tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
43336 commits 1 branch 0 tags 50 MiB
Commit graph

43336 commits

This branch
This branch
All branches
Author SHA1 Message Date
Zhanglong Xia
87c6069fe1 Merge "Add sepolicy rules for Thread Network HAL" 2023-07-01 00:12:41 +00:00
Zhanglong Xia
b2d1fbb7b2 Add sepolicy rules for Thread Network HAL 
Bug: b/283905423
Test: Build and run the Thread Network stack in Cuttlefish.
Change-Id: I783022c66b80274069f8f3c292d84918f41f8221
 2023-06-30 10:56:38 +08:00
Jiyong Park
bd1be6c554 Allow microdroid_payload to read /dev/console 
The first serial device of the VM can be made bi-directional. When it is
used as an output device, it's via /dev/kmsg. microdroid_payload already
has a write access to it. When it is used as an input device, it's via
/dev/console. Grant microdroid_payload read access to the device.

Bug: 263360203
Test: atest MicrodroidTestApp:com.android.microdroid.test.MicrodroidTests#testConsoleInputSupported
Change-Id: Ief039d06ffbddee1e254d662a6c1f321a607d5f5
 2023-06-29 19:03:34 +09:00
Wanhong Jiang
d18e345b8f webview: add cgroup dir create permission 
On 32 bit gsi img, when the webview launch, system will crash, due to
system_server not have the selinux permission of cgroup dir create.
Only 32 bit gsi img has this issue, 64 bit not have.

Bug: 288190486
Test: flash 32-bit GSI image and boot to check whether webview crash

Change-Id: I60fe69087ddbf97b5ebba62bf151626f9422c43c
 2023-06-28 18:35:53 +08:00
Max Bires
78b2a5e51e Merge "Remove deprecated enable_rkpd property" am: bc792606dc am: 93bb9bfed6 am: 66b01f6bf9 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2634094

Change-Id: I7dc7ec59b65897a0ce7623419066012da13bb9f5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-27 01:55:49 +00:00
Max Bires
66b01f6bf9 Merge "Remove deprecated enable_rkpd property" am: bc792606dc am: 93bb9bfed6 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2634094

Change-Id: Id15af76a938af63870d7c19877f6db984b6f32ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-27 01:03:58 +00:00
Xin Li
f4530e7e3d [automerger skipped] Merge "Merge Android 13 QPR3" am: 372f5cd14e -s ours am: 6ae8c164ff -s ours am: a2d57cf6ef -s ours 
am skip reason: Merged-In I89a052032341990256d608d6708b6d1ac8aceda9 with SHA-1 d947550b6f is already in history

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2634999

Change-Id: I07f336c4b3469f34cf9426745d65dd69afa2311f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-27 00:34:38 +00:00
Xin Li
ec61c1f715 [automerger skipped] Merge Android 13 QPR3 am: 4f5ba7ca8d -s ours am: b5699ce8e3 -s ours am: 17ede297ad -s ours 
am skip reason: Merged-In I89a052032341990256d608d6708b6d1ac8aceda9 with SHA-1 d947550b6f is already in history

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2634999

Change-Id: I9518dcbd475846f97014356121ac9ed9df7b54d2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-27 00:32:44 +00:00
Max Bires
93bb9bfed6 Merge "Remove deprecated enable_rkpd property" am: bc792606dc 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2634094

Change-Id: I3062463c70e08c86cbbecb759576fa072fa23bf7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-27 00:21:17 +00:00
Max Bires
bc792606dc Merge "Remove deprecated enable_rkpd property" 2023-06-27 00:14:29 +00:00
Xin Li
a2d57cf6ef [automerger skipped] Merge "Merge Android 13 QPR3" am: 372f5cd14e -s ours am: 6ae8c164ff -s ours 
am skip reason: Merged-In I89a052032341990256d608d6708b6d1ac8aceda9 with SHA-1 d947550b6f is already in history

