Commit graph

43336 commits

Author SHA1 Message Date
Pawan Wagh
e0260436a3 Add media extractor service fuzzer to bindings am: 7f90d50ae0 am: 0e74d4e69e am: bb06602cc1
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2600804

Change-Id: I073576df149593ff8a71b7b208a1c7d67229da31
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 11:16:53 +00:00
Pawan Wagh
bb06602cc1 Add media extractor service fuzzer to bindings am: 7f90d50ae0 am: 0e74d4e69e
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2600804

Change-Id: I77e169712285efaae55c3e99c0e6f2c22b52e15f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 10:31:44 +00:00
Pawan Wagh
0e74d4e69e Add media extractor service fuzzer to bindings am: 7f90d50ae0
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2600804

Change-Id: I93e6bd14348c61ac75adba21f9d9f92567837e16
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 09:48:31 +00:00
Jooyung Han
61b46b6159 Fix apex_sepolicy_tests_test
In QueryTERule(), scontext argument works like OR-set while the test
rules should treat them as AND-set.

Bug: 285075529
Test: apex_sepolicy_tests_test
Change-Id: Ie33b8dd6bf62db67ad3762835c1500c81d975707
2023-05-31 17:41:28 +09:00
Pawan Wagh
7f90d50ae0 Add media extractor service fuzzer to bindings
Test: m
Bug: 232439428
Change-Id: I660c54df153993056668b6774d177072d8eadc3b
2023-05-31 01:19:21 +00:00
Treehugger Robot
8e448cbbfc Merge "Allow media server configurable flags to be read from anywhere" into udc-dev am: ed183c86a9
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/23382984

Change-Id: I222304b6b75c5a92e08689fc8abb319ddefea00f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-30 21:48:19 +00:00
Brian Lindahl
b140ce43e4 Allow media server configurable flags to be read from anywhere am: ffeb680417 am: 7975447205 am: 9d16f70010 am: 35ea33c233 am: 94e54d5eb0 am: 6e6229bb73 am: da80fcc173
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/23455832

Change-Id: If8420d67b44faca4038f525955b5990af5c014cf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-30 21:48:15 +00:00
Treehugger Robot
ed183c86a9 Merge "Allow media server configurable flags to be read from anywhere" into udc-dev 2023-05-30 21:11:18 +00:00
Brian Lindahl
da80fcc173 Allow media server configurable flags to be read from anywhere am: ffeb680417 am: 7975447205 am: 9d16f70010 am: 35ea33c233 am: 94e54d5eb0 am: 6e6229bb73
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2605806

Bug: 234833109
Test: manual test with 'adb shell device_config' commands
Ignore-AOSP-First: cherry pick from AOSP
Change-Id: I4d9de68549de6f1664711c5da1bed3dfc034a21b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
(cherry picked from commit 1d2f8fa03f)
2023-05-26 23:49:29 +00:00
Brian Lindahl
3c818406c4 Allow media server configurable flags to be read from anywhere
The majority of code for media encoding and decoding occurs within the
context of client app processes via linking with libstagefright. This
code needs access to server-configurable flags to configure
codec-related features.

Bug: 234833109
Test: manual test with 'adb shell device_config' commands
Ignore-AOSP-First: cherry pick from AOSP
Change-Id: I95aa6772a40599636d109d6960c2898e44648c9b
2023-05-26 22:53:40 +00:00
Steven Moreland
4f70ae5aa6 Merge "strengthen app_data_file neverallows" am: 46288c6b97 am: 5b0dad1c2a am: 1989332545
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2599511

Change-Id: I61e512562c3db401cdaaed373b97b2dc1580fe20
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 20:20:08 +00:00
Steven Moreland
1989332545 Merge "strengthen app_data_file neverallows" am: 46288c6b97 am: 5b0dad1c2a
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2599511

Change-Id: Ibf4ad655141e5e46e3c427033cdd118704350b5e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 18:47:36 +00:00
Steven Moreland
5b0dad1c2a Merge "strengthen app_data_file neverallows" am: 46288c6b97
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2599511

Change-Id: I9588b6ca25d90b6faf2e7c6f994e1d0f13423011
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 16:59:47 +00:00
Steven Moreland
46288c6b97 Merge "strengthen app_data_file neverallows" 2023-05-26 15:32:15 +00:00
Brian Lindahl
35ea33c233 Allow media server configurable flags to be read from anywhere am: ffeb680417 am: 7975447205 am: 9d16f70010
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2605806

Change-Id: I699cab1755fee0c02ff74a62245238d51328b61b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 09:01:44 +00:00
Brian Lindahl
9d16f70010 Allow media server configurable flags to be read from anywhere am: ffeb680417 am: 7975447205
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2605806

Change-Id: Idaf0f93454e499b0499ac7611d45de00a223f9ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 08:12:04 +00:00
Brian Lindahl
7975447205 Allow media server configurable flags to be read from anywhere am: ffeb680417
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2605806

Change-Id: I11ebd0146487c21f95661756da8c780e96ec88dc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 07:29:31 +00:00
Brian Lindahl
ffeb680417 Allow media server configurable flags to be read from anywhere
The majority of code for media encoding and decoding occurs within the
context of client app processes via linking with libstagefright. This
code needs access to server-configurable flags to configure
codec-related features.

