5028 Commits
udc ... vic

Author SHA1 Message Date
2eb3a9861a gs101: Initialize for Evolution X 10.x
Change-Id: I263bc42d98438cebc8d8d004a8cf05e912be5d46
Signed-off-by: AnierinB <anierin@evolution-x.org>
2025-05-12 03:51:00 +00:00
Bruno Martins
4694eb0385 gs101: Migrate Lineage Health to soong_config_set
Change-Id: I2eff39e83b9673aa2989d05de65c646241ba61da
2025-05-07 07:08:31 +03:00
Oliver Scott
9a08b8d207 Implement charge limit mode
Change-Id: I61d317756ae1b985a47c23c9611396428a39045b
2025-03-31 11:58:34 +00:00
Michael Bestas
8d9efe4b06 Include missing vibrator sepolicy
Change-Id: Iac3a36e884dc1747d4fd0a60b418ffbf3779ffdb
2025-03-09 12:02:40 +02:00
Michael Bestas
433218f59d Merge tag 'android-15.0.0_r20' into staging/lineage-22.2_merge-android-15.0.0_r20
Android 15.0.0 Release 20 (BP1A.250305.019)

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ8eo6wAKCRDorT+BmrEO
# eD0rAJ9SRD7zzUKLmewavtzFbwp+MZWfUACbBJG1dCQKBV9xPOSSb7zem7FrJSo=
# =B9Fi
# -----END PGP SIGNATURE-----
# gpg: Signature made Wed Mar  5 03:29:15 2025 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [ultimate]

# By Nina Chen (8) and others
# Via Android Build Coastguard Worker (20) and others
* tag 'android-15.0.0_r20':
  Update SELinux error
  modem_svc: move shared_modem_platform related sepolicy to gs-common
  Update SELinux error
  Revert "modem_svc: move shared_modem_platform related sepolicy t..."
  modem_svc: move shared_modem_platform related sepolicy to gs-common
  Update SELinux error
  Update SELinux error
  Update SELinux error
  Update ldaf sensor device filename
  sepolicy: allow dump_power to read debugfs
  Remove cgroup_desc_file bugs.
  modem_svc: use shared_modem_platform to replace all modem_svc_sit
  Update SELinux error
  Update SELinux error
  sepolicy: allow dumpstate to execute dump_power
  Remove duplicate service entries
  Update SELinux error
  Update SELinux error

 Conflicts:
	sepolicy/gs101-sepolicy.mk

Change-Id: I3ea518841f39386f17433e0a2cf48a9438166fd4
2025-03-09 11:07:04 +02:00
Michael Bestas
1382844ae3 Merge tag 'android-15.0.0_r20' into staging/lineage-22.2_merge-android-15.0.0_r20
Android 15.0.0 Release 20 (BP1A.250305.019)

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ8eo6wAKCRDorT+BmrEO
# eAiMAJwKoTVsPgds031Rdi11ZDZR0sHrUwCfQiM0q3/561pqrsmmLP9YPULFyzc=
# =YB0/
# -----END PGP SIGNATURE-----
# gpg: Signature made Wed Mar  5 03:29:15 2025 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [ultimate]

# By Herbert Xue (3) and others
# Via Android Build Coastguard Worker (30) and others
* tag 'android-15.0.0_r20': (30 commits)
  dump_power: add battery caretaker dump into bugreport
  update health HAL dependency
  Add sched qos support
  Change TARGET_RECOVERY_UI_LIB to use fully qualified names in gs101
  Change TARGET_RECOVERY_UI_LIB to use fully qualified names in gs101
  Clean up unnecessary data_connection_5g_plus overlay
  init: gs101: move sched rate limit to late init
  Set soong config variables for libExynosC2H263Dec and libExynosC2H263Enc
  Disable Wifi BugReport for subsystem restart
  init: make pmu_poll_enable node readable
  Set soong config variable "board_use_dec_sw_csc" for libExynosVideoCodec
  Switch to using gs101 instead of valhall for GPU UMD
  Update ldaf sensor device filename
  dump_power: gs101: correct dump path
  Move video_codec soong config variables into board config
  dumpstate: gs101: fix dump path
  Revert "Add IGoodixFingerprintDaemon aidl interface"
  Add IGoodixFingerprintDaemon aidl interface
  Set BOARD_LIBACRYL_G2D_HDR_PLUGIN for soong
  Add a soong config variable for CitadelProvision
  ...

Change-Id: Id9e92997364278af84bc79ca08631451f93c2123
2025-03-09 11:06:40 +02:00
Android Build Coastguard Worker
24bb9bdbea Merge cherrypicks of ['googleplex-android-review.googlesource.com/31035549'] into 25Q1-release.
Change-Id: I86eea9508a50a27fefb0346cd271e64a49836e0a
2025-01-09 11:37:51 -08:00
Jack Wu
19c3844e26 dump_power: add battery caretaker dump into bugreport
logging for AACR(+H), AAFV, AACT, AACC and AACP Version

Bug: 384737509
Test: adb bugreport
Flag: EXEMPT bugfix
Signed-off-by: Jack Wu <wjack@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:3b8bae4b85355038c2f5418db37f684fb135bd89)
Merged-In: Ice4985d13554dde3b65ba0c34bbac4085445699e
Change-Id: Ice4985d13554dde3b65ba0c34bbac4085445699e
2025-01-09 11:34:58 -08:00
LuK1337
2d3cf325a1 gs101: overlay: Provide tethering configuration
Matches PixelTetheringOverlay2021.

Change-Id: I90ef9cd9c89b1bfacf5680cb1e42bb61ad275393
2024-12-28 00:38:04 +02:00
Michael Bestas
ae977b4970 gs101: Update linker.config from AP4A.241205.013
These libraries are used in camera HAL APEX.

Change-Id: I40a7ff722ae55a4ca9fd77f97a2b5e73af1898e2
2024-12-11 04:15:01 +02:00
Michael Bestas
dce4d158dc Merge tag 'android-15.0.0_r6' into staging/lineage-22.0_merge-android-15.0.0_r6
Android 15.0.0 Release 6 (AP4A.241205.013)

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ1IssQAKCRDorT+BmrEO
# eDGhAJoDeKI6yIh3acVVAZGGWYSMvnT6OQCgifOi2161Iq+CbS5B6me45tX4AbU=
# =+LN0
# -----END PGP SIGNATURE-----
# gpg: Signature made Fri Dec  6 00:44:01 2024 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [marginal]
# gpg: initial-contribution@android.com: Verified 2484 signatures in the past
#      3 years.  Encrypted 4 messages in the past 2 years.
# gpg: WARNING: This key is not certified with sufficiently trusted signatures!
# gpg:          It is not certain that the signature belongs to the owner.
# Primary key fingerprint: 4340 D135 70EF 945E 8381  0964 E8AD 3F81 9AB1 0E78

# By samou (4) and others
# Via Android Build Coastguard Worker (23) and others
* tag 'android-15.0.0_r6': (21 commits)
  sepolicy: allow dumpstate to execute dump_power
  Make android.framework.stats-v2-ndk app reachable
  Change vendor_fingerprint_prop to vendor_restricted_prop
  Update SELinux error
  Update SELinux error
  storage: move storage related device type to common folder
  Storage: label ufs firmware upgrade script
  Label sysfs node power_mode as sysfs_display.
  Revert "Revert "gs101: update shared_modem_platform sepolicy for..."
  Revert "gs101: update shared_modem_platform sepolicy for UMI"
  sepolicy: gs101: fix bm selinux
  sepolicy: remove dump_gs101.sh
  sepolicy: remove duplicate policy
  gs101: update shared_modem_platform sepolicy for UMI
  Allow camera HAL to access power_state sysfs
  Revert "trusty: storageproxy: add fs_ready_rw property context"
  Revert "trusty: storageproxy: add fs_ready_rw property context"
  Revert "trusty: storageproxy: add fs_ready_rw property context"
  trusty: storageproxy: add fs_ready_rw property context
  Add permission for setting gril property
  ...

Change-Id: I2a9b1d4a94a5546d94bd950425c1f2cdc5b454eb
2024-12-11 03:57:55 +02:00
Michael Bestas
36437719d2 Merge tag 'android-15.0.0_r6' into staging/lineage-22.0_merge-android-15.0.0_r6
Android 15.0.0 Release 6 (AP4A.241205.013)

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ1IssQAKCRDorT+BmrEO
# eGa9AJ9S393zD4Z4CQI9oOclVnRfCsHaLgCfbXxKi0MvtDq9g45UD8Ky0b+lJWU=
# =4D5T
# -----END PGP SIGNATURE-----
# gpg: Signature made Fri Dec  6 00:44:01 2024 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [marginal]
# gpg: initial-contribution@android.com: Verified 2484 signatures in the past
#      3 years.  Encrypted 4 messages in the past 2 years.
# gpg: WARNING: This key is not certified with sufficiently trusted signatures!
# gpg:          It is not certain that the signature belongs to the owner.
# Primary key fingerprint: 4340 D135 70EF 945E 8381  0964 E8AD 3F81 9AB1 0E78

# By Krzysztof Kosiński (3) and others
# Via Android Build Coastguard Worker (31) and others
* tag 'android-15.0.0_r6': (30 commits)
  Delete TARGET_CPU_VARIANT_RUNTIME.
  Add input event profile to mitigate input latency of input threads
  gs101: avoid vector<const T>
  Delete PRODUCT_FULL_TREBLE_OVERRIDE.
  Switch from the BFQ to the mq-deadline I/O scheduler
  bcl: remove charging debugfs data logging
  extended_log: update directory permissions for gs101
  Delete mapper4 manifest
  Define use_hwc2 variable
  usb: correct sys.usb.controller sysprop
  bcl: revision for kernel6.1
  Revert "Enable KUnit testing on raviole userdebug & eng build target."
  BoardConfig-common.mk: Enable Lazy RCU
  Remove BCL from thermal
  Add FSTAB_OWNERS and update OWNERS to include Android.bp
  Use modules.load for vendor ramdisk modules
  Upgrade IDisplay to V13
  Add soong config variable for PowerAnomalySitril
  [Pixel RR] Apply reviewed default permissions
  gs101: video: change to use c2 "default" AIDL service
  ...

 Conflicts:
	BoardConfig-common.mk
	dumpstate/dump_gs101.sh

Change-Id: I765d41354f48b0ebd60411935d591da961e9167c
2024-12-11 03:57:49 +02:00
Android Build Coastguard Worker
9b72262b46 Snap for 12770256 from a5c47896c3 to 25Q1-release
Change-Id: I89806009d2c0e214f8f276e52564cbccaecf8f5c
2024-12-10 00:32:21 +00:00
Eileen Lai
a5c47896c3 Merge "modem_svc: move shared_modem_platform related sepolicy to gs-common" into main 2024-12-09 15:09:36 +00:00
Nina Chen
5f17f078a9 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 383013727
Flag: EXEMPT sepolicy
Change-Id: Ie3297ad375423764a7ac504d60bf87c67c728aae
2024-12-09 03:32:04 +00:00
Eileen Lai
f20c8a9072 modem_svc: move shared_modem_platform related sepolicy to gs-common
Bug: 372400955

Change-Id: I10410974041146ad508ca6748549507183cc1239
Flag: NONE local testing only
2024-12-08 06:51:47 +00:00
Android Build Coastguard Worker
9176408da2 Snap for 12765415 from 410cabfc0e to 25Q1-release
Change-Id: I9dce1678ae80aaca3b7bcb80886a31026d9476b0
2024-12-07 23:04:53 +00:00
Daniel Zheng
410cabfc0e update health HAL dependency
Bug: 381926253
Test: th
Change-Id: I6d966c713c7f702069d6c2189023c9db85a51fb8
2024-12-07 06:50:51 +00:00
Android Build Coastguard Worker
6e49e91b1f Snap for 12763142 from 4981fc30f8 to 25Q1-release
Change-Id: I40fb1aa81164a57ee53afc7604ba5aa26d4a3528
2024-12-07 02:04:32 +00:00
Rick Yiu
4981fc30f8 Add sched qos support
Add task profiles and set permissions.

Bug: 355612114
Flag: NONE init rc file does not support flag
Test: build pass
Change-Id: I44ab2097bbf919c1487d40ee68e74100c11b8891
2024-12-06 08:19:59 +00:00
Nelson Li
320a493277 [automerger skipped] Change TARGET_RECOVERY_UI_LIB to use fully qualified names in gs101 am: 1736bb0cd3 am: 15b18e1536 -s ours
am skip reason: Merged-In If65f320a32840a42f5b99ae22f7396cc048593ec with SHA-1 c3aac00c01 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3393999

Change-Id: I7990348b5e58fc3ab3c23ba29f25b1f06cd70a3c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-06 01:46:49 +00:00
Nelson Li
15b18e1536 Change TARGET_RECOVERY_UI_LIB to use fully qualified names in gs101 am: 1736bb0cd3
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3393999

Change-Id: I63feb7dda4c78b10f43abd112a8dfc3a87e2ff78
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-06 01:35:49 +00:00
Android Build Coastguard Worker
916cff9d66 Snap for 12755599 from 4a732d5e79 to 25Q1-release
Change-Id: Ic8caafc49adf3207c1521cd37afa7791fde4ab19
2024-12-06 00:03:09 +00:00
Android Build Coastguard Worker
1f24581fd1 Snap for 12755599 from c3aac00c01 to 25Q1-release
Change-Id: I192a9633b5b78e296289c40c35afbd9cb0fa96fc
2024-12-06 00:03:08 +00:00
Nina Chen
4a732d5e79 Update SELinux error
Remove b/317316478 as it is closed

Flag: EXEMPT sepolicy
Test: SELinuxUncheckedDenialBootTest
Bug: 382362462
Change-Id: I84b9676e21243e68aeae7eed787d43d537c3fdc8
2024-12-05 12:55:36 +08:00
Nelson Li
1736bb0cd3 Change TARGET_RECOVERY_UI_LIB to use fully qualified names in gs101
Since the TARGET_RECOVERY_UI_LIB for each device is not exactly the
same, and most of the modules in it contain `soong_namespace{}` to
avoid conflicts between different devices, after converting
`librecovery_ui_ext` from Android.mk to Android.bp, it needs to be
changed to a `fully qualified name` in order to correctly use the
corresponding module.

Flag: EXEMPT refactor

Bug: 339143524
Test: m -j librecovery_ui_ext

Merged-In: If65f320a32840a42f5b99ae22f7396cc048593ec
Change-Id: If65f320a32840a42f5b99ae22f7396cc048593ec
2024-12-05 03:36:47 +00:00
Nelson Li
c3aac00c01 Change TARGET_RECOVERY_UI_LIB to use fully qualified names in gs101
Since the TARGET_RECOVERY_UI_LIB for each device is not exactly the
same, and most of the modules in it contain `soong_namespace{}` to
avoid conflicts between different devices, after converting
`librecovery_ui_ext` from Android.mk to Android.bp, it needs to be
changed to a `fully qualified name` in order to correctly use the
corresponding module.

Flag: EXEMPT refactor

Bug: 339143524
Test: m -j librecovery_ui_ext
Change-Id: If65f320a32840a42f5b99ae22f7396cc048593ec
2024-12-05 02:39:03 +00:00
Android Build Coastguard Worker
6506bd9333 Snap for 12748980 from a343001fed to 25Q1-release
Change-Id: I335f15c50a8e4a69f2da324c264c4038fe398875
2024-12-05 00:03:28 +00:00
Android Build Coastguard Worker
28d9a94149 Snap for 12742097 from 4648b6714e to 25Q1-release
Change-Id: I2d03d0d5c2c6a2e88f682cefe986cb85d9fdee01
2024-12-04 00:03:25 +00:00
Xin Li
4648b6714e [automerger skipped] Merge ab/AP4A.241205.013 into aosp-main-future am: b55ad960ba -s ours
am skip reason: Merged-In I195f779cc6588c37ccdbe4bb8b29ee8f2edd861a with SHA-1 e746382d78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/30626026

Change-Id: I9dbe8645ca39bd25a8f0765d45592748985b3759
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 18:22:20 +00:00
Chaohui Wang
a343001fed Clean up unnecessary data_connection_5g_plus overlay
This string is not device specific, and already set at,
frameworks/base/packages/SettingsLib/res/values-mcc311-mnc480/strings.xml
frameworks/base/packages/SettingsLib/res/values-mcc310-mnc004/strings.xml

Bug: 377907543
Flag: EXEMPT clean up
Test: m
Change-Id: I642831bcac95e705bbee73e2b0566214dc370d5b
2024-12-03 17:31:44 +08:00
Android Build Coastguard Worker
3db2fd0071 Snap for 12722466 from dda0174645 to 25Q1-release
Change-Id: Iee3d1003ca61f491c6283be8a3bd8124f6181547
2024-11-28 00:03:11 +00:00
Xin Li
b55ad960ba Merge ab/AP4A.241205.013 into aosp-main-future
Bug: 370570306
Merged-In: I195f779cc6588c37ccdbe4bb8b29ee8f2edd861a
Change-Id: I4ef5ab22379c7c42e0b3dfbf4862e118b2ce6300
2024-11-27 12:53:10 -08:00
Will Song
dda0174645 init: gs101: move sched rate limit to late init
Since pixel performance has a shared configuration,
we need to move override values into late init.

Bug: 381100494
Test: Boot
Flag: EXEMPT bug fix
Change-Id: I28ce81103249f30046d6e22b57be77441bc910b0
2024-11-27 14:58:10 +00:00
Android Build Coastguard Worker
0a955c7653 Snap for 12710726 from 89b656951a to 25Q1-release
Change-Id: I5f71820c0a5709d2b63d3a965a779e22bf2d017d
2024-11-26 02:03:20 +00:00
Herbert Xue
89b656951a Set soong config variables for libExynosC2H263Dec and libExynosC2H263Enc
Flag: EXEMPT bugfix
Bug: 375111251
Test: m libExynosC2H263Dec libExynosC2H263Enc
Change-Id: I8f14150482337914a83df2ab3fc650b92161c664
2024-11-25 06:27:19 +00:00
Android Build Coastguard Worker
3548fc7480 Snap for 12695596 from 9d43b259d2 to 25Q1-release
Change-Id: I68dd2d5736320813a2f2b8ffc27154ee2f11721a
2024-11-22 00:03:07 +00:00
Liana Kazanova (xWF)
9d43b259d2 Revert "modem_svc: move shared_modem_platform related sepolicy t..."
Revert submission 30519089-move_modem_sepolicy

Reason for revert: DroidMonitor: Potential culprit for http://b/380274930 - verifying through ABTD before revert submission. This is part of the standard investigation process, and does not mean your CL will be reverted.

Reverted changes: /q/submissionid:30519089-move_modem_sepolicy

Change-Id: Iadc8ec2e01336d746a7b34c8b05bd51df440c422
2024-11-21 17:54:01 +00:00
Eileen Lai
94e8fa7a6a modem_svc: move shared_modem_platform related sepolicy to gs-common
Bug: 372400955

Change-Id: I52d2a6dacb59dd796d008c4a48cdea218fd11a27
Flag: NONE local testing only
2024-11-21 05:50:44 +00:00
Android Build Coastguard Worker
382775d04b Snap for 12687986 from 59579ee43e to 25Q1-release
Change-Id: Iea2c33c9210bc3adb9827d57a58e9d32fe4d4a49
2024-11-21 00:03:23 +00:00
Isaac Chiou
59579ee43e Disable Wifi BugReport for subsystem restart
Flag: EXEMPT gated by overlay
Bug: 373594936
Test: Manuel test, trigger SSR and won't create bugreport automatically
Change-Id: I3b236cee06bd792355551c21cf888261bedbfa95
2024-11-20 12:58:23 +00:00
Android Build Coastguard Worker
d4e7de12ff Snap for 12680993 from bab24fc479 to 25Q1-release
Change-Id: Iccd264eb0b1714fdbb8c94d9ae59776e9657559b
2024-11-20 00:04:01 +00:00
Paulsu Su
bab24fc479 init: make pmu_poll_enable node readable
Bug: 378509589
Change-Id: I1904fab932deaf6b50b7c1cfcaa29724b3b1c00d
Flag: EXEMPT init config for read permission
2024-11-19 10:42:30 +00:00
Herbert Xue
6a9c8ba9c7 Set soong config variable "board_use_dec_sw_csc" for libExynosVideoCodec
Flag: EXEMPT bugfix
Bug: 375522783
Test: m libExynosVideoCodec
Change-Id: Ibc9dab850e35214d19414a4f48ae11bb8923f1b7
2024-11-19 06:26:48 +00:00
Android Build Coastguard Worker
3b50556132 Snap for 12673321 from c8cc2683b5 to 25Q1-release
Change-Id: I2549a6e82a6306dae2fdd5ad550a28e87574e9f1
2024-11-19 00:07:05 +00:00
Android Build Coastguard Worker
1a0a8c580c Snap for 12673321 from a32d414284 to 25Q1-release
Change-Id: Iec52f587b1493b8f249c83a5d0edc6022a38aadb
2024-11-19 00:07:05 +00:00
Vamsidhar reddy Gaddam
a32d414284 Switch to using gs101 instead of valhall for GPU UMD
Preparing for deviation of gs101 UMD from other devices.

This change has no on-device functional behavior impact. The change only picks
the UMD source from a new location, the actual driver should be the same
as earlier.

Flag: EXEMPT for switching where the UMD source is picked up.
Bug: 360830887
Test: Local build
Change-Id: I033c7553c94bed67fa6b6fc2d407b48e8b6d1a3e
2024-11-18 17:40:31 +00:00
Nina Chen
c8cc2683b5 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 379591559
Bug: 379591519
Flag: EXEMPT NDK
Change-Id: Ia18661bf52755dec67b0551b217124b0485bdd6e
2024-11-18 14:43:52 +08:00
Treehugger Robot
db4385e02d Merge "Update ldaf sensor device filename" into main 2024-11-18 03:36:23 +00:00
Boon Jun
a3eb6a6500 Update ldaf sensor device filename
LDAF sensor device filename changed after kernel upgrade
from v5.10 to v6.1 in some of our in-market devices.
We need to update the device filename to access the LDAF
with this new kernel version.

Bug: 378045567
Test: Open camera, and observe available LDAF sensor in logs
Flag: EXEMPT bugfix
Change-Id: I4bed0358263910d1312238a8e109afb75517d8c2
2024-11-18 03:36:18 +00:00
Android Build Coastguard Worker
a8f35ac925 Snap for 12664851 from 4e105e14dc to 25Q1-release
Change-Id: I9acc65ef367d7f0fe9c4f9fe77dd2167942d4f28
2024-11-16 02:03:49 +00:00
Nina Chen
a6019b0cb0 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 379246143
Bug: 379245675
Bug: 379246066
Bug: 379246340

Bug: 379248992
Bug: 379249291
Flag: EXEMPT NDK
Change-Id: Ibc136376c0a0734a2cdac3e543b90f1932e6e4c3
2024-11-15 11:06:33 +00:00
Nina Chen
4e105e14dc Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 379226761
Bug: 379226710
Bug: 379227275
Bug: 379226644
Flag: EXEMPT NDK
Change-Id: I8ef5317b2e63571ea6437014e4ae5cc281a1a5b9
2024-11-15 07:18:25 +00:00
Android Build Coastguard Worker
3f4f2c876d Snap for 12658558 from b524a1802a to 25Q1-release
Change-Id: I06986a5a44ccbd6c6c3e32cdb25b448a1518c060
2024-11-15 00:03:16 +00:00
Android Build Coastguard Worker
8d48c332f7 Snap for 12658558 from ed8a7a774c to 25Q1-release
Change-Id: I00bc58465bcbfcf90a42db7688dfc78dcfd103e6
2024-11-15 00:03:15 +00:00
Xin Li
ed8a7a774c [automerger skipped] Merge 24Q4 (ab/12406339) into aosp-main-future am: 5244fcad04 -s ours
am skip reason: Merged-In I0c0a39e3fc03d8df4e9e87cf61fb8e1dafcfc996 with SHA-1 b6da7df66e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/30283792

Change-Id: I5db7027e30e0640866199bbc83e483b06f964b9b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-11-14 02:52:22 +00:00
Xin Li
b524a1802a [automerger skipped] Merge 24Q4 (ab/12406339) into aosp-main-future am: 86288119b4 -s ours
am skip reason: Merged-In I8a46aae725a9e912681068df9c219e5a91784305 with SHA-1 9e9fa88ba6 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/30284974

Change-Id: I3d1436c45eac59b6cc98f27b2000d837fc110d8d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-11-14 01:22:19 +00:00
Android Build Coastguard Worker
b019cf4544 Snap for 12651823 from df3964ba99 to 25Q1-release
Change-Id: I331ba9a6662a40256838638e80634bdeff55f33d
2024-11-14 00:03:00 +00:00
Spade Lee
df3964ba99 dump_power: gs101: correct dump path
- fix pmic path
- move fg registers dump from debugfs to sysfs
- remove dual battery path
- remove max77779fg path
- remove maxfg history path

Bug: 377895720
Flag: EXEMPT bugfix
Change-Id: Ic765b17a6b32918a7a2b9e7dfe28a60e6503ba1c
Signed-off-by: Spade Lee <spadelee@google.com>
2024-11-13 17:00:00 +00:00
Boon Jun
1df8457f5e Update ldaf sensor device filename
LDAF sensor device filename changed after kernel upgrade
from v5.10 to v6.1 in some of our in-market devices.
We need to update the device filename to access the LDAF
with this new kernel version.

Bug: 378045567
Test: Open camera, and observe available LDAF sensor in logs
Flag: EXEMPT bugfix
Change-Id: I1d366ea6a104fcf2cb1393ad26d3c6c6d39ff910
2024-11-11 07:08:09 +00:00
Android Build Coastguard Worker
7af040e123 Snap for 12630846 from 17c4543a0a to 25Q1-release
Change-Id: I9847f3a64d2b18b3486f5ddc20e15c86b765a290
2024-11-09 02:03:31 +00:00
Herbert Xue
17c4543a0a Move video_codec soong config variables into board config
Flag: EXEMPT bugfix
Bug: 370663515
Test: m libExynosC2OSAL
Change-Id: I51922aeda01f6a1ab477f140f396048aa6931ba8
2024-11-08 03:29:56 +00:00
Xin Li
5244fcad04 Merge 24Q4 (ab/12406339) into aosp-main-future
Bug: 370570306
Merged-In: I0c0a39e3fc03d8df4e9e87cf61fb8e1dafcfc996
Change-Id: I0a719e67f7b9a5fb35b6d7f29a02bf6912946a31
2024-11-06 10:31:19 -08:00
Xin Li
86288119b4 Merge 24Q4 (ab/12406339) into aosp-main-future
Bug: 370570306
Merged-In: I8a46aae725a9e912681068df9c219e5a91784305
Change-Id: I9639177ef81917e51470e586aa4c3144fbb4f3be
2024-11-06 10:31:19 -08:00
Android Build Coastguard Worker
24039517f1 Snap for 12609205 from c025f4915b to 25Q1-release
Change-Id: I32b049aff1461996f0911c65a3ee092cd4eeb343
2024-11-06 00:03:50 +00:00
Android Build Coastguard Worker
e62274a7dd Snap for 12609205 from 7bbc59eec1 to 25Q1-release
Change-Id: If77263bd59ad8869f31a02a247a4fceb78fbd5a5
2024-11-06 00:03:49 +00:00
Spade Lee
7bbc59eec1 dumpstate: gs101: fix dump path
- Add missing change ag/25268925
- Correct FG reg dump path in sysfs
- Correct battery EEPROM dump path
- Correct main/dc charger dump path in sysfs
- Correct tcpm dump path
- Add charger dump path in debugfs
- Add swelling data dump in dumpBatteryHealth
- Remove function not for gs101

Bug: 376080915
Test: all paths were correctly dumped, but debugfs need sepolicy
Flag: EXEMPT bugfix
Change-Id: I398ef1554aa10a41c54290394e918478e2216cfe
Signed-off-by: Spade Lee <spadelee@google.com>
2024-11-05 13:36:13 +00:00
Spade Lee
c025f4915b sepolicy: allow dump_power to read debugfs
11-01 11:59:42.836 11781 11781 W dump_power: type=1400 audit(0.0:46): avc:  denied  { search } for  name="usb" dev="debugfs" ino=2059 scontext=u:r:dump_power:s0 tcontext=u:object_r:vendor_usb_debugfs:s0 tclass=dir permissive=0
11-01 11:59:42.844 11781 11781 W dump_power: type=1400 audit(0.0:47): avc:  denied  { search } for  name="google_battery" dev="debugfs" ino=18509 scontext=u:r:dump_power:s0 tcontext=u:object_r:vendor_battery_debugfs:s0 tclass=dir permissive=0
11-01 11:59:42.844 11781 11781 W dump_power: type=1400 audit(0.0:48): avc:  denied  { read } for  name="maxfg" dev="debugfs" ino=16428 scontext=u:r:dump_power:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
11-01 11:59:42.844 11781 11781 W dump_power: type=1400 audit(0.0:49): avc:  denied  { read } for  name="/" dev="debugfs" ino=1 scontext=u:r:dump_power:s0 tcontext=u:object_r:debugfs:s0 tclass=dir permissive=0
11-01 11:59:42.844 11781 11781 W dump_power: type=1400 audit(0.0:50): avc:  denied  { read } for  name="/" dev="debugfs" ino=1 scontext=u:r:dump_power:s0 tcontext=u:object_r:debugfs:s0 tclass=dir permissive=0
11-01 11:59:42.844 11781 11781 W dump_power: type=1400 audit(0.0:51): avc:  denied  { read } for  name="/" dev="debugfs" ino=1 scontext=u:r:dump_power:s0 tcontext=u:object_r:debugfs:s0 tclass=dir permissive=0

Bug: 376080915
Test: adb bugreport without audit
Flag: EXEMPT bugfix
Change-Id: I7ae11300cd45f7e8c05c0dcf46d5dfda5c777400
Signed-off-by: Spade Lee <spadelee@google.com>
2024-11-01 18:05:40 +00:00
Android Build Coastguard Worker
eedd57aa70 Snap for 12580585 from ecb4cc2682 to 25Q1-release
Change-Id: Icebcfe0c2897ca12c0908bb23e7e971519edb4cd
2024-10-30 23:03:16 +00:00
Priyanka Advani (xWF)
ecb4cc2682 Revert "Add IGoodixFingerprintDaemon aidl interface"
Revert submission 30066446-goodix-ext-service-aidl

Reason for revert: Droidmonitor created revert due to b/376465180. Will be verifying through ABTD before submission.

Reverted changes: /q/submissionid:30066446-goodix-ext-service-aidl

Change-Id: I720eb17fbdf9961ba5505ef83e2b5b53f95e9639
2024-10-30 16:32:59 +00:00
chenkris
c2b251f4a9 Add IGoodixFingerprintDaemon aidl interface
Flag: EXEMPT NDK
Bug: 370671685
Test: authenticate fingerprint.
Change-Id: I06198a5b68129a8a79eb7078ef8ed57bf5fbc6c7
2024-10-30 08:45:29 +00:00
Android Build Coastguard Worker
57d93abcf2 Snap for 12573674 from 78464c33d1 to 25Q1-release
Change-Id: I8d5fc45b82bcdcf995f2d522245ada06ca6db033
2024-10-29 23:03:55 +00:00
Bill Yang
4d9237bf48 Set BOARD_LIBACRYL_G2D_HDR_PLUGIN for soong
Set the full module path of libacryl_hdr_plugin and the include dir for
lobacryl conversion to soong. It will take effect after aosp/3286932 and
aosp/3287183 merged.

Bug: 370414334
Test: lunch aosp_riole-trunk_staging-userdebug ; m libacryl_hdr_plugin libacryl
Change-Id: I67339b5420d523d9a61e0457d77a1412ae6b3582
2024-10-30 00:47:02 +02:00
Bill Yang
78464c33d1 Set BOARD_LIBACRYL_G2D_HDR_PLUGIN for soong am: ce576fa1be am: 528e9aeb31
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3287269

Change-Id: I2c458175aa452feb012b2af94e8f4a108dfabe91
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-10-29 03:12:00 +00:00
Bill Yang
528e9aeb31 Set BOARD_LIBACRYL_G2D_HDR_PLUGIN for soong am: ce576fa1be
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3287269

Change-Id: Iea03fb4b0569ced31e68a6109dfdcfa172e033c5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-10-29 02:50:15 +00:00
Bill Yang
ce576fa1be Set BOARD_LIBACRYL_G2D_HDR_PLUGIN for soong
Set the full module path of libacryl_hdr_plugin and the include dir for
lobacryl conversion to soong. It will take effect after aosp/3286932 and
aosp/3287183 merged.

Bug: 370414334
Test: lunch aosp_riole-trunk_staging-userdebug ; m libacryl_hdr_plugin libacryl
Change-Id: I67339b5420d523d9a61e0457d77a1412ae6b3582
2024-10-25 03:36:29 +00:00
Android Build Coastguard Worker
ad8d84c72e Snap for 12551711 from 47aaa4bfac to 25Q1-release
Change-Id: I36fcbc26505898d1aae85dac0b2afd5393456527
2024-10-24 23:03:12 +00:00
kellyhung
47aaa4bfac Add a soong config variable for CitadelProvision
Bug: 373235487
Test: Presubmits
Flag: EXEMPT bugfix
Change-Id: I3033873be99890a1229861c3ed767480de9fa033
2024-10-24 12:34:13 +00:00
Richard Chang
838d1086c9 gs101: MCP: Set the vendor customized max cached processes to 1024.
Bug: 374891496
Test: adb shell dumpsys activity | grep CUR_MAX_CACHED_PROCESSES
Flag: EXEMPT config XML change
Change-Id: I072c8de8bc78ac6888cb6bbf0344678ac03de3a9
2024-10-23 04:10:41 +00:00
Ethan Chen
30885811ec Disable userdebug diagnostics
* We can't make use of most of the debug features on userdebug builds.

Change-Id: I31df2090b31243b742c4e82dc08cd8491dada54f
2024-10-20 05:01:11 +03:00
basamaryan
1e568cb3ba gs101: Drop unnecessary BOARD_USERDATAIMAGE_FILE_SYSTEM_TYPE flag
Change-Id: Ibb96c529ac64239d7bb919e46f5a625a6deebf98
2024-10-20 05:01:11 +03:00
Michael Bestas
1a406939d0 gs101: overlay: Disable Wi-Fi verbose logging by default
Change-Id: Iafe9f4b83d157906ca6b9114db52ab27b1a01878
2024-10-20 05:01:11 +03:00
Michael Bestas
83c2fccfd1 gs101: overlay: Enable battery cycle count
Change-Id: I92bc8363e1c9e2ad54c29a0a30dce992e25f697d
2024-10-20 05:01:11 +03:00
Michael Bestas
7c3c38d5fe Add lineage.dependencies
Change-Id: I69ea95e240cca3f3b700ae68a4853e5a4d4fd5bc
2024-10-20 05:01:10 +03:00
Michael Bestas
07d9b27865 gs101: Inherit common partition reserved sizes
Change-Id: I444ce2fcd37cdfa58d83a7e872dc547fb05a2a89
2024-10-20 05:01:10 +03:00
Rashed Abdel-Tawab
6eab34d3ec gs101: Build a disabled vbmeta image
Co-authored-by: Nolen Johnson <johnsonnolen@gmail.com>
Change-Id: Ie8f1e0929b037b35b5e45c2e31be9253fa0bb097
2024-10-20 05:01:10 +03:00
Neel Chauhan
899e4a029b Revert "Enable compressed snapshots/VABc."
Virtual AB compression prevents GApps from being installed to
raviole/bluejay.

This reverts commit 2bfa6d3ba0.

Change-Id: I119b8e042e4cdeec27a19ab5dd4f0666cc115ae1
2024-10-20 05:01:10 +03:00
Michael Bestas
708353ecbe Label vendor.dolby.media.c2@1.0-service
Change-Id: I89fb4c149aed94cf2f7c3d34f7fde5877175b1e2
2024-10-20 05:01:10 +03:00
Michael Bestas
9755c57d0a Include missing vendor sepolicy
Change-Id: Id35fb4b22e2ee8dfafdfb8ae601ab823435d2b94
2024-10-20 05:01:10 +03:00
Danny Lin
4ede65e7df Update seapp certificates to match stock presigned apps
Certificates extracted from stock vendor_mac_permissions.xml using
adevtool: https://github.com/kdrag0n/adevtool

Change-Id: Iaf59f1548905d16fe7ad231c039ba43941c15710
2024-10-20 05:01:10 +03:00
ReallySnow
89d909aec9 Add AiAi allowlist
* In Android 12, Android System Intelligence (com.google.android.as) uses
  some of the Private Compute Service (com.google.android.as.oss) services.
  The absence of these Allowlists will cause Android System Intelligence
  to fail to connect to the network and cause collapse.
* We don't need to extract google.xml to fix it, just extract the AiAi part

Change-Id: I446ae5d243cff134901094f82c90a0bbf3bb4381
2024-10-20 05:01:10 +03:00
Danny Lin
f694f31cda overlay: Import AiAi configs
Extracted from stock raven AP3A.241005.015

Co-authored-by: Alessandro Astone <ales.astone@gmail.com>
Co-authored-by: Michael Bestas <mkbestas@lineageos.org>
Change-Id: I78bd7d04cbd0b35f6a8c01df3a8c1013d99bbf42
2024-10-20 05:00:59 +03:00
razorloves
288e89f5cc overlay: Hide user facing crash dialog for EUICC app
The GoogleParts app disables the EUICC app when there's no GMS, but it
doesn't happen quick enough. The crash dialog pops up a few times right
after initial boot up. There's no need to alarm the user, so hide it.

Change-Id: Ia06b336b30a8886bae522c6e8a76a1ca15da5edd
2024-10-20 04:48:56 +03:00
Peter Cai
1e56ae9f1c Disable Euicc when GMS and GSF are not installed
* This avoids EuiccGoogle / GoogleCarrierServices crashing, taking the
  whole telephony stack with them when no GMS or GSF is installed.
* Compared to change 274251, this approach is no-op when GAPPS add-on is
  flashed before the first boot, and thus should not cause issues with
  eSIM when GAPPS is flashed.
* With microG, this also works after installing the microG GMS & GSF
  packages and rebooting, although manual activation of the eSIM is
  needed via Settings - Network.
* The only downside is that users will still see one or two crashes
  during the first boot because our application only starts after the
  device is booted.

Change-Id: I4a11c93e855978abbf8d84fdbe4ffc8b2aedc27c
2024-10-20 04:48:56 +03:00
Michael Bestas
9e6928be12 Include missing ConnectivityThermalPowerManager sepolicy
Change-Id: I1e0f05159a6797251ed85360966aa45246005bbd
2024-10-20 04:48:56 +03:00
Danny Lin
09ef3ecd9c overlay: Allow ConnectivityThermalPowerManager to request thermal mitigation
ConnectivityThermalPowerManager mainly exists to manage thermal
mitigation.

Change-Id: I7d1ad7cb45a24697e444ac1f85ccfb507cb1ce49
2024-10-20 04:48:55 +03:00
Danny Lin
78b501c9b3 overlay: Configure ConnectivityThermalPowerManager
Extracted from stock raven AP3A.241005.015

Change-Id: I71ad5adf9bf64bb1e30354446220d5769a9d44ca
2024-10-20 04:48:24 +03:00
Android Build Coastguard Worker
61ee8a8e9b Snap for 12524026 from 541b51e17b to 25Q1-release
Change-Id: Ic8cbc3207e6139ad0a588d8acec567aa58ec73d3
2024-10-19 01:08:10 +00:00
Thiébaud Weksteen
541b51e17b Merge "Remove duplicate service entries" into main 2024-10-18 00:56:10 +00:00
Android Build Coastguard Worker
51b393cdaa Snap for 12508860 from 172a703bbf to 25Q1-release
Change-Id: I4351bdcb70df18eae017e08e18df53ce872a08e5
2024-10-16 23:02:57 +00:00
Android Build Coastguard Worker
e24463e49c Snap for 12508860 from b2af325920 to 25Q1-release
Change-Id: I4848454b7097eb42d7791bdbeff2c6cd9d159a2f
2024-10-16 23:02:56 +00:00
Treehugger Robot
172a703bbf Merge "Remove cgroup_desc_file bugs." into main 2024-10-16 11:02:04 +00:00
Robert Luo
b2af325920 [Pixel RR] Apply reviewed default permissions
Pregrantting below permission(s):
CALL_PHONE

Flag: EXEMPT add pregranted permission in b/371912006
Bug: 336203918
Test: presubmit
Change-Id: I5804b3d3289519f19ca9acb232ecc0a715ad00a5
2024-10-16 08:42:30 +00:00
Android Build Coastguard Worker
a255f26ca3 Merge cherrypicks of ['googleplex-android-review.googlesource.com/29699292'] into 24Q4-release.
Change-Id: If0bed40e379de3c888b5bf9c6c0e84547c25491f
2024-10-15 23:38:17 +00:00
samou
bc766489dc sepolicy: allow dumpstate to execute dump_power
10-04 19:36:47.308  7141  7141 I android.hardwar: type=1400 audit(0.0:6974): avc:  denied  { execute_no_trans } for  path="/vendor/bin/dump/dump_power" dev="overlay" ino=91 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6975): avc:  denied  { read } for  name="acpm_stats" dev="sysfs" ino=29227 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6976): avc:  denied  { open } for  path="/sys/devices/platform/acpm_stats" dev="sysfs" ino=29227 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6977): avc:  denied  { search } for  name="acpm_stats" dev="sysfs" ino=29227 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6978): avc:  denied  { read } for  name="core_stats" dev="sysfs" ino=57472 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6979): avc:  denied  { open } for  path="/sys/devices/platform/acpm_stats/core_stats" dev="sysfs" ino=57472 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6980): avc:  denied  { getattr } for  path="/sys/devices/platform/acpm_stats/core_stats" dev="sysfs" ino=57472 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-04 19:36:47.336  7141  7141 I dump_power: type=1400 audit(0.0:6981): avc:  denied  { read } for  name="time_in_state" dev="sysfs" ino=50604 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_cpu:s0 tclass=file permissive=1
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:25): avc:  denied  { read } for  name="version" dev="sysfs" ino=62887 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:26): avc:  denied  { read } for  name="version" dev="sysfs" ino=62887 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:27): avc:  denied  { read } for  name="status" dev="sysfs" ino=62888 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:28): avc:  denied  { read } for  name="status" dev="sysfs" ino=62888 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:29): avc:  denied  { read } for  name="fw_rev" dev="sysfs" ino=62915 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:30): avc:  denied  { read } for  name="fw_rev" dev="sysfs" ino=62915 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:29): avc:  denied  { search } for  name="battery" dev="sysfs" ino=63428 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:30): avc:  denied  { search } for  name="10d50000.hsi2c" dev="sysfs" ino=21301 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:31): avc:  denied  { search } for  name="power_supply" dev="sysfs" ino=79013 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:32): avc:  denied  { search } for  name="power_supply" dev="sysfs" ino=79013 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:33): avc:  denied  { search } for  name="10d50000.hsi2c" dev="sysfs" ino=21301 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:51:18.168 14936 14936 I dump_power: type=1400 audit(0.0:18792): avc:  denied  { search } for  name="battery" dev="sysfs" ino=63428 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1
10-04 21:51:18.168 14936 14936 I dump_power: type=1400 audit(0.0:18793): avc:  denied  { read } for  name="uevent" dev="sysfs" ino=63429 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
10-04 21:51:18.168 14936 14936 I dump_power: type=1400 audit(0.0:18794): avc:  denied  { open } for  path="/sys/devices/platform/google,battery/power_supply/battery/uevent" dev="sysfs" ino=63429 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
10-04 21:51:18.168 14936 14936 I dump_power: type=1400 audit(0.0:18795): avc:  denied  { getattr } for  path="/sys/devices/platform/google,battery/power_supply/battery/uevent" dev="sysfs" ino=63429 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
10-04 21:51:18.184 14936 14936 I dump_power: type=1400 audit(0.0:18796): avc:  denied  { search } for  name="8-003c" dev="sysfs" ino=55942 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=1
10-04 21:51:18.184 14936 14936 I dump_power: type=1400 audit(0.0:18797): avc:  denied  { read } for  name="maxfg" dev="sysfs" ino=62568 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1
10-04 21:51:18.184 14936 14936 I dump_power: type=1400 audit(0.0:18798): avc:  denied  { read } for  name="logbuffer_tcpm" dev="tmpfs" ino=1285 scontext=u:r:dump_power:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=1
10-04 21:51:18.184 14936 14936 I dump_power: type=1400 audit(0.0:18799): avc:  denied  { open } for  path="/dev/logbuffer_tcpm" dev="tmpfs" ino=1285 scontext=u:r:dump_power:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6191): avc:  denied  { search } for  name="mitigation" dev="dm-50" ino=3758 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=dir permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6192): avc:  denied  { read } for  name="thismeal.txt" dev="dm-50" ino=28765 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6193): avc:  denied  { open } for  path="/data/vendor/mitigation/thismeal.txt" dev="dm-50" ino=28765 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6194): avc:  denied  { getattr } for  path="/data/vendor/mitigation/thismeal.txt" dev="dm-50" ino=28765 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6195): avc:  denied  { search } for  name="mitigation" dev="sysfs" ino=85222 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_bcl:s0 tclass=dir permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6196): avc:  denied  { read } for  name="last_triggered_count" dev="sysfs" ino=85275 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_bcl:s0 tclass=dir permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6197): avc:  denied  { open } for  path="/sys/devices/virtual/pmic/mitigation/last_triggered_count" dev="sysfs" ino=85275 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_bcl:s0 tclass=dir permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6198): avc:  denied  { read } for  name="batoilo_count" dev="sysfs" ino=85287 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_bcl:s0 tclass=file permissive=1
10-04 23:49:14.616  6976  6976 I dump_power: type=1400 audit(0.0:875): avc:  denied  { read } for  name="thismeal.txt" dev="dm-57" ino=15028 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 23:49:14.616  6976  6976 I dump_power: type=1400 audit(0.0:876): avc:  denied  { open } for  path="/data/vendor/mitigation/thismeal.txt" dev="dm-57" ino=15028 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 23:49:14.616  6976  6976 I dump_power: type=1400 audit(0.0:877): avc:  denied  { getattr } for  path="/data/vendor/mitigation/thismeal.txt" dev="dm-57" ino=15028 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-05 00:00:44.540  7085  7085 I dump_power: type=1400 audit(0.0:878): avc:  denied  { read } for  name="acpm_stats" dev="sysfs" ino=25439 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-05 00:00:44.540  7085  7085 I dump_power: type=1400 audit(0.0:879): avc:  denied  { open } for  path="/sys/devices/platform/acpm_stats" dev="sysfs" ino=25439 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-05 00:00:44.540  7085  7085 I dump_power: type=1400 audit(0.0:880): avc:  denied  { search } for  name="acpm_stats" dev="sysfs" ino=25439 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:881): avc:  denied  { read } for  name="core_stats" dev="sysfs" ino=53039 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:882): avc:  denied  { open } for  path="/sys/devices/platform/acpm_stats/core_stats" dev="sysfs" ino=53039 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:883): avc:  denied  { getattr } for  path="/sys/devices/platform/acpm_stats/core_stats" dev="sysfs" ino=53039 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:884): avc:  denied  { read } for  name="time_in_state" dev="sysfs" ino=45585 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_cpu:s0 tclass=file permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:885): avc:  denied  { open } for  path="/sys/devices/platform/cpupm/cpupm/time_in_state" dev="sysfs" ino=45585 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_cpu:s0 tclass=file permissive=1

Flag: EXEMPT refactor
Bug: 364989823
Signed-off-by: samou <samou@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:e746382d7834745023401c638e5367ed2b48a163)
Merged-In: I195f779cc6588c37ccdbe4bb8b29ee8f2edd861a
Change-Id: I195f779cc6588c37ccdbe4bb8b29ee8f2edd861a
2024-10-15 23:37:11 +00:00
Android Build Coastguard Worker
6de62fe57f Snap for 12502765 from 60ef8d6949 to 25Q1-release
Change-Id: I2be3194076ac3132981cc88958f515345c1b7e5b
2024-10-15 23:03:34 +00:00
Krzysztof Kosiński
c8f947bea6 Remove cgroup_desc_file bugs.
These denials were caused by b/372273614. The culprit CL
has been reverted and the denials do not reproduce on HEAD.

Fix: 372347927
Test: presubmit
Flag: EXEMPT sepolicy bug map update
Change-Id: Ic83101b2b64a96f7e37349f30a902789f05bb26e
2024-10-15 06:26:15 +00:00
Android Build Coastguard Worker
b21028adc8 Snap for 12496712 from 34b85728f7 to 25Q1-release
Change-Id: I9fc687eba858f5e2ab09f1147af57f32afefc410
2024-10-14 23:03:16 +00:00
Eileen Lai
34b85728f7 Merge "modem_svc: use shared_modem_platform to replace all modem_svc_sit" into main 2024-10-14 07:27:51 +00:00
Robin Hsu
60ef8d6949 gs101: Disable kmem cgroup accounting
Disable cgroup kernel memory accounting to avoid unnecessary overhead

similar change ag/22891292 but now back-port to gs101

Flag: NONE kernel config
Bug: 373232814
Test: pts-tradefed run commandAndExit pts -m PtsPerfWbsTestCases
      -t com.google.android.perfwbs.pts.KernelModuleTest
      and alternative tests on forrest.
Change-Id: I4ab5d20a2d74c023c6fca26b32c8acc67fcd2582
Signed-off-by: Robin Hsu <robinhsu@google.com>
2024-10-14 03:00:11 +00:00
Android Build Coastguard Worker
aaebcc961e Snap for 12477291 from d338373cfd to 25Q1-release
Change-Id: I93f2b08a3606051b9c93c0909b4deb060c5a65f5
2024-10-09 21:02:47 +00:00
Android Build Coastguard Worker
c846b82faf Snap for 12477291 from 7ed8a55835 to 25Q1-release
Change-Id: Ie5374bb870801242e06d6458fdf870d9a09692ed
2024-10-09 21:02:46 +00:00
Eileen Lai
af68091abc modem_svc: use shared_modem_platform to replace all modem_svc_sit
Bug: 368257019

Flag: NONE local testing only
Change-Id: I657afb4a6271865d62f63c67d3096714e525a689
2024-10-09 08:25:55 +00:00
Kuen-Han Tsai
7ed8a55835 Usb: Add status check to prevent NPE
This patch prevents a Null Pointer Exception in
queryMoistureDetectionStatus() when getPortStatusHelper() fails to open
the /sys/class/typec file. The failure results in an empty
currentPortStatus vector, causing the NPE when accessing its first
element.

Bug: 361097811
Flag: EXEMPT bugfix
Test: NPE does not occur when getPortStatusHelper() fails
Change-Id: Id6886283d6f2f9179b3a9c5d535646874e9f277b
Signed-off-by: Kuen-Han Tsai <khtsai@google.com>
2024-10-09 15:14:38 +08:00
Nina Chen
d338373cfd Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 372347927
Bug: 372348503
Bug: 372348558
Test: scanBugreport
Bug: 369735133
Bug: 372348545
Test: scanAvcDeniedLogRightAfterReboot
Bug: 372348067
Bug: 369735133
Flag: EXEMPT NDK
Change-Id: I578b04408d24c8a32079728673ea3b7af5fe0b3b
2024-10-09 03:24:17 +00:00
Android Build Coastguard Worker
92e46364bb Snap for 12470893 from a5766d4202 to 25Q1-release
Change-Id: Ibf75765d3e9fb0ba9512f28e3893d0efeb45f2b4
2024-10-08 23:03:21 +00:00
Nina Chen
a5766d4202 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 372122654
Test: scanBugreport
Bug: 369735133
Test: scanAvcDeniedLogRightAfterReboot
Bug: 369735133
Flag: EXEMPT NDK
Change-Id: I9ca82172decbb61a4582aab33d498e67ff048e12
2024-10-08 03:30:57 +00:00
Android Build Coastguard Worker
fd109f2eb0 Snap for 12465365 from e746382d78 to 25Q1-release
Change-Id: If76f1fd0d128612a0aee056c00131f3466643b80
2024-10-07 23:03:11 +00:00
Android Build Coastguard Worker
8b89c99246 Snap for 12465365 from e471d73857 to 25Q1-release
Change-Id: Id914eb19caa46c5790b0f107078f829ad0571089
2024-10-07 23:03:10 +00:00
Jim Tang
e471d73857 Relocate modem_svc_sit to proper places
Flag: EXEMPT refactor
Bug: 358485346
Test: m modem_svc_sit
Change-Id: I526fa249612a18324bbdd9d4105d53519c23e075
2024-10-07 08:45:10 +00:00
Android Build Coastguard Worker
97639eefee Snap for 12458821 from 164d01e0d4 to 25Q1-release
Change-Id: Ibfad4e6390dab604a7a6a8959071d60f8ebb0403
2024-10-05 01:03:08 +00:00
Brian Norris
164d01e0d4 gs101: Copy insmod configs from kernel to vendor_dlkm
We're going to transition to using the kernel copy, not the HLOS copy.

Bug: 369686096
Test: build, flash, check /vendor_dlkm/etc/ (may or may not exist,
      depending on kernel contents)
Flag: build.RELEASE_KERNEL_BLUEJAY_DIR
Flag: build.RELEASE_KERNEL_ORIOLE_DIR
Flag: build.RELEASE_KERNEL_RAVEN_DIR
Change-Id: I40649b59dc0e18e5a9dc160e58815929a7150226
2024-10-04 18:37:23 +00:00
samou
e746382d78 sepolicy: allow dumpstate to execute dump_power
10-04 19:36:47.308  7141  7141 I android.hardwar: type=1400 audit(0.0:6974): avc:  denied  { execute_no_trans } for  path="/vendor/bin/dump/dump_power" dev="overlay" ino=91 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6975): avc:  denied  { read } for  name="acpm_stats" dev="sysfs" ino=29227 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6976): avc:  denied  { open } for  path="/sys/devices/platform/acpm_stats" dev="sysfs" ino=29227 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6977): avc:  denied  { search } for  name="acpm_stats" dev="sysfs" ino=29227 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6978): avc:  denied  { read } for  name="core_stats" dev="sysfs" ino=57472 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6979): avc:  denied  { open } for  path="/sys/devices/platform/acpm_stats/core_stats" dev="sysfs" ino=57472 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-04 19:36:47.332  7141  7141 I dump_power: type=1400 audit(0.0:6980): avc:  denied  { getattr } for  path="/sys/devices/platform/acpm_stats/core_stats" dev="sysfs" ino=57472 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-04 19:36:47.336  7141  7141 I dump_power: type=1400 audit(0.0:6981): avc:  denied  { read } for  name="time_in_state" dev="sysfs" ino=50604 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_cpu:s0 tclass=file permissive=1
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:25): avc:  denied  { read } for  name="version" dev="sysfs" ino=62887 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:26): avc:  denied  { read } for  name="version" dev="sysfs" ino=62887 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:27): avc:  denied  { read } for  name="status" dev="sysfs" ino=62888 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:28): avc:  denied  { read } for  name="status" dev="sysfs" ino=62888 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:29): avc:  denied  { read } for  name="fw_rev" dev="sysfs" ino=62915 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:24:19.640 15006 15006 W dump_power: type=1400 audit(0.0:30): avc:  denied  { read } for  name="fw_rev" dev="sysfs" ino=62915 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:29): avc:  denied  { search } for  name="battery" dev="sysfs" ino=63428 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:30): avc:  denied  { search } for  name="10d50000.hsi2c" dev="sysfs" ino=21301 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:31): avc:  denied  { search } for  name="power_supply" dev="sysfs" ino=79013 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:32): avc:  denied  { search } for  name="power_supply" dev="sysfs" ino=79013 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:46:57.664  7194  7194 W dump_power: type=1400 audit(0.0:33): avc:  denied  { search } for  name="10d50000.hsi2c" dev="sysfs" ino=21301 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0
10-04 21:51:18.168 14936 14936 I dump_power: type=1400 audit(0.0:18792): avc:  denied  { search } for  name="battery" dev="sysfs" ino=63428 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1
10-04 21:51:18.168 14936 14936 I dump_power: type=1400 audit(0.0:18793): avc:  denied  { read } for  name="uevent" dev="sysfs" ino=63429 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
10-04 21:51:18.168 14936 14936 I dump_power: type=1400 audit(0.0:18794): avc:  denied  { open } for  path="/sys/devices/platform/google,battery/power_supply/battery/uevent" dev="sysfs" ino=63429 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
10-04 21:51:18.168 14936 14936 I dump_power: type=1400 audit(0.0:18795): avc:  denied  { getattr } for  path="/sys/devices/platform/google,battery/power_supply/battery/uevent" dev="sysfs" ino=63429 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
10-04 21:51:18.184 14936 14936 I dump_power: type=1400 audit(0.0:18796): avc:  denied  { search } for  name="8-003c" dev="sysfs" ino=55942 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=1
10-04 21:51:18.184 14936 14936 I dump_power: type=1400 audit(0.0:18797): avc:  denied  { read } for  name="maxfg" dev="sysfs" ino=62568 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1
10-04 21:51:18.184 14936 14936 I dump_power: type=1400 audit(0.0:18798): avc:  denied  { read } for  name="logbuffer_tcpm" dev="tmpfs" ino=1285 scontext=u:r:dump_power:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=1
10-04 21:51:18.184 14936 14936 I dump_power: type=1400 audit(0.0:18799): avc:  denied  { open } for  path="/dev/logbuffer_tcpm" dev="tmpfs" ino=1285 scontext=u:r:dump_power:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6191): avc:  denied  { search } for  name="mitigation" dev="dm-50" ino=3758 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=dir permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6192): avc:  denied  { read } for  name="thismeal.txt" dev="dm-50" ino=28765 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6193): avc:  denied  { open } for  path="/data/vendor/mitigation/thismeal.txt" dev="dm-50" ino=28765 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6194): avc:  denied  { getattr } for  path="/data/vendor/mitigation/thismeal.txt" dev="dm-50" ino=28765 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6195): avc:  denied  { search } for  name="mitigation" dev="sysfs" ino=85222 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_bcl:s0 tclass=dir permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6196): avc:  denied  { read } for  name="last_triggered_count" dev="sysfs" ino=85275 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_bcl:s0 tclass=dir permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6197): avc:  denied  { open } for  path="/sys/devices/virtual/pmic/mitigation/last_triggered_count" dev="sysfs" ino=85275 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_bcl:s0 tclass=dir permissive=1
10-04 22:01:08.400  7074  7074 I dump_power: type=1400 audit(0.0:6198): avc:  denied  { read } for  name="batoilo_count" dev="sysfs" ino=85287 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_bcl:s0 tclass=file permissive=1
10-04 23:49:14.616  6976  6976 I dump_power: type=1400 audit(0.0:875): avc:  denied  { read } for  name="thismeal.txt" dev="dm-57" ino=15028 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 23:49:14.616  6976  6976 I dump_power: type=1400 audit(0.0:876): avc:  denied  { open } for  path="/data/vendor/mitigation/thismeal.txt" dev="dm-57" ino=15028 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-04 23:49:14.616  6976  6976 I dump_power: type=1400 audit(0.0:877): avc:  denied  { getattr } for  path="/data/vendor/mitigation/thismeal.txt" dev="dm-57" ino=15028 scontext=u:r:dump_power:s0 tcontext=u:object_r:mitigation_vendor_data_file:s0 tclass=file permissive=1
10-05 00:00:44.540  7085  7085 I dump_power: type=1400 audit(0.0:878): avc:  denied  { read } for  name="acpm_stats" dev="sysfs" ino=25439 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-05 00:00:44.540  7085  7085 I dump_power: type=1400 audit(0.0:879): avc:  denied  { open } for  path="/sys/devices/platform/acpm_stats" dev="sysfs" ino=25439 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-05 00:00:44.540  7085  7085 I dump_power: type=1400 audit(0.0:880): avc:  denied  { search } for  name="acpm_stats" dev="sysfs" ino=25439 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=dir permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:881): avc:  denied  { read } for  name="core_stats" dev="sysfs" ino=53039 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:882): avc:  denied  { open } for  path="/sys/devices/platform/acpm_stats/core_stats" dev="sysfs" ino=53039 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:883): avc:  denied  { getattr } for  path="/sys/devices/platform/acpm_stats/core_stats" dev="sysfs" ino=53039 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_acpm_stats:s0 tclass=file permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:884): avc:  denied  { read } for  name="time_in_state" dev="sysfs" ino=45585 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_cpu:s0 tclass=file permissive=1
10-05 00:00:44.544  7085  7085 I dump_power: type=1400 audit(0.0:885): avc:  denied  { open } for  path="/sys/devices/platform/cpupm/cpupm/time_in_state" dev="sysfs" ino=45585 scontext=u:r:dump_power:s0 tcontext=u:object_r:sysfs_cpu:s0 tclass=file permissive=1

Flag: EXEMPT refactor
Bug: 364989823
Change-Id: I195f779cc6588c37ccdbe4bb8b29ee8f2edd861a
Signed-off-by: samou <samou@google.com>
2024-10-04 16:06:47 +00:00
Android Build Coastguard Worker
c06aa8b559 Snap for 12445464 from 7f7e44cc15 to 25Q1-release
Change-Id: I29d8ef1e8d42164d4ba996708fd3e129e604c841
2024-10-02 23:03:25 +00:00
Jimmy Shiu
7f7e44cc15 [task_profiles]Add MaxPerformance and PreferIdle to InputPolicy profile.
Flag: com.android.input.flags.enable_input_policy_profile
Bug: 369574417
Change-Id: I7800c8a86f60a7513fdd6a4470002e6a62ede4ec
2024-10-02 03:13:49 +00:00
Thiébaud Weksteen
7561dcc936 Remove duplicate service entries
These entries are defined in the platform policy.

Flag: EXEMPT bugfix
Bug: 367832910
Test: TH
Change-Id: I89db26ce49f83dff7536df66bbb85eed39d7e883
2024-10-01 14:45:08 +10:00
Android Build Coastguard Worker
f58216aec3 Snap for 12433810 from 583bb0245b to 25Q1-release
Change-Id: Id080ae5034d6014860336190c9f828a6ac9d5e25
2024-09-30 23:03:15 +00:00
Nishant Panwar
583bb0245b Set dexpreopt and dexopt filter for SystemUI
Bug: 271887637
Test: Built and flashed on local device
Flag: build.RELEASE_SYSTEMUI_USE_SPEED_PROFILE
Change-Id: Idafe8f8e72a7b50bd3d0baea8b736dd853943a09
2024-09-30 04:40:41 +00:00
Danny Lin
0e2f47c9be overlay: Enable Adaptive Connectivity setting
This feature is provided by the ConnectivityThermalPowerManager app that
we extract as a proprietary blob, so we can expose it.

Change-Id: I407e9e2235531fbca0b2c0e48b68105b1e77ad1f
2024-09-29 19:37:14 +03:00
Michael Bestas
ada5de6bea overlay: Set default screen brightness
Extracted from stock.

Change-Id: I8a5e2c8717c145e66aaa0e926ceefc7e117b04c2
2024-09-29 19:37:14 +03:00
razorloves
1a7e850216 overlay: Set auto brightness mode on by default
* Stock sets this on by default, mirror that behavior.

Change-Id: I5cb8e3db27849ebd90459a6d70e053158c05bcc9
2024-09-29 19:37:14 +03:00
razorloves
582e218e9f Set OPA property to enable google assistant
Change-Id: I741171219d64a28d56531f063f95f3f6f6cf81e6
2024-09-29 19:37:13 +03:00
razorloves
9028070b57 overlay: Use CarrierSettings app instead of CarrierConfig
The CarrierSettings app enables/disables carrier apps based on sim
inserted, so use it instead of CarrierConfig.

Change-Id: I163dd615e9d8268c5f94a28ae234a30f74c7e83b
2024-09-29 19:37:13 +03:00
Cyan_Hsieh
213df86981 gs101: Add pvmfw to AB_OTA_PARTITIONS
Bug: 209706293
Change-Id: I13f3f1c02dd6687226936b45852742701d185ced
2024-09-29 19:37:13 +03:00
Michael Bestas
f77e336456 Build Lineage Health HAL
Change-Id: I70cc903a03ac9fa3303bb8fa039c9de4806449bf
2024-09-29 19:37:13 +03:00
Alessandro Astone
9e8738a248 Build pixel touch HAL
Change-Id: I45cff81e1159613094440dd7b2b73b53519c9de6
2024-09-29 19:37:13 +03:00
Michael Bestas
5865285289 Disable modem logging on userdebug builds
Change-Id: Ib8ebf5926ed0bcdcbb06d5b9de3a7e3409b5779c
2024-09-29 19:37:13 +03:00
Michael Bestas
7f719f7dab Add lib_aion_buffer.so to vendor linker config
This lets com.google.pixel.camera.hal.apex access it.

Change-Id: Ic01ce043eeecbc3bcc71c04f49a7c348e2b10886
2024-09-29 19:37:13 +03:00
LuK1337
d44671675c Add liboemcrypto.so to vendor linker config
This lets com.google.android.widevine.apex access it.

Change-Id: I4e9654fe6317b722f5fbf43b92abb367c18640ce
2024-09-29 19:37:13 +03:00
Eamon Powell
3fe2bb3903 Don't copy aosp_excluded_hardware.xml to vendor
Change-Id: I9ae662e47b4bf8d9506f3938d9f4217acf947dc2
2024-09-29 19:37:13 +03:00
Nolen Johnson
a346b6de0c Set camera extension package to Google package
Change-Id: I519ebf8a1e2a9d06561471206c91c01b352ebd47
2024-09-29 19:37:12 +03:00
LuK1337
fae23b8d62 overlay: Add reboot to fastbootd
Change-Id: I733b4d29129f85b92222e292af46602310b9f29f
2024-09-29 19:37:12 +03:00
Jesse Chan
5a462c4418 overlay: Enable option for full screen aspect ratio
Change-Id: I2a1b2acc5ed97ccb6795dc371c2b3ac9cb4f9d03
2024-09-29 19:37:12 +03:00
Danny Baumann
0965e5d444 overlay: Enable call recording
Change-Id: I1b4478b330b13cf5d0fe1ed0d40f43e4b3825f33
2024-09-29 19:37:12 +03:00
Michael Bestas
eea1068c28 overlay: Remove quick_qs_{offset,total}_height overlays
Commit 49895bb361e74ffe92a3c0b76f988c8e4697b5c1 failed to remove
these overlays and this results in the following issue on raviole:
* Pull down status bar
* Try to adjust brightness, network settings open instead

This is caused by the 171px offset that causes the status bar
to overlap the brightness slider.

Test: Reliably adjust brightness, confirm with "Show layout bounds"
      from developer settings.
Change-Id: I1b97a28c257cb5b0faba830f29e9058d2dbe50fa
2024-09-29 19:37:12 +03:00
Michael Bestas
44f26f13ab overlay: Set config_nightDisplayColorTemperatureCoefficients
Extracted from stock.

Change-Id: I5d69d01204b0dd86a7205eb3b16e02f97a7f3db2
2024-09-29 19:37:12 +03:00
Danny Lin
66dfe75b8e overlay: Enable USB and skin temperature warnings
Extracted from stock.

Change-Id: I951f60579a4b7fa2dcc270b5acd433ad1ecb083c
2024-09-29 19:37:12 +03:00
Dan Pasanen
99c40e6695 overlay: enable config_vibrateOnIconAnimation
* need those sexy vibes

Change-Id: If5671135879f6f4069d0ed881b41b0a243890349
2024-09-29 19:37:12 +03:00
Danny Lin
ae37e37a4a overlay: Settings: Enable multiple vibration strength levels
All production GS101 devices have CS40L2x haptic driver ICs that support
multiple intensities, so expose the Off/Low/Medium/High vibration
strength options like stock.

Co-authored-by: Michael Bestas <mkbestas@gmail.com>
Change-Id: I72645b5bd5772e182592a630df86f9b6166b4923
2024-09-29 19:37:12 +03:00
Danny Lin
438c93ba0c overlay: Settings: Override boosted color mode
The Pixel 6 series of devices (raven/oriole) uses vendor color mode 256
for Boosted, rather than the AOSP color mode 1.

Change-Id: I046b24f86ecc8b13ee4ac7485d143843c21bd9d5
2024-09-29 19:37:12 +03:00
Danny Lin
efc353f78a overlay: Don't pin camera app in memory
The default camera app can be *huge* in some cases, e.g. when the app in
question is Google Camera. The system will only pin up to the first 80
MiB of the APK file, as well as the first 80 MiB of its odex. There are
several problems with this:

  - We could easily end up with 160 MiB of camera app files pinned,
    which is a tall order with the 6 GiB of usable RAM that we have
  - The data that gets pinned may not even be the most critical data for
    launching the camera

Let's disable pinning of the camera app to save RAM.

Change-Id: I745e39b6ff212dfaf9213517d2a2be8ff7384e24
2024-09-29 19:37:11 +03:00
Bruno Martins
382ad3c7c2 overlay: Pin standard SystemUI instead of Google's
Change-Id: If96bb13d6cc2c2156d8df111a1037247c96c6e0f
2024-09-29 19:37:11 +03:00
Chirayu Desai
783261fba4 Build EuiccSupportPixelOverlay
Change-Id: I46db4122b89798457338f6751982865571529ba6
2024-09-29 19:37:11 +03:00
Chirayu Desai
5c09f3cdaa Add device manifest for radio
Change-Id: Ib6c4b28d33fb64cb05c715d86a96a829a498beac
2024-09-29 19:37:11 +03:00
Chirayu Desai
d55beb7e17 Build vbmeta_vendor
Change-Id: I74c028a2e5ade8830526e95f8ec90b1a1da35afb
2024-09-29 19:37:11 +03:00
Chirayu Desai
868ff1dd9c Build vendor
Change-Id: I08dff42223ae54386a5ed050b51aa4a39e08bdb6
2024-09-29 19:37:11 +03:00
Chirayu Desai
aaccc032d7 Build vendor_dlkm
Change-Id: Ic2a0e4cdfdcc448a73bef41e0d2140e9d0aefcf0
2024-09-29 19:37:11 +03:00
Chirayu Desai
fc2577c27b Allow building vendor image
* We don't have access to these files, but we still want to
  build vendor images without errors

Change-Id: I4c09f7134b218b5fc10d180a6ef05015cad54f5d
2024-09-29 19:37:11 +03:00
mydongistiny
6bf56e5e85 gs101: Use Google's wifi_ext service
* Use vendor.google.wifi_ext@1.0-service
  that is in the vendor partition instead
  of the AOSP WiFi service.

Change-Id: Ia0fff6ffc532cc6b5e41f8ac242d00e64627cee8
2024-09-29 19:37:11 +03:00
Chirayu Desai
d7c657ef9b gs101: Add initial Lineage common makefiles
Change-Id: I8136e9f0df40ca3bf96dbfd2453275481178cdaa
2024-09-29 19:37:11 +03:00
Scott Warner
f9c9b8a253 gs101: Update sepolicy path
Change-Id: I4bcee50514c02294137ea5ac6e64c64d69308bd4
2024-09-29 13:00:28 +03:00
Michael Bestas
f5e5700827 Add .gitupstream
Change-Id: I79747ef989659c069386a6ed34a59bba2e8ea860
2024-09-29 12:58:27 +03:00
Michael Bestas
fefa0ed722 Add 'sepolicy/' from tag 'android-15.0.0_r1'
git-subtree-dir: sepolicy
git-subtree-mainline: 569ade8120
git-subtree-split: 177403b796
Change-Id: I9398cfce20bee720d0628bf2c07b7a7efdcea111
2024-09-29 12:58:16 +03:00
Android Build Coastguard Worker
d85e1266ee Snap for 12426030 from 5734db5acc to 25Q1-release
Change-Id: I652646abe72fc075bb3bbab732c4e22ff04f32a8
2024-09-28 01:03:07 +00:00
Android Build Coastguard Worker
cf633d0f6c Snap for 12420652 from 57c566b298 to 25Q1-release
Change-Id: If7df47629c5ee32de9ab4ad76b9865429b613780
2024-09-26 23:02:25 +00:00
Android Build Coastguard Worker
c7b0a77966 Snap for 12420652 from 66db2ee5d4 to 25Q1-release
Change-Id: I18b31c7d7c2a806b3d4dc2cf4125ca361ed3b691
2024-09-26 23:02:24 +00:00
Zhengyuan Cui
5734db5acc Change any use case of folder name apis to tachyon_apis to avoid api review
Bug: 364390678

Change-Id: I40cc4d0d45be69c52c6fc17723c4535504476d47
Flag: EXEMPT refactor
2024-09-26 21:00:49 +00:00
Nina Chen
57c566b298 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 369735407
Test: scanBugreport
Bug: 369735133
Test: scanAvcDeniedLogRightAfterReboot
Bug: 369735170
Change-Id: I574ee785ee63bccaca15fa33879f8728d567e1d9
2024-09-26 13:24:24 +08:00
Android Build Coastguard Worker
559ad88bdf Snap for 12415101 from f5714487a6 to 25Q1-release
Change-Id: I842ff5f23daeee9f28f304547ae27d664c8c6382
2024-09-25 23:02:57 +00:00
Les Lee
66db2ee5d4 wifi: Upgrade vendor hal version
Bug: 362355566
Flag: EXEMPT HAL interface change
Test: Build
Change-Id: I8cd5c16ca8f82e7ef58b5333acf53772ba31089b
2024-09-25 21:36:03 +00:00
Wilson Sung
f5714487a6 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 369537606
Bug: 369538457
Flag: EXEMPT NDK
Change-Id: I01699bc42821ab8eabc7ed545119ba306e8a8e87
2024-09-25 12:23:48 +00:00
Android Build Coastguard Worker
d973ad5be2 Snap for 12410317 from 9e9fa88ba6 to 25Q1-release
Change-Id: I1ab7a61d9419a847d23c8bf3aaa2fef41b2f9e28
2024-09-24 23:02:37 +00:00
Android Build Coastguard Worker
a35b6258cb Snap for 12404440 from 9e9fa88ba6 to 24Q4-release
Change-Id: I2fc3a4953447bd3e2c785d6e88a399b0fdbcef4e
2024-09-23 23:02:27 +00:00
Android Build Coastguard Worker
b22d4c2e73 Snap for 12399304 from cc79320f9a to 25Q1-release
Change-Id: I45ba8127e2ee6d36a9d9108ae984f99443ce66df
2024-09-21 23:01:20 +00:00
Android Build Coastguard Worker
7364f10756 Snap for 12399304 from d52fc5d79f to 25Q1-release
Change-Id: I9320f75d01d165e64f444e86bd0c58f631972daf
2024-09-21 23:01:19 +00:00
Tej Singh
9e9fa88ba6 Make android.framework.stats-v2-ndk app reachable
For libedgetpu

Test: TH
Bug: 354763040
Flag: EXEMPT bugfix
Change-Id: I8a46aae725a9e912681068df9c219e5a91784305
2024-09-20 21:27:23 -07:00
Android Build Coastguard Worker
05691d513c Snap for 12397640 from d52fc5d79f to 24Q4-release
Change-Id: Ic0001cc6235bc54334e59beacc1a70d5f5788206
2024-09-21 01:01:56 +00:00
Krzysztof Kosiński
d52fc5d79f Delete TARGET_CPU_VARIANT_RUNTIME. am: 60344f3e70 am: 161a602a62
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3275074

Change-Id: I3e2fadf317006f0e2e1aa4eeca222995a52d07e9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-20 21:25:58 +00:00
Krzysztof Kosiński
161a602a62 Delete TARGET_CPU_VARIANT_RUNTIME. am: 60344f3e70
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3275074

Change-Id: I0179f9d89be6927bb0204d561cf83348635a5f2d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-20 20:38:29 +00:00
Krzysztof Kosiński
60344f3e70 Delete TARGET_CPU_VARIANT_RUNTIME.
This variable only does something when it differs from
TARGET_CPU_VARIANT. Setting it to the same values doesn't do
anything.

Bug: 368635026
Test: presubmit
Change-Id: I77ae2cbd9fbe09e60db3ee89fc33f32cecb8bab6
2024-09-20 19:14:06 +00:00
Android Build Coastguard Worker
cb2762ae97 Snap for 12391343 from b6da7df66e to 24Q4-release
Change-Id: Icd75a7d3516f473b96e5deb87c416c49355d1c76
2024-09-19 23:01:47 +00:00
Android Build Coastguard Worker
3d0462c700 Snap for 12385180 from cc79320f9a to 24Q4-release
Change-Id: Ia59ec40562df17714d69a4db03ebbee4405c8e06
2024-09-18 23:01:59 +00:00
Jerry Chang
b6da7df66e Add input event profile to mitigate input latency of input threads
Bug: 347122505
Test: check the priority and latency of input thread in Perffeto
Flag: NONE early device setting updates
Change-Id: I0c0a39e3fc03d8df4e9e87cf61fb8e1dafcfc996
2024-09-18 12:08:38 +00:00
Android Build Coastguard Worker
c42c200e53 Snap for 12373988 from f0f9e291f8 to 24Q4-release
Change-Id: Ife1ba34cca155b72a6f5e4b5c60c7ac6871552e7
2024-09-16 23:01:42 +00:00
Ryan Prichard
f0f9e291f8 gs101: avoid vector<const T> am: cbb28eab67 am: a368ab227e
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3262401

Change-Id: I0f6ae5651a6d26a8c221901e842a565a8c93e832
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-16 20:13:39 +00:00
Ryan Prichard
a368ab227e gs101: avoid vector<const T> am: cbb28eab67
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3262401

Change-Id: I26183c8d354078b55329cf1f1600d613ba47f11f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-16 19:53:10 +00:00
Prochin Wang
cc79320f9a Change vendor_fingerprint_prop to vendor_restricted_prop
This is to allow the fingerprint HAL to access the property.

Bug: 366105474
Flag: build.RELEASE_PIXEL_BOOST_DATALAYER_PSA_ENABLED
Test: mm
Change-Id: Id15a6014d553bf91fd9ffe34c7c1000973ad5860
2024-09-16 01:46:00 +00:00
Android Build Coastguard Worker
af16ff4e4b Snap for 12370120 from 9a63842938 to 25Q1-release
Change-Id: Ia8a3e5a7cf37eeb45cfd4ef54fa6d071f2a188c1
2024-09-14 23:01:21 +00:00
Android Build Coastguard Worker
4fecd93614 Snap for 12370120 from 54ecd01c7b to 25Q1-release
Change-Id: Ide8e9e2f24aeae8619931b05abe2e5513d9b1e7f
2024-09-14 23:01:21 +00:00
Android Build Coastguard Worker
4a373e8b3e Snap for 12368321 from 9a63842938 to 24Q4-release
Change-Id: Ief755db28ac52797345b4f9725b6099ea48f0405
2024-09-14 01:01:57 +00:00
Nina Chen
9a63842938 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 366116587
Test: scanBugreport
Bug: 366115873
Bug: 366116435
Bug: 366116214
Test: scanAvcDeniedLogRightAfterReboot
Bug: 366115457
Bug: 366115458
Flag: EXEMPT NDK
Change-Id: I5f9c4f722ebcfc8fe14c9324d37106d9431accc4
2024-09-13 06:45:28 +00:00
Ryan Prichard
cbb28eab67 gs101: avoid vector<const T>
std::vector<const T> uses std::allocator<const T>, which is an
undocumented libc++ extension to the C++ standard library. The extension
was removed in llvm.org/PR96319. Use an ordinary non-const T instead.

Bug: http://b/349681543
Test: m android.hardware.power.stats-impl.gs101
Flag: EXEMPT, refactor to fix build failure
Change-Id: Ia66a69a9375971223b712d695f5ea5f2c1e26c19
2024-09-12 13:15:56 -07:00
Android Build Coastguard Worker
55298600a4 Snap for 12342105 from 54ecd01c7b to 24Q4-release
Change-Id: Ie78654f05afd3fd822975f6c31e6e5ec0879b35e
2024-09-09 23:01:57 +00:00
Treehugger Robot
54ecd01c7b Merge "Delete PRODUCT_FULL_TREBLE_OVERRIDE." into main am: 6e5213ffd2 am: e8c638674e
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3258314

Change-Id: I931d1462c14814151bd916683a8ff3e68680410c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-09 03:01:21 +00:00
Treehugger Robot
e8c638674e Merge "Delete PRODUCT_FULL_TREBLE_OVERRIDE." into main am: 6e5213ffd2
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3258314

Change-Id: I97bd871e589cd396f1cafb0e935594733eb0b29a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-09 02:50:54 +00:00
Treehugger Robot
6e5213ffd2 Merge "Delete PRODUCT_FULL_TREBLE_OVERRIDE." into main 2024-09-09 02:46:24 +00:00
Android Build Coastguard Worker
6e727eeed3 Snap for 12337407 from 8211a60d80 to 25Q1-release
Change-Id: I111ba6bf77068cd436d2dd24458981fe48cc8023
2024-09-07 23:01:29 +00:00
Android Build Coastguard Worker
5891d6d21c Snap for 12337407 from 0377917368 to 25Q1-release
Change-Id: I8c80f2e01fbc0f5cae2a32531c9eabd2d6d21907
2024-09-07 23:01:25 +00:00
Android Build Coastguard Worker
84e1977c12 Snap for 12337246 from 8211a60d80 to 24Q4-release
Change-Id: If8c3adda5b561213d35d5fb5f56df3f13f2d9bc0
2024-09-07 21:01:40 +00:00
Android Build Coastguard Worker
713a61c8ec Snap for 12337246 from 0377917368 to 24Q4-release
Change-Id: If8e5dc2d7d1ac27599af73d5e2d8a113dcf56ad9
2024-09-07 21:01:39 +00:00
Xin Li
0377917368 [automerger skipped] Merge 24Q3 to AOSP main am: 5698c6c38e -s ours am: a82f5cfaec -s ours
am skip reason: Merged-In Ibf7dda6c4c13d6513e2f08239c95c6b2778a98ec with SHA-1 ebddc4ff3f is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3258552

Change-Id: I1b246ca1c53bc974ad957bc388a1934bc6a6ad3d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-07 04:20:25 +00:00
Xin Li
8211a60d80 [automerger skipped] Merge 24Q3 to AOSP main am: 51f0b993b0 -s ours am: f74c765659 -s ours
am skip reason: Merged-In I91df897d8ae7d8e4b1b49a7eb20f6bb5fe99755c with SHA-1 855cd95dce is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/3257961

Change-Id: I6a625d82b030104366c2380f2d8b3b2726976bb8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-07 04:03:15 +00:00
Xin Li
f74c765659 [automerger skipped] Merge 24Q3 to AOSP main am: 51f0b993b0 -s ours
am skip reason: Merged-In I91df897d8ae7d8e4b1b49a7eb20f6bb5fe99755c with SHA-1 855cd95dce is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/3257961

Change-Id: I76119471c70db0083446d9a9b0d8bd59ff1a400d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-07 02:44:00 +00:00
Xin Li
a82f5cfaec [automerger skipped] Merge 24Q3 to AOSP main am: 5698c6c38e -s ours
am skip reason: Merged-In Ibf7dda6c4c13d6513e2f08239c95c6b2778a98ec with SHA-1 ebddc4ff3f is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3258552

Change-Id: I4d1500a8ac8dc543fade1661c965bde24f52d6a4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-07 02:42:30 +00:00
Krzysztof Kosiński
bf1f0fbcce Delete PRODUCT_FULL_TREBLE_OVERRIDE.
This variable doesn't do anything for devices launching with
API level 26 or later, and the initial gs101 devices (Pixel 6)
launched with API level 31.

Bug: 307369186
Test: presubmit
Flag: EXEMPT trivial build cleanup
Change-Id: I3e3ef17f4a1d7101bbfdeb47c3072d0ede4af6e9
2024-09-06 22:19:59 +00:00
Xin Li
5698c6c38e Merge 24Q3 to AOSP main
Bug: 357762254
Merged-In: Ibf7dda6c4c13d6513e2f08239c95c6b2778a98ec
Change-Id: I80bb0e53c7af5d5f5b7c342ba8b3da915a124d3c
2024-09-05 17:02:37 -07:00
Xin Li
51f0b993b0 Merge 24Q3 to AOSP main
Bug: 357762254
Merged-In: I91df897d8ae7d8e4b1b49a7eb20f6bb5fe99755c
Change-Id: Ifc0e5917fd9599c10bce7c5b99031b845bc2f95b
2024-09-05 17:02:37 -07:00
Android Build Coastguard Worker
2f6e1f4e44 Snap for 12327203 from 5c249e52ce to 24Q4-release
Change-Id: I98ad9007562dbcbff686713d13102a7f4f03a72a
2024-09-05 23:01:45 +00:00
Ocean Chen
5c249e52ce Switch from the BFQ to the mq-deadline I/O scheduler
The mq-deadline I/O scheduler is more stable than BFQ. Additionally, the
boot time is shorter with the mq-deadline I/O scheduler. It only changes the scheduler on new kernel.

Bug: 186902601
Test: forrest build

Change-Id: I9433d73e7ed4bfd5e72a0f8318e959373e76202e
Signed-off-by: Ocean Chen <oceanchen@google.com>
2024-09-05 13:00:16 +00:00
samou
e7603cd7a9 bcl: remove charging debugfs data logging
Flag: EXEMPT refactor
Bug: 362671589
Signed-off-by: samou <samou@google.com>
Change-Id: I389f4318f9fc62039d422e5c909576c0e6d5daf9
2024-09-05 10:02:25 +00:00
carmenyip
0c84b40b00 extended_log: update directory permissions for gs101
Bug: 336638376

Test: $ cd data/vendor/radio
$ ls -la
Flag: NONE changing directory permissions only

Change-Id: Id6a76769e84f778e730cfcdffcd6779b5d8c89ce
2024-09-05 02:58:55 +00:00
Android Build Coastguard Worker
c5c4ae9c96 Snap for 12319997 from a13c7187bb to 24Q4-release
Change-Id: Ia3dca665aab4de486158f5f4d440b55ebc0a4b22
2024-09-04 23:02:16 +00:00
Treehugger Robot
a13c7187bb Merge "Update SELinux error" into main 2024-09-04 09:50:15 +00:00
Wilson Sung
d3d5235b50 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 364446534
Flag: EXEMPT sepolicy bugFix
Change-Id: I694b656e436ef9365ee1bbbac81f155dbf70ce60
2024-09-04 08:54:01 +00:00
Randall Huang
edf14e100e storage: move storage related device type to common folder
Bug: 364225000
Test: forrest build
Change-Id: I779edca2e5cecfb34ede65dccf93f207a3dbcf2f
Signed-off-by: Randall Huang <huangrandall@google.com>
2024-09-04 10:44:05 +08:00
Android Build Coastguard Worker
11dac2abd9 Snap for 12313714 from f323bc8dc7 to 24Q4-release
Change-Id: If7a43d543a8c4ff41849e128c80a6e533a38b8b4
2024-09-03 23:01:51 +00:00
Android Build Coastguard Worker
5c8fe35c22 Snap for 12309590 from afbc02068d to 24Q4-release
Change-Id: Iac1765f605097138418786f1736da6887c5e1dae
2024-09-02 23:01:45 +00:00
Randall Huang
f323bc8dc7 Storage: label ufs firmware upgrade script
Bug: 361093041
Test: local build
Change-Id: I0f1c9222f16351bde2ef9dd478a5e0c143e49e5a
Signed-off-by: Randall Huang <huangrandall@google.com>
2024-09-02 14:55:28 +08:00
Attis Chen
afbc02068d Merge "Label sysfs node power_mode as sysfs_display." into main 2024-09-02 04:54:18 +00:00
Android Build Coastguard Worker
ff1133efa1 Snap for 12304452 from c38c1cc1a9 to 24Q4-release
Change-Id: I15e582c8eea18a08721b6cd18e2dda79385e268c
2024-08-31 01:01:56 +00:00
Ankit Goyal
c38c1cc1a9 Delete mapper4 manifest
Bug: 362183626
Flag: EXEMPT manifest update
Test: Boot to home on shiba
Change-Id: Iec298886a796f49145cf4400ef2e086a6312d572
2024-08-30 01:29:41 +00:00
Android Build Coastguard Worker
63c11f874b Snap for 12296955 from dc56b4d57b to 24Q4-release
Change-Id: I58cd981d2932bc74a02d4292ee6ed98fc954c250
2024-08-29 23:01:32 +00:00
Masha Chizhova
dc56b4d57b Define use_hwc2 variable
Bug: 340865092
Change-Id: I5e55034c5e5d03089453c843753af3419026d3cb
Flag: TEST_ONLY
2024-08-29 16:04:27 +00:00
Android Build Coastguard Worker
f93468fe0a Snap for 12289667 from 8d0a51e591 to 24Q4-release
Change-Id: I0ea18361b0c6299968df63cad33a6b856d41e502
2024-08-28 23:02:12 +00:00
Roy Luo
8d0a51e591 usb: correct sys.usb.controller sysprop
system/core/init/init.cpp SetUsbController picks the first udc device if
there're multiple udc devices present on the system to populate
sys.usb.controller system property.
CONFIG_USB_DUMMY_HCD enabled in kernel-5.10 GKI would introduce a
dummy udc device named "dummy_udc.0". Depends on timing, the dummy
device might be picked up by the init process and incorrectly populate
sys.usb.controller.
This issue only applies to devices on kernel-5.10 GKI, the WAR is to
overwrite the sysprop if it's incorrectly populated by the dummy udc.

Bug: 333778731
Test: tested on Cheetah
Flag: EXEMPT bugfix
Change-Id: Idefd1a5d8154a51792c6cb52ee6d11cbb7f6df78
2024-08-27 23:39:18 +00:00
attis
e0d8d912ec Label sysfs node power_mode as sysfs_display.
Label power_mode to sysfs_panel to let it be allowed in dumpstate.

avc log:
08-26 11:59:55.044 14700 14700 W dump_display: type=1400 audit(0.0:25): avc:  denied  { read } for  name="power_mode" dev="sysfs" ino=83218 scontext=u:r:dump_display:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 bug=b/340722772

Test: ls -Z, adb bugreport.
Flag: EXEMPT bugfix
Bug: 358505990
Change-Id: Ia31964903b62f72237ae18cf07a2cef0138adeea
Signed-off-by: attis <attis@google.com>
2024-08-26 12:13:52 +00:00
Android Build Coastguard Worker
2f468c0902 Snap for 12272146 from cf99531470 to 24Q4-release
Change-Id: I9763ec5a326dccbc50077e828724d77a70bd2e1a
2024-08-24 01:01:46 +00:00
Android Build Coastguard Worker
707829a317 Snap for 12272146 from 6c2502279f to 24Q4-release
Change-Id: I6dc0dd880d8d4b234a7faf8199ad5cb343d709fc
2024-08-24 01:01:45 +00:00
Sam Ou
cf99531470 Merge changes from topic "kernel5_revision" into main
* changes:
  sepolicy: gs101: fix bm selinux
  sepolicy: remove dump_gs101.sh
  sepolicy: remove duplicate policy
2024-08-23 10:58:35 +00:00
samou
6c2502279f bcl: revision for kernel6.1
- Migrate dump_gs101.sh to dump_power
- Enable battery_mitigation
- Correct ocp_cpu1 threshold

Flag: EXEMPT refactor
Bug: 349935208
Change-Id: I7e7f155ba7722dc5c24c2795c2840395ed4f9043
Signed-off-by: samou <samou@google.com>
2024-08-23 10:58:20 +00:00
Android Build Coastguard Worker
4985a020d2 Snap for 12265118 from e582d85720 to 24Q4-release
Change-Id: Ie92f169a7011503842c26c81928a99a460c90540
2024-08-22 23:02:18 +00:00
Betty Zhou
e582d85720 Revert "Enable KUnit testing on raviole userdebug & eng build target."
This reverts commit c5b3375835.

Reason for revert: It's not need anymore for kunit testing

Change-Id: I8606bfb3cc375e97d78ff52cd4fe8b596c86d6fd
Bug: 337797668
2024-08-22 06:49:10 +00:00
Android Build Coastguard Worker
c113225965 Snap for 12241618 from 181183a4f5 to 24Q4-release
Change-Id: I848ea36999f87881627f0a1890e1bb634045235a
2024-08-17 01:01:55 +00:00
Android Build Coastguard Worker
dc4bbc3517 Snap for 12235414 from 9c590907f6 to 24Q4-release
Change-Id: I8c622a85c8a37652fc1b6d2e68cbaf351a49832b
2024-08-15 23:01:59 +00:00
Xiaofan Jiang
181183a4f5 Merge "Revert "Revert "gs101: update shared_modem_platform sepolicy for..."" into main 2024-08-15 20:44:28 +00:00
Xiaofan Jiang
4b26ef2e43 Revert "Revert "gs101: update shared_modem_platform sepolicy for..."
Revert submission 28822848-revert-28762313-SAYUORWKVG

Reason for revert: issue identify and fix is ready

Reverted changes: /q/submissionid:28822848-revert-28762313-SAYUORWKVG

Change-Id: I17fd2b246fc95eac9a5e953c7c7889ecb2c91d1d
2024-08-15 19:25:33 +00:00
Priyanka Advani (xWF)
7a34ff247b Merge "Revert "gs101: update shared_modem_platform sepolicy for UMI"" into main 2024-08-15 18:30:35 +00:00
Priyanka Advani (xWF)
4c48ef2770 Revert "gs101: update shared_modem_platform sepolicy for UMI"
Revert submission 28762313

Reason for revert: Droidmonitor created revert due to b/360059249.

Reverted changes: /q/submissionid:28762313

Change-Id: I4ffb476a64b32a4e725c894f8014070121848cc0
2024-08-15 16:14:52 +00:00
Xiaofan Jiang
9c590907f6 Merge "gs101: update shared_modem_platform sepolicy for UMI" into main 2024-08-15 04:01:13 +00:00
Android Build Coastguard Worker
8df13b4123 Snap for 12229688 from 9adfff45e2 to 24Q4-release
Change-Id: I0983faa1b8c811b4b7e6cabd3ad239bb517a5d45
2024-08-14 23:02:04 +00:00
samou
b8f3e01274 sepolicy: gs101: fix bm selinux
- add odpm scale value path
- add gpu cur_freq

Flag: EXEMPT refactor
Bug: 349935208
Change-Id: Ib5f4baf57c181f3ca2470514d256f307b7761403
Signed-off-by: samou <samou@google.com>
2024-08-14 12:32:56 +00:00
samou
a6390dc3ea sepolicy: remove dump_gs101.sh
Flag: EXEMPT refactor
Bug: 349935208
Change-Id: I4f2d5ef40dc328237f62aac7e4116a1f1410516a
Signed-off-by: samou <samou@google.com>
2024-08-14 12:32:30 +00:00
samou
50ee17cede sepolicy: remove duplicate policy
Flag: EXEMPT refactor
Bug: 349935208
Change-Id: Ib20bc0cc9af38ed481697420bb92ea12a917d594
Signed-off-by: samou <samou@google.com>
2024-08-14 12:32:05 +00:00
Xiaofan Jiang
bf7161db56 gs101: update shared_modem_platform sepolicy for UMI
Bug: 357139752

Flag: EXEMPT sepolicy

[   68.189198] type=1400 audit(1722986580.568:59): avc:  denied  { unlink } for  comm="binder:892_2" name="modem_svc_socket" dev="dm-52" ino=20239 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=sock_file permissive=1
[   68.189448] type=1400 audit(1722986580.568:60): avc:  denied  { create } for  comm="binder:892_2" name="modem_svc_socket" scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=sock_file permissive=1

Change-Id: I7e28f5a8c7f8a6909fccdc813e7c94ce8c7f8831
2024-08-14 01:42:37 +00:00
Qais Yousef
9adfff45e2 BoardConfig-common.mk: Enable Lazy RCU
And sync other RCU paramters.

Bug: 340860065
Flag: EXEMPT boot time parameters
Signed-off-by: Qais Yousef <qyousef@google.com>
Change-Id: Ia41a45341e988cddcfcf850afd8398a7dc1a91fe
2024-08-13 23:49:46 +00:00
Android Build Coastguard Worker
56991a6f4f Snap for 12224018 from 774949828e to 24Q4-release
Change-Id: I218cbc418ec58aa973b0dac7fdc4f82198670056
2024-08-13 23:02:21 +00:00
Android Build Coastguard Worker
53be016172 Snap for 12224018 from 9b60e7e840 to 24Q4-release
Change-Id: I9d22ddff270541b427f93b3f25c1f20621e17e9a
2024-08-13 23:02:21 +00:00
Android Build Coastguard Worker
fc7984c161 Snap for 12217053 from ad78871644 to 24Q4-release
Change-Id: Iefb49261bf92e213bda567c477fb604bc47dcbfe
2024-08-12 23:06:39 +00:00
Xin Li
9b60e7e840 [automerger skipped] Merge 24Q3 (ab/AP3A.240905.001) to aosp-main-future am: 5076337f3b -s ours
am skip reason: Merged-In Ibf7dda6c4c13d6513e2f08239c95c6b2778a98ec with SHA-1 45531bd711 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/28710570

Change-Id: I4e1e1ac23b9a8f424020343c4d7c88ce6e057bfe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-08-12 21:02:06 +00:00
Xin Li
5076337f3b Merge 24Q3 (ab/AP3A.240905.001) to aosp-main-future
Bug: 347831320
Merged-In: Ibf7dda6c4c13d6513e2f08239c95c6b2778a98ec
Change-Id: Ic7c52e1a0b7db76af3857c67f502ba6de97a5825
2024-08-12 17:11:55 +00:00
samou
ad78871644 Remove BCL from thermal
Flag: EXEMPT tuning changes
Bug: 349935208
Change-Id: Id34dc3bb1895c28cf3c3a146ef9fc7a742a73044
Signed-off-by: samou <samou@google.com>
2024-08-12 12:32:21 +00:00
Android Build Coastguard Worker
1b300dbc46 Snap for 12210778 from 44c8f95a60 to 24Q4-release
Change-Id: I8a1059b6fdc597746ffdf859c6d1236ffdf7bf14
2024-08-10 01:06:39 +00:00
Cyan_Hsieh
44c8f95a60 Add FSTAB_OWNERS and update OWNERS to include Android.bp am: 0da2a72457 am: f18667374f
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3212451

Change-Id: If3a455861967ee0531252fc0069b4809c0dd3dc1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-08-09 11:07:34 +00:00
Cyan_Hsieh
f18667374f Add FSTAB_OWNERS and update OWNERS to include Android.bp am: 0da2a72457
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3212451

Change-Id: I555f5fdd633108e2a4dfeea58faf2fb03dea3aff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-08-09 10:49:02 +00:00
Cyan_Hsieh
0da2a72457 Add FSTAB_OWNERS and update OWNERS to include Android.bp
Flag: EXEMPT only changing OWNERS
Bug: 357036384
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:bf13fdd5c229e61326dc1cba78c1309a16ac084e)
Merged-In: I8a15eb2401d41ac74988f3a5d8028fbeeb28cc2d
Change-Id: I8a15eb2401d41ac74988f3a5d8028fbeeb28cc2d
2024-08-09 08:33:31 +00:00
Kevin Ying
774949828e Allow camera HAL to access power_state sysfs
08-03 01:36:52.108   791   791 W TaskPool: type=1400 audit(0.0:125): avc:  denied  { read } for  name="power_state" dev="sysfs" ino=86770 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 339690296
Test: Open camera, no display avc error
Flag: EXEMPT resource update only
Change-Id: I407c31e0898b07bef0df1b090dbc570f61c49272
Signed-off-by: Kevin Ying <kevinying@google.com>
2024-08-08 23:17:18 +00:00
Android Build Coastguard Worker
479e12d8a9 Snap for 12185670 from acf7138e36 to 24Q4-release
Change-Id: Id3e0de9c407c8a3e90f32216efd90ffd415a5783
2024-08-05 23:01:53 +00:00
Jacky Liu
acf7138e36 Use modules.load for vendor ramdisk modules
vendor_boot.img is no longer built on 6.1 kernel codebase hence
vendor_boot.modules.load no longer exists. We can use modules.load
instead which is same as vendor_boot.modules.load but always exist.

Flag: EXEMPT build file update
Bug: 343042291
Test: build oriole-zvs1-userdebug
      build oriole-trunk_pixel_kernel_61-userdebug
Change-Id: I7e5028ca4cc710367ddc5b161e006b8e7c25de80
2024-08-05 05:06:51 +00:00
Android Build Coastguard Worker
e0c49de16f Snap for 12177962 from 79cb51273a to 24Q4-release
Change-Id: Idfe704838df5e5f26554fbd433e4bf789a047867
2024-08-03 03:01:44 +00:00
Chris Lu
79cb51273a Upgrade IDisplay to V13
Bug: 315496839
Flag: EXEMPT bugfix
Test: build pass
Change-Id: Ied129519d62103ea3f4a4a6bba132d263840ab58
2024-08-02 04:30:10 +00:00
Android Build Coastguard Worker
562609ae0c Snap for 12147630 from e35cb696ca to 24Q4-release
Change-Id: Iaeff9a3b4c3735f0efb55b3b29d35afd44cde585
2024-07-27 01:01:59 +00:00
Herbert Xue
e35cb696ca Add soong config variable for PowerAnomalySitril
Set the variable is true when USE_LASSEN_OEMHOOK is true and
BOARD_WITHOUT_RADIO is not true.

Flag: EXEMPT bugfix
Bug: 325857852
Test: m ConnectivityMonitor
Change-Id: I84e50ffeeec8aea8131cca07827324a2980ed9de
2024-07-26 02:57:15 +00:00
Android Build Coastguard Worker
6c047ba80d Snap for 12140224 from 2327a5c0f5 to 24Q4-release
Change-Id: If2404ef1487ad16649a41ae006e3e70150f081ad
2024-07-25 23:01:59 +00:00
Android Build Coastguard Worker
c232e47d2c Merge cherrypicks of ['googleplex-android-review.googlesource.com/28469516'] into 24Q4-release.
Change-Id: I51417d7b97a92a99f42b43b9ee3287d59acd2340
2024-07-25 00:33:37 +00:00
Daniel Chapin
faa7886bec Revert "trusty: storageproxy: add fs_ready_rw property context"
Revert submission 28318041-rw_storage

Reason for revert: Droidfood blocking bug b/355163562

Reverted changes: /q/submissionid:28318041-rw_storage
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:7bc5a6b183feca0de5970360a7c120e25fe11fa2)
Merged-In: I3846d284bb6810ed3adea0070ac663babf6bb966
Change-Id: I3846d284bb6810ed3adea0070ac663babf6bb966
2024-07-25 00:32:06 +00:00
Android Build Coastguard Worker
87f7337bbc Snap for 12135134 from f9d21e23c3 to 24Q4-release
Change-Id: I7f06f662413f88b2dccc78e7cffc64b5d88f27fb
2024-07-24 23:02:05 +00:00
Daniel Chapin
2327a5c0f5 Merge "Revert "trusty: storageproxy: add fs_ready_rw property context"" into main 2024-07-24 21:48:57 +00:00
Android Build Coastguard Worker
a354bc4f4e Merge cherrypicks of ['googleplex-android-review.googlesource.com/28469516'] into 24Q4-release.
Change-Id: Iee85dd20d2bc206dd3df8aa292763375a45e294a
2024-07-24 21:02:17 +00:00
Daniel Chapin
4943a19244 Revert "trusty: storageproxy: add fs_ready_rw property context"
Revert submission 28318041-rw_storage

Reason for revert: Droidfood blocking bug b/355163562

Reverted changes: /q/submissionid:28318041-rw_storage
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:7bc5a6b183feca0de5970360a7c120e25fe11fa2)
Merged-In: I3846d284bb6810ed3adea0070ac663babf6bb966
Change-Id: I3846d284bb6810ed3adea0070ac663babf6bb966
2024-07-24 21:01:00 +00:00
Daniel Chapin
7bc5a6b183 Revert "trusty: storageproxy: add fs_ready_rw property context"
Revert submission 28318041-rw_storage

Reason for revert: Droidfood blocking bug b/355163562

Reverted changes: /q/submissionid:28318041-rw_storage

Change-Id: I3846d284bb6810ed3adea0070ac663babf6bb966
2024-07-24 20:17:27 +00:00
Android Build Coastguard Worker
7966071149 Snap for 12129055 from f9d21e23c3 to 24Q4-release
Change-Id: I8eb21e9e469433e6c736451fe381a2ba7de2080b
2024-07-23 23:02:15 +00:00
Mike McTernan
f9d21e23c3 Merge "trusty: storageproxy: add fs_ready_rw property context" into main 2024-07-23 10:02:28 +00:00
Android Build Coastguard Worker
d7e2b4b0e8 Snap for 12122529 from 0de9277226 to 24Q4-release
Change-Id: If391e7096210aab28a791674fda7e4b54cfa42e9
2024-07-22 23:01:43 +00:00
Robert Luo
0de9277226 [Pixel RR] Apply reviewed default permissions
Pregrantting below permissions:
READ_CONTACTS
WRITE_CONTACTS
READ_CALL_LOG

Flag: EXEMPT add pregranted permission in b/337725984, b/337802920
Bug: 337725984, 337802920
Test: presubmit
Change-Id: I78d3ff915ce12a8f4a32c7f5b824a249e0971fe9
2024-07-22 02:51:42 +00:00
Android Build Coastguard Worker
94b8ba3155 Snap for 12110738 from 51cd585c3b to 24Q4-release
Change-Id: Id5f57daad5a932fbc76b95a6b07297a0352f0d92
2024-07-18 23:01:57 +00:00
Jerry Huang
51cd585c3b gs101: video: change to use c2 "default" AIDL service
Bug: 322920559
Change-Id: Ie9c22d21097bee190f05fa407f38ecd8ea918620
2024-07-18 07:08:49 +00:00
Android Build Coastguard Worker
e6ec837b44 Snap for 12091711 from eb11b78314 to 24Q4-release
Change-Id: I21fc64b97350032b2b43a122237c6c7051dd0546
2024-07-15 23:01:57 +00:00
Mike McTernan
63a927b837 trusty: storageproxy: add fs_ready_rw property context
Flag: EXEMPT bug fix
Bug: 350362101
Test: ABTD
Change-Id: I6876593d904ce7223b91f30d31edcd3e60fac82b
2024-07-15 10:32:27 +01:00
Android Build Coastguard Worker
fb9b403b1f Snap for 12078078 from 89bd4486e5 to 24Q4-release
Change-Id: I5da89a2ffc8339c749636cc6fe29acf81219491b
2024-07-11 23:02:02 +00:00
Jörg Wagner
89bd4486e5 Increase the max core index for protected TLS allocations to 4
Pixel removed unnecessary allocation padding, and we now pass
dEQP with a maximum physical core index setting of 4, which allows
the driver to utilize 4 GPU cores (1111b) in the extreme tests.

