add sepolicy for ivi apollo #245
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…id_S" This reverts commit 73d7eb3. Tracked-On: OAM-103588 Signed-off-by: Senapati, Rasmiranjan <[email protected]> Signed-off-by: svenate <[email protected]>
patch creating neverallow failure is reverted projectceladon#119 Original JIRA: OAM-101745 Tracked-On: OAM-103588 Signed-off-by: Rajani Ranjan <[email protected]>
porting [email protected] for android T google api 2.0 for sensors support. Tracked-On: OAM-102321 Signed-off-by: RajaniRanjan <[email protected]> Signed-off-by: vilasrk <[email protected]>
Android storageproxyd service failed to launch due to metadata accessed denied by sepolicy on BM with Android T. Update sepolicy to allow TEE accessing metadata to address this issue. Tracked-On: OAM-104065 Signed-off-by: Zhong,Fangjian <[email protected]>
Google doesn't allow vendors to use debugfs in the user build from android 12, and they add checks in some CTS test cases. So the sepolicy rules related debugfs in celadon should be removed. Tracked-On: OAM-104124 Signed-off-by: jizhenlo <[email protected]>
Add a Apache 2.0 license for intel sepolicy rules. Tracked-On: OAM-104475 Signed-off-by: jizhenlo <[email protected]>
add sepolicy for rpc-services Tracked-On: OAM-103852 Signed-off-by: Yadong Qi <[email protected]>
additional changes from Android 12 to 13 Tracked-On: OAM-105225 Signed-off-by: Ruan, Hongfu <[email protected]>
configuring health service by providing correct label to start ctl.interface_start for aidl android.hardware.health.IHealth/default Tracked-On: OAM-105769 Signed-off-by: Rajani Ranjan <[email protected]>
- Added 1.3 service in file_contexts Tracked-On: OAM-105821 Signed-off-by: Nagamani Chennuboina <[email protected]>
SwiftShader's GL libraries are getting deprecated in andriod T, and to be replaced with ANGLE on top of SwiftShader's Vulkan library. Add vulkan.pastel.so in file_contexts and remove swiftshader EGL lib Tracked-On: OAM-106619 Signed-off-by: manxiaoliang <[email protected]>
add permission to allow vsock for neuralnetwork service allow nnhal to read vendor.nn.hal.grpc_ip_port property Tracked-On: OAM-104143 Signed-off-by: Ratnesh Kumar Rai <[email protected]>
Error logs:
avc: denied { map } for path=2F69393135202864656C6574656429 dev="tmpfs" ino=1413 scontext=u:r:hal_neuralnetworks_default:s0 tcontext=u:object_r:hal_graphics_allocator_default_tmpfs:s0 tclass=file
avc: denied { read write } for path=2F69393135202864656C6574656429 dev="tmpfs" ino=1413 scontext=u:r:hal_neuralnetworks_default:s0 tcontext=u:object_r:hal_graphics_allocator_default_tmpfs:s0 tclass=file
Tracked-On: OAM-108700
Signed-off-by: Anoob Anto K <[email protected]>
Android-T added new VTS test case for suspend which verifies genfs rules. VTS test case is failing due to missing device/oem specific selinux genfscon rules for suspend. Fix the issue by adding device specific genfscon rules. Tracked-On: OAM-111173 Signed-off-by: Kothapeta, BikshapathiX <[email protected]>
Removed the sepolicy rules related debugfs_graphics in Celadon as Google does not allow vendors to use debugfs_graphics in user build from android 12 by CTS test. Tracked-On: OAM-111164 Signed-off-by: Lu Yang A <[email protected]>
Following CTS test android.os.cts.BuildTest#testBuildConstants is failing due to missing SoC properties. A12 onwards, Below SoC properties need to define to pass CTS and cts-on-gsi Test-: ro.soc.manufacturer ro.soc.model Tracked-On: OAM-111307 Signed-off-by: Ankit Agarwal <[email protected]> Signed-off-by: Panda,SushreeX <[email protected]>
Tracked-On: OAM-112812 Signed-off-by: Huang, Yang <[email protected]>
Getting following build error-: Found prohibited permission granted for isolated like types. Please replace your allow statements that involve "-isolated_app" with "-isolated_app_all". From Android U onwards, it is not allowing permission in isolated_app instead use of isolated_app_all. Original Jira - OAM-106853 Tracked-On: OAM-112683 Signed-off-by: Ankit Agrawal <[email protected]>
Changes include: - Added sepolicy for libminigbm_gralloc_intel - Update gralloc and mapper names - allow bootanim and hwcomposer to access file hal_graphics_allocator_default_tmpfs Tracked-On: OAM-112813 Signed-off-by: Jeevaka Prabu Badrappan <[email protected]> Signed-off-by: HeYue <[email protected]>
Added external camera provider aidl service to hal camera service contexts. Tracked-On: OAM-112809 Signed-off-by: Pillai, Venkatesh <[email protected]>
This change will add file_context for AIDL Thermal HAL. Tracked-On: OAM-112805 Signed-off-by: Vilas R K <[email protected]>
New service vendor.boot-default created for bootcontrol, allow launching specified application for service. Tracked-On: OAM-112811 Signed-off-by: Zhong,Fangjian <[email protected]>
configuring sensors service by providing correct label to start ctl.interface_start for aidl [email protected] Tracked-On: OAM-112804 Signed-off-by: Ranjan, Rajani <[email protected]>
load_iwl_modules script loads the Intel Wireless modules based on the iwl7000_mac80211 module existence. Sepolicies updated so insmod of drivers works as expected. Tests done: - Android boot - Wi-Fi scan and connect - Wi-Fi connect on reboot Tracked-On: OAM-114281 Signed-off-by: Jeevaka Prabu Badrappan <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.