Hridya Valsaraju
351f85a4ee
Add permission required by libdm_test
...
am: 9bb71537ac
2019-06-17 21:15:34 -07:00
Hridya Valsaraju
9bb71537ac
Add permission required by libdm_test
...
This CL fixes the following denials during libdm_test
that is part of VTS.
avc: denied { read } for comm="loop1" path=2F6D656D66643A66696C655F32202864656C6574656429
dev="tmpfs" ino=97742 scontext=u:r:kernel:s0 tcontext=u:object_r:appdomain_tmpfs:s0
tclass=file permissive=0
W loop1 : type=1400 audit(0.0:371): avc: denied { read } for
path=2F6D656D66643A66696C655F32202864656C6574656429 dev="tmpfs" ino=97742 scontext=u:r:kernel:s0
tcontext=u:object_r:appdomain_tmpfs:s0 tclass=file permissive=0
Bug: 135004816
Test: adb shell libdm_test
Change-Id: Ifb6d58ee6f032cdf3952a05667aa8696d6e2a2fa
2019-06-17 22:46:03 +00:00
Matthias Kramm
cf010dcb85
Merge "Allow hal_face to write to /data/vendor/camera_calibration/*." am: 9faeec71f2
...
am: c58cd73209
2019-06-17 12:48:25 -07:00
Matthias Kramm
c58cd73209
Merge "Allow hal_face to write to /data/vendor/camera_calibration/*."
...
am: 9faeec71f2
2019-06-17 12:39:29 -07:00
Matthias Kramm
9faeec71f2
Merge "Allow hal_face to write to /data/vendor/camera_calibration/*."
2019-06-17 19:31:50 +00:00
Valerie Hau
5162b0c3d0
Add IMapper2.1 same process hal permissions am: d3499df3cf
...
am: 178ef8ccad
2019-06-17 11:42:02 -07:00
Valerie Hau
178ef8ccad
Add IMapper2.1 same process hal permissions
...
am: d3499df3cf
2019-06-17 11:33:59 -07:00
Jeff Vander Stoep
b4ad398ca9
Merge "system_server_startup: allow SIGCHLD to zygote" into qt-dev
...
am: 6dc831d2fb
2019-06-15 17:45:03 -07:00
TreeHugger Robot
6dc831d2fb
Merge "system_server_startup: allow SIGCHLD to zygote" into qt-dev
2019-06-16 00:29:00 +00:00
Jeff Vander Stoep
e0d9e50c96
system_server_startup: allow SIGCHLD to zygote
...
avc: denied { sigchld } for comm="main"
scontext=u:r:system_server_startup:s0 tcontext=u:r:zygote:s0
tclass=process permissive=0
Test: build
Bug: 134496658
Change-Id: I98c106b17ba1740f953c3108bd0fc927c150096f
(cherry picked from commit 67dc274f87
2019-06-14 16:56:05 -07:00
Valerie Hau
d3499df3cf
Add IMapper2.1 same process hal permissions
...
Bug: 135166668
Test: build, boot, VtsHalGraphicsComposerV2_2TargetTest
Change-Id: Iedc11b73d3e3ba54dcd622b128cb513adec11d69
2019-06-14 12:31:17 -07:00
Pirama Arumuga Nainar
da437c3a8f
Merge "In native coverage builds, allow all domains to access /data/misc/trace" am: 1eb45b5606
...
am: f6a95d82d8
2019-06-14 12:05:15 -07:00
Pirama Arumuga Nainar
f6a95d82d8
Merge "In native coverage builds, allow all domains to access /data/misc/trace"
...
am: 1eb45b5606
2019-06-14 11:56:59 -07:00
Treehugger Robot
1eb45b5606
Merge "In native coverage builds, allow all domains to access /data/misc/trace"
2019-06-14 18:35:25 +00:00
Rick Yiu
358a4bb66d
Merge "Add macro for dumping hal debug info" am: f1f2b514fe
...
am: 2446e21855
2019-06-14 08:57:20 -07:00
Rick Yiu
2446e21855
Merge "Add macro for dumping hal debug info"
...
am: f1f2b514fe
2019-06-14 08:49:21 -07:00
Treehugger Robot
f1f2b514fe
Merge "Add macro for dumping hal debug info"
2019-06-14 15:38:24 +00:00
Rick Yiu
1a94b30d9a
Add macro for dumping hal debug info
...
