tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
42224 commits 1 branch 0 tags 50 MiB
Commit graph

42224 commits

This branch
This branch
All branches
Author SHA1 Message Date
Ronish Kalia
edf140f2f4 Merge "Rename healthconnect to healthfitness" 2023-02-14 12:08:47 +00:00
Akilesh Kailash
959a886b33 Merge "Set sepolicy for ublk control device and block device" am: a3c0ca4e67 am: 12e344b7de am: 782a9dd2d1 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2433673

Change-Id: I6bb7907b4904e5bcd9ce45a789efaae001509f52
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-14 06:28:18 +00:00
Akilesh Kailash
782a9dd2d1 Merge "Set sepolicy for ublk control device and block device" am: a3c0ca4e67 am: 12e344b7de 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2433673

Change-Id: I926282834e443b7a263fd8f4378537f464395fa6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-14 05:29:29 +00:00
Akilesh Kailash
12e344b7de Merge "Set sepolicy for ublk control device and block device" am: a3c0ca4e67 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2433673

Change-Id: Ia1104a335a2932a48bc2f9eecb547c65e13fe334
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-14 04:41:42 +00:00
Akilesh Kailash
a3c0ca4e67 Merge "Set sepolicy for ublk control device and block device" 2023-02-14 03:59:06 +00:00
Jeffrey Huang
5c1b962965 Merge "Restrict system server from reading statsd data" am: 01fd5eb907 am: e53a5b25b6 am: 6788ed4f1c 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2410783

Change-Id: Ie7c7bc680c96aab593f115303a9c1b85664877ed
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-14 00:51:35 +00:00
Akilesh Kailash
63a21044f2 Set sepolicy for ublk control device and block device 
ublk-control device: /dev/ublk-control
ublk-block device: /dev/block/ublkbN where N is 0,1,2..

Bug: 269144965
Test: Verify sepolicy changes through kernel logs when user-space daemon
communicates with ublk driver

Change-Id: I10de557566e3c0628ea72fbbda4cff21e7cda68f
Signed-off-by: Akilesh Kailash <akailash@google.com>
 2023-02-13 16:30:40 -08:00
Jeffrey Huang
6788ed4f1c Merge "Restrict system server from reading statsd data" am: 01fd5eb907 am: e53a5b25b6 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2410783

Change-Id: Idfcd1276930266819c9ba62bc2695de290aec12b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-13 23:54:04 +00:00
Jeffrey Huang
e53a5b25b6 Merge "Restrict system server from reading statsd data" am: 01fd5eb907 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2410783

Change-Id: I18a4d57758865141a9e0b6f479ff5aabf8db0ece
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-13 23:07:21 +00:00
Jeffrey Huang
01fd5eb907 Merge "Restrict system server from reading statsd data" 2023-02-13 22:37:09 +00:00
Cody Northrop
18ce53dd90 Merge "Allow camera HAL to read EGL vendor properties" am: b9a2339bf8 am: 02792c7f6f am: 4ee43bf2b9 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2428196

Change-Id: I4dfd78ecc8fc8869e6ced69eff48accdeae67d1f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-11 03:44:47 +00:00
Cody Northrop
4ee43bf2b9 Merge "Allow camera HAL to read EGL vendor properties" am: b9a2339bf8 am: 02792c7f6f 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2428196

Change-Id: If83661cdb04746db5820b86be55625667f124fab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-11 02:45:49 +00:00
Cody Northrop
02792c7f6f Merge "Allow camera HAL to read EGL vendor properties" am: b9a2339bf8 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2428196

Change-Id: Ie0a21c33232b520f714471e627ed52e4ffaa611c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-11 01:58:49 +00:00
Patrick Rohr
3c0d2675f4 Merge "cronet: remove com.android.cronet sepolicy" am: 8f0388f32e am: 37f2fa0da7 am: b59779e3cb 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2431473

Change-Id: Ic67b24d98613402fa41ba6fdc40df9a060150a5d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-11 01:02:14 +00:00
Cody Northrop
b9a2339bf8 Merge "Allow camera HAL to read EGL vendor properties" 2023-02-11 00:44:10 +00:00
Patrick Rohr
b59779e3cb Merge "cronet: remove com.android.cronet sepolicy" am: 8f0388f32e am: 37f2fa0da7 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2431473

Change-Id: I38f15e9598fd5ca00e3b62cb3e2033bce489cdea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-11 00:04:30 +00:00
Patrick Rohr
37f2fa0da7 Merge "cronet: remove com.android.cronet sepolicy" am: 8f0388f32e 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2431473

