Commit graph

18 commits

Author SHA1 Message Date
Michael Bestas
4e0d74a2e7
zumapro: sepolicy: Remove duplicate service labels
These are defined in gs-common

Change-Id: Ib90caea46da6cc9e191efe8f04b783bba9e2691a
2025-06-26 08:09:37 +03:00
Michael Bestas
7d599ab465
zumapro: sepolicy: Label missing display node
Change-Id: Ibadee03e8965db70b32103cdb80dc2c099d70a8a
2025-06-26 08:09:32 +03:00
Michael Bestas
6a3fc91fa1
zumapro: sepolicy: Update tracking denials bug map from BP2A
Change-Id: Ibdfb2fa34bc43399f944ef73f6687d8e5051a2ef
2025-06-26 08:09:26 +03:00
Michael Bestas
17152067e6 aml_tz6_351400020 (13155446,com.google.android.go.tzdata6,com.google.android.tzdata6)
-----BEGIN PGP SIGNATURE-----
 
 iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ9i73wAKCRDorT+BmrEO
 eDQqAJwOfnHwIxPnJDkuy1MpIWivJQV1GgCfe/G3XeQ0POPhttv8TZHn/Ff0sqo=
 =2IgK
 -----END PGP SIGNATURE-----
gpgsig -----BEGIN SSH SIGNATURE-----
 U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgPpdpjxPACTIhnlvYz0GM4BR7FJ
 +rYv3jMbfxNKD3JvcAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
 AAAAQLpPxk4tGVse7ZnGf5txBVHXgfM/xdZT4gf36LUHNjGKTNBXIMsKbcHedH2YOAVGLp
 55mHQgTaS2qFR2ZsKcpgo=
 -----END SSH SIGNATURE-----

Merge tag 'aml_tz6_351400020' into staging/lineage-23.0_merge-aml_tz6_351400020

aml_tz6_351400020 (13155446,com.google.android.go.tzdata6,com.google.android.tzdata6)

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ9i73wAKCRDorT+BmrEO
# eDQqAJwOfnHwIxPnJDkuy1MpIWivJQV1GgCfe/G3XeQ0POPhttv8TZHn/Ff0sqo=
# =2IgK
# -----END PGP SIGNATURE-----
# gpg: Signature made Tue Mar 18 02:18:39 2025 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [ultimate]

# By Nina Chen (5) and others
# Via Android Build Coastguard Worker (9) and others
* tag 'aml_tz6_351400020':
  Update SELinux error
  Add IFingerprintDebug service context and Overlay permissions
  Revert "Add IFingerprintDebug service context and Overlay permissions."
  Add IFingerprintDebug service context and Overlay permissions.
  Consolidate SELinux for faceauth_rawimage
  RamdumpService: Fix the SELinux errors from introducing Firebase Analytics.
  Update SELinux error
  zumapro: update selinux to allow UMI on user build
  Remove sced sepolicy rule
  display: mark dual display related nodes as sysfs_display
  Update SELinux error
  Update SELinux error.
  Update SELinux error
  gps: Remove GNSS SELinux error bug from bug_map
  remove b/378004800  and b/318310869  from bugmap
  Revert "Remove hal_camera_default aconfig_storage_metadata_file ..."
  display/hwc: Add write access to persist display file.
  Remove hal_camera_default aconfig_storage_metadata_file from bug map
  Update SELinux error
  Add udc sysfs to udc_sysfs fs context

Change-Id: I8d6fe8bb8bbeda4b8f5f8be48a01199d2648f90d
2025-06-23 05:15:03 +03:00
Michael Bestas
4c6d5b4151
fixup! zumapro: Update sepolicy path
Change-Id: I64313f361b1bbac43c619d41cfa985a671186f0c
2025-03-12 21:28:55 +02:00
Michael Bestas
033f3a090a Android 15.0.0 Release 21 (BP1A.250305.020)
-----BEGIN PGP SIGNATURE-----
 
 iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ8fKCAAKCRDorT+BmrEO
 eKE3AJ4uFXxFPLY5WKfjV42Swr4BBy8a1ACcD53kvqqVMTUClsM4lrgXGQ82YKc=
 =5fRU
 -----END PGP SIGNATURE-----
gpgsig -----BEGIN SSH SIGNATURE-----
 U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgPpdpjxPACTIhnlvYz0GM4BR7FJ
 +rYv3jMbfxNKD3JvcAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
 AAAAQD3Qc4A3bmG6C5UeJ72OX6KEYC9rOCtnIlT5iRxwxs/8+aoXRxpQTf78JyVn+Xsz2J
 TUbFUORg+gRtEXsx4ApwE=
 -----END SSH SIGNATURE-----

