Commit graph

332 commits

Author SHA1 Message Date
chenkris
a7c90de740 fingerprint: fix SELinux denials
Fix following AVC denials:
1. Could not enable service: File /vendor/bin/hw/android.hardware.biometrics.fingerprint-service.goodix(labeled "u:object_r:vendor_file:s0") has incorrect label or no domain transition from u:r:init:s0 to another SELinux domain defined
2. Could not start service 'vendor.fps_hal' as part of class 'late_start': File /vendor/bin/hw/android.hardware.biometrics.fingerprint@2.1-service.goodix(labeled "u:object_r:vendor_file:s0") has incorrect label or no domain transition from u:r:init:s0 to another SELinux domain defined.
3. avc:  denied  { ioctl } for  path="/dev/goodix_fp" dev="tmpfs" ino=1499 ioctlcmd=0x6701 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1

Bug: 315737323
Test: boot with no relevant error
Change-Id: Ideeac108b8470232a258254437086451550fcc8d
2023-12-15 07:58:49 +00:00
Wilson Sung
8f63998c24 Merge "Move dump_gsa to vendor" into main 2023-12-14 03:57:13 +00:00
Treehugger Robot
c4e14e8ffa Merge "Add insmod-sh policy" into main 2023-12-08 01:09:35 +00:00
Treehugger Robot
3b47e80f3a Merge "Suppress avc error log on debugfs's usb folder." into main 2023-12-07 06:46:35 +00:00
Wilson Sung
bf85d96523 Add insmod-sh policy
Fix: 307468923
Fix: 312372936
Test: make selinux_policy
Change-Id: Icd42c4a74b44b7e593dc7c0598f3d23c3f251a2c
2023-12-07 04:52:04 +00:00
Treehugger Robot
9c9376de63 Merge "Remove dump_wlan" into main 2023-12-06 23:09:15 +00:00
David Drysdale
ff861c8ab7 Merge "Add Secretkeeper HAL" into main 2023-12-06 10:21:03 +00:00
Wilson Sung
624effa7bb Remove dump_wlan
Bug: 312143882
Test: make selinux_policy
Change-Id: I9e3cabf93c0d28a7d82ab367eff6c7daecf83131
2023-12-06 09:15:36 +00:00
Wilson Sung
10eea971da Merge "Move charger_vendor from legacy to vendor" into main 2023-12-06 08:13:34 +00:00
Wilson Sung
8fc7e53bcb Merge "Move fsck rule to vendor" into main 2023-12-06 08:13:20 +00:00
Treehugger Robot
7ba631321f Merge "Move dumpstate to vendor" into main 2023-12-06 06:22:10 +00:00
Chien Kun Niu
7bb1437142 Suppress avc error log on debugfs's usb folder.
The XHCI driver in kernel will write debugging information to DebugFS on
some USB host operations (for example: plugging in a USB headphone). We
are not using those information right now.

