Adam Shih
9844033c0a
Move pixel dumpstate to gs-common
...
Bug: 240530709
Test: adb bugreport
Change-Id: I4c46a2495ea07b9e44f56c4c6be726621e0ebf65
2023-03-22 13:05:44 +08:00
TreeHugger Robot
7cd8b7fd2f
Merge "change device type for /dev/stmvl53l1_ranging" into udc-d1-dev am: 03d439f0e1
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22167058
Change-Id: I40aab624c447d94be30d25ea2b256f289c576f7e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-22 03:09:42 +00:00
JimiChen
ee1df407be
change device type for /dev/stmvl53l1_ranging
...
It was a rls_device. Move to lwis_device now.
Bug: 274552433
Test: launch GCA
Change-Id: Id920583cc06b09063de85b160c12a5c3a5468c11
2023-03-21 20:00:00 +08:00
Dai Li
518a025694
Merge "dma-heap: add dsp heap" into udc-dev am: b66e27f987
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21914488
Change-Id: I32b240372f25f8ae7546daa98acadd09b96562c2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 01:22:27 +00:00
Dai Li
878380aba8
Merge "dma-heap: add dsp heap" into udc-dev am: b66e27f987
am: 679670bfbc
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21914488
Change-Id: Iaaea913a24b30a69160c62d0fb400c6a2a3a1eeb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 00:57:38 +00:00
TreeHugger Robot
30ea475538
Merge "[SELinux] Fix hal_uwb_default dev access errors" into udc-d1-dev am: eecb5380e3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21981863
Change-Id: I8cc34c5a70f8304e81defa9dff34de6a271c7852
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 06:29:11 +00:00
Rex Lin
e7616e3934
[SELinux] Fix hal_uwb_default dev access errors
...
Allow hal_uwb_default to access /dev/uci
Bug: 263048994
Test: http://ab/I86600010139623509
Change-Id: I6324044822f74d1f0d14cc9c6d057dce0dfcc9ee
Signed-off-by: Rex Lin <rexcylin@google.com>
2023-03-13 05:16:30 +00:00
Dai Li
f2200cdfa1
dma-heap: add dsp heap
...
Add dsp heap to zuma
Bug: 258813006
Change-Id: I953d1abb7cee15d041db1535df79c91cd25830f7
2023-03-08 20:43:53 +00:00
Adam Shih
a5a9f978f7
Merge "move camera dump to gs-common" into udc-dev am: 5dd0fffa9a
am: 8507994334
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21784301
Change-Id: Ib647273dc6ccefd134c5c9c53c2259274de30d4c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-07 00:39:47 +00:00
Adam Shih
7b84f2fc56
move camera dump to gs-common
...
Bug: 240530709
Test: adb bugreport
Create empty files starting with the following prefix
/data/vendor/camera/profiler/session-ended-
/data/vendor/camera/profiler/high-drop-rate-
/data/vendor/camera/profiler/watchdog-
/data/vendor/camera/profiler/camera-ended-
and do adb bugreport and make sure they end up in dumpstate_board.bin
Change-Id: I90e6d5142e7d512dafa6b8712d7fb252327359a5
2023-03-06 02:34:48 +00:00
Ernie Hsu
11bbec30bc
Merge "move mediacodec_samsung build config and sepolicy to gs-common" into udc-dev am: 899ad9c1ab
am: fbbc198801
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21553180
Change-Id: I5e45ca88e24d8b4b67dd65326cece156cf38905d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-02 10:10:31 +00:00
Ernie Hsu
899ad9c1ab
Merge "move mediacodec_samsung build config and sepolicy to gs-common" into udc-dev
2023-03-02 08:38:54 +00:00
Ernie Hsu
4d90089d25
move mediacodec_samsung build config and sepolicy to gs-common
...
Bug: 263444717
Test: build pass, camera record, youtube
Change-Id: I8fa4d79495b3971429b977a63aed811ef8d62ddb
2023-03-01 10:12:22 +00:00
Kenny Root
076591d107
Add GSA logs policy
...
This adds a label to the sysfs files for GSA logs to allow dumpstate to
read them during a bugreport.
Bug: 271125313
Test: adb shell dumpstate
Change-Id: I8842c0bec972c4cfad15ca689f8e4ae7fa99e179
2023-02-28 18:33:23 -08:00
Armelle Laine
d27961dc1b
Define selinux properties for /dev/block/by-name/trusty_persist
...
Bug: 247013568
Test: - Verify that this change is a NOP for devices with TDP already
created on top of the legacy f2fs partition /mnt/vendor/persist/ss
- Verify that this change creates a valid symlink on a manually
migrated block device
Change-Id: I226f365c6afbb5fa91ec1c9c1943f8dddac8183a
2023-02-27 22:42:08 +00:00
Armelle Laine
1731179cf1
Merge "Define selinux properties for /dev/block/by-name/trusty_persist"
2023-02-27 20:07:35 +00:00
Armelle Laine
75ec1c9470
Define selinux properties for /dev/block/by-name/trusty_persist
...
