google-gs201/android_device_google_lynx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
48 Commits 2 Branches 0 Tags
282e204a94c3874e51e63d345d44e3e9acf3fd28
Commit Graph

48 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Aaron Tsai
282e204a94 Fix avc denied for hal_radioext_default am: 11348d7e76 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/19515072

Change-Id: I5dcb726d8e8bf6cdb5d86d5485f3a48555490657
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-08-15 03:48:37 +00:00
Aaron Tsai
11348d7e76 Fix avc denied for hal_radioext_default 
05-30 13:13:30.868   867   867 I auditd  : type=1400 audit(0.0:21): avc: denied { call } for comm="HwBinder:867_1" scontext=u:r:hal_radioext_default:s0 tcontext=u:r:hal_bluetooth_default:s0 tclass=binder permissive=0

Bug: 234311798
Test: verified with the forrest ROM and error log gone
Change-Id: I0195fe2d8e81ea0149255524cfc047540159281b
 2022-08-04 07:19:10 +08:00
Hsiu-Chang Chen
ccea61be5a wifi: correct label wlan0/p2p0/wifi-aware0 device as sysfs_net am: 9ac637312b 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/19493414

Change-Id: Ib49c753a7f85a1f49ae5f8641fe39f0cfd6ade98
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-08-02 23:43:15 +00:00
Hsiu-Chang Chen
9ac637312b wifi: correct label wlan0/p2p0/wifi-aware0 device as sysfs_net 
Bug: 239657967
Test: NetdSELinuxTest#CheckProperMTULabels
Change-Id: I31db1d2110b2c18cf12a5cfa9b13e8c6dff09d59
 2022-08-02 08:54:18 +00:00
Darren Hsu
73723cd920 sepolicy: allow hal_power_stats to read wifi sysfs and property am: 4e2b651fdc 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/19453449

Change-Id: I7d57b3c5a4e0db4b87f135b114fd29489b84c7f4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-07-29 04:01:22 +00:00
Darren Hsu
4e2b651fdc sepolicy: allow hal_power_stats to read wifi sysfs and property 
avc: denied { read } for name="power_stats" dev="sysfs"
ino=114517 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

avc: denied { read } for name="u:object_r:wifi_hal_prop:s0"
dev="tmpfs" ino=371 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:wifi_hal_prop:s0 tclass=file permissive=0

Bug: 240391946
Test: get bugreport and make sure no avc denials related to
Test: hal_power_stats
Change-Id: I3be32eb4e61926c3abd24c67e7dab9b4056bf00a
Signed-off-by: Darren Hsu <darrenhsu@google.com>
 2022-07-28 15:48:41 +08:00
Hsiu-Chang Chen
0e5e41f7cd Add sepolicy for hal_wifi_ext am: 0c59021e58 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/19429449

Change-Id: I408de5e4f42976fadc6c7bc2418e21e6ccc51564
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-07-27 08:56:27 +00:00
Hsiu-Chang Chen
0c59021e58 Add sepolicy for hal_wifi_ext 
07-27 11:58:09.569   869   869 I auditd  : type=1400 audit(0.0:2682598):
avc: denied { read } for comm="wifi_ext@1.0-se" name="driverdump" dev="proc"
ino=4026535980 scontext=u:r:hal_wifi_ext:s0 tcontext=u:object_r:proc:s0
tclass=file permissive=0

Bug: 239656339
Test: avc error is gone
Change-Id: Icf816897780fecc1bb35696e492e6fa2661abc20
 2022-07-27 08:27:21 +00:00
Adam Shih
9d6f14ddee Update SELinux error am: 20deb31861 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/19378710

Change-Id: I68d81a43a344c43bd725b95f0fc15dda8e90b842
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-07-22 04:13:00 +00:00
Adam Shih
20deb31861 Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 239887174
Change-Id: I4034d5ae64004142e312fd534d436014bfc0fe5b
 2022-07-22 10:34:53 +08:00
Cheney Ni
749b8b461c Bluetooth: Allow QTI HAL service to access its logbuffer am: 49a3cfae3a 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/19321140

