tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
13854 commits 1 branch 0 tags 50 MiB
Commit graph

13854 commits

This branch
This branch
All branches
Author SHA1 Message Date
Tri Vo
d2315bdf6a Revert "Coredomain can't execute vendor code." 
This reverts commit 07dd2c9e89.

Reason for revert: albacore build broken

Change-Id: I551b1d8c008f01fb815e42b59d397feb9672b8e6
 2018-01-12 18:07:25 +00:00
Tri Vo
07dd2c9e89 Coredomain can't execute vendor code. 
Bug: 62041836
Test: sepolicy builds
Change-Id: Ie6052209b3901eaad8496b8fc9681421d7ee3c1c
 2018-01-10 10:53:55 -08:00
Primiano Tucci
214f47963b Perfetto SELinux policies am: c80f9e037b am: 3ed0362a30 
am: 7c5113d79f

Change-Id: I70969b44d0fe8cc732848453bcbb8657df7fd08c
 2018-01-10 00:43:53 +00:00
Primiano Tucci
7c5113d79f Perfetto SELinux policies am: c80f9e037b 
am: 3ed0362a30

Change-Id: I3b179791c46d07621c53f0e187b28c708ce46be0
 2018-01-10 00:32:55 +00:00
Primiano Tucci
3ed0362a30 Perfetto SELinux policies 
am: c80f9e037b

Change-Id: I1a9201094a3595e2db89688f9ab952453b424b63
 2018-01-10 00:26:48 +00:00
Primiano Tucci
c80f9e037b Perfetto SELinux policies 
Perfetto is a performance instrumentation and logging framework,
living in AOSP's /external/pefetto.
Perfetto introduces in the system one binary and two daemons
(the binary can specialize in either depending on the cmdline).

1) traced: unprivileged daemon. This is architecturally similar to logd.
   It exposes two UNIX sockets:
   - /dev/socket/traced_producer : world-accessible, allows to stream
     tracing data. A tmpfs file descriptor is sent via SCM_RIGHTS
     from traced to each client process, which needs to be able to
     mmap it R/W (but not X)
   - /dev/socket/traced_consumer : privilege-accessible (only from:
     shell, statsd). It allows to configure tracing and read the trace
     buffer.
2) traced_probes: privileged daemon. This needs to:
   - access tracingfs (/d/tracing) to turn tracing on and off.
   - exec atrace
   - connect to traced_producer to stream data to traced.

init.rc file:
https://android-review.googlesource.com/c/platform/external/perfetto/+/575382/14/perfetto.rc

Bug: 70942310
Change-Id: Ia3b5fdacbd5a8e6e23b82f1d6fabfa07e4abc405
 2018-01-10 00:18:46 +00:00
yro
b7d3827beb Update priv_app selinux policy to allow gmscore to be able to communicate with statsd am: 31b11d8ef8 am: 2722dd4398 
am: 64a01931ee

Change-Id: I4765ea7937590e10a5b5b7a7f095148694edb531
 2018-01-09 23:38:14 +00:00
yro
64a01931ee Update priv_app selinux policy to allow gmscore to be able to communicate with statsd am: 31b11d8ef8 
am: 2722dd4398

Change-Id: I7b480b4f6c1beca41c15f8ebd8e502bd1178196b
 2018-01-09 23:35:25 +00:00
yro
2722dd4398 Update priv_app selinux policy to allow gmscore to be able to communicate with statsd 
am: 31b11d8ef8

Change-Id: I39fd53f56099df371ec9f8ea8938b6aefb131f49
 2018-01-09 23:33:23 +00:00
yro
31b11d8ef8 Update priv_app selinux policy to allow gmscore to be able to 
communicate with statsd

Test: manual testing conducted
Change-Id: Icd268e258f7cbdd9310baab53fe0c66f4f303d5e
 2018-01-09 20:39:09 +00:00
Luis Hector Chavez
9c72ef8904 Merge "Revert "Allow callers of uevent_kernel_*() access to /proc/sys/kernel/overflowuid"" am: 3ec0dbf7d1 am: df624b3479 
am: 45b0aa3308

Change-Id: I9c08801a5fdf232f2e70d2d97e22e7d2e90dcbbb
 2018-01-09 20:21:47 +00:00
Etan Cohen
879512d5a9 Merge "[RTT] Update Wi-Fi RTT service name" am: fbb05ff0b4 am: eeaed84ee6 
am: 9690e8a89a

Change-Id: I6ec5660254ca9a5a4d728ba435aab2ef2a79e657
 2018-01-09 20:21:16 +00:00
Max Bires
d4d74acf44 Merge "Adding a traceur_app domain to remove it from shell" am: 64a0f9288d am: b3b9475de0 
am: 4e0f65463b

Change-Id: I6fd4ce8b68e91ec4ae71809c056151367991e11b
 2018-01-09 20:20:43 +00:00
Tom Cherry
0ccaf53893 Revert "Add /system/bin/getprop as toolbox_exec" am: e1b73b141b am: d597857feb 
am: 0b1ce9e59b

