Mahesh Kallelil
e51f8b7f0e
Merge "Allow dump_modem to read logbuffer and wakeup events" into main
2024-01-09 03:03:24 +00:00
Wilson Sung
337ca68313
Label and sort wakeup nodes
...
Bug: 318032188
Test: make sepolicy
Change-Id: I8dfa35034657ff98957373818e98b5bf836e7a4b
2024-01-08 17:33:12 +08:00
Mahesh Kallelil
6285ad387d
Allow dump_modem to read logbuffer and wakeup events
...
Updating sepolicy for dump_modem to read /dev/logbuffer_cpif. This is
required as part of bugreport.
Test: Tested bugreport on device
Bug: 318949647
Change-Id: Ica70258200432633681b8d222a56c21aac427d86
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2024-01-06 09:59:26 -08:00
guibing
e417775b17
zumapro: sepolicy: remove power hal denial tracker.
...
Remove the power hal denial tracker.
Add the missing devfreq related configuration.
Bug: 307468758
Test: Power hal works without related avc errors.
Change-Id: I038bc7701deeada4d70ef2ed17d5db64ba5b4d03
2024-01-05 21:58:20 +00:00
Hung-Yeh Lee
5a8206a8e4
sepolicy: add persist.vendor.primarydisplay. to vendor_display_prop
...
Copy sepolicy from zuma to fix the following avc denied:
auditd : type=1107 audit(0.0:11): uid=0 auid=4294967295
ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for
property=persist.vendor.primarydisplay.op.peak_refresh_rate pid=510
uid=1000 gid=1003 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:vendor_default_prop:s0
tclass=property_service permissive=0'
Bug: 286063708
Bug: 286063029
Bug: 317754250
Test: Run VtsHalGraphicsComposer3_TargetTest
Change-Id: Ib5e83927ebebf05a640d127d9d11e94df101f224
2024-01-03 11:58:04 +08:00
Wilson Sung
df88fd4e1c
Add dc-main wakeup node
...
Bug: 308381292
Test: boot-to-home
Change-Id: I0165b4afab3b62bf4fec4ce6864cc1e8c6fc841a
2023-12-27 16:42:52 +08:00
Wilson Sung
8345799166
Add kernel vendor_fw_file dir read permission
...
Fix: 288049349
Change-Id: I76751deb04e5b6a4362917c76764cddc74d0f76d
2023-12-27 10:41:21 +08:00
Wilson Sung
2b70f82f1d
Move kernel from legacy to vendor
...
Bug: 312143882
Test: make sepolicy
Change-Id: I01b192c7d60cda8e52f6a3fffd5e0dec7a660172
2023-12-27 10:40:47 +08:00
Treehugger Robot
594a751d77
Merge "label Extcon files" into main
2023-12-26 23:17:40 +00:00
Wilson Sung
744d309e44
Add wakeup node
...
Fix: 308381292
Test: make sepolicy
Change-Id: I32a45a3b862ffbe9f53f88ca97bdad52e5678931
2023-12-26 17:38:34 +00:00
Wilson Sung
d6744d5856
label Extcon files
...
Fix: 317753346
Test: Boot with target files labeled correctly
Change-Id: I9941ec615c21a16f2235b6abfd8b3e62a0d913b2
2023-12-26 18:26:15 +08:00
Lei Ju
df72029b33
[zumapro] Remove duplicated file context settings for chre HAL
...
Bug: 248615564
Test: compilation
Change-Id: If21138ee1f85e1832ff3bf9a6d8dc16206f3b0ed
2023-12-20 16:46:33 -08:00
Treehugger Robot
e7795ba5ad
Merge "hal_usb_impl: allow fwk_stats_service" into main
2023-12-20 06:05:25 +00:00
Chien Kun Niu
14ca9862d2
hal_usb_impl: allow fwk_stats_service
...
