tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
24355 commits 1 branch 0 tags 50 MiB
Commit graph

24355 commits

This branch
This branch
All branches
Author SHA1 Message Date
Inseob Kim
5d1abc86bb Merge "Add wifi_hal_prop and remove exported_wifi_prop" am: e50027bc57 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1364668

Change-Id: Ie808dc4eef66b15187b860e7f2a29b004561479d
 2020-07-20 01:32:43 +00:00
Inseob Kim
e50027bc57 Merge "Add wifi_hal_prop and remove exported_wifi_prop" 2020-07-20 01:17:51 +00:00
Yifan Hong
909178164a Merge changes from topic "odm_dlkm" am: 8917f7996f 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1363343

Change-Id: I2e4fdbcc6498addf69614d6f8c17b19154c27d52
 2020-07-17 22:27:18 +00:00
Yifan Hong
f8685a9487 Fix path for vendor_dlkm build prop. am: 850a231fa2 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1363342

Change-Id: I5f222b0149f364f15d28eb718cd81db941dac681
 2020-07-17 22:27:15 +00:00
Yifan Hong
8917f7996f Merge changes from topic "odm_dlkm" 
* changes:
  Correct labels on files / props in odm_dlkm.
  Fix path for vendor_dlkm build prop.
 2020-07-17 22:05:26 +00:00
Amy Zhang
71968d9d2c Merge "Add Tuner HAL 1.1 service into the default tuner domain" am: ce67a16be1 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1364041

Change-Id: I686a04340cd830f4cb236bd5fd9347490949713f
 2020-07-17 18:37:36 +00:00
Amy Zhang
ce67a16be1 Merge "Add Tuner HAL 1.1 service into the default tuner domain" 2020-07-17 18:16:30 +00:00
Inseob Kim
3dbf3d8ac8 Add wifi_hal_prop and remove exported_wifi_prop 
To remove bad context names "exported*_prop"

Bug: 155844385
Test: boot and see no denials
Change-Id: Icd30be64355699618735d4012461835eca8cd651
Merged-In: Icd30be64355699618735d4012461835eca8cd651
(cherry picked from commit 37c2d4d0c9)
(cherry picked from commit 3b66e9b9f8)
 2020-07-17 17:38:13 +09:00
Inseob Kim
05b94a39ac Remove redundant get_prop rule am: d2c0b7bf9e 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1364659

Change-Id: I6e0db8cd0f746e6fa21997134fe09253fc15090c
 2020-07-16 18:07:41 +00:00
Inseob Kim
d2c0b7bf9e Remove redundant get_prop rule 
The rule "get_prop(coredomain, vts_status_prop)" is duplicated by
mistake. It's already in coredomain.te, and it should be deleted from
app.te

Bug: N/A
Test: m selinux_policy
Change-Id: I816c8da74940fc6ccdd50fe377aa54eae36237b4
 2020-07-16 16:10:57 +00:00
Inseob Kim
93d1139bdc Merge "Add property contexts for vts props" am: 98fe6847bd 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1361757

Change-Id: I6ca056b0816bc4e3465e6c61800746c7071bb9f7
 2020-07-16 11:50:50 +00:00
Inseob Kim
98fe6847bd Merge "Add property contexts for vts props" 2020-07-16 10:24:08 +00:00
Inseob Kim
212e2b621a Add property contexts for vts props 
vts_config_prop and vts_status_prop are added to remove exported*_prop.
ro.vts.coverage becomes vts_config_prop, and vts.native_server.on
becomes vts_status_prop.

Bug: 155844385
Test: Run some vts and then getprop, e.g. atest \
      VtsHalAudioEffectV4_0TargetTest && adb shell getprop
Test: ro.vts.coverage is read without denials
Change-Id: Ic3532ef0ae7083db8d619d80e2b73249f87981ce
 2020-07-16 16:26:17 +09:00
Amy Zhang
2e148351af Add Tuner HAL 1.1 service into the default tuner domain 
Test: cuttlefish, atest VtsHalTvTunerV1_1TargetTest
Bug: b/159058358
Change-Id: I67fbfb29c3097953e6d30d17a8d40d586162088f
 2020-07-15 18:25:48 -07:00
Yifan Hong
850a231fa2 Fix path for vendor_dlkm build prop. 
vendor_dlkm build props are loaded from /vendor_dlkm/etc/build.prop.
Test: none
Bug: 154633114

Change-Id: Ic96ebba2486c891fb05431265e477184353bd7d0
 2020-07-15 17:16:40 -07:00
Yifan Hong
dc9c4561f5 Correct labels on files / props in odm_dlkm. 
All files under odm_dlkm are tagged vendor_file.
All build props for odm_dlkm are mapped as build_vendor_prop.