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2634999

Change-Id: I821776a07b6b426e1d9a3b027942c69dc16aac8d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 23:12:29 +00:00
Xin Li
17ede297ad [automerger skipped] Merge Android 13 QPR3 am: 4f5ba7ca8d -s ours am: b5699ce8e3 -s ours 
am skip reason: Merged-In I89a052032341990256d608d6708b6d1ac8aceda9 with SHA-1 d947550b6f is already in history

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2634999

Change-Id: Ia2091fc586077e64b652dff32270133e05a7aa2d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 23:10:36 +00:00
Xin Li
6ae8c164ff [automerger skipped] Merge "Merge Android 13 QPR3" am: 372f5cd14e -s ours 
am skip reason: Merged-In I89a052032341990256d608d6708b6d1ac8aceda9 with SHA-1 d947550b6f is already in history

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2634999

Change-Id: I36c5b52ad74f0770d5accfaf903f8f3cc8442530
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 22:59:46 +00:00
Xin Li
b5699ce8e3 [automerger skipped] Merge Android 13 QPR3 am: 4f5ba7ca8d -s ours 
am skip reason: Merged-In I89a052032341990256d608d6708b6d1ac8aceda9 with SHA-1 d947550b6f is already in history

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2634999

Change-Id: I692ee95e1dfbcbee24487c91feed6a9cc927d15d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 22:57:51 +00:00
Xin Li
372f5cd14e Merge "Merge Android 13 QPR3" 2023-06-26 22:29:53 +00:00
Dave Mankoff
ca71c58731 SE Linux perimissions for Feature Flags Service am: 665cad0d2c am: 2793152d6f am: d28466469a 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2638309

Change-Id: I39b99d528fce3c45756ff502ccdd6fb003dd4dc2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 21:06:54 +00:00
Dave Mankoff
d28466469a SE Linux perimissions for Feature Flags Service am: 665cad0d2c am: 2793152d6f 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2638309

Change-Id: Iab0a16cbb5d345bf11f40e6647ae8786bec5d58e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 20:21:44 +00:00
Dave Mankoff
2793152d6f SE Linux perimissions for Feature Flags Service am: 665cad0d2c 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2638309

Change-Id: Ib39b9721489dec0a32bd41fb2b5f04b44b8c349a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 19:35:21 +00:00
Treehugger Robot
33fb170fcd Merge changes from topic "34.0_sepolicy_mapping" am: 35a6d49c02 am: 473a600e28 am: ff01e4a73d 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2636991

Change-Id: I75625c33e99c7d9f41d4d588e5f04f357abdbf0b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 14:14:52 +00:00
Jay Civelli
f7969a8d95 Add 2 new system properties for Quick Start am: a574060586 am: 0afd410d15 am: f156451f32 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2636990

Change-Id: Iab1ed0a1dcfd771e2f47fb8e7eaa9e58b13ff22e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 14:14:49 +00:00
Inseob Kim
50f5f41fa9 [automerger skipped] SEPolicy Prebuilts for 34.0 am: 34ad1d0bc1 am: 9d1f5152c5 am: ae82b39397 -s ours 
am skip reason: Merged-In I15bf3817a8a6867d52f7963a04a69e543a9801e9 with SHA-1 9c6c988bad is already in history

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2636989

Change-Id: I3afc20f923c3a6e25989df0d8b5b7e470d280ae1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 14:14:46 +00:00
Dave Mankoff
665cad0d2c SE Linux perimissions for Feature Flags Service 
Bug: 279054964
Test: build && flash
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:a1f8ca3cd3c4861a06c5042148aab6623a563651)
Merged-In: I5fffaccba61e218496ac82ccf9ba308cf9892868
Change-Id: I5fffaccba61e218496ac82ccf9ba308cf9892868
 2023-06-26 13:42:45 +00:00
Treehugger Robot
ff01e4a73d Merge changes from topic "34.0_sepolicy_mapping" am: 35a6d49c02 am: 473a600e28 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2636991

Change-Id: Ia54372841c6e3c66c29f46999bee7fe7da2e920b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 13:25:55 +00:00
Jay Civelli
f156451f32 Add 2 new system properties for Quick Start am: a574060586 am: 0afd410d15 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2636990