Bug: 311088739
Test: No error when plugging a USB headphone in.
Change-Id: I3e13d117ca6eb9c31c3eb67be87fcea684817911
Signed-off-by: Chien Kun Niu <rickyniu@google.com>
2023-12-06 14:22:03 +08:00
Treehugger Robot
12f85dd7fd Merge "Move e2fs to vendor" into main 2023-12-06 06:20:49 +00:00
Treehugger Robot
2bc57f5c7e Merge "Move chre from legacy to vendor" into main 2023-12-06 06:19:31 +00:00
Treehugger Robot
0af7cc2cc4 Merge "Move con_monitor_app from legacy to vendor" into main 2023-12-06 06:19:30 +00:00
Treehugger Robot
1bd9d75f29 Merge "Allow audioserver access /dev/snd/pcmC0D0p" into main 2023-12-06 06:10:51 +00:00
Treehugger Robot
8d6c7dea5d Merge "Move bootanim to vendor" into main 2023-12-06 06:10:51 +00:00
Wilson Sung
5ab436f824 Move fsck rule to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I3d27f928e0c02020d0028a0449f18467ce2a4391
2023-12-05 11:29:51 +00:00
Wilson Sung
8b0e8aa04c Move e2fs to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: Iba2258335ffb2866624d65966e7eed9235cd889d
2023-12-05 11:25:17 +00:00
Wilson Sung
007718bd55 Move dumpstate to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I9f1a46b5c4c472a1f4ab01a91b17741bfc152ca9
2023-12-05 11:14:52 +00:00
Wilson Sung
210b1492bf Move dump_gsa to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I090d7e1bb0b69aa2d06b19c7d71998498a490e7f
2023-12-05 11:10:51 +00:00
Wilson Sung
0090cdb912 Move con_monitor_app from legacy to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I37a4d1e496d8c2a89506e712a01a66124f672c56
2023-12-05 10:52:49 +00:00
Wilson Sung
ffebd92814 Move chre from legacy to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I8a83e5fb4ec042a278ca381e2db9e3ce9f6344aa
2023-12-05 10:47:09 +00:00
David Drysdale
089c00aecc Add Secretkeeper HAL
Test: VtsAidlAuthGraphSessionTest
Bug: 306364873
Change-Id: Ib09cea7b41efec8b79739eeccc798e96b2b1efbd
2023-12-05 10:40:32 +00:00
Wilson Sung
e225fb657b Move charger_vendor from legacy to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I8a93d4306fdf62bd21a864977e6c69445314211d
2023-12-05 08:49:40 +00:00
Wilson Sung
106d62a9cb Allow audioserver access /dev/snd/pcmC0D0p
Bug: 264484544
Bug: 312143882
Test: make selinux_policy
Change-Id: Ib0ba9d425cc3ad77e377acbb6d00c641615768fb
2023-12-05 08:06:50 +00:00
Wilson Sung
94fa60cc47 Move bootanim to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I194dedde82f7980520b0d5f01a2820f612365e1c
2023-12-05 07:23:46 +00:00
Wilson Sung
c7973bf59a Move uwb service to vendor
Bug: 312143882
Test: make selinux_policy
Change-Id: I6266383542ab6a6db6cdcd6891e79aae6f6beb41
2023-12-05 03:16:18 +00:00
Jason Chiu
4d6d0adb8f zumapro: move sepolicy related to bootctrl hal to gs-common
Bug: 265063384
Change-Id: I0eaa0b798f46a32404c8d7d797b5aeceb12326a0
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-12-05 01:35:46 +08:00
Wilson Sung
4b30393e1a Move hal_input_processor_default to vendor
Bug: 312143882
Bug: 273163412
Test: make selinux_policy
Change-Id: Ie130e123a79c8d3cab71dbabbfb82c287b93b425
2023-12-01 03:19:30 +00:00
Treehugger Robot
d1e65d3c84 Merge "Move service_contexts to vendor and tracking_denials" into main 2023-11-30 23:24:12 +00:00
Treehugger Robot
6825c00c06 Merge "Move legacy property.te to vendor and tracking_denials" into main 2023-11-30 23:22:54 +00:00
Treehugger Robot
2e4848d6a8 Merge "Move Exynos.HWCService to vendor/" into main 2023-11-30 23:22:54 +00:00
Treehugger Robot
f86a7057ef Merge "Move legacy property_contexts to vendor and tracking_denials" into main 2023-11-30 23:22:12 +00:00
Luis Delgado de Mendoza
2c24437cb1 Add necessary entries in genfs for the new BT channel.
Bug: 308452948
Test: Validated locally on husky.
Change-Id: I9d6f31e856cf4290ff4fd880f115234eb3ed019c
2023-11-30 09:41:29 -08:00
Wilson Sung
4e44355a8d Move service_contexts to vendor and tracking_denials
Bug: 312143882
Bug: 314080507
Test: make selinux_policy
Change-Id: Ia8474dc880c912b9a3db4401551a3eeed280bb47
2023-11-30 09:57:15 +00:00
Wilson Sung
994ec8c478 Move Exynos.HWCService to vendor/
Bug: 312143882
Test: make selinux_policy
Change-Id: I2b33d160ee7cbd169e044308a9fc4c5eda19e6b3
2023-11-30 09:39:12 +00:00
Wilson Sung
1f829bd3f9 Move legacy property.te to vendor and tracking_denials
Bug: 312143882
Bug: 314065301
Test: make selinux_policy
Change-Id: I1e414cb04b71bf9aa47f8b60a78aad220bdf21b6
2023-11-30 09:11:00 +00:00
Wilson Sung
c467c70f33 Move legacy property_contexts to vendor and tracking_denials
Bug: 312143882
Bug: 314065298
Test: make selinux_policy
Change-Id: Ica7bbd24df3959af917896dbdc43d352e33add43
2023-11-30 08:48:52 +00:00
Treehugger Robot
dde9116594 Merge "Move legacy genfs_contexts to vendor" into main 2023-11-30 07:33:04 +00:00
Wilson Sung
e531406f68 Move legacy file.te to vendor and tracking_denials
Bug: 312143882
Bug: 314035704
Test: make selinux_policy
Change-Id: Ibf5ac4c3e06bb2f5aab44e59073156181ab0b5a1
2023-11-30 05:07:58 +00:00
Wilson Sung
4ab2964a03 Move legacy genfs_contexts to vendor
Bug: 312143882
Bug: 314036370
Test: make selinux_policy
Change-Id: I5846fb7b26eee3ddc7c7ac67f6b60f4357ec3608
2023-11-30 05:05:48 +00:00
Guibing Cai
ab0537780c Merge "zumapro: sepolicy: update ospm selinux settings." into main 2023-11-29 18:10:38 +00:00
Treehugger Robot
a47912cabc Merge "trusty: Fix selinux denials for block devices" into main 2023-11-29 02:37:08 +00:00
Alec Foster
4d742a4ced Merge "Revert^2 "Add IQfpExtendedFingerprint to service_contexts."" into main 2023-11-28 18:14:33 +00:00
Donnie Pollitz
662dc87e32 trusty: Fix selinux denials for block devices
Bug: 312894027
Test: Confirmed avc denial is gone on boot
Change-Id: Iaa87cdef24214a2b6f6eba2af917c03bbbb4bfb5
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-11-28 09:20:41 +01:00
guibing
6c797e281a zumapro: sepolicy: update ospm selinux settings.
Use the similar setting from zuma: ag/23270943 and ag/22980665

Bug: 300516041
Test: Power hal works without related avc errors.
Change-Id: I45fb13299f153f0f472e21f54af393147c7fbd7c
2023-11-28 00:36:38 +00:00
Alec Foster
c659e9d5c7 Revert^2 "Add IQfpExtendedFingerprint to service_contexts."
8eb45bceb6
Bug: 313504369

Change-Id: I978eb6434d959412548d6bd6d59985374e29674f
2023-11-27 22:29:06 +00:00
Kamal Shafi
83f48c2556 sepolicy: move lwis dev sepolicy to device folder
- Remove lwis dev device specific sepolicy from zumapro

Bug: 312869113
Test: build
Change-Id: I12e8e703fb3a58a5be4f4b6dd0ade188cf4d8c0e
2023-11-27 10:09:13 +00:00
Treehugger Robot
659d928c41 Merge "sepolicy: add front camera taotie eeprom sepolicy" into main 2023-11-23 07:59:57 +00:00