tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
42476 commits 1 branch 0 tags 50 MiB
Commit graph

42476 commits

This branch
This branch
All branches
Author SHA1 Message Date
Satoshi Niwa
6c32aa519c sepolicy: Add apex/com.android.tethering.inprocess-file_contexts am: 80cd0acd64 am: 6fa337fef5 am: dcbde45b66 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2504898

Change-Id: I3cddfbef5290c5898ebd218a258f4571370bb4ea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-23 08:42:12 +00:00
Satoshi Niwa
dcbde45b66 sepolicy: Add apex/com.android.tethering.inprocess-file_contexts am: 80cd0acd64 am: 6fa337fef5 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2504898

Change-Id: I299e97e89c38500e6804589e50c57045443e1fea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-23 08:03:53 +00:00
Satoshi Niwa
6fa337fef5 sepolicy: Add apex/com.android.tethering.inprocess-file_contexts am: 80cd0acd64 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2504898

Change-Id: I285ec1c77b57652e4ae18b12a93e90000362b21c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-23 07:27:20 +00:00
Satoshi Niwa
80cd0acd64 sepolicy: Add apex/com.android.tethering.inprocess-file_contexts 
Needed when using com.android.tethering.inprocess with
flattened APEX.

Bug: 273821347
Test: trybot
Change-Id: Iae6d9547922575398c634433dc07b2e46fbffd8e
 2023-03-23 12:43:48 +09:00
Charles Chen
693c4352d9 Merge "Compliance test added for isolated_app_all" am: 3e86cee7c4 am: 3503d2ade9 am: c038c59be9 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2491881

Change-Id: Id41394d840c47aa14d50f461da52fe2e9dca5bbe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-23 00:37:47 +00:00
Charles Chen
c038c59be9 Merge "Compliance test added for isolated_app_all" am: 3e86cee7c4 am: 3503d2ade9 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2491881

Change-Id: I2a83d707a87dc78cb9b761ee000db729f87b9c66
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-22 23:39:33 +00:00
Charles Chen
3503d2ade9 Merge "Compliance test added for isolated_app_all" am: 3e86cee7c4 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2491881

Change-Id: I9278d595f044acf390aea9b3f9bc8cdf835e8239
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-22 22:40:19 +00:00
Charles Chen
3e86cee7c4 Merge "Compliance test added for isolated_app_all" 2023-03-22 21:55:49 +00:00
Charles Chen
dc184e9aed Compliance test added for isolated_app_all 
Compliance test is added to analyzes all members of isolated_app_all
and only allows them to have specific differences. Currently only
certain targets and classes are permitted based on the usecase of such
member classses. The list could be expanded based on future requirement
of more functionality yet the change won't be huge to ensure the
properties of sandbox.

Bug: 255597123
Test: m && presubmit
Change-Id: Id579223c585759ab5f6fbd531583d002eb2b14a5
 2023-03-22 20:14:11 +00:00
Devin Moore
966aadaf26 Merge "Allow dumpstate to dump /proc/bootconfig" am: 9a3f429b00 am: db5b68a58e am: caabc471f4 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2498305

Change-Id: Ia3bbf84d0f8658fe9d9b6f2e264003d993da7e2d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-22 18:40:42 +00:00
Devin Moore
caabc471f4 Merge "Allow dumpstate to dump /proc/bootconfig" am: 9a3f429b00 am: db5b68a58e 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2498305

Change-Id: Id31e8f6410f3f41aa30bfe6ba7625fac3469c347
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-22 17:48:30 +00:00
Devin Moore
db5b68a58e Merge "Allow dumpstate to dump /proc/bootconfig" am: 9a3f429b00 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2498305

Change-Id: I3a0a5089a45b972b34698c8fa212b37078b2bee2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-22 17:04:47 +00:00
Devin Moore
9a3f429b00 Merge "Allow dumpstate to dump /proc/bootconfig" 2023-03-22 16:11:44 +00:00
Andy Hung
33f0fdb774 Merge "sepolicy: Add spatial audio configuration properties" into tm-qpr-dev am: 816d7372d3 am: 64a1d36e3d 
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/22142639

Change-Id: Ie068d8be155cc8013d299139cccc9d2b172cb95e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-22 13:13:50 +00:00
Andy Hung
64a1d36e3d Merge "sepolicy: Add spatial audio configuration properties" into tm-qpr-dev am: 816d7372d3 
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/22142639

Change-Id: I0f164623b16f992ca90a10c07d86781934b29775
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-22 12:55:52 +00:00
Thiébaud Weksteen
2087daadc5 Merge "Remove netd entries in bug_map" am: a5f87e47b6 am: f035715cfd am: 141b573253 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2498219

Change-Id: I9cc9b4f90f4e887e0ce8e01ff790e7ded9776cd6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-22 09:55:49 +00:00
Thiébaud Weksteen
141b573253 Merge "Remove netd entries in bug_map" am: a5f87e47b6 am: f035715cfd 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2498219

Change-Id: I7ad738767924840b12866e181562e8cc8eac5126
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-22 09:17:18 +00:00
Thiébaud Weksteen
f035715cfd Merge "Remove netd entries in bug_map" am: a5f87e47b6 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2498219

Change-Id: Iceb48f2fd1ba612039e1f105b2ebf0fcf436f54d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-22 08:42:41 +00:00
Thiébaud Weksteen
a5f87e47b6 Merge "Remove netd entries in bug_map" 2023-03-22 08:04:46 +00:00
Thiébaud Weksteen
3eaa53e552 Remove netd entries in bug_map 
These have been replaced with a dontaudit rule in netd.te in
commit e49acfa.

