timmyli
8d061f7ebc
Add hal_camera_default se linux file for zuma
...
Add hal_camera_default.te for zuma. Move referenced contexts and
settings to new zuma-sepolicy folders. Add hal_camera_default type declaration
to file.te
Bug: 261651093, 260366029, 263185135
Test: Build and test for hal_camera_default denials
Change-Id: Id0246f9ca8fd399853894e9e41548976ab44ccd0
2022-12-22 21:41:11 +00:00
Dennycy
79210088c5
Sepolicy: Pixelstats: Battery history sepolicy
...
avc: denied { read } for comm="pixelstats-vend" name="battery_history"
dev="tmpfs" ino=845 scontext=u:r:pixelstats_vendor:s0 tcontext=u
:object_r:battery_history_device:s0 tclass=chr_file permissive=1
Bug: 260366322
Test: No more battery_history sepolicy found
Change-Id: Ic5d351ed0e42d08b24b5fd0af2d9ebd155086bc9
Signed-off-by: Dennycy <dennycylee@google.com>
2022-12-22 09:21:56 +00:00
Ernie Hsu
0faf3d2c7b
Merge "mediacodec_samsung: add sepolicy for mfc codec"
2022-12-22 05:25:29 +00:00
Ernie Hsu
bb7586ac03
mediacodec_samsung: add sepolicy for mfc codec
...
Add necessary sepolicy. Log and reason are added in review comment
move sysfs out from legacy setting
Bug: 262633502
Bug: 263049105
Bug: 262794577
Bug: 262794578
Bug: 262794634
Test: video playback
SELinuxTest#scanBugreport
SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I240f3fc4672a0d3133699f76a808573e172d23f2
2022-12-22 03:46:04 +00:00
Chung-Kai (Michael) Mei
839546d2e3
Merge "Revert "Fix avc denials for powerhal""
2022-12-21 08:39:31 +00:00
Chung-Kai (Michael) Mei
21426ea726
Revert "Fix avc denials for powerhal"
...
This reverts commit 92e550d83f
.
Reason for revert: here's duplicated setting
Change-Id: I4188deee0010c5dd10501fd9b36ae3876c412322
2022-12-21 08:37:50 +00:00
TreeHugger Robot
aed7870cb2
Merge "Fix avc denials for powerhal"
2022-12-21 07:20:07 +00:00
TreeHugger Robot
e9868935cf
Merge "mediacodec_google: updated sepolicy"
2022-12-21 04:58:31 +00:00
Chungkai Mei
92e550d83f
Fix avc denials for powerhal
...
Test: bott passed and no avc log after boot
Bug: 260769063
Bug: 261105028
Bug: 260366126
Bug: 261650934
Bug: 262178497
Bug: 262315567
Bug: 262633072
Change-Id: I84e5cdaeb8016bd3f5506a242ee8e3a58052ab07
Signed-off-by: Chungkai Mei <chungkai@google.com>
2022-12-21 02:46:39 +00:00
Taylor Nelms
9f72e56d46
Merge "Modify permissions to allow dumpstate process to access decon_counters node"
2022-12-21 01:41:40 +00:00
Ruofei Ma
fd79c76365
mediacodec_google: updated sepolicy
...
Add necessary sepolicy.
Bug: 262633230
Test: no avc denied for mediacodec_google
Change-Id: I0b2a8a12d9d9a6484cf899fabdf213b8c9a279e9
Signed-off-by: Ruofei Ma <ruofeim@google.com>
2022-12-19 19:37:52 -08:00
Adam Shih
169b9143fb
restart domains
...
Bug: 254378739
Test: boot to home
Change-Id: I7d077b7c5edfb3bee07a05fda05e5076e515c7bf
2022-12-20 08:50:43 +08:00
Adam Shih
be72019a1c
restart domains
...
Bug: 254378739
Test: boot to home
Change-Id: I6faa55132d52896c5138eb4dcff2bde3557dcf90
2022-12-19 11:01:25 +08:00
Taylor Nelms
e7f915c920
Modify permissions to allow dumpstate process to access decon_counters node
...
Bug: 240346564
Test: Build for P23 device with "user" build, check bugreport for decon_counters content
Change-Id: Iac569b53880f903aa6496cb24bdadc6e38975171
Signed-off-by: Taylor Nelms <tknelms@google.com>
2022-12-16 16:50:49 +00:00
TreeHugger Robot
3406af9012
Merge "Add BrownoutDetected Events - zuma sepolicy"
2022-12-15 05:29:35 +00:00
Adam Shih
dc479f78a5
Merge "restart domains"
2022-12-15 03:15:49 +00:00
Adam Shih
419fa5774c
create an empty dump file for wlan
...
