Adam Shih
965fa5a7dc
Merge "Move HWC dump to gs-common" into udc-dev am: 9675dc064a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21533829
Change-Id: I04fc66b217b2cf30d035b50f60aef655ccd02dcf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-24 04:05:26 +00:00
Adam Shih
9675dc064a
Merge "Move HWC dump to gs-common" into udc-dev
2023-02-24 03:17:38 +00:00
Amy Hsu
c186dbd6db
Revise sepolicy because of refactor HbmSvManager
...
1. Set sepolicy correctly, make it the same as gs201.
2. Rename hbmsvmanager to pixeldisplayservice due to refactor.
3. Add arm_mali_platform_service for pixeldisplayservcice
Bug: 241498235
Bug: 262794939
Bug: 263185136
Bug: 264489797
Test: Verify LBE and shadow compensation functions.
Make sure there is no avc denied.
Change-Id: I2a4bb5d6b863edc00b789fd6df8d46f90164d9f2
2023-02-24 02:06:35 +00:00
sukiliu
362a8ac82c
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 270633329
Change-Id: Ia7af3ec3ee9c8b80e22a8eb55fd61d58b6c73980
2023-02-24 09:59:58 +08:00
TreeHugger Robot
53a1a9dbf7
Merge "Partially revert commit e70b98af09
." into udc-dev am: 3d1d5e0b15
am: d716668597
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21546042
Change-Id: I8aedd5804fbdab372225c26cedbb812c4de5582d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 18:10:48 +00:00
TreeHugger Robot
d716668597
Merge "Partially revert commit e70b98af09
." into udc-dev am: 3d1d5e0b15
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21546042
Change-Id: Iff0271baa6f339ab24cb81d3d928fa71cfe14640
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 16:45:01 +00:00
TreeHugger Robot
a0af1bfb89
Merge "Partially revert commit e70b98af09
." into udc-dev am: 3d1d5e0b15
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21546042
Change-Id: I18305418bd4ff9003d3e8d85adc314d298ace405
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 16:44:45 +00:00
TreeHugger Robot
3d1d5e0b15
Merge "Partially revert commit e70b98af09
." into udc-dev
2023-02-23 16:13:11 +00:00
Jörg Wagner
aa24e4e805
Merge "Update Mali DDK to r40 : Additional SELinux settings"
2023-02-23 13:18:05 +00:00
Richard Chang
d9d12a2df5
Merge "sepolicy: clean up tracking_denials for zram" into udc-dev am: d207b85ab3
am: d90c71c987
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21549121
Change-Id: If407d7034030e13fc19b381cb2f39c81417a2874
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 09:04:14 +00:00
Richard Chang
f27096658d
Merge "sepolicy: clean up tracking_denials for zram" into udc-dev am: d207b85ab3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21549121
Change-Id: I7e57e4e321919521a1461f3011e028dc2e965143
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 08:31:06 +00:00
Richard Chang
d90c71c987
Merge "sepolicy: clean up tracking_denials for zram" into udc-dev am: d207b85ab3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21549121
Change-Id: Ifb6a1d623d7c42d7a69a24ae7f8dc815cf0d2630
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 08:28:32 +00:00
Richard Chang
d207b85ab3
Merge "sepolicy: clean up tracking_denials for zram" into udc-dev
2023-02-23 07:37:28 +00:00
Wilson Sung
e8e8037ecd
Add chre policy am: fb2e376d26
am: a4ccb38798
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21533834
Change-Id: I936fba49e515417b3b74a5bdd44d006b65f300dd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 06:03:37 +00:00
Wilson Sung
f6813e983b
Remove camera dontaudit am: 6f141a6526
am: 640d478d5a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503759
Change-Id: I15e25c6faac9aaca4d1028367cc9740ddbf786b8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 06:03:35 +00:00
Ian Kasprzak
1b1fe4d3cc
Partially revert commit e70b98af09
.
...
Remove twoshay references, with commit 9019c55645
reverted it references a non-existent file.
Bug: b/270434708
Test: Verified with go/abtd build
Reason for revert: b/270434708 - Breaks git_udc-d1-dev-plus-aosp-without-vendor builds.
