Commit graph

1026 commits

Author SHA1 Message Date
Xu Han
639d91fb93 Merge "Add permission for nautilus devices" into udc-d1-dev 2023-05-17 16:48:55 +00:00
Luke Chang
de2132476f Merge "sepolicy: label cpd cl2 & cl1 target_residency" into udc-d1-dev am: 3d16072afb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23270943

Change-Id: I0809900155d08d626e730b338feee23516254ec3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 11:01:10 +00:00
Luke Chang
3d16072afb Merge "sepolicy: label cpd cl2 & cl1 target_residency" into udc-d1-dev 2023-05-17 10:09:06 +00:00
Xu Han
bdc91f6477 Add permission for nautilus devices
Bug: 283015605
Test: Build
Change-Id: I986a2798a4a5ca927a1a2aaea61edca9fa59b2c5
2023-05-17 03:59:43 +00:00
lukechang
73e88c0a83 sepolicy: label cpd cl2 & cl1 target_residency
Test: build and boot to home
Bug: 277390134

Merged-In: I127ffc74aa68976de4aaa4a750b4043def4e2759
Change-Id: I127ffc74aa68976de4aaa4a750b4043def4e2759
Signed-off-by: lukechang <lukechang@google.com>
2023-05-17 02:11:41 +00:00
TreeHugger Robot
455a2dcd69 Merge "Add chre channel sepolicy entries" into udc-d1-dev am: 3203ccc21a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22953495

Change-Id: Ib2d8972837eb6bbd894d2bc31c529c105375d2f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-16 23:54:49 +00:00
TreeHugger Robot
3203ccc21a Merge "Add chre channel sepolicy entries" into udc-d1-dev 2023-05-16 23:04:18 +00:00
Luis Delgado de Mendoza Garcia
a3f0628f68 Add chre channel sepolicy entries
Bug: 275143652
Fix: 275143652
Test: in-device verification.
Change-Id: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
Merged-In: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
2023-05-16 21:43:09 +00:00
Treehugger Robot
e1766dcd82 Merge "uwb: add permissions for factory uwb calib file" into udc-d1-dev am: 05abdf9f26
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980180

Change-Id: I8383f4ed2858abd05dceeef3fc7d7720e42a3031
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 17:33:21 +00:00
Treehugger Robot
05abdf9f26 Merge "uwb: add permissions for factory uwb calib file" into udc-d1-dev 2023-05-15 16:54:11 +00:00
Jin Jeong
b3c701b9c4 Revert "[Zuma] Fix SeLinux error"
This reverts commit 709ad06c0e.

Reason for revert: b/279988311 we rename the vendor.modem property so we don't need to add the new rules

Change-Id: Ibe56941737506158ef963bba2ae00035c5c11069
2023-05-12 04:20:27 +00:00
Wilson Sung
6be3026f0f Remove fixed SELinux bug from bug_map am: 2e511cf418
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23156963

Change-Id: I0d9db68056fd36b51302cf4906370e6d951ad573
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 18:39:11 +00:00
Wilson Sung
2e511cf418 Remove fixed SELinux bug from bug_map
Fix: 280706292
Bug: 280522410
Change-Id: I5b35759d2b89246e65683fbbc3ca877af04ef25b
2023-05-11 14:10:41 +08:00
Wilson Sung
806dfc977c Update SELinux error am: 17a784cf97
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23125888

Change-Id: I9c64aee39c85fc94bc05413970bd6367dc1e8684
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 04:48:55 +00:00
Wilson Sung
17a784cf97 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 281815594
Test: scanBugreport
Bug: 281815594
Bug: 281815537
Test: scanAvcDeniedLogRightAfterReboot
Bug: 281815594
Fix: 281645191
Change-Id: Ia1e72cdee3ca535eb978ad8becad94c9c4d8c2cd
2023-05-11 04:06:31 +00:00
Zixuan Lan
c7bf80dd24 remove fixed selinux bug from bug map. am: 288623d4d4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23040174

Change-Id: I420a0e14dec2b62a81bd860950599f2e4bc08310
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-10 01:28:43 +00:00
Zixuan Lan
288623d4d4 remove fixed selinux bug from bug map.
TPU permission was fixed to avoid error in hal_camera_defaul.The corresponding bug for tracking should be removed from the bug map. Please see bug for more details.
Bug: 275001641
Test: logcat grep for selinux error

