Commit graph

24 commits

Author SHA1 Message Date
Nina Chen
2a4cb7b0a3 Update SELinux error
Test: scanBugreport
Bug: 368188020
Test: scanAvcDeniedLogRightAfterReboot
Bug: 368187536
Flag: EXEMPT NDK
Change-Id: I0cb8cf650332bf2d518871f87c2175a4f3a20678
2024-09-19 04:07:52 +00:00
Nina Chen
2c4cebf4d5 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 366116096
Change-Id: I202f9031b89dbfbbce9d7fda6f8f50120df1698f
2024-09-12 14:24:29 +08:00
Wilson Sung
b5d284c3b5 Update SELinux error
Test: scanBugreport
Bug: 361726331
Flag: EXEMPT bugFix
Change-Id: Ib42816834dbb8258d5528a1c885a9a0945fe82d1
2024-08-23 09:49:29 +00:00
Wilson Sung
36d0a8ffc8 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 360060705
Test: scanBugreport
Bug: 360060680
Test: scanAvcDeniedLogRightAfterReboot
Bug: 360060705
Flag: EXEMPT bugFix
Change-Id: Ia71aabae1c8bb6ad8b6d9cbeb925821c2612e116
2024-08-15 09:25:37 +00:00
Manali Bhutiyani
156e14bb70 Merge "DisplayPort Stats: add sysfs access permission on Zumapro devices" into main 2024-07-26 03:45:52 +00:00
Carlos Rodriguez
dd5b70f378 DisplayPort Stats: add sysfs access permission on Zumapro devices
07-25 14:13:16.736  5784  5784 W pixelstats-vend: type=1400 audit(0.0:21): avc:  denied  { read } for  name="fec_dsc_supported" dev="sysfs" ino=82516 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-25 14:13:16.736  5784  5784 W pixelstats-vend: type=1400 audit(0.0:22): avc:  denied  { read } for  name="fec_dsc_not_supported" dev="sysfs" ino=82517 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-25 14:13:16.736  5784  5784 W pixelstats-vend: type=1400 audit(0.0:23): avc:  denied  { read } for  name="max_res_other" dev="sysfs" ino=82515 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-25 14:13:16.736  5784  5784 W pixelstats-vend: type=1400 audit(0.0:24): avc:  denied  { read } for  name="max_res_1366_768" dev="sysfs" ino=82505 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 343602691
Bug: 317486088

Flag: EXEMPT bugfix
Test: Android built and flashed and error is gone
Change-Id: I594536581ea468d40c9153bdc1bdd6b1ab7282fd
2024-07-25 21:14:55 +00:00
Spade Lee
8d61b53a50 sepolicy: removes dump_power tracking denial
avc:  denied  { read } for  name="maxfg_history" dev="tmpfs" ino=1144 scontext=u:r:dump_power:s0 tcontext=u:object_r:battery_history_device:s0 tclass=chr_file permissive=0

Bug: 353418158
Test: atest-dev com.google.android.selinux.pts.SELinuxTest#scanBugreport => PASS
Flag: EXEMPT bugfix
Change-Id: Ie71eb273915eca6b38281a5f7a8a2b8a6bdcf4c8
Signed-off-by: Spade Lee <spadelee@google.com>
2024-07-18 10:19:43 +00:00
Wilson Sung
19c65ba48e Merge "Update SELinux error" into main 2024-07-17 04:31:22 +00:00
Wilson Sung
c7854c06ea Update SELinux error
Test: scanBugreport
Bug: 353418158
Test: scanAvcDeniedLogRightAfterReboot
Bug: 353418189
Flag: EXEMPT bugfix
Change-Id: I5ce38640b68ca64749b07fd04d79e444d82ce206
2024-07-16 06:14:01 +00:00
Mike McTernan
55bd5b089d sepolicy:tracking_denials: add btlinux vendor_aoc_prop
Flag: EXEMPT bug fix
Bug: 353262026
Test: ABTD
Change-Id: I28a9e49eab75087aa424af1fd2cc5ead28285a2b
2024-07-15 19:18:29 +00:00
Cheng Gu
6d465a9099 Update tracking_denials/bug_map.
Removes denial tracking of b/322916328.

