Commit Graph

2035 Commits

Author SHA1 Message Date
Wilson Sung
a7fd020e52 Move uwb to system_ext am: 5e75eaa1a5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24660422

Change-Id: Icf239b4a7ffa79cfe8b7db705e0cd0df279e0198
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-05 21:13:51 +00:00
Wilson Sung
5e75eaa1a5 Move uwb to system_ext
Bug: 290766628
Test: Boot-to-home, no uwb related avc error
Change-Id: I00a1c45f05cc52a9ce93234921d0b759a3143f16
2023-09-05 20:43:35 +00:00
Wilson Sung
801570790f Update SELinux error am: f4eada749f am: 9461aea1a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24622013

Change-Id: I7ed7f9368741a797f4cf11488437e821863a057c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-04 12:27:14 +00:00
Wilson Sung
9461aea1a2 Update SELinux error am: f4eada749f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24622013

Change-Id: I821697bec0b8b52adcb6215eb68ff5d2db2541c1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-04 11:37:44 +00:00
Wilson Sung
f4eada749f Update SELinux error
Bug: 290766628
Merged-In: If623bee7f1050f814a2a3531bfa5de414fa32104
Change-Id: I13d2fb464c80b0be2d6524a58b441fcd8eaaa830
2023-09-04 07:45:14 +00:00
Xin Li
42bdbb4eee [automerger skipped] Merge Android U (ab/10368041) am: 70d0cf7ca5 -s ours am: 6e7ca6c43a -s ours
am skip reason: Merged-In I899bc4150d6d32b0ede035c96487da50849b6256 with SHA-1 3ab8be18a5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24181570

Change-Id: I3ad2be39f493dabf7dc18615feeedbb87b8575c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-29 00:35:21 +00:00
Xin Li
6e7ca6c43a [automerger skipped] Merge Android U (ab/10368041) am: 70d0cf7ca5 -s ours
am skip reason: Merged-In I899bc4150d6d32b0ede035c96487da50849b6256 with SHA-1 3ab8be18a5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24181570

Change-Id: I8c8b0810b4f857d2f21fec85cf184ab95de80427
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-28 23:59:22 +00:00
Xin Li
70d0cf7ca5 Merge Android U (ab/10368041)
Bug: 291102124
Merged-In: I899bc4150d6d32b0ede035c96487da50849b6256
Change-Id: I2d7cb958d68b1b20b31921f04c77a5ff91aca8eb
2023-08-15 00:04:03 -07:00
Inseob Kim
5ddd880bb1 [automerger skipped] Move coredomain policies to system_ext/product am: 656f7b5aa1 am: c83b44626a -s ours am: a3707836b2 -s ours
am skip reason: Merged-In If768b5cb9f3b4024893117d8e3bf49adb7c5b070 with SHA-1 da30985fa5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2671075

Change-Id: I5386db73205854348d31612667b69c4b43f66270
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-11 05:20:02 +00:00
Inseob Kim
a3707836b2 [automerger skipped] Move coredomain policies to system_ext/product am: 656f7b5aa1 am: c83b44626a -s ours
am skip reason: Merged-In If768b5cb9f3b4024893117d8e3bf49adb7c5b070 with SHA-1 da30985fa5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2671075

Change-Id: Iaf6051e44cd3378c415db967aeed879a0a51a734
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-11 04:35:44 +00:00
Inseob Kim
c83b44626a Move coredomain policies to system_ext/product am: 656f7b5aa1
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2671075

Change-Id: I707df3267d51354e846376617b59943af6c04e30
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-11 03:49:14 +00:00
Inseob Kim
0827b82595 Move coredomain policies to system_ext/product am: da30985fa5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24354374

Change-Id: I527239025a4b81d9d989dcba6ba2c63d6840a683
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-09 06:50:56 +00:00
Inseob Kim
656f7b5aa1 Move coredomain policies to system_ext/product
Coredomain apps shouldn't be labeled with vendor sepolicy, due to Treble
violation.

