6 Commits

Author	SHA1	Message	Date
Randall Huang	2bd12254f4	Move sg_device related policy ... Bug: 312582937 Test: make selinux_policy Change-Id: I18617643e66d6d2fe5ff19e440dea204206b3035 Signed-off-by: Randall Huang <huangrandall@google.com>	2023-11-22 14:16:38 +08:00
Stephen Crane	c03e9b58db	Allow Trusty storageproxy property ... Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready when the data filesystems are ready for use, and allows vendor init to query and wait on this property. Test: build, flash, test app loading Bug: 258018785 Change-Id: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d	2022-11-23 18:45:55 +00:00
Daniel Angell	3adb31f004	Remove dontaudit rules related to storageproxyd's /data access. ... Removing dontaudits for both tracking_denials/tee.te and whitechapel_pro/tee.te results in no new audit log messages related to storageproxyd, so they can both be removed. Bug: 215649571 Test: adb logcat | grep -iE 'storageproxyd' Change-Id: I8dc735bcaf0725c8d4eab4587f7a7fce21f4e25c	2022-07-07 18:37:23 +00:00
Tri Vo	9fe6aa97af	Don't audit storageproxyd unlabeled access ... Test: m sepolicy Bug: 197502330 Change-Id: Ibe7292dc659dd454d3c842f6c48d2d90bc77117d	2022-03-04 17:45:38 +00:00
Stephen Crane	019c8e6fcf	Allow TEE storageproxyd permissions needed for DSU handling ... Allows the vendor TEE access to GSI metadata files (which are publicly readable). Storageproxyd needs access to this metadata to determine if a GSI image is currently booted. Also allows the TEE domain to make new directories in its data path. Test: access /metadata/gsi/dsu/booted from storageproxyd Bug: 203719297 Change-Id: Ief6166aaa20ccab27dc7864373722383efae0718	2022-01-24 23:23:04 +00:00
Adam Shih	98ebd6e7f1	review tee ... Bug: 198723116 Test: boot with tee started Change-Id: Ib50698834d16887fa00bdbbaf81801f1067909ba	2021-09-03 15:26:51 +08:00