Bug: 77870037
Test: TH
Change-Id: I1fc9996141419ec3a6194f97c4c42062cbeb4754
 2023-03-22 10:02:37 +11:00
Shikha Panwar
590598e469 Merge "Microdroid sepolicy changes to handle crash export" am: 9d34facd25 am: 5517c11a15 am: 71e6ad2e2b 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2422867

Change-Id: I894f06542bae2d29228bcbae1b687357628eabe1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-21 19:05:14 +00:00
Shikha Panwar
71e6ad2e2b Merge "Microdroid sepolicy changes to handle crash export" am: 9d34facd25 am: 5517c11a15 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2422867

Change-Id: I23cdd6a88b3b7d579adbf421e6ddf8743ca37786
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-21 18:50:08 +00:00
Devin Moore
55a81545b4 Merge changes I4128f428,I8c796dfe am: ce04629db7 am: 99c0909aae am: 5b38a8187b 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2494537

Change-Id: I7df48a1333ebd094502d48ccf65d4588b1fcad6e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-21 18:43:11 +00:00
Shikha Panwar
5517c11a15 Merge "Microdroid sepolicy changes to handle crash export" am: 9d34facd25 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2422867

Change-Id: I758d1fe5523d0b8af3c0db3eb4cd35867c4722a0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-21 18:26:25 +00:00
Shikha Panwar
9d34facd25 Merge "Microdroid sepolicy changes to handle crash export" 2023-03-21 18:14:12 +00:00
Devin Moore
5b38a8187b Merge changes I4128f428,I8c796dfe am: ce04629db7 am: 99c0909aae 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2494537

Change-Id: Iefc2d4bdc9160c349d8a5c68c73e894d5ad25f8d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-21 18:04:03 +00:00
Andy Hung
816d7372d3 Merge "sepolicy: Add spatial audio configuration properties" into tm-qpr-dev 2023-03-21 17:53:50 +00:00
Devin Moore
99c0909aae Merge changes I4128f428,I8c796dfe am: ce04629db7 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2494537

Change-Id: I8cde9bb11b8c01f6a187e2dbc8efc3bae24f91fc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-21 16:49:07 +00:00
Devin Moore
19bc295bb1 Allow dumpstate to dump /proc/bootconfig 
Test: adb shell dumpstate
Bug: 274528501
Change-Id: I0a4663a742e82d571811cb3fa9c15b8baaeeb847
 2023-03-21 16:27:13 +00:00
Devin Moore
ce04629db7 Merge changes I4128f428,I8c796dfe 
* changes:
  Add permissions for dumpstate to dump more hals
  Give dumpstate permissions to dump the sensor HAL
 2023-03-21 16:05:54 +00:00
David Drysdale
4261481a87 Merge "Don't emit audit logs for dumpstate->keystore" am: 4199df3d48 am: 86305146a1 am: 6777609a64 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2495878

Change-Id: Ib01b4fb2afee486ddfd362634560db10a341448f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-21 14:14:21 +00:00
David Drysdale
6777609a64 Merge "Don't emit audit logs for dumpstate->keystore" am: 4199df3d48 am: 86305146a1 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2495878

Change-Id: I2d82b5b2e5c7724b728307ad26dac2df4be25861
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-21 13:33:09 +00:00
David Drysdale
86305146a1 Merge "Don't emit audit logs for dumpstate->keystore" am: 4199df3d48 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2495878

Change-Id: I9e11ab351b06c0330da1afd33dda6e789edfa991
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-21 12:56:47 +00:00
David Drysdale
4199df3d48 Merge "Don't emit audit logs for dumpstate->keystore" 2023-03-21 11:54:58 +00:00
David Drysdale
e1075f7c0c Don't emit audit logs for dumpstate->keystore 
aosp/1696825 added the ability for dumpstate to signal Keystore on
debuggable builds, but this means that there will be an audit denial
message on non-debuggable builds.  Suppress this, in particular so that
the test mentioned below can pass on -user builds.