Bug: 280547417
Test: TH
Change-Id: If768b5cb9f3b4024893117d8e3bf49adb7c5b070
Merged-In: If768b5cb9f3b4024893117d8e3bf49adb7c5b070
(cherry picked from commit da30985fa5)
2023-08-09 15:06:04 +09:00
Inseob Kim
da30985fa5 Move coredomain policies to system_ext/product
Coredomain apps shouldn't be labeled with vendor sepolicy, due to Treble
violation.

Bug: 280547417
Test: TH
Change-Id: If768b5cb9f3b4024893117d8e3bf49adb7c5b070
Merged-In: If768b5cb9f3b4024893117d8e3bf49adb7c5b070
2023-08-08 14:37:48 +00:00
Ken Yang
f0c6f18d7d SELinux: fix the wakeup avc denials am: 3054cb6eec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/24192194

Change-Id: Ia49778517e9c64e4b7539fa81ec4170cef01961c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-26 02:30:35 +00:00
Ken Yang
3054cb6eec SELinux: fix the wakeup avc denials
Fix the wakeup avc denials in a more common place

Bug: 292076108
Change-Id: I52627f19cb0fec3dd0851d21d0608048ebc7d45d
Signed-off-by: Ken Yang <yangken@google.com>
2023-07-25 13:12:32 +00:00
David Anderson
96009e517c Allow fastbootd to flash dtbo. am: e96a14a9d2 am: 439827c49d am: a03ec9af21 am: a7e9f0a873
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: Ie086b1fb169292469ec153039beee50ae782276d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 00:07:32 +00:00
David Anderson
a7e9f0a873 Allow fastbootd to flash dtbo. am: e96a14a9d2 am: 439827c49d am: a03ec9af21
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: I29b1070280c3e88e976dab3c02b110786ca8f11b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 23:22:17 +00:00
David Anderson
a03ec9af21 Allow fastbootd to flash dtbo. am: e96a14a9d2 am: 439827c49d
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: Id20a32d6a80e058caebf2047e59a1b5a3e519f43
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 22:41:44 +00:00
David Anderson
439827c49d Allow fastbootd to flash dtbo. am: e96a14a9d2
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2652408

Change-Id: Ifc30a96202cbeb38896f3545502b582168dcf53e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 21:57:26 +00:00
David Anderson
e96a14a9d2 Allow fastbootd to flash dtbo.
This line is copied from gs101-sepolicy, and fixes the following denial:

audit: type=1400 audit(1689093038.396:14): avc:  denied  { write } for  pid=409 comm="fastbootd" name="sda24" dev="tmpfs" ino=493 scontext=u:r:fastbootd:s0 tcontext=u:object_r:custom_ab_block_device:s0 tclass=blk_file permissive=0

Bug: N/A
Test: fastboot flashall in fastbootd
Change-Id: I765aedeb204cc862434a56a97f242640465f84b8
2023-07-11 10:27:47 -07:00
Xin Li
645f996b23 [automerger skipped] Merge Android 13 QPR3 am: aaef0b7773 -s ours am: 7e4592c70a -s ours am: dc4a87253c -s ours am: c9d5097e56 -s ours
am skip reason: Merged-In Idc925c7a1f1111840a64664aa50c39442c3a0f8f with SHA-1 307e2c2fc8 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2635310

Change-Id: I702a5374d5ddff6d17ae5f49e79654ab7d85ab81
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 01:14:07 +00:00
Xin Li
c9d5097e56 [automerger skipped] Merge Android 13 QPR3 am: aaef0b7773 -s ours am: 7e4592c70a -s ours am: dc4a87253c -s ours
am skip reason: Merged-In Idc925c7a1f1111840a64664aa50c39442c3a0f8f with SHA-1 307e2c2fc8 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2635310