Change-Id: I5705d214218107226ae3dd4959406f3ec05afa90
2023-02-23 05:45:07 +00:00
Wilson Sung
a4ccb38798
Add chre policy am: fb2e376d26
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21533834
Change-Id: Iff4cde7901e7d05627e7f9f7c0d27fc457bba4dc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 05:14:46 +00:00
Wilson Sung
640d478d5a
Remove camera dontaudit am: 6f141a6526
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503759
Change-Id: I29c37dc676b4754cc1ce9f4c2620e52d278c36a4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 05:14:45 +00:00
Wilson Sung
540f2a5803
Add chre policy am: fb2e376d26
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21533834
Change-Id: Ief4f5dbb715527d079a7a5b75dd97ca552d957b4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 05:09:58 +00:00
Wilson Sung
d6127ccff7
Remove camera dontaudit am: 6f141a6526
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503759
Change-Id: I821bf958fcfb873e4ed4b413038a9cb456160602
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 05:09:56 +00:00
Richard Chang
e6f6cca02a
sepolicy: clean up tracking_denials for zram
...
The zram SELinux errors didn't exist in recent build
(9633105, 9642683).
Remove the record in tracking_denials/init.te.
Bug: 269221861
Test: Check log
Change-Id: I4057aaf960aef885d4d894ae5dc51f93e71afd83
2023-02-23 03:57:57 +00:00
Wilson Sung
fb2e376d26
Add chre policy
...
Bug: 260522435
Bug: 261105224
Test: boot-to-home
Change-Id: Icd8f1ad497357bbbcb9e34509c736f3976ff0ac7
2023-02-23 11:05:15 +08:00
Wilson Sung
6f141a6526
Remove camera dontaudit
...
Bug: 267843409
Bug: 268226491
Change-Id: Idce5518072fc266b45c2fbc5269915b19ceb19e8
2023-02-23 11:04:47 +08:00
Ian Kasprzak
5bb246f13c
Merge "Revert "Allow twoshay → systemui_app binder call for zuma devices"" into udc-dev am: e3af6770ab
am: 271f7404bc
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21540614
Change-Id: I4d2749018bb251c764fa37e7d56088dea9164dc9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 01:47:16 +00:00
Ian Kasprzak
271f7404bc
Merge "Revert "Allow twoshay → systemui_app binder call for zuma devices"" into udc-dev am: e3af6770ab
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21540614
Change-Id: Icd890d614ecec5e1b5688735fcbb8e0a49e6599f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 00:57:14 +00:00
Ian Kasprzak
ef751422ca
Merge "Revert "Allow twoshay → systemui_app binder call for zuma devices"" into udc-dev am: e3af6770ab
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21540614
Change-Id: I42ebdcee19667f1cce20aa704792ba5e45957dcd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 00:53:50 +00:00
Ian Kasprzak
e3af6770ab
Merge "Revert "Allow twoshay → systemui_app binder call for zuma devices"" into udc-dev
2023-02-22 22:28:43 +00:00
Ian Kasprzak
cbf2b3fdb2
Revert "Allow twoshay → systemui_app binder call for zuma devices"
...
This reverts commit 9019c55645
.
Reason for revert: b/270434708 - Breaks git_udc-d1-dev-plus-aosp-without-vendor builds.
Change-Id: Iab5bf42754760dedbe26dd684c373ba9ec3af70b
2023-02-22 22:28:33 +00:00
Wilson Sung
11f7df1638
Merge "Add hal_bootctl_default write permission to devinfo_block_device" into udc-dev am: 2dc224c7b9
am: b41fd56de0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21532246
Change-Id: Ia5f365e32eab587d4121fc7b6a05b7913f721991
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 06:33:16 +00:00
Wilson Sung
8f6a517f41
Merge "Remove touch_context_service to avoid compile error" into udc-dev am: dfd3296451
am: 0e5858d50e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21532245
Change-Id: I15971b1ec0fd8ddf4a74284a0ad2c6959914ce10
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 06:31:20 +00:00
Adam Shih
90d9b97221
Move HWC dump to gs-common
...
