Hiroshi Akiyama
400a9d2068
Update missing dump_power sepolicy
...
Bug: 304851502
Test: adb bugreport and check dumpstate_board.txt
Change-Id: I1aed85ec3c1106381a395867a6eb90c11a8a1f84
Signed-off-by: Hiroshi Akiyama <hiroshiakiyama@google.com>
2023-10-14 05:02:16 +00:00
yixuanwang
0a4d3c2f89
Add selinux policy for chre vendor data directory
...
Bug: 278114604
Test: on device test
Change-Id: I33d1e73a375c86602ce632665fe96c5876347c52
2023-09-16 02:51:45 +00:00
Sebastian Pickl
b5491c6650
Revert "[DO NOT MERGE] Add selinux policy for chre vendor data d..." am: 84f1209636
am: 7ee5ae18de
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24526611
Change-Id: If8ca0317f923da98e74ff8642b97f83894206b2f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-24 11:33:41 +00:00
Sebastian Pickl
7ee5ae18de
Revert "[DO NOT MERGE] Add selinux policy for chre vendor data d..." am: 84f1209636
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24526611
Change-Id: I3e4c175289017c75c26df4029421b61ad4efcfbe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-24 10:51:24 +00:00
Sebastian Pickl
84f1209636
Revert "[DO NOT MERGE] Add selinux policy for chre vendor data d..."
...
Revert submission 23834879-CHRE BT LOG
Reason for revert: fixes broken test b/297255998 verified by go/abtd: https://android-build.googleplex.com/builds/abtd/run/L30000000962735539
Bug:297255998
Reverted changes: /q/submissionid:23834879-CHRE+BT+LOG
Change-Id: I56b800260303834ed76dedf354b5a32af00b3684
2023-08-24 09:47:19 +00:00
Yixuan Wang
2058641a14
[DO NOT MERGE] Add selinux policy for chre vendor data directory am: 22d9b28316
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23834879
Change-Id: Id8058dbdf765871ba8e762ed10dd1af309642351
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-23 19:52:24 +00:00
Seungjae Yoo
34eb573ac9
Label dtbo partition as dtbo_block_device am: 8256e72c4a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24438745
Change-Id: Ia4dc306e5e6fdb008c890b538804fba528319806
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-18 09:28:08 +00:00
Seungjae Yoo
8256e72c4a
Label dtbo partition as dtbo_block_device
...
Bug: 291191362
Test: m
Merged-In: Iccca8de440cad7e9cd12015e0271262a217c457b
Change-Id: Iccca8de440cad7e9cd12015e0271262a217c457b
2023-08-18 00:38:06 +00:00
Seungjae Yoo
3773ca269e
Label dtbo partition as dtbo_block_device
...
Bug: 291191362
Test: m
Change-Id: Iccca8de440cad7e9cd12015e0271262a217c457b
2023-08-16 11:16:37 +09:00
Jason Chiu
67addf1851
remove rule for bootctrl hidl version 1.2 am: 54b0343059
am: b9e73326ee
am: 8bceac530e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702
Change-Id: I9411d0f4e94a85fd3814cf3317b560016bcd9697
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-25 20:39:12 +00:00
Jason Chiu
b9e73326ee
remove rule for bootctrl hidl version 1.2 am: 54b0343059
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702
Change-Id: Ia4efc4cdc0cb92c62c4ddcb7b6f458c4149657a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-21 02:59:16 +00:00
Jason Chiu
cbb8fed21e
Add rule for bootctrl AIDL am: 17fa2e6fe5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842
Change-Id: Idbac1303702c0845fd549564f28b20f2bf9f0a03
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-21 02:59:13 +00:00
Jason Chiu
3aa432be32
Merge "Add rule for bootctrl AIDL"
...
Bug: 282670401
Change-Id: I1b4c5e7ced0fe67bbbaca2b607e4ca7422e170e1
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 21:00:41 +08:00
Jason Chiu
54b0343059
remove rule for bootctrl hidl version 1.2
...
Bug: 282670401
Change-Id: I25d169c335fb551cf1862fdf6e6540485a2b8016
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 12:56:38 +00:00
Jason Chiu
17fa2e6fe5
Add rule for bootctrl AIDL
...