Change-Id: I903de348dca44cf893578b33b13743269685a480
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 00:32:37 +00:00
Xin Li
dc4a87253c [automerger skipped] Merge Android 13 QPR3 am: aaef0b7773 -s ours am: 7e4592c70a -s ours
am skip reason: Merged-In Idc925c7a1f1111840a64664aa50c39442c3a0f8f with SHA-1 307e2c2fc8 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2635310

Change-Id: I07063c3d9cf1418132ec611701713baa7b783f59
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-26 23:10:28 +00:00
Xin Li
7e4592c70a [automerger skipped] Merge Android 13 QPR3 am: aaef0b7773 -s ours
am skip reason: Merged-In Idc925c7a1f1111840a64664aa50c39442c3a0f8f with SHA-1 307e2c2fc8 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2635310

Change-Id: I27e4864161d3db815ad9cedad4da2af6ee082826
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-26 22:57:43 +00:00
Xin Li
aaef0b7773 Merge Android 13 QPR3
Bug: 275386652
Merged-In: Idc925c7a1f1111840a64664aa50c39442c3a0f8f
Change-Id: I2f0a022715577d395a6d9d2c8ec6b9a7f37fe509
2023-06-21 15:14:53 -07:00
Jenny Ho
abb6cc1a80 Add permissions for maxfg_base/maxfg_secondary am: ee160b5880 am: 3ab8be18a5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23467290

Change-Id: I96b77bcbb6ab773d41b861f4770e07f41b6b834a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 02:36:08 +00:00
Jenny Ho
eef3026fd5 Add permissions for maxfg_base/maxfg_secondary am: ee160b5880 am: 34ee73b7f2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23467290

Change-Id: Ib71b8ae6c48db75778ec84a2d5a5b2efec88244c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 02:33:59 +00:00
Jenny Ho
34ee73b7f2 Add permissions for maxfg_base/maxfg_secondary am: ee160b5880
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23467290

Change-Id: Ie6144135cf653d281c7bef84fb4469daefbad095
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 01:54:32 +00:00
Jenny Ho
3ab8be18a5 Add permissions for maxfg_base/maxfg_secondary am: ee160b5880
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23467290

Change-Id: I899bc4150d6d32b0ede035c96487da50849b6256
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 01:50:10 +00:00
Jenny Ho
ee160b5880 Add permissions for maxfg_base/maxfg_secondary
Bug: 284878175
Change-Id: I3fe3030ecd36773405f0e70b767d4a28062d91ad
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2023-05-30 12:09:30 +08:00
Donnie Pollitz
d662abd90e Allow vendor_init to fix permissions of TEE data file am: 955ae6825f am: 36ea330be0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23412161

Change-Id: I44a0090b6a0be88fd606596fae0a236ef9bcdd40
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 09:01:41 +00:00
Donnie Pollitz
62bfe3afc4 Allow vendor_init to fix permissions of TEE data file am: 955ae6825f am: a2cb6ab6eb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23412161

Change-Id: I891e9032a5bacf115410ad81ccd07580645da9d6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 08:59:32 +00:00
Donnie Pollitz
a2cb6ab6eb Allow vendor_init to fix permissions of TEE data file am: 955ae6825f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23412161

Change-Id: Ibf91aa97b122e3a5f39053c6ed01e62b3783403c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 07:53:44 +00:00
Donnie Pollitz
36ea330be0 Allow vendor_init to fix permissions of TEE data file am: 955ae6825f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23412161

Change-Id: Ic51e258b34e4525f669a67d5eecd18b781bf6010
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 07:49:20 +00:00
Donnie Pollitz
955ae6825f Allow vendor_init to fix permissions of TEE data file
Background:
* vendor_init needs to be able to possibly fix ownership of
  tee_data_file

Bug: 280325952
Test: Changed permissions and confirmed user transitions
Change-Id: I27681589c9d0b0aa88463e6476fb75119ea89e8a
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-05-26 07:17:39 +00:00
sashwinbalaji
711cf086a9 thermal: thermal_metrics: Update selinux to reset stats am: 1113c66dea am: 29df1ad288
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23078641