Bug: 269212897
Test: adb bugreport
Change-Id: I616f0af4d9ba466d62d87e7fc912c8c3201f7f65
2023-02-22 13:55:50 +08:00
Wilson Sung
b41fd56de0
Merge "Add hal_bootctl_default write permission to devinfo_block_device" into udc-dev am: 2dc224c7b9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21532246
Change-Id: I82eda4ee49a78b35b91c0ad8f3e81e2b525c73dc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 05:23:46 +00:00
Wilson Sung
0e5858d50e
Merge "Remove touch_context_service to avoid compile error" into udc-dev am: dfd3296451
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21532245
Change-Id: I1de205b76e27cab0040e1054568a4020562e1a57
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 05:22:30 +00:00
Wilson Sung
e148d76c21
Merge "Add hal_bootctl_default write permission to devinfo_block_device" into udc-dev am: 2dc224c7b9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21532246
Change-Id: Ia9f0aaa2adb046417417119b6517d3af854d760c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 05:20:07 +00:00
Wilson Sung
54928d8c4e
Merge "Remove touch_context_service to avoid compile error" into udc-dev am: dfd3296451
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21532245
Change-Id: Ifa8f7f79c4c9c1e741913367d7128983008fd693
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 05:18:00 +00:00
Cody Heiner
7229048556
Allow twoshay → systemui_app binder call for zuma devices am: 9019c55645
am: baf09b5ab9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21529713
Change-Id: Id247eb47d54b270e994d7316685303e59d77fbc8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 05:14:01 +00:00
Wilson Sung
2dc224c7b9
Merge "Add hal_bootctl_default write permission to devinfo_block_device" into udc-dev
2023-02-22 04:49:33 +00:00
Wilson Sung
dfd3296451
Merge "Remove touch_context_service to avoid compile error" into udc-dev
2023-02-22 04:32:18 +00:00
Armelle Laine
75ec1c9470
Define selinux properties for /dev/block/by-name/trusty_persist
...
Bug: 247013568
Test: - Verify that this change is a NOP for devices with TDP already
created on top of the legacy f2fs partition /mnt/vendor/persist/ss
- Verify that this change creates a valid symlink on a manually
migrated block device
Change-Id: I226f365c6afbb5fa91ec1c9c1943f8dddac8183a
2023-02-22 04:28:08 +00:00
Cody Heiner
e4c5aedc21
Allow twoshay → systemui_app binder call for zuma devices am: 9019c55645
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21529713
Change-Id: I100420439bdb38eac30b6fdb11b1aa668b687227
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 04:04:01 +00:00
Cody Heiner
baf09b5ab9
Allow twoshay → systemui_app binder call for zuma devices am: 9019c55645
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21529713
Change-Id: Id48b48c9e374dab6bf58b50bde30ea9f2387a56e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 04:04:00 +00:00
Wilson Sung
ca241fa76c
Add hal_bootctl_default write permission to devinfo_block_device
...
Bug: 270236357
Change-Id: I40219dbd726ddebb277e592353bd9f0b249dd01f
2023-02-22 11:23:32 +08:00
Wilson Sung
328cbaaa41
Remove touch_context_service to avoid compile error
...
Bug: 270157082
Change-Id: I1d5d573ddb1d7323e7c66386928074fd06cfc484
2023-02-22 11:16:15 +08:00
Wilson Sung
e6485106b6
Add hal_bootctl related policy am: bab5b72f86
am: 393e31b676
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508207
Change-Id: I3a060c0fe0d6d4a2e2b516e443b792ce54c186d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 01:36:44 +00:00
Wilson Sung
bfab4be3c4
Enforce kernel domain am: da09093d88
am: 06d8b16f05
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503757
Change-Id: I0012c8c383b097d56cecc624f82cacdfe5deb877
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 01:36:43 +00:00
Wilson Sung
9a8e9b5918
Temporary allow kernel access same_process_hal am: 9457e5260e
am: 45c7bbe3cd
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503756
Change-Id: Ie3d5523b61c829f6ac1c6b895bf83668ff651830
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 01:36:41 +00:00
Wilson Sung
6c52227cd4
Remove vendor_fw_file related dontaudit am: 86931fb2ea
am: fa379e036e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503752
Change-Id: I178aa114c7f7cd901798eaaca661c7c31100542a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 01:27:02 +00:00
Cody Heiner
9019c55645
Allow twoshay → systemui_app binder call for zuma devices
...
Splitting system_app (b/264266705) caused the avc denial below,
causing b/269981541. This change allows the denied binder call
and fixes the bug.
Denial message:
avc: denied { call } for scontext=u:r:twoshay:s0 tcontext=u:r:systemui_app:s0:c230,c256,c512,c768 tclass=binder permissive=0
Test: flash P23 device with ag/21526491 along with this change
→ twoshay runs normally.
Fixes: 269981541
Change-Id: Ib3cf6f44b6288ed5c7c773e2ad670d2fd0aeee96
2023-02-21 23:58:05 +00:00
Wilson Sung
0e7828c0a5
Add hal_bootctl related policy am: bab5b72f86
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508207
Change-Id: Ibcb404bff2c8d72121d4aa8e9d1ee13932d4b471
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 23:06:50 +00:00
Wilson Sung
722ee868e6
Enforce kernel domain am: da09093d88
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503757
Change-Id: I311c9b36ff69366af3d90e9c4ee6cc64768de951
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 23:06:48 +00:00