Commit graph

23749 commits

Author SHA1 Message Date
Automerger Merge Worker
0a4efab2c8 Merge "Add policies for permission APEX data directory." am: 4f0bf97b41 am: 587e49e0be am: 2f9d693267
Change-Id: I9371d5e90bae97ce272d4619655864f232c5c5a3
2020-01-18 00:15:31 +00:00
Automerger Merge Worker
2f9d693267 Merge "Add policies for permission APEX data directory." am: 4f0bf97b41 am: 587e49e0be
Change-Id: I19c64ad401b5e9c3fbe1831698dbedade9c1e542
2020-01-18 00:04:29 +00:00
Hai Zhang
587e49e0be Merge "Add policies for permission APEX data directory."
am: 4f0bf97b41

Change-Id: I0b0829f6209582b84e02a9c499a74dbd1c428106
2020-01-17 15:52:43 -08:00
Treehugger Robot
4f0bf97b41 Merge "Add policies for permission APEX data directory." 2020-01-17 23:45:54 +00:00
Automerger Merge Worker
4ba36837ee Merge "Add rules for an unix domain socket for system_server" am: d1b9526ea0 am: 0542be7d19 am: ba4e8fd064
Change-Id: If8f56000150447ef7930161f8c5d24c03525f483
2020-01-17 22:30:22 +00:00
Automerger Merge Worker
ba4e8fd064 Merge "Add rules for an unix domain socket for system_server" am: d1b9526ea0 am: 0542be7d19
Change-Id: I3bd4db791a647e3c168075d83a48eb80e62f5e7b
2020-01-17 22:19:40 +00:00
Jing Ji
0542be7d19 Merge "Add rules for an unix domain socket for system_server"
am: d1b9526ea0

