Wilson Sung
be32c237af
Move legacy file_contexts to tracking_denials
...
Bug: 312143882
Bug: 314036372
Test: make selinux_policy
Change-Id: If8f325e6e0c9ffa1bfb463686d1df6ed82abd804
2023-11-30 05:05:28 +00:00
Treehugger Robot
a47912cabc
Merge "trusty: Fix selinux denials for block devices" into main
2023-11-29 02:37:08 +00:00
Donnie Pollitz
662dc87e32
trusty: Fix selinux denials for block devices
...
Bug: 312894027
Test: Confirmed avc denial is gone on boot
Change-Id: Iaa87cdef24214a2b6f6eba2af917c03bbbb4bfb5
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-11-28 09:20:41 +01:00
Kamal Shafi
83f48c2556
sepolicy: move lwis dev sepolicy to device folder
...
- Remove lwis dev device specific sepolicy from zumapro
Bug: 312869113
Test: build
Change-Id: I12e8e703fb3a58a5be4f4b6dd0ade188cf4d8c0e
2023-11-27 10:09:13 +00:00
Wilson Sung
2dc63cb5cd
Update error on ROM 11137748
...
Bug: 312894027
Test: SELinuxUncheckedDenialBootTest
Change-Id: I410a8f4717ef0cdb6298b5a26d48dd919cdd4c14
2023-11-23 10:49:03 +00:00
Treehugger Robot
60b251ed89
Merge "Move legacy app config to tracking_denials" into main
2023-11-22 23:26:29 +00:00
Wilson Sung
2a66f04eee
Move legacy zuma/file_contexts to vendor
...
Bug: 312143882
Change-Id: I992762f507a49edfcb4f25bf26594bbb03f191a1
2023-11-22 11:34:18 +00:00
Wilson Sung
03d78938bf
Move legacy app config to tracking_denials
...
Bug: 312143882
Test: make selinux_policy
Change-Id: Id9203ada3b6364f517a0251eed139ad793fbb94f
2023-11-22 11:17:45 +00:00
Wilson Sung
74e5d6a064
Update error on ROM 11126833
...
Bug: 312372803
Bug: 312373134
Bug: 312372857
Bug: 312372936
Test: SELinuxUncheckedDenialBootTest
Change-Id: I162a984f233f245410fc04c2b94cf73a3e22a428
2023-11-21 07:16:32 +00:00
Wilson Sung
574b29f866
Remove legacy bug_map
...
Bug: 312143882
Change-Id: Ic1102158edabae74aaca7c6d32b3ff3afe0c8710
2023-11-20 12:36:34 +00:00
Wilson Sung
db4d015590
Update error on ROM 11120060
...
Bug: 312069580
Test: SELinuxUncheckedDenialBootTest
Change-Id: I94d03d02552f8ac8cad106f72917573b6027df73
2023-11-20 03:20:56 +00:00
YiKai Peng
453f8f58ff
sepolicy: remove tracking_denials/hal_wireless_charger.te
...
Bug: 307468561
Test: Build/Flash
Change-Id: I36c20bc37329d33fa79dfe35434b773afc4b2324
Signed-off-by: YiKai Peng <kenpeng@google.com>
2023-11-15 08:35:27 +00:00
Treehugger Robot
fac134469c
Merge "Remove unused CS40L26 I2C paths" into main
2023-11-08 11:08:32 +00:00
Wilson Sung
c67fe4c115
Update error on ROM 11063387
...
Bug: 309732305
Test: SELinuxUncheckedDenialBootTest
Change-Id: Ie6ba6830346630f851bc2db7b5965686e865edb5
2023-11-08 16:06:29 +08:00
Jenny Ho
59b9e9ce4e
sepolicy: remove tracking_denials/hal_health_default.te
...
local check there is no hal_health_default related sepolicy
error log, remove related .te file.
Bug: 307468788
Change-Id: I8c12a2fb76241f9c9f096dddbf3a81f5f041359b
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2023-11-07 16:14:10 +00:00
Weizhung Ding
1b4f6b7035
Merge "sync legacy sysfs_display permission" into main
2023-11-07 08:32:12 +00:00
Wilson Sung
c56335f89d
Update error on ROM 11060498
...