Change-Id: Ie05142dc1ef4d0a30126f615575ca6d0e325497e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 13:25:52 +00:00
Inseob Kim
ae82b39397 SEPolicy Prebuilts for 34.0 am: 34ad1d0bc1 am: 9d1f5152c5 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2636989

Change-Id: Ib9a775b617a880f84a4365414cfc76a48b0c31ab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 13:25:49 +00:00
Treehugger Robot
473a600e28 Merge changes from topic "34.0_sepolicy_mapping" am: 35a6d49c02 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2636991

Change-Id: I5b6e36c095805560e313221b8d3e316af082b324
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 12:45:16 +00:00
Jay Civelli
0afd410d15 Add 2 new system properties for Quick Start am: a574060586 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2636990

Change-Id: Ib9fb707735f49c7ff8db5c329caf149063608d18
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 12:45:13 +00:00
Inseob Kim
9d1f5152c5 SEPolicy Prebuilts for 34.0 am: 34ad1d0bc1 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2636989

Change-Id: I244401245e25e8948678ee6877f3b68636978044
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-26 12:45:10 +00:00
Treehugger Robot
35a6d49c02 Merge changes from topic "34.0_sepolicy_mapping" 
* changes:
  Add 34.0 mapping files
  Add 2 new system properties for Quick Start
  SEPolicy Prebuilts for 34.0
 2023-06-26 12:04:42 +00:00
Inseob Kim
b181ad47a8 Merge "Sync 34.0 prebuilts with udc-dev" into udc-dev-plus-aosp 2023-06-26 04:24:12 +00:00
Inseob Kim
da67e052a4 Sync 34.0 prebuilts with udc-dev 
Because of some incorrect usages of Merged-In, udc-dev and
udc-dev-plus-aosp's 34.0 prebuilts are diverged a little.

Ignore-AOSP-First: not related to AOSP

Bug: 288517951
Test: build
Change-Id: Ia8061e978c700165add68dfa674f23844fe65824
Merged-In: I7c35cf6e3ac7177bb8d812fc59bbbdf70083040b
 2023-06-26 00:40:45 +00:00
Brian Lindahl
b3e301d6f9 Merge "Force HALs to explicitly enable legacy method for clearing buffer caches am: 612ab8588f am: 73c779e5fd am: 6e1d399ea5 am: eb690132f9 am: 4151bc0423 am: 394601926f" into udc-dev am: fb3feae241 
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/23754166

Change-Id: I6e7081df256c7ed9ce46e07a2366c6dbadabee7f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-23 22:06:37 +00:00
Brian Lindahl
f337cd0ba4 Force HALs to explicitly enable legacy method for clearing buffer caches am: 4fa55dce1f 
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/23714935

Change-Id: Ia2dcc945c295ec49afbc01c1a3749dfec6508b46
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-23 22:06:33 +00:00
Brian Lindahl
fb3feae241 Merge "Force HALs to explicitly enable legacy method for clearing buffer caches am: 612ab8588f am: 73c779e5fd am: 6e1d399ea5 am: eb690132f9 am: 4151bc0423 am: 394601926f" into udc-dev 2023-06-23 21:18:40 +00:00
Treehugger Robot
d36e33e82a Merge "Add MediaPlayerService fuzzer to bindings" am: 289fe96dc8 am: f0d5eb54ff am: f08a62ecd0 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2631949

Change-Id: I7840a706313458384edc8d3ed6d31046a9c6e65a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-23 20:04:59 +00:00
Treehugger Robot
f08a62ecd0 Merge "Add MediaPlayerService fuzzer to bindings" am: 289fe96dc8 am: f0d5eb54ff 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2631949

Change-Id: I66f9f34686afcbf71e4b86e648b79c97f1dcbe09
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-23 19:18:36 +00:00
Treehugger Robot
f0d5eb54ff Merge "Add MediaPlayerService fuzzer to bindings" am: 289fe96dc8 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2631949