Change-Id: I0ceb427b6db004764b234db6939d5a40735c4390
2020-01-17 12:50:03 -08:00
Automerger Merge Worker
6304af9451 Merge "Allow adb start/stop mdnsd via ctl.start/stop" into qt-qpr1-dev am: 2192ec6223 am: b354eba19c
Change-Id: I9f38a83ea405a06b2016dcbf33bf70b965982ae3
2020-01-17 19:00:49 +00:00
Jing Ji
d1b9526ea0 Merge "Add rules for an unix domain socket for system_server" 2020-01-17 18:53:19 +00:00
Automerger Merge Worker
b354eba19c Merge "Allow adb start/stop mdnsd via ctl.start/stop" into qt-qpr1-dev am: 2192ec6223
Change-Id: I1bafff0ae8087a3c72209eb2a6edcaddc1e5d463
2020-01-17 18:44:15 +00:00
TreeHugger Robot
2192ec6223 Merge "Allow adb start/stop mdnsd via ctl.start/stop" into qt-qpr1-dev 2020-01-17 18:31:09 +00:00
Automerger Merge Worker
ac19fd1fba Merge "Rename the binder cache key for hasSystemFeature()" am: 2af7e0a1fb am: 0dd7c6d30d am: d3ec89c9a4
Change-Id: I6dee531974e0b3908409fc22398a13bc2e8b4126
2020-01-17 15:55:03 +00:00
Automerger Merge Worker
d3ec89c9a4 Merge "Rename the binder cache key for hasSystemFeature()" am: 2af7e0a1fb am: 0dd7c6d30d
Change-Id: I001c7175432566937548f254ccd7185358838726
2020-01-17 15:45:15 +00:00
Automerger Merge Worker
0dd7c6d30d Merge "Rename the binder cache key for hasSystemFeature()" am: 2af7e0a1fb
Change-Id: Ibf149b061871b27f7f7b0eb2cd3eb2f2443ead49
2020-01-17 15:35:45 +00:00
Lee Shombert
2af7e0a1fb Merge "Rename the binder cache key for hasSystemFeature()" 2020-01-17 15:24:59 +00:00
Automerger Merge Worker
33ab8cc64c Merge "priv_app: Remove permission to read from /data/anr/traces.txt" am: 2e5ce26f17 am: 33f9e754c9 am: 872c4b45fa
Change-Id: I331958d39217c4373ffb851e2ebd54c4d8c24f5f
2020-01-17 03:48:48 +00:00
Automerger Merge Worker
bf901f86b8 Merge "priv_app: Remove rules for ota_package_file" am: 71be259d73 am: 0f41baddc1 am: bb1f2cc7c2
Change-Id: I540a4a3c532727bddb8100cfbfc931f1a33b6041
2020-01-17 03:48:22 +00:00
Automerger Merge Worker
71f99e2eae Use vndk_prop for old vndk properties am: 291d6b379d am: ab605560e5 am: 03722182c2
Change-Id: If429c741d07734dde446beed088bcbf5912af03d
2020-01-17 03:47:47 +00:00
Automerger Merge Worker
6cd478a281 Merge "access_vectors: remove incorrect comment about mac_admin" am: abba8e600e am: 310719d3ea am: 916ce82fe2
Change-Id: Ie899cd8e77651cb8fff71f5b5bf7a8f04b9d02f2
2020-01-17 03:47:10 +00:00
Automerger Merge Worker
41acac375f Merge "Add selinux contexts for system_config_service" am: 13722174b7 am: 4d6ca6c90f am: f3d9a24c68
Change-Id: Idee54847e68ab5dd61802f55e9b769ca216c6e62
2020-01-17 03:46:11 +00:00
Automerger Merge Worker
872c4b45fa Merge "priv_app: Remove permission to read from /data/anr/traces.txt" am: 2e5ce26f17 am: 33f9e754c9
Change-Id: I33e72a8c28031c3c97f60ea2258c646def8bdcf8
2020-01-17 03:39:26 +00:00
Automerger Merge Worker
bb1f2cc7c2 Merge "priv_app: Remove rules for ota_package_file" am: 71be259d73 am: 0f41baddc1
Change-Id: I95a647b21b857241bc02d4fe64062a73184d64c3
2020-01-17 03:39:12 +00:00
Automerger Merge Worker
03722182c2 Use vndk_prop for old vndk properties am: 291d6b379d am: ab605560e5
Change-Id: If7e4ee09b5a9a9f350152e482ead5f0fb79f31a4
2020-01-17 03:38:30 +00:00
Automerger Merge Worker
916ce82fe2 Merge "access_vectors: remove incorrect comment about mac_admin" am: abba8e600e am: 310719d3ea
Change-Id: I69b794db915f57d9d68ee04a86fe4cb84415634f
2020-01-17 03:37:39 +00:00
Automerger Merge Worker
f3d9a24c68 Merge "Add selinux contexts for system_config_service" am: 13722174b7 am: 4d6ca6c90f
Change-Id: I7cf77f5d717bb901379483bb1437f45e9234bd49
2020-01-17 03:36:14 +00:00
Automerger Merge Worker
33f9e754c9 Merge "priv_app: Remove permission to read from /data/anr/traces.txt" am: 2e5ce26f17
Change-Id: Ibaa103332a499d49b31f168deb6b7a0097f5de94
2020-01-17 03:28:05 +00:00
Automerger Merge Worker
0f41baddc1 Merge "priv_app: Remove rules for ota_package_file" am: 71be259d73
Change-Id: I6b580f34e0c035393bb0229f5bd1658795193a9b
2020-01-17 03:27:40 +00:00
Automerger Merge Worker
ab605560e5 Use vndk_prop for old vndk properties am: 291d6b379d
Change-Id: I051e06e9b8f0a49bf8cf8b58e1f18f13ce4853a6
2020-01-17 03:26:47 +00:00
Automerger Merge Worker
310719d3ea Merge "access_vectors: remove incorrect comment about mac_admin" am: abba8e600e
Change-Id: I21e45bcfd48abb4a0fc85e6451e1fa73f7907e9e
2020-01-17 03:25:38 +00:00
Automerger Merge Worker
4d6ca6c90f Merge "Add selinux contexts for system_config_service" am: 13722174b7
Change-Id: Iaf58372d5922403a14c7870571f097438d94425e
2020-01-17 03:23:57 +00:00
Treehugger Robot
2e5ce26f17 Merge "priv_app: Remove permission to read from /data/anr/traces.txt" 2020-01-17 01:10:45 +00:00
Treehugger Robot
71be259d73 Merge "priv_app: Remove rules for ota_package_file" 2020-01-17 00:57:15 +00:00
Justin Yun
291d6b379d Use vndk_prop for old vndk properties
For vndk related properties, use vndk_prop context.
vndk_prop can be defined by 'init' and 'vendor_init', but free to
read by any processes.

Bug: 144534640
Test: check boot to see if the VNDK properties are readable
Change-Id: Ifa2bb0ce6c301ea2071e25ac4f7e569ea3ce5d83
2020-01-17 00:24:20 +00:00
Treehugger Robot
abba8e600e Merge "access_vectors: remove incorrect comment about mac_admin" 2020-01-17 00:22:26 +00:00
Jing Ji
2b12440ff7 Add rules for an unix domain socket for system_server
System_server will listen on incoming packets from zygotes.