Bug: 221255664
Test: O6 atest CtsDeqpTestCases -- --module-arg 'CtsDeqpTestCases:include-filter:dEQP-VK.protected_memory.*'
Flag: EXEMPT bugfix
Change-Id: I9de8d05f9de50c034ef20690a53705fe208fb47f
2024-07-11 12:07:49 +00:00
Krzysztof Kosiński
8244f563e6 Delete PDX sockets for legacy VR services.
Remove irrelevant copy and paste content. None of the gs101
devices ever included these services and these sockets are
not doing anything.

Bug: 234559097
Test: presubmit
Flag: EXEMPT dead code removal
Change-Id: I6fdab1e2232f83c0286d5f33773aaa17f9da3f7a
2024-07-11 04:41:53 +00:00
Android Build Coastguard Worker
daa434ec24 Snap for 12072601 from b75e4b563c to 24Q4-release
Change-Id: I7c6159377e7ba79cfe5194161c2981d9be319f05
2024-07-11 01:02:24 +00:00
Roy Luo
b75e4b563c [automerger skipped] Use absolute path for udc device am: fd5ebe5436 am: a243c5e651 -s ours
am skip reason: Merged-In Iad74cae0d6ad6887d79d705dc8478f1b44532503 with SHA-1 2e1fd91321 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3165100

Change-Id: I303e3e12e90bb1336a4fda4e76fbedae1f15d06e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-10 20:12:58 +00:00
Roy Luo
a243c5e651 Use absolute path for udc device am: fd5ebe5436
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3165100

Change-Id: I44705d06e8e7c2b36171f76d86ebd5b0326b493e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-10 19:46:29 +00:00
Roy Luo
fd5ebe5436 Use absolute path for udc device
Avoid search in /sys/class/udc directory

Bug: 339241080
Test: tested on gs101
Flag: EXEMPT bugfix
Change-Id: Iad74cae0d6ad6887d79d705dc8478f1b44532503
Merged-In: Iad74cae0d6ad6887d79d705dc8478f1b44532503
2024-07-10 18:13:57 +00:00
Qais Yousef
2340e91ebd init.gs101.rc: Apply sched tuning to improve sched latencies
Bug: 340860065
Flag: NONE not supported for init.rc scripts
Signed-off-by: Qais Yousef <qyousef@google.com>
Change-Id: I87b17dce903762b2c498d3631bf9b7e02cc2ebfe
2024-07-10 11:51:20 +00:00
Android Build Coastguard Worker
8826f279e8 Snap for 12065372 from 7745a679a1 to 24Q4-release
Change-Id: Ibef78f07316b2bcf3082f53a316230f259af720e
2024-07-09 23:07:03 +00:00
Jeremy Kemp
7745a679a1 Add Mali OpenCL ICD to PRODUCT_PACKAGES
Bug: 324057328
Test: clpeak
Change-Id: I7b7de856d1bb090ace31d1938e69069e24e79d7f
2024-07-09 10:51:38 +00:00
Roy Luo
2e1fd91321 Use absolute path for udc device
Avoid search in /sys/class/udc directory

Bug: 339241080
Test: tested on gs101
Flag: EXEMPT bugfix
Change-Id: Iad74cae0d6ad6887d79d705dc8478f1b44532503
2024-07-09 03:03:33 +00:00
Android Build Coastguard Worker
c769fc463b Snap for 12058995 from 966663c7fa to 24Q4-release
Change-Id: Icbce5aea08c7cf6d6ec8abfa0a9a7748e93e6969
2024-07-08 23:07:14 +00:00
Aaron Tsai
eb11b78314 Add permission for setting gril property
05-22 17:52:28.190   936   936 I auditd  : type=1400 audit(0.0:784): avc:  denied  { write } for  comm="radioext@1.0-se" name="property_service" dev="tmpfs" ino=842 scontext=u:r:hal_radioext_default:s0 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0

Bug: 343012301
Bug: 203824024
Test: manual test
Flag: EXEMPT bugfix
Change-Id: I8048a67b59beac0d2ce8c7331eb0e1ea21881f9b
2024-07-05 08:05:03 +00:00
Mike McTernan
966663c7fa APC/TUI: remove support for APC
Flag: EXEMPT build file change
Bug: 351151445
Test: m && test on a device
Change-Id: I845133b2057dbc43487155a44b22a8c2dc9489bc
2024-07-04 14:55:12 +00:00
Android Build Coastguard Worker
90e7d94f94 Snap for 12048319 from 8c9a2875ab to 24Q4-release
Change-Id: I75185da7752ffb276df8859abb117a64c8e885ce
2024-07-03 23:02:14 +00:00
Wilson Sung
8c9a2875ab Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 350831964
Change-Id: Iec0a5b8418d95a83cc989681f8bc5b42e03b032f
2024-07-03 02:05:23 +00:00
Android Build Coastguard Worker
49ee0f5289 Snap for 12042346 from 56491f4c19 to 24Q4-release
Change-Id: Ied76aec2d151e32438385dceb3581baa493b4436
2024-07-02 23:02:46 +00:00
liangjlee
56491f4c19 gs101: Include power/power.mk am: 45531bd711
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/28051321

Change-Id: Idace0db3043c8720a448617ee47fe44b7cbf0b3f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-02 09:36:37 +00:00
Android Build Coastguard Worker
569ade8120 Merge cherrypicks of ['googleplex-android-review.googlesource.com/28051796'] into 24Q3-release.
Change-Id: I71a2d7f6fb99ea74765a6d628b73ef39d0ccc2d7
2024-06-28 23:16:30 +00:00
liangjlee
ebddc4ff3f gs101: Include power/power.mk
Bug: 331612600
Flag: EXEMPT (bug 337358613)
Signed-off-by: liangjlee <liangjlee@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:7b58898aee6694762f57077bac5626f7baa32a46)
Merged-In: Ibf7dda6c4c13d6513e2f08239c95c6b2778a98ec
Change-Id: Ibf7dda6c4c13d6513e2f08239c95c6b2778a98ec
2024-06-28 23:08:21 +00:00
Android Build Coastguard Worker
ee6432a535 Snap for 12025384 from 7b58898aee to 24Q4-release
Change-Id: I61559c8ca3db3e4cbeeefd072e37fcf7f6c01f9d
2024-06-27 23:02:13 +00:00
liangjlee
45531bd711 gs101: Include power/power.mk
Bug: 331612600
Flag: EXEMPT (bug 337358613)
Change-Id: Ibf7dda6c4c13d6513e2f08239c95c6b2778a98ec
Signed-off-by: liangjlee <liangjlee@google.com>
2024-06-27 02:27:19 +00:00
liangjlee
7b58898aee gs101: Include power/power.mk
Bug: 331612600
Flag: EXEMPT (bug 337358613)
Change-Id: Ibf7dda6c4c13d6513e2f08239c95c6b2778a98ec
Signed-off-by: liangjlee <liangjlee@google.com>
2024-06-27 02:11:20 +08:00
Android Build Coastguard Worker
8750921412 Snap for 12002618 from 60bd04557f to 24Q4-release
Change-Id: I4702008b95c997d4e9e2871e152d9c64c984cbe7
2024-06-22 01:02:07 +00:00
YiKai Peng
60bd04557f gs101: wlc: add authstart permission
Bug: 348272247
Test: Build/Flash
Flag: EXEMPT bugfix
Change-Id: I8bbdce42984aa8da6abd000c06d6a5df37447914
Signed-off-by: YiKai Peng <kenpeng@google.com>
2024-06-21 04:05:35 +00:00
Android Build Coastguard Worker
5032bd2615 Snap for 11996894 from cffa9776ed to 24Q4-release
Change-Id: I4bce3823a420c7b56760d3a153d4bac98a7621d1
2024-06-20 23:02:15 +00:00
Android Build Coastguard Worker
baef40088a Snap for 11996894 from 7d1765c2de to 24Q4-release
Change-Id: I35ee63a4204f546cafa5920aa060d7122fbb95a2
2024-06-20 23:02:12 +00:00
Xin Li
7d1765c2de [automerger skipped] Merge 24Q3 (ab/11976889) to aosp-main-future am: dbe46101b1 -s ours
am skip reason: Merged-In I91df897d8ae7d8e4b1b49a7eb20f6bb5fe99755c with SHA-1 855cd95dce is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/27908657

Change-Id: If3b6af5094732d33963d309308b9cca1fb0219c6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-20 20:50:49 +00:00
Xin Li
cffa9776ed [automerger skipped] Merge 24Q3 (ab/11976889) to aosp-main-future am: 3ba09f172c -s ours
am skip reason: Merged-In Ib3cc0c6ad576e7cda26b7f50cdc61d52e6349c78 with SHA-1 c5a560160f is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/27908795

Change-Id: Ia4b9c789e96f06362aacf03e89be909505202726
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-20 20:40:33 +00:00
Android Build Coastguard Worker
fe393256d6 Snap for 11987757 from 05cfd7ea64 to 24Q4-release
Change-Id: I56c5bb71653737a43b2f1e9ae887d5e9176a7bef
2024-06-18 23:02:13 +00:00
Android Build Coastguard Worker
a5bffc3ff2 Snap for 11987757 from cbaea45774 to 24Q4-release
Change-Id: I4568186225e70412f972623d6240711185613233
2024-06-18 23:02:11 +00:00
Xin Li
dbe46101b1 Merge 24Q3 (ab/11976889) to aosp-main-future
Bug: 347831320
Merged-In: I91df897d8ae7d8e4b1b49a7eb20f6bb5fe99755c
Change-Id: I9aa8156caaf003c43c790005b15e7af65ff1c2f0
2024-06-18 14:13:22 -07:00
Xin Li
3ba09f172c Merge 24Q3 (ab/11976889) to aosp-main-future
Bug: 347831320
Merged-In: Ib3cc0c6ad576e7cda26b7f50cdc61d52e6349c78
Change-Id: I6612e8dbeb7b3f60a24a85ec5af0aacca5e87ecb
2024-06-18 14:13:22 -07:00
Xin Li
cbaea45774 [automerger skipped] Merge Android 14 QPR3 to AOSP main am: 635f54a299 -s ours am: 2166217662 -s ours
am skip reason: Merged-In I7ceeb6d178b83f9029bcc4fd3e28fc33c8ce56e9 with SHA-1 34a69be411 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3131479

Change-Id: I398e0d76ed7a784a7458b97cf7506efab0ce815b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-18 05:56:11 +00:00
Xin Li
05cfd7ea64 [automerger skipped] Merge Android 14 QPR3 to AOSP main am: 9149c5888b -s ours am: bcf8958ac5 -s ours
am skip reason: Merged-In I3d2570e6841c7c384a36b8bf2bcb8d4c9b3a9f49 with SHA-1 9948aa54c7 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/3131495

Change-Id: If186c7eab7a682c68afddfc555509680ced5175b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-18 05:55:54 +00:00
Android Build Coastguard Worker
f820edab1d Snap for 11981331 from c5a560160f to 24Q4-release
Change-Id: I7c24526092f04ee6d987d7eb4568aad4cae2a223
2024-06-17 23:01:49 +00:00
Xin Li
2166217662 [automerger skipped] Merge Android 14 QPR3 to AOSP main am: 635f54a299 -s ours
am skip reason: Merged-In I7ceeb6d178b83f9029bcc4fd3e28fc33c8ce56e9 with SHA-1 34a69be411 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3131479

Change-Id: I22bbf011da9a5f968a99b4dc87665d92d9c5f627
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-17 20:42:14 +00:00
Xin Li
bcf8958ac5 [automerger skipped] Merge Android 14 QPR3 to AOSP main am: 9149c5888b -s ours
am skip reason: Merged-In I3d2570e6841c7c384a36b8bf2bcb8d4c9b3a9f49 with SHA-1 9948aa54c7 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/3131495

Change-Id: I759842dfd756a95bf95741c452e5f6f7fcd3a31d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-17 20:41:32 +00:00
Android Build Coastguard Worker
f6fed95fe1 Snap for 11973804 from c5a560160f to 24Q3-release
Change-Id: Ibb3db4c1bf7c9dc3829ea2e720d6cb89b8485742
2024-06-15 01:02:07 +00:00
Xin Li
9149c5888b Merge Android 14 QPR3 to AOSP main
Bug: 346855327
Merged-In: I3d2570e6841c7c384a36b8bf2bcb8d4c9b3a9f49
Change-Id: I0852627e915ecf0d0867b85c406c9d10a3d50de8
2024-06-13 10:48:23 -07:00
Xin Li
635f54a299 Merge Android 14 QPR3 to AOSP main
Bug: 346855327
Merged-In: I7ceeb6d178b83f9029bcc4fd3e28fc33c8ce56e9
Change-Id: I3b7e1df15b00c4aa916b5bbc3497022a01f44371
2024-06-13 10:48:23 -07:00
Kyle Tso
c5a560160f usb: Log for retry on role switch
Add a log for the retry. Also define the sleep time in the header file.

Bug: 341996696
Change-Id: Ib3cc0c6ad576e7cda26b7f50cdc61d52e6349c78
Signed-off-by: Kyle Tso <kyletso@google.com>
(cherry picked from commit d17fdff5f81cff76adaa75d50f26318be8048123)
2024-06-13 17:12:20 +08:00
Kyle Tso
744c86c49a usb: Add retry on role switch
Bug: 341996696
Change-Id: I8caa65288af1588d24fea4aa6c5768d45d69bbd5
Signed-off-by: Kyle Tso <kyletso@google.com>
(cherry picked from commit ef5856a4474002cc35a51377adffddd4cb239796)
2024-06-13 17:12:10 +08:00
Android Build Coastguard Worker
73db47fe6f Snap for 11959661 from 9634ba0f84 to 24Q3-release
Change-Id: If78318836807cbd1b0fa0f59acd55371a8a6628f
2024-06-12 23:02:24 +00:00
Keir Fraser
9634ba0f84 Enable pkvm based on the relevant sysprop rather than /dev/kvm am: 4ff69cacdf am: 34a69be411
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3128013

Change-Id: Ic587fc28c22bbe105ba3f6118f0b45a128f3335c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-12 14:57:08 +00:00
Keir Fraser
34a69be411 Enable pkvm based on the relevant sysprop rather than /dev/kvm am: 4ff69cacdf
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3128013

Change-Id: I7ceeb6d178b83f9029bcc4fd3e28fc33c8ce56e9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-12 14:35:20 +00:00
Keir Fraser
4ff69cacdf Enable pkvm based on the relevant sysprop rather than /dev/kvm
1. This is simpler, as it can be triggered by logic in the init.rc
2. The old method of probing /dev/kvm fails if non-protected kvm
   is enabled: the device will exist, but pkvm is not enable

Bug: 346525496
Test: observe that pkvm is enabled after double reboot
Change-Id: I2f557ed56f13458a288ede34e672692b511b6bc9
2024-06-12 12:18:48 +00:00
chenkris
6f6ad28270 gs101: build fingerprint dump
Bug: 346450599
Test: adb bugreport
Change-Id: I5a3d508592e9fed10e429d57c6c7068e0ce0d918
2024-06-12 04:39:27 +00:00
Leo Chen
4a42718d8a Update IDisplay to V12
Test: trigger test build
Bug: 309897479
Change-Id: I338c9d05cd7b202e015288c4bd8e136d30304161
Signed-off-by: Leo Chen <yinchiuan@google.com>
2024-06-12 03:20:53 +00:00
Android Build Coastguard Worker
8f52369dc6 Snap for 11944020 from 0e0a8e2d91 to 24Q3-release
Change-Id: I344eab855ba38c48f5676d1b6ac078838f047c1e
2024-06-08 01:02:28 +00:00
Android Build Coastguard Worker
e23784c5e2 Snap for 11938003 from cd0c17add9 to 24Q3-release
Change-Id: I93deac7587b6ffed8213c518f3a230f209d377d6
2024-06-06 23:02:11 +00:00
Xin Li
0e0a8e2d91 [automerger skipped] Merge 2024-06 Release (ab/AP2A.240605.024) to aosp-main-future am: 06e6e7e375 -s ours
am skip reason: Merged-In I57ff2ec2758f965a9e13e53f223c735a9d102219 with SHA-1 b58ea3f845 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/27555545

Change-Id: I5001f1aaa1ba082a6fe112089d52040fd084cfd0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-06 21:36:34 +00:00
Xin Li
06e6e7e375 Merge 2024-06 Release (ab/AP2A.240605.024) to aosp-main-future
Bug: 343100748
Merged-In: I57ff2ec2758f965a9e13e53f223c735a9d102219
Change-Id: If2bbd89a993ed54f61a726910c891eb7506ff1fc
2024-06-06 20:51:05 +00:00
Utku Utkan
cd0c17add9 Remove ACCESS_FINE_LOCATION permission pregrant for PCS on G1
FLAG: EXEMPT Cleanup of obsolete permission pregrant

Bug: 345021501
Test: m && flashall
Change-Id: I8090d8a87605d2a60d57e14212e07625213a4088
2024-06-06 17:36:57 +00:00
Dennis Shen
1b51d6b798 switch over to use new storage read api instead of
server_configurable_flags, this new read api lib will be needed for new
codegened aconfig flag lib.

Bug: 321077378
Test m and avd

Change-Id: Ieab46eb2561f910be2bf016fe4c63062a4e31a66
2024-06-06 13:47:09 +00:00
Jim Tang
3af7f6c818 Make SUPPORT_MULTI_SIM recognizable in bp am: f34142e084 am: c9504aa1a6
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3115519

Change-Id: Ice689a458558bf1cfc8dbdbf4d76101d76d26a0e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-06 08:35:35 +00:00
Jim Tang
c9504aa1a6 Make SUPPORT_MULTI_SIM recognizable in bp am: f34142e084
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3115519

Change-Id: Ie9a88d4f5265538e22b72382d042ecfe603f12ea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-06 08:16:02 +00:00
Jim Tang
f34142e084 Make SUPPORT_MULTI_SIM recognizable in bp
This commit establishes a soong config variable `sim_count` for
easier converting Android.mk to Android.bp when dealing with multiple
SIMs.

Bug: 343823190
Test: presubmit
Change-Id: I8226003df3d9f669df6e2af12310ad73e5786a74
2024-06-06 14:58:28 +08:00
Android Build Coastguard Worker
f726c784dd Snap for 11915075 from 78d96c7781 to 24Q4-release
Change-Id: I8ff74ee0f8caf68c6f330c849108c44f78013f43
2024-06-01 01:02:07 +00:00
Android Build Coastguard Worker
7e29ca9957 Snap for 11915075 from 7c4a5e4019 to 24Q4-release
Change-Id: I7775b5c889ea9f2f5188fb3e41bbaa4dcf83b2f5
2024-06-01 01:02:06 +00:00
Android Build Coastguard Worker
177403b796 Snap for 11908474 from 78d96c7781 to 24Q3-release
Change-Id: If1eaba29c51d970ecdad5a1fa66b818955f900e0
2024-05-30 23:02:17 +00:00
Android Build Coastguard Worker
88a85b79d2 Snap for 11908474 from 7c4a5e4019 to 24Q3-release
Change-Id: I6dcbf19173c27e2596b4f81b1d904ae734255bcc
2024-05-30 23:02:17 +00:00
jiangzining
7c4a5e4019 [Scone] add BLUETOOTH_CONNECT to SCONE default permission
MBA Approval: b/330640278
Bug: b/343608940
Test: Build and Flash

Change-Id: Iab018eadac023f19297ee25e475374e4c7a691ae
2024-05-30 08:58:50 +00:00
Cyan_Hsieh
8c43f0fe06 Switch makefile owners to MK_OWNERS am: 973d618f32 am: 5d52e4511a
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3107248

Change-Id: I2200072a8c2275ea91837b11663e8b90fd6c3d18
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-29 22:00:00 +00:00
Xin Li
b00e47f8ce [automerger skipped] Merge Android 24Q2 Release (ab/11526283) to aosp-main-future am: df949b6d9a -s ours
am skip reason: Merged-In I4ef71192ad2b2717c515164bd65463759320b32a with SHA-1 49ae2f663b is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/27273975

Change-Id: If12a3518bf093a7d3356fec7cb394ac6c6743d82
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-29 21:49:09 +00:00
Xin Li
78d96c7781 [automerger skipped] Merge Android 24Q2 Release (ab/11526283) to aosp-main-future am: 9948aa54c7 -s ours
am skip reason: Merged-In I237450825ef2aaf4681265aede03091ca2d76484 with SHA-1 f0447fb52d is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/27273898

Change-Id: I71377a83c2fd2b4b303b2f5d8dabd87547dfa25b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-29 19:45:33 +00:00
Xin Li
17d962a98d [automerger skipped] Merge Android 24Q2 Release (ab/11526283) to aosp-main-future am: df949b6d9a -s ours
am skip reason: Merged-In I4ef71192ad2b2717c515164bd65463759320b32a with SHA-1 49ae2f663b is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/27273975

Change-Id: I2e2417ae6907646fa74fb4bb57bb70052b4090c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-29 19:45:03 +00:00
Cyan_Hsieh
5d52e4511a Switch makefile owners to MK_OWNERS am: 973d618f32
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3107248

Change-Id: Ib07243ecf056f8a9f525933d0fa7f3a13eb9a0a3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-29 14:29:14 +00:00
Cyan_Hsieh
973d618f32 Switch makefile owners to MK_OWNERS
Bug: 278167548
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:767a506f07f82fb922c887f14b850d1cb5292227)
Merged-In: Iffb4e4aaaf25a11b9ef31fdb9f3838da709e1723
Change-Id: Iffb4e4aaaf25a11b9ef31fdb9f3838da709e1723
2024-05-29 10:00:15 +00:00
Android Build Coastguard Worker
0c7333d167 Snap for 11859356 from af6893a4db to 24Q3-release
Change-Id: I45fcfbca85e1b78e8223cc1a07878eef45193c75
2024-05-18 03:02:07 +00:00
Sungtak Lee
af6893a4db Remove codec2 hidl fragments
Bug: 321808716
Change-Id: Iede3f50ec54bb55634f8e58bc2b87388f2692ad5
2024-05-17 06:25:24 +00:00
Android Build Coastguard Worker
de07e36f0c Snap for 11853201 from 3915f2dcb0 to 24Q3-release
Change-Id: I93c261354e3c8d766680764c2fb94d4d21fbb8cb
2024-05-17 01:01:59 +00:00
Jerry Huang
3915f2dcb0 gs101: update performance point based on AP3A.240513.001
Bug: 335350051
Test: CtsMediaDecoderTestCases android.media.decoder.cts.VideoDecoderPerfTest
Change-Id: I8a89fceebac637e4ddb1a09cf55d99746e480e75
2024-05-16 06:34:37 +00:00
Android Build Coastguard Worker
94a4f93243 Snap for 11847214 from 855cd95dce to 24Q3-release
Change-Id: I7b4981ec376d8f2af4b81038e3998bd5dec5d4b4
2024-05-16 01:02:38 +00:00
Wilson Sung
855cd95dce Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 340723222
Bug: 340723303
Bug: 340723030
Test: scanBugreport
Bug: 340723303
Bug: 340722537
Bug: 340723222
Bug: 340722772
Test: scanAvcDeniedLogRightAfterReboot
Bug: 340723303
Bug: 340723030
Bug: 340723222
Change-Id: I91df897d8ae7d8e4b1b49a7eb20f6bb5fe99755c
2024-05-15 03:50:37 +00:00
Android Build Coastguard Worker
66f4fad9d4 Snap for 11840485 from 64a2022282 to 24Q3-release
Change-Id: I4b474cf24feee906c79eb2b7e44b88908950f1bb
2024-05-14 23:02:22 +00:00
Jörg Wagner
64a2022282 Use 2024-03-01 deqp levels for GLES and Vulkan
Bug: 327589279
Change-Id: Ia9691ab42c7435bc2c4d5fb56bce9665f365cbd3
2024-05-14 08:55:03 +00:00
Edgar Arriaga
046e5428f6 Set default pin amount for home app
Bug: 288900050
Test: dumpsys pinner
Flag: EXEMPT refactor

Change-Id: I8dfad41210df945751761586809dd0d17cf3dae8
2024-05-13 23:05:13 +00:00
Android Build Coastguard Worker
1cd902cd18 Snap for 11816316 from b4c75c1767 to 24Q3-release
Change-Id: I72476ea7e62c8237b594419c4e2452366b17ef21
2024-05-08 23:02:19 +00:00
Android Build Coastguard Worker
3c191c6d9c Snap for 11816316 from 98343e432d to 24Q3-release
Change-Id: I06eb789b4591685916ea4c617e6835d17b3a6d62
2024-05-08 23:02:18 +00:00
KRIS CHEN
b4c75c1767 Merge "Allow fingerprint to access the folder /data/vendor/fingerprint" into main 2024-05-08 08:46:30 +00:00
Leo Chen
98343e432d Update IDisplay to V11-V12
V12 is not frozen yet. We should still allow V11 for `next` build.

Test: trigger test build
Bug: 309897479
Bug: 303162192
Change-Id: Ie8604d00c747bf075604f3ad55c24a13c8bfe699
Signed-off-by: Leo Chen <yinchiuan@google.com>
2024-05-08 08:46:17 +00:00
chenkris
44f0166eb6 Allow fingerprint to access the folder /data/vendor/fingerprint
Fix the following avc denial:
android.hardwar: type=1400 audit(0.0:20): avc:  denied  { write } for  name="fingerprint" dev="dm-56" ino=36703 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:vendor_data_file:s0 tclass=dir permissive=0

Bug: 267766859
Test: Tested fingerprint under enforcing mode
Change-Id: Id3f00d526dbe044f60aad2198fa65fbe3b6b2c60
2024-05-08 06:48:55 +00:00
Android Build Coastguard Worker
fde4660d3b Snap for 11811809 from c5b3375835 to 24Q3-release
Change-Id: Iadc0d6bb49c789f918a00aa42e42d696cefa3f6f
2024-05-07 23:02:38 +00:00
Betty Zhou
c5b3375835 Enable KUnit testing on raviole userdebug & eng build target.
Add kunit.enable=1 to boot command line

Bug: 337797668
Flag: TEST_ONLY
Change-Id: I3334316c6b41e0cd1a4dd5fded32f9c3c302ee9a
2024-05-06 21:38:46 +00:00
Xin Li
9948aa54c7 Merge Android 24Q2 Release (ab/11526283) to aosp-main-future
Bug: 337098550
Merged-In: I237450825ef2aaf4681265aede03091ca2d76484
Change-Id: I3d2570e6841c7c384a36b8bf2bcb8d4c9b3a9f49
2024-05-06 12:17:52 -07:00
Xin Li
df949b6d9a Merge Android 24Q2 Release (ab/11526283) to aosp-main-future
Bug: 337098550
Merged-In: I4ef71192ad2b2717c515164bd65463759320b32a
Change-Id: I92c47a5388ba62c9f9395553dbb65acb07ad525b
2024-05-06 12:09:15 -07:00
Android Build Coastguard Worker
964d9b76d1 Snap for 11800966 from e097460376 to 24Q3-release
Change-Id: Id6e37bc21cd854dfcb749e6d4caaf6a6309e30a3
2024-05-04 01:02:28 +00:00
Spade Lee
e097460376 pixelstats: gs101: add all logbuffer paths am: a4f232b4a6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/27102528

Change-Id: Ib1063fef7e2a55d302bf67f7b79a341284ec393c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-03 05:24:16 +00:00
Android Build Coastguard Worker
46e00ea2b7 Snap for 11778614 from cc53a465df to 24Q3-release
Change-Id: I3562373b49292a44f08c9b7f444abbadc647a7ae
2024-04-29 23:02:15 +00:00
Treehugger Robot
cc53a465df Merge "Update USES_LASSEN_MODEM soong config settings for aosp projects." into main am: 1ba83c9b09 am: 700ae2e395
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3039355

Change-Id: I8c500c975ae717f1b4ecd4493da112f3f82a6f17
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-29 09:59:33 +00:00
Treehugger Robot
700ae2e395 Merge "Update USES_LASSEN_MODEM soong config settings for aosp projects." into main am: 1ba83c9b09
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3039355

Change-Id: I178ea3046b402852ebb893110e7304f4a6f5dbf5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-29 09:42:17 +00:00
Treehugger Robot
1ba83c9b09 Merge "Update USES_LASSEN_MODEM soong config settings for aosp projects." into main 2024-04-29 09:25:56 +00:00
Herbert Xue
2c4ada3a40 Update USES_LASSEN_MODEM soong config settings for aosp projects.
Add the flag "use_lassen_modem" for bp to do the same checking like
"USES_LASSEN_MODEM" in mk.

Bug: 330654744
Test: 1. lunch aosp_cheetah-trunk_staging-userdebug
      2. m RilConfigService
Change-Id: Ic277823f330794f6ceff6d3ccc6a96bb75e82b94
2024-04-29 16:24:53 +08:00
Qian-Hao Huang
32035fef2f gs101: Change the path of prebuilt fips140.ko
Placing the fips140.ko at the same level as other kernel modules makes
it easier for automation tools to handle all of them.

Bug: 331791671
Change-Id: I444a6b089f7a2a3fee097f8d7718e88eddd1b15a
Signed-off-by: Qian-Hao Huang <qhhuang@google.com>
2024-04-29 06:49:00 +00:00
Spade Lee
a4f232b4a6 pixelstats: gs101: add all logbuffer paths
Bug: 335934710
Change-Id: I573317a5da547eef4cbec22822d37bfb06f910d0
Signed-off-by: Spade Lee <spadelee@google.com>
2024-04-29 01:42:03 +00:00
Android Build Coastguard Worker
41f6357b9b Snap for 11772614 from db1807eb1e to 24Q3-release
Change-Id: I2666f310f84954da2f3644c1fe131440f936ee54
2024-04-27 01:02:13 +00:00
Android Build Coastguard Worker
c26dfeaac9 Snap for 11772614 from 459d8d8f53 to 24Q3-release
Change-Id: I8d339f814b54c6bb4c189cb20272952662ed72c0
2024-04-27 01:02:12 +00:00
Enzo Liao
459d8d8f53 [automerger skipped] Apply common SELinux policies related to ramdumps and coredumps to gs101. am: ae8801f2a9 -s ours
am skip reason: Merged-In Ic465edc3914f2815b3696f7b1c7e3475bcbc2acc with SHA-1 98d7af4bf7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/27046719

Change-Id: I99821186dfa325e8eed332dc6ae26e2cf6bd7e03
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-26 08:08:35 +00:00
Enzo Liao
db1807eb1e [automerger skipped] Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common. am: 9df205d57f -s ours
am skip reason: Merged-In I568f43ab8ed8f5ab330cbda19cd68bcc12838fdf with SHA-1 b0daa90c01 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/27046800

Change-Id: I5160dde7d03a1fa534106dc07eabc90acdb28d1d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-26 08:08:34 +00:00
Enzo Liao
ae8801f2a9 Apply common SELinux policies related to ramdumps and coredumps to gs101.
Refer: ag/26620507

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:98d7af4bf7db86523f85c05f4b5d4bc8dc6dc6a0)
Merged-In: Ic465edc3914f2815b3696f7b1c7e3475bcbc2acc
Change-Id: Ic465edc3914f2815b3696f7b1c7e3475bcbc2acc
2024-04-26 07:54:29 +00:00
Thomas Girardier
e20c4f7f8d Revert "[Bluetooth] Disable BT auto on feature"
Revert submission 26919210-BTAUTOOFF4389

Reason for revert: Auto On has been approved for 24Q3

Reverted changes: /q/submissionid:26919210-BTAUTOOFF4389

Change-Id: I7e817f7003ba96486791b87a6934dfd845244d17
2024-04-26 04:02:50 +00:00
Wei Li
81ed133edd Move license metadata declarations to meta-lic.mk and remove the Android.mk file. am: e5243fba2a am: ce4de70f5f
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3062822

Change-Id: I94db69f3b78965bf24ed3ef881a8476545500d00
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-26 02:27:28 +00:00
Enzo Liao
9df205d57f Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common.
New paths (ag/26620507):
  RamdumpService: device/google/gs-common/ramdump_app
  SSRestartDetector: device/google/gs-common/ssr_detector_app

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:b0daa90c01a3f377715524c91392fe80c9aa5800)
Merged-In: I568f43ab8ed8f5ab330cbda19cd68bcc12838fdf
Change-Id: I568f43ab8ed8f5ab330cbda19cd68bcc12838fdf
2024-04-26 02:15:43 +00:00
Wei Li
ce4de70f5f Move license metadata declarations to meta-lic.mk and remove the Android.mk file. am: e5243fba2a
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3062822

Change-Id: I854fdbeb868e9c99d03003d842bb19c074dc0e96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-26 01:57:24 +00:00
Seungah Lim
6bcddfc24f [automerger skipped] [packetrouter] Add oem-iptables-init.sh to artifact path allowed list am: 1463ce2e3b -s ours
am skip reason: Merged-In If1b57f985284561f537c1124cd60fe91215f5adc with SHA-1 fbf009b886 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/27053151

Change-Id: I872c6b7826f3d91d8860b0a87fba478151e0ee19
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-26 00:44:49 +00:00
Seungah Lim
1463ce2e3b [packetrouter] Add oem-iptables-init.sh to artifact path allowed list
In order to apply user-defined chain from vendor by using
oem-iptables-init.ch, shell script path is added to
PRODUCT_ARTIFACT_PATH_REQUIREMENT_ALLOWED_LIST.

Bug: 312772796

Signed-off-by: Seungah Lim <sss.lim@samsung.com>
(cherry picked from https://partner-android-review.googlesource.com/q/commit:83a119d7b7102319f7cb5d5015c8f01963ee7cf7)
Merged-In: If1b57f985284561f537c1124cd60fe91215f5adc
Change-Id: If1b57f985284561f537c1124cd60fe91215f5adc
(cherry picked from commit fbf009b886)
2024-04-26 00:31:44 +00:00
Android Build Coastguard Worker
8f969efea7 Snap for 11766482 from aa51b497d6 to 24Q3-release
Change-Id: Idf199f1a1dd0753f77fbf06da4b6b30e65c25932
2024-04-25 23:02:19 +00:00
Android Build Coastguard Worker
df525da9d1 Snap for 11766482 from 7a3af7e3ff to 24Q3-release
Change-Id: Ie902c04c4a184cdd2581b27d4742708be1217f04
2024-04-25 23:02:18 +00:00
Wei Li
e5243fba2a Move license metadata declarations to meta-lic.mk and remove the Android.mk file.
Bug: 310058310
Test: CIs
Change-Id: I7036be4fff910b39cc2aeba4597a6583b29505d3
2024-04-25 11:58:25 -07:00
Spade Lee
7a3af7e3ff [automerger skipped] pixelstats: gs101: add history validation path am: e4c7fd25a5 -s ours
am skip reason: Merged-In I1982b772e59df66d143899086450c1e5a807f85a with SHA-1 d1dd07e04d is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/27095855

Change-Id: Ic0d2b24411dc0d43956828e40ee0ba95d5d9925c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-25 08:20:34 +00:00
Chungro Lee
ef6479b8b5 [automerger skipped] pixelstats: move learning/model load path to sysfs am: 395c89ec05 -s ours
am skip reason: Merged-In I91039ce3a8ee4630a76113ef7ae6be3bc6908f64 with SHA-1 e0d7a24937 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/27090181

Change-Id: Id125be25c5e3ca369582910804cdcb4d3b8c47ed
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-25 08:20:29 +00:00
Spade Lee
aa51b497d6 [automerger skipped] pixelstats_vendor: add logbuffer_device r_file_perms am: 2034e36abb -s ours
am skip reason: Merged-In I2c6069f43d17114f937657724dc34e43cf3d48fe with SHA-1 66d3a4ef4e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/27096075

Change-Id: I76023c2f8df9b07f8cad4bf3e3d83f0eef04fa2b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-25 08:20:28 +00:00
Spade Lee
2034e36abb pixelstats_vendor: add logbuffer_device r_file_perms
avc: denied { read } for name="logbuffer_maxfg_monitor" dev="tmpfs" ino=1034 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=0

Bug: 329174074
Test: no denied log, and able to read logbuffer in pixelstats_vendor
Signed-off-by: Spade Lee <spadelee@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:66d3a4ef4e33553862de92119cd2345b777df1f6)
Merged-In: I2c6069f43d17114f937657724dc34e43cf3d48fe
Change-Id: I2c6069f43d17114f937657724dc34e43cf3d48fe
2024-04-25 06:10:20 +00:00
Spade Lee
e4c7fd25a5 pixelstats: gs101: add history validation path
Bug: 329174074
Signed-off-by: Spade Lee <spadelee@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:d1dd07e04daf761735c95c4a2e14c108bf1dbcf1)
Merged-In: I1982b772e59df66d143899086450c1e5a807f85a
Change-Id: I1982b772e59df66d143899086450c1e5a807f85a
2024-04-25 06:10:13 +00:00
Chungro Lee
395c89ec05 pixelstats: move learning/model load path to sysfs
Reporting learning(relaxation) and model loading once a day
 * learning and model loading path moved from uevent to
   sysfs collector.

Bug: 329124192
Signed-off-by: Chungro Lee <chungro@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:e0d7a249370a93828b128cbffbab7ca9237cad90)
Merged-In: I91039ce3a8ee4630a76113ef7ae6be3bc6908f64
Change-Id: I91039ce3a8ee4630a76113ef7ae6be3bc6908f64
2024-04-25 06:10:04 +00:00
SaiChand Duppala
8796579a5f Disable dumpstate strict-run flag in gs101
The change disables the dumpstate strict-run flag in gs101 devices, which is enabled by default. Disabling this flag increases the timeout for capturing incident report to 120 seconds, from the default 20 seconds. This is done because 20s isn't enough to capture incident report proto in some cases, especially when device is throttling.

Bug: 330400782

Test: Booted a gs101 device with the change. Then manually thermal throttled the device and captured bugreports. In some tests Incident report took a lot more more than 20s, and in all these cases it was succesfully captured.
Change-Id: I8c4ee4e4412c517822776a9b10bbdad7da1c1213
2024-04-25 01:11:50 +00:00
Wilson Sung
6746f8920e [automerger skipped] Update SELinux error am: 5e8b518a77 am: 371efbbd49 -s ours
am skip reason: Merged-In I5ef59058c7c7487a8a9cb238767e019631c5ac63 with SHA-1 89224de0eb is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/3059165

Change-Id: Ic9d6954a344d41aa4fd9bed0ba6cef6304b91d1f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-24 22:46:14 +00:00
Wilson Sung
371efbbd49 Update SELinux error am: 5e8b518a77
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/3059165

Change-Id: I9e3fee37647dd0ee706e85ea35d96f68ae2fe1ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-24 22:16:34 +00:00
Wilson Sung
5e8b518a77 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 329380904
Merged-In: I5ef59058c7c7487a8a9cb238767e019631c5ac63
Change-Id: I5ef59058c7c7487a8a9cb238767e019631c5ac63
2024-04-24 13:37:22 -07:00
Android Build Coastguard Worker
ac364614f8 Snap for 11753769 from 1dfdc56738 to 24Q3-release
Change-Id: I69791bacc09ad01885ab9c8102c0b51f67165cd1
2024-04-23 23:02:40 +00:00
Sungtak Lee
1dfdc56738 Reapply "Enable AIDL media.c2"
This reverts commit c8575dabaa.

Bug: 321808716
Test: adb shell dumpsys android.hardware.media.c2.IComponentStore/default
Test: adb shell dumpsys android.hardware.media.c2.IComponentStore/default1
Change-Id: I9c7cc5e03fe35af1a69f114b84be97087b3ce602
2024-04-23 08:37:07 +00:00
Android Build Coastguard Worker
4b262f64da Snap for 11740859 from 46c7063452 to 24Q3-release
Change-Id: I0baace971e9dbdee829d318f114308f76d84a968
2024-04-20 01:02:08 +00:00
Android Build Coastguard Worker
f8600fff20 Snap for 11740859 from c8575dabaa to 24Q3-release
Change-Id: Ieacfcb34de975fa8bd01ab2b83d37342200a23d7
2024-04-20 01:02:08 +00:00
Pablo Gamito
46c7063452 Revert "Remove donotaudit line for b/277155042" am: 6750917d2b am: d7cda09653
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/3048618

Change-Id: I41348026047641edee9d894d4d665bc23b13dbea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-19 21:33:13 +00:00
Pablo Gamito
d7cda09653 Revert "Remove donotaudit line for b/277155042" am: 6750917d2b
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/3048618

Change-Id: I8181ceda2a88a9f943cf1374e9fad8f1839f9eab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-19 21:13:55 +00:00
Priyanka Advani
c8575dabaa Revert "Enable AIDL media.c2"
Revert submission 26384060-c2aidl-pixel-enable

Reason for revert: Culprit for b/335892284. Will be verifying through ABTD for confirmation and before submitting the revert.

Reverted changes: /q/submissionid:26384060-c2aidl-pixel-enable

Change-Id: I2f3473c028953db80791f8c2d4ff274379333fcd
2024-04-19 20:44:22 +00:00
Wonsik Kim
44d7a91524 Enable AIDL media.c2
Bug: 321808716
Test: adb shell dumpsys android.hardware.media.c2.IComponentStore/default
Test: adb shell dumpsys android.hardware.media.c2.IComponentStore/default1
Change-Id: I1285da3e7a81570effa822d17e34d07737c91a72
2024-04-19 19:09:49 +00:00
Pablo Gamito
6750917d2b Revert "Remove donotaudit line for b/277155042"
This reverts commit f1baab0530.

Fixes: 331693615
Reason for revert: b/331693615

Change-Id: I32d6dc1e1b89b430d34da6909590367defd0af9d
2024-04-19 10:48:29 +00:00
Android Build Coastguard Worker
79bbe33fe9 Snap for 11733120 from 53a6e73e3d to 24Q3-release
Change-Id: I0c0b1176387a10701b41984d433eb40e69fc0e1e
2024-04-18 23:02:01 +00:00
Android Build Coastguard Worker
178050195f Snap for 11728787 from a8926c3bac to 24Q3-release
Change-Id: I7a29973c72a06f6a92b4b1bbb51026e3a62fee59
2024-04-17 23:03:33 +00:00
Shashwat Razdan
53a6e73e3d Revert "Adding android.software.contextualsearch to gs-101 devices."
Revert submission 26467635-feature_cs

Reason for revert: b/329350496 - Introducing new config with `android.*` namespace is not allowed in 24Q2.

Reverted changes: /q/submissionid:26467635-feature_cs

Change-Id: Iafa5ea79e03f2406246b8cb9478600998f93a64f
2024-04-17 22:44:00 +00:00
Hongyang Jiao
a8926c3bac Add betterbug.mk to gs101 am: 7b56585224
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/26986836

Change-Id: I3407413b3a0345a6f2fa5e46e8ba01ea36cbffe9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-17 18:10:56 +00:00
Daniel Chapin
f8d7cf3e95 Revert "Add betterbug mk to gs101" am: 439d541d18
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/26630856

Change-Id: I84a7107d1410039c8318292b51ad9526f2d8a7c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-17 18:08:41 +00:00
Hongyang Jiao
7b56585224 Add betterbug.mk to gs101
Test: manual test
Bug: 322543833
Change-Id: Iccf4ceabd1c994b804de9e74b50fa8a0ca936af6
2024-04-16 22:57:07 +00:00
Daniel Chapin
439d541d18 Revert "Add betterbug mk to gs101"
Revert submission 26348985-bb-sepolicy-poc

Reason for revert: Droidfood blocking bug: b/327991669

Bug: 327991669

Reverted changes: /q/submissionid:26348985-bb-sepolicy-poc
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:a43fedce4ef60251336a86c470250b2dfb8c9f3e)
Merged-In: I88a445da895c373c0a53c8a2f08726582c27be77
Change-Id: I88a445da895c373c0a53c8a2f08726582c27be77
24D1-dev is based on 24Q2-release. Therefore, we merged this CL to 24D1-dev.
2024-04-16 22:47:39 +00:00
Android Build Coastguard Worker
b3d5cb327c Snap for 11717025 from f68e0fb440 to 24Q3-release
Change-Id: I3bab73850ed3a653f3b2ec929086507b59f61742
2024-04-15 23:02:47 +00:00
isaacchiou
f68e0fb440 wifi: disable FW roaming when in idle mode
When device is idle, disable FW roaming (LOW RSSI roam, high band roam) to save power

Bug: 321639511
Test: Manual
Change-Id: I55b88d86dffba2ccea6f8ceb608efafbc35b64d8
2024-04-15 13:46:09 +00:00
Jack Wu
b09140782b [automerger skipped] Update health AIDL HAL to V3 am: b58ea3f845 -s ours
am skip reason: Merged-In I57ff2ec2758f965a9e13e53f223c735a9d102219 with SHA-1 f143d6803b is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/26743925

Change-Id: I94dd25d5aa74044c0a0f5d29807812203449d9e1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-15 10:21:28 +00:00
Jack Wu
b58ea3f845 Update health AIDL HAL to V3
Bug: 328332299
Test: TH
Test: vts-tradefed run vts -m vts_treble_vintf_vendor_test
Signed-off-by: Jack Wu <wjack@google.com>
(cherry picked from https://android-review.googlesource.com/q/commit:f143d6803bd64b123306788e4e02670a829c3258)
Merged-In: I57ff2ec2758f965a9e13e53f223c735a9d102219
Change-Id: I57ff2ec2758f965a9e13e53f223c735a9d102219
24D1-dev is based on 24Q2-release. Therefore, we merged this CL to 24D1-dev.
2024-04-15 10:06:28 +00:00
Android Build Coastguard Worker
08bef1a2cc Snap for 11710546 from b234a074ba to 24Q3-release
Change-Id: Ie13ee2cb48a8f79278039097597850f8d10ec6e3
2024-04-13 01:02:27 +00:00
Android Build Coastguard Worker
ecd25fcbd2 Snap for 11704135 from 637291fe10 to 24Q3-release
Change-Id: I8efda67bbd0eb29e37b5cbc08dfab63aca0d1215
2024-04-11 23:02:15 +00:00
Android Build Coastguard Worker
45758359da Snap for 11704135 from 98d7af4bf7 to 24Q3-release
Change-Id: I415871171beea7d2b06a2fbeca672a1a79da6093
2024-04-11 23:02:14 +00:00
Barry
b234a074ba [Bluetooth] Disable BT auto on feature
Set bluetooth.server.automatic_turn_on false for disable Bluetooth Auto
On feature

Bug: 333830114

Test: make
Change-Id: Idcb80dad26f3a1bf928be9f83fd328712ca71a78
2024-04-11 15:15:40 +00:00
Enzo Liao
637291fe10 Merge "Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common." into main 2024-04-11 02:03:26 +00:00
Enzo Liao
98d7af4bf7 Apply common SELinux policies related to ramdumps and coredumps to gs101.
Refer: ag/26620507

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
Change-Id: Ic465edc3914f2815b3696f7b1c7e3475bcbc2acc
2024-04-11 02:03:11 +00:00
Android Build Coastguard Worker
a8d598e6bd Snap for 11697857 from a71e7d1dcc to 24Q3-release
Change-Id: Ie4dbbea77725454046a3f66b310bf6f2c51eaccd
2024-04-10 23:02:11 +00:00
wenchangliu
a71e7d1dcc update odd resolution support in vpx and av1 codecs
[VSR-4.2.004.001] MUST support the smallest width/height alignment allowed
by the video standard. For AVC/HEVC/VCC, this requires 2x2 pixel alignment
for YUV 4:2:0 profiles, and 2x1 pixel alignment for YUV 4:2:2 profiles.
For VP8/VP9/AV1, this requires 1x1 pixel alignment for any profiles.
Note: This is usually stored as the crop rectangle in the bitstream.

Bug: 329378524
Test: CtsMediaV2TestCases
Change-Id: I0e84a342bf1093c74c712d2c811b37eca9c7908c
2024-04-10 11:20:32 +00:00
Android Build Coastguard Worker
e3740434f2 Snap for 11685790 from a4ce888b94 to 24Q3-release
Change-Id: Ide615c9a92edcd1e16107905dc0b30cbcce87024
2024-04-08 23:02:10 +00:00
Ziyi Yang
a4ce888b94 Revert "Adding post notification to gca default permissions"
This reverts commit c71b017d9d.

Reason for revert: b/332797378 causing memory regression on oriole/raven

Bug: 331677590
Bug: 332797378
Change-Id: If215c02641de9f3ed497d4d7043a3257c1737d9a
2024-04-08 17:48:51 +00:00
Dinesh Yadav
333cdc1663 TPU Abrolhos Tachyon Migration
This change includes tachyon targets for edgetpu in the final image

TESTED:
Create a private build with this change and verified that the tachyon targets were present after flashing on a local device.

Bug: 307591410
Change-Id: I0894b8830cb62801c659a9b4d4f7a1ae6d851795
2024-04-08 16:11:19 +00:00
Enzo Liao
b0daa90c01 Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common.
New paths (ag/26620507):
  RamdumpService: device/google/gs-common/ramdump_app
  SSRestartDetector: device/google/gs-common/ssr_detector_app

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
Change-Id: I568f43ab8ed8f5ab330cbda19cd68bcc12838fdf
2024-04-08 19:37:33 +08:00
Android Build Coastguard Worker
5db1a6424e Snap for 11679388 from fbf009b886 to 24Q3-release
Change-Id: Id8bab0428515a697ad7b07791d2a34b5de51b8fb
2024-04-06 01:02:04 +00:00
Seungah Lim
fbf009b886 [packetrouter] Add oem-iptables-init.sh to artifact path allowed list
In order to apply user-defined chain from vendor by using
oem-iptables-init.ch, shell script path is added to
PRODUCT_ARTIFACT_PATH_REQUIREMENT_ALLOWED_LIST.

Bug: 312772796

Signed-off-by: Seungah Lim <sss.lim@samsung.com>
(cherry picked from https://partner-android-review.googlesource.com/q/commit:83a119d7b7102319f7cb5d5015c8f01963ee7cf7)
Merged-In: If1b57f985284561f537c1124cd60fe91215f5adc
Change-Id: If1b57f985284561f537c1124cd60fe91215f5adc
2024-04-05 17:36:58 +00:00
Android Build Coastguard Worker
c5e0feeadf Snap for 11666018 from 45d1beda4a to 24Q3-release
Change-Id: I41e4e204d368831a2966364d60ef6d563f7dc6d8
2024-04-03 23:02:07 +00:00
Android Build Coastguard Worker
35af74ccda Snap for 11666018 from c71b017d9d to 24Q3-release
Change-Id: I438db56d47dcf96aa740d4048ca5b204dae76bed
2024-04-03 23:02:06 +00:00
Spade Lee
45d1beda4a sepolicy: allow kernel to search vendor debugfs am: bddc287c10
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/26762105

Change-Id: I7533cb34050e307deceb40dcf48533ce692c4087
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-03 04:24:44 +00:00
Android Build Coastguard Worker
cd664deede Snap for 11661060 from a41785042d to 24Q3-release
Change-Id: I76633a1b3acdf99b4a80576d0812f603eb9981e3
2024-04-02 23:02:20 +00:00
Ziyi Yang
c71b017d9d Adding post notification to gca default permissions
Bug: 331677590
Test: Build and flash. Permission was pregranted to gca.
Change-Id: I4f217ecf1cd3b360b7ab261c2dd5c09d9756a5b8
2024-04-02 19:54:42 +00:00
Spade Lee
bddc287c10 sepolicy: allow kernel to search vendor debugfs
audit: type=1400 audit(1710259012.824:4): avc:  denied  { search } for  pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc:  denied  { search } for  pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc:  denied  { search } for  pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1

Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: I13ef8c4d9b0f84a8641cfbe12a7b5cf89a97d3da
Signed-off-by: Spade Lee <spadelee@google.com>
2024-04-02 07:35:39 +00:00
Gina Ko
a41785042d gs101: Relax BOARD_SUPER_PARTITION_ERROR_LIMIT by 100MB
To allow coverage builds to build

Bug: 331488086
Test: TH
Change-Id: I063c31704a5390091016e778f6748db8eba1261d
2024-04-02 00:50:53 +00:00
Android Build Coastguard Worker
71267c6d18 Snap for 11654651 from ec6f15d812 to 24Q3-release
Change-Id: I13ff8cb84e61388456cc7ab199b8f5ab8324e7cb
2024-04-01 23:01:59 +00:00
Android Build Coastguard Worker
9918494c45 Snap for 11648291 from 3d46d634ef to 24Q3-release
Change-Id: I0118f0ea7c63820763e63953da90468c72439885
2024-03-30 01:02:15 +00:00
Android Build Coastguard Worker
dbb3083a3d Snap for 11641371 from 462a14e19d to 24Q3-release
Change-Id: I32527552b4eb7333cee92d55a13173f32326a677
2024-03-28 23:02:03 +00:00
Chris Lu
3d46d634ef gs101: upgrade IDisplay to V11 am: ea4d3ad582
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/26482878

Change-Id: I7e677ff3aa677112c7cc65ebdb4adcf46dd4ab9e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-28 21:37:16 +00:00
Herbert Xue
462a14e19d Update SOONG_NAMESPACES to include power-anomaly-sitril folder
Bug: 326175117
Test: 1. lunch raven-trunk_staging-userdebug
      2. m PowerAnomalySitril
Change-Id: I1599390860676ed2ec334e69e6b4c417ecca6095
2024-03-28 04:59:25 +00:00
kadirpili
ec6f15d812 gs101: telephony property for cbd
Bug: 316817111
Change-Id: Idf85b27d755cff0fb5fffb088d13b105c25beb3b
2024-03-27 07:35:01 +00:00
Android Build Coastguard Worker
d7aee3153d Snap for 11629448 from 3a2d59d8a9 to 24Q3-release
Change-Id: I5de0bb18c5acb8576cd2b88be11da1fe8f538665
2024-03-27 01:03:24 +00:00
Android Build Coastguard Worker
0c1bfaa09b Snap for 11623990 from 883cf12320 to 24Q3-release
Change-Id: I7a52dcef9e46278b5a18b06527e39294f66b531b
2024-03-25 23:02:20 +00:00
Hungyen Weng
3a2d59d8a9 Allow modem_svc to access modem files and perfetto
Bug: 331147031
Bug: 330730987

Test: Confirmed that modem_svc is able to access token db files in modem partition
Test: Confiemed that modem_svc can send traces to perfetto
Test: Confirmed v2/pixel-health-guard/device-boot-health-check-extra has no modem_svc avc denials.

Change-Id: I5fabd3177c758be533ca8bdef3cb3305afd6a5a6
2024-03-25 22:15:19 +00:00
Treehugger Robot
883cf12320 Merge "Update SELinux error" into main 2024-03-25 13:42:12 +00:00
Pablo Gamito
f2a869d688 Remove donotaudit line for b/277155042 am: f1baab0530 am: 96fd92b050
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/3009455

Change-Id: I19af3da60141ab46ca404d1f5a2de98753805469
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-25 09:28:27 +00:00
Pablo Gamito
96fd92b050 Remove donotaudit line for b/277155042 am: f1baab0530
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/3009455

Change-Id: Ib3a8219b620cdb59e384f4e7d83299369ab9bc0a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-25 09:13:06 +00:00
Ján Sebechlebský
3568f1c1e3 Merge "Remove virtual_camera dumpstate denial entry from bug_map" into main 2024-03-25 09:00:43 +00:00
Jan Sebechlebsky
27e4e3cd9d Remove virtual_camera dumpstate denial entry from bug_map
Fix: 312894628
Test: N/A
Change-Id: Ia31780377ef121b9347eace64af470926220524b
2024-03-25 09:00:07 +00:00
Pablo Gamito
f1baab0530 Remove donotaudit line for b/277155042
Since this bug is now fixed

Fixes: 277155042
Test: scanBugreport
Change-Id: If2fdbcbd0b0c0edbcc6824235bbfc561e0f43378
2024-03-25 08:55:20 +00:00
Wilson Sung
629dd3eaf9 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 331147031
Change-Id: I098aab7a986a8b2c659c006f50b5dade74ebcb5b
2024-03-25 07:56:34 +00:00
Android Build Coastguard Worker
8f0d700648 Snap for 11617975 from 9b44bbebe8 to 24Q3-release
Change-Id: Ibdd6a91e20b070223cb50fb94c51352ed5a26ba2
2024-03-23 01:01:53 +00:00
Android Build Coastguard Worker
31979a163b Snap for 11617975 from 0d50cda4cf to 24Q3-release
Change-Id: I6bcefb8b8772f7adc0cf5bf1ab52c5abd6c3feae
2024-03-23 01:01:52 +00:00
Jack Wu
0d50cda4cf Update health AIDL HAL to V3 am: f143d6803b am: 6e01808813
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3010173

Change-Id: I449b102696f602d74a1c75929dd1150f489caf5b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-22 17:59:18 +00:00
Jack Wu
6e01808813 Update health AIDL HAL to V3 am: f143d6803b
Original change: https://android-review.googlesource.com/c/device/google/gs101/+/3010173

Change-Id: Ib8049ed1799943afe5b9a0a35ceb99cf3c1b6591
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-22 17:43:14 +00:00
Jack Wu
f143d6803b Update health AIDL HAL to V3
Bug: 328332299
Test: TH
Test: vts-tradefed run vts -m vts_treble_vintf_vendor_test
Change-Id: I57ff2ec2758f965a9e13e53f223c735a9d102219
Signed-off-by: Jack Wu <wjack@google.com>
2024-03-22 21:00:04 +08:00
Spade Lee
9b44bbebe8 Merge "pixelstats_vendor: add logbuffer_device r_file_perms" into main 2024-03-22 07:30:31 +00:00
Spade Lee
d1dd07e04d pixelstats: gs101: add history validation path
Bug: 329174074
Change-Id: I1982b772e59df66d143899086450c1e5a807f85a
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-22 07:30:26 +00:00
Android Build Coastguard Worker
c72b69902b Snap for 11610847 from 9ddb9bab3d to 24Q3-release
Change-Id: I68a3884759698b711b5049f8522fe38de60b94a2
2024-03-21 23:02:00 +00:00
Chris Lu
ea4d3ad582 gs101: upgrade IDisplay to V11
Bug: 307787644
Test: build pass
Change-Id: I7d7bd95b04483afde0f53127c896e62f53a78116
2024-03-21 07:30:02 +00:00
Spade Lee
66d3a4ef4e pixelstats_vendor: add logbuffer_device r_file_perms
avc: denied { read } for name="logbuffer_maxfg_monitor" dev="tmpfs" ino=1034 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=0

Bug: 329174074
Test: no denied log, and able to read logbuffer in pixelstats_vendor
Change-Id: I2c6069f43d17114f937657724dc34e43cf3d48fe
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-21 00:29:41 +00:00
Spade Lee
9ddb9bab3d sepolicy: allow kernel to search vendor debugfs
audit: type=1400 audit(1710259012.824:4): avc:  denied  { search } for  pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc:  denied  { search } for  pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc:  denied  { search } for  pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1

Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: I13ef8c4d9b0f84a8641cfbe12a7b5cf89a97d3da
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-20 18:18:07 +00:00
Android Build Coastguard Worker
9596d7a234 Snap for 11597038 from 3970338cd2 to 24Q3-release
Change-Id: I9862c21503da100a1ed470b1400776e224e18bfb
2024-03-19 23:02:22 +00:00
Shashwat Razdan
3970338cd2 [automerger skipped] Adding android.software.contextualsearch to gs-101 devices. am: 4bb66fedc8 -s ours
am skip reason: Merged-In Id45a24ec3361caade132836e5e849940efa6ac2c with SHA-1 4ff9169f2f is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/26574514

Change-Id: Ib09b859c6b2d0d85ea95332e5a8598e9671fc17d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-19 08:29:06 +00:00
Android Build Coastguard Worker
06813e63f9 Snap for 11591048 from 89224de0eb to 24Q3-release
Change-Id: Idfb613b022778fd6d3a7cafa5bf19222c556a779
2024-03-18 23:02:20 +00:00
Wilson Sung
89224de0eb Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 329380904
Change-Id: I5ef59058c7c7487a8a9cb238767e019631c5ac63
2024-03-18 03:24:54 +00:00
Shashwat Razdan
4bb66fedc8 Adding android.software.contextualsearch to gs-101 devices.
Bug: 326143814
Test: Built and tested on device
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:4ff9169f2f92191802e70fadb83810d03d2e9952)
Merged-In: Id45a24ec3361caade132836e5e849940efa6ac2c
Change-Id: Id45a24ec3361caade132836e5e849940efa6ac2c
CP feature CLs to 24d1-dev
2024-03-13 23:58:19 +00:00
Android Build Coastguard Worker
0c1b88496a Snap for 11571437 from 5e69a4432a to 24Q3-release
Change-Id: Ief4d2bad7eb31f916e341eced16796844fdbd1b3
2024-03-13 23:02:04 +00:00
Hongyang Jiao
5e69a4432a Add betterbug.mk to gs101
Test: manual test
Bug: 322543833
Change-Id: Iccf4ceabd1c994b804de9e74b50fa8a0ca936af6
2024-03-13 04:29:58 +00:00
Chungro Lee
e0d7a24937 pixelstats: move learning/model load path to sysfs
Reporting learning(relaxation) and model loading once a day
 * learning and model loading path moved from uevent to
   sysfs collector.

Bug: 329124192
Change-Id: I91039ce3a8ee4630a76113ef7ae6be3bc6908f64
Signed-off-by: Chungro Lee <chungro@google.com>
2024-03-13 01:29:46 +00:00
Android Build Coastguard Worker
8ae21a4512 Snap for 11565217 from aa08862f13 to 24Q3-release
Change-Id: I3c069bb0e66569aa5ad83475069b4d8ce044cf5c
2024-03-12 23:02:20 +00:00
Thiébaud Weksteen
aa08862f13 [automerger skipped] Remove persist.bootanim.color property definitions am: d3db02a5c3 am: 5b4150791c -s ours
am skip reason: Merged-In Iafe8da5e19a43807aed49e1984ef798de396e723 with SHA-1 dbac8fd52f is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2994313

Change-Id: I2c1acad2c469347dfda3cdbb652b6e3fac1ddcd8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 06:40:17 +00:00
Thiébaud Weksteen
5b4150791c Remove persist.bootanim.color property definitions am: d3db02a5c3
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2994313

Change-Id: I13c9f21d5c43af8307f4f0f72671daf16109f363
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 05:57:12 +00:00
Android Build Coastguard Worker
9adbe6d2ed Snap for 11558480 from 5fa0e12ada to 24Q3-release
Change-Id: I8bb28364880ffdcc73634a7e22d7db3f506cf810
2024-03-11 23:01:59 +00:00
Limon Mia
5fa0e12ada bt: set rfkill device nodes permission setting on early_boot stage
move the rfkill permission setting from post-fs-data to early_boot
stage because the kernel/net/rfkill/rfkill.ko may not be loaded on
post-fs-data stage and cause the permission setting failed.

Bug: 277148159
Test: m
Change-Id: I65f0593caddbe659528877f583917cdaead1756b
2024-03-11 12:34:13 +00:00
Thiébaud Weksteen
d3db02a5c3 Remove persist.bootanim.color property definitions
These now belong to the platform policy.

Bug: 321088135
Test: build
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:dbac8fd52fbe391d0a27b35a803b212ecba8f278)
Merged-In: Iafe8da5e19a43807aed49e1984ef798de396e723
Change-Id: Iafe8da5e19a43807aed49e1984ef798de396e723
2024-03-08 01:38:00 +00:00
Android Build Coastguard Worker
e6b4a7b816 Snap for 11545716 from dcd436edf2 to 24Q3-release
Change-Id: I459b54c8ed0c67df33aa4c0f0f0884ccbede3cad
2024-03-08 00:01:54 +00:00
Android Build Coastguard Worker
cd761d70b4 Snap for 11545716 from 26a23b76de to 24Q3-release
Change-Id: I423f0a8177838c58dc76a900a250e0e1d55807ce
2024-03-08 00:01:53 +00:00
Raphael Herouart
26a23b76de [Trusty] tipc-test is missing for p21.
Bug: 328562462

Test: Local build Pass.
Change-Id: Idb98464ef1f0a15087b124d50edb4691d39046c5
2024-03-07 14:05:07 +00:00
Xin Li
ee3a78e22f [automerger skipped] Merge Android 14 QPR2 to AOSP main am: 8331b62013 -s ours am: efb4973193 -s ours
am skip reason: Merged-In Id43ef0c972cab098f056e418cee940b702a1f251 with SHA-1 04ea7c073b is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101/+/2990107

Change-Id: Ia9899e4f8bff2e419eea1cb9361decb25f167402
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 10:46:55 +00:00
Xin Li
dcd436edf2 [automerger skipped] Merge Android 14 QPR2 to AOSP main am: 1a5459b192 -s ours am: ca2a6b61b3 -s ours
am skip reason: Merged-In Ifb5d71336bd21aa8d8de377bf128758240ce1206 with SHA-1 1911f171f7 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2990661

Change-Id: Ifc8052860154b4561598ac529f48ddde771c10cf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 10:46:43 +00:00
Xin Li
efb4973193 [automerger skipped] Merge Android 14 QPR2 to AOSP main am: 8331b62013 -s ours
am skip reason: Merged-In Id43ef0c972cab098f056e418cee940b702a1f251 with SHA-1 04ea7c073b is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101/+/2990107

Change-Id: Ia0c2ac35286267b602ba8517b73bfc360a63c6a3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 09:55:30 +00:00
Xin Li
ca2a6b61b3 [automerger skipped] Merge Android 14 QPR2 to AOSP main am: 1a5459b192 -s ours
am skip reason: Merged-In Ifb5d71336bd21aa8d8de377bf128758240ce1206 with SHA-1 1911f171f7 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2990661

Change-Id: I6256f73a98c2d1bbbb79c51725270d681302edbe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 09:55:18 +00:00
Android Build Coastguard Worker
6e84576530 Snap for 11540345 from 4ff9169f2f to 24Q3-release
Change-Id: I703dd25b25c01919eb881d8f3e85a12917c51002
2024-03-07 01:51:46 +00:00
Xin Li
8331b62013 Merge Android 14 QPR2 to AOSP main
Bug: 319669529
Merged-In: Id43ef0c972cab098f056e418cee940b702a1f251
Change-Id: Iff818dc1e2f9da1e4d47146608d7719628094da0
2024-03-06 09:29:48 -08:00
Xin Li
1a5459b192 Merge Android 14 QPR2 to AOSP main
Bug: 319669529
Merged-In: Ifb5d71336bd21aa8d8de377bf128758240ce1206
Change-Id: Ie8eca71839331df5a9d7306d574f6bd8951eab3b
2024-03-06 09:29:48 -08:00
Shashwat Razdan
4ff9169f2f Adding android.software.contextualsearch to gs-101 devices.
Bug: 326143814
Test: Built and tested on device
Change-Id: Id45a24ec3361caade132836e5e849940efa6ac2c
2024-03-06 16:32:59 +00:00
Android Build Coastguard Worker
c7aa257921 Snap for 11533280 from 59b8b15882 to 24Q3-release
Change-Id: I9b7c4548bb99a8fe40476fb7ea86946706e404eb
2024-03-06 00:02:04 +00:00
Android Build Coastguard Worker
add8366336 Snap for 11533280 from a43fedce4e to 24Q3-release
Change-Id: I1d978c0244655952db4445e76506b5caa43a6fe6
2024-03-06 00:02:03 +00:00
Daniel Chapin
a43fedce4e Revert "Add betterbug mk to gs101"
Revert submission 26348985-bb-sepolicy-poc

Reason for revert: Droidfood blocking bug: b/327991669

Bug: b/327991669

Reverted changes: /q/submissionid:26348985-bb-sepolicy-poc

Change-Id: I88a445da895c373c0a53c8a2f08726582c27be77
2024-03-05 20:38:07 +00:00
Barry
3c31047ecf BT: set system property for Bluetooth Auto On
Set bluetooth.server.automatic_turn_on true for Bluetooth Auto On
feature.
The feature will be enabled with both system property and flag set.

Bug: 328168526
Test: check system property value
Change-Id: If7e9c3bab450dead2cfd46dddc55d293ccab3d92
2024-03-05 11:48:09 +00:00
Treehugger Robot
59b8b15882 Merge "Add AIDL media.c2 into service_contexts" into main 2024-03-05 06:17:02 +00:00
Wonsik Kim
def43cc017 Add AIDL media.c2 fragments
Bug: 321808716
Test: adb shell dumpsys android.hardware.media.c2.IComponentStore/default
Test: adb shell dumpsys android.hardware.media.c2.IComponentStore/default1
Change-Id: I3a0a38f71421a8673038f63764250f7a1a88c730
2024-03-05 06:16:54 +00:00
Mark Chang
9ad27501e4 Add sepolicy include to gs101.
Bug: 325422902
Test: Manual, system booted without sepolicy denied error.

Change-Id: I2149188a925cc94aea077e9b6fb78cc850660dd7
Signed-off-by: Mark Chang <changmark@google.com>
2024-03-05 05:31:39 +00:00
Android Build Coastguard Worker
d589b18594 Snap for 11526283 from 2a9b7e75e3 to 24Q3-release
Change-Id: Iad02caf0fb1ab229da7ed17f338c190c5ddf1804
2024-03-05 00:26:03 +00:00
Devika Krishnadas
f2d8196441 Move Gralloc packages to gs-common
Bug: 275906497
Test: Boot succeeds

Change-Id: I879a5ef8365abe018c501cdb0b06c9753e0e5902
Signed-off-by: Devika Krishnadas <kdevika@google.com>
2024-03-04 22:13:50 +00:00
Treehugger Robot
2a9b7e75e3 Merge "add dsim wakeup labels" into main 2024-03-04 02:58:52 +00:00
Android Build Coastguard Worker
f2d71c70b9 Snap for 11520864 from 49ae2f663b to 24Q3-release
Change-Id: I2427325c1bab2561490d3548d8f3f72841296f57
2024-03-02 02:02:26 +00:00
Android Build Coastguard Worker
4118decb4d Snap for 11504269 from 0ab9ff1e87 to 24Q3-release
Change-Id: I873fb49805dd2ee58c675d7f8807924608c5d7e2
2024-02-28 00:02:49 +00:00
Android Build Coastguard Worker
8c97b6476f Snap for 11504269 from 4d1085e4a2 to 24Q3-release
Change-Id: I997629736fc25e9fec703352b7d8b17ac7b5bdd6
2024-02-28 00:02:49 +00:00
Thiébaud Weksteen
0ab9ff1e87 Merge "Revert^2 "Remove persist.bootanim.color property definitions"" into main 2024-02-26 22:40:44 +00:00
Thiébaud Weksteen
f0447fb52d Revert^2 "Remove persist.bootanim.color property definitions"
303a4dd99b

Change-Id: I237450825ef2aaf4681265aede03091ca2d76484
2024-02-25 23:59:12 +00:00
Android Build Coastguard Worker
46946ce24a Snap for 11492556 from 7c919c2a2b to 24Q3-release
Change-Id: Ifa3aae02d6be47699dfa5dd7bec429564ab327fa
2024-02-24 02:16:46 +00:00
Krzysztof Kosiński
7c919c2a2b Merge "Allow camera to acquire wakelocks." into main 2024-02-23 15:37:27 +00:00
Rubin Xu
5daaf46640 Merge "Revert "Remove persist.bootanim.color property definitions"" into main 2024-02-23 12:42:52 +00:00
Rubin Xu
303a4dd99b Revert "Remove persist.bootanim.color property definitions"
Revert submission 26301396-bootanim_prop

Reason for revert: DroidMonitor-triggered revert due to breakage https://android-build.corp.google.com/quarterdeck/?branch=git_main&target=sdk_goog3_x86_64-trunk_staging-userdebug&lkgb=11487950&lkbb=11488141&fkbb=11488141

Bug: 326521604

Reverted changes: /q/submissionid:26301396-bootanim_prop

Change-Id: Ic931ad1f4f7580cae73355ba3419a7c7422cd580
2024-02-23 12:24:48 +00:00
Krzysztof Kosiński
6f152690d9 Allow camera to acquire wakelocks.
This is already allowed on all other Google chips and used
for a face auth latency optimization.

Fix: 303391687
Test: check logs on raven
Change-Id: I6f70b70d1cf4c055ce9f3e76c1fca0ae0c3e070d
2024-02-23 03:01:52 +00:00
Thiébaud Weksteen
d972c8e001 Merge "Remove persist.bootanim.color property definitions" into main 2024-02-23 02:59:58 +00:00
Android Build Coastguard Worker
5ff6d091c3 Snap for 11486189 from ea03d9909d to 24Q3-release
Change-Id: If05acb32ba49a99673b113432d71af2d9acb3a93
2024-02-23 00:02:44 +00:00
Android Build Coastguard Worker
8036c73688 Snap for 11486189 from 91bda4797a to 24Q3-release
Change-Id: I32ef404dff5cf0ac9708231394399e2497fd79ce
2024-02-23 00:02:43 +00:00
William McVicker
ea03d9909d Merge "Update i2c sepolicy with new device names" into main 2024-02-22 17:54:41 +00:00
Android Build Coastguard Worker
f19dd0a210 Snap for 11479750 from 40465c1988 to 24Q3-release
Change-Id: I5e69e15af5af443119a1d2b9f1138b79dad23842
2024-02-22 00:03:01 +00:00
Android Build Coastguard Worker
a20b149870 Snap for 11479750 from 536524e4cd to 24Q3-release
Change-Id: If044597c58d65451ca45f8db4651c2002b4b2f11
2024-02-22 00:03:00 +00:00
Thiébaud Weksteen
dbac8fd52f Remove persist.bootanim.color property definitions
These now belong to the platform policy.

Bug: 321088135
Test: build
Change-Id: Iafe8da5e19a43807aed49e1984ef798de396e723
2024-02-21 13:46:21 +11:00
Android Build Coastguard Worker
2f1bbe49e4 Snap for 11472972 from 908d73a76a to 24Q3-release
Change-Id: Ie41e37680239d8ace0d1ddd1ea9a0173f26de702
2024-02-21 00:03:04 +00:00
Lei Ju
40465c1988 [gs101] Use common settings for Contexthub HAL
The change also labeled files under /data/vendor/chre/ to grant
required access.

Test: compilation
Bug: 248615564
Change-Id: I4db158853764987cf04dc7963ff79c680613f028
2024-02-18 11:41:51 -08:00
Peter Lin
7af07fe0e4 add dsim wakeup labels
Bug: 323086660
Bug: 321733124
test: ls sys/devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/wakeup -Z
Change-Id: Ic47c14713727de1639e456fb6b2f0fc7d9810dc6
2024-02-17 08:13:04 +00:00
Will McVicker
3ad00c9539 Update i2c sepolicy with new device names
The new names fix uninformative kernel wakelock names.

Bug: 315190967
Bug: 323447554
Change-Id: Iff6eccb677444357f867785f213dadd70fb649c1
2024-02-16 14:54:04 -08:00
Android Build Coastguard Worker
39af0c7b93 Merge "Snap for 11455877 from e3ec636b99 to 24Q3-release" into 24Q3-release 2024-02-16 01:24:28 +00:00
Android Build Coastguard Worker
f5bd1f4a9e Snap for 11455877 from e3ec636b99 to 24Q3-release
Change-Id: Ia3bd0e415c0017b7b83cd9c183efc436b610d0b1
2024-02-16 00:23:15 +00:00
Android Build Coastguard Worker
3ea8b2185e Snap for 11455651 from e3ec636b99 to 24Q3-release
Change-Id: I149d3ff6ad2bff64071c59d0b14378dcb2a7b524
2024-02-16 00:14:08 +00:00
Android Build Coastguard Worker
264e3df160 Snap for 11438798 from 76895c0293 to 24Q3-release
Change-Id: If9de4faabd922a4120974715b3b83c9307f6a6bf
2024-02-13 00:03:16 +00:00
Android Build Coastguard Worker
9c3b8e51b4 Snap for 11434705 from 4bf2e493a8 to 24Q3-release
Change-Id: I401585f3ff3c71ca7cf23ce688da3d9883222abb
2024-02-10 22:02:23 +00:00
Android Build Coastguard Worker
b09640b8c1 Snap for 11426397 from 8f8ce29d46 to 24Q3-release
Change-Id: Ieb4dfdd90a9cd57d044aca92663561a17b1a149f
2024-02-09 00:03:02 +00:00
Jacky Liu
3a53df7d7a Update i2c device paths
Update i2c device paths with static bus numbers.

Bug: 323447554
Test: Boot to home
Change-Id: I5aacc4db4726f7608b2049bd2efb1d8732d3cdcf
2024-02-06 16:17:08 +00:00
Andrea Zilio
e2e71d0850 Removed SE Linux error bugmap entry, as we have fixed this property usage.
Change-Id: I1093c7c7b7633a734d1108fa6e05c010dd1af4c6
Bug: 321730881
2024-01-31 15:25:21 +00:00
Wilson Sung
16de970cd0 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 323086679
Test: scanBugreport
Bug: 323087054
Bug: 316817111
Test: scanAvcDeniedLogRightAfterReboot
Bug: 323086660
Bug: 316817111
Change-Id: I03dc82e832048e9a165b738bea1903ed37b2231c
2024-01-31 02:59:05 +00:00
Xin Li
52e447a377 [automerger skipped] Merge Android 24Q1 Release (ab/11220357) am: 1911f171f7 -s ours
am skip reason: Merged-In Ib110dee4622befb0e4a04ade1c1805e822ce3b2e with SHA-1 9fa7db53a1 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/25972547

Change-Id: I91a069f383163226912b4dc3b2778a88d142787b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-31 02:02:53 +00:00
Wonsik Kim
811682e50f Add AIDL media.c2 into service_contexts
Bug: 321808716
Test: adb shell dumpsys android.hardware.media.c2.IComponentStore/default
Test: adb shell dumpsys android.hardware.media.c2.IComponentStore/default1
Change-Id: Ifef80e6d12e1b0c9e5d2ce6b33a61b51239683de
2024-01-29 22:43:51 +00:00
Darren Hsu
7ea71a9c1c sepolicy: allow hal_power_stats to read sysfs_display
avc:  denied  { read } for  name="available_disp_stats"
dev="sysfs" ino=76162 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 321848496
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: I869e80af8994408e7eef279b6a5eb59d6d2c406b
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2024-01-29 11:49:47 +08:00
Wilson Sung
3116a34269 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Test: scanBugreport
Bug: 321730881
Bug: 316817111
Test: scanAvcDeniedLogRightAfterReboot
Bug: 316817111
Change-Id: I6f7abbb5402fd991d174a79a81c2d5e6c41c71d8
2024-01-22 17:53:08 +00:00
Treehugger Robot
59e8449b01 Merge "Correct the path of tcpm wakelock" into main 2024-01-18 10:16:20 +00:00
Xin Li
1911f171f7 Merge Android 24Q1 Release (ab/11220357)
Bug: 319669529
Merged-In: Ib110dee4622befb0e4a04ade1c1805e822ce3b2e
Change-Id: Ifb5d71336bd21aa8d8de377bf128758240ce1206
2024-01-17 22:12:35 -08:00
Kyle Tso
29021574e6 Correct the path of tcpm wakelock
Bug: 315190967
Change-Id: I01f8da9e0467f34cd0229bf9c5370d062ca78130
Signed-off-by: Kyle Tso <kyletso@google.com>
2024-01-15 15:56:39 +08:00
Mahesh Kallelil
dc869395ad Merge "Fix SELinux error in dump_modem" into main 2024-01-12 06:36:51 +00:00
Mahesh Kallelil
ea7ccea15c Fix SELinux error in dump_modem
The cpif logbuffer did not have the right context and was
missing as part of the bugreport.

Test: Tested bugreport on device
Bug: 305600375
Change-Id: I2101037d0044e706969f2582e29f923ae029458b
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2024-01-11 09:24:22 -08:00
Ken Yang
6073bb0ff8 selinux: label wakeup for BMS I2C 0x36, 0x69
Bug: 319035561
Change-Id: Ib339ce27cc89a02825be51f1bf49fe727ac9fb67
Signed-off-by: Ken Yang <yangken@google.com>
2024-01-10 06:13:47 +00:00
Wen Chang Liu
4a0a6e1d78 Merge "gs101: move mediacodec_samsung sepolicy to gs-common" into main 2024-01-09 14:49:59 +00:00
wenchangliu
da91eed387 gs101: move mediacodec_samsung sepolicy to gs-common
remove mediacodec_samsung sepolicy in legacy path since we will include it from gs-common.

Bug: 318793681
Test: build pass, camera record, youtube
Change-Id: Idc0e19348d1e113e95305279aebbbaf82c79d730
2024-01-05 10:14:32 +00:00
timtmlin
c4181c461d Remove obsolete entries
Bug: 315720636
Bug: 315720725
Test: make
Change-Id: I485bbd472314199106a6f92f08796762cb440952
2023-12-27 15:44:26 +08:00
Wilson Sung
52fc41b1c2 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 317734923
Test: scanBugreport
Bug: 317734418
Bug: 316817111
Test: scanAvcDeniedLogRightAfterReboot
Bug: 317734489
Bug: 316817111
Change-Id: Ibc5c35c327cbb1fb4433c63a9073503037d9c8cf
2023-12-26 03:44:21 +00:00
Chi Zhang
7a00cea0a7 Merge "Allow GRIL to get power stats." into main 2023-12-22 19:29:06 +00:00
Wilson Sung
64e2ac2aa0 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 317316478
Test: scanBugreport
Bug: 316817111
Test: scanAvcDeniedLogRightAfterReboot
Bug: 316817111
Change-Id: I0eaf3217d077d2465a2f4ac3f1e3b15b9236df4f
2023-12-21 07:37:17 +00:00
Chi Zhang
0212befe1e Allow GRIL to get power stats.
AVC log: SELinux : avc:  denied  { find } for pid=3147 uid=10219 name=android.hardware.power.stats.IPowerStats/default scontext=u:r:grilservice_app:s0:c219,c256,c512,c768 tcontext=u:object_r:hal_power_stats_service:s0 tclass=service_manager permissive=0

Bug: 286187143
Test: build and boot
Change-Id: Iff51df55ad0011815b764b334801dedc6a6d1cbc
2023-12-19 12:20:20 -08:00
Wilson Sung
9fa7db53a1 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 315907959
Test: scanBugreport
Bug: 315104713
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315104713
Change-Id: Ib110dee4622befb0e4a04ade1c1805e822ce3b2e
2023-12-12 06:34:48 +00:00
Xin Li
9b55292c7e [automerger skipped] Merge Android 14 QPR1 am: de4dc819b4 -s ours am: 83dca5bda2 -s ours am: 5bdc2b25ae -s ours
am skip reason: Merged-In Icf6128476f1f669918bc20d3eecd40c89893443f with SHA-1 9278e0c263 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2865760

Change-Id: Id33e5a1b2f4bf66182fff901edc98d0e783a38ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-11 22:57:51 +00:00
Xin Li
5bdc2b25ae [automerger skipped] Merge Android 14 QPR1 am: de4dc819b4 -s ours am: 83dca5bda2 -s ours
am skip reason: Merged-In Icf6128476f1f669918bc20d3eecd40c89893443f with SHA-1 9278e0c263 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2865760

Change-Id: I976a0db1da02934ee283984f69981bba537de3d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-11 22:02:39 +00:00
Xin Li
83dca5bda2 [automerger skipped] Merge Android 14 QPR1 am: de4dc819b4 -s ours
am skip reason: Merged-In Icf6128476f1f669918bc20d3eecd40c89893443f with SHA-1 9278e0c263 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2865760

Change-Id: Iae3de3a1ce50d4a45f2a7170ced3203e0494fc26
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-11 21:16:49 +00:00
Treehugger Robot
46cd746012 Merge "Fix rlsservice sepolicy" into main 2023-12-11 07:31:03 +00:00
Boon Jun Soh
548c2f184d Fix rlsservice sepolicy
Allows bugreport generation

Bug: 315255760
Bug: 309379598
Test: abd bugreport & ensure lack of rls avc denied logs
Change-Id: Ib3fc7b089c7aea4aea69f219d4c19847d39b0729
2023-12-11 14:39:32 +08:00
Wilson Sung
c42d6625f5 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 315720636
Bug: 315104713
Test: scanBugreport
Bug: 315720725
Bug: 315104713
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315720636
Bug: 315104713
Change-Id: I6fdd21dd1d78aee006d3d5dbeb57ae6912f9b42e
2023-12-11 02:54:34 +00:00
Xin Li
de4dc819b4 Merge Android 14 QPR1
Merged-In: Icf6128476f1f669918bc20d3eecd40c89893443f
Bug: 315507370
Change-Id: I1b9c6fbde63c54d034b44dae2c2cc7268393df53
2023-12-08 13:13:24 -08:00
David Drysdale
422638059a Merge "Add Secretkeeper HAL" into main 2023-12-06 10:21:03 +00:00
David Drysdale
03785012ed Add Secretkeeper HAL
Test: VtsAidlAuthGraphSessionTest
Bug: 306364873
Change-Id: I72d9d9afd57d265bd2a019a02d6aa364deb4acb4
2023-12-05 10:38:01 +00:00
Jason Chiu
3f3bfddaff gs101: move common sepolicy related to bootctrl hal to gs-common
Bug: 265063384
Change-Id: I2e7bee9c6be4a6802a759bf52fb412dd73f868bd
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-12-05 01:24:03 +08:00
Treehugger Robot
cc9b389190 Merge "Update SELinux error" into main 2023-12-04 03:04:27 +00:00
Daniel Norman
021d2647eb [automerger skipped] Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: c245d0e88d -s ours am: 9b4fe94bf1 -s ours
am skip reason: Merged-In I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f with SHA-1 60940a7ad7 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Ic3a394f5a74163608a4d845aceb7d871e0217546
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:29:26 +00:00
Daniel Norman
9b4fe94bf1 [automerger skipped] Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: c245d0e88d -s ours
am skip reason: Merged-In I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f with SHA-1 60940a7ad7 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Ic8e813b3a6450aa3b3bd075a967e760a398ec1c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:24:42 +00:00
Daniel Norman
7ca6403290 [automerger skipped] Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: 9278e0c263 am: 8498e6db38 -s ours
am skip reason: Merged-In I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f with SHA-1 e948bb326a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Idddce5b8ce8ac127893dfcf018ac81f2b6bdcbf4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 19:23:58 +00:00
Daniel Norman
c245d0e88d Removes duplicate hidraw_device type definition. am: 60940a7ad7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: I3c06b0e9bbcf7c10c60eef3b4b4c78d825ba8e8e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:51:10 +00:00
Daniel Norman
8498e6db38 Removes duplicate hidraw_device type definition. am: 60940a7ad7 am: 9278e0c263
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: I02aa44c368e2d7df030bfd68bdd60d700bba2c51
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:48:23 +00:00
Daniel Norman
9278e0c263 Removes duplicate hidraw_device type definition. am: 60940a7ad7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2855365

Change-Id: Icf6128476f1f669918bc20d3eecd40c89893443f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 18:45:33 +00:00
Daniel Norman
60940a7ad7 Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Test: ls -z /dev/hidraw0
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:e948bb326a518bd2f7f92410c4f2d0ae6f6d146a)
Merged-In: I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f
Change-Id: I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f
2023-11-30 23:27:49 +00:00
Wilson Sung
484f609dee Update SELinux error
Test: scanBugreport
Bug: 312894628
Bug: 313804340
Change-Id: I87b384eac0c734444f0d722955b341a4611b7842
2023-11-30 07:14:31 +00:00
Khoa Hong
213b76e9b8 Suppress avc error log on debugfs's usb folder.
The XHCI driver in kernel will write debugging information to DebugFS on
some USB host operations (for example: plugging in a USB headphone). We
are not using those information right now.

Bug: 311088739
Test: No error when plugging a USB headphone in.
Change-Id: If7c511f4466959d819f2672ae8f82a8a8dae83e4
2023-11-30 15:01:37 +08:00
Randall Huang
ec6ba5806d Move sg_device related policy
Bug: 312582937
Test: make selinux_policy
Change-Id: I27a86d47777a6d769b93fc1c40ae27dacf83ab10
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-11-22 14:01:33 +08:00
Bryan Lavrich
a1bff1c2e9 Merge "aoc: add sysfs file entry" into main 2023-11-20 20:22:27 +00:00
Devika Krishnadas
4ed070d0aa Merge "Add Pixel Mapper as a sp-HAL" into main 2023-11-20 18:17:28 +00:00
Devika Krishnadas
1f9e3a93e1 Add Pixel Mapper as a sp-HAL
Bug: 267352318

Change-Id: I77b064c3eae2b47677ee83df8483e6f7aba08e6e
Signed-off-by: Devika Krishnadas <kdevika@google.com>
2023-11-16 01:17:05 +00:00
Daniel Norman
c9fcb3e550 Merge "Removes duplicate hidraw_device type definition." into main 2023-11-14 19:05:05 +00:00
Lei Ju
406bfbcee7 Merge "Set up sepolicy for CHRE HAL process" into main 2023-11-14 17:58:30 +00:00
Daniel Norman
e948bb326a Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Change-Id: I3e1fc7cb102fa9e9a80b8751eb0da505e3b3d69f
Test: ls -z /dev/hidraw0
2023-11-10 22:53:15 +00:00
Lei Ju
89dd17c9ad Set up sepolicy for CHRE HAL process
Contexthub (CHRE) team is removing the chre daemon and incorporating
its functionalities into the next gen HAL. This CL copied the
permissions we received in whitechapel/vendor/google/chre.te to
hal_contexthub.te to enable the same set of permissions on gs101.

Bug: 247124878
Test: launch the hal process on oriole and verify it can perform
required operations such as loading nanoapps holding wakelocks,
query nanoapps, etc.

Change-Id: I8ce6b4f7f411e50cf454bb5f1286f73d4d46aced
2023-11-10 14:18:05 -08:00
Alex Iacobucci
8966bfa237 aoc: add sysfs file entry
Test: on device
Bug: 309950738
Change-Id: I7e2ceaa61c7870ace37014ad39f3a119f3712569
Signed-off-by: Alex Iacobucci <alexiacobucci@google.com>
2023-11-10 18:28:51 +00:00
Mike Wang
a6c7f726b5 Change the MDS to platform app in selinux ap context.
The MDS will be signed with platform key and become a platform app. To
make the selinux rules for modem_diagnostic_app work, need to set it to
platform app in app context.

Bug: 287683516

Test: Tested with both dev key or platform key signed MDS apps and the selinux rules works.
Change-Id: If890f7caaac33e5ddc6c02cc8084654a10cea416
2023-11-09 07:17:07 +00:00
Treehugger Robot
f237b33c72 Merge "sensors: Move USF related sepolicy to gs-common." into main 2023-11-07 06:49:08 +00:00
Rick Chen
04e4ac1717 sensors: Move USF related sepolicy to gs-common.
Bug: 305120274
Test: Compile pass. Flash the build to WHI devices and no sensor
      related avc denied log.
Change-Id: I56174a24d159968c01d1572e84f4bcdd7930a709
Signed-off-by: Rick Chen <rickctchen@google.com>
2023-11-07 10:50:48 +08:00
Wilson Sung
c11845e69e Update SELinux error
Test: scanBugreport
Bug: 309379598
Change-Id: I9c334cdb5e98c71a70f079fb984e57c154ab6a99
2023-11-06 08:01:12 +00:00
JimiChen
ea198bd127 Update SELinux policies for rlsservice
1. Move rls_service context from vndservice_contexts to
   service_contexts.
2. Allow binder calls from rlsservice to servicemanager
3. Change rls_service type from vndservice_manager_type to
   service_manager_type.

Bug: 301520085
Test: GCA
Change-Id: I7badfe2ddb73b13884b54d2c8972e1921af6ea38
2023-11-01 18:20:45 +08:00
Xin Li
aa6b15007d [automerger skipped] Merge 10952656 am: a17ff7b552 -s ours am: c7ea7da26a -s ours
am skip reason: Merged-In Id8af985f49aafa9966da448443421888817bdb34 with SHA-1 1ac7c592e6 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/25092663

Change-Id: I33180129dea5c82e473ef3c9bf21f3e6f4570448
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-19 23:54:51 +00:00
Xin Li
c7ea7da26a [automerger skipped] Merge 10952656 am: a17ff7b552 -s ours
am skip reason: Merged-In Id8af985f49aafa9966da448443421888817bdb34 with SHA-1 1ac7c592e6 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/25092663

Change-Id: I4724a9ef5b19adc68ff7bb54e97ad2f179dc9223
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-19 18:48:06 +00:00
Xin Li
a17ff7b552 Merge 10952656
Merged-In: Id8af985f49aafa9966da448443421888817bdb34
Change-Id: Ifbd9589b149d126f212eddda871aaf550f589ac8
2023-10-17 10:06:29 -07:00
Wilson Sung
0c5fff7954 Update SELinux error
Test: scanBugreport
Bug: 305600375
Bug: 305600845
Bug: 305600595
Change-Id: I6bd13a82d02eb063435520be7705c67408b0269f
2023-10-16 05:53:42 +00:00
Xin Li
c7a1c28200 [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours am: 071bca5489 -s ours am: 14f6e3dd7d -s ours am: bba70e6241 -s ours am: 1ac7c592e6 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: I03e153000fc167622dd2ff19693bca57c5739c96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-07 00:19:55 +00:00
Xin Li
1ac7c592e6 [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours am: 071bca5489 -s ours am: 14f6e3dd7d -s ours am: bba70e6241 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: Id8af985f49aafa9966da448443421888817bdb34
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-06 11:00:25 +00:00
Xin Li
bba70e6241 [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours am: 071bca5489 -s ours am: 14f6e3dd7d -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: I8f2846beec57d58761717c294fb4e74beae7732f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-06 09:50:34 +00:00
Xin Li
14f6e3dd7d [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours am: 071bca5489 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: I44e5ece889b19439ab5ad57e2b228b6f7c026a09
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-06 08:59:00 +00:00
Xin Li
071bca5489 [automerger skipped] Merge Android 14 am: 7fabb8cee6 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 502fd30697 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2774976

Change-Id: Iea3ff52c8c300b083c2de5b2ecf45856ae49ba96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-06 07:51:54 +00:00
Xin Li
7fabb8cee6 Merge Android 14
Bug: 298295554
Merged-In: I48441749de4eb1de90ce5a307b1d47ae3cb9592d
Change-Id: Ica95e66a8aaacda0452f0025b73835b63855f30a
2023-10-05 15:33:38 -07:00
Wilson Sung
fb1d860be3 Merge "Update SELinux error" into main 2023-10-05 02:17:39 +00:00
Wilson Sung
15261ed885 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 303391666
Bug: 303391687
Bug: 301948771
Change-Id: I16e38ca15d7a9995f7922b9c3be6a6f2f2238c2a
2023-10-04 11:53:34 +00:00
Will McVicker
f0047396de Move i2c-cs40l26a to gs101-sepolicy
The i2c-7/7-0043 label is shared with both i2c-7/i2c-cs40l25a and
i2c-7/i2c-cs40l26a nodes. To make it clear that these all are related,
let's move i2c-7/i2c-cs40l26a to gs101-sepolicy and have all the gs101
vibrator policy labels together.

Bug: 302549624
Bug: 291606723
Test: Verify i2c nodes on r4
Fixes: ccdd975a88d0 ("Update the cs40l26a i2c device node sepolicy labeling")
Change-Id: I2950a2c064e31e300d07f124cf1a7bfc00ae58c3
2023-09-29 09:21:48 -07:00
Will McVicker
d17c49fd0a Update the i2c device node sepolicy labeling
This change needs to be merged with the corresponding kernel change that
sets the i2c bus aliases correctly to match the existing v5.10 bus
probe ordering.

To verify the sepolicy labeling doesn't change, run the below commands
and diff the stdout on builds with and without the changes. For extra
credit, verify the nodes are labeled the same when upgrading the kernel
to v6.1 (with the correct i2c aliases to match the existing policy):

  acpm_bus_array=("acpm_mfd_bus@17500000" "acpm_mfd_bus@17510000")
  for bus in ${acpm_bus_array[@]}; do
    adb shell ls -ZR /sys/devices/platform/${bus}/i2c-*;
  done

  bus_array=("10960000" "10970000" "10d50000" "10900000")
  for bus in ${bus_array[@]}; do
    adb shell ls -ZR /sys/devices/platform/${bus}.hsi2c/i2c-*;
  done

Test: verify on r4
Bug: 291606723
Change-Id: Ifbfc53fbeb39a47cda4263fc706f11af6675d90e
2023-09-29 09:21:44 -07:00
Roy Luo
fb8d2f7d73 Revert "Update the i2c device node sepolicy labeling"
Revert submission 24855741-gs101-i2c-bus-fixes

Reason for revert: DroidMonitor-triggered revert due to breakage https://android-build.corp.google.com/builds/quarterdeck?branch=git_main&target=bluejay-trunk_food-userdebug&lkgb=10876543&lkbb=10876988&fkbb=10876587, bug b/302549624.

Reverted changes: /q/submissionid:24855741-gs101-i2c-bus-fixes

Change-Id: Iea8fe5b374609225ab07aa13effcb1d6e8d13468
BUG: 302549624
2023-09-28 18:00:13 +00:00
Will McVicker
421a5fef33 Update the i2c device node sepolicy labeling
This change needs to be merged with the corresponding kernel change that
sets the i2c bus aliases correctly to match the existing v5.10 bus
probe ordering.

To verify the sepolicy labeling doesn't change, run the below commands
and diff the stdout on builds with and without the changes. For extra
credit, verify the nodes are labeled the same when upgrading the kernel
to v6.1 (with the correct i2c aliases to match the existing policy):

  acpm_bus_array=("acpm_mfd_bus@17500000" "acpm_mfd_bus@17510000")
  for bus in ${acpm_bus_array[@]}; do
    adb shell ls -ZR /sys/devices/platform/${bus}/i2c-*;
  done

  bus_array=("10960000" "10970000" "10d50000" "10900000")
  for bus in ${bus_array[@]}; do
    adb shell ls -ZR /sys/devices/platform/${bus}.hsi2c/i2c-*;
  done

Test: verify on r4
Bug: 291606723
Change-Id: Id5b9021cdbf4b9d3578d5e9ee655463ab62dcd12
2023-09-25 13:04:31 -07:00
Treehugger Robot
42fbe059c3 [automerger skipped] Merge "Move coredomain seapp ctx and types to system_ext" into main am: 11a443f3f2 -s ours am: b0da3e388d -s ours am: bc069c8249 -s ours am: 6d0480d3f8 -s ours am: 2787c32dcc -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: I533006b40e96b2d1d7cc8bff0591e2c33e0542e0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 08:59:52 +00:00
Inseob Kim
9446a9c3dc [automerger skipped] Move coredomain seapp ctx and types to system_ext am: 502fd30697 -s ours am: 6b26ff4db7 -s ours am: 95d726a7c1 -s ours am: 0917c71c70 -s ours am: 74e4bbaaff -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: I0b8d04a7cd046a7fcd76d2fd06345922aa530299
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 08:59:49 +00:00
Treehugger Robot
2787c32dcc [automerger skipped] Merge "Move coredomain seapp ctx and types to system_ext" into main am: 11a443f3f2 -s ours am: b0da3e388d -s ours am: bc069c8249 -s ours am: 6d0480d3f8 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: I40a235b0baaf9b4ebc1076a7dd5882a00e1538ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 07:55:31 +00:00
Inseob Kim
74e4bbaaff [automerger skipped] Move coredomain seapp ctx and types to system_ext am: 502fd30697 -s ours am: 6b26ff4db7 -s ours am: 95d726a7c1 -s ours am: 0917c71c70 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: I1a06945bf1b20abf63cbefc425e823acc242810e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 07:55:28 +00:00
Treehugger Robot
6d0480d3f8 [automerger skipped] Merge "Move coredomain seapp ctx and types to system_ext" into main am: 11a443f3f2 -s ours am: b0da3e388d -s ours am: bc069c8249 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: I8fbbaacca0bfac26c62a0066dab8ba9c5e975a8f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 07:15:12 +00:00
Inseob Kim
0917c71c70 [automerger skipped] Move coredomain seapp ctx and types to system_ext am: 502fd30697 -s ours am: 6b26ff4db7 -s ours am: 95d726a7c1 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: Iac1344cac7c018817540e5a8772b68b24db9c6ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 07:15:09 +00:00
Treehugger Robot
bc069c8249 [automerger skipped] Merge "Move coredomain seapp ctx and types to system_ext" into main am: 11a443f3f2 -s ours am: b0da3e388d -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: I19d9164d09f38c3c587a3381180887d374953265
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 06:21:40 +00:00
Inseob Kim
95d726a7c1 [automerger skipped] Move coredomain seapp ctx and types to system_ext am: 502fd30697 -s ours am: 6b26ff4db7 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: Ie650e0ecfaf8ab928dfbf624c10f5106a7a7f339
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 06:21:37 +00:00
Treehugger Robot
b0da3e388d [automerger skipped] Merge "Move coredomain seapp ctx and types to system_ext" into main am: 11a443f3f2 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: I401cabee30646852b1b4336631ad9bdac8b3f2ac
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 05:22:02 +00:00
Inseob Kim
6b26ff4db7 [automerger skipped] Move coredomain seapp ctx and types to system_ext am: 502fd30697 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 3770a8a19c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752329

Change-Id: Ic15f340b025047af3342514397c8c14eeedd8200
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-18 05:21:59 +00:00
Treehugger Robot
11a443f3f2 Merge "Move coredomain seapp ctx and types to system_ext" into main 2023-09-18 04:08:10 +00:00
Wilson Sung
9bdad3e45b Merge changes from topic "b299029620_cleanup" into main
* changes:
  Relocate common tracking denial entries
  Remove obsolete entries
2023-09-18 02:54:32 +00:00
Treehugger Robot
8cf8ec71cb [automerger skipped] Merge "Move coredomain seapp ctx and types to system_ext" into aosp-main-future am: a673cc5271 -s ours am: 06786e8b3e -s ours am: f25630c037 -s ours am: 1bc7ede669 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 87b9095bd5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24767591

Change-Id: Ib925fe55dfbc2ba035e80b524deabf7c65f1df68
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 08:24:28 +00:00
Inseob Kim
1ca14e6007 [automerger skipped] Move coredomain seapp ctx and types to system_ext am: 3770a8a19c -s ours am: e953f459c1 -s ours am: 16a4a451d1 -s ours am: 642c085879 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 87b9095bd5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24767591

Change-Id: Id300edccd014901878f73d90d68327ff3cf58940
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 08:24:26 +00:00
Inseob Kim
2ae9a5c97e [automerger skipped] Remove obsolete exo sepolicy am: 57547357d9 am: b31c68397e -s ours am: 5e8a42d95e -s ours am: 512a81413a -s ours am: d517cb3fe3 -s ours
am skip reason: Merged-In If1e70eb34f5225e1df329df31fbc7439c9e4fa4b with SHA-1 7e9c67cf47 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752871

Change-Id: Ib476a8eacbcc8dd8a7930950f098096c6e943d2c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 08:24:15 +00:00
Treehugger Robot
1bc7ede669 [automerger skipped] Merge "Move coredomain seapp ctx and types to system_ext" into aosp-main-future am: a673cc5271 -s ours am: 06786e8b3e -s ours am: f25630c037 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 87b9095bd5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24767591

Change-Id: I6a0ba0c44c3193bb18a64d2412fce5109b29657b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 07:20:32 +00:00
Inseob Kim
642c085879 [automerger skipped] Move coredomain seapp ctx and types to system_ext am: 3770a8a19c -s ours am: e953f459c1 -s ours am: 16a4a451d1 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 87b9095bd5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24767591

Change-Id: Iba3118e9dab91a7bc02441939fcba6f70769db30
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 07:20:29 +00:00
Inseob Kim
d517cb3fe3 [automerger skipped] Remove obsolete exo sepolicy am: 57547357d9 am: b31c68397e -s ours am: 5e8a42d95e -s ours am: 512a81413a -s ours
am skip reason: Merged-In If1e70eb34f5225e1df329df31fbc7439c9e4fa4b with SHA-1 7e9c67cf47 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752871

Change-Id: I7331a25c608e501c2adc0735501fc744945cc7ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 07:20:16 +00:00
Treehugger Robot
f25630c037 [automerger skipped] Merge "Move coredomain seapp ctx and types to system_ext" into aosp-main-future am: a673cc5271 -s ours am: 06786e8b3e -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 87b9095bd5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24767591

Change-Id: I447ac8713fe66e1ec27e215d08b8d1a33b53c192
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 06:39:10 +00:00
Inseob Kim
16a4a451d1 [automerger skipped] Move coredomain seapp ctx and types to system_ext am: 3770a8a19c -s ours am: e953f459c1 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 87b9095bd5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24767591

Change-Id: I22f5857afa110670b9f81adf9137e0b8f5ef83dc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 06:39:08 +00:00
Inseob Kim
512a81413a [automerger skipped] Remove obsolete exo sepolicy am: 57547357d9 am: b31c68397e -s ours am: 5e8a42d95e -s ours
am skip reason: Merged-In If1e70eb34f5225e1df329df31fbc7439c9e4fa4b with SHA-1 7e9c67cf47 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752871

Change-Id: I502937a979af3982b1cd1db75b83a2cbf086147e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 06:38:59 +00:00
Treehugger Robot
06786e8b3e [automerger skipped] Merge "Move coredomain seapp ctx and types to system_ext" into aosp-main-future am: a673cc5271 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 87b9095bd5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24767591

Change-Id: Id0a493c6ea2d3169a7b979b5637c8e94d4faded3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 05:48:08 +00:00
Inseob Kim
e953f459c1 [automerger skipped] Move coredomain seapp ctx and types to system_ext am: 3770a8a19c -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 87b9095bd5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24767591

Change-Id: I2a9a6e41714506a6c9161b4af258cf354d42235e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 05:48:05 +00:00
Inseob Kim
5e8a42d95e [automerger skipped] Remove obsolete exo sepolicy am: 57547357d9 am: b31c68397e -s ours
am skip reason: Merged-In If1e70eb34f5225e1df329df31fbc7439c9e4fa4b with SHA-1 7e9c67cf47 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752871

Change-Id: Ia042c1308f41f855be6ace07fc24c8d032cb02df
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 05:47:50 +00:00
Treehugger Robot
a673cc5271 Merge "Move coredomain seapp ctx and types to system_ext" into aosp-main-future 2023-09-15 05:32:49 +00:00
Inseob Kim
b31c68397e Remove obsolete exo sepolicy am: 57547357d9
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2752871

Change-Id: Iebeedf242e85dab5c85cdf8161ca79938ce88686
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 04:49:16 +00:00
Inseob Kim
3770a8a19c Move coredomain seapp ctx and types to system_ext
Coredomain apps shouldn't be labeled with vendor sepolicy, due to Treble
violation.