Change-Id: I5bbe6ff9e173dffa67e60c4c43142505eac43699
 2018-01-09 20:20:11 +00:00
Luis Hector Chavez
45b0aa3308 Merge "Revert "Allow callers of uevent_kernel_*() access to /proc/sys/kernel/overflowuid"" am: 3ec0dbf7d1 
am: df624b3479

Change-Id: I86c278aa93c72a9c51335b1964bcf182c2fbb051
 2018-01-09 20:03:14 +00:00
Etan Cohen
9690e8a89a Merge "[RTT] Update Wi-Fi RTT service name" am: fbb05ff0b4 
am: eeaed84ee6

Change-Id: I0a25153a1b0f725ce9e58b50b32d1bb474a4bfa2
 2018-01-09 20:02:46 +00:00
Max Bires
4e0f65463b Merge "Adding a traceur_app domain to remove it from shell" am: 64a0f9288d 
am: b3b9475de0

Change-Id: I8b293af18af8d65d9931e0d5cfb59d733e4c381e
 2018-01-09 20:02:23 +00:00
Tom Cherry
0b1ce9e59b Revert "Add /system/bin/getprop as toolbox_exec" am: e1b73b141b 
am: d597857feb

Change-Id: I8f835e0abc95c9b49a99dd903f3f1e6bfaf1cb60
 2018-01-09 20:02:00 +00:00
Luis Hector Chavez
df624b3479 Merge "Revert "Allow callers of uevent_kernel_*() access to /proc/sys/kernel/overflowuid"" 
am: 3ec0dbf7d1

Change-Id: I7425e40aa7fa6453597bd1ca11a2a7a7c0ed7889
 2018-01-09 17:42:29 +00:00
Treehugger Robot
3ec0dbf7d1 Merge "Revert "Allow callers of uevent_kernel_*() access to /proc/sys/kernel/overflowuid"" 2018-01-09 17:35:31 +00:00
Tom Cherry
e53796fb49 Revert "Add /system/bin/getprop as toolbox_exec" 
This reverts commit d711d4d20b.

Reason for revert: Shouldn't have submitted...

(cherry picked from commit e1b73b141b)

Change-Id: I48054b667f5391d00ad40c43db5e23a4f42bbd2b
 2018-01-09 17:57:15 +01:00
Etan Cohen
eeaed84ee6 Merge "[RTT] Update Wi-Fi RTT service name" 
am: fbb05ff0b4

Change-Id: Iac6829e185218cb03dd5d430c25b43b61fc0ab13
 2018-01-09 14:44:52 +00:00
Etan Cohen
fbb05ff0b4 Merge "[RTT] Update Wi-Fi RTT service name" 2018-01-09 14:42:41 +00:00
Tom Cherry
2637c27768 Add /system/bin/getprop as toolbox_exec am: d711d4d20b am: 5124c1a5af 
am: b31362de07

Change-Id: I6fac38d640f6b416b1554eb81292230428ff2a77
 2018-01-09 06:42:11 +00:00
Tom Cherry
b31362de07 Add /system/bin/getprop as toolbox_exec am: d711d4d20b 
am: 5124c1a5af

Change-Id: Id9884f6859e3b4abb917e361d251e32aa6fa9a60
 2018-01-09 06:22:16 +00:00
Max Bires
b3b9475de0 Merge "Adding a traceur_app domain to remove it from shell" 
am: 64a0f9288d

Change-Id: I087db0855e429f4b15e4f312cfc6004007eb1f79
 2018-01-09 04:01:13 +00:00
Treehugger Robot
64a0f9288d Merge "Adding a traceur_app domain to remove it from shell" 2018-01-09 03:55:34 +00:00
Tom Cherry
d597857feb Revert "Add /system/bin/getprop as toolbox_exec" 
am: e1b73b141b

Change-Id: If124289b51f6fb5c93a30a003c8509e78d0ca417
 2018-01-09 01:51:25 +00:00
Tom Cherry
5124c1a5af Add /system/bin/getprop as toolbox_exec 
am: d711d4d20b

Change-Id: Ib88d5b8599dd8795be42f1d20997f116230d3858
 2018-01-08 22:37:19 +00:00
Tom Cherry
e1b73b141b Revert "Add /system/bin/getprop as toolbox_exec" 
This reverts commit d711d4d20b.

Reason for revert: Shouldn't have submitted...

Change-Id: I5b88101f381ca59132ec7d24990ea41ac1b84171
 2018-01-08 22:36:02 +00:00
Tom Cherry
d711d4d20b Add /system/bin/getprop as toolbox_exec 
getprop is broken out from toolbox/toybox, however its permissions
should remain the same, so label it appropriately.

