Skip to content

refpolicy: Introduce SELinux domain and policies for pd-mapper service#1417

Merged
lumag merged 1 commit intoqualcomm-linux:masterfrom
gyenugul:pd-mapper
Feb 9, 2026
Merged

refpolicy: Introduce SELinux domain and policies for pd-mapper service#1417
lumag merged 1 commit intoqualcomm-linux:masterfrom
gyenugul:pd-mapper

Conversation

@gyenugul
Copy link
Copy Markdown
Contributor

@gyenugul gyenugul commented Jan 21, 2026

Introduce a new SELinux domain for the Qualcomm pd-mapper service to ensure proper labeling, isolation, and access control under the targeted refpolicy.

To ensure functionality for QCOM platforms, carry this backport patch locally in meta-qcom until the next meta-selinux release integrates the upstream change.

@sasikuma-qti
Copy link
Copy Markdown
Contributor

change looks good to me.

Comment thread dynamic-layers/selinux/recipes-security/refpolicy/refpolicy-targeted_git.bbappend Outdated
Comment thread dynamic-layers/selinux/recipes-security/refpolicy/refpolicy-targeted_git.bbappend Outdated
@sasikuma-qti
Copy link
Copy Markdown
Contributor

@gyenugul - As per the discussion happened in #1472, we can have the SELinux policy patch for pd-mapper in meta-qcom. Make sure you have correct "Upstream-Status" in the patch.

@koenkooi
Copy link
Copy Markdown
Contributor

koenkooi commented Feb 6, 2026

No merges please, only rebases on top of the target branch.

@lumag lumag requested a review from ricardosalveti February 6, 2026 16:08
@ricardosalveti
Copy link
Copy Markdown
Contributor

Please rebase again to fix the CI issue.

Introduce a new SELinux domain for the Qualcomm pd-mapper service to ensure
proper labeling, isolation, and access control under the targeted refpolicy.

Signed-off-by: Gangabhavani Yenugula <gyenugul@qti.qualcomm.com>
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Feb 9, 2026

Test run workflow

Test jobs for commit 5687e54

Test dragonboard-410c dragonboard-820c qcs6490 qcs8300 qcs9100 qcs9100-rb8 qrb2210-rb1
boot pass pass pass pass pass pass pass

All jobs summary

Job ID Device State Health
139861 qcs9100 Finished Complete
139871 dragonboard-820c Finished Complete
139856 qcs9100-rb8 Finished Complete
139866 qrb2210-rb1 Finished Complete
139851 qcs8300 Finished Complete
139852 dragonboard-410c Finished Complete
139863 qcs6490 Finished Complete
139868 qcs6490 Finished Complete
139854 qcs6490 Finished Complete
139865 qcs8300 Finished Complete
139869 dragonboard-820c Finished Complete
139872 dragonboard-410c Finished Complete
139862 qcs8300 Finished Complete
139849 qcs9100 Finished Incomplete
139855 qcs9100-rb8 Finished Complete
139857 dragonboard-410c Finished Complete
139874 qcs9100-rb8 Finished Complete
139867 dragonboard-820c Finished Complete
139853 qrb2210-rb1 Finished Complete
139858 qcs6490 Finished Complete
139875 dragonboard-410c Finished Complete
139864 qrb2210-rb1 Finished Complete
139859 dragonboard-820c Finished Complete
139870 qrb2210-rb1 Finished Complete
139873 qcs8300 Finished Complete
139860 qcs9100 Finished Complete
139850 qcs9100 Finished Complete
139848 qcs9100-rb8 Finished Complete

@test-reporting-app
Copy link
Copy Markdown

Test Results

 28 files   -    17   28 suites   - 120   1h 45m 16s ⏱️ - 1h 6m 14s
 13 tests  -    30    9 ✅  -    30  0 💤 ±0  4 ❌ ±0 
245 runs   - 1 174  241 ✅  - 1 172  0 💤  - 2  4 ❌ ±0 

For more details on these failures, see this check.

Results for commit 5687e54. ± Comparison against base commit 7ca5aa6.

This pull request removes 30 tests.
0_BT_FW_KMD_Service ‑ BT_FW_KMD_Service
0_hotplug ‑ hotplug
10_AudioRecord ‑ AudioRecord
1_BT_SCAN ‑ BT_SCAN
1_CPUFreq_Validation ‑ CPUFreq_Validation
2_Interrupts ‑ Interrupts
3_cdsp_remoteproc ‑ cdsp_remoteproc
4_adsp_remoteproc ‑ adsp_remoteproc
5_WiFi_Firmware_Driver ‑ WiFi_Firmware_Driver
6_WiFi_OnOff ‑ WiFi_OnOff
…

@lumag lumag merged commit a8424ba into qualcomm-linux:master Feb 9, 2026
111 of 113 checks passed
vkraleti added a commit that referenced this pull request Feb 12, 2026
…r service" (#1544)

This PR removes our internal backport patch for refpolicy because the
change has now landed in upstream refpolicy and is included in the
updated refpolicy SRCREV used by meta-selinux. Reverts
#1417.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants