chenkris
a7c90de740
fingerprint: fix SELinux denials
...
Fix following AVC denials:
1. Could not enable service: File /vendor/bin/hw/android.hardware.biometrics.fingerprint-service.goodix(labeled "u:object_r:vendor_file:s0") has incorrect label or no domain transition from u:r:init:s0 to another SELinux domain defined
2. Could not start service 'vendor.fps_hal' as part of class 'late_start': File /vendor/bin/hw/android.hardware.biometrics.fingerprint@2.1-service.goodix(labeled "u:object_r:vendor_file:s0") has incorrect label or no domain transition from u:r:init:s0 to another SELinux domain defined.
3. avc: denied { ioctl } for path="/dev/goodix_fp" dev="tmpfs" ino=1499 ioctlcmd=0x6701 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1
Bug: 315737323
Test: boot with no relevant error
Change-Id: Ideeac108b8470232a258254437086451550fcc8d
2023-12-15 07:58:49 +00:00
Wilson Sung
8f63998c24
Merge "Move dump_gsa to vendor" into main
2023-12-14 03:57:13 +00:00
Treehugger Robot
c4e14e8ffa
Merge "Add insmod-sh policy" into main
2023-12-08 01:09:35 +00:00
Treehugger Robot
3b47e80f3a
Merge "Suppress avc error log on debugfs's usb folder." into main
2023-12-07 06:46:35 +00:00
Wilson Sung
bf85d96523
Add insmod-sh policy
...
Fix: 307468923
Fix: 312372936
Test: make selinux_policy
Change-Id: Icd42c4a74b44b7e593dc7c0598f3d23c3f251a2c
2023-12-07 04:52:04 +00:00
Treehugger Robot
9c9376de63
Merge "Remove dump_wlan" into main
2023-12-06 23:09:15 +00:00
David Drysdale
ff861c8ab7
Merge "Add Secretkeeper HAL" into main
2023-12-06 10:21:03 +00:00
Wilson Sung
624effa7bb
Remove dump_wlan
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I9e3cabf93c0d28a7d82ab367eff6c7daecf83131
2023-12-06 09:15:36 +00:00
Wilson Sung
10eea971da
Merge "Move charger_vendor from legacy to vendor" into main
2023-12-06 08:13:34 +00:00
Wilson Sung
8fc7e53bcb
Merge "Move fsck rule to vendor" into main
2023-12-06 08:13:20 +00:00
Treehugger Robot
7ba631321f
Merge "Move dumpstate to vendor" into main
2023-12-06 06:22:10 +00:00
Chien Kun Niu
7bb1437142
Suppress avc error log on debugfs's usb folder.
...
The XHCI driver in kernel will write debugging information to DebugFS on
some USB host operations (for example: plugging in a USB headphone). We
are not using those information right now.
Bug: 311088739
Test: No error when plugging a USB headphone in.
Change-Id: I3e13d117ca6eb9c31c3eb67be87fcea684817911
Signed-off-by: Chien Kun Niu <rickyniu@google.com>
2023-12-06 14:22:03 +08:00
Treehugger Robot
12f85dd7fd
Merge "Move e2fs to vendor" into main
2023-12-06 06:20:49 +00:00
Treehugger Robot
2bc57f5c7e
Merge "Move chre from legacy to vendor" into main
2023-12-06 06:19:31 +00:00
Treehugger Robot
0af7cc2cc4
Merge "Move con_monitor_app from legacy to vendor" into main
2023-12-06 06:19:30 +00:00
Treehugger Robot
1bd9d75f29
Merge "Allow audioserver access /dev/snd/pcmC0D0p" into main
2023-12-06 06:10:51 +00:00
Treehugger Robot
8d6c7dea5d
Merge "Move bootanim to vendor" into main
2023-12-06 06:10:51 +00:00
Wilson Sung
5ab436f824
Move fsck rule to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I3d27f928e0c02020d0028a0449f18467ce2a4391
2023-12-05 11:29:51 +00:00
Wilson Sung
8b0e8aa04c
Move e2fs to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: Iba2258335ffb2866624d65966e7eed9235cd889d
2023-12-05 11:25:17 +00:00
Wilson Sung
007718bd55
Move dumpstate to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I9f1a46b5c4c472a1f4ab01a91b17741bfc152ca9
2023-12-05 11:14:52 +00:00
Wilson Sung
210b1492bf
Move dump_gsa to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I090d7e1bb0b69aa2d06b19c7d71998498a490e7f
2023-12-05 11:10:51 +00:00
Wilson Sung
0090cdb912
Move con_monitor_app from legacy to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I37a4d1e496d8c2a89506e712a01a66124f672c56
2023-12-05 10:52:49 +00:00
Wilson Sung
ffebd92814
Move chre from legacy to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I8a83e5fb4ec042a278ca381e2db9e3ce9f6344aa
2023-12-05 10:47:09 +00:00
David Drysdale
089c00aecc
Add Secretkeeper HAL
...
Test: VtsAidlAuthGraphSessionTest
Bug: 306364873
Change-Id: Ib09cea7b41efec8b79739eeccc798e96b2b1efbd
2023-12-05 10:40:32 +00:00
Wilson Sung
e225fb657b
Move charger_vendor from legacy to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I8a93d4306fdf62bd21a864977e6c69445314211d
2023-12-05 08:49:40 +00:00
Wilson Sung
106d62a9cb
Allow audioserver access /dev/snd/pcmC0D0p
...