Fix: 322916328
Test: none
Flag: EXEMPT bugfix
Change-Id: Ib16f0897f3a438fe147a0919897163407b857443
2024-07-15 05:39:33 +00:00
Wilson Sung
8b0c2f2379 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 350830429
Bug: 350830390
Test: scanBugreport
Bug: 350830756
Bug: 350830411
Bug: 350830657
Bug: 350830132
Bug: 350830796
Test: scanAvcDeniedLogRightAfterReboot
Bug: 350830879
Bug: 350830475
Bug: 350830680
Bug: 350830758
Change-Id: Id961fa8d79caea0bca4770beab722a4e1933f879
2024-07-03 01:56:07 +00:00
Wilson Sung
924e6c6cd3 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 340369535
Bug: 338347525 
Change-Id: I0d70966f03b0207388388fbc47e45de55a7385c3
2024-05-14 03:09:03 +00:00
derickhong
f77068cbe0 Update SELinux error
Bug: 326869289
Test: adb shell dmesg | grep avc ; adb logcat -d | grep avc
Change-Id: I57090ee64cafc5c2a9d98ec02152fdc9eb495591
2024-02-27 16:22:54 +08:00
Jack Wu
85aa1cb4b1 dontaudit on dir search for vendor_charger_debugfs
Bug: 326869335
Test: make selinux_policy
Change-Id: I22623dd1c47a431233eb6666dbe37fa2d9aa73a3
Signed-off-by: Jack Wu <wjack@google.com>
2024-02-26 21:10:51 +08:00
Wilson Sung
348e64ecce Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 326869289
Bug: 326869335
Test: scanBugreport
Bug: 326869823
Test: scanAvcDeniedLogRightAfterReboot
Bug: 326869239
Change-Id: I8b245d769ae91c2f3f3d2dd7cfb1b8eebb83dd22
2024-02-26 08:37:54 +00:00
Hasan Awais
3a49506b92 Remove hal_uwb_default selinux bug map entry
The selinux filesystem is no longer being read, so this property is no
longer needed.

Bug: 322916246
Change-Id: I48a08c7068904b25e30c59e2fe3a2dd74a274ba8
Signed-off-by: Hasan Awais <hasanawais@google.com>
2024-02-20 09:40:09 -08:00
Wilson Sung
39a0baed3c Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 318310869
Test: scanBugreport
Bug: 322917055
Bug: 322916328
Bug: 322916246
Bug: 322917075
Test: scanAvcDeniedLogRightAfterReboot
Bug: 318310869
Change-Id: I63c0cc342af0407fab6b188e982a3ea6699f3618
2024-01-30 07:17:49 +00:00
Wilson Sung
574b29f866 Remove legacy bug_map
Bug: 312143882
Change-Id: Ic1102158edabae74aaca7c6d32b3ff3afe0c8710
2023-11-20 12:36:34 +00:00
Wilson Sung
c56335f89d Update error on ROM 11060498
Bug: 309551158
Bug: 309551159
Bug: 309550514
Bug: 309550905
Bug: 309551062
Test: SELinuxUncheckedDenialBootTest
Change-Id: Ic8d05cea6a18c240f9fcf801ceaeabe3f51ae03c
2023-11-07 05:41:43 +00:00
Tai Kuo
a3abd5ad39 Allow regmap debugfs for drivers probed by insmod
auditd  : type=1400 audit(0.0:731): avc:  denied  { search } for
comm="modprobe" name="regmap" dev="debugfs" ino=2057
scontext=u:r:insmod-sh:s0 tcontext=u:object_r:vendor_regmap_debugfs:s0
tclass=dir permissive=1 bug=b/274727542

vendor_kernel_boot and vendor_dlkm modules probe by insmod need this.
Move regmap debugfs from legacy/whitechapel_pro/ to vendor/.

Bug: 274727542
Bug: 289012421
Bug: 285343932
Test: ls -d /sys/kernel/debug/regmap/*-0043
Change-Id: I1db7a5a3413467b4e14954d994b071b206fe0300
2023-09-12 16:42:21 +08:00
Robin Peng
30ab759177 Sync with device/google/zuma-sepolicy a89fbcc4aa1ae
fix build breakage:
device/google/zumapro-sepolicy/legacy/whitechapel_pro/file.te:4:ERROR 'Duplicate declaration of type' at token ';' on line 104436:
type tcpdump_vendor_data_file, file_type, data_file_type;
type updated_wifi_firmware_data_file, file_type, data_file_type;

Bug: 272725898
Change-Id: Ic17d18409c28760d172a4ee7a5beb6c90016a381
2023-05-01 10:04:38 +00:00
Robin Peng
d9e2e6aae9 Sync with device/google/zuma-sepolicy cfa00dfc881e3
Bug: 272725898
Change-Id: I9125ed760c0b4c688cf37720f5d4a744f2484be7
2023-04-11 10:30:07 +00:00
Robin Peng
bff99af2da init zumapro from zuma sha 43d5907677d0f
Bug: 272725898
Change-Id: If35d9efdda9dd3b8d8b24008f0738a0cbbe5bd9b
2023-03-31 14:16:57 +00:00