Merge tag 'android-15.0.0_r21' into staging/lineage-22.2_merge-android-15.0.0_r21

Android 15.0.0 Release 21 (BP1A.250305.020)

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ8fKCAAKCRDorT+BmrEO
# eKE3AJ4uFXxFPLY5WKfjV42Swr4BBy8a1ACcD53kvqqVMTUClsM4lrgXGQ82YKc=
# =5fRU
# -----END PGP SIGNATURE-----
# gpg: Signature made Wed Mar  5 05:50:32 2025 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [ultimate]

# By Nina Chen (11) and others
# Via Android Build Coastguard Worker (32) and others
* tag 'android-15.0.0_r21': (41 commits)
  Update SELinux error
  modem_svc: move shared_modem_platform related sepolicy to gs-common
  Allow tachyon service to make binder calls to GCA
  Update SELinux error
  allow hal_bluetooth_btlinux write sysfs file
  port display sysfs access
  Add hal_shared_modem_platform to modem_diagnostic_app.te
  add permission for hl7132 sysfs
  Update SELinux error
  Update the PMS app seinfo for the certification change.
  Update SELinux error
  Revert "modem_svc: move shared_modem_platform related sepolicy t..."
  modem_svc: move shared_modem_platform related sepolicy to gs-common
  Support access to radioext service over AIDL
  Update SELinux error
  Update SELinux error
  correct frame_interval_ns and expected_present_time_ns naming
  shamp: remove fixed bug from bugmap
  sepolicy: add label for logbuffer
  Update SELinux error
  ...

 Conflicts:
	sepolicy/vendor/keys.conf
	sepolicy/zumapro-sepolicy.mk

Change-Id: I904f4d429cf34da67777654f6c373a66b105d128
2025-03-09 11:01:22 +02:00
Michael Bestas
987c1bf308 Android 15.0.0 Release 6 (AP4A.241205.013)
-----BEGIN PGP SIGNATURE-----
 
 iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ1IssQAKCRDorT+BmrEO
 eKA7AJwJzAEjJsFAnNBunzzVHwfc6k7TkwCfc/FFP5sw/Z4oEgjDPAjjxMk00lw=
 =P00m
 -----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQJLBAABCgA1FiEEHrBYPudH862glXQBzJUERRm+ZmkFAmdY7dcXHG1rYmVzdGFz
 QGxpbmVhZ2Vvcy5vcmcACgkQzJUERRm+ZmnQIg//RsMCsX8EXfSwirFmHcLqUgRl
 zr4r71c+SJderH03ME18EOtbsagw8MwPpV/U03cfE1AvKwv2UF0QhbkHyLn33YGm
 4LAgG5WTaETGYrZf9hBxAA8SAokhYIsHyfSJ+wwJtGOf02QPlIamPZKS8mLsedCF
 oXFmuwqnIdzGAi8AvNWCZDejrgkUXyK8DVQ06C3+DDljvcuxWve0c2kBNA4xvoeE
 j2XKqK+DBX+IholRFaKAgtkN1wgreqaGPqK/j6KlAnIpTeeRLsTl/CRjE9Ir3idJ
 9M2u11I0XSnJ4pP8JiY7JF2x+Wf5khIjB6sZgy754QnRbT71PZWRpypZIG69/rh5
 2EWNBHBzQrodSIZoF7M5YnbrAiqVUFxeu5Z7eNaEMQborHKTve3GcG/GRt25AIxZ
 WLnyNZFbziGtkV5R4tM3N9NQZ6Uz3tmDgVzBhGZK2c7loKSUfEp5G+LwtyvqQvmC
 FuFKB1T7FTdDnr4cdJlAQ8gQOFq/P3ax1UnFNQrBSlgRG3T8Q83nphQYGMChyXc9
 sp19jDw+B0JzGhfLQ53AJ60Al4wnUp+6eyVtiYgyM5zYnpLZsbVO1WqcjmwPJSo9
 wxNlsUu1Qy85o0y74kAC307sjgyK6b+bRaib8nehfwsDn2OZcC356rOe6NGoPhOZ
 tQ338qQThGg6Ludofns=
 =lZku
 -----END PGP SIGNATURE-----

Merge tag 'android-15.0.0_r6' into staging/lineage-22.0_merge-android-15.0.0_r6

Android 15.0.0 Release 6 (AP4A.241205.013)

