Dinesh Yadav 1b7a5a0078 Allow tachyon service to make binder calls to GCA ...

This permission is needed for tachyon service to call callbacks.

AVC Error seen when tachyon tries accessing GCA:
12-02 11:40:03.212  6987  6987 W com.google.edge: type=1400 audit(0.0:17): avc:  denied  { call } for  scontext=u:r:edgetpu_tachyon_server:s0 tcontext=u:r:google_camera_app:s0:c145,c256,c512,c768 tclass=binder permissive=0
12-03 07:12:26.424  4166  4166 W com.google.edge: type=1400 audit(0.0:254): avc:  denied  { call } for  scontext=u:r:edgetpu_tachyon_server:s0 tcontext=u:r:debug_camera_app:s0:c67,c257,c512,c768 tclass=binder permissive=0

Bug: 381787911
Flag: EXEMPT updates device sepolicy only
Change-Id: I5544fbc11cea0d98dfdeffd9d2871fc037d87c61

2024-12-06 04:13:42 +00:00

..

certs

Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices"

2023-07-18 20:37:42 -07:00

audioserver.te

…

bootanim.te

Suppress bootanim behavior meant for Android Wear devices

2023-04-13 00:00:38 +00:00

cccdk_timesync_app.te

Add sepolicy for aidl bt extension hal

2023-04-28 04:48:33 +00:00

charger_vendor.te

sepolicy: fix charger_vendor permission denied

2023-04-17 07:24:32 +00:00

chre.te

Allow CHRE to access the IStats service for the zuma target

2023-10-02 20:52:36 +00:00

con_monitor_app.te

Allow con_monitor_app to read/write the folder /data/vendor/radio

2024-02-02 15:42:31 +00:00

debug_camera_app.te

Allow tachyon service to make binder calls to GCA

2024-12-06 04:13:42 +00:00

device.te

storage: move storage related device type to common folder

2024-09-04 10:44:21 +08:00

disable-contaminant-detection-sh.te

Set sepolicy for shell script of disabling contaminant detection

2023-05-19 09:54:23 +00:00

domain.te

…

dump_gsa.te

Add GSA logs policy

2023-05-17 17:36:35 +00:00

dump_power.te

Allow dump_power to read sysfs directories

2024-01-31 07:01:55 +00:00

dump_wlan.te

…

dumpstate.te

ril: dump radio hal from user build.

2023-04-20 03:40:59 +00:00

e2fs.te

…

euiccpixel_app.te

Move euiccpixel_app dontaudit items out of tracking_denials

2023-03-20 10:13:05 +08:00

fastbootd.te

Enforce fastbootd

2023-05-02 11:42:59 +08:00

file_contexts

storage: move storage related device type to common folder

2024-09-04 10:44:21 +08:00

file.te

zuma: move sepolicy related to bootctrl hal to gs-common

2023-12-05 00:45:55 +08:00

fsck.te

…

genfs_contexts

Merge "Revert^3 "Add udc sysfs to udc_sysfs fs context"" into main

2024-10-30 18:51:30 +00:00

google_camera_app.te

Allow tachyon service to make binder calls to GCA

2024-12-06 04:13:42 +00:00

hal_bluetooth_btlinux.te

Give bthal permission to read AoC version.