Bug: 247013568
Test: - Verify that this change is a NOP for devices with TDP already
created on top of the legacy f2fs partition /mnt/vendor/persist/ss
- Verify that this change creates a valid symlink on a manually
migrated block device
Change-Id: I226f365c6afbb5fa91ec1c9c1943f8dddac8183a
2023-02-22 04:28:08 +00:00
Ken Yang
58a6a1e772
WLC: cleanup the unused hal_wlc policies
...
Bug: 264489562
Bug: 262455719
Bug: 260366297
Bug: 260363384
Signed-off-by: Ken Yang <yangken@google.com>
(cherry picked from commit 6f9844d137
)
Merged-In: I90b9e442082b8e03e76ce63aaee56e5882933449
Change-Id: I90b9e442082b8e03e76ce63aaee56e5882933449
2023-02-20 11:05:53 +00:00
Ken Yang
6f9844d137
WLC: cleanup the unused hal_wlc policies
...
Bug: 264489562
Bug: 262455719
Bug: 260366297
Bug: 260363384
Change-Id: I90b9e442082b8e03e76ce63aaee56e5882933449
Signed-off-by: Ken Yang <yangken@google.com>
2023-02-20 00:58:13 +00:00
Adam Shih
a438fce84f
create cma dump
...
Bug: 240530709
Test: adb bugreport
Change-Id: I1a97098d73106a16c0be675a5d8f58183d5f9531
2023-02-15 12:41:31 +08:00
Adam Shih
4f442e5055
migrate power section to its own script
...
Bug: 240530709
Test: adb bugreport
Change-Id: Id7a761d61757efe55e8642553eccc84864b4a721
2023-02-08 15:40:18 +08:00
timmyli
d784c55c20
Add UW cornerfolk to file_contexts
...
Device needs access to cornerfolk. Evidence log in comments.
Bug: 267696227
Test: log check
Change-Id: If6bd49b76038673ad12fc6a1e7abd10b4cd3407e
2023-02-07 02:09:46 +00:00
Jenny Ho
4e6cfb143d
Add permission for logbuffer_bd
...
Bug: 242679204
Change-Id: I7376f10dc183bac805c89d6905e70a7b92694471
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2023-02-05 14:06:06 +08:00
Cyan_Hsieh
79bd040d55
Add gcf partition to OTA domain
...
This allows the OTA mechanism to write to the bootloader slot to
perform the actual OTA
Bug: 263218204
Change-Id: Iec3f3aa73344f4e9a305bc3c1c3f2db7624aca93
2023-02-02 18:08:51 +08:00
TreeHugger Robot
1746a6cc59
Merge "Add rule for secure_element AIDL"
2023-01-27 02:00:45 +00:00
Grace Chen
c93ba80fc4
Add rule for secure_element AIDL
...
Add secureelement aidl
b/261565407
Change-Id: I79f35e8231d9eae81b90528269410c169bb1a035
2023-01-23 18:46:01 +00:00
Dinesh Yadav
b068bb3f64
Allow camera HAL and GCA to access GXP device.
...
The camera HAL and Google Camera App
need selinux permission to run workloads on Aurora DSP. This
change adds the selinux rules too allow these clients to
access the GXP device in order to execute workloads on DSP.
Bug: 264321380
Test: Verified that the camera HAL service and GCA app is able to access the GXP device.
Change-Id: I125650b4841b4cbdc50077a0d80b113b02699de8
2023-01-17 03:21:04 +00:00
Leo Liou
30f3c17252
zuma: add sepolicy for ufs_firmware_update process
...
Allow the script to access the specified partition and sysfs.
Bug: 224464892
Test: full build and test ffu flow
Change-Id: I27f0d4d97f15a7c108e6ae1b8c12fda2c69c303a
Signed-off-by: Leo Liou <leoliou@google.com>
2023-01-13 08:19:27 +08:00
Hasini Gunasinghe
ab3f430aae
Merge "[Port ag/20645453] Map Rust KeyMint to same SELinux policy as C++"
2023-01-10 19:52:48 +00:00
Hasini Gunasinghe
76c4f20434
[Port ag/20645453] Map Rust KeyMint to same SELinux policy as C++
...
Allow the Rust and C++ implementations of the KeyMint HAL service to be
toggled easily, by mapping them to the same SELinux policy.
Bug: 197891150
Bug: 225036046
Test: VtsAidlKeyMintTargetTest
Change-Id: Ic43985f32aaabb2560ef0b02573a1e587e24fc6a
2023-01-10 01:19:17 +00:00
Ankit Goyal
344fb91207
Allow dmabuf heap access to graphics allocator
...
There is no change in dmabuf heaps from pro, so these use the exact same
SEpolicy rules
Fix: 264489636
Test: Boots to home (with SELinux enforced)
Test: VtsHalGraphicsMapperV4_0TargetTest
Change-Id: I58ec8d9558fa76b805c0882cbbb20bfd08aead13
2023-01-09 16:16:28 -08:00
Adam Shih
92f2edf487
label GPU as same_process_hal
...