Bug: 280547417
Test: build bluejay and boot test
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:fb3a11636618dbb044e567716ff2984b25117bc5)
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:87b9095bd5d9811c0b37887e980b057453894dea)
Merged-In: I48441749de4eb1de90ce5a307b1d47ae3cb9592d
Change-Id: I48441749de4eb1de90ce5a307b1d47ae3cb9592d
2023-09-15 04:04:15 +00:00
Inseob Kim
57547357d9 Remove obsolete exo sepolicy
They are not used anymore.

Bug: 296512193
Test: m selinux_policy
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:567ce923337337ccbba3a6d81ee437571c9025ea)
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:7e9c67cf47f6ef5d7f8e1f0244c4c0eb01079604)
Merged-In: If1e70eb34f5225e1df329df31fbc7439c9e4fa4b
Change-Id: If1e70eb34f5225e1df329df31fbc7439c9e4fa4b
2023-09-15 03:55:19 +00:00
Inseob Kim
502fd30697 Move coredomain seapp ctx and types to system_ext
Coredomain apps shouldn't be labeled with vendor sepolicy, due to Treble
violation.

Bug: 280547417
Test: build bluejay and boot test
Merged-In: I48441749de4eb1de90ce5a307b1d47ae3cb9592d
Change-Id: I48441749de4eb1de90ce5a307b1d47ae3cb9592d
2023-09-15 12:53:05 +09:00
Desmond Huang
8e7549987f Relocate common tracking denial entries
Bug: 299029620
Change-Id: I57a75de7e0f0c5f31f2e8b0c5c9d60c3ebdb8844
2023-09-14 14:16:52 +08:00
Desmond Huang
2196ba412e Remove obsolete entries
Bug: 299029620
Change-Id: I8cb8d78099656d515feca434073a367908d5fddd
2023-09-14 14:15:38 +08:00
Treehugger Robot
84dc2ac6b2 [automerger skipped] Merge "Remove obsolete exo sepolicy" into udc-dev-plus-aosp am: 4ac31a5d2f am: ee40a8ae62 am: 4128eee32d -s ours
am skip reason: Merged-In If1e70eb34f5225e1df329df31fbc7439c9e4fa4b with SHA-1 567ce92333 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24671970

Change-Id: Iacb0ee80d2daddd733c13eaf2311d327d26fd5d9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-06 06:31:14 +00:00
Treehugger Robot
4128eee32d Merge "Remove obsolete exo sepolicy" into udc-dev-plus-aosp am: 4ac31a5d2f am: ee40a8ae62
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24671970

Change-Id: I16200667923c8c48a356acbdeac0a0e17bffce86
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-06 05:34:56 +00:00
Treehugger Robot
ee40a8ae62 Merge "Remove obsolete exo sepolicy" into udc-dev-plus-aosp am: 4ac31a5d2f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24671970

Change-Id: I31c6b5d5386bf9e680bd332437a04553bb84ae1b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-06 04:59:27 +00:00
Inseob Kim
b21cfb2fc4 [automerger skipped] Move coredomain seapp ctx and types to system_ext am: 87b9095bd5 am: 9054831c23 am: e63ba7a5f3 -s ours
am skip reason: Merged-In I48441749de4eb1de90ce5a307b1d47ae3cb9592d with SHA-1 fb3a116366 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24670068

Change-Id: I7a93fa9642253e2a5a610010efc44f1af00dffdd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-06 04:57:33 +00:00
Treehugger Robot
4ac31a5d2f Merge "Remove obsolete exo sepolicy" into udc-dev-plus-aosp 2023-09-06 04:26:16 +00:00
Inseob Kim
e63ba7a5f3 Move coredomain seapp ctx and types to system_ext am: 87b9095bd5 am: 9054831c23
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24670068

Change-Id: I8195e9acf72b87fcf44d6fe877fb664ff22c7353
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-06 04:01:57 +00:00
Inseob Kim
9054831c23 Move coredomain seapp ctx and types to system_ext am: 87b9095bd5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24670068

Change-Id: I7c20f0b9b425fa4fd53846681842c67eeee02a6d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-06 03:24:58 +00:00
Inseob Kim
7e9c67cf47 Remove obsolete exo sepolicy
They are not used anymore.

Bug: 296512193
Test: m selinux_policy
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:567ce923337337ccbba3a6d81ee437571c9025ea)
Merged-In: If1e70eb34f5225e1df329df31fbc7439c9e4fa4b
Change-Id: If1e70eb34f5225e1df329df31fbc7439c9e4fa4b
2023-09-06 01:26:29 +00:00
Inseob Kim
a76a900f7d Merge "Remove obsolete exo sepolicy" into main 2023-09-06 01:22:59 +00:00
Inseob Kim
567ce92333 Remove obsolete exo sepolicy
They are not used anymore.

Bug: 296512193
Test: m selinux_policy
Change-Id: If1e70eb34f5225e1df329df31fbc7439c9e4fa4b
2023-09-05 23:32:50 +00:00
Inseob Kim
87b9095bd5 Move coredomain seapp ctx and types to system_ext
Coredomain apps shouldn't be labeled with vendor sepolicy, due to Treble
violation.

Bug: 280547417
Test: build bluejay and boot test
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:fb3a11636618dbb044e567716ff2984b25117bc5)
Merged-In: I48441749de4eb1de90ce5a307b1d47ae3cb9592d
Change-Id: I48441749de4eb1de90ce5a307b1d47ae3cb9592d
2023-09-05 23:28:04 +00:00
Treehugger Robot
a4ceb907b6 Merge "Move coredomain seapp ctx and types to system_ext" into main 2023-09-05 23:21:35 +00:00
Inseob Kim
fb3a116366 Move coredomain seapp ctx and types to system_ext
Coredomain apps shouldn't be labeled with vendor sepolicy, due to Treble
violation.

Bug: 280547417
Test: build bluejay and boot test
Change-Id: I48441749de4eb1de90ce5a307b1d47ae3cb9592d
2023-09-05 04:20:00 +00:00
yixuanjiang
a785706208 Label AoC wakeup for system suspend
Bug: 291237382
Change-Id: Iddcee44cbe921b590a240c75504a0a44634a244d
Signed-off-by: yixuanjiang <yixuanjiang@google.com>
2023-09-05 03:01:07 +00:00
Wilson Sung
92fb9538a2 [automerger skipped] Update SELinux error am: 115679f211 -s ours am: c47385ddb9 -s ours am: 3bea84ee07 -s ours am: c2fc36922e -s ours
am skip reason: Merged-In Ieecf2602f481d8c45d6b213aff8c390c3a32d68c with SHA-1 38d9c79eb5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24642755

Change-Id: I22c5401a676d9d1d4afdf15c24f00b25fb59d1f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-04 14:08:26 +00:00
Wilson Sung
c2fc36922e [automerger skipped] Update SELinux error am: 115679f211 -s ours am: c47385ddb9 -s ours am: 3bea84ee07 -s ours
am skip reason: Merged-In Ieecf2602f481d8c45d6b213aff8c390c3a32d68c with SHA-1 38d9c79eb5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24642755

Change-Id: I91102eca1613ab8db0da3bf49ce7abca79851715
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-04 13:06:01 +00:00
Wilson Sung
3bea84ee07 [automerger skipped] Update SELinux error am: 115679f211 -s ours am: c47385ddb9 -s ours
am skip reason: Merged-In Ieecf2602f481d8c45d6b213aff8c390c3a32d68c with SHA-1 38d9c79eb5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24642755

Change-Id: I4113819d13365f4e085434c0319f46bef66f73bd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-04 12:27:24 +00:00
Wilson Sung
c47385ddb9 [automerger skipped] Update SELinux error am: 115679f211 -s ours
am skip reason: Merged-In Ieecf2602f481d8c45d6b213aff8c390c3a32d68c with SHA-1 38d9c79eb5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24642755

Change-Id: Ie509b6f303efe1e1b60c3372beb4b0f8ca89fb26
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-04 11:37:57 +00:00
Wilson Sung
115679f211 Update SELinux error
Bug: 290766628
Merged-In: Ieecf2602f481d8c45d6b213aff8c390c3a32d68c
Change-Id: I13d2fb464c80b0be2d6524a58b441fcd8eaaa830
2023-09-04 10:04:23 +00:00
Xin Li
124580161a [automerger skipped] Merge Android U (ab/10368041) am: b9b53f9a9e -s ours am: 38d9c79eb5 -s ours am: a8467ba3cc -s ours am: f951dab7e7 -s ours
am skip reason: Merged-In I7a161792e74b2b85ad4ecd195c1660f1425a73a6 with SHA-1 c570a37dae is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24182022

Change-Id: If915580ea4e68e2fc5cb655baef7524fcd67d683
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-29 20:37:51 +00:00
Xin Li
f951dab7e7 [automerger skipped] Merge Android U (ab/10368041) am: b9b53f9a9e -s ours am: 38d9c79eb5 -s ours am: a8467ba3cc -s ours
am skip reason: Merged-In I7a161792e74b2b85ad4ecd195c1660f1425a73a6 with SHA-1 c570a37dae is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24182022

Change-Id: I40b54add2338d3dbcaaecfe8428a5df3572829ab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-29 01:10:46 +00:00
Xin Li
a8467ba3cc [automerger skipped] Merge Android U (ab/10368041) am: b9b53f9a9e -s ours am: 38d9c79eb5 -s ours
am skip reason: Merged-In I7a161792e74b2b85ad4ecd195c1660f1425a73a6 with SHA-1 c570a37dae is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24182022

Change-Id: Ia59cf3d091da3837eddf72bc997688fdeee43238
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-29 00:35:02 +00:00
Xin Li
38d9c79eb5 [automerger skipped] Merge Android U (ab/10368041) am: b9b53f9a9e -s ours
am skip reason: Merged-In I7a161792e74b2b85ad4ecd195c1660f1425a73a6 with SHA-1 c570a37dae is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24182022

Change-Id: Ieecf2602f481d8c45d6b213aff8c390c3a32d68c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-28 23:59:02 +00:00
Roy Luo
9a0d54fd3f Merge "Support monitoring USB sysfs attributes in USB HAL" into main 2023-08-23 19:38:59 +00:00
Xin Li
b9b53f9a9e Merge Android U (ab/10368041)
Bug: 291102124
Merged-In: I7a161792e74b2b85ad4ecd195c1660f1425a73a6
Change-Id: Id7936dbe18bc7872707820b145641ee3bc2ed3f6
2023-08-22 11:36:53 -07:00
Inseob Kim
174f85495b Start tracking vendor seapp coredomain violations am: 80c26d2524 am: 4776b160b0 am: 2f05bf9770 am: e95838186f am: 9fb617f166
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2718734

Change-Id: I9ebf041efa7bbdacf600f613f0d34b9adba72d2e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-22 11:23:51 +00:00
Inseob Kim
9fb617f166 Start tracking vendor seapp coredomain violations am: 80c26d2524 am: 4776b160b0 am: 2f05bf9770 am: e95838186f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2718734

Change-Id: I97e92b25af5b51af0df757474f4a4205905fbd61
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-22 10:01:01 +00:00
Inseob Kim
e95838186f Start tracking vendor seapp coredomain violations am: 80c26d2524 am: 4776b160b0 am: 2f05bf9770
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2718734

Change-Id: I4bc938353f345b1d97e22c4017757e1f01125424
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-22 08:58:08 +00:00
Inseob Kim
2f05bf9770 Start tracking vendor seapp coredomain violations am: 80c26d2524 am: 4776b160b0
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2718734

Change-Id: Id14f253389319094ac9524e20645e674802fdcc9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-22 07:45:50 +00:00
Inseob Kim
4776b160b0 Start tracking vendor seapp coredomain violations am: 80c26d2524
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2718734

Change-Id: I77ddfcebb08ebd00e660415ef4065adfbd05e83c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-22 06:31:40 +00:00
Inseob Kim
80c26d2524 Start tracking vendor seapp coredomain violations
As part of Treble, enforce that vendor's seapp_contexts can't label apps
using coredomains. Apps installed to system/system_ext/product should be
labeled with platform side sepolicy.

This change marks violating domains that need to be fixed.

Bug: 296512193
Test: build oriole and see build log
Change-Id: I7d5b91014362a64f3d66b3913d4d1bc773d922c8
2023-08-21 11:02:03 +00:00
Renato Grottesi
bbef712e84 Cleanup unused ArmNN settings.
Test: pre-submit
Bug: 294463729
Change-Id: I1008e2c14ae8d9c7950e5d6add49372fa2b42ce2
2023-08-17 08:57:45 +00:00
Roy Luo
40bf4a249d Support monitoring USB sysfs attributes in USB HAL
Grant access to USB sysfs attributes.

Bug: 285199434
Test: no audit log in logcat after command execution
Change-Id: Ic9c61cb5153e06eb9db15f4451a4e6769d688431
2023-08-16 19:04:51 +00:00
Allie Liu
f2da1ce009 [automerger skipped] Merge "[GS101][eSIM] Add system properties rule" into main am: 2556ac667e am: 3322a64145 -s ours am: 70ac3281ad -s ours am: 55813944df -s ours am: 1527d2f5e7 -s ours
am skip reason: Merged-In I6caed744d2bba7882f80f8ace229f6c4b4133c65 with SHA-1 b6d74a5196 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2655121

Change-Id: I6220621b9d076188ad92af44fcf864dea05e4755
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 08:24:25 +00:00
Allie Liu
98234d6f93 Merge "vendor_init: add esim_prop" into main am: 34b4b35bd6 am: c0aae3eef6 am: cda98bf194 am: 57f6fcf272 am: 420eaffc9b
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2586610

Change-Id: I9861b3ae09c5480b9f1c891164c0642bf3572383
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 08:24:23 +00:00
Allie Liu
1527d2f5e7 [automerger skipped] Merge "[GS101][eSIM] Add system properties rule" into main am: 2556ac667e am: 3322a64145 -s ours am: 70ac3281ad -s ours am: 55813944df -s ours
am skip reason: Merged-In I6caed744d2bba7882f80f8ace229f6c4b4133c65 with SHA-1 b6d74a5196 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2655121

Change-Id: I678549c77f60a3207be1140b536e405a9d818be2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 07:41:55 +00:00
Allie Liu
420eaffc9b Merge "vendor_init: add esim_prop" into main am: 34b4b35bd6 am: c0aae3eef6 am: cda98bf194 am: 57f6fcf272
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2586610

Change-Id: Ie47a5401f1f5b41f43f9f2a49a5a2bf85d03d685
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 07:41:53 +00:00
Allie Liu
55813944df [automerger skipped] Merge "[GS101][eSIM] Add system properties rule" into main am: 2556ac667e am: 3322a64145 -s ours am: 70ac3281ad -s ours
am skip reason: Merged-In I6caed744d2bba7882f80f8ace229f6c4b4133c65 with SHA-1 b6d74a5196 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2655121

Change-Id: Id5140ab1edb9f7d9bab4b47b4cf879ab74e80ac4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 07:00:49 +00:00
Allie Liu
57f6fcf272 Merge "vendor_init: add esim_prop" into main am: 34b4b35bd6 am: c0aae3eef6 am: cda98bf194
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2586610

Change-Id: If42625863e6aeffa57a5cb2aac8df0dca604bfc3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 07:00:46 +00:00
Allie Liu
70ac3281ad [automerger skipped] Merge "[GS101][eSIM] Add system properties rule" into main am: 2556ac667e am: 3322a64145 -s ours
am skip reason: Merged-In I6caed744d2bba7882f80f8ace229f6c4b4133c65 with SHA-1 b6d74a5196 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2655121

Change-Id: I96496073244a6b3abc7ea80734f84298832d85b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 06:18:40 +00:00
Allie Liu
cda98bf194 Merge "vendor_init: add esim_prop" into main am: 34b4b35bd6 am: c0aae3eef6
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2586610

Change-Id: I8e4f91eac1a0e0b5bc2b8929d0f05f28e4d20805
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 06:18:38 +00:00
Allie Liu
3322a64145 Merge "[GS101][eSIM] Add system properties rule" into main am: 2556ac667e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2655121

Change-Id: I89bfee8fe874e4f097a2126885aa020428c7379f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 05:39:35 +00:00
Allie Liu
c0aae3eef6 Merge "vendor_init: add esim_prop" into main am: 34b4b35bd6
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2586610

Change-Id: I6b0b19c10cd4be3134bfceafe6d26a7b464768c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 05:39:33 +00:00
Allie Liu
2556ac667e Merge "[GS101][eSIM] Add system properties rule" into main 2023-08-01 04:51:04 +00:00
Allie Liu
34b4b35bd6 Merge "vendor_init: add esim_prop" into main 2023-08-01 04:51:04 +00:00
Inseob Kim
fd002a1434 Revert "Move coredomain seapp contexts to system_ext" am: 53081f7032 am: 6e005fc103 am: 19c7357d6e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24239945

Change-Id: I1eca26a0baa2284c683bedfeafa9e5fc2f98c733
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 10:07:09 +00:00
Inseob Kim
19c7357d6e Revert "Move coredomain seapp contexts to system_ext" am: 53081f7032 am: 6e005fc103
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24239945

Change-Id: I111315f16d13045b16c7805a910c296066ab64cf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 08:16:00 +00:00
Inseob Kim
6e005fc103 Revert "Move coredomain seapp contexts to system_ext" am: 53081f7032
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24239945

Change-Id: Ie4afa0ec15321b4e7f4b0c005b8bb3b0a86ef202
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 07:36:39 +00:00
Inseob Kim
53081f7032 Revert "Move coredomain seapp contexts to system_ext"
This reverts commit d9478e1c21.

Reason for revert: breaking build. b/293539702

Change-Id: Ie8a66971fcf249c9d08b4898e24b962d6aaf3ce6
2023-07-28 06:02:59 +00:00
Treehugger Robot
d84cae41c3 Merge "SELinux: fix sysfs_wlc avc denials" into main 2023-07-28 05:43:55 +00:00
Inseob Kim
f40160e6e8 Move coredomain seapp contexts to system_ext am: d9478e1c21 am: 48c0a03e64 am: 7abc405cef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24157027

Change-Id: Iddeb8cc4a317895ad50616766419df25d06f32e1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 05:17:36 +00:00
Inseob Kim
7abc405cef Move coredomain seapp contexts to system_ext am: d9478e1c21 am: 48c0a03e64
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24157027

Change-Id: I3ce5c18e0019332811a00b1c3856518b987bbf90
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 04:31:43 +00:00
Ken Yang
694fd0935a SELinux: fix sysfs_wlc avc denials
Bug: 291541479
Change-Id: I40b0cdea1681a8de24dede4aca830097812c736a
Signed-off-by: Ken Yang <yangken@google.com>
2023-07-28 03:47:28 +00:00
Inseob Kim
48c0a03e64 Move coredomain seapp contexts to system_ext am: d9478e1c21
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24157027

Change-Id: I8efc8ae3f4cf28091c8736e77ebe68f6cb95e6ab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 03:05:38 +00:00
Renato Grottesi
aa739870b8 [automerger skipped] Merge "Remove settings for old ArmNN HIDL backend" into udc-d1-dev am: 5ebe73d9bc am: 0bcd3c1eca am: 3d02c8abfb -s ours
am skip reason: Merged-In Ib72308547f08bc21a5a205ec158e297cb8fe9083 with SHA-1 c359685402 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24058484

Change-Id: I873ddfe88c3e105e26dce69442f019fe80edf9bb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 13:11:00 +00:00
Renato Grottesi
3d02c8abfb Merge "Remove settings for old ArmNN HIDL backend" into udc-d1-dev am: 5ebe73d9bc am: 0bcd3c1eca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24058484

Change-Id: I452516b2bb5dfe21f4e253d1ff4df269eeeac08a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 12:53:01 +00:00
Renato Grottesi
a2c30724fa [automerger skipped] Merge "Remove settings for old ArmNN HIDL backend" into udc-d1-dev am: 5ebe73d9bc am: 2d8db152fe am: 7688f7b699 -s ours
am skip reason: Merged-In Ib72308547f08bc21a5a205ec158e297cb8fe9083 with SHA-1 c359685402 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24058484

Change-Id: I5b4adfd4310dcb1ec35d15128306781a7c22b37f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-25 20:04:13 +00:00
Inseob Kim
d9478e1c21 Move coredomain seapp contexts to system_ext
Coredomain apps shouldn't be labeled with vendor sepolicy, due to Treble
violation.

Bug: 280547417
Test: TH
Change-Id: I68d6564ca9e5ba77d3562b6c73b32cd1713001f7
2023-07-21 15:07:36 +09:00
Renato Grottesi
7688f7b699 Merge "Remove settings for old ArmNN HIDL backend" into udc-d1-dev am: 5ebe73d9bc am: 2d8db152fe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24058484

Change-Id: I1a5052469688acdfd3f45037282dc14f55df9f2a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-20 08:08:31 +00:00
Renato Grottesi
2d8db152fe Merge "Remove settings for old ArmNN HIDL backend" into udc-d1-dev am: 5ebe73d9bc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24058484

Change-Id: I67d3bb58df0173a0350d8a42dec600160adc5f20
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-20 07:28:18 +00:00
Renato Grottesi
0bcd3c1eca Merge "Remove settings for old ArmNN HIDL backend" into udc-d1-dev am: 5ebe73d9bc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24058484

Change-Id: Iede288fab1997d06bb89caf35b32b5cdad8de7d1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-20 07:26:35 +00:00
Renato Grottesi
5ebe73d9bc Merge "Remove settings for old ArmNN HIDL backend" into udc-d1-dev 2023-07-20 06:37:17 +00:00
Kiyoung Kim
85b034e0de Move file context on vendor libdmabufheap to system/sepolicy am: e2aaff8d5e am: 3ed876e3d8 am: dd034df5b0 am: 8b2a99dadb am: 6062907c94
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2666615

Change-Id: I0a017beb912199681cd36417c9d826af66c84afd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-20 05:12:57 +00:00
Kiyoung Kim
6062907c94 Move file context on vendor libdmabufheap to system/sepolicy am: e2aaff8d5e am: 3ed876e3d8 am: dd034df5b0 am: 8b2a99dadb
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2666615

Change-Id: I86ee4490ad1ddd3d8fdd8404d3d39b4f11c0298f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-20 04:30:11 +00:00
Kiyoung Kim
8b2a99dadb Move file context on vendor libdmabufheap to system/sepolicy am: e2aaff8d5e am: 3ed876e3d8 am: dd034df5b0
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2666615

Change-Id: I032cf2f72a83b33e0674a0a85b6cd0e1a0901599
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-20 03:45:41 +00:00
Kiyoung Kim
dd034df5b0 Move file context on vendor libdmabufheap to system/sepolicy am: e2aaff8d5e am: 3ed876e3d8
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2666615

Change-Id: I5b05d5a3855f153d54e5d0bb929003dad4e021cc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-20 03:00:55 +00:00
Kiyoung Kim
3ed876e3d8 Move file context on vendor libdmabufheap to system/sepolicy am: e2aaff8d5e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2666615

Change-Id: I76a7b11ee9612403efc80141ae5844bcd80b5c02
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-20 02:17:45 +00:00
Kiyoung Kim
e2aaff8d5e Move file context on vendor libdmabufheap to system/sepolicy
libdmabufheap is former VNDK-SP library, and will be marked as sp-hal
sepolicy label by default. Current definition on gs-101 creates conflict
with generic sepolicy update. This change removes label on libdmabufheap
from gs101 and move it to generic sepolicy.

Bug: 291673098
Test: N/A
Change-Id: Ida23dc71e9794aa86e8b50ed927dc6b5fa57ea91
2023-07-20 09:53:15 +09:00
Utku Utkan
19e79acba9 Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices" am: e10372e111 am: 2c9f86f98e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24124265

Change-Id: I60fc2bc79bf2f4785e2f4b45ef78e8b85b1a5a03
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 19:58:33 +00:00
Utku Utkan
2c9f86f98e Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices" am: e10372e111
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24124265

Change-Id: I66ad311892e4bc30737916af984dc43dacf2dc1e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 18:49:46 +00:00
Utku Utkan
e10372e111 Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices"
Revert submission 24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL

Reason for revert: Relanding the original topic after copying the certificates under `device/google` for `without-vendor` branches

Reverted changes: /q/submissionid:24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL

Bug: 287069860
Test: m && flashall
Change-Id: Icf52453dc2a0a4d60958b8fe76509f385ac6fae2
2023-07-18 22:16:25 -07:00
Inseob Kim
cdfcf7c0c2 Revert "Introduce CameraServices seinfo tag for PixelCameraServices" am: 722322664c am: 255748199d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24122568

Change-Id: I28619e3f7896dbbfd48724f0efaa80c62f7bda2e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 03:33:46 +00:00
Inseob Kim
255748199d Revert "Introduce CameraServices seinfo tag for PixelCameraServices" am: 722322664c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24122568

Change-Id: Ic2923e174044b28bd14b8ae3e0a1c4831e9d9f33
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 02:50:44 +00:00
Inseob Kim
722322664c Revert "Introduce CameraServices seinfo tag for PixelCameraServices"
Revert submission 24056607-pixel-camera-services-extensions-sepolicy

Reason for revert: build breakage on git_main-without-vendor

Reverted changes: /q/submissionid:24056607-pixel-camera-services-extensions-sepolicy

Change-Id: I0654c7c4ef296b4594db86cc8af5a73627e2b7d7
2023-07-19 01:15:33 +00:00
Utku Utkan
cbf99979a0 Introduce CameraServices seinfo tag for PixelCameraServices am: 3c8d114e48 am: 21564d9f28
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24030377

Change-Id: Id38be1e34f19a6e72e03881fcccf1391e8a1fbb7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-18 22:35:36 +00:00
Utku Utkan
21564d9f28 Introduce CameraServices seinfo tag for PixelCameraServices am: 3c8d114e48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24030377

Change-Id: I4e2fd96abb5e7485f5057d5eb86ec64f1063aa34
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-18 21:49:07 +00:00
Utku Utkan
3c8d114e48 Introduce CameraServices seinfo tag for PixelCameraServices
Bug: 287069860
Test: m && flashall && check against 'avc: denied' errors
Change-Id: I9e9d3914499550d9e9b6c8ea7c4a7cabd9e9a5dd
2023-07-18 12:18:34 -07:00
Wilson Sung
b4c6d4bec4 Update SELinux error am: 6efcea55dc am: 0457dcec4d am: 9a4cee8448 am: 59d4eb3582
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24079205

Change-Id: Ie55e1b51ed38b1f0a89cb7fe15861bb2f184c599
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 16:25:56 +00:00
Wilson Sung
6a4dfe0f89 Update SELinux error am: 6efcea55dc am: e936ba27a3 am: 7efec0c27b am: 408cc8c5f6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24079205

Change-Id: If1ed5d0521dfac54b7afa5e407f5497514aef840
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 16:25:47 +00:00
Wilson Sung
7abc43e9eb Update SELinux error am: 6efcea55dc am: 0457dcec4d am: 7b5f702649 am: 2554088098
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24079205

Change-Id: I81c0c634def99836f69e96b16b58bf55c0f927de
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 16:25:36 +00:00
Wilson Sung
59d4eb3582 Update SELinux error am: 6efcea55dc am: 0457dcec4d am: 9a4cee8448
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24079205

Change-Id: I81a8e76dafce343ecea5ba38f4bcd530a19da184
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 16:09:06 +00:00
Wilson Sung
408cc8c5f6 Update SELinux error am: 6efcea55dc am: e936ba27a3 am: 7efec0c27b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24079205

Change-Id: I53e592202ea6de209fc81beafef3b23e0852401b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 15:41:55 +00:00
Wilson Sung
2554088098 Update SELinux error am: 6efcea55dc am: 0457dcec4d am: 7b5f702649
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24079205

Change-Id: Id259a15bf88b20cca0fac3b2a78b0272adfb1dc4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 15:41:45 +00:00
Wilson Sung
b2f11d8452 Update SELinux error am: 6efcea55dc am: b3aa586262
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24079205

Change-Id: I85f01b49632347c913903201da7ddfeb2fbdd2f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 15:24:19 +00:00
Wilson Sung
7efec0c27b Update SELinux error am: 6efcea55dc am: e936ba27a3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24079205

Change-Id: Iabbb80b975c85a4047c2e191a666fdd7d589263c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 15:23:42 +00:00
Wilson Sung
9a4cee8448 Update SELinux error am: 6efcea55dc am: 0457dcec4d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24079205

Change-Id: I85d4c7b1123e16cd394cb79188cc14ee785128e2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 15:23:09 +00:00
Wilson Sung
7b5f702649 Update SELinux error am: 6efcea55dc am: 0457dcec4d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24079205

Change-Id: Ic255722d84e6ed62a1c123a720daa6bb0f9e8876
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 15:18:50 +00:00
Wilson Sung
b3aa586262 Update SELinux error am: 6efcea55dc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24079205

Change-Id: Ib984b6566a0b995568b7fb89b23301f58177f27b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 14:37:06 +00:00
Wilson Sung
0457dcec4d Update SELinux error am: 6efcea55dc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24079205

Change-Id: I10ce0072ec24ce79d565fbe485461325acd201df
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 14:37:05 +00:00
Wilson Sung
e936ba27a3 Update SELinux error am: 6efcea55dc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/24079205

Change-Id: I111facd6d86d7e0a912ceca7df32bdadf413bc9c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 14:32:33 +00:00
Wilson Sung
aadbdd8369 Merge "Update SELinux error"
Test: SELinuxUncheckedDenialBootTest
Bug: 291237382
Change-Id: Ie3f2e61a1103edcaeffb985a926de1480f2ea7ef
2023-07-17 11:13:24 +08:00
Wilson Sung
6efcea55dc Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 291237382
Change-Id: Ie3f2e61a1103edcaeffb985a926de1480f2ea7ef
2023-07-14 20:16:05 +08:00
Renato Grottesi
ddefd11361 Remove settings for old ArmNN HIDL backend
Compile ArmNN shim over the support library.

Remove SELinux permissions and settings for the old HIDL backend.
The AIDL settings will be in the gs-common folder.

Test: Local run of CtsNNAPITestCases
Test: Local run of VtsHalNeuralnetworksTargetTest
Test: Local run of MLTS Benchmark
Bug: 283724775
Merged-In: Ib72308547f08bc21a5a205ec158e297cb8fe9083
Change-Id: Ic75d022824bd62bef48a8b0db80237b1370ac570
2023-07-14 08:59:10 +00:00
Renato Grottesi
c359685402 Revert^2 "Remove settings for old ArmNN HIDL backend"
ba43d8a084

Compile ArmNN shim over the support library.

Remove SELinux permissions and settings for the old HIDL backend.
The new ones will be in the gs-common folder.

Test: Local run of CtsNNAPITestCases
Test: Local run of VtsHalNeuralnetworksTargetTest
Test: Local run of MLTS Benchmark
Bug: 283724775
Change-Id: Ib72308547f08bc21a5a205ec158e297cb8fe9083
2023-07-13 09:06:17 +00:00
Android Culprit Assistant
ba43d8a084 Revert "Remove settings for old ArmNN HIDL backend"
This revert was created by Android Culprit Assistant. The culprit was identified in the following culprit search session (http://go/aca-get/123b2665-83ef-4fd0-904d-a0d8c5782db9).

Change-Id: Ia25d50cb9e645e77283edb3540be18781ff58f05
2023-07-12 20:43:54 +00:00
Jinyoung Jeong
801af7e713 [GS101][eSIM] Add system properties rule
Bug: 279988311
Test: https://fusion2.corp.google.com/d517f34a-3242-40b1-adf6-acb6035ff2cb , b/282901698
Change-Id: I6caed744d2bba7882f80f8ace229f6c4b4133c65
Merged-In: I6caed744d2bba7882f80f8ace229f6c4b4133c65
2023-07-12 07:14:26 +00:00
Renato Grottesi
a2a1f80355 Remove settings for old ArmNN HIDL backend
Compile ArmNN shim over the support library.

Remove SELinux permissions and settings for the old HIDL backend.
The new ones will be in the gs-common folder.

Test: Local run of CtsNNAPITestCases
Test: Local run of VtsHalNeuralnetworksTargetTest
Test: Local run of MLTS Benchmark
Bug: 283724775
Change-Id: Ic77de74f1723f314dbfaa0cf948351cefd460b76
2023-07-11 10:59:54 +00:00
Wilson Sung
54da16c0b2 Revert "Update SELinux error" am: 31e0460cba am: 1a71a9f40c am: 18ff46a71b am: dca7a77678
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23875101

Change-Id: I90aec5b1e9de280dfe24bc2931cf5c5ded6d0989
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 05:23:20 +00:00
Wilson Sung
08621dd8c2 Revert "Update SELinux error" am: 31e0460cba am: 25038e3f3f am: fca9db22ba am: affcbd1a34
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23875101

Change-Id: I47447b10fffa5046721e1c84c7e62e7d14e5bd98
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 05:23:08 +00:00
Wilson Sung
ed1119cd42 Revert "Update SELinux error" am: 31e0460cba am: 1a71a9f40c am: 4848fa935f am: 4b13de9be1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23875101

Change-Id: I5384851acd5e0d23c998b3e31b927d5142863e88
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 05:22:43 +00:00
Wilson Sung
dca7a77678 Revert "Update SELinux error" am: 31e0460cba am: 1a71a9f40c am: 18ff46a71b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23875101

Change-Id: I6dbb1cfd0b8193afb1fbac90048950689485de26
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 04:45:43 +00:00
Wilson Sung
affcbd1a34 Revert "Update SELinux error" am: 31e0460cba am: 25038e3f3f am: fca9db22ba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23875101

Change-Id: Ic017c18cb4275f609db0c48ac25beb8dcfd4636b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 04:39:32 +00:00
Wilson Sung
4b13de9be1 Revert "Update SELinux error" am: 31e0460cba am: 1a71a9f40c am: 4848fa935f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23875101

Change-Id: I17947c0d10429598777fab88b2714ed069679cc2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 04:39:23 +00:00
Wilson Sung
b96b36f7ce Revert "Update SELinux error" am: 31e0460cba am: a63a199ff6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23875101

Change-Id: I7be80b9df4c7a40f729812c2e9faf87e439c716d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 03:42:30 +00:00
Wilson Sung
fca9db22ba Revert "Update SELinux error" am: 31e0460cba am: 25038e3f3f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23875101

Change-Id: I7dd0ec97bc60be153878487f41b227d03928baf7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 03:41:52 +00:00
Wilson Sung
18ff46a71b Revert "Update SELinux error" am: 31e0460cba am: 1a71a9f40c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23875101

Change-Id: I4f521cc677d9ed3d722a585d72de2ee05247584f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 03:41:30 +00:00
Wilson Sung
4848fa935f Revert "Update SELinux error" am: 31e0460cba am: 1a71a9f40c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23875101

Change-Id: I6bdede516236ec89e6ee53b44de9a9ef3b422fe3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 03:37:02 +00:00
Wilson Sung
a63a199ff6 Revert "Update SELinux error" am: 31e0460cba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23875101

Change-Id: I8a012af2baadbe6ab97f589580efa02650ad5054
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 02:59:22 +00:00
Wilson Sung
1a71a9f40c Revert "Update SELinux error" am: 31e0460cba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23875101

Change-Id: Ia246bb019f0f7ebc4a0b7f14e993313480f48991
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 02:59:22 +00:00
Wilson Sung
25038e3f3f Revert "Update SELinux error" am: 31e0460cba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23875101

Change-Id: If6966226f97b32bc0295cde0d812da5a38f9006f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 02:54:52 +00:00
Wilson Sung
1a68c31f73 Merge "Revert Update SELinux error"
This reverts commit 12abc8ef4a.

Bug: 287169829
Change-Id: If92a6a0fc90d70a49999ce6004bcbd5d58565e51
2023-07-10 14:49:05 +08:00
Samuel Huang
04b78383f6 Merge "Create telephony.ril.silent_reset system_ext property for RILD restart" into udc-qpr-dev am: 78be291b79 am: 54b7ae985b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23840685

Change-Id: I351bbd752bdabd6a95f65d4e1b5b546105e5a9ed
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-07 03:10:43 +00:00
Samuel Huang
54b7ae985b Merge "Create telephony.ril.silent_reset system_ext property for RILD restart" into udc-qpr-dev am: 78be291b79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23840685

Change-Id: I526694264b944b8959f3f69cae1f5cff19620092
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-07 02:32:58 +00:00
Samuel Huang
78be291b79 Merge "Create telephony.ril.silent_reset system_ext property for RILD restart" into udc-qpr-dev 2023-07-07 01:45:24 +00:00
Wilson Sung
31e0460cba Revert "Update SELinux error"
This reverts commit 12abc8ef4a.

Bug: 287169829
Change-Id: If92a6a0fc90d70a49999ce6004bcbd5d58565e51
2023-07-05 08:06:38 +00:00
Patty Huang
386ab800d3 Allow bthal to access vendor bluetooth folder am: 73a74266f9 am: eb01b5cc30
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23869830

Change-Id: If791ae856fd5bb2632838117fb840977aaba0d7f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-05 07:28:36 +00:00
Patty Huang
eb01b5cc30 Allow bthal to access vendor bluetooth folder am: 73a74266f9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23869830

Change-Id: I628dceae5b1dc13ad50f38a09f19dee0a97de3da
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-05 06:46:49 +00:00
Patty Huang
73a74266f9 Allow bthal to access vendor bluetooth folder
Bug: 289055382
Test: enable vendor debug log and check the vendor snoop log contain the
vendor log

Change-Id: I25d7080f89ef1ca5836315097eab3c2916c9f4c0
2023-07-03 12:28:00 +08:00
Samuel Huang
68893eb7e3 Create telephony.ril.silent_reset system_ext property for RILD restart
RILD listens for changes to this property. If the value changes to 1,
RILD will restart itself and set this property back to 0.

The TelephonyGoogle app will set this property to 1 when it receives a
request from the SCONE app. Since TelephonyGoogle runs in the
com.android.phone process, we also need to give the radio domain
permission to set the telephony.ril.silent_reset property.

Bug: 286476107
Test: manual
Change-Id: I9f41aab747c075dd3a20d66f011e10ffee5a7608
2023-06-29 01:47:32 +00:00
Xin Li
d9db34c196 [automerger skipped] Merge Android 13 QPR3 am: d90b4a50c2 -s ours am: a99e90a0e5 -s ours am: c00fcbd6f7 -s ours am: 6347a9c5b4 -s ours am: bdf206bf65 -s ours am: 932e8c98c6 -s ours
am skip reason: Merged-In Ibdb2717e2f65dce5ad30e62e61803dedf7d8ec3e with SHA-1 4d493ff000 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2635190

Change-Id: I96b391cacc892309fdfb2915c550ca230f25d5dc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 08:06:11 +00:00
Xin Li
932e8c98c6 [automerger skipped] Merge Android 13 QPR3 am: d90b4a50c2 -s ours am: a99e90a0e5 -s ours am: c00fcbd6f7 -s ours am: 6347a9c5b4 -s ours am: bdf206bf65 -s ours
am skip reason: Merged-In Ibdb2717e2f65dce5ad30e62e61803dedf7d8ec3e with SHA-1 4d493ff000 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2635190

Change-Id: Ie31e644759bc272f859d4411fb86c0c51b01970e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 07:25:58 +00:00
Xin Li
bdf206bf65 [automerger skipped] Merge Android 13 QPR3 am: d90b4a50c2 -s ours am: a99e90a0e5 -s ours am: c00fcbd6f7 -s ours am: 6347a9c5b4 -s ours
am skip reason: Merged-In Ibdb2717e2f65dce5ad30e62e61803dedf7d8ec3e with SHA-1 4d493ff000 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2635190

Change-Id: I8e3014faf181af140d34e09eb27d862b24d8108a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 01:14:20 +00:00
Xin Li
6347a9c5b4 [automerger skipped] Merge Android 13 QPR3 am: d90b4a50c2 -s ours am: a99e90a0e5 -s ours am: c00fcbd6f7 -s ours
am skip reason: Merged-In Ibdb2717e2f65dce5ad30e62e61803dedf7d8ec3e with SHA-1 4d493ff000 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2635190

Change-Id: I940fe1e68a46ba6c7de851d8b0e0e34866547ec9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 00:32:49 +00:00
Xin Li
c00fcbd6f7 [automerger skipped] Merge Android 13 QPR3 am: d90b4a50c2 -s ours am: a99e90a0e5 -s ours
am skip reason: Merged-In Ibdb2717e2f65dce5ad30e62e61803dedf7d8ec3e with SHA-1 4d493ff000 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2635190

Change-Id: I3e28b92f1a54c51c719a6611506a32ecf0803ddf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-26 23:10:41 +00:00
Xin Li
a99e90a0e5 [automerger skipped] Merge Android 13 QPR3 am: d90b4a50c2 -s ours
am skip reason: Merged-In Ibdb2717e2f65dce5ad30e62e61803dedf7d8ec3e with SHA-1 4d493ff000 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2635190

Change-Id: I79423f7f0d58ca42592ed442a82804f6244142d9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-26 22:57:56 +00:00
Yen-Chao Chem
f2d94bd977 Remove sysfs_spi
Remove sysfs_spi because it's already defined in gs-common.

Bug: 288814327
Test: trigger bugreport.

Change-Id: Ibbe418bfc6091b82ac0569e02f6825a6c139d5b6
Signed-off-by: Yen-Chao Chem <davidycchen@google.com>
2023-06-26 16:26:12 +08:00
Xin Li
d90b4a50c2 Merge Android 13 QPR3
Bug: 275386652
Merged-In: Ibdb2717e2f65dce5ad30e62e61803dedf7d8ec3e
Change-Id: I46de49c8367a6f4cb62caa27fb840085ce519648
2023-06-21 15:14:52 -07:00
Treehugger Robot
523273361d Merge "Update SELinux error" into udc-dev am: bd7780a58a am: 07ac120b87 am: 7eeda6a018 am: b0bbbbef59
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: I9946e2a4a715c51a47db454de2efa03d85397bfd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 04:31:25 +00:00
Treehugger Robot
7f3de7370b Merge "Update SELinux error" into udc-dev am: bd7780a58a am: c570a37dae am: 55cfafc747 am: 1ea52cbb48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: I6e2b7715d61b89332b94a39c22005c84f389fe75
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 04:31:15 +00:00
Treehugger Robot
31654cadab Merge "Update SELinux error" into udc-dev am: bd7780a58a am: 07ac120b87 am: 3f8e350b75 am: 0acae4d89b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: Iff3a9ee30361428dce84df1b95719975151730ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 04:30:54 +00:00
Treehugger Robot
b0bbbbef59 Merge "Update SELinux error" into udc-dev am: bd7780a58a am: 07ac120b87 am: 7eeda6a018
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: I2d12613cb2d021ea5a7319538cda5b3252f48f23
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 03:47:13 +00:00
Treehugger Robot
1ea52cbb48 Merge "Update SELinux error" into udc-dev am: bd7780a58a am: c570a37dae am: 55cfafc747
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: I7f0c064a3380a95b0deccbaf6a3ac40aff841233
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 03:41:52 +00:00
Treehugger Robot
0acae4d89b Merge "Update SELinux error" into udc-dev am: bd7780a58a am: 07ac120b87 am: 3f8e350b75
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: I6891dfcb08d751e453b9391d2d1fe6aed21dbf74
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 03:41:44 +00:00
Treehugger Robot
55cfafc747 Merge "Update SELinux error" into udc-dev am: bd7780a58a am: c570a37dae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: I580ccd5cfb11a23c4150cb57379356a87fd5879b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 02:58:24 +00:00
Treehugger Robot
7eeda6a018 Merge "Update SELinux error" into udc-dev am: bd7780a58a am: 07ac120b87
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: I3af94bada043511267796e8c2eb1facd0b6428b3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 02:57:57 +00:00
Automerger Merge Worker
2cef087cfe Merge "Merge "Update SELinux error" into udc-dev am: bd7780a58a am: 9789a825c2" 2023-06-20 02:53:55 +00:00
Treehugger Robot
3f8e350b75 Merge "Update SELinux error" into udc-dev am: bd7780a58a am: 07ac120b87
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: I2ca9490b04c685f4bda67674f128e0481b6bf07a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 02:53:50 +00:00
Treehugger Robot
fbe4cd04d2 Merge "Update SELinux error" into udc-dev am: bd7780a58a am: 9789a825c2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: I704b6e0d5d8b6787b7e0c41825ba54bfd86b015e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 02:53:49 +00:00
Treehugger Robot
c333d15e00 Merge "Update SELinux error" into udc-dev am: bd7780a58a am: 8a73b3f834
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: Ic80db6224fe06e309bf79a0c74a4fa4677021dfe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 02:53:47 +00:00
Treehugger Robot
9789a825c2 Merge "Update SELinux error" into udc-dev am: bd7780a58a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: Idaa240717b1a06bc1cc4d4ee2b2a0d7530bfcc7c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 02:11:36 +00:00
Treehugger Robot
07ac120b87 Merge "Update SELinux error" into udc-dev am: bd7780a58a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: Ic4e1022e2a0aece2d52f141a133170fc06afbd9d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 02:11:35 +00:00
Treehugger Robot
8a73b3f834 Merge "Update SELinux error" into udc-dev am: bd7780a58a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: I89d5dba5336e4474c7e7e5a1e9ddf85d6b998c5f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 02:11:22 +00:00
Treehugger Robot
c570a37dae Merge "Update SELinux error" into udc-dev am: bd7780a58a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23685304

Change-Id: I7a161792e74b2b85ad4ecd195c1660f1425a73a6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 02:07:20 +00:00
Treehugger Robot
bd7780a58a Merge "Update SELinux error" into udc-dev 2023-06-20 01:29:00 +00:00
changyan
015a929f1f Merge "Update SELinux error"
Test: SELinuxUncheckedDenialBootTest
Bug: 287169829
Change-Id: I5def721ca380c01de836b03988aec397abc28b8a
2023-06-17 06:59:57 +00:00
Seongsik Kim
7a73b60713 Enable PacketRouter to use radio device am: c1034c26c1 am: 8b33cbc4ca am: 17bdee2f82 am: 9f1c14659b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: I439586a33db725bd45e0dfa397bddb36e07c045a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 02:47:05 +00:00
Seongsik Kim
9f1c14659b Enable PacketRouter to use radio device am: c1034c26c1 am: 8b33cbc4ca am: 17bdee2f82
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: I6da0df1d11603bdb357e139d6e24f10172f5b972
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 02:28:31 +00:00
Seongsik Kim
2f830a0ef9 Enable PacketRouter to use radio device am: c1034c26c1 am: 97223c9662 am: 52fc38ad99 am: d35a87f96b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: Id256689e1b15fde8cbbdc750a7b1e006819253d5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 02:27:18 +00:00
Seongsik Kim
d181bc62be Enable PacketRouter to use radio device am: c1034c26c1 am: 8b33cbc4ca am: 2c65bb864d am: a333a547eb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: I624fa08dbf85382bf1745afc9efae9de4c6a41db
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 02:25:15 +00:00
Seongsik Kim
d35a87f96b Enable PacketRouter to use radio device am: c1034c26c1 am: 97223c9662 am: 52fc38ad99
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: Iba8217a94d52cc86c9f315a84b90c385b85e4564
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 02:02:39 +00:00
Seongsik Kim
a333a547eb Enable PacketRouter to use radio device am: c1034c26c1 am: 8b33cbc4ca am: 2c65bb864d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: I3cd8fd40f1852925982a1bfdf14d31435f4a6655
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 02:01:50 +00:00
Seongsik Kim
0c8da5c408 Enable PacketRouter to use radio device am: c1034c26c1 am: 2251bf666e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: I376c7c64b3e09d58a5db5badb64d07195e972361
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 01:38:46 +00:00
Seongsik Kim
17bdee2f82 Enable PacketRouter to use radio device am: c1034c26c1 am: 8b33cbc4ca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: Ie26d7e6a63f51f2630c583a3a613fea18caf167f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 01:38:38 +00:00
Seongsik Kim
52fc38ad99 Enable PacketRouter to use radio device am: c1034c26c1 am: 97223c9662
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: Ie0f92f08a6f3adeaba1821a21345dae33b594c02
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 01:37:55 +00:00
Seongsik Kim
2c65bb864d Enable PacketRouter to use radio device am: c1034c26c1 am: 8b33cbc4ca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: I7ccedae38dcca8666c7a6a7634946c3b3671a9e4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 01:36:07 +00:00
Seongsik Kim
ae46c10e37 Enable PacketRouter to use radio device am: c1034c26c1 am: d6134fff4e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: I7d90b94a205ef1aa3da6eaa59c270c8ccda3d81c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 01:35:51 +00:00
Seongsik Kim
d6134fff4e Enable PacketRouter to use radio device am: c1034c26c1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: I73dcf36a30a60320f4c3c0f667f8e838c41a946a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 00:53:08 +00:00
Seongsik Kim
97223c9662 Enable PacketRouter to use radio device am: c1034c26c1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: Ic3a3cc5b264470184d6026948ffd75c1042b94ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 00:52:50 +00:00
Seongsik Kim
2251bf666e Enable PacketRouter to use radio device am: c1034c26c1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: I706b18ae861c9d0783609d82a86287d3487a662a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 00:52:47 +00:00
Seongsik Kim
8b33cbc4ca Enable PacketRouter to use radio device am: c1034c26c1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235910

Change-Id: If3866c1b2d1a7186f3f3c998a89f8519ced2468b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-16 00:52:22 +00:00
DesmondH
918140b833 Remove fixed or obsolete entries
Bug: 277989397
Change-Id: I38a21959e9ff361ec4b54fd98849e4c5a789f87d
2023-06-14 17:02:02 +00:00
Wilson Sung
12abc8ef4a Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 287169829
Change-Id: I0a245d81ae243a0461c19583e19912566062bb71
2023-06-14 15:30:31 +08:00
Ted Wang
56f7a8335d [automerger skipped] Add bluetooth extension related sepolicy am: 677d3faab4 am: a88403f039 -s ours
am skip reason: Merged-In Ic0dab76988ee80cae72091d6e8eb0e97c651e594 with SHA-1 e6ddf5d1f6 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23613857

Change-Id: I576cb02292cd4193cc28ccd3e5ecbbbabe8cdb66
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 14:50:11 +00:00
Ted Wang
a88403f039 Add bluetooth extension related sepolicy am: 677d3faab4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23613857

Change-Id: I8e2d265a44c731e58c491d6e1126daf05ec33960
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 14:07:45 +00:00
Ted Wang
677d3faab4 Add bluetooth extension related sepolicy
Bug: 286371097
Test: make
Change-Id: Ic252f91c56672b270d24863c5ed617f0fc9cb4e7
Merged-In: Ic0dab76988ee80cae72091d6e8eb0e97c651e594
2023-06-12 05:39:20 +00:00
Lily Lin
e1e7cb9242 Merge "add sysfs_touch setting for esim firmware upgrade" 2023-06-12 01:58:58 +00:00
Jenny Ho
2f3c6e51d5 Add permissions for read maxfg debugfs am: 03c6806df9 am: d5cc381545
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: I76f58cf33343cf512d73bc290879bc24ec1b191f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-09 08:41:58 +00:00
Donnie Pollitz
4538b96006 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60 am: 63defd4279
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: If3c8edfdba86d2be60dcca6d463e91cfc9ac1ba8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-09 07:13:15 +00:00
TreeHugger Robot
fc103a6e2b Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74 am: 845f582a40
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: I83f3e6b5848f03720aedcab1ddcb016efbc6c183
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-09 04:46:45 +00:00
Jin Jeong
870116202b Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa am: b6ce4e5c08
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: I62508f46627712c7bf9f85aea94372b317dc8d5f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-09 04:43:49 +00:00
Jin Jeong
be69af5816 Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5 am: 23887f7c27
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: I60107cb36c8afae476ee8ae9f3b2e3c9ce28d940
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-09 04:43:41 +00:00
Jin Jeong
c58353950a Revert "Fix LPA crash due to selinux denial" am: d569008b77 am: 606bd9ccb2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: I64d0428b77124569ddb9cc70448f0051cda007bf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-09 04:43:35 +00:00
allieliu
8f697e2671 vendor_init: add esim_modem_prop am: a1f81bef7a am: ef6725af0f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I2b8736521a912db44accdac0895abe194ab65212
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-09 04:43:31 +00:00
Lily Lin
b6099f0923 add sysfs_touch setting for esim firmware upgrade
Bug: 284945094
Test: P21 can upgrade esim firmware successfully
Change-Id: Ica0fa588e7c15002368af007158753caa0523a46
2023-06-08 21:58:24 +08:00
Seongsik Kim
c1034c26c1 Enable PacketRouter to use radio device
Bug: 279716766
Test: Patch verified by CP crash testing.
      VoWiFi can re-register successfully

Change-Id: I86b307d5269232ee290431264ab2f28fd21a922f
Signed-off-by: Seongsik Kim <sz.kim@samsung.com>
2023-06-08 08:49:41 +00:00
Jenny Ho
4088c9e534 Add permissions for read maxfg debugfs am: 03c6806df9 am: e74bb8aa68 am: da7ec50ce6 am: 2551e52dff
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: If5442c4db9f83cd567610aef87e0aca0fb516719
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 02:35:47 +00:00
Jenny Ho
0608f40486 Add permissions for read maxfg debugfs am: 03c6806df9 am: 794d80976f am: 726c8b19a6 am: 9fbfcd7664
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: Ic7fa2ab81e5bfaddbe542b92a3c81383312d578e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 02:35:18 +00:00
Jenny Ho
d68afe832a Add permissions for read maxfg debugfs am: 03c6806df9 am: e74bb8aa68 am: 76a7443057 am: 7352e7bb9d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: I49b38ae18c2406c4a8a47ba0c2a7e0950a005c95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 02:33:49 +00:00
Jenny Ho
2551e52dff Add permissions for read maxfg debugfs am: 03c6806df9 am: e74bb8aa68 am: da7ec50ce6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: Iee2f2152d5894e2c5f7915a7544fe4ed260e72b6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 01:49:44 +00:00
Jenny Ho
9fbfcd7664 Add permissions for read maxfg debugfs am: 03c6806df9 am: 794d80976f am: 726c8b19a6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: Ib3fd68d82aef0268e21cea1d201fd8773ebc0bce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 01:46:05 +00:00
Jenny Ho
7352e7bb9d Add permissions for read maxfg debugfs am: 03c6806df9 am: e74bb8aa68 am: 76a7443057
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: Ib265d9b1adbf2ffd1ce8d971131be3346681dd84
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 01:44:39 +00:00
Jenny Ho
726c8b19a6 Add permissions for read maxfg debugfs am: 03c6806df9 am: 794d80976f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: I04e42fa2350c1726132783dec7b5aaa50f628060
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 01:05:06 +00:00
Jenny Ho
da7ec50ce6 Add permissions for read maxfg debugfs am: 03c6806df9 am: e74bb8aa68
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: I3068d879a5c03524ba06150f01e7baee7e920571
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 01:04:56 +00:00
Jenny Ho
76a7443057 Add permissions for read maxfg debugfs am: 03c6806df9 am: e74bb8aa68
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: I465cc1fe8ac8b62421f594d3ef83c7c4e9f4664c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 01:00:56 +00:00
Jenny Ho
b5b1ecad85 Add permissions for read maxfg debugfs am: 03c6806df9 am: ed81299aad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: I988e586b1f4d3d5e3ada6c9498f6182282b35e77
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 01:00:35 +00:00
Jenny Ho
794d80976f Add permissions for read maxfg debugfs am: 03c6806df9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: I3af79c8931872853faf9e24747d3397eddc26795
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 00:20:11 +00:00
Jenny Ho
e74bb8aa68 Add permissions for read maxfg debugfs am: 03c6806df9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: Ida3f2da95c109372f8e64cef65ccb1838543d061
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 00:19:51 +00:00
Jenny Ho
ed81299aad Add permissions for read maxfg debugfs am: 03c6806df9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: Idaba4a1d51f452992ea7bf71472dc8e0f7d0d627
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 00:19:25 +00:00
Jenny Ho
d5cc381545 Add permissions for read maxfg debugfs am: 03c6806df9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23577705

Change-Id: I89458df37de6f7967b0a1930bc77b0f3390af785
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 00:19:15 +00:00
Jenny Ho
03c6806df9 Add permissions for read maxfg debugfs
Bug: 286001476
Change-Id: I787a8af17963c612dbbb9172fc539172f6633ca2
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2023-06-06 16:32:12 +08:00
Wilson Sung
b0cc32aa90 Merge "Remove obsolete entries" 2023-06-05 02:31:19 +00:00
Ted Wang
48be5855ac [automerger skipped] Add sepolicy for aidl bt extension hal am: 7c2e5a665a am: 6d98a9dcb7 -s ours
am skip reason: Merged-In I6aa9ebe87c743ceb09067a581f64f6cdc0b7d335 with SHA-1 98247ad9f4 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23510733

Change-Id: Ia04cee4127aff691407f854e47a655e4013bfece
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-02 19:20:23 +00:00
Ted Wang
6d98a9dcb7 Add sepolicy for aidl bt extension hal am: 7c2e5a665a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23510733

Change-Id: Iedac6ccc0a3cce8ac76d73996b659a3cfc170496
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-02 17:44:54 +00:00
DesmondH
1dc0476a0a Remove obsolete entries
Bug: 275002227
Fix: 232714489
Fix: 269218654
Fix: 281814691
Fix: 176868297
Fix: 184593993
Change-Id: Iab4e5928bca173c76cb083e608edd67d5f7aad52
2023-06-02 03:21:58 +00:00
Ted Wang
7c2e5a665a Add sepolicy for aidl bt extension hal
Bug: 274906319
Bug: 282685427
Test: make sepolicy and manual test
Change-Id: I6aa9ebe87c743ceb09067a581f64f6cdc0b7d335
Merged-In: I6aa9ebe87c743ceb09067a581f64f6cdc0b7d335
2023-06-01 11:13:14 +00:00
Donnie Pollitz
4d063d2317 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60 am: 3a9fac80c6 am: c2e049616e am: 01a2f876ba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: Id5f11c406940fc205489479761454f6ed1cf579c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 10:37:58 +00:00
Donnie Pollitz
d29a30aaf3 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60 am: b572c351ab am: cf651e04d0 am: 4de39e91e3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: I42c324bc699cc69a2b5c22fdb1fb65b5f6288a2a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 10:35:37 +00:00
Donnie Pollitz
fffd100e03 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60 am: 3a9fac80c6 am: 1d429fe2bd am: 697c800613
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: Ia52c3170110e615e6f89885114755269a1692fef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 10:35:09 +00:00
Donnie Pollitz
01a2f876ba Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60 am: 3a9fac80c6 am: c2e049616e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: Ia38557910c5f9681c097b629722befa58993feb2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 09:50:10 +00:00
Donnie Pollitz
4de39e91e3 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60 am: b572c351ab am: cf651e04d0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: I1c0e1b1acfa5613d34cfad624a4644f1a064bfc2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 09:47:37 +00:00
Donnie Pollitz
697c800613 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60 am: 3a9fac80c6 am: 1d429fe2bd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: I8171fcde8c3a9e1cf147cdca4fb80785598c113f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 09:47:15 +00:00
Donnie Pollitz
cf651e04d0 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60 am: b572c351ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: I0db91f8bec4282a17557d950ef1069133e574fc7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 09:01:40 +00:00
Donnie Pollitz
c2e049616e Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60 am: 3a9fac80c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: Ib4e7ba6311fbdcc4009b72ede40156ce5bf5e404
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 09:01:35 +00:00
Donnie Pollitz
1d429fe2bd Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60 am: 3a9fac80c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: Ie279b6addea3b668985099c19b085640c9297c61
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 08:59:32 +00:00
Donnie Pollitz
71aa19d231 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60 am: 3faaeeb394
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: Ia7da86477979808352dd298e61ac23137e9c3291
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 08:59:27 +00:00
Donnie Pollitz
3a9fac80c6 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: Ibea9a8b3a3d83db804f17553ba9795a60617d8ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 07:53:43 +00:00
Donnie Pollitz
3faaeeb394 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: I30289481f00d0d8a236f84dac22ba3558fdd73d5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 07:53:40 +00:00
Donnie Pollitz
63defd4279 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: I08c1b49853e8b767732823a7a5f388da8c7b9719
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 07:53:29 +00:00
Donnie Pollitz
b572c351ab Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev am: 7a95093a60
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23411822

Change-Id: I21daab28bfa7971923551f93a143306ac3629082
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 07:49:19 +00:00
Donnie Pollitz
7a95093a60 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-dev 2023-05-26 07:17:41 +00:00
TreeHugger Robot
53c00ae71a Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74 am: a89d5051b5 am: 294c0eb11a am: 50f0616068
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: I5fef337f92af0336724df5d3841a540107d35348
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 08:39:18 +00:00
TreeHugger Robot
75520b5a6c Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74 am: 61c5cc45ce am: 95a841fe27 am: e8409a0bd3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: Ia1dd30bd70686349ed6bf735f77789e8fee44a9d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 08:38:43 +00:00
TreeHugger Robot
a163972019 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74 am: a89d5051b5 am: b8fd4a21ad am: a2a9a77b31
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: I72f3975f8a62961232baa305e606458f58821c6e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 08:38:05 +00:00
TreeHugger Robot
50f0616068 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74 am: a89d5051b5 am: 294c0eb11a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: Ic21f26bdc775a581ce5d0525bd14b0763530e096
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 07:55:37 +00:00
TreeHugger Robot
e8409a0bd3 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74 am: 61c5cc45ce am: 95a841fe27
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: I1e5da2a7830a8248b5a55594c8e9c6de50a140c8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 07:50:15 +00:00
TreeHugger Robot
a2a9a77b31 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74 am: a89d5051b5 am: b8fd4a21ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: I6d4ddc30c3ca8aaca56349c405e31024dae30e1b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 07:49:43 +00:00
TreeHugger Robot
95a841fe27 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74 am: 61c5cc45ce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: I515a9b9f43ed9e3192996c63247e2d05a7979160
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 07:07:49 +00:00
TreeHugger Robot
294c0eb11a Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74 am: a89d5051b5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: I0d94987032e3c3e3ef760f03a2a6cdb19e6083ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 07:07:34 +00:00
TreeHugger Robot
f4e029db32 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74 am: 92377f9355
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: I0a5b81134a4e13e6dd8412c9c1c636f646b4d2b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 07:03:18 +00:00
TreeHugger Robot
b8fd4a21ad Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74 am: a89d5051b5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: Ie885596af055e69ad70566b4ba8bd1ccd932a197
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 07:03:07 +00:00
TreeHugger Robot
92377f9355 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: I42c51285416526919954a75da0d1cf1edabaa93f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 06:22:50 +00:00
TreeHugger Robot
a89d5051b5 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: Idfc27c5fa3e67b83f764cf8681f2cff447fa57c8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 06:22:40 +00:00
TreeHugger Robot
845f582a40 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: I1b3703eb4aa96306398bafac88dcd2d6df06a819
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 06:22:30 +00:00
TreeHugger Robot
61c5cc45ce Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev am: 1518744c74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23078039

Change-Id: I28c5d041c615dc1cbdcf2c6b0e88d6d4eded5e83
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 06:18:23 +00:00
TreeHugger Robot
1518744c74 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-dev 2023-05-25 05:28:46 +00:00
Donnie Pollitz
59c1582928 Allow vendor_init to fix permissions of TEE data file
Background:
* vendor_init needs to be able to possibly fix ownership of
  tee_data_file

Bug: 280325952
Test: Changed permissions and confirmed user transitions
Change-Id: I26aaf70548a3ad132e5d0da2c10a2753a0954ffc
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-05-24 16:51:22 +02:00
Jin Jeong
44b68e3539 Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa am: 078d4f0f23 am: fd2d807501 am: d87d7d70d4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: I96d24bbb17af6c95203ec97b8cd07785e3dd3a34
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:58:09 +00:00
Jin Jeong
d6a1fc00ab Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5 am: 984e8df27b am: 0dfb2ad1eb am: e8b587c9cc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: I6d9741bae1866538d967de8f05a77e8eed456b17
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:58:01 +00:00
Jin Jeong
c840e344c0 Revert "Fix LPA crash due to selinux denial" am: d569008b77 am: 09ed20ed6d am: 87100d72b0 am: 459b506c14
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: Iddf787b97255344a85ae5b711768c556b58a63ea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:57:54 +00:00
allieliu
97f3624260 vendor_init: add esim_modem_prop am: a1f81bef7a am: b54b0e2d93 am: da9ee5baa9 am: d03ee1e743
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I7ba7dd6635bd1aa37e92e3ed3830aabe0edc83f5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:57:50 +00:00
Jin Jeong
7e53dca973 Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa am: 1e0cadeebf am: f9e781ff69 am: 995e6c468c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: I591bcc5dff5d9f05c8b23c11c6eb8d73fab92859
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:57:06 +00:00
Jin Jeong
db4ca1f63a Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5 am: 1f1bb215e4 am: fd46e025ad am: 274b1f0a12
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: I25f93e8212c0289cc106659d1f66626d3392a20d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:56:59 +00:00
Jin Jeong
37b5fbc1c7 Revert "Fix LPA crash due to selinux denial" am: d569008b77 am: 121f84bc5d am: 93f99985d7 am: 259e53bc5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: Ib6d1190cbce71ab1736fc997b09c1469da6c4371
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:56:53 +00:00
allieliu
1d07ac4e89 vendor_init: add esim_modem_prop am: a1f81bef7a am: 1836eef208 am: 2c8c50ba37 am: 5c6a849c3e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I3efd69258ba95a4b4cbc5ae1339fae68cd4af911
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:56:49 +00:00
Jin Jeong
929b777cdf Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa am: 078d4f0f23 am: c9e962d7b0 am: 2ac7109c6f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: I00c06667a6f900c48d006b4dec2bd0064a19a1f8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:55:56 +00:00
Jin Jeong
3982568090 Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5 am: 984e8df27b am: b9ad5a953f am: 2068264629
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: Ifad7f04d112373109c4e6b63a51b42edf6586a96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:55:50 +00:00
Jin Jeong
d3706de251 Revert "Fix LPA crash due to selinux denial" am: d569008b77 am: 09ed20ed6d am: 843c9f863b am: b288e7d417
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: Idbd951c5d218a73b989b189fba17f7782e41e3a8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:55:44 +00:00
allieliu
b40f15ebfa vendor_init: add esim_modem_prop am: a1f81bef7a am: b54b0e2d93 am: be84d19144 am: 8083234f05
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I52ef8247c91381d8c0867068e628ccba7e7e696b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:55:40 +00:00
Jin Jeong
d87d7d70d4 Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa am: 078d4f0f23 am: fd2d807501
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: Iba68dda0b20ebf7c1d90cbd67b04a2323536a592
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:14:08 +00:00
Jin Jeong
e8b587c9cc Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5 am: 984e8df27b am: 0dfb2ad1eb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: I2d6ec9b8f2a92765bc043d3c756f8fbde2ea8b0b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:14:00 +00:00
Jin Jeong
459b506c14 Revert "Fix LPA crash due to selinux denial" am: d569008b77 am: 09ed20ed6d am: 87100d72b0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: Iffd4349846a79ae8c5b4ecbffa801d9d3b997454
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:13:54 +00:00
allieliu
d03ee1e743 vendor_init: add esim_modem_prop am: a1f81bef7a am: b54b0e2d93 am: da9ee5baa9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I2a30e64d6b4b177eada35f38267cb46a8a1918ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:13:50 +00:00
Jin Jeong
995e6c468c Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa am: 1e0cadeebf am: f9e781ff69
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: Iea1375aae52cc50cae20ced5a78e8186b3e3256f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:09:48 +00:00
Jin Jeong
274b1f0a12 Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5 am: 1f1bb215e4 am: fd46e025ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: I3fbb1a2684089107f6824f013e5ba6baee8349d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:09:41 +00:00
Jin Jeong
259e53bc5d Revert "Fix LPA crash due to selinux denial" am: d569008b77 am: 121f84bc5d am: 93f99985d7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: I1c06c3ec83fb387cf21d7bf0384eaf9a6c8432d7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:09:35 +00:00
allieliu
5c6a849c3e vendor_init: add esim_modem_prop am: a1f81bef7a am: 1836eef208 am: 2c8c50ba37
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I8c0a74a8c6500a68c00a9a31b9643ac420368576
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:09:31 +00:00
Jin Jeong
2ac7109c6f Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa am: 078d4f0f23 am: c9e962d7b0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: Iac3735997c1d5d134908cd037e8a3240d524b4d2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:08:49 +00:00
Jin Jeong
2068264629 Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5 am: 984e8df27b am: b9ad5a953f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: I45e646b5a50f070b576a968970cb40fb7054c1d5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:08:42 +00:00
Jin Jeong
b288e7d417 Revert "Fix LPA crash due to selinux denial" am: d569008b77 am: 09ed20ed6d am: 843c9f863b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: Id6518995fe9fe348a5ae0e87d586fc4614d28e73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:08:36 +00:00
allieliu
8083234f05 vendor_init: add esim_modem_prop am: a1f81bef7a am: b54b0e2d93 am: be84d19144
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I78a6197851d278512acb1b38a3a80e5067631e18
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:08:32 +00:00
Jin Jeong
f9e781ff69 Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa am: 1e0cadeebf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: I46b91038296921b8493807840a0fa35013f4234e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:31:07 +00:00
Jin Jeong
fd46e025ad Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5 am: 1f1bb215e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: Ifa8cc7e08705632c0e630d1b4c4095e54168c488
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:31:01 +00:00
Jin Jeong
93f99985d7 Revert "Fix LPA crash due to selinux denial" am: d569008b77 am: 121f84bc5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: I486be3a3e2f9a1176b7f34338c7852eda5c82612
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:30:55 +00:00
allieliu
2c8c50ba37 vendor_init: add esim_modem_prop am: a1f81bef7a am: 1836eef208
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I49414813bc25849c4aaf469018bb7e766a8808ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:30:52 +00:00
Jin Jeong
fd2d807501 Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa am: 078d4f0f23
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: I39a21aa971063ba491a8d481f14fd5ed00d380f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:30:11 +00:00
Jin Jeong
0dfb2ad1eb Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5 am: 984e8df27b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: Ife9ff11f44b3387e259a0a673b80e65a3c9259df
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:30:03 +00:00
Jin Jeong
87100d72b0 Revert "Fix LPA crash due to selinux denial" am: d569008b77 am: 09ed20ed6d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: If47d5508064aefea90274bfb9eb642318ed876d2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:29:57 +00:00
allieliu
da9ee5baa9 vendor_init: add esim_modem_prop am: a1f81bef7a am: b54b0e2d93
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I2787b80bad02946d6ca50dddd4804f260d92a5cc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:29:55 +00:00
Jin Jeong
67a6d4b1f9 Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa am: 0b32d1dbf3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: I23a689745d7c829ab55e2723a06cbbc6f3de6e99
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:27:39 +00:00
Jin Jeong
fc78668d1d Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5 am: 7b5f395f55
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: I773512c3664bbfd7a93f11d441f05f68ae1550f3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:27:32 +00:00
Jin Jeong
851c2dbac5 Revert "Fix LPA crash due to selinux denial" am: d569008b77 am: f75a93751f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: I8882ff6676649e04f29402953628b1295b87aeb9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:27:26 +00:00
allieliu
2cf261380b vendor_init: add esim_modem_prop am: a1f81bef7a am: 192b53064b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I89ba6530e086454e68c4d8d8e3c829009d43c2bf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:27:22 +00:00
Jin Jeong
c9e962d7b0 Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa am: 078d4f0f23
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: I163ce4ba9158f172daf9ef2aff191c8fb2c78af2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:26:25 +00:00
Jin Jeong
b9ad5a953f Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5 am: 984e8df27b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: Id7338399805a19899cd75b3debbe13441d2721a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:26:19 +00:00
Jin Jeong
843c9f863b Revert "Fix LPA crash due to selinux denial" am: d569008b77 am: 09ed20ed6d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: Ib626ccb1a4631ad78ec98f7e5effbc9065d1ccfd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:26:12 +00:00
allieliu
be84d19144 vendor_init: add esim_modem_prop am: a1f81bef7a am: b54b0e2d93
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I58911d41f4426b21785c5b58885847474670e543
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:26:07 +00:00
Jin Jeong
078d4f0f23 Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: Ibc80ec12b58e50772a939da6dbe5dc2ad0b2571d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:47:19 +00:00
Jin Jeong
0b32d1dbf3 Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: I4980ff6a4190956f49303993c6ba2f9b9dc84be0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:47:12 +00:00
Jin Jeong
984e8df27b Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: I27ad72eabe15f601055a851e9e5dc114ad8ddada
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:47:11 +00:00
Jin Jeong
09ed20ed6d Revert "Fix LPA crash due to selinux denial" am: d569008b77
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: Ia27f57b8bf19bc4aa87921c10311cd1c54c9652f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:47:05 +00:00
Jin Jeong
7b5f395f55 Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: I97904db9eb8fc3179426f237dadb427dbc0963af
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:47:04 +00:00
allieliu
b54b0e2d93 vendor_init: add esim_modem_prop am: a1f81bef7a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: Ic5b154223983ffdaa123898944aa02f881ed4ce6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:47:01 +00:00
Jin Jeong
b6ce4e5c08 Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: Iab3fe86c1d864124ad8d0a8de479b89680f96e61
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:47:00 +00:00
Jin Jeong
f75a93751f Revert "Fix LPA crash due to selinux denial" am: d569008b77
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: I442a10bdae030a467d31d6679864b183f32484f7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:46:58 +00:00
allieliu
192b53064b vendor_init: add esim_modem_prop am: a1f81bef7a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I2871410a6d287c894b7270390967f13fc3bed2fd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:46:54 +00:00
Jin Jeong
23887f7c27 Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: Ica298ad261240749f8383d7bf576ac1719783422
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:46:53 +00:00
Jin Jeong
606bd9ccb2 Revert "Fix LPA crash due to selinux denial" am: d569008b77
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: Ifa308b0efdf00112d646df3da880026f9c2ad91e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:46:47 +00:00
allieliu
ef6725af0f vendor_init: add esim_modem_prop am: a1f81bef7a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I79f81f8a49e41f96c47896cf26ef1d0343bdd3a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:46:43 +00:00
Jin Jeong
1e0cadeebf Merge "[GS101][eSIM] Add system properties rule" into udc-dev am: 6f8bcc95aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23235914

Change-Id: I35eacca161b250e65f22824a7006bc7bf9fe83f6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:42:50 +00:00
Jin Jeong
1f1bb215e4 Merge changes from topic "esim_prop" into udc-dev am: ec56e377c5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23163635

Change-Id: If90b89c225efbbdcad9e647cbd94828bb13e1200
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:42:43 +00:00
Jin Jeong
121f84bc5d Revert "Fix LPA crash due to selinux denial" am: d569008b77
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23167566

Change-Id: I64770152d64bc63a3dc8859180779b10ff45a15a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:42:37 +00:00
allieliu
1836eef208 vendor_init: add esim_modem_prop am: a1f81bef7a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23203399

Change-Id: I42e56be7d2bfd15a024662ffb5d878c167aef455
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:42:35 +00:00
Jin Jeong
6f8bcc95aa Merge "[GS101][eSIM] Add system properties rule" into udc-dev 2023-05-24 01:07:11 +00:00
Jin Jeong
ec56e377c5 Merge changes from topic "esim_prop" into udc-dev
* changes:
  Revert "Fix SELinux error for com.google.android.euicc"
  Revert "Fix LPA crash due to selinux denial"
2023-05-24 01:07:11 +00:00
Jinyoung Jeong
b6d74a5196 [GS101][eSIM] Add system properties rule
Bug: 279988311
Test: https://fusion2.corp.google.com/d517f34a-3242-40b1-adf6-acb6035ff2cb , b/282901698
Change-Id: I6caed744d2bba7882f80f8ace229f6c4b4133c65
2023-05-17 06:53:34 +00:00
allieliu
16e12a6cf1 vendor_init: add esim_prop
Bug: 279988311

Change-Id: I5f8759baff65073b758ce335772e72a383827d05
Signed-off-by: allieliu <allieliu@google.com>
2023-05-17 05:47:01 +00:00
Jin Jeong
15e1832396 Revert "Fix SELinux error for com.google.android.euicc"
Revert submission 22899490-euicc_selinux_fix

Reason for revert: b/279988311 we rename the vendor.modem property so we don't need to add the new rules

Bug: 279988311
Reverted changes: /q/submissionid:22899490-euicc_selinux_fix

Change-Id: I72da756853a540d6251e074313b1880c9c9038e8
2023-05-16 12:18:21 +00:00
Jin Jeong
d569008b77 Revert "Fix LPA crash due to selinux denial"
Revert submission 22955599-euicc_selinux_fix2

Reason for revert: b/279988311 we rename the vendor.modem property so we don't need to add the new rules

Bug: 279988311
Reverted changes: /q/submissionid:22955599-euicc_selinux_fix2

Change-Id: I6421319ba280fb11d05f2e107754449e54e5afa4
2023-05-16 01:05:47 +00:00
allieliu
a1f81bef7a vendor_init: add esim_modem_prop
Bug: 279988311

Change-Id: I5f8759baff65073b758ce335772e72a383827d05
Signed-off-by: allieliu <allieliu@google.com>
2023-05-16 00:58:49 +00:00
Ted Wang
0f0b1d04e1 Merge "Add sepolicy for aidl bt extension hal in grilservice app" 2023-05-15 08:56:08 +00:00
Adam Shih
37dc1753c6 introduce a new sepolicy owner am: 69e2720089 am: 4d493ff000 am: 4a3413c202 am: 7264b96871 am: 401568674d am: 1a6fdd6c60
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2583990

Change-Id: Ie68f4dcb5cd142516e69991f8efda324f6421a77
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 06:27:46 +00:00
Adam Shih
1a6fdd6c60 introduce a new sepolicy owner am: 69e2720089 am: 4d493ff000 am: 4a3413c202 am: 7264b96871 am: 401568674d
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2583990

Change-Id: I05bf6c20aae21dd032986d5053a48f61b9877494
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 05:40:51 +00:00
Ted Wang
e6ddf5d1f6 Add sepolicy for aidl bt extension hal in grilservice app
Bug: 280970790
Test: make sepolicy and manual test
Change-Id: Ic0dab76988ee80cae72091d6e8eb0e97c651e594
2023-05-15 05:05:44 +00:00
Adam Shih
401568674d introduce a new sepolicy owner am: 69e2720089 am: 4d493ff000 am: 4a3413c202 am: 7264b96871
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2583990

Change-Id: Ibc66c3ca73b56270e71c7c9575d3980580628aee
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 05:04:59 +00:00
Adam Shih
7264b96871 introduce a new sepolicy owner am: 69e2720089 am: 4d493ff000 am: 4a3413c202
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2583990

Change-Id: I8e3dee21b5840bf4566d73c885231b4d4c19793c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 04:22:09 +00:00
Adam Shih
4a3413c202 introduce a new sepolicy owner am: 69e2720089 am: 4d493ff000
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2583990

Change-Id: I019861c4f4d32d3e8ad83298b1a8b4a85f365a43
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 03:37:47 +00:00
Adam Shih
4d493ff000 introduce a new sepolicy owner am: 69e2720089
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2583990

Change-Id: Ibdb2717e2f65dce5ad30e62e61803dedf7d8ec3e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 02:59:33 +00:00
Wilson Sung
caeaa22ef2 Update SELinux error am: 20364fe3b3 am: 0cb392ee18 am: a4f76801a1 am: 55664457b2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: Idad8c2d895dca0c1749a8af6d2cf41cf25487c85
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 05:42:15 +00:00
Wilson Sung
fc302a3c5d Update SELinux error am: 20364fe3b3 am: 224f05b22c am: c2ba1e4724 am: 1a6617c177
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: Ia9729d2a3221978205854904cb2b760745486d96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 05:41:59 +00:00
Wilson Sung
6c5d3a8fb1 Update SELinux error am: 20364fe3b3 am: 0cb392ee18 am: f61c59d50b am: b1915eb42c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: Ie297b54c20f7ec2442315f6b7e3b8c02a7167f88
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 05:41:25 +00:00
Wilson Sung
55664457b2 Update SELinux error am: 20364fe3b3 am: 0cb392ee18 am: a4f76801a1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: I3cc86e13ff8af7ca6868d98e22eea25f67bf3eea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 05:00:58 +00:00
Wilson Sung
1a6617c177 Update SELinux error am: 20364fe3b3 am: 224f05b22c am: c2ba1e4724
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: Idd9de14cb797fa90546e690dead9fbb780afca4d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 04:59:25 +00:00
Wilson Sung
b1915eb42c Update SELinux error am: 20364fe3b3 am: 0cb392ee18 am: f61c59d50b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: I8dce52f18c542caa5637e06255792f3003f01c58
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 04:57:44 +00:00
Wilson Sung
c2ba1e4724 Update SELinux error am: 20364fe3b3 am: 224f05b22c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: I457ef6ed2340f0f864ffb899ba6547d30d0db0d0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 04:18:41 +00:00
Wilson Sung
a4f76801a1 Update SELinux error am: 20364fe3b3 am: 0cb392ee18
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: I8b4f226d05d5127e09c9e434a91f7416463e7476
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 04:17:51 +00:00
Wilson Sung
f61c59d50b Update SELinux error am: 20364fe3b3 am: 0cb392ee18
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: I63d108444a1ed9ce435893e8c42888b49ea62ee5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 04:14:50 +00:00
Wilson Sung
2eba436013 Update SELinux error am: 20364fe3b3 am: 618b288f0e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: I549eb8ea79ef56a710067faae40c31ea86847e59
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 04:14:26 +00:00
Wilson Sung
618b288f0e Update SELinux error am: 20364fe3b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: Ib1b334fbdee99255b30b549f59a4f269f82ea73c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 03:38:34 +00:00
Wilson Sung
0cb392ee18 Update SELinux error am: 20364fe3b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: I702a3d3ff9d5610173a5e9b7c69313bdf3e9af94
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 03:38:02 +00:00
Wilson Sung
224f05b22c Update SELinux error am: 20364fe3b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/23126085

Change-Id: Ic6cf256dc83f0248067a315dc58504b246fa6365
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-12 03:31:44 +00:00
JohnnLee
886c8e0200 Merge "Update SELinux error" into master
Original change: https://googleplex-android-review.git.corp.google.com/c/device/google/gs101-sepolicy/+/23126085

Test: SELinuxUncheckedDenialBootTest
Bug: 281814691
Change-Id: If0219526eb58de371e09ba49617c6da5d6dffcfa
2023-05-12 02:32:02 +00:00
Wilson Sung
20364fe3b3 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 281814691
Change-Id: I2f73f5b75aec1145dee615499a7442400defbf8a
2023-05-11 06:43:02 +00:00
JohnnLee
4876a744a5 Remove obsolete entries
Test: adb bugreport
Bug: 268146971
Bug: 238825802
Bug: 269964825
Bug: 277989067
Bug: 238263568
Change-Id: I67da2c4ea8bf1da24b9dcecde7019007e3182ff7
2023-05-10 03:15:02 +00:00
Adam Shih
69e2720089 introduce a new sepolicy owner
Bug: 281631102
Test: N/A
Change-Id: Ie1221e85bbfabf18c3bdd1a248b768e92f092426
2023-05-10 01:48:48 +00:00
sashwinbalaji
38640e48dd thermal: thermal_metrics: Update selinux to reset stats
Bug: 193833982
Test: Local build and verify statsD logs
adb shell cmd stats print-logs && adb logcat -b all | grep -i 105045
Change-Id: I79710aa05ff52caf9d08f21fa7a36c46a1b2a3d9
2023-05-08 05:15:49 +00:00
Ted Wang
c75bf5eb69 Merge "Add sepolicy for aidl bt extension hal" 2023-05-05 06:19:10 +00:00
Ted Wang
98247ad9f4 Add sepolicy for aidl bt extension hal
Bug: 274906319
Test: make sepolicy and manual test
Change-Id: I6aa9ebe87c743ceb09067a581f64f6cdc0b7d335
2023-05-05 04:09:27 +00:00
Jinyoung Jeong
6143e98c3a Fix LPA crash due to selinux denial am: d3a0214801 am: ffa6727b1a am: f96c70c2a9 am: c4b5c38659
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22948153

Change-Id: I282c481d0d99b0c1b5e7c615b70633aee4f2220c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 16:10:20 +00:00
Jinyoung Jeong
33460b440a Fix LPA crash due to selinux denial am: d3a0214801 am: ffa6727b1a am: f2ca69e3b5 am: 6b11bcbb65
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22948153

Change-Id: I4accd91aedb6982f174f51330ca11f79f6abffcb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 16:07:43 +00:00
Jinyoung Jeong
580119d41c Fix LPA crash due to selinux denial am: d3a0214801 am: ce1800b5f6 am: 10cc84f5a6 am: 38f002c987
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22948153

Change-Id: Icbdf1bf4744fc1e7f5e24cbda62aad4f8c53384c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 16:05:07 +00:00
Jinyoung Jeong
87db384eec Fix LPA crash due to selinux denial am: d3a0214801 am: 34495b4454
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22948153

Change-Id: I6874235a2760ce5c75c5cd9d161a9aa54c840407
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 15:36:49 +00:00
Jinyoung Jeong
c4b5c38659 Fix LPA crash due to selinux denial am: d3a0214801 am: ffa6727b1a am: f96c70c2a9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22948153

Change-Id: I4aac2e130f57ea33491baf081c81cfff9e903932
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 15:29:59 +00:00
Jinyoung Jeong
6b11bcbb65 Fix LPA crash due to selinux denial am: d3a0214801 am: ffa6727b1a am: f2ca69e3b5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22948153

Change-Id: I4ca3e42c1ace8a2efd1365e7309676f91dd0a807
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 15:26:04 +00:00
Jinyoung Jeong
38f002c987 Fix LPA crash due to selinux denial am: d3a0214801 am: ce1800b5f6 am: 10cc84f5a6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22948153

Change-Id: Ic78e1ef009f091c41f9c606fe1ce75fd6a5a8d25
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 15:18:11 +00:00
Jinyoung Jeong
f2ca69e3b5 Fix LPA crash due to selinux denial am: d3a0214801 am: ffa6727b1a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22948153

Change-Id: Ieb17eb23f5a5894fb73090c1acd20184cfa551ea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 15:16:03 +00:00
Jinyoung Jeong
10cc84f5a6 Fix LPA crash due to selinux denial am: d3a0214801 am: ce1800b5f6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22948153

Change-Id: Ifa9b0a5ea758724aa51074b0c78e139e9082ab31
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 15:00:38 +00:00
Jinyoung Jeong
34495b4454 Fix LPA crash due to selinux denial am: d3a0214801
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22948153

Change-Id: I27242c2c066012da8c2bc789a6d5eb1649929290
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:58:09 +00:00
Jinyoung Jeong
f96c70c2a9 Fix LPA crash due to selinux denial am: d3a0214801 am: ffa6727b1a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22948153

Change-Id: I3531ac7818088e243815c67f93923b3d39add5f0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:57:59 +00:00
Jinyoung Jeong
ffa6727b1a Fix LPA crash due to selinux denial am: d3a0214801
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22948153

Change-Id: I169459dff33f7eaaf516a05b07c0383c406e361c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:57:34 +00:00
Jinyoung Jeong
ce1800b5f6 Fix LPA crash due to selinux denial am: d3a0214801
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22948153

Change-Id: I026ba91f588c849694a158205b815b4f49217747
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:53:20 +00:00
TreeHugger Robot
c2234eb934 [automerger skipped] Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev am: eccb905391 -s ours am: 973c7999a7 -s ours am: 9fa57d304d -s ours am: 6dfc9061a8 -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: Ib7155566fe1ff6d6c338d0c86721b672c2ae6af7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 13:44:36 +00:00
martinwu
cb9444dbb8 [automerger skipped] [TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 3785b0d271 -s ours am: fcf40e1cf9 -s ours am: fd007bb393 -s ours am: 8af26fef7c -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: If04a0163473b5ce99e0afe9af640d654d3df07ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 13:44:31 +00:00
TreeHugger Robot
2bbac01def [automerger skipped] Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev am: eccb905391 -s ours am: 973c7999a7 -s ours am: a36582b012 -s ours am: f545c90dab -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I4d240c95d9eba6bb59dc6088744dcee0f99a73b5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 12:40:10 +00:00
martinwu
78c1b191d2 [automerger skipped] [TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 3785b0d271 -s ours am: fcf40e1cf9 -s ours am: 93a3277438 -s ours am: 8171934464 -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I2c3d7170c1f17ed46f98779c33281873d240b043
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 12:40:04 +00:00
TreeHugger Robot
24dcf6a995 [automerger skipped] Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev am: eccb905391 am: c97416242b -s ours am: bccbaa4675 -s ours am: 637f032c39 -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I2fd308229e3b5ed69a8619f1ff9469c005887964
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 12:38:20 +00:00
Jinyoung Jeong
d3a0214801 Fix LPA crash due to selinux denial
Bug: 280336861
Test: No crash found during LPA basic tests: download eSIM,
enable/disalbe eSIM.

Change-Id: I15227415993ef3975e183f500711416f8eb8e62c
2023-05-02 11:02:39 +00:00
TreeHugger Robot
6dfc9061a8 [automerger skipped] Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev am: eccb905391 -s ours am: 973c7999a7 -s ours am: 9fa57d304d -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I0653cb58b1d411d36d45e2bb6d9921725d3580d1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 10:35:23 +00:00
martinwu
8af26fef7c [automerger skipped] [TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 3785b0d271 -s ours am: fcf40e1cf9 -s ours am: fd007bb393 -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I05151ce2422e2a3fd10cd5c8d889cb11fa97da61
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 10:35:17 +00:00
TreeHugger Robot
f545c90dab [automerger skipped] Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev am: eccb905391 -s ours am: 973c7999a7 -s ours am: a36582b012 -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I545d9a40e177cbbe93cd09ef54ac29ee60ee2a2b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 10:32:41 +00:00
martinwu
8171934464 [automerger skipped] [TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 3785b0d271 -s ours am: fcf40e1cf9 -s ours am: 93a3277438 -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I5dda6cfc16be3b976270572939b65b4273401b86
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 10:32:29 +00:00
TreeHugger Robot
637f032c39 [automerger skipped] Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev am: eccb905391 am: c97416242b -s ours am: bccbaa4675 -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I3e044a3a95e8b06a92ff8058a23e45fe7d6d4cf1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 10:30:04 +00:00
TreeHugger Robot
9fa57d304d [automerger skipped] Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev am: eccb905391 -s ours am: 973c7999a7 -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: Ia72ca5b4ee4e89cba8ef8a7c59c67d085655bb3c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 09:23:07 +00:00
martinwu
fd007bb393 [automerger skipped] [TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 3785b0d271 -s ours am: fcf40e1cf9 -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: Ie5714a320417268eccb82eb7a94301bfcbc86694
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 09:22:59 +00:00
TreeHugger Robot
bccbaa4675 [automerger skipped] Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev am: eccb905391 am: c97416242b -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I29db38370ea89c5742c7e3dfe765bc5376acdd50
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 08:31:56 +00:00
TreeHugger Robot
78c4de0444 [automerger skipped] Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev am: eccb905391 am: bb508c8ebe -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: Iadbf3382d579c6830b1930d8318191c797eefb25
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 08:17:20 +00:00
TreeHugger Robot
a36582b012 [automerger skipped] Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev am: eccb905391 -s ours am: 973c7999a7 -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I9bcad9b47db5a235f30f33c563d396bcb5bdb678
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 07:59:14 +00:00
martinwu
93a3277438 [automerger skipped] [TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 3785b0d271 -s ours am: fcf40e1cf9 -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I5471cba6a1f711909e45171d56312705a37fae9a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 07:59:09 +00:00
TreeHugger Robot
c97416242b Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev am: eccb905391
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I472d9ffb5c3311e8c6e64e7ae306980696de92b9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 06:59:23 +00:00
TreeHugger Robot
bb508c8ebe Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev am: eccb905391
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I007b1d16d91540b65305e8f1b4a7e0067cf7ccdf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 06:58:27 +00:00
TreeHugger Robot
973c7999a7 [automerger skipped] Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev am: eccb905391 -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: If8d0716f625dd4a04d87ce9930c2d0da907896cb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 06:57:18 +00:00
martinwu
fcf40e1cf9 [automerger skipped] [TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 3785b0d271 -s ours
am skip reason: Merged-In Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949 with SHA-1 3055e06f0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22938599

Change-Id: I86ebe7328980165d24419b0f54fa2a08968c61f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 06:57:13 +00:00
TreeHugger Robot
eccb905391 Merge "[TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common" into udc-dev 2023-05-02 03:16:03 +00:00
Jin Jeong
279c8dafbe Merge "Fix SELinux error for com.google.android.euicc" into udc-dev am: 5b3b2c2b1c am: f8fa7836dd am: 883f2b9994 am: a95012269b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22878977

Change-Id: I44e620995f79458c0373e9b9ce3a044df8c42573
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 05:02:31 +00:00
Jin Jeong
dba470805b Merge "Fix SELinux error for com.google.android.euicc" into udc-dev am: 5b3b2c2b1c am: f8fa7836dd am: a44968dda4 am: 8f23acc56f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22878977

Change-Id: I92040c730f5cffcefc62b695772efd10be559ef5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 05:02:12 +00:00
Jin Jeong
d5e2716cc0 Merge "Fix SELinux error for com.google.android.euicc" into udc-dev am: 5b3b2c2b1c am: 8028eaadab am: 23e2260cc4 am: e61a57cdd5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22878977

Change-Id: I9223a7c6bea8cbd2e82f35cbc1823a435080eba0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 05:01:51 +00:00
Jin Jeong
a95012269b Merge "Fix SELinux error for com.google.android.euicc" into udc-dev am: 5b3b2c2b1c am: f8fa7836dd am: 883f2b9994
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22878977

Change-Id: If5fc4fb4e80f7c5ea2f354b1c3d7151d1392a24c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 04:45:07 +00:00
Jin Jeong
8f23acc56f Merge "Fix SELinux error for com.google.android.euicc" into udc-dev am: 5b3b2c2b1c am: f8fa7836dd am: a44968dda4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22878977

Change-Id: I8c5fdfca15edfff0bc54cb5aa0288d2bc9298fd6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 04:17:04 +00:00
Jin Jeong
e61a57cdd5 Merge "Fix SELinux error for com.google.android.euicc" into udc-dev am: 5b3b2c2b1c am: 8028eaadab am: 23e2260cc4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22878977

Change-Id: Ic96c8c2d4b1f9fdf9a15e1f48196edd61ccbf4c8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 04:16:47 +00:00
Jin Jeong
883f2b9994 Merge "Fix SELinux error for com.google.android.euicc" into udc-dev am: 5b3b2c2b1c am: f8fa7836dd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22878977

Change-Id: Ifa8e592f183c7f8c308037fd6044c95e3c5b969d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 04:05:29 +00:00
Jin Jeong
0da4551d1f Merge "Fix SELinux error for com.google.android.euicc" into udc-dev am: 5b3b2c2b1c am: 2254323f29
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22878977

Change-Id: Ia679e3a8b6664548fee812a786ddae02001e8c76
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 04:01:26 +00:00
Jin Jeong
a44968dda4 Merge "Fix SELinux error for com.google.android.euicc" into udc-dev am: 5b3b2c2b1c am: f8fa7836dd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22878977

Change-Id: I99fc9cf954acc541ee37e2bdcd04466f5f4eace4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 04:01:24 +00:00
Jin Jeong
23e2260cc4 Merge "Fix SELinux error for com.google.android.euicc" into udc-dev am: 5b3b2c2b1c am: 8028eaadab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22878977

Change-Id: I0873c4287ec66cf397d92d29da22e168a6cc9fc8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 03:44:54 +00:00
Jin Jeong
f8fa7836dd Merge "Fix SELinux error for com.google.android.euicc" into udc-dev am: 5b3b2c2b1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22878977

Change-Id: I5d3898608774febaddbe38e750f8b629b0e7060d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 03:23:24 +00:00
Jin Jeong
2254323f29 Merge "Fix SELinux error for com.google.android.euicc" into udc-dev am: 5b3b2c2b1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22878977

Change-Id: I4cab37581a5f814b44774f7c38c1837bc8a0743d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 03:23:21 +00:00
Jin Jeong
8028eaadab Merge "Fix SELinux error for com.google.android.euicc" into udc-dev am: 5b3b2c2b1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22878977

Change-Id: I68cae549366196d90584d83ce006647abc621856
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-30 03:19:13 +00:00
Jin Jeong
5b3b2c2b1c Merge "Fix SELinux error for com.google.android.euicc" into udc-dev 2023-04-30 02:51:46 +00:00
martinwu
3785b0d271 [TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common
Bug: 264490014
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949
Merged-In: Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949
2023-04-29 13:03:01 +00:00
Jinyoung Jeong
42a0c82065 Fix SELinux error for com.google.android.euicc
bug: 279548423
Test: http://fusion2/bb76429b-7d84-4e14-b127-8458abb3e2ed
Change-Id: I00bdf71f04eec985147189eb1b474c7ff6797023
2023-04-28 13:39:35 +00:00
martinwu
714dbeee3f [TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 3055e06f0a am: 5faad5e79a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22891127

Change-Id: I4ad88ea92c2a6422c531fc456e26b5b0fefd1d14
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-28 08:09:06 +00:00
martinwu
5faad5e79a [TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 3055e06f0a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22891127

Change-Id: Iaf87426c78c925e2ee548ec8d4793c834e8cf6e0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-28 07:16:37 +00:00
martinwu
3055e06f0a [TSV2] Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common
Bug: 264490014
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: Iea67de1e645592c6993a3ee6f2ca8e6bf3c6c949
2023-04-27 13:46:23 +00:00
Bruno BELANYI
5b5a02018a [automerger skipped] Merge changes from topic "hal_neuralnetworks_armnn-selinux-exceptions - udc" into udc-dev am: 88f5acac54 am: 11b0981e1c -s ours am: 051fb2d356 -s ours
am skip reason: Merged-In Ic8bf0d51414461689ee5768821a2a1acda923c41 with SHA-1 9702cb57f2 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22787136

Change-Id: I2bb0ae1fb12014a1d488a59253089cdcf55e4897
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 10:02:40 +00:00
Bruno BELANYI
7a095b2d4f [automerger skipped] Remove 'hal_neuralnetworks_armnn' sysprop exceptions am: b4001ec206 am: 113ff4c81d -s ours am: d7356ce89c -s ours
am skip reason: Merged-In Ied38dc6b323911aa909f4f42b66ee404fc7062fa with SHA-1 b4001ec206 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786209

Change-Id: I74d8d6ae8ad759ae0694bb76a64e914988fa5173
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 10:02:34 +00:00
Bruno BELANYI
d139aaaff8 [automerger skipped] Add ArmNN config sysprops SELinux rules am: a668555419 am: c58fe6e7a4 -s ours am: 256b970b38 -s ours
am skip reason: Merged-In I70c89dcc4b2bbe665d69cc4be1ac2f6cf8155a10 with SHA-1 a668555419 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786488

Change-Id: I1208514411ba23ae5e01371c4c8b5d74b345ed38
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 10:02:32 +00:00
Bruno BELANYI
13539cb054 [automerger skipped] Merge changes from topic "hal_neuralnetworks_armnn-selinux-exceptions - udc" into udc-dev am: 88f5acac54 am: af47588653 am: 1ed5642bf9 -s ours
am skip reason: Merged-In Ic8bf0d51414461689ee5768821a2a1acda923c41 with SHA-1 9702cb57f2 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22787136

Change-Id: I1bcafa21ced2dda7b71de4845c6abce3828eeab0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 10:01:11 +00:00
Bruno BELANYI
d9793317e5 [automerger skipped] Remove 'hal_neuralnetworks_armnn' sysprop exceptions am: b4001ec206 am: 0fa2fea833 am: 761b642a1b -s ours
am skip reason: Merged-In Ied38dc6b323911aa909f4f42b66ee404fc7062fa with SHA-1 b4001ec206 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786209

Change-Id: I7f0daf192e0e3655a305b6e8b36751848e8fb79b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 10:01:08 +00:00
Bruno BELANYI
95b46e565b [automerger skipped] Add ArmNN config sysprops SELinux rules am: a668555419 am: 479f35bca6 am: 2e54750806 -s ours
am skip reason: Merged-In I70c89dcc4b2bbe665d69cc4be1ac2f6cf8155a10 with SHA-1 a668555419 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786488

Change-Id: I79fd41392e1869198bd5b02174c967d97b76f9f7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 10:01:05 +00:00
Bruno BELANYI
051fb2d356 [automerger skipped] Merge changes from topic "hal_neuralnetworks_armnn-selinux-exceptions - udc" into udc-dev am: 88f5acac54 am: 11b0981e1c -s ours
am skip reason: Merged-In Ic8bf0d51414461689ee5768821a2a1acda923c41 with SHA-1 9702cb57f2 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22787136

Change-Id: I13902bd6cbaaf997fbe8384f92d095e5183a4a97
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:23:36 +00:00
Bruno BELANYI
d7356ce89c [automerger skipped] Remove 'hal_neuralnetworks_armnn' sysprop exceptions am: b4001ec206 am: 113ff4c81d -s ours
am skip reason: Merged-In Ied38dc6b323911aa909f4f42b66ee404fc7062fa with SHA-1 b4001ec206 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786209

Change-Id: I99bc768d12cd9bec3494b30a6f9e0975d32b8a61
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:23:33 +00:00
Bruno BELANYI
256b970b38 [automerger skipped] Add ArmNN config sysprops SELinux rules am: a668555419 am: c58fe6e7a4 -s ours
am skip reason: Merged-In I70c89dcc4b2bbe665d69cc4be1ac2f6cf8155a10 with SHA-1 a668555419 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786488

Change-Id: Ic08cae7f196160a84c3c4e5fee5af478469f3cc1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:23:27 +00:00
Bruno BELANYI
1ed5642bf9 Merge changes from topic "hal_neuralnetworks_armnn-selinux-exceptions - udc" into udc-dev am: 88f5acac54 am: af47588653
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22787136

Change-Id: I02dea6f9b6d5fdb3c4cc78c1dd066dd27b470e99
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:20:56 +00:00
Bruno BELANYI
761b642a1b Remove 'hal_neuralnetworks_armnn' sysprop exceptions am: b4001ec206 am: 0fa2fea833
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786209

Change-Id: I38bd089dd1e599df024be963dd49390dd124bc24
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:20:53 +00:00
Bruno BELANYI
2e54750806 Add ArmNN config sysprops SELinux rules am: a668555419 am: 479f35bca6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786488

Change-Id: Ide3f156db4f71fc6e43aa15e478e2280d096f219
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:20:20 +00:00
Bruno BELANYI
d5b4938203 [automerger skipped] Merge changes from topic "hal_neuralnetworks_armnn-selinux-exceptions - udc" into udc-dev am: 88f5acac54 am: 79fa2c3fc2 -s ours
am skip reason: Merged-In Ic8bf0d51414461689ee5768821a2a1acda923c41 with SHA-1 347dfbe925 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22787136

Change-Id: I4c73ca08deb2b0a34a574ce86a82822ba70bc4e2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:19:10 +00:00
Bruno BELANYI
20c91f8601 [automerger skipped] Remove 'hal_neuralnetworks_armnn' sysprop exceptions am: b4001ec206 am: 9a17c5118c -s ours
am skip reason: Merged-In Ied38dc6b323911aa909f4f42b66ee404fc7062fa with SHA-1 e4254a16aa is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786209

Change-Id: I3093934e00c837a3c5bf70de983244b7971fb1d5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:19:03 +00:00
Bruno BELANYI
967f8c8686 [automerger skipped] Add ArmNN config sysprops SELinux rules am: a668555419 am: b88b6bfa14 -s ours
am skip reason: Merged-In I70c89dcc4b2bbe665d69cc4be1ac2f6cf8155a10 with SHA-1 0f99f3e634 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786488

Change-Id: Iac5e6e5a9856c12fa04c396bc33110ef2e0b6be5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:18:58 +00:00
Bruno BELANYI
79fa2c3fc2 Merge changes from topic "hal_neuralnetworks_armnn-selinux-exceptions - udc" into udc-dev am: 88f5acac54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22787136

Change-Id: I6059fc44e2edc1c80d042fb9b2977db402fe310d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:45:09 +00:00
Bruno BELANYI
af47588653 Merge changes from topic "hal_neuralnetworks_armnn-selinux-exceptions - udc" into udc-dev am: 88f5acac54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22787136

Change-Id: I9adc7d9c66163cc8f169d42d3561419593a4bb18
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:45:03 +00:00
Bruno BELANYI
9a17c5118c Remove 'hal_neuralnetworks_armnn' sysprop exceptions am: b4001ec206
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786209

Change-Id: I9fb8b2f12ccbabee858c83135701e6613dfb2ecd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:45:03 +00:00
Bruno BELANYI
b88b6bfa14 Add ArmNN config sysprops SELinux rules am: a668555419
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786488

Change-Id: Ia903f3d695a716f04982dbeb82ffc8368b6895e0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:44:59 +00:00
Bruno BELANYI
0fa2fea833 Remove 'hal_neuralnetworks_armnn' sysprop exceptions am: b4001ec206
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786209

Change-Id: Ib278d5fc1ea4684f340cbf67ede663ac7c6d8494
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:44:56 +00:00
Bruno BELANYI
479f35bca6 Add ArmNN config sysprops SELinux rules am: a668555419
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786488

Change-Id: I4b920885db6ccc40906ba9896319c2a4ab6036a6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:44:55 +00:00
Bruno BELANYI
11b0981e1c Merge changes from topic "hal_neuralnetworks_armnn-selinux-exceptions - udc" into udc-dev am: 88f5acac54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22787136

Change-Id: Ibf47223785237dc1f5a933216d708184fd2dc249
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:40:50 +00:00
Bruno BELANYI
113ff4c81d Remove 'hal_neuralnetworks_armnn' sysprop exceptions am: b4001ec206
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786209

Change-Id: I476f226c90990b96cb2bb60dd79236096392d6a9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:40:47 +00:00
Bruno BELANYI
c58fe6e7a4 Add ArmNN config sysprops SELinux rules am: a668555419
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22786488

Change-Id: I85259c5a10a36cf530488f92e69b288fb9767f5b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:40:38 +00:00
Martin Wu
9a973dd015 Revert "Remove tcpdump sepolicy from gs101 and move sepolicy to ..." am: e30ee618d6 am: 26ca98b36b am: 388ff9b358
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22891379

Change-Id: Id3afc09894dbe55c7a26bd2fed9f2ef8a38d9246
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:36:28 +00:00
Martin Wu
5bc2918229 Revert "Remove tcpdump sepolicy from gs101 and move sepolicy to ..." am: e30ee618d6 am: 9c3a8e8693 am: e24b5548de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22891379

Change-Id: If1580cd736c4b17bfb4ece902c11fd66d2caf822
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:35:58 +00:00
Bruno BELANYI
88f5acac54 Merge changes from topic "hal_neuralnetworks_armnn-selinux-exceptions - udc" into udc-dev
* changes:
  Remove 'hal_neuralnetworks_armnn' '/data' access exception
  Remove 'hal_neuralnetworks_armnn' sysprop exceptions
  Add ArmNN config sysprops SELinux rules
2023-04-27 08:06:48 +00:00
Martin Wu
388ff9b358 Revert "Remove tcpdump sepolicy from gs101 and move sepolicy to ..." am: e30ee618d6 am: 26ca98b36b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22891379

Change-Id: If0beb276ccc0eb5aa9d148bda9f6c63d8661ccee
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 07:58:41 +00:00
Martin Wu
272690f1c0 Revert "Remove tcpdump sepolicy from gs101 and move sepolicy to ..." am: e30ee618d6 am: c7ab6cef77
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22891379

Change-Id: I4326fc8d3ae932db7a99295ee5698abdcbf4ef6d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 07:53:57 +00:00
Martin Wu
e24b5548de Revert "Remove tcpdump sepolicy from gs101 and move sepolicy to ..." am: e30ee618d6 am: 9c3a8e8693
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22891379

Change-Id: Ie0e4b99c7d562d27a9e59169390a29a40c2d7ed8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 07:53:57 +00:00
Martin Wu
9c3a8e8693 Revert "Remove tcpdump sepolicy from gs101 and move sepolicy to ..." am: e30ee618d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22891379

Change-Id: Iab01afe2a88ac49836691082caf05d376bc1a288
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 07:16:02 +00:00
Martin Wu
c7ab6cef77 Revert "Remove tcpdump sepolicy from gs101 and move sepolicy to ..." am: e30ee618d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22891379

Change-Id: I246f3e4ae7dd20e8eb168fa05ec30d261f1f3293
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 07:15:46 +00:00
Martin Wu
26ca98b36b Revert "Remove tcpdump sepolicy from gs101 and move sepolicy to ..." am: e30ee618d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22891379

Change-Id: Idcf669fc6a732228fed63e9e0517cae913829914
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 07:11:46 +00:00
martinwu
989dd94ea1 Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 6be45972bb am: 8e667e4f78 am: 1899628d2a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22814097

Change-Id: I01e1ae3131032f4b2bf44418d1c98fbebdf28f20
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 03:40:50 +00:00
martinwu
06b64e20e9 Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 6be45972bb am: 905b34e0b2 am: b841553ecf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22814097

Change-Id: Iddb12eacd75c254f80832f6ca368e50e9aa70308
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 03:40:29 +00:00
martinwu
1899628d2a Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 6be45972bb am: 8e667e4f78
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22814097

Change-Id: Ifa2ca99a68f8e3de864a9b17a4954e8bdffb15af
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 03:03:48 +00:00
martinwu
b841553ecf Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 6be45972bb am: 905b34e0b2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22814097

Change-Id: I1b0ffff203f17cfc538bf2300eb9bf82c9c96c6a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:58:05 +00:00
martinwu
e77f1ab80a Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 6be45972bb am: 5adb10e834
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22814097

Change-Id: I5523f54cbb5e2bb8796d26320e0301ce451d57e4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:57:54 +00:00
Martin Wu
e30ee618d6 Revert "Remove tcpdump sepolicy from gs101 and move sepolicy to ..."
Revert submission 22814097-Fix-tcpdump-sepolicy

Reason for revert: build break

Reverted changes: /q/submissionid:22814097-Fix-tcpdump-sepolicy

Change-Id: I3d47d22250b435416c4ca44ff1956569662591ee
2023-04-27 02:20:55 +00:00
martinwu
8e667e4f78 Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 6be45972bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22814097

Change-Id: Iede02f52dfb079eb65796f849431985f62363bac
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:18:16 +00:00
martinwu
5adb10e834 Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 6be45972bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22814097

Change-Id: I01ec7315f92de0f793eb02dd93f884bf8094ebd7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:17:57 +00:00
martinwu
905b34e0b2 Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common am: 6be45972bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22814097

Change-Id: Iaee6c5689b0cbf09d04228502721b16ed9813323
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:17:46 +00:00
martinwu
6be45972bb Remove tcpdump sepolicy from gs101 and move sepolicy to gs-common
Bug: 264490014
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: I3d0cb388cf9b7c96d2856f46c0440b4017477480
2023-04-27 01:38:04 +00:00
Bruno BELANYI
9702cb57f2 Remove 'hal_neuralnetworks_armnn' '/data' access exception
The mali driver has been configured not to look there anymore.