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ1IssQAKCRDorT+BmrEO
# eKA7AJwJzAEjJsFAnNBunzzVHwfc6k7TkwCfc/FFP5sw/Z4oEgjDPAjjxMk00lw=
# =P00m
# -----END PGP SIGNATURE-----
# gpg: Signature made Fri Dec  6 00:44:01 2024 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [marginal]
# gpg: initial-contribution@android.com: Verified 2483 signatures in the past
#      3 years.  Encrypted 4 messages in the past 2 years.
# gpg: WARNING: This key is not certified with sufficiently trusted signatures!
# gpg:          It is not certain that the signature belongs to the owner.
# Primary key fingerprint: 4340 D135 70EF 945E 8381  0964 E8AD 3F81 9AB1 0E78

# By Wilson Sung (5) and others
# Via Android Build Coastguard Worker (38) and others
* tag 'android-15.0.0_r6': (52 commits)
  Make android.framework.stats-v2-ndk app reachable
  Allow fingerprint to access /dev/fth_fd
  Update SELinux error
  Change vendor_fingerprint_prop to vendor_restricted_prop
  Update SELinux error
  Move euiccpixel_app to vendor
  Allow systemui_app to set 'debug.tracing.desktop_mode_visible_tasks' system property
  storage: move storage related device type to common folder
  Move sepolicy about hal_radioext_default to gs-common
  Allow fingerprint to access sysfs_lhbm
  Update SELinux error
  Update sepolicy for nfc antenna selftest values
  Revert^2 "modem_svc: update sepolicy for UMI"
  Revert "modem_svc: update sepolicy for UMI"
  Update SELinux error
  modem_svc: update sepolicy for UMI
  fix bipchmgr sepolicy
  Label sysfs node power_mode as sysfs_display.
  Label frame_interval and expected_present_time as sysfs_display
  Grant the MDS assess the OemRil service AIDL interface.
  ...

 Conflicts:
	sepolicy/radio/radio.te
	sepolicy/tracking_denials/keys.conf
	sepolicy/vendor/genfs_contexts

Change-Id: I5bc554da77b3317f17a838508e87c7fe84f14191
2024-12-11 03:41:42 +02:00
Michael Bestas
677ebcba05
Initial aam policy
Change-Id: I81cf99339193df3ed5341fb34e338363cd63fa24
2024-10-27 22:51:29 +02:00
Michael Bestas
11a70b26d5
zumapro: sepolicy: Don't label SystemUI as systemui_app
While this might be useful on Pixel stock ROM, this serves no purpose
anywhere else. In fact, it makes it more fragile, as we'd need to track
platform SystemUI related SELinux changes ourselves.

Change-Id: I205df902649fd712a89f21f51099e088c5bdef2e
2024-10-27 22:51:29 +02:00
Michael Bestas
5531242f8f
Label android.hardware.qorvo.uwb-service
Change-Id: Ia938529497a5b274354366e6d8c8579184be491c
2024-10-27 22:51:29 +02:00
Michael Bestas
c58f276186
Label vendor.dolby.media.c2@1.0-service
Change-Id: I89fb4c149aed94cf2f7c3d34f7fde5877175b1e2
2024-10-27 22:51:29 +02:00
Michael Bestas
b005aff89b
Include missing vendor sepolicy
Change-Id: Id35fb4b22e2ee8dfafdfb8ae601ab823435d2b94
2024-10-27 22:51:29 +02:00
Chirayu Desai
b5fcbc71e1
Allow radio access to IOemSlsiRadioExternal
Change-Id: Ib5d57b199b3e8288cd3de0c12898f0c1d679be4a
2024-10-27 22:51:29 +02:00
Danny Lin
dcd8b2581e
Update seapp certificates to match stock presigned apps
Certificates extracted from stock vendor_mac_permissions.xml using
adevtool: https://github.com/kdrag0n/adevtool

Change-Id: Iaf59f1548905d16fe7ad231c039ba43941c15710
2024-10-27 22:51:29 +02:00
Michael Bestas
fbc4a55c4e
Include missing ConnectivityThermalPowerManager sepolicy
Change-Id: I1e0f05159a6797251ed85360966aa45246005bbd
2024-10-27 22:51:28 +02:00
Michael Bestas
ae76cd8c12
zumapro: Update sepolicy path
Change-Id: Ie2d420cd25e1a8b65977504ed987df57b525dc5f
2024-10-27 13:30:22 +02:00
Michael Bestas
c19447832e
Add .gitupstream
Change-Id: I79747ef989659c069386a6ed34a59bba2e8ea860
2024-10-27 13:28:03 +02:00
Michael Bestas
eabe516eef
Add 'sepolicy/' from tag 'android-15.0.0_r2'
git-subtree-dir: sepolicy
git-subtree-mainline: 68bba197f4
git-subtree-split: 36623ceb5d
Change-Id: I8abfa4d1b1cb245da2c562eed56c4f8c78ae0ede
2024-10-27 13:25:24 +02:00