tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
44672 commits 1 branch 0 tags 50 MiB
Commit graph

44672 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kangping Dong
52d81d653f Merge "add sepolicy rules for OT daemon binder service" into main am: 9d965761ca am: 0fb33095a4 am: 3d003e1519 am: 39f874cbed am: 872e6ef0e7 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2648124

Change-Id: I1d8efc5cd19b825e094cad26941ab7fff9c31c14
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-03 18:12:16 +00:00
Kangping Dong
872e6ef0e7 Merge "add sepolicy rules for OT daemon binder service" into main am: 9d965761ca am: 0fb33095a4 am: 3d003e1519 am: 39f874cbed 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2648124

Change-Id: I6ed54679f34a522eb9670da0753eb9a2e6098a06
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-03 17:28:25 +00:00
Kangping Dong
39f874cbed Merge "add sepolicy rules for OT daemon binder service" into main am: 9d965761ca am: 0fb33095a4 am: 3d003e1519 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2648124

Change-Id: I9f1ec83755753ec76db1bdbba1f2f39855a6275b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-03 16:44:17 +00:00
Kangping Dong
3d003e1519 Merge "add sepolicy rules for OT daemon binder service" into main am: 9d965761ca am: 0fb33095a4 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2648124

Change-Id: I2948438cddbe921c244e05f05b1a357675dbcef4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-03 16:00:51 +00:00
Kangping Dong
0fb33095a4 Merge "add sepolicy rules for OT daemon binder service" into main am: 9d965761ca 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2648124

Change-Id: I21567f881a585d96a3605f6f1e2d6380daf9bd73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-03 14:59:26 +00:00
Kangping Dong
9d965761ca Merge "add sepolicy rules for OT daemon binder service" into main 2023-08-03 14:13:21 +00:00
Kangping Dong
0b3e8c62ee add sepolicy rules for OT daemon binder service 
Bug: 262681784
Change-Id: I3b4d3603709a761ad1410b81c0e5b4e4fc51c43c
 2023-08-03 13:31:53 +08:00
Kelvin Zhang
ed79696472 Merge "Give vold permission to wipe a block device" into main am: 0e7babefee am: e1f3828901 am: 8b7a70aa67 am: 24a421ed7f am: 7c90ead73d 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2677935

Change-Id: Idb7b0f6a3d3812c54868c0395a0b1b928614aac4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-03 03:11:49 +00:00
Kelvin Zhang
7c90ead73d Merge "Give vold permission to wipe a block device" into main am: 0e7babefee am: e1f3828901 am: 8b7a70aa67 am: 24a421ed7f 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2677935

Change-Id: Id601624b8cbb793141300ac90693b0989dbe3d95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-03 02:23:20 +00:00
Kelvin Zhang
24a421ed7f Merge "Give vold permission to wipe a block device" into main am: 0e7babefee am: e1f3828901 am: 8b7a70aa67 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2677935

Change-Id: I869aea7b1b0cb3dec442bc53e384304823720334
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-03 01:42:08 +00:00
Kelvin Zhang
8b7a70aa67 Merge "Give vold permission to wipe a block device" into main am: 0e7babefee am: e1f3828901 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2677935

Change-Id: I18b4d9aca4c766ebaf0c830e4f0193c6a7264fff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-03 00:57:06 +00:00
Kelvin Zhang
e1f3828901 Merge "Give vold permission to wipe a block device" into main am: 0e7babefee 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2677935

Change-Id: I39a501d12dd53f773ee972aa62435d7ac9e5d262
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-03 00:11:33 +00:00
Kelvin Zhang
0e7babefee Merge "Give vold permission to wipe a block device" into main 2023-08-02 23:31:50 +00:00
Kelvin Zhang
2b413622ce Give vold permission to wipe a block device 
During mountFstab call, vold might need to wipe and re-format a device.
See code in system/vold/model/PublicVolume.cpp , PublicVolume::doFormat
Allow IOCTLs such as BLKDISCARDZEROES for wiping.

Test: th
Bug: 279808236
Change-Id: I0bebf850aa45ece6227fa5c3e9c3fdb38164f79e
 2023-08-02 14:27:08 -07:00
Treehugger Robot
be318de74d Merge "Add permission for VFIO device binding" into main am: 6ebc7deb48 am: 5b2f696b93 am: 1efce2fe90 am: 5c02b42429 am: 4585c9c223 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2682786

Change-Id: I344dceb3cf6b976b66a92bdfa84f845bf109f0d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-02 14:13:12 +00:00
Treehugger Robot
4585c9c223 Merge "Add permission for VFIO device binding" into main am: 6ebc7deb48 am: 5b2f696b93 am: 1efce2fe90 am: 5c02b42429 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2682786

Change-Id: Ice31631d549661a63d74110dbbef0e6a5600efac
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-02 13:31:19 +00:00
Treehugger Robot
5c02b42429 Merge "Add permission for VFIO device binding" into main am: 6ebc7deb48 am: 5b2f696b93 am: 1efce2fe90 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2682786