Change-Id: I9eee87934ce2db6b5a05098f977a83b2f5deb209
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-07-21 02:43:00 +00:00
Cheney Ni
49a3cfae3a Bluetooth: Allow QTI HAL service to access its logbuffer 
Bug: 229691092
Test: Pass file permission check
Change-Id: Ic97bf3b23c452d20e5e32f3bafe2f6b2c5d2be3b
 2022-07-20 19:05:20 +00:00
Robin Peng
b0cce19f45 Revert "Update SELinux error" am: b51016a53f 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/19321139

Change-Id: Idb65cad0d77e120d560d295d192ff18f9a7a9ede
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-07-19 01:36:08 +00:00
Robin Peng
b51016a53f Revert "Update SELinux error" 
This reverts commit 74af0fe9e6.

Reason to revert: issue has been fixed
Bug: 239364576
Bug: 239364745
Signed-off-by: Robin Peng <robinpeng@google.com>
Change-Id: Iaef3454b376a7d5266b72f242b0ca94c77e1c1fe
 2022-07-18 22:28:45 +08:00
Adam Shih
0d7906333b Update SELinux error am: 74af0fe9e6 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/19320248

Change-Id: I670ce952cb2a6afeadad4d03899d2381be8ef32f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-07-18 07:45:48 +00:00
Adam Shih
74af0fe9e6 Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 239364745
Change-Id: I65e5ac420fe7c94cfb08d4a9e1f1191152b49754
 2022-07-18 10:55:40 +08:00
Adam Shih
7d65c8faf0 Update SELinux error am: c6daa1aa2e 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/19279864

Change-Id: I6c68684be7ab31b5621c32ddabc3cc1b33ea68f0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-07-15 01:01:45 +00:00
Adam Shih
c6daa1aa2e Update SELinux error 
Bug: 234547283
Change-Id: I9caeeee12b5c8f29d9962cfc93d4902115c99b90
 2022-07-15 00:30:34 +00:00
Adam Shih
4aa0579e61 Update SELinux error am: 683104a6a8 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/19266001

Change-Id: I6b6f39a51d34f43698db1ce68de357ff3b3eec23
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-07-13 11:53:39 +00:00
Adam Shih
683104a6a8 Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 238837168
Change-Id: Ic852fa8e8c1a8832699bc7f001abc7769ba67394
 2022-07-13 14:37:17 +08:00
Adam Shih
c048370daa Update SELinux error am: d734865c1b 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/19180811

Change-Id: I41655f2b3ceb341aa7c9d4a25283c99ace9f7da3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-07-06 09:34:02 +00:00
Adam Shih
d734865c1b Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 238143398
Change-Id: Ic30fa2201c37296a031d0e9ddc518c47c49ccaa2
 2022-07-06 02:58:26 +00:00
Hsiu-Chang Chen
cf74d79ff1 Add sepolicy for vendor_location am: 4d4fd451a6 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/19114548

Change-Id: Ib403808d56903d1468be780537c671cd9f6cfa36
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-06-30 02:35:05 +00:00
Adam Shih
d971b50566 update error on ROM 8769316 am: b9be0516dc 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/19114547

Change-Id: I17fcaeb5444ba24b6d83f7b5c3c43646c8ee6664
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-06-29 07:22:38 +00:00
Hsiu-Chang Chen
4d4fd451a6 Add sepolicy for vendor_location 
06-25 21:59:57.532  3922  3922 I auditd  : type=1400 audit(0.0:11):
avc: denied { sendto } for comm="loc_mq_clnt"
path="/dev/socket/location/mq/LOWI-SERVER"
scontext=u:r:vendor_location:s0 tcontext=u:r:lowi_server:s0
tclass=unix_dgram_socket permissive=0
06-29 04:30:11.188  8182  8182 I auditd  : type=1400 audit(0.0:1517):
avc: denied { sendto } for comm="loc_mq_clnt"
path="/dev/socket/location/mq/7b2e9924f8-LC"
scontext=u:r:vendor_location:s0 tcontext=u:r:hal_wifi_ext:s0
tclass=unix_dgram_socket permissive=0