Bug: 269672964
Test: CtsSecurityHostTestCases:android.security.cts.SELinuxHostTest#testNoBugreportDenial
Change-Id: I68a41f6b94d615f80e4d1490ec4159436693dce2
 2023-03-21 09:16:47 +00:00
Ioannis Ilkos
ade88a230c Merge changes from topic "tm-qpr-oome-perfetto" into tm-qpr-dev am: 37883b47f8 am: 865d0883ac 
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/21986580

Change-Id: Id240081fd18ec267e4b0a7213c662d8bb998301b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-20 11:43:38 +00:00
Ioannis Ilkos
bd0967d109 [automerger skipped] Fix incorrect domain used in system_server.te am: 900d221a1f -s ours am: 59ff4cbc51 -s ours 
am skip reason: Merged-In I78d5fa62a2e112d3bf363b8d96348a645ef4caaa with SHA-1 0e978ba9f1 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/21986579

Change-Id: I69e7e40f5a4b6e28bbd329b451c05bf67db0dd5d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-20 11:43:37 +00:00
Ioannis Ilkos
b1cb2898aa Merge changes from topic "tm-qpr-syssrv-perfetto" into tm-qpr-dev am: a6494f6163 am: ad1c3e4200 
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/21986577

Change-Id: I26946957fca1e3f842ea84cfad678f2d601ab44d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-20 11:42:11 +00:00
Ryan Savitski
973703d9ee [automerger skipped] tm-qpr backport: allow perfetto profiling of system_server and sys/platform apps am: b2fecc3954 -s ours am: fce5dfad47 -s ours 
am skip reason: Merged-In I792ec1812d94b4fa9a8688ed74f2f62f6a7f33a6 with SHA-1 941ba723ba is already in history

Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/21986575

Change-Id: Id3bb330e18287c2c8e915898aa325174b188e9d5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-20 11:42:07 +00:00
Ioannis Ilkos
865d0883ac Merge changes from topic "tm-qpr-oome-perfetto" into tm-qpr-dev am: 37883b47f8 
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/21986580

Change-Id: I66f23e61f789b8a18f44f6a68af9f399e9d06be0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-20 11:02:24 +00:00
Ioannis Ilkos
59ff4cbc51 [automerger skipped] Fix incorrect domain used in system_server.te am: 900d221a1f -s ours 
am skip reason: Merged-In I78d5fa62a2e112d3bf363b8d96348a645ef4caaa with SHA-1 0e978ba9f1 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/21986579

Change-Id: I200e0aa430f6ef4272ba4f8a22eb5ce50da49b10
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-20 11:02:22 +00:00
Ioannis Ilkos
ad1c3e4200 Merge changes from topic "tm-qpr-syssrv-perfetto" into tm-qpr-dev am: a6494f6163 
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/21986577

Change-Id: I37e9725ed27177234f34357ebacd27e1c648dfec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-20 11:01:53 +00:00
Ryan Savitski
fce5dfad47 [automerger skipped] tm-qpr backport: allow perfetto profiling of system_server and sys/platform apps am: b2fecc3954 -s ours 
am skip reason: Merged-In I792ec1812d94b4fa9a8688ed74f2f62f6a7f33a6 with SHA-1 941ba723ba is already in history

Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/21986575

Change-Id: I60f5522549eed817778718cc34a1d09226be25b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-20 11:01:48 +00:00
Ioannis Ilkos
37883b47f8 Merge changes from topic "tm-qpr-oome-perfetto" into tm-qpr-dev 
* changes:
  update api=33 sepolicy prebuilts for perfetto oome heap dumps
  Fix incorrect domain used in system_server.te
  Sysprop for the count of active OOME tracing sessions
 2023-03-20 10:35:12 +00:00
Ioannis Ilkos
a6494f6163 Merge changes from topic "tm-qpr-syssrv-perfetto" into tm-qpr-dev 
* changes:
  update api=33 sepolicy prebuilts for perfetto profiling of system_server and sys/platform apps
  tm-qpr backport: allow perfetto profiling of system_server and sys/platform apps
 2023-03-20 10:31:50 +00:00
Andy Hung
3b7b6c3b30 sepolicy: Add spatial audio configuration properties 
Controls default enable or disable for binaural and transaural.

Ignore-AOSP-First: will land in AOSP afterwards
Test: see bug
Bug: 270980127
Change-Id: I190644e88a520cf13ee2b56066d5afd258460b9e
 2023-03-17 14:58:36 -07:00
Tri Vo
26c4ed9d40 Merge "Remove RemoteProvisioner and remoteprovisioning services" am: 0099ba37f3 am: 45734ff4a7 am: ddc3df3035 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2488295

Change-Id: I46b1309c166d253a0c132c4c70fea547f2fe2619
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-17 19:05:42 +00:00
Tri Vo
ddc3df3035 Merge "Remove RemoteProvisioner and remoteprovisioning services" am: 0099ba37f3 am: 45734ff4a7 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2488295

Change-Id: Iffabeb7cb8cdc23b53dc6cf42743e1da44c20554
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-17 18:26:13 +00:00
Tri Vo
45734ff4a7 Merge "Remove RemoteProvisioner and remoteprovisioning services" am: 0099ba37f3 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2488295

Change-Id: I2dc33e9abbce089d7333aefcd87705ec51756160
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-03-17 17:49:49 +00:00
Tri Vo
0099ba37f3 Merge "Remove RemoteProvisioner and remoteprovisioning services" 2023-03-17 17:18:01 +00:00