Test: build and
    `ls /odm_dlkm -lZ`
    `adb shell getprop -Z | grep odm_dlkm`

Bug: 154633114

Change-Id: Ifca69d0b7a8da945910a9cb0fa907735cd866f12
 2020-07-15 17:16:40 -07:00
Tom Cherry
f241424f67 Merge "add logd. as logd_prop" am: aed2a79fb5 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1362342

Change-Id: Ifb77b2ff1d8b0069edada00e76b0d0f796a2492e
 2020-07-15 23:13:53 +00:00
Tom Cherry
aed2a79fb5 Merge "add logd. as logd_prop" 2020-07-15 22:58:33 +00:00
Calin Juravle
150e00dd75 Fix sepolicy for secondary dex files am: de7244cf23 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1360752

Change-Id: I42e7ae0da2d566c983f706194510ec3b543af925
 2020-07-15 18:42:58 +00:00
Calin Juravle
de7244cf23 Fix sepolicy for secondary dex files 
dexoptanalyzer need read access on the secondary
dex files and of the main apk files in order to successfully evaluate
and optimize them.

Example of denial:
audit(0.0:30): avc: denied { read } for
path="/data/app/~~Zux_isdY0NBkRWPp01oAVg==/com.example.secondaryrepro-wH9zezMSCzIjcKdIMtrw7A==/base.apk"
dev="vdc" ino=40966 scontext=u:r:dexoptanalyzer:s0
tcontext=u:object_r:apk_data_file:s0 tclass=file permissive=0
app=com.example.secondaryrepro

Test: adb shell cmd package compile -r bg-dexopt --secondary-dex app
Bug: 160471235
Bug: 160351055
Change-Id: Id0bda5237d3ce1620d4f6ee89595836b4e1f3abf
 2020-07-15 16:43:40 +00:00
Ken Chen
0dbb6abf7d Merge "Add dontaudit statement to suppress denials" am: 62f0a4d306 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1361756

Change-Id: I87aa4636229f96ff4fe222caa3f4a8c889094474
 2020-07-15 08:53:03 +00:00
Wei Wang
2ac2b5956a Allow thermal tracing in user build am: 926145161a 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1362170

Change-Id: Ic76a4ee2ed1eaaa61be0eee49125898fbd6eb304
 2020-07-15 08:46:43 +00:00
Ken Chen
62f0a4d306 Merge "Add dontaudit statement to suppress denials" 2020-07-15 08:42:48 +00:00
Wei Wang
926145161a Allow thermal tracing in user build 
Bug: 160818586
Test: Build and check label
Change-Id: I30b13af585daaf9a85f45ab3b41d0b5e060b4bf4
 2020-07-14 23:43:09 +00:00
Yifan Hong
2af8530e05 Merge "Correct labels on files / props in vendor_dlkm." am: f74fa29aed 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1311860

Change-Id: I5e3b822947d174f73543c2eaa157fdbd64fd5559
 2020-07-14 19:29:01 +00:00
Yifan Hong
f74fa29aed Merge "Correct labels on files / props in vendor_dlkm." 2020-07-14 19:15:13 +00:00
Tom Cherry
d45249e4a9 add logd. as logd_prop 
We already have ro.logd. and persist.logd. as logd_prop, but not
logd. so this change adds it.  New properties should be read-write by
default so logd. should be preferred to ro.logd.

Test: set logd.buffer_type appropriately.
Change-Id: I51ed19f0093a0302709116944153f37067814d08
 2020-07-14 11:08:32 -07:00
Inseob Kim
7606d96a63 Allow charger to read minui properties am: 792219e48d 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1361758

Change-Id: I4c3ef4ef754a71474855718888a9f48bbdae0481
 2020-07-14 13:23:35 +00:00
Inseob Kim
792219e48d Allow charger to read minui properties 
Failing to read minui properties causes charger crash.

Bug: N/A
Test: enter charger mode with blueline
Change-Id: Ic174cd1116edd510499836ab42675d6fabc63324
 2020-07-14 18:06:54 +09:00
Inseob Kim
6755a00ac2 Merge "Add charger related property contexts" am: 1ef68a4852 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1360138

Change-Id: I93d34499c6febaa849744cf1b0a7ba4ec7cc44a6
 2020-07-14 07:22:15 +00:00
Inseob Kim
1ef68a4852 Merge "Add charger related property contexts" 2020-07-14 07:07:38 +00:00
Ken Chen
e49acfa33b Add dontaudit statement to suppress denials 
A few netd avc denials are observed. Supress audit messages since they
don't cause a problem.