Bug: 309551158
Bug: 309551159
Bug: 309550514
Bug: 309550905
Bug: 309551062
Test: SELinuxUncheckedDenialBootTest
Change-Id: Ic8d05cea6a18c240f9fcf801ceaeabe3f51ae03c
2023-11-07 05:41:43 +00:00
Weizhung Ding
873751ee60
sync legacy sysfs_display permission
...
Test: build
Bug: 308381451
Change-Id: I470500ec44b08bcb2c106d27100bef0a9e301742
2023-11-06 14:03:25 +00:00
Tai Kuo
956c643267
Remove unused CS40L26 I2C paths
...
Bug: 285343932
Bug: 307468462
Test: No AVC denials.
Change-Id: Id25e88e536500b9c205acf87900b597d611a9b63
2023-11-06 17:56:58 +08:00
Wilson Sung
94b82378b6
Update error on ROM 11021299
...
Bug: 308380763
Bug: 308381394
Bug: 308381432
Bug: 308381409
Bug: 308381338
Bug: 308381747
Bug: 308381292
Bug: 308381668
Bug: 308381451
Bug: 308381687
Bug: 308381222
Bug: 308381263
Bug: 308381279
Bug: 308381611
Bug: 308381748
Test: SELinuxUncheckedDenialBootTest
Change-Id: If24f3fcb5a1830ef834119d05e49f23193ae132e
2023-11-06 08:16:57 +00:00
Sergiu Ferentz
0bbc562d41
Revert "Update error on ROM 11021299"
...
This reverts commit 2ee5bdcc34
.
Reason for revert: Build breakage at: b/308395718
Change-Id: I43b2eafbdb398ce4b47ee1e5ebd86e5317916e58
2023-10-30 11:07:10 +00:00
Wilson Sung
2ee5bdcc34
Update error on ROM 11021299
...
Bug: 308380763
Bug: 308381394
Bug: 308381432
Bug: 308381409
Bug: 308381338
Bug: 308381747
Bug: 308381292
Bug: 308381668
Bug: 308381451
Bug: 308381687
Bug: 308381222
Bug: 308381263
Bug: 308381279
Bug: 308381611
Bug: 308381748
Test: SELinuxUncheckedDenialBootTest
Change-Id: I54b3464f7e445c8a696a4e8dfd0613fd2e2ab7b1
2023-10-30 16:12:14 +08:00
Wilson Sung
b8b1185356
Update permissive domain
...
Bug 307468752
Bug: 307468788
Bug: 307468729
Bug: 307468767
Bug: 307468462
Bug: 307468561
Bug: 307468923
Bug: 307468731
Bug: 307468925
Bug: 307468690
Bug: 307468733
Bug: 307468692
Bug: 307468756
Bug: 307468758
Bug: 307468945
Bug: 307468771
Bug: 307468867
Bug: 307468827
Bug: 307468887
Bug: 296187211
Change-Id: Ib4df93d03b2828113b008032b3e574c0e4298f01
2023-10-24 07:22:43 +00:00
Tai Kuo
a3abd5ad39
Allow regmap debugfs for drivers probed by insmod
...
auditd : type=1400 audit(0.0:731): avc: denied { search } for
comm="modprobe" name="regmap" dev="debugfs" ino=2057
scontext=u:r:insmod-sh:s0 tcontext=u:object_r:vendor_regmap_debugfs:s0
tclass=dir permissive=1 bug=b/274727542
vendor_kernel_boot and vendor_dlkm modules probe by insmod need this.
Move regmap debugfs from legacy/whitechapel_pro/ to vendor/.
Bug: 274727542
Bug: 289012421
Bug: 285343932
Test: ls -d /sys/kernel/debug/regmap/*-0043
Change-Id: I1db7a5a3413467b4e14954d994b071b206fe0300
2023-09-12 16:42:21 +08:00
Wilson Sung
eac7ac91c3
Remove legacy tracking_denials
...
Bug: 296187211
Change-Id: I5c400c5ed8daf18b5d9176ab0ffd5d4a5323689a
2023-09-04 03:04:03 +00:00
Vania Januar
dbe23f1ab5
Revert "Revert^2 commit 2c99c990d3
""
...
This reverts commit 9bd666007d
.
