Angela Wu
0b7ef4e53b
Set up zumapro selinux policy for /dev/video12 access for hardware JPG encoder.
...
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:ea768217f5f8f2ab32a3f76b4329378c5731aa24 )
Bug: b/296330134
Test: https://android-build.corp.google.com/builds/abtd/run/L22000030001255046
Change-Id: I03d99401f5444e5a42e570a039c4838f1141bec9
2024-01-15 02:27:34 +00:00
Treehugger Robot
aaaf45379c
Merge "Remove system_suspend dontaudit" into main
2024-01-11 01:40:29 +00:00
Wilson Sung
84b93cfb16
Remove system_suspend dontaudit
...
Fix: 318032188
Test: make sepolicy
Change-Id: I216fb901e5cc2ffdb3906da2d88e830e29d0e476
2024-01-10 19:08:42 +08:00
Wilson Sung
b376cb8cd1
Update error on ROM 11294806
...
Bug: 319399862
Test: SELinuxUncheckedDenialBootTest
Change-Id: I99331843251adb8f994170714e6f2c7cc28f2b2b
2024-01-10 10:49:19 +00:00
Ken Yang
3bbde83710
selinux: label wakeup for BMS I2C 0x36, 0x69
...
Bug: 319035561
Change-Id: Id82f3fd351190102c87ff2a8c16d56a581a6e45d
Signed-off-by: Ken Yang <yangken@google.com>
2024-01-10 07:30:15 +00:00
Treehugger Robot
e15179f322
Merge "Label and sort wakeup nodes" into main
2024-01-10 06:45:17 +00:00
Mahesh Kallelil
e51f8b7f0e
Merge "Allow dump_modem to read logbuffer and wakeup events" into main
2024-01-09 03:03:24 +00:00
Treehugger Robot
928bbf4682
Merge "thermal: remove tracking denials for hal_thermal" into main
2024-01-08 23:01:34 +00:00
Ramya Subramanian
55d942e762
thermal: remove tracking denials for hal_thermal
...
Bug: 307468692
Test: Tested thermal service with the file removed
Change-Id: Ic3f698f2be89c9ee86aa91fdcb139cfd95751c29
Signed-off-by: Ramya Subramanian <rsubr@google.com>
2024-01-08 18:14:18 +00:00
Guibing Cai
f94cf085fe
Merge "zumapro: sepolicy: remove power hal denial tracker." into main
2024-01-08 18:10:45 +00:00
Wilson Sung
337ca68313
Label and sort wakeup nodes
...
Bug: 318032188
Test: make sepolicy
Change-Id: I8dfa35034657ff98957373818e98b5bf836e7a4b
2024-01-08 17:33:12 +08:00
Wilson Sung
95ab7f7ea9
Allow sysUI access nfc_service
...
Bug: 307468867
Test: make sepolicy
Change-Id: Iee2c35b92024c56ff6120d1b7c751b2021e5ae6e
2024-01-08 02:43:12 +00:00
Mahesh Kallelil
6285ad387d
Allow dump_modem to read logbuffer and wakeup events
...
Updating sepolicy for dump_modem to read /dev/logbuffer_cpif. This is
required as part of bugreport.
Test: Tested bugreport on device
Bug: 318949647
Change-Id: Ica70258200432633681b8d222a56c21aac427d86
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2024-01-06 09:59:26 -08:00
Achigo Liu
e226fde393
Merge "Fixes adb user unauthorized on user builds" into main
2024-01-06 00:40:20 +00:00
Achigo Liu
90798eb40e
Fixes adb user unauthorized on user builds
...
Allow systemui to find adbd
Bug: 318808947
Change-Id: Ifb88a64b851a64338191dd4f40b6b60a9bee5039
Signed-off-by: Achigo Liu <achigoliu@google.com>
2024-01-06 00:39:18 +00:00
guibing
e417775b17
zumapro: sepolicy: remove power hal denial tracker.
...
Remove the power hal denial tracker.
Add the missing devfreq related configuration.
Bug: 307468758
Test: Power hal works without related avc errors.
Change-Id: I038bc7701deeada4d70ef2ed17d5db64ba5b4d03
2024-01-05 21:58:20 +00:00
Aaron Tsai
a51aa5a582
Merge "Fix avc denied for hal_radioext_default" into main
2024-01-05 02:58:01 +00:00
Aaron Tsai
7c0879939a
Fix avc denied for hal_radioext_default
...