Bug: 205779871
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:347dfbe925e2218189d82d37697540af25401a22)
Merged-In: Ic8bf0d51414461689ee5768821a2a1acda923c41
Change-Id: Ic8bf0d51414461689ee5768821a2a1acda923c41
2023-04-26 17:21:18 +00:00
Bruno BELANYI
b4001ec206 Remove 'hal_neuralnetworks_armnn' sysprop exceptions
Bug: 205202540
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:e4254a16aa516f5960f48732b078aad4ed63df6f)
Merged-In: Ied38dc6b323911aa909f4f42b66ee404fc7062fa
Change-Id: Ied38dc6b323911aa909f4f42b66ee404fc7062fa
2023-04-26 17:20:54 +00:00
Bruno BELANYI
a668555419 Add ArmNN config sysprops SELinux rules
Bug: 205202540
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:0f99f3e63450befc661d38827e9afc853ca9257a)
Merged-In: I70c89dcc4b2bbe665d69cc4be1ac2f6cf8155a10
Change-Id: I70c89dcc4b2bbe665d69cc4be1ac2f6cf8155a10
2023-04-26 08:12:54 +00:00
Joseph Jang
66cf2fe626 Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-dev am: 37e90d3f3a am: b7dc8e13de am: b1a89da7bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22808538

Change-Id: I978294042e70452d6bb395bce07b12e7458f7ce9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:32:07 +00:00
Joseph Jang
c7fb98359d Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-dev am: 37e90d3f3a am: a086d7c588 am: ddb3354cf3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22808538

Change-Id: Iffd408b3eb031dff9a4859c7831ab1cb6f26faaf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:31:47 +00:00
Joseph Jang
b1a89da7bb Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-dev am: 37e90d3f3a am: b7dc8e13de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22808538

Change-Id: I07ace1bc29201483ce07dfacdc5ba87b0f327cf4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 04:54:27 +00:00
Joseph Jang
6883dda89f Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-dev am: 37e90d3f3a am: 9a1381585b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22808538

Change-Id: I594436e85c134c72eb10be856524ba3500d7546b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 04:49:48 +00:00
Joseph Jang
ddb3354cf3 Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-dev am: 37e90d3f3a am: a086d7c588
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22808538

Change-Id: I433c569b93e2957d88aa0a9762cb64394fb72005
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 04:49:48 +00:00
Joseph Jang
a086d7c588 Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-dev am: 37e90d3f3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22808538

Change-Id: Ie9d8e1f5a3c4e5dcfccbeda821cbd4d61bf71ad7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 04:11:56 +00:00
Joseph Jang
9a1381585b Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-dev am: 37e90d3f3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22808538

Change-Id: I21399d89048707e65eb95ba5f13c84e7d9d8ede8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 04:11:52 +00:00
Joseph Jang
b7dc8e13de Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-dev am: 37e90d3f3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22808538

Change-Id: I280f6280400602ee9ef6c980fcf8f645fd603368
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 04:07:33 +00:00
Joseph Jang
37e90d3f3a Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-dev 2023-04-26 03:24:40 +00:00
Joseph Jang
ac6f4e0d00 Move recovery.te to device/google/gs-common/dauntless/sepolicy
Bug: 279381809
Change-Id: If41449f97e729053caa98930cc7f2ef9fd6d844e
2023-04-24 08:09:23 +00:00
Adam Shih
30a1c8b3db [automerger skipped] Update error on ROM 9930000 am: 843b0ad6b4 am: b515f71918 -s ours am: 06cde84564 -s ours
am skip reason: Merged-In I38a3f852e2f5f0f6895db15141825909361a267d with SHA-1 843b0ad6b4 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22802738

Change-Id: Ie6d764f25bdfaf865b34daebe2ed4645ecfe5f29
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-24 05:06:50 +00:00
Adam Shih
1511b8210a [automerger skipped] Update error on ROM 9930000 am: 843b0ad6b4 -s ours am: 6adde197a2 -s ours am: d009fc203d -s ours
am skip reason: Merged-In I38a3f852e2f5f0f6895db15141825909361a267d with SHA-1 e10e338032 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22802738

Change-Id: I5a01dd5e5a641fba52453e812ec1b1f6580b955f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-24 05:05:20 +00:00
Adam Shih
06cde84564 [automerger skipped] Update error on ROM 9930000 am: 843b0ad6b4 am: b515f71918 -s ours
am skip reason: Merged-In I38a3f852e2f5f0f6895db15141825909361a267d with SHA-1 843b0ad6b4 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22802738

Change-Id: Ia2752e5dc50baf4156923439bfee1a9b92582161
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-24 04:28:11 +00:00
Adam Shih
d009fc203d [automerger skipped] Update error on ROM 9930000 am: 843b0ad6b4 -s ours am: 6adde197a2 -s ours
am skip reason: Merged-In I38a3f852e2f5f0f6895db15141825909361a267d with SHA-1 e10e338032 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22802738

Change-Id: Ifb88289c4b99ce3af6a95de51a451bb8a18f48d1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-24 04:23:19 +00:00
Adam Shih
4668baa311 [automerger skipped] Update error on ROM 9930000 am: 843b0ad6b4 am: 978f3f8dd8 -s ours
am skip reason: Merged-In I38a3f852e2f5f0f6895db15141825909361a267d with SHA-1 e10e338032 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22802738

Change-Id: I0d6c665bb6bb8155a4f832754d3d4d5ee26b7602
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-24 04:23:16 +00:00
Adam Shih
978f3f8dd8 Update error on ROM 9930000 am: 843b0ad6b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22802738

Change-Id: I54760d250e690390b9c0b1f8c58e63746eb661b2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-24 03:45:31 +00:00
Adam Shih
6adde197a2 [automerger skipped] Update error on ROM 9930000 am: 843b0ad6b4 -s ours
am skip reason: Merged-In I38a3f852e2f5f0f6895db15141825909361a267d with SHA-1 e10e338032 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22802738

Change-Id: I215d23548ce4461fefe952cb42705409d5ab2885
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-24 03:45:12 +00:00
Adam Shih
b515f71918 Update error on ROM 9930000 am: 843b0ad6b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22802738

Change-Id: Id0a018e58bafe93b87e7c1ebdccabf389088cef2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-24 03:42:59 +00:00
Adam Shih
843b0ad6b4 Update error on ROM 9930000
Bug: 277989397
Bug: 277155042
Bug: 277989067
Test: scanBugreport
Change-Id: I38a3f852e2f5f0f6895db15141825909361a267d
Merged-In: I38a3f852e2f5f0f6895db15141825909361a267d
2023-04-24 09:58:14 +08:00
Xin Li
10559c3fff [automerger skipped] Merge Android 13 QPR3 tm-qpr-dev-plus-aosp-without-vendor@9936994 am: 054c89fdad -s ours am: e0887325f5 -s ours am: ab04ca6af0 -s ours am: 74a28b39ad -s ours
am skip reason: Merged-In I1c9544ca2ebe1857c439f00c4589f739aca8e157 with SHA-1 893d8ddff7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22724789

Change-Id: I806c69e43928464912bb78562151934d0c26f57f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 23:52:50 +00:00
Xin Li
74a28b39ad [automerger skipped] Merge Android 13 QPR3 tm-qpr-dev-plus-aosp-without-vendor@9936994 am: 054c89fdad -s ours am: e0887325f5 -s ours am: ab04ca6af0 -s ours
am skip reason: Merged-In I1c9544ca2ebe1857c439f00c4589f739aca8e157 with SHA-1 893d8ddff7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22724789

Change-Id: I849e460bc1c8245596cf8eb51fdcd7443c6ea182
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 23:12:08 +00:00
Xin Li
ab04ca6af0 [automerger skipped] Merge Android 13 QPR3 tm-qpr-dev-plus-aosp-without-vendor@9936994 am: 054c89fdad -s ours am: e0887325f5 -s ours
am skip reason: Merged-In I1c9544ca2ebe1857c439f00c4589f739aca8e157 with SHA-1 893d8ddff7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22724789

Change-Id: I1c8a8f3601a437caed6423b08fa15c2c2aa937c7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 22:34:34 +00:00
Xin Li
e0887325f5 [automerger skipped] Merge Android 13 QPR3 tm-qpr-dev-plus-aosp-without-vendor@9936994 am: 054c89fdad -s ours
am skip reason: Merged-In I1c9544ca2ebe1857c439f00c4589f739aca8e157 with SHA-1 893d8ddff7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22724789

Change-Id: I1b8a0ebbcf60fd773379708434a05452cf6d4d06
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 18:15:50 +00:00
Bruno BELANYI
347dfbe925 Remove 'hal_neuralnetworks_armnn' '/data' access exception
The mali driver has been configured not to look there anymore.

Bug: b/205779871
Test: manual - reboot device and check the absence of AVC denials
Change-Id: Ic8bf0d51414461689ee5768821a2a1acda923c41
2023-04-20 09:15:03 +00:00
Bruno BELANYI
40a1da28b5 Merge changes from topic "armnn-sysprops"
* changes:
  Remove 'hal_neuralnetworks_armnn' sysprop exceptions
  Add ArmNN config sysprops SELinux rules
2023-04-20 08:14:04 +00:00
Automerger Merge Worker
d9b12023d3 Merge "rild: allow rild to ptrace am: 26e3d2abd0 am: 66b15bfc3d" 2023-04-20 07:39:25 +00:00
jimsun
81d8f46ffc rild: allow rild to ptrace am: 26e3d2abd0 am: 66b15bfc3d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22122889

Change-Id: I05ff6ae42bc88804a76add8435fa79403c84bde0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-20 07:39:03 +00:00
jimsun
f134649ff7 rild: allow rild to ptrace am: 26e3d2abd0 am: 7b6f60771c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22122889

Change-Id: Ief19acca77ce3b0cc65f62eb5cb2efd540c0d317
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-20 07:38:54 +00:00
jimsun
7b6f60771c rild: allow rild to ptrace am: 26e3d2abd0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22122889

Change-Id: Ie95ac070579f4c3cf3cfcaf95e2d371dadc5610a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-20 07:01:15 +00:00
jimsun
66b15bfc3d rild: allow rild to ptrace am: 26e3d2abd0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22122889

Change-Id: I267cad762d71cdcd7e8f7038fbcf37bc0951ffe1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-20 07:01:14 +00:00
Bruno BELANYI
e4254a16aa Remove 'hal_neuralnetworks_armnn' sysprop exceptions
Bug: b/205202540
Test: manual - reboot device and check the absence of AVC denials
Change-Id: Ied38dc6b323911aa909f4f42b66ee404fc7062fa
2023-04-19 11:31:03 +00:00
Bruno BELANYI
0f99f3e634 Add ArmNN config sysprops SELinux rules
Bug: b/205202540
Test: manual - reboot device and check the absence of AVC denials
Change-Id: I70c89dcc4b2bbe665d69cc4be1ac2f6cf8155a10
2023-04-19 11:31:00 +00:00
Xin Li
054c89fdad Merge Android 13 QPR3 tm-qpr-dev-plus-aosp-without-vendor@9936994
Bug: 275386652
Merged-In: I1c9544ca2ebe1857c439f00c4589f739aca8e157
Change-Id: Ib7236e8f3c5929dd76ad1644511724d618821373
2023-04-18 16:32:08 -07:00
jimsun
26e3d2abd0 rild: allow rild to ptrace
06-20 18:47:41.940000  8708  8708 I auditd  : type=1400 audit(0.0:7): avc: denied { ptrace } for comm="libmemunreachab" scontext=u:r:rild:s0 tcontext=u:r:rild:s0 tclass=process permissive=0
06-20 18:47:41.940000  8708  8708 W libmemunreachab: type=1400 audit(0.0:7): avc: denied { ptrace } for scontext=u:r:rild:s0 tcontext=u:r:rild:s0 tclass=process permissive=0

Bug: 263757077
Test: manual
Change-Id: I35ad31e6cc4e2942c671e51720f28a9abce3dcca
2023-04-18 07:48:32 +00:00
Bruno BELANYI
f7df059d0d Merge "Use restricted vendor property for ARM runtime options" into udc-dev am: bf8675143b am: cb752d4cf4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22381263

Change-Id: Icf2a67e975e8da3abd533ae7c542f777b2e5f60d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 11:57:00 +00:00
Bruno BELANYI
d1a1f4e167 Merge "Use restricted vendor property for ARM runtime options" into udc-dev am: bf8675143b am: f47334e3f1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22381263

Change-Id: Id1b9cf7954cefe367954225896a708f2aade1e43
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 11:55:44 +00:00
Bruno BELANYI
cb752d4cf4 Merge "Use restricted vendor property for ARM runtime options" into udc-dev am: bf8675143b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22381263

Change-Id: I28dbee80bce314d62708983c9f848bb61a47b1f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 11:29:24 +00:00
Bruno BELANYI
f47334e3f1 Merge "Use restricted vendor property for ARM runtime options" into udc-dev am: bf8675143b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22381263

Change-Id: Ic1621074f7b2281c3176467a33884acc12d2a5c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 11:28:50 +00:00
Bruno BELANYI
bf8675143b Merge "Use restricted vendor property for ARM runtime options" into udc-dev 2023-04-17 10:59:23 +00:00
Treehugger Robot
cb29d1729a Merge "Update error on ROM 9930000" into udc-d1-dev am: f57e39a7a1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22601619

Change-Id: I24c7525779db72feb6e3467fe2b26ed3db099d90
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-13 04:38:53 +00:00
Treehugger Robot
f57e39a7a1 Merge "Update error on ROM 9930000" into udc-d1-dev 2023-04-13 03:41:52 +00:00
Xin Li
8560661ab7 [automerger skipped] Merge TQ2A.230405.003 am: 82232b6423 am: 26cfa34cb7 -s ours am: 9505121ada -s ours am: ab4e3e986a -s ours am: 2714763638 -s ours
am skip reason: Merged-In I8c265919f7ae4b18aa304b0a584536d2a0f4b27a with SHA-1 9828cc747a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2530520

Change-Id: Icf2f33a2a4f266f086d4c91453ce75975bf2188d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-13 03:34:30 +00:00
Xin Li
0053db6a1e [automerger skipped] Merge TQ2A.230405.003 am: 82232b6423 am: 26cfa34cb7 -s ours am: 9505121ada -s ours am: ab4e3e986a -s ours am: 445c9786c6 -s ours
am skip reason: Merged-In I8c265919f7ae4b18aa304b0a584536d2a0f4b27a with SHA-1 9828cc747a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2530520

Change-Id: Ib16845f262525f276849f5e687087ce2b8072259
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-13 02:55:01 +00:00
Adam Shih
e10e338032 Update error on ROM 9930000
Bug: 277989397
Bug: 277155042
Bug: 277989067
Test: scanBugreport
Change-Id: I38a3f852e2f5f0f6895db15141825909361a267d
2023-04-13 10:15:11 +08:00
Xin Li
445c9786c6 [automerger skipped] Merge TQ2A.230405.003 am: 82232b6423 am: 26cfa34cb7 -s ours am: 9505121ada -s ours am: ab4e3e986a -s ours
am skip reason: Merged-In I8c265919f7ae4b18aa304b0a584536d2a0f4b27a with SHA-1 9828cc747a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2530520

Change-Id: I05d9347c773c51b55bbc622ac0f3f8d9652d5782
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 21:13:18 +00:00
Xin Li
2714763638 [automerger skipped] Merge TQ2A.230405.003 am: 82232b6423 am: 26cfa34cb7 -s ours am: 9505121ada -s ours am: ab4e3e986a -s ours
am skip reason: Merged-In I8c265919f7ae4b18aa304b0a584536d2a0f4b27a with SHA-1 9828cc747a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2530520

Change-Id: Ia20b14fcd634184ff89e3760d75ef999d490f07f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 21:08:39 +00:00
Xin Li
ab4e3e986a [automerger skipped] Merge TQ2A.230405.003 am: 82232b6423 am: 26cfa34cb7 -s ours am: 9505121ada -s ours
am skip reason: Merged-In I8c265919f7ae4b18aa304b0a584536d2a0f4b27a with SHA-1 9828cc747a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2530520

Change-Id: I07cabb680ee2172a60bdc37f9a61a2af528844d1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 20:57:06 +00:00
Xin Li
9505121ada [automerger skipped] Merge TQ2A.230405.003 am: 82232b6423 am: 26cfa34cb7 -s ours
am skip reason: Merged-In I8c265919f7ae4b18aa304b0a584536d2a0f4b27a with SHA-1 9828cc747a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2530520

Change-Id: Ie91202c445df25847c5bcd37cf8224e7bae6536e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 20:22:54 +00:00
Xin Li
26cfa34cb7 Merge TQ2A.230405.003 am: 82232b6423
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2530520

Change-Id: I92a1d4dff4571e4aa8f11ca6f71978d549bfc812
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 19:00:54 +00:00
Mike McTernan
51909f06fd confirmationui: Allow securedpud to access the systemsuspend HAL. am: b46b936df8 am: 87f81bd91f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22574497

Change-Id: I58d0b751a7c1789215bab4c0272987f342718a13
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 11:21:18 +00:00
Mike McTernan
f14d1d0e98 confirmationui: Allow securedpud to access the systemsuspend HAL. am: b46b936df8 am: b7ac171c15
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22574497

Change-Id: I5c49e57058d49ead6dd1b78c3f2f4c129a1eaa53
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 10:52:07 +00:00
Mike McTernan
87f81bd91f confirmationui: Allow securedpud to access the systemsuspend HAL. am: b46b936df8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22574497

Change-Id: I708d02ca3b7a7bbeae5405b533f24b033ce5e1a7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 10:45:43 +00:00
Mike McTernan
b7ac171c15 confirmationui: Allow securedpud to access the systemsuspend HAL. am: b46b936df8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22574497

Change-Id: Ied0ab0e2298a566992de13311b3c594f918806ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 10:21:17 +00:00
Adam Shih
ffd366e2e7 [automerger skipped] Remove obsolete entries am: 69f0507e29 -s ours
am skip reason: Merged-In If99cfe07ec85c285d2acdc712d5120c7ee6f06d9 with SHA-1 b2c082f631 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22565716

Change-Id: I769fafcbd67703268e3364d44ab062ecc111dfbb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 02:28:46 +00:00
Adam Shih
69f0507e29 Remove obsolete entries
Bug: 269218638
Bug: 269218638
Bug: 269370106
Bug: 268411073
Bug: 276385941
Bug: 276385941
Bug: 268147283
Bug: 269045042
Bug: 238263438
Bug: 238143262
Bug: 264483156
Bug: 264483673
Bug: 269045042
Bug: 270247432
Test: adb bugreport
Change-Id: I29268e10a370146b5d3405edfdec35645a3adc35
Merged-In: If99cfe07ec85c285d2acdc712d5120c7ee6f06d9
2023-04-12 08:44:44 +08:00
Adam Shih
9d6ad3570d Merge "Remove obsolete entries" 2023-04-12 00:40:50 +00:00
Mike McTernan
b46b936df8 confirmationui: Allow securedpud to access the systemsuspend HAL.
In order to use a wakelock, securedpud needs access to binder and the
system_suspend_service HAL.

Bug: 274851247
Test: manual, trigger TUI and check for AVC denials
Change-Id: Ibd27d32e092269f91d6557ebddcd27d4ccf1355a
2023-04-11 13:04:53 +00:00
Treehugger Robot
e64791b723 Merge "confirmationui: Allow securedpud to access the systemsuspend HAL." 2023-04-11 12:03:28 +00:00
Xin Li
82232b6423 Merge TQ2A.230405.003
Bug: 271343657
Merged-In: I8c265919f7ae4b18aa304b0a584536d2a0f4b27a
Change-Id: I61dd94e23d10e5405135626487ddadddb1f89f9f
2023-04-10 23:55:29 -07:00
Adam Shih
b2c082f631 Remove obsolete entries
Bug: 270080367
Bug: 270080367
Bug: 269218638
Bug: 269964913
Bug: 269218638
Bug: 269370106
Bug: 268411073
Bug: 276385941
Bug: 276385941
Bug: 277528855
Bug: 277528855
Bug: 268147283
Bug: 269045042
Bug: 238263438
Bug: 238143262
Bug: 264483156
Bug: 264483673
Bug: 275002227
Bug: 275002227
Bug: 232714489
Bug: 269045042
Bug: 270247432
Bug: 240632824
Bug: 238263568
Bug: 268146971
Bug: 185723618
Bug: 277155042
Test: adb bugreport
Change-Id: If99cfe07ec85c285d2acdc712d5120c7ee6f06d9
2023-04-11 03:48:08 +00:00
Wilson Sung
ecc2e3f975 Update SELinux error am: c41cb55d4f am: 1b77af6fdf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22530832

Change-Id: If242f382cf4be016a850c9ec3c0dcf00fcd4a0c6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-10 06:08:54 +00:00
Wilson Sung
38f8d12aa6 Update SELinux error am: c41cb55d4f am: 9f61b3a044
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22530832

Change-Id: Ia1484018dfaae55e4c2054139883fc1518c200d3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-10 06:08:03 +00:00
Wilson Sung
9f61b3a044 Update SELinux error am: c41cb55d4f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22530832

Change-Id: I3de424a9d10ead26317a288a82965ceff4ce49be
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-10 05:24:56 +00:00
Wilson Sung
1b77af6fdf Update SELinux error am: c41cb55d4f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22530832

Change-Id: Icfd77d41de22485bb17104441431d33aaacfddef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-10 05:24:45 +00:00
Wilson Sung
c41cb55d4f Update SELinux error
Test: scanBugreport
Bug: 277528855
Change-Id: Ia59cd4045433f2e82a602672fe533e27e87b0275
2023-04-10 11:02:52 +08:00
Automerger Merge Worker
013a4d4bb8 Merge "Merge "use dumpsate from gs-common" into udc-dev am: d186da49ea am: 9360e36aeb" 2023-04-10 02:14:36 +00:00
Adam Shih
886d27f077 Merge "use dumpsate from gs-common" into udc-dev am: d186da49ea am: b68badeec9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22328249

Change-Id: I48186e7d3909dff2ced41757b1c6d417d51da16b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-10 02:14:18 +00:00
Adam Shih
400ea64859 Merge "use dumpsate from gs-common" into udc-dev am: d186da49ea am: 9360e36aeb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22328249

Change-Id: I4b72ec7fd1edb52916c43e214a91505bddb024c8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-10 02:14:15 +00:00
Adam Shih
9360e36aeb Merge "use dumpsate from gs-common" into udc-dev am: d186da49ea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22328249

Change-Id: I6a0697a450ea04aa578c4883330c0b6f0a8511fa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-10 01:46:26 +00:00
Adam Shih
b68badeec9 Merge "use dumpsate from gs-common" into udc-dev am: d186da49ea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22328249

Change-Id: Ie64d5f5b5d11b309046e0fd1ee33ee5e5fb566f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-10 01:46:22 +00:00
Adam Shih
d186da49ea Merge "use dumpsate from gs-common" into udc-dev 2023-04-10 01:11:17 +00:00
Automerger Merge Worker
e7a6328d46 Merge "Update error on ROM 9891405 am: 816622f352 am: 7c548f2ecb" 2023-04-07 09:12:13 +00:00
Wilson Sung
e050af1279 Update error on ROM 9891405 am: 816622f352 am: cf49233ca2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22525943

Change-Id: I7e8a1c45f21e19655d6fc07a8877b0f12fc8d2f1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-07 09:12:04 +00:00
Wilson Sung
7725e104db Update error on ROM 9891405 am: 816622f352 am: 7c548f2ecb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22525943

Change-Id: Ifa55065fc812f41993e1294e00fd80bf0ea2053c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-07 09:12:04 +00:00
Wilson Sung
cf49233ca2 Update error on ROM 9891405 am: 816622f352
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22525943

Change-Id: I8cfb59b5e72b508c4d67b5fa8d6b382b60827428
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-07 08:44:03 +00:00
Wilson Sung
7c548f2ecb Update error on ROM 9891405 am: 816622f352
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22525943

Change-Id: I7f45cc589e053bd6a8c782636f92bc109ab05d56
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-07 08:44:02 +00:00
Wilson Sung
816622f352 Update error on ROM 9891405
Bug: 277155042
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ic2129188db52ec85a8afaf92c507a42695e82804
2023-04-07 14:56:21 +08:00
Adam Shih
240c435174 use dumpsate from gs-common
Bug: 273380985
Test: adb bugreport
Change-Id: I9092e2e004e3ad0b3667b948ed4d633cd50d088c
2023-04-07 13:02:21 +08:00
Victor Liu
eb1a1bae0b Merge "uwb: add permission for ccc ranging" into udc-dev am: d87df92740 am: 2af298588a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21965690

Change-Id: I73aaff56a017d494c2e3e24296544c8328e42a83
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 22:10:20 +00:00
Victor Liu
c3e5ea8926 Merge "uwb: add permission for ccc ranging" into udc-dev am: d87df92740 am: 86f1c65d6c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21965690

Change-Id: Id26d449e09a5d2f938abc0cf9d7e62c5e5ac73ed
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 22:09:06 +00:00
Victor Liu
86f1c65d6c Merge "uwb: add permission for ccc ranging" into udc-dev am: d87df92740
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21965690

Change-Id: I12df4bbb294464a745560fb74fc09b3919c97967
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 21:29:18 +00:00
Victor Liu
2af298588a Merge "uwb: add permission for ccc ranging" into udc-dev am: d87df92740
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21965690

Change-Id: Iee589f33b02bf5a052469fde2bd6b29e0f364512
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 21:29:09 +00:00
Victor Liu
d87df92740 Merge "uwb: add permission for ccc ranging" into udc-dev 2023-04-06 20:57:49 +00:00
feiyuchen
7e413f82d5 Allow camera HAL to access edgetpu_app_service in gs101 am: 391f954d5d am: 97df720a19
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22463634

Change-Id: I223fc6a85b456218401bb6a504c4d7aa6e10dad5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 00:11:51 +00:00
feiyuchen
7ae5692d48 Allow camera HAL to access edgetpu_app_service in gs101 am: 391f954d5d am: 6f71f3f9b9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22463634

Change-Id: I86f31456c17adb4c93a500a84ae0f1e3e80df662
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 00:06:01 +00:00
feiyuchen
6f71f3f9b9 Allow camera HAL to access edgetpu_app_service in gs101 am: 391f954d5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22463634

Change-Id: I9e8bb20c6a6ec8b0f4aa1c9bcaa60b78c9944dba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-05 23:25:28 +00:00
feiyuchen
97df720a19 Allow camera HAL to access edgetpu_app_service in gs101 am: 391f954d5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22463634

Change-Id: If16892c57abf4d38fac27012783a2e97c50ce07e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-05 23:24:05 +00:00
Mike McTernan
9539d15b4f confirmationui: Allow securedpud to access the systemsuspend HAL.
In order to use a wakelock, securedpud needs access to binder and the
system_suspend_service HAL.

Bug: 274851247
Test: manual, trigger TUI and check for AVC denials
Change-Id: Ibd27d32e092269f91d6557ebddcd27d4ccf1355a
2023-04-05 13:47:22 +00:00
feiyuchen
391f954d5d Allow camera HAL to access edgetpu_app_service in gs101
We are seeing SELinux error b/276911450. It turns out that I only added the SE policy for 2023 device ag/22248613, but I forgot to add it for gs101 and gs201. So I created this CL.

See more background in ag/22248613.

Test: For gs201, I tested on my Pixel7 and I saw no more error. For gs101, I just did mm.
Bug: 275016466
Bug: 276911450
Change-Id: I3d691128daa2d7115f80c378f7b42de334cd8ed5
2023-04-04 21:32:36 +00:00
Bruno BELANYI
7838603828 Use restricted vendor property for ARM runtime options
They need to be read by everything that links with libmali, but we don't
expect anybody to actually write to them.

Bug: b/272740524
Test: CtsDeqpTestCases (dEQP-VK.protected_memory.stack.stacksize_*)
Change-Id: I963fb55fb92ef5f91426dbec913c901e58cacf64
2023-04-04 13:04:00 +00:00
Victor Liu
a55bb8682c uwb: add permission for ccc ranging
Bug: 255649425
Change-Id: I05aac586146bf25569b5f6251d2fd62b921631be
2023-03-31 14:04:13 -07:00
Automerger Merge Worker
d1963ac90c Merge "Merge "Update SELinux error" into udc-dev am: 083b5fe640 am: fa24247c90" 2023-03-31 11:15:54 +00:00
Wilson Sung
b4a9ff51e5 Merge "Update SELinux error" into udc-dev am: 083b5fe640 am: fa24247c90
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22371623

Change-Id: I698251c98bdcbb5c8e5f85f1699aff9991137bbe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-31 11:15:51 +00:00
Wilson Sung
a0e1e4cc3b Merge "Update SELinux error" into udc-dev am: 083b5fe640 am: 5ac120e63d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22371623

Change-Id: I0c86f2b0aed23ff3a1ac35034973e5459f0d825c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-31 11:15:47 +00:00
Wilson Sung
6647aa2cfa Update SELinux error am: 28afe7393f am: d00d896387
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241484

Change-Id: If7b06f8e1e98f139164dfc4ecb333bb9b57c539a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-31 11:14:40 +00:00
Wilson Sung
0c4206fd03 Update SELinux error am: 28afe7393f am: d4be8c564d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241484

Change-Id: I25c7b5de68bbf1470a69ff5423e929904bceee6c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-31 11:14:22 +00:00
Wilson Sung
5ac120e63d Merge "Update SELinux error" into udc-dev am: 083b5fe640
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22371623

Change-Id: I329d469450097e7b45b43b01e43b127926f110d5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-31 10:50:50 +00:00
Wilson Sung
d4be8c564d Update SELinux error am: 28afe7393f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241484

Change-Id: I85053fd76ea7fc78eafb90dab68ec2ff2bd2001d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-31 10:50:25 +00:00
Wilson Sung
fa24247c90 Merge "Update SELinux error" into udc-dev am: 083b5fe640
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22371623

Change-Id: Iad86d5505a210d5320cb35bab875bdeacd7af180
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-31 10:50:19 +00:00
Wilson Sung
d00d896387 Update SELinux error am: 28afe7393f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241484

Change-Id: I03fe9842ff4ae8127ff3abd124c80131ff1fb1d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-31 10:48:32 +00:00
Wilson Sung
083b5fe640 Merge "Update SELinux error" into udc-dev 2023-03-31 10:18:47 +00:00
Wilson Sung
95aec4308e Merge "Update SELinux error" into master
Test: SELinuxUncheckedDenialBootTest
Bug: 275002227
Change-Id: If2133d83efbfa00ee9643a25047f465c60d2d3c4
2023-03-31 03:48:00 +00:00
Wilson Sung
accb299d5d Update SELinux error
Test: scanBugreport
Bug: 276385941
Change-Id: I54627db892f95ac7ee6e9b08762b7a72793d4a00
2023-03-31 10:55:58 +08:00
Wilson Sung
28afe7393f Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 275002227
Change-Id: If2133d83efbfa00ee9643a25047f465c60d2d3c4
2023-03-29 06:34:07 +00:00
Adam Shih
07c284adc5 Move power dump text section out of hal_dumpstate_default am: 7cc3817f71 am: 382aaae47b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22305190

Change-Id: Ice68ae327fd2fe442fb60b41aba331b04d69a75b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:52:36 +00:00
Adam Shih
a8736cafa9 Move power dump text section out of hal_dumpstate_default am: 7cc3817f71 am: 2dd38e68a3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22305190

Change-Id: Ie3520d7d5d980ac1eea15e2e7a1b948579c32780
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:52:03 +00:00
Adam Shih
2dd38e68a3 Move power dump text section out of hal_dumpstate_default am: 7cc3817f71
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22305190

Change-Id: I88cffb5d7aff00f407ad6264df2155d799515231
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:26:43 +00:00
Adam Shih
382aaae47b Move power dump text section out of hal_dumpstate_default am: 7cc3817f71
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22305190

Change-Id: Ie504dd1b31801dcb2f65152eba7992d2679a5405
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:26:41 +00:00
Adam Shih
7cc3817f71 Move power dump text section out of hal_dumpstate_default
Bug: 273380985
Test: adb bugreport
Change-Id: I77b59ea719055972429b2b8a1349e52e0e1fe395
2023-03-28 15:03:22 +08:00
Adam Shih
20f7e69417 Move camera text dump to dump_gs101 am: 5bfe1bdd6d am: 6e46c16735
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241495

Change-Id: I19b936d257e8a17ddff74c4a7e5a828e4af71550
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 03:16:37 +00:00
Adam Shih
34d81ac5e9 Move camera text dump to dump_gs101 am: 5bfe1bdd6d am: 4511d9e0b5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241495

Change-Id: I6c8cb61d3b39a5451fd67b5f62876f2842bad32e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 03:16:16 +00:00
Adam Shih
4511d9e0b5 Move camera text dump to dump_gs101 am: 5bfe1bdd6d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241495

Change-Id: I973d1a9adbfa31a84c079fc847904ec9baa1909c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 02:47:17 +00:00
Adam Shih
6e46c16735 Move camera text dump to dump_gs101 am: 5bfe1bdd6d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241495

Change-Id: I923cb67cbeac5363082581b0542c0761e0916b82
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 02:47:13 +00:00
Adam Shih
5bfe1bdd6d Move camera text dump to dump_gs101
Bug: 273380985
Test: adb bugreport
Change-Id: Iba138e608885a1215515ec8cc5f5e997dfcfcf3f
2023-03-27 10:37:02 +08:00
TreeHugger Robot
9ede97603d Merge "Remove tracking_denials/hal_fingerprint_default.te" into udc-dev am: feef477d2f am: 27d3d6bdad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241485

Change-Id: I883f71502d6114e491118a1fcf05ce7fb552cf56
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 02:22:32 +00:00
TreeHugger Robot
658cff8660 Merge "Remove tracking_denials/hal_fingerprint_default.te" into udc-dev am: feef477d2f am: 423272104f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241485

Change-Id: I3b7b7c8d0af20c40e71f63933a11bfbff2580f6f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 02:21:49 +00:00
Adam Shih
d792838a85 Move cma dump to itself am: e7ea94d8e1 am: eb9b56a10d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241488

Change-Id: I57334ea4b544537fcc5416600983e42a20f9c699
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 02:21:42 +00:00
Adam Shih
a405c6233e Move cma dump to itself am: e7ea94d8e1 am: 7a9d142fa9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241488

Change-Id: I2f0ea98fee6ebf87d0b2908cd2625b385515c010
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 02:20:14 +00:00
TreeHugger Robot
27d3d6bdad Merge "Remove tracking_denials/hal_fingerprint_default.te" into udc-dev am: feef477d2f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241485

Change-Id: Id4230b4c7267644533e6c3a2db3d5b163ac75b6d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 01:53:20 +00:00
TreeHugger Robot
423272104f Merge "Remove tracking_denials/hal_fingerprint_default.te" into udc-dev am: feef477d2f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241485

Change-Id: I236824a18ff19e0825331bfbcef7c4e33e370501
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 01:52:53 +00:00
Adam Shih
eb9b56a10d Move cma dump to itself am: e7ea94d8e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241488

Change-Id: I20ef8777e4da8756fd97180307b40883e60c5916
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 01:52:42 +00:00
Adam Shih
7a9d142fa9 Move cma dump to itself am: e7ea94d8e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22241488

Change-Id: I88b531cfac4a0bd0d6e3d84e6306a33abf3a6273
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 01:52:13 +00:00
TreeHugger Robot
feef477d2f Merge "Remove tracking_denials/hal_fingerprint_default.te" into udc-dev 2023-03-27 01:37:37 +00:00
chenkris
2bd6ae14f3 Remove tracking_denials/hal_fingerprint_default.te
Bug: 187015705
Bug: 183338543
Test: build and test fingerprint on device.
Test: no fingerprint avc denials in logcat.
Change-Id: I1dde2c0d8c8ab2610c2b8147c15ac5c9f813345a
2023-03-24 07:40:05 +00:00
Adam Shih
e7ea94d8e1 Move cma dump to itself
Bug: 273380985
Test: adb bugreport
Change-Id: I40ecb631c7fbbea216f5c56857b92152c997e466
2023-03-24 13:56:31 +08:00
Automerger Merge Worker
097961d2ec Merge "Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: 2f8f23232a am: 1501f5458b" 2023-03-24 03:09:24 +00:00
KRIS CHEN
dea2b3620b Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: 2f8f23232a am: 1501f5458b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22178646

Change-Id: I8761f417444a619ad8d59fa223efc38ef6f2acb8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 03:09:06 +00:00
KRIS CHEN
6d2b151005 Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: 2f8f23232a am: cb8f52b514
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22178646

Change-Id: I804bb116911608b9623cb2b263e7e89c87394d9c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 03:09:02 +00:00
KRIS CHEN
cb8f52b514 Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: 2f8f23232a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22178646

Change-Id: Id29c4d1281e5aca629f1a76a3c2e7c65a63c414a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 02:41:38 +00:00
KRIS CHEN
1501f5458b Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: 2f8f23232a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22178646

Change-Id: Ifde56bf07622f05ecc86caece163d72b2f1dde0f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 02:41:26 +00:00
KRIS CHEN
2f8f23232a Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev 2023-03-24 02:06:37 +00:00
Jörg Wagner
76fb98e212 [automerger skipped] Update Mali DDK to r40 : Additional SELinux settings am: cb6bad65e7 am: cefbf93aaf -s ours
am skip reason: Merged-In I5c69a8bafe3a4c738c124facb1f437ec721cc3ea with SHA-1 74d31a1568 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22170060

Change-Id: I4291e84d5a69d82558c730199fcde1f17cd5a204
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 16:10:58 +00:00
Jörg Wagner
38d5caf85d [automerger skipped] Update Mali DDK to r40 : Additional SELinux settings am: cb6bad65e7 am: 0c0b6423c1 -s ours
am skip reason: Merged-In I5c69a8bafe3a4c738c124facb1f437ec721cc3ea with SHA-1 74d31a1568 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22170060

Change-Id: Ia2a7b6e2102bc4255032546344a7b09717d7c0c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 16:08:44 +00:00
Jörg Wagner
cefbf93aaf Update Mali DDK to r40 : Additional SELinux settings am: cb6bad65e7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22170060

Change-Id: I883c67b413abdd2d5a638f62784099de9afe37d2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 15:15:21 +00:00
Jörg Wagner
0c0b6423c1 Update Mali DDK to r40 : Additional SELinux settings am: cb6bad65e7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22170060

Change-Id: I72b2d775be4c234a14be59460d6dd28d18877ae8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 15:14:19 +00:00
Kris Chen
d678ee3226 Allow fingerprint hal to read sysfs_leds
Fix the following avc denials:
avc: denied { search } for name="backlight" dev="sysfs" ino=79316
scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_leds:s0
tclass=dir permissive=1

avc: denied { read } for name="state" dev="sysfs" ino=79365
scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_leds:s0
tclass=file permissive=1

Bug: 271072126
Test: Authenticate fingerprint.
Change-Id: I67f5502bc7b4b1d6e14cf493f1bc6575980bcd0d
2023-03-21 12:19:07 +00:00
Jörg Wagner
cb6bad65e7 Update Mali DDK to r40 : Additional SELinux settings
Expose DDK's dynamic configuration options through the Android Sysprop
interface, following recommendations from Arm's Android Integration
Manual.

Bug: 261718474

(cherry picked from commit 74d31a1568)
Merged-In: I5c69a8bafe3a4c738c124facb1f437ec721cc3ea
Change-Id: I7e6734cb79b38898eb65a0194b37381a1367fc36
2023-03-21 10:31:51 +00:00
Adam Shih
a5903955ab use devfreq dump from gs-common am: 4d9aa0b28f am: 42a8d89b07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22175766

Change-Id: I8434054b1ca400a14d74edc7063382f0c530b4e6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 09:24:09 +00:00
Adam Shih
e16b86e92f use devfreq dump from gs-common am: 4d9aa0b28f am: 1b0cecc49f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22175766

Change-Id: I54bdfa70d075925b9c6950c19501ad4912f2ab03
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 09:22:37 +00:00
Adam Shih
1b0cecc49f use devfreq dump from gs-common am: 4d9aa0b28f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22175766

Change-Id: Ib07707b9eadf2caa57daadce6a9ee548001329d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 08:29:53 +00:00
Adam Shih
42a8d89b07 use devfreq dump from gs-common am: 4d9aa0b28f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/22175766

Change-Id: Ib8b8fc4d46bad983aa50ade7aa7b53043a22d950
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 08:29:49 +00:00
Adam Shih
4d9aa0b28f use devfreq dump from gs-common
Bug: 273380985
Test: adb bugreport
Change-Id: I0ea6767fd7640c2ee1be66f659f94c15cb4766cd
2023-03-21 12:41:23 +08:00
Enzo Liao
8d943b5b0e SSRestarDetector: modify the SELinux policy to allow access files owned by system for Whitechapel. am: 893d8ddff7 am: 2bc1af0adf am: 2110a1db8c am: ecafac64e8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21937144

Change-Id: I627968057746c3c5fd62eaced5dcf0f3c32c6600
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 06:27:32 +00:00
Enzo Liao
2b4d361e25 SSRestarDetector: modify the SELinux policy to allow access files owned by system for Whitechapel. am: 893d8ddff7 am: 2bc1af0adf am: 2110a1db8c am: 1eb912223d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21937144

Change-Id: I7a02d9c74141fc4521b338ceaec20d2f7a14b259
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 06:26:23 +00:00
Enzo Liao
ecafac64e8 SSRestarDetector: modify the SELinux policy to allow access files owned by system for Whitechapel. am: 893d8ddff7 am: 2bc1af0adf am: 2110a1db8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21937144

Change-Id: Ifb2982c33c131f6ac4c2b7c3cd72f636204c6344
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 05:53:10 +00:00
Enzo Liao
1eb912223d SSRestarDetector: modify the SELinux policy to allow access files owned by system for Whitechapel. am: 893d8ddff7 am: 2bc1af0adf am: 2110a1db8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21937144

Change-Id: Icaa70fa36b8e959c91954b5641e6e7fe0aec3e2b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 05:53:07 +00:00
Enzo Liao
2110a1db8c SSRestarDetector: modify the SELinux policy to allow access files owned by system for Whitechapel. am: 893d8ddff7 am: 2bc1af0adf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21937144

Change-Id: Ic08044ef00fef5fab0a52fe8375f3a7aa1a51924
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 05:14:54 +00:00
Enzo Liao
2bc1af0adf SSRestarDetector: modify the SELinux policy to allow access files owned by system for Whitechapel. am: 893d8ddff7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21937144

Change-Id: Ibd95511a2d3a6e1cdebac8a20238c2ecfa876e27
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 04:38:41 +00:00
Enzo Liao
893d8ddff7 SSRestarDetector: modify the SELinux policy to allow access files owned by system for Whitechapel.
It needs to access a file pushed by hosts of test suites (details: http://go/pd-client-for-lab#heading=h.wtp07hbqvwgx)

Bug: 234359369
Design: http://go/pd-client-for-lab
Test: manual (http://b/271555983#comment3)
Change-Id: I1c9544ca2ebe1857c439f00c4589f739aca8e157
2023-03-15 03:52:17 +00:00
Automerger Merge Worker
23f8df705a Merge "[automerger skipped] Merge Android 13 QPR2 am: f703b89586 -s ours am: af9a0596e4 -s ours am: f782184f62 -s ours am: 0ff740c68d -s ours am: 10b03660f2 -s ours" 2023-03-15 02:16:00 +00:00
Xin Li
5191492aac [automerger skipped] Merge Android 13 QPR2 am: f703b89586 -s ours am: af9a0596e4 -s ours am: f782184f62 -s ours am: 0ff740c68d -s ours am: 10b03660f2 -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 85bd1b8441 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2486782

Change-Id: I66cc7d43d8c40708376e15af8c9c1840fef35690
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 02:04:06 +00:00
Xin Li
e5c7a53814 [automerger skipped] Merge Android 13 QPR2 am: f703b89586 -s ours am: af9a0596e4 -s ours am: f782184f62 -s ours am: 0ff740c68d -s ours am: b1be5b93be -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 85bd1b8441 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2486782

Change-Id: I4ef465ce264f47050921e499af0f77183781381a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 02:03:47 +00:00
Xin Li
10b03660f2 [automerger skipped] Merge Android 13 QPR2 am: f703b89586 -s ours am: af9a0596e4 -s ours am: f782184f62 -s ours am: 0ff740c68d -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 85bd1b8441 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2486782

Change-Id: Ie9a9afc06082ffd1f145d91547fabbcb8df98b83
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 01:10:51 +00:00
Xin Li
b1be5b93be [automerger skipped] Merge Android 13 QPR2 am: f703b89586 -s ours am: af9a0596e4 -s ours am: f782184f62 -s ours am: 0ff740c68d -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 85bd1b8441 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2486782

Change-Id: I0aa748c878f4e695ea3b2c6206067e692a42c613
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 01:07:26 +00:00
Xin Li
0ff740c68d [automerger skipped] Merge Android 13 QPR2 am: f703b89586 -s ours am: af9a0596e4 -s ours am: f782184f62 -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 85bd1b8441 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2486782

Change-Id: Ie37f36262dee71729e90a28da38d1ebf8439713e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 00:06:22 +00:00
Xin Li
f782184f62 [automerger skipped] Merge Android 13 QPR2 am: f703b89586 -s ours am: af9a0596e4 -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 85bd1b8441 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2486782

Change-Id: I3eb89a6c5cdb182b2e340d61458fcbe804d156d0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 23:06:15 +00:00
Xin Li
af9a0596e4 [automerger skipped] Merge Android 13 QPR2 am: f703b89586 -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 85bd1b8441 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2486782

Change-Id: I8e0f4144027a594f78e29bde8407d130509ac6e5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 22:32:23 +00:00
Xin Li
f703b89586 Merge Android 13 QPR2
Bug: 273316506
Merged-In: I09b67ca07d7f9573d77f64686fb818d4dc1753cc
Change-Id: I4dfcfac354c52a6bf2828558dd44e1acca0b550a
2023-03-13 23:09:33 -07:00
Woody Lin
687bb4fae4 Revert "Update SELinux error"
This reverts commit 46285b5dd5.

Reason for revert: fixed by aosp/2422419

Bug: 260366497
Bug: 264600011
Change-Id: I1c5962ab5900d5b2342411b352b502a6545eb0ad
2023-03-14 09:49:34 +08:00
Woody Lin
89581ecfe5 Revert "Update SELinux error"
This reverts commit afe63f78cc.

Reason for revert: fixed by aosp/2422419

Bug: 260366497
Bug: 264600011
Change-Id: I4877527b78f99da935548a1e5b70dab4009ed0bf
2023-03-14 09:47:59 +08:00
Jasmine Cha
ee20a021fd Merge "audio: move sepolicy about audio to gs-common" into udc-dev am: 3b3aa9e921 am: 9de1c30b5b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21913160

Change-Id: Ie459c442b73be45c6e788875f6c47e973296406c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 02:39:26 +00:00
Jasmine Cha
00cc5a471e Merge "audio: move sepolicy about audio to gs-common" into udc-dev am: 3b3aa9e921 am: 5b90d7c3a3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21913160

Change-Id: Ica9606fdbe2e8ee165fedfbd640d38ed67cc9135
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 02:22:29 +00:00
Jasmine Cha
5b90d7c3a3 Merge "audio: move sepolicy about audio to gs-common" into udc-dev am: 3b3aa9e921
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21913160

Change-Id: Ifdcd71f609cdcce59e5139e01f50ae77949d7f52
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 02:19:45 +00:00
Jasmine Cha
9de1c30b5b Merge "audio: move sepolicy about audio to gs-common" into udc-dev am: 3b3aa9e921
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21913160

Change-Id: I966a82488c714be2d3670da5431d4d901241d424
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 02:18:12 +00:00
Jasmine Cha
3b3aa9e921 Merge "audio: move sepolicy about audio to gs-common" into udc-dev 2023-03-10 02:06:05 +00:00
Adam Shih
16851a4307 Move display dump to gs-common am: 7d3f25d95b am: 1de3912d7f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21806784

Change-Id: I3f5bc229282c1d6e3a84b1ef8557afdac4a01379
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 06:01:46 +00:00
Adam Shih
39d7ea36fe Move display dump to gs-common am: 7d3f25d95b am: 80de558c18
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21806784

Change-Id: I2b576d8655d9cc28e5dd0ecaf3d550bf5a1c1562
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 06:00:37 +00:00
Adam Shih
1de3912d7f Move display dump to gs-common am: 7d3f25d95b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21806784

Change-Id: I3223ad19697951122b81062d7263c475bfa5c019
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 05:29:53 +00:00
Adam Shih
80de558c18 Move display dump to gs-common am: 7d3f25d95b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21806784

Change-Id: Ie1a549f1f550e8263f2b3c01433097e0e06c3192
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 05:29:16 +00:00
Jasmine Cha
b263562360 audio: move sepolicy about audio to gs-common
Bug: 259161622
Test: build pass and check with audio ext hidl/aidl

Change-Id: Ie1499be82e405c2ddf4cd1a62ee7ff2823befd8e
Signed-off-by: Jasmine Cha <chajasmine@google.com>
2023-03-09 10:10:18 +08:00
Adam Shih
7d3f25d95b Move display dump to gs-common
Bug: 269212897
Test: adb bugreport
Change-Id: Id40661687bbd04d7eba4790dc5fe17ca5c79e47d
2023-03-07 13:01:05 +08:00
Jörg Wagner
3125b7d905 Merge "Update Mali DDK to r40 : Additional SELinux settings" 2023-02-23 13:18:05 +00:00
leochuang
2c02c420e0 Update SELinux error am: 4fe64170d3 am: c4bfc15b7b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21533865

Change-Id: I7b096e58c24f582eac389d89d130aafe4fbe35f4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 09:05:57 +00:00
leochuang
2925bec4e5 Update SELinux error am: 4fe64170d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21533865

Change-Id: Ic382ac504a384ec963ab0288d8730b35a470b34e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 08:03:52 +00:00
leochuang
c4bfc15b7b Update SELinux error am: 4fe64170d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21533865

Change-Id: I1f50d5fe08e0eeb790fa14d540e8491246710430
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 07:59:38 +00:00
leochuang
4fe64170d3 Update SELinux error
Test: scanBugreport
Bug: 270247432
Change-Id: Ia5e76ee1c027ac2b1cbbbc6a20a20f3ea609a1b7
2023-02-22 10:30:02 +08:00
leochuang
b5b0e0908f Update SELinux error
Test: scanBugreport
Bug: 270080367
Change-Id: Ifed87779021a6faa4cd8d0ea3431436acd1de365
2023-02-21 08:50:06 +08:00
leochuang
ba6c4e189c Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 269964825
Test: scanBugreport
Bug: 269964913
Change-Id: Ie0086b87af77e8b6feb86d796c7fa897038f973b
2023-02-20 01:04:46 +00:00
Ken Tsou
b1e0e2fd5c [automerger skipped] [DO NOT MERGE] hal_health_default: access persist.vendor.shutdown.* am: 3194ab09f9 am: c02d353334 -s ours am: cd826e0365 -s ours am: 65061e1985 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21457164

Change-Id: I42e26cb3879e15bf916e54f2e83a05ce661e9e7c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 18:47:49 +00:00
Ken Tsou
65061e1985 [automerger skipped] [DO NOT MERGE] hal_health_default: access persist.vendor.shutdown.* am: 3194ab09f9 am: c02d353334 -s ours am: cd826e0365 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21457164

Change-Id: Ib308b218b3f8de3ee2769de15c1a9afbfb51c950
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 17:25:26 +00:00
Ken Tsou
4b2b94e582 [automerger skipped] [DO NOT MERGE] hal_health_default: access persist.vendor.shutdown.* am: 3194ab09f9 am: c02d353334 -s ours am: cd826e0365 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21457164

Change-Id: I9b8d95dc0bd7f24308156acde34ec21eef16aad8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 17:23:18 +00:00
Ken Tsou
a0e8acad7d hal_health_default: allow to access persist.vendor.shutdown.* am: 6964113b1c am: 38aafe55ec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21475627

Change-Id: I5db96f2ac3bc02c4bb853f1f5858541d2686d256
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 16:01:39 +00:00
Ken Tsou
cd826e0365 [automerger skipped] [DO NOT MERGE] hal_health_default: access persist.vendor.shutdown.* am: 3194ab09f9 am: c02d353334 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21457164

Change-Id: I313ea2cb154644b1a61f40e08e0cd6f41868b5ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 15:53:31 +00:00
Ken Tsou
c02d353334 [DO NOT MERGE] hal_health_default: access persist.vendor.shutdown.* am: 3194ab09f9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21457164

Change-Id: Iad95f30732e0342f673d36999028722775706bb5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 14:52:58 +00:00
Ken Tsou
38aafe55ec hal_health_default: allow to access persist.vendor.shutdown.* am: 6964113b1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21475627

Change-Id: Ia9a532bbff7fed2c01e953ec762c5bd6f2925aa5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 14:51:16 +00:00
Ken Tsou
87d9e7e10b hal_health_default: allow to access persist.vendor.shutdown.* am: 6964113b1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21475627

Change-Id: I5ee9b8b4173b5c391469fcfa6f90049c78dfcfbe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 14:49:15 +00:00
Ken Tsou
3194ab09f9 [DO NOT MERGE] hal_health_default: access persist.vendor.shutdown.*
msg='avc: denied { set } for property=persist.vendor.shutdown.voltage_avg pid=908 uid=1000 gid=1000 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:vendor_default_prop:s0 tclass=property_service permissive=0'

Bug: 266181615
Change-Id: Ia87610f0363bbfbe4fe446244b44818c273841f4
Signed-off-by: Ken Tsou <kentsou@google.com>
2023-02-17 10:28:27 +00:00
Ken Tsou
6964113b1c hal_health_default: allow to access persist.vendor.shutdown.*
msg='avc: denied { set } for property=persist.vendor.shutdown.voltage_avg pid=908 uid=1000 gid=1000 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:vendor_default_prop:s0 tclass=property_service permissive=0'

Bug: 266181615
Change-Id: Ia87610f0363bbfbe4fe446244b44818c273841f4
Signed-off-by: Ken Tsou <kentsou@google.com>
2023-02-17 07:02:01 +00:00
Lucas Wei
6ef92ee0d1 Merge "votable: Update don't audit file entry" 2023-02-16 06:00:51 +00:00
TreeHugger Robot
afafde41a1 Merge "Update SELinux error" 2023-02-15 03:53:59 +00:00
Treehugger Robot
6c53f05cae Merge "Remove bug_map entry for incident" am: bc70a9f3df am: dfd9324aca am: 05d473ec62
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2436853

Change-Id: Ic2399bc1d08f5b79ac19e083595a0f0e3ba9233e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-15 03:27:43 +00:00
Lucas Wei
5a70bbb335 votable: Update don't audit file entry
Test: No votable avc errors in dmesg
Bug: 247905787
Change-Id: I95ab4dd7750e9b0f26d41fece50dc6d0aa73dd41
Signed-off-by: Lucas Wei <lucaswei@google.com>
2023-02-15 02:49:08 +00:00
leochuang
e5b2d04476 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 269218654
Test: scanBugreport
Bug: 269370106
Bug: 269045042
Change-Id: Ief58a1f19580251476c71602951550388015df01
2023-02-15 10:25:40 +08:00
Treehugger Robot
05d473ec62 Merge "Remove bug_map entry for incident" am: bc70a9f3df am: dfd9324aca
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2436853

Change-Id: I0c0386e02131db6c353f059ad1320f51027d9e6d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-15 02:23:51 +00:00
Treehugger Robot
dfd9324aca Merge "Remove bug_map entry for incident" am: bc70a9f3df
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2436853

Change-Id: I435bdfe151ffbb88e2b3e2f8360acfaf42093ee4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-15 01:36:50 +00:00
Treehugger Robot
bc70a9f3df Merge "Remove bug_map entry for incident" 2023-02-15 00:31:13 +00:00
Thiébaud Weksteen
10d08a16e1 Remove bug_map entry for incident
Bug: 238570971
Bug: 238571324
Bug: 238571420
Test: presubmit
Change-Id: Ib24d85aaed87e6e5dc0b0281d65407e8c45e017c
2023-02-15 10:19:58 +11:00
TreeHugger Robot
a6f9e17cd4 Merge "Update SELinux error" 2023-02-14 22:56:03 +00:00
Treehugger Robot
580fb1061d Merge "Map AIDL Gatekeeper to same policy as HIDL version" am: b72bb4c53f am: 114e2a377f am: 60fc07a2f5
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2424201

Change-Id: I269fe35ddd8dc13df7b275a84f86955e2853563a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-14 20:44:30 +00:00
Treehugger Robot
60fc07a2f5 Merge "Map AIDL Gatekeeper to same policy as HIDL version" am: b72bb4c53f am: 114e2a377f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2424201

Change-Id: I624db1bdd6fbe5de7d774954f5390fb0af884b77
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-14 19:41:20 +00:00
Treehugger Robot
114e2a377f Merge "Map AIDL Gatekeeper to same policy as HIDL version" am: b72bb4c53f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2424201

Change-Id: Ib469bb013d0c7335e2da4f429cde4c5df9395ed5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-14 18:56:35 +00:00
Android Build Coastguard Worker
50b0c84d12 Merge cherrypicks of ['googleplex-android-review.googlesource.com/21219300'] into tm-qpr2-release.
Change-Id: Iba513e117f9749ea342aa573120c758f4a14ba68
2023-02-14 18:20:12 +00:00
Ray Chi
beacc5b05f [ DO NOT MERGE ] usb: Add sepolicy for extcon access
USB gadget hal will access extcon folder so that this patch
will add new rule to allow USB gadget hal to access extcon.

Bug: 263435622
Test: verified pass
Change-Id: I8c265919f7ae4b18aa304b0a584536d2a0f4b27a
(cherry picked from commit 9828cc747a)
Merged-In: I8c265919f7ae4b18aa304b0a584536d2a0f4b27a
2023-02-14 18:13:34 +00:00
Treehugger Robot
b72bb4c53f Merge "Map AIDL Gatekeeper to same policy as HIDL version" 2023-02-14 17:48:17 +00:00
Jörg Wagner
74d31a1568 Update Mali DDK to r40 : Additional SELinux settings
Expose DDK's dynamic configuration options through the Android Sysprop
interface, following recommendations from Arm's Android Integration
Manual.

b/261718474

Change-Id: I5c69a8bafe3a4c738c124facb1f437ec721cc3ea
2023-02-14 15:33:20 +00:00
leochuang
14c66190df Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 269218654
Test: scanBugreport
Bug: 269218638
Change-Id: If7d4633aa4f4f10cf3b56640ae6661a2a9b20b91
2023-02-14 15:46:17 +08:00
Adam Shih
bd3291b1c0 Merge "Move memory dump to gs-common" 2023-02-14 07:22:12 +00:00
Adam Shih
9a7bb8df86 Move memory dump to gs-common
Bug: 240530709
Test: adb bugreport
Change-Id: I78433d8d170af54a4daee6c9a9218ce35e78e730
2023-02-13 14:56:30 +08:00
sukiliu
d48a10f9b0 Update SELinux error
Test: scanBugreport
Bug: 269045042
Change-Id: I6291a7d3fd3b75d68548bd2fb7287b8ff754684a
2023-02-13 10:41:23 +08:00
sukiliu
8835275413 Update SELinux error
Test: scanBugreport
Bug: 268411073
Bug: 268147283
Bug: 268146971
Change-Id: I60fdc8e3d44da7632522f57adc01c0e6879be83c
2023-02-10 10:20:35 +08:00
Subrahmanyaman
b4ec2efe4b Map AIDL Gatekeeper to same policy as HIDL version
Bug: 268342724
Test: VtsHalGatekeeperTargetTest
Change-Id: I050860bfeb0e87830e554ed19bc1efe54e7db0a5
2023-02-08 18:37:15 +00:00
Ken Yang
8e9fa12996 Merge "WLC: Add required sysfs_wlc sepolicies" 2023-02-05 02:30:37 +00:00
TreeHugger Robot
0e10d6a3d4 [automerger skipped] Merge "[ DO NOT MERGE ] usb: Add sepolicy for extcon access" into tm-qpr-dev am: 5dbdb799e8 am: 51d695553c -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21219300

Change-Id: I0205dc11ca3217914f9a13e38e7f4a05ccb4a128
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-04 05:07:14 +00:00
Ray Chi
809cff1a98 [automerger skipped] [ DO NOT MERGE ] usb: Add sepolicy for extcon access am: 9828cc747a am: 4003532648 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21219300

Change-Id: I68ba4f60cc25597b16c41da55c1bde935284fa07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-04 05:06:51 +00:00
TreeHugger Robot
51d695553c Merge "[ DO NOT MERGE ] usb: Add sepolicy for extcon access" into tm-qpr-dev am: 5dbdb799e8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21219300

Change-Id: Ia05aa347d9c71ab2cdf0b511c7d77ba5ab5b83e7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-04 04:37:07 +00:00
Ray Chi
4003532648 [ DO NOT MERGE ] usb: Add sepolicy for extcon access am: 9828cc747a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21219300

Change-Id: I2c4f5571065ac696d32f5050d6b94f7957ddce3c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-04 04:37:04 +00:00
Nicolas Geoffray
f485d48f43 Allow ssr_detector_app directory creation in system_app_data_file. am: 514eb95f8e am: 0090218108 am: fa4c9c92e0
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2419089

Change-Id: Ia166fb782bc79702f9f064cf326af5872bfc1fb4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-03 16:54:42 +00:00
Nicolas Geoffray
fa4c9c92e0 Allow ssr_detector_app directory creation in system_app_data_file. am: 514eb95f8e am: 0090218108
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2419089

Change-Id: Iab23f2032100e1105e1f1edaee8a4dd90f7ec2d9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-03 16:25:08 +00:00
Nicolas Geoffray
0090218108 Allow ssr_detector_app directory creation in system_app_data_file. am: 514eb95f8e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2419089

Change-Id: I510f6f8cc0dc2c609ec46a901738374bfd9d3217
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-03 15:34:58 +00:00
TreeHugger Robot
5dbdb799e8 Merge "[ DO NOT MERGE ] usb: Add sepolicy for extcon access" into tm-qpr-dev 2023-02-03 14:47:47 +00:00
Taylor Nelms
1a402cb6ba [automerger skipped] Modify permissions to allow dumpstate process to access decon_counters node am: ae39e117c1 am: c2769f1ede -s ours
am skip reason: Merged-In I71883632857e76cfead39b16560b3695e13a6746 with SHA-1 807f7b2efa is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21041858

Change-Id: I4349a6213feb8bc0700b769c66fb88582bbbb7f2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-03 14:17:03 +00:00
Taylor Nelms
c2769f1ede Modify permissions to allow dumpstate process to access decon_counters node am: ae39e117c1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/21041858

Change-Id: I469375e8d9bf2fed575bbb9f972f4eeaa45fbb15
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-03 13:47:31 +00:00
Nicolas Geoffray
514eb95f8e Allow ssr_detector_app directory creation in system_app_data_file.
Bug: 260557058
Test: m
Change-Id: Iad7bb0609d7ca3ae89d6583ba3638e36300538a1
2023-02-03 13:06:50 +00:00
Ray Chi
9828cc747a [ DO NOT MERGE ] usb: Add sepolicy for extcon access
USB gadget hal will access extcon folder so that this patch
will add new rule to allow USB gadget hal to access extcon.

Bug: 263435622
Test: verified pass
Change-Id: I8c265919f7ae4b18aa304b0a584536d2a0f4b27a
2023-02-02 15:22:33 +08:00
Ken Yang
fcb9c033a1 WLC: Add required sysfs_wlc sepolicies
The sysfs_wlc is still required for certain services like
hal_health_default. Add these sepolicies to pass the tests.

Bug: 267171670
Change-Id: Ic4dca7a34e8ed9b096a650b1df4bb58290425117
Signed-off-by: Ken Yang <yangken@google.com>
2023-01-31 15:02:51 +00:00
Long Ling
fc3e9e0070 display: set context for sysfs file refresh_rate
Bug: 263821118
Change-Id: I125f8d0ed2f9197041f0913097d15a696c01a516
2023-01-26 18:45:53 -08:00
Victor Barr
0485b4848f Merge "Move Support for DBA HAL in common edgetpu packages" 2023-01-19 21:52:38 +00:00
Taylor Nelms
ae39e117c1 Modify permissions to allow dumpstate process to access decon_counters node
Bug: 240346564
Test: Build for Oriole device with "user" build,
check bugreport for decon_counters content
Merged-In: I71883632857e76cfead39b16560b3695e13a6746
Change-Id: I010a9e8809192a5a1ee5842d5ac973d874836cea
Signed-off-by: Taylor Nelms <tknelms@google.com>
2023-01-19 14:14:25 +00:00
Orion Hodson
5785d77564 Remove the dontaudit suppressions for dex2oat.te am: ad0f7df5bc am: a368aaa8ec am: 9d7b025bae
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2387656

Change-Id: I4552d3768617e79d04765aa29d7df332c5d7d665
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-18 14:00:09 +00:00
Orion Hodson
9d7b025bae Remove the dontaudit suppressions for dex2oat.te am: ad0f7df5bc am: a368aaa8ec
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2387656

Change-Id: If5d57e7c780fe8e9009e4c2ee4c3684a09e77e2b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-18 13:07:38 +00:00
Orion Hodson
a368aaa8ec Remove the dontaudit suppressions for dex2oat.te am: ad0f7df5bc
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2387656

Change-Id: I602d92ed12eadec42212dd2e43f6ea0f79ceadcb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-18 12:36:57 +00:00
Victor Barr
5eea830c6e Move Support for DBA HAL in common edgetpu packages
Previously supported in some cases. Now extend it to all common cases.

Bug: 263394888
Test: Built and ran DBA HAL on Android Device
Change-Id: I70db1fae6b9f5787c635bb2fcbabc7ee0e064a9f
2023-01-17 18:42:26 +00:00
Orion Hodson
ad0f7df5bc Remove the dontaudit suppressions for dex2oat.te
`system/sepolicy/private/dex2oat.te` has rules for these now.

Bug: 187016929
Test: m
Change-Id: Idb34a644af6620c45f044f98c3d2686fca8ced05
2023-01-17 15:02:07 +00:00
Xin Li
08d99bb5d8 [automerger skipped] Merge tm-qpr-dev-plus-aosp-without-vendor@9467136 am: 5fdee26b3a -s ours am: 5018f86e1b -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 1d7352fb4d is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20948074

Change-Id: I066524c9e981955ed37cba34cbda0651bbf82b98
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-13 21:35:43 +00:00
Ken Yang
fc2efe09bd Merge "WLC: Cleanup the sysfs_wlc policies" 2023-01-13 14:41:30 +00:00
Xin Li
5018f86e1b [automerger skipped] Merge tm-qpr-dev-plus-aosp-without-vendor@9467136 am: 5fdee26b3a -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 1d7352fb4d is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20948074

Change-Id: I6c28e85d988fc6a39b2162312b3a03ebba01f69a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-13 08:08:23 +00:00
Xin Li
5fdee26b3a Merge tm-qpr-dev-plus-aosp-without-vendor@9467136
Bug: 264720040
Merged-In: I09b67ca07d7f9573d77f64686fb818d4dc1753cc
Change-Id: Icb4114a0d002ce6bfe3f44e8d1a334fcd2d7fedd
2023-01-11 22:46:18 -08:00
Kyle Zhang
bfbf488408 Merge "Add hal_drm_widevine for Widevine exec sepolicy" 2023-01-11 05:37:46 +00:00
Ken Yang
a49c3a5479 WLC: Cleanup the sysfs_wlc policies
The sepolicy must be self-contained without including wirelss_charger to
avoid build break in AOSP

Bug: 263830018
Change-Id: I4eee380ae61f83c5563ee8842a94fd1fb9e520ef
Signed-off-by: Ken Yang <yangken@google.com>
2023-01-10 16:02:31 +00:00
TreeHugger Robot
1f4efc5556 Merge "sepolicy: fix avc denial" 2023-01-06 07:15:13 +00:00
Adam Shih
e93abd4d84 [automerger skipped] update error on ROM am: 776148c936 am: 6dcabc08bf am: d246880b0d -s ours
am skip reason: Merged-In Ifa7de8df3b09eabee7df8008dbb381854e18f48f with SHA-1 46285b5dd5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2376986

Change-Id: Ib8b824f343d770e18c2cceac4d754c877fb49344
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-06 05:42:56 +00:00
Adam Shih
d246880b0d update error on ROM am: 776148c936 am: 6dcabc08bf
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2376986

Change-Id: I546135adca5de40c7792405ba32d4f4cc8328424
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-06 05:05:08 +00:00
Adam Shih
6dcabc08bf update error on ROM am: 776148c936
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2376986

Change-Id: I2f022cc7261da024d92987b94ee16c4c92d62607
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-01-06 04:35:08 +00:00
Kyle Zhang
902db3961f Add hal_drm_widevine for Widevine exec sepolicy
Bug: 243699259
Test: atp v2/widevine-eng/drm_compliance
Change-Id: Ifede19e690cb7b7333016df08fb146a0ec8f7409
2023-01-06 03:14:20 +00:00
Adam Shih
776148c936 update error on ROM
Bug: 242203678
Test: pass boot test
Change-Id: Ib50c5aed2787d068e589491373a75de47cbe48ee
Merged-In: Ifa7de8df3b09eabee7df8008dbb381854e18f48f
2023-01-06 02:42:14 +00:00
Chungkai Mei
f5ee8054e0 sepolicy: fix avc denial
fix avc denial when applying aosp/2333702

Bug: 261678056
Test: boot without avc denial
Change-Id: I4674a5cb13f2f06f011c380699353b1a561ad290
Signed-off-by: Chungkai Mei <chungkai@google.com>
2023-01-05 09:40:42 +00:00
Adam Shih
afe63f78cc Update SELinux error
Test: scanBugreport
Bug: 264483673
Test: scanAvcDeniedLogRightAfterReboot
Change-Id: I954f764f035fcffa06c1c940bece36f0d7e42711
2023-01-05 13:38:16 +08:00
Adam Shih
46285b5dd5 Update SELinux error
Test: scanBugreport
Bug: 264483156
Change-Id: Ifa7de8df3b09eabee7df8008dbb381854e18f48f
2023-01-05 11:04:58 +08:00
Ken Yang
8c2188f24e Merge "WLC: Add gs101 specific sepolicy for wireless_charger" 2022-12-21 08:36:14 +00:00
Taylor Nelms
66bf88de5d Merge "Modify permissions to allow dumpstate process to access decon_counters node" 2022-12-21 01:41:40 +00:00
Ken Yang
33f94a5428 WLC: Add gs101 specific sepolicy for wireless_charger
Bug: 237600973
Change-Id: If25a921ba9f0261c7f71cb88425526f307df9064
Signed-off-by: Ken Yang <yangken@google.com>
2022-12-21 00:49:26 +00:00
Devin Moore
d1ba957ec2 Allow pixelstats hal to talk to the new AIDL sensorservice am: aede443b86 am: 3b4beeb98f am: ae8eb694fa
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2364600

Change-Id: I16211b9a52338bbf7569508877305dbc66d5228b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-20 21:46:17 +00:00
Devin Moore
ae8eb694fa Allow pixelstats hal to talk to the new AIDL sensorservice am: aede443b86 am: 3b4beeb98f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2364600

Change-Id: I74400a040ba88d35a9eda207eb6eabf712627799
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-20 20:57:13 +00:00
Devin Moore
3b4beeb98f Allow pixelstats hal to talk to the new AIDL sensorservice am: aede443b86
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2364600

Change-Id: I19a08a0984eb786998fecdf9b98256f8d3fa8199
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-20 20:19:32 +00:00
Android Build Coastguard Worker
5eef469d2c Snap for 9420665 from ca047e8607 to tm-qpr2-release
Change-Id: I106a2d964d9c744022663aca76ffeaca6ba0666c
2022-12-20 00:12:29 +00:00
Devin Moore
aede443b86 Allow pixelstats hal to talk to the new AIDL sensorservice
This is being used in libsensorndkbridge now, so permissions are
required.

Test: m
Bug: 205764765
Change-Id: I65945c8b259538d274da23d8ecc6cf4d2362dcbd
2022-12-19 23:42:23 +00:00
TreeHugger Robot
5aa010e054 Merge "modem_svc_sit: grant the modem property access" into tm-qpr-dev am: ca047e8607 am: ad5f8a13d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20502509

Change-Id: I79eaaa294adfa16f32362e2c5134f783c8aaa352
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-19 14:23:42 +00:00
TreeHugger Robot
ad5f8a13d3 Merge "modem_svc_sit: grant the modem property access" into tm-qpr-dev am: ca047e8607
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20502509

Change-Id: Iadf35d359d83215d410f1aa7f1e135d56af9acb0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-19 13:43:37 +00:00
TreeHugger Robot
ca047e8607 Merge "modem_svc_sit: grant the modem property access" into tm-qpr-dev 2022-12-19 12:53:32 +00:00
Taylor Nelms
807f7b2efa Modify permissions to allow dumpstate process to access decon_counters node
Bug: 240346564
Test: Build for Oriole device with "user" build, check bugreport for decon_counters content
Change-Id: I71883632857e76cfead39b16560b3695e13a6746
Signed-off-by: Taylor Nelms <tknelms@google.com>
2022-12-16 16:51:12 +00:00
Android Build Coastguard Worker
754bcdc61f Snap for 9397138 from 1d6ed7613e to tm-qpr2-release
Change-Id: Ib316c4057a29e5cb1276e23910477353c19f8952
2022-12-13 03:46:25 +00:00
Adam Shih
57c6437a23 [automerger skipped] ignore shell access on wlc am: 1d7352fb4d am: c4c7dd1c1a am: 1d6ed7613e -s ours am: 0ba3ab04d2 -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 85bd1b8441 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20677863

Change-Id: I8c44e9f0b68370aa85cde526d56b17f0e253e9dc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 15:19:04 +00:00
Adam Shih
93795a737c [automerger skipped] ignore shell access on wlc am: 85bd1b8441 am: 6aa1118205 am: a1c4ddc9d1 -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 1d7352fb4d is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2342468

Change-Id: I4631e6fbaa13513f9500974bbd5594ac9b52f900
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 14:10:03 +00:00
Automerger Merge Worker
d71328117b Merge "[automerger skipped] Merge Android 13 QPR1 am: 32583c2748 -s ours" into stage-aosp-master am: 18bafd8a83 -s ours am: aca8196a6e -s ours
am skip reason: Merged-In I5242479d32eb9362326544516c06e6a52cd30a6e with SHA-1 356b4a4755 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2337857

Change-Id: Ic435ed8740e8cb97bf93faba5e25a8b680e14409
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 13:50:33 +00:00
Xin Li
fca8a3073d [automerger skipped] Merge Android 13 QPR1 am: 32583c2748 -s ours am: 1b283af694 -s ours am: e2951499c7 -s ours
am skip reason: Merged-In I5242479d32eb9362326544516c06e6a52cd30a6e with SHA-1 356b4a4755 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2337857

Change-Id: I3cf9b94ca0a8e09da88a24837184119874772d88
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 13:47:57 +00:00
Xin Li
d68fb55f2a [automerger skipped] Merge Android 13 QPR1 am: 32583c2748 -s ours am: 5f3965e7b0 -s ours am: 909a4c701e -s ours
am skip reason: Merged-In I5242479d32eb9362326544516c06e6a52cd30a6e with SHA-1 356b4a4755 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2337857

Change-Id: Iad930ab847bfe13630639970a49905de86f04a9b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 11:57:04 +00:00
Adam Shih
0ba3ab04d2 [automerger skipped] ignore shell access on wlc am: 1d7352fb4d am: c4c7dd1c1a am: 1d6ed7613e -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 85bd1b8441 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20677863

Change-Id: I51a9c5e6c97aebedac412c1812ece529c2935f06
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 09:07:21 +00:00
Adam Shih
1d6ed7613e ignore shell access on wlc am: 1d7352fb4d am: c4c7dd1c1a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20677863

Change-Id: Ia2fb569bf4a8cae8a8cc51231af9dd055b3e3b1c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 07:55:37 +00:00
Adam Shih
0e168d428a [automerger skipped] ignore shell access on wlc am: 1d7352fb4d am: cd546433f2 -s ours
am skip reason: Merged-In I09b67ca07d7f9573d77f64686fb818d4dc1753cc with SHA-1 bc85d46045 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20677863

Change-Id: I4aa3281ac3b65a911b698ce6a6b21a7366601f8a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 07:54:23 +00:00
Adam Shih
c4c7dd1c1a ignore shell access on wlc am: 1d7352fb4d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20677863

Change-Id: Ie42a4a9910f006c85ab945ec22486fdbaeb12e6f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 06:50:26 +00:00
Adam Shih
cd546433f2 ignore shell access on wlc am: 1d7352fb4d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20677863

Change-Id: I18d703ecac0053e88c4a98ff764c77edab568423
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 06:50:05 +00:00
Adam Shih
a1c4ddc9d1 ignore shell access on wlc am: 85bd1b8441 am: 6aa1118205
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2342468

Change-Id: I3161158edbda30465251134c06ae025184cd95c9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 04:19:18 +00:00
Adam Shih
6aa1118205 ignore shell access on wlc am: 85bd1b8441
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2342468

Change-Id: I0f88ce4d48cbfa1cc1c2cec0230d5e3f6f30b966
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-12 03:48:48 +00:00
Adam Shih
85bd1b8441 ignore shell access on wlc
Bug: 261804136
Test: boot
Change-Id: I09b67ca07d7f9573d77f64686fb818d4dc1753cc
Merged-In: I09b67ca07d7f9573d77f64686fb818d4dc1753cc
2022-12-11 21:22:10 +08:00
Automerger Merge Worker
aca8196a6e Merge "[automerger skipped] Merge Android 13 QPR1 am: 32583c2748 -s ours" into stage-aosp-master am: 18bafd8a83 -s ours
am skip reason: Merged-In I5242479d32eb9362326544516c06e6a52cd30a6e with SHA-1 356b4a4755 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2337857

Change-Id: Ide28b8c959cfa785669b5dd227785370e1d740e1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-10 02:00:08 +00:00
Xin Li
e2951499c7 [automerger skipped] Merge Android 13 QPR1 am: 32583c2748 -s ours am: 1b283af694 -s ours
am skip reason: Merged-In I5242479d32eb9362326544516c06e6a52cd30a6e with SHA-1 356b4a4755 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2337857

Change-Id: I1d1b0efebbf32eea5fcaf8cb81403542d6e4b3d6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-10 01:57:30 +00:00
Xin Li
909a4c701e [automerger skipped] Merge Android 13 QPR1 am: 32583c2748 -s ours am: 5f3965e7b0 -s ours
am skip reason: Merged-In I5242479d32eb9362326544516c06e6a52cd30a6e with SHA-1 356b4a4755 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2337857

Change-Id: I9e798babd37b2c8320b06bfbe3e5c896ce01624b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-10 00:24:51 +00:00
Automerger Merge Worker
18bafd8a83 Merge "[automerger skipped] Merge Android 13 QPR1 am: 32583c2748 -s ours" into stage-aosp-master 2022-12-09 23:28:06 +00:00
Xin Li
1b283af694 [automerger skipped] Merge Android 13 QPR1 am: 32583c2748 -s ours
am skip reason: Merged-In I5242479d32eb9362326544516c06e6a52cd30a6e with SHA-1 356b4a4755 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2337857

Change-Id: Idf20647c074b26c48d00590f038d29a8bc06c896
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-09 23:19:29 +00:00
Xin Li
5f3965e7b0 [automerger skipped] Merge Android 13 QPR1 am: 32583c2748 -s ours
am skip reason: Merged-In I5242479d32eb9362326544516c06e6a52cd30a6e with SHA-1 356b4a4755 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2337857

Change-Id: I16a691a756299bde1c88fcb3c17b704a4c41247c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-09 23:14:45 +00:00
Xin Li
32583c2748 Merge Android 13 QPR1
Bug: 261731544
Merged-In: I5242479d32eb9362326544516c06e6a52cd30a6e
Change-Id: Ibf4fc54a6b3a0965b7e025059a8b0c58535fbd7f
2022-12-09 10:24:35 -08:00
Nicolas Geoffray
677dcd1685 Also put .ShannonImsService in the vendor_ims_app domain. am: 356b4a4755 am: 5db7a3cc58 am: ed07258d24
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2335444

Change-Id: I1a44378cddf8b63c5a67e34786cfc76c75492f73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-08 21:07:53 +00:00
Nicolas Geoffray
ed07258d24 Also put .ShannonImsService in the vendor_ims_app domain. am: 356b4a4755 am: 5db7a3cc58
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2335444

Change-Id: Ic617201bc7a2ad7cbbda299f8867a7caff023aed
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-08 20:18:06 +00:00
Nicolas Geoffray
5db7a3cc58 Also put .ShannonImsService in the vendor_ims_app domain. am: 356b4a4755
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2335444

Change-Id: I123395fa5a397e17aeaf7cec155cf00be7af8682
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-08 19:31:29 +00:00
Nicolas Geoffray
356b4a4755 Also put .ShannonImsService in the vendor_ims_app domain.
For consistency when running com.shannon.imsservice code.

Test: m
Bug: 260557058
Change-Id: I5242479d32eb9362326544516c06e6a52cd30a6e
2022-12-08 14:39:19 +00:00
Adam Shih
1d7352fb4d ignore shell access on wlc
Bug: 261804136
Test: boot
Change-Id: I09b67ca07d7f9573d77f64686fb818d4dc1753cc
Merged-In: I09b67ca07d7f9573d77f64686fb818d4dc1753cc
2022-12-08 17:59:16 +08:00
Adam Shih
58c0e3bb7c Merge "remove sysfs_touch setting" 2022-12-06 02:59:39 +00:00
Nicolas Geoffray
2c4c8f80d3 Allow ssr_detector_app to create files of type system_app_data_file. am: 594052a664 am: a18011cd14 am: 74042321e2
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2327637

Change-Id: Ic3e7cd5192a3b7bbe37aab6c53e51d011b5c1228
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 18:12:32 +00:00
Nicolas Geoffray
74042321e2 Allow ssr_detector_app to create files of type system_app_data_file. am: 594052a664 am: a18011cd14
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2327637

Change-Id: Ie3562efa20cadd63f2bfbaa5949f28c78d49ded5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 17:31:48 +00:00
Nicolas Geoffray
a18011cd14 Allow ssr_detector_app to create files of type system_app_data_file. am: 594052a664
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2327637

Change-Id: I9e14e98f8c66f18e7256dffeaa7eebe5a4f54567
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 17:01:25 +00:00
Nicolas Geoffray
594052a664 Allow ssr_detector_app to create files of type system_app_data_file.
Bug: 260557058
Test: m
Change-Id: I8545deddd64d7eec61c5065f364a87b8726b1472
2022-12-05 13:56:52 +00:00
Adam Shih
5a7fd4f558 remove sysfs_touch setting
spi6.0 was other devices' touch setting
Bug: 256521567
Test: build pass
Change-Id: I96120b4e4930b16dcf5cbc9eba68c6a150ff0306
2022-12-05 03:14:06 +00:00
Android Build Coastguard Worker
c3abb0b755 Snap for 9358956 from 4df65fdfaf to tm-qpr2-release
Change-Id: Id9f7d0bc8c36814e6f63b8531ab6d561159d25c2
2022-12-02 00:03:23 +00:00
Ziyi Cui
c965433e45 [automerger skipped] Merge "[ DO NOT MERGE ] gs101-sepolicy: pixelstats: enable pixelstats access to perf-metrics" into tm-qpr-dev am: 4df65fdfaf am: 5bab2f680d -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20591018

Change-Id: I7c94e2138fd0ac72dd16292672f6a71869515a54
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 07:29:46 +00:00
Ziyi Cui
3746d48824 [automerger skipped] [ DO NOT MERGE ] gs101-sepolicy: pixelstats: enable pixelstats access to perf-metrics am: 1a39bb777e am: 8e5cf6ccf1 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20591018

Change-Id: Ie64d099f97df9fc5dd24c74491577dfab445ac96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 07:29:44 +00:00
Ziyi Cui
a484ab0c49 Merge changes from topic "temp_residency_metrics" into tm-qpr-dev am: 7b5ec97f7d am: b3b59f8f88
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20590705

Change-Id: I5af930d88179425306018d542b2aab4bf7d4b36c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 07:28:32 +00:00
Ziyi Cui
ee663e5a9b [automerger skipped] [ DO NOT MERGE ] gs101-sepolicy: pixelstats: enable pixelstats access to temp-residency-metrics am: 86d7d36fcf am: bb69de3087 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20527590

Change-Id: Id97cc5df8b923ffda3ac5a0c8f58de10192fb709
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 07:28:30 +00:00
Ziyi Cui
5bab2f680d Merge "[ DO NOT MERGE ] gs101-sepolicy: pixelstats: enable pixelstats access to perf-metrics" into tm-qpr-dev am: 4df65fdfaf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20591018

Change-Id: Ia0d0df801fa04d6b9a44158115acda5f7a50e5b5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 07:03:12 +00:00
Ziyi Cui
8e5cf6ccf1 [ DO NOT MERGE ] gs101-sepolicy: pixelstats: enable pixelstats access to perf-metrics am: 1a39bb777e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20591018

Change-Id: I833905b09a613e3ae13cc06e943b39bc202b1d98
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 07:03:10 +00:00
Ziyi Cui
b3b59f8f88 Merge changes from topic "temp_residency_metrics" into tm-qpr-dev am: 7b5ec97f7d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20590705

Change-Id: Ief5cae20292865a5a9e44089f406e8157dd7bb87
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 06:59:43 +00:00
Ziyi Cui
bb69de3087 [ DO NOT MERGE ] gs101-sepolicy: pixelstats: enable pixelstats access to temp-residency-metrics am: 86d7d36fcf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20527590

Change-Id: I8a812f509a63c4e5a7877195b78058b1a100eef1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 06:59:36 +00:00
Ziyi Cui
4df65fdfaf Merge "[ DO NOT MERGE ] gs101-sepolicy: pixelstats: enable pixelstats access to perf-metrics" into tm-qpr-dev 2022-12-01 06:31:37 +00:00
Ziyi Cui
7b5ec97f7d Merge changes from topic "temp_residency_metrics" into tm-qpr-dev
* changes:
  gs101-sepolicy:dumpstate: allow dumpstate access sysfs_vendor_metrics
  [ DO NOT MERGE ] gs101-sepolicy: pixelstats: enable pixelstats access to temp-residency-metrics
2022-12-01 06:27:28 +00:00
Android Build Coastguard Worker
f55cb93b45 Snap for 9354090 from 502c76f22b to tm-qpr2-release
Change-Id: I816bab298e03bae5cdd4fbfc8ea6ad75226b80b5
2022-12-01 00:03:20 +00:00
Treehugger Robot
a7a02c6f68 [automerger skipped] Merge "Allow Trusty storageproxy property" am: 76089fcd5f am: 217490dd40 -s ours am: 707e529cfe -s ours
am skip reason: Merged-In If995d35be490fbca6c99ef9f73f2842f5c488bd4 with SHA-1 502c76f22b is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2310384

Change-Id: I1bf9dd4c3776df950f0aa1e668d8be86cbb2eebf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 22:40:28 +00:00
Treehugger Robot
707e529cfe [automerger skipped] Merge "Allow Trusty storageproxy property" am: 76089fcd5f am: 217490dd40 -s ours
am skip reason: Merged-In If995d35be490fbca6c99ef9f73f2842f5c488bd4 with SHA-1 502c76f22b is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2310384

Change-Id: Ie4cee4190ce8f20dae88f5cd8cf1359c8ae8f857
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 22:04:58 +00:00
Treehugger Robot
217490dd40 Merge "Allow Trusty storageproxy property" am: 76089fcd5f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2310384

Change-Id: Icaeb14ac6313cd34257a704eadea4baa5d5f4a2d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 21:35:14 +00:00
Treehugger Robot
76089fcd5f Merge "Allow Trusty storageproxy property" 2022-11-30 21:06:13 +00:00
Stephen Crane
1740328a70 [automerger skipped] Allow Trusty storageproxy property am: 502c76f22b am: 427fabf934 -s ours
am skip reason: Merged-In If995d35be490fbca6c99ef9f73f2842f5c488bd4 with SHA-1 7aeb6fe8e7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20546072

Change-Id: I3b62e5c40fecb71174ca8530461581ab08f2960b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 01:43:15 +00:00
Stephen Crane
427fabf934 Allow Trusty storageproxy property am: 502c76f22b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20546072

Change-Id: I76fb4e52ef76a6d268043243f57f688eadcd4e00
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 01:15:17 +00:00
Ziyi Cui
1a39bb777e [ DO NOT MERGE ] gs101-sepolicy: pixelstats: enable pixelstats access to perf-metrics
enable pixelstats access to sysfs path, define sysfs_perfmetrics

Bug: 227809911
Bug: 232541623
Test: Verified the existence of atom and correctness of resume latency, irq stats
Change-Id: Ia0da1afb96b7f364d018d48d5cc8768c7b67f067
Signed-off-by: Ziyi Cui <ziyic@google.com>
2022-11-30 00:39:51 +00:00
Ziyi Cui
713d3ebf05 gs101-sepolicy:dumpstate: allow dumpstate access sysfs_vendor_metrics
Test: "adb bugreport" includes metrics capture.

Bug: 246799997
Test: "adb bugreport" includes metrics capture.
Change-Id: I48247f8378e52d15b264c37342dee5a938ba90a1
Signed-off-by: Ziyi Cui <ziyic@google.com>
2022-11-30 00:19:34 +00:00
Ziyi Cui
86d7d36fcf [ DO NOT MERGE ] gs101-sepolicy: pixelstats: enable pixelstats access to temp-residency-metrics
enable pixelstats access to sysfs path
Bug: 246799997
Test: Verified the existence of atom and correctness of atom stats
Change-Id: If329f2a65ed4cf347bd57150c637d38312f3dcb1
Signed-off-by: Ziyi Cui <ziyic@google.com>
2022-11-30 00:16:05 +00:00
Nicolas Geoffray
6c43f46467 [automerger skipped] Allow ssr_detector_app writes to system_app_data_file. am: 1af71fc9ff am: 244284a31b am: 696c944e51 -s ours
am skip reason: Merged-In I65697c3afb9cfd11d5235d15aa20633f1a96fdbb with SHA-1 dc7ea2f09b is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2320310

Change-Id: I0e53ab1a1a293a5bf8d7a69613160b10b486e288
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 18:14:13 +00:00
Nicolas Geoffray
696c944e51 Allow ssr_detector_app writes to system_app_data_file. am: 1af71fc9ff am: 244284a31b
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2320310

Change-Id: Ia87808477911b933667159fa295aaa770bcb59e1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 17:39:31 +00:00
Nicolas Geoffray
244284a31b Allow ssr_detector_app writes to system_app_data_file. am: 1af71fc9ff
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2320310

Change-Id: Ia7709417ea78e4b351eef8a67c7ab731dd050c83
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 16:39:39 +00:00
Adam Shih
7a1b1e399f Merge "use touch dump from gs-common" 2022-11-29 04:47:21 +00:00
Nicolas Geoffray
1af71fc9ff Allow ssr_detector_app writes to system_app_data_file.
Bug: 260557058
Test: m

(cherry picked from commit dc7ea2f09b)

Merged-In: I65697c3afb9cfd11d5235d15aa20633f1a96fdbb
Change-Id: Iaeb69d0c1e46e3e28cd75109ebfe3c494dd7c150
2022-11-28 17:32:28 +00:00
Nicolas Geoffray
dc7ea2f09b Allow ssr_detector_app writes to system_app_data_file.
Bug: 260557058

Change-Id: I65697c3afb9cfd11d5235d15aa20633f1a96fdbb
2022-11-28 11:00:18 +00:00
Adam Shih
35492ad70f use touch dump from gs-common
Bug: 256521567
Test: adb bugreport
Change-Id: I02a5831e6282eb431f2cbf89941ef188e801bd09
2022-11-28 14:08:51 +08:00
Cheng Chang
095adc198c Merge "gps: nstandby path depend on platform" 2022-11-24 06:54:15 +00:00
Cheng Chang
3ed3d20133 gps: nstandby path depend on platform
Bug: 259353063
Test: no avc denied about nstandby
Change-Id: Ia90cf2d66e4f6071f38db815d4458889b278f025
2022-11-24 02:20:58 +00:00
Ziyi Cui
702b5768e6 gs101-sepolicy: pixelstats: enable pixelstats access to temp-residency-metrics
enable pixelstats access to sysfs path
Bug: 246799997
Test: Verified the existence of atom and correctness of atom stats
Change-Id: If329f2a65ed4cf347bd57150c637d38312f3dcb1
Signed-off-by: Ziyi Cui <ziyic@google.com>
2022-11-24 00:12:28 +00:00
Stephen Crane
4519dff252 Allow Trusty storageproxy property
Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready
when the data filesystems are ready for use, and allows vendor init to
query and wait on this property.

Test: m raven-userdebug, flash, test app loading
Bug: 258018785
Change-Id: If995d35be490fbca6c99ef9f73f2842f5c488bd4
Merged-In: If995d35be490fbca6c99ef9f73f2842f5c488bd4
2022-11-23 20:24:52 +00:00
Stephen Crane
502c76f22b Allow Trusty storageproxy property
Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready
when the data filesystems are ready for use, and allows vendor init to
query and wait on this property.

Test: m raven-userdebug, flash, test app loading
Bug: 258018785
Change-Id: If995d35be490fbca6c99ef9f73f2842f5c488bd4
Merged-In: If995d35be490fbca6c99ef9f73f2842f5c488bd4
2022-11-23 00:36:27 +00:00
Stephen Crane
7aeb6fe8e7 Allow Trusty storageproxy property
Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready
when the data filesystems are ready for use, and allows vendor init to
query and wait on this property.

Test: m raven-userdebug, flash, test app loading
Bug: 258018785
Change-Id: If995d35be490fbca6c99ef9f73f2842f5c488bd4
2022-11-22 22:30:32 +00:00
Salmax Chang
2db05a2759 modem_svc_sit: grant the modem property access
Bug: 250779114
Change-Id: I17a3c12d2610c34191ba150ac6fb3a2ac6da2d23
2022-11-17 13:47:57 +08:00
Android Build Coastguard Worker
2ee6e5eabc Snap for 9301146 from 33f38db80f to tm-qpr2-release
Change-Id: I2da70339fef5755be845ae44965f064bf36a3fa2
2022-11-17 00:07:00 +00:00
Joen Chen
8001d6da73 Merge changes from topic "RRS_R4" into tm-qpr-dev am: 33f38db80f am: 805c8a476b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20419725

Change-Id: Ief4c84d197e5ff2f2a12f3913d4577c49f8413e6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-16 10:15:20 +00:00
joenchen
c180105dfd RRS: Apply the default config from persist prop am: 90aeb6e15c am: a5060e6616
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19881052

Change-Id: I62394d9d4f6304bf747be63a52635f65b48e4684
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-16 10:15:18 +00:00
Joen Chen
805c8a476b Merge changes from topic "RRS_R4" into tm-qpr-dev am: 33f38db80f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20419725

Change-Id: If2198400b4c5f52eec07f6b5a688b0cd0b208b67
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-16 09:43:14 +00:00
joenchen
a5060e6616 RRS: Apply the default config from persist prop am: 90aeb6e15c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19881052

Change-Id: I393898918b9d0a6d93f8f8d891527f59925ed3ad
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-16 09:43:12 +00:00
Joen Chen
33f38db80f Merge changes from topic "RRS_R4" into tm-qpr-dev
* changes:
  Allow InputProcessor HAL to read display resolution
  RRS: Apply the default config from persist prop
2022-11-16 09:01:32 +00:00
TreeHugger Robot
d95b753282 Merge "remove raven touch dump" 2022-11-16 07:42:25 +00:00
Adam Shih
36dc4e181d move thermal dump to gs-common
Bug: 257880034
Test: adb bugreport
Change-Id: Ib3efb17fcc3f69fac565599cffb06eff83e7cc8e
2022-11-15 14:02:15 +08:00
Adam Shih
ea632b0eb1 move sensors dump to gs-common
Bug: 250475720
Test: adb bugreport
Change-Id: I1cadc20635358c72c9571a2abaa7055efcc50adc
2022-11-10 15:02:08 +08:00
Adam Shih
18b9f37425 Merge "move edgetpu to gs-common" 2022-11-10 03:19:29 +00:00
TreeHugger Robot
912095c099 Merge "Allow CHRE to use EPOLLWAKEUP" 2022-11-10 01:16:44 +00:00
Android Build Coastguard Worker
3344c0f0f8 Snap for 9274385 from bd36256bad to tm-qpr2-release
Change-Id: I27a5d328876df9f6a9fa132452b999f174d5f437
2022-11-10 00:03:20 +00:00
Rick Chen
b81016aa89 [automerger skipped] Allow CHRE to use EPOLLWAKEUP [DO NOT MERGE] am: bd36256bad am: 1fefc4e6de -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20407807

Change-Id: I9e594caaff26293d6d411cde9df2ed282f7a2e0b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-09 16:39:34 +00:00
Rick Chen
1fefc4e6de Allow CHRE to use EPOLLWAKEUP [DO NOT MERGE] am: bd36256bad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20407807

Change-Id: I8ced56e90a34167048d5e56153081c9ca2583aa9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-09 16:09:12 +00:00
Rick Chen
d140706db9 Allow CHRE to use EPOLLWAKEUP
avc: denied { block_suspend } for comm="UsfTransport" capability=36 scontext=u:r:chre:s0 tcontext=u:r:chre:s0 tclass=capability2 permissive=0

Bug: 238666865
Test: Check no chre avc denied.
Change-Id: Ifd2c37c58c548aec46a2c46891a1fc4d1f83f9be
Signed-off-by: Rick Chen <rickctchen@google.com>
2022-11-09 18:14:03 +08:00
Siarhei Vishniakou
c765567524 Allow InputProcessor HAL to read display resolution
Currently, there's no API to read the resolution from the system domain,
so the HAL has to read this from the sysprop provided by the display
code.

Allow the HAL to do so in this CL.

Bug: 244492960
Test: adb shell dmesg | grep input_processor
Change-Id: Ibdc3589234bbee8641e3c1f7a300b622803ca1a9
2022-11-09 03:45:55 +00:00
Rick Chen
bd36256bad Allow CHRE to use EPOLLWAKEUP [DO NOT MERGE]
avc: denied { block_suspend } for comm="UsfTransport" capability=36 scontext=u:r:chre:s0 tcontext=u:r:chre:s0 tclass=capability2 permissive=0

Bug: 238666865
Test: Check no chre avc denied.
Change-Id: Ifd2c37c58c548aec46a2c46891a1fc4d1f83f9be
Signed-off-by: Rick Chen <rickctchen@google.com>
2022-11-08 15:00:27 +00:00
joenchen
90aeb6e15c RRS: Apply the default config from persist prop
vendor_config plays as another role to control the display config during
the boot time. To change the default configuration of the user selected
mode, we use persist config to store the value.