Change-Id: I3622a1877f94b41d03d1bcb1c16a404db4b3ea8d
2023-05-09 16:38:38 -07:00
Zheng Pan
a98b8a881f Merge "Allow systemui to find adbd" into udc-d1-dev am: 705cc4abf8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23104216

Change-Id: I0f37291b0dd6ca03020fff173603fcea1cb517a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 21:12:20 +00:00
Zheng Pan
705cc4abf8 Merge "Allow systemui to find adbd" into udc-d1-dev 2023-05-09 20:21:14 +00:00
Wilson Sung
f4499ed385 Merge "Update SELinux error" into udc-d1-dev am: e797557f08
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23015883

Change-Id: I8ff067a88f7754d007f26c0a273c2a91edbf0bf1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 10:29:22 +00:00
Mahesh Kallelil
56184ab96e Allow dump_modem to read logbuffer and wakeup events am: 1f885d0bcd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22834646

Change-Id: I2c96c9fce37659d5cd4ed5258bdb647c7b7b8981
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 10:28:59 +00:00
Wilson Sung
e797557f08 Merge "Update SELinux error" into udc-d1-dev 2023-05-09 10:06:38 +00:00
Treehugger Robot
5dbbb257fb Merge "Update SELinux error" into udc-d1-dev am: 254911d666
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23100096

Change-Id: I6ef7907e508e29b621c24b3b061edd1e019e453a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 08:59:18 +00:00
Luke Chang
590c58bc44 Merge "sepolicy: label cpd cl2 & cl1" into udc-d1-dev am: f86a07903b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980665

Change-Id: Ia1c127dc965d6b8997a0b265bdc46c298d40ccfd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 08:55:59 +00:00
Mahesh Kallelil
1f885d0bcd Allow dump_modem to read logbuffer and wakeup events
Updating sepolicy for dump_modem to read /dev/logbuffer_cpif. This is
required as part of bugreport.

Test: Tested bugreport on P23
Bug: 278501642
Change-Id: I102583e37ec2e3852fd901a75bbb06de9ac6f77c
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2023-05-09 00:20:07 -07:00
Treehugger Robot
254911d666 Merge "Update SELinux error" into udc-d1-dev 2023-05-09 07:15:25 +00:00
Luke Chang
f86a07903b Merge "sepolicy: label cpd cl2 & cl1" into udc-d1-dev 2023-05-09 06:09:33 +00:00
Wilson Sung
fd60d077ad Allow systemui to find adbd
Bug: 276415118
Fix: 272628396
Test: connect to adb with no avc error
Change-Id: I07496d663628f62ed975785d794854d1cdc77040
2023-05-09 05:22:16 +00:00
Wilson Sung
6ee8a855f9 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 280706211
Test: scanBugreport
Bug: 280706211
Bug: 280705998
Test: scanAvcDeniedLogRightAfterReboot
Bug: 280706211
Change-Id: I84d50fc4e4f05d0228bc3713cf1b216bf12a72cd
2023-05-09 10:07:46 +08:00
Hasan Awais
14b2c135bb uwb: add permissions for factory uwb calib file
needed for copying the factory calib file from persist to
/data/vendor/uwb, along with converting the file to a valid format
for uwb HAL

Bug: 274513871
Bug: 279820265
Test: local build passed
Change-Id: I4c4286cd5c200475cac3b9d58a81724d631c49e0
Signed-off-by: Hasan Awais <hasanawais@google.com>
2023-05-09 00:27:47 +00:00
Jin Jeong
62a999aff6 Merge "[Zuma] Fix SeLinux error" into udc-d1-dev am: e22788ae78
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22984822

Change-Id: I61a44b6ddbc189fd34e5146c2fb16af13e83d8db
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 00:18:53 +00:00
Jin Jeong
e22788ae78 Merge "[Zuma] Fix SeLinux error" into udc-d1-dev 2023-05-08 23:37:28 +00:00
Martin Liu
e4e930185a Add sepolicies for gcma_camera heaps
Bug: 275481134
Test: launch camera
Change-Id: I2efe897826d3c32bb85c815207865c0db557ea9f
Signed-off-by: Martin Liu <liumartin@google.com>
2023-05-08 23:54:55 +08:00
lukechang
9d44de7ecf sepolicy: label cpd cl2 & cl1
Test: build and boot to home
Bug: 277390134