01-02 03:20:32.967 421 421 I auditd : avc: denied { find } for pid=900 uid=1001 name=vendor.google.bluetooth_ext.IBTChannelAvoidance/default scontext=u:r:hal_radioext_default:s0 tcontext=u:object_r:hal_bluetooth_coexistence_service:s0 tclass=service_manager permissive=0
Bug: 318308344
Test: manual test
Change-Id: Ied0dd27d86cfc4512c08a26d02499ba9b816ed78
2024-01-03 09:47:09 +00:00
Hung-Yeh Lee
5a8206a8e4
sepolicy: add persist.vendor.primarydisplay. to vendor_display_prop
...
Copy sepolicy from zuma to fix the following avc denied:
auditd : type=1107 audit(0.0:11): uid=0 auid=4294967295
ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for
property=persist.vendor.primarydisplay.op.peak_refresh_rate pid=510
uid=1000 gid=1003 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:vendor_default_prop:s0
tclass=property_service permissive=0'
Bug: 286063708
Bug: 286063029
Bug: 317754250
Test: Run VtsHalGraphicsComposer3_TargetTest
Change-Id: Ib5e83927ebebf05a640d127d9d11e94df101f224
2024-01-03 11:58:04 +08:00
Wilson Sung
cc395b9c2b
Update error on ROM 11262681
...
Bug: 318308344
Test: SELinuxUncheckedDenialBootTest
Change-Id: Iafeb3ff1bc6ddeb93810bff26aff82399bcda679
2024-01-02 03:23:04 +00:00
Treehugger Robot
f64c0520fe
Merge "Allow systemui to write protolog file" into main
2023-12-29 11:32:37 +00:00
Treehugger Robot
fe24ab7d3f
Merge "Update error on ROM 11260603" into main
2023-12-29 09:58:35 +00:00
Wilson Sung
2b26409d08
Update error on ROM 11260603
...
Bug: 318033504
Test: SELinuxUncheckedDenialBootTest
Change-Id: I86190052aaaebc94f1eb7e670e1a7da312d537a3
2023-12-29 05:04:50 +00:00
Wilson Sung
720ab6329b
Update error on ROM 11259228
...
Bug: 318032188
Test: SELinuxUncheckedDenialBootTest
Change-Id: I6d3f31d49cc64ee911367de6e61d5e4e1b7e280b
2023-12-29 04:33:07 +00:00
Wilson Sung
bdb5c3c383
Merge changes I1c22cd8a,I11427ca4 into main
...
* changes:
Enforce system_suspend
Enforce fastbootd
2023-12-27 13:38:16 +00:00
Wilson Sung
df88fd4e1c
Add dc-main wakeup node
...
Bug: 308381292
Test: boot-to-home
Change-Id: I0165b4afab3b62bf4fec4ce6864cc1e8c6fc841a
2023-12-27 16:42:52 +08:00
Wilson Sung
594b74b447
Enforce system_suspend
...
Bug: 308381292
Test: boot-to-home
Change-Id: I1c22cd8af868183afbfe567a31af6069b81eebe0
2023-12-27 14:16:49 +08:00
Wilson Sung
415278abac
Enforce fastbootd
...
Fix: 307468887
Test: boot-to-home and flash rom
Change-Id: I11427ca4d17a83c278463cc68e4935148a0d57b6
2023-12-27 13:52:31 +08:00
Wilson Sung
4cad299072
Allow systemui to write protolog file
...
This is enabled on debuggable builds only, includes
- Grant mlstrustedsubject typeattribute to wm_trace_data_file
- Grant systemui the write access to
wm_trace_data_file
Bug: 251513116
Bug: 288049075
Test: make sepolicy
Change-Id: I47c9bbf13835b2e7eaac3e2b436e3b486ce02431
2023-12-27 10:59:28 +08:00
Wilson Sung
8345799166
Add kernel vendor_fw_file dir read permission
...
Fix: 288049349
Change-Id: I76751deb04e5b6a4362917c76764cddc74d0f76d
2023-12-27 10:41:21 +08:00
Wilson Sung
2b70f82f1d
Move kernel from legacy to vendor
...
Bug: 312143882
Test: make sepolicy
Change-Id: I01b192c7d60cda8e52f6a3fffd5e0dec7a660172
2023-12-27 10:40:47 +08:00
Treehugger Robot
7f7d16f2e7
Merge "Enforce servicemanager" into main
2023-12-26 23:19:40 +00:00
Treehugger Robot
4998611c70
Merge "Enforce sysUI" into main
2023-12-26 23:19:04 +00:00
Treehugger Robot
594a751d77
Merge "label Extcon files" into main
2023-12-26 23:17:40 +00:00
Wilson Sung
744d309e44
Add wakeup node
...