Bug: 77870037
Test: build, flash, boot
Change-Id: I019c5af62630fcd0a35e22c560b9043bba58f6f1
 2020-07-14 09:49:06 +08:00
Alexander Mishkovets
64bd525035 Merge "Define sepolicy for locale filter property" am: abe9923ef5 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1358091

Change-Id: I08a69017b835f15379231f0233953ced210a8734
 2020-07-13 16:19:41 +00:00
Alexander Mishkovets
abe9923ef5 Merge "Define sepolicy for locale filter property" 2020-07-13 16:06:00 +00:00
Jeff Vander Stoep
316741a589 gmscore_app is attempting to access /dev/ashmem am: 3e2b91d672 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1361318

Change-Id: Ib22bab5eb94cc33df6e9e6f36d988c56fd485cdf
 2020-07-13 14:40:48 +00:00
Jeff Vander Stoep
3e2b91d672 gmscore_app is attempting to access /dev/ashmem 
This is not allowed for apps with targetSdkVersion>=Q.

Allow this failure until gmscore fixes.

Bug: 160984921
Test: build
Change-Id: I1e9f2af091b22eef2bc05ae1e571fb45dec05cfe
 2020-07-13 14:57:52 +02:00
Inseob Kim
ea1296c80e Merge "Add tombstone_config_prop and move related prop" am: 00a87e48d1 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1355673

Change-Id: I89fb373d6a5aae2bcbd5387aa5b3cce731c96ad4
 2020-07-10 11:59:16 +00:00
Inseob Kim
00a87e48d1 Merge "Add tombstone_config_prop and move related prop" 2020-07-10 11:48:05 +00:00
Jeffrey Vander Stoep
f21156625c Merge "netd: suppress dir write to /system" am: 771376b7e2 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1360317

Change-Id: I5032ec302759cf676d9a643a9937d0fa5f441fb1
 2020-07-10 10:00:33 +00:00
Jeffrey Vander Stoep
771376b7e2 Merge "netd: suppress dir write to /system" 2020-07-10 09:47:12 +00:00
Jeff Vander Stoep
f8155a0c34 netd: suppress dir write to /system 
avc:  denied  { write } for  pid=661
comm="iptables-restor" name="etc" dev="overlay" ino=55668
scontext=u:r:netd:s0 tcontext=u:object_r:system_file:s0 tclass=dir
permissive=0

Occurs after an adb remount and running netd unit tests.

Bug: 160562747
Test: build tests
Change-Id: I4c8ea7ef8d00e214bf0dab1496a6b8dcc449f59e
 2020-07-10 09:12:00 +02:00
Inseob Kim
8ef4792f01 Add charger related property contexts 
ro.enable_boot_charger_mode and sys.boot_from_charger_mode are moved to
new property contexts for charger props to remove exported*_prop.

Bug: 155844385
Test: boot device with ro.enable_boot_charger_mode
Change-Id: I17d195d3c9c002a42125d46a5efcdb890f1c2a5c
 2020-07-10 14:15:15 +09:00
Yifan Hong
85aba14765 Correct labels on files / props in vendor_dlkm. 
All files under vendor_dlkm are tagged vendor_file.
All build props for vendor_dlkm are mapped as build_vendor_prop.

Test: build and
    `ls /vendor_dlkm -lZ`
    `adb shell getprop -Z | grep vendor_dlkm`

Bug: 154633114

Change-Id: Ie9dc26d948357767fec09aca645606310ad3425c
 2020-07-09 15:02:00 -07:00
Alexander Mishkovets
f0be89be1d Define sepolicy for locale filter property 
Bug: 154133013
Test: Manual
Change-Id: I28ae279e4fd47553fcf4ab9421944f552490b49f
 2020-07-09 20:32:58 +02:00
Inseob Kim
e7a03c3c7d Merge "Relabel media.recorder.show_manufacturer_and_model" am: 881f8c6b2d 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1355666

Change-Id: I87b3a655d24d151166c1b744f94c35a99d9c057c
 2020-07-08 08:30:57 +00:00
Inseob Kim
881f8c6b2d Merge "Relabel media.recorder.show_manufacturer_and_model" 2020-07-08 08:18:48 +00:00
Inseob Kim
dddf6f561f Relabel media.recorder.show_manufacturer_and_model 
To remove exported*_default_prop

Bug: 155844385
Test: capture video
Test: atest writerTest
Change-Id: I74223c8daa44acf0aba33bff31cfe21f6242f941
 2020-07-08 15:32:57 +09:00
Treehugger Robot
3764f14ae6 Merge "simplify neverallowxperm for tun_device" am: f1d02d4230 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1355676

Change-Id: I1ef916ea4c7ea5152ca6df1e0d6dc1c16dd4cf46
 2020-07-08 04:46:48 +00:00
Treehugger Robot
f1d02d4230 Merge "simplify neverallowxperm for tun_device" 2020-07-08 04:33:34 +00:00
Inseob Kim
703c99cfae Merge "Add keyguard_config_prop for keyguard property" am: d702d3fae1 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1355669

Change-Id: I2bd84bef0b255245bbb48f4e6f2003363f71e9f3
 2020-07-08 03:33:57 +00:00