Change-Id: I9b455b3b684aaad490282bc2951c12453da3ada1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-02 12:49:54 +00:00
Treehugger Robot
1efce2fe90 Merge "Add permission for VFIO device binding" into main am: 6ebc7deb48 am: 5b2f696b93 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2682786

Change-Id: Idbe7867385fe39c7d8556d785b7370033d24cb9b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-02 12:05:46 +00:00
Treehugger Robot
5b2f696b93 Merge "Add permission for VFIO device binding" into main am: 6ebc7deb48 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2682786

Change-Id: I89dc6f0a066d0c793a693a0df83bdd0f4830a770
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-02 11:22:32 +00:00
Treehugger Robot
6ebc7deb48 Merge "Add permission for VFIO device binding" into main 2023-08-02 10:51:08 +00:00
Inseob Kim
825056de9a Add permission for VFIO device binding 
vfio_handler will bind platform devices to VFIO driver, and then
return a file descriptor containing DTBO. This change adds
permissions needed for that.

Bug: 278008182
Test: adb shell /apex/com.android.virt/bin/vm run-microdroid \
      --devices /sys/bus/platform/devices/16d00000.eh --protected
Change-Id: Ie947adff00d138426d4703cbb8e7a8cd429c2272
 2023-08-02 15:06:51 +09:00
Jooyung Han
77f777408b Merge "Revert "Add /bootstrap-apex"" into main am: e9e32f58a1 am: 2ef2c05c8a am: c9b5da0c12 am: 8abf95e82d am: 30704fc316 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2685547

Change-Id: Ifac137d54e041843715b1fc302fb7a50be4d6c8a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-01 13:25:39 +00:00
Jooyung Han
30704fc316 Merge "Revert "Add /bootstrap-apex"" into main am: e9e32f58a1 am: 2ef2c05c8a am: c9b5da0c12 am: 8abf95e82d 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2685547

Change-Id: I6ff969f806a1e0d1443348e1e012cff8e104f3ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-01 13:24:14 +00:00
Jooyung Han
8abf95e82d Merge "Revert "Add /bootstrap-apex"" into main am: e9e32f58a1 am: 2ef2c05c8a am: c9b5da0c12 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2685547

Change-Id: I22e315c8444ae4cd607b1814a39050387cfa450d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-01 12:42:05 +00:00
Jooyung Han
c9b5da0c12 Merge "Revert "Add /bootstrap-apex"" into main am: e9e32f58a1 am: 2ef2c05c8a 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2685547

Change-Id: I48d112898ba12a481868e97c116deea60c331343
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-01 12:00:10 +00:00
Jooyung Han
2ef2c05c8a Merge "Revert "Add /bootstrap-apex"" into main am: e9e32f58a1 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2685547

Change-Id: I0e5e37ec8611d17aefac3eb235d747fe706a934a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-01 11:19:12 +00:00
Jooyung Han
e9e32f58a1 Merge "Revert "Add /bootstrap-apex"" into main 2023-08-01 10:44:45 +00:00
Jooyung Han
aca291806e Revert "Add /bootstrap-apex" 
Revert submission 2666915-share-bootstrap

Reason for revert: b/293949266 vold_prepare_subdirs fails to create apexdata directories.

Reverted changes: /q/submissionid:2666915-share-bootstrap

Change-Id: Idab6db691c1130a1f5d596f5e05783cab7fdde05
 2023-08-01 09:06:42 +00:00
Jooyung Han
7a9a334c70 Merge "Add /bootstrap-apex" into main am: 8b295ddaf2 am: 3b025b39ec am: 2dcdd781d3 am: 1176d6e353 am: 29c27af63c 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2666935

Change-Id: I56c07853687212c634e4ef4f1d5925b2a4415e1f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-01 01:18:27 +00:00
Jooyung Han
29c27af63c Merge "Add /bootstrap-apex" into main am: 8b295ddaf2 am: 3b025b39ec am: 2dcdd781d3 am: 1176d6e353 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2666935

Change-Id: I429ee6a106cc7dd53be01150fabcd7777cd5e870
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-08-01 00:32:32 +00:00
Jooyung Han
1176d6e353 Merge "Add /bootstrap-apex" into main am: 8b295ddaf2 am: 3b025b39ec am: 2dcdd781d3 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2666935

Change-Id: Iedd3cfee8d5f188258f72a5c0b70a4db5221271b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-31 23:52:19 +00:00
Jooyung Han
2dcdd781d3 Merge "Add /bootstrap-apex" into main am: 8b295ddaf2 am: 3b025b39ec 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2666935

Change-Id: I02c7c5c7439a42bbfce30706c7afb28640df603c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-31 23:09:37 +00:00
Jooyung Han
3b025b39ec Merge "Add /bootstrap-apex" into main am: 8b295ddaf2 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2666935