Fix: 308381292
Test: make sepolicy
Change-Id: I32a45a3b862ffbe9f53f88ca97bdad52e5678931
2023-12-26 17:38:34 +00:00
Wilson Sung
050406d4bc
Enforce servicemanager
...
Fix: 307468945
Test: make sepolicy
Change-Id: I2bad0fcac1d7a6388fb9790bcc9fcbe4cdb31a4a
2023-12-26 21:32:08 +08:00
Wilson Sung
2dad12b041
Enforce sysUI
...
Fix: 307468867
Test: boot-to-home
Change-Id: Ie6d28c523e905bc850ab8ce0fe22fd51b762bb80
2023-12-26 12:48:10 +00:00
Wilson Sung
d6744d5856
label Extcon files
...
Fix: 317753346
Test: Boot with target files labeled correctly
Change-Id: I9941ec615c21a16f2235b6abfd8b3e62a0d913b2
2023-12-26 18:26:15 +08:00
Wilson Sung
d4ef02f267
Update error on ROM 11254151
...
Bug: 317754250
Bug: 317753346
Bug: 317754251
Test: SELinuxUncheckedDenialBootTest
Change-Id: I4b139e37942093efe413c78bcf4ccc777c50d371
2023-12-26 09:07:40 +00:00
Wilson Sung
1fe9320c5c
Update error on ROM 11253256
...
Bug: 317735109
Test: SELinuxUncheckedDenialBootTest
Change-Id: I86d5ab2ac42b2014eeffe704ed695112ca6fdce8
2023-12-26 03:42:52 +00:00
Randall Huang
83346b954b
storage: remove pixelstats_vendor tracking_denials
...
Bug: 307468925
Test: pixel/022
Change-Id: I7a1b29e0087cc500db9f7e824b3bda5c68d93d8f
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-12-26 10:53:43 +08:00
Chi Zhang
001dd4139e
Merge "Allow GRIL to get power stats." into main
2023-12-22 19:29:06 +00:00
Virkumar Karavate
727f2b5468
Merge "Allow pixelntnservice accessing SubscriptionManager" into main
2023-12-22 03:21:52 +00:00
Wilson Sung
3c5bb2ab43
Allow systemui_app access statsmanager_service
...
Bug: 283841311
Bug: 308381668
Fix: 308381668
Test: make sepolicy
Change-Id: I71888ee14637ab10d983709a4c74d8186d77d4bd
2023-12-21 11:25:37 +00:00
Wilson Sung
fb17bd5b94
Update error on ROM 11240525
...
Bug: 317315498
Bug: 317316031
Test: SELinuxUncheckedDenialBootTest
Change-Id: I9739736d2f5399e9a4d88f8923f095fa223610ff
2023-12-21 07:30:09 +00:00
Lei Ju
df72029b33
[zumapro] Remove duplicated file context settings for chre HAL
...
Bug: 248615564
Test: compilation
Change-Id: If21138ee1f85e1832ff3bf9a6d8dc16206f3b0ed
2023-12-20 16:46:33 -08:00
Treehugger Robot
e7795ba5ad
Merge "hal_usb_impl: allow fwk_stats_service" into main
2023-12-20 06:05:25 +00:00
Chien Kun Niu
14ca9862d2
hal_usb_impl: allow fwk_stats_service
...
12-18 11:12:58.401 443 443 I auditd : avc: denied { find } for
pid=865 uid=1000 name=android.frameworks.stats.IStats/default
scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:fwk_stats_service:s0
tclass=service_manager permissive=0
Bug: 316989074
Change-Id: I74867901f513926379cd2ba35140a5ccb582467f
Signed-off-by: Chien Kun Niu <rickyniu@google.com>
2023-12-20 11:22:42 +08:00
Zheng Pan
65e8b1c4df
Merge "Revert "Move kernel from legacy to vendor"" into main
2023-12-20 02:44:25 +00:00
Zheng Pan
58f2081f97
Revert "Move kernel from legacy to vendor"
...
This reverts commit cbfa33fd92
.
Reason for revert: b/317131577
Change-Id: Iafd9dc574c59f627b049ad7a955173d562d1444e
2023-12-20 02:32:04 +00:00