Bug: 237467750
Test: avc error is gone
Change-Id: Ic4ff2bdf30b042c08c38b134c6af086d7033511f
 2022-06-29 15:01:15 +08:00
Adam Shih
b9be0516dc update error on ROM 8769316 
Bug: 237467750
Test: SELinuxUncheckedDenialBootTest
Change-Id: I0ad1b8cc2f0d298143de177f49e45418dfd857ac
 2022-06-29 09:50:58 +08:00
Hsiu-Chang Chen
7b4068ae7f Add sepolicy for lowi-server am: 101db9756d 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/19035012

Change-Id: I246208d36558ff5c1e18f3d635d0e9b2ce8294d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-06-28 01:46:49 +00:00
Hsiu-Chang Chen
101db9756d Add sepolicy for lowi-server 
06-24 16:58:55.724  9519  9519 I lowi-server: type=1400 audit(0.0:1980):
avc: denied { read write } for path="socket:[69473]" dev="sockfs" ino=69473
scontext=u:r:lowi_server:s0 tcontext=u:r:vendor_location:s0
tclass=unix_dgram_socket permissive=1

Bug: 235281415
Test: avc error is gone
Change-Id: I93615b98c08f6e6e5c3cc182bddcff30e452e103
 2022-06-24 17:07:25 +08:00
timothywang
08847036fe Add sepolicy to enable camera vendor property am: 9a67905169 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/18880808

Change-Id: Ib5edd089f801cd56b4686ef0dc5d1d23354dc38e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-06-15 05:07:05 +00:00
timothywang
9a67905169 Add sepolicy to enable camera vendor property 
Bug: 234324271
Test: adb shell getprop
Change-Id: I6a0b344880deeb767df97136c42b2fb86668f39d
 2022-06-14 10:30:10 +08:00
Adam Shih
1a1922dad5 Update error on ROM 8693966 am: d4e9442a2e 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/18771008

Change-Id: I6aa4ef97fa8f9aed1a0774747e9be02bcbe110fc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-06-08 02:15:26 +00:00
Adam Shih
d4e9442a2e Update error on ROM 8693966 
bug: 234311798
bug: 235281134
bug: 235281415
Test: SELinuxUncheckedDenialBootTest
Change-Id: Ib6da45ce6d0c8d0d2668fcc2b3b41cf450c953d2
 2022-06-08 08:33:43 +08:00
Darren Hsu
05241d9245 sepolicy: label more paths for sysfs_wakeup am: 07f8ea39a1 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/18752890

Change-Id: I436110dabfab635dd65d4214bb6a2e0e71db401b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-06-07 02:13:02 +00:00
Darren Hsu
07f8ea39a1 sepolicy: label more paths for sysfs_wakeup 
Bug: 234311758
Test: forrest apct/device_boot_health_check_extra
Change-Id: I6dab109733062b32e09cfddcbf43cbdc515c07ba
Signed-off-by: Darren Hsu <darrenhsu@google.com>
 2022-06-06 11:13:06 +08:00
Jack Wu
4fadc88a01 Add sepolicy for P9222 WLC power_supply am: 2d50edbc64 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/18664951

Change-Id: Ic8e18081f462dd021a78606e691ca3ef9eac6f38
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-06-01 02:27:43 +00:00
Jack Wu
2d50edbc64 Add sepolicy for P9222 WLC power_supply 
05-30 05:13:03.096   836   836 I auditd  : type=1400 audit(0.0:6): avc: denied { getattr } for comm="android.hardwar" path="/sys/devices/platform/10da0000.hsi2c/i2c-6/i2c-p9222/power_supply/wireless/capacity" dev="sysfs" ino=71270 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
05-30 05:13:03.100   836   836 I auditd  : type=1400 audit(0.0:7): avc: denied { read } for comm="android.hardwar" name="type" dev="sysfs" ino=71272 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 234311757
Test: build ok, no avc denied
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I0fb296a9472eda7ff5f2babfea1c769caea525e1
 2022-05-31 13:08:07 +08:00
sukiliu
43f242aeae Update avc error on ROM 8659812 am: 7a86c2d697 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/18658830