12-18 11:12:58.401 443 443 I auditd : avc: denied { find } for
pid=865 uid=1000 name=android.frameworks.stats.IStats/default
scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:fwk_stats_service:s0
tclass=service_manager permissive=0
Bug: 316989074
Change-Id: I74867901f513926379cd2ba35140a5ccb582467f
Signed-off-by: Chien Kun Niu <rickyniu@google.com>
2023-12-20 11:22:42 +08:00
Zheng Pan
65e8b1c4df
Merge "Revert "Move kernel from legacy to vendor"" into main
2023-12-20 02:44:25 +00:00
Zheng Pan
58f2081f97
Revert "Move kernel from legacy to vendor"
...
This reverts commit cbfa33fd92
.
Reason for revert: b/317131577
Change-Id: Iafd9dc574c59f627b049ad7a955173d562d1444e
2023-12-20 02:32:04 +00:00
Treehugger Robot
ab36ea0ced
Merge "Move kernel from legacy to vendor" into main
2023-12-18 23:22:26 +00:00
Treehugger Robot
b5908f969a
Merge "sepolicy: allow hal_power_stats to read sysfs_edgetpu" into main
2023-12-18 10:41:05 +00:00
Darren Hsu
38c42d88ac
sepolicy: allow hal_power_stats to read sysfs_edgetpu
...
Bug: 316238807
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: I5b146cf8bf6fc7b6d135a38a568b016d1e125f2a
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-12-18 18:00:06 +08:00
Wilson Sung
cbfa33fd92
Move kernel from legacy to vendor
...
Bug: 312143882
Test: make sepolicy
Change-Id: I2ceb675b124aeeca2d94dd9c6095f0026df5a4bf
2023-12-18 07:56:26 +00:00
Wilson Sung
3d57d2da26
Enforce vendor_init and allow tee and display access
...
Fix: 307468733
Fix: 308381748
Fix: 312372803
Test: make selinux_policy
Change-Id: Ic9c987e34bf8337e9a743371a00fd910442fab10
2023-12-18 04:42:33 +00:00
KRIS CHEN
7d98399d40
Merge "fingerprint: fix SELinux denials" into main
2023-12-18 03:27:57 +00:00
chenkris
a7c90de740
fingerprint: fix SELinux denials
...
Fix following AVC denials:
1. Could not enable service: File /vendor/bin/hw/android.hardware.biometrics.fingerprint-service.goodix(labeled "u:object_r:vendor_file:s0") has incorrect label or no domain transition from u:r:init:s0 to another SELinux domain defined
2. Could not start service 'vendor.fps_hal' as part of class 'late_start': File /vendor/bin/hw/android.hardware.biometrics.fingerprint@2.1-service.goodix(labeled "u:object_r:vendor_file:s0") has incorrect label or no domain transition from u:r:init:s0 to another SELinux domain defined.
3. avc: denied { ioctl } for path="/dev/goodix_fp" dev="tmpfs" ino=1499 ioctlcmd=0x6701 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1
Bug: 315737323
Test: boot with no relevant error
Change-Id: Ideeac108b8470232a258254437086451550fcc8d
2023-12-15 07:58:49 +00:00
Wilson Sung
8f63998c24
Merge "Move dump_gsa to vendor" into main
2023-12-14 03:57:13 +00:00
Treehugger Robot
c4e14e8ffa
Merge "Add insmod-sh policy" into main
2023-12-08 01:09:35 +00:00
Treehugger Robot
3b47e80f3a
Merge "Suppress avc error log on debugfs's usb folder." into main
2023-12-07 06:46:35 +00:00
Wilson Sung
bf85d96523
Add insmod-sh policy
...
Fix: 307468923
Fix: 312372936
Test: make selinux_policy
Change-Id: Icd42c4a74b44b7e593dc7c0598f3d23c3f251a2c
2023-12-07 04:52:04 +00:00
Treehugger Robot
9c9376de63
Merge "Remove dump_wlan" into main
2023-12-06 23:09:15 +00:00
David Drysdale
ff861c8ab7
Merge "Add Secretkeeper HAL" into main
2023-12-06 10:21:03 +00:00
Wilson Sung
624effa7bb
Remove dump_wlan
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I9e3cabf93c0d28a7d82ab367eff6c7daecf83131
2023-12-06 09:15:36 +00:00
Wilson Sung
10eea971da
Merge "Move charger_vendor from legacy to vendor" into main
2023-12-06 08:13:34 +00:00
Wilson Sung
8fc7e53bcb
Merge "Move fsck rule to vendor" into main
2023-12-06 08:13:20 +00:00
Treehugger Robot
7ba631321f
Merge "Move dumpstate to vendor" into main
2023-12-06 06:22:10 +00:00
Chien Kun Niu
7bb1437142
Suppress avc error log on debugfs's usb folder.