Bug: 136036078
Test: atest CtsAppExitTestCases:ActivityManagerAppExitInfoTest
Change-Id: I42feaa317615b90c5277cd82191e677548888a71
2020-01-16 16:09:48 -08:00
Hai Zhang
f301cd299b Add policies for permission APEX data directory.
Bug: 136503238
Test: presubmit
Change-Id: I636ab95070df4c58cf2c98b395d99cb807a7f243
2020-01-16 16:08:55 -08:00
Automerger Merge Worker
ac2dd1ad0d Merge "stable aidl Power HAL policy" am: fbe4afa7aa am: 4cb024e790 am: 03a1842686
Change-Id: I83dd34152278d0b38ee50525950e06f7d77925d7
2020-01-16 23:09:09 +00:00
Automerger Merge Worker
63ec9ef076 Merge "Configure SELinux for PowerManager Caches" am: fc52615d13 am: 6bc4c6660c am: 2b4f17279d
Change-Id: I2fcc93239e30331cd6b91787eb8dc8f2a3f6220a
2020-01-16 23:08:55 +00:00
Automerger Merge Worker
03a1842686 Merge "stable aidl Power HAL policy" am: fbe4afa7aa am: 4cb024e790
Change-Id: Ibd3e4024f15d0d488d3cda544e524efad2ac74f5
2020-01-16 22:57:07 +00:00
Automerger Merge Worker
2b4f17279d Merge "Configure SELinux for PowerManager Caches" am: fc52615d13 am: 6bc4c6660c
Change-Id: I4f605761fa3faa9b92f6535b9f3f595cbb304d8b
2020-01-16 22:56:54 +00:00
Lee Shombert
d3625cdcec Rename the binder cache key for hasSystemFeature()
The code that uses the property has not been committed, so this change
has no impact on the codebase.

Bug: 140788621

Test: build an image that combines this change with the client code
and boot a phone.  Verify that there are no policy violations.

Change-Id: Ie6c1a791578c61adae5b71a38e61a2f5b20bb817
2020-01-16 14:56:27 -08:00
Ashwini Oruganti
565c685b35 priv_app: Remove permission to read from /data/anr/traces.txt
We added an auditallow for this permission on 12/17/2019, and have not
seen any recent logs for this in go/sedenials. No other priv-app should
rely on this now that gmscore is running in its own domain.

Bug: 147833123
Test: TH
Change-Id: I96f810a55e0eb8f3778aea9598f6437de0f65c7f
2020-01-16 14:42:43 -08:00
Treehugger Robot
13722174b7 Merge "Add selinux contexts for system_config_service" 2020-01-16 22:41:42 +00:00
Wei Wang
4cb024e790 Merge "stable aidl Power HAL policy"
am: fbe4afa7aa

Change-Id: Id2791733129f015b4364774ebc3f79b84b043dc4
2020-01-16 14:40:30 -08:00
Collin Fijalkovich
6bc4c6660c Merge "Configure SELinux for PowerManager Caches"
am: fc52615d13

Change-Id: I135086378fdb132480065629655f27264cbbd524
2020-01-16 14:40:05 -08:00
Wei Wang
fbe4afa7aa Merge "stable aidl Power HAL policy" 2020-01-16 22:35:42 +00:00
Ashwini Oruganti
d61b0ce1bc priv_app: Remove rules for ota_package_file
We added auditallows for these permissions on 12/16/2019, and have not
seen any recent logs for this in go/sedenials. No other priv-app should
rely on this now that gmscore is running in its own domain.

Bug: 147833123
Test: TH
Change-Id: I4789b29462ef561288aeaabbdb1e57271d5fcd2a
2020-01-16 14:20:12 -08:00
Collin Fijalkovich
fc52615d13 Merge "Configure SELinux for PowerManager Caches" 2020-01-16 19:34:10 +00:00
Automerger Merge Worker
da1f8e6709 Merge "Fix spelling of 'system' for android.hardware.identity@1.0-service.example" am: 89277a412d am: 91c15d1bc2 am: 550e7f28dd
Change-Id: I045e0fa2164a04541093637a72940ce3ec8e5982
2020-01-16 19:15:18 +00:00
Automerger Merge Worker
550e7f28dd Merge "Fix spelling of 'system' for android.hardware.identity@1.0-service.example" am: 89277a412d am: 91c15d1bc2
Change-Id: I51e479beeafdba3e49078efb79c46fcfa4cae116
2020-01-16 19:11:28 +00:00