Bug: 261784587
Test: adb bugreport
Change-Id: I6a0e65e4624348f5f34cb618150a6978996dcdc9
2022-12-14 13:33:33 +08:00
Adam Shih
ce44423468
restart domains
...
Bug: 254378739
Test: boot to home
Change-Id: I427f1647d5a0a95e750fd59419575cdb7553111e
2022-12-14 11:27:03 +08:00
Adam Shih
4b9a4886f1
restart domains
...
Bug: 254378739
Test: boot to home
Change-Id: Ie67dbbdad041d84cddbabf62e98b0a8f2b1eadf2
2022-12-14 09:19:54 +08:00
Adam Shih
126d6a4771
restart domains
...
Bug: 254378739
Test: boot to home
Change-Id: Ib6b0d9415b286fc7025df009a3bf7f1105ae4860
2022-12-13 13:38:35 +08:00
George Lee
b17a5fc383
Add BrownoutDetected Events - zuma sepolicy
...
Brownout Detection is detected during the boot sequence. If the
previous shutdown resulted in a reboot reason that has *ocp* or *uvlo*
in it, the shutdown was due to brownout. Mitigation Logger should have
logged the device state during the brownout. This event metric is to
surface the logged data.
Bug: 250009365
Test: Confirm triggering of events
Ignore-AOSP-First: to detect brownout.
Change-Id: I54e354372935e339f685fc8f5541a0568053ae08
Signed-off-by: George Lee <geolee@google.com>
2022-12-12 21:20:58 -08:00
Lopy Cheng
7b281b63f2
hal_graphics_composer_default: add sepolicy for display
...
Fix avc denied issues.
Bug: 260769163
Bug: 261105029
Bug: 261933075
Bug: 261933169
Bug: 262178623
Test:
There is no AVC denied log after reboot
Change-Id: I291877a0f70f25a43f49a96a2b280be925bb98c5
2022-12-12 16:12:18 +08:00
George Chang
b5887a9853
Update permissions for st54spi and st33spi
...
Remove st33spi and update st54spi rules
Bug: 261519145
Bug: 261519169
Test: m atest && atest-dev com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I37736275204ad7bea98ce225121e71545260187c
2022-12-08 15:08:17 +00:00
Adam Shih
1774ec056b
restart domain
...
Bug: 254378739
Test: boot to home
Change-Id: I776bf6fa66605a4c3a888f2362b79fa1e0ec122a
2022-12-08 09:55:57 +08:00
Cyan Hsieh
fe97b2df7a
Revert "restart domain"
...
This reverts commit be714f6fa3
.
Reason for revert: build breakage
Change-Id: I02a16de23cd657bc0cc9494b03f840d0060ac9d1
2022-12-07 04:41:58 +00:00
Adam Shih
be714f6fa3
restart domain
...
Bug: 254378739
Test: boot to home
Change-Id: I63a3e22ccbee16dd3f186e76fa698d2e7454c057
2022-12-07 09:48:15 +08:00
TreeHugger Robot
8ddedfa7fa
Merge "restart domains"
2022-12-06 08:35:59 +00:00
Jenny Ho
ed45434f01
add permission for dump logbuffer
...
Bug: 260756283
Change-Id: If4d885cc53bbb2a4796d638c5f23fbf17a494436
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2022-12-06 10:50:21 +08:00
Adam Shih
21f4111616
restart domains
...
Bug: 254378739
Test: boot to home
Change-Id: If7264f1a5cdaace0558dbeda986d9c899dd6ac08
2022-12-06 10:34:32 +08:00
TreeHugger Robot
7c94c8c83f
Merge "restart deomains"
2022-12-05 06:02:58 +00:00
Adam Shih
d6f91bdd8c
restart deomains
...
Bug: 254378739
Test: boot to home
Change-Id: I0ba59f5781d50ac4e9d8f501792a74187eda864e
2022-12-05 12:33:05 +08:00
Kenny Root
cc4dfa8c8b
Add GSA BL1 partition to OTA domain
...
This allows the OTA mechanism to write to the bootloader slot to
perform the actual OTA
Test: reboot and check partition label with ls -lZ
Bug: 259190970
Change-Id: I5433adbacfc6e16e61aac2e797f03f63b0deb29f
Signed-off-by: Kenny Root <kroot@google.com>
2022-12-04 18:36:10 -08:00
Adam Shih
eedcbe920d
fix missing declaration
...
