Commit graph

517 commits

Author SHA1 Message Date
Wilson Sung
31e85f7c60 Merge "Enforce network_stack" into main 2023-12-13 11:13:15 +00:00
Aaron Tsai
cd447908ec Add permission for setting gril property
08-23 16:41:13.524     1     1 I auditd  : type=1107 audit(0.0:404): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc:  denied  { set } for property=vendor.gril.recovery.count pid=1024 uid=1001 gid=1001 scontext=u:r:hal_radioext_default:s0 tcontext=u:object_r:vendor_default_prop:s0 tclass=property_service permissive=1'

Bug: 203824024
Test: manual test
Change-Id: I0bc67815fde6651e54ea422e5fd3622846bb3c56
2023-12-11 09:50:51 +00:00
Wilson Sung
3155bae89e Merge "Update error on ROM 11189630" into main 2023-12-11 04:46:58 +00:00
Wilson Sung
7ebbc9cc66 Enforce network_stack
Fix: 307468731
Test: make selinux_policy
Change-Id: I4ddea23199ea7c595d1ba22c8a33aca899275930
2023-12-11 04:46:38 +00:00
Wilson Sung
42505b5257 Enforce kernel
Fix: 307468756
Test: boot and no related avc error
Change-Id: I284531a465cbeb264a04613aa0534cdb7f16dae2
2023-12-11 04:06:26 +00:00
Treehugger Robot
b179da365f Merge "Remove hal_uwb_default tracking denial" into main 2023-12-11 02:56:23 +00:00
Wilson Sung
f2df883237 Update error on ROM 11189630
Bug: 315105050
Test: SELinuxUncheckedDenialBootTest
Change-Id: I41998d0c1a7dc153372692a6a0d0559299ae90d3
2023-12-11 02:37:49 +00:00
Hasan Awais
5fcda36d97 Remove hal_uwb_default tracking denial
Bug: 307468767
Test: avc denials not found with UWB HAL
Change-Id: I2fb9f261d7ae21834acbaaf80dbab8a5ab41aa75
Signed-off-by: Hasan Awais <hasanawais@google.com>
2023-12-08 09:15:11 -08:00
Treehugger Robot
13f760e70b Merge "allow RILD to access modem status property" into main 2023-12-08 09:48:29 +00:00
Treehugger Robot
c4e14e8ffa Merge "Add insmod-sh policy" into main 2023-12-08 01:09:35 +00:00
Donnie Pollitz
32d3293bfa Remove tee tracking denial
Bug: 312894027
Bug: 314052376
Test: avc denials not found on boot: see b/312894027
Change-Id: I20c42056948f805e3eb7c6087cf7fde863f78d4e
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-12-07 13:07:17 +00:00
Treehugger Robot
3b47e80f3a Merge "Suppress avc error log on debugfs's usb folder." into main 2023-12-07 06:46:35 +00:00
Wilson Sung
bf85d96523 Add insmod-sh policy
Fix: 307468923
Fix: 312372936
Test: make selinux_policy
Change-Id: Icd42c4a74b44b7e593dc7c0598f3d23c3f251a2c
2023-12-07 04:52:04 +00:00
Treehugger Robot
9c9376de63 Merge "Remove dump_wlan" into main 2023-12-06 23:09:15 +00:00
David Drysdale
ff861c8ab7 Merge "Add Secretkeeper HAL" into main 2023-12-06 10:21:03 +00:00
Wilson Sung
624effa7bb Remove dump_wlan
Bug: 312143882
Test: make selinux_policy
Change-Id: I9e3cabf93c0d28a7d82ab367eff6c7daecf83131
2023-12-06 09:15:36 +00:00
Wilson Sung
10eea971da Merge "Move charger_vendor from legacy to vendor" into main 2023-12-06 08:13:34 +00:00
Wilson Sung
8fc7e53bcb Merge "Move fsck rule to vendor" into main 2023-12-06 08:13:20 +00:00
Treehugger Robot
7ba631321f Merge "Move dumpstate to vendor" into main 2023-12-06 06:22:10 +00:00
Chien Kun Niu
7bb1437142 Suppress avc error log on debugfs's usb folder.
The XHCI driver in kernel will write debugging information to DebugFS on
some USB host operations (for example: plugging in a USB headphone). We
are not using those information right now.