Bug: 264484544
Bug: 312143882
Test: make selinux_policy
Change-Id: Ib0ba9d425cc3ad77e377acbb6d00c641615768fb
2023-12-05 08:06:50 +00:00
Wilson Sung
94fa60cc47
Move bootanim to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I194dedde82f7980520b0d5f01a2820f612365e1c
2023-12-05 07:23:46 +00:00
Wilson Sung
c7973bf59a
Move uwb service to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I6266383542ab6a6db6cdcd6891e79aae6f6beb41
2023-12-05 03:16:18 +00:00
Jason Chiu
4d6d0adb8f
zumapro: move sepolicy related to bootctrl hal to gs-common
...
Bug: 265063384
Change-Id: I0eaa0b798f46a32404c8d7d797b5aeceb12326a0
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-12-05 01:35:46 +08:00
Wilson Sung
4b30393e1a
Move hal_input_processor_default to vendor
...
Bug: 312143882
Bug: 273163412
Test: make selinux_policy
Change-Id: Ie130e123a79c8d3cab71dbabbfb82c287b93b425
2023-12-01 03:19:30 +00:00
Treehugger Robot
d1e65d3c84
Merge "Move service_contexts to vendor and tracking_denials" into main
2023-11-30 23:24:12 +00:00
Treehugger Robot
6825c00c06
Merge "Move legacy property.te to vendor and tracking_denials" into main
2023-11-30 23:22:54 +00:00
Treehugger Robot
2e4848d6a8
Merge "Move Exynos.HWCService to vendor/" into main
2023-11-30 23:22:54 +00:00
Treehugger Robot
f86a7057ef
Merge "Move legacy property_contexts to vendor and tracking_denials" into main
2023-11-30 23:22:12 +00:00
Luis Delgado de Mendoza
2c24437cb1
Add necessary entries in genfs for the new BT channel.
...
Bug: 308452948
Test: Validated locally on husky.
Change-Id: I9d6f31e856cf4290ff4fd880f115234eb3ed019c
2023-11-30 09:41:29 -08:00
Wilson Sung
4e44355a8d
Move service_contexts to vendor and tracking_denials
...
Bug: 312143882
Bug: 314080507
Test: make selinux_policy
Change-Id: Ia8474dc880c912b9a3db4401551a3eeed280bb47
2023-11-30 09:57:15 +00:00
Wilson Sung
994ec8c478
Move Exynos.HWCService to vendor/
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I2b33d160ee7cbd169e044308a9fc4c5eda19e6b3
2023-11-30 09:39:12 +00:00
Wilson Sung
1f829bd3f9
Move legacy property.te to vendor and tracking_denials
...
Bug: 312143882
Bug: 314065301
Test: make selinux_policy
Change-Id: I1e414cb04b71bf9aa47f8b60a78aad220bdf21b6
2023-11-30 09:11:00 +00:00
Wilson Sung
c467c70f33
Move legacy property_contexts to vendor and tracking_denials
...
Bug: 312143882
Bug: 314065298
Test: make selinux_policy
Change-Id: Ica7bbd24df3959af917896dbdc43d352e33add43
2023-11-30 08:48:52 +00:00
Treehugger Robot
dde9116594
Merge "Move legacy genfs_contexts to vendor" into main
2023-11-30 07:33:04 +00:00
Wilson Sung
e531406f68
Move legacy file.te to vendor and tracking_denials
...
Bug: 312143882
Bug: 314035704
Test: make selinux_policy
Change-Id: Ibf5ac4c3e06bb2f5aab44e59073156181ab0b5a1
2023-11-30 05:07:58 +00:00
Wilson Sung
4ab2964a03
Move legacy genfs_contexts to vendor
...
Bug: 312143882
Bug: 314036370
Test: make selinux_policy
Change-Id: I5846fb7b26eee3ddc7c7ac67f6b60f4357ec3608
2023-11-30 05:05:48 +00:00
Guibing Cai
ab0537780c
Merge "zumapro: sepolicy: update ospm selinux settings." into main
2023-11-29 18:10:38 +00:00
Treehugger Robot
a47912cabc
Merge "trusty: Fix selinux denials for block devices" into main
2023-11-29 02:37:08 +00:00
Alec Foster
4d742a4ced
Merge "Revert^2 "Add IQfpExtendedFingerprint to service_contexts."" into main
2023-11-28 18:14:33 +00:00
Donnie Pollitz
662dc87e32
trusty: Fix selinux denials for block devices
...
Bug: 312894027
Test: Confirmed avc denial is gone on boot
Change-Id: Iaa87cdef24214a2b6f6eba2af917c03bbbb4bfb5
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-11-28 09:20:41 +01:00
guibing
6c797e281a
zumapro: sepolicy: update ospm selinux settings.
...
Use the similar setting from zuma: ag/23270943 and ag/22980665
Bug: 300516041
Test: Power hal works without related avc errors.
Change-Id: I45fb13299f153f0f472e21f54af393147c7fbd7c
2023-11-28 00:36:38 +00:00
Alec Foster
c659e9d5c7
Revert^2 "Add IQfpExtendedFingerprint to service_contexts."
...
8eb45bceb6
Bug: 313504369
Change-Id: I978eb6434d959412548d6bd6d59985374e29674f
2023-11-27 22:29:06 +00:00
Kamal Shafi
83f48c2556
sepolicy: move lwis dev sepolicy to device folder
...
- Remove lwis dev device specific sepolicy from zumapro
Bug: 312869113
Test: build
Change-Id: I12e8e703fb3a58a5be4f4b6dd0ade188cf4d8c0e
2023-11-27 10:09:13 +00:00
Treehugger Robot
659d928c41
Merge "sepolicy: add front camera taotie eeprom sepolicy" into main
2023-11-23 07:59:57 +00:00