Bug: 244492960
Test: Boot w/ and w/o user selected configs and check the resolution
Change-Id: Ic3eb4e1c8a2c5eed83d10799a1965dd7a6be58e1
2022-11-08 14:09:00 +00:00
Adam Shih
84b32a700f move edgetpu to gs-common
Bug: 258114806
Test: build pass
Change-Id: Ie576f6511dc60db59bc44567ff0a929506224203
2022-11-08 13:15:28 +08:00
Adam Shih
b00f9adf61 remove raven touch dump
Bug: 256521567
Test: adb bugreport
Change-Id: Idfa891c545994f457004b99be1ddda14f971142f
2022-11-08 10:05:37 +08:00
Android Build Coastguard Worker
f2c7bb9f31 Snap for 9253587 from 632c5dba75 to tm-qpr2-release
Change-Id: I1fe89f843ed8089ec955a9de13a6c7c0ce090411
2022-11-03 23:03:07 +00:00
Jenny Ho
898da02fa5 Add permission for logbuffer_bd am: 632c5dba75 am: 393e0efb9b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20307975

Change-Id: I96e4d3891e64f670effd8ae227659b86f3867508
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-03 01:31:36 +00:00
Jenny Ho
393e0efb9b Add permission for logbuffer_bd am: 632c5dba75
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20307975

Change-Id: I148592298e9f5a15406bd95418b228385e412ae7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-03 00:59:41 +00:00
Gabriel Biren
4f3094adbb Merge "Update gs101 sepolicy to allow the wifi_ext AIDL service." am: 1010b1cceb am: 41505f9991 am: 21cd48363a
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2262723

Change-Id: I7a74552266c7e6ece0bc1554c9a578e09d6e9450
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-31 22:13:33 +00:00
Gabriel Biren
21cd48363a Merge "Update gs101 sepolicy to allow the wifi_ext AIDL service." am: 1010b1cceb am: 41505f9991
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2262723

Change-Id: I6e5f2649b6b2679d6e9883c61009f3907414cee6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-31 21:39:48 +00:00
Gabriel Biren
41505f9991 Merge "Update gs101 sepolicy to allow the wifi_ext AIDL service." am: 1010b1cceb
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2262723

Change-Id: Ie2801e8af27484ca08826b4ab93b0f462f45d2d2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-31 21:10:53 +00:00
Gabriel Biren
1010b1cceb Merge "Update gs101 sepolicy to allow the wifi_ext AIDL service." 2022-10-31 20:46:08 +00:00
Jenny Ho
632c5dba75 Add permission for logbuffer_bd
Bug: 242679204
Change-Id: I134bf8611441274e8438fa06b5ca6c186efb331a
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2022-10-28 22:22:24 +08:00
Adam Shih
630a5af43b Merge "move brcm gps solution to gs-common" 2022-10-28 05:33:40 +00:00
Adam Shih
07a5f33a8d move brcm gps solution to gs-common
Bug: 254758553
Test: google map can locate on pixel
Change-Id: Iaf954f3af043dc5080b0be473ed8b78b1c6d0e22
2022-10-27 09:37:46 +08:00
Michael Butler
593965bbdb Merge "Remove same_process_hal_file attribute from libedgetpu_dba_hal" 2022-10-25 01:14:50 +00:00
Android Build Coastguard Worker
e0df380d08 Snap for 9211918 from 0278f60839 to tm-qpr2-release
Change-Id: I39b1e3d26f2e59ae849a843ceb6fcc988dd7896d
2022-10-24 23:06:57 +00:00
Lucas Wei
886e3ca96f [automerger skipped] Merge "votable: update SEpolicy error" into tm-qpr-dev am: 0278f60839 -s ours am: c14d875df7 -s ours
am skip reason: Merged-In Ia6dfb7796ab46b0ac339b98465ccd91624b655ed with SHA-1 5851e17605 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20106620

Change-Id: I9f5ad9265ae4a899add3ed0658ce4b8d20c5a6d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-24 10:24:16 +00:00
Lucas Wei
1c57ed5a4b [automerger skipped] votable: update SEpolicy error am: 91960cb2d7 -s ours am: 48123156ed -s ours
am skip reason: Merged-In Ia6dfb7796ab46b0ac339b98465ccd91624b655ed with SHA-1 5851e17605 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20106620

Change-Id: I99a88300ece37199dff549ad593ce651fa90d52f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-24 10:24:10 +00:00
Lucas Wei
8433aeebb7 [automerger skipped] Merge "sepolicy: fix odpm avc denials" into tm-qpr-dev am: 4a487ac890 am: 121d50927c -s ours
am skip reason: Merged-In Id7f70d02475a03e53a206dde3b8efa584cacef85 with SHA-1 768196f828 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20067818

Change-Id: If4fab87115b0adf80aa6ee72f58ce0c26efbee85
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-24 10:24:04 +00:00
Lucas Wei
c14d875df7 [automerger skipped] Merge "votable: update SEpolicy error" into tm-qpr-dev am: 0278f60839 -s ours
am skip reason: Merged-In Ia6dfb7796ab46b0ac339b98465ccd91624b655ed with SHA-1 5851e17605 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20106620

Change-Id: I56f8382c101f3f8a176671d447aea71299784e05
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-24 09:54:01 +00:00
Lucas Wei
48123156ed [automerger skipped] votable: update SEpolicy error am: 91960cb2d7 -s ours
am skip reason: Merged-In Ia6dfb7796ab46b0ac339b98465ccd91624b655ed with SHA-1 5851e17605 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20106620

Change-Id: If985d0a33037835b808928c6528162be210a1aa2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-24 09:53:55 +00:00
Lucas Wei
121d50927c Merge "sepolicy: fix odpm avc denials" into tm-qpr-dev am: 4a487ac890
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20067818

Change-Id: Ifc7951728bc578a8c472a217a74e72c82ed846cd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-24 09:53:50 +00:00
Lucas Wei
0278f60839 Merge "votable: update SEpolicy error" into tm-qpr-dev 2022-10-24 09:07:24 +00:00
Lucas Wei
4a487ac890 Merge "sepolicy: fix odpm avc denials" into tm-qpr-dev 2022-10-24 09:07:24 +00:00
Sam Ou
0127869bfd sepolicy: fix odpm avc denials
add wakeup permissions for odpm driver
since we update acc_data based on alarmtimer

Bug: 250813284
Change-Id: Id7f70d02475a03e53a206dde3b8efa584cacef85
Merged-In: Id7f70d02475a03e53a206dde3b8efa584cacef85
Signed-off-by: Sam Ou <samou@google.com>
Signed-off-by: Lucas Wei <lucaswei@google.com>
2022-10-24 05:03:01 +00:00
Lucas Wei
d9d6ec0b0b Merge "sepolicy: fix odpm avc denials" 2022-10-24 04:34:13 +00:00
Lucas Wei
8a9fd1b4aa votable: update SEpolicy error am: 5851e17605
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20265110

Change-Id: I3d444fed3a236050d00988b59a4237df3815f2e4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-24 03:28:26 +00:00
Sam Ou
768196f828 sepolicy: fix odpm avc denials
add wakeup permissions for odpm driver
since we update acc_data based on alarmtimer

Bug: 250813284
Change-Id: Id7f70d02475a03e53a206dde3b8efa584cacef85
Signed-off-by: Sam Ou <samou@google.com>
2022-10-24 10:45:55 +08:00
Lucas Wei
91960cb2d7 votable: update SEpolicy error
Bug: 247905787
Signed-off-by: Lucas Wei <lucaswei@google.com>
Change-Id: Ia6dfb7796ab46b0ac339b98465ccd91624b655ed
Merged-In: Ia6dfb7796ab46b0ac339b98465ccd91624b655ed
2022-10-23 15:25:20 +00:00
Lucas Wei
5851e17605 votable: update SEpolicy error
Bug: 247905787
Signed-off-by: Lucas Wei <lucaswei@google.com>
Change-Id: Ia6dfb7796ab46b0ac339b98465ccd91624b655ed
2022-10-23 23:23:41 +08:00
Adam Shih
43bf71c88d Merge "move aoc settings to gs-common" 2022-10-21 00:08:01 +00:00
Tri Vo
218eab8bb8 Merge "Updated confirmationui HAL binary name." am: 5b81f62700 am: 61fac0d61a am: c15a4ae32b
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2251759

Change-Id: I59ee2d4c4a8f440b7972b8f038cf37daa9e03778
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-20 18:36:56 +00:00
Tri Vo
c15a4ae32b Merge "Updated confirmationui HAL binary name." am: 5b81f62700 am: 61fac0d61a
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2251759

Change-Id: Ibdc4235e0eddf452922dd0304117bb04b5b2ff56
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-20 17:53:16 +00:00
Tri Vo
61fac0d61a Merge "Updated confirmationui HAL binary name." am: 5b81f62700
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2251759

Change-Id: I39f8ef135703c75ae7487fb5ea32e3deee9baf79
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-20 17:07:32 +00:00
Gabriel Biren
24160a4bcb Update gs101 sepolicy to allow the wifi_ext AIDL service.
Bug: 205044134
Test: Start wifi on an Oriole device using both the
      HIDL and AIDL versions of wifi_ext.
Change-Id: I45cbc86e4d4feb2aa99641175108dd9745c1715e
2022-10-20 16:54:19 +00:00
Tri Vo
5b81f62700 Merge "Updated confirmationui HAL binary name." 2022-10-20 16:51:56 +00:00
Adam Shih
72aa5a98fc move aoc settings to gs-common
Bug: 248426917
Test: boot with aoc launched
Change-Id: I891767f10dfac7528b76e27fd2756b77ed46e45c
2022-10-20 11:41:19 +08:00
Android Build Coastguard Worker
e3fed2e815 Snap for 9195661 from 8d802db37a to tm-qpr2-release
Change-Id: I92d7ebe1c0a322573e4cfd4eef962558904bd7a8
2022-10-19 23:03:13 +00:00
Michael Butler
536b9a4ee6 Remove same_process_hal_file attribute from libedgetpu_dba_hal
libedgetpu_dba_hal.so is changed from /vendor to /system_ext in this
topic, so this CL removes the now-unnecessary same_process_hal_file
attribute from libedgetpu_dba_hal and its AIDL interface.

Bug: 245792277
Test: mma
Test: atest edgetpu_dba_hal_test
Change-Id: Ibbe58fa8c0992f28b54b69308345b3729d77ef90
2022-10-19 10:31:53 -07:00
Chungjui Fan
26158c7a57 sepolicy: gs101: allow fastbootd to access gsc device node am: 8d802db37a am: 8753d9d07c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20210023

Change-Id: Ieb81c7c41cac31967c49da87cd7ab33b814e7ecd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-19 13:18:21 +00:00
Chungjui Fan
8753d9d07c sepolicy: gs101: allow fastbootd to access gsc device node am: 8d802db37a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20210023

Change-Id: Ic59f5c3967ba09506234161c7a0058b40642851e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-19 12:31:55 +00:00
Chungjui Fan
8d802db37a sepolicy: gs101: allow fastbootd to access gsc device node
avc:  denied  { getattr } for  pid=469 comm="fastbootd"
path="/dev/gsc0" dev="tmpfs" ino=470 scontext=u:r:fastbootd:s0
tcontext=u:object_r:citadel_device:s0
tclass=chr_file permissive=0

Bug: 248301125

Change-Id: Ic1aec8874636437b9b8d795b46fae72fa8533302
Signed-off-by: Chungjui Fan <chungjuifan@google.com>
2022-10-17 12:26:10 +00:00
TreeHugger Robot
688b2b08f3 Merge "sepolicy: ignore and fix avc denial" 2022-10-17 04:51:55 +00:00
Chungkai Mei
4dc474a7b3 sepolicy: ignore and fix avc denial
ignore and fix avc denial

Bug: 228181404
Test: boot without avc denial
Signed-off-by: Chungkai Mei <chungkai@google.com>
Change-Id: I83640aae46bd1823c4e4dcf15f00e64fa7a87aef
2022-10-17 02:15:45 +00:00
Timmy Li
fe1c8108c5 Merge "Add aoc_device access to P21 devices. Camera hal" 2022-10-14 17:22:48 +00:00
Krzysztof Kosiński
20e9a691cf Use generic wildcard for vendor libprotobuf. am: 2118dfb684 am: f9f745da33 am: a110b52215
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2255496

Change-Id: I5e1311cd4ca7ed0cc1f436a9ccb3a5b6c7d9da0a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-14 16:54:29 +00:00
Krzysztof Kosiński
a110b52215 Use generic wildcard for vendor libprotobuf. am: 2118dfb684 am: f9f745da33
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2255496

Change-Id: I642062447d3e11a152fcead3689cbd1017c97e09
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-14 16:22:16 +00:00
Krzysztof Kosiński
f9f745da33 Use generic wildcard for vendor libprotobuf. am: 2118dfb684
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2255496

Change-Id: I3788ebba42c38f754c183eb518e2d3a9ad31bba7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-14 15:51:58 +00:00
Krzysztof Kosiński
2118dfb684 Use generic wildcard for vendor libprotobuf.
The suffix changes on each upgrade and the newest release uses
a two-part version number instead of a three-part one. Use a regex
that will match any suffix.

Bug: 203713560
Test: presubmit, log check
Change-Id: I27d7bd10e469b794226fe0c77b02c57d876729b1
2022-10-14 14:06:56 +00:00
TreeHugger Robot
9a3acebe63 Merge "upgrade dumpstate from hidl to aidl" 2022-10-14 07:37:43 +00:00
timmyli
ecd597b98a Add aoc_device access to P21 devices. Camera hal
Since we plan to apply rls refactor to P21 devices
as well. Add access to camera_hal to aoc_device for
these devices.

Bug: 253493159
Test: Compiles
Change-Id: I43728c723e0cfc7cdde5377260af6075d4672e7b
2022-10-14 01:55:04 +00:00
Rajesh Nyamagoud
c285c2c32c [automerger skipped] Updated confirmationui HAL binary name. am: 5de95a5dd9 -s ours
am skip reason: Merged-In I690f6eb49f47bdf2d2790b0a6c9b0c45ca819a31 with SHA-1 2acd1c0e73 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20177682

Change-Id: Icd0b38026028ed2bfac26981a36ccc452507a9c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-12 21:45:36 +00:00
Rajesh Nyamagoud
ff0d3717a6 Updated confirmationui HAL binary name.
Ignore-AOSP-First: Dependent on internal change.
Bug: b/205760172
Test: Run confirmation UI test using CTS Verifier
Change-Id: I690f6eb49f47bdf2d2790b0a6c9b0c45ca819a31
2022-10-12 20:59:26 +00:00
Rajesh Nyamagoud
5de95a5dd9 Updated confirmationui HAL binary name.
Ignore-AOSP-First: Dependent on internal change.
Bug: b/205760172
Test: Run confirmation UI test using CTS Verifier
Change-Id: I690f6eb49f47bdf2d2790b0a6c9b0c45ca819a31
(cherry picked from commit 2acd1c0e73)
Merged-In: I690f6eb49f47bdf2d2790b0a6c9b0c45ca819a31
2022-10-12 17:46:46 +00:00
Adam Shih
2933a7f105 upgrade dumpstate from hidl to aidl
Bug: 240530709
Test: adb bugreport
Change-Id: If5f81174f7881100bff21462ff4aef9ff62357d4
2022-10-12 15:25:17 +08:00
Adam Shih
f15d1599ef remove redundant permission that has moved to gs-common
Bug: 248426917
Test: adb bugreport
Change-Id: I2b1f26164e9590dadd6eae4c14cb65a1c34197fa
2022-10-12 11:31:57 +08:00
Xin Li
b02b486a42 [automerger skipped] Merge tm-qpr-dev-plus-aosp-without-vendor@9129937 am: b36d9e6b41 -s ours am: d78be3af77 -s ours
am skip reason: Merged-In Icc3762cef7f9766d845f1e1a56af1315fc97163b with SHA-1 908a8fcf14 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20136207

Change-Id: I59aae8960b149e58ef36be5d94577b42804d5219
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-11 20:09:56 +00:00
Xin Li
d78be3af77 [automerger skipped] Merge tm-qpr-dev-plus-aosp-without-vendor@9129937 am: b36d9e6b41 -s ours
am skip reason: Merged-In Icc3762cef7f9766d845f1e1a56af1315fc97163b with SHA-1 908a8fcf14 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20136207

Change-Id: Iccc5debc1ad0b345d107b06e55f12b7156959515
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-11 17:55:58 +00:00
TreeHugger Robot
a65d9c6e58 Merge "move trusty dump from gs101 to gs-common" 2022-10-11 01:41:33 +00:00
Adam Shih
c14d73beb0 Merge "move modem dump to gs-common" 2022-10-07 01:04:50 +00:00
Xin Li
b36d9e6b41 Merge tm-qpr-dev-plus-aosp-without-vendor@9129937
Bug: 248070379
Merged-In: Icc3762cef7f9766d845f1e1a56af1315fc97163b
Change-Id: Ic16e04d8670d4e1607d8c64c39cd6376aceed1ba
2022-10-06 12:00:25 -07:00
Tri Vo
c4291e4959 Merge "Updated confirmationui HAL binary name." 2022-10-06 17:56:36 +00:00
Adam Shih
cba306cc3b move modem dump to gs-common
Bug: 250475732
Test: adb bugreport
Change-Id: I07bc213a6136d5803316062c3fddd55fc557c4b2
2022-10-05 10:45:33 +08:00
Adam Shih
7c74638f0c Merge "move soc dump to gs-common" 2022-10-05 02:14:15 +00:00
Vaibhav Devmurari
a254fcef0c Merge "Add SePolicy for system_server accessing sysfs for USB devices" 2022-10-04 09:22:34 +00:00
Adam Shih
0508a69dbd move soc dump to gs-common
Bug: 248428203
Test: adb bugreport
Change-Id: I09c8279685626125ab1c5a6b73d1143de7ae2f1d
2022-10-04 12:56:28 +08:00
Adam Shih
6d2d8a9914 move trusty dump from gs101 to gs-common
Bug: 244504232
Test: adb bugreport
Change-Id: I7a93c9ef7d07e92f0fd508c016a264c26a4e0b1e
2022-10-04 09:06:15 +08:00
Android Build Coastguard Worker
3d325089b7 Snap for 9133013 from d255ed1576 to tm-qpr2-release
Change-Id: Ic3e7f650e45257b78a15a45708683c3b9af54366
2022-10-03 23:06:40 +00:00
Vaibhav Devmurari
ac878d3f62 Add SePolicy for system_server accessing sysfs for USB devices
Add SePolicy to allow Android input manager accessing sysfs nodes
for external USB devices

To support input device lights manager feature in frameworks, provide
sysfs node access to system server process.
DD: go/pk_backlight_control (For keyboard backlight control for external
keyboards)

Kernel provides a standardized LED interface to expose LED controls
over sysfs: https://docs.kernel.org/leds/leds-class.html
The feature will be provided for devices with kernel sysfs class led
support and vendor kernel driver for input controllers that do have
lights. The kernel sysfs class led support is a kernel config option
(LEDS_CLASS), and an input device driver will create the sysfs class
node interface.
By giving system_server the access to these sysfs nodes, the feature
will work on devices with the kernel option and kernel input/hid driver
support. We do use CTS tests to enforce the kernel options and the
input device drivers.

What's already supported?
- We already support access to UHID sysfs node which used for all
bluetooth based external peripherals

What's included in this CL?
- Adding support to access sysfs nodes for USB based external devices

Test: manual
Bug: 245506418
Change-Id: Ieb55614ed651b85f0e6752a17d02f4d370fd1e6f
2022-10-03 14:52:52 +00:00
TreeHugger Robot
78a524a801 Merge "move ramdump relate dumpstate to gs-common" 2022-10-03 06:02:38 +00:00
Adam Shih
d0af280f50 move ramdump relate dumpstate to gs-common
Bug: 248428203
Test: adb bugreport
Change-Id: I16898410318dd8f396c68cd9096a4eb49358b784
2022-09-30 15:10:45 +08:00
Rajesh Nyamagoud
2acd1c0e73 Updated confirmationui HAL binary name.
Ignore-AOSP-First: Dependent on internal change.
Bug: b/205760172
Test: Run confirmation UI test using CTS Verifier
Change-Id: I690f6eb49f47bdf2d2790b0a6c9b0c45ca819a31
2022-09-29 20:09:13 +00:00
Xusong Wang
cd518be161 Merge "Configure Edge TPU DBA HAL sepolicy." 2022-09-29 17:02:38 +00:00
Adam Shih
a190e33522 move UFS dump to gs-common
Bug: 248143736
Test: adb bugreport
Change-Id: I3446ab420a0e8a0104dcc63c1cfd4c1a04060cdd
2022-09-28 13:20:33 +08:00
Xusong Wang
d19e0dded9 Configure Edge TPU DBA HAL sepolicy.
Bug: 245792277
Test: edgetpu_dba_hal_test
Change-Id: I567961327e00b728b1d188e07b6ae3f10f42d847
2022-09-27 15:36:37 -07:00
Adam Shih
3cd9384799 dump f2fs in gs-common
Bug: 248143736
Test: adb bugreport
Change-Id: I902030f7960b2247e9b8e913e78d447741423efb
2022-09-27 17:03:38 +08:00
Jinting Lin
03f471518a Merge "Allows modem_svc to read the logging related properties" into tm-qpr-dev am: d255ed1576 am: 230b907ae1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19967636

Change-Id: I2e6a0cf2f7558c40e68030649d1c663db5bcd3db
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-22 16:12:50 +00:00
Jinting Lin
230b907ae1 Merge "Allows modem_svc to read the logging related properties" into tm-qpr-dev am: d255ed1576
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19967636

Change-Id: Ic7a7ec1e03af32e88989f32452c2c255e1419a36
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-22 15:35:53 +00:00
Jinting Lin
d255ed1576 Merge "Allows modem_svc to read the logging related properties" into tm-qpr-dev 2022-09-22 14:30:32 +00:00
Eden Su
dbbe57546a [automerger skipped] Merge changes from topic "gs101_network_access" into tm-qpr-dev am: c3c4aa626b -s ours am: 4cb7381067 -s ours
am skip reason: Merged-In Id9ba79ba87010326c53b6aec408e5cdb291122a6 with SHA-1 09e0e1b280 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19771223

Change-Id: Ie3457178a2ae2977b529a69b89cb65bb2e45f0ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-20 01:31:58 +00:00
Hana Kim
d6a82ec69f [automerger skipped] Sepolicy: add permission to allow create, connect udp socket am: 060b562310 -s ours am: da15cf3c35 -s ours
am skip reason: Merged-In Id9ba79ba87010326c53b6aec408e5cdb291122a6 with SHA-1 09e0e1b280 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19771223

Change-Id: I9c9138a16df8e34bd1fdaa326bdd9e46c1d29ac5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-20 01:31:56 +00:00
Eden Su
4cb7381067 [automerger skipped] Merge changes from topic "gs101_network_access" into tm-qpr-dev am: c3c4aa626b -s ours
am skip reason: Merged-In Id9ba79ba87010326c53b6aec408e5cdb291122a6 with SHA-1 09e0e1b280 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19771223

Change-Id: I9ba0932f49df3b5c042c5b3271dc41a2e1ecf6f8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-20 01:01:03 +00:00
Hana Kim
da15cf3c35 [automerger skipped] Sepolicy: add permission to allow create, connect udp socket am: 060b562310 -s ours
am skip reason: Merged-In Id9ba79ba87010326c53b6aec408e5cdb291122a6 with SHA-1 09e0e1b280 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19771223

Change-Id: I0ee313ca921ff8001ba64e7c0b38dc4551687aa5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-20 01:01:02 +00:00
Eden Su
c3c4aa626b Merge changes from topic "gs101_network_access" into tm-qpr-dev
* changes:
  Sepolicy: add permission to allow create, connect udp socket
  sepolicy: gs101: allowed permissions required for network access
2022-09-20 00:34:18 +00:00
jintinglin
9a4545eafa Allows modem_svc to read the logging related properties
avc: denied { read } for comm="modem_svc_sit" name="u:object_r:vendor_logger_prop:s0" dev="tmpfs" ino=347 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_logger_prop:s0 tclass=file permissive=0

Bug: 243039758
Change-Id: I80a6971a2c3e09320e780d1eff24e040cd8b3541
2022-09-19 05:31:09 +00:00
Hana Kim
060b562310 Sepolicy: add permission to allow create, connect udp socket
Bug: 226412527
Test: The tester verified IMS didn't crash and no avc denied log
Signed-off-by: Hana Kim <hanaa.kim@samsung.com>
Change-Id: Id9ba79ba87010326c53b6aec408e5cdb291122a6
Merged-In: Id9ba79ba87010326c53b6aec408e5cdb291122a6
2022-09-19 04:58:00 +00:00
Jinhee Kim
ea1f7edaae sepolicy: gs101: allowed permissions required for network access am: 653e53d11d am: 9ca55393c9 am: a62f7495fb am: 11149a00ca am: fd941e1c1a
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2214621

Change-Id: I32eb6c697ec317f6ca40a0b82544a7a9116ac154
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 12:46:04 +00:00
Hana Kim
89c07daec3 Sepolicy: add permission to allow create, connect udp socket am: 09e0e1b280 am: 6c17e1e6f5 am: 19e9846ba8 am: 6b1cbfe260 am: a29b3c8ca1
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2200444

Change-Id: I2544779da7c13c7b1a8383b8c786bb2c39716a98
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 12:46:02 +00:00
Jinhee Kim
fd941e1c1a sepolicy: gs101: allowed permissions required for network access am: 653e53d11d am: 9ca55393c9 am: a62f7495fb am: 11149a00ca
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2214621

Change-Id: Iee88f3f9d98f1b1f1568613b81542560e42ee25d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 12:18:57 +00:00
Hana Kim
a29b3c8ca1 Sepolicy: add permission to allow create, connect udp socket am: 09e0e1b280 am: 6c17e1e6f5 am: 19e9846ba8 am: 6b1cbfe260
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2200444

Change-Id: I50d573cc65874987be884d83b72f4aaaa71c8818
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 12:18:56 +00:00
Jinhee Kim
11149a00ca sepolicy: gs101: allowed permissions required for network access am: 653e53d11d am: 9ca55393c9 am: a62f7495fb
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2214621

Change-Id: I1da45f9173b7812ab45d8b503af446689a2e7fe4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 11:49:03 +00:00
Hana Kim
6b1cbfe260 Sepolicy: add permission to allow create, connect udp socket am: 09e0e1b280 am: 6c17e1e6f5 am: 19e9846ba8
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2200444

Change-Id: I9074a2aaab6ef1916fc3fa9a0c1f3e5e3fe610a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 11:49:01 +00:00
Jinhee Kim
a62f7495fb sepolicy: gs101: allowed permissions required for network access am: 653e53d11d am: 9ca55393c9
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2214621

Change-Id: Ib062d4ee9a01a39c1b8db50b4bd47c45ed8f2fc6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 10:54:14 +00:00
Hana Kim
19e9846ba8 Sepolicy: add permission to allow create, connect udp socket am: 09e0e1b280 am: 6c17e1e6f5
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2200444

Change-Id: I0ea2a78c506c360ac10958b08304c6b62167946b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 10:54:11 +00:00
Jinhee Kim
9ca55393c9 sepolicy: gs101: allowed permissions required for network access am: 653e53d11d
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2214621

Change-Id: Icc54f4ea60062d0b56ac88692803b1171e8fb345
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 10:26:20 +00:00
Hana Kim
6c17e1e6f5 Sepolicy: add permission to allow create, connect udp socket am: 09e0e1b280
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2200444

Change-Id: I929947f0b0ee7c969530343fd779fb88a411a7bb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-16 10:26:19 +00:00
Jinhee Kim
908a8fcf14 sepolicy: gs101: allowed permissions required for network access
avc: denied { write } for comm="Thread-102" name="dnsproxyd" dev="tmpfs" ino=1022 scontext=u:r:vendor_ims_app:s0:c251,c256,c512,c768 tcontext=u:object_r:dnsproxyd_socket:s0 tclass=sock_file permissive=0 app=com.shannon.imsservice
avc: denied { node_bind } for comm="Thread-102" src=50174 scontext=u:r:vendor_ims_app:s0:c251,c256,c512,c768 tcontext=u:object_r:node:s0 tclass=udp_socket permissive=0 app=com.shannon.imsservice

Bug: 242231557
Test: The tester verified IMS didn't crash and no avc denied log
Change-Id: Icc3762cef7f9766d845f1e1a56af1315fc97163b
Signed-off-by: Jinhee Kim <jinhee.k@samsung.com>
Signed-off-by: Kukjin Kim <kgene.kim@samsung.com>
Merged-In: Icc3762cef7f9766d845f1e1a56af1315fc97163b
2022-09-16 08:51:52 +00:00
Estefany Torres
0ea1dac214 Merge "Add rules for letting logger app send the command to ril" into tm-qpr-dev am: 0ec93ed8cd am: 899574b2d8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19912324

Change-Id: Idd3a937c7da2388a32f59f265705bcc84c54bf8b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-15 15:03:57 +00:00
Estefany Torres
899574b2d8 Merge "Add rules for letting logger app send the command to ril" into tm-qpr-dev am: 0ec93ed8cd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19912324

Change-Id: I14947b4a9dc41ffdb9afef580597ee0d4798443f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-15 14:35:07 +00:00
Estefany Torres
0ec93ed8cd Merge "Add rules for letting logger app send the command to ril" into tm-qpr-dev 2022-09-15 14:09:07 +00:00
TreeHugger Robot
3aaefbe1fc Merge "aoc: add audio property for pixellogger update control" into tm-qpr-dev am: 75f908a8ed am: a106f636f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19533964

Change-Id: I86804c96c940ced146e25a411560fe7ac06e5e77
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-14 02:54:01 +00:00
TreeHugger Robot
a106f636f8 Merge "aoc: add audio property for pixellogger update control" into tm-qpr-dev am: 75f908a8ed
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19533964

Change-Id: I347bbb35b216896a87b3b2edc96af57d6dadfe80
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-14 02:23:57 +00:00
TreeHugger Robot
75f908a8ed Merge "aoc: add audio property for pixellogger update control" into tm-qpr-dev 2022-09-14 01:48:40 +00:00
Jinhee Kim
653e53d11d sepolicy: gs101: allowed permissions required for network access
avc: denied { write } for comm="Thread-102" name="dnsproxyd" dev="tmpfs" ino=1022 scontext=u:r:vendor_ims_app:s0:c251,c256,c512,c768 tcontext=u:object_r:dnsproxyd_socket:s0 tclass=sock_file permissive=0 app=com.shannon.imsservice
avc: denied { node_bind } for comm="Thread-102" src=50174 scontext=u:r:vendor_ims_app:s0:c251,c256,c512,c768 tcontext=u:object_r:node:s0 tclass=udp_socket permissive=0 app=com.shannon.imsservice

Bug: 242231557
Test: Build
Change-Id: Icc3762cef7f9766d845f1e1a56af1315fc97163b
Signed-off-by: Jinhee Kim <jinhee.k@samsung.com>
Signed-off-by: Kukjin Kim <kgene.kim@samsung.com>
2022-09-12 15:18:32 +08:00
Hana Kim
09e0e1b280 Sepolicy: add permission to allow create, connect udp socket
Bug: 226412527
Test: Build
Signed-off-by: Hana Kim <hanaa.kim@samsung.com>
Change-Id: Id9ba79ba87010326c53b6aec408e5cdb291122a6
2022-09-12 15:17:44 +08:00
Estefany Torres
7b5ed95fdd Add rules for letting logger app send the command to ril
08-31 23:40:57.354   458   458 E SELinux : avc:  denied  { find } for interface=vendor.samsung_slsi.telephony.hardware.radioExternal::IOemSlsiRadioExternal sid=u:r:logger_app:s0:c252,c256,c512,c768 pid=2901 scontext=u:r:logger_app:s0:c252,c256,c512,c768 tcontext=u:object_r:hal_exynos_rild_hwservice:s0 tclass=hwservice_manager permissive=0
09-01 00:08:19.600  2881  2881 W oid.pixellogger: type=1400 audit(0.0:10): avc: denied { call } for scontext=u:r:logger_app:s0:c252,c256,c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=0 app=com.android.pixellogger

Bug: 241412942
Test: tested in C10 with pixel logger change
Change-Id: Idcd693790d654d0a9b7aba46a41764d65867a61c
2022-09-09 17:35:19 +00:00
JJ Lee
8c36ac66d8 sepolicy: add nodes for aoc memory votes stats am: f07279785d am: 479f2286d7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19739216

Change-Id: Icdd11f323d212c2e10a42108afbd91674dce7a3c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-08 06:00:10 +00:00
JJ Lee
479f2286d7 sepolicy: add nodes for aoc memory votes stats am: f07279785d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19739216

Change-Id: I795b972da3d42e7394fbd954f041934370fbd77a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-08 05:16:23 +00:00
TreeHugger Robot
ae2feed036 Merge "Add SE policies for HWC logs" 2022-09-07 12:28:32 +00:00
JJ Lee
f07279785d sepolicy: add nodes for aoc memory votes stats
Bug: 223674292
Test: build pass, not blocking bugreport
Change-Id: I4732c8b3271f553edc423ac115eb8a6afaebff37
Signed-off-by: JJ Lee <leejj@google.com>
2022-09-07 11:45:18 +00:00
Adam Shih
c08f9cf882 move insert module script sepolicy to gs-common
Bug: 243763292
Test: boot to home with no relevant SELinux error
Change-Id: I52fe6631b3ec806a5624375457874d9248927b00
2022-09-06 10:40:01 +08:00
Adam Shih
5742be1014 move insmod script to gs-common
Bug: 243763292
Test: boot to home
Change-Id: If676806d806adcd7f1fcecc1199255788e8858ef
2022-09-05 12:21:43 +08:00
Timmy Li
e6e9e34d22 Merge "Change SElinux so Aswang can be accessed" 2022-09-01 20:37:25 +00:00
Adam Shih
f55fb71bf0 Merge "Move dauntless settings to gs-common" 2022-08-31 23:49:37 +00:00
Roger Fang
d5e2902e91 sepolicy: add permission for AMS rate of pixelstats-vend am: a8eab1aaaf am: 5321008d5c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19711052

Change-Id: If5dad118d1a1c845a84d3b53baff485c58cce03c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-30 05:45:30 +00:00
Roger Fang
5321008d5c sepolicy: add permission for AMS rate of pixelstats-vend am: a8eab1aaaf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19711052

Change-Id: I61f3cfbb14f0f34bf0af2eaba1922b9aed4b7948
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-30 05:15:55 +00:00
Roger Fang
a8eab1aaaf sepolicy: add permission for AMS rate of pixelstats-vend
I pixelstats-vend: type=1400 audit(0.0:1025): avc: denied { read } for name="ams_rate_read_once" dev="sysfs" ino=79714 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I pixelstats-vend: type=1400 audit(0.0:1026): avc: denied { open } for path="/sys/devices/platform/audiometrics/ams_rate_read_once" dev="sysfs" ino=79714 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
pixelstats-vend: type=1400 audit(0.0:1027): avc: denied { getattr } for path="/sys/devices/platform/audiometrics/ams_rate_read_once" dev="sysfs" ino=79714 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

Bug: 239508478
Test: Manually test passed

Signed-off-by: Roger Fang <rogerfang@google.com>
Change-Id: I5c47003bed664f2cd9b6fe3630a6445aca27d10d
2022-08-30 04:36:41 +00:00
Adam Shih
a5cbf912ce Move dauntless settings to gs-common
Bug: 242479757
Test: build pass on all Gchip devices
Change-Id: I9751e59b751f867d4cf734ffe7497a2e22c0c6f9
2022-08-30 12:29:54 +08:00
Robb Glasser
94f9358eed Give permissions to save usf stats and dump them in bugreports. am: 4b4afb2eea am: 6ce1ff96e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19672464

Change-Id: Idbd78e19d1b642d3cfc306ad69ded4515a14985d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-25 04:06:32 +00:00
Robb Glasser
6ce1ff96e4 Give permissions to save usf stats and dump them in bugreports. am: 4b4afb2eea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19672464

Change-Id: Iacf95664f2ba6bf126b82e2e2d73bddcddb70422
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-25 03:38:27 +00:00
Adam Shih
19e6be23a9 Merge "move bcmbt settings to gs-common" 2022-08-25 00:07:01 +00:00
Robb Glasser
4b4afb2eea Give permissions to save usf stats and dump them in bugreports.
Creating a mechanism to save some USF stat history to device and pipe it
to bugreports. Granting permissions so that this can work.

Bug: 242320914
Test: Stats save and are visible in a bugreport.
Change-Id: Ia1973800ed053f54da043d306e11c0a7b10132a7
2022-08-24 22:39:16 +00:00
Treehugger Robot
c8a49f6246 [automerger skipped] Merge "Add security context for com.google.usf.non_wake_up/wakeup." am: d6ff29d1ca am: a4d246abac am: 6481874c77 am: 4c9a910a60 -s ours am: 8a978f91ea -s ours
am skip reason: Merged-In I8600283d9ff2ebcb45df95e5259484a60921fb1a with SHA-1 c96220c282 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2183507

Change-Id: I9a78d1d459dc6b6101450e7d656d204e5a3ab8c1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-22 08:40:12 +00:00
Treehugger Robot
8a978f91ea [automerger skipped] Merge "Add security context for com.google.usf.non_wake_up/wakeup." am: d6ff29d1ca am: a4d246abac am: 6481874c77 am: 4c9a910a60 -s ours
am skip reason: Merged-In I8600283d9ff2ebcb45df95e5259484a60921fb1a with SHA-1 c96220c282 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2183507

Change-Id: Ieeb614105a88c6dd27a46a49b2a2bff8d2252892
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-22 08:13:18 +00:00
Treehugger Robot
4c9a910a60 Merge "Add security context for com.google.usf.non_wake_up/wakeup." am: d6ff29d1ca am: a4d246abac am: 6481874c77
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2183507

Change-Id: Ica06811653100886c99ea2d01ab09edfdd83585f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-22 07:46:49 +00:00
Treehugger Robot
6481874c77 Merge "Add security context for com.google.usf.non_wake_up/wakeup." am: d6ff29d1ca am: a4d246abac
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2183507

Change-Id: Ib9ba46ae5b7e0454927f18e48a85f03f6847ef83
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-22 07:29:18 +00:00
Treehugger Robot
a4d246abac Merge "Add security context for com.google.usf.non_wake_up/wakeup." am: d6ff29d1ca
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2183507

Change-Id: I89572f1c793f464011163d50c0ef19c95f3b13d3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-22 06:59:40 +00:00
Treehugger Robot
d6ff29d1ca Merge "Add security context for com.google.usf.non_wake_up/wakeup." 2022-08-22 06:38:52 +00:00
Treehugger Robot
3c8a709b33 [automerger skipped] Merge "Add acd-com.google.usf.non_wake_up file to AoC file context." am: 3cb1ea79c9 am: c56dc643a4 am: b2e001581b am: b551e0475f -s ours am: e3fc764940 -s ours
am skip reason: Merged-In If9add3528bde47a618bd884ce28121b6fa32754c with SHA-1 bf1333f881 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2183506

Change-Id: I72f3afd260e6a6d3d28574cd188cb9248b3844e4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-22 05:48:51 +00:00
Treehugger Robot
e3fc764940 [automerger skipped] Merge "Add acd-com.google.usf.non_wake_up file to AoC file context." am: 3cb1ea79c9 am: c56dc643a4 am: b2e001581b am: b551e0475f -s ours
am skip reason: Merged-In If9add3528bde47a618bd884ce28121b6fa32754c with SHA-1 bf1333f881 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2183506

Change-Id: I272afe3233e8fd5303271257613c45cc9d284e8c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-22 05:29:17 +00:00
Treehugger Robot
b551e0475f Merge "Add acd-com.google.usf.non_wake_up file to AoC file context." am: 3cb1ea79c9 am: c56dc643a4 am: b2e001581b
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2183506

Change-Id: I46122f6a44cb7bc4ea9fb1f63c4e57e8f92709f3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-22 05:12:24 +00:00
Treehugger Robot
b2e001581b Merge "Add acd-com.google.usf.non_wake_up file to AoC file context." am: 3cb1ea79c9 am: c56dc643a4
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2183506

Change-Id: Ibd378b384da9da3b9a08c9d56e72ecc5b3fd8ddd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-22 04:44:16 +00:00
Treehugger Robot
c56dc643a4 Merge "Add acd-com.google.usf.non_wake_up file to AoC file context." am: 3cb1ea79c9
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2183506

Change-Id: Id1cdbd151bd58bfca12ea328f749a54b54d4edb5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-22 04:24:22 +00:00
Treehugger Robot
3cb1ea79c9 Merge "Add acd-com.google.usf.non_wake_up file to AoC file context." 2022-08-22 04:10:13 +00:00
Xin Li
6570cc99e4 [automerger skipped] DO NOT MERGE - Merge Android 13 am: ac180b779b -s ours am: e6e50e6051 -s ours am: d6913cae13 -s ours am: b457568612 -s ours
am skip reason: subject contains skip directive

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2186421

Change-Id: I9f3447d5e10ee052a38271ce54fe263f01e6a116
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-17 07:24:49 +00:00
Xin Li
b457568612 [automerger skipped] DO NOT MERGE - Merge Android 13 am: ac180b779b -s ours am: e6e50e6051 -s ours am: d6913cae13 -s ours
am skip reason: Merged-In I03be37c9e50280d6fa2cfdd69dca83c0535b2e35 with SHA-1 b577060b2d is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2186421

Change-Id: Iadb6bab6a18b57d8b42d69ffbe51b4d6eb6dc4c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-16 23:36:26 +00:00
Xin Li
d6913cae13 [automerger skipped] DO NOT MERGE - Merge Android 13 am: ac180b779b -s ours am: e6e50e6051 -s ours
am skip reason: Merged-In I03be37c9e50280d6fa2cfdd69dca83c0535b2e35 with SHA-1 b577060b2d is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2186421

Change-Id: Ia1fa38ac57b276d16bf5ea84454b4110a4d06366
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-16 23:06:05 +00:00
Xin Li
e6e50e6051 [automerger skipped] DO NOT MERGE - Merge Android 13 am: ac180b779b -s ours
am skip reason: Merged-In I03be37c9e50280d6fa2cfdd69dca83c0535b2e35 with SHA-1 b577060b2d is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2186421

Change-Id: Iac9b3c92887d80300bafde61f1dcd79d248feab6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-16 22:43:59 +00:00
Adam Shih
0c9ace503c move bcmbt settings to gs-common
Bug: 242661555
Test: build pass
Change-Id: Ib02f88317c31438871ac84bbe71d359b7186394d
2022-08-16 13:58:57 +08:00
Wiwit Rifa'i
443da0523a Add SE policies for HWC logs
Bug: 230361290
Test: adb bugreport
Test: adb shell vndservice call Exynos.HWCService 11 i32 0 i32 308 i32 1
Change-Id: I20ec7ee1856a45d271e0e6ebfd7eb74525b96f77
2022-08-16 13:22:33 +08:00
Xin Li
ac180b779b DO NOT MERGE - Merge Android 13
Bug: 242648940
Merged-In: I03be37c9e50280d6fa2cfdd69dca83c0535b2e35
Change-Id: I8feb38896fbd83a590fefebc4f356582315630e7
2022-08-15 22:00:01 -07:00
matthuang
62ba653669 Add security context for com.google.usf.non_wake_up/wakeup.
Bug: 195077076
Test: Confirm there is no avc denied log.
Change-Id: I8600283d9ff2ebcb45df95e5259484a60921fb1a
Merged-In: I8600283d9ff2ebcb45df95e5259484a60921fb1a
2022-08-15 18:52:58 +08:00
matthuang
7e89415aaf Add acd-com.google.usf.non_wake_up file to AoC file context.
Bug: 195077076
Test: ls -lZ dev/acd-com.google.usf.non_wake_up
Change-Id: If9add3528bde47a618bd884ce28121b6fa32754c
Merged-In: If9add3528bde47a618bd884ce28121b6fa32754c
2022-08-15 18:46:52 +08:00
Thiébaud Weksteen
7d6c449261 Revert "Update SELinux error"
This reverts commit 286d40c81b.

Test: TH
Bug: 241172186
Bug: 241172220
Bug: 241172337
Bug: 241172391
Bug: 241172490
Change-Id: Id3453e85aee3ee8e0255d3e53f37ca4488d7c9f9
2022-08-15 13:47:56 +10:00
yixuanjiang
0bbfb98cac aoc: add audio property for pixellogger update control
Bug: 241059471
Test: local verify
Signed-off-by: yixuanjiang <yixuanjiang@google.com>
Change-Id: I13df2ea88b884756d3a872da545e877ed6b1e033
2022-08-08 03:48:21 +00:00
TreeHugger Robot
a3fc2a745c Merge "HwInfo: Move hardware info sepolicy to pixel common" 2022-08-03 02:57:30 +00:00
Adam Shih
286d40c81b Update SELinux error
Test: checkSensors
Bug: 241172337
Test: scanBugreport
Bug: 241172490
Test: testAtomicWrite
Bug: 241172490
Test: testConfigMaxSectorsKB
Bug: 241172490
Test: testDirectWriteNormalReadInEncryptedDir
Bug: 241172391
Test: testInvalidWrite
Bug: 241172490
Test: testLoopMaxPartDefined
Bug: 241172391
Test: testNormalWriteDirectReadInEncryptedDir
Bug: 241172490
Test: testPinFile
Bug: 241172490
Test: testSmallFileInEncryptedDir
Bug: 241172490
Change-Id: Iee5a8e6fff46b62ec0a448b05db64a788b7d08fb
2022-08-03 01:09:57 +00:00
Bruce Po
60920d10a6 Allow aocd to access acd-offload nodes am: 1673f21545 am: 62c16fd040
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19472656

Change-Id: Ic19b92da27365a03cc5f99523fd84a08fa0aa473
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-02 19:33:02 +00:00
Bruce Po
62c16fd040 Allow aocd to access acd-offload nodes am: 1673f21545
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19472656

Change-Id: I524c210830ba139cb36ee5c8a664d87cc5c497ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-02 19:05:57 +00:00
Denny cy Lee
ea1580002f HwInfo: Move hardware info sepolicy to pixel common
Bug: 215271971
Test: no sepolicy for hardware info

Signed-off-by: Denny cy Lee <dennycylee@google.com>
Change-Id: Ia7bfd171fe724848e9a6f0c1adab59402d2788a9
2022-08-02 07:43:56 +00:00
Bruce Po
1673f21545 Allow aocd to access acd-offload nodes
For 3-ch hotword feature, aocd daemon will access two new file nodes
(b/235648212), which will be used for transmitting audio to/from AOC.

BUG: 240744178
Change-Id: Ie0a9403d0dca06befdb807067adb9babc4f28bfc
2022-08-02 06:29:42 +00:00
Steven Moreland
e39a85ed28 [automerger skipped] Restore HAL type names. am: b577060b2d -s ours am: 0b3734e918 -s ours am: d524c356c4 -s ours am: 85aac05e32 -s ours am: 3a8d58a1d6 -s ours
am skip reason: skipped by user smoreland

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2171622

Change-Id: I5b487f0081213a77df6ce2a5a479ee23a676091b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 20:50:08 +00:00
Steven Moreland
3a8d58a1d6 [automerger skipped] Restore HAL type names. am: b577060b2d -s ours am: 0b3734e918 -s ours am: d524c356c4 -s ours am: 85aac05e32 -s ours
am skip reason: skipped by user smoreland

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2171622

Change-Id: I90b895cc43e696e27e803fb4ae49288d2c25bda8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 20:24:01 +00:00
Steven Moreland
85aac05e32 [automerger skipped] Restore HAL type names. am: b577060b2d -s ours am: 0b3734e918 -s ours am: d524c356c4 -s ours
am skip reason: skipped by user smoreland

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2171622

Change-Id: I372f5eadd13eaaffe9afda8b9828fa65276600e5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 20:06:24 +00:00
Steven Moreland
d524c356c4 [automerger skipped] Restore HAL type names. am: b577060b2d -s ours am: 0b3734e918 -s ours
am skip reason: skipped by user smoreland

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2171622

Change-Id: I72c5783bcaad73c6cfff12688f0f1a9c4658008a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 19:49:44 +00:00
Steven Moreland
0b3734e918 [automerger skipped] Restore HAL type names. am: b577060b2d -s ours
am skip reason: skipped by user smoreland

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2171622

Change-Id: Ib3e5940f7132201773088487d892a0c23fd22f7c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 19:28:53 +00:00
Steven Moreland
d501ac5aa8 [automerger skipped] Merge "Remove vendor_service." am: c6545d33ff -s ours am: f200aa0cee -s ours am: 235c5c3ba6 -s ours am: 0add999ea6 -s ours am: 0f5940d969 -s ours
am skip reason: Merged-In I4766227e2261d0d57be090933926ff3b439694f6 with SHA-1 b20e917ebf is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2155037

Change-Id: I88eadf2e569ed3f6025813546d1e671a3daeb36a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 19:07:55 +00:00
Steven Moreland
0abfa36877 [automerger skipped] Remove vendor_service. am: 2808c8b289 -s ours am: 8354f470a4 -s ours am: 1cd11b0bae -s ours am: 0cb7db439d -s ours am: a49ba9a5b0 -s ours
am skip reason: Merged-In I4766227e2261d0d57be090933926ff3b439694f6 with SHA-1 b20e917ebf is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2155037

Change-Id: I50254192e92a529f47579d6f7d5e18c87044b10e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 19:07:54 +00:00
Lei Ju
1c69e17927 Merge "Allow chre to use WakeLock on whitechapel." 2022-08-01 18:49:57 +00:00
Steven Moreland
b577060b2d Restore HAL type names.
Sed'd. TH not configured on AOSP. This is the change that is applied already internally.

Change-Id: I03be37c9e50280d6fa2cfdd69dca83c0535b2e35
2022-08-01 18:41:26 +00:00
Steven Moreland
0f5940d969 [automerger skipped] Merge "Remove vendor_service." am: c6545d33ff -s ours am: f200aa0cee -s ours am: 235c5c3ba6 -s ours am: 0add999ea6 -s ours
am skip reason: Merged-In I4766227e2261d0d57be090933926ff3b439694f6 with SHA-1 b20e917ebf is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2155037

Change-Id: Ia894717849e4a76a579867c4f7d9c5b9a7e24b20
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 18:41:14 +00:00
Steven Moreland
a49ba9a5b0 [automerger skipped] Remove vendor_service. am: 2808c8b289 -s ours am: 8354f470a4 -s ours am: 1cd11b0bae -s ours am: 0cb7db439d -s ours
am skip reason: Merged-In I4766227e2261d0d57be090933926ff3b439694f6 with SHA-1 b20e917ebf is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2155037

Change-Id: I2ac9d93c20ba70ce47ef90dbc2372ad71980a889
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 18:41:13 +00:00
Steven Moreland
0add999ea6 [automerger skipped] Merge "Remove vendor_service." am: c6545d33ff -s ours am: f200aa0cee -s ours am: 235c5c3ba6 -s ours
am skip reason: Merged-In I4766227e2261d0d57be090933926ff3b439694f6 with SHA-1 b20e917ebf is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2155037

Change-Id: Ia302639c8e32d70191922d2b2be3524998b1cea1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 18:17:40 +00:00
Steven Moreland
0cb7db439d [automerger skipped] Remove vendor_service. am: 2808c8b289 -s ours am: 8354f470a4 -s ours am: 1cd11b0bae -s ours
am skip reason: Merged-In I4766227e2261d0d57be090933926ff3b439694f6 with SHA-1 b20e917ebf is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2155037

Change-Id: I574a62e51fefd43bb174b5a1e6ad097dab6570ad
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 18:17:39 +00:00
Steven Moreland
235c5c3ba6 [automerger skipped] Merge "Remove vendor_service." am: c6545d33ff -s ours am: f200aa0cee -s ours
am skip reason: Merged-In I4766227e2261d0d57be090933926ff3b439694f6 with SHA-1 b20e917ebf is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2155037

Change-Id: I2ab3c0e8d7fdb7e26e7b0b0ab79caf9ce39a93d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 17:52:32 +00:00
Steven Moreland
1cd11b0bae [automerger skipped] Remove vendor_service. am: 2808c8b289 -s ours am: 8354f470a4 -s ours
am skip reason: Merged-In I4766227e2261d0d57be090933926ff3b439694f6 with SHA-1 b20e917ebf is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2155037

Change-Id: I1151cb806654e2e37f1ea1f862dfff41810c1759
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 17:52:30 +00:00
Steven Moreland
f200aa0cee [automerger skipped] Merge "Remove vendor_service." am: c6545d33ff -s ours
am skip reason: Merged-In I4766227e2261d0d57be090933926ff3b439694f6 with SHA-1 b20e917ebf is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2155037

Change-Id: Ieb341a369cd4d986dbfc47b0106202cd4a6e7e74
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 17:26:20 +00:00
Steven Moreland
8354f470a4 [automerger skipped] Remove vendor_service. am: 2808c8b289 -s ours
am skip reason: Merged-In I4766227e2261d0d57be090933926ff3b439694f6 with SHA-1 b20e917ebf is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2155037

Change-Id: I43b7480f97cc201f0b092ffa73ed0d92cab75296
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 17:26:18 +00:00
Steven Moreland
c6545d33ff Merge "Remove vendor_service." 2022-08-01 17:07:40 +00:00
Steven Moreland
7e1fa791cd [automerger skipped] Remove vendor_service. am: b20e917ebf -s ours am: 4783ac2aff -s ours am: 83ca4acec8 -s ours am: 58182caeeb -s ours
am skip reason: Merged-In I4766227e2261d0d57be090933926ff3b439694f6 with SHA-1 81ccf8d719 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19469145

Change-Id: I5a10023bb644ca076cabcb28c7c12ef510d7b19c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-30 00:27:34 +00:00
Steven Moreland
58182caeeb [automerger skipped] Remove vendor_service. am: b20e917ebf -s ours am: 4783ac2aff -s ours am: 83ca4acec8 -s ours
am skip reason: Merged-In I4766227e2261d0d57be090933926ff3b439694f6 with SHA-1 81ccf8d719 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19469145

Change-Id: Icb77dd094be072bf8d07f03802c1d46a27d0cfe5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-29 23:54:12 +00:00
Steven Moreland
83ca4acec8 [automerger skipped] Remove vendor_service. am: b20e917ebf -s ours am: 4783ac2aff -s ours
am skip reason: Merged-In I4766227e2261d0d57be090933926ff3b439694f6 with SHA-1 81ccf8d719 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19469145

Change-Id: I0ef0aea6a565a74af895e2ae8086fd3dfcb814b6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-29 23:31:53 +00:00
Steven Moreland
4783ac2aff [automerger skipped] Remove vendor_service. am: b20e917ebf -s ours
am skip reason: Merged-In I4766227e2261d0d57be090933926ff3b439694f6 with SHA-1 81ccf8d719 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19469145

Change-Id: Ie309da7f885d4a61d47270cf7c122f78846cca87
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-29 23:07:04 +00:00
Steven Moreland
b20e917ebf Remove vendor_service.
We want to avoid associating types with where they can be used.

Bug: 237115222
Test: build
Change-Id: I4766227e2261d0d57be090933926ff3b439694f6
Merged-In: I4766227e2261d0d57be090933926ff3b439694f6
(cherry picked from commit 81ccf8d719)
2022-07-29 18:34:05 +00:00
Roger Liao
75ba5fc5cc Fix build break if BOARD_WITHOUT_RADIO am: 5ea60d6348 am: 68ddcb629a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19447103

Change-Id: Idbe29367df44ffa49c6de9125f07f5837e0a2cae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-29 07:22:32 +00:00
Roger Liao
68ddcb629a Fix build break if BOARD_WITHOUT_RADIO am: 5ea60d6348
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19447103

Change-Id: I5659941108a8504cd4ea13e22f075a8cdcf60749
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-29 06:57:24 +00:00
Adam Shih
479986a020 Update SELinux error
Test: checkSensors
Bug: 240632824
Test: checkLockScreen
Bug: 240632824
Test: scanBugreport
Bug: 240632824
Change-Id: I4fee87636dc65765e4ab3e10e0b7080d7b4d44b2
2022-07-29 10:18:10 +08:00
Roger Liao
5ea60d6348 Fix build break if BOARD_WITHOUT_RADIO
Fix ERROR 'unknown type radio_vendor_data_file'

Bug: 235907512
Change-Id: I55e88c9364b42db262c057a2aa85816944c1c761
2022-07-28 17:59:28 +08:00
Kyle Lin
3014f97824 Merge "Remove dontaudit since read early_wakeup completed" 2022-07-28 02:51:37 +00:00
Steven Moreland
5e9bc45aee Merge "Remove vendor_service." into tm-dev-plus-aosp am: be1bd1eebb am: 6a8d151ba8 am: 829119e383
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19441276

Change-Id: Ideecc231104d31b1cd69714fb0ddb71992645dad
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-28 02:26:31 +00:00
Steven Moreland
829119e383 Merge "Remove vendor_service." into tm-dev-plus-aosp am: be1bd1eebb am: 6a8d151ba8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19441276

Change-Id: Ibef456a15a20694227afe25289387c1caa2bcd0b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-28 01:57:45 +00:00
Steven Moreland
6a8d151ba8 Merge "Remove vendor_service." into tm-dev-plus-aosp am: be1bd1eebb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19441276

Change-Id: Ia9526d71defecd28580dfd6f4619a88dc87ea58f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-28 01:08:22 +00:00
Steven Moreland
be1bd1eebb Merge "Remove vendor_service." into tm-dev-plus-aosp 2022-07-28 00:46:47 +00:00
Tri Vo
5d0e11a0aa storageproxyd: Remove setuid/setgid SELinux permissions am: 78011e9f3a am: a68844f3e1 am: e4f4a40a0c am: 121cb7702d am: cd428bcab4
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2154700

Change-Id: Ic063de9feb084f0a5985093e27142b098612a34b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-27 21:53:47 +00:00
Tri Vo
cd428bcab4 storageproxyd: Remove setuid/setgid SELinux permissions am: 78011e9f3a am: a68844f3e1 am: e4f4a40a0c am: 121cb7702d
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2154700

Change-Id: I7bba70c4cc7cbd1d6298310b60659c6272b5ff3a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-27 21:27:22 +00:00
Tri Vo
121cb7702d storageproxyd: Remove setuid/setgid SELinux permissions am: 78011e9f3a am: a68844f3e1 am: e4f4a40a0c
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2154700

Change-Id: Id91151413c15852b94afcda312c7890fb78c096c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-27 20:33:41 +00:00
Tri Vo
e4f4a40a0c storageproxyd: Remove setuid/setgid SELinux permissions am: 78011e9f3a am: a68844f3e1
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2154700

Change-Id: Ie1ea9408063ebcf2ba49850d7ac208111328f116
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-27 20:09:28 +00:00
Tri Vo
a68844f3e1 storageproxyd: Remove setuid/setgid SELinux permissions am: 78011e9f3a
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2154700

Change-Id: I611a9f1ecd6157c3d1f65c250c698a9ee00a0915
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-27 19:43:32 +00:00
Steven Moreland
81ccf8d719 Remove vendor_service.
We want to avoid associating types with where they can be used.

Bug: 237115222
Test: build
Change-Id: I4766227e2261d0d57be090933926ff3b439694f6
2022-07-27 16:50:03 +00:00
Lei Ju
d1ddd0917e Allow chre to use WakeLock on whitechapel.
Test: Manual test to confirm wakelock is acquired.
Bug: 202447392
Change-Id: I40b83fc22fea79613c060d03beb60857b1b6e0de
2022-07-26 20:06:05 -07:00
Steven Moreland
2808c8b289 Remove vendor_service.
We want to avoid associating types with where they can be used.

Bug: 237115222
Test: build
Merged-In: I4766227e2261d0d57be090933926ff3b439694f6
Change-Id: I4766227e2261d0d57be090933926ff3b439694f6
2022-07-27 00:28:49 +00:00
Stephane Lee
faec9385c4 Bug fixed in ag/19153533
Bug: 238143381
Test: N/A
Change-Id: If527ea681abaa221e55533a3dab1371ecac7a3b2
2022-07-22 16:55:24 -07:00
Minchan Kim
4bd6037084 Merge "Remove vendor_init.te from tracking_denials" 2022-07-21 03:45:37 +00:00
matthuang
bb144cecd2 Add security context for com.google.usf.non_wake_up/wakeup. am: c96220c282 am: c061348b1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19291365

Change-Id: I71e0c93734dc4c49ab13f24bb18bbf6f02afa8a4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-19 02:12:26 +00:00
matthuang
c061348b1c Add security context for com.google.usf.non_wake_up/wakeup. am: c96220c282
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19291365

Change-Id: Idd09818dc82348398e780db3ee81948d75ffda4b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-19 01:47:05 +00:00
matthuang
c96220c282 Add security context for com.google.usf.non_wake_up/wakeup.
Bug: 195077076
Test: Confirm there is no avc denied log.
Change-Id: I8600283d9ff2ebcb45df95e5259484a60921fb1a
2022-07-18 15:12:45 +08:00
Jimmy Shiu
55d41f1a3e Remove dontaudit since read early_wakeup completed
The display file node, early_wakeup, just for trigger the worker for
display and it doesn't have meaningful read function. But PowerHAL read
all nodes and try to dump their valuesi while triggering bugreport. As
the read operation has been completed, so we can remove the clause.

07-02 00:53:56.888   522   522 W android.hardwar: type=1400 audit(0.0:8): avc: denied { dac_read_search } for capability=2 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0
07-02 00:53:56.888   522   522 W android.hardwar: type=1400 audit(0.0:9): avc: denied { dac_override } for capability=1 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0

Bug: 221384860
Bug: 192617242
Bug: 171760921
Test: adb shell dumpsys android.hardware.power.IPower/default
Change-Id: If0018499cc19f79819ef69794d7672d5a53de74e
2022-07-18 11:08:58 +08:00
timmyli
0f73892408 Change SElinux so Aswang can be accessed
Need to add aswang here so that it can be accessed.

Bug: 234259081
Test: CTS
Change-Id: I3e701df76af8e803017bdfd04ce67093bf21a658
2022-07-16 06:26:56 +00:00
Tri Vo
78011e9f3a storageproxyd: Remove setuid/setgid SELinux permissions
Bug: 205904330
Test: boot
Change-Id: Iefecc29752781151679e9f798330a36d14447df9
2022-07-15 11:07:47 -07:00
SalmaxChang
164b3ee307 [automerger skipped] hal_dumpstate_default: fix avc error am: 2455329536 -s ours am: c0f473a7a8 -s ours
am skip reason: Merged-In Ib9625eefc367738bcd6594884b1f3b5e3ab5be54 with SHA-1 de88097de5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19035085

Change-Id: I821c9e823e15c8a25041902aeb48fa4f5ab1fc93
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-15 07:57:08 +00:00
SalmaxChang
c0f473a7a8 [automerger skipped] hal_dumpstate_default: fix avc error am: 2455329536 -s ours
am skip reason: Merged-In Ib9625eefc367738bcd6594884b1f3b5e3ab5be54 with SHA-1 de88097de5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19035085

Change-Id: I508d88c27a9eee987654acc452d4f45129a8ed18
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-15 07:38:25 +00:00
Minchan Kim
86ef69850b Remove vendor_init.te from tracking_denials
Since last error fixed, remove the vendor_init.te from tracking_denials.

Bug: 190337297
Signed-off-by: Minchan Kim <minchan@google.com>
Change-Id: I5178c864a70748c1dddf8c08baa8d653cd0225d9
2022-07-15 05:10:55 +00:00
Adam Shih
32d987cd24 Update SELinux error
Bug: 234547283
Change-Id: I50bd66a22755eefe7aa24ec1042e3b6cb627ad3d
2022-07-15 00:30:47 +00:00
Adam Shih
74d2d8963f Update error on ROM 8820442
Bug: 238825802
Test: testSysfsHealth
Change-Id: I607f78de19b18b258309f89669ded393dd74a2a7
2022-07-13 11:01:28 +08:00
Adam Shih
c6186c2960 Update SELinux error
Test: checkSensors
Bug: 238571420
Test: checkLockScreen
Bug: 238570971
Test: scanBugreport
Bug: 238571324
Change-Id: Ia6f2db6374d7ebe1a9c3f5b0bd8d152ed9d4a9a0
2022-07-11 10:24:12 +08:00
SalmaxChang
2455329536 hal_dumpstate_default: fix avc error
avc: denied { search } for comm="dumpstate@1.1-s" name="modem_stat" dev="dm-44" ino=341 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:modem_stat_data_file:s0 tclass=dir

Bug: 235963885
Change-Id: Ib9625eefc367738bcd6594884b1f3b5e3ab5be54
Merged-In: Ib9625eefc367738bcd6594884b1f3b5e3ab5be54
2022-07-08 03:24:01 +00:00
Adam Shih
347e482d19 Update SELinux error
Test: checkLockScreen
Bug: 238263438
Bug: 238263568
Change-Id: I694924ceb031abb749e4b92a715d3b7dc87088be
2022-07-07 11:29:44 +08:00
Adam Shih
bc85d46045 ignore shell access on wlc
Bug: 238038592
Test: boot
Change-Id: I09b67ca07d7f9573d77f64686fb818d4dc1753cc
2022-07-06 14:44:41 +08:00
Adam Shih
a8aeb4a6c9 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 238143262
Bug: 238143381
Change-Id: Ibe3ce917418d71b61aa6d085041a51dda5998c74
2022-07-06 02:58:51 +00:00
Adam Shih
7835523aea Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 238038592
Change-Id: Id248ba82c49fa09be28f7a0219eb42b0ecc9e358
2022-07-05 11:17:25 +08:00
TreeHugger Robot
ae60f4bc6d Merge "Add acd-com.google.usf.non_wake_up file to AoC file context." into tm-qpr-dev am: 59d6e09682 am: df9d1731af
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18871451

Change-Id: I354e568b012ef36d65a843185c2e4d1b7509c522
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-01 03:12:56 +00:00
TreeHugger Robot
df9d1731af Merge "Add acd-com.google.usf.non_wake_up file to AoC file context." into tm-qpr-dev am: 59d6e09682
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18871451

Change-Id: I931993bfd0b94da00fed9e4ff6c25f95fdb9509a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-07-01 02:45:20 +00:00
TreeHugger Robot
59d6e09682 Merge "Add acd-com.google.usf.non_wake_up file to AoC file context." into tm-qpr-dev 2022-07-01 02:15:21 +00:00
Xin Li
67cdc2bdb0 [automerger skipped] Merge tm-dev-plus-aosp-without-vendor@8763363 am: 351260db12 -s ours am: 25bb42eb54 -s ours am: 37f3d28139 -s ours am: bce330f037 -s ours
am skip reason: Merged-In Ib9625eefc367738bcd6594884b1f3b5e3ab5be54 with SHA-1 de88097de5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19093699

Change-Id: Ie532ae3f4c110dae29846d296d77fd394738ba9f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-30 01:04:43 +00:00
Xin Li
bce330f037 [automerger skipped] Merge tm-dev-plus-aosp-without-vendor@8763363 am: 351260db12 -s ours am: 25bb42eb54 -s ours am: 37f3d28139 -s ours
am skip reason: Merged-In Ib9625eefc367738bcd6594884b1f3b5e3ab5be54 with SHA-1 de88097de5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19093699

Change-Id: I22d734bfc6aa1ca4f63f10f63ad386433fa6173a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-30 00:02:09 +00:00
Xin Li
37f3d28139 [automerger skipped] Merge tm-dev-plus-aosp-without-vendor@8763363 am: 351260db12 -s ours am: 25bb42eb54 -s ours
am skip reason: Merged-In Ib9625eefc367738bcd6594884b1f3b5e3ab5be54 with SHA-1 de88097de5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19093699

Change-Id: Ia4c9ae47f3f455d5b629f301937ade0f9f07359a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-29 22:56:26 +00:00
Xin Li
25bb42eb54 [automerger skipped] Merge tm-dev-plus-aosp-without-vendor@8763363 am: 351260db12 -s ours
am skip reason: Merged-In Ib9625eefc367738bcd6594884b1f3b5e3ab5be54 with SHA-1 de88097de5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19093699

Change-Id: I39a8ce7402950e78469ba04412f430381f0d9f12
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-29 22:12:56 +00:00
Xin Li
351260db12 Merge tm-dev-plus-aosp-without-vendor@8763363
Bug: 236760014
Merged-In: Ib9625eefc367738bcd6594884b1f3b5e3ab5be54
Change-Id: I0f66cef4179df45ee56af588df1fe1b82b0f642a
2022-06-27 23:37:34 +00:00
sashwinbalaji
7600ddd96b thermal: added property persist.vendor.disable.thermal.dfs.control am: 1a4cd82bc8 am: 6ffe88201a am: 7bb947b88e am: cbbe4561a3 am: fcf9cbcb83
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2133444

Change-Id: I7468f221840e910a05136009d0639b5f96eef636
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 10:11:47 +00:00
sashwinbalaji
fcf9cbcb83 thermal: added property persist.vendor.disable.thermal.dfs.control am: 1a4cd82bc8 am: 6ffe88201a am: 7bb947b88e am: cbbe4561a3
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2133444

Change-Id: I97cdd61e0634bce617d72d4543d856c709b3bddf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 09:54:20 +00:00
sashwinbalaji
cbbe4561a3 thermal: added property persist.vendor.disable.thermal.dfs.control am: 1a4cd82bc8 am: 6ffe88201a am: 7bb947b88e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2133444

Change-Id: I4e27c835adfe73ef473b2afd2b303a36307e6ee9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 09:32:01 +00:00
sashwinbalaji
7bb947b88e thermal: added property persist.vendor.disable.thermal.dfs.control am: 1a4cd82bc8 am: 6ffe88201a
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2133444

Change-Id: I71bd9b49f2dc76e1e50f0b35bd404f7c8660d5d9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 09:07:19 +00:00
sashwinbalaji
6ffe88201a thermal: added property persist.vendor.disable.thermal.dfs.control am: 1a4cd82bc8
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2133444

Change-Id: Ifc9b8e1d980dee52194a08805052f28bb2b7df8b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-27 08:49:10 +00:00
sashwinbalaji
1a4cd82bc8 thermal: added property persist.vendor.disable.thermal.dfs.control
Updated the sepolicy to access tmu register

Bug: 235156080
Test: Used local build to verify security context of tmu_reg files
Change-Id: Ia2a274ec3424bfeec25ae24e762f8ad41cb7ae86
2022-06-24 13:54:24 +08:00
SalmaxChang
f9a757b52a [automerger skipped] modem_svc: Fix avc error am: a9157994c3 -s ours am: 7f2be55a04 -s ours
am skip reason: Merged-In I51db41d73be317cc7fc84981ac5f04e254a360d0 with SHA-1 1be95c2e33 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19024668

Change-Id: I20f62fed2cb71eb9e205a0635a9607cb623dc501
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-22 10:03:01 +00:00
SalmaxChang
7f2be55a04 [automerger skipped] modem_svc: Fix avc error am: a9157994c3 -s ours
am skip reason: Merged-In I51db41d73be317cc7fc84981ac5f04e254a360d0 with SHA-1 1be95c2e33 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19024668

Change-Id: I1bc24cab890b9f10a620723013f44b782efaa8f0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-22 09:44:04 +00:00
SalmaxChang
a9157994c3 modem_svc: Fix avc error
avc: denied { write } for comm="modem_svc_sit" name="modem_stat" dev="dm-42" ino=331 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_data_file:s0 tclass=dir permissive=0

Bug: 234844823
Change-Id: I51db41d73be317cc7fc84981ac5f04e254a360d0
Merged-In: I51db41d73be317cc7fc84981ac5f04e254a360d0
2022-06-22 04:21:37 +00:00
SalmaxChang
0cef5e66fe hal_dumpstate_default: fix avc error am: de88097de5 am: 12053bbe8d am: ba3c6036fc am: 8bbd5d3430 am: d3dba796f9
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2130236

Change-Id: Ia6b24e15d0118326f253d0327d4a8e0cf874d879
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-21 03:26:10 +00:00
SalmaxChang
d3dba796f9 hal_dumpstate_default: fix avc error am: de88097de5 am: 12053bbe8d am: ba3c6036fc am: 8bbd5d3430
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2130236

Change-Id: Iecec85303b3b51cbd69f1ea8ca28448f0b0d80d9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-21 03:07:39 +00:00
SalmaxChang
8bbd5d3430 hal_dumpstate_default: fix avc error am: de88097de5 am: 12053bbe8d am: ba3c6036fc
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2130236

Change-Id: I1fafe1f2fe007191a32368f82b06985038ea029c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-21 02:41:35 +00:00
SalmaxChang
ba3c6036fc hal_dumpstate_default: fix avc error am: de88097de5 am: 12053bbe8d
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2130236

Change-Id: I9167e7032d77a57f41f2592378b551b60f09a375
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-21 02:24:59 +00:00
SalmaxChang
12053bbe8d hal_dumpstate_default: fix avc error am: de88097de5
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2130236

Change-Id: Iaabe145decca9d0129a8f74a92782e5fe7ddcbcd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-21 02:05:20 +00:00
SalmaxChang
de88097de5 hal_dumpstate_default: fix avc error
avc: denied { search } for comm="dumpstate@1.1-s" name="modem_stat" dev="dm-44" ino=341 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:modem_stat_data_file:s0 tclass=dir

Bug: 235963885
Change-Id: Ib9625eefc367738bcd6594884b1f3b5e3ab5be54
2022-06-20 15:55:16 +08:00
Xin Li
3a654c2091 [automerger skipped] Merge "Merge Android 12 QPR 3" am: cd158e3668 -s ours am: 4492e80320 -s ours am: 00e8d1827d -s ours am: 432d5becd9 -s ours am: 7370b90d0c -s ours
am skip reason: Merged-In I289ba5aa69251d8575f4bd65fbeb7a38c3e03886 with SHA-1 203f473af5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2126116

Change-Id: Ifca8d503ff11a46856483b85836c9c5bab17620c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 21:34:25 +00:00
Xin Li
6ec6e60aa9 [automerger skipped] Merge Android 12 QPR 3 am: 83d71652ff -s ours am: 5354139d04 -s ours am: 13407053a9 -s ours am: 71aa410b60 -s ours am: 418fc579cf -s ours
am skip reason: Merged-In I289ba5aa69251d8575f4bd65fbeb7a38c3e03886 with SHA-1 203f473af5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2126116

Change-Id: Iad72a9210e2fdb5ad6c036f38ca7c778e1c73238
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 21:33:24 +00:00
Xin Li
7370b90d0c [automerger skipped] Merge "Merge Android 12 QPR 3" am: cd158e3668 -s ours am: 4492e80320 -s ours am: 00e8d1827d -s ours am: 432d5becd9 -s ours
am skip reason: Merged-In I289ba5aa69251d8575f4bd65fbeb7a38c3e03886 with SHA-1 203f473af5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2126116

Change-Id: I2e61493424d6005b84e508a164dbdfc8cb620959
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 20:53:34 +00:00
Xin Li
418fc579cf [automerger skipped] Merge Android 12 QPR 3 am: 83d71652ff -s ours am: 5354139d04 -s ours am: 13407053a9 -s ours am: 71aa410b60 -s ours
am skip reason: Merged-In I289ba5aa69251d8575f4bd65fbeb7a38c3e03886 with SHA-1 203f473af5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2126116

Change-Id: I3aa710139ea78361344a91540ff74a129ad9cd42
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 20:52:32 +00:00
Xin Li
432d5becd9 [automerger skipped] Merge "Merge Android 12 QPR 3" am: cd158e3668 -s ours am: 4492e80320 -s ours am: 00e8d1827d -s ours
am skip reason: Merged-In I289ba5aa69251d8575f4bd65fbeb7a38c3e03886 with SHA-1 203f473af5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2126116

Change-Id: I59891a9fc89b4b576b05593188ee8c5c19149b9f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 19:57:16 +00:00
Xin Li
71aa410b60 [automerger skipped] Merge Android 12 QPR 3 am: 83d71652ff -s ours am: 5354139d04 -s ours am: 13407053a9 -s ours
am skip reason: Merged-In I289ba5aa69251d8575f4bd65fbeb7a38c3e03886 with SHA-1 203f473af5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2126116

Change-Id: I61c42e670fc5fcfdf085981b4b63c91b7a5bd7ed
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 19:56:14 +00:00
Xin Li
00e8d1827d [automerger skipped] Merge "Merge Android 12 QPR 3" am: cd158e3668 -s ours am: 4492e80320 -s ours
am skip reason: Merged-In I289ba5aa69251d8575f4bd65fbeb7a38c3e03886 with SHA-1 203f473af5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2126116

Change-Id: Id71e7f97e4ac0c7151e4532605e7b35f5f673de8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 00:15:10 +00:00
Xin Li
13407053a9 [automerger skipped] Merge Android 12 QPR 3 am: 83d71652ff -s ours am: 5354139d04 -s ours
am skip reason: Merged-In I289ba5aa69251d8575f4bd65fbeb7a38c3e03886 with SHA-1 203f473af5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2126116

Change-Id: Ib611f0ae04b30e7a0fab7d851d6d31b365069580
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-17 00:14:09 +00:00
Xin Li
4492e80320 [automerger skipped] Merge "Merge Android 12 QPR 3" am: cd158e3668 -s ours
am skip reason: Merged-In I289ba5aa69251d8575f4bd65fbeb7a38c3e03886 with SHA-1 203f473af5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2126116

Change-Id: Ie3e238c3b0ea13cd17d338cd71330f0d6c5ccf00
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 19:58:08 +00:00
Xin Li
5354139d04 [automerger skipped] Merge Android 12 QPR 3 am: 83d71652ff -s ours
am skip reason: Merged-In I289ba5aa69251d8575f4bd65fbeb7a38c3e03886 with SHA-1 203f473af5 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2126116

Change-Id: Idcda8aa81ae6d216530d101021f435cf01817d1d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 19:57:01 +00:00
Xin Li
cd158e3668 Merge "Merge Android 12 QPR 3" 2022-06-16 18:51:58 +00:00
Automerger Merge Worker
506635d815 Merge "Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: 2948419ca7" into tm-d1-dev-plus-aosp am: de056b3c6d am: 02ab96e1fd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: I0e61024d04fa4097b658f6c070cca30487c04bc1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 13:20:06 +00:00
TreeHugger Robot
b01827a611 Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: f3cb1d1dbd am: e8bc84e9cd am: 45a08a2708
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: I1fc345b91e57157bb68d8b118d05830e01bb7084
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 13:19:40 +00:00
TreeHugger Robot
341fd5eb2a Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: 2948419ca7 am: 263a6b0f8a am: 5944f43530
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: Iafa8c68b24c51b24b6f7807eced5d777ef137c43
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 13:19:14 +00:00
Automerger Merge Worker
02ab96e1fd Merge "Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: 2948419ca7" into tm-d1-dev-plus-aosp am: de056b3c6d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: I51275da2c93c89b3232130272c41d01ca2d69767
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 13:01:35 +00:00
TreeHugger Robot
45a08a2708 Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: f3cb1d1dbd am: e8bc84e9cd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: I85c2f80fedd61346cba41393e38f19fc6aea8e53
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 13:00:57 +00:00
TreeHugger Robot
5944f43530 Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: 2948419ca7 am: 263a6b0f8a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: Ib00d0945b6ad99f81d54888c9cf54788c8f51241
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 13:00:38 +00:00
Automerger Merge Worker
de056b3c6d Merge "Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: 2948419ca7" into tm-d1-dev-plus-aosp 2022-06-16 12:36:55 +00:00
TreeHugger Robot
e996f409df Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: 2948419ca7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: Ie4a2009a7924a139711b8e1aec028996ae3d2afd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 12:36:43 +00:00
TreeHugger Robot
e8bc84e9cd Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: f3cb1d1dbd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: Iff89da5b97cdb5c0d84042e4fbacae3fbeb9ae32
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 12:36:42 +00:00
TreeHugger Robot
263a6b0f8a Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: 2948419ca7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: Ia303c50a81833a4abe489682f9ce4755f5660a88
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 12:36:40 +00:00
TreeHugger Robot
906d963a47 Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad am: 59ae6f320e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: I8a6b5bd58c6001584d5e41f4d9d81fc524e3d430
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 12:36:03 +00:00
TreeHugger Robot
2948419ca7 Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: Ibe17ec9f6c2a396dc5f7b6e35e1b07b3b6b3356a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 12:19:33 +00:00
TreeHugger Robot
59ae6f320e Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: Idf649937dc1bf77519fef0199a4ec2b4fade0df2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 12:18:26 +00:00
TreeHugger Robot
f3cb1d1dbd Merge "allow rlsservice read vendor camera property" into tm-dev am: b20c0652ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18849046

Change-Id: Ibd20fe601db9a6c55bf665cd61c4f93866987a7b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 12:18:03 +00:00
TreeHugger Robot
b20c0652ad Merge "allow rlsservice read vendor camera property" into tm-dev 2022-06-16 12:02:28 +00:00
Jidong Sun
866431eec1 [automerger skipped] Merge "gs101: Allow BootControl to access sysfs blow_ar" am: 81d0d5f20f am: 2de41dde3e -s ours am: cfdb5b22ac -s ours am: a7a6b00731 -s ours am: 58991285a7 -s ours
am skip reason: Merged-In I120672722a5ab8b5cadf0dce6d872e00c9fae642 with SHA-1 f276625942 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2120677

Change-Id: Iee0ec8af880a2f38a9c58149d356c12921ea888f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-16 00:31:46 +00:00
Jidong Sun
58991285a7 [automerger skipped] Merge "gs101: Allow BootControl to access sysfs blow_ar" am: 81d0d5f20f am: 2de41dde3e -s ours am: cfdb5b22ac -s ours am: a7a6b00731 -s ours
am skip reason: Merged-In I120672722a5ab8b5cadf0dce6d872e00c9fae642 with SHA-1 f276625942 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2120677

Change-Id: I9bdc368d6b811cc96c1489cfd6f500ab6db22325
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-15 22:50:49 +00:00
Jidong Sun
a7a6b00731 [automerger skipped] Merge "gs101: Allow BootControl to access sysfs blow_ar" am: 81d0d5f20f am: 2de41dde3e -s ours am: cfdb5b22ac -s ours
am skip reason: Merged-In I120672722a5ab8b5cadf0dce6d872e00c9fae642 with SHA-1 f276625942 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2120677

Change-Id: I46a8a3da079b1e1b8b0cf7ff1ab3641505f11da3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-15 22:18:18 +00:00
Jidong Sun
cfdb5b22ac [automerger skipped] Merge "gs101: Allow BootControl to access sysfs blow_ar" am: 81d0d5f20f am: 2de41dde3e -s ours
am skip reason: Merged-In I120672722a5ab8b5cadf0dce6d872e00c9fae642 with SHA-1 f276625942 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2120677

Change-Id: I67a9efe888d6955541457815320ab35939778ccd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-15 21:40:35 +00:00
Jidong Sun
2de41dde3e Merge "gs101: Allow BootControl to access sysfs blow_ar" am: 81d0d5f20f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2120677

Change-Id: I708cc536675f2a3f5c6693ea5f2ece2aa2b78b07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-15 21:20:04 +00:00
Jidong Sun
81d0d5f20f Merge "gs101: Allow BootControl to access sysfs blow_ar" 2022-06-15 20:53:26 +00:00
Xin Li
83d71652ff Merge Android 12 QPR 3
Bug: 236045730
Merged-In: I289ba5aa69251d8575f4bd65fbeb7a38c3e03886
Change-Id: Id6c26dd465a65e79483916b4b01ae4ef11dabada
2022-06-14 16:40:15 -07:00
matthuang
bf1333f881 Add acd-com.google.usf.non_wake_up file to AoC file context.
Bug: 195077076
Test: ls -lZ dev/acd-com.google.usf.non_wake_up
Change-Id: If9add3528bde47a618bd884ce28121b6fa32754c
2022-06-14 10:00:35 +00:00
Adam Shih
d472e161ae mute update_engine probing mnt_vendor_file am: 5889704eff am: 203f473af5 am: c68fe289e3 am: 5bf5ffc8d3 am: d8d5fd4374
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2124912

Change-Id: I75a4589877c5803c6facbb189bd36662c66d2274
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-14 06:29:36 +00:00
Adam Shih
d8d5fd4374 mute update_engine probing mnt_vendor_file am: 5889704eff am: 203f473af5 am: c68fe289e3 am: 5bf5ffc8d3
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2124912

Change-Id: I782454658aaca803869555cfc1179c2901ff3dc8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-14 06:10:27 +00:00
Adam Shih
5bf5ffc8d3 mute update_engine probing mnt_vendor_file am: 5889704eff am: 203f473af5 am: c68fe289e3
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2124912

Change-Id: I2afec41baa838d8db9ab23d9d01def68249d99c5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-14 05:44:54 +00:00
Adam Shih
c68fe289e3 mute update_engine probing mnt_vendor_file am: 5889704eff am: 203f473af5
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2124912

Change-Id: I15a18379ff4969dcb043e2fae94cf6c9f13ac834
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-14 05:18:34 +00:00
Adam Shih
203f473af5 mute update_engine probing mnt_vendor_file am: 5889704eff
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2124912

Change-Id: I289ba5aa69251d8575f4bd65fbeb7a38c3e03886
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-14 04:58:45 +00:00
Adam Shih
5889704eff mute update_engine probing mnt_vendor_file
Bug: 187016910
Test: boot to home
Change-Id: I5f7141f817b543a1499ef5826177f3ac4945e857
2022-06-14 02:58:58 +00:00
JimiChen
143668225a allow rlsservice read vendor camera property
Bug: 233020488
Test: no avc denied
Change-Id: I96dee4482d4c0ff5b7852db635dc100a7ea4874c
2022-06-11 15:39:19 +08:00
Krzysztof Kosiński
d6bde00936 gs101: Add dontaudit statements to camera HAL policy. am: fbcf66a04a am: bdd4ecc51c am: 2bef43dac4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18817845

Change-Id: I51e72346a6a18dc565e18e65662dd8f57007d131
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 22:22:53 +00:00
Krzysztof Kosiński
39920b2aeb gs101: Add dontaudit statements to camera HAL policy. am: fbcf66a04a am: fd0bf19589 am: 17b9e03aa4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18817845

Change-Id: I9d43ee83fdaf393154ebfc054f5cd16109217ef4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 22:22:30 +00:00
Krzysztof Kosiński
2bef43dac4 gs101: Add dontaudit statements to camera HAL policy. am: fbcf66a04a am: bdd4ecc51c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18817845

Change-Id: Iea355b59568781f793e3661dfabc8167e9bff363
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 21:38:55 +00:00
Krzysztof Kosiński
17b9e03aa4 gs101: Add dontaudit statements to camera HAL policy. am: fbcf66a04a am: fd0bf19589
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18817845

Change-Id: Ib9af5b903bd9a70cd27448af38a167659c6bc867
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 21:38:34 +00:00
Krzysztof Kosiński
bdd4ecc51c gs101: Add dontaudit statements to camera HAL policy. am: fbcf66a04a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18817845

Change-Id: I6138022efbcdc8ce149123399d3a8277e69c64b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 21:04:38 +00:00
Krzysztof Kosiński
fd0bf19589 gs101: Add dontaudit statements to camera HAL policy. am: fbcf66a04a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18817845

Change-Id: Ib4b8f284129e9c32dc5c4d4a145634f46ea346eb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 21:04:37 +00:00
Adam Shih
a4fbd61988 suppress warning on writing key am: d34b17e30e am: b982767162 am: f6c8f2e547 am: 2227e772cd am: a7f0c51176
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2122355

Change-Id: I6e5d3b9cbe22976677739bcaeed54ee2f179a65d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 09:31:44 +00:00
Adam Shih
a7f0c51176 suppress warning on writing key am: d34b17e30e am: b982767162 am: f6c8f2e547 am: 2227e772cd
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2122355

Change-Id: If4d03859fea11711c90b20ee2b52bc2e3fe26b14
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 09:05:17 +00:00
Adam Shih
2227e772cd suppress warning on writing key am: d34b17e30e am: b982767162 am: f6c8f2e547
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2122355

Change-Id: Ifd473e6ac84815e05b0c692098f7e00b74ce8715
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 08:41:17 +00:00
Adam Shih
f6c8f2e547 suppress warning on writing key am: d34b17e30e am: b982767162
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2122355

Change-Id: I4fcb994efe51982b529dcc608fd9d30cd6b16291
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 08:25:25 +00:00
Adam Shih
b982767162 suppress warning on writing key am: d34b17e30e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2122355

Change-Id: Ic03d08a0f370647ccb0e4e06643b430b3337af69
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 08:05:26 +00:00
Adam Shih
d34b17e30e suppress warning on writing key
Bug: 235553565
Test: boot to home with no relevant error
Change-Id: I43bd360eabb55f504b48bb940d951d197256c593
2022-06-10 06:29:39 +00:00
Jidong Sun
61b72806e8 gs101: Allow BootControl to access sysfs blow_ar
Bug: 232277507
Signed-off-by: Jidong Sun <jidong@google.com>
Merged-In: I120672722a5ab8b5cadf0dce6d872e00c9fae642
Change-Id: I120672722a5ab8b5cadf0dce6d872e00c9fae642
2022-06-10 06:02:53 +00:00
Adam Shih
622c40d3e9 [automerger skipped] remove obsolete entries am: d7f53f6018 am: 12f614e444 -s ours am: 098b94cedc -s ours am: e7c9b7f5e7 -s ours am: 4a648bead3 -s ours
am skip reason: Merged-In Ibd5ea9d9d56b7da9b17f78f22aef985d5f33df94 with SHA-1 2bb24e91b3 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2121294

Change-Id: Ib6e3d269025328ceed75d1ce01eb5cb8eb553d92
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 02:58:55 +00:00
Adam Shih
107a662c5c [automerger skipped] remove obsolete sepolicy am: 518c7910be am: 86de70bbcb -s ours am: ff79090eee -s ours am: 1ba6346c20 -s ours am: 0db14eeea7 -s ours
am skip reason: Merged-In I8af2693fb7726e49d9b6d1c13010840a0b581326 with SHA-1 acf18a6f23 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2121292

Change-Id: I804dcd0068c1dda7ce1c57ae637bb4d005a099e0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 02:58:54 +00:00
Adam Shih
4a648bead3 [automerger skipped] remove obsolete entries am: d7f53f6018 am: 12f614e444 -s ours am: 098b94cedc -s ours am: e7c9b7f5e7 -s ours
am skip reason: Merged-In Ibd5ea9d9d56b7da9b17f78f22aef985d5f33df94 with SHA-1 2bb24e91b3 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2121294

Change-Id: Ie2542f271f433b54ceef007ccd7adaa25790e717
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 02:41:24 +00:00
Adam Shih
0db14eeea7 [automerger skipped] remove obsolete sepolicy am: 518c7910be am: 86de70bbcb -s ours am: ff79090eee -s ours am: 1ba6346c20 -s ours
am skip reason: Merged-In I8af2693fb7726e49d9b6d1c13010840a0b581326 with SHA-1 acf18a6f23 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2121292

Change-Id: Ife1e44b7c358227989c88df3eba88458f0f77eb4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 02:41:22 +00:00
Adam Shih
e7c9b7f5e7 [automerger skipped] remove obsolete entries am: d7f53f6018 am: 12f614e444 -s ours am: 098b94cedc -s ours
am skip reason: Merged-In Ibd5ea9d9d56b7da9b17f78f22aef985d5f33df94 with SHA-1 2bb24e91b3 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2121294

Change-Id: I26934260c4f9a506a16ac19274dfba7e78571c52
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 02:25:51 +00:00
Adam Shih
1ba6346c20 [automerger skipped] remove obsolete sepolicy am: 518c7910be am: 86de70bbcb -s ours am: ff79090eee -s ours
am skip reason: Merged-In I8af2693fb7726e49d9b6d1c13010840a0b581326 with SHA-1 acf18a6f23 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2121292

Change-Id: Ie3194dab57a7bce3ddf48366c97468cabc3e9cc2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 02:25:50 +00:00
Adam Shih
098b94cedc [automerger skipped] remove obsolete entries am: d7f53f6018 am: 12f614e444 -s ours
am skip reason: Merged-In Ibd5ea9d9d56b7da9b17f78f22aef985d5f33df94 with SHA-1 2bb24e91b3 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2121294

Change-Id: Ib8d463fd2cf7629b063ae27ad5f3484c3c650c8c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 02:01:25 +00:00
Adam Shih
ff79090eee [automerger skipped] remove obsolete sepolicy am: 518c7910be am: 86de70bbcb -s ours
am skip reason: Merged-In I8af2693fb7726e49d9b6d1c13010840a0b581326 with SHA-1 acf18a6f23 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2121292

Change-Id: Id4874f357556febfc6b74a9dd6d4014dbd0f98e4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 02:01:24 +00:00
Adam Shih
12f614e444 remove obsolete entries am: d7f53f6018
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2121294

Change-Id: I7f682f0e9e75dacf4f1201ed19e88f21e4c9352c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 01:35:17 +00:00
Adam Shih
86de70bbcb remove obsolete sepolicy am: 518c7910be
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2121292

Change-Id: I78d4c256d492bcceb40137ebc0fac5aea3db044c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-10 01:35:15 +00:00
Krzysztof Kosiński
fbcf66a04a gs101: Add dontaudit statements to camera HAL policy.
The autogenerated dontaudit statements in tracking_denials are
actually the correct policy. Move them to the correct file and
add comments.

Fix: 178980085
Fix: 180567725
Fix: 218585004
Test: build & camera check on raven
Change-Id: I3f3a1f64d403182d4f592f1cacc6ef8d1418062d
(cherry picked from commit b71d24d62c)
2022-06-09 20:53:05 +00:00
Adam Shih
7e5fd22585 remove obsolete entries am: 2bb24e91b3 am: 35653159b1 am: 6701e00896
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18800078

Change-Id: I078bf3ae04c1f83a944062684d3afaf7840150ed
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-09 06:22:30 +00:00
Adam Shih
6701e00896 remove obsolete entries am: 2bb24e91b3 am: 35653159b1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18800078

Change-Id: I793f6fffda5a07bc2b39295f16c9531ff3ba42c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-09 06:04:48 +00:00
Adam Shih
249ef7bd07 remove obsolete sepolicy am: acf18a6f23 am: 60e41883e7 am: 9c49855f44
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18800077

Change-Id: I7eeef5fd9d5401b1e823c77857f3149ea5a840ac
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-09 05:56:19 +00:00
Adam Shih
35653159b1 remove obsolete entries am: 2bb24e91b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18800078

Change-Id: Ic4e1ad3e595e6066133247266434c0cfc4c68d82
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-09 05:39:48 +00:00
Adam Shih
9c49855f44 remove obsolete sepolicy am: acf18a6f23 am: 60e41883e7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18800077

Change-Id: Idefb30d83989267c625163737d72028b531320a5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-09 05:31:04 +00:00
Adam Shih
60e41883e7 remove obsolete sepolicy am: acf18a6f23
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18800077

Change-Id: If5573683fd07ef0260e933ce82c8ac70e5699ffd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-09 05:06:50 +00:00
Adam Shih
d7f53f6018 remove obsolete entries
Bug: 190337296
Bug: 228181404
Test: adb bugreport
Change-Id: Ibd5ea9d9d56b7da9b17f78f22aef985d5f33df94
Merged-In: Ibd5ea9d9d56b7da9b17f78f22aef985d5f33df94
2022-06-09 12:06:04 +08:00
Adam Shih
2bb24e91b3 remove obsolete entries
Bug: 190337296
Bug: 228181404
Test: adb bugreport
Change-Id: Ibd5ea9d9d56b7da9b17f78f22aef985d5f33df94
2022-06-09 11:59:45 +08:00
Adam Shih
acf18a6f23 remove obsolete sepolicy
Bug: 193474772
Bug: 193726003
Bug: 193009345
Bug: 190337283
Bug: 226717475
Test: boot with no relevant avc error shows up
Change-Id: I8af2693fb7726e49d9b6d1c13010840a0b581326
2022-06-09 11:29:43 +08:00
Adam Shih
518c7910be remove obsolete sepolicy
Bug: 193474772
Bug: 193726003
Bug: 193009345
Bug: 190337283
Bug: 226717475
Test: boot with no relevant avc error shows up

Change-Id: I8af2693fb7726e49d9b6d1c13010840a0b581326
Merged-In: I8af2693fb7726e49d9b6d1c13010840a0b581326
2022-06-09 11:05:03 +08:00
Jidong Sun
3f6eba4012 gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: 1ca6610378 am: c8aaa9ea2a am: 401fde2752
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: I690ed97141f6a7d519d9930d3f6c92bcdd7f2dfe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 22:25:36 +00:00
Jidong Sun
df1061181b gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: 1745c41b8a am: 9f9b4d7adc am: 1ae762e165
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: I9993e37ca8c2bdb407588b73e5d3db6f48e8c478
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 22:24:48 +00:00
Jidong Sun
62b5f02345 gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: 1745c41b8a am: 4f67f60276 am: 921ddd49e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: I2c9041d9408adec4423deebd0bc88dceea400187
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 22:23:06 +00:00
Jidong Sun
401fde2752 gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: 1ca6610378 am: c8aaa9ea2a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: I5226690052b36039f9656fdf202738e181a43fbd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 21:50:05 +00:00
Jidong Sun
1ae762e165 gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: 1745c41b8a am: 9f9b4d7adc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: Ib65de3c369524e05bbdfbc06b185bea361f95d4e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 21:48:29 +00:00
Jidong Sun
921ddd49e4 gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: 1745c41b8a am: 4f67f60276
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: If2428dba144e5bff4eeb305318083e40cd82997f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 21:47:43 +00:00
Jidong Sun
804b82350b gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: cb8342916d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: I2c6c3670ba5045c508efdd93756c80aed45ddf9b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 21:27:28 +00:00
Jidong Sun
c8aaa9ea2a gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: 1ca6610378
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: I9a3310f146ba0694e015254b9b21dd492ae072e3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 21:26:08 +00:00
Jidong Sun
4f67f60276 gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: 1745c41b8a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: I8629636e059bf5c2a58c1c91dd10c9a1da7b2109
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 21:23:49 +00:00
Jidong Sun
9f9b4d7adc gs101: Allow BootControl to access sysfs blow_ar am: f276625942 am: 1745c41b8a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: I9427a0841bf86a3cd26769a13b053133ff6e5c5a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 21:23:49 +00:00
Jidong Sun
1745c41b8a gs101: Allow BootControl to access sysfs blow_ar am: f276625942
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: Idb48be108f2ebc98d802edf93e13d4359d164821
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 20:32:07 +00:00
Jidong Sun
cb8342916d gs101: Allow BootControl to access sysfs blow_ar am: f276625942
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: Ieaa6dc6037b95a3a9010712b827dac316ad4e1e3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 20:31:00 +00:00
Jidong Sun
1ca6610378 gs101: Allow BootControl to access sysfs blow_ar am: f276625942
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593

Change-Id: Ie359bb975e3e5315e910f33f3c69e16a9a0b2e32
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-08 20:30:32 +00:00
SalmaxChang
33cd2234df modem_svc: Fix avc error am: 1be95c2e33 am: cc38423bee am: b518f1e783 am: 1973c230c4 am: 70f66a06d4
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2116498

Change-Id: I5573e961fba98a34ffd4a4465ba980294b1514cf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-07 09:05:15 +00:00
SalmaxChang
70f66a06d4 modem_svc: Fix avc error am: 1be95c2e33 am: cc38423bee am: b518f1e783 am: 1973c230c4
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2116498

Change-Id: If2b5397b8379c08620b2a9b4b79c9381f8e94a14
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-07 08:40:21 +00:00
SalmaxChang
1973c230c4 modem_svc: Fix avc error am: 1be95c2e33 am: cc38423bee am: b518f1e783
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2116498

Change-Id: I2e35c981a46c45912713bf70fa53bcc7ef2dce55
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-07 08:14:37 +00:00
SalmaxChang
b518f1e783 modem_svc: Fix avc error am: 1be95c2e33 am: cc38423bee
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2116498

Change-Id: Ib768682c1848e24f7e78ecd20ce4041f368d8f2b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-07 07:48:21 +00:00
SalmaxChang
cc38423bee modem_svc: Fix avc error am: 1be95c2e33
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2116498

Change-Id: I2099f2e0371d6bfa2eb0e0784c9b6f38055ac09f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-07 07:29:39 +00:00
SalmaxChang
1be95c2e33 modem_svc: Fix avc error
avc: denied { write } for comm="modem_svc_sit" name="modem_stat" dev="dm-42" ino=331 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_data_file:s0 tclass=dir permissive=0

Bug: 234844823
Change-Id: I51db41d73be317cc7fc84981ac5f04e254a360d0
2022-06-06 20:36:44 +08:00
Jidong Sun
f276625942 gs101: Allow BootControl to access sysfs blow_ar
Bug: 232277507
Signed-off-by: Jidong Sun <jidong@google.com>
Change-Id: I120672722a5ab8b5cadf0dce6d872e00c9fae642
2022-06-04 01:23:40 +00:00
George Chang
e5d6c666f5 [automerger skipped] Update nfc from hidl to aidl service am: 3b0a628ef4 -s ours
am skip reason: Merged-In I288474f691670655516728fe0e164a3e5689875c with SHA-1 d479f730b0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18698507

Change-Id: Ib0b11dc899cb5a2be65d762dae0fef58ee0beed4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-01 19:02:38 +00:00
George Chang
3b0a628ef4 Update nfc from hidl to aidl service
Bug: 216290344
Test: atest NfcNciInstrumentationTests
Test: atest VtsAidlHalNfcTargetTest
Merged-In: I288474f691670655516728fe0e164a3e5689875c
Change-Id: I288474f691670655516728fe0e164a3e5689875c
2022-06-01 16:00:07 +00:00
George Chang
cf94a63f08 [automerger skipped] Merge "Update nfc from hidl to aidl service" into tm-qpr-dev am: 16cc944791 -s ours am: 4ad986e592 -s ours
am skip reason: Merged-In I288474f691670655516728fe0e164a3e5689875c with SHA-1 d6a8c63837 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18408305

Change-Id: Ibbe161abe42a71680b6bfb0250ed5c6cd1c979e4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-01 07:01:33 +00:00
George Chang
e747cd5608 [automerger skipped] Update nfc from hidl to aidl service am: d479f730b0 -s ours am: b5038958a5 -s ours
am skip reason: Merged-In I288474f691670655516728fe0e164a3e5689875c with SHA-1 d6a8c63837 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18408305

Change-Id: I876d3f01516db4042d483ea9fdb751fa6f3d3aad
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-01 07:01:28 +00:00
George Chang
4ad986e592 [automerger skipped] Merge "Update nfc from hidl to aidl service" into tm-qpr-dev am: 16cc944791 -s ours
am skip reason: Merged-In I288474f691670655516728fe0e164a3e5689875c with SHA-1 d6a8c63837 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18408305

Change-Id: Id7a6548f3c893c66a64a21fe72540486809dc4b1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-01 06:39:56 +00:00
George Chang
b5038958a5 [automerger skipped] Update nfc from hidl to aidl service am: d479f730b0 -s ours
am skip reason: Merged-In I288474f691670655516728fe0e164a3e5689875c with SHA-1 d6a8c63837 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18408305

Change-Id: I213f8bf861687955f6c9ddf5d663fe89b3470321
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-06-01 06:39:51 +00:00
George Chang
16cc944791 Merge "Update nfc from hidl to aidl service" into tm-qpr-dev 2022-06-01 06:19:39 +00:00
Jaegeuk Kim
78fa0976a2 Merge "Allow sysfs_devices_block to f2fs-tools" 2022-05-26 00:23:45 +00:00
Kyle Tso
83c22aeb83 [automerger skipped] Add logbuffer_pogo_transfer file_contexts am: 7347d18b73 am: b488cabaa4 -s ours
am skip reason: Merged-In I1037d39f4187807e6aa9753339fae29e3bc89359 with SHA-1 7347d18b73 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: If6754da3072bd6955cd47f6aa5b48a1db2155ebc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-25 08:48:28 +00:00
Jaegeuk Kim
3531538a25 Allow sysfs_devices_block to f2fs-tools
The fsck.f2fs checks the sysfs entries of block devices to get disk
information. Note that, the block device entries are device-specific.

