tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
24457 commits 1 branch 0 tags 50 MiB
Commit graph

24457 commits

This branch
This branch
All branches
Author SHA1 Message Date
Automerger Merge Worker
175f2709f8 Update Q sepolicy prebuilt am: 5f6290f3a9 am: daa110d022 am: 09a4e3c0f0 
Change-Id: I14a10ffd0baddc5b34541130d052ed42f4163468
 2020-02-13 04:40:53 +00:00
Automerger Merge Worker
09a4e3c0f0 Update Q sepolicy prebuilt am: 5f6290f3a9 am: daa110d022 
Change-Id: I78a4b47a575710502045a5b22e597dce8392829e
 2020-02-13 04:30:15 +00:00
Treehugger Robot
d39a906a25 Merge "property_contexts: add location cache" 2020-02-13 04:27:21 +00:00
Automerger Merge Worker
daa110d022 Update Q sepolicy prebuilt am: 5f6290f3a9 
Change-Id: Ie2970158c52e3675e17421ef4973cc926ddd4db5
 2020-02-13 04:13:10 +00:00
Etan Cohen
fde1dadc71 [WIFICOND] Rename service to nl80211 
Per API council feedback.

Bug: 149105833
Bug: 148680192
Test: atest android.net.wifi
Test: atest com.android.server.wifi
Test: manual - flash/boot - verify Wi-Fi scan/associate
Change-Id: Idaf7603d4ab79ddde5c223097ed9fe8734299eea
 2020-02-12 11:26:59 -08:00
George Chang
db1dbd94a1 Add sepolicy for persist.nfc_cfg. 
Add a new nfc_cfg persist property for nfc features

Bug: 142626304
Test: set property and load target files.
Change-Id: I853c97e8113dbcf729cf59ad45895402b0c82b3e
 2020-02-12 16:20:52 +00:00
Automerger Merge Worker
1d90081baa Update Q sepolicy prebuilt am: 1dd6321a00 am: f4ccc4ba1a 
Change-Id: I816b72245193ac1b1eda8dc3674b28ef551e2f83
 2020-02-12 12:30:42 +00:00
Automerger Merge Worker
5b51f6faef [automerger skipped] Fix: dumpstate HAL service property context am: 5927933c70 -s ours am: bdfd9bcc18 -s ours 
am skip reason: Change-Id Ie24e2d42e92410a935ca4c9364b476d72aa459f3 with SHA-1 046c510402 is in history

Change-Id: I53e3ed1260a0bca1cd875ef7768eb5027cf6a20e
 2020-02-12 12:30:40 +00:00
Automerger Merge Worker
f4ccc4ba1a Update Q sepolicy prebuilt am: 1dd6321a00 
Change-Id: I8caa160f6c9e7b86f6bab5848f9027a45c0a16c5
 2020-02-12 12:18:45 +00:00
Automerger Merge Worker
bdfd9bcc18 [automerger skipped] Fix: dumpstate HAL service property context am: 5927933c70 -s ours 
am skip reason: Change-Id Ie24e2d42e92410a935ca4c9364b476d72aa459f3 with SHA-1 046c510402 is in history

Change-Id: Iff9d6ccbff59635c0549662234b82d0ea4232479
 2020-02-12 12:18:41 +00:00
Alex Hong
5f6290f3a9 Update Q sepolicy prebuilt 
This updates 29.0 api for dumpstate restart control property contexts