Merged-In: Iad525a9c556ee436afb8cbd29156b6b593329e83
Change-Id: Iad525a9c556ee436afb8cbd29156b6b593329e83
Signed-off-by: lukechang <lukechang@google.com>
2023-05-08 08:39:21 +00:00
sashwinbalaji
771b533133 thermal: thermal_metrics: Update selinux to reset stats
Bug: 193833982
Test: Local build and verify statsD logs
adb shell cmd stats print-logs && adb logcat -b all | grep -i 105045
Change-Id: I09afbea9386724f0abf6b9cab5838e89a060a5fd
2023-05-08 05:15:39 +00:00
TreeHugger Robot
899d3062b6 Merge "Add tele sensor sepolicy permission" into udc-d1-dev am: b417627fb8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020018

Change-Id: I2b27f715f84d664965ce7dfef14d59cee4788b22
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-08 02:32:21 +00:00
TreeHugger Robot
b417627fb8 Merge "Add tele sensor sepolicy permission" into udc-d1-dev 2023-05-08 02:00:59 +00:00
Treehugger Robot
0c91639fd5 Merge "Add sepolicy permission of new camera components" into udc-d1-dev am: 74e0e5fc37
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982823

Change-Id: Ic57a119ec1d8bd364567cb99ff603a703b1b6767
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:47:47 +00:00
Ted Wang
08f24f30a6 Merge "Add sepolicy for aidl bt extension hal" into udc-d1-dev am: be9ee4c01d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22344152

Change-Id: Ib6a3152e7cdaa68a880fe0e94c7a5ea633db24e1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:47:14 +00:00
Treehugger Robot
74e0e5fc37 Merge "Add sepolicy permission of new camera components" into udc-d1-dev 2023-05-05 06:27:43 +00:00
Ted Wang
be9ee4c01d Merge "Add sepolicy for aidl bt extension hal" into udc-d1-dev 2023-05-05 06:19:10 +00:00
TreeHugger Robot
55ecf93b7d Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev am: 1db3ac365d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22589719

Change-Id: I9c31d1f117be3993b6114a7b636095a9229050b0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:05:33 +00:00
TreeHugger Robot
1db3ac365d Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev 2023-05-05 05:35:55 +00:00
George Chang
74937b19bb Allow systemui_app to access Nfc service am: 178e94cb81
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020017

Change-Id: Ia2a718ce595dbb51c0a4b7fac05a8f5053547b8a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 00:18:59 +00:00
Manali Bhutiyani
cf161d6ce3 [display-stats] enable pixelstats access to display metrics on Zuma devices.
Bug: 259554507
Test: Build and boot on device
adb shell cmd stats print-stats | grep -i <atom-id>

Change-Id: Ifc47211063b98f727b3b0eb7f7ebd42e3c7bb99b
2023-05-04 20:56:24 +00:00
George Chang
178e94cb81 Allow systemui_app to access Nfc service
avc:  denied  { find } for pid=1867 uid=10249 name=nfc
scontext=u:r:systemui_app:s0:c249,c256,c512,c768
tcontext=u:object_r:nfc_service:s0 tclass=service_manager
permissive=0

Bug: 280531969
Test: manually check nfc signal after battery share on
Change-Id: I7c9092388d031e8714b8f3f4738db77776c66326
2023-05-04 09:52:14 +00:00
Kamal Shafi
e1464f8e53 Add tele sensor sepolicy permission
Bug: 280370254
Test: build pass
Change-Id: If76c157e272f40159bcd6aac08d4b3bc88991338
2023-05-04 09:18:55 +00:00
horngchuang
5e6e5b568b Add sepolicy permission of new camera components
Bug: 279885244
Bug: 280392819
Test: Build and test for sensor denials
Change-Id: Ib29b0287bc52f9c0fe6e3c18c272e6593507371b
2023-05-04 07:38:46 +00:00
Wilson Sung
e7a70d62b5 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 280706211
Bug: 280706292
Test: scanBugreport
Bug: 280706211
Bug: 280706610
Bug: 280705998
Test: scanAvcDeniedLogRightAfterReboot
Bug: 280706211
Change-Id: I67e0d2ec15b3ea057688644ba5c41c8fb5755128
2023-05-04 12:40:51 +08:00
Treehugger Robot
fdb7364a3f Merge "Allow accessing dumpstate from hal_usb_impl" into udc-d1-dev am: b3c7fb06fa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982957

Change-Id: Ia74b455412d430da3ea5a3509d087d9c82aea521
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 16:12:47 +00:00