1. fsck.f2fs
avc: denied { search } for comm="fsck.f2fs" name="0:0:0:0" dev="sysfs" ino=59803 scontext=u:r:fsck:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=dir permissive=0
avc: denied { getattr } for comm="fsck.f2fs" path="/sys/devices/platform/14700000.ufs/host0/target0:0:0/0:0:0:0/block/sda/sda7/partition" dev="sysfs" ino=60672 scontext=u:r:fsck:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0

2. mkfs.f2fs
avc: denied { search } for comm="make_f2fs" name="0:0:0:0" dev="sysfs" ino=59803 scontext=u:r:e2fs:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=dir permissive=0
avc: denied { getattr } for comm="make_f2fs" path="/sys/devices/platform/14700000.ufs/host0/target0:0:0/0:0:0:0/block/sda/sda8/partition" dev="sysfs" ino=61046 scontext=u:r:e2fs:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0

Bug: 172377740
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
Change-Id: I409feec84565f965baa96b06a5b08bcfc1a8db02
2022-05-24 14:08:14 -07:00
Kyle Tso
664ab23d94 [automerger skipped] Add logbuffer_pogo_transfer file_contexts am: 7347d18b73 -s ours am: 5d0d9d43ca -s ours am: c418cf022c -s ours am: 84ed8dd71b -s ours
am skip reason: Merged-In I1037d39f4187807e6aa9753339fae29e3bc89359 with SHA-1 94e2cdeb6e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: I25a7e69066cfb9b34d2cf49af343ebfc2e12b7ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 06:00:25 +00:00
Kyle Tso
eae53796fd [automerger skipped] Add logbuffer_pogo_transfer file_contexts am: 7347d18b73 am: caa8dc57b3 am: 5cd6559689 -s ours am: 8d3145272f -s ours
am skip reason: Merged-In I1037d39f4187807e6aa9753339fae29e3bc89359 with SHA-1 7347d18b73 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: Ib07b65fae44dc5a53398f8573368d1d463b34af6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 04:34:17 +00:00
Kyle Tso
2ac47bcebf [automerger skipped] Add logbuffer_pogo_transfer file_contexts am: 7347d18b73 am: caa8dc57b3 -s ours am: 3200466a75 -s ours am: 5fc6aa5d77 -s ours
am skip reason: Merged-In I1037d39f4187807e6aa9753339fae29e3bc89359 with SHA-1 94e2cdeb6e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: I851845f727c74eb1fd6ecff58dc0ef56c075efee
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 04:34:06 +00:00
Kyle Tso
84ed8dd71b [automerger skipped] Add logbuffer_pogo_transfer file_contexts am: 7347d18b73 -s ours am: 5d0d9d43ca -s ours am: c418cf022c -s ours
am skip reason: Merged-In I1037d39f4187807e6aa9753339fae29e3bc89359 with SHA-1 94e2cdeb6e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: I7a17b97f950c3635da1d3bda3c5582665ea7d39d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 04:17:31 +00:00
Kyle Tso
c418cf022c [automerger skipped] Add logbuffer_pogo_transfer file_contexts am: 7347d18b73 -s ours am: 5d0d9d43ca -s ours
am skip reason: Merged-In I1037d39f4187807e6aa9753339fae29e3bc89359 with SHA-1 94e2cdeb6e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: Ibe59e093043bb51ca27fd3550f2966706a950b54
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 04:07:25 +00:00
Kyle Tso
8d3145272f [automerger skipped] Add logbuffer_pogo_transfer file_contexts am: 7347d18b73 am: caa8dc57b3 am: 5cd6559689 -s ours
am skip reason: Merged-In I1037d39f4187807e6aa9753339fae29e3bc89359 with SHA-1 7347d18b73 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: I7e60a20a18ba5b929dc720d8d33b132570ffa910
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 04:02:31 +00:00
Kyle Tso
5fc6aa5d77 [automerger skipped] Add logbuffer_pogo_transfer file_contexts am: 7347d18b73 am: caa8dc57b3 -s ours am: 3200466a75 -s ours
am skip reason: Merged-In I1037d39f4187807e6aa9753339fae29e3bc89359 with SHA-1 94e2cdeb6e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: I6cb9389c398e9167943f56f53f4ac693f41e6d84
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 01:44:47 +00:00
Kyle Tso
5cd6559689 Add logbuffer_pogo_transfer file_contexts am: 7347d18b73 am: caa8dc57b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: I181abe83407195830c74490f4f5ca9790f1925c3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 01:25:51 +00:00
Kyle Tso
3200466a75 [automerger skipped] Add logbuffer_pogo_transfer file_contexts am: 7347d18b73 am: caa8dc57b3 -s ours
am skip reason: Merged-In I1037d39f4187807e6aa9753339fae29e3bc89359 with SHA-1 94e2cdeb6e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: I5d10e2c73b08f877e36c583603831e63df52d154
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 01:21:01 +00:00
Kyle Tso
5d0d9d43ca [automerger skipped] Add logbuffer_pogo_transfer file_contexts am: 7347d18b73 -s ours
am skip reason: Merged-In I1037d39f4187807e6aa9753339fae29e3bc89359 with SHA-1 94e2cdeb6e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: I4dd0e16895872f853b8c0e93a1b402b74fd13a88
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 00:57:16 +00:00
Kyle Tso
b488cabaa4 Add logbuffer_pogo_transfer file_contexts am: 7347d18b73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: Ifeaa59f28215a7724be9b281bd4c7a8f837e6735
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 00:54:07 +00:00
Kyle Tso
caa8dc57b3 Add logbuffer_pogo_transfer file_contexts am: 7347d18b73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18400416

Change-Id: Ie065459ae6edfb07701cc5d53758f248f6e0ea3c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-24 00:53:51 +00:00
Orion Hodson
5c6d914987 Merge "Remove odsign_prop denial for postinstall_dexopt" am: 1bd3118215 am: bf8031994e am: 61ccfcc43e am: 01f27c4a23 am: a01b6633df
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098050

Change-Id: Ibfa6ed42f343e3392aa27e308c5c007913492208
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-23 09:41:08 +00:00
Orion Hodson
a01b6633df Merge "Remove odsign_prop denial for postinstall_dexopt" am: 1bd3118215 am: bf8031994e am: 61ccfcc43e am: 01f27c4a23
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098050

Change-Id: I32865b6e649a7a07fcbd896657bbe3ac4c304c9b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-23 09:20:45 +00:00
Orion Hodson
01f27c4a23 Merge "Remove odsign_prop denial for postinstall_dexopt" am: 1bd3118215 am: bf8031994e am: 61ccfcc43e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098050

Change-Id: Idcb71b060d974a8621eab3ad841cb2ee64243bf8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-23 08:48:30 +00:00
Orion Hodson
61ccfcc43e Merge "Remove odsign_prop denial for postinstall_dexopt" am: 1bd3118215 am: bf8031994e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098050

Change-Id: Ia1f584c3f55b58286ae45a4f48da201b0b76e515
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-23 08:24:08 +00:00
Orion Hodson
bf8031994e Merge "Remove odsign_prop denial for postinstall_dexopt" am: 1bd3118215
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098050

Change-Id: Ic44fc34c502779eeb2428dc1d8061cc3eada80a9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-23 08:05:29 +00:00
Orion Hodson
1bd3118215 Merge "Remove odsign_prop denial for postinstall_dexopt" 2022-05-23 07:38:01 +00:00
Kyle Tso
7347d18b73 Add logbuffer_pogo_transfer file_contexts
Bug: 232556226
Signed-off-by: Kyle Tso <kyletso@google.com>
Change-Id: I1037d39f4187807e6aa9753339fae29e3bc89359
Merged-In: I1037d39f4187807e6aa9753339fae29e3bc89359
2022-05-21 15:25:58 +00:00
Joner Lin
14601e082a Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e am: 2fdd2e2516
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: Ib63be3f5482b8d4b5a00a837a94c6cbc409f60e0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 18:17:44 +00:00
Joner Lin
3eda55c77d Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e am: c9e77cd61c am: a7b74cf99c am: 4ea404bf3d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: I9d865059161ff5649b7ce8d0ef9536f1f204a1a0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 14:22:51 +00:00
Automerger Merge Worker
34d19eadbc Merge "Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e am: 9955721f73 am: 176327b908" into tm-qpr-dev-plus-aosp am: d9e51865a5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: I6f032c844e287d25b6e9e8d0f53532061a141038
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 14:16:56 +00:00
Joner Lin
25da25e6dd Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e am: 9955721f73 am: 41026aeae6 am: 1668b2870e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: Iaeaae34a6c0921ad81dd5b4d66cbd7f925ae4d37
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 14:13:27 +00:00
Joner Lin
4ea404bf3d Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e am: c9e77cd61c am: a7b74cf99c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: Ib6ef31d56d18fba3f9bc84b999a8463ba0cab800
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 13:28:38 +00:00
Automerger Merge Worker
d9e51865a5 Merge "Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e am: 9955721f73 am: 176327b908" into tm-qpr-dev-plus-aosp 2022-05-20 13:25:50 +00:00
Joner Lin
d7b2f03490 Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e am: 9955721f73 am: 176327b908
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: I683c96bee3c35ab5963705cc016500099df04957
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 13:25:28 +00:00
Joner Lin
1668b2870e Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e am: 9955721f73 am: 41026aeae6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: I024f0887f242c52d1e0232fb34a5b1538084209e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 13:25:13 +00:00
Joner Lin
a7b74cf99c Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e am: c9e77cd61c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: I9565966371f23d4008b557e5f505cdc87b868c7f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 12:57:20 +00:00
Joner Lin
41026aeae6 Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e am: 9955721f73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: I513959f3ff0e5d1bcb81257538281e2b40f473af
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 12:54:05 +00:00
Joner Lin
176327b908 Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e am: 9955721f73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: Ib903eae506382e8ba93d829392b18402028a1d1c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 12:48:37 +00:00
Joner Lin
c9e77cd61c Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: I43e3a84a2c6080b17a2a69660bb5f93d0864ba13
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 12:23:25 +00:00
Joner Lin
2fdd2e2516 Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: I5b857a64b96646853b3c0f3b2abc40c74b58f9cb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 12:21:29 +00:00
Joner Lin
9955721f73 Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: If769c5b2f24bbb04f842c65e1e71bf21e86c4078
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 12:20:46 +00:00
Joner Lin
5a222bc64e Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev 2022-05-20 05:06:32 +00:00
George Chang
2d9ec80fed [automerger skipped] Merge "Revert "Update nfc from hidl to aidl service"" am: 610af798f5 am: bd74710d56 am: b75f28c76d am: 853b440b6f am: 2e6da947a3 -s ours
am skip reason: Merged-In I288474f691670655516728fe0e164a3e5689875c with SHA-1 130f2b784e is already in history. Merged-In was found from reverted change.

Reverted change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098014

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098183

Change-Id: I0a615d0f39187e21f529b6e64e82ce584e54b77b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 18:48:16 +00:00
George Chang
2e6da947a3 Merge "Revert "Update nfc from hidl to aidl service"" am: 610af798f5 am: bd74710d56 am: b75f28c76d am: 853b440b6f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098183

Change-Id: I986ee21e72b406946f488c95b6502e861ef7a0d7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 17:42:55 +00:00
George Chang
853b440b6f Merge "Revert "Update nfc from hidl to aidl service"" am: 610af798f5 am: bd74710d56 am: b75f28c76d
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098183

Change-Id: Id3c8add8dd9f3ae88b425d5c355dddaac0ca7b2e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 17:08:19 +00:00
George Chang
b75f28c76d Merge "Revert "Update nfc from hidl to aidl service"" am: 610af798f5 am: bd74710d56
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098183

Change-Id: I8a52af1a6344042571a4804c16c681d7981f38a6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 16:34:07 +00:00
George Chang
bd74710d56 Merge "Revert "Update nfc from hidl to aidl service"" am: 610af798f5
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098183

Change-Id: I6db59e3a762df7b4906b0c14a7324b5955951c3d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 16:05:46 +00:00
George Chang
610af798f5 Merge "Revert "Update nfc from hidl to aidl service"" 2022-05-19 15:38:39 +00:00
George Chang
71db4c206b Revert "Update nfc from hidl to aidl service"
Revert submission 2098739-nfc_aidl_switch_gs101

Reason for revert: broken tests
Reverted Changes:
Ifde6ab418:Switch NFC from HIDL to AIDL
I288474f69:Update nfc from hidl to aidl service
Bug: 233194621
Change-Id: I1dad9c64073c8baffdf5f491c38bf1e568c9af29
2022-05-19 13:45:18 +00:00
Kyle Tso
a69cc7ca48 Merge "Add logbuffer_pogo_transfer file_contexts" am: 418d114796 am: 46b42ac02b am: 50797d0f2f am: d5e2b40846 am: 1f4c55de34
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098016

Change-Id: If2c8497fa93a0eff0edd91b3d8cc33151b9fc81b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 09:43:54 +00:00
George Chang
a142e1385e [automerger skipped] Update nfc from hidl to aidl service am: d6a8c63837 am: 8985f2ae28 am: 4b9fecbe3a am: 1a71964f04 am: be203cbb42 -s ours
am skip reason: Merged-In I288474f691670655516728fe0e164a3e5689875c with SHA-1 130f2b784e is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098014

Change-Id: I1b21bf026a398e99c77a99b0543e8770683ff8f5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 09:43:12 +00:00
Kyle Tso
1f4c55de34 Merge "Add logbuffer_pogo_transfer file_contexts" am: 418d114796 am: 46b42ac02b am: 50797d0f2f am: d5e2b40846
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098016

Change-Id: I29f4faf31a13db8d68ae2322d7d6859d81818c37
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 09:29:37 +00:00
George Chang
be203cbb42 Update nfc from hidl to aidl service am: d6a8c63837 am: 8985f2ae28 am: 4b9fecbe3a am: 1a71964f04
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098014

Change-Id: I00a5abacba420c463f7e8ac022a2b45c9776a71c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:55:16 +00:00
Kyle Tso
d5e2b40846 Merge "Add logbuffer_pogo_transfer file_contexts" am: 418d114796 am: 46b42ac02b am: 50797d0f2f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098016

Change-Id: I321062c6de323fb11f2cda5300abd35ce1d0ea9d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:54:59 +00:00
George Chang
1a71964f04 Update nfc from hidl to aidl service am: d6a8c63837 am: 8985f2ae28 am: 4b9fecbe3a
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098014

Change-Id: I254dda0055b8f8067675dfa3e65560a7a8ff9324
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:54:31 +00:00
Kyle Tso
50797d0f2f Merge "Add logbuffer_pogo_transfer file_contexts" am: 418d114796 am: 46b42ac02b
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098016

Change-Id: I41ef4daefa6a78ca4e3f7fa9a6464d43feda07ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:35:59 +00:00
George Chang
4b9fecbe3a Update nfc from hidl to aidl service am: d6a8c63837 am: 8985f2ae28
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098014

Change-Id: I8e04549075ae47a89994e2eed9b5e7f8eac170e8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 08:35:44 +00:00
Kyle Tso
46b42ac02b Merge "Add logbuffer_pogo_transfer file_contexts" am: 418d114796
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098016

Change-Id: Ide608651968b6eb137aa55791074d66e3e27f947
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 07:56:40 +00:00
George Chang
8985f2ae28 Update nfc from hidl to aidl service am: d6a8c63837
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098014

Change-Id: If2212cb63fdf409ee7f5fbf78994c58c09caa8ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-19 07:55:22 +00:00
Kyle Tso
418d114796 Merge "Add logbuffer_pogo_transfer file_contexts" 2022-05-19 02:22:56 +00:00
jonerlin
9f214e0453 Grant policy for BluetoothHal Extionsion feature
Bug: 228943442
Test: Manually
Change-Id: I00b37c1f74ca9b904df2319d2c58d34228e9678b
2022-05-19 09:59:56 +08:00
Kyle Tso
94e2cdeb6e Add logbuffer_pogo_transfer file_contexts
Bug: 232556226
Signed-off-by: Kyle Tso <kyletso@google.com>
Change-Id: I1037d39f4187807e6aa9753339fae29e3bc89359
2022-05-17 16:01:46 +08:00
George Chang
d6a8c63837 Update nfc from hidl to aidl service
Bug: 216290344
Test: atest NfcNciInstrumentationTests
Test: atest VtsAidlHalNfcTargetTest
Merged-In: I288474f691670655516728fe0e164a3e5689875c
Change-Id: I288474f691670655516728fe0e164a3e5689875c
2022-05-17 12:16:39 +08:00
George Chang
d479f730b0 Update nfc from hidl to aidl service
Bug: 216290344
Test: atest NfcNciInstrumentationTests
Test: atest VtsAidlHalNfcTargetTest
Merged-In: I288474f691670655516728fe0e164a3e5689875c
Change-Id: I288474f691670655516728fe0e164a3e5689875c
2022-05-17 04:14:57 +00:00
Suki Liu
13e8467fc0 Merge "Update avc error on ROM 8595544" 2022-05-17 02:11:01 +00:00
Orion Hodson
3893757352 Remove incidentd denial for apex_info_file am: 400d4fb7f4 am: 4fa31df30e am: 71f450f955 am: 32a87f289f am: ea2f827fd7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098049

Change-Id: I621c4e5397c7af9676abc2ca0f35d6939b9cc6a9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-16 20:28:50 +00:00
Orion Hodson
ea2f827fd7 Remove incidentd denial for apex_info_file am: 400d4fb7f4 am: 4fa31df30e am: 71f450f955 am: 32a87f289f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098049

Change-Id: I4bafba96d95efd4167ae92e5acdf55e925ca1785
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-16 20:02:59 +00:00
Orion Hodson
32a87f289f Remove incidentd denial for apex_info_file am: 400d4fb7f4 am: 4fa31df30e am: 71f450f955
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098049

Change-Id: I91d505f428945306b9f747db018f7fbb3f0003a5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-16 18:24:33 +00:00
Orion Hodson
71f450f955 Remove incidentd denial for apex_info_file am: 400d4fb7f4 am: 4fa31df30e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098049

Change-Id: I7dc2d9dc20e060c9c2db2b9f98bd1292e0677033
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-16 16:59:14 +00:00
Orion Hodson
4fa31df30e Remove incidentd denial for apex_info_file am: 400d4fb7f4
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2098049

Change-Id: I7b0683e254c0edd4f5dc60924f01fd36c0f8722c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-16 16:32:06 +00:00
Orion Hodson
50ac49e196 Remove odsign_prop denial for postinstall_dexopt
Issue fixed in https://r.android.com/1771328.

Fix: 194142604
Test: N/A
Change-Id: Ib8f8c07dce9c5d393b858e4234e6da66513d181f
2022-05-16 14:53:44 +01:00
Orion Hodson
400d4fb7f4 Remove incidentd denial for apex_info_file
Underlying issue addressed by https://r.android.com/1849822 which
gives incidentd r_file_perms for apex_info_file:file.

Fix: 187015816
Test: atest incidentd_test; adb logcat | grep denied
Change-Id: I90b57a5f01c97c8488c10692208080557a863051
2022-05-16 14:45:53 +01:00
sukiliu
101a021277 Update avc error on ROM 8595544
Bug: 232714489
Bug: 231821875
Test: PtsSELinuxTestCases
Change-Id: I4dd2c51dd237b19a110b24cb7ac8e1cb2284f99c
2022-05-16 12:00:57 +08:00
TreeHugger Robot
a9b034f9c1 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f am: e9a23e8017 am: c92b8764b6 am: 04e4581b0a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I3129c0dfab49e25551077292540380e1d92236b4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 17:54:33 +00:00
TreeHugger Robot
f53e420929 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f am: ed1ec96363 am: 6ef9e20467 am: c7ce1131e0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I3d7b4e71b2dfdedfa30e18a9367933d31200cfcf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 16:27:16 +00:00
TreeHugger Robot
94f6621cea Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f am: ed1ec96363 am: a48761315f am: bc4e18cb88
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I6324c7162488745d4f07522c5a05eba44ebe442e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 15:38:24 +00:00
TreeHugger Robot
04e4581b0a Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f am: e9a23e8017 am: c92b8764b6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I3895534e9b49d2f77770d513bf4c2425827779f2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 11:07:47 +00:00
TreeHugger Robot
c7ce1131e0 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f am: ed1ec96363 am: 6ef9e20467
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I3c9910b8271a890b1e0b2ad3c6fb770e44742707
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 11:07:34 +00:00
TreeHugger Robot
bc4e18cb88 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f am: ed1ec96363 am: a48761315f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I35c760c4ad912b1c4ed2ce176d94abe0b41fcffe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 11:06:41 +00:00
TreeHugger Robot
99369be2b0 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f am: 9ceae2ff96
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I44544211e779a729bec0686eb0ff1f8f4cb33c91
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 10:46:31 +00:00
TreeHugger Robot
c92b8764b6 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f am: e9a23e8017
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I5d173aaed6b692627ff0ac1b2a240af59076dee3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 10:39:59 +00:00
TreeHugger Robot
6ef9e20467 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f am: ed1ec96363
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: If0c21f56ade626fffe26b15730a6322bb5464eb9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 10:39:45 +00:00
TreeHugger Robot
a48761315f Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f am: ed1ec96363
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I294f324c4c26521cb7d8553e6127281826c30a1d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 10:39:44 +00:00
TreeHugger Robot
ed1ec96363 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: Iffeee5071854c1f2af2cad5c7a5783421980b153
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 09:49:23 +00:00
TreeHugger Robot
e9a23e8017 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I6aa2cd70650dcebab561faf257d22d526a352052
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 09:48:07 +00:00
TreeHugger Robot
9ceae2ff96 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I2236464237ae120813aacb532481455cd2d39e96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 09:47:25 +00:00
TreeHugger Robot
c0d38cbc9f Merge "Allow mediacodec to access vendor_data_file" into tm-dev 2022-05-13 09:24:01 +00:00
Lily Lin
3d875278c2 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468 am: d5f5a51c51 am: 116c811861 am: 8895205329
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: Icd2837c82d6363826f0e92eef41b9221db6aafa4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 03:49:50 +00:00
Lily Lin
6b383bf7fb Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468 am: 5389123249 am: 44f06f26eb am: 5270c3dbbd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: I19c1f36212d743bd5f5a761cd64733b05b0a087e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 03:48:34 +00:00
Will McVicker
f67292baa4 genfs_contexts: fix more i2c raw paths am: 9cbc9eceec am: 6c256f9fee am: 6a0c568372 am: f47f217af7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: I19e47cbc3617dff722e12dca3e678cc4d0ac2948
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 03:45:04 +00:00
Lily Lin
918d5aa66c Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468 am: 5389123249 am: ca85474dbe am: e33265324f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: I2719af5ef1dfc511e35bb3fbbfef377c9aaef06c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 03:38:53 +00:00
Will McVicker
78b603600d genfs_contexts: fix more i2c raw paths am: 9cbc9eceec am: 6c256f9fee am: 3dbfde7852 am: a0bee4cecb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: Iec7ef02cfb43242a5f94a87093271ee6076b3a41
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 03:11:57 +00:00
Will McVicker
79c88fdc68 genfs_contexts: fix more i2c raw paths am: 9cbc9eceec am: f78f5ab19a am: 21d41d6f22 am: 2fd98554b6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: I2e796f0ff1680fba63866c498c48820c6ece5b49
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:58:59 +00:00
Lily Lin
8895205329 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468 am: d5f5a51c51 am: 116c811861
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: Ibc134d7d1046fb5da5632eb794a0d7fb1d9e5621
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:44:41 +00:00
Lily Lin
5270c3dbbd Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468 am: 5389123249 am: 44f06f26eb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: I4de88cb1461c134d7068c8b8e25b57b6f2d70f05
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:44:12 +00:00
Will McVicker
f47f217af7 genfs_contexts: fix more i2c raw paths am: 9cbc9eceec am: 6c256f9fee am: 6a0c568372
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: Iaac1ede118343d025311b05df58eb167d9b0376d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:43:10 +00:00
Lily Lin
e33265324f Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468 am: 5389123249 am: ca85474dbe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: I5efebd5a566f22de040bcd5b640b319cee12be72
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:42:50 +00:00
Will McVicker
a0bee4cecb genfs_contexts: fix more i2c raw paths am: 9cbc9eceec am: 6c256f9fee am: 3dbfde7852
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: I0e7b857f174b19d2b0c7a59d917f0d54c7968c9c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:42:37 +00:00
Lily Lin
116c811861 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468 am: d5f5a51c51
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: Ia85d3582512ba32c0f27a251632a84973603442e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:25:49 +00:00
Lily Lin
ca85474dbe Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468 am: 5389123249
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: I619b1afeebbe51d58ba0b60fbe3dc2ac3733bc23
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:25:08 +00:00
Lily Lin
44f06f26eb Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468 am: 5389123249
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: Iae98aba8421ca1264e642a3e20968b52eed337d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:25:08 +00:00
Will McVicker
3dbfde7852 genfs_contexts: fix more i2c raw paths am: 9cbc9eceec am: 6c256f9fee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: I4e9c3bf9cbe7e3d5d34fa0bda3d4260cc40cc479
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:25:02 +00:00
Will McVicker
6a0c568372 genfs_contexts: fix more i2c raw paths am: 9cbc9eceec am: 6c256f9fee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: I0e76fe6cc152545ad1fe57f9b14a757835a65926
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:24:52 +00:00
Lily Lin
0edffa70de Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468 am: 4c32542348
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: I2882c67018bcb6e25c0a962cd447a7ca41ecc760
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:24:22 +00:00
Will McVicker
e08258e33e genfs_contexts: fix more i2c raw paths am: 9cbc9eceec am: deccc1a295
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: I8f5a74070ad7d04da2b1d44b1f53fd5cdfe88e9b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:24:01 +00:00
Lily Lin
5389123249 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: Ib4dd93e176fe6bf1ead64e4ed55999d4afa2fd59
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 01:58:06 +00:00
Will McVicker
6c256f9fee genfs_contexts: fix more i2c raw paths am: 9cbc9eceec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: Ia370a2ce14f323d16f3e34a8e4d0ef9ff9fd12d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 01:57:53 +00:00
Lily Lin
4c32542348 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: I79e9df18cd659cb9d5377d8aef7c333def38123e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 01:56:49 +00:00
Will McVicker
deccc1a295 genfs_contexts: fix more i2c raw paths am: 9cbc9eceec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: I1d05dd9a83bc82aa67a6189242caf4b467f7ad2c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 01:56:25 +00:00
Lily Lin
d5f5a51c51 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: Ib7ad61c19257b34ca9028d2b0f3fd4ee76e37c89
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 01:56:03 +00:00
Lily Lin
e910a12468 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev 2022-05-11 01:22:36 +00:00
Will McVicker
2fd98554b6 genfs_contexts: fix more i2c raw paths am: 9cbc9eceec am: f78f5ab19a am: 21d41d6f22
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: Ic82ae9c8a30caf2bc2d33921e0d29f4a848d9058
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-10 23:50:31 +00:00
Will McVicker
21d41d6f22 genfs_contexts: fix more i2c raw paths am: 9cbc9eceec am: f78f5ab19a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: I5a62703488a4c211bc3bf19bcb4c4837b41fd162
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-10 23:25:36 +00:00
Will McVicker
f78f5ab19a genfs_contexts: fix more i2c raw paths am: 9cbc9eceec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: If52caa5df6e4008c9c038fe128f7e4f1e1f56c30
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-10 22:55:56 +00:00
Jerry Huang
a5e9b426eb Allow mediacodec to access vendor_data_file
For dumping output buffer of HDR to SDR fliter.

This patch fixes the following denial:

05-06 15:26:54.248  1046   856   856 W HwBinder:856_4: type=1400 audit(0.0:174404): avc: denied { getattr } for name="/" dev="dmabuf" ino=1 scontext=u:r:mediacodec:s0 tcontext=u:object_r:unlabeled:s0 tclass=filesystem permissive=0

Bug: 229360116
Change-Id: I41acb29407a7ddb27279a834e27c5ee515efe666
2022-05-10 09:22:12 +00:00
Lily Lin
59f29edf92 Add selinux permissions to r/w sysfs st33spi_state
Bug: 228655141
Test: Confirm can read/write st33spi_state
Change-Id: I65299414d6268580dc532170759459147378418b
2022-05-10 16:32:45 +08:00
Krzysztof Kosiński
b71d24d62c gs101: Add dontaudit statements to camera HAL policy.
The autogenerated dontaudit statements in tracking_denials are
actually the correct policy. Move them to the correct file and
add comments.

Fix: 178980085
Fix: 180567725
Test: build & camera check on raven
Change-Id: I3f3a1f64d403182d4f592f1cacc6ef8d1418062d
2022-05-10 05:34:51 +00:00
Richard Hsu
8ffb7ce93f Merge "[SELinux] Allow NNAPI HAL to log traces to perfetto under userdebug builds" into tm-d1-dev am: 4f5bb2c0aa am: 2177d5ec61 am: dbfae8ba87
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18214742

Change-Id: Ifd2b8512db4fbc01628dacf1fc6bb82fc0e5fa92
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-10 00:58:27 +00:00
Richard Hsu
3cd8e14c89 Merge "[SELinux] Allow NNAPI HAL to log traces to perfetto under userdebug builds" into tm-d1-dev am: 4f5bb2c0aa am: 7284f35989 am: b283891452
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18214742

Change-Id: I5ebea525dd75b4d4c1784e195930afe0e39a1807
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-09 22:11:06 +00:00
Richard Hsu
dbfae8ba87 Merge "[SELinux] Allow NNAPI HAL to log traces to perfetto under userdebug builds" into tm-d1-dev am: 4f5bb2c0aa am: 2177d5ec61
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18214742

Change-Id: Ida6c13ea2459d79bd05d2bbb4c77167b7ef83b48
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-09 21:40:51 +00:00
Richard Hsu
b283891452 Merge "[SELinux] Allow NNAPI HAL to log traces to perfetto under userdebug builds" into tm-d1-dev am: 4f5bb2c0aa am: 7284f35989
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18214742

Change-Id: If32ab60020d8c2562ed64b5c05278edc02f2fec6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-09 19:56:56 +00:00
Richard Hsu
2177d5ec61 Merge "[SELinux] Allow NNAPI HAL to log traces to perfetto under userdebug builds" into tm-d1-dev am: 4f5bb2c0aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18214742

Change-Id: If9a244192cefa7c87521b7dd47b2d501f6377021
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-09 19:50:54 +00:00
Richard Hsu
7284f35989 Merge "[SELinux] Allow NNAPI HAL to log traces to perfetto under userdebug builds" into tm-d1-dev am: 4f5bb2c0aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18214742

Change-Id: I15d01edffa53fe35c8b81698b1a9b6ffb69f688a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-09 18:49:57 +00:00
Richard Hsu
4f5bb2c0aa Merge "[SELinux] Allow NNAPI HAL to log traces to perfetto under userdebug builds" into tm-d1-dev 2022-05-09 17:55:47 +00:00
Richard Hsu
5675757d41 [SELinux] Allow NNAPI HAL to log traces to perfetto under userdebug builds
Allows DarwiNN NNAPI HAL to log traces to perfetto only under userdebug builds. This is similar to the camera HAL fix in ag/17080874

Error message:
TracingMuxer: type=1400 audit(0.0:486): avc: denied { write } for name="traced_producer" dev="tmpfs" ino=1116 scontext=u:r:hal_neuralnetworks_darwinn:s0

This rule is common for EdgeTPU in both WHI and PRO.

Bug: 231838536

Test: tested on PRO before and after the change, and the traces now shows up.

Example: https://ui.perfetto.dev/#!/?s=ab911b3972bc16a1a831e148a7446c09757a08426bbe3c3b16d31a728b1d923
https://screenshot.googleplex.com/3roWETkTFyiDjW9

Change-Id: I8d4a57e262087aa4ec6670a487d7b06d2f2cde69
2022-05-07 22:28:22 -07:00
George Chang
650076c577 Merge "Update nfc from hidl to aidl service" 2022-05-06 07:07:19 +00:00
Will McVicker
9cbc9eceec genfs_contexts: fix more i2c raw paths
These were added in commit 8a19d8be9c ("genfs_contexts: fix path for
i2c peripheral devices") to address missing i2c paths when kernel
modules are loaded in parallel. The raw i2c paths were not added in that
commit. So add them here in order to fix a vibrator crash for
P21-mainline due to not having the named i2c paths.

Bug: 231637004
Fixes: 8a19d8be9c ("genfs_contexts: fix path for i2c peripheral devices")
Change-Id: I02dfff504704f761c99c328b39595789c2cbeef5
2022-05-05 16:04:31 -07:00
TreeHugger Robot
a756f9d984 [automerger skipped] Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d am: 696ec7e6f4 -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 503fa09010 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: I660bac416c48344e978d3f1b0eef8407068d76ed
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 18:09:17 +00:00
Ray Chi
7f278a067b [automerger skipped] Allow hal_usb_gadget_impl to access proc_irq am: 7ac349e932 am: 972e56e23e -s ours
am skip reason: Merged-In Id9a9adbdc921629b6e89d0850dd8acaf76b1a891 with SHA-1 7ac349e932 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17313628

Change-Id: I1f2d8ca738644e962d3c3ad99cce84c903d03389
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 18:09:16 +00:00
Yichi Chen
4767e13a18 Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c am: 25475ecc20
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I0665102e58742160715a89b3424006b301745784
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 17:59:35 +00:00
Automerger Merge Worker
92ddc7d853 [automerger skipped] Merge changes from topic "am-0bfd604f0d864cebafcc014a9d92c68f" into tm-d1-dev-plus-aosp am: 3104c4a127 -s ours am: c00783d204 -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 503fa09010 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: Ife77f89f9e999609ccfb6b2f970aef3bee943965
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 09:35:04 +00:00
TreeHugger Robot
7888617b26 [automerger skipped] Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d am: 82a83b366a -s ours am: 51ec6b2556 -s ours am: b7a9b9a1e8 -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 bf9ec40ab7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: I96087396c07c6042fc54c543a4f18570bf16cde9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 09:35:02 +00:00
Automerger Merge Worker
49a6a44356 Merge changes from topic "am-02b6911072144cda83510f482eca7a79" into tm-qpr-dev-plus-aosp am: f0e272042d -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 503fa09010 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: If52853f9227a737d5c901317d083ac2ef08e4acb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 09:34:42 +00:00
TreeHugger Robot
16a706c4eb [automerger skipped] Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d -s ours am: b0150a74b2 -s ours am: d4e4b4a6af -s ours am: 6907ca14d4 -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 bf9ec40ab7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: Ic222e455b8e76f98587407c4bdc030bd56b9f876
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 09:34:39 +00:00
TreeHugger Robot
3592d5f79c [automerger skipped] Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d am: 82a83b366a am: bbe95c3a79 -s ours am: 2e35e4392c -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 bf9ec40ab7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: I005574df6b5f45774d9b035e553c68e7261680b8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 09:34:04 +00:00
Ray Chi
a0128d6c7c [automerger skipped] Allow hal_usb_gadget_impl to access proc_irq am: 7ac349e932 am: b5c3f6e0ba am: d924169220 -s ours am: 8f3fff900e -s ours
am skip reason: Merged-In Id9a9adbdc921629b6e89d0850dd8acaf76b1a891 with SHA-1 d99789413d is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17313628

Change-Id: I2ea2cc36f797ce2eaa197768b6ca1998a36cace4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 09:34:01 +00:00
Automerger Merge Worker
c00783d204 Merge changes from topic "am-0bfd604f0d864cebafcc014a9d92c68f" into tm-d1-dev-plus-aosp am: 3104c4a127 -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 503fa09010 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: Ib4f6a90606303430c892cf34e95e846bffae2ea6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 09:18:08 +00:00
TreeHugger Robot
b7a9b9a1e8 [automerger skipped] Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d am: 82a83b366a -s ours am: 51ec6b2556 -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 bf9ec40ab7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: I4039631e57b32659d28a227ccf65ab2612797bf4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 09:18:05 +00:00
Automerger Merge Worker
f0e272042d Merge changes from topic "am-02b6911072144cda83510f482eca7a79" into tm-qpr-dev-plus-aosp
* changes:
  [automerger skipped] Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d -s ours am: b0150a74b2 -s ours am: d4e4b4a6af -s ours
  [automerger skipped] Revert "add sepolicy for set_usb_irq.sh" am: 503fa09010 -s ours am: 7142c373d0 -s ours am: 65c0676c78 -s ours
2022-05-05 09:17:47 +00:00
TreeHugger Robot
6907ca14d4 [automerger skipped] Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d -s ours am: b0150a74b2 -s ours am: d4e4b4a6af -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 bf9ec40ab7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: Ibef801fe178740911b2eb29868019315bb549a54
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 09:17:35 +00:00
Ray Chi
630dfa3b34 [automerger skipped] Revert "add sepolicy for set_usb_irq.sh" am: 503fa09010 -s ours am: 7142c373d0 -s ours am: 65c0676c78 -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 bf9ec40ab7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: I82f1b990624eb725d4819c2279253b4421cfbb51
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 09:17:34 +00:00
TreeHugger Robot
2e35e4392c [automerger skipped] Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d am: 82a83b366a am: bbe95c3a79 -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 bf9ec40ab7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: I3294769c309d5abaf17083d1063c3ca1cb9916d1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 09:17:27 +00:00
Ray Chi
8f3fff900e [automerger skipped] Allow hal_usb_gadget_impl to access proc_irq am: 7ac349e932 am: b5c3f6e0ba am: d924169220 -s ours
am skip reason: Merged-In Id9a9adbdc921629b6e89d0850dd8acaf76b1a891 with SHA-1 d99789413d is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17313628

Change-Id: Ibe7cc70ccc3e3d3cde3adb5615705f883b3847ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 09:17:25 +00:00
TreeHugger Robot
bbe95c3a79 Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d am: 82a83b366a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: Ia31705514741c26b3ab34ecc21edb45e57ef89c2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 08:46:04 +00:00
Ray Chi
d924169220 Allow hal_usb_gadget_impl to access proc_irq am: 7ac349e932 am: b5c3f6e0ba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17313628

Change-Id: I96ba2776bb32556b1a3f01cf83cc3d0da63ea7fe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 08:46:02 +00:00
Automerger Merge Worker
3104c4a127 Merge changes from topic "am-0bfd604f0d864cebafcc014a9d92c68f" into tm-d1-dev-plus-aosp
* changes:
  [automerger skipped] Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d am: 82a83b366a -s ours
  [automerger skipped] Allow hal_usb_gadget_impl to access proc_irq am: 7ac349e932 am: b5c3f6e0ba -s ours
2022-05-05 08:45:19 +00:00
TreeHugger Robot
51ec6b2556 [automerger skipped] Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d am: 82a83b366a -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 bf9ec40ab7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: I464fe247cecdf3cd991c7c4411e083e918db6bdd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 08:45:08 +00:00
Ray Chi
aabbf7b0b8 [automerger skipped] Allow hal_usb_gadget_impl to access proc_irq am: 7ac349e932 am: b5c3f6e0ba -s ours
am skip reason: Merged-In Id9a9adbdc921629b6e89d0850dd8acaf76b1a891 with SHA-1 d99789413d is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17313628

Change-Id: I694886b2a15b6166efa0a33bf689e88284dfa3ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 08:45:06 +00:00
TreeHugger Robot
d4e4b4a6af [automerger skipped] Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d -s ours am: b0150a74b2 -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 bf9ec40ab7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: I32edfb0f85dfd925ff19dfa92fdbc19d31ee46bb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 08:44:59 +00:00
Ray Chi
65c0676c78 [automerger skipped] Revert "add sepolicy for set_usb_irq.sh" am: 503fa09010 -s ours am: 7142c373d0 -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 bf9ec40ab7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: I9b4caee9956da389a2a536368b29a8c2ef56b7a3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 08:44:56 +00:00
TreeHugger Robot
82a83b366a Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: Ie610b6f31e218dece80fb0dc52b66050382d4e26
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 07:27:14 +00:00
Ray Chi
b5c3f6e0ba Allow hal_usb_gadget_impl to access proc_irq am: 7ac349e932
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17313628

Change-Id: I12709e8375ab34a1ed08ae48ce2db522d98f188c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 07:27:12 +00:00
TreeHugger Robot
696ec7e6f4 Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: Iab1a28a57f97e0248204fd0a1a19a152a055ccb4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 07:26:03 +00:00
Ray Chi
972e56e23e Allow hal_usb_gadget_impl to access proc_irq am: 7ac349e932
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17313628

Change-Id: I279c114f9ca5e8a9c78bf309e85d5b6acf95015d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 07:26:01 +00:00
TreeHugger Robot
b0150a74b2 [automerger skipped] Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 bf9ec40ab7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: I266ef74a19dcabf4b082bc615171c83e1d6f734f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 07:24:34 +00:00
Ray Chi
7142c373d0 [automerger skipped] Revert "add sepolicy for set_usb_irq.sh" am: 503fa09010 -s ours
am skip reason: Merged-In Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af with SHA-1 bf9ec40ab7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: I5a6fc1b839a695d9171418b35327c4525d5900a6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 07:24:32 +00:00
TreeHugger Robot
36f7fe941d Merge changes from topic "gs101-move-dwc3-irq" into tm-dev
* changes:
  Revert "add sepolicy for set_usb_irq.sh"
  Allow hal_usb_gadget_impl to access proc_irq
2022-05-05 07:08:20 +00:00
Automerger Merge Worker
4a4ab78de2 Merge "Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c am: b83ddf305d" into tm-d1-dev-plus-aosp am: e2f63c02f4 am: 308831f913
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I23ea3e8355421401c03db0a02a2f6dae6e78ac19
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 03:45:23 +00:00
Automerger Merge Worker
3fbc60524f Merge "Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c am: b2c0884cd9 am: 43d6af291c" into tm-qpr-dev-plus-aosp am: 89f54abd7e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: Icd3cd329d290848f9fe001e5b7b2e871105ae932
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 03:43:59 +00:00
Yichi Chen
56682b9f32 Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c am: b2c0884cd9 am: e2a93ee001 am: 7881d8c24e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I35af1b053c29d410704beb54c751b66d98189df7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 03:41:47 +00:00
Automerger Merge Worker
308831f913 Merge "Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c am: b83ddf305d" into tm-d1-dev-plus-aosp am: e2f63c02f4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I43197d82c3954bab3e0ee23efc4ab6b9ec02d9ee
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 03:19:15 +00:00
Automerger Merge Worker
89f54abd7e Merge "Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c am: b2c0884cd9 am: 43d6af291c" into tm-qpr-dev-plus-aosp 2022-05-05 03:18:08 +00:00
Yichi Chen
7881d8c24e Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c am: b2c0884cd9 am: e2a93ee001
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I8202f2e8461826627727f57f1e3a71ebbcde9ca9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 03:17:49 +00:00
Yichi Chen
8c94260e03 Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c am: b2c0884cd9 am: 43d6af291c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: Ic40eb9a452f821ace32780ea6d23703b637bdff4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 03:17:49 +00:00
Automerger Merge Worker
e2f63c02f4 Merge "Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c am: b83ddf305d" into tm-d1-dev-plus-aosp 2022-05-05 02:44:35 +00:00
Yichi Chen
0f55e1902c Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c am: b83ddf305d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: If4cfae538262a249652c51cf2b911c8f1bfcf91c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 02:44:20 +00:00
Yichi Chen
e2a93ee001 Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c am: b2c0884cd9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I5ff9750abee568345789c6a2f9ad9d6df3eff8e3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 02:44:18 +00:00
Yichi Chen
43d6af291c Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c am: b2c0884cd9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I0c12bd8decf007033f42c492d149d6afb0a1244f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 02:44:17 +00:00
Yichi Chen
b2c0884cd9 Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I3053433540b747906ef69eed537d9eb600923a2a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 02:19:25 +00:00
Yichi Chen
25475ecc20 Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I4a7129b5a0603adfb240b40d4e387ca2d37606b0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 02:18:56 +00:00
Yichi Chen
b83ddf305d Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I7fcfd0a6cfc006f2f68a5aa1d1e97f88ca321f38
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 02:17:59 +00:00
Yichi Chen
650209645c Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev 2022-05-05 02:03:49 +00:00
William McVicker
b9b6536ddd Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e am: 18cb713b62 am: d5094282b6 am: 923b2611ce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: I995cba83108f9dee32889d090db86569606ae0ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 18:26:12 +00:00
William McVicker
032200b7c0 Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e am: cb0bdc8681 am: 408b5b3896 am: 56d535052a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: Ic37782fc5af7a77a09a653017d533f86142db241
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 18:25:59 +00:00
William McVicker
2e8ae8e10f Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e am: 18cb713b62 am: cd65dd36d5 am: 58f463cada
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: I73ea3a76e34fe838d2701df87001b0925b3630f8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 18:24:12 +00:00
William McVicker
923b2611ce Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e am: 18cb713b62 am: d5094282b6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: Ib5683b0dbb0f1e01085d565edc0e6d3a9fb5c442
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 17:55:00 +00:00
William McVicker
56d535052a Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e am: cb0bdc8681 am: 408b5b3896
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: I9177e1b60ec120fe49a145f369e0f8a6170b5970
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 17:54:34 +00:00
William McVicker
58f463cada Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e am: 18cb713b62 am: cd65dd36d5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: I807d3ca10a26fd2598e7c069642a0011bbf306d5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 17:53:42 +00:00
William McVicker
706383f2e4 Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e am: c8483e6a7c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: Ifd84fbe38f68155051a06ac035feec1deff47408
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 17:14:11 +00:00
George Chang
130f2b784e Update nfc from hidl to aidl service
Bug: 216290344
Test: atest NfcNciInstrumentationTests
Test: atest VtsAidlHalNfcTargetTest
Change-Id: I288474f691670655516728fe0e164a3e5689875c
2022-05-05 01:13:59 +08:00
William McVicker
d5094282b6 Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e am: 18cb713b62
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: Ie615dcd13480e7cc91195c8726ebbc13e2225342
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 17:12:51 +00:00
William McVicker
408b5b3896 Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e am: cb0bdc8681
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: If57f9e8b5b75fca8a5b1bd2c30c6b347762aad71
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 17:11:45 +00:00
William McVicker
cd65dd36d5 Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e am: 18cb713b62
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: Idef6f9e9c77289b596a2346817e37e3f555d4361
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 17:10:26 +00:00
William McVicker
18cb713b62 Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: I8abb96731bc5d3b3f95168607dcfe8932d3f3727
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 16:39:32 +00:00
William McVicker
cb0bdc8681 Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: I11fe5e32944b784ad60c3b88177cddff72db879b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 16:38:59 +00:00
William McVicker
c8483e6a7c Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: Id24eac6f29579f72012ba3bdd01e31764698ff5a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 16:38:52 +00:00
William McVicker
e6250cd86e Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev 2022-05-04 16:10:16 +00:00
Ray Chi
503fa09010 Revert "add sepolicy for set_usb_irq.sh"
This reverts commit 714075eba7.

Bug: 224699556
Test: build pass
Change-Id: Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af
Merged-In: Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af
(cherry picked from commit bf9ec40ab7)
2022-05-04 11:45:26 +00:00
Ray Chi
7ac349e932 Allow hal_usb_gadget_impl to access proc_irq
Bug: 224699556
Test: build pass
Change-Id: Id9a9adbdc921629b6e89d0850dd8acaf76b1a891
Merged-In: Id9a9adbdc921629b6e89d0850dd8acaf76b1a891
(cherry picked from commit 455c3c165348fa9ea65c65b004d4dda1426d04be)
2022-05-04 11:45:08 +00:00
Ray Chi
b39f4f009e Revert "add sepolicy for set_usb_irq.sh" am: bf9ec40ab7 am: 9a2c989fb7 am: 0c04f75e49 am: e028181261 am: 142b04befe
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2086225

Change-Id: Ia762ae1052cfce1a469ef3b5f3a798cb8597f45c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 10:43:32 +00:00
Ray Chi
d75d3de42e Allow hal_usb_gadget_impl to access proc_irq am: d99789413d am: 98225a40ac am: 7fa97ff2ba am: d3a233b1f0 am: d7183d0fdd
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2086224

Change-Id: I7f7145b7d472bb305757b9c8929f4ee82d7972e6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 10:43:30 +00:00
Ray Chi
142b04befe Revert "add sepolicy for set_usb_irq.sh" am: bf9ec40ab7 am: 9a2c989fb7 am: 0c04f75e49 am: e028181261
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2086225

Change-Id: I09af6c379569ef3776eefb2fd8b99ef1cc26323d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 09:57:04 +00:00
Ray Chi
d7183d0fdd Allow hal_usb_gadget_impl to access proc_irq am: d99789413d am: 98225a40ac am: 7fa97ff2ba am: d3a233b1f0
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2086224

Change-Id: If3bc3fde01bfc29a247e5e7375cfa516b40565ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 09:57:02 +00:00
Ray Chi
e028181261 Revert "add sepolicy for set_usb_irq.sh" am: bf9ec40ab7 am: 9a2c989fb7 am: 0c04f75e49
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2086225

Change-Id: Ie73eba5478ebe798a92dd9ef1ec5d9ffb1ff8b0e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 08:58:51 +00:00
Ray Chi
d3a233b1f0 Allow hal_usb_gadget_impl to access proc_irq am: d99789413d am: 98225a40ac am: 7fa97ff2ba
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2086224

Change-Id: If1f7a07f1b2f0497fc6bf092ccdb30cac2ce36d6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 08:58:50 +00:00
Ray Chi
0c04f75e49 Revert "add sepolicy for set_usb_irq.sh" am: bf9ec40ab7 am: 9a2c989fb7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2086225

Change-Id: I3002e1842255353047726918a2f41553c1a43b1b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 07:28:51 +00:00
Ray Chi
7fa97ff2ba Allow hal_usb_gadget_impl to access proc_irq am: d99789413d am: 98225a40ac
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2086224

Change-Id: I5555829b6b3b0d0234449933f44b4da2aadd5340
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 07:28:48 +00:00
Ray Chi
9a2c989fb7 Revert "add sepolicy for set_usb_irq.sh" am: bf9ec40ab7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2086225

Change-Id: Id9ebe6c1a58dbd45fe2dc381cf79f8be2fbb2287
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 06:52:05 +00:00
Ray Chi
98225a40ac Allow hal_usb_gadget_impl to access proc_irq am: d99789413d
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2086224

Change-Id: Iac35a7fc9508e991f03bd9142a552f3e4e43981c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 06:52:04 +00:00
Asad Ali
9eaaa1627e Merge "Allow chre to communicate with fwk_stats_service." into tm-qpr-dev am: 8974ed37c4 am: 54f589f754
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18091161

Change-Id: I73ea13b11826df10bd0faf39d9cdd80e6e42e15b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 04:29:49 +00:00
Jenny Ho
9d82b99ffe Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6 am: d1b13f7695 am: 7c382afd48 am: f7bce344d5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: I6eb9308d925c94bf1b5f88784bb0a630027f4944
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 04:21:11 +00:00
Ray Chi
bf9ec40ab7 Revert "add sepolicy for set_usb_irq.sh"
This reverts commit 714075eba7.

Bug: 194346886
Test: build pass
Change-Id: Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af
2022-05-04 09:49:17 +08:00
Ray Chi
d99789413d Allow hal_usb_gadget_impl to access proc_irq
Bug: 220996010
Test: build pass
Change-Id: Id9a9adbdc921629b6e89d0850dd8acaf76b1a891
(cherry picked from commit 455c3c165348fa9ea65c65b004d4dda1426d04be)
2022-05-04 09:46:39 +08:00
Asad Ali
54f589f754 Merge "Allow chre to communicate with fwk_stats_service." into tm-qpr-dev am: 8974ed37c4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18091161

Change-Id: I7c70821f2cb53279a695eb35b726a2ea41c51a37
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 01:11:20 +00:00
Asad Ali
8974ed37c4 Merge "Allow chre to communicate with fwk_stats_service." into tm-qpr-dev 2022-05-03 21:00:47 +00:00
Jenny Ho
f7bce344d5 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6 am: d1b13f7695 am: 7c382afd48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: Ie5ad3c95ef8229b52702c724a012c7655cebd8c9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 17:48:08 +00:00
Jenny Ho
7a8d1e32a8 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6 am: d1b13f7695 am: 64c0cad5f9 am: 29c1e92774
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: I7b59c6e77fc6a941a7aebab74724b9e201ec39ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 14:48:01 +00:00
Jenny Ho
bf6fe261be Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6 am: 549a58875a am: 1941a0eed3 am: 425ae38bf0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: Iddecc1bcdbae2da3b4de65fae4eab7fa3d9f85c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 14:47:36 +00:00
Jenny Ho
29c1e92774 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6 am: d1b13f7695 am: 64c0cad5f9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: Ide30f6ada6fa24b07a2b74e60cc491a5520a6cae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 14:15:44 +00:00
Jenny Ho
425ae38bf0 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6 am: 549a58875a am: 1941a0eed3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: I367842b600e07fb09f97f9761c0cea83604dc989
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 14:15:11 +00:00
Jenny Ho
64c0cad5f9 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6 am: d1b13f7695
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: I08b3c694edc80db2b86cd69f244da319b0888e26
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 14:06:10 +00:00
Jenny Ho
7c382afd48 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6 am: d1b13f7695
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: I916b100095fe62e2383c14e5ddf4b3bcb9dc390e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 14:06:10 +00:00
Jenny Ho
1941a0eed3 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6 am: 549a58875a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: Ic9ba8f2d7e6a3df630c2eef9d5624736a5a06961
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 13:57:52 +00:00
Jenny Ho
54800f9dda Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6 am: eb4f7b7fcd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: Iaff0b7f630bc4107361f0f5cece9cc6e9f1a5066
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 13:57:14 +00:00
Albert Wang
91f59b55b1 Merge "Expand the xHCI wakeup path for suspend_control" am: 77db706d9b am: 84866a80c1 am: 11aeebbc15 am: 2b58dec0f9 am: 89033ebb9f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2075870

Change-Id: I19db1028323470061ddb08e908f49a89288e65ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 13:42:41 +00:00
Jenny Ho
d1b13f7695 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: I58800e42bead3292e710f361e43829b221c4ee67
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 13:31:51 +00:00
Jenny Ho
eb4f7b7fcd Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: Ie8419db47dad53d206c2e124ef4de498f6980ed7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 13:31:17 +00:00
Jenny Ho
549a58875a Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: Ic470338a2d29551f83a06795ddb75ba43838a380
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 13:30:43 +00:00
Albert Wang
89033ebb9f Merge "Expand the xHCI wakeup path for suspend_control" am: 77db706d9b am: 84866a80c1 am: 11aeebbc15 am: 2b58dec0f9
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2075870

Change-Id: I95954346cdc554fdf63bd38988e6aa7980b0ec65
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 13:22:16 +00:00
Jenny Ho
9b27bbdab6 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev 2022-05-03 10:39:21 +00:00
Albert Wang
2b58dec0f9 Merge "Expand the xHCI wakeup path for suspend_control" am: 77db706d9b am: 84866a80c1 am: 11aeebbc15
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2075870

Change-Id: I937c883d1e2198d05a95b8437dc8230f6a2125c6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 09:18:50 +00:00
Albert Wang
11aeebbc15 Merge "Expand the xHCI wakeup path for suspend_control" am: 77db706d9b am: 84866a80c1
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2075870

Change-Id: I7eb9ed2f555c49806685deede90d169b8f5bf71d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 08:46:25 +00:00
Albert Wang
84866a80c1 Merge "Expand the xHCI wakeup path for suspend_control" am: 77db706d9b
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2075870

Change-Id: I53ad439a4804bd84c02adce154d182ba2fa79554
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 07:40:48 +00:00
Albert Wang
77db706d9b Merge "Expand the xHCI wakeup path for suspend_control" 2022-05-03 07:14:40 +00:00
Asad Ali
b81a8fead4 Allow chre to communicate with fwk_stats_service. am: c6ea8d1656 am: bc040f306d am: 98e8bf3e45 am: 4345829694 am: 3ca6b07ebe
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2077138

Change-Id: If3946fd21608dd175e7e2bb8cef405daae415ed9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-02 23:30:22 +00:00
Asad Ali
3ca6b07ebe Allow chre to communicate with fwk_stats_service. am: c6ea8d1656 am: bc040f306d am: 98e8bf3e45 am: 4345829694
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2077138

Change-Id: Id07cb99244d91d98f1feff757e2ec441d6cebeb3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-02 22:53:54 +00:00
Asad Ali
4345829694 Allow chre to communicate with fwk_stats_service. am: c6ea8d1656 am: bc040f306d am: 98e8bf3e45
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2077138

Change-Id: I98eccdac6fd86f74bf850c1d2263cb51a5e33b09
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-02 22:31:51 +00:00
Asad Ali
98e8bf3e45 Allow chre to communicate with fwk_stats_service. am: c6ea8d1656 am: bc040f306d
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2077138

Change-Id: Ieb41d6bd22ee5500269261652993f0866ac795bc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-02 22:06:22 +00:00
Asad Ali
bc040f306d Allow chre to communicate with fwk_stats_service. am: c6ea8d1656
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2077138

Change-Id: I54420bcfe55250683a2afd25a85242cdf5056e5c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-02 21:33:11 +00:00
Will McVicker
12b3700a38 genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes
This adds the [067]-001f and [178]-002f raw i2c numberings to the
sepolicy for the P21-mainline driver which doesn't use the i2c vendor
hook to rename these numberings. This is required for the thermal hal to
work.

Bug: 231155356
Signed-off-by: Will McVicker <willmcvicker@google.com>
Change-Id: I8e4bbbd0768e63e708f46eb42bddb5fc28b29caa
2022-05-02 10:12:15 -07:00
Treehugger Robot
c8578a314a Merge "hal_sensors_default: Allow sensors HAL to access AoC properties." am: f939ebb650 am: e07bb61a68 am: f1840dcecf am: 0352020df2 am: bebaf17e9f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2076498

Change-Id: If47da6f256d9f8cac9a82c88a24a78676a376ad4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-02 12:01:38 +00:00
Asad Ali
e754443b8b [automerger skipped] Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" am: a022023a90 am: a9528564c0 -s ours am: 222d59bff3 -s ours am: f7c12d9b9c -s ours am: 4702e5f243 -s ours
am skip reason: Merged-In I73bcf96ed1cab0a101e5f84852a1d82258b9c690 with SHA-1 613bdcdec8 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2077149

Change-Id: Ib8ed704339d788f88e7fc15f107b8faaa8804035
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-02 11:35:02 +00:00
Treehugger Robot
c0f2484a99 [automerger skipped] Merge "android.hardware.usb.IUsb AIDL migration" am: c49520d66e am: fd65b31055 -s ours am: 766c16cc25 -s ours am: d0b2e4d807 -s ours am: 3d233ac79c -s ours
am skip reason: Merged-In Ia8c24610244856490c8271433710afb57d3da157 with SHA-1 51735ba3ab is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044871

Change-Id: Iba6dc0cf09e91a11b499bd2566fc36bd893e5cbf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-02 10:18:00 +00:00
George Chang
57cbdd934a Merge "Revert "Update nfc from hidl to aidl service"" 2022-04-29 23:01:02 +00:00
Treehugger Robot
bebaf17e9f Merge "hal_sensors_default: Allow sensors HAL to access AoC properties." am: f939ebb650 am: e07bb61a68 am: f1840dcecf am: 0352020df2
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2076498

Change-Id: I6bfcecf1ea7b56b8eb0510145dfa052fa30249ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-29 22:31:25 +00:00
Asad Ali
4702e5f243 [automerger skipped] Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" am: a022023a90 am: a9528564c0 -s ours am: 222d59bff3 -s ours am: f7c12d9b9c -s ours
am skip reason: Merged-In I73bcf96ed1cab0a101e5f84852a1d82258b9c690 with SHA-1 613bdcdec8 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2077149

Change-Id: Ibbb71ca203845b3c501461f0c3970e987635b691
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-29 21:54:25 +00:00
Treehugger Robot
3d233ac79c [automerger skipped] Merge "android.hardware.usb.IUsb AIDL migration" am: c49520d66e am: fd65b31055 -s ours am: 766c16cc25 -s ours am: d0b2e4d807 -s ours
am skip reason: Merged-In Ia8c24610244856490c8271433710afb57d3da157 with SHA-1 51735ba3ab is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044871

Change-Id: I234ae58c89ad7a57ff199b44cf1165c738b90dd4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-29 21:22:06 +00:00
Treehugger Robot
0352020df2 Merge "hal_sensors_default: Allow sensors HAL to access AoC properties." am: f939ebb650 am: e07bb61a68 am: f1840dcecf
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2076498

Change-Id: Ifc4aadd80951511a226165a4008cf13d61f3e886
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-29 19:04:14 +00:00
Asad Ali
f7c12d9b9c [automerger skipped] Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" am: a022023a90 am: a9528564c0 -s ours am: 222d59bff3 -s ours
am skip reason: Merged-In I73bcf96ed1cab0a101e5f84852a1d82258b9c690 with SHA-1 613bdcdec8 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2077149

Change-Id: Idd9184e4b1f1eaef7e45b86e3409f159e027e6c7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-29 18:52:22 +00:00
Treehugger Robot
d0b2e4d807 [automerger skipped] Merge "android.hardware.usb.IUsb AIDL migration" am: c49520d66e am: fd65b31055 -s ours am: 766c16cc25 -s ours
am skip reason: Merged-In Ia8c24610244856490c8271433710afb57d3da157 with SHA-1 51735ba3ab is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044871

Change-Id: I0cd1b8b0935f2bb1887f48e3758a72546ce15a12
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-29 18:50:01 +00:00
Treehugger Robot
f1840dcecf Merge "hal_sensors_default: Allow sensors HAL to access AoC properties." am: f939ebb650 am: e07bb61a68
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2076498

Change-Id: I7987d60f9164e4864f1271bc2af89ef86b8be5ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-29 18:11:18 +00:00
Asad Ali
222d59bff3 [automerger skipped] Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" am: a022023a90 am: a9528564c0 -s ours
am skip reason: Merged-In I73bcf96ed1cab0a101e5f84852a1d82258b9c690 with SHA-1 613bdcdec8 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2077149

Change-Id: I2442828f4b15f36d034c9880f285f15ae45ce264
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-29 18:10:22 +00:00
Treehugger Robot
766c16cc25 [automerger skipped] Merge "android.hardware.usb.IUsb AIDL migration" am: c49520d66e am: fd65b31055 -s ours
am skip reason: Merged-In Ia8c24610244856490c8271433710afb57d3da157 with SHA-1 51735ba3ab is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044871

Change-Id: I880380a11236430157096e3d3823e1734dd4dfa7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-29 18:01:30 +00:00
Asad Ali
7bfcc6f4e5 Allow chre to communicate with fwk_stats_service.
Bug: 230788686
Test: Logged atoms using CHRE + log atom extension.
Change-Id: I0683a224d61cdc8c927360ebad3de115ed431e1a
(cherry picked from commit c6ea8d1656)
2022-04-29 17:00:27 +00:00
George Chang
63c1e192e7 Revert "Update nfc from hidl to aidl service"
This reverts commit dc8bd46527.

Reason for revert: Broken tests
Bug: 230834308
Change-Id: I964632a92cb741c703e4d8d3e8623454541022e7
2022-04-29 15:39:47 +00:00
George Chang
b6a1a56380 Merge "Update nfc from hidl to aidl service" 2022-04-29 06:57:47 +00:00
Wei Wang
3ae3f2bfdf allow udfps hal to access trusty am: 615f85c22d am: b94efeaff0 am: 583a242d9b am: 5be2bec4e6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I5ac5039cc29b057c0a1bfffe03c75619dcd5ed40
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-29 03:43:32 +00:00
Asad Ali
c6ea8d1656 Allow chre to communicate with fwk_stats_service.
Bug: 230788686
Test: Logged atoms using CHRE + log atom extension.
Change-Id: I0683a224d61cdc8c927360ebad3de115ed431e1a
2022-04-28 22:27:57 +00:00
George Chang
dc8bd46527 Update nfc from hidl to aidl service
Bug: 216290344
Test: atest NfcNciInstrumentationTests
Test: atest VtsAidlHalNfcTargetTest
Change-Id: I3d17eacddadaf78520edb1a94e17e091cbdba4c0
2022-04-28 15:33:39 +00:00
Treehugger Robot
e07bb61a68 Merge "hal_sensors_default: Allow sensors HAL to access AoC properties." am: f939ebb650
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2076498

Change-Id: I5d54cc895fe44f3f64c987644910bb9cced2ab01
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 11:41:37 +00:00
Treehugger Robot
f939ebb650 Merge "hal_sensors_default: Allow sensors HAL to access AoC properties." 2022-04-28 11:08:06 +00:00
Wei Wang
0b08e48566 allow udfps hal to access trusty am: 615f85c22d am: daf2093583 am: f041f70a21 am: aaa50748bc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I6a4938f0671b247d68c350ae6d6830509d0cb15d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 07:53:51 +00:00
Asad Ali
a9528564c0 Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" am: a022023a90
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2077149

Change-Id: I196d9c8349e352c630b11441bf3280d456a75118
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 07:51:24 +00:00
Wei Wang
04905148ce allow udfps hal to access trusty am: 615f85c22d am: b94efeaff0 am: b9f0680283 am: ec6ae16e0b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I0cabc6cc6563dd5e89aa410cd7cd7c32f7f88244
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 07:08:47 +00:00
Asad Ali
a022023a90 Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" 2022-04-28 07:05:14 +00:00
Albert Wang
ee1758317e Expand the xHCI wakeup path for suspend_control
Error log:
Error opening kernel wakelock stats for: wakeup132 (../../devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb2/2-1/wakeup/wakeup132): Permission denied
avc: denied { read } for name="wakeup132" dev="sysfs" ino=3607558 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0

Bug: 209745132
Test: test build to verify sepolicy log
Signed-off-by: Albert Wang <albertccwang@google.com>
Change-Id: I6c70272a79059f7ca4e3b0e525bbc09625e25135
2022-04-28 06:41:24 +00:00
Kris Chen
c6eea8a657 Allow hal_fingerprint_default to access hal_pixel_display_service
Fix the following avc denial:
avc: denied  { find } for pid=1158 uid=1000 name=com.google.hardware.pixel.display.IDisplay/default scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:hal_pixel_display_service:s0 tclass=service_manager permissive=0
avc: denied { call } for scontext=u:r:hal_fingerprint_default:s0 tcontext=u:r:hal_graphics_composer_default:s0 tclass=binder permissive=0

Bug: 229716695
Bug: 224573604
Test: build and test fingerprint on device.
Change-Id: Id24e65213221048d6dfdeae6ed2bcb7b762a0f75
2022-04-28 03:08:47 +00:00
Wei Wang
5be2bec4e6 allow udfps hal to access trusty am: 615f85c22d am: b94efeaff0 am: 583a242d9b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: Ib2a2c3a9ddd1f4f8e8570e31629f98cf76b08113
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 02:52:11 +00:00
Wei Wang
aaa50748bc allow udfps hal to access trusty am: 615f85c22d am: daf2093583 am: f041f70a21
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I734b1cb28342c0cb0ae99deeaa8f000e3f532081
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 02:51:32 +00:00
Wei Wang
ec6ae16e0b allow udfps hal to access trusty am: 615f85c22d am: b94efeaff0 am: b9f0680283
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: Ia36da932a460a31168194288a7d4a15b2164d7cf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 02:51:09 +00:00
Wei Wang
583a242d9b allow udfps hal to access trusty am: 615f85c22d am: b94efeaff0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I8c55549d01528b33cbf4333930c4c4c0a8281e73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 02:10:03 +00:00
Wei Wang
f041f70a21 allow udfps hal to access trusty am: 615f85c22d am: daf2093583
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I90d58607416a0874ca4a80ecb46d902f8764e8ea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 02:09:50 +00:00
Wei Wang
b9f0680283 allow udfps hal to access trusty am: 615f85c22d am: b94efeaff0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I45576b46edad47a0614534f0a503a99036936e55
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 02:09:40 +00:00
Wei Wang
55b71bf208 allow udfps hal to access trusty am: 615f85c22d am: a68059705b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: If423807ae19d1396e2a15f4b3deec3faf6125e08
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 02:09:10 +00:00
Wei Wang
b94efeaff0 allow udfps hal to access trusty am: 615f85c22d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I021692200c0bc229f23d573685f1ca75c4fb0ca1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 01:15:56 +00:00
Wei Wang
a68059705b allow udfps hal to access trusty am: 615f85c22d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I1859ad36b4a2e48d87533f22e777112fe6ac031b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 01:14:47 +00:00
Wei Wang
daf2093583 allow udfps hal to access trusty am: 615f85c22d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I4d62137c19cbccd9ce294f2c34c40199b60e3b57
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 01:14:20 +00:00
Wei Wang
615f85c22d allow udfps hal to access trusty
Bug: 229350721
Bug: 230492593
Test: UDFPS with stress
Signed-off-by: Wei Wang <wvw@google.com>
Change-Id: Ib1abe0e0318689528a6658f3597f1c11ad9fa1c3
2022-04-27 20:20:43 +00:00
Treehugger Robot
fd65b31055 Merge "android.hardware.usb.IUsb AIDL migration" am: c49520d66e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044871

Change-Id: Ib0ea1d39f90456062a1d18ac86ff8c6140cb29eb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-27 17:39:58 +00:00
Treehugger Robot
c49520d66e Merge "android.hardware.usb.IUsb AIDL migration" 2022-04-27 16:21:29 +00:00
Jenny Ho
15036785cf sepolicy: allow access debugfs charger register dump
[  438.549652] type=1400 audit(1651035282.616:8): avc: denied { read } for comm="dumpstate@1.1-s" name="registers" dev="debugfs" ino=31549 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:debugfs:s0 tclass=file permissive=0
[  438.550252] type=1400 audit(1651035282.616:9): avc: denied { read } for comm="dumpstate@1.1-s" name="registers" dev="debugfs" ino=31532 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:debugfs:s0 tclass=file permissive=0

Bug: 230360103
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: I102a159ca23a65d99a52cac3d011f5ce535a37e7
2022-04-27 10:09:48 +00:00
Anthony Stange
8c311f981b Update SELinux to allow CHRE to talk to the Wifi HAL
Bug: 206614765
Test: Run locally
Change-Id: I73bcf96ed1cab0a101e5f84852a1d82258b9c690
Merged-In: I73bcf96ed1cab0a101e5f84852a1d82258b9c690
2022-04-27 06:13:14 +00:00
Edmond Chung
89b31263c0 [automerger skipped] Camera: add setsched capability. am: 99b4aebb6a am: a287bef991 -s ours am: bdd7f4ca53 -s ours am: d99f3881c6 -s ours am: 1859147fa3 -s ours
am skip reason: Merged-In Ifbf433c026549ca774a9521704d0b0b75c9e9f23 with SHA-1 2715a08a73 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2076040

Change-Id: I7958cb859b2dcd075605fdfb5774bcbbff0b86da
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 22:01:19 +00:00
Edmond Chung
1859147fa3 [automerger skipped] Camera: add setsched capability. am: 99b4aebb6a am: a287bef991 -s ours am: bdd7f4ca53 -s ours am: d99f3881c6 -s ours
am skip reason: Merged-In Ifbf433c026549ca774a9521704d0b0b75c9e9f23 with SHA-1 2715a08a73 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2076040

Change-Id: Iaa8dbe6c54273c3dab6c52cff2bccf75a1a70ea9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 21:38:31 +00:00
Edmond Chung
d99f3881c6 [automerger skipped] Camera: add setsched capability. am: 99b4aebb6a am: a287bef991 -s ours am: bdd7f4ca53 -s ours
am skip reason: Merged-In Ifbf433c026549ca774a9521704d0b0b75c9e9f23 with SHA-1 2715a08a73 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2076040

Change-Id: Ic110cb2ce1580b19d6acb94a6f7d2e3d02595c6d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 21:15:49 +00:00
Edmond Chung
bdd7f4ca53 [automerger skipped] Camera: add setsched capability. am: 99b4aebb6a am: a287bef991 -s ours
am skip reason: Merged-In Ifbf433c026549ca774a9521704d0b0b75c9e9f23 with SHA-1 2715a08a73 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2076040

Change-Id: Ic494c66247402a0839fa839049196aff29f5d97a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 20:54:38 +00:00
Edmond Chung
a287bef991 Camera: add setsched capability. am: 99b4aebb6a
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2076040

Change-Id: I2b276fc1165bcd66d9075566d50f0971e1447811
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 20:19:27 +00:00
Automerger Merge Worker
d673632679 Merge "Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a am: bf80f3cc08" into tm-d1-dev-plus-aosp am: 3cb7dddc64 am: 44de2b767b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: Ie2837f6688b9d82a0e10e7018ae6c737a1f450ad
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 18:41:39 +00:00
Wei Wang
84b91f8765 Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a am: dff2ecee1c am: 05f0628196 am: 9856bda336
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: Id90168c2657cbc5d095a7a916d37bb8219acb22e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 18:41:22 +00:00
Wei Wang
18b9a739f1 Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a am: dff2ecee1c am: 0335b3f6bc am: a26e583d7c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: I990700ac5ee11a03a41db14b3cee1f839d2cd1fe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 18:40:11 +00:00
Automerger Merge Worker
44de2b767b Merge "Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a am: bf80f3cc08" into tm-d1-dev-plus-aosp am: 3cb7dddc64
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: I03d12de6bfdeb533692ba46089bbdaa1a5ddbb52
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 18:09:27 +00:00
Wei Wang
9856bda336 Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a am: dff2ecee1c am: 05f0628196
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: I6c02397e8f46d0c495f7d5bd47e477743bde96c0
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 18:00:03 +00:00
Wei Wang
a26e583d7c Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a am: dff2ecee1c am: 0335b3f6bc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: I2e638f622cc0abfbd3b894419bcafcf4260791d4
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 17:59:40 +00:00
Automerger Merge Worker
3cb7dddc64 Merge "Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a am: bf80f3cc08" into tm-d1-dev-plus-aosp 2022-04-26 17:38:53 +00:00
Wei Wang
e652a35fa3 Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a am: bf80f3cc08
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: I616b4ca914130186440e4639c441496311fec4ce
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 17:38:45 +00:00
Wei Wang
05f0628196 Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a am: dff2ecee1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: I52b64f50174a352afb0de2215a10208a13c0f5f4
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 17:38:44 +00:00
Wei Wang
0335b3f6bc Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a am: dff2ecee1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: I414ecceb80c9d85270e4657bf83c6ed9e23b50b7
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 17:38:41 +00:00
Wei Wang
df8538417f Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a am: c0ed4a78b8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: Ic8eacd4048c18099ace7dc93cd9a92ea167a181d
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 17:38:14 +00:00
Wei Wang
dff2ecee1c Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: I93b6b6da30c68efc6df038a4ba9d30e037abd8bd
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 17:09:57 +00:00
Wei Wang
bf80f3cc08 Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: I79cfb5eb2b9ceca77ce133466e6820a8c81477d4
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 17:09:24 +00:00
Wei Wang
c0ed4a78b8 Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: Ic574e1c04ce02a80576bfaccad973636f33c0c6b
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 17:09:16 +00:00
Wei Wang
5e9a38799a Merge "Grant trusty to power hal" into tm-dev 2022-04-26 16:47:14 +00:00
chiayupei
a53690ac43 hal_sensors_default: Allow sensors HAL to access AoC properties.
Bug: 202901227
Test: Verify pass by checking device log.

Signed-off-by: chiayupei <chiayupei@google.com>
Change-Id: I917362ddf4b8e61810d2dd27da2b7775f1aec1e7
2022-04-26 17:50:44 +08:00
Edmond Chung
99b4aebb6a Camera: add setsched capability.
The camera HAL needs to configure schedule policies for
performance optimizations.

Bug: 228632527
Test: adb logcat
Change-Id: Ifbf433c026549ca774a9521704d0b0b75c9e9f23
Merged-In: Ifbf433c026549ca774a9521704d0b0b75c9e9f23
Signed-off-by: Edmond Chung <edmondchung@google.com>
2022-04-25 15:25:01 -07:00
Edmond Chung
7df606ada7 Camera: add setsched capability. am: 2715a08a73 am: 0ddf256588 am: bc43318ab4 am: ec3eb186b8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: Ifc5b0f001522fb16ceafdf115bb7e58838bd36f3
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 10:08:37 +00:00
Edmond Chung
6f7d8efc81 Camera: add setsched capability. am: 2715a08a73 am: c68109ee72 am: 0a19bd4993 am: ac6129be5c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: I06ba9f7821ceacde035c5eacd0f4e35f1da48721
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 10:07:32 +00:00
Edmond Chung
ddb3458fcd Camera: add setsched capability. am: 2715a08a73 am: 0ddf256588 am: ac4e2bd183 am: 42ff0da1b5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: I065078241fd03e617bb220a1c4212de3fd8227bb
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 10:04:57 +00:00
Edmond Chung
ec3eb186b8 Camera: add setsched capability. am: 2715a08a73 am: 0ddf256588 am: bc43318ab4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: I0bad94015b6ea1f59f1e64873b2dc346d8607dcc
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 09:32:05 +00:00
Edmond Chung
ac6129be5c Camera: add setsched capability. am: 2715a08a73 am: c68109ee72 am: 0a19bd4993
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: I30039f0947da0e4893addf323b31a8a92616fd7b
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 09:31:14 +00:00
Edmond Chung
42ff0da1b5 Camera: add setsched capability. am: 2715a08a73 am: 0ddf256588 am: ac4e2bd183
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: Iffc8f37963b9a979574b4fb2a178ca507262019f
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 09:30:54 +00:00
Edmond Chung
bc43318ab4 Camera: add setsched capability. am: 2715a08a73 am: 0ddf256588
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: Ic43c0ee5f6461b2324b7fbfba4ea3d77f1463387
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 09:02:21 +00:00
Edmond Chung
0a19bd4993 Camera: add setsched capability. am: 2715a08a73 am: c68109ee72
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: I4778f484ac54693df54e55fcada9405a393811b3
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 09:02:08 +00:00
Edmond Chung
ac4e2bd183 Camera: add setsched capability. am: 2715a08a73 am: 0ddf256588
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: I10e45832daefc30d2607c5017e581db4db364c9f
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 09:02:04 +00:00
Edmond Chung
835c8cce14 Camera: add setsched capability. am: 2715a08a73 am: 2f238e9f71
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: I456b149baf00969cdc9c3f87c97221e37a22ae3e
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 09:01:35 +00:00
Edmond Chung
0ddf256588 Camera: add setsched capability. am: 2715a08a73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: I226c2636c54592127c8786e1e7a8e58e182159db
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 08:30:22 +00:00
Edmond Chung
2f238e9f71 Camera: add setsched capability. am: 2715a08a73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: Ia3a4c1e389e425634212e7579fade187243efcbe
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 08:29:17 +00:00
Edmond Chung
c68109ee72 Camera: add setsched capability. am: 2715a08a73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: I031f55c945c6ec65016255256b70a77f99844b54
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 08:28:59 +00:00
Edmond Chung
2715a08a73 Camera: add setsched capability.
The camera HAL needs to configure schedule policies for
performance optimizations.

Bug: 228632527
Test: GCA, adb logcat
Change-Id: Ifbf433c026549ca774a9521704d0b0b75c9e9f23
2022-04-24 23:08:42 +00:00
Wei Wang
1291c3cec9 Grant trusty to power hal
Bug: 229350721
Test: UDFPS with stress
Signed-off-by: Wei Wang <wvw@google.com>
Change-Id: Ia88d6cff1d21940e22ae5122dbfcf52de27ad700
2022-04-24 04:30:03 +00:00
chungkai
86c1f9a20c sepolicy: Remove tracking denials files and fix avc problems am: 11770d9dfe am: b32938a781 am: e8a9ad3f0e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17874685

Change-Id: Iddc643553de76913900f313263ece38ac50103cd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 09:31:58 +00:00
chungkai
ec8407fd34 sepolicy: Remove tracking denials files and fix avc problems am: 11770d9dfe am: 4f616aa515
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17874685

Change-Id: Id0f99cf6c1ce681377f321311e8e5f0492c4286e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 09:10:28 +00:00
chungkai
e8a9ad3f0e sepolicy: Remove tracking denials files and fix avc problems am: 11770d9dfe am: b32938a781
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17874685

Change-Id: Ieb5b0ec3539ac9c1b40221bc1ff8e552e874dc19
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 09:10:22 +00:00
chungkai
b32938a781 sepolicy: Remove tracking denials files and fix avc problems am: 11770d9dfe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17874685

Change-Id: I235258b04149250eddee697483cb33ccdbd915ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 07:47:48 +00:00
chungkai
4f616aa515 sepolicy: Remove tracking denials files and fix avc problems am: 11770d9dfe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17874685

Change-Id: I85c2fa79161454f0b62fb26e5d4d6e1eda119062
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 07:46:52 +00:00
chungkai
11770d9dfe sepolicy: Remove tracking denials files and fix avc problems
04-19 10:53:57.364 W binder:575_2: type=1400 audit(0.0:17):
avc: denied { read } for name="wakeup11" dev="sysfs" ino=59892
scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir
permissive=0

Bug: 229670628
Test: pass
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I6a83b77c4a4bb836e4014cf865cb720a360fd981
2022-04-21 07:24:21 +00:00
Alistair Delva
1470549be5 [automerger skipped] Merge "Remove sysfs_gpu type definition" am: e48b455651 am: f482ea00d9 am: 4f17770b62 -s ours am: 0007374b65 -s ours am: 12d69967ca -s ours am: 3b278ac414 -s ours
am skip reason: Merged-In I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7 with SHA-1 f2be252260 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: Ic5c53f68387d9ea9a5252d12c67948c930582fe6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 06:09:49 +00:00
Alistair Delva
3b278ac414 [automerger skipped] Merge "Remove sysfs_gpu type definition" am: e48b455651 am: f482ea00d9 am: 4f17770b62 -s ours am: 0007374b65 -s ours am: 12d69967ca -s ours
am skip reason: Merged-In I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7 with SHA-1 f2be252260 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I5820d675ee839867e0fab611f90aa5a36df317af
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 05:47:15 +00:00
Alistair Delva
92be5ad277 [automerger skipped] Merge "Remove sysfs_gpu type definition" am: e48b455651 am: f482ea00d9 am: 4f17770b62 -s ours am: 0007374b65 -s ours am: c7ce4cc172 -s ours
am skip reason: Merged-In I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7 with SHA-1 f2be252260 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I6aab0a735c5f7fdacac92cea777d5ac93b8f3121
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 05:46:56 +00:00
Alistair Delva
12d69967ca [automerger skipped] Merge "Remove sysfs_gpu type definition" am: e48b455651 am: f482ea00d9 am: 4f17770b62 -s ours am: 0007374b65 -s ours
am skip reason: Merged-In I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7 with SHA-1 f2be252260 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I61d5c134852af261576dd1fab6b126f5c02130bd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 05:29:03 +00:00
Alistair Delva
c7ce4cc172 [automerger skipped] Merge "Remove sysfs_gpu type definition" am: e48b455651 am: f482ea00d9 am: 4f17770b62 -s ours am: 0007374b65 -s ours
am skip reason: Merged-In I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7 with SHA-1 f2be252260 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I137bebf3cb1b4846e96a793c57ae1c37a83ae86d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 05:28:14 +00:00
Alistair Delva
0007374b65 [automerger skipped] Merge "Remove sysfs_gpu type definition" am: e48b455651 am: f482ea00d9 am: 4f17770b62 -s ours
am skip reason: Merged-In I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7 with SHA-1 f2be252260 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I5e6e351d60353e593234ccb3732ee147c2e7d2d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 05:13:13 +00:00
Alistair Delva
4f17770b62 Merge "Remove sysfs_gpu type definition" am: e48b455651 am: f482ea00d9
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I0edd9718f21b1f31801a793a79dad5d3708b9c10
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 04:58:50 +00:00
Alistair Delva
f482ea00d9 Merge "Remove sysfs_gpu type definition" am: e48b455651
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I144bf39a8eb4c8fda36cfbceb03e7813faf31f3a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 04:43:57 +00:00
Alistair Delva
e48b455651 Merge "Remove sysfs_gpu type definition" 2022-04-21 04:21:45 +00:00
Xin Li
05fc8062d4 [automerger skipped] Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047 am: 7a573b067c -s ours am: 104e2d21c2 -s ours am: 7111ceb7e8 -s ours am: aa2787c19b -s ours
am skip reason: Merged-In I7f65597f91db5a16d4f9de4f6bb018bd5b50a965 with SHA-1 e60773b926 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17805214

Change-Id: If50708e3a3aa7b3d39579074ac448b2eb5a189e1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 14:21:27 +00:00
Xin Li
aa2787c19b [automerger skipped] Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047 am: 7a573b067c -s ours am: 104e2d21c2 -s ours am: 7111ceb7e8 -s ours
am skip reason: Merged-In I7f65597f91db5a16d4f9de4f6bb018bd5b50a965 with SHA-1 e60773b926 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17805214

Change-Id: If7d12942a5f6ab72e9f8d4d4c0f3699462dcb063
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 13:54:16 +00:00
Xin Li
564972424b [automerger skipped] Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047 am: 7a573b067c -s ours am: 104e2d21c2 -s ours am: 7111ceb7e8 -s ours am: a809ae5221 -s ours am: bcc71e1164 -s ours
am skip reason: Merged-In I7f65597f91db5a16d4f9de4f6bb018bd5b50a965 with SHA-1 e60773b926 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17805214

Change-Id: I4af8fcb734fbacaae621a8655a1f792a663a5f73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 12:54:23 +00:00
Xin Li
bcc71e1164 [automerger skipped] Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047 am: 7a573b067c -s ours am: 104e2d21c2 -s ours am: 7111ceb7e8 -s ours am: a809ae5221 -s ours
am skip reason: Merged-In I7f65597f91db5a16d4f9de4f6bb018bd5b50a965 with SHA-1 e60773b926 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17805214

Change-Id: I8e61558b9a3bcc929cf1c10913dacce1affa8652
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 11:30:06 +00:00
Xin Li
a809ae5221 [automerger skipped] Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047 am: 7a573b067c -s ours am: 104e2d21c2 -s ours am: 7111ceb7e8 -s ours
am skip reason: Merged-In I7f65597f91db5a16d4f9de4f6bb018bd5b50a965 with SHA-1 e60773b926 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17805214

Change-Id: Id4134dfcb8163f03797be1a0f5e66ba92050b046
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 08:26:32 +00:00
Xin Li
7111ceb7e8 [automerger skipped] Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047 am: 7a573b067c -s ours am: 104e2d21c2 -s ours
am skip reason: Merged-In I7f65597f91db5a16d4f9de4f6bb018bd5b50a965 with SHA-1 e60773b926 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17805214

Change-Id: Icd2489bcc9f6e26fb8e76c0a774ca174e38fada5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 05:55:38 +00:00
Chung-Kai (Michael) Mei
6e07bed8e1 Merge "sepolicy: fix avc denials" into tm-dev am: 1875f214c6 am: cdff8c6efa am: cf561811f5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17800050

Change-Id: I3caf51863946154756e5b95f3deda0d2e228dea8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 04:07:09 +00:00
Chung-Kai (Michael) Mei
cf561811f5 Merge "sepolicy: fix avc denials" into tm-dev am: 1875f214c6 am: cdff8c6efa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17800050

Change-Id: Ie7ab7863e93dcf7fcafe8bcbeb1edc83e7af519c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 03:29:29 +00:00
Chung-Kai (Michael) Mei
89fe246981 Merge "sepolicy: fix avc denials" into tm-dev am: 1875f214c6 am: 0dc722363f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17800050

Change-Id: I517f2a7041dd4e9ddc163011fef5375b7fadbe24
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 03:28:18 +00:00
Chung-Kai (Michael) Mei
cdff8c6efa Merge "sepolicy: fix avc denials" into tm-dev am: 1875f214c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17800050

Change-Id: I2636b915fe91b575d6e97764ad17fc5f4da2b473
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 03:03:09 +00:00
Chung-Kai (Michael) Mei
0dc722363f Merge "sepolicy: fix avc denials" into tm-dev am: 1875f214c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17800050

Change-Id: I1952ee068a8dd42b7503cebe6bbb428194e5b3ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 03:02:04 +00:00
Chung-Kai (Michael) Mei
1875f214c6 Merge "sepolicy: fix avc denials" into tm-dev 2022-04-20 02:21:49 +00:00
Jason Macnak
8b76f68412 [automerger skipped] Merge "Remove sysfs_gpu type definition" into tm-dev am: d02d83f5c0 am: d543a9d4a2 am: 71d943d339 -s ours
am skip reason: Merged-In I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7 with SHA-1 f2be252260 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17006942

Change-Id: I8ebdc122e904bf97e3d1b8cd04415905bc09ab7b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 17:12:21 +00:00
Jason Macnak
71d943d339 Merge "Remove sysfs_gpu type definition" into tm-dev am: d02d83f5c0 am: d543a9d4a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17006942

Change-Id: I3c228da1d8e0e8da9678d7db2c08305ff4d997ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 16:48:38 +00:00
Jason Macnak
94d8279ee7 [automerger skipped] Merge "Remove sysfs_gpu type definition" into tm-dev am: d02d83f5c0 am: d069ba4218 -s ours
am skip reason: Merged-In I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7 with SHA-1 56b04c828e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17006942

Change-Id: I8096176a940377b30e8aa91be2b56b040e5623bf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 16:47:18 +00:00
Jason Macnak
d543a9d4a2 Merge "Remove sysfs_gpu type definition" into tm-dev am: d02d83f5c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17006942

Change-Id: I6286e9f75717521fd74f6f10a5d02440df9a9b02
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 16:25:30 +00:00
Jason Macnak
d069ba4218 Merge "Remove sysfs_gpu type definition" into tm-dev am: d02d83f5c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17006942

Change-Id: I795ccdf8ba183f1d17ec21bba043826ff20819d9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 16:24:56 +00:00
Jason Macnak
d02d83f5c0 Merge "Remove sysfs_gpu type definition" into tm-dev 2022-04-19 15:59:07 +00:00
TreeHugger Robot
a3484fc071 Merge "Grant policy for EWP feature" into tm-dev am: dd5c94ef1c am: dd90e258f0 am: 50b939a7de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17614595

Change-Id: I61125a21377f38d62247dd14e0dfd8a7a591d485
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 12:41:11 +00:00
TreeHugger Robot
50b939a7de Merge "Grant policy for EWP feature" into tm-dev am: dd5c94ef1c am: dd90e258f0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17614595

Change-Id: Ia90595ec36bf4f3696eca1c71c2fe19b4e21ed73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 12:19:45 +00:00
TreeHugger Robot
9b9107255f Merge "Grant policy for EWP feature" into tm-dev am: dd5c94ef1c am: d7e21baa91
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17614595

Change-Id: Icb471152b0d2e8476f67ba7287be4c0530e620db
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 12:19:17 +00:00
TreeHugger Robot
dd90e258f0 Merge "Grant policy for EWP feature" into tm-dev am: dd5c94ef1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17614595

Change-Id: I4ae21be3e20c30ce5aecdaa3dbf07d7800c52418
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 12:04:52 +00:00
TreeHugger Robot
d7e21baa91 Merge "Grant policy for EWP feature" into tm-dev am: dd5c94ef1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17614595

Change-Id: I1695975184868790666c489c97d4c76dc215e892
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 12:03:58 +00:00
TreeHugger Robot
dd5c94ef1c Merge "Grant policy for EWP feature" into tm-dev 2022-04-19 11:40:02 +00:00
chungkai
19073ba66c sepolicy: fix avc denials
add potential paths for i2c peripheral devices
sine we enable parallel module loading

Bug: 229670628
Test: do bugreport without avc denials
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I6747e6d36731664d7f2fd88382c8a6189c936860
2022-04-19 06:10:34 +00:00
Xin Li
104e2d21c2 [automerger skipped] Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047 am: 7a573b067c -s ours
am skip reason: Merged-In I7f65597f91db5a16d4f9de4f6bb018bd5b50a965 with SHA-1 e60773b926 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17805214

Change-Id: I403afd3d5e0c240130d398c28118334b3d8934bd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 04:21:15 +00:00
Jason Macnak
f0e359cbf6 Merge "Remove sysfs_gpu type definition" 2022-04-18 22:48:40 +00:00
Jason Macnak
f2be252260 Remove sysfs_gpu type definition
... as it has moved to system/sepolicy.

Bug: b/161819018
Test: presubmit
Change-Id: I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7
Merged-In: I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7
2022-04-18 22:45:55 +00:00
Xin Li
7a573b067c Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047
Bug: 226662282
Merged-In: I7f65597f91db5a16d4f9de4f6bb018bd5b50a965
Change-Id: I9a8579c87c05c1329fd5670f63d1edd848782334
2022-04-18 20:43:19 +00:00
Joshua Mccloskey
724d8c46ae Merge "Allow platform apps to access FP Hal" into tm-dev am: 23d2a657fe am: 5ca305b99f am: 3cbf25de67
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17624936

Change-Id: I70ed04a4b0b234eceb275147d8f5ff22b10fbfbe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 23:30:12 +00:00
Joshua Mccloskey
3cbf25de67 Merge "Allow platform apps to access FP Hal" into tm-dev am: 23d2a657fe am: 5ca305b99f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17624936

Change-Id: I13c614620ec6ae13b43b21361033ca5f91ad71be
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 22:40:00 +00:00
Joshua Mccloskey
f367662cbc Merge "Allow platform apps to access FP Hal" into tm-dev am: 23d2a657fe am: 3a5f0310bf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17624936

Change-Id: Ic1946408383f0d44f71a3f8732e10b8be544b98f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 22:39:32 +00:00
Joshua Mccloskey
5ca305b99f Merge "Allow platform apps to access FP Hal" into tm-dev am: 23d2a657fe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17624936

Change-Id: I0584f1e69ef2deddfc61e8cb5e4cb7d9ec7e14cc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 22:13:03 +00:00
Joshua Mccloskey
3a5f0310bf Merge "Allow platform apps to access FP Hal" into tm-dev am: 23d2a657fe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17624936

Change-Id: I7010b533a8d2b7ad8e406c7fb09db37cd780417e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 22:12:14 +00:00
Joshua Mccloskey
23d2a657fe Merge "Allow platform apps to access FP Hal" into tm-dev 2022-04-15 21:39:59 +00:00
Chung-Kai (Michael) Mei
49e830bf4d Merge "genfs_contexts: fix path for i2c peripheral device" into tm-dev am: 9309ec2609 am: 98e852e561 am: 4ab37942f7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17751064

Change-Id: Idb4a2718dcb53dc7c6788b6bd9ba4fea04124e3b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 02:23:39 +00:00
Chung-Kai (Michael) Mei
38981ecdf4 Merge "genfs_contexts: fix path for i2c peripheral device" into tm-dev am: 9309ec2609 am: 51066df6e8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17751064

Change-Id: Ic36e7e2d231ea3e2dfacb56a0c980e8c9dcf272d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:54:15 +00:00
Chung-Kai (Michael) Mei
4ab37942f7 Merge "genfs_contexts: fix path for i2c peripheral device" into tm-dev am: 9309ec2609 am: 98e852e561
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17751064

Change-Id: Ib826747f7aca90bdab10064c502563dff8fa891e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:54:04 +00:00
Chung-Kai (Michael) Mei
98e852e561 Merge "genfs_contexts: fix path for i2c peripheral device" into tm-dev am: 9309ec2609
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17751064

Change-Id: Icf63d47e42862813a775aaceec43ca0ffa71091c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:28:35 +00:00
Chung-Kai (Michael) Mei
51066df6e8 Merge "genfs_contexts: fix path for i2c peripheral device" into tm-dev am: 9309ec2609
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17751064

Change-Id: I688e2b44600519afdd1e218ff08f31c091851b4e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-15 01:28:21 +00:00
Chung-Kai (Michael) Mei
9309ec2609 Merge "genfs_contexts: fix path for i2c peripheral device" into tm-dev 2022-04-15 01:01:25 +00:00
Joshua McCloskey
517ab7da4d Allow platform apps to access FP Hal
Bug: 227247855
Test: Verified manually that the fingerprint extension is working.
Change-Id: Ia8fedcb373e23bf2103803195f844bf90b1807bc
2022-04-14 21:44:11 +00:00
Anthony Stange
fdc256fbcb Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" into tm-dev am: 0cfdc0266c am: a2049901b9 am: 4b6cdd36d4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17722708

Change-Id: Ie036359a7aa9422c0821a8f83364e3693b4fbc90
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 17:00:19 +00:00
Anthony Stange
4b6cdd36d4 Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" into tm-dev am: 0cfdc0266c am: a2049901b9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17722708

Change-Id: I50fc3f6139347b441f5415877cce5f62b3690888
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 16:36:02 +00:00
Anthony Stange
824d47c68e Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" into tm-dev am: 0cfdc0266c am: 53775b7e66
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17722708

Change-Id: Ib699fb6fd360327fbadbe8ce0b6754f3140067a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 16:34:25 +00:00
Anthony Stange
a2049901b9 Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" into tm-dev am: 0cfdc0266c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17722708

Change-Id: Ie34cec39350b6ff0e02bc7421744a2f13ae4027f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 16:14:07 +00:00
Anthony Stange
53775b7e66 Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" into tm-dev am: 0cfdc0266c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17722708

Change-Id: I3a38beec03eee17f5d770832be5d8a83e654633b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-14 16:14:06 +00:00
Anthony Stange
0cfdc0266c Merge "Update SELinux to allow CHRE to talk to the Wifi HAL" into tm-dev 2022-04-14 15:23:23 +00:00
chungkai
953583844f genfs_contexts: fix path for i2c peripheral device
paths are changed when we enable parallel module loading and
reorder the initializtaion of devices.

Test: without avc denial on R4/O6 when booting
Bug: 22754176
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: Ibcd5138170449e24115a0de5c3beda79914d1dc1
2022-04-14 04:45:41 +00:00
Anthony Stange
613bdcdec8 Update SELinux to allow CHRE to talk to the Wifi HAL
Bug: 206614765
Test: Run locally
Change-Id: I73bcf96ed1cab0a101e5f84852a1d82258b9c690
2022-04-12 20:58:12 +00:00
TreeHugger Robot
eb5807b663 Merge "sepolicy: Add policy for persist.vendor.udfps" into tm-dev am: 4e91f5530e am: 30ccdb4113 am: fe0a4ae184
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17180644

Change-Id: I5345fa993d01df52cce2d2bfb317ac92c224cc76
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 11:58:34 +00:00
TreeHugger Robot
fe0a4ae184 Merge "sepolicy: Add policy for persist.vendor.udfps" into tm-dev am: 4e91f5530e am: 30ccdb4113
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17180644

Change-Id: I115de3cbe83fe30979dfe61455aabfd6882f85ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 11:38:42 +00:00
TreeHugger Robot
19ad99852a Merge "sepolicy: Add policy for persist.vendor.udfps" into tm-dev am: 4e91f5530e am: cc3d4cb61c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17180644

Change-Id: I9ade3dcd53f190f0482d76be78381f0faa7db01e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 11:30:35 +00:00
TreeHugger Robot
30ccdb4113 Merge "sepolicy: Add policy for persist.vendor.udfps" into tm-dev am: 4e91f5530e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17180644

Change-Id: Id51b5bfc069fa61a3b5022b07ec3a9918e39cb46
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 11:17:07 +00:00
TreeHugger Robot
cc3d4cb61c Merge "sepolicy: Add policy for persist.vendor.udfps" into tm-dev am: 4e91f5530e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17180644

Change-Id: Ia1944b5875693f9aaddec3fcf5ba9a3bf29d0d5a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 11:16:04 +00:00
TreeHugger Robot
4e91f5530e Merge "sepolicy: Add policy for persist.vendor.udfps" into tm-dev 2022-04-12 10:56:32 +00:00
Darren Hsu
a11015aad9 sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5 am: 4df95c6d08 am: 9b9e2b4f3c am: acb5cc9e03 am: 3abe13185c am: c3951c178c
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630

Change-Id: I1aa69e4c40644a11a5e16eac7ba0a29086889e1c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 05:30:22 +00:00
Darren Hsu
2493f82b3b sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5 am: 4df95c6d08 am: 9b9e2b4f3c am: acb5cc9e03 am: bf9775b008
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630

Change-Id: Ida08792cd4931b2ad1d159d6e15eeed0bffd3780
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 05:09:55 +00:00
Darren Hsu
c3951c178c sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5 am: 4df95c6d08 am: 9b9e2b4f3c am: acb5cc9e03 am: 3abe13185c
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630

Change-Id: I4c4ef69431523973ca991df0788682e5587d0875
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 05:09:47 +00:00
Darren Hsu
3abe13185c sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5 am: 4df95c6d08 am: 9b9e2b4f3c am: acb5cc9e03
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630

Change-Id: Id39b33cd76a3dd707bbd602222a717501aa1f38b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 04:50:24 +00:00
Darren Hsu
bf9775b008 sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5 am: 4df95c6d08 am: 9b9e2b4f3c am: acb5cc9e03
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630

Change-Id: I8d5451d9f90035d9a2096da9f93b1236c956c25b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 04:49:28 +00:00
Darren Hsu
acb5cc9e03 sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5 am: 4df95c6d08 am: 9b9e2b4f3c
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630

Change-Id: Ib0aa15719df8e4e0e7eb673b389d4e0b6be99640
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 04:19:48 +00:00
Darren Hsu
9b9e2b4f3c sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5 am: 4df95c6d08
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630

Change-Id: I6648d98e50b0c8c01206071537fedbe4083e1f11
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 04:04:56 +00:00
Darren Hsu
4df95c6d08 sepolicy: label charger wakeups for system suspend am: 3c11d8d1c5
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2060630

Change-Id: I058cb3909d972cc5784e507fcb26b46196c33aa4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-12 03:39:39 +00:00
Badhri Jagan Sridharan
f6cc2cde2c Merge "Allow usb hal to read contaminantdisable property" into tm-dev am: 93b8189c2b am: ddfbcf6a0a am: 4956581a1a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17649293

Change-Id: I0d948a18b56db93d1fa9cb757a758fb832c03090
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-11 23:19:40 +00:00
Badhri Jagan Sridharan
4956581a1a Merge "Allow usb hal to read contaminantdisable property" into tm-dev am: 93b8189c2b am: ddfbcf6a0a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17649293

Change-Id: I1309cd550885743314cadf6073a1d8cdee3e764d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-11 23:06:04 +00:00
Badhri Jagan Sridharan
04d66dd766 Merge "Allow usb hal to read contaminantdisable property" into tm-dev am: 93b8189c2b am: 798cd60026
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17649293

Change-Id: Ieec42757151cd070dbb707a84efe0e3d97af1ed9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-11 22:59:36 +00:00
Badhri Jagan Sridharan
ddfbcf6a0a Merge "Allow usb hal to read contaminantdisable property" into tm-dev am: 93b8189c2b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17649293

Change-Id: I8bb37378e46fe74cbd6251f6918b86e84ee63bea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-11 22:45:21 +00:00
Badhri Jagan Sridharan
798cd60026 Merge "Allow usb hal to read contaminantdisable property" into tm-dev am: 93b8189c2b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17649293

Change-Id: I334c2578b4f6ad9488c670f5ea0c4a470cb30cdb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-11 22:44:22 +00:00
Badhri Jagan Sridharan
93b8189c2b Merge "Allow usb hal to read contaminantdisable property" into tm-dev 2022-04-11 22:22:28 +00:00
Patty
40cd670c9f Grant policy for EWP feature
Bug: 220121592
Test: Manual
Change-Id: I274a9519c40915cf65de45a3d8cf452faf16c8b4
2022-04-11 14:40:02 +08:00
Darren Hsu
3c11d8d1c5 sepolicy: label charger wakeups for system suspend
Bug: 226887726
Test: do bugreport without avc denials
Change-Id: I779b646846da90cdc710145e959644efc4733b3b
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-04-11 10:56:33 +08:00
Badhri Jagan Sridharan
297686492f [automerge] Allow usb hal to read contaminantdisable property 2p: 8606aa8a51 2p: a2f5fc80f4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17649293

Bug: 227792357
Change-Id: Ia7a478cc75350677695c3d76e2b86ac0a59c16ad
2022-04-08 00:26:11 +00:00
Badhri Jagan Sridharan
a2f5fc80f4 [automerge] Allow usb hal to read contaminantdisable property 2p: 8606aa8a51
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17649293

Bug: 227792357
Change-Id: I0c6937f89bfadf38eb55dbb42a5d55ba8419750d
2022-04-08 00:26:04 +00:00
Badhri Jagan Sridharan
8606aa8a51 Allow usb hal to read contaminantdisable property
avc: denied { read } for comm="android.hardwar" name="u:object_r:vendor_usb_config_prop:s0"
dev="tmpfs" ino=367 scontext=u:r:hal_usb_impl:s0
tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=file permissive=0

Bug: 227792357
Change-Id: Id4d5ef7c214f0c0f672db28991b9fbe0152530b7
2022-04-07 17:21:15 -07:00
Chung-Kai (Michael) Mei
19701a1770 Merge changes from topic "gs101_parallel_load_sepolicy" into tm-dev am: 9a909d4058 am: 363728f850 am: 9abc3f0821
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17614589

Change-Id: Ie6ad6099d68b1bd8733d78980a80ad7b7951e169
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 11:13:26 +00:00
chungkai
4d15f903df genfs_contexts: fix path for i2c peripheral devices am: 8a19d8be9c am: cd1005d92a am: d3ca95e58b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17504913

Change-Id: I5eaa1f251e7f04683f85d50dccebca35133dc918
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 11:13:19 +00:00
Chung-Kai (Michael) Mei
9abc3f0821 Merge changes from topic "gs101_parallel_load_sepolicy" into tm-dev am: 9a909d4058 am: 363728f850
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17614589

Change-Id: Ie1cfd60100d792f4abe07b2bc3503bf7d9a4ca29
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 10:52:26 +00:00
chungkai
d3ca95e58b genfs_contexts: fix path for i2c peripheral devices am: 8a19d8be9c am: cd1005d92a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17504913

Change-Id: Ib25f5de1880cc145fecb974d82fb61a9a6448d70
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 10:52:21 +00:00
Chung-Kai (Michael) Mei
67da7dc548 Merge changes from topic "gs101_parallel_load_sepolicy" into tm-dev am: 9a909d4058 am: 64e14e7379
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17614589

Change-Id: Ic7fb450621881a6540374ae11fad040311746a90
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 10:51:48 +00:00
Chung-Kai (Michael) Mei
363728f850 Merge changes from topic "gs101_parallel_load_sepolicy" into tm-dev am: 9a909d4058
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17614589

Change-Id: I072c7a8e680a7998574f9a20863b2c4ab269f076
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 10:31:05 +00:00
chungkai
cd1005d92a genfs_contexts: fix path for i2c peripheral devices am: 8a19d8be9c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17504913

Change-Id: Ie14aabd4432cf66615265a8e29f115fef417e590
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 10:30:59 +00:00
Chung-Kai (Michael) Mei
64e14e7379 Merge changes from topic "gs101_parallel_load_sepolicy" into tm-dev am: 9a909d4058
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17614589

Change-Id: I815bb946971fca3762647a3de3e00690557ecb95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 10:30:36 +00:00
Chung-Kai (Michael) Mei
9a909d4058 Merge changes from topic "gs101_parallel_load_sepolicy" into tm-dev
* changes:
  sepolicy: ignore avc denial
  genfs_contexts: fix path for i2c peripheral devices
2022-04-07 09:33:26 +00:00
Siddharth Kapoor
a578811cad Merge "Revert "Move ODPM file rule to pixel sepolicy"" into tm-dev am: 9d3a25fb29 am: 5d40de63da am: ae2cd552b6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17609198

Change-Id: I563529bc514c0d1b6b21e792a12053656b7c2acf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 05:16:45 +00:00
Siddharth Kapoor
e0f9e9d0fa Merge "Revert "Move ODPM file rule to pixel sepolicy"" into tm-dev am: 9d3a25fb29 am: c4db9c9fee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17609198

Change-Id: Ibf6518f1f95ff3ee1bc44ad202577697326f94cb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 04:54:24 +00:00
Siddharth Kapoor
ae2cd552b6 Merge "Revert "Move ODPM file rule to pixel sepolicy"" into tm-dev am: 9d3a25fb29 am: 5d40de63da
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17609198

Change-Id: I699a703f900368346348598c25e95a76595d8d1a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 04:45:57 +00:00
Siddharth Kapoor
5d40de63da Merge "Revert "Move ODPM file rule to pixel sepolicy"" into tm-dev am: 9d3a25fb29
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17609198

Change-Id: I91ec76384d8ba27c6ef35ff7871fde1d1172659f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 04:23:37 +00:00
Siddharth Kapoor
c4db9c9fee Merge "Revert "Move ODPM file rule to pixel sepolicy"" into tm-dev am: 9d3a25fb29
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17609198

Change-Id: I74da1b4b3bcb1f7c7625c01a61590e8ea24da47c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-07 04:22:33 +00:00
Siddharth Kapoor
9d3a25fb29 Merge "Revert "Move ODPM file rule to pixel sepolicy"" into tm-dev 2022-04-07 04:06:31 +00:00
Siddharth Kapoor
df172dc5d9 [automerge] Revert "Move ODPM file rule to pixel sepolicy" 2p: 13f85a37f3 2p: 86e649b033
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17609198

Change-Id: Ieeb51dcfba6ad5796405177a77893ed14897b061
2022-04-07 03:30:43 +00:00
Siddharth Kapoor
86e649b033 [automerge] Revert "Move ODPM file rule to pixel sepolicy" 2p: 13f85a37f3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17609198

Change-Id: I1c17b6ecf4850e214e5c3beb88d26c70a368368c
2022-04-07 03:30:21 +00:00
Siddharth Kapoor
13f85a37f3 Revert "Move ODPM file rule to pixel sepolicy"
Revert "Move ODPM file rule to pixel sepolicy"

Revert submission 17215583-odpm_sepolicy_refactor-tm-dev

Reason for revert: build failure tracked in b/228261711
Reverted Changes:
Ic9a89950a:Move ODPM file rule to pixel sepolicy
I24105669b:Move ODPM file rule to pixel sepolicy
I044a285ff:Move ODPM file rule to pixel sepolicy

Change-Id: I36abfddaa5903739f9c5bf65d3c1cd506db9e604
2022-04-07 03:29:56 +00:00
Albert Wang
8a877f5cd8 Add more xHCI wakeup path for suspend_control am: e60773b926 am: 092298b579 am: aed8848fb0 am: 7839be7474 am: 8713e0b0b7 am: b272ee65c7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478

Change-Id: I5aebc989c3c77cadf24400d00c3d0c8c3f0c58e6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 10:01:29 +00:00
Albert Wang
b272ee65c7 Add more xHCI wakeup path for suspend_control am: e60773b926 am: 092298b579 am: aed8848fb0 am: 7839be7474 am: 8713e0b0b7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478

Change-Id: Ida21469b1d9ece7233bb44f3738c1eb20a0b09c8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 09:25:14 +00:00
Albert Wang
978413716b Add more xHCI wakeup path for suspend_control am: e60773b926 am: 092298b579 am: aed8848fb0 am: 7839be7474 am: cd8219c7be
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478

Change-Id: If0c3564cc3c6a83258ed82b36e1576b24e115bfa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 09:24:46 +00:00
chungkai
384218408f sepolicy: ignore avc denial
dont audit since it's debugfs

Bug: 228181404
Test: forrest with boot test
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I7f2a85e2a405c78c9d8d11e9c2fdfdc5e87f7931
2022-04-06 09:21:24 +00:00
chungkai
8a19d8be9c genfs_contexts: fix path for i2c peripheral devices
paths are changed when we enable parallel module loading and
reorder the initializtaion of devices.