Bug: 234833109
Test: manual test with 'adb shell device_config' commands
Change-Id: I95aa6772a40599636d109d6960c2898e44648c9b
2023-05-25 20:48:00 -06:00
Treehugger Robot
d3fe5e76f3 Merge "Add sepolicy for ro.build.ab_update.ab_ota_partitions" am: cd69d35a5e am: b7185cb58e am: ed859c9fd8
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2597146

Change-Id: I55e7784d8efbea27201df09ddf08702ddcf810d1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 13:06:21 +00:00
Treehugger Robot
ed859c9fd8 Merge "Add sepolicy for ro.build.ab_update.ab_ota_partitions" am: cd69d35a5e am: b7185cb58e
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2597146

Change-Id: I1a929427aebd923c184d860ed2a308e607e25bbb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 12:21:05 +00:00
Treehugger Robot
b7185cb58e Merge "Add sepolicy for ro.build.ab_update.ab_ota_partitions" am: cd69d35a5e
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2597146

Change-Id: I62f9713ec4965b709d3ff38d20bad629538281f0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 11:38:08 +00:00
Treehugger Robot
cd69d35a5e Merge "Add sepolicy for ro.build.ab_update.ab_ota_partitions" 2023-05-25 11:14:40 +00:00
Treehugger Robot
c684d3919a Merge "Set up sepolicy for drmserver64" am: 8a676d0a4c am: 4ee23573de am: cd18eb9883
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2588745

Change-Id: I0a50a888cdcf2a64752c9c2e3bf096306e97936b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 03:50:01 +00:00
Treehugger Robot
23e8e00690 Merge "Allow ueventd to read apexd property" am: d16bf50b26 am: 4774a44073 am: f3dfb131e3
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1933081

Change-Id: I5bb9c934dd8bb34f9f209a9153a50942c58351ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 03:49:14 +00:00
Treehugger Robot
cd18eb9883 Merge "Set up sepolicy for drmserver64" am: 8a676d0a4c am: 4ee23573de
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2588745

Change-Id: Ic9c18e99b6c0b30ddbcca00a17a09ead592f004e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 03:05:16 +00:00
Treehugger Robot
f3dfb131e3 Merge "Allow ueventd to read apexd property" am: d16bf50b26 am: 4774a44073
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1933081

Change-Id: Ib959a2a2264aae346cc0032697772194bb24f2c3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 03:02:59 +00:00
Treehugger Robot
4ee23573de Merge "Set up sepolicy for drmserver64" am: 8a676d0a4c
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2588745

Change-Id: Ie4492ca6077731143c26f3431546503e9491850a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 02:46:47 +00:00
Treehugger Robot
8a676d0a4c Merge "Set up sepolicy for drmserver64" 2023-05-25 02:22:45 +00:00
Treehugger Robot
4774a44073 Merge "Allow ueventd to read apexd property" am: d16bf50b26
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1933081

Change-Id: Id718a1c924686618b2154f158b7ab8134fd03b11
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 02:22:10 +00:00
Treehugger Robot
d16bf50b26 Merge "Allow ueventd to read apexd property" 2023-05-25 01:40:11 +00:00
Kelvin Zhang
60456bd47e Add sepolicy for ro.build.ab_update.ab_ota_partitions
Bug: 283042235
Test: th
Change-Id: Ie2296b75c91fbeb83cb0f3e61d5013b106fb78d0
2023-05-24 18:26:12 -07:00
Pawan Wagh
a4a07e3fb4 Merge "Add media metrics aidl fuzzer to bindings" am: 144cad1b19 am: cf26f9e29b am: 31fe43e0da
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2601825

Change-Id: I070aa4b459e0953e3f502fb0b1daab4e8329aefe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 00:53:20 +00:00
Pawan Wagh
31fe43e0da Merge "Add media metrics aidl fuzzer to bindings" am: 144cad1b19 am: cf26f9e29b
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2601825