Bug: 311088739
Test: No error when plugging a USB headphone in.
Change-Id: I3e13d117ca6eb9c31c3eb67be87fcea684817911
Signed-off-by: Chien Kun Niu <rickyniu@google.com>
2023-12-06 14:22:03 +08:00
Treehugger Robot
12f85dd7fd Merge "Move e2fs to vendor" into main 2023-12-06 06:20:49 +00:00
Treehugger Robot
2bc57f5c7e Merge "Move chre from legacy to vendor" into main 2023-12-06 06:19:31 +00:00
Treehugger Robot
0af7cc2cc4 Merge "Move con_monitor_app from legacy to vendor" into main 2023-12-06 06:19:30 +00:00
Treehugger Robot
1bd9d75f29 Merge "Allow audioserver access /dev/snd/pcmC0D0p" into main 2023-12-06 06:10:51 +00:00
Treehugger Robot
8d6c7dea5d Merge "Move bootanim to vendor" into main 2023-12-06 06:10:51 +00:00
Wilson Sung
79ac8029f8 Merge "Remove uwb app" into main 2023-12-06 02:32:11 +00:00
Wilson Sung
f61be88627 Merge "Move uwb service to vendor" into main 2023-12-06 02:31:23 +00:00
virkumar
379c836acd Allow pixelntnservice accessing SubscriptionManager
Bug: 312575569
Test: manually check if there is any AVC denied.
Change-Id: Ic366fbc2f3a58c343fa8d28f82894d798ee2b0c7
2023-12-05 12:10:36 +00:00
Rios Kao
94549b69f4 Merge "audio: move related sepolicy of audio to gs-common" into main 2023-12-05 11:31:46 +00:00
Wilson Sung
5ab436f824 Move fsck rule to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I3d27f928e0c02020d0028a0449f18467ce2a4391
2023-12-05 11:29:51 +00:00
Wilson Sung
8b0e8aa04c Move e2fs to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: Iba2258335ffb2866624d65966e7eed9235cd889d
2023-12-05 11:25:17 +00:00
Wilson Sung
007718bd55 Move dumpstate to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I9f1a46b5c4c472a1f4ab01a91b17741bfc152ca9
2023-12-05 11:14:52 +00:00
Wilson Sung
210b1492bf Move dump_gsa to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I090d7e1bb0b69aa2d06b19c7d71998498a490e7f
2023-12-05 11:10:51 +00:00
Wilson Sung
0090cdb912 Move con_monitor_app from legacy to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I37a4d1e496d8c2a89506e712a01a66124f672c56
2023-12-05 10:52:49 +00:00
Wilson Sung
ffebd92814 Move chre from legacy to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I8a83e5fb4ec042a278ca381e2db9e3ce9f6344aa
2023-12-05 10:47:09 +00:00
David Drysdale
089c00aecc Add Secretkeeper HAL
Test: VtsAidlAuthGraphSessionTest
Bug: 306364873
Change-Id: Ib09cea7b41efec8b79739eeccc798e96b2b1efbd
2023-12-05 10:40:32 +00:00
Wilson Sung
e225fb657b Move charger_vendor from legacy to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I8a93d4306fdf62bd21a864977e6c69445314211d
2023-12-05 08:49:40 +00:00
Wilson Sung
106d62a9cb Allow audioserver access /dev/snd/pcmC0D0p
Bug: 264484544
Bug: 312143882
Test: make selinux_policy
Change-Id: Ib0ba9d425cc3ad77e377acbb6d00c641615768fb
2023-12-05 08:06:50 +00:00
Wilson Sung
94fa60cc47 Move bootanim to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I194dedde82f7980520b0d5f01a2820f612365e1c
2023-12-05 07:23:46 +00:00
Wilson Sung
c7973bf59a Move uwb service to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I6266383542ab6a6db6cdcd6891e79aae6f6beb41
2023-12-05 03:16:18 +00:00
Wilson Sung
b8f2e8f69f Remove uwb app
Bug: 312143882
Change-Id: I3807a60097cae74fb40c726620ef602ebe60e23d
2023-12-05 03:08:10 +00:00
Treehugger Robot
df5d3cf62d Merge "zumapro: move sepolicy related to bootctrl hal to gs-common" into main 2023-12-05 02:30:58 +00:00
Jason Chiu
4d6d0adb8f zumapro: move sepolicy related to bootctrl hal to gs-common
Bug: 265063384
Change-Id: I0eaa0b798f46a32404c8d7d797b5aeceb12326a0
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-12-05 01:35:46 +08:00
timtmlin
b861f8ec0f allow RILD to access modem status property
Bug: 314133117
Test: set telephony.ril.modem_bin_status and restart modem
Change-Id: Ibe3a9d6f2a5c6bcd596797131e6bbe90a4f2341a
2023-12-04 19:02:37 +08:00
Rios Kao
aeb8adcbc0 audio: move related sepolicy of audio to gs-common
Test: build pass
Bug: 301180586
Change-Id: I1fa6f6348da4a5fd24df328ff1f40fa80f43403a
2023-12-04 10:16:49 +00:00
Wilson Sung
eacc300b82 Update error on ROM 11172478
Bug: 314719343
Bug: 314719241
Test: SELinuxUncheckedDenialBootTest
Change-Id: If691fb512b2749ff3e49ca5c766c1e7dc30970a9
2023-12-04 08:47:47 +00:00
Daniel Norman
546c53d1e1 [automerger skipped] Removes duplicate hidraw_device type definition. am: 2bb05fbdf6 -s ours
am skip reason: Merged-In I1a53405c7b6f12d6318a7808fa2cb61e02696cba with SHA-1 f6ee9c4b50 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/25530653

Change-Id: I2d92eb8d726acdc6f414593e6e97ed173398fabb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 23:27:20 +00:00
Daniel Norman
2bb05fbdf6 Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Test: ls -z /dev/hidraw0
Change-Id: I1a53405c7b6f12d6318a7808fa2cb61e02696cba
Merged-In: I1a53405c7b6f12d6318a7808fa2cb61e02696cba
(cherry picked from commit f6ee9c4b50)
2023-12-01 19:24:33 +00:00
Wilson Sung
4b30393e1a Move hal_input_processor_default to vendor
Bug: 312143882
Bug: 273163412
Test: make selinux_policy
Change-Id: Ie130e123a79c8d3cab71dbabbfb82c287b93b425
2023-12-01 03:19:30 +00:00
Treehugger Robot
2329a86a88 Merge "Add missing legacy genfs_contexts to tracking_denials" into main 2023-11-30 23:24:52 +00:00