Change-Id: I89564d89609ffc316c42b228edd2a54f1248a568
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-05-31 03:25:09 +00:00
sukiliu
7a86c2d697 Update avc error on ROM 8659812 
Bug: 234311757
Bug: 234311798
Bug: 234311675
Bug: 234311758
Test: forrest with boot test w/ SELinux check
Change-Id: I809cd16ca133fcbe5dbac6c7b8f089897fab300c
 2022-05-30 14:10:42 +08:00
Hsiu-Chang Chen
4adec5414b Add sepolicy for pixellogger am: 63cd5c6143 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/lynx-sepolicy/+/17906605

Change-Id: I813c35c619d4a7d4d6d674f00ab723dc4b955995
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-05-05 05:08:19 +00:00
Hsiu-Chang Chen
63cd5c6143 Add sepolicy for pixellogger 
04-25 11:36:17.795  4101  4101 I auditd  : type=1400 audit(0.0:6339): avc: denied { search } for comm="LoggingService" name="wifi" dev="dm-40" ino=338 scontext=u:r:logger_app:s0:c229,c256,c512,c768 tcontext=u:object_r:vendor_wifi_vendor_data_file:s0 tclass=dir permissive=1 app=com.android.pixellogger
04-25 11:36:17.799   863   863 I auditd  : type=1400 audit(0.0:6340): avc: denied { search } for comm="wifi_ext@1.0-se" name="wifi" dev="dm-40" ino=338 scontext=u:r:hal_wifi_ext:s0 tcontext=u:object_r:vendor_wifi_vendor_data_file:s0 tclass=dir permissive=1

Bug: 230280450
Test: Pixelloger can collect WLAN logs
Change-Id: Id95e4132f2814deb1fbfb307568a4ece87a28611
 2022-04-25 11:49:43 +08:00
Hsiu-Chang Chen
374602a559 wifi: Add sepolicy for LOWI tools 
Add sepolicy rules for LOWI tools including loc_launcher and
lowi-server which are necessary for NAN and RTT

Bug: 223296149
Test: loc_launcher and lowi-server start automatically
Change-Id: I915be13fa715de85de91c30e0605f1e8e9d578f4
 2022-03-15 09:37:05 +00:00
Tai Kuo
1663eff382 Setup sysfs_vibrator 
Bug: 220068530
Test: dumpsys android.hardware.vibrator.IVibrator/default
Change-Id: Icd8a7d5db2277c72be9a72723434145db4eecb02
 2022-03-07 11:27:09 +08:00
Hsiu-Chang Chen
069de3333d wifi: Add sepolicy for qcom driver control interface 
01-06 11:55:38.816   796   796 I auditd  : type=1400 audit(0.0:281): avc: denied { write } for comm="wifi_ext@1.0-se" name="wlan" dev="tmpfs" ino=984 scontext=u:r:hal_wifi_ext:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1
01-06 11:55:38.820   796   796 I auditd  : type=1400 audit(0.0:282): avc: denied { open } for comm="wifi_ext@1.0-se" path="/dev/wlan" dev="tmpfs" ino=984 scontext=u:r:hal_wifi_ext:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1

Bug: 209934729
Test: Basic function tests, SSR tests
Change-Id: Id6afd0580f8792eeb7ef8a25d42724ec79696875
 2022-01-10 14:45:30 +08:00
horngchuang
a069c07972 Add l10 specific camera component sepolicy settings 
Also, move those settings from whitechapel_pro common folder

Bug: 210598444
Test: build okay
Change-Id: Ie96dd9e6da5bdddd62d2ed9f920cb49daa1d74eb
 2022-01-10 10:52:06 +08:00
Joel Galenson
99f01b584d Include core policy OWNERS 
Test: None
Change-Id: I75f26e14abc35f1bc5fb143491ce9419d4cd13f4
 2021-12-21 07:38:55 -08:00
Cheney Ni
45b906133f Bluetooth: Add Sepolicy for QTI default HAL (1/2) 
Bug: 202113218
Test: manually
Change-Id: I589b5c1df9fad6541799c1ba370fe2359cc31831
 2021-12-16 09:48:33 +08:00
Cyan_Hsieh
401c431fcd Initial device lynx sepolicy 
Bug: 202250383
Change-Id: I7b096bdb87ea45760bbcf929cd5757e159952e75
 2021-11-01 15:28:54 +08:00
Bill Rassieur
f60a67678a Initial empty repository 2021-10-13 10:14:46 -07:00