out of tracking_denials am: 97b397fc5e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22133463

Change-Id: I1e3fdf46b8d29354b2b231457edd9b2e90126474
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-20 04:30:27 +00:00
Welly Hsu
97b397fc5e Move euiccpixel_app dontaudit items out of tracking_denials
bug: 265286368
bug: 269218505
Change-Id: I7dec7ad23ee48cf719d6e7442e60ddcc13c02a8f
2023-03-20 10:13:05 +08:00
TreeHugger Robot
eccb7ad20b Merge "allow vendor init to set vendor_camera_prop" into udc-d1-dev am: 1605d7979d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22113945

Change-Id: Ibdab8601f0d98e2b11640b5434ff49c87953d05b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 12:26:53 +00:00
TreeHugger Robot
1605d7979d Merge "allow vendor init to set vendor_camera_prop" into udc-d1-dev 2023-03-16 11:57:14 +00:00
Speth Chang
3add5fbcec allow vendor init to set vendor_camera_prop
03-16 10:29:21.324     1     1 W /system/bin/init:
type=1107 audit(0.0:5): uid=0 auid=4294967295 ses=4294967295
subj=u:r:init:s0 msg='avc: denied { set } for
property=vendor.camera.multicam.enable_p23_multicam pid=1
uid=0 gid=0 scontext=u:r:vendor_init:s0
tcontext=u:object_r:vendor_camera_prop:s0
tclass=property_service permissive=0' bug=b/267714573

Bug: 273854225
Test: check log, GCA
Change-Id: I1c5fdff3b9978c494be9f513e1770f26804ca132
2023-03-16 13:18:17 +08:00
TreeHugger Robot
18acd8cd02 Merge changes I7b641636,Iecbf6ff7 into udc-d1-dev am: 320064782b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22085771

Change-Id: I211dc0a0b0fcd8031d68d833b751cbad21eef8b1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 03:16:52 +00:00
Alice Sheng
c3288bb774 Merge "Add sepolicy for RA9530 nodes." 2023-03-15 17:57:24 +00:00
Chien Kun Niu
28cc58257f usb: allow hal_usb_gadget_impl sysfs_batteryinfo permission
Allow hal_usb_gadget_imple sysfs_batteryinfo r_dir_perms and rw_file_perms

[    8.237410] [  T379] type=1400 audit(1678784127.396:4): avc: denied { search } for comm="HwBinder:762_1" name="power_supply" dev="sysfs" ino=73783 scontext=u:r:hal_usb_gadget_impl:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1
[    8.237556] [  T379] type=1400 audit(1678784127.396:5): avc: denied { read } for comm="HwBinder:762_1" name="usb_type" dev="sysfs" ino=73797 scontext=u:r:hal_usb_gadget_impl:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
[    8.237584] [  T379] type=1400 audit(1678784127.396:6): avc: denied { open } for comm="HwBinder:762_1" path="/sys/devices/platform/10cb0000.hsi2c/i2c-8/8-0025/power_supply/usb/usb_type" dev="sysfs" ino=73797 scontext=u:r:hal_usb_gadget_impl:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
[    8.237603] [  T379] type=1400 audit(1678784127.396:7): avc: denied { getattr } for comm="HwBinder:762_1" path="/sys/devices/platform/10cb0000.hsi2c/i2c-8/8-0025/power_supply/usb/usb_type" dev="sysfs" ino=73797 scontext=u:r:hal_usb_gadget_impl:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1

Bug: 272166827
Test: Check avc denied log
Change-Id: Iecbf6ff712924b60ce186b75a76cf25f3b48e72d
2023-03-15 19:17:14 +08:00
TreeHugger Robot
e83033d9f1 Merge "sepolicy: label dsu and bci" into udc-d1-dev am: 35b10634bf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21981985

Change-Id: I0eb26b8dc03fdef37e8ff4e80d4024ce0485dfab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 03:15:50 +00:00
Quinn Yan
542f3553c7 Merge "Remove the tracking_denials for edgetpu project. Fix the wrong sysfs directory for edgetpu." into udc-dev am: fe4ffed5de am: b1ebacbd43
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22082013

Change-Id: I17f0e8c9a9d98a0b67a2c3dbdd4fa9c7be427626
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 03:02:33 +00:00
TreeHugger Robot
35b10634bf Merge "sepolicy: label dsu and bci" into udc-d1-dev 2023-03-15 02:28:38 +00:00
Quinn Yan
e825edbf28 Merge "Remove the tracking_denials for edgetpu project. Fix the wrong sysfs directory for edgetpu." into udc-dev am: fe4ffed5de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22082013

Change-Id: I3a6e12bb4e7f9e81deb4b0cf9c1d59102370efef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 01:42:42 +00:00
Quinn Yan
fe4ffed5de Merge "Remove the tracking_denials for edgetpu project. Fix the wrong sysfs directory for edgetpu." into udc-dev 2023-03-15 01:26:24 +00:00
Dai Li
518a025694 Merge "dma-heap: add dsp heap" into udc-dev am: b66e27f987
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21914488

Change-Id: I32b240372f25f8ae7546daa98acadd09b96562c2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 01:22:27 +00:00
Dai Li
878380aba8 Merge "dma-heap: add dsp heap" into udc-dev am: b66e27f987 am: 679670bfbc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21914488

Change-Id: Iaaea913a24b30a69160c62d0fb400c6a2a3a1eeb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 00:57:38 +00:00
qinyiyan
1f30d7d1f9 Remove the tracking_denials for edgetpu project.
Fix the wrong sysfs directory for edgetpu.

