google-gs201/android_device_google_lynx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
103 Commits 2 Branches 0 Tags
1bf6ebb51ed80276df9b1e74dfbd40df53ea58f4
Commit Graph

15 Commits

Author SHA1 Message Date
Vic Huang
5b9f54e76d No avc denied in SELinuxUncheckedDenialBootTest 
DeviceBootTest.DeviceBootTest.SELinuxUncheckedDenialBootTest

avc: denied { call } for comm="oid.grilservice" scontext=u:r:grilservice_app:s0:c227,c256,c512,c768 tcontext=u:r:hal_bluetooth_default:s0 tclass=binder permissive=0 app=com.google.android.grilservice

Bug: 259198345
Change-Id: Ie3800e3197f04b83ba8789c82518cbb721e1fe37
 2022-12-02 15:52:36 +00:00
Hsiu-Chang Chen
cf6ebcdd6f Fix avc denied for init-insmod-sh 
qrtr.ko doesn't request net_admin permission now
05-30 05:12:58.524   492   492 I auditd  : type=1400 audit(0.0:4):
avc: denied { net_admin } for comm="modprobe" capability=12
scontext=u:r:init-insmod-sh:s0 tcontext=u:r:init-insmod-sh:s0
tclass=capability permissive=0

Bug: 234311675
Test: verified with the forrest ROM and error log gone
Change-Id: I72fb5441b977b6ba67d19416049a2776c3aebd12
 2022-10-28 12:35:02 +08:00
Aaron Tsai
11348d7e76 Fix avc denied for hal_radioext_default 
05-30 13:13:30.868   867   867 I auditd  : type=1400 audit(0.0:21): avc: denied { call } for comm="HwBinder:867_1" scontext=u:r:hal_radioext_default:s0 tcontext=u:r:hal_bluetooth_default:s0 tclass=binder permissive=0

Bug: 234311798
Test: verified with the forrest ROM and error log gone
Change-Id: I0195fe2d8e81ea0149255524cfc047540159281b
 2022-08-04 07:19:10 +08:00
Adam Shih
20deb31861 Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 239887174
Change-Id: I4034d5ae64004142e312fd534d436014bfc0fe5b
 2022-07-22 10:34:53 +08:00
Robin Peng
b51016a53f Revert "Update SELinux error" 
This reverts commit 74af0fe9e6.

Reason to revert: issue has been fixed
Bug: 239364576
Bug: 239364745
Signed-off-by: Robin Peng <robinpeng@google.com>
Change-Id: Iaef3454b376a7d5266b72f242b0ca94c77e1c1fe
 2022-07-18 22:28:45 +08:00
Adam Shih
74af0fe9e6 Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 239364745
Change-Id: I65e5ac420fe7c94cfb08d4a9e1f1191152b49754
 2022-07-18 10:55:40 +08:00
Adam Shih
c6daa1aa2e Update SELinux error 
Bug: 234547283
Change-Id: I9caeeee12b5c8f29d9962cfc93d4902115c99b90
 2022-07-15 00:30:34 +00:00
Adam Shih
683104a6a8 Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 238837168
Change-Id: Ic852fa8e8c1a8832699bc7f001abc7769ba67394
 2022-07-13 14:37:17 +08:00
Adam Shih
d734865c1b Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 238143398
Change-Id: Ic30fa2201c37296a031d0e9ddc518c47c49ccaa2
 2022-07-06 02:58:26 +00:00
Hsiu-Chang Chen
4d4fd451a6 Add sepolicy for vendor_location 
06-25 21:59:57.532  3922  3922 I auditd  : type=1400 audit(0.0:11):
avc: denied { sendto } for comm="loc_mq_clnt"
path="/dev/socket/location/mq/LOWI-SERVER"
scontext=u:r:vendor_location:s0 tcontext=u:r:lowi_server:s0
tclass=unix_dgram_socket permissive=0
06-29 04:30:11.188  8182  8182 I auditd  : type=1400 audit(0.0:1517):
avc: denied { sendto } for comm="loc_mq_clnt"
path="/dev/socket/location/mq/7b2e9924f8-LC"
scontext=u:r:vendor_location:s0 tcontext=u:r:hal_wifi_ext:s0
tclass=unix_dgram_socket permissive=0

Bug: 237467750
Test: avc error is gone
Change-Id: Ic4ff2bdf30b042c08c38b134c6af086d7033511f
 2022-06-29 15:01:15 +08:00
Adam Shih
b9be0516dc update error on ROM 8769316 
Bug: 237467750
Test: SELinuxUncheckedDenialBootTest
Change-Id: I0ad1b8cc2f0d298143de177f49e45418dfd857ac
 2022-06-29 09:50:58 +08:00
Hsiu-Chang Chen
101db9756d Add sepolicy for lowi-server 
06-24 16:58:55.724  9519  9519 I lowi-server: type=1400 audit(0.0:1980):
avc: denied { read write } for path="socket:[69473]" dev="sockfs" ino=69473
scontext=u:r:lowi_server:s0 tcontext=u:r:vendor_location:s0
tclass=unix_dgram_socket permissive=1

Bug: 235281415
Test: avc error is gone
Change-Id: I93615b98c08f6e6e5c3cc182bddcff30e452e103
 2022-06-24 17:07:25 +08:00
Adam Shih
d4e9442a2e Update error on ROM 8693966 
bug: 234311798
bug: 235281134
bug: 235281415
Test: SELinuxUncheckedDenialBootTest
Change-Id: Ib6da45ce6d0c8d0d2668fcc2b3b41cf450c953d2
 2022-06-08 08:33:43 +08:00
Darren Hsu
07f8ea39a1 sepolicy: label more paths for sysfs_wakeup 
Bug: 234311758
Test: forrest apct/device_boot_health_check_extra
Change-Id: I6dab109733062b32e09cfddcbf43cbdc515c07ba
Signed-off-by: Darren Hsu <darrenhsu@google.com>
 2022-06-06 11:13:06 +08:00
sukiliu
7a86c2d697 Update avc error on ROM 8659812 
Bug: 234311757
Bug: 234311798
Bug: 234311675
Bug: 234311758
Test: forrest with boot test w/ SELinux check
Change-Id: I809cd16ca133fcbe5dbac6c7b8f089897fab300c
 2022-05-30 14:10:42 +08:00