Test: without avc denial on Raven
Bug: 227541760
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I7d835205696fd727e9be24fcf010ed44bcd5d6ae
2022-04-06 09:15:46 +00:00
Albert Wang
8713e0b0b7 Add more xHCI wakeup path for suspend_control am: e60773b926 am: 092298b579 am: aed8848fb0 am: 7839be7474
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478

Change-Id: I02382970a84b9b2f8a5f0002d1ee6d225fd09b81
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 09:04:42 +00:00
Albert Wang
cd8219c7be Add more xHCI wakeup path for suspend_control am: e60773b926 am: 092298b579 am: aed8848fb0 am: 7839be7474
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478

Change-Id: I1cfb6ac90a4eb6b3d9d6f046b30622936c27244e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 09:03:45 +00:00
Albert Wang
7839be7474 Add more xHCI wakeup path for suspend_control am: e60773b926 am: 092298b579 am: aed8848fb0
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478

Change-Id: I251a791b13d863de275ceffc3ba926db9a458c07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 08:42:39 +00:00
Albert Wang
aed8848fb0 Add more xHCI wakeup path for suspend_control am: e60773b926 am: 092298b579
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478

Change-Id: Ieaa74f326039e13ec8409167112c11b16cb47480
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 08:15:54 +00:00
Albert Wang
092298b579 Add more xHCI wakeup path for suspend_control am: e60773b926
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2052478

Change-Id: Ib07b92bf159c8b69dcdc7bc17e7f19a44aab20f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 08:00:41 +00:00
Sam Ou
347296cd87 Merge "Move ODPM file rule to pixel sepolicy" into tm-dev am: de81154964 am: 0f7d68a9b1 am: 5529a1f44b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17215583

Change-Id: I501960e1cb148445858e010c9484e48103feede8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 03:26:16 +00:00
Sam Ou
5529a1f44b Merge "Move ODPM file rule to pixel sepolicy" into tm-dev am: de81154964 am: 0f7d68a9b1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17215583

Change-Id: I2c343dd3160802f3b415785305df8922a03f69d6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 02:59:43 +00:00
Sam Ou
27167ced5c Merge "Move ODPM file rule to pixel sepolicy" into tm-dev am: de81154964 am: 24ef7db4f3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17215583

Change-Id: I86ec424153a5443a4cf3576a946c793b8aa0b5d1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 02:59:24 +00:00
Sam Ou
0f7d68a9b1 Merge "Move ODPM file rule to pixel sepolicy" into tm-dev am: de81154964
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17215583

Change-Id: I5043f68a22d8887a0105613bf848edf7655b776c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 02:38:48 +00:00
Sam Ou
24ef7db4f3 Merge "Move ODPM file rule to pixel sepolicy" into tm-dev am: de81154964
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17215583

Change-Id: I277d684d530ac6e4e96138c80bdc2021a7067220
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-06 02:37:54 +00:00
Sam Ou
de81154964 Merge "Move ODPM file rule to pixel sepolicy" into tm-dev 2022-04-06 02:09:38 +00:00
Xin Li
8f94db0a76 [automerger skipped] Merge Android 12 QPR3 ab/8391262 am: 815b133c28 -s ours am: 4295b8c5bb -s ours am: 6c7329e78a -s ours am: f43a918617 -s ours am: 2ee23c3894 -s ours
am skip reason: Merged-In I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7 with SHA-1 24b4d1b601 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17543362

Change-Id: I79516700fcb1f7a88f1a3f7208157e99f8e41acb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-03 09:39:02 +00:00
Xin Li
2ee23c3894 [automerger skipped] Merge Android 12 QPR3 ab/8391262 am: 815b133c28 -s ours am: 4295b8c5bb -s ours am: 6c7329e78a -s ours am: f43a918617 -s ours
am skip reason: Merged-In I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7 with SHA-1 24b4d1b601 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17543362

Change-Id: I6c38baa51c6733424393b0e1d0a17722d2330bcb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-03 09:08:53 +00:00
Xin Li
e98156e279 [automerger skipped] Merge Android 12 QPR3 ab/8391262 am: 815b133c28 -s ours am: 4295b8c5bb -s ours am: 6c7329e78a -s ours am: ed68f78914 -s ours
am skip reason: Merged-In I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7 with SHA-1 24b4d1b601 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17543362

Change-Id: Ic093de2196ed07ccc529f276b398ed1b3ff6f91c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-03 09:00:39 +00:00
Xin Li
f43a918617 [automerger skipped] Merge Android 12 QPR3 ab/8391262 am: 815b133c28 -s ours am: 4295b8c5bb -s ours am: 6c7329e78a -s ours
am skip reason: Merged-In I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7 with SHA-1 24b4d1b601 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17543362

Change-Id: I2b05cb9279ab108de85891cbe7136c228ac04203
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-03 08:31:00 +00:00
Xin Li
ed68f78914 [automerger skipped] Merge Android 12 QPR3 ab/8391262 am: 815b133c28 -s ours am: 4295b8c5bb -s ours am: 6c7329e78a -s ours
am skip reason: Merged-In I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7 with SHA-1 24b4d1b601 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17543362

Change-Id: Ibfff57b71a0653f295b56b6f55e8b46d6029cddb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-03 08:29:44 +00:00
Xin Li
6c7329e78a [automerger skipped] Merge Android 12 QPR3 ab/8391262 am: 815b133c28 -s ours am: 4295b8c5bb -s ours
am skip reason: Merged-In I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7 with SHA-1 24b4d1b601 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17543362

Change-Id: Iccd31c0bb403d722d24d093730327b024e4342ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-03 07:43:50 +00:00
Xin Li
4295b8c5bb [automerger skipped] Merge Android 12 QPR3 ab/8391262 am: 815b133c28 -s ours
am skip reason: Merged-In I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7 with SHA-1 24b4d1b601 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17543362

Change-Id: I3183293f6ba3e1858233ce35170f935f3b03c1ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-03 07:11:50 +00:00
Xin Li
815b133c28 Merge Android 12 QPR3 ab/8391262
Bug: 226662282
Merged-In: I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7
Change-Id: Iccdf8b6a16f1d7a9ae0c9fd8cab14c5c55c6e64a
2022-04-01 20:32:12 +00:00
sukiliu
4616a263ed Update avc error on ROM 8386107 am: ed3ac0623b am: d7abffceca am: 8b54c6753c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17517644

Change-Id: I28452b9c033f43f2c561a4d15fc377e837ab5e7d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-01 02:26:58 +00:00
sukiliu
8b54c6753c Update avc error on ROM 8386107 am: ed3ac0623b am: d7abffceca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17517644

Change-Id: Ic650313da25833cee20c6b069d5485109df2ba5b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-01 02:04:26 +00:00
sukiliu
6834f4dd65 Update avc error on ROM 8386107 am: ed3ac0623b am: 5399644caa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17517644

Change-Id: Ic0868e80d7a28802106597336ef8624964638c32
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-01 01:45:24 +00:00
Albert Wang
e60773b926 Add more xHCI wakeup path for suspend_control
To addressdd the xHCI wakeup nodes permission problem, add new nodes:
/devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb2/wakeup
/devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb3/wakeup

avc: denied { read } for name="wakeup175" dev="sysfs" ino=162091
scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
android.system.suspend@1.0-service: Error opening kernel wakelock stats for: wakeup175
(../../devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb2/wakeup/
wakeup175): Permission denied
avc: denied { read } for name="wakeup176" dev="sysfs" ino=162107
scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
android.system.suspend@1.0-service: Error opening kernel wakelock stats for: wakeup176
(../../devices/platform/11110000.usb/11110000.dwc3/xhci-hcd-exynos.5.auto/usb3/wakeup/
wakeup176): Permission denied

Bug: 226056256
Test: test build to verify sepolicy log
Signed-off-by: Albert Wang <albertccwang@google.com>
Change-Id: I7f65597f91db5a16d4f9de4f6bb018bd5b50a965
2022-04-01 09:43:40 +08:00
sukiliu
d7abffceca Update avc error on ROM 8386107 am: ed3ac0623b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17517644

Change-Id: Ic4e6b3a1a98a25ade5cc21f8d47cde370037ef95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-01 01:34:47 +00:00
sukiliu
5399644caa Update avc error on ROM 8386107 am: ed3ac0623b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17517644

Change-Id: I7704592714dd04d336218bec57e252e0380ce7bf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-01 01:11:57 +00:00
sukiliu
ed3ac0623b Update avc error on ROM 8386107
Bug: 226717475
Test: PtsSELinuxTestCases
Change-Id: Ia366a4ad0f193858960b7c5df34096bd2d4eada5
2022-03-31 15:48:04 +08:00
chungkai
3d566a76eb sched: move sysfs to procfs am: de44d766e4 am: 7aca716ea5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17347010

Change-Id: Iaa42379ba628cc87451b65a9c7b758c06fc42551
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-29 10:30:53 +00:00
chungkai
2fdcda07cf sched: move sysfs to procfs am: de44d766e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17347010

Change-Id: I4bf90d778554bc2050f5216a8cdc9fa27693eb56
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-29 09:59:26 +00:00
chungkai
7aca716ea5 sched: move sysfs to procfs am: de44d766e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17347010

Change-Id: Idda51d821f6de51e84c02604aca300596712343b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-29 09:59:06 +00:00
chungkai
de44d766e4 sched: move sysfs to procfs
Modify name from sysfs_vendor_sched to proc_vendor_sched

Test: without avc denial
Bug: 216207007
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: Ic113b2d8ee1d3ae1ced9985636b17ef1e7657a84
2022-03-29 09:43:32 +00:00
KRIS CHEN
9d8a28da05 Merge "Allow hal_fingerprint_default to access sysfs_display" into tm-dev am: 572a8a3372 am: 06394d5b72
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17397164

Change-Id: Iac11d2f8f12bf103eaf6690d92f249891f42b32f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-29 02:07:21 +00:00
KRIS CHEN
096242ea6f Merge changes from topic "udfps-read-panel-name" into tm-mainline-prod am: 8c045a9bd7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17397164

Change-Id: I98e3c094e9bd4aa8c2b247626ab3de3bf0834bfa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-29 02:07:07 +00:00
KRIS CHEN
06394d5b72 Merge "Allow hal_fingerprint_default to access sysfs_display" into tm-dev am: 572a8a3372
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17397164

Change-Id: I8ffe6976412222ef7bbf553a5fd2e6c1d929ce2f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-29 02:06:05 +00:00
KRIS CHEN
3facacff23 Merge "Allow hal_fingerprint_default to access sysfs_display" into tm-dev am: 572a8a3372
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17397164

Change-Id: I074e4e0c8b50228c78c3ed6a610cfb049f8754af
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-29 02:05:45 +00:00
KRIS CHEN
572a8a3372 Merge "Allow hal_fingerprint_default to access sysfs_display" into tm-dev 2022-03-29 01:39:34 +00:00
KRIS CHEN
8c045a9bd7 Merge changes from topic "udfps-read-panel-name" into tm-mainline-prod
* changes:
  [automerge] Allow hal_fingerprint_default to access sysfs_display 2p: 3df0d7812b
  Allow hal_fingerprint_default to access sysfs_display
2022-03-29 01:39:34 +00:00
KRIS CHEN
da758b81a4 Merge changes from topic "udfps-read-panel-name"
* changes:
  [automerge] Allow hal_fingerprint_default to access sysfs_display 2p: 3df0d7812b 2p: 04ee13801b
  [automerge] Allow hal_fingerprint_default to access sysfs_display 2p: 3df0d7812b
  Allow hal_fingerprint_default to access sysfs_display
2022-03-29 01:39:34 +00:00
Darren Hsu
6d491546f1 Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae am: a0592e36d2 am: 24b4d1b601 am: 2650d53059 am: 480c186de3
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864

Change-Id: I4c4a0f7caa8d977ede75c4b5659e0a8c01343d99
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-28 09:29:22 +00:00
Darren Hsu
480c186de3 Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae am: a0592e36d2 am: 24b4d1b601 am: 2650d53059
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864

Change-Id: I5fa279be9ddc199b16618cdd893a018576e05979
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-28 09:09:26 +00:00
Darren Hsu
76b4b62fe4 Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae am: a0592e36d2 am: 24b4d1b601 am: 2650d53059
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864

Change-Id: I69a4cf7322bce0ae75e6ff7266f6043f87eceb5e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-28 09:06:49 +00:00
Badhri Jagan Sridharan
a4b9ad439b android.hardware.usb.IUsb AIDL migration
android.hardware.usb.IUsb is migrated to AIDL and runs in
its own process. android.hardware.usb.gadget.IUsbGadget
is now published in its own exclusive process
(android.hardware.usb.gadget-service). Creating
file_context and moving the selinux linux rules
for IUsbGadget implementation.

Bug: 200993386
Change-Id: Ia8c24610244856490c8271433710afb57d3da157
Merged-In: Ia8c24610244856490c8271433710afb57d3da157
(cherry picked from commit 51735ba3ab)
2022-03-28 17:01:45 +08:00
Darren Hsu
2650d53059 Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae am: a0592e36d2 am: 24b4d1b601
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864

Change-Id: Iacfa20c771905827c1299527dc2c66646ae18506
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-28 08:41:17 +00:00
Darren Hsu
24b4d1b601 Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae am: a0592e36d2
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864

Change-Id: I1ae4b99a9fa4fc95f96ee1f36dc500f453653ca7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-28 08:17:33 +00:00
Darren Hsu
a0592e36d2 Allow hal_power_stats to read sysfs_aoc_dumpstate am: f11f53a3ae
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2044864

Change-Id: I3b5f155658676081c3248e67ee512c1ce301ab07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-28 07:51:38 +00:00
Chris Kuiper
e5c35aece6 Merge "Allow Sensor HAL access to display sysfs panel_name file." into tm-dev am: dfcef044a2 am: db21528c29
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17308483

Change-Id: I065e4d58ceb0ad0a36399d62b94f51a7c9f415ad
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-25 17:29:38 +00:00
Chris Kuiper
357beddd95 Merge changes from topic "alsp_g10_support" into tm-mainline-prod am: 8cda712ebd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17308483

Change-Id: If82fc50fd6bf110b3a0235b6ee3a63f6f76a92ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-25 17:25:06 +00:00
Chris Kuiper
db21528c29 Merge "Allow Sensor HAL access to display sysfs panel_name file." into tm-dev am: dfcef044a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17308483

Change-Id: I90a697c2b3becf2a1f5e7275e395554798c02c82
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-25 17:07:24 +00:00
Chris Kuiper
59b5e12df0 Merge "Allow Sensor HAL access to display sysfs panel_name file." into tm-dev am: dfcef044a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17308483

Change-Id: Ic0b014af7b83ff88334458d231bf7aa45c33ba36
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-25 17:07:11 +00:00
Chris Kuiper
dfcef044a2 Merge "Allow Sensor HAL access to display sysfs panel_name file." into tm-dev 2022-03-25 16:49:40 +00:00
Chris Kuiper
8cda712ebd Merge changes from topic "alsp_g10_support" into tm-mainline-prod
* changes:
  [automerge] Allow Sensor HAL access to display sysfs panel_name file. 2p: 28ddd3bf9f
  Allow Sensor HAL access to display sysfs panel_name file.
2022-03-25 16:49:40 +00:00
Chris Kuiper
faf20efa27 Merge changes from topic "alsp_g10_support"
* changes:
  [automerge] Allow Sensor HAL access to display sysfs panel_name file. 2p: 28ddd3bf9f 2p: 205a9c66bf
  [automerge] Allow Sensor HAL access to display sysfs panel_name file. 2p: 28ddd3bf9f
  Allow Sensor HAL access to display sysfs panel_name file.
2022-03-25 16:49:40 +00:00
Darren Hsu
b96a005af5 Allow hal_power_stats to read sysfs_aoc_dumpstate am: 22def09e8a am: aa644eeff6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17369587

Change-Id: I2dc84d4290e1cc640899b01d9e2b2fd13922e485
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-25 07:44:18 +00:00
Darren Hsu
f6fe164af9 Allow hal_power_stats to read sysfs_aoc_dumpstate am: 22def09e8a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17369587

Change-Id: I5b1f6de304f1752fcda1a5c54ed397ee1b7f4873
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-25 07:19:21 +00:00
Darren Hsu
aa644eeff6 Allow hal_power_stats to read sysfs_aoc_dumpstate am: 22def09e8a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17369587

Change-Id: I561057f688cffae94b613ef851963b77c961d5e8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-03-25 07:19:07 +00:00
Kris Chen
76df5e7642 [automerge] Allow hal_fingerprint_default to access sysfs_display 2p: 3df0d7812b 2p: 04ee13801b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17397164

Bug: 223687187
Change-Id: Id00a8e3033157370f4c7ff156f1b0bf7e1ae0428
2022-03-25 06:57:22 +00:00
Kris Chen
04ee13801b [automerge] Allow hal_fingerprint_default to access sysfs_display 2p: 3df0d7812b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17397164

Bug: 223687187
Change-Id: Iddbb92bafceeed18afd86990f147695e06e093e0
2022-03-25 06:56:53 +00:00
Kris Chen
3df0d7812b Allow hal_fingerprint_default to access sysfs_display
Fix the following avc denial:
avc: denied { read } for name="panel_name" dev="sysfs" ino=71133 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_display:s0 tclass=file permissive=0

Bug: 223687187
Test: build and test fingerprint on device.
Change-Id: Ic2b2cadb97f36643b79de6a8ebfe2232093fe7d7
2022-03-25 14:53:53 +08:00
Darren Hsu
f11f53a3ae Allow hal_power_stats to read sysfs_aoc_dumpstate
avc: denied { read } for comm="android.hardwar" name="restart_count"
dev="sysfs" ino=72823 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs_aoc_dumpstate:s0 tclass=file permissive=0

Bug: 226173008
Test: check bugreport without avc denials
Change-Id: Ife3a7e00a1ffbcbed7fd8b744f2ac8910931a5fb
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-03-25 11:19:20 +08:00
Presubmit Automerger Backend
d21101394e [automerge] Allow Sensor HAL access to display sysfs panel_name file. 2p: 28ddd3bf9f 2p: 205a9c66bf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17308483

Bug: 208926536
Change-Id: Iff765acae32b69e451176cedeb71ce548c783708
2022-03-25 01:03:10 +00:00
Presubmit Automerger Backend
205a9c66bf [automerge] Allow Sensor HAL access to display sysfs panel_name file. 2p: 28ddd3bf9f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17308483

Bug: 208926536
Change-Id: I4980d9c85cc71e5b373c76ed43ed03191d92b0c1
2022-03-25 01:03:03 +00:00
Chris Kuiper
28ddd3bf9f Allow Sensor HAL access to display sysfs panel_name file.
Bug: 208926536
Test: Accessed the display sysfs from sensor HAL correctly.
Change-Id: Ide86813de20a1240f8ac55322b017329f30b296e
2022-03-24 17:55:43 -07:00
Darren Hsu
22def09e8a Allow hal_power_stats to read sysfs_aoc_dumpstate
avc: denied { read } for comm="android.hardwar" name="restart_count"
dev="sysfs" ino=72823 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs_aoc_dumpstate:s0 tclass=file permissive=0

Bug: 226173008
Test: check bugreport without avc denials
Change-Id: Iccd8e4475ba6055d07aedc43de72bd39e6674469
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-03-24 14:53:24 +08:00
Stephane Lee
70f473e940 [automerger skipped] Fix off-mode (charger) sepolicy for the health interface am: 84a06151a3 am: c35357078d am: 620e6038e2 am: 282c77a88f am: 693413dc29 -s ours
am skip reason: Merged-In I46fa1b7552eb0655d0545538142131465a337f23 with SHA-1 117be90229 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039624

Change-Id: I63460a3ecd5aaba71e21b9ed8e9abc6a5bffd626
2022-03-24 05:54:30 +00:00
Jack Wu
0699286323 [automerger skipped] sepolicy: gs101: fix charger_vendor permission denied am: b67138e8ae am: 28efee70de am: d43cfef11c -s ours am: 6abc9f674c -s ours am: c842deb7b2 -s ours
am skip reason: Merged-In I091dbbca35fb833e59fdbc234d74b90bfe74014c with SHA-1 dcb05d1377 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039623

Change-Id: Ic13fb453d169341231317f5c561ad405852c0503
2022-03-24 05:54:29 +00:00
Stephane Lee
9b7ebd6beb [automerger skipped] Fix off-mode (charger) sepolicy for the health interface am: 84a06151a3 am: c35357078d am: 620e6038e2 am: 282c77a88f -s ours
am skip reason: Merged-In I46fa1b7552eb0655d0545538142131465a337f23 with SHA-1 117be90229 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039624

Change-Id: I0bbe1c88d90e84ff3bb1456e170aedba3a93e103
2022-03-24 05:31:44 +00:00
Jack Wu
66ff492df3 [automerger skipped] sepolicy: gs101: fix charger_vendor permission denied am: b67138e8ae am: 28efee70de am: d43cfef11c -s ours am: 6abc9f674c -s ours
am skip reason: Merged-In I091dbbca35fb833e59fdbc234d74b90bfe74014c with SHA-1 dcb05d1377 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039623

Change-Id: Id1d585197413ee3b83e39a1af597c67b92c9659f
2022-03-24 05:31:43 +00:00
Stephane Lee
693413dc29 Fix off-mode (charger) sepolicy for the health interface am: 84a06151a3 am: c35357078d am: 620e6038e2 am: 282c77a88f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039624

Change-Id: I87fd048c19ca3c30cb6a3bbc0b6e366221bf9aad
2022-03-24 05:31:14 +00:00
Jack Wu
c842deb7b2 [automerger skipped] sepolicy: gs101: fix charger_vendor permission denied am: b67138e8ae am: 28efee70de am: d43cfef11c -s ours am: 6abc9f674c -s ours
am skip reason: Merged-In I091dbbca35fb833e59fdbc234d74b90bfe74014c with SHA-1 dcb05d1377 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039623

Change-Id: Ia87df8c47b934dd1aebb551ed7da27dd0c896d54
2022-03-24 05:31:12 +00:00
Stephane Lee
282c77a88f Fix off-mode (charger) sepolicy for the health interface am: 84a06151a3 am: c35357078d am: 620e6038e2
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039624

Change-Id: I1da177501cfa887962e7a8133e4b568db9624025
2022-03-24 05:14:06 +00:00
Jack Wu
6abc9f674c [automerger skipped] sepolicy: gs101: fix charger_vendor permission denied am: b67138e8ae am: 28efee70de am: d43cfef11c -s ours
am skip reason: Merged-In I091dbbca35fb833e59fdbc234d74b90bfe74014c with SHA-1 dcb05d1377 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039623

Change-Id: I01702f92f112bd722cfe3852af74aa79bfaaecef
2022-03-24 05:14:05 +00:00
Stephane Lee
620e6038e2 Fix off-mode (charger) sepolicy for the health interface am: 84a06151a3 am: c35357078d
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039624

Change-Id: Ia59f2cdb6b014a802edad3b76f135a69c21002e9
2022-03-24 04:37:58 +00:00
Jack Wu
d43cfef11c sepolicy: gs101: fix charger_vendor permission denied am: b67138e8ae am: 28efee70de
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039623

Change-Id: I1802a01e50797f41a63ba0073f5f032a8d49939b
2022-03-24 04:37:57 +00:00
Stephane Lee
c35357078d Fix off-mode (charger) sepolicy for the health interface am: 84a06151a3
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039624

Change-Id: Ia2c26cc56c09a535aae2d7b4e8e46ff77b79616e
2022-03-24 04:06:54 +00:00
Jack Wu
28efee70de sepolicy: gs101: fix charger_vendor permission denied am: b67138e8ae
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2039623

Change-Id: I70510310fad5fb164c3a420685fbad7c1e1e1e71
2022-03-24 04:06:53 +00:00
Stephane Lee
84a06151a3 Fix off-mode (charger) sepolicy for the health interface
Bug: 223537397
Test: Ensure that there are no selinux errors for sysfs_batteryinfo in
   off-mode charging

Change-Id: I46fa1b7552eb0655d0545538142131465a337f23
Merged-In: I46fa1b7552eb0655d0545538142131465a337f23
2022-03-23 11:30:31 -07:00
Stephane Lee
f7f5f8ab27 Merge "Fix off-mode (charger) sepolicy for the health interface" 2022-03-23 18:29:08 +00:00
Jack Wu
b67138e8ae sepolicy: gs101: fix charger_vendor permission denied
[   27.025458][  T443] type=1400 audit(1644391560.640:11): avc: denied { search } for comm="android.hardwar" name="vendor" dev="tmpfs" ino=2 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=0
[   26.563658][  T447] type=1400 audit(1644397622.588:5): avc: denied { search } for comm="android.hardwar" name="/" dev="sda1" ino=2 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_file:s0 tclass=dir permissive=0
[   27.198144][  T442] type=1400 audit(1644398156.152:5): avc: denied { search } for comm="android.hardwar" name="battery" dev="sda1" ino=12 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=dir permissive=0
[   27.327035][  T443] type=1400 audit(1644398785.276:5): avc: denied { read } for comm="android.hardwar" name="defender_active_time" dev="sda1" ino=17 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=file permissive=0
[   27.355009][  T443] type=1400 audit(1644398785.276:6): avc: denied { write } for comm="android.hardwar" name="defender_charger_time" dev="sda1" ino=16 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=file permissive=0
[   26.771705][  T444] type=1400 audit(1644379988.804:4): avc: denied { read } for comm="android.hardwar" name="specification_version" dev="sysfs" ino=56257 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0
[   27.898684][  T445] type=1400 audit(1644392754.928:8): avc: denied { read } for comm="android.hardwar" name="thermal_zone6" dev="sysfs" ino=15901 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=lnk_file permissive=0
[   29.180076][  T447] type=1400 audit(1644397625.200:9): avc: denied { write } for comm="android.hardwar" name="mode" dev="sysfs" ino=15915 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=0
[   27.043845][  T444] type=1400 audit(1644379988.808:9): avc: denied { search } for comm="android.hardwar" name="thermal" dev="tmpfs" ino=899 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:thermal_link_device:s0 tclass=dir permissive=0
[   27.064916][  T444] type=1400 audit(1644379988.808:10): avc: denied { read } for comm="android.hardwar" name="u:object_r:vendor_battery_defender_prop:s0" dev="tmpfs" ino=306 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=file permissive=0
[   27.356266][  T444] type=1107 audit(1644404450.376:4): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.battery.defender.state pid=457 uid=1000 gid=1000 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=property_service permissive=0'

Bug: 218485039
Test: manually test, no avc: denied
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I091dbbca35fb833e59fdbc234d74b90bfe74014c
Merged-In: I091dbbca35fb833e59fdbc234d74b90bfe74014c
2022-03-23 11:27:45 -07:00
Roshan Pius
d0c2478e05 gs-policy: Remove obsolete uwb vendor service rules am: 3ffd8035a2 am: 45e114114e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17293462

Change-Id: Ie30676f2f92e4fde61b7e63f4ccae9809e69f8ae
2022-03-22 03:52:31 +00:00
Roshan Pius
45e114114e gs-policy: Remove obsolete uwb vendor service rules am: 3ffd8035a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17293462

Change-Id: I0bc3127f0b0e8acd79a4ab244a585e1459dbf88c
2022-03-22 03:30:22 +00:00
Roshan Pius
5b2354536d gs-policy: Remove obsolete uwb vendor service rules am: 3ffd8035a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17293462

Change-Id: Ic25a57e37eee40138bb546bfe5fbed701d834c0a
2022-03-22 03:30:14 +00:00
Stephane Lee
117be90229 Fix off-mode (charger) sepolicy for the health interface
Bug: 223537397
Test: Ensure that there are no selinux errors for sysfs_batteryinfo in
   off-mode charging

Change-Id: I46fa1b7552eb0655d0545538142131465a337f23
2022-03-21 17:42:17 -07:00
Roshan Pius
3ffd8035a2 gs-policy: Remove obsolete uwb vendor service rules
This service no longer exists in the UCI stack.

Bug: 186585880
Test: Manual UWB tests
Change-Id: I198a20f85cb24f9e38035fa037609d6541640d9e
2022-03-21 09:19:16 -07:00
Armelle Laine
64c22491ca [automerger skipped] Merge changes from topic "trusty-dsu_fix-sc-qpr3" into sc-v2-dev-plus-aosp am: 92707e72ab -s ours am: fcc7d1dbae -s ours am: 516314f812 -s ours
am skip reason: Merged-In I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b with SHA-1 b69ac35ff0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16727208

Change-Id: Ifb500eea4d2fa4c461968761990cab1085cd3fba
2022-03-18 05:16:14 +00:00
Stephen Crane
377bc556bb [automerger skipped] [automerged blank] Allow TEE storageproxyd permissions needed for DSU handling 2p: b9beafc9fa am: e48d11c26c -s ours am: 8a0cbfea6d -s ours am: 8b66c6449d -s ours
am skip reason: Merged-In I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b with SHA-1 b69ac35ff0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16727208

Change-Id: Ic4a04ea4a6c26c2ad0f10782266498c31a79fb73
2022-03-18 05:16:13 +00:00
Armelle Laine
516314f812 [automerger skipped] Merge changes from topic "trusty-dsu_fix-sc-qpr3" into sc-v2-dev-plus-aosp am: 92707e72ab -s ours am: fcc7d1dbae -s ours
am skip reason: Merged-In I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b with SHA-1 b69ac35ff0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16727208

Change-Id: If1138137f6e515d104c53d43b482044f402bcd72
2022-03-18 04:53:44 +00:00
Armelle Laine
11c508437e [automerger skipped] Merge changes from topic "trusty-dsu_fix-sc-qpr3" into sc-v2-dev-plus-aosp am: 92707e72ab -s ours am: fcc7d1dbae -s ours
am skip reason: Merged-In I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b with SHA-1 b69ac35ff0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16727208

Change-Id: I2719145ab55c0cad93770a4f126f57cb1686fc80
2022-03-18 04:53:43 +00:00
Stephen Crane
8b66c6449d [automerger skipped] [automerged blank] Allow TEE storageproxyd permissions needed for DSU handling 2p: b9beafc9fa am: e48d11c26c -s ours am: 8a0cbfea6d -s ours
am skip reason: Merged-In I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b with SHA-1 b69ac35ff0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16727208

Change-Id: I3b0cb7e1e6081ed09bda6f16e92807d5bf4d261a
2022-03-18 04:53:43 +00:00
Stephen Crane
2447cb94a3 [automerger skipped] [automerged blank] Allow TEE storageproxyd permissions needed for DSU handling 2p: b9beafc9fa am: e48d11c26c -s ours am: 8a0cbfea6d -s ours
am skip reason: Merged-In I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b with SHA-1 b69ac35ff0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16727208

Change-Id: I2b7c2f87f479e9ac36c1ed865a1c2084b560ad6f
2022-03-18 04:53:41 +00:00
Armelle Laine
fcc7d1dbae [automerger skipped] Merge changes from topic "trusty-dsu_fix-sc-qpr3" into sc-v2-dev-plus-aosp am: 92707e72ab -s ours
am skip reason: Merged-In I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b with SHA-1 b69ac35ff0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16727208

Change-Id: I485b582f2dd3df1d6c9f25e3df31094e82e8bfc0
2022-03-18 04:31:42 +00:00
Stephen Crane
8a0cbfea6d [automerger skipped] [automerged blank] Allow TEE storageproxyd permissions needed for DSU handling 2p: b9beafc9fa am: e48d11c26c -s ours
am skip reason: Merged-In I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b with SHA-1 b69ac35ff0 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16727208

Change-Id: I4e9ded6165f8e1db1aed145f8156347de70d5e73
2022-03-18 04:31:40 +00:00
Armelle Laine
92707e72ab Merge changes from topic "trusty-dsu_fix-sc-qpr3" into sc-v2-dev-plus-aosp
* changes:
  [automerged blank] Allow TEE storageproxyd permissions needed for DSU handling 2p: b9beafc9fa
  Allow TEE storageproxyd permissions needed for DSU handling
2022-03-18 04:14:36 +00:00
Darren Hsu
d4d02b4cfe sepolicy: reorder genfs labels for system suspend am: 2018f942a7 am: 83e88065fc am: 186f2306d7 am: 61e944b081 am: f714240360
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2026063

Change-Id: I4a900092602a6cb10fd4b5362a4a8811b13f4a3a
2022-03-17 06:31:55 +00:00
Darren Hsu
a7016645ef sepolicy: reorder genfs labels for system suspend am: 2018f942a7 am: 83e88065fc am: 186f2306d7 am: 61e944b081
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2026063

Change-Id: I0b7acc879c1a2dfc824ea549e74852e076d385cc
2022-03-17 05:27:43 +00:00
Darren Hsu
f714240360 sepolicy: reorder genfs labels for system suspend am: 2018f942a7 am: 83e88065fc am: 186f2306d7 am: 61e944b081
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2026063

Change-Id: I1a0978f7f2b47135559e961e3f3a80d6c46c9d7b
2022-03-17 05:27:32 +00:00
Darren Hsu
61e944b081 sepolicy: reorder genfs labels for system suspend am: 2018f942a7 am: 83e88065fc am: 186f2306d7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2026063

Change-Id: Ieebbc5aafe7ddabe3560310dd599573d0ced3caf
2022-03-17 04:54:29 +00:00
Darren Hsu
186f2306d7 sepolicy: reorder genfs labels for system suspend am: 2018f942a7 am: 83e88065fc
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2026063

Change-Id: I732b1d982c15846e2b9ae1365894b4d0ea0f424f
2022-03-17 03:55:26 +00:00
Darren Hsu
83e88065fc sepolicy: reorder genfs labels for system suspend am: 2018f942a7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2026063

Change-Id: Ic1a74c930cc6ade12dc6ea7a42f9ed347a491c95
2022-03-17 02:49:16 +00:00
samou
753edef5f6 Move ODPM file rule to pixel sepolicy
Bug: 213257759
Change-Id: Ic9a89950a609efe5434dfedc0aa023312c4192d9
2022-03-16 06:05:52 +00:00
Darren Hsu
2018f942a7 sepolicy: reorder genfs labels for system suspend
Bug: 223683748
Test: check bugreport without relevant avc denials
Change-Id: I66ede69d94bb3cb1a446e1cd5f3250b6f9b7f7e9
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-03-15 11:48:39 +08:00
TreeHugger Robot
c019372a17 Merge "sepolicy: reorder genfs labels for system suspend" into tm-dev am: e4dfe23d99 am: 05e3349229
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17146134

Change-Id: Ia739df193845bb2c78b5a1bebb4ea514833f7996
2022-03-15 03:40:34 +00:00
TreeHugger Robot
05e3349229 Merge "sepolicy: reorder genfs labels for system suspend" into tm-dev am: e4dfe23d99
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17146134

Change-Id: I0db3bd3fa8aab0b09a58c0e33d2e0e37961e7fe9
2022-03-15 03:16:17 +00:00
TreeHugger Robot
4379ef3fdb Merge "sepolicy: reorder genfs labels for system suspend" into tm-dev am: e4dfe23d99
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17146134

Change-Id: I0b6de431f3f0905b5304d49242722d87c2b1d61a
2022-03-15 03:15:11 +00:00
TreeHugger Robot
e4dfe23d99 Merge "sepolicy: reorder genfs labels for system suspend" into tm-dev 2022-03-15 02:52:34 +00:00
TreeHugger Robot
c68e3856e1 Merge "gs-sepolicy(uwb): Changes for new UCI stack" into tm-dev am: 85f293ab62 am: 8c1cd23ce7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16945227

Change-Id: Icc52294ed920876657c7a869282ecd13ef6837bd
2022-03-14 17:03:52 +00:00
TreeHugger Robot
8c1cd23ce7 Merge "gs-sepolicy(uwb): Changes for new UCI stack" into tm-dev am: 85f293ab62
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16945227

Change-Id: Icbefda5f6814c27ede2d7da8e761b52dc5d43db9
2022-03-14 16:40:38 +00:00
TreeHugger Robot
ce5590c9c1 Merge "gs-sepolicy(uwb): Changes for new UCI stack" into tm-dev am: 85f293ab62
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16945227

Change-Id: I0a32fa5a6ecce07104755a689fb15e041a0d2d39
2022-03-14 16:40:35 +00:00
TreeHugger Robot
85f293ab62 Merge "gs-sepolicy(uwb): Changes for new UCI stack" into tm-dev 2022-03-14 16:09:09 +00:00
TeYuan Wang
3ddc4c7bf8 Move libperfmgr thermal rules to pixel-sepolicy am: f7aba10674 am: fe826745b3 am: faec59da79 am: 6052118e99 am: 812fd9c717
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2020535

Change-Id: If4ea1e049cb1abaa5bc3e291f9c7851fced2451b
2022-03-14 07:06:06 +00:00
TeYuan Wang
b264420d23 Move libperfmgr thermal rules to pixel-sepolicy am: f7aba10674 am: fe826745b3 am: faec59da79 am: 6052118e99
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2020535

Change-Id: Ie4e7b40564d2cd1d48c987a3f6fe5f7bceeba96e
2022-03-14 06:45:37 +00:00
TeYuan Wang
812fd9c717 Move libperfmgr thermal rules to pixel-sepolicy am: f7aba10674 am: fe826745b3 am: faec59da79 am: 6052118e99
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2020535

Change-Id: Ia3e15c8a4af73167f65c5933b14fdecf06b64b45
2022-03-14 06:44:14 +00:00
TeYuan Wang
6052118e99 Move libperfmgr thermal rules to pixel-sepolicy am: f7aba10674 am: fe826745b3 am: faec59da79
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2020535

Change-Id: I44c643184de6294c407c9fc1670b0631faac3e45
2022-03-14 06:22:59 +00:00
TeYuan Wang
faec59da79 Move libperfmgr thermal rules to pixel-sepolicy am: f7aba10674 am: fe826745b3
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2020535

Change-Id: I919c688388bcd8cc320068f6139432b58b3f0ea4
2022-03-14 06:02:51 +00:00
TeYuan Wang
fe826745b3 Move libperfmgr thermal rules to pixel-sepolicy am: f7aba10674
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2020535

Change-Id: Ie191a767c8b3450df75a37e36deebf5f20242575
2022-03-14 05:40:21 +00:00
Kris Chen
bd8bdfb845 Allow hal_fingerprint_default to access fwk_sensor_hwservice am: 9b54bf3665 am: 41ecb11342
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17149561

Change-Id: I5218f78ad72eb5fee7674910e18ff38c51fa543c
2022-03-14 03:11:10 +00:00
Kris Chen
41ecb11342 Allow hal_fingerprint_default to access fwk_sensor_hwservice am: 9b54bf3665
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17149561

Change-Id: I61c3a00cd9e0ce8b8a6adfbf0310459afe9112df
2022-03-14 02:59:35 +00:00
Kris Chen
a79e5a21d1 Allow hal_fingerprint_default to access fwk_sensor_hwservice am: 9b54bf3665
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17149561

Change-Id: I3443e7e27508ae8fc5cc119ce1e722fdc36c2818
2022-03-14 02:59:29 +00:00
eddielan
17f6a0a1ba sepolicy: Add policy for persist.vendor.udfps
Bug: 222175797
Test: Build Pass
Change-Id: I978325adb5cf25a590b307a38ce2deac4034e656
2022-03-14 10:57:53 +08:00
TeYuan Wang
f7aba10674 Move libperfmgr thermal rules to pixel-sepolicy
Bug: 213257759
Bug: 188579571
Test: build
Change-Id: I9893d53055594bfb4e4dba3d68b53f0fe132617d
2022-03-10 21:28:33 +08:00
Kris Chen
9b54bf3665 Allow hal_fingerprint_default to access fwk_sensor_hwservice
Fix the following avc denial:
avc:  denied  { find } for interface=android.frameworks.sensorservice::ISensorManager sid=u:r:hal_fingerprint_default:s0 pid=1258 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:fwk_sensor_hwservice:s0 tclass=hwservice_manager permissive=0

Bug: 197789721
Test: build and test fingerprint on device.
Change-Id: I7494f28e69e5a1b660dc7fbaa528b1088048723b
2022-03-10 16:53:22 +08:00
TreeHugger Robot
d6dc27040e Merge "Update avc error on ROM 8276520" into tm-dev am: a1f73d0faa am: e2d47ba125
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17131103

Change-Id: I54ac7763edfcfa31912694e524e626caa2cdbb6c
2022-03-10 03:27:29 +00:00
TreeHugger Robot
85f4543496 Merge "Update avc error on ROM 8276520" into tm-dev am: a1f73d0faa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17131103

Change-Id: I255ba3211db9c8422e041e65f36db7141379b724
2022-03-10 03:00:41 +00:00
TreeHugger Robot
e2d47ba125 Merge "Update avc error on ROM 8276520" into tm-dev am: a1f73d0faa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17131103

Change-Id: Ie0ebdab2e78f4dfd8612b2c5a346fbc2328a22ae
2022-03-10 03:00:35 +00:00
TreeHugger Robot
a1f73d0faa Merge "Update avc error on ROM 8276520" into tm-dev 2022-03-10 02:40:10 +00:00
Darren Hsu
44fcba7efd sepolicy: reorder genfs labels for system suspend
Bug: 223683748
Test: check bugreport without relevant avc denials
Change-Id: I66ede69d94bb3cb1a446e1cd5f3250b6f9b7f7e9
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-03-10 09:19:31 +08:00
Michael Eastwood
58b95e5278 Merge "Update SELinux policy to allow camera HAL to send Perfetto trace packets" am: 82a110ba3b am: a45d075fd0 am: ada03db5e0 am: ecb7a69d78 am: bcf33b6879
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2016899

Change-Id: Ife60bc844b1e6be460dcd6140ef9092ed43325b6
2022-03-09 19:53:07 +00:00
Michael Eastwood
bcf33b6879 Merge "Update SELinux policy to allow camera HAL to send Perfetto trace packets" am: 82a110ba3b am: a45d075fd0 am: ada03db5e0 am: ecb7a69d78
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2016899

Change-Id: I278288a3290cb78ffcfefaf2fd7eb6a5d67a1a13
2022-03-09 19:31:05 +00:00
Michael Eastwood
d947ec661c Merge "Update SELinux policy to allow camera HAL to send Perfetto trace packets" am: 82a110ba3b am: a45d075fd0 am: ada03db5e0 am: ecb7a69d78
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2016899

Change-Id: I9df6016d123bc1f71601d3e518e97ab1fa205c10
2022-03-09 19:30:27 +00:00
Michael Eastwood
ecb7a69d78 Merge "Update SELinux policy to allow camera HAL to send Perfetto trace packets" am: 82a110ba3b am: a45d075fd0 am: ada03db5e0
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2016899

Change-Id: Ic6e51b5ea87b5d682f406a9711d39d80c4b29a9c
2022-03-09 18:55:19 +00:00
Michael Eastwood
ada03db5e0 Merge "Update SELinux policy to allow camera HAL to send Perfetto trace packets" am: 82a110ba3b am: a45d075fd0
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2016899

Change-Id: I2b73c3f4576a4f42f76afbf7b8e75fd3be838107
2022-03-09 18:32:59 +00:00
Michael Eastwood
a45d075fd0 Merge "Update SELinux policy to allow camera HAL to send Perfetto trace packets" am: 82a110ba3b
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2016899

Change-Id: I55cfbec1df5a5b3952e02875860d25db44b64b98
2022-03-09 18:00:28 +00:00
Michael Eastwood
82a110ba3b Merge "Update SELinux policy to allow camera HAL to send Perfetto trace packets" 2022-03-09 17:31:28 +00:00
Xin Li
b8f4b3d29c [automerger skipped] Merge Android 12L am: 22c3ab8b6b -s ours am: 594011b90b -s ours am: 0e86159889 -s ours am: 6bc47cde6f -s ours am: a78738e763 -s ours
am skip reason: Merged-In I7b9186af0cb135241e23504fa9d6f7c3d6718c7c with SHA-1 22f2ffcbee is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2012332

Change-Id: I01d9d28f8f24a01d95b4816428ec961487489e6b
2022-03-09 12:06:39 +00:00
Xin Li
d299c8c1b6 [automerger skipped] Merge Android 12L am: 22c3ab8b6b -s ours am: 594011b90b -s ours am: 0e86159889 -s ours am: 6bc47cde6f -s ours
am skip reason: Merged-In I7b9186af0cb135241e23504fa9d6f7c3d6718c7c with SHA-1 22f2ffcbee is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2012332

Change-Id: Ief16a611fa732ecc93b9810bcf6e349978d8ebe7
2022-03-09 11:36:48 +00:00
Xin Li
a78738e763 [automerger skipped] Merge Android 12L am: 22c3ab8b6b -s ours am: 594011b90b -s ours am: 0e86159889 -s ours am: 6bc47cde6f -s ours
am skip reason: Merged-In I7b9186af0cb135241e23504fa9d6f7c3d6718c7c with SHA-1 22f2ffcbee is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2012332

Change-Id: I11d278c39c1961aeb00f2f6d67c60bcf6a627e6b
2022-03-09 11:36:34 +00:00
Xin Li
6bc47cde6f [automerger skipped] Merge Android 12L am: 22c3ab8b6b -s ours am: 594011b90b -s ours am: 0e86159889 -s ours
am skip reason: Merged-In I7b9186af0cb135241e23504fa9d6f7c3d6718c7c with SHA-1 22f2ffcbee is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2012332

Change-Id: I53a128252845f7a2403302749aae2e6e43bce8bd
2022-03-09 10:02:38 +00:00
sukiliu
037f9cda4e Update avc error on ROM 8276520
Bug: 223502652
Bug: 223330933
Test: PtsSELinuxTestCases
Change-Id: Ib8c14c4928410ee5ed4626e95e2882b89341ee9a
2022-03-09 14:16:33 +08:00
Darren Hsu
28feed2df5 sepolicy: fix VTS failure for SuspendSepolicyTests am: c3d3c574f4 am: f0805e42df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17118111

Change-Id: I6ddf4ad2f2016def7258fcc12265243f3658d978
2022-03-09 04:15:34 +00:00
Darren Hsu
f0805e42df sepolicy: fix VTS failure for SuspendSepolicyTests am: c3d3c574f4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17118111

Change-Id: I405782f527555e9a965f858048dc44517fb14007
2022-03-09 03:52:38 +00:00
Darren Hsu
a26d7c6c2f sepolicy: fix VTS failure for SuspendSepolicyTests am: c3d3c574f4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17118111

Change-Id: I318f81f0feec7e3894460156c93df63fdcb94f2b
2022-03-09 03:52:14 +00:00
Michael Eastwood
f648f3c989 Update SELinux policy to allow camera HAL to send Perfetto trace packets
Example denials:

03-04 04:25:37.524   823   823 I TracingMuxer: type=1400 audit(0.0:31): avc: denied { use } for path=2F6D656D66643A706572666574746F5F73686D656D202864656C6574656429 dev="tmpfs" ino=20229 scontext=u:r:hal_camera_default:s0 tcontext=u:r:tr
aced:s0 tclass=fd permissive=1
03-04 04:25:37.524   823   823 I TracingMuxer: type=1400 audit(0.0:32): avc: denied { read write } for path=2F6D656D66643A706572666574746F5F73686D656D202864656C6574656429 dev="tmpfs" ino=20229 scontext=u:r:hal_camera_default:s0 tcontext
=u:object_r:traced_tmpfs:s0 tclass=file permissive=1
03-04 04:25:37.524   823   823 I TracingMuxer: type=1400 audit(0.0:33): avc: denied { getattr } for path=2F6D656D66643A706572666574746F5F73686D656D202864656C6574656429 dev="tmpfs" ino=20229 scontext=u:r:hal_camera_default:s0 tcontext=u:
object_r:traced_tmpfs:s0 tclass=file permissive=1
03-04 04:25:37.524   823   823 I TracingMuxer: type=1400 audit(0.0:34): avc: denied { map } for path=2F6D656D66643A706572666574746F5F73686D656D202864656C6574656429 dev="tmpfs" ino=20229 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:traced_tmpfs:s0 tclass=file permissive=1

Bug: 222684359
Test: Build and push new SELinux policy. Verify that trace packets are received by Perfetto.
Change-Id: I0180c6bccf8cb65f444b8fb687ab48422c211bac
2022-03-08 13:54:34 -08:00
Darren Hsu
c3d3c574f4 sepolicy: fix VTS failure for SuspendSepolicyTests
Label the common parent wakeup path instead of each
individual wakeup source to avoid bloating the genfs
contexts.

Bug: 221174227
Test: run vts -m SuspendSepolicyTests
Change-Id: I83a074840198aba323805fd455ee78a0e57174ac
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-03-08 20:57:42 +08:00
Xin Li
0e86159889 [automerger skipped] Merge Android 12L am: 22c3ab8b6b -s ours am: 594011b90b -s ours
am skip reason: Merged-In I7b9186af0cb135241e23504fa9d6f7c3d6718c7c with SHA-1 22f2ffcbee is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2012332

Change-Id: If0e4880aa30ddfcc89e252de3f041da19401d4bc
2022-03-08 11:04:07 +00:00
Xin Li
594011b90b [automerger skipped] Merge Android 12L am: 22c3ab8b6b -s ours
am skip reason: Merged-In I7b9186af0cb135241e23504fa9d6f7c3d6718c7c with SHA-1 22f2ffcbee is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2012332

Change-Id: Ic29497624866c936ddf7a7f34f9539de55d73eb9
2022-03-08 10:19:17 +00:00
Xin Li
22c3ab8b6b Merge Android 12L
Bug: 222710654
Merged-In: I7b9186af0cb135241e23504fa9d6f7c3d6718c7c
Change-Id: I60cda8853fd8575beb8617025479d08ccf816fbb
2022-03-08 00:15:28 +00:00
Roshan Pius
34c5b9b239 gs-sepolicy(uwb): Changes for new UCI stack
1. Rename uwb vendor app.
2. Rename uwb vendor HAL binary name & service name.
3. Allow vendor HAL to host the AOSP UWB HAL service.
4. Allow NFC HAL to access uwb calibration files.

Bug: 186585880
Test: Manual Tests
Change-Id: I2c7c2466f42317d643634e24b1efb1855e673d09
2022-03-06 18:15:16 -08:00
Tri Vo
da64016221 Merge "Don't audit storageproxyd unlabeled access" am: fbf92e2ada am: 22f2ffcbee am: a5ccc7efa8 am: 56b17a34c8 am: ece657656a
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2007441

Change-Id: I4faaa95f8a3c8531470ed81f11c8b39ca558b23f
2022-03-04 19:59:13 +00:00
Tri Vo
adfd900367 Merge "Don't audit storageproxyd unlabeled access" am: fbf92e2ada am: 22f2ffcbee am: a5ccc7efa8 am: 56b17a34c8
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2007441

Change-Id: Ifbf1caca3b35aa80897b7555000ed8a5b82a1a2e
2022-03-04 19:26:55 +00:00
Tri Vo
ece657656a Merge "Don't audit storageproxyd unlabeled access" am: fbf92e2ada am: 22f2ffcbee am: a5ccc7efa8 am: 56b17a34c8
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2007441

Change-Id: I5829427d16236a1652301713f5a1bb4dc76d1420
2022-03-04 19:26:20 +00:00
Tri Vo
56b17a34c8 Merge "Don't audit storageproxyd unlabeled access" am: fbf92e2ada am: 22f2ffcbee am: a5ccc7efa8
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2007441

Change-Id: I58998bc0820db2eeb6f2362a604aaff81159594e
2022-03-04 18:50:56 +00:00
Tri Vo
a5ccc7efa8 Merge "Don't audit storageproxyd unlabeled access" am: fbf92e2ada am: 22f2ffcbee
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2007441

Change-Id: Ie2af054a900f32cbde1352ba9f708e163f76d86c
2022-03-04 18:29:27 +00:00
Tri Vo
22f2ffcbee Merge "Don't audit storageproxyd unlabeled access" am: fbf92e2ada
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2007441

Change-Id: I7b9186af0cb135241e23504fa9d6f7c3d6718c7c
2022-03-04 18:06:53 +00:00
Tri Vo
fbf92e2ada Merge "Don't audit storageproxyd unlabeled access" 2022-03-04 17:45:37 +00:00
Midas Chien
7dea42d711 [automerger skipped] [Do Not Merge] Allow composer to read panel_idle_handle_exit sysfs node am: 0e1e0e2830 -s ours am: b637545191 -s ours am: 9285045f0b -s ours am: 5e5133e7f6 -s ours am: 8b1611fbdc -s ours
am skip reason: subject contains skip directive

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2009176

Change-Id: Id5d23953f719aa78c8a7f1761a9bb249e682d02b
2022-03-04 13:54:27 +00:00
Midas Chien
8b1611fbdc [automerger skipped] [Do Not Merge] Allow composer to read panel_idle_handle_exit sysfs node am: 0e1e0e2830 -s ours am: b637545191 -s ours am: 9285045f0b -s ours am: 5e5133e7f6 -s ours
am skip reason: subject contains skip directive

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2009176

Change-Id: Ie922a17aa95c184a762bb6004982d11c0a39f888
2022-03-04 13:32:08 +00:00
Midas Chien
8c32b2ae3f [automerger skipped] [Do Not Merge] Allow composer to read panel_idle_handle_exit sysfs node am: 0e1e0e2830 -s ours am: b637545191 -s ours am: 9285045f0b -s ours am: 5e5133e7f6 -s ours
am skip reason: subject contains skip directive

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2009176

Change-Id: I8a7bcd3f93b1a8d9757302558859642a57e624d6
2022-03-04 13:31:58 +00:00
Midas Chien
5e5133e7f6 [automerger skipped] [Do Not Merge] Allow composer to read panel_idle_handle_exit sysfs node am: 0e1e0e2830 -s ours am: b637545191 -s ours am: 9285045f0b -s ours
am skip reason: subject contains skip directive

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2009176

Change-Id: I29262cf0b26426b83493008aa2e569548e2fa436
2022-03-04 13:10:39 +00:00
Midas Chien
9285045f0b [automerger skipped] [Do Not Merge] Allow composer to read panel_idle_handle_exit sysfs node am: 0e1e0e2830 -s ours am: b637545191 -s ours
am skip reason: subject contains skip directive

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2009176

Change-Id: Iaf03b02cd8feadc0da6b1f7cb4d0d25f47907f39
2022-03-04 12:50:47 +00:00
Midas Chien
b637545191 [automerger skipped] [Do Not Merge] Allow composer to read panel_idle_handle_exit sysfs node am: 0e1e0e2830 -s ours
am skip reason: subject contains skip directive

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2009176

Change-Id: I5771c4702d7e76db359bba65f059f913d69d774f
2022-03-04 12:29:41 +00:00
Midas Chien
0e1e0e2830 [Do Not Merge] Allow composer to read panel_idle_handle_exit sysfs node
Change panel_idle_exit_handle selinux type to sysfs_display to allow
composer to access it.

Bug: 202182467
Test: ls -Z to check selinux type
Test: composer can access it in enforce mode
Merged-In: I5ca811f9500dc452fe6832dd772376da51f675a8
Change-Id: I5ca811f9500dc452fe6832dd772376da51f675a8
2022-03-04 10:48:08 +00:00
Midas Chien
77aa7d778e Merge "Allow composer to read panel_idle_handle_exit sysfs node" into tm-dev am: 08c3646fc1 am: 2aef601024
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17005478

Change-Id: Id81b8895f498599251947e6f32dcce2ab15214e3
2022-03-04 07:45:10 +00:00
Midas Chien
b3e1b0b41f Merge "Allow composer to read panel_idle_handle_exit sysfs node" into tm-dev am: 08c3646fc1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17005478

Change-Id: Ib0315b976910888fbb3e10afc9e47da982fd8058
2022-03-04 07:22:58 +00:00
Midas Chien
2aef601024 Merge "Allow composer to read panel_idle_handle_exit sysfs node" into tm-dev am: 08c3646fc1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17005478

Change-Id: I46a7ce198c316d163fbb3b6dee4d1c5e8edf589e
2022-03-04 07:21:52 +00:00
Midas Chien
08c3646fc1 Merge "Allow composer to read panel_idle_handle_exit sysfs node" into tm-dev 2022-03-04 06:55:05 +00:00
Tri Vo
03fef48542 Don't audit storageproxyd unlabeled access
Test: m sepolicy
Bug: 197502330
Change-Id: I794dac85e475434aaf024027c43c98dde60bee27
2022-03-03 13:12:17 -08:00
TreeHugger Robot
058dabbda9 Merge "Add sepolicy rules for fingerprint hal" into tm-dev am: c865c80379 am: bdc06d1db9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17033478

Change-Id: I4ec676163a69811a1b3a1c750d5b170e810219ee
2022-03-02 03:19:34 +00:00
Robert Lee
7751e41ad2 Fix selinux error for aocd am: e5cf8beff3 am: 2e5b1c4e48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17033481

Change-Id: I5292b87afd5537bb66b5b1ec875606478341d536
2022-03-02 03:19:02 +00:00
TreeHugger Robot
0a8e6fdf61 Merge "Add sepolicy rules for fingerprint hal" into tm-dev am: c865c80379
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17033478

Change-Id: Icb1194793de57e5b709caba326571268403f603d
2022-03-02 02:58:36 +00:00
Robert Lee
c56fcea847 Fix selinux error for aocd am: e5cf8beff3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17033481

Change-Id: Iab67ca429892fa837fb604a37646da0f123abf4c
2022-03-02 02:58:02 +00:00
TreeHugger Robot
bdc06d1db9 Merge "Add sepolicy rules for fingerprint hal" into tm-dev am: c865c80379
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17033478

Change-Id: I13cc04e4616c765209cae2ed2d6f4a99baa78673
2022-03-02 02:57:14 +00:00
Robert Lee
2e5b1c4e48 Fix selinux error for aocd am: e5cf8beff3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17033481

Change-Id: I773cdab996c4dff3d14d736634cfc033bc7b4a1f
2022-03-02 02:56:09 +00:00
TreeHugger Robot
c865c80379 Merge "Add sepolicy rules for fingerprint hal" into tm-dev 2022-03-02 02:40:58 +00:00
Robert Lee
e5cf8beff3 Fix selinux error for aocd
allow write permission to fix following error
auditd  : type=1400 audit(0.0:4): avc: denied { write } for comm="aocd" name="aoc" dev="tmpfs" ino=497 scontext=u:r:aocd:s0 tcontext=u:object_r:aoc_device:s0 tclass=chr_file permissive=0

Bug: 198490099
Test: no avc deny when enable no_ap_restart
Change-Id: Ia72ee36137d78f969c28bf22647443cef45d186a
Signed-off-by: Robert Lee <lerobert@google.com>
2022-03-01 09:13:46 +00:00
Kris Chen
e0c6120237 Add sepolicy rules for fingerprint hal
Fix the following avc denial:
avc: denied { set } for property=vendor.gf.cali.state pid=1152 uid=1000 gid=1000 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:vendor_default_prop:s0 tclass=property_service permissive=0'

Bug: 219372997
Bug: 220263520
Test: No above avc denial in logcat.
Change-Id: I93ace30c67e04bc836bfba050028a1f25af641d5
2022-03-01 15:05:42 +08:00
Midas Chien
acd4220ac9 Allow composer to read panel_idle_handle_exit sysfs node
Change panel_idle_exit_handle selinux type to sysfs_display to allow
composer to access it.

Bug: 202182467
Test: ls -Z to check selinux type
Test: composer can access it in enforce mode
Change-Id: I5ca811f9500dc452fe6832dd772376da51f675a8
2022-02-25 23:07:09 +08:00
Jason Macnak
28a21a48e0 Remove sysfs_gpu type definition
... as it has moved to system/sepolicy.

Bug: b/161819018
Test: presubmit
Change-Id: I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7
Merged-In: I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7
2022-02-24 22:23:41 +00:00
Jason Macnak
56b04c828e Remove sysfs_gpu type definition
... as it has moved to system/sepolicy.

Bug: b/161819018
Test: presubmit
Change-Id: I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7
2022-02-24 22:16:08 +00:00
Edwin Wong
1407c2c46c Merge "whitechapel: sepolicy for Widevine AIDL HAL" into tm-dev am: 6b7fff8497 am: 511fa44942
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16952398

Change-Id: Ia16c7a2038f770433749016f9b848c77b4400cc3
2022-02-23 17:47:34 +00:00
Edwin Wong
511fa44942 Merge "whitechapel: sepolicy for Widevine AIDL HAL" into tm-dev am: 6b7fff8497
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16952398

Change-Id: Ib242c34e2529238d776ec2bfaa3df9d262ae9bbd
2022-02-23 17:18:39 +00:00
Edwin Wong
7fa281bef7 Merge changes from topic "gs101-drm-aidl-tm-dev" into tm-mainline-prod am: 04f5b072fe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16952398

Change-Id: I49312e57c049080aa458630cde2eb0937b7f28f7
2022-02-23 16:50:03 +00:00
Edwin Wong
6b7fff8497 Merge "whitechapel: sepolicy for Widevine AIDL HAL" into tm-dev 2022-02-23 01:08:19 +00:00
Edwin Wong
04f5b072fe Merge changes from topic "gs101-drm-aidl-tm-dev" into tm-mainline-prod
* changes:
  [automerge] whitechapel: sepolicy for Widevine AIDL HAL 2p: cb04f5981f
  whitechapel: sepolicy for Widevine AIDL HAL
2022-02-23 01:08:19 +00:00
Edwin Wong
e5b9a2dd37 Merge changes from topic "gs101-drm-aidl-tm-dev"
* changes:
  [automerge] whitechapel: sepolicy for Widevine AIDL HAL 2p: cb04f5981f 2p: cd2ded60aa
  [automerge] whitechapel: sepolicy for Widevine AIDL HAL 2p: cb04f5981f
  whitechapel: sepolicy for Widevine AIDL HAL
2022-02-23 01:08:19 +00:00
Aaron Tsai
dfd957cf04 [automerger skipped] Fix selinux error for system_app am: 05565c1f14 am: d2d83c8e2d am: 84bacff9ab am: e704af0ed7 am: 4aadbb9b12 -s ours
am skip reason: Merged-In I73d45f3cf1fe0bd918bb4856ce554e81702e4ff9 with SHA-1 05565c1f14 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1992670

Change-Id: I2df36cd58685e606a240a79f401d6fb4d70235db
2022-02-22 03:46:45 +00:00
Aaron Tsai
c308db7b79 Fix selinux error for system_app am: 05565c1f14 am: d2d83c8e2d am: 84bacff9ab am: e704af0ed7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1992670

Change-Id: Ib123b407465af30ad4cabc2520f165651b856e48
2022-02-22 02:50:12 +00:00
Aaron Tsai
4aadbb9b12 Fix selinux error for system_app am: 05565c1f14 am: d2d83c8e2d am: 84bacff9ab am: e704af0ed7
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1992670

Change-Id: If65e0ca5ffae9149ed910919734ab0c295e68b4e
2022-02-22 02:48:51 +00:00
Aaron Tsai
e704af0ed7 Fix selinux error for system_app am: 05565c1f14 am: d2d83c8e2d am: 84bacff9ab
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1992670

Change-Id: I6e91791926ff7d840c7317fbf5d9656338960132
2022-02-22 02:29:22 +00:00
Aaron Tsai
84bacff9ab Fix selinux error for system_app am: 05565c1f14 am: d2d83c8e2d
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1992670

Change-Id: Ibdbeeee937e4c856adfebad71a956a343b820dfa
2022-02-22 01:56:28 +00:00
Aaron Tsai
d2d83c8e2d Fix selinux error for system_app am: 05565c1f14
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1992670

Change-Id: Ia3c6c0aae82c19a5d1c019cce2700c5e64c8bb11
2022-02-22 01:35:41 +00:00
TreeHugger Robot
34d31c907b Merge "[automerge] Temporarily don't audit hal_fingerprint to fix avc denial 2p: 5e2e261148" 2022-02-21 16:17:54 +00:00
Shubham Dubey
7384b16034 [automerge] Temporarily don't audit hal_fingerprint to fix avc denial 2p: 5e2e261148 2p: 207c47f797
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16963324

Change-Id: I07d124191b6dd6e4a29834b1a62122cd787779af
2022-02-21 13:07:41 +00:00
Presubmit Automerger Backend
207c47f797 [automerge] Temporarily don't audit hal_fingerprint to fix avc denial 2p: 5e2e261148
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16963324

Change-Id: I7bec529ed0e22e9f7cee5d3d10312f2ed782082c
2022-02-21 13:07:35 +00:00
Presubmit Automerger Backend
aa76244476 [automerge] Temporarily don't audit hal_fingerprint to fix avc denial 2p: 5e2e261148
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16963324

Change-Id: Ibb2d6ae298945f1d3478a896a2ae796359d3c535
2022-02-21 13:07:35 +00:00
Shubham Dubey
5e2e261148 Temporarily don't audit hal_fingerprint to fix avc denial
Fix: 220263520

Change-Id: Ic06981fdc071c5027e6ccd137c1a2d19b9366c98
2022-02-21 13:07:23 +00:00
Aaron Tsai
05565c1f14 Fix selinux error for system_app
01-26 05:04:53.364   440   440 I auditd  : avc:  denied  { find } for interface=vendor.samsung_slsi.telephony.hardware.radioExternal::IOemSlsiRadioExternal sid=u:r:system_app:s0 pid=3063 scontext=u:r:system_app:s0 tcontext=u:object_r:hal_exynos_rild_hwservice:s0 tclass=hwservice_manager permissive=0

Bug: 216531913
Test: verified with the forrest ROM and error log gone

Change-Id: I73d45f3cf1fe0bd918bb4856ce554e81702e4ff9
Merged-In: I73d45f3cf1fe0bd918bb4856ce554e81702e4ff9
2022-02-21 12:16:45 +08:00
Robert Shih
2427a4eb35 [automerge] whitechapel: sepolicy for Widevine AIDL HAL 2p: cb04f5981f 2p: cd2ded60aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16952398

Bug: 219538389
Change-Id: I1ac033f48b132f61e16d8f55bfaa265ddf9f1dea
2022-02-20 20:39:14 +00:00
Robert Shih
cd2ded60aa [automerge] whitechapel: sepolicy for Widevine AIDL HAL 2p: cb04f5981f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16952398

Bug: 219538389
Change-Id: Ic0d398eb11da8a88e7c2f504a1131bc388008f3c
2022-02-20 20:39:03 +00:00
Robert Shih
cb04f5981f whitechapel: sepolicy for Widevine AIDL HAL
Bug: 219538389
Test: atest GtsMediaTestCases
Change-Id: I431554dcbef014f8235f048ee062a218a2131f9c
2022-02-20 12:35:22 -08:00
Junkyu Kang
1b3242e008 [automerger skipped] Add persist.vendor.gps to sepolicy am: 9244051b35 am: a5b052c132 am: 86d20c2552 -s ours am: 07f17be3f3 -s ours am: 4e4ffaf6bc -s ours
am skip reason: Merged-In I3fdaf564eacec340003eed0b5845a2c08922362c with SHA-1 b9ad182d4a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1989989

Change-Id: I5ba0f0673c4b634ade8f81990812df02f3810b2d
2022-02-18 08:29:19 +00:00
Junkyu Kang
19479f5721 [automerger skipped] Add persist.vendor.gps to sepolicy am: 9244051b35 am: a5b052c132 am: 86d20c2552 -s ours am: 07f17be3f3 -s ours
am skip reason: Merged-In I3fdaf564eacec340003eed0b5845a2c08922362c with SHA-1 b9ad182d4a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1989989

Change-Id: I152a68c9e339e0ac5101f684a4f540c5f4d504c4
2022-02-18 07:58:51 +00:00
Junkyu Kang
4e4ffaf6bc [automerger skipped] Add persist.vendor.gps to sepolicy am: 9244051b35 am: a5b052c132 am: 86d20c2552 -s ours am: 07f17be3f3 -s ours
am skip reason: Merged-In I3fdaf564eacec340003eed0b5845a2c08922362c with SHA-1 b9ad182d4a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1989989

Change-Id: I3c19666a52df166e21dde1d58d77381d0fccd7ce
2022-02-18 07:57:31 +00:00
Junkyu Kang
07f17be3f3 [automerger skipped] Add persist.vendor.gps to sepolicy am: 9244051b35 am: a5b052c132 am: 86d20c2552 -s ours
am skip reason: Merged-In I3fdaf564eacec340003eed0b5845a2c08922362c with SHA-1 b9ad182d4a is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1989989

Change-Id: I6f04e1a3b94eda3ddc3ace332aaebaa0da1e9501
2022-02-18 07:37:40 +00:00
Junkyu Kang
86d20c2552 Add persist.vendor.gps to sepolicy am: 9244051b35 am: a5b052c132
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1989989

Change-Id: I0844fbc02141fc6efa77d0cd47d00fd56a15f3e2
2022-02-18 07:12:19 +00:00
Junkyu Kang
a5b052c132 Add persist.vendor.gps to sepolicy am: 9244051b35
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1989989

Change-Id: Ibb1a3b4cca8fa3549eeef548d0939829413e8af1
2022-02-18 06:50:19 +00:00
TreeHugger Robot
d95da03285 Merge "Add hal_usb_impl permission" 2022-02-17 16:42:12 +00:00
Midas Chien
943cb1278a Merge "Allow composer to read panel_idle sysfs node" 2022-02-17 09:17:44 +00:00
Junkyu Kang
9244051b35 Add persist.vendor.gps to sepolicy
Bug: 196002632
Test: PixelLogger can modify persist.vendor.gps.*
Change-Id: I3fdaf564eacec340003eed0b5845a2c08922362c
Merged-In: I3fdaf564eacec340003eed0b5845a2c08922362c
2022-02-17 08:55:49 +00:00
Midas Chien
32307ac30d Allow composer to read panel_idle sysfs node
Change panel_idle selinux type to sysfs_display to allow composer can
read it.

Bug: 198808492
Bug: 219857957
Test: ls -Z to check selinux type
Test: make sure init(write) and composer(read) can access it
Change-Id: I77ae701a73a047b26b4ebb3c9d482c8cb9220999
2022-02-16 16:28:06 +08:00
Junkyu Kang
26e6d6f2b6 Merge "Add persist.vendor.gps to sepolicy" 2022-02-16 08:16:05 +00:00
Ricky Niu
05eb29e217 Add hal_usb_impl permission
Add hal_usb_impl get below permission

allow hal_usb_impl configfs:dir rw_dir_perms;
allow hal_usb_impl configfs:file create_file_perms;

avc denied
02-16 12:05:19.820   788   788 I android.hardwar: type=1400 audit(0.0:4882): avc: denied { search } for name="/" dev="configfs" ino=13419 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:configfs:s0 tclass=dir permissive=1
02-16 12:05:19.820   788   788 I android.hardwar: type=1400 audit(0.0:4883): avc: denied { write } for name="g1" dev="configfs" ino=38003 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:configfs:s0 tclass=dir permissive=1
02-16 12:05:19.820   788   788 I android.hardwar: type=1400 audit(0.0:4884): avc: denied { add_name } for name="UDC" scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:configfs:s0 tclass=dir permissive=1
02-16 12:05:19.820   788   788 I android.hardwar: type=1400 audit(0.0:4885): avc: denied { create } for name="UDC" scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:configfs:s0 tclass=file permissive=1
02-16 12:05:19.820   788   788 I android.hardwar: type=1400 audit(0.0:4886): avc: denied { write } for name="UDC" dev="configfs" ino=106988 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:configfs:s0 tclass=file permissive=1

Bug: 218997592
Signed-off-by: Ricky Niu <rickyniu@google.com>
Change-Id: I854479cef1a0b8ad518814fb9d20558cf52202e7
2022-02-16 14:27:36 +08:00
Xin Li
78a2d63a45 [automerger skipped] Merge sc-v2-dev-plus-aosp-without-vendor@8084891 am: 81caef24ad -s ours am: 14abf01391 -s ours
am skip reason: Merged-In Icecca9f69ee9b57d43aa2864864951bf66c4905f with SHA-1 ca06222472 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16844142

Change-Id: I1d3f3dc99e04d19b61696677a4bf1fd87a168fe4
2022-02-14 18:21:12 +00:00
Xin Li
14abf01391 [automerger skipped] Merge sc-v2-dev-plus-aosp-without-vendor@8084891 am: 81caef24ad -s ours
am skip reason: Merged-In Icecca9f69ee9b57d43aa2864864951bf66c4905f with SHA-1 ca06222472 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16844142

Change-Id: I12d27f867dd598e669aa86e1bec26c3aafbef4a3
2022-02-14 18:03:48 +00:00
Xin Li
81caef24ad Merge sc-v2-dev-plus-aosp-without-vendor@8084891
Bug: 214455710
Merged-In: Icecca9f69ee9b57d43aa2864864951bf66c4905f
Change-Id: Ibf8d551c16f8f941cfc8072a29ef5c57e8bef170
2022-02-11 07:12:06 +00:00
Ankit Goyal
9e7ecb5fae Merge "Rename vulkan library to be platform agnostic" 2022-02-11 00:52:58 +00:00
Jack Wu
dcb05d1377 sepolicy: gs101: fix charger_vendor permission denied
[   27.025458][  T443] type=1400 audit(1644391560.640:11): avc: denied { search } for comm="android.hardwar" name="vendor" dev="tmpfs" ino=2 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=0
[   26.563658][  T447] type=1400 audit(1644397622.588:5): avc: denied { search } for comm="android.hardwar" name="/" dev="sda1" ino=2 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_file:s0 tclass=dir permissive=0
[   27.198144][  T442] type=1400 audit(1644398156.152:5): avc: denied { search } for comm="android.hardwar" name="battery" dev="sda1" ino=12 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=dir permissive=0
[   27.327035][  T443] type=1400 audit(1644398785.276:5): avc: denied { read } for comm="android.hardwar" name="defender_active_time" dev="sda1" ino=17 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=file permissive=0
[   27.355009][  T443] type=1400 audit(1644398785.276:6): avc: denied { write } for comm="android.hardwar" name="defender_charger_time" dev="sda1" ino=16 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=file permissive=0
[   26.771705][  T444] type=1400 audit(1644379988.804:4): avc: denied { read } for comm="android.hardwar" name="specification_version" dev="sysfs" ino=56257 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0
[   27.898684][  T445] type=1400 audit(1644392754.928:8): avc: denied { read } for comm="android.hardwar" name="thermal_zone6" dev="sysfs" ino=15901 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=lnk_file permissive=0
[   29.180076][  T447] type=1400 audit(1644397625.200:9): avc: denied { write } for comm="android.hardwar" name="mode" dev="sysfs" ino=15915 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=0
[   27.043845][  T444] type=1400 audit(1644379988.808:9): avc: denied { search } for comm="android.hardwar" name="thermal" dev="tmpfs" ino=899 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:thermal_link_device:s0 tclass=dir permissive=0
[   27.064916][  T444] type=1400 audit(1644379988.808:10): avc: denied { read } for comm="android.hardwar" name="u:object_r:vendor_battery_defender_prop:s0" dev="tmpfs" ino=306 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=file permissive=0
[   27.356266][  T444] type=1107 audit(1644404450.376:4): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.battery.defender.state pid=457 uid=1000 gid=1000 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=property_service permissive=0'

Bug: 218485039
Test: manually test, no avc: denied
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I091dbbca35fb833e59fdbc234d74b90bfe74014c
2022-02-09 19:16:22 +08:00
TeYuan Wang
2d02b11311 move vendor_thermal_prop rules to pixel-sepolicy am: c292dd65ba am: aeebc898cb am: 912673f8ce am: 9ad50b3952
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960120

Change-Id: I8c46cd1a01c86d453886e246e000d90974cd8806
2022-02-08 12:07:35 +00:00
TeYuan Wang
9ad50b3952 move vendor_thermal_prop rules to pixel-sepolicy am: c292dd65ba am: aeebc898cb am: 912673f8ce
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960120

Change-Id: Iaf7721a2b7a2f4def1a302c71d6f293b371b7661
2022-02-08 11:51:56 +00:00
TeYuan Wang
912673f8ce move vendor_thermal_prop rules to pixel-sepolicy am: c292dd65ba am: aeebc898cb
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960120

Change-Id: Ib49a0a78843456c9b170dd968259e9e1d51e6317
2022-02-08 11:40:52 +00:00
TeYuan Wang
aeebc898cb move vendor_thermal_prop rules to pixel-sepolicy am: c292dd65ba
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960120

Change-Id: Id7692611610e82be8489a0c73e2040d15101e09b
2022-02-08 10:04:37 +00:00
TeYuan Wang
c292dd65ba move vendor_thermal_prop rules to pixel-sepolicy
Bug: 213257759
Test: no denied log after "setprop persist.vendor.disable.thermal.control 1"
Change-Id: Ic150959bc6084034d9afcc70bf446692fbe22d11
2022-02-08 08:10:32 +00:00
Treehugger Robot
91dcb418e2 Merge "genfs_contexts: add paths for unnamed cs40l25a i2c devices" am: 2c1750e537 am: 02e7ad9fb5 am: d70a957518 am: 674aa657fb
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1972966

Change-Id: I796f41b8ac07406a747dde6cd77c9878339e2de7
2022-02-08 02:12:46 +00:00
Treehugger Robot
674aa657fb Merge "genfs_contexts: add paths for unnamed cs40l25a i2c devices" am: 2c1750e537 am: 02e7ad9fb5 am: d70a957518
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1972966

Change-Id: I109245e668ffa38851ced506270ec6d6d1d29fd1
2022-02-08 01:49:40 +00:00
Treehugger Robot
d70a957518 Merge "genfs_contexts: add paths for unnamed cs40l25a i2c devices" am: 2c1750e537 am: 02e7ad9fb5
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1972966

Change-Id: I1da16035bcc4af82e8c671398b76daf7cc8efd28
2022-02-08 01:26:58 +00:00
Treehugger Robot
02e7ad9fb5 Merge "genfs_contexts: add paths for unnamed cs40l25a i2c devices" am: 2c1750e537
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1972966

Change-Id: I2807e116f14305f0e829eec6907db6c817f000c3
2022-02-08 01:08:56 +00:00
Treehugger Robot
2c1750e537 Merge "genfs_contexts: add paths for unnamed cs40l25a i2c devices" 2022-02-08 00:53:08 +00:00
Will McVicker
5a88ee6af1 genfs_contexts: add paths for unnamed cs40l25a i2c devices
In the 5.10 kernel, the i2c paths are named using an out-of-tree patch
[1]. For kernels that don't support that, let's add the unnamed sysfs
paths as well to the selinux policy.

[1] https://android-review.googlesource.com/c/kernel/common/+/1646148

Bug: 217774013
Change-Id: I3a1f279270d22bf82144ce60a08c215308764be3
2022-02-04 11:54:06 -08:00
Marco Nelissen
126a85b4ec Allow logd to read the Trusty log am: 7df1fa1574 am: 983f5f2d96 am: 6072583f8a am: a9004241c2
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1971381

Change-Id: Ie626aaa3652cb8aa47062f32c38d658d5f1ce251
2022-02-04 02:34:39 +00:00
Marco Nelissen
a9004241c2 Allow logd to read the Trusty log am: 7df1fa1574 am: 983f5f2d96 am: 6072583f8a
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1971381

Change-Id: I599f4256ea82b4917eceafeced56aef1214de588
2022-02-04 02:15:43 +00:00
Marco Nelissen
6072583f8a Allow logd to read the Trusty log am: 7df1fa1574 am: 983f5f2d96
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1971381

Change-Id: I3ef810bd7a3ecddf60a0b13f1262abce14a5ece1
2022-02-04 01:59:53 +00:00
Marco Nelissen
983f5f2d96 Allow logd to read the Trusty log am: 7df1fa1574
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1971381

Change-Id: Ic66382bd03df28287fc3817c6f66a414d69637b3
2022-02-04 01:43:42 +00:00
Marco Nelissen
7df1fa1574 Allow logd to read the Trusty log
Bug: 190050919
Test: build
Change-Id: I8a42cd90b1581272f4dafc37d6eb29a98e1fa2e3
2022-02-03 10:37:13 -08:00
Marco Nelissen
64fe59aba5 Merge "Allow logd to read the Trusty log" 2022-02-01 21:37:54 +00:00
Marco Nelissen
a2d6a19bcd Allow logd to read the Trusty log
Bug: 190050919
Test: build
Change-Id: I8a42cd90b1581272f4dafc37d6eb29a98e1fa2e3
2022-02-01 21:37:36 +00:00
Ankit Goyal
ec2a9fb8fc Rename vulkan library to be platform agnostic
Bug: 174232579
Test: Boots to home
Change-Id: I39d633e79896d7196ca7011dd7e017950248e2d8
2022-01-26 20:36:29 -08:00
Stephen Crane
e48d11c26c [automerged blank] Allow TEE storageproxyd permissions needed for DSU handling 2p: b9beafc9fa
Blank merge reason: Change-Id I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b with SHA-1 3f9a11fa0b is in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16727208

Bug: 203719297
Change-Id: I337cd189a9a8ffa6d58f0e1284e09884f8fb86f5
2022-01-26 22:12:29 +00:00
Stephen Crane
b9beafc9fa Allow TEE storageproxyd permissions needed for DSU handling
Allows the vendor TEE access to GSI metadata files (which are publicly
readable). Storageproxyd needs access to this metadata to determine if a
GSI image is currently booted. Also allows the TEE domain to make new
directories in its data path.

Includes the fixed directory creation permission change from
Ifcc3e5f82b68a506ff99469d2f3df6ab1440b42a.

Test: access /metadata/gsi/dsu/booted from storageproxyd
Bug: 203719297
Merged-In: I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b
Merged-In: Ifcc3e5f82b68a506ff99469d2f3df6ab1440b42a
Change-Id: I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b
(cherry picked from commit b69ac35ff0)
2022-01-26 14:00:44 -08:00
Treehugger Robot
2fa102876a Merge "Allow storageproxyd to create directories in its data location" am: 423a9a467b am: 0e4789159c am: 26f020fc70 am: 35d7efaf11
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960462

Change-Id: I1e789353fb2ce05e05f097ab48b2bb2054887efe
2022-01-26 21:49:48 +00:00
Treehugger Robot
35d7efaf11 Merge "Allow storageproxyd to create directories in its data location" am: 423a9a467b am: 0e4789159c am: 26f020fc70
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960462

Change-Id: I91b0e8f0033c4736516f9341a5b6166f14f7894f
2022-01-26 21:26:26 +00:00
Treehugger Robot
26f020fc70 Merge "Allow storageproxyd to create directories in its data location" am: 423a9a467b am: 0e4789159c
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960462

Change-Id: Ie20d1e1d6037a42acba87ab92007657f4f6be83d
2022-01-26 21:07:28 +00:00
Treehugger Robot
0e4789159c Merge "Allow storageproxyd to create directories in its data location" am: 423a9a467b
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1960462

Change-Id: I021cffca681495143a279470e73e194cd5faf635
2022-01-26 20:44:17 +00:00
Treehugger Robot
423a9a467b Merge "Allow storageproxyd to create directories in its data location" 2022-01-26 20:29:27 +00:00
Junkyu Kang
b9ad182d4a Add persist.vendor.gps to sepolicy
Bug: 196002632
Test: PixelLogger can modify persist.vendor.gps.*
Change-Id: I3fdaf564eacec340003eed0b5845a2c08922362c
2022-01-26 08:02:27 +00:00
Stephen Crane
45850f812e Allow storageproxyd to create directories in its data location
storageproxyd already has rw_dir_perms for tee_data_file from
vendor/tee.te in platform. We need create_dir_perms to make the
"alternate/" directory for handling DSU correctly.

Test: m dist, flash, and test DSU
Bug: 203719297
Change-Id: Ifcc3e5f82b68a506ff99469d2f3df6ab1440b42a
2022-01-25 17:54:22 -08:00
TeYuan Wang
9afdb48a85 Move thermal netlink socket sepolicy rules to pixel sepolicy am: 66f1d74123 am: 8cb5857dac am: 0fe33df6c0 am: e925f85169
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1958926

Change-Id: I77230680556c9029ca702c6b73c56119221689e8
2022-01-25 12:22:55 +00:00
TeYuan Wang
e925f85169 Move thermal netlink socket sepolicy rules to pixel sepolicy am: 66f1d74123 am: 8cb5857dac am: 0fe33df6c0
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1958926

Change-Id: I86642d387feb6f99939ffb52341e26ba4faef082
2022-01-25 12:05:36 +00:00
TeYuan Wang
0fe33df6c0 Move thermal netlink socket sepolicy rules to pixel sepolicy am: 66f1d74123 am: 8cb5857dac
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1958926

Change-Id: I08f70c5940c8d7f8d40fb97791b762a935ac5dfa
2022-01-25 11:47:21 +00:00
TeYuan Wang
8cb5857dac Move thermal netlink socket sepolicy rules to pixel sepolicy am: 66f1d74123
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1958926

Change-Id: I5b35f6bb9f7a5ff6ab3abaeac370384125c60abf
2022-01-25 10:39:06 +00:00
TeYuan Wang
66f1d74123 Move thermal netlink socket sepolicy rules to pixel sepolicy
Bug: 213257759
Test: verified genlink function with emul_temp under enforcing mode
Change-Id: I8f5518e5f866ed0813be1e6630c6a9aefaf06e63
2022-01-25 11:59:06 +08:00
linpeter
da28bad8c4 atc context change am: 85d5a9a60a am: af647ece2f am: 39363f3e1a am: 7931384a9d
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1951025

Change-Id: I45ea9c111e1a512ca7efc88e22bb06b888f67464
2022-01-24 05:05:59 +00:00
Treehugger Robot
2bb6f148c1 Merge "Allow TEE storageproxyd permissions needed for DSU handling" am: 05ca30173e am: 3cde81c794 am: 5dd5b0dd29 am: b0ecddbd4e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1923363

Change-Id: Ic0087e6e3aef8a61f2c0b44fd48a8953e66e1868
2022-01-24 05:05:48 +00:00
Kame(TeYuan) Wang
1be9b0a5de Merge "Label TMU as sysfs_thermal am: 32458cdc49 am: a76533f48b am: 27eae23a3f am: 5c9ca15d60" 2022-01-24 05:04:06 +00:00
TreeHugger Robot
b41839bdf3 Merge "camera_hal: allow changing kthread priority" 2022-01-24 03:17:11 +00:00
TeYuan Wang
287cad81ea Label TMU as sysfs_thermal am: 32458cdc49 am: a76533f48b am: 27eae23a3f am: 5c9ca15d60
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1937119

Change-Id: Ie7426fcefe1ba3bf7fd53af5454811724e6d1a90
2022-01-24 02:45:55 +00:00
TreeHugger Robot
8b1083c037 Merge "Merge "Add SOC specific ETM sysfs paths" am: 9ee70a3d7f am: 1a59c0625f am: c581535e5c am: b48e33f29f" 2022-01-22 23:29:11 +00:00
TreeHugger Robot
1b02510fce Merge "Remove redundant rule in system_server.te" 2022-01-22 08:01:05 +00:00
Yabin Cui
826a3540e7 Merge "Add SOC specific ETM sysfs paths" am: 9ee70a3d7f am: 1a59c0625f am: c581535e5c am: b48e33f29f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1943866

Change-Id: I75cfc6940977bf431c9a8fee12497caf865ce3ff
2022-01-22 04:25:25 +00:00
Jasmine Cha
eec7d4b172 audio: add sepolicy for getting thermal event am: 2abecb1519 am: 54e84e9978 am: d57668f3cc am: 0bfc811257
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1944690

Change-Id: I83d62090ef9a78a3bac0c0cdccd550eb56b82dc5
2022-01-22 03:41:43 +00:00
Jasmine Cha
1d2ef17567 [automerger skipped] audio: add permission to request health/sensor data am: a21b7f8800 am: cdcccbbd02 am: 8b5831f247 -s ours am: 6a1155a468 -s ours
am skip reason: Merged-In I8e8a512cfbd6be814c98bac75ff6c0e5db028db2 with SHA-1 27a4afc1a9 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1944689

Change-Id: I6f6bad706ef467b367b2bb5f35c5a57e3b567ba6
2022-01-22 03:41:34 +00:00
David Anderson
91a8be13ab Fix sepolicy denial in update_engine. am: 2fe229352b am: e999b85d07 am: b7b8477e12 am: 9e40c2e027
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1934897

Change-Id: I4594ba648036aebef661cf047f0e2d9502b8bb7e
2022-01-22 03:41:26 +00:00
Matt Buckley
a383da1ca5 Allow HWC to get device_config_surface_flinger_native_boot_prop for adpf flags am: 317166636f am: 8670a782de am: 773506d408 am: 69b607c877
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1934617

Change-Id: I709b6089cb2b8a241c4989e979deb6457cedee17
2022-01-22 03:41:05 +00:00
Joel Galenson
bc2cfc98d1 Include core policy OWNERS. am: b287da183e am: 453006460d am: 047d2a31ed am: 651a6b8631
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1931017

Change-Id: I27340143806bbbbda06dbc6b85d153ad4e0226b8
2022-01-22 03:40:58 +00:00
Xin Li
907d844300 [automerger skipped] Merge Android 12 QPR1 am: 0d05632eb8 -s ours am: 01d5ec6d2a -s ours am: 4f9be8d5b2 -s ours am: 1a9568121f -s ours
am skip reason: Merged-In Ie31b278a639fd5a9e249ca934d543de770fb3217 with SHA-1 856fe3d040 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1921233

Change-Id: Ibc384627f45f9806fdb442fad4bf0d77fc7af634
2022-01-22 03:40:44 +00:00
chenpaul
2206ea75ff [automerger skipped] Remove wifi_logger related sepolicy settings am: 37d4cfa648 am: 9a9bf7fc09 am: ebc02c3437 am: cdab1fefb6 -s ours
am skip reason: skipped by user chenpaul

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1881116

Change-Id: I64902ea498f94e06d12a0342dd0d110f6e01a467
2022-01-22 03:40:02 +00:00
Badhri Jagan Sridharan
7dacac2b34 Merge "android.hardware.usb.IUsb AIDL migration" 2022-01-22 01:20:20 +00:00
Badhri Jagan Sridharan
472abdcd5d Remove redundant rule in system_server.te
hal_client_domain(system_server, hal_usb) covers
the needed rule.

Bug: 200993386
Test: Boot up target to check for selinux denials.
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
Change-Id: If9803a028babb38a6ed0ce5f87a5c7d1eec8e598
2022-01-21 17:08:50 -08:00
Badhri Jagan Sridharan
51735ba3ab android.hardware.usb.IUsb AIDL migration
android.hardware.usb.IUsb is migrated to AIDL and runs in
its own process. android.hardware.usb.gadget.IUsbGadget
is now published in its own exclusive process
(android.hardware.usb.gadget-service). Creating
file_context and moving the selinux linux rules
for IUsbGadget implementation.

Bug: 200993386
Change-Id: Ia8c24610244856490c8271433710afb57d3da157
2022-01-21 17:07:56 -08:00
linpeter
7931384a9d atc context change am: 85d5a9a60a am: af647ece2f am: 39363f3e1a
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1951025

Change-Id: I35e7cfe6ec8a3b959dbae7f2aa7d9cbf4de219dd
2022-01-21 22:47:46 +00:00
Treehugger Robot
b0ecddbd4e Merge "Allow TEE storageproxyd permissions needed for DSU handling" am: 05ca30173e am: 3cde81c794 am: 5dd5b0dd29
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1923363

Change-Id: I0190a5a7017d8cfa34932ecdbe9c85587408af85
2022-01-21 22:47:37 +00:00
TeYuan Wang
5c9ca15d60 Label TMU as sysfs_thermal am: 32458cdc49 am: a76533f48b am: 27eae23a3f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1937119

Change-Id: I78fdf05253972c617a124165a6d880083e7c0310
2022-01-21 22:47:28 +00:00
Yabin Cui
b48e33f29f Merge "Add SOC specific ETM sysfs paths" am: 9ee70a3d7f am: 1a59c0625f am: c581535e5c
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1943866

Change-Id: I391bab4a982ec03d1904d59aa2376a3d3c816c40
2022-01-21 22:47:19 +00:00
Jasmine Cha
0bfc811257 audio: add sepolicy for getting thermal event am: 2abecb1519 am: 54e84e9978 am: d57668f3cc
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1944690

Change-Id: Idb58719a8511be2f750c8e4a11421d147801b57c
2022-01-21 22:47:00 +00:00
Jasmine Cha
6a1155a468 [automerger skipped] audio: add permission to request health/sensor data am: a21b7f8800 am: cdcccbbd02 am: 8b5831f247 -s ours
am skip reason: Merged-In I8e8a512cfbd6be814c98bac75ff6c0e5db028db2 with SHA-1 27a4afc1a9 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1944689

Change-Id: Ib2f5a7ce0376aeedc3c2afb23862ee42e85cb493
2022-01-21 22:46:31 +00:00
David Anderson
9e40c2e027 Fix sepolicy denial in update_engine. am: 2fe229352b am: e999b85d07 am: b7b8477e12
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1934897

Change-Id: I8f97a3527ec13132ddbba7a0981619f55e0e0f9d
2022-01-21 22:46:11 +00:00
Matt Buckley
69b607c877 Allow HWC to get device_config_surface_flinger_native_boot_prop for adpf flags am: 317166636f am: 8670a782de am: 773506d408
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1934617

Change-Id: Ie88713a1f13dc5e90f0bc928dc2312625bcca096
2022-01-21 22:45:33 +00:00
Joel Galenson
651a6b8631 Include core policy OWNERS. am: b287da183e am: 453006460d am: 047d2a31ed
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1931017

Change-Id: I7a1f6fb78088aca3c2c748106f8d4cb424c73c23
2022-01-21 22:45:06 +00:00
Xin Li
1a9568121f [automerger skipped] Merge Android 12 QPR1 am: 0d05632eb8 -s ours am: 01d5ec6d2a -s ours am: 4f9be8d5b2 -s ours
am skip reason: Merged-In Ie31b278a639fd5a9e249ca934d543de770fb3217 with SHA-1 856fe3d040 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1921233

Change-Id: Ic2096a0d1be12d0b8295af1bf852fb5df383c0bb
2022-01-21 22:44:34 +00:00
chenpaul
cdab1fefb6 Remove wifi_logger related sepolicy settings am: 37d4cfa648 am: 9a9bf7fc09 am: ebc02c3437
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1881116

Change-Id: I036388f399ef567dc4eb32d1c4799e58eb8815af
2022-01-21 22:43:56 +00:00
linpeter
39363f3e1a atc context change am: 85d5a9a60a am: af647ece2f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1951025

Change-Id: I3232bbc6eb0672acce9c8a90c603bee69e388a93
2022-01-21 22:30:32 +00:00
Treehugger Robot
5dd5b0dd29 Merge "Allow TEE storageproxyd permissions needed for DSU handling" am: 05ca30173e am: 3cde81c794
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1923363

Change-Id: I5e75aabf2f88f5611f8c4406d7bb81de77d3800f
2022-01-21 22:30:24 +00:00
TeYuan Wang
27eae23a3f Label TMU as sysfs_thermal am: 32458cdc49 am: a76533f48b
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1937119

Change-Id: Ica3d0e3c016616052f18b880cd22e9da8ca1515e
2022-01-21 22:30:16 +00:00
Yabin Cui
c581535e5c Merge "Add SOC specific ETM sysfs paths" am: 9ee70a3d7f am: 1a59c0625f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1943866

Change-Id: If31d085e00b660262575ab11decb61b372597ceb
2022-01-21 22:29:59 +00:00
Jasmine Cha
d57668f3cc audio: add sepolicy for getting thermal event am: 2abecb1519 am: 54e84e9978
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1944690

Change-Id: Iddcd4b760301c761c273d53231147a6c1b0927da
2022-01-21 22:29:29 +00:00
Jasmine Cha
8b5831f247 audio: add permission to request health/sensor data am: a21b7f8800 am: cdcccbbd02
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1944689

Change-Id: I16f8196bfe5e3b49575b936ee6d2376e878aa9be
2022-01-21 22:29:12 +00:00
David Anderson
b7b8477e12 Fix sepolicy denial in update_engine. am: 2fe229352b am: e999b85d07
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1934897

Change-Id: I45ccf375ccb5b97f848a1db62de77271de5c0b86
2022-01-21 22:28:55 +00:00
Matt Buckley
773506d408 Allow HWC to get device_config_surface_flinger_native_boot_prop for adpf flags am: 317166636f am: 8670a782de
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1934617

Change-Id: I2478a1ce77383d66cd7cb677406920b25bf165da
2022-01-21 22:28:26 +00:00
Joel Galenson
047d2a31ed Include core policy OWNERS. am: b287da183e am: 453006460d
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1931017

Change-Id: Ia079ef87912e57d704629f397bf6054a83f394bb
2022-01-21 22:27:53 +00:00
Xin Li
4f9be8d5b2 [automerger skipped] Merge Android 12 QPR1 am: 0d05632eb8 -s ours am: 01d5ec6d2a -s ours
am skip reason: Merged-In Ie31b278a639fd5a9e249ca934d543de770fb3217 with SHA-1 856fe3d040 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1921233

Change-Id: I716fc9fc6a34b69afcdfb0332b3870e19f536f1a
2022-01-21 22:26:43 +00:00
chenpaul
ebc02c3437 Remove wifi_logger related sepolicy settings am: 37d4cfa648 am: 9a9bf7fc09
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1881116

Change-Id: I6402127385b8141c67e44d7f0c8e6d5625fbdc2e
2022-01-21 22:25:47 +00:00
linpeter
af647ece2f atc context change am: 85d5a9a60a
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1951025

Change-Id: I04d30ff685f7ad74d9f5eff43ff360edf7cf0fd3
2022-01-21 22:12:40 +00:00
Treehugger Robot
3cde81c794 Merge "Allow TEE storageproxyd permissions needed for DSU handling" am: 05ca30173e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1923363

Change-Id: I38635cce32595befc29dc3319ba5dd48a5010023
2022-01-21 22:12:31 +00:00
TeYuan Wang
a76533f48b Label TMU as sysfs_thermal am: 32458cdc49
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1937119

Change-Id: Idc76bdeb58cdff9eb83ae817d8ed01dee9253032
2022-01-21 22:12:21 +00:00
Yabin Cui
1a59c0625f Merge "Add SOC specific ETM sysfs paths" am: 9ee70a3d7f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1943866

Change-Id: I89a806d01292ec28a0b22bef7833fae566d1d941
2022-01-21 22:12:12 +00:00
Jasmine Cha
54e84e9978 audio: add sepolicy for getting thermal event am: 2abecb1519
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1944690

Change-Id: I7d33c5cf635907493462d49d8b3a2ceacc128f00
2022-01-21 22:12:02 +00:00
Jasmine Cha
cdcccbbd02 audio: add permission to request health/sensor data am: a21b7f8800
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1944689

Change-Id: I0ec1f8e2c389b199e0b0646397bdd40593b3c374
2022-01-21 22:11:55 +00:00
David Anderson
e999b85d07 Fix sepolicy denial in update_engine. am: 2fe229352b
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1934897

Change-Id: Ie42aaf3f8b972471ccf43fda689e32bc4b388bf8
2022-01-21 22:11:24 +00:00
Matt Buckley
8670a782de Allow HWC to get device_config_surface_flinger_native_boot_prop for adpf flags am: 317166636f
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1934617

Change-Id: I20977b9d52ecd10ce3feac4111677e278cadd3c2
2022-01-21 22:11:00 +00:00
Joel Galenson
453006460d Include core policy OWNERS. am: b287da183e
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1931017

Change-Id: I91c6a5a9e6fde086d82b2def66207b938f18adae
2022-01-21 22:10:13 +00:00
Xin Li
01d5ec6d2a [automerger skipped] Merge Android 12 QPR1 am: 0d05632eb8 -s ours
am skip reason: Merged-In Ie31b278a639fd5a9e249ca934d543de770fb3217 with SHA-1 856fe3d040 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1921233

Change-Id: Icf501a9eaa676a0fbf49f2862e76fe482dfa6238
2022-01-21 22:09:34 +00:00
chenpaul
9a9bf7fc09 Remove wifi_logger related sepolicy settings am: 37d4cfa648
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1881116

Change-Id: I4537982542fcf8f47e7b9fbaacf326db2cc12dc7
2022-01-21 22:08:19 +00:00
Jagadeesh Pakaravoor
400b93eb0b camera_hal: allow changing kthread priority
Allow changing kthread priority during insmod for camera-hal/LWIS.

Bug: 199950581
Test: boot, local camera testing
Change-Id: If59bfe101cab17854a5472ef388411bd19ef0a68
2022-01-21 14:58:07 +08:00
Presubmit Automerger Backend
03b2c4e33e [automerge] Add vendor SELinux denial to allowlist 2p: ed2c8d78ae am: bb9f892d56
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16672552

Change-Id: I991901e8d67be19d479d0cba5852aa7cca3d8301
2022-01-21 06:24:13 +00:00
Presubmit Automerger Backend
bb9f892d56 [automerge] Add vendor SELinux denial to allowlist 2p: ed2c8d78ae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16672552

Bug: 215640468
Change-Id: Ie94576056af0683b0cb23b51ae8543ef14b2bca7
2022-01-21 03:37:25 +00:00
eddielan
ed2c8d78ae Add vendor SELinux denial to allowlist
Bug: 215640468
Test: Build Pass
Change-Id: I8c2aa5ce4c6cc229837f763c6a20a1c27e1978a6
2022-01-21 03:37:16 +00:00
Stephen Crane
b69ac35ff0 Allow TEE storageproxyd permissions needed for DSU handling
Allows the vendor TEE access to GSI metadata files (which are publicly
readable). Storageproxyd needs access to this metadata to determine if a
GSI image is currently booted. Also allows the TEE domain to make new
directories in its data path.

Test: access /metadata/gsi/dsu/booted from storageproxyd
Bug: 203719297
Merged-In: I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b
Change-Id: I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b
2022-01-18 11:43:16 -08:00
linpeter
85d5a9a60a atc context change
Give atc nodes are changed to dqe0 form.

Bug: 213133646
test: test: check avc denied
Change-Id: Ibbcb7538b7874912f8c7e19a77ae6dd32f097ab0
2022-01-17 16:53:53 +08:00
Treehugger Robot
05ca30173e Merge "Allow TEE storageproxyd permissions needed for DSU handling" 2022-01-12 23:34:32 +00:00
YiHo Cheng
5254b52656 Merge "thermal: Label tmu register dump sysfs" into sc-v2-dev am: e400db11ba am: b4024884f1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16569088

Change-Id: Icf3374f059b914f09e5dd6650a60c7f0a825672d
2022-01-12 23:26:50 +00:00
YiHo Cheng
b4024884f1 Merge "thermal: Label tmu register dump sysfs" into sc-v2-dev am: e400db11ba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16569088

Change-Id: I3c9929f0ec857786766b892e415d4b58163797be
2022-01-12 23:14:55 +00:00
YiHo Cheng
e400db11ba Merge "thermal: Label tmu register dump sysfs" into sc-v2-dev 2022-01-12 23:03:42 +00:00
TeYuan Wang
32458cdc49 Label TMU as sysfs_thermal
Bug: 202805103
Test: switch thermal tj property and check thermal threshold
Change-Id: Id113b80f856e26412e2e07b9c9b4a61d519b194f
2022-01-12 10:16:49 +08:00
Yabin Cui
9ee70a3d7f Merge "Add SOC specific ETM sysfs paths" 2022-01-11 19:40:23 +00:00
TreeHugger Robot
1d086e460c Merge "Allow HWC to get device_config_surface_flinger_native_boot_prop for adpf flags" 2022-01-11 18:59:33 +00:00
Jasmine Cha
2abecb1519 audio: add sepolicy for getting thermal event
type=1400 audit(0.0:15): avc: denied { call } for scontext=u:r:hal_audio_default:s0
tcontext=u:r:hal_thermal_default:s0 tclass=binder permissive=1

type=1400 audit(0.0:16): avc: denied { transfer } for scontext=u:r:hal_audio_default:s0
tcontext=u:r:hal_thermal_default:s0 tclass=binder permissive=1

Bug: 204271308
Test: build pass

Signed-off-by: Jasmine Cha <chajasmine@google.com>
Change-Id: I900de2a2d8bf0753543ef4428374e782908e7aee
2022-01-11 13:42:58 +08:00
Jasmine Cha
a21b7f8800 audio: add permission to request health/sensor data
- Add audio hal into hal_health clients
- Allow audio hal to find fwk_sensor_hwservice
SELinux : avc:  denied  { find } for interface=android.frameworks.sensorservice::ISensorManager sid=u:r:hal_audio_default:s0 pid=5907 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:fwk_sensor_hwservice:s0 tclass=hwservice_manager permissive=1
SELinux : avc:  denied  { find } for interface=android.hardware.health::IHealth sid=u:r:hal_audio_default:s0 pid=9875 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:hal_health_hwservice:s0 tclass=hwservice_manager permissive=1
audio.service: type=1400 audit(0.0:14): avc: denied { call } for scontext=u:r:hal_audio_default:s0 tcontext=u:r:hal_health_default:s0 tclass=binder permissive=1
audio.service: type=1400 audit(0.0:15): avc: denied { transfer } for scontext=u:r:hal_audio_default:s0 tcontext=u:r:hal_health_default:s0 tclass=binder permissive=1

Bug: 199382564
Bug: 199801586
Test: build pass

Signed-off-by: Jasmine Cha <chajasmine@google.com>
Change-Id: I8e8a512cfbd6be814c98bac75ff6c0e5db028db2
Merged-In: I8e8a512cfbd6be814c98bac75ff6c0e5db028db2
2022-01-11 13:42:55 +08:00
YiHo Cheng
ca06222472 thermal: Label tmu register dump sysfs
Allow dumpstate to access tmu register dump sysfs

[ 1155.422181] type=1400 audit(1641335196.892:8): avc: denied { read }
for comm="dumpstate@1.1-s" name="tmu_reg_dump_state" dev="sysfs"
ino=68561
scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs:s0
tclass=file permissive=0
[ 1155.423398] type=1400 audit(1641335196.892:9): avc: denied { read }
for comm="dumpstate@1.1-s" name="tmu_reg_dump_current_temp" dev="sysfs"
ino
=68562 scontext=u:r:hal_dumpstate_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
[ 1155.443740] type=1400 audit(1641335196.896:10): avc: denied { read }
for comm="dumpstate@1.1-s" name="tmu_top_reg_dump_rise_thres"
dev="sysfs"
ino=68563 scontext=u:r:hal_dumpstate_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
[ 1155.466064] type=1400 audit(1641335196.896:11): avc: denied { read }
for comm="dumpstate@1.1-s" name="tmu_top_reg_dump_fall_thres"
dev="sysfs"
ino=68565 scontext=u:r:hal_dumpstate_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
[ 1155.488251] type=1400 audit(1641335196.916:12): avc: denied { read }
for comm="dumpstate@1.1-s" name="tmu_sub_reg_dump_rise_thres"
dev="sysfs" ino=68564 scontext=u:r:hal_dumpstate_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
[ 1155.510614] type=1400 audit(1641335196.960:13): avc: denied { read }
for comm="dumpstate@1.1-s" name="tmu_sub_reg_dump_fall_thres"
dev="sysfs"
ino=68566 scontext=u:r:hal_dumpstate_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
o

Bug: 202736838
Test: check thermal section in dumpstate
Change-Id: Icecca9f69ee9b57d43aa2864864951bf66c4905f
2022-01-11 08:42:45 +08:00
Yabin Cui
1459e9734a Add SOC specific ETM sysfs paths
Bug: 213519191
Test: run profcollectd on oriole
Change-Id: Ib1ae7466c76362b8242f2bb8560bb8b1d80c4253
2022-01-10 11:25:25 -08:00
Vinay Kalia
72ac373dfd [automerger skipped] [DO NOT MERGE] Allow media codec to access power HAL am: 8337626f4a am: 97addf8500 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16483773

Change-Id: Ife2d22606bc4da9a4f94fa65ae0d36a86b4c2ed2
2022-01-10 06:32:26 +00:00
Vinay Kalia
97addf8500 [DO NOT MERGE] Allow media codec to access power HAL am: 8337626f4a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16483773

Change-Id: I4ce0bb633c8d27e798c7a8e80e1d23eb06b3a2a0
2022-01-10 06:13:59 +00:00
Matt Buckley
c876449a7b Allow HWC to get device_config_surface_flinger_native_boot_prop for adpf flags
For the hardware composer and surfaceflinger to coordinate on certain features, it is necessary for the hardware composer to be able to read the surface_flinger_native_boot_prop to know what should be enabled.