Change-Id: I0f2d5a800f865caf2c3d35e263880d630a661ff6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-31 22:25:08 +00:00
Jooyung Han
8b295ddaf2 Merge "Add /bootstrap-apex" into main 2023-07-31 21:53:57 +00:00
Inseob Kim
5d296d6a59 Ensure vendor seapp contexts can't use coredomain am: d7d3609af7 am: b2d5c7529c am: add7efee41 am: fa230d5e36 am: aeb73ff642 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2638235

Change-Id: I4c71a2ddc9846d2eb19143d3d4573be07e35717d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-31 05:24:52 +00:00
Inseob Kim
aeb73ff642 Ensure vendor seapp contexts can't use coredomain am: d7d3609af7 am: b2d5c7529c am: add7efee41 am: fa230d5e36 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2638235

Change-Id: Ie5f40daf5f2c5656b6f0ad70fe13e6aa11fbec6f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-31 04:44:19 +00:00
Inseob Kim
fa230d5e36 Ensure vendor seapp contexts can't use coredomain am: d7d3609af7 am: b2d5c7529c am: add7efee41 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2638235

Change-Id: Ib6b82b7fd38c4757ee5aed2329401c130dee1031
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-31 04:01:40 +00:00
Inseob Kim
add7efee41 Ensure vendor seapp contexts can't use coredomain am: d7d3609af7 am: b2d5c7529c 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2638235

Change-Id: Ic6a9f623746875170434ecd10ae2f8e2df630a13
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-31 03:19:58 +00:00
Inseob Kim
b2d5c7529c Ensure vendor seapp contexts can't use coredomain am: d7d3609af7 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2638235

Change-Id: I964b981ccc9f0befe2ca81574f7effdfd571d920
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-31 02:40:32 +00:00
Inseob Kim
d7d3609af7 Ensure vendor seapp contexts can't use coredomain 
Bug: 280547417
Test: build
Change-Id: Iadff17523767f91f073c6569400e17f1da55fbdc
 2023-07-28 16:18:11 +09:00
Lee George Thomas
fe23e7f871 Merge "Label /data/misc/bootanim with bootanim_data_file." into main am: db1535a09b am: a348e5c69a am: 03cf825b41 am: c729875189 am: 481a88b242 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2676595

Change-Id: I7941cfb91b57bcd622ecde8d78c5c8951db1a53e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-27 22:42:35 +00:00
Lee George Thomas
481a88b242 Merge "Label /data/misc/bootanim with bootanim_data_file." into main am: db1535a09b am: a348e5c69a am: 03cf825b41 am: c729875189 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2676595

Change-Id: Ib34ccb9dd4cf614380ea605a07ebed0716f09ab5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-27 21:28:55 +00:00
Lee George Thomas
c729875189 Merge "Label /data/misc/bootanim with bootanim_data_file." into main am: db1535a09b am: a348e5c69a am: 03cf825b41 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2676595

Change-Id: Ia9371e713371fe70be2eed5d6e31b955a6aed4c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-27 20:52:11 +00:00
Lee George Thomas
03cf825b41 Merge "Label /data/misc/bootanim with bootanim_data_file." into main am: db1535a09b am: a348e5c69a 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2676595

Change-Id: If4b5e75911e48e8655d105183126e48f31c8293e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-27 20:00:55 +00:00
Lee George Thomas
a348e5c69a Merge "Label /data/misc/bootanim with bootanim_data_file." into main am: db1535a09b 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2676595

Change-Id: Ia0fe829fa48a1197961e365df7f75cd40d19ba7d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-27 18:32:28 +00:00
Lee George Thomas
db1535a09b Merge "Label /data/misc/bootanim with bootanim_data_file." into main 2023-07-27 17:34:08 +00:00
Treehugger Robot
fc5c365d81 Merge "Remove redundant allows" into main am: 598de5b6c8 am: e3fec04da1 am: c09b371bad am: ec4858c6b7 am: c6138d7be0 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2677815

Change-Id: I3041150cb974cb291e586faeb1ef46bb8e432fc3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-27 13:33:49 +00:00
Treehugger Robot
c6138d7be0 Merge "Remove redundant allows" into main am: 598de5b6c8 am: e3fec04da1 am: c09b371bad am: ec4858c6b7 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2677815

Change-Id: Ie74e438185552265c126608782d0342c56d9dc97
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-27 12:54:31 +00:00
Treehugger Robot
ec4858c6b7 Merge "Remove redundant allows" into main am: 598de5b6c8 am: e3fec04da1 am: c09b371bad 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2677815

Change-Id: I1f354c744de2887077b0ad7c06dcf00e18a3c9f7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-27 11:44:24 +00:00
Treehugger Robot
c09b371bad Merge "Remove redundant allows" into main am: 598de5b6c8 am: e3fec04da1 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2677815

Change-Id: Id0834a2437bb9d95c3fd525026fe3cfcc9e60127
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-07-27 11:00:27 +00:00