Change-Id: I497c74a770550262be863862700ffcebb6d8a7c7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-23 18:34:45 +00:00
Treehugger Robot
289fe96dc8 Merge "Add MediaPlayerService fuzzer to bindings" 2023-06-23 17:35:27 +00:00
Inseob Kim
78fd639cac Add 34.0 mapping files 
Bug: 288517951
Test: m treble_sepolicy_tests_34.0
Test: m 34.0_compat_test
Test: m selinux_policy
Change-Id: I5c20439dd2c7e5a8d739b8ea9a97e5060ce3cec4
 2023-06-23 10:43:17 +00:00
Jay Civelli
a574060586 Add 2 new system properties for Quick Start 
Test: Manually validated that GmsCore can access the properties, but not a test app.
Change-Id: I2fa520dc31b328738f9a5fd1bcfc6632b61ad912
Bug: 280330984
(cherry picked from commit c97b3a244f)
 2023-06-23 10:43:11 +00:00
Inseob Kim
34ad1d0bc1 SEPolicy Prebuilts for 34.0 
Bug: 288517951
Test: build
Change-Id: I682e553ec8090281ded447780be41a8ea222b084
Merged-In: I15bf3817a8a6867d52f7963a04a69e543a9801e9
 2023-06-23 10:23:59 +00:00
Steven Moreland
edd361bf2e Merge "Give serial number access to drm hal server not client" am: ca5f06cdb9 am: 659dd24ae5 am: c74231dfa3 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2616969

Change-Id: Id2cc5dbbafffb4633706e5cc728cb44abd417340
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-21 23:52:00 +00:00
Max Bires
8a74ff2e2d Remove deprecated enable_rkpd property 
The enable_rkpd property is no longer needed. This change removes the
vestigial property.

Test: Successful build
Change-Id: I810d5a21cbe01b43a37244959e21febd0880be59
 2023-06-21 16:33:42 -07:00
Steven Moreland
c74231dfa3 Merge "Give serial number access to drm hal server not client" am: ca5f06cdb9 am: 659dd24ae5 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2616969

Change-Id: Ibfc3f75f0ffc614f801b26f869db6fb703ed778a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-21 23:05:28 +00:00
Xin Li
4f5ba7ca8d Merge Android 13 QPR3 
Bug: 275386652
Merged-In: I89a052032341990256d608d6708b6d1ac8aceda9
Change-Id: Ifa06cf00a9afba89d0d31c865dc5fde9bf1c05e6
 2023-06-21 15:16:15 -07:00
Steven Moreland
659dd24ae5 Merge "Give serial number access to drm hal server not client" am: ca5f06cdb9 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2616969

Change-Id: Id931b2d4509f207a8a20e3f789de2e3808ee430a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-21 22:03:53 +00:00
Steven Moreland
ca5f06cdb9 Merge "Give serial number access to drm hal server not client" 2023-06-21 21:27:09 +00:00
Brian Lindahl
15a1292b2b Force HALs to explicitly enable legacy method for clearing buffer caches am: 612ab8588f am: 73c779e5fd am: 6e1d399ea5 am: eb690132f9 am: 4151bc0423 am: 394601926f 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2627815

Bug: 285561686
Ignore-AOSP-First: Already merged into AOSP
Change-Id: Ida8363294bd4fca8b7d93deb3b90ba2c02fd53bc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
(cherry picked from commit c7f298880a)
 2023-06-21 16:40:26 +00:00
Treehugger Robot
8743379791 Merge "Remove flatten_apex: property" am: 7f7e8d79a9 am: d947550b6f am: a7627cf627 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2628996

Change-Id: I928001ab7426a6a247315293d0b6a86e176f8bf1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-21 06:29:40 +00:00
Treehugger Robot
a7627cf627 Merge "Remove flatten_apex: property" am: 7f7e8d79a9 am: d947550b6f 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2628996

Change-Id: I4e4b6ffab443391acbd51c11bfbd71e4b41e57da
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-06-21 06:02:31 +00:00