Skip to content
Snippets Groups Projects
  1. Mar 23, 2018
    • Jeff Vander Stoep's avatar
      Assert types labeled in genfs_contexts have correct attributes · 1b828444
      Jeff Vander Stoep authored
      Types in sysfs should have the sysfs_type attribute, types in
      debugfs and tracefs should have the debugfs_type attribute.
      
      TODO: Test that files in procfs have the proc_type attribute.
      TODO: Assert these tests in CTS.
      
      Bug: 74182216
      Test: build - these are build-time tests.
      Change-Id: Icf0ff2a26c05f94da421ba23df0b92d8eef906bf
      1b828444
    • Jeff Vander Stoep's avatar
      Improve data separation test coverage · 370a52fe
      Jeff Vander Stoep authored
      Two areas need better coverage:
      1. Tests are not verifying that files in /data/vendor do not have the
      core_data_file_type attribute.
      2. No error is thrown if a type lives in both /data/vendor
      /data/<not vendor>.
      
      Bug: 72998741
      Test: build all selinux policies on master (assert build time tests)
      Test: build and boot Marlin and Taimen, verify no selinux denials and
          everything works as expected.
      
      Change-Id: I133a068123139a599b9b81ddcc254616894621eb
      (cherry picked from commit 55d5e284)
      370a52fe
  2. Feb 05, 2018
    • Bowgo Tsai's avatar
      Renames nonplat_* to vendor_* · afbcf21b
      Bowgo Tsai authored
      This change renames the non-platform sepolicy files on a DUT from
      nonplat_* to vendor_*.
      
      It also splits the versioned platform sepolicy from vendor_sepolicy.cil
      to a new file /vendor/etc/selinux/plat_pub_versioned.cil. And only keeps
      vendor customizations in vendor_sepolicy.cil.
      
      Build variable BOARD_SEPOLICY_DIRS is also renamed to
      BOARD_VENDOR_SEPOLICY_DIRS.
      
      Bug: 64240127
      Test: boot bullhead/taimen
      Change-Id: Iea2210c9c8ab30c9ecbcd8146f074e76e90e6943
      afbcf21b
  3. Jan 30, 2018
    • Jeff Vander Stoep's avatar
      Test that /data is properly labeled · ccf965e9
      Jeff Vander Stoep authored
      Data outside of /data/vendor should have the core_data_file_type.
      Exempt data_between_core_and_vendor for some types.
      
      Ensure core_data_file_type and coredomain_socket do not get expanded
      to their underlying types.
      
      Test: build sepolicy for all targets in master (this is a build time
          test)
      Bug: 34980020
      Change-Id: I59387a87875f4603a001fb03f22fa31cae84bf5a
      (cherry picked from commit bdd45479)
      ccf965e9
  4. Jan 12, 2018
  5. Oct 04, 2017
    • Jeff Vander Stoep's avatar
      Prepare python tests to be run in CTS · 3ca843a5
      Jeff Vander Stoep authored
      Bug: 37008075
      Test: build, all tests pass. Modify some attributes locally to
          cause tests to fail (verify that they are actually working).
      Change-Id: If9f9ece61dff835f38ef9c8a57f5a7baddbae5cd
      3ca843a5
  6. Sep 26, 2017
  7. Jun 13, 2017
Loading