Change-Id: Iffaac193e3e7787d86c950ef866a8cefab903dc8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-10 23:21:54 +00:00
Jeff Sharkey
36e24fc6f7 Merge "Add dropbox entries as files to dumpstate ZIP." am: 3926d95720 am: 89f51e46f2 am: 3662756348 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2422870

Change-Id: I80adc4ebf7f1a49b475cc64f62160fc48cdc9d7e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-10 23:11:06 +00:00
Patrick Rohr
8f0388f32e Merge "cronet: remove com.android.cronet sepolicy" 2023-02-10 22:53:40 +00:00
Jeff Sharkey
3662756348 Merge "Add dropbox entries as files to dumpstate ZIP." am: 3926d95720 am: 89f51e46f2 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2422870

Change-Id: If1f63b403c7a4058b63cf8a4f25f91673d82c5cc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-10 22:15:37 +00:00
Jeff Sharkey
89f51e46f2 Merge "Add dropbox entries as files to dumpstate ZIP." am: 3926d95720 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2422870

Change-Id: I4481603e241edea765e7a745ed69bf31f0735b21
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-10 21:31:36 +00:00
Jeff Sharkey
3926d95720 Merge "Add dropbox entries as files to dumpstate ZIP." 2023-02-10 20:41:51 +00:00
Patrick Rohr
c8f4e19a74 cronet: remove com.android.cronet sepolicy 
com.android.cronet has never been released and has since been deleted as
Cronet was added to the tethering module.

Test: TH
Bug: 266673389
Change-Id: Ia288d4322c13ba986164a12f4999fea1cd60d529
 2023-02-10 11:47:02 -08:00
Krishang Garodia
cae679a22d Merge "Update SE policy for all media provider processes" am: 6e51f51b5f am: 98cc4fec56 am: 1fc7e3ba0f 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2429034

Change-Id: Iac5966beac9c22d01207396da49e5fbbc9400505
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-10 15:30:47 +00:00
Jeff Pu
ab2cef70df Merge "Allow servicemanager to make binder call to hal_fingerprint" am: 22adabc37e am: 80a18e9a7e am: 2ebb576f1e 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2424930

Change-Id: I98e22129e10b4537d921a58729da34b1a0d90516
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-10 15:30:22 +00:00
Krishang Garodia
1fc7e3ba0f Merge "Update SE policy for all media provider processes" am: 6e51f51b5f am: 98cc4fec56 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2429034

Change-Id: I1e691a06c2a4339d41a551d2b4b1c827f997077e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-10 14:38:42 +00:00
Jeff Pu
2ebb576f1e Merge "Allow servicemanager to make binder call to hal_fingerprint" am: 22adabc37e am: 80a18e9a7e 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2424930

Change-Id: I0bb374e8f1ce16375ecbf8a389571f10e97da71e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-10 14:38:31 +00:00
Jeff Sharkey
ef5e5c82d4 Add dropbox entries as files to dumpstate ZIP. 
Since each dropbox entry is already stored as a file on disk, include
them as-is into the dumpstate ZIP file.

The dumpsys output has already included truncated versions of all
dropbox entries for many years, and adding them as separate files
inside the dumpstate ZIP will speed up debugging and issue triage.

Bug: 267673062
Test: manual
Change-Id: I6e83dd01221f43bb2e2efc1a12368db30a545c71
 2023-02-10 14:02:35 +00:00
Krishang Garodia
98cc4fec56 Merge "Update SE policy for all media provider processes" am: 6e51f51b5f 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2429034

Change-Id: Ia3bcaf702b2ccadce5186f869baebd8c6afad56d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-10 13:59:33 +00:00
Jeff Pu
80a18e9a7e Merge "Allow servicemanager to make binder call to hal_fingerprint" am: 22adabc37e 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2424930

Change-Id: I8f0d95737a0d718703d1e0b650e1fc5465f8d79a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-10 13:59:21 +00:00
Krishang Garodia
6e51f51b5f Merge "Update SE policy for all media provider processes" 2023-02-10 13:57:52 +00:00
Jeff Pu
22adabc37e Merge "Allow servicemanager to make binder call to hal_fingerprint" 2023-02-10 13:35:32 +00:00
Krishang Garodia
caf7984a2e Update SE policy for all media provider processes 
Bug: 230394838
Bug: 195009152
Test: manual
Change-Id: Ic8e1d45c910e1455dd28bfb748d134c066a33591
 2023-02-10 11:06:53 +00:00
Thiébaud Weksteen
1baba38dbe Merge "Ignore fusefs_type access for su" am: f0e86adfc3 am: cdf98439cf am: 9565ef5313 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2428452

