tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/private/flags_health_check.te

61 lines
3.6 KiB
Text
Raw Normal View History

sepolicy for server configurable flags Test: manual on device Change-Id: Ibafe1b345489c88a49a7ed3e2e61e5cc5e1880a1
2018-10-26 05:09:55 +02:00
typeattribute flags_health_check coredomain;
init_daemon_domain(flags_health_check)
Move system property rules to private public/property split is landed to selectively export public types to vendors. So rules happening within system should be in private. This introduces private/property.te and moves all allow and neverallow rules from any coredomains to system defiend properties. Bug: 150331497 Test: system/sepolicy/tools/build_policies.sh Change-Id: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe Merged-In: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe (cherry picked from commit 42c7d8966cc5f76c84c001c5af787cbfade736c8)
2020-03-04 09:20:35 +01:00
set_prop(flags_health_check, device_config_boot_count_prop)
SELinux allow listing core_experiements_team_internal namespace Bug: b/291771863 Change-Id: I788e4d5241d824dee249aa8c6d7cb5405c0fac37
2023-07-25 22:15:02 +02:00
set_prop(flags_health_check, device_config_core_experiments_team_internal_prop)
Add SELinux policy for edgetpu_native device_config prop The new android property namespace will store the configurations which are set on the server side and read by the EdgeTpu HAL. Notes: * This CL is similar to nnapi_native CL: https://android-review.git.corp.google.com/c/platform/system/sepolicy/+/1844919 * The read permission of EdgeTpu HAL will be added in another internal CL. Test: mm Bug: 243553703 Bug: 246401730 Change-Id: I5705f679148b313d919f334c51e31f7645aca82a
2023-02-13 22:55:57 +01:00
set_prop(flags_health_check, device_config_edgetpu_native_prop)
Move system property rules to private public/property split is landed to selectively export public types to vendors. So rules happening within system should be in private. This introduces private/property.te and moves all allow and neverallow rules from any coredomains to system defiend properties. Bug: 150331497 Test: system/sepolicy/tools/build_policies.sh Change-Id: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe Merged-In: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe (cherry picked from commit 42c7d8966cc5f76c84c001c5af787cbfade736c8)
2020-03-04 09:20:35 +01:00
set_prop(flags_health_check, device_config_reset_performed_prop)
set_prop(flags_health_check, device_config_runtime_native_boot_prop)
set_prop(flags_health_check, device_config_runtime_native_prop)
set_prop(flags_health_check, device_config_input_native_boot_prop)
sepolicy updates for adding native flag namespace for lmkd sepolicy updates for running lmkd experiments. Bug: 194316048 Signed-off-by: Suren Baghdasaryan <surenb@google.com> Change-Id: I21df3b76cce925639385111bd23adf419f026a65
2021-08-04 21:31:43 +02:00
set_prop(flags_health_check, device_config_lmkd_native_prop)
Move system property rules to private public/property split is landed to selectively export public types to vendors. So rules happening within system should be in private. This introduces private/property.te and moves all allow and neverallow rules from any coredomains to system defiend properties. Bug: 150331497 Test: system/sepolicy/tools/build_policies.sh Change-Id: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe Merged-In: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe (cherry picked from commit 42c7d8966cc5f76c84c001c5af787cbfade736c8)
2020-03-04 09:20:35 +01:00
set_prop(flags_health_check, device_config_netd_native_prop)
Update sepolicy for adding nnapi_native namespace. Test: mm Bug: 201399117 Change-Id: I40a2431b6f5a54deae27fe68f503aff9b99e2793
2021-10-05 16:23:18 +02:00
set_prop(flags_health_check, device_config_nnapi_native_prop)
Move system property rules to private public/property split is landed to selectively export public types to vendors. So rules happening within system should be in private. This introduces private/property.te and moves all allow and neverallow rules from any coredomains to system defiend properties. Bug: 150331497 Test: system/sepolicy/tools/build_policies.sh Change-Id: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe Merged-In: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe (cherry picked from commit 42c7d8966cc5f76c84c001c5af787cbfade736c8)
2020-03-04 09:20:35 +01:00
set_prop(flags_health_check, device_config_activity_manager_native_boot_prop)
set_prop(flags_health_check, device_config_media_native_prop)
Add sepolicy for mglru_native flag namespace Bug: 227651406 Bug: 228525049 Change-Id: I9311b23bd10573fcdb62aba65eb2c6e3d177b467
2022-04-06 23:31:26 +02:00
set_prop(flags_health_check, device_config_mglru_native_prop)
Configs for profcollect system properties Test: build Bug: 79161490 Change-Id: I83362b2089a54c4dcbf8da5a7720da8529ba1e34
2020-10-26 19:29:52 +01:00
set_prop(flags_health_check, device_config_profcollect_native_boot_prop)