Reason for revert: build break b/297170337
Change-Id: I2459b680bb3153d3d7e0f17761b4a825da942bcc
2023-08-23 12:58:42 +00:00
Wilson Sung
9bd666007d
Revert^2 commit 2c99c990d3
"
...
This reverts commit 5d2c755531
.
Bug: 297129706
Change-Id: Ia8301a139559e8abf119a0964d7a06914aacf55e
2023-08-23 17:57:57 +08:00
Chiachang Wang
5d2c755531
Revert commit 2c99c990d3
...
This reverts commit 2c99c990d3
.
Reason for revert: <Build break>
Change-Id: I030b4f5c59383478355ac2cee8363f45c8101041
2023-08-23 04:16:56 +00:00
Wilson Sung
355f0df8fd
Sync zuma-sepolicy to legacy folder
...
Duplicate from zuma-sepolicy 7f3e2b9
Test: make selinux_policy
Bug: 296187211
Change-Id: If686fbdcf058849479019e8b37bb1d57a0215ed6
Signed-off-by: Wilson Sung <wilsonsung@google.com>
2023-08-22 15:37:56 +08:00
Wilson Sung
4dd327ff4c
Permissive boot related domains during bringup stage
...
Bug: 296187211
Test: make selinux_policy
Change-Id: I09a16f867a22cf4613a58f419e2ecccf1d07d9ac
2023-08-21 03:35:50 +00:00
Wilson Sung
ede6811c32
Remove systemui_app dontaudit
...
Bug: 296187211
Test: make selinux_policy
Change-Id: Id6e2c110af6cc19c276106ff67f234919fb32837
2023-08-21 03:35:13 +00:00
Bart Sears
b1bacadf00
Revert "Permissive boot related domains during bringup stage"
...
Revert submission 24444207
Reason for revert: b/296705471 | Broken builds on udc-qpr1-release
Reverted changes: /q/submissionid:24444207
ag/24441134 and ag/24444207
Change-Id: Ic3bc342c693f7ec87b12594f3466d84689b68237
2023-08-19 20:48:05 +00:00
Bart Sears
c2c1b09ea9
Revert "Remove systemui_app dontaudit"
...
Revert submission 24444207
Reason for revert: b/296705471 | Broken builds on udc-qpr1-release
Reverted changes: /q/submissionid:24444207
ag/24441134 and ag/24444207
Change-Id: If3b89543d7ca871ac27a881ab608a9e1c244dbbc
2023-08-19 20:48:05 +00:00
Wilson Sung
b1ded0f443
Remove systemui_app dontaudit
...
Bug: 296187211
Change-Id: I56c23c1a3190e294391331c5f83d05e4a3eb9d81
2023-08-16 18:49:31 +08:00
Wilson Sung
da3b0fc74b
Permissive boot related domains during bringup stage
...
Bug: 296187211
Change-Id: I58a3e61d3a9a3e1c997595af5b74d77a3c0d848c
2023-08-16 18:45:19 +08:00
Wilson Sung
08dbe5a438
Permissive systemui during bringup stage
...
Bug: 294300348
Change-Id: I83fcda2cfd3d683cd6c36132e497e9d17a44efe5
2023-08-08 17:51:31 +08:00
Robin Peng
30ab759177
Sync with device/google/zuma-sepolicy a89fbcc4aa1ae
...
fix build breakage:
device/google/zumapro-sepolicy/legacy/whitechapel_pro/file.te:4:ERROR 'Duplicate declaration of type' at token ';' on line 104436:
type tcpdump_vendor_data_file, file_type, data_file_type;
type updated_wifi_firmware_data_file, file_type, data_file_type;
Bug: 272725898
Change-Id: Ic17d18409c28760d172a4ee7a5beb6c90016a381
2023-05-01 10:04:38 +00:00
Robin Peng
d9e2e6aae9
Sync with device/google/zuma-sepolicy cfa00dfc881e3
...
Bug: 272725898
Change-Id: I9125ed760c0b4c688cf37720f5d4a744f2484be7
2023-04-11 10:30:07 +00:00
Robin Peng
bff99af2da
init zumapro from zuma sha 43d5907677d0f
...
Bug: 272725898
Change-Id: If35d9efdda9dd3b8d8b24008f0738a0cbbe5bd9b
2023-03-31 14:16:57 +00:00