Commit graph

163 commits

Author SHA1 Message Date
Marco Nelissen
ba258f0ec0 Remove unneeded permissions
Media component update service is removed, so selinux
permissions for it are no longer needed.

Bug: 123250010
Test: boot, play video
Change-Id: I0fec6839f5caf53d16399cb72dcdd6df327efc95
2019-05-09 22:19:33 +00:00
Xiao Ma
7703c2726c Merge "revert ipmemorystore selinux policy." am: f99aa3cb66 am: a2d7ab7f4b
am: ddabaebdec

Change-Id: Iaad8edaaa6a31a3fb23e57555fc4c5e1a4eaa332
2019-04-01 21:19:40 -07:00
Xiao Ma
e2876a3d11 revert ipmemorystore selinux policy.
Since ipmemorystore service has been moved to network stack from
system service, also should revert the relevant sepolicy which is
corresponding to the previous configuration.

Bug: 128392280
Test: atest FrameworksNetTests NetworkStackTests
Change-Id: I1ae09696e620b246f817db71e7b71c32aae9be05
2019-04-01 16:37:25 +09:00
Yifan Hong
b9182b37a5 Merge changes from topic "lpdumpd" am: 40f1682ba6 am: 7f891f414f
am: 75117c19c9

Change-Id: I43b884e08059e242830b56e7ddee62c17e6af422
2019-03-26 16:36:36 -07:00
Yifan Hong
18ade868ff Add rules for lpdump and lpdumpd
- lpdump is a binary on the device that talks to lpdumpd
  via binder.

- lpdumpd is a daemon on the device that actually reads
  dynamic partition metadata. Only lpdump can talk to it.

Bug: 126233777
Test: boots (sanity)
Test: lpdump

Change-Id: I0e21f35ac136bcbb0603940364e8117f2d6ac438
2019-03-25 10:14:20 -07:00
Po-Chien Hsueh
24302d7e1e Rename dynamic_android to dynamic_system
Per API review, dynamic_android should be renamed to dynamic_system.

Bug: 126613281
Test: run DynamicSystemInstallationService via adb
Change-Id: Ia908cdd0c21b3a82f59b30e03a985dc260530230
2019-03-19 13:37:15 +08:00
Alex Salo
4d7e0a9374 Add selinux setting for attention am: a1ce292dbb am: 6a931dff20
am: 5179c7039a

Change-Id: I0b03e82b19d881285c4ae70719616461028082fd
2019-03-18 14:48:54 -07:00
Alex Salo
a1ce292dbb Add selinux setting for attention
Bug: 126472144
Test: adb shell dumpsys attention
Change-Id: Ie421b719c8fc0414ee664055aa5d007c081edf17
2019-03-18 21:00:35 +00:00
Luke Huang
325c9263ab Merge "Add sepolicy for resolver service" am: a116e1afe5 am: 551bfafd34
am: 5332340b5e

Change-Id: Iac635eaaae96a1d75fc398bf9a21bf8e40f94a73
2019-03-06 21:52:50 -08:00
Luke Huang
524f25ebb0 Add sepolicy for resolver service
Bug: 126141549
Test: built, flashed, booted
Change-Id: I34260e1e5cc238fbe92574f928252680c1e6b417
2019-03-05 15:49:33 +00:00
Neil Fuller
61873b800c Merge "Revert "sepolicy entries for time zone detector service"" am: 5f145acff0 am: 970f28223c
am: 8b9aa2fa4a

Change-Id: Iebec80db0ce332aa57f73accc2809a6a0d347572
2019-02-06 10:53:53 -08:00
Neil Fuller
970f28223c Merge "Revert "sepolicy entries for time zone detector service""
am: 5f145acff0

Change-Id: Ied46d69d3fbb215712cc807e7b812843d0db6ec0
2019-02-06 10:15:23 -08:00
Neil Fuller
62386fb9ab Revert "sepolicy entries for time zone detector service"
This reverts commit 1662495aec.

Bug: 78217059
Bug: 112827764
Test: make / booted device
2019-02-06 08:39:12 +00:00
Tri Vo
a7061e8e9a sepolicy for ashmemd am: 73d0a67b06 am: 610a8ed7cf
am: e869afd212

Change-Id: I8f025f4b1b5b1fab19998752ef2d6fb9a503ba16
2019-02-05 14:11:45 -08:00
Tri Vo
610a8ed7cf sepolicy for ashmemd
am: 73d0a67b06

Change-Id: Ia0d3406769f2b153caa28ab5e36a34b3910b94a8
2019-02-05 13:45:59 -08:00
Tri Vo
73d0a67b06 sepolicy for ashmemd
all_untrusted_apps apart from untrusted_app_{25, 27} and mediaprovider
are now expected to go to ashmemd for /dev/ashmem fds.

Give coredomain access to ashmemd, because ashmemd is the default way
for coredomain to get a /dev/ashmem fd.