Hal debug info could be dumped in user build by using this macro.
Bug: 134545528
Test: build pass
Change-Id: I650d69607c75b73e95efb3647de5dd03b86cb143
2019-06-14 15:37:59 +00:00
Pirama Arumuga Nainar
ce9c0c5a5f
In native coverage builds, allow all domains to access /data/misc/trace
...
Bug: http://b/135139675
Coverage files are written to /data/misc/trace (governed by the
method_trace_data_file selinux type). Allow all domains to access
(create directories, access files) this directory when native coverage
is enabled (by setting NATIVE_COVERAGE to true) in an userdebug or eng
build.
Also relax neverallow constraints to allow access to
method_trace_data_file for native coverage builds.
Test: Build 32-bit cuttlefish with coverage:
m NATIVE_COVERAGE=true COVERAGE_PATHS="*"
and verify that there are no selinux denials in kernel log and
logcat.
Change-Id: I3fe7c77612854b9de7de7a0ddd5cbf44a2f5c21e
2019-06-14 08:31:51 -07:00
Matthias Kramm
3a44b17897
Allow hal_face to write to /data/vendor/camera_calibration/*.
...
Also, allow hal_camera to read from there.
Bug: 133792720
Change-Id: Iedec8d7325b4424d166f8e4d09182e1f29808ef2
Test: Running presubmit.
2019-06-14 05:53:59 -07:00
Jiyong Park
fa9e9176f8
Merge "Allow apexd to stop itself" am: 7436dba4c4
...
am: 6b9060cf15
2019-06-13 23:50:06 -07:00
Jiyong Park
6b9060cf15
Merge "Allow apexd to stop itself"
...
am: 7436dba4c4
2019-06-13 23:42:22 -07:00
Treehugger Robot
7436dba4c4
Merge "Allow apexd to stop itself"
2019-06-14 06:30:05 +00:00
Ryan Savitski
83e291ca3e
[automerger skipped] userdebug: support perfetto traces as a section in incident reports
...
am: 72f247f5ffce3a33ff18
2019-06-13 16:51:15 -07:00
Tri Vo
73ce5b8e02
Merge "sepolicy: fix 28.0.ignore.cil build" am: 0d5455a111
...
am: 01c235c93c
2019-06-13 14:01:05 -07:00
Tri Vo
01c235c93c
Merge "sepolicy: fix 28.0.ignore.cil build"
...
am: 0d5455a111
2019-06-13 13:54:50 -07:00
Tri Vo
0d5455a111
Merge "sepolicy: fix 28.0.ignore.cil build"
2019-06-13 20:25:41 +00:00
Neil Fuller
789eb70d89
Merge "Track removal of tz data files from runtime module" am: a83de7b4ac
...
am: 6b103ab141
2019-06-13 07:32:53 -07:00
Neil Fuller
6b103ab141
Merge "Track removal of tz data files from runtime module"
...
am: a83de7b4ac
2019-06-13 07:25:50 -07:00
Neil Fuller
a83de7b4ac
Merge "Track removal of tz data files from runtime module"
2019-06-13 14:13:19 +00:00
Jiyong Park
6e823dd597
Allow apexd to stop itself
...
apexd stops itself when it finds that it is running on a device with
flattened APEXes (i.e. ro.apex.updatable = false).
Bug: 133907211
Test: launch sdk_phone_x86_64
adb logcat -d | grep apexd | wc -l
returns 3
Change-Id: I7fa161b069aa34adb028194b55f367fe740a0cfc
2019-06-13 09:45:05 +09:00
Tri Vo
e381deb759
sepolicy: fix 28.0.ignore.cil build
...