Bug: 147730517
Change-Id: I0aa7450dc0fb34de321cf8d2ba357b2ecabbcf43
 2020-02-12 12:07:43 +08:00
Automerger Merge Worker
75b244da1f Merge "Use setxattr for incremental-fs" am: 2ddfad3709 am: 3b77d78709 am: 1ae4188d63 
Change-Id: I7e53e9b1d146f89c370af2ccf0f39626956b721d
 2020-02-12 00:53:26 +00:00
Automerger Merge Worker
1ae4188d63 Merge "Use setxattr for incremental-fs" am: 2ddfad3709 am: 3b77d78709 
Change-Id: I60e7729ebbc64259c0176852547d2c53db0d9723
 2020-02-12 00:39:23 +00:00
Automerger Merge Worker
3b77d78709 Merge "Use setxattr for incremental-fs" am: 2ddfad3709 
Change-Id: Ia0773813cc8c81517f09e2dd3e2e4134f6146ffb
 2020-02-12 00:14:17 +00:00
Songchun Fan
2ddfad3709 Merge "Use setxattr for incremental-fs" 2020-02-11 23:56:51 +00:00
Songchun Fan
ecafc55b70 Use setxattr for incremental-fs 
BUG: b/133435829
Test: manual
Change-Id: I782f2041da5824fe28917789208e00d6ed10de79
 2020-02-11 14:33:08 -08:00
Automerger Merge Worker
259264cd6c Merge "rebootescrow: allow dumpstate to call via binder" am: 4def25f171 am: 222d5c7a16 am: 3f12acd2f7 
Change-Id: I5408afce8e9d1b6ac4addd9ddcc51dd3b5b19ce2
 2020-02-11 22:14:40 +00:00
Automerger Merge Worker
924f09c6f1 Merge "selinux rules for apk files installed with Incremental" am: fcbfe3155f am: a0c022882c am: acab3cff75 
Change-Id: If8d0b2c9955fba6caa5587a063a521399905ca70
 2020-02-11 22:14:22 +00:00
Automerger Merge Worker
3f12acd2f7 Merge "rebootescrow: allow dumpstate to call via binder" am: 4def25f171 am: 222d5c7a16 
Change-Id: I9005d0be42b25d10a08a3b43b85314a5d90ec8a5
 2020-02-11 21:54:20 +00:00
Automerger Merge Worker
acab3cff75 Merge "selinux rules for apk files installed with Incremental" am: fcbfe3155f am: a0c022882c 
Change-Id: I5fc36ba0b918eac9e1a5499041c6bee208ebe156
 2020-02-11 21:54:07 +00:00
Automerger Merge Worker
222d5c7a16 Merge "rebootescrow: allow dumpstate to call via binder" am: 4def25f171 
Change-Id: Ifbb92aa5e6dd5e31ec7774a46be918f358013848
 2020-02-11 21:34:03 +00:00
Automerger Merge Worker
a0c022882c Merge "selinux rules for apk files installed with Incremental" am: fcbfe3155f 
Change-Id: I179b22c05e431d922871f44ea4f2272024bbd1a4
 2020-02-11 21:33:49 +00:00
Kenny Root
4def25f171 Merge "rebootescrow: allow dumpstate to call via binder" 2020-02-11 21:25:29 +00:00
Songchun Fan
fcbfe3155f Merge "selinux rules for apk files installed with Incremental" 2020-02-11 21:24:04 +00:00
Automerger Merge Worker
ffcafc7044 Merge "grant power hal client to access stable power hal service" am: a3b19be219 am: cadbe8d8ff am: 85abbc9fc0 
Change-Id: I08c3a8e776fa461165f6f5a24fbf21b80621882a
 2020-02-11 18:01:55 +00:00
Automerger Merge Worker
85abbc9fc0 Merge "grant power hal client to access stable power hal service" am: a3b19be219 am: cadbe8d8ff 
Change-Id: I65205afee290ce02cf7dee970555985b835c7898
 2020-02-11 17:52:49 +00:00
Automerger Merge Worker
cadbe8d8ff Merge "grant power hal client to access stable power hal service" am: a3b19be219 
Change-Id: I49eb8ea8e1d664baf719e72b98ed43137cd60557
 2020-02-11 17:37:51 +00:00
Wei Wang
a3b19be219 Merge "grant power hal client to access stable power hal service" 2020-02-11 17:18:38 +00:00
Ken Chen
64f0be204b Define sepolicy for redirect-socket-calls feature 
Define two property_context.

