Commit graph

11 commits

Author SHA1 Message Date
Wilson Sung
ad0fc36b80 Fix error in systemui when toggling airplane mode
avc:  denied  { read } for  name="u:object_r:radio_cdma_ecm_prop:s0" dev="tmpfs" ino=321 scontext=u:r:systemui_app:s0:c3,c257,c512,c768 tcontext=u:object_r:radio_cdma_ecm_prop:s0 tclass=file

Bug: 197722115
Bug: 359381748
Test: make selinux_policy
Flag: EXEMPT bugfix
Change-Id: I56021bacf311c7ce7e7e2f2b44b2078cedc16f1c
2024-09-25 08:39:17 +00:00
Ben Murdoch
88ed5f562f Allow systemui_app to set 'debug.tracing.desktop_mode_visible_tasks' system property
See also: Iad8dc7a66765856ee7affb707f2dba6c1bbfbf49

Bug: 363893429
Flag: EXEMPT, SEPolicy
Test: Verified on device.
Change-Id: I6c68f97a7d42e635cadd2380cce7c64e812c1ffd
2024-09-04 09:39:13 +00:00
Liana Kazanova
3240bd79ed Revert "Delete sepolicy for legacy VR services."
This reverts commit 44db75e814.

Reason for revert: Droidmonitor created revert due to b/352465601. Will be verifying through ABTD before submission

Change-Id: I47918f16fbc5745758abf906017c68ef95a708f4
2024-07-11 20:56:16 +00:00
Krzysztof Kosiński
44db75e814 Delete sepolicy for legacy VR services.
None of the zumapro devices include these services.

Bug: 234559097
Test: presubmit
Flag: EXEMPT dead code removal
Change-Id: Iad24884869a1abd5daed60ef032b3f6c016aaf2d
2024-07-10 22:20:52 +00:00
Mark Chang
b434a0ecf2 Allow systemui_app to set property.
This is to fix the denied log.
01-23 15:58:26.896     1     1 W /system/bin/init: type=1107 audit(0.0:17): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc:  denied  { set } for property=debug.touch_sensitivity_mode pid=2123 uid=10237 gid=10237 scontext=u:r:systemui_app:s0:c237,c256,c512,c768 tcontext=u:object_r:debug_prop:s0 tclass=property_service permissive=0'

Bug: 309912697
Test: Setting property was successful.
Change-Id: Id841d2d45de8d8d57366faf71f5ee60da74ce111
Signed-off-by: Mark Chang <changmark@google.com>
2024-01-24 02:09:07 +00:00
Wilson Sung
95ab7f7ea9 Allow sysUI access nfc_service
Bug: 307468867
Test: make sepolicy
Change-Id: Iee2c35b92024c56ff6120d1b7c751b2021e5ae6e
2024-01-08 02:43:12 +00:00
Achigo Liu
e226fde393 Merge "Fixes adb user unauthorized on user builds" into main 2024-01-06 00:40:20 +00:00
Achigo Liu
90798eb40e Fixes adb user unauthorized on user builds
Allow systemui to find adbd

Bug: 318808947
Change-Id: Ifb88a64b851a64338191dd4f40b6b60a9bee5039
Signed-off-by: Achigo Liu <achigoliu@google.com>
2024-01-06 00:39:18 +00:00
Wilson Sung
4cad299072 Allow systemui to write protolog file
This is enabled on debuggable builds only, includes
- Grant mlstrustedsubject typeattribute to wm_trace_data_file
- Grant systemui the write access to
  wm_trace_data_file

Bug: 251513116
Bug: 288049075
Test: make sepolicy
Change-Id: I47c9bbf13835b2e7eaac3e2b436e3b486ce02431
2023-12-27 10:59:28 +08:00
Wilson Sung
3c5bb2ab43 Allow systemui_app access statsmanager_service
Bug: 283841311
Bug: 308381668
Fix: 308381668
Test: make sepolicy
Change-Id: I71888ee14637ab10d983709a4c74d8186d77d4bd
2023-12-21 11:25:37 +00:00
Inseob Kim
63200470b8 Move coredomain seapp contexts to system_ext
Coredomain apps shouldn't be labeled with vendor sepolicy, due to Treble
violation.

Bug: 280547417
Test: TH
Change-Id: Ifcaa41df790cb2b720775563cc4cd5cdf10e5c50
2023-08-10 17:00:56 +09:00