Bug: 254378739
Test: build pass
Change-Id: Ifb823de88007108a158fe747d1ed1f42547c2120
2022-12-05 09:05:06 +08:00
Adam Shih
d4f59d3275
retire pixel-sepolicy
...
Bug: 254378739
Test: boot with power stats launched
Change-Id: I5fa1b4617000490de6cdf79699014e076a34d816
2022-12-02 10:19:13 +08:00
George Chang
f40edb1ad5
Fix hal_nfc_default selinux denial
...
Allow hal_nfc_default to access vendor_nfc_prop
Bug: 260769165
Bug: 260921340
Test: m atest && atest-dev com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I53ff6262ac3210ee166df6d87c0fa587aa594b86
2022-12-01 05:58:50 +00:00
Adam Shih
f1bdfb4013
restart other domains
...
Bug: 254378739
Test: boot to home
Change-Id: Iddd16a969514e9e74f20793a1b7a02d328d6afbf
2022-11-30 07:59:05 +08:00
Adam Shih
8282a5abd2
restart a number of domains
...
Bug: 254378739
Test: boot to home
Change-Id: I2390670d7d885d0e63fd6d1b4a1c9996ac3b6ee5
2022-11-25 14:03:00 +08:00
Adam Shih
cc516c150a
review proc_vendor_sched
...
Bug: 254378739
Test: boot with no relevant error
Change-Id: If7d7334896f544c7d91b123513ebe437a35373ad
2022-11-21 15:05:49 +08:00
Adam Shih
91f7e4c62e
review partition related operation
...
Bug: 254378739
Test: boot with no relevant avc error
Change-Id: I31ee3a7654e759fb19d90fa9ec05d493660c3741
2022-11-21 11:17:10 +08:00
Adam Shih
8cc9ed0404
review partitions
...
Bug: 254378739
Test: boot with relevant files labled correctly
Change-Id: Ic5954b5de7976e1864dc77254b547d6c97f9e564
2022-11-21 10:31:06 +08:00
Adam Shih
c37b0484af
review fsck and relevant partitions
...
Bug: 254378739
Test: boot with no relevant error
Change-Id: Ibdcea873e830c534101aaea0f12a1717748dcb48
2022-11-21 10:16:19 +08:00
Adam Shih
381ae2dddb
restart device dependent HALs
...
Bug: 254378739
Test: build pass
Change-Id: I06061867773dd20989923b3ce81b58a457f8a929
2022-11-18 11:19:34 +08:00
Adam Shih
d8e8b3899c
review hal_radioext_default
...
Bug: 254378739
Test: boot with hal_radioext_default launched
Change-Id: Idd913e9418cc5ffbe0ade236639608c2bd313599
2022-11-10 14:29:03 +08:00
Adam Shih
fc41e82939
remove edgeTPU folder
...
Bug: 258114806
Test: build pass
Change-Id: Ic9eb7f671ef3ede2da40e0ec40b0bb0646240924
2022-11-09 12:39:09 +08:00
Adam Shih
d55543c288
isolate samsung modem related sepolicy
...
Bug: 254378739
Test: boot with relevant binary launched
Change-Id: Ia18fce855bee17b93d97d1aa29a40d834a81fe09
2022-11-09 10:41:21 +08:00
Adam Shih
a91e557579
review the rest of slsi apps
...
Bug: 254378739
Test: build pass
Change-Id: Icdea2a58f0b77cc78de7fd831aa7a54ddff2b0d3
2022-11-07 13:44:27 +08:00
Adam Shih
fb3623ca3d
review vendor_engineermode_app
...
Bug: 254378739
Test: build pass
Change-Id: I6dcbe756227cd41280f1d1b83ff7e807680259e2
2022-11-07 13:20:52 +08:00
TreeHugger Robot
19126e2dda
Merge "restart hal_health_default"
2022-11-07 03:26:11 +00:00
Adam Shih
5944db2199
restart hal_health_default
...
Bug: 254378739
Test: boot with the HAL started
Change-Id: I3143011c46e540424e340cbc36a818449395ec69
2022-11-07 02:19:16 +00:00
Adam Shih
4c8e49f158
review sced
...
Bug: 254378739
Test: build pass with sced correctly labeled
Change-Id: Ie59a048c5996d03d0641c824f6526618c260795e
2022-11-07 10:02:18 +08:00