1. vendor_socket_hook_prop - for ro.vendor.redirect_socket_calls. The
property set once in vendor_init context. It's evaluated at process
start time and is cannot change at runtime on a given device. The set
permission is restricted to vendor_init. The read permission is
unrestricted.

2. socket_hook_prop - for net.redirect_socket_calls.hooked. The
property can be changed by System Server at runtime. It's evaluated when
shimmed socket functions is called. The set permission is restricted to
System Server. The read permission is unrestricted.

Bug: Bug: 141611769
Test: System Server can set net.redirect_socket_calls.hooked
      libnetd_client can read both properties
      libnetd_client can't set both properties

Change-Id: Ic42269539923e6930cc0ee3df8ba032797212395
 2020-02-11 20:55:02 +08:00
Alex Hong
1dd6321a00 Update Q sepolicy prebuilt 
This updates 29.0 api for dumpstate restart control property contexts

Bug: 147730517
Change-Id: I0aa7450dc0fb34de321cf8d2ba357b2ecabbcf43
 2020-02-11 13:53:22 +08:00
Kenny Root
7ae220742c rebootescrow: allow dumpstate to call via binder 
Allow dumpstate to call into rebootescrow to request debug information.

Bug: 148763226
Test: adb bugreport
Change-Id: Ib336cab755998b1ddcd7848b3e544c2e0f09c1aa
 2020-02-10 21:28:32 -08:00
Automerger Merge Worker
0b18794a23 Merge "sepolicy: new prereboot_data_file type" am: e8b7cecad3 am: b98676bc7a am: 4cfad4bd0c 
Change-Id: I730e1d0c934f5588c9dc3e6f6de98ee6eaae7aab
 2020-02-11 03:27:40 +00:00
Automerger Merge Worker
4cfad4bd0c Merge "sepolicy: new prereboot_data_file type" am: e8b7cecad3 am: b98676bc7a 
Change-Id: Ie609dc28fc97f1973eea4bebea0089e35d97f47f
 2020-02-11 03:17:41 +00:00
Automerger Merge Worker
b98676bc7a Merge "sepolicy: new prereboot_data_file type" am: e8b7cecad3 
Change-Id: I1250ca1cdd98f428438bb1e50d7c7c6fa5f0989e
 2020-02-11 03:08:56 +00:00
Jerry Chang
e8b7cecad3 Merge "sepolicy: new prereboot_data_file type" 2020-02-11 02:49:29 +00:00
Automerger Merge Worker
51febc5e3a Merge "Update sepolicy to allow pushing atoms from surfaceflinger to statsd" am: c95ae9044d am: 0d8788688f am: 48ad52b24b 
Change-Id: I6c843f4fb34835767d4d0f77b47613612ab003ba
 2020-02-11 01:42:54 +00:00
Automerger Merge Worker
48ad52b24b Merge "Update sepolicy to allow pushing atoms from surfaceflinger to statsd" am: c95ae9044d am: 0d8788688f 
Change-Id: I3ad605df4276c31b8bac8a6d46dcac0eaacf1c9e
 2020-02-11 01:31:11 +00:00
Automerger Merge Worker
7e35595d97 Merge "Allow dumpstate access to /dev/binderfs/binder_logs" am: d13e12f9cc am: 6a18420ec5 am: e3ae58f557 
Change-Id: Id24cb443c74503f02372fd86f1e6527dac140e56
 2020-02-11 01:18:15 +00:00
Automerger Merge Worker
0d8788688f Merge "Update sepolicy to allow pushing atoms from surfaceflinger to statsd" am: c95ae9044d 
Change-Id: Iad64c0ba3034f8a9fec168a72bfe60962b767fe1
 2020-02-11 01:17:44 +00:00
Automerger Merge Worker