Bug: 261933250
Bug: 261933249
Bug: 261933226
Bug: 261933097
Bug: 261933428
Bug: 261933227
Bug: 260768740
Bug: 260922185
Test: boot to home under enforcing mode
Change-Id: Ied95ce0c1f851785e0848f7af788969f27e45101
2023-01-04 12:10:27 +08:00
Wasb Liu
cefb0a621f
hal_health_default: updated sepolicy
...
Add necessary sepolicy.
Bug: 260366438
Bug: 261933135
Bug: 262178574
Bug: 262794970
Test: no avc denied for hal_health_default
Change-Id: I47043f64931c191063a0b3d5807ef814fa8b787f
Signed-off-by: Wasb Liu <wasbliu@google.com>
2022-12-29 09:47:23 +00:00
Darren Hsu
3ea4ff4944
sepolicy: Allow hal_power_stats to access required sysfs
...
Bug: 260366519
Bug: 260768935
Bug: 260922184
Bug: 261105152
Bug: 261363958
Bug: 261519183
Bug: 261651283
Bug: 261783107
Test: Captured bugreport and make sure there is no any avc denails
Test: related to hal_power_stats
Change-Id: Ic214dc1d8ea920b1bb8f700cd8b75918af3ab046
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-12-29 14:33:17 +08:00
Kris Chen
4963317cad
zuma: fingerprint: fix SELinux denails
...
Bug: 261105164
Test: boot with no relevant error on p23 device
Change-Id: I8d897693685591a042c5febfeca0121375749b8e
2022-12-23 17:43:50 +08:00
timmyli
8d061f7ebc
Add hal_camera_default se linux file for zuma
...
Add hal_camera_default.te for zuma. Move referenced contexts and
settings to new zuma-sepolicy folders. Add hal_camera_default type declaration
to file.te
Bug: 261651093, 260366029, 263185135
Test: Build and test for hal_camera_default denials
Change-Id: Id0246f9ca8fd399853894e9e41548976ab44ccd0
2022-12-22 21:41:11 +00:00
Adam Shih
169b9143fb
restart domains
...
Bug: 254378739
Test: boot to home
Change-Id: I7d077b7c5edfb3bee07a05fda05e5076e515c7bf
2022-12-20 08:50:43 +08:00
Adam Shih
be72019a1c
restart domains
...
Bug: 254378739
Test: boot to home
Change-Id: I6faa55132d52896c5138eb4dcff2bde3557dcf90
2022-12-19 11:01:25 +08:00
Adam Shih
419fa5774c
create an empty dump file for wlan
...
Bug: 261784587
Test: adb bugreport
Change-Id: I6a0e65e4624348f5f34cb618150a6978996dcdc9
2022-12-14 13:33:33 +08:00
Adam Shih
4b9a4886f1
restart domains
...
Bug: 254378739
Test: boot to home
Change-Id: Ie67dbbdad041d84cddbabf62e98b0a8f2b1eadf2
2022-12-14 09:19:54 +08:00
Adam Shih
126d6a4771
restart domains
...
Bug: 254378739
Test: boot to home
Change-Id: Ib6b0d9415b286fc7025df009a3bf7f1105ae4860
2022-12-13 13:38:35 +08:00
Lopy Cheng
7b281b63f2
hal_graphics_composer_default: add sepolicy for display
...
Fix avc denied issues.
Bug: 260769163
Bug: 261105029
Bug: 261933075
Bug: 261933169
Bug: 262178623
Test:
There is no AVC denied log after reboot
Change-Id: I291877a0f70f25a43f49a96a2b280be925bb98c5
2022-12-12 16:12:18 +08:00
George Chang
b5887a9853
Update permissions for st54spi and st33spi
...
Remove st33spi and update st54spi rules
Bug: 261519145
Bug: 261519169
Test: m atest && atest-dev com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I37736275204ad7bea98ce225121e71545260187c
2022-12-08 15:08:17 +00:00
Adam Shih
1774ec056b
restart domain
...
Bug: 254378739
Test: boot to home
Change-Id: I776bf6fa66605a4c3a888f2362b79fa1e0ec122a
2022-12-08 09:55:57 +08:00
Cyan Hsieh
fe97b2df7a
Revert "restart domain"
...
This reverts commit be714f6fa3
.
Reason for revert: build breakage
Change-Id: I02a16de23cd657bc0cc9494b03f840d0060ac9d1
2022-12-07 04:41:58 +00:00
Adam Shih
be714f6fa3
restart domain
...
Bug: 254378739
Test: boot to home
Change-Id: I63a3e22ccbee16dd3f186e76fa698d2e7454c057
2022-12-07 09:48:15 +08:00
TreeHugger Robot
8ddedfa7fa
Merge "restart domains"
2022-12-06 08:35:59 +00:00
Jenny Ho
ed45434f01
add permission for dump logbuffer
...
Bug: 260756283
Change-Id: If4d885cc53bbb2a4796d638c5f23fbf17a494436
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2022-12-06 10:50:21 +08:00
Adam Shih
21f4111616
restart domains
...
Bug: 254378739
Test: boot to home
Change-Id: If7264f1a5cdaace0558dbeda986d9c899dd6ac08
2022-12-06 10:34:32 +08:00
TreeHugger Robot
7c94c8c83f
Merge "restart deomains"
2022-12-05 06:02:58 +00:00