Bug: 36001741
Test: boot bullhead with the new getprop
Change-Id: I4114ea21998da95173d882038bc6aebf39b64d7f
 2018-01-08 22:31:26 +00:00
Joel Galenson
d4a9d2c313 Merge "Update neverallow exception." am: 3680f835b9 am: 084d1cd753 
am: 905d53c71f

Change-Id: I4174e730524cb161b745e23c60729e4b839a10a4
 2018-01-08 21:35:31 +00:00
Tom Cherry
f175b490b8 Merge "Use property_info_checker instead of checkfc and fc_sort for properties" am: 060586362b am: e5e5e0416b 
am: a1b7cef099

Change-Id: I79a1dbe6eeeca67f7170ca53b9dacf8cfb04f22e
 2018-01-08 21:35:10 +00:00
Joel Galenson
905d53c71f Merge "Update neverallow exception." am: 3680f835b9 
am: 084d1cd753

Change-Id: Ia1c17efab352bf1436d510d31d96c54a12de846e
 2018-01-08 21:16:38 +00:00
Tom Cherry
a1b7cef099 Merge "Use property_info_checker instead of checkfc and fc_sort for properties" am: 060586362b 
am: e5e5e0416b

Change-Id: Ia18012487d488d03c88b5a14e66a36afec1039bf
 2018-01-08 21:16:10 +00:00
Luis Hector Chavez
7ae939e84b Revert "Allow callers of uevent_kernel_*() access to /proc/sys/kernel/overflowuid" 
This reverts commit 640e595a68. The
corresponding code in libcutils was removed, so this is now unneeded.

Bug: 71632076
Test: aosp_sailfish still works

Change-Id: I615bab83e9a83bc14439b8ab90c00d3156b0a7c4
 2018-01-08 13:09:34 -08:00
Joel Galenson
084d1cd753 Merge "Update neverallow exception." 
am: 3680f835b9

Change-Id: Id34d1342e1ac5ff2117998a3b49a20d5be2a6416
 2018-01-08 17:34:22 +00:00
Treehugger Robot
3680f835b9 Merge "Update neverallow exception." 2018-01-08 17:23:15 +00:00
Tom Cherry
e5e5e0416b Merge "Use property_info_checker instead of checkfc and fc_sort for properties" 
am: 060586362b

Change-Id: I0b9c704a863a9378937c1f06d844dec12ee31cba
 2018-01-06 18:02:01 +00:00
Joel Galenson
8d92a9a16c Update neverallow exception. 
This fixes an incorrect exception in the neverallow rule.

Test: Built policy for all lunch targets.
Change-Id: I283833131c6f1fd741e934de24c838594ac38a18
 2018-01-05 14:46:16 -08:00
Tom Cherry
060586362b Merge "Use property_info_checker instead of checkfc and fc_sort for properties" 2018-01-05 20:32:23 +00:00
Etan Cohen
7a44a59ffa [RTT] Update Wi-Fi RTT service name am: a8d9191fb7 am: 10d3c77f05 
am: c237f58cd1

Change-Id: I8394b4313f30967f9decd0de1237908c4d54d6cb
 2018-01-05 17:55:39 +00:00
Etan Cohen
c237f58cd1 [RTT] Update Wi-Fi RTT service name am: a8d9191fb7 
am: 10d3c77f05

Change-Id: I1c8c62d2d14a6086a412f27c23790f3ba6969fc6
 2018-01-05 17:53:06 +00:00
Etan Cohen
10d3c77f05 [RTT] Update Wi-Fi RTT service name 
am: a8d9191fb7

Change-Id: I134a0d70c1075dee70991daa915a516bc21dab24
 2018-01-05 17:50:34 +00:00
Etan Cohen
33a4a0e4d3 [RTT] Update Wi-Fi RTT service name 
Finalize Wi-Fi RTT service name per API review.

Note: CL 2 of 2 - removing old entry.

Bug: 65108607
Test: integration tests
Change-Id: Id2b3d91ea2ca578a5834a299275df188c68475da
 2018-01-05 15:57:07 +00:00
Etan Cohen
a8d9191fb7 [RTT] Update Wi-Fi RTT service name 
Finalize Wi-Fi RTT service name per API review.

Note: CL 1 of 2 - adding new entry here, will remove
old entry in next CL.

Bug: 65108607
Test: integration tests
Change-Id: I065ce9d570510180fa8c8f09e1025ac795706405
 2018-01-05 15:56:58 +00:00
Chen Xu
23bf946a61 Merge "Setting up SELinux policy for carrier id" am: fd9f7de71e am: 38fb5d4802 
am: b83d53726d

Change-Id: Icb3e224d15965d45034a1dafbc4ec375daa306ae
 2018-01-04 22:20:37 +00:00
Chen Xu
b83d53726d Merge "Setting up SELinux policy for carrier id" am: fd9f7de71e 
am: 38fb5d4802

Change-Id: I88e81e278ff437305dd4c3edef745db833318059
 2018-01-04 22:11:52 +00:00
Chen Xu
38fb5d4802 Merge "Setting up SELinux policy for carrier id" 
am: fd9f7de71e

Change-Id: I1450316521d217109a84027cf4f760c90cf4812d
 2018-01-04 22:06:52 +00:00
Chen Xu
fd9f7de71e Merge "Setting up SELinux policy for carrier id" 2018-01-04 21:56:13 +00:00