Bug: 282670401
Change-Id: I1b4c5e7ced0fe67bbbaca2b607e4ca7422e170e1
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 20:53:04 +08:00
Dinesh Yadav
1278d8fc59
[Cleanup]: Move gxp sepolicies to gs-common for P23
...
These policies are moved to gs-common as part of ag/24002524
Bug: 288368306
Change-Id: Iaa15e497eafd54b1b702192a3c8f7fe0c908f8a1
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-07-10 05:13:16 +00:00
Yixuan Wang
22d9b28316
[DO NOT MERGE] Add selinux policy for chre vendor data directory
...
Bug: 278114604
Test: on device test
Change-Id: I1ac96655571f811c116540aec3a1626d5cca1b16
(cherry picked from commit 7530c4bc13
)
2023-06-28 17:16:15 +00:00
Joerg Wagner
724a0cc7c5
Merge "Prepare for Mali r44p0 UMD update" into udc-qpr-dev am: d19ec7a5b6
am: 029fcb5e8a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23599640
Change-Id: Ib339b9efc10937378c5dc802fda8fb758372d90a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-13 07:35:27 +00:00
Joerg Wagner
d19ec7a5b6
Merge "Prepare for Mali r44p0 UMD update" into udc-qpr-dev
2023-06-13 06:03:15 +00:00
Treehugger Robot
ba91204313
Merge "Add sepolicies for gcma_camera heaps" into udc-d1-dev am: 8733772e74
am: 8d8f96f8d9
am: 10d6b74a4e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22298464
Change-Id: I23fd2b50990ef3fe0c5ecc54867897bb0a4d2c24
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-08 09:15:54 +00:00
Treehugger Robot
8733772e74
Merge "Add sepolicies for gcma_camera heaps" into udc-d1-dev
2023-06-08 06:25:44 +00:00
Jörg Wagner
ce42de2ebd
Prepare for Mali r44p0 UMD update
...
Add selinux rule to allow new V2 interface file alongside of V1 used up to r43p0.
The V1 entry will be removed once the r44p0 UMD update completes.
This decouples small changes from large, potentially intrusive ones in
other repositories.
Bug: 284254900
Change-Id: Ia928f871d8ea1fdbfb963cecb8fc4a99947e443e
2023-06-07 10:19:17 +00:00
Mark su
725f5b8df8
Add video12 as hw_jpg_device and enable it for debug_camera_app am: 51c91e5bdf
am: cbc15223d5
am: 870eb2484d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23053881
Change-Id: If4516eb1c6fcf0dfd20c9d04a76092fb9300a7d6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 09:06:22 +00:00
TreeHugger Robot
2df1fd9399
Merge "Remove old secure_element HIDL permission" into udc-d1-dev am: 23440aa9df
am: ae82081798
am: 55c2250a35
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23466920
Change-Id: I0972ca583406d0dbfba0528515890bb1b0946097
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 07:57:20 +00:00
Mark su
51c91e5bdf
Add video12 as hw_jpg_device and enable it for debug_camera_app
...
Test: 05-05 05:07:06.652 4616 4616 W FinishThread: type=1400 audit(0.0:24): avc: denied { read write } for name="video12" dev="tmpfs" ino=646 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:video_device:s0 tclass=chr_file permissive=0 app=com.google.android.GoogleCameraEng
05-08 22:00:59.000 7323 7323 I FinishThread: type=1400 audit(0.0:36): avc: denied { read } for name="lib_jpg_encoder.so"
dev="dm-45" ino=25639 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera_data_file:s0 tcl
ass=file permissive=1 app=com.google.android.GoogleCameraEng
05-08 22:00:59.000 7323 7323 I FinishThread: type=1400 audit(0.0:37): avc: denied { open } for path="/vendor/lib64/lib_j
pg_encoder.so" dev="dm-45" ino=25639 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera_da
ta_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng
05-08 22:46:00.260 4784 4784 I FinishThread: type=1400 audit(0.0:29): avc: denied { execute } for path="/vendor/lib64/
libhwjpeg.so" dev="dm-50" ino=55596 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera_d
ata_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng
05-08 22:33:30.504 7436 7436 I FinishThread: type=1400 audit(0.0:36): avc: denied { getattr } for path="/vendor/lib64/