Bug: 113362644
Test: device boots, ashmemd running
Test: Chrome app works
Test: "lsof /system/lib64/libashmemd_client.so" shows
libashmemd_client.so being loaded into apps.
Change-Id: I279448c3104c5d08a1fefe31730488924ce1b37a
2019-02-05 21:38:14 +00:00
Santos Cordon
bff499ee82 Merge "SEPolicy for Suspend Control interface."
am: 87988fa6a6

Change-Id: I6aa4102dd43daf2bd82eeb09b53e890e3c3dbe7a
2019-02-05 10:43:11 -08:00
Santos Cordon
b78a1f5e13 SEPolicy for Suspend Control interface.
Bug: 121210355
Test: manual
Change-Id: I9c46c72f0219309140ed2fb008ef57b4bca6ff2b
Merged-In: I9c46c72f0219309140ed2fb008ef57b4bca6ff2b
2019-02-05 18:03:32 +00:00
Santos Cordon
fd92fb93bc SEPolicy for Suspend Control interface.
Bug: 121210355
Test: manual
Change-Id: I9c46c72f0219309140ed2fb008ef57b4bca6ff2b
2019-02-05 11:40:04 +00:00
Hung-ying Tyan
27d99eeed2 Sepolicy for dynamic_android_service am: e4350c1a64 am: 4633c2fdc0
am: dd41ec3053

Change-Id: I69048987035e7fc705d957f7e40299c970552a69
2019-01-30 18:41:02 -08:00
Hung-ying Tyan
4633c2fdc0 Sepolicy for dynamic_android_service
am: e4350c1a64

Change-Id: Ie2590b9926d96a004573f1615ea069a28d75bae5
2019-01-30 18:09:35 -08:00
Hung-ying Tyan
e4350c1a64 Sepolicy for dynamic_android_service
Dynamic_android service is a proxy running in SystemServer to the
gsi_service daemon. It provides a set of SystemApi's to manage
installation of a new system image to the device while keeping the
original system image intact.

Bug: 122929007
Test: manual; see dynamic_android service start in logcat
Change-Id: Idb9b0475677dad13b7864ca0cf6041dcab04b4e3
2019-01-31 01:30:36 +00:00
SzuWei Lin
ac4860ad0d Define rcs to be a radio_service am: d97c99e4aa am: 2d3075de4c
am: 681bbfe9e1

Change-Id: I9135ba1cf4c26afdb93d905876f860c0044dafed
2019-01-28 02:52:34 -08:00
SzuWei Lin
2d3075de4c Define rcs to be a radio_service
am: d97c99e4aa

Change-Id: I07639726752b25c7a16331b16f4bf4bcd3f7c546
2019-01-28 02:42:23 -08:00
SzuWei Lin
d97c99e4aa Define rcs to be a radio_service
RcsService will die continously without the setting.

Bug: 123325711
Test: boot aosp_arm64_ab-userdebug on a blueline device
Change-Id: Ic140cb3e6466428bf62f0065c78aaf16f957f4d5
2019-01-28 07:00:10 +00:00
Joe Onorato
874371af20 Add incidentcompanion service. am: 5536a08be3 am: 553be3816c
am: b5b1dc654f

Change-Id: I7e870df8b09f7fbec5b9d7c68d4449c064b45e79
2019-01-26 19:00:54 -08:00
Joe Onorato
553be3816c Add incidentcompanion service.
am: 5536a08be3

Change-Id: I9364474f9d00893c81534042b4af8cc2e91f5e49
2019-01-26 18:52:46 -08:00
Joe Onorato
5536a08be3 Add incidentcompanion service.
It is a side channel for dumpstate and incidentd to communicate
status and get user authorization to share bugreports by calling
system_server.

Test: atest PermissionControllerTest / atest GooglePermissionControllerTest
Change-Id: I995a43a25f375e5c97dba1deb92ebe893ca8585d
2019-01-26 13:15:45 -08:00
Leland Miller
1a73cabde5 Merge "Add policy for ircs service" am: 9dd538eded am: 2f45d2eaf0
am: d4e451d1f9

Change-Id: Iabb7b23536e420ae0cc6d8cdcf7107f9f1745ee9
2019-01-25 10:50:59 -08:00
Leland Miller
2f45d2eaf0 Merge "Add policy for ircs service"
am: 9dd538eded

Change-Id: I6f40f30c6e357f4f82ca0e30070a081455717f2b
2019-01-25 10:40:42 -08:00
Leland Miller
fa5dfd4d23 Add policy for ircs service
Test: Manually verified that service is accessible
Change-Id: If3748f4719b6194eccd16a097a0f1fc050f4160f
2019-01-25 10:12:04 -08:00
Michael Wright
345d030880 Add new external vibrator service to system_server am: e9f1668c17 am: 24f1d94dfa
am: a55d651f46

Change-Id: I956c3652a6e0d84ed14f5c3ab52459d7214679ca
2019-01-25 08:54:32 -08:00
Michael Wright
24f1d94dfa Add new external vibrator service to system_server
am: e9f1668c17