2024-06-28 01:15:50 +00:00

hal_camera_default.te

Add sepolicy for power_state node

2024-04-24 19:10:19 +00:00

hal_contexthub_default.te

Add hal_contexthub_default to zuma sepolicy; Remove dontaudit rules for

2023-04-13 06:43:41 +00:00

hal_fingerprint_default.te

Add sepolicy for fingerprint HAL to check NSP file

2024-05-29 04:39:37 +00:00

hal_gnss_pixel.te

gps: Move hal_gnss_pixel declaration to device folder

2024-06-11 06:23:21 +00:00

hal_graphics_allocator_default.te

Add sepolicies for gcma_camera heaps

2023-05-08 23:54:55 +08:00

hal_graphics_composer_default.te

add hal_graphics_composer to access thermal temperature

2024-07-23 09:05:16 +00:00

hal_health_default.te

…

hal_memtrack_default.te

Add memtrack

2023-04-20 23:18:56 -07:00

hal_nfc_default.te

Update sepolicy for nfc antenna selftest values

2024-09-12 20:17:39 +00:00

hal_power_default.te

Allow hal_power_default to access sysfs_scsi_devices_0000

2023-08-17 12:59:19 +00:00

hal_power_stats_default.te

Allow Powerstats service to access refresh rate residency node

2024-01-12 13:01:17 +00:00

hal_radioext_default.te

…

hal_secure_element_st54spi_aidl.te

Update rules for android.hardware.secure_element-service.thales

2023-04-13 11:02:49 +00:00

hal_secure_element_uicc.te

…

hal_sensors_default.te

sensors: Move USF related sepolicy to gs-common.

2023-11-06 23:20:16 +08:00

hal_thermal_default.te

…

hal_usb_gadget_impl.te

usb: allow hal_usb_gadget_impl sysfs_batteryinfo permission

2023-03-15 19:17:14 +08:00

hal_usb_impl.te

Revert^3 "Add udc sysfs to udc_sysfs fs context"

2024-10-29 21:36:05 +00:00

hal_uwb_vendor_default.te

uwb: add permission to read SELinux state

2023-07-10 17:12:33 +00:00

hal_wifi_ext.te

…

hal_wireless_charger.te

…

hwservice_contexts

…

hwservice.te

…

init.te

…

insmod-sh.te

Allow regmap debugfs for drivers probed by insmod

2023-09-12 16:45:09 +08:00

installd.te

Remove untraceable rules

2023-04-19 23:53:54 +08:00

kernel.te

sepolicy: allow kernel to search vendor debugfs

2024-04-02 07:35:39 +00:00

keys.conf

Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices"

2023-07-18 20:37:42 -07:00

logd.te

Add logd selinux allow permissions

2023-03-29 09:24:47 +02:00

mac_permissions.xml

Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices"

2023-07-18 20:37:42 -07:00

mediacodec_google.te

Dec: SELinux policy change to allow uclamp.min set

2023-06-29 00:22:24 +00:00

pixeldisplayservice_app.te

Move coredomain seapp contexts to system_ext

2023-08-08 15:11:08 +00:00

pixelstats_vendor.te

pixelstats_vendor: add logbuffer_device r_file_perms

2024-04-25 06:11:20 +00:00

platform_app.te

…

property_contexts

Add necessary sepolicy for ro.vendor.persist.status

2024-04-22 10:14:12 -07:00

property.te

Change vendor_fingerprint_prop to vendor_restricted_prop

2024-09-16 01:45:31 +00:00

recovery.te

Move recovery.te to device/google/gs-common/dauntless/sepolicy

2023-04-24 08:01:42 +00:00

seapp_contexts

Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common.

2024-04-22 03:02:53 +00:00

service_contexts

Remove duplicate service entries

2024-10-01 14:48:00 +10:00

service.te

…

shell.te

…

surfaceflinger.te

…

system_app.te

…

system_server.te

Add sepolicy for ConnectivityMonitor

2023-06-06 02:01:38 +00:00

systemui_app.te

Move systemui_app to system_ext

2023-06-12 10:26:31 +08:00

tcpdump_logger.te

[TSV2] Add sepolicy for dumpstate to zip tcpdump into bugreport

2023-04-27 13:47:34 +00:00

tee.te

Add necessary sepolicy for ro.vendor.persist.status

2024-04-22 10:14:12 -07:00

toolbox.te

…

trusty_apploader.te

…

trusty_metricsd.te

…

twoshay.te

[zuma] Update chre sepolicy for socket connection

2023-12-27 00:02:57 -08:00

ufs_firmware_update.te

storage: move storage related device type to common folder

2024-09-04 10:44:21 +08:00

update_engine.te

Label dtbo_block_device with flag-guarding

2024-01-10 17:02:34 +09:00

uwb_vendor_app.te

…

vendor_init.te

Revert "Add necessary sepolicy for convert_modem_to_ext4"

2024-05-07 08:50:45 +00:00

vendor_uwb_init.te

uwb: add permissions for factory uwb calib file

2023-05-09 00:27:47 +00:00

vndservice_contexts

…

vndservice.te

…

wifi_sniffer.te

…