lib_jpg_encoder.so" dev="dm-50" ino=53765 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_ca
mera_data_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng
05-08 22:33:30.504 7436 7436 I FinishThread: type=1400 audit(0.0:37): avc: denied { map } for path="/vendor/lib64/lib_
jpg_encoder.so" dev="dm-50" ino=53765 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera
_data_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng
binder:7312_2: type=1400 audit(0.0:18): avc: denied { read write } for name="video12" dev="tmpfs" ino=680 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hw_jpg_device:s0 tclass=chr_file permissive=1
05-08 22:28:37.692 7312 7312 I binder:7312_2: type=1400 audit(0.0:19): avc: denied { open } for path="/dev/video12" dev="tmpfs" ino=680 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hw_jpg_device:s0 tclass=chr_file permissive=1
05-08 22:28:37.692 7312 7312 I binder:7312_2: type=1400 audit(0.0:20): avc: denied { ioctl } for path="/dev/video12" dev="tmpfs" ino=680 ioctlcmd=0x5600 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hw_jpg_device:s0 tclass=chr_file permissive=1
05-08 22:28:37.700 7312 7312 I binder:7312_2: type=1400 audit(0.0:21): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=167 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=1
Bug: 267820687
Change-Id: I69f502d721f683d3532038d618f5fafc83f38b6b
2023-05-31 06:08:46 +00:00
TreeHugger Robot
23440aa9df
Merge "Remove old secure_element HIDL permission" into udc-d1-dev
2023-05-31 05:27:32 +00:00
Dinesh Yadav
55064ee2f6
Merge "Add SEPolicy for gxp_metrics_logger.so logging to stats service" into udc-d1-dev am: 15f5afcfab
am: 489a7de117
am: 87199f3e5a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23265297
Change-Id: I9db72caf2b829f6cd05b57267a12be49acdc6695
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 04:57:46 +00:00
Hyungjun Park
6de0a33f0a
Remove old secure_element HIDL permission
...
AIDL HAL is used in the new project and remove the old HIDL part.
Bug: 280530945
Test: VTS pass
Change-Id: Idd38fc59d7e89e2cafab5f4693d00abd6d4fb138
Signed-off-by: Hyungjun Park <hjun78.park@samsung.com>
2023-05-31 03:12:02 +00:00
Yixuan Wang
8a16687b51
Merge "Add selinux policy for chre vendor data directory"
2023-05-31 01:24:48 +00:00
Yixuan Wang
7530c4bc13
Add selinux policy for chre vendor data directory
...
Bug: 278114604
Test: on device test
Change-Id: I1ac96655571f811c116540aec3a1626d5cca1b16
2023-05-30 21:16:26 +00:00
Dinesh Yadav
e6d2f01a89
Add SEPolicy for gxp_metrics_logger.so logging to stats service
...
In order to access the gxp metrics library from the google camera
app (product partition), we need to create an SELinux exception for
the related shared library (in vendor) it uses.
This CL adds the same_process_hal_file tag to allow this exception.
Bug: 278516358
Change-Id: I42d41243d3ee47ebff4f766cd769b5387fd20852
2023-05-26 04:01:09 +00:00
Jimmy Hu
a6b09ce04e
Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev am: 86cb19bb2f
am: 9279426af4
am: 41369192ab
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23341842
Change-Id: Ic4b1dd6c02cffaf4ec285e49e5ba6763c020b531
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 09:34:07 +00:00
Jimmy Hu
86cb19bb2f
Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev
2023-05-24 08:14:01 +00:00
Kenny Root
107d3314a4
Merge "Add GSA logs policy" into udc-d1-dev
2023-05-22 05:14:11 +00:00
Jimmy Hu
70e6dd395b
Set sepolicy for shell script of disabling contaminant detection
...
(ported from Ib2e3cf498851c0c9e5e74aacc9bf391549c0ad1a)
Bug: 263916675
Bug: 264231895
Test: setprop vendor.usb.contaminantdisable true
Change-Id: Ia451a6abc4a3c872c002efa323d06e9179bd656b
Signed-off-by: Jimmy Hu <hhhuuu@google.com>
2023-05-19 09:54:23 +00:00
Prasanna Prapancham
9138d3d1de
add 8411 to logbuffer
...