29.0.ignore.cil/29.0.cil should be expanded into
28.0.ignore.cil/28.0.cil, so that there is no need to duplicate changes
in both places.
Test: adding a type to 29.0.ignore.cil/29.0.cil only doesn't trigger a
build error.
Change-Id: I543c0fc5e3749211e5bede81aabb0b520435a510
2019-06-12 15:56:05 -07:00
David Anderson
45e8c91045
Merge "Allow gsid to read dm nodes from sysfs." am: 4afae94836
...
am: 0524b03d8d
2019-06-12 14:34:30 -07:00
David Anderson
0524b03d8d
Merge "Allow gsid to read dm nodes from sysfs."
...
am: 4afae94836
2019-06-12 14:27:24 -07:00
David Anderson
4afae94836
Merge "Allow gsid to read dm nodes from sysfs."
2019-06-12 21:09:59 +00:00
Dan Willemsen
754da1e102
Merge "Sync all_plat_keys to keys.conf" am: 63521329b4
...
am: 6d30472751
2019-06-10 18:17:53 -07:00
Dan Willemsen
6d30472751
Merge "Sync all_plat_keys to keys.conf"
...
am: 63521329b4
2019-06-10 18:08:22 -07:00
Treehugger Robot
63521329b4
Merge "Sync all_plat_keys to keys.conf"
2019-06-10 23:28:53 +00:00
Dan Willemsen
3afe235071
Sync all_plat_keys to keys.conf
...
Since this rule does read the networkstack key.
Bug: 130111713
Test: treehugger
Test: run this on RBE, which only exposes the source files depended upon
Change-Id: Ib4c7e0680158e7892c062f00fe64c2da4195da2b
2019-06-10 20:09:14 +00:00
Joel Galenson
d181604ce1
Merge "Give hal_drm_server appdomain fd access." am: 7d258073df
...
am: 2c465fa2bb
2019-06-10 11:43:41 -07:00
Joel Galenson
2c465fa2bb
Merge "Give hal_drm_server appdomain fd access."
...
am: 7d258073df
2019-06-10 11:38:53 -07:00
Treehugger Robot
7d258073df
Merge "Give hal_drm_server appdomain fd access."
2019-06-10 18:20:47 +00:00
Neil Fuller
073271071a
Track removal of tz data files from runtime module
...
Track the removal of time zone data files from the runtime mainline module.
Bug: 132168458
Test: build / boot only
Change-Id: I67e596e4da2b23726c36866ff1648a833d2853c7
2019-06-10 15:39:19 +01:00
Tri Vo
8500aa74eb
Merge "Use BOARD_VENDOR_SEPOLICY_DIRS instead of BOARD_SEPOLICY_DIRS" am: 48d81b1c9e
...
am: 47dc6bc87d
2019-06-09 09:51:29 -07:00
Tri Vo
47dc6bc87d
Merge "Use BOARD_VENDOR_SEPOLICY_DIRS instead of BOARD_SEPOLICY_DIRS"
...
am: 48d81b1c9e
2019-06-09 09:46:27 -07:00
Treehugger Robot
48d81b1c9e
Merge "Use BOARD_VENDOR_SEPOLICY_DIRS instead of BOARD_SEPOLICY_DIRS"
2019-06-09 16:33:55 +00:00
Kalesh Singh
f2f848690c
Merge "Add core domain attribute to perfprofd for all targets" am: ab1e359761
...
am: 4890ad499d
2019-06-07 23:26:30 -07:00
Kalesh Singh
deb8024fd0
Merge "Sepolicy for vendor hals to access IAshmem" am: 06984017b7
...
am: 3b3bc95112
2019-06-07 23:26:26 -07:00
Kalesh Singh
4890ad499d
Merge "Add core domain attribute to perfprofd for all targets"
...
am: ab1e359761
2019-06-07 23:21:28 -07:00
Kalesh Singh
3b3bc95112
Merge "Sepolicy for vendor hals to access IAshmem"
...
am: 06984017b7
2019-06-07 23:21:25 -07:00
