Ken Yang
b2585e3a2e
WLC: Add hal_wireless_charger policies for systemui
...
Bug: 268457480
Change-Id: Iadb44efc736cd6bb3c3dfe5283d5fd2a7ce3cf34
Signed-off-by: Ken Yang <yangken@google.com>
2023-02-10 04:40:44 +00:00
Tom Huang
dfe1f3799b
Merge "Add BT hal sepolicy for allowing accessing AoC device node"
2023-02-10 02:23:42 +00:00
Wilson Sung
3c27af4e58
Fix avc error from systemui
...
Bug: 264266705
Change-Id: Iabc41ea7901ea99646147b133b96dd0297fd376d
2023-02-10 02:40:36 +08:00
kuanyuhuang
3ce317ca5f
Add BT hal sepolicy for allowing accessing AoC device node
...
Allow BT hal to access device and aoc_device.
Test: manual and check avc log
Bug: 265587172
Change-Id: I62e9fb3f0278af7e0365f88bb3723cb47a266b81
2023-02-09 09:34:10 +00:00
TreeHugger Robot
c7edca28e2
Merge changes Ia32c4b01,I4746bca6
...
* changes:
Permissive systemui during bringup stage
label SystemUI app
2023-02-09 07:05:46 +00:00
Welly Hsu
782f4c6e6b
Merge "Update ofl_app selinux policy"
2023-02-09 03:47:53 +00:00
Wilson Sung
f88300dc69
label SystemUI app
...
Bug: 264266705
Bug: 262794428
Change-Id: I4746bca6291d57ee36c0565d15ee5320380e1bc0
2023-02-09 11:33:54 +08:00
Adam Shih
e4e0bd775f
Merge "migrate power section to its own script"
2023-02-09 02:51:48 +00:00
TreeHugger Robot
f43519dad8
Merge "dontaudit kernel search allow debugfs"
2023-02-09 02:12:22 +00:00
Carter Hsu
f60b740692
Merge "audio: allow the default setting of the audio persistent property"
2023-02-09 01:58:16 +00:00
Carter Hsu
9d327a161a
audio: allow the default setting of the audio persistent property
...
Bug: 267694116
Test: Verified on the test build
Change-Id: I0ee81de2744656b6637868953948804d4e71dc7c
Signed-off-by: Carter Hsu <carterhsu@google.com>
2023-02-09 08:39:42 +08:00
Karuna Ramkumar
f7449ca763
Merge "zuma: Allow HWC to access graphics allocator hal"
2023-02-08 19:05:58 +00:00
Welly Hsu
b8e66572cc
Update ofl_app selinux policy
...
bug: 264489564
test: Use ofl_app (OFLBasicAgent app) will not face avc error
Change-Id: I55061f6b067e054ec605cd6a196406e48c1271e6
2023-02-08 17:39:34 +08:00
TreeHugger Robot
f61bc3e16a
Merge "WLC: Fix hal_wireless_charger sepolicies"
2023-02-08 09:16:22 +00:00
Ken Yang
c3048691a9
WLC: Fix hal_wireless_charger sepolicies
...
Bug: 264483390
Bug: 264483533
Bug: 264483152
Bug: 263429589
Change-Id: If06e0b0c429e78e71f7be2d6418ccab0ab115414
Signed-off-by: Ken Yang <yangken@google.com>
2023-02-08 08:14:36 +00:00
Adam Shih
4f442e5055
migrate power section to its own script
...
Bug: 240530709
Test: adb bugreport
Change-Id: Id7a761d61757efe55e8642553eccc84864b4a721
2023-02-08 15:40:18 +08:00
Wilson Sung
3c6fa1dfb5
Allow vendor_init to set vendor_logger_prop
...
Bug: 267843409
Change-Id: I99a52a5d0d24f604cf3f0872d4066e1de5256e2f
2023-02-08 15:31:36 +08:00
TreeHugger Robot
25d69cfbed
Merge "Allow kernel to access firmware and zram"
2023-02-08 07:00:41 +00:00
TreeHugger Robot
c1888e24fc
Merge "Allow vendor_init to modify proc_sched"
2023-02-08 05:26:30 +00:00
TreeHugger Robot
a2e09c9e25
Merge "vendor_init: Add getattr to modem_img"
2023-02-08 05:22:20 +00:00
Wilson Sung
ac3c24c4f2
dontaudit kernel search allow debugfs
...
Bug: 261650972
Change-Id: I39b0feb01c592c7beb30d7aa1610c39a75bb3481
2023-02-08 13:21:48 +08:00
TreeHugger Robot
bd9251a800
Merge "Allow vendor_init to modify read_ahead_kb"
2023-02-08 05:20:57 +00:00
TreeHugger Robot
728de48e51
Merge "Add extcon related contexts"
2023-02-08 05:16:56 +00:00
Wilson Sung
856d2c480e
Allow kernel to access firmware and zram
...
Bug: 260522245
Change-Id: I964ac1e30e0181f4d6edc71f2e066b7bd515186b
2023-02-08 05:08:04 +00:00
TreeHugger Robot
9cce214473
Merge "Add required sepolicy rules for Camera function"
2023-02-08 05:00:08 +00:00
Wilson Sung
5dbc57e7ae
Allow vendor_init to modify proc_sched
...
Bug: 263185566
Change-Id: I4a333ffd423e88af81e4c244cc7140ebd826a170
2023-02-08 12:28:31 +08:00
Wilson Sung
df495af425
vendor_init: Add getattr to modem_img
...
Bug: 63185566
Change-Id: I29fd72ba5e1482d629bc28edfd7782c6f24fe68f
2023-02-08 12:26:10 +08:00
Wilson Sung
926deec5d4
Allow vendor_init to modify read_ahead_kb
...