Test: Flash local build and collect bugreport
Bug: 277799048
Change-Id: I877a91999a2f17df5ea90d3d2257b93bfd67e8e6
Signed-off-by: Prasanna Prapancham <prapancham@google.com>
(cherry picked from commit c1715483d1
)
2023-05-17 22:52:57 +00:00
Xu Han
01b692295a
Merge "Add permission for nautilus devices" into udc-d1-dev am: 639d91fb93
am: cb92b8fcdc
am: 6c5f7b4982
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23279761
Change-Id: I0e08457034c3abb712d3abf9bd0eb2f75c3a526b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 19:02:42 +00:00
Kenny Root
7be3a71942
Add GSA logs policy
...
This adds a label to the sysfs files for GSA logs to allow dumpstate to
read them during a bugreport.
(cherry picked from commit 076591d107
)
Bug: 271125313
Test: adb shell dumpstate
Change-Id: I8842c0bec972c4cfad15ca689f8e4ae7fa99e179
Merged-In: I8842c0bec972c4cfad15ca689f8e4ae7fa99e179
2023-05-17 17:36:35 +00:00
Xu Han
639d91fb93
Merge "Add permission for nautilus devices" into udc-d1-dev
2023-05-17 16:48:55 +00:00
Xu Han
bdc91f6477
Add permission for nautilus devices
...
Bug: 283015605
Test: Build
Change-Id: I986a2798a4a5ca927a1a2aaea61edca9fa59b2c5
2023-05-17 03:59:43 +00:00
Treehugger Robot
8768ad1049
Merge "uwb: add permissions for factory uwb calib file" into udc-d1-dev am: 05abdf9f26
am: e1766dcd82
am: a521555ae0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980180
Change-Id: Ice663723abb01c161ba1f3431d92e12fbf20711a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 18:43:50 +00:00
Treehugger Robot
05abdf9f26
Merge "uwb: add permissions for factory uwb calib file" into udc-d1-dev
2023-05-15 16:54:11 +00:00
Mahesh Kallelil
8e513c2155
Allow dump_modem to read logbuffer and wakeup events am: 1f885d0bcd
am: 56184ab96e
am: af236c3219
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22834646
Change-Id: I38d6bd8125af59ec6373d699e58d6a2461eedc5e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 12:42:59 +00:00
Mahesh Kallelil
1f885d0bcd
Allow dump_modem to read logbuffer and wakeup events
...
Updating sepolicy for dump_modem to read /dev/logbuffer_cpif. This is
required as part of bugreport.
Test: Tested bugreport on P23
Bug: 278501642
Change-Id: I102583e37ec2e3852fd901a75bbb06de9ac6f77c
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2023-05-09 00:20:07 -07:00
Hasan Awais
14b2c135bb
uwb: add permissions for factory uwb calib file
...
needed for copying the factory calib file from persist to
/data/vendor/uwb, along with converting the file to a valid format
for uwb HAL
Bug: 274513871
Bug: 279820265
Test: local build passed
Change-Id: I4c4286cd5c200475cac3b9d58a81724d631c49e0
Signed-off-by: Hasan Awais <hasanawais@google.com>
2023-05-09 00:27:47 +00:00
Martin Liu
e4e930185a
Add sepolicies for gcma_camera heaps
...
Bug: 275481134
Test: launch camera
Change-Id: I2efe897826d3c32bb85c815207865c0db557ea9f
Signed-off-by: Martin Liu <liumartin@google.com>
2023-05-08 23:54:55 +08:00
TreeHugger Robot
99c3feb294
Merge "Add tele sensor sepolicy permission" into udc-d1-dev am: b417627fb8
am: 899d3062b6
am: ebb31ef6bb
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020018
Change-Id: I2c9c384487f02bf9d8a12db6121982a611a903f1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-08 04:00:55 +00:00
TreeHugger Robot
b417627fb8
Merge "Add tele sensor sepolicy permission" into udc-d1-dev
2023-05-08 02:00:59 +00:00
Treehugger Robot
ab47a1ae3b
Merge "Add sepolicy permission of new camera components" into udc-d1-dev am: 74e0e5fc37
am: ad2c33b44a
am: 76ab0fefef
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982823
Change-Id: Ia805db6bdaa4a25a8606473eb668ab9bcf029590
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 07:36:25 +00:00
Kamal Shafi
e1464f8e53
Add tele sensor sepolicy permission
...
Bug: 280370254
Test: build pass
Change-Id: If76c157e272f40159bcd6aac08d4b3bc88991338
2023-05-04 09:18:55 +00:00