...
The XHCI driver in kernel will write debugging information to DebugFS on
some USB host operations (for example: plugging in a USB headphone). We
are not using those information right now.
Bug: 311088739
Test: No error when plugging a USB headphone in.
Change-Id: I3e13d117ca6eb9c31c3eb67be87fcea684817911
Signed-off-by: Chien Kun Niu <rickyniu@google.com>
2023-12-06 14:22:03 +08:00
Treehugger Robot
12f85dd7fd
Merge "Move e2fs to vendor" into main
2023-12-06 06:20:49 +00:00
Treehugger Robot
2bc57f5c7e
Merge "Move chre from legacy to vendor" into main
2023-12-06 06:19:31 +00:00
Treehugger Robot
0af7cc2cc4
Merge "Move con_monitor_app from legacy to vendor" into main
2023-12-06 06:19:30 +00:00
Treehugger Robot
1bd9d75f29
Merge "Allow audioserver access /dev/snd/pcmC0D0p" into main
2023-12-06 06:10:51 +00:00
Treehugger Robot
8d6c7dea5d
Merge "Move bootanim to vendor" into main
2023-12-06 06:10:51 +00:00
Wilson Sung
5ab436f824
Move fsck rule to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I3d27f928e0c02020d0028a0449f18467ce2a4391
2023-12-05 11:29:51 +00:00
Wilson Sung
8b0e8aa04c
Move e2fs to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: Iba2258335ffb2866624d65966e7eed9235cd889d
2023-12-05 11:25:17 +00:00
Wilson Sung
007718bd55
Move dumpstate to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I9f1a46b5c4c472a1f4ab01a91b17741bfc152ca9
2023-12-05 11:14:52 +00:00
Wilson Sung
210b1492bf
Move dump_gsa to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I090d7e1bb0b69aa2d06b19c7d71998498a490e7f
2023-12-05 11:10:51 +00:00
Wilson Sung
0090cdb912
Move con_monitor_app from legacy to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I37a4d1e496d8c2a89506e712a01a66124f672c56
2023-12-05 10:52:49 +00:00
Wilson Sung
ffebd92814
Move chre from legacy to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I8a83e5fb4ec042a278ca381e2db9e3ce9f6344aa
2023-12-05 10:47:09 +00:00
David Drysdale
089c00aecc
Add Secretkeeper HAL
...
Test: VtsAidlAuthGraphSessionTest
Bug: 306364873
Change-Id: Ib09cea7b41efec8b79739eeccc798e96b2b1efbd
2023-12-05 10:40:32 +00:00
Wilson Sung
e225fb657b
Move charger_vendor from legacy to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I8a93d4306fdf62bd21a864977e6c69445314211d
2023-12-05 08:49:40 +00:00
Wilson Sung
106d62a9cb
Allow audioserver access /dev/snd/pcmC0D0p
...
Bug: 264484544
Bug: 312143882
Test: make selinux_policy
Change-Id: Ib0ba9d425cc3ad77e377acbb6d00c641615768fb
2023-12-05 08:06:50 +00:00
Wilson Sung
94fa60cc47
Move bootanim to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I194dedde82f7980520b0d5f01a2820f612365e1c
2023-12-05 07:23:46 +00:00
Wilson Sung
c7973bf59a
Move uwb service to vendor
...
Bug: 312143882
Test: make selinux_policy
Change-Id: I6266383542ab6a6db6cdcd6891e79aae6f6beb41
2023-12-05 03:16:18 +00:00