Selinux changes for statsd flags Test: manually verified statsd can get values using GetServerConfigurableFlag Bug: 172842175 Change-Id: I05cb2242dc758e32a22ddf30cb6f09088b70f5d4
2020-11-18 04:26:23 +01:00
set_prop(flags_health_check, device_config_statsd_native_prop)
set_prop(flags_health_check, device_config_statsd_native_boot_prop)
Move system property rules to private public/property split is landed to selectively export public types to vendors. So rules happening within system should be in private. This introduces private/property.te and moves all allow and neverallow rules from any coredomains to system defiend properties. Bug: 150331497 Test: system/sepolicy/tools/build_policies.sh Change-Id: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe Merged-In: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe (cherry picked from commit 42c7d8966cc5f76c84c001c5af787cbfade736c8)
2020-03-04 09:20:35 +01:00
set_prop(flags_health_check, device_config_storage_native_boot_prop)
Add sepolicy swcodec native flag namespace. Test: add sepolicy, build, check GetServerConfigurableFlag function Bug: 179286276 Change-Id: Ia16d110900251b3fb3e3959d73524c8814199270
2021-02-11 18:12:51 +01:00
set_prop(flags_health_check, device_config_swcodec_native_prop)
Move system property rules to private public/property split is landed to selectively export public types to vendors. So rules happening within system should be in private. This introduces private/property.te and moves all allow and neverallow rules from any coredomains to system defiend properties. Bug: 150331497 Test: system/sepolicy/tools/build_policies.sh Change-Id: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe Merged-In: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe (cherry picked from commit 42c7d8966cc5f76c84c001c5af787cbfade736c8)
2020-03-04 09:20:35 +01:00
set_prop(flags_health_check, device_config_sys_traced_prop)
set_prop(flags_health_check, device_config_window_manager_native_boot_prop)
set_prop(flags_health_check, device_config_configuration_prop)
Allow connectivity namespace to enable native level access flags. Follow the steps: go/android-native-flag-api-manual Bug: 179099277 Test: m -j Test: manually verify connection to wifi after flash Change-Id: Ieb5355d40aec9ed7a42b7ae5b250b696fcf00810
2021-02-02 11:27:38 +01:00
set_prop(flags_health_check, device_config_connectivity_prop)
Add sepolicy SF native boot namespace. Following go/android-native-flag-api-manual. Bug: 190769260 Test: make. Change-Id: I84fe7e9d046fbbe737f09043589b19e71981f521
2021-06-29 22:48:27 +02:00
set_prop(flags_health_check, device_config_surface_flinger_native_boot_prop)
Update name from trunk_stable_flags to aconfig flags the name "trunk stable" is not recommended to appear in android code base as it is an internal concept. therefore the name change. Bug: b/295379636 Change-Id: Ice045ac00e2d4987221cc6516baa0d013e6e0943
2023-08-16 21:10:13 +02:00
set_prop(flags_health_check, device_config_aconfig_flags_prop)
sepolicy: allow vendor system native experiments property Grant system_server and flags_health_check permission to set the properties that correspond to vendor system native experiments. Bug: 226456604 Test: Build Change-Id: Ib2420cf6eaf1645e7f938db32c93d085dd8950a3
2022-04-12 10:11:53 +02:00
set_prop(flags_health_check, device_config_vendor_system_native_prop)
sepolicy: allow vendor system native boot experiments property Grant system_server and flags_health_check permission to set the properties that correspond to vendor system native boot experiments. Bug: 241730607 Test: Build Merged-In: Idc2334534c2d42a625b451cfce488d7d7a651036 Change-Id: I3e98f1b05058245cad345061d801ecd8de623109
2022-08-08 11:26:22 +02:00
set_prop(flags_health_check, device_config_vendor_system_native_boot_prop)
Allow control of AVF experiments Grant system_server and flags_health_check permission to set the properties that correspond to the AVF experiments. Bug: 192819132 Test: m Change-Id: I0e6fa73187abb4412d07ecfd42c1074b8afa5346
2021-10-29 16:20:02 +02:00
set_prop(flags_health_check, device_config_virtualization_framework_native_prop)
[MTE] Add memory_safety_native_boot namespace Bug: 267234468 Change-Id: I248fdf58a744f0c70a26d6a8f7d4caa0a6ce8edb
2023-02-01 00:47:07 +01:00
set_prop(flags_health_check, device_config_memory_safety_native_boot_prop)
SELinux configuration for memory safety device configs. These will get read by system libraries in arbitrary processes, so it's a public property with read access by `domain`. Bug: 235129567 Change-Id: I1ab880626e4efa2affe90165ce94a404b918849d
2022-06-08 19:45:18 +02:00
set_prop(flags_health_check, device_config_memory_safety_native_prop)
Add SELinux policies for remote_key_provisioning_native namespace. We need to separate out the feature flags in use by remote key provisioning daemon (RKPD). For this, I have set up a new namespace remote_key_provisioning_native. This change adds the SELinux policies to make sure appropriate permissions are present when accessing the feature flag for read/write. Change-Id: I9e73a623f847a058b6236dd0aa370a7f9a9e6da7 Test: TreeHugger