Change-Id: I133706deb2a3e6336d2f1936a3e01027c1215da9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 00:20:28 +00:00
Pawan Wagh
cf26f9e29b Merge "Add media metrics aidl fuzzer to bindings" am: 144cad1b19
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2601825

Change-Id: Ibe6ec501030cd0999d307a0c3709c46325c6ca9f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 23:39:51 +00:00
Treehugger Robot
64913418e4 Merge "strengthen debugfs neverallows" am: 4f36bd15ac am: 863fea7e62 am: 5a0664065e
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2599510

Change-Id: I63a64e70a61d801da240afde6abe14ea7c3f0cc7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 23:16:32 +00:00
Pawan Wagh
144cad1b19 Merge "Add media metrics aidl fuzzer to bindings" 2023-05-24 23:01:42 +00:00
Treehugger Robot
5a0664065e Merge "strengthen debugfs neverallows" am: 4f36bd15ac am: 863fea7e62
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2599510

Change-Id: I9c12dd0e933f6e5c4917db5c1ccdadd985dce7d3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 22:25:47 +00:00
Treehugger Robot
863fea7e62 Merge "strengthen debugfs neverallows" am: 4f36bd15ac
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2599510

Change-Id: Iebd1d30d6fd58a68f369d2d25c55038bab32acdc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 21:22:44 +00:00
Treehugger Robot
4f36bd15ac Merge "strengthen debugfs neverallows" 2023-05-24 20:30:34 +00:00
Steven Moreland
0bb95dd4fd Merge "strengthen proc_type neverallows" am: fd92d967ee am: 12523b02c3 am: 79190c4da7
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2599509

Change-Id: I210c48f15715cb5c4f808341d39beefc996e30c7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 20:14:29 +00:00
Steven Moreland
79190c4da7 Merge "strengthen proc_type neverallows" am: fd92d967ee am: 12523b02c3
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2599509

Change-Id: I3fb3d1eb8ff32705c35dc4e01a818b3382fa8146
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 19:28:17 +00:00
Steven Moreland
12523b02c3 Merge "strengthen proc_type neverallows" am: fd92d967ee
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2599509

Change-Id: Id85e2319971b1be4924dc68b6becfb1c6ceac901
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 18:41:12 +00:00
Steven Moreland
fd92d967ee Merge "strengthen proc_type neverallows" 2023-05-24 18:01:14 +00:00
Jin Jeong
68a7bc07f3 [automerger skipped] Merge "Revert "Fix selinux denial for setupwizard_esim_prop"" am: f21abea1b7 am: 8da5ffe780 am: 5f2f77e4d4 -s ours
am skip reason: Merged-In I00cac36ac2f2a23d02c99b9ad9df57061d1ae61c with SHA-1 9627dc5c78 is already in history

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2602191

Change-Id: Ib3a2cd802261597abcf7370f619ba93cbd631223
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 10:35:41 +00:00
Jin Jeong
2af1ac3e0c [automerger skipped] Merge "Revert "Add setupwizard_esim_prop to access ro.setupwizard.esim_cid_ignore"" am: d7558db004 am: ce817552f5 am: 456e45136f -s ours
am skip reason: Merged-In I0c2bfe55987949ad52f62e468c84df954f39a4ad with SHA-1 ec4fe33a6a is already in history

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2588746

Change-Id: If9ae57d0c415fa5255b9ed916c4f218a84e3dd73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 10:35:37 +00:00
Jin Jeong
5f2f77e4d4 Merge "Revert "Fix selinux denial for setupwizard_esim_prop"" am: f21abea1b7 am: 8da5ffe780
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2602191

Change-Id: Ibd3bce75555e1a8d06520ea494158afb2993ca8d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 09:50:38 +00:00
Jin Jeong
456e45136f Merge "Revert "Add setupwizard_esim_prop to access ro.setupwizard.esim_cid_ignore"" am: d7558db004 am: ce817552f5
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2588746

Change-Id: I46b0be3db08ff209c9b7c7ee127ca9b68f5619a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 09:50:36 +00:00
Jin Jeong
8da5ffe780 Merge "Revert "Fix selinux denial for setupwizard_esim_prop"" am: f21abea1b7
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2602191

Change-Id: I5e659ea7ac65f4680cd7702e24236aabcd01bc3a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 09:12:46 +00:00
Jin Jeong
ce817552f5 Merge "Revert "Add setupwizard_esim_prop to access ro.setupwizard.esim_cid_ignore"" am: d7558db004
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2588746

Change-Id: Ic4796f40dfb4e24a726aba37377d2bd6e9e95809
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 09:12:43 +00:00
Jin Jeong
f21abea1b7 Merge "Revert "Fix selinux denial for setupwizard_esim_prop"" 2023-05-24 08:21:54 +00:00