e3ae58f557 Merge "Allow dumpstate access to /dev/binderfs/binder_logs" am: d13e12f9cc am: 6a18420ec5 
Change-Id: Ia6e58a079531ef0da25c82c38014297e02363971
 2020-02-11 01:03:38 +00:00
Alec Mouri
c95ae9044d Merge "Update sepolicy to allow pushing atoms from surfaceflinger to statsd" 2020-02-11 01:01:20 +00:00
Automerger Merge Worker
6a18420ec5 Merge "Allow dumpstate access to /dev/binderfs/binder_logs" am: d13e12f9cc 
Change-Id: I6246c08580580833f6a50fa3c7803c2dc89dbcf5
 2020-02-11 00:49:42 +00:00
Treehugger Robot
d13e12f9cc Merge "Allow dumpstate access to /dev/binderfs/binder_logs" 2020-02-11 00:40:23 +00:00
Wei Wang
e55f2318d5 grant power hal client to access stable power hal service 
Bug: 147913776
Test: Build
Change-Id: Ibf0d6b7b5b4ac71994de53922d9ce685bdc5f704
 2020-02-10 16:32:35 -08:00
Automerger Merge Worker
ab4fea6bc3 Merge "Revert "Add sepolicy for persist.nfc"" am: a85454834d am: 456f93e9f3 am: a0eacce8e5 
Change-Id: I3ac4a1e86c1b6ce4c624b4386e9a857f3b1b3cf6
 2020-02-11 00:28:00 +00:00
Automerger Merge Worker
a0eacce8e5 Merge "Revert "Add sepolicy for persist.nfc"" am: a85454834d am: 456f93e9f3 
Change-Id: I46a54f0dcfe3db034c2d70a8bfadbc347c03564e
 2020-02-11 00:08:34 +00:00
Automerger Merge Worker
456f93e9f3 Merge "Revert "Add sepolicy for persist.nfc"" am: a85454834d 
Change-Id: Ib46567f04860322a68802d132414ccb442d8a9f4
 2020-02-10 23:58:35 +00:00
Jon Spivack
a85454834d Merge "Revert "Add sepolicy for persist.nfc"" 2020-02-10 23:42:41 +00:00
Hridya Valsaraju
4ea5709bc4 Allow dumpstate access to /dev/binderfs/binder_logs 
These permissions allow dumpstate to access binder logs
from /dev/binderfs.
avc: denied { read } for name="binder_logs" dev="binder" ino=1048580
scontext=u:r:dumpstate:s0 tcontext=u:object_r:binderfs_logs:s0 tclass=dir permissive=0
avc: denied { read } for comm="dumpstate" name="failed_transaction_log"
dev="binder" ino=1048585 scontext=u:r:dumpstate:s0
tcontext=u:object_r:binderfs_logs:s0 tclass=file permissive=1
avc: denied { open } for comm="dumpstate"
path="/dev/binderfs/binder_logs/failed_transaction_log"
dev="binder" ino=1048585 scontext=u:r:dumpstate:s0
tcontext=u:object_r:binderfs_logs:s0 tclass=file permissive=1
avc: denied { getattr } for comm="dumpstate"
path="/dev/binderfs/binder_logs/failed_transaction_log"
dev="binder" ino=1048585 scontext=u:r:dumpstate:s0
tcontext=u:object_r:binderfs_logs:s0 tclass=file permissive=1

Test: adb shell dumpstate
Bug: 136497735
Change-Id: I5ff7223e431aab9baa3527570fff2da71ab6feb0
 2020-02-10 12:47:35 -08:00
Jon Spivack
c7bc7ee309 Revert "Add sepolicy for persist.nfc" 
This reverts commit 34240604aa.

Reason for revert: Droidcop: Potential culprit for Bug149218822- verifying through Forrest before revert submission. This is part of the standard investigation process, and does not mean your CL will be reverted.

Change-Id: Iaba9f6e9125ac456a5787b1fcbb67d68c91c5f42
 2020-02-10 19:08:31 +00:00