Change-Id: I20f1293d77262b45ac986d08b0795e4ff85f3095
2019-01-25 08:41:18 -08:00
Michael Wright
e9f1668c17 Add new external vibrator service to system_server
Bug: 111457573
Test: N/A
Change-Id: I457fd9d13cc481f2687ab39d22240c6ea7231183
2019-01-25 14:26:07 +00:00
William Hester
2367e8790b Merge "Add the testharness service to sepolicy rules" am: 1fefa6c0e8 am: a587f0d4d3
am: d10adc6f50

Change-Id: I9af82b1f2583945eb8c0ba5563cf2d548e552619
2019-01-17 17:52:59 -08:00
William Hester
a587f0d4d3 Merge "Add the testharness service to sepolicy rules"
am: 1fefa6c0e8

Change-Id: I9185a2b57d3f862cc2f4e64da05ec5a3d2de7172
2019-01-17 17:31:07 -08:00
William Hester
5f486c74bf Add the testharness service to sepolicy rules
The testharness service will manage Test Harness Mode and provide a
command-line interface for users to enable Test Harness Mode; however it
does not directly provide a public API.

Bug: 80137798
Test: make
Test: flash crosshatch
Change-Id: Ie396e40fcea8914b4dd2247f2314e029b66ad84e
2019-01-17 13:10:37 -08:00
Nandana Dutt
2d4b0694d4 Merge "Add sepolicy for BugreportManagerService" am: 5a974a0eae am: b3b807b758
am: 28bcda8e78

Change-Id: I81244c1a7c851fee1b21ef3f4c59e5c47bc61911
2019-01-17 13:09:07 -08:00
Nandana Dutt
b3b807b758 Merge "Add sepolicy for BugreportManagerService"
am: 5a974a0eae

Change-Id: I72abcbff8d3762561fec9f9102255e3ed4299ba9
2019-01-17 12:43:20 -08:00
Nandana Dutt
5cdd2f5ef8 Add sepolicy for BugreportManagerService
BUG:111441001
Test: boots
Change-Id: I71a54e8335c5ce7f9d97af3dbbd62e663bb66d33
2019-01-17 12:23:31 +00:00
David Anderson
f3fd8fff2a sepolicy for gsid am: 6d53efcf46 am: 34d1f38571
am: fe2533bc60

Change-Id: I9ca3f620dafc3d2bdc143f6a50a710745b89531c
2019-01-15 22:55:23 -08:00
David Anderson
34d1f38571 sepolicy for gsid
am: 6d53efcf46

Change-Id: I8b95bb61ea7fbed3c2a2e7ce7f0895713295c340
2019-01-15 22:45:13 -08:00
David Anderson
6d53efcf46 sepolicy for gsid
Bug: 122556707
Test: gsid starts
Change-Id: Ib05ddb79051436f51cd236de04027a3b12ee87a9
Signed-off-by: Sandeep Patil <sspatil@google.com>
2019-01-15 20:43:33 -08:00
Sooraj Sasindran
c7065d3a23 Merge "Rename ANS to ONS"
am: 2968496e2c

Change-Id: I889631f909060a66cbd0391fc3b46b296284cd47
2019-01-12 11:27:51 -08:00
Sooraj Sasindran
b9db03f983 Merge "Rename ANS to ONS" 2019-01-12 02:32:31 +00:00
Sooraj Sasindran
2cf336bf31 Rename ANS to ONS
Rename AlternativeNetworkService to OpportunisticNetworkService
Bug: 118347827
Test: compile
Merged-In: I23b0caadd1801c104806fa438fc9054d8a31962e
Change-Id: I23b0caadd1801c104806fa438fc9054d8a31962e
2019-01-11 17:46:04 +00:00
Chalard Jean
4f2b179cc3 Add sepolicy for IpMemoryStoreService am: fb15c9f12f am: bb05d23d63
am: 2f3ccbbe8b

Change-Id: I0dced9f1d9f741689e6243f8288f18b8067521e7
2019-01-11 01:26:10 -08:00
Chalard Jean
bb05d23d63 Add sepolicy for IpMemoryStoreService
am: fb15c9f12f

Change-Id: I43acccc8658c9fade28fe3513f48627d765450d3
2019-01-11 01:13:59 -08:00
Felipe Leme
26f04ff7f2 DO NOT MERGE - Renamed "intelligence" to "content_capture"
This cherry-pick exists to update stage-aosp-master sepolicy
files to look like the ones in master and aosp. It looks like
it was an overlook this patch was merged with DO NOT MERGE
instead of only Merged-In.

Bug: 111276913
Test: manual verification

Merged-In: If76dc7bfdad87789a58fc94e0fd280deae1a41ab
Change-Id: If76dc7bfdad87789a58fc94e0fd280deae1a41ab
(cherry picked from commit 73e7fa884b)
2019-01-11 17:45:42 +09:00
Sooraj Sasindran
c8e91210dc Rename ANS to ONS
Rename AlternativeNetworkService to OpportunisticNetworkService
Bug: 118347827
Test: compile

Change-Id: I23b0caadd1801c104806fa438fc9054d8a31962e
2019-01-10 15:57:54 -08:00