Change-Id: Id496e32bc9f0255c68e86605ba237d23cab6bbce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 07:07:49 +00:00
sashwinbalaji
083335d39b thermal: thermal_metrics: Update selinux to reset stats am: 1113c66dea am: 6bc46c8cd5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23078641

Change-Id: I5d426b52828b29550d126854f5a7b2d39cde6661
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 07:03:07 +00:00
sashwinbalaji
6bc46c8cd5 thermal: thermal_metrics: Update selinux to reset stats am: 1113c66dea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23078641

Change-Id: I2037d2de006c26cba1b2114f776678aca7c4a808
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 06:22:41 +00:00
sashwinbalaji
29df1ad288 thermal: thermal_metrics: Update selinux to reset stats am: 1113c66dea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23078641

Change-Id: I6a691341b37808102fd540fce39373498e18b379
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 06:18:24 +00:00
sashwinbalaji
1113c66dea thermal: thermal_metrics: Update selinux to reset stats
Bug: 193833982
Test: Local build and verify statsD logs
adb shell cmd stats print-logs && adb logcat -b all | grep -i 105045
Change-Id: I0dc1c557797d7fe97da7f0fcb2d600485526c979
2023-05-25 05:28:45 +00:00
Jin Jeong
15d383b430 Revert "Fix SELinux error for com.google.android.euicc" am: 10ef6d8619 am: aa606065a3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23163634

Change-Id: Iccab57deadb4965a765bebb85368345bab672c8c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:30:58 +00:00
Jin Jeong
a82c726a4e Revert "Fix LPA crash due to selinux denial" am: 980c71bea4 am: 35e908fd66
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23167565

Change-Id: I92d2d75c4d0f66999b9bd0ac2f688c195b53af11
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:30:52 +00:00
Jin Jeong
9b291f9755 Revert "Fix SELinux error for com.google.android.euicc" am: 10ef6d8619 am: 5627fe6f60
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23163634

Change-Id: I3ba572b0238412fc510d6f1ed82723904e1392a5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:26:14 +00:00
Jin Jeong
3588c019b2 Revert "Fix LPA crash due to selinux denial" am: 980c71bea4 am: 42760593ae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23167565

Change-Id: Ic17a94ed766998b8eaa711ae12b75e3e597d913b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:26:08 +00:00
Jin Jeong
5627fe6f60 Revert "Fix SELinux error for com.google.android.euicc" am: 10ef6d8619
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23163634

Change-Id: I66ec119e485273f9d1562bb272ab7c25541e98b3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:47:08 +00:00
Jin Jeong
42760593ae Revert "Fix LPA crash due to selinux denial" am: 980c71bea4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23167565

Change-Id: Ib285406b29c598ab5cec6db6ab0d2f9d57343a0f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:47:01 +00:00
Jin Jeong
aa606065a3 Revert "Fix SELinux error for com.google.android.euicc" am: 10ef6d8619
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23163634

Change-Id: Ifa25563c9f0d157ce52f2d2d320c6cc166521c2a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:42:42 +00:00
Jin Jeong
35e908fd66 Revert "Fix LPA crash due to selinux denial" am: 980c71bea4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/23167565

Change-Id: I7d6c19280280e63b194da9bdef8b8a80d057f364
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:42:36 +00:00
Jin Jeong
10ef6d8619 Revert "Fix SELinux error for com.google.android.euicc"
Revert submission 22899490-euicc_selinux_fix

Reason for revert: b/279988311 we rename the vendor.modem property so we don't need to add the new rules

Bug: 279988311
Reverted changes: /q/submissionid:22899490-euicc_selinux_fix

Change-Id: I50ff4f8e48389d034c3f6c716dad1a81e9b73e64
2023-05-24 01:07:09 +00:00