2022-09-29 23:20:22 +02:00
set_prop(flags_health_check, device_config_remote_key_provisioning_native_prop)
SEPolicy updates for camera HAL Updates SEPolicy files to give camera HAL permission to access Android Core Experiment flags. Example denials: 11-30 13:08:33.172 1027 1027 W binder:1027_3: type=1400 audit(0.0:7): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=152 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0 11-30 13:08:33.172 1027 1027 W binder:1027_3: type=1400 audit(0.0:8): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=152 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0 11-30 13:08:33.244 1027 1027 W 3AThreadPool: type=1400 audit(0.0:9): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=152 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0 Bug: 259433722 Test: m Change-Id: I11165b56d7b7e38130698cf86d9739f878580a14
2022-12-09 19:23:37 +01:00
set_prop(flags_health_check, device_config_camera_native_prop)
Add sepolicy config for tethering_u_or_later_native namespace Setup tethering_u_or_later_native namespace Test: adb shell device_config put tethering_u_or_later_native test 1 Test: Read persist.device_config.tethering_u_or_later_native.test property Test: from system server and Tethering.apk Ignore-AOSP-First: topic has CL that updates DeviceConfig Bug: 281944942 Change-Id: I2862974dc1a15f6768a34763bb9e2bad93eaf4ca
2023-05-11 12:36:18 +02:00
set_prop(flags_health_check, device_config_tethering_u_or_later_native_prop)
add next_boot_prop SELinux context to store staged sys prop Bug: b/300111812 Change-Id: I02f1ba586fb6dfec90ae1ff6d4bb6518f294c5d7 Merged-In: I02f1ba586fb6dfec90ae1ff6d4bb6518f294c5d7
2023-09-29 19:28:28 +02:00
set_prop(flags_health_check, next_boot_prop)
Move system property rules to private public/property split is landed to selectively export public types to vendors. So rules happening within system should be in private. This introduces private/property.te and moves all allow and neverallow rules from any coredomains to system defiend properties. Bug: 150331497 Test: system/sepolicy/tools/build_policies.sh Change-Id: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe Merged-In: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe (cherry picked from commit 42c7d8966cc5f76c84c001c5af787cbfade736c8)
2020-03-04 09:20:35 +01:00
Minimize public policy Ideally, public should only contain APIs (types / attributes) for vendor. The other statements like allow/neverallow/typeattributes are regarded as implementation detail for platform and should be in private. Bug: 232023812 Test: m selinux_policy Test: diff <(git diff --staged | grep "^-" | cut -b2- | sort) \ <(git diff --staged | grep "^+" | cut -b2- | sort) Test: remove comments on plat_sepolicy.cil, replace base_typeattr_* to base_typeattr and then compare old and new plat_sepolicy.cil Change-Id: I5e7d2da4465ab0216de6bacdf03077d37f6ffe12
2024-03-27 09:18:41 +01:00
allow flags_health_check server_configurable_flags_data_file:dir rw_dir_perms;
allow flags_health_check server_configurable_flags_data_file:file create_file_perms;
###
### Neverallow rules
###
# server_configurable_flags_data_file is used for storing whether server configurable flags which
# have been reset during current booting. Mistakenly modified by unrelated components can
# cause bad server configurable flags synced back to device.
neverallow { domain -init -flags_health_check } server_configurable_flags_data_file:file no_w_file_perms;
Move system property rules to private public/property split is landed to selectively export public types to vendors. So rules happening within system should be in private. This introduces private/property.te and moves all allow and neverallow rules from any coredomains to system defiend properties. Bug: 150331497 Test: system/sepolicy/tools/build_policies.sh Change-Id: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe Merged-In: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe (cherry picked from commit 42c7d8966cc5f76c84c001c5af787cbfade736c8)
2020-03-04 09:20:35 +01:00
# system property device_config_boot_count_prop is used for deciding when to perform server
# configurable flags related disaster recovery. Mistakenly set up by unrelated components can, at a
# wrong timing, trigger server configurable flag related disaster recovery, which will override
# server configured values of all flags with default values.
neverallow { domain -init -flags_health_check } device_config_boot_count_prop:property_service set;
# system property device_config_reset_performed_prop is used for indicating whether server
# configurable flags have been reset during booting. Mistakenly modified by unrelated components can
# cause bad server configurable flags synced back to device.
neverallow { domain -init -flags_health_check } device_config_reset_performed_prop:property_service set;
Reference in a new issue Copy permalink