Bug: 264489786
Change-Id: I26d5682b3b056c8c8e00fc08581c96dcbaa27ef9
2023-02-08 04:07:22 +00:00
Wilson Sung
cb79685556
Add extcon related contexts
...
Bug: 260366030
Change-Id: I9b15741820ad284e50593b5467407b773ae15ec8
2023-02-08 12:06:31 +08:00
Karuna Ramkumar
15da9ccf58
zuma: Allow HWC to access graphics allocator hal
...
Bug: 268268619
Change-Id: Iac85dc60b5201ab85fbf74bf3af6722ac31c5b94
2023-02-07 20:06:30 -08:00
Wilson Sung
5f48d4f516
Add required sepolicy rules for Camera function
...
Bug: 263184920
Bug: 263305107
Change-Id: Idadf878564333a931b90da2415efe109e75e222a
2023-02-07 21:20:12 +08:00
Rex Lin
f1f25dc94f
[SELinux] Fix hal_uwb_default dumpstate errors
...
Bug: 263048994
Test: http://ab/I62800010129138096
Change-Id: I4fc3dedb8e35e4d7520acded58d66f5206565afb
Signed-off-by: Rex Lin <rexcylin@google.com>
2023-02-07 08:17:54 +00:00
TreeHugger Robot
90730e60fd
Merge "sepolicy: label required wakeup nodes for system suspend"
2023-02-07 04:20:28 +00:00
Darren Hsu
1934546586
sepolicy: label required wakeup nodes for system suspend
...
Bug: 260366031
Bug: 264204215
Test: run singleCommand pts -m PtsSELinuxTestCases
Change-Id: Icf8c4669156a0017655981fda8619ce0a75dce4d
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-02-07 10:12:30 +08:00
Timmy Li
5533264ba9
Merge "Add UW cornerfolk to file_contexts"
2023-02-07 02:09:54 +00:00
timmyli
d784c55c20
Add UW cornerfolk to file_contexts
...
Device needs access to cornerfolk. Evidence log in comments.
Bug: 267696227
Test: log check
Change-Id: If6bd49b76038673ad12fc6a1e7abd10b4cd3407e
2023-02-07 02:09:46 +00:00
TreeHugger Robot
cdc2d14883
Merge "sepolicy: label ODPM device nodes for hal_power_stats"
2023-02-07 02:05:46 +00:00
Darren Hsu
9964fd2901
sepolicy: label ODPM device nodes for hal_power_stats
...
Bug: 268002261
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: I1dfd7760c4a958e0b31258a8379f3c68eb054f35
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-02-06 21:44:17 +08:00
Donnie Pollitz
1fd0c782b4
sepolicy: Fix trusty_metricsd avc denials
...
* Suez data collection missing
Bug: 264489526
Test: ran com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I667e35c68139a3368655cab4ea40acb529bb65ef
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-02-06 08:57:31 +00:00
Donnie Pollitz
1df4e2dde8
sepolicy: Fix trusty_apploader avc denials
...
* File permissions missing
Bug: 263305034
Test: ran com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I5d0a56a4c31c66610414341118c4089d2c11f3e9
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-02-06 08:57:22 +00:00
Jenny Ho
6f15645932
Merge "Add permission for logbuffer_bd"
2023-02-06 03:53:19 +00:00
Jenny Ho
4e6cfb143d
Add permission for logbuffer_bd
...
Bug: 242679204
Change-Id: I7376f10dc183bac805c89d6905e70a7b92694471
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2023-02-05 14:06:06 +08:00
Jenny Ho
31f750da2b
sepolicy: add sepolicy for disable.battery.defender
...
[ 7.536208] type=1107 audit(1671575809.144:22): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.battery.defender.disable pid=381 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=property_service permissive=1'
Bug: 263305106
Change-Id: Ia7adfe7f128c6390128447b9363ecd3615694fb1
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2023-02-05 13:09:28 +08:00
Ken Yang
af9057e7fb
WLC: Add required sysfs_wlc sepolicies
...
The sysfs_wlc is still required for certain services like
hal_health_default. Add these sepolicies to pass the tests.
Bug: 267171670
Change-Id: If2b5b007f4a24e91b2be83bb20676eb449b9415f
Signed-off-by: Ken Yang <yangken@google.com>
2023-02-05 01:00:01 +00:00
Cyan_Hsieh
79bd040d55
Add gcf partition to OTA domain
...
This allows the OTA mechanism to write to the bootloader slot to
perform the actual OTA
Bug: 263218204
Change-Id: Iec3f3aa73344f4e9a305bc3c1c3f2db7624aca93
2023-02-02 18:08:51 +08:00
TreeHugger Robot
075f213ece
Merge "hal_graphics_composer_default: fix sepolicy denials"
2023-02-02 06:11:49 +00:00
TreeHugger Robot
e9d7a18f5d
Merge "selinux: fix mitigation_vendor_file access"
2023-02-02 04:40:09 +00:00
George Lee
574ebbacf8
selinux: fix mitigation_vendor_file access
...
Bug: 266118091
Test: Local test to confirm error doesn't show up
Change-Id: Ie9e55230211f20efc7bba448bfc335799d0e1d56
Signed-off-by: George Lee <geolee@google.com>
2023-02-01 17:55:12 +00:00
Doug Zobel
b0394ebf56
Merge "Add sepolicy for PCIe link statistics"
2023-02-01 15:04:04 +00:00
Safayat Ullah
7ce9680b98
hal_graphics_composer_default: fix sepolicy denials
...
Bug: 263184738
Bug: 264489746
Test: There is no AVC denied log after reboot
Change-Id: I3c5bbc55f0a676d8906ec061e3c999995d02dd3f
2023-02-01 14:34:36 +00:00