Test: No avc denails seen with the selinx=enforcing
Bug: 264489387,264489676
Change-Id: I5d4d249a0b906e3e5d765ed8830fd915db8aa66e
2023-03-14 17:01:19 -07:00
Dai Li
b66e27f987 Merge "dma-heap: add dsp heap" into udc-dev 2023-03-14 23:31:53 +00:00
TreeHugger Robot
163c2ece35 Merge "Enforce pixel_stats" into udc-d1-dev am: 15a45ce32f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21989811

Change-Id: Ic9d353fb5e10ff41a3a6d1bdebb88ff6618b7748
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 07:45:19 +00:00
Wilson Sung
95eea9a04b Enforce pixel_stats
Fix: 264483357
Fix: 264483319
Fix: 264483568
Fix: 264489783
Test: boot-to-home and no pixel_stats avc error
Change-Id: I0b68fa3853c65056d7da78a436a3d38888af8f19
2023-03-14 13:40:49 +08:00
TreeHugger Robot
a828092dcc Merge "label systemui sub apps" into udc-dev am: 27c8c4c1e0 am: d5554312e8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21988006

Change-Id: I8edf39c4bec2c95ad532d074066303e80935086f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 05:24:35 +00:00
TreeHugger Robot
d5554312e8 Merge "label systemui sub apps" into udc-dev am: 27c8c4c1e0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21988006

Change-Id: I61bb2409787130b12d75e539f369bb73a5690ea6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 04:48:12 +00:00
Kyle Lin
ed9bcae5ba sepolicy: label dsu and bci
Bug: 272750446
Bug: 269809407
Bug: 258100337
Test: build and boot
Change-Id: Ica7902851c307fcf71d3ad09befdff6bdcc7a72c
2023-03-14 11:48:23 +08:00
Adam Shih
4e5621a2e5 label systemui sub apps
Bug: 270518075
Test: screenshot > press sharing button
Change-Id: I10c59809afc3e897775e7cfccde9e2432bb78163
2023-03-14 11:07:12 +08:00
TreeHugger Robot
7aa7b8a466 Merge "enforce hal_dumpstate_default" into udc-dev am: 3906f53197 am: 25c992012f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21982724

Change-Id: Ie6369d6b97ce496991ee23a615555594260c8f86
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 02:35:42 +00:00
TreeHugger Robot
25c992012f Merge "enforce hal_dumpstate_default" into udc-dev am: 3906f53197
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21982724

Change-Id: I3249dd6a9df32bfa09f83f11e76755ae9d74873c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 01:55:34 +00:00
TreeHugger Robot
3906f53197 Merge "enforce hal_dumpstate_default" into udc-dev 2023-03-14 01:10:42 +00:00
Ziyi Cui
6cf71e83ce Merge "zuma-sepolicy: pixelstats: enable pixelstats access to perf-metrics" into udc-d1-dev am: 1682d9c973
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21979898

Change-Id: I840dbb857e44a312e10a9c6204e8b65270809ed1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 18:30:53 +00:00
Ziyi Cui
1682d9c973 Merge "zuma-sepolicy: pixelstats: enable pixelstats access to perf-metrics" into udc-d1-dev 2023-03-13 17:44:01 +00:00
TreeHugger Robot
30ea475538 Merge "[SELinux] Fix hal_uwb_default dev access errors" into udc-d1-dev am: eecb5380e3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21981863

Change-Id: I8cc34c5a70f8304e81defa9dff34de6a271c7852
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 06:29:11 +00:00
TreeHugger Robot
eecb5380e3 Merge "[SELinux] Fix hal_uwb_default dev access errors" into udc-d1-dev 2023-03-13 06:17:37 +00:00
Jasmine Cha
df03bc9034 audio: move set property in vendor_init to gs-common am: 684d922d59 am: 777ee2e945
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21974564

Change-Id: I30cbbba5405c2efeb193173cfece67e9b280000c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 06:11:52 +00:00
Adam Shih
46d5345bc9 enforce hal_dumpstate_default
Bug: 266035810
Test: adb bugreport
Change-Id: Iec0d9b7d5d9327dd7ca96ab7f4c1a26c3fde6a3e
2023-03-13 14:10:45 +08:00