Change-Id: Ibf2125e688b5a3a1ce556907632db850c7e78c6f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-10 00:39:44 +00:00
Thiébaud Weksteen
9565ef5313 Merge "Ignore fusefs_type access for su" am: f0e86adfc3 am: cdf98439cf 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2428452

Change-Id: I4719639fa4a4dbbd7d6700fa1135d4cb358e32f0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-09 23:50:45 +00:00
Thiébaud Weksteen
cdf98439cf Merge "Ignore fusefs_type access for su" am: f0e86adfc3 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2428452

Change-Id: Icc808be7f95789e703f52ae6e3c2e7a25f821284
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-09 23:13:17 +00:00
Thiébaud Weksteen
f0e86adfc3 Merge "Ignore fusefs_type access for su" 2023-02-09 22:46:54 +00:00
Jeff Pu
0e6dce0ae9 Allow servicemanager to make binder call to hal_fingerprint 
Bug: 263519851
Test: boot Cuttlefish with lazy virtual fingerprint HAL
Change-Id: I8cef9d1c55065561786718aad589cf4dd327ff66
 2023-02-09 22:02:29 +00:00
Charlie Wang
b240222f41 Merge "Extension of isolated_compute_app for media services." am: bc778658ab am: 55886d20d9 am: 4cd8e4ef41 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2411335

Change-Id: Id6faecafa7b62d9e82a56d833222ecb366d1e416
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-09 21:03:24 +00:00
Max Bires
1ac58d12be Merge "Allow GMSCore to read RKP properties." am: db8a6b31ca am: 5516282b8b am: 76d8c830f8 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2428194

Change-Id: I050a338e9805b050586bdc0d30d4ed01ec248d84
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-09 21:00:13 +00:00
Charlie Wang
4cd8e4ef41 Merge "Extension of isolated_compute_app for media services." am: bc778658ab am: 55886d20d9 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2411335

Change-Id: I11de8403a2474e8f8491e728aa30b4c7f755b4f7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-09 19:08:43 +00:00
Max Bires
76d8c830f8 Merge "Allow GMSCore to read RKP properties." am: db8a6b31ca am: 5516282b8b 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2428194

Change-Id: I3fe06b3ba14f3045df2a5e06de1bba73eaaae786
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-09 19:07:37 +00:00
Charlie Wang
55886d20d9 Merge "Extension of isolated_compute_app for media services." am: bc778658ab 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2411335

Change-Id: I1133741d332cd7cdf075db8330baf1db61f58105
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-09 18:29:54 +00:00
Max Bires
5516282b8b Merge "Allow GMSCore to read RKP properties." am: db8a6b31ca 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2428194

Change-Id: I5b0aa3092d77a1e3c8917cd36d8a076b7d783f88
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-09 18:29:40 +00:00
Henri Chataing
38b90d44d0 Merge "Define the permissions for Nfc sysprops" am: ff275229d1 am: 1f26ebadf8 am: 80c5782174 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2424852

Change-Id: Ifcbe6d1eac4f6af02a5fd8263d4fa8a5ec0951f7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-09 18:23:44 +00:00
Charlie Wang
bc778658ab Merge "Extension of isolated_compute_app for media services." 2023-02-09 18:13:57 +00:00
Cody Northrop
e4e43ebad8 Allow camera HAL to read EGL vendor properties 
Test: TreeHugger
Bug: b/267752967
Change-Id: I174420a3ef1f0059007616b4bee3091a888b1999
 2023-02-09 17:55:03 +00:00
Max Bires
db8a6b31ca Merge "Allow GMSCore to read RKP properties." 2023-02-09 17:51:57 +00:00
Henri Chataing
80c5782174 Merge "Define the permissions for Nfc sysprops" am: ff275229d1 am: 1f26ebadf8 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2424852

Change-Id: Id4085738e8725eac5f2f67e89fa435d615c83fd7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-09 17:36:39 +00:00
Henri Chataing
1f26ebadf8 Merge "Define the permissions for Nfc sysprops" am: ff275229d1 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2424852

Change-Id: Ief06daa97a1ff07a8ebdc2cc1f0a77e769d2f76a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-02-09 17:01:39 +00:00