Bug: b/195990840
Test: None
Change-Id: I41e1aa0f80c1138cf46f4f139253158b005a8634
2022-01-08 00:00:58 +00:00
Joel Galenson
cbb76860dd Merge "Include core policy OWNERS." 2022-01-07 14:17:21 +00:00
Yifan Hong
ca7275beee Merge "Implement health AIDL HAL." 2022-01-06 23:01:32 +00:00
Vinay Kalia
8337626f4a [DO NOT MERGE] Allow media codec to access power HAL
This commit fixes the following denials:

W /vendor/bin/hw/google.hardware.media.c2@1.0-service: type=1400 audit(0.0:276): avc: denied
{ call } for comm=436F646563322E30204C6F6F706572 scontext=u:r:mediacodec:s0
tcontext=u:r:servicemanager:s0 tclass=binder permissive=0

bug: 206687836
Test: Secure HFR AV1 video playback with resolution change.
Signed-off-by: Vinay Kalia <vinaykalia@google.com>
Change-Id: I79c20bda87af6066ae667a5176747378718a3a62
2022-01-06 20:18:34 +00:00
Joel Galenson
b0880417ff Include core policy OWNERS.
Test: None
Change-Id: I053d84eba7695fe125783b536421d43117b3f16d
(cherry picked from commit b287da183e)
2022-01-06 10:17:14 -08:00
Yifan Hong
5521fb530c Implement health AIDL HAL.
Test: VTS
Test: manual charger mode
Test: recovery
Bug: 213273090
Change-Id: Iabaf31644f4406092a881841fb4084499fb4de89
2022-01-05 23:08:07 -08:00
David Anderson
2fe229352b Fix sepolicy denial in update_engine.
pvmfw is an A/B partition but is not properly labeled and update_engine
gets a denial trying to write to it.

Bug: N/A
Test: m otapackage, apply OTA, check for denials
Change-Id: I55f41a8937384d3bcda5797b5df3f34257f7a114
2021-12-28 21:52:12 -08:00
Matt Buckley
317166636f Allow HWC to get device_config_surface_flinger_native_boot_prop for adpf flags
For the hardware composer and surfaceflinger to coordinate on certain features, it is necessary for the hardware composer to be able to read the surface_flinger_native_boot_prop to know what should be enabled.

Bug: b/195990840
Test: None
Change-Id: Idc1599820026febecda84233d60982e7db7b14b5
2021-12-28 19:08:06 +00:00
Joel Galenson
b287da183e Include core policy OWNERS.
Test: None
Change-Id: I053d84eba7695fe125783b536421d43117b3f16d
2021-12-21 07:27:03 -08:00
Cyan Hsieh
6e1c9d88cd Merge "Add pvmfw to custom_ab_block_device" 2021-12-20 03:22:22 +00:00
Cyan_Hsieh
0b5b4a9692 Add pvmfw to custom_ab_block_device
Bug: 211070100
Change-Id: Icd8f6d1837b8124bd8cd7b3d59d43b755455bae6
2021-12-20 10:10:46 +08:00
TreeHugger Robot
899faa57e4 Merge "Allow vendor init to read gesture_prop." 2021-12-15 09:01:23 +00:00
Stephen Crane
3f9a11fa0b Allow TEE storageproxyd permissions needed for DSU handling
Allows the vendor TEE access to GSI metadata files (which are publicly
readable). Storageproxyd needs access to this metadata to determine if a
GSI image is currently booted. Also allows the TEE domain to make new
directories in its data path.

Test: access /metadata/gsi/dsu/booted from storageproxyd
Bug: 203719297
Change-Id: I86055dd5601f8c2899d28f29bdfcb4dcb9b90d1b
2021-12-14 14:33:56 -08:00
Xin Li
0d05632eb8 Merge Android 12 QPR1
Bug: 210511427
Merged-In: Ie31b278a639fd5a9e249ca934d543de770fb3217
Change-Id: I0daddb05e061916c60055b7df00164a76c69ebd2
2021-12-14 08:38:59 -08:00
Super Liu
8f356044ff Allow vendor init to read gesture_prop.
Bug: 209713977
Bug: 193467627
Test: local test.
Signed-off-by: Super Liu <supercjliu@google.com>
Change-Id: I7f061f550bcf6c3a61b5528e8c21eae8567e677b
2021-12-13 09:28:02 +08:00
Cliff Wu
11c8ad745a Update the sepolicy for exo_camera_injection v1.1
- Update exo_camera_injection hal service from 1.0 to 1.1.
- Selinux avc log:
avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs"
ino=152 scontext=u:r:hal_camera_default:s0
tcontext=u:object_r:default_prop:s0 tclass=file permissive=0.

Bug: 202092371
Test: Verified exo_camera_injection provider service use cases function
as expected; no denials.

Change-Id: Ica94a00db580356158d94af2ae6dbe9c9a81be0a
2021-12-11 05:26:06 +00:00
Chris Kuiper
178337b449 selinux: Allow sensor HAL to access the display service HAL am: 734d79bdaf am: 3ce470c235
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16376281

Change-Id: Ic98462405b50b5ae86477d799d0497e00f41c450
2021-12-10 18:08:12 +00:00
Chris Kuiper
3ce470c235 selinux: Allow sensor HAL to access the display service HAL am: 734d79bdaf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16376281

Change-Id: Ib3f0609b74dbb05a7e4936fa2055a1e050777b3e
2021-12-10 17:44:16 +00:00
Chris Kuiper
734d79bdaf selinux: Allow sensor HAL to access the display service HAL
Add necessary permissions.

Bug: b/204471211
Test: Testing with corresponding sensor HAL changes and sensor_test commands.
Change-Id: I01774210693ceb4a6d0d4dee4fb5e905117774d3
2021-12-10 11:00:07 +08:00
TreeHugger Robot
8e9e3a4375 [automerger skipped] Merge "Label min_vrefresh and idle_delay_ms as sysfs_display" into sc-v2-dev am: f7db23e139 -s ours am: 65a718976e -s ours
am skip reason: Merged-In I29243751ab5f38eca5d8e4221122764f79c75e04 with SHA-1 8d4e8a65d6 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16302392

Change-Id: I840471543fece99908a58003235b0ab8ad3f4f43
2021-12-08 02:12:07 +00:00
TreeHugger Robot
65a718976e [automerger skipped] Merge "Label min_vrefresh and idle_delay_ms as sysfs_display" into sc-v2-dev am: f7db23e139 -s ours
am skip reason: Merged-In I29243751ab5f38eca5d8e4221122764f79c75e04 with SHA-1 8d4e8a65d6 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16302392

Change-Id: Ib87c387438c8ada00867ef1422dfa6bc2c4c6df9
2021-12-08 01:57:41 +00:00
TreeHugger Robot
f7db23e139 Merge "Label min_vrefresh and idle_delay_ms as sysfs_display" into sc-v2-dev 2021-12-08 01:40:06 +00:00
joenchen
85626ab654 [automerger skipped] Label min_vrefresh and idle_delay_ms as sysfs_display am: 8d4e8a65d6 -s ours
am skip reason: Merged-In I29243751ab5f38eca5d8e4221122764f79c75e04 with SHA-1 02a20e025f is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16406482

Change-Id: I1bff1b6dfa65252c54755f0453f2e90955a4051e
2021-12-07 19:25:59 +00:00
joenchen
8d4e8a65d6 Label min_vrefresh and idle_delay_ms as sysfs_display
Bug: 202567084
Test: Check the files label by "adb shell ls -Z"
Change-Id: I29243751ab5f38eca5d8e4221122764f79c75e04
Merged-In: I29243751ab5f38eca5d8e4221122764f79c75e04
2021-12-07 03:42:52 +00:00
joenchen
bef2d7397c Label min_vrefresh and idle_delay_ms as sysfs_display
Bug: 202567084
Test: Check the files label by "adb shell ls -Z"
Change-Id: I29243751ab5f38eca5d8e4221122764f79c75e04
Merged-In: I29243751ab5f38eca5d8e4221122764f79c75e04
2021-12-06 02:45:51 +00:00
joenchen
02a20e025f Label min_vrefresh and idle_delay_ms as sysfs_display
Bug: 202567084
Test: Check the files label by "adb shell ls -Z"
Change-Id: I29243751ab5f38eca5d8e4221122764f79c75e04
2021-12-04 17:18:46 +00:00
Albert Wang
2caa560163 Allow suspend_control to access xHCI wakeup node am: a506ed1e06 am: 43bde53275
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16370946

Change-Id: I6b86ed75839021c860f8f556f25caedd4443fc84
2021-12-02 02:29:37 +00:00
Albert Wang
43bde53275 Allow suspend_control to access xHCI wakeup node am: a506ed1e06
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16370946

Change-Id: I17198ed93403abe1b6526b385218847616b52c5b
2021-12-02 01:53:59 +00:00
Albert Wang
a506ed1e06 Allow suspend_control to access xHCI wakeup node
This is a WORKAROUND to avoid the xHCI wakeup node permission problem,
since system will automatically allocated device ID.

Bug: 205138535
Test: n/a
Signed-off-by: Albert Wang <albertccwang@google.com>
Change-Id: Ia2ca04618f950bdded4aea76c897579eb4b92daf
2021-12-01 23:45:19 +08:00
Rick Yiu
10bd8547d7 Merge "gs101-sepolicy: Fix avc denials" 2021-11-26 10:40:43 +00:00
Rick Yiu
4075287498 gs101-sepolicy: Fix avc denials
Fix below and other potential denials

11-21 10:10:43.984  3417  3417 I auditd  : type=1400 audit(0.0:4): avc: denied { write } for comm=4173796E635461736B202332 path="/sys/kernel/vendor_sched/set_task_group_fg" dev="sysfs" ino=44511 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:sysfs_vendor_sched:s0 tclass=file permissive=0 app=com.google.android.pixel.setupwizard

11-21 10:10:44.840  3976  3976 I auditd  : type=1400 audit(0.0:10): avc: denied { write } for comm="StallDetector-1" path="/sys/kernel/vendor_sched/set_task_group_fg" dev="sysfs" ino=44511 scontext=u:r:untrusted_app_30:s0:c170,c256,c512,c768 tcontext=u:object_r:sysfs_vendor_sched:s0 tclass=file permissive=0 app=com.google.android.inputmethod.latin

11-21 18:10:51.280  5595  5595 I auditd  : type=1400 audit(0.0:102): avc: denied { write } for comm="SharedPreferenc" path="/sys/kernel/vendor_sched/set_task_group_fg" dev="sysfs" ino=44511 scontext=u:r:gmscore_app:s0:c512,c768 tcontext=u:object_r:sysfs_vendor_sched:s0 tclass=file permissive=0 app=com.google.android.gms

Bug: 206970384
Test: make selinux_policy pass
Change-Id: I7c981ef0516dc5be93ec825768de57c15786b4bd
2021-11-25 14:26:35 +00:00
TreeHugger Robot
27e7eeb875 Merge "aoc: add audio property for audio aocdump feature" 2021-11-25 07:05:25 +00:00
Randall Huang
68ffcb774d Fix health HAL avc denied when running idle-maint
Log:
avc: denied { read } for comm="android.hardwar" name="wb_avail_buf"
dev="sysfs" ino=59061 scontext=u:r:hal_health_storage_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 206741894
Test: adb shell sm idle-maint run
Signed-off-by: Randall Huang <huangrandall@google.com>
Change-Id: I79e7763df16816e6799f288d2f8b7e26c204cbc4
2021-11-23 03:17:54 +00:00
Xin Li
f7cbb95722 [automerger skipped] Merge sc-qpr1-dev-plus-aosp-without-vendor@7810918 am: 856fe3d040 -s ours am: 4613d25f07 -s ours am: 50628a78a8 -s ours
am skip reason: Merged-In I8f9932ad8885aaefde9548f87c6d2c6cc148cd4c with SHA-1 7bfec1ad53 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16278444

Change-Id: I1833320006dedc84f6f5ef8a3809f256369b5cfd
2021-11-18 22:37:51 +00:00
Xin Li
50628a78a8 [automerger skipped] Merge sc-qpr1-dev-plus-aosp-without-vendor@7810918 am: 856fe3d040 -s ours am: 4613d25f07 -s ours
am skip reason: Merged-In I8f9932ad8885aaefde9548f87c6d2c6cc148cd4c with SHA-1 7bfec1ad53 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16278444

Change-Id: Ib19bc7987a5b32c39431ebdce2923541a944f608
2021-11-18 22:25:11 +00:00
Xin Li
4613d25f07 [automerger skipped] Merge sc-qpr1-dev-plus-aosp-without-vendor@7810918 am: 856fe3d040 -s ours
am skip reason: Merged-In I8f9932ad8885aaefde9548f87c6d2c6cc148cd4c with SHA-1 7bfec1ad53 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16278444

Change-Id: I3f0e4f5e9f26b048b89f495b7d79d9ceffb61f80
2021-11-18 22:00:55 +00:00
chenpaul
d7947930ec Remove wifi_logger related sepolicy settings
Due to the fact that /vendor/bin/wifi_logger no longer exists
on the P21 master branch any more, we remove obsolete sepolicy.

Bug: 201599426
Test: wlan_logger in Pixel Logger is workable
Change-Id: I22d99c3577f3cceb786e2ffd01c327a67d420202
2021-11-17 17:24:59 +08:00
Albert Wang
05ce6e603d [automerger skipped] [RESTRICT AUTOMERGE] Allow suspend_control to access xHCI wakeup node am: e6fb90425d am: 8bdcb60170 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16246250

Change-Id: I3b44efc984435e14dbdce60c7fbf7f0bfe4e4b82
2021-11-17 09:07:56 +00:00
Albert Wang
8bdcb60170 [RESTRICT AUTOMERGE] Allow suspend_control to access xHCI wakeup node am: e6fb90425d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16246250

Change-Id: If82693c02020cc701953dcb12412fa0fe132f16b
2021-11-17 08:51:05 +00:00
Albert Wang
e6fb90425d [RESTRICT AUTOMERGE] Allow suspend_control to access xHCI wakeup node
Bug: 205138535
Test: n/a
Signed-off-by: Albert Wang <albertccwang@google.com>
Change-Id: I6e012fea56c50656c8f26216199459092dcfc0f9
Merged-In: I6e012fea56c50656c8f26216199459092dcfc0f9
2021-11-17 07:18:29 +00:00
yixuanjiang
002907fb12 aoc: add audio property for audio aocdump feature
Bug: 204080552
Test: local
Signed-off-by: yixuanjiang <yixuanjiang@google.com>
Change-Id: I79b960cf5e88856c37f7901d718ac8f14e44b812
2021-11-16 14:55:26 +08:00
Albert Wang
c0ad9b7e8a Allow suspend_control to access xHCI wakeup node
Bug: 205138535
Test: n/a
Signed-off-by: Albert Wang <albertccwang@google.com>
Change-Id: I6e012fea56c50656c8f26216199459092dcfc0f9
2021-11-16 12:23:33 +08:00
chenpaul
37d4cfa648 Remove wifi_logger related sepolicy settings
Due to the fact that /vendor/bin/wifi_logger no longer exists
on the P21 master branch any more, we remove obsolete sepolicy.

Bug: 201599426
Test: wlan_logger in Pixel Logger is workable
Change-Id: I22d99c3577f3cceb786e2ffd01c327a67d420202
2021-11-15 02:05:06 +00:00
Michael Ayoubi
d44433c07a Merge "Allow uwb_vendor_app to get SE properties" into sc-v2-dev am: e7a17433a0 am: 11bb305754
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16244622

Change-Id: I8051477b4e70d61b8d137823bb22411fbddf647f
2021-11-12 05:18:53 +00:00
Michael Ayoubi
11bb305754 Merge "Allow uwb_vendor_app to get SE properties" into sc-v2-dev am: e7a17433a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16233414

Change-Id: Ibac4fbebf2f14157e1ac32585e4da68b61acea19
2021-11-12 01:48:47 +00:00
Michael Ayoubi
e7a17433a0 Merge "Allow uwb_vendor_app to get SE properties" into sc-v2-dev 2021-11-12 01:24:43 +00:00
Oleg Matcovschi
0684e81d5f gs101:ssr_detector: Allow access to aoc properties in user builds am: 63d04e1e02 am: 2eced57692
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16236498

Change-Id: Id2054c9819186424a08e6f4836042dde5ce36c62
2021-11-11 23:33:41 +00:00
Oleg Matcovschi
2eced57692 gs101:ssr_detector: Allow access to aoc properties in user builds am: 63d04e1e02
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16236498

Change-Id: I80dc34c15c60f80ddde869c6895d1afe53e8bf3e
2021-11-11 23:14:23 +00:00
Oleg Matcovschi
63d04e1e02 gs101:ssr_detector: Allow access to aoc properties in user builds
Bug: 205755422
Signed-off-by: Oleg Matcovschi <omatcovschi@google.com>
Change-Id: I684590a2ee91cf6d1edfc8a606f3a9e6672ca46f
2021-11-11 06:13:44 +00:00
Michael Ayoubi
a8e745039f Allow uwb_vendor_app to get SE properties
Bug: 205770401
Test: Build and flash on device.
Change-Id: Ic98f394434fad12e7d8ef804ecfd694a55ee8190
Merged-In: Ic98f394434fad12e7d8ef804ecfd694a55ee8190
2021-11-11 00:50:08 +00:00
Michael Ayoubi
18d2a96a11 Allow uwb_vendor_app to get SE properties
Bug: 205770401
Test: Build and flash on device.
Change-Id: Ic98f394434fad12e7d8ef804ecfd694a55ee8190
2021-11-11 00:48:21 +00:00
Xin Li
856fe3d040 Merge sc-qpr1-dev-plus-aosp-without-vendor@7810918
Bug: 205056467
Merged-In: I8f9932ad8885aaefde9548f87c6d2c6cc148cd4c
Change-Id: Ie31b278a639fd5a9e249ca934d543de770fb3217
2021-11-10 08:06:11 +00:00
Sean Wang
4c314ece36 Merge "Grant selinux permission to com.google.edgetpu_vendor_service-V2-ndk.so" 2021-11-08 03:33:51 +00:00
Ted Lin
2a0ec83aad Using dontaudit to fix the avc on boot test am: 3d463050a2 am: ee9b913bb7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16175460

Change-Id: I95f9c6fdeea59ace0dc0b41a4a244383b24e0ac4
2021-11-04 17:07:40 +00:00
Ted Lin
ee9b913bb7 Using dontaudit to fix the avc on boot test am: 3d463050a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16175460

Change-Id: I00cfd7b47b7e2c6718e8211809e1ddb20e19656b
2021-11-04 16:46:45 +00:00
Ted Lin
3d463050a2 Using dontaudit to fix the avc on boot test
avc: denied { search } for comm="kworker/6:2" name="google_battery" dev="debugfs" ino=32648 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_battery_debugfs:s0 tclass=dir permissive=1

Bug:200739262
Test: Check bugreport
Change-Id: I50a96bab88f564fef0eda9a23bb77dc6ffed357f
Signed-off-by: Ted Lin <tedlin@google.com>
(cherry picked from commit 951ce82739)
2021-11-03 03:20:45 +00:00
Sean Wang
9a94f84d7b Grant selinux permission to com.google.edgetpu_vendor_service-V2-ndk.so
This change is related to ag/16062268 with modifications to the edgetpu_vendor_service

Bug: 198131843
Test: tested on oriole
Change-Id: Ic512e5878a4d6af3aeaa939868b07dd449948f45
2021-11-02 09:06:16 +00:00
Automerger Merge Worker
626001e1c4 Merge "Label GPU power_policy sysfs node am: a7aa46862d am: 3e1bd82949" into sc-v2-dev-plus-aosp am: 16a5af35e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16091105

Change-Id: I24b7373a260bfe94c6ea1f42959f0c63aa7a3df0
2021-11-02 05:28:32 +00:00
Siddharth Kapoor
6e8c9ad774 Label GPU power_policy sysfs node am: a7aa46862d am: 00ceb78ed2 am: 7ff374ff1f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16091105

Change-Id: I0bf19341373059bc50fb5f937eb4132d1cf144ac
2021-11-02 05:28:12 +00:00
Automerger Merge Worker
16a5af35e1 Merge "Label GPU power_policy sysfs node am: a7aa46862d am: 3e1bd82949" into sc-v2-dev-plus-aosp 2021-11-02 05:14:28 +00:00
Siddharth Kapoor
74dbf5739c Label GPU power_policy sysfs node am: a7aa46862d am: 3e1bd82949
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16091105

Change-Id: I3134c1ea8b6970fba3044042142ec4e656e31c9c
2021-11-02 05:14:26 +00:00
Siddharth Kapoor
7ff374ff1f Label GPU power_policy sysfs node am: a7aa46862d am: 00ceb78ed2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16091105

Change-Id: I5b87ce21380b0a390e684ac55862dae0f86cd7bb
2021-11-02 05:14:23 +00:00
Siddharth Kapoor
3e1bd82949 Label GPU power_policy sysfs node am: a7aa46862d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16091105

Change-Id: Ia0a271554b8640cd32f1293c8e96405abf9f31b6
2021-11-02 05:03:27 +00:00
Siddharth Kapoor
00ceb78ed2 Label GPU power_policy sysfs node am: a7aa46862d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16091105

Change-Id: Iad4caeea7667379e15b69b9a2694a31d759c9dab
2021-11-02 05:03:24 +00:00
TreeHugger Robot
eeaf013788 Merge "Grant selinux permission to com.google.edgetpu_app_service-V2-ndk.so" 2021-11-01 01:28:53 +00:00
qinyiyan
d60240f504 Grant selinux permission to com.google.edgetpu_app_service-V2-ndk.so
Bug: 204528053
Test: forrest build with the change. AVC denials don't show up.
Change-Id: Ic3fafeb749156967d772d5288ecf99a44ebc7031
2021-10-29 15:04:31 -07:00
Siddharth Kapoor
6d1da2c994 Label GPU power_policy sysfs node am: f94633e718 am: 62460926d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16123766

Change-Id: Ic0715cc18f5848e694d40f3633c005cf7964791c
2021-10-28 01:27:24 +00:00
Siddharth Kapoor
62460926d3 Label GPU power_policy sysfs node am: f94633e718
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16123766

Change-Id: Ia753ea69fb270e2bbeca29f2275b84482cc77ec3
2021-10-28 01:08:49 +00:00
Jiyong Park
b928ceec0c [automerger skipped] Remove ndk_platform backend. Use the ndk backend. am: 90d1e82ae6 am: caf102afda am: 02048701de am: d753a4e82d -s ours
am skip reason: Merged-In Icc9af3798ac89742fa56b1cb37d8116d99b4a9c2 with SHA-1 5cc5d52bd7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16119648

Change-Id: Ia2728528486c77d026aedf9ff702bed77b56c4f8
2021-10-27 07:24:20 +00:00
Jiyong Park
d753a4e82d Remove ndk_platform backend. Use the ndk backend. am: 90d1e82ae6 am: caf102afda am: 02048701de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16119648

Change-Id: I7714a03deb27225af3ddaebdcb523fee20f27069
2021-10-27 07:02:59 +00:00
Jiyong Park
02048701de Remove ndk_platform backend. Use the ndk backend. am: 90d1e82ae6 am: caf102afda
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16119648

Change-Id: I9742f6b11c4b07698f597aeac36aa55686dd8b3f
2021-10-27 06:46:14 +00:00
Jiyong Park
caf102afda Remove ndk_platform backend. Use the ndk backend. am: 90d1e82ae6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16119648

Change-Id: I9a01c4e883cf1903eab8589c4eeca1d60d9fb741
2021-10-27 06:27:12 +00:00
TreeHugger Robot
f0e660c212 Merge "Add touch procfs and sysfs sepolicy." 2021-10-27 02:13:02 +00:00
Siddharth Kapoor
f94633e718 Label GPU power_policy sysfs node
Bug: 201718421
Test: trace while App launch
Change-Id: Icd85b8611632e4638946b492740e509baf2714ce
Signed-off-by: Siddharth Kapoor <ksiddharth@google.com>
2021-10-27 01:59:23 +00:00
Steve Pfetsch
a461a356e2 [automerger skipped] Merge "Move twoshay definitions to hardware/google/pixel-sepolicy/input." into sc-v2-dev am: 421cbb2f61 -s ours am: 30ec086c5d -s ours
am skip reason: Merged-In I2cada463fcbfd3b52230430b12b091a655e2abbb with SHA-1 b834b1d008 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16095720

Change-Id: I5bb16849ceee69c0c3bffcd25f3dd04d17cfbe13
2021-10-27 00:50:09 +00:00
Steve Pfetsch
30ec086c5d [automerger skipped] Merge "Move twoshay definitions to hardware/google/pixel-sepolicy/input." into sc-v2-dev am: 421cbb2f61 -s ours
am skip reason: Merged-In I2cada463fcbfd3b52230430b12b091a655e2abbb with SHA-1 b834b1d008 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16095720

Change-Id: I7144920413f461fee6f59eebf1b2e865ce652854
2021-10-27 00:28:58 +00:00
Steve Pfetsch
421cbb2f61 Merge "Move twoshay definitions to hardware/google/pixel-sepolicy/input." into sc-v2-dev 2021-10-27 00:14:20 +00:00
Philip Quinn
fcc9f6c3f0 [automerger skipped] Move twoshay definitions to hardware/google/pixel-sepolicy/input. am: b834b1d008 -s ours
am skip reason: Merged-In I2cada463fcbfd3b52230430b12b091a655e2abbb with SHA-1 d5ac0ac3ce is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16120231

Change-Id: I6f2e4f7eabef2a6f3b604bb63fc05598ced9490f
2021-10-26 20:11:05 +00:00
Jiyong Park
90d1e82ae6 Remove ndk_platform backend. Use the ndk backend.
The ndk_platform backend will soon be deprecated because the ndk backend
can serve the same purpose. This is to eliminate the confusion about
having two variants (ndk and ndk_platform) for the same ndk backend.

Bug: 161456198
Test: m

Merged-In: Icc9af3798ac89742fa56b1cb37d8116d99b4a9c2
Change-Id: Icc9af3798ac89742fa56b1cb37d8116d99b4a9c2
(cherry picked from commit 5cc5d52bd7)
2021-10-26 14:59:28 +09:00
Philip Quinn
b834b1d008 Move twoshay definitions to hardware/google/pixel-sepolicy/input.
Bug: 187654303
Test: twoshay works on R4, B3, P7
Change-Id: I2cada463fcbfd3b52230430b12b091a655e2abbb
Merged-In: I2cada463fcbfd3b52230430b12b091a655e2abbb
2021-10-26 02:06:20 +00:00
Super Liu
c8220eea82 Add touch procfs and sysfs sepolicy.
Bug: 193467774
Test: TH build pass.
Signed-off-by: Super Liu <supercjliu@google.com>
Change-Id: I25c4d9422966e8603f12222e93ca7b6d6ea6f566
2021-10-25 17:01:52 +08:00
Siddharth Kapoor
a7aa46862d Label GPU power_policy sysfs node
Bug: 201718421
Test: trace while App launch
Change-Id: Icd85b8611632e4638946b492740e509baf2714ce
Signed-off-by: Siddharth Kapoor <ksiddharth@google.com>
2021-10-21 14:23:00 +08:00
Philip Quinn
0d48ab4fbf Move twoshay definitions to hardware/google/pixel-sepolicy/input.
Bug: 187654303
Test: twoshay works on R4, B3, P7
Change-Id: I2cada463fcbfd3b52230430b12b091a655e2abbb
Merged-In: I2cada463fcbfd3b52230430b12b091a655e2abbb
2021-10-20 23:09:13 +00:00
TreeHugger Robot
7431e8b11f Merge "audio: add permission to request health/sensor data" into sc-v2-dev am: 7352bf22f0 am: cdfec7db74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15838845

Change-Id: I3507cd6655aa6fddb31ca311fd1d94e45ee7b860
2021-10-20 04:52:34 +00:00
TreeHugger Robot
cdfec7db74 Merge "audio: add permission to request health/sensor data" into sc-v2-dev am: 7352bf22f0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15838845

Change-Id: Ic4d717872a99b98770be9d883c0569a09e6c7f3a
2021-10-20 04:32:42 +00:00
TreeHugger Robot
7352bf22f0 Merge "audio: add permission to request health/sensor data" into sc-v2-dev 2021-10-20 04:12:49 +00:00
Shawn Yang
9d0aca6070 Merge "Allow modem app to read the battery info" into sc-v2-dev am: e48bb0205b am: 72a6569655
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15879394

Change-Id: Ibe4657697553193c4881cf49ee3922a9afbcf92c
2021-10-20 03:56:33 +00:00
Shawn Yang
72a6569655 Merge "Allow modem app to read the battery info" into sc-v2-dev am: e48bb0205b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15879394

Change-Id: I14e54fdae2d7c3929057ab8fdc24158685d87e6f
2021-10-20 03:42:10 +00:00
Shawn Yang
e48bb0205b Merge "Allow modem app to read the battery info" into sc-v2-dev 2021-10-20 03:25:48 +00:00
Jasmine Cha
27a4afc1a9 audio: add permission to request health/sensor data
- Add audio hal into hal_health clients
- Allow audio hal to find fwk_sensor_hwservice
SELinux : avc:  denied  { find } for interface=android.frameworks.sensorservice::ISensorManager sid=u:r:hal_audio_default:s0 pid=5907 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:fwk_sensor_hwservice:s0 tclass=hwservice_manager permissive=1
SELinux : avc:  denied  { find } for interface=android.hardware.health::IHealth sid=u:r:hal_audio_default:s0 pid=9875 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:hal_health_hwservice:s0 tclass=hwservice_manager permissive=1
audio.service: type=1400 audit(0.0:14): avc: denied { call } for scontext=u:r:hal_audio_default:s0 tcontext=u:r:hal_health_default:s0 tclass=binder permissive=1
audio.service: type=1400 audit(0.0:15): avc: denied { transfer } for scontext=u:r:hal_audio_default:s0 tcontext=u:r:hal_health_default:s0 tclass=binder permissive=1


Bug: 199382564
Bug: 199801586
Test: build pass

Signed-off-by: Jasmine Cha <chajasmine@google.com>
Change-Id: I8e8a512cfbd6be814c98bac75ff6c0e5db028db2
2021-10-20 03:04:32 +00:00
Michael Ayoubi
ea0561e344 Merge "Allow euiccpixel_app to get dck_prop" into sc-v2-dev am: 21c2c3f145 am: f94f426c9e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15795866

Change-Id: Id64d5c0d45c32838a54d33ef81f8b4b2019dd39f
2021-10-20 01:06:23 +00:00
Michael Ayoubi
f94f426c9e Merge "Allow euiccpixel_app to get dck_prop" into sc-v2-dev am: 21c2c3f145
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15795866

Change-Id: I18da0736804df2e43fab9d938e758d4cc480d9eb
2021-10-20 00:48:48 +00:00
Michael Ayoubi
21c2c3f145 Merge "Allow euiccpixel_app to get dck_prop" into sc-v2-dev 2021-10-20 00:32:56 +00:00
TreeHugger Robot
2777ffb556 Merge "Allow exo_app to find Virtual Device manager" 2021-10-19 19:15:26 +00:00
Maurice Lam
e6c87533b8 Allow exo_app to find Virtual Device manager
Bug: 194949534
Test: Manual
Change-Id: I529b9eaf0d2a058a0653ec388d0e1f5abad9d094
2021-10-19 11:20:13 -07:00
jintinglin
936079ad1c Allow modem app to read the battery info
Test: flash the forrest build, MDS can read the info file

Bug: 203478533

Change-Id: I9985dd2731a43445dd653e226fd2939ca355cda4
2021-10-19 03:22:46 +00:00
Adam Shih
d50db9e2e7 Merge "move bluetooth related types to bluetooth" 2021-10-19 01:07:50 +00:00
Adam Shih
5c28519e40 move bluetooth related types to bluetooth
Bug: 202790744
Test: boot with bluetooth hal started
Change-Id: I615d4b13262af2bc2c044914e595a7c2085999d2
2021-10-18 11:43:15 +08:00
Bart Van Assche
3a1c10bb76 Stop using the bdev_type and sysfs_block_type SELinux attributes
Stop using these attributes since these will be removed soon. This
commit reverts 37b5741301 ("Add the 'bdev_type' attribute to all block
device types").

Bug: 202520796
Test: Untested.
Change-Id: I00f10d1fd164b6ca01ecd5cffd2012acfc05eeca
Signed-off-by: Bart Van Assche <bvanassche@google.com>
2021-10-15 14:20:18 -07:00
qinyiyan
6e818988b6 Allow the NNAPI HAL to access edgetpu_app_service.
10-12 14:40:11.528   759   759 W Binder:759_1: type=1400 audit(0.0:23): avc: denied { call } for scontext=u:r:hal_neuralnetworks_darwinn:s0 tcontext=u:r:edgetpu_app_server:s0 tclass=binder permissive=0

10-12 18:17:04.678   440   440 E SELinux : avc:  denied  { find } for pid=753 uid=1000 name=com.google.edgetpu.IEdgeTpuAppService/default scontext=u:r:hal_neuralnetworks_darwinn:s0 tcontext=u:object_r:edgetpu_app_service:s0 tclass=service_manager permissive=0

Test: rebuilt the selinux_policy. The AVC denials don't show up.
Bug: 196697793
Change-Id: If43f7411a3324f65323ea004e34878f070d9ebeb
2021-10-12 22:21:52 +00:00
Adam Shih
86d9e3657c Merge "reorganize pixelstats_vendor" 2021-10-12 01:37:36 +00:00
Alfred Lin
7c95e95cda [Display] Add SELinux policy for hal_graphics_composer_default am: 24693cd264 am: f545ab60c3 am: 0da6568bbf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16004355

Change-Id: I66d01731f652da14477f0b2fd85125d961e5936b
2021-10-08 14:37:21 +00:00
Alfred Lin
0bbfc93655 [Display] Add SELinux policy for hal_graphics_composer_default am: 24693cd264 am: 7bfec1ad53 am: 48aa625c44
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16004355

Change-Id: I34ccadb4c65dd72b4b7826d66135c0003259b572
2021-10-08 14:37:14 +00:00
Alfred Lin
0da6568bbf [Display] Add SELinux policy for hal_graphics_composer_default am: 24693cd264 am: f545ab60c3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16004355

Change-Id: Ia5eedb2532279e60ff4f557b3734624f50111632
2021-10-08 14:05:14 +00:00
Alfred Lin
48aa625c44 [Display] Add SELinux policy for hal_graphics_composer_default am: 24693cd264 am: 7bfec1ad53
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16004355

Change-Id: Ifbea1ae180dfd3d58eac17ff792e5f81245ca301
2021-10-08 14:04:27 +00:00
Alfred Lin
f545ab60c3 [Display] Add SELinux policy for hal_graphics_composer_default am: 24693cd264
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16004355

Change-Id: Ifb4b5b6f8eadd26d06a0e7980f05aa60e9d7cacb
2021-10-08 13:33:29 +00:00
Alfred Lin
7bfec1ad53 [Display] Add SELinux policy for hal_graphics_composer_default am: 24693cd264
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/16004355

Change-Id: I8f9932ad8885aaefde9548f87c6d2c6cc148cd4c
2021-10-08 13:29:54 +00:00
Alfred Lin
24693cd264 [Display] Add SELinux policy for hal_graphics_composer_default
Add SELinux policy for hal_graphics_composer_default to find persist_display_file

Bug: 202487234

Test: device boot will not find avc denied log as "avc: denied { search } for name="display" dev="sda1" ino=21 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:persist_display_file:s0 tclass=dir permissive=0"
Change-Id: I8fc386cb18397911404e1f2803601711e40edead
2021-10-08 11:07:40 +00:00
David Brazdil
a03f3b1a50 Assign pkvm_enabler to vendor_misc_writer domain
Builds of gs101 targets with pKVM force-enabled have an init service
which checks that /dev/kvm exists and if not, runs misc_writer to
instruct the bootloader to enable pKVM, and forces a reboot.

Assign the binary to the existing vendor_misc_writer domain and add
permission to execute the /vendor/bin/misc_writer binary. Since this is
for tests only, the rules are only added to targets that define
TARGET_PKVM_ENABLED.

Bug: 192819132
Test: flash a _pkvm build, observe double-reboot, check /dev/kvm exists
Change-Id: I5f9962e4cdd3ec267ab19ea4485e4e94a3ec15cd
2021-10-08 09:34:22 +00:00
Adam Shih
17881f3a38 reorganize pixelstats_vendor
Bug: 202462997
Test: boot with pixelstats_vendor started
Change-Id: I8582ac4e83720768ee7992d41bdac0798da892d9
2021-10-08 11:06:49 +08:00
Adam Shih
7d5cf2a1bd Merge "centralize wifi_ext config" 2021-10-05 01:38:47 +00:00
Max Kogan
b99188ad46 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-qpr1-dev am: 2a166c0eb5 am: 584abcc50c am: 2d4e8d567f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15900366

Change-Id: I7b54dae9429168d29b1a4a3e2f9f390b69b8b3fe
2021-10-04 18:59:23 +00:00
Max Kogan
61792ec645 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-qpr1-dev am: 2a166c0eb5 am: 49a05309af am: f2d985cc54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15900366

Change-Id: Ib3f29fbb54a6af7ba033cbb756e34c6726caa6bb
2021-10-04 18:57:11 +00:00
George Lee
e36b0e9e13 Merge "power_hal: add bcl file permission" into sc-qpr1-dev am: 9d3965da4f am: 0ab239e045 am: c56116c0d8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15905927

Change-Id: Ie88ecaa0eebded9799143666377ea45aec7816d0
2021-10-04 18:54:57 +00:00
Max Kogan
2d4e8d567f Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-qpr1-dev am: 2a166c0eb5 am: 584abcc50c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15900366

Change-Id: I2591a84a0e4efe529b7e0dda4c18e430f182f473
2021-10-04 18:25:18 +00:00
Max Kogan
f2d985cc54 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-qpr1-dev am: 2a166c0eb5 am: 49a05309af
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15900366

Change-Id: I5cc1bababdf50d88df5e511285783d52dd68f4c2
2021-10-04 18:24:27 +00:00
Max Kogan
584abcc50c Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-qpr1-dev am: 2a166c0eb5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15900366

Change-Id: I72aaf0f773f9fd640a56a1b684cfea012efeabb8
2021-10-04 18:15:20 +00:00
Max Kogan
49a05309af Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-qpr1-dev am: 2a166c0eb5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15900366

Change-Id: I71ca6648ff0305c5142047c75eeda8e7d41cb2b6
2021-10-04 18:15:19 +00:00
Max Kogan
2a166c0eb5 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-qpr1-dev 2021-10-04 18:04:01 +00:00
George Lee
ad5faa2933 Merge "power_hal: add bcl file permission" into sc-qpr1-dev am: 9d3965da4f am: 6613966d5d am: e0b6a83d6f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15905927

Change-Id: I8bd36e4c7dab55b0b4e7424112be29b6ef7ffdf1
2021-10-04 17:37:12 +00:00
George Lee
c56116c0d8 Merge "power_hal: add bcl file permission" into sc-qpr1-dev am: 9d3965da4f am: 0ab239e045
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15905927

Change-Id: I8b8013d3162f8a5101f390350388b6c53410c686
2021-10-04 17:21:48 +00:00
George Lee
e0b6a83d6f Merge "power_hal: add bcl file permission" into sc-qpr1-dev am: 9d3965da4f am: 6613966d5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15905927

Change-Id: I26351c1346487603a89f80b612985481bfcf5b3b
2021-10-04 17:21:05 +00:00
George Lee
0ab239e045 Merge "power_hal: add bcl file permission" into sc-qpr1-dev am: 9d3965da4f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15905927

Change-Id: Idf99714202d32825ff0b04843e1688e42cf6635a
2021-10-04 17:11:49 +00:00
George Lee
6613966d5d Merge "power_hal: add bcl file permission" into sc-qpr1-dev am: 9d3965da4f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15905927

Change-Id: Ic3e85e9bb8b4ac9139b6c9606edcc3522da818ee
2021-10-04 17:11:49 +00:00
George Lee
9d3965da4f Merge "power_hal: add bcl file permission" into sc-qpr1-dev 2021-10-04 16:54:14 +00:00
Philip Quinn
ac931238bf Merge "Move twoshay definitions to hardware/google/pixel-sepolicy/input." 2021-09-30 17:23:42 +00:00
Edwin Tung
cc981d9904 Merge "gps: add sepolicy to allow gps access pps gpio" into sc-qpr1-dev am: 6c249e4a9f am: 0a91edb9b7 am: 0dec837b29
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15897560

Change-Id: I1ab433573fa2f0a6b46e730d66fa635e3a7de0e2
2021-09-30 14:51:01 +00:00
Edwin Tung
ffe990fd82 Merge "gps: add sepolicy to allow gps access pps gpio" into sc-qpr1-dev am: 6c249e4a9f am: 14719fc742 am: 2200881a2b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15897560

Change-Id: I627aac1ebcb4cab000b40aa9a5d5c715d9188e0d
2021-09-30 14:50:55 +00:00
Edwin Tung
0dec837b29 Merge "gps: add sepolicy to allow gps access pps gpio" into sc-qpr1-dev am: 6c249e4a9f am: 0a91edb9b7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15897560

Change-Id: I50c3aef7cc88b9ec6c5f09807f4c7e7f541e7876
2021-09-30 14:37:10 +00:00
Edwin Tung
2200881a2b Merge "gps: add sepolicy to allow gps access pps gpio" into sc-qpr1-dev am: 6c249e4a9f am: 14719fc742
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15897560

Change-Id: I1a32ed0832220518af95fdef054f7096ba718d8c
2021-09-30 14:36:37 +00:00
Edwin Tung
0a91edb9b7 Merge "gps: add sepolicy to allow gps access pps gpio" into sc-qpr1-dev am: 6c249e4a9f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15897560

Change-Id: If95d3e18d1da32b13246d0897d998935eb37c774
2021-09-30 14:26:41 +00:00
Edwin Tung
14719fc742 Merge "gps: add sepolicy to allow gps access pps gpio" into sc-qpr1-dev am: 6c249e4a9f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15897560

Change-Id: I327b8257a1c929c94a4adc02037488bdb547d642
2021-09-30 14:26:41 +00:00
Edwin Tung
6c249e4a9f Merge "gps: add sepolicy to allow gps access pps gpio" into sc-qpr1-dev 2021-09-30 14:11:49 +00:00
George Chang
8f3fb5c47f Update SecureElement Sepolicy
Add rules for sysfs_st33spi
Separate hal_secure_element_st54spi and st33spi form default

Bug: 193417907
Test: VtsHalSecureElementV1_2TargetTest,
      VtsHalSecureElementV1_1TargetTest,
      VtsHalSecureElementV1_0TargetTest,
      CtsOmapiTestCases
Change-Id: I444af2e38fc120d173445bce48b7e4d381201a91
2021-09-30 17:41:32 +08:00
Adam Shih
d61f60e882 centralize wifi_ext config
Bug: 201599426
Test: boot with wifi_ext started
Change-Id: I0638216a7100b26415a79e87cdb1a5a260f05baa
2021-09-30 14:25:57 +08:00
Edwin Tung
4d6a7023e1 gps: add sepolicy to allow gps access pps gpio
Bug: 175086879
Test: no avc deny
Change-Id: I960940d7223c25732021ff4d92ae72255c044291
2021-09-30 12:41:17 +08:00
Philip Quinn
d5ac0ac3ce Move twoshay definitions to hardware/google/pixel-sepolicy/input.
Bug: 187654303
Test: twoshay works on R4, B3, P7
Change-Id: I2cada463fcbfd3b52230430b12b091a655e2abbb
2021-09-28 20:11:33 +00:00
TreeHugger Robot
abb6cd5910 Merge "Using dontaudit to fix the avc on boot test" 2021-09-28 05:46:10 +00:00
Ted Lin
951ce82739 Using dontaudit to fix the avc on boot test
avc: denied { search } for comm="kworker/6:2" name="google_battery" dev="debugfs" ino=32648 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_battery_debugfs:s0 tclass=dir permissive=1

Bug:200739262
Test: Check bugreport
Change-Id: I50a96bab88f564fef0eda9a23bb77dc6ffed357f
Signed-off-by: Ted Lin <tedlin@google.com>
2021-09-28 03:21:38 +00:00
Erik Staats
c57b0bdb55 Allow the sensor HAL to access raw HID devices. am: d60ebc5327 am: 35b6d77e0c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15847652

Change-Id: I9bb49fa27647423d27a4d8cb5444412b5220930c
2021-09-27 19:06:50 +00:00
Erik Staats
35b6d77e0c Allow the sensor HAL to access raw HID devices. am: d60ebc5327
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15847652

Change-Id: I31d13e1a04c7280706e52caea4f1c34a28b5d0e7
2021-09-27 18:45:23 +00:00
Erik Staats
d60ebc5327 Allow the sensor HAL to access raw HID devices.
Bug: 195964858
Test: Paired a Sony PS4 controller and verified that it's discovered by
 the dynamic sensor HAL.
Test: See details in testing done comment in
 https://googleplex-android-review.git.corp.google.com/15847652 .
Change-Id: Ic0bdd711d066a9793eba305102e9a850e3973856
2021-09-27 18:34:30 +00:00
Jenny Ho
0970321dcb [automerger skipped] sepolicy: add rule for new debug file node am: c8651e514c -s ours am: a592fb52c3 -s ours am: 59ec413953 -s ours
am skip reason: Merged-In I0ddf68d5e15fe8d77d8d61287f65621c14024f46 with SHA-1 17e518038e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15773285

Change-Id: I09ea2191f3755e63c1b4eea4c4584b6cd8e36e98
2021-09-27 16:30:46 +00:00
Jenny Ho
23373a1187 [automerger skipped] sepolicy: add rule for new debug file node am: c8651e514c am: 948eeb2de5 -s ours am: ae368d3f03 -s ours
am skip reason: Merged-In I0ddf68d5e15fe8d77d8d61287f65621c14024f46 with SHA-1 17e518038e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15773285

Change-Id: I0b6a5473fc06f2707899f6e30b27c1abd6aee04a
2021-09-27 16:30:32 +00:00
Jenny Ho
59ec413953 [automerger skipped] sepolicy: add rule for new debug file node am: c8651e514c -s ours am: a592fb52c3 -s ours
am skip reason: Merged-In I0ddf68d5e15fe8d77d8d61287f65621c14024f46 with SHA-1 17e518038e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15773285

Change-Id: I0ad52614acb4f241c9000db84095182261061b3d
2021-09-27 16:20:46 +00:00
Jenny Ho
ae368d3f03 [automerger skipped] sepolicy: add rule for new debug file node am: c8651e514c am: 948eeb2de5 -s ours
am skip reason: Merged-In I0ddf68d5e15fe8d77d8d61287f65621c14024f46 with SHA-1 17e518038e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15773285

Change-Id: Ibef4eab822f2fa8cff1af49400a9fde361157f5c
2021-09-27 16:15:09 +00:00
Jenny Ho
a592fb52c3 [automerger skipped] sepolicy: add rule for new debug file node am: c8651e514c -s ours
am skip reason: Merged-In I0ddf68d5e15fe8d77d8d61287f65621c14024f46 with SHA-1 17e518038e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15773285

Change-Id: Id8b68427c9c185ee0cfe76446f6d5bfaba4a0341
2021-09-27 15:58:25 +00:00
Jenny Ho
948eeb2de5 sepolicy: add rule for new debug file node am: c8651e514c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15773285

Change-Id: I459d1f82f9680d87a2533568259cd54c11233d5f
2021-09-27 15:57:26 +00:00
Erik Staats
509fb93a76 Allow the sensor HAL to access dynamic sensor properties. am: e42a4ed3be am: cb725e413b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15905607

Change-Id: Icebeadf358ecb4cc6a14674b52a8fb0ff5179042
2021-09-24 18:05:32 +00:00
Erik Staats
cb725e413b Allow the sensor HAL to access dynamic sensor properties. am: e42a4ed3be
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15905607

Change-Id: I4d16e83741afa94aec87bdf19d412d8d7e53f91a
2021-09-24 17:46:31 +00:00
George Lee
2a4bce5b31 power_hal: add bcl file permission
Bug: 201002339
Test: Local test and ensure proper ratio written via PowerHAL
Signed-off-by: George Lee <geolee@google.com>
Change-Id: Ib0a3a5401312403ce870b9c4a4ca971f05c253e4
2021-09-24 16:10:53 +00:00
Erik Staats
e42a4ed3be Allow the sensor HAL to access dynamic sensor properties.
Bug: 195964858
Test: Verified dynamic sensor manager is present in sensor list and that
 no SELinux violations occur on sc-v2-dev and master.
Test: See details in testing done comment in
 https://googleplex-android-review.git.corp.google.com/15905607 .
Change-Id: I2f1c05ec0d840f6ebae1e5356f668b3f9431fd25
2021-09-24 05:53:35 -07:00
Max Kogan
b92bc5f51c sepolicy: gs101: allow dumpstate to access AoC stats
Add AoC DRAM votes to bugreports.

Bug: 198203507
Change-Id: I77addf15709fceb70514d552b9fa8553cb129a7c
2021-09-23 17:52:51 -07:00
Jenny Ho
c8651e514c sepolicy: add rule for new debug file node
W dumpstate@1.1-s: type=1400 audit(0.0:7): avc: denied { read } for name="logbuffer_maxfg_monitor" dev="tmpfs" ino=500 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0

Bug: 196755019
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Merged-In: I0ddf68d5e15fe8d77d8d61287f65621c14024f46
Change-Id: I0ddf68d5e15fe8d77d8d61287f65621c14024f46
2021-09-23 23:29:29 +00:00
TreeHugger Robot
b608691d92 Merge "Add Context Hub AIDL to gs101 sepolicy" 2021-09-23 17:14:54 +00:00
Arthur Ishiguro
2bc80fd0e7 Add Context Hub AIDL to gs101 sepolicy
Bug: 194285834
Test: None
Change-Id: I8f9ef02c51d3f06bbfa94e9ce006cd2a0ee59c73
2021-09-23 08:16:01 -07:00
Erik Staats
2f3c410332 Revert "Allow the sensor HAL to access dynamic sensor properties." am: aef1a206a7 am: f66955e015
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15886140

Change-Id: I9ff54bc3528ad381e8b871f8fccdf1579e4dac43
2021-09-22 18:28:17 +00:00
Erik Staats
f66955e015 Revert "Allow the sensor HAL to access dynamic sensor properties." am: aef1a206a7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15886140

Change-Id: I8fa160db43cbe237c73cb103e6e212e1aa0df7a0
2021-09-22 18:11:29 +00:00
Erik Staats
aef1a206a7 Revert "Allow the sensor HAL to access dynamic sensor properties."
Revert "dynamic_sensor: Add sensor manager init to sub-HAL 2.1."

Revert submission 15874906-bug_195964858.2

Reason for revert: b/200815351
Reverted Changes:
I76a60f7fb:Allow the sensor HAL to access dynamic sensor prop...
I5d587dc46:dynamic_sensor: Add sensor manager init to sub-HAL...

Change-Id: Ib29649b058ec6f329958e1dfcba0c2e35ea79306
2021-09-22 17:53:58 +00:00
Erik Staats
0489fa3d2a Allow the sensor HAL to access dynamic sensor properties. am: fba4a09331 am: 9cadbdc347
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15874927

Change-Id: I252e8f01842ba5929dba7d8465140170e2a3f177
2021-09-22 12:58:02 +00:00
Erik Staats
9cadbdc347 Allow the sensor HAL to access dynamic sensor properties. am: fba4a09331
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15874927

Change-Id: I9022c4d8e270af3a0d369692a6996dd046c732c4
2021-09-22 12:40:34 +00:00
TreeHugger Robot
f89b55dcb0 Merge "organize wifi_sniffer" 2021-09-22 04:56:04 +00:00
Erik Staats
fba4a09331 Allow the sensor HAL to access dynamic sensor properties.
Bug: 195964858
Test: Verified dynamic sensor manager is present in sensor list and that
 no SELinux violations occur.
Test: See details in testing done comment in
 https://googleplex-android-review.git.corp.google.com/15874927 .
Change-Id: I76a60f7fbd113059156ccaea2c4f98580cb0836a
2021-09-20 16:53:16 -07:00
TreeHugger Robot
3b65e6f197 Merge "Split bluetooth sepolicy file to avoid conflict" 2021-09-17 08:46:42 +00:00
Adam Shih
22ed933f97 label extcon files
Bug: 199987074
Test: boot with no relevant errors
Change-Id: Idd26d8675c332043b1066e3eba1706527254eb03
2021-09-16 10:02:11 +08:00
sukiliu
2d2d6999d2 Update avc error on ROM 7733084
avc: denied { read } for comm="android.ui" name="extcon0" dev="sysfs" ino=72527 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0

Bug: 199987074
Test: PtsSELinuxTestCases
Change-Id: I1d160b06b4b0bba9402ae3de5f564d6f893505c1
2021-09-15 14:41:46 +08:00
Patty
9795c12e8f Split bluetooth sepolicy file to avoid conflict
- Move bluetooth related config to bluetooth folder

Bug: 196308076
Test: make; boot with service btlinux started
Change-Id: I8d40697f20a916fc154f0b60851abecd1deadc0d
2021-09-15 10:50:39 +08:00
Adam Shih
f97138a6bb organize wifi_sniffer
Bug: 196916111
Test: boot with wifi_sniffer started

Change-Id: If12fb0499c749e4e8379a5c2095fbf9cd2ca624e
2021-09-14 13:35:31 +08:00
Jonglin Lee
af3a79ed68 Merge "Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."" 2021-09-10 21:31:23 +00:00
Jonglin Lee
7254de258a Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."
Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."

Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."

Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."

Revert "Move sepolicy for _touchflow targets."

Revert submission 15676823-reflector-sepolicy

Reason for revert: breaking several builds in git_master-without-vendor
Reverted Changes:
Ifecfc81f0:Move twoshay definitions to hardware/google/pixel-...
Idfd81131c:Move twoshay definitions to hardware/google/pixel-...
Id2b0e1db3:Move twoshay definitions to hardware/google/pixel-...
I43ac6337f:Move twoshay definitions to hardware/google/pixel-...
If95e6e788:Move twoshay definitions to hardware/google/pixel-...
I07ab95780:Move sepolicy for _touchflow targets.
I01f378b51:Move sepolicy for _touchflow targets.

Bug: 199548147
Change-Id: I84f106c24bd47fd171788301415c0eabafe9254f
2021-09-10 21:23:57 +00:00
Philip Quinn
5c58949ac6 Merge "Move twoshay definitions to hardware/google/pixel-sepolicy/input." 2021-09-10 17:15:05 +00:00
Michael Ayoubi
cb6a843980 Allow euiccpixel_app to get dck_prop
Bug: 189881206
Bug: 183606657

Test: Build and confirm EuiccSupportPixel can get
      ro.gms.dck.eligible_wcc
Change-Id: I59873d33f21632347183d749c9bbf25c6e6ba2cd
2021-09-09 15:44:25 +00:00
Adam Shih
778f7da931 label Extcon files
Bug: 199218084
Test: Boot with target files labeled correctly
Change-Id: I7d8c4ecb23a5717e2265cfd66b161fb46717615f
2021-09-09 13:05:36 +08:00
Philip Quinn
d1dd6bac2a Move twoshay definitions to hardware/google/pixel-sepolicy/input.
Bug: 187654303
Test: twoshay works on r4
Change-Id: Id2b0e1db3e1cb9ddf579ea7ed74493464d13fc84
2021-09-08 13:22:24 -07:00
Adam Shih
82db60c2d4 remove obsolete devices
Bug: 196916111
Test: No file on the path
Change-Id: If8e54bd161bc955424b40023d94f15bf6b82cc8f
2021-09-08 13:15:44 +08:00
Mark Chang
0782cab4f0 Merge "sepolicy: Add "dontaudit" for twoshay dac_override." 2021-09-08 01:28:34 +00:00
Jenny Ho
7d27682911 sepolicy: add rule for new debug file node am: 17e518038e am: ee73f40872
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15756806

Change-Id: Ie03501a815a501184142af5f8dd0e4aa1df97729
2021-09-07 14:33:01 +00:00
Jenny Ho
ee73f40872 sepolicy: add rule for new debug file node am: 17e518038e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15756806

Change-Id: Ie913098b9b31e3c042abe13672fddc726cf4aef0
2021-09-07 14:21:17 +00:00
Mark Chang
8a5863ab6d sepolicy: Add "dontaudit" for twoshay dac_override.
Bug: 198755236
Test: build pass and boot to home
Signed-off-by: Mark Chang <changmark@google.com>
Change-Id: I5c330564cc026e113c5d33d5d093dbcdb3ede5e4
(cherry picked from commit a1aab562ca)
2021-09-06 13:08:59 +00:00
Jenny Ho
17e518038e sepolicy: add rule for new debug file node
W dumpstate@1.1-s: type=1400 audit(0.0:7): avc: denied { read } for name="logbuffer_maxfg_monitor" dev="tmpfs" ino=500 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0

Bug: 196755019
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: I0ddf68d5e15fe8d77d8d61287f65621c14024f46
2021-09-06 06:21:34 +00:00
Roshan Pius
a84423801e [automerger skipped] gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor am: 9c96111094 -s ours
am skip reason: Merged-In Ief48eacde68b062b2199b20c0c1bb3af23795240 with SHA-1 a3f040d2ac is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15686198

Change-Id: I33396a2698acc529851ddb4207168790540bcd14
2021-08-26 21:52:28 +00:00
Roshan Pius
9c96111094 gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor
Since we are now creating an AOSP HAL for uwb. Rename qorvo's internal
HAL to hal_uwb_vendor to avoid conflicts with the AOSP HAL sepolicy
rules.

Bug: 195308730
Test: Compiles
Change-Id: Ief48eacde68b062b2199b20c0c1bb3af23795240
Merged-In: Ief48eacde68b062b2199b20c0c1bb3af23795240
2021-08-26 20:02:20 +00:00
Roshan Pius
62f6dbd236 [automerger skipped] gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor am: a3f040d2ac -s ours am: 545771e074 -s ours
am skip reason: Merged-In Ief48eacde68b062b2199b20c0c1bb3af23795240 with SHA-1 04fbca104c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15678068

Change-Id: I5776eafb0a6ca87ba12432bfd8b24405b699311a
2021-08-26 04:25:54 +00:00
Roshan Pius
545771e074 [automerger skipped] gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor am: a3f040d2ac -s ours
am skip reason: Merged-In Ief48eacde68b062b2199b20c0c1bb3af23795240 with SHA-1 04fbca104c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15678068

Change-Id: I1ff7de7eba82ec1d804aa4d2e481303a6ed63252
2021-08-26 04:07:26 +00:00
Roshan Pius
dd586eb7b4 [automerger skipped] gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor am: 04fbca104c -s ours am: 4eeb587d95 -s ours am: 063cbb1b8f -s ours
am skip reason: skipped by user rpius

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15675687

Change-Id: I1f9c3293fa679d604f521115f4308aea6072ef4b
2021-08-26 01:36:02 +00:00
Roshan Pius
063cbb1b8f [automerger skipped] gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor am: 04fbca104c -s ours am: 4eeb587d95 -s ours
am skip reason: skipped by user rpius

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15675687

Change-Id: Ib6dafd7313c358327c24aa15196cd53d0d3c9840
2021-08-26 01:17:34 +00:00
Roshan Pius
a3f040d2ac gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor
Since we are now creating an AOSP HAL for uwb. Rename qorvo's internal
HAL to hal_uwb_vendor to avoid conflicts with the AOSP HAL sepolicy
rules.

Bug: 195308730
Test: Compiles
Change-Id: Ief48eacde68b062b2199b20c0c1bb3af23795240
Merged-In: Ief48eacde68b062b2199b20c0c1bb3af23795240
2021-08-26 01:07:43 +00:00
Roshan Pius
4eeb587d95 [automerger skipped] gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor am: 04fbca104c -s ours
am skip reason: skipped by user rpius

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15675687

Change-Id: I2d51df14c755847d1a270bdb98e9b702e22f8b7f
2021-08-26 01:01:24 +00:00
Victor Liu
16092c7774 [automerger skipped] uwb: permissions for factory uwb calibration file am: 29aa981623 am: 7a06a7a434 -s ours am: 441d9430ab -s ours
am skip reason: Merged-In I3e5282477fd391b483e03242ce0b806bd447dc54 with SHA-1 29aa981623 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315

Change-Id: I8e7f08993339f6cd1e6d39e7d8eaf1008827f4f1
2021-08-25 23:59:12 +00:00
Victor Liu
684c5ff75b [automerger skipped] uwb: permissions for factory uwb calibration file am: 29aa981623 am: 5dfabe8acf am: e877511429 -s ours
am skip reason: Merged-In I3e5282477fd391b483e03242ce0b806bd447dc54 with SHA-1 8383d9e13f is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315

Change-Id: Ie2eef5d497c17c4538febae8fb96e4d69d1caf10
2021-08-25 23:59:00 +00:00
Victor Liu
441d9430ab [automerger skipped] uwb: permissions for factory uwb calibration file am: 29aa981623 am: 7a06a7a434 -s ours
am skip reason: Merged-In I3e5282477fd391b483e03242ce0b806bd447dc54 with SHA-1 29aa981623 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315

Change-Id: I24b2da33bda30d057dab6812ec886615a3febb45
2021-08-25 23:42:11 +00:00
Victor Liu
e877511429 uwb: permissions for factory uwb calibration file am: 29aa981623 am: 5dfabe8acf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315

Change-Id: I35c0484a84695969e5f1f3e7cf2e8c7c06b4df3e
2021-08-25 23:41:44 +00:00
Victor Liu
7a06a7a434 uwb: permissions for factory uwb calibration file am: 29aa981623
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315

Change-Id: I9755128c2a7a1039cb3b1c5a2e3913a0965540d9
2021-08-25 23:29:50 +00:00
Victor Liu
5dfabe8acf uwb: permissions for factory uwb calibration file am: 29aa981623
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315

Change-Id: Ifa053b14b8fe06af7d076b103657ec7232aa8510
2021-08-25 23:29:46 +00:00
Victor Liu
29aa981623 uwb: permissions for factory uwb calibration file
add permission to:
copy factory uwb calib files from persist to /data/vendor/uwb
convert copied file to proper format for uwb stack to consume

Bug: 195659525
Signed-off-by: Victor Liu <victorliu@google.com>
Change-Id: I3e5282477fd391b483e03242ce0b806bd447dc54
Merged-In: I3e5282477fd391b483e03242ce0b806bd447dc54
2021-08-25 19:14:10 +00:00
Victor Liu
8383d9e13f uwb: permissions for factory uwb calibration file
add permission to:
copy factory uwb calib files from persist to /data/vendor/uwb
convert copied file to proper format for uwb stack to consume

Bug: 195659525
Signed-off-by: Victor Liu <victorliu@google.com>
Change-Id: I3e5282477fd391b483e03242ce0b806bd447dc54
2021-08-25 19:12:44 +00:00
Roshan Pius
04fbca104c gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor
Since we are now creating an AOSP HAL for uwb. Rename qorvo's internal
HAL to hal_uwb_vendor to avoid conflicts with the AOSP HAL sepolicy
rules.

Bug: 195308730
Test: Compiles
Change-Id: Ief48eacde68b062b2199b20c0c1bb3af23795240
Merged-In: Ief48eacde68b062b2199b20c0c1bb3af23795240
2021-08-25 17:32:53 +00:00
Roshan Pius
515c17c4e3 gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor
Since we are now creating an AOSP HAL for uwb. Rename qorvo's internal
HAL to hal_uwb_vendor to avoid conflicts with the AOSP HAL sepolicy
rules.

Bug: 195308730
Test: Compiles
Change-Id: Ief48eacde68b062b2199b20c0c1bb3af23795240
2021-08-23 09:03:06 -07:00
TreeHugger Robot
c507d41193 Merge "Allow boot color propagation" into sc-qpr1-dev am: 9c97417d3a am: c9690b1256 am: f3993d4555
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15600825

Change-Id: I7400f05e41c5bbb8bdf080879f41a429b0c2ba07
2021-08-21 17:14:18 +00:00
TreeHugger Robot
a6f6fe4d93 Merge "Allow boot color propagation" into sc-qpr1-dev am: 9c97417d3a am: c3521edd8c am: 4dce16cfef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15600825

Change-Id: I15e30c3a32ca4fb4777fae9d3bfb4d92c5c45205
2021-08-21 17:10:24 +00:00
TreeHugger Robot
f3993d4555 Merge "Allow boot color propagation" into sc-qpr1-dev am: 9c97417d3a am: c9690b1256
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15600825

Change-Id: I6d8905a45f5195294ca67d8cf21917779c6c3a0c
2021-08-21 17:10:21 +00:00
TreeHugger Robot
4dce16cfef Merge "Allow boot color propagation" into sc-qpr1-dev am: 9c97417d3a am: c3521edd8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15600825

Change-Id: Ie7fde3e797a018b74849b74543a1a0564d9141fd
2021-08-19 23:24:40 +00:00
TreeHugger Robot
c3521edd8c Merge "Allow boot color propagation" into sc-qpr1-dev am: 9c97417d3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15600825

Change-Id: Ibef6a94ac176f32b8bb0a87d3eb8283573bbcc74
2021-08-19 23:12:37 +00:00
TreeHugger Robot
c9690b1256 Merge "Allow boot color propagation" into sc-qpr1-dev am: 9c97417d3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15600825

Change-Id: I7c3f9be67d2e2ae13c034e4909c9ec589e38ccf2
2021-08-19 23:12:30 +00:00
TreeHugger Robot
9c97417d3a Merge "Allow boot color propagation" into sc-qpr1-dev 2021-08-19 22:52:31 +00:00
David Chen
9778b7a237 [automerger skipped] resolve merge conflicts of c0922582bc to sc-v2-dev am: 462d4b1bcd -s ours am: 381a1043e1 -s ours
am skip reason: Merged-In Ib95debbc9ce10919c5f935e8f70b340bb293b54a with SHA-1 c0922582bc is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15618916

Change-Id: I1d76d0032294bdb093426eab11720d9d8e788832
2021-08-19 08:52:39 +00:00
David Chen
381a1043e1 [automerger skipped] resolve merge conflicts of c0922582bc to sc-v2-dev am: 462d4b1bcd -s ours
am skip reason: Merged-In Ib95debbc9ce10919c5f935e8f70b340bb293b54a with SHA-1 c0922582bc is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15618916

Change-Id: I4cf911eb3be87f95df8310888a4b4d211fc576fb
2021-08-19 08:37:09 +00:00
David Chen
d4cef608f5 [automerger skipped] resolve merge conflicts of 945de94222 to sc-v2-dev-plus-aosp am: 28cd716faa -s ours
am skip reason: Merged-In Ib95debbc9ce10919c5f935e8f70b340bb293b54a with SHA-1 6e7338095b is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15618917

Change-Id: I5e2af865dcdd230b501f6256af12396eb0a877e5
2021-08-19 04:14:39 +00:00
David Chen
462d4b1bcd resolve merge conflicts of c0922582bc to sc-v2-dev
Bug: 197164878

Change-Id: Ibc7ea7ffe9c30912c8e12d081a6b110f8e73f29f
Merged-In: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
2021-08-19 02:25:56 +00:00
David Chen
28cd716faa resolve merge conflicts of 945de94222 to sc-v2-dev-plus-aosp
Bug: 197166084

Change-Id: I4b8b2d99db133be4c96853f072e3b10dbac39b92
Merged-In: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
2021-08-19 02:25:12 +00:00
davidycchen
945de94222 Allow twoshay to access fwk_stats_service and system_server am: c0922582bc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15605516

Change-Id: I8a500539a2738d27fa47d2d3f45cfe5e68bfe099
2021-08-19 01:30:20 +00:00
Horng Chuang
b43621dd40 Merge "sepolicy: gs101: Grant permission for more camera device nodes" 2021-08-18 06:16:25 +00:00
Rick Yiu
076106a43b Merge "gs101-sepolicy: Remove private/mediaprovider_app.te" into sc-v2-dev am: 26fec151ec am: 7fcca345b0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15595122

Change-Id: Ib0b444122bc33f26149f5a655a3ed10496b7529e
2021-08-18 04:23:21 +00:00
Rick Yiu
7fcca345b0 Merge "gs101-sepolicy: Remove private/mediaprovider_app.te" into sc-v2-dev am: 26fec151ec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15595122

Change-Id: Ic7d8107ef2e16a57e00de5080a86cdffa50c6791
2021-08-18 04:06:09 +00:00
Rick Yiu
26fec151ec Merge "gs101-sepolicy: Remove private/mediaprovider_app.te" into sc-v2-dev 2021-08-18 03:46:01 +00:00
davidycchen
c0922582bc Allow twoshay to access fwk_stats_service and system_server
avc:  denied  { find } for pid=813 uid=0
name=android.frameworks.stats.IStats/default scontext=u:r:twoshay:s0
tcontext=u:object_r:fwk_stats_service:s0 tclass=service_manager

avc: denied { call } for scontext=u:r:twoshay:s0
tcontext=u:r:system_server:s0 tclass=binder

Bug: 179334953
Test: Make selinux_policy and push related files to the device.

Signed-off-by: davidycchen <davidycchen@google.com>
Change-Id: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
Merged-In: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
2021-08-18 09:47:01 +08:00
Bart Van Assche
0b8782525b Add the 'bdev_type' attribute to all block device types am: 37b5741301 am: 239bcceb78 am: 7513cd7ad6 am: 6828588c74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922

Change-Id: I6b1d77a15fd0a9839e6aac3313fe2ed2148f8693
2021-08-18 01:36:09 +00:00
Bart Van Assche
23e753a813 Add the 'bdev_type' attribute to all block device types am: 37b5741301 am: 79b41e3c3a am: 742ff4f98c am: 65b8e1e433
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922

Change-Id: I370eedd4c90af9043c9d96b73c16e1aaf13bb835
2021-08-18 01:35:01 +00:00
Bart Van Assche
eeccb9bc7a Add the 'bdev_type' attribute to all block device types am: 37b5741301 am: 239bcceb78 am: ea25044059 am: 07751567ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922

Change-Id: Ifac56b5f8a8e14ca55419e3009771644c3041df2
2021-08-18 01:32:55 +00:00
Bart Van Assche
6828588c74 Add the 'bdev_type' attribute to all block device types am: 37b5741301 am: 239bcceb78 am: 7513cd7ad6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922

Change-Id: I5c32e5d3fdb511b5103dc2e0a24f837e714943b7
2021-08-18 01:26:07 +00:00
Bart Van Assche
65b8e1e433 Add the 'bdev_type' attribute to all block device types am: 37b5741301 am: 79b41e3c3a am: 742ff4f98c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922

Change-Id: Ie24dd9a6de1a644b15eed4da713089cc6bcbefe6
2021-08-18 01:20:26 +00:00
Bart Van Assche
07751567ad Add the 'bdev_type' attribute to all block device types am: 37b5741301 am: 239bcceb78 am: ea25044059
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922

Change-Id: I5d46eab501e1ce290570a69dde5450813eff0bf0
2021-08-18 01:20:15 +00:00
Bart Van Assche
742ff4f98c Add the 'bdev_type' attribute to all block device types am: 37b5741301 am: 79b41e3c3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922

Change-Id: I693db84157721b8ff20ae7bd8da213469352cc75
2021-08-18 01:01:59 +00:00
Bart Van Assche
7513cd7ad6 Add the 'bdev_type' attribute to all block device types am: 37b5741301 am: 239bcceb78
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922

Change-Id: Iedf50eb9fc1c205eb584c4c53ad7de45c06b695d
2021-08-18 00:56:43 +00:00
Bart Van Assche
ea25044059 Add the 'bdev_type' attribute to all block device types am: 37b5741301 am: 239bcceb78
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922

Change-Id: I0ca50d490ad5aa49bcc2f1c7db52f5b81a44dcd2
2021-08-18 00:56:43 +00:00
Bart Van Assche
239bcceb78 Add the 'bdev_type' attribute to all block device types am: 37b5741301
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922

Change-Id: I19d709e960fe8ccf066bdbd20dc6817ee20e55d0
2021-08-18 00:34:10 +00:00
Bart Van Assche
79b41e3c3a Add the 'bdev_type' attribute to all block device types am: 37b5741301
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922

Change-Id: I52ac9161ae22eafecd60a8317370ddc3b243263d
2021-08-18 00:31:25 +00:00
Bart Van Assche
37b5741301 Add the 'bdev_type' attribute to all block device types
The following patch introduces code that iterates over all block
devices:
https://android-review.googlesource.com/c/platform/system/core/+/1783847/9

The following patch grants 'init' and 'apexd' permission to iterate over
all block devices:
https://android-review.googlesource.com/c/platform/system/sepolicy/+/1783947

The above SELinux policy change requires to add the 'bdev_type'
attribute to all block devices. Hence this patch.

Bug: 194450129
Bug: 196982345
Test: Built Android images that include this change and verified that neither init nor apexd triggers any SELinux access denied errors.
Change-Id: I6ce1127f199c5b33812f15fe280d86594d7d7ebf
Signed-off-by: Bart Van Assche <bvanassche@google.com>
2021-08-17 15:23:23 -07:00
Lucas Dupin
6e887cf3a0 Allow boot color propagation
Allows SystemUI to write the boot color sysprop

Test: manual
Bug: 190093578
Change-Id: I844a4dae87fe09a09ff3368c540ffab5f745d455
(cherry picked from commit 8a586e6786)
2021-08-17 21:06:23 +00:00
Rick Yiu
6224fa9354 gs101-sepolicy: Remove private/mediaprovider_app.te
Moved to system/sepolicy to solve GSI avc denials.

Bug: 196326750
Test: build pass
Change-Id: I4bdcc1d49bf9550297687534074fd3fc526d3acc
2021-08-17 21:09:20 +08:00
TreeHugger Robot
deba8c8ff8 Merge "sepolicy: gs101: allows dock power supply permission" 2021-08-17 12:10:07 +00:00
TreeHugger Robot
e610648768 Merge "Allow boot color propagation" 2021-08-17 06:24:21 +00:00
Jack Wu
941a3bcd44 sepolicy: gs101: allows dock power supply permission
Bug: 196017001
Test: can dump dock power supply in dumpstate
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: Ie2781da77da0f181665974c335998a6dcb0e8ad2
2021-08-17 03:48:48 +00:00
Edmond Chung
3942238884 Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: c45a1b5828 am: 36f756e44b am: eb1a9fd509
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: I7535c119284ad37ac37bce996a4ec102a988f481
2021-08-16 23:37:41 +00:00
Edmond Chung
e8738b4d9b Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: c45a1b5828 am: 07fbe5b0d8 am: 4ee5ff59a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: Ic29fbf1c300b42bcf3ec3dbef460030989ce5ea5
2021-08-16 23:37:35 +00:00
Edmond Chung
25ccfad161 Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: d5f9036c8e am: 9bde9324fe am: ff5c485ddc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: I0f9314f34e796e55e0adc47779f5e342ca6b3b84
2021-08-16 23:37:27 +00:00
Edmond Chung
eb1a9fd509 Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: c45a1b5828 am: 36f756e44b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: I27bc0b77a3438fcaf6cbdf209945f6c7a360771c
2021-08-16 22:45:38 +00:00
Edmond Chung
4ee5ff59a0 Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: c45a1b5828 am: 07fbe5b0d8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: I91b59573968bb3ad15f7785ac155809ae9a7cfdc
2021-08-16 22:45:01 +00:00
Edmond Chung
ff5c485ddc Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: d5f9036c8e am: 9bde9324fe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: I90884f92df1e42fa5b60ad47e914ed1460b40c04
2021-08-16 22:44:58 +00:00
Edmond Chung
36f756e44b Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: c45a1b5828
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: Id66f403466d50ea3beb4663cc137e551a92e16f3
2021-08-16 22:32:00 +00:00
Edmond Chung
07fbe5b0d8 Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: c45a1b5828
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: Ia7663a410cd3ffcbb554dc653c2470e53efa2f4b
2021-08-16 22:32:00 +00:00
Edmond Chung
9bde9324fe Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b am: d5f9036c8e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: Ib347e1a8fbee1822542adf48a03f92dbdac3a302
2021-08-16 22:31:40 +00:00
Edmond Chung
c45a1b5828 Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: I97f8f143230d13f64b34ee11c7a46cfcc5f2f3f9
2021-08-16 22:17:00 +00:00
Edmond Chung
d5f9036c8e Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607

Change-Id: Icf58b2d5fef01a62ef5ec8c5009690224a15a939
2021-08-16 22:16:13 +00:00
Edmond Chung
7e581b9a7b Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev 2021-08-16 22:01:46 +00:00
Edmond Chung
6b30dbc54c gs101: Allow camera HAL to access interrupt handles
This is to allow camera HAL to modify IRQ affinity for different use
cases.

Bug: 196058977
Test: Camera use cases
Change-Id: I498b0ac763b735d05299e1f4b09de14e131fd6e3
2021-08-16 10:52:27 -07:00
Rick Yiu
86d3394ebc gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 1f4c69a11d am: 9c7ca5fdd3 am: 6ce26f4ea0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I7376da420b0720982e60b884aa392718d3997eb9
2021-08-16 14:40:42 +00:00
Rick Yiu
13c53ac53b gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 1f4c69a11d am: d2f6cfc831 am: c3a47b14d5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: Iea2ef6b78268f27e480a97a8699df8d65fcc6153
2021-08-16 14:40:37 +00:00
Rick Yiu
63a624e811 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 7b8fe23d74 am: fa5d13d6e1 am: 7b0fa572c3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I985dde431db9fa2f03f6036c139c6a653f3fe755
2021-08-16 14:40:25 +00:00
Rick Yiu
6ce26f4ea0 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 1f4c69a11d am: 9c7ca5fdd3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I005a8c793d4d8919a1b8cb74528bb7063a7498cb
2021-08-16 14:26:27 +00:00
Rick Yiu
c3a47b14d5 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 1f4c69a11d am: d2f6cfc831
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I64c32ca8b100ae5de316130875593ad6e1753744
2021-08-16 14:26:05 +00:00
Rick Yiu
7b0fa572c3 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 7b8fe23d74 am: fa5d13d6e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: Ia05c12145187f2500010827b6e28ce5b56039511
2021-08-16 14:25:57 +00:00
Rick Yiu
9c7ca5fdd3 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 1f4c69a11d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I59e7baee2e2c5a80d53b5a6f5c8712a2b09a36d3
2021-08-16 14:11:45 +00:00
Rick Yiu
d2f6cfc831 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 1f4c69a11d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: Ie4daa316c73721aa8cb9d87d262ba754fd926356
2021-08-16 14:11:43 +00:00
Rick Yiu
fa5d13d6e1 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50 am: 7b8fe23d74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I2837b12374957c35725af2f4aed49ada200810ff
2021-08-16 14:11:31 +00:00
Rick Yiu
1f4c69a11d gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I54a069f83c389b69a73d9d4d64a34177ba652d1c
2021-08-16 13:54:58 +00:00
Rick Yiu
7b8fe23d74 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061

Change-Id: I1870542193c2b06de1f1e53f38e84fb800a74839
2021-08-16 13:54:01 +00:00
Rick Yiu
2ef3daba50 gs101-sepolicy: Use untrusted_app_all for vendor_sched denials
Use untrusted_app_all to cover all Use untrusted_app versions.

Bug: 196109806
Test: no untrusted_app denials for vendor_sched
Change-Id: Ic6426b26b8a05f8a0bc7e2a4a4a293b2988812d3
2021-08-16 13:40:32 +00:00
horngchuang
e212167642 sepolicy: gs101: Grant permission for more camera device nodes
Bug: 193103432
Test: aosp camera
Change-Id: Ic921200f05092c217d9c3d859ed33b5dc8e5b44b
2021-08-16 08:40:25 +00:00
Victor Liu
4c1a135b46 allow uwb hal sys_nice access am: 39b5815a1e am: 9d2d70e09b am: 9d0c136cf6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: I7022d884e08a03739fa753b606bab9c3bafae882
2021-08-14 00:21:46 +00:00
Victor Liu
ee1c9d29b2 uwb: allow uwb to access the radio service am: 0c429efc07 am: e4ee9723f4 am: 2fdbcbea3e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I068782dac351717c63def8cec0057f1425ddf9c4
2021-08-13 23:42:43 +00:00
Victor Liu
9d0c136cf6 allow uwb hal sys_nice access am: 39b5815a1e am: 9d2d70e09b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: I64e3b902d5a83a50d296439779dc252f159ba66d
2021-08-13 23:39:35 +00:00
Victor Liu
2fdbcbea3e uwb: allow uwb to access the radio service am: 0c429efc07 am: e4ee9723f4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: Ie3cb7e9c74f07966c249bf67e50a80af810f6e38
2021-08-13 23:34:11 +00:00
Victor Liu
d75e7326f1 allow uwb hal sys_nice access am: 39b5815a1e am: 21d74ff50f am: ecceee1ddc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: I0379b550ceea8c5656d9fc26a556c0fbb48e0150
2021-08-13 22:09:09 +00:00
Victor Liu
ecceee1ddc allow uwb hal sys_nice access am: 39b5815a1e am: 21d74ff50f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: Ie7d5132a50e0d0f7e8db35d512a70ef6b932ab68
2021-08-13 22:07:02 +00:00
Victor Liu
de55d68c2f uwb: allow uwb to access the radio service am: 0c429efc07 am: 19b1a2feef am: 243649da79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I8909e4d78ea1b2dd3bc0ae7492f2c6b846f6f253
2021-08-13 22:03:02 +00:00
Lucas Dupin
8a586e6786 Allow boot color propagation
Allows SystemUI to write the boot color sysprop

Test: manual
Bug: 190093578
Change-Id: I844a4dae87fe09a09ff3368c540ffab5f745d455
2021-08-13 21:52:50 +00:00
Victor Liu
243649da79 uwb: allow uwb to access the radio service am: 0c429efc07 am: 19b1a2feef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I264015c73d5a4a61712726192c7ee3160704dc02
2021-08-13 21:31:06 +00:00
Victor Liu
9d2d70e09b allow uwb hal sys_nice access am: 39b5815a1e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: Ib8b61cc66bd2919360e05434f147f495fcacb156
2021-08-13 02:41:53 +00:00
Victor Liu
21d74ff50f allow uwb hal sys_nice access am: 39b5815a1e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15549222

Change-Id: Ib6d841a96f4ce29a077ec11d10d411e985b110f0
2021-08-13 02:41:52 +00:00
Victor Liu
39b5815a1e allow uwb hal sys_nice access
hardware.qorvo.: type=1400 audit(0.0:9): avc: denied { sys_nice } for capability=23 scontext=u:r:hal_uwb_default:s0 tcontext=u:r:hal_uwb_default:s0 tclass=capability permissive=0
hardware.qorvo.: type=1400 audit(0.0:9): avc: denied { setsched } for scontext=u:r:hal_uwb_default:s0 tcontext=u:r:kernel:s0 tclass=process permissive=0

Bug: 196438549
Signed-off-by: Victor Liu <victorliu@google.com>
Change-Id: I742bae701cfcc7b4842cd63abbc8c275d82c8ba1
2021-08-12 16:11:06 -07:00
Victor Liu
19b1a2feef uwb: allow uwb to access the radio service am: 0c429efc07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I9814b50afb037f6ac6405d3bcc16b3b10723fa3a
2021-08-12 21:57:11 +00:00
Victor Liu
e4ee9723f4 uwb: allow uwb to access the radio service am: 0c429efc07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15521660

Change-Id: I4bc3d385c8895137bf62640c06592907ccd495b0
2021-08-12 21:57:10 +00:00
Victor Liu
0c429efc07 uwb: allow uwb to access the radio service
07-07 18:28:28.391   409   409 E SELinux : avc:  denied  { find } for pid=4609 uid=1083 name=isub scontext=u:r:uwb_vendor_app:s0:c59,c260,c512,c768 tcontext=u:object_r:radio_service:s0 tclass=service_manager permissive=0

Bug: 192833779
Test: on device, no avc denied message
Change-Id: I4a6b778dce6f493093d3a05683473bb60e9cfa5c
2021-08-10 22:47:35 +00:00
TreeHugger Robot
ff88615a29 Merge "Remove ndk_platform backend. Use the ndk backend." 2021-08-10 04:36:22 +00:00
Siqi Lin
65c8707a99 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e am: c8836d9832 am: a77182f6d7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I196c7a0ba2852258a62df0ef090017d97e53608c
2021-08-09 20:52:35 +00:00
Siqi Lin
0d2d997d5d Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e am: b8d0fd0524 am: 142fb69223
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I01455ac7bea1764b52efbcf5d20f588c6ad8c567
2021-08-09 20:52:19 +00:00
Siqi Lin
2af36e8664 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 1a27d3d66e am: 4ae3686490 am: c5ba760b93
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: Iaa4691b168df18a81701230c9f2ce1647b234b90
2021-08-09 20:52:07 +00:00
Siqi Lin
a77182f6d7 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e am: c8836d9832
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: Id49e827dbe531c49a04406988a406ea56c9d8cd9
2021-08-09 20:35:04 +00:00
Siqi Lin
142fb69223 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e am: b8d0fd0524
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I6520f674c942b505cffc597b649b628b68cb543b
2021-08-09 20:34:32 +00:00
Siqi Lin
c5ba760b93 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 1a27d3d66e am: 4ae3686490
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I34c4308d929e5582bf499d424fcf8a2a050d9d55
2021-08-09 20:34:24 +00:00
Siqi Lin
b8d0fd0524 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I53399fad7b0eff5eca806a42d359e403cab58305
2021-08-09 20:20:19 +00:00
Siqi Lin
c8836d9832 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 505d9d692e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I16b13385bd0a66983999b3b2f4518c0a07387068
2021-08-09 20:20:19 +00:00
Siqi Lin
4ae3686490 Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e am: 1a27d3d66e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I238779e171a5600af4c94e9d72fd38b1c71c23f7
2021-08-09 20:20:00 +00:00
Siqi Lin
505d9d692e Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I7c546f38519158fa1237e713bb1200e304a82650
2021-08-09 20:05:08 +00:00
Siqi Lin
1a27d3d66e Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev am: df73384b2e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15475450

Change-Id: I3f6115d79ff01ba2afb58704fd1fba63a0c3acab
2021-08-09 20:03:56 +00:00
Siqi Lin
df73384b2e Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-dev 2021-08-09 19:52:02 +00:00
TreeHugger Robot
729a089db3 Merge "Add sepolicy to allow camera HAL to read display backlight" into sc-dev am: cfcf725081 am: 6727e33988 am: fc17b58a75
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15453996

Change-Id: I665e79870ddc3cfccc96401b1cfbe638d8ebf0a4
2021-08-06 14:49:34 +00:00
TreeHugger Robot
30f9fc6299 Merge "Add sepolicy to allow camera HAL to read display backlight" into sc-dev am: cfcf725081 am: f30a67df8a am: 89a3d8f1e0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15453996

Change-Id: I538d9c42acc9ae78657c34718fd7cb3b0a8ec475
2021-08-06 14:49:23 +00:00
TreeHugger Robot
fc17b58a75 Merge "Add sepolicy to allow camera HAL to read display backlight" into sc-dev am: cfcf725081 am: 6727e33988
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15453996

Change-Id: I1b5491335981d38723d132ee178e107c9df354bb
2021-08-06 14:33:17 +00:00
TreeHugger Robot
89a3d8f1e0 Merge "Add sepolicy to allow camera HAL to read display backlight" into sc-dev am: cfcf725081 am: f30a67df8a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15453996

Change-Id: I1ce748fa2ccad6668f826e2ef2b2b54635f40cbc
2021-08-06 14:32:57 +00:00
TreeHugger Robot
f30a67df8a Merge "Add sepolicy to allow camera HAL to read display backlight" into sc-dev am: cfcf725081
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15453996

Change-Id: I495b9411ea69f6aca5a201c3f6b4e8c464906a9f
2021-08-06 14:17:49 +00:00
TreeHugger Robot
6727e33988 Merge "Add sepolicy to allow camera HAL to read display backlight" into sc-dev am: cfcf725081
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15453996

Change-Id: I98b62dffd1fa65bd69bff78b0a5fe11a841efdfb
2021-08-06 14:16:48 +00:00
TreeHugger Robot
cfcf725081 Merge "Add sepolicy to allow camera HAL to read display backlight" into sc-dev 2021-08-06 14:04:38 +00:00
Jiyong Park
5cc5d52bd7 Remove ndk_platform backend. Use the ndk backend.
The ndk_platform backend will soon be deprecated because the ndk backend
can serve the same purpose. This is to eliminate the confusion about
having two variants (ndk and ndk_platform) for the same ndk backend.

Bug: 161456198
Test: m

Change-Id: Icc9af3798ac89742fa56b1cb37d8116d99b4a9c2
2021-08-06 19:58:01 +09:00
Siqi Lin
57d81aa6c1 sepolicy: gs101: allow dumpstate to access AoC stats
Add AP wakeups from AoC DRAM exceptions to bugreports.

Bug: 186456919
Change-Id: I31df82addf1b5024b8e33c6284e5da1f473ac5d9
2021-08-05 10:47:13 -07:00
Alice Yang
0d7ab6ea8b Add sepolicy to allow camera HAL to read display backlight
Add sepolicy to allow camera HAL to read display backlight to use in
gabc algorithm.

Bug: 187917645
Test: build pass,  go/p21-camera-test-checklist
Change-Id: I628ee2dedd48dd1360d0818137ba9139ae194029
2021-08-03 16:31:12 +00:00
Erik Staats
f12ab4e795 Merge "Allow sensor HAL to read AoC dumpstate." into sc-dev am: 1b7ae244b0 am: 0bb21fc708 am: 72af0dda60
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15444398

Change-Id: Ic5c473755a1b4de7d6771f5ac47360387933cce4
2021-08-03 16:19:24 +00:00
Erik Staats
e91814f278 Merge "Allow sensor HAL to read AoC dumpstate." into sc-dev am: 1b7ae244b0 am: 0965462752 am: 9c236ad524
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15444398

Change-Id: Ia0073382a4b065fdff267fc53f56a8200493e1b0
2021-08-03 16:18:56 +00:00
Erik Staats
72af0dda60 Merge "Allow sensor HAL to read AoC dumpstate." into sc-dev am: 1b7ae244b0 am: 0bb21fc708
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15444398

Change-Id: Idc01ba0b18e3bb496a1be4a69e2d5d4dd2cf9989
2021-08-03 16:05:10 +00:00
Erik Staats
9c236ad524 Merge "Allow sensor HAL to read AoC dumpstate." into sc-dev am: 1b7ae244b0 am: 0965462752
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15444398

Change-Id: I0e34dd9fad73d3e21af3b1618c34290863c6160c
2021-08-03 16:04:39 +00:00
Erik Staats
0965462752 Merge "Allow sensor HAL to read AoC dumpstate." into sc-dev am: 1b7ae244b0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15444398

Change-Id: I0a50040b067368b556535064a715cbdeb0782a19
2021-08-03 15:49:33 +00:00
Erik Staats
0bb21fc708 Merge "Allow sensor HAL to read AoC dumpstate." into sc-dev am: 1b7ae244b0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15444398

Change-Id: Ie5f9c63a4e4eba2c74b667fa8bd5a50a716d3ee9
2021-08-03 15:47:34 +00:00
Erik Staats
1b7ae244b0 Merge "Allow sensor HAL to read AoC dumpstate." into sc-dev 2021-08-03 15:27:12 +00:00
Charles Chiu
25dd4f28e4 Merge "Allow init to set Camera properties." into sc-dev am: 50ebe02d44 am: 300d1b34aa am: 10d71a5de4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15427051

Change-Id: I2b6ebf322f1bd9676046ff329ae19e2f52c1beff
2021-08-03 06:34:15 +00:00
Charles Chiu
58d42bdc11 Merge "Allow init to set Camera properties." into sc-dev am: 50ebe02d44 am: 07bc84365c am: 3f17f724b1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15427051

Change-Id: Id084c8c03d8e964e16063a2b5cbef69b3b205e14
2021-08-03 06:33:46 +00:00
Charles Chiu
10d71a5de4 Merge "Allow init to set Camera properties." into sc-dev am: 50ebe02d44 am: 300d1b34aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15427051

Change-Id: I8261f19a48ff2b4a9db0141d5145cc6d8e2eda90
2021-08-03 06:19:33 +00:00
Charles Chiu
3f17f724b1 Merge "Allow init to set Camera properties." into sc-dev am: 50ebe02d44 am: 07bc84365c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15427051

Change-Id: If3c4541c62e417a79bfcf56e2bf2b80ccb5150a5
2021-08-03 06:19:13 +00:00
Charles Chiu
07bc84365c Merge "Allow init to set Camera properties." into sc-dev am: 50ebe02d44
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15427051

Change-Id: I28b126af98f58399256b3c2dd38b4762d642f781
2021-08-03 06:10:21 +00:00
Charles Chiu
300d1b34aa Merge "Allow init to set Camera properties." into sc-dev am: 50ebe02d44
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15427051

Change-Id: I3f71a63c3c02b7234722dd74da600116da440965
2021-08-03 06:09:38 +00:00
Charles Chiu
50ebe02d44 Merge "Allow init to set Camera properties." into sc-dev 2021-08-03 05:52:49 +00:00
Erik Staats
ad42045b87 Allow sensor HAL to read AoC dumpstate.
Bug: 194021578
Test: Simulated communication failure and verified AoC services state
 log.
Test: See details in testing done comment in
 https://googleplex-android-review.git.corp.google.com/15444398 .
Change-Id: I76f376577abad26fe86b5ecb6a570716381227f0
2021-08-02 15:56:57 -07:00
Quinn Yan
3d96141295 Merge "Revert the unnecessary sepolicy rules for hal_neuralnetworks_darwinn." into sc-dev am: be5aa28148 am: c2a7ad88f8 am: dd59561513
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15434450

Change-Id: Ic9aef1c15cf1ddf6ed84b4e29fa6c97f3658b882
2021-08-02 18:48:59 +00:00
Quinn Yan
ace0bd3d93 Merge "Revert the unnecessary sepolicy rules for hal_neuralnetworks_darwinn." into sc-dev am: be5aa28148 am: b524c170cd am: 4e4d2a7740
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15434450

Change-Id: Ie4600d2b38cbd3eb4cfefca37727b8e5a557e389
2021-08-02 18:48:35 +00:00
Quinn Yan
dd59561513 Merge "Revert the unnecessary sepolicy rules for hal_neuralnetworks_darwinn." into sc-dev am: be5aa28148 am: c2a7ad88f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15434450

Change-Id: I468c2a0bba0bdad632ee21ff329fa24467f51bd0
2021-08-02 18:33:20 +00:00
Quinn Yan
4e4d2a7740 Merge "Revert the unnecessary sepolicy rules for hal_neuralnetworks_darwinn." into sc-dev am: be5aa28148 am: b524c170cd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15434450

Change-Id: I7c1f30f8e459f680ca5c9d80ac7d8b919cd9e369
2021-08-02 18:33:01 +00:00
Quinn Yan
b524c170cd Merge "Revert the unnecessary sepolicy rules for hal_neuralnetworks_darwinn." into sc-dev am: be5aa28148
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15434450

Change-Id: I5e5b6e8802374ae99d282c44e5aef57f87a26c2e
2021-08-02 18:17:56 +00:00
Quinn Yan
c2a7ad88f8 Merge "Revert the unnecessary sepolicy rules for hal_neuralnetworks_darwinn." into sc-dev am: be5aa28148
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15434450

Change-Id: Ieb2059ae8096f31c92a63b3721628cb69a83cfea
2021-08-02 18:17:06 +00:00
Quinn Yan
be5aa28148 Merge "Revert the unnecessary sepolicy rules for hal_neuralnetworks_darwinn." into sc-dev 2021-08-02 18:01:50 +00:00
Charles Chiu
718a856e26 Allow init to set Camera properties.
Test: Camera CTS
Bug: 194656156

Change-Id: I2f8f89a02984bfb9fea96df7b0a1d4150c9fdd8d
2021-08-02 23:21:14 +08:00
Mark Chang
2e7c4fe220 [automerger skipped] Merge "[DO NOT MERGE] sepolicy: Add "dontaudit" for twoshay dac_override." into sc-dev am: f7fa1fa877 am: 978b04ae9e -s ours am: a372245cea -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15416442

Change-Id: If0de4c3befe51b601cd94287a4f1714dc5ca5ed5
2021-07-31 00:44:42 +00:00
Mark Chang
b3aa11eaa3 [automerger skipped] [DO NOT MERGE] sepolicy: Add "dontaudit" for twoshay dac_override. am: a1aab562ca am: 70a9ce2df2 -s ours am: e73070b898 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15416442

Change-Id: Ia6f6248701571d74af9f739521750c57d522489c
2021-07-31 00:44:41 +00:00
Mark Chang
117fd31230 [automerger skipped] Merge "[DO NOT MERGE] sepolicy: Add "dontaudit" for twoshay dac_override." into sc-dev am: f7fa1fa877 -s ours am: e0ef0186ca -s ours am: 1355c8bdda -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15416442

Change-Id: Ia897de610711f28e17ddd7213e25d824319ec76b
2021-07-31 00:44:29 +00:00
Mark Chang
a372245cea [automerger skipped] Merge "[DO NOT MERGE] sepolicy: Add "dontaudit" for twoshay dac_override." into sc-dev am: f7fa1fa877 am: 978b04ae9e -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15416442

Change-Id: I42e0b68a4925ba3df3d77be33cbce8040ea754f3
2021-07-31 00:30:18 +00:00
Mark Chang
e73070b898 [automerger skipped] [DO NOT MERGE] sepolicy: Add "dontaudit" for twoshay dac_override. am: a1aab562ca am: 70a9ce2df2 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15416442

Change-Id: Iada0d3bbc3ee849c08d0a776fc5cc253a728b7c7
2021-07-31 00:30:17 +00:00
Mark Chang
1355c8bdda [automerger skipped] Merge "[DO NOT MERGE] sepolicy: Add "dontaudit" for twoshay dac_override." into sc-dev am: f7fa1fa877 -s ours am: e0ef0186ca -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15416442

Change-Id: Ic4de228139596f05cbce7cdc76d7fe35c802cb0d
2021-07-31 00:29:54 +00:00
Mark Chang
e0ef0186ca [automerger skipped] Merge "[DO NOT MERGE] sepolicy: Add "dontaudit" for twoshay dac_override." into sc-dev am: f7fa1fa877 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15416442

Change-Id: Ie3031405fe564edf4b097173e1e0b6ff7bc22d01
2021-07-31 00:12:54 +00:00
Mark Chang
978b04ae9e Merge "[DO NOT MERGE] sepolicy: Add "dontaudit" for twoshay dac_override." into sc-dev am: f7fa1fa877
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15416442

Change-Id: I1bcc7dbca6a14c15b65df96b57ffe3108f0010a6
2021-07-31 00:11:04 +00:00
Mark Chang
70a9ce2df2 [DO NOT MERGE] sepolicy: Add "dontaudit" for twoshay dac_override. am: a1aab562ca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15416442

Change-Id: Iecfcfb1daa0b1d91ddf3c2fb056526c5c011aa8e
2021-07-31 00:11:02 +00:00
Mark Chang
f7fa1fa877 Merge "[DO NOT MERGE] sepolicy: Add "dontaudit" for twoshay dac_override." into sc-dev 2021-07-31 00:01:26 +00:00
qinyiyan
ee4e7f45ce Revert the unnecessary sepolicy rules for hal_neuralnetworks_darwinn.
Bug: 194241380
Test: flashed forrest build and ran PtsSELinuxTestCases
Change-Id: Ie2f0572a368f09e522bc2cdfdf9da1859c1c44e7
2021-07-30 23:36:06 +00:00
TreeHugger Robot
3148aaa3ee Merge "Add vendor SELinux denial to allowlist" into sc-dev am: 4720a91c52 am: 23b7621849 am: b60eb1f451
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15422669

Change-Id: I1022a8e6d2015d7931b8b14f76fd8924da8a6190
2021-07-30 13:49:51 +00:00
TreeHugger Robot
7c10788c29 Merge "Add vendor SELinux denial to allowlist" into sc-dev am: 4720a91c52 am: c2ebcd6fb7 am: 724603de4e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15422669

Change-Id: Id4e79c476f19a1ff3bcf143b1df66268b221605b
2021-07-30 13:49:46 +00:00
TreeHugger Robot
b60eb1f451 Merge "Add vendor SELinux denial to allowlist" into sc-dev am: 4720a91c52 am: 23b7621849
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15422669

Change-Id: Id631520d6084fa0b25e19e7d9180969b7c386433
2021-07-30 13:41:11 +00:00
TreeHugger Robot
724603de4e Merge "Add vendor SELinux denial to allowlist" into sc-dev am: 4720a91c52 am: c2ebcd6fb7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15422669

Change-Id: Ibeef9a999e6742a5ee3c0ff2f1280f0b6139a102
2021-07-30 13:35:14 +00:00
TreeHugger Robot
23b7621849 Merge "Add vendor SELinux denial to allowlist" into sc-dev am: 4720a91c52
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15422669

Change-Id: Id95206a386275893599d7be18c15e48274f4a140
2021-07-30 13:25:13 +00:00
TreeHugger Robot
c2ebcd6fb7 Merge "Add vendor SELinux denial to allowlist" into sc-dev am: 4720a91c52
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15422669

Change-Id: I2a0ebc95b3165252ada97313072601cbd144d748
2021-07-30 13:23:21 +00:00
TreeHugger Robot
4720a91c52 Merge "Add vendor SELinux denial to allowlist" into sc-dev 2021-07-30 13:12:12 +00:00
Rick Yiu
6deb14ed41 [automerger skipped] Merge "gs101: Remove vendor_sched" into sc-dev am: dba7013033 am: 01c5111d3b -s ours am: 6d5f2e10d0 -s ours
am skip reason: Merged-In Ia5ea1bbc05bdc52b43cb403d99994bad70613e08 with SHA-1 7de8a5d4a7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15402045

Change-Id: Ie3683a827793dffa6a4990d5a62c2c475693bc34
2021-07-30 07:41:29 +00:00
Rick Yiu
4c21a341a3 [automerger skipped] Merge "gs101: Remove vendor_sched" into sc-dev am: dba7013033 am: 5168b7a0f3 am: 2b8f0af301 -s ours
am skip reason: Merged-In Ia5ea1bbc05bdc52b43cb403d99994bad70613e08 with SHA-1 cd9ddb134b is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15402045

Change-Id: I74c74003063d5f6a2d57c9d2521decc9b005fa59
2021-07-30 07:41:21 +00:00
Rick Yiu
6d5f2e10d0 [automerger skipped] Merge "gs101: Remove vendor_sched" into sc-dev am: dba7013033 am: 01c5111d3b -s ours
am skip reason: Merged-In Ia5ea1bbc05bdc52b43cb403d99994bad70613e08 with SHA-1 7de8a5d4a7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15402045

Change-Id: I22acd163fe08b5f5e252f1170b2368df8982a5af
2021-07-30 07:25:17 +00:00
Rick Yiu
2b8f0af301 Merge "gs101: Remove vendor_sched" into sc-dev am: dba7013033 am: 5168b7a0f3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15402045

Change-Id: I65109cc2070cbd19b029354bcc43861fc91ceed3
2021-07-30 07:25:05 +00:00
Rick Yiu
5168b7a0f3 Merge "gs101: Remove vendor_sched" into sc-dev am: dba7013033
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15402045

Change-Id: I80c3982fd8f5565ad1f4a7fb9f1fa993c7e233dc
2021-07-30 07:05:37 +00:00
Rick Yiu
01c5111d3b Merge "gs101: Remove vendor_sched" into sc-dev am: dba7013033
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15402045

Change-Id: Ic3d57039bea5c589a60898ec59aba38da1456a2a
2021-07-30 07:04:45 +00:00
Rick Yiu
dba7013033 Merge "gs101: Remove vendor_sched" into sc-dev 2021-07-30 06:52:10 +00:00
Rick Yiu
7de8a5d4a7 gs101: Remove vendor_sched
Moved to system/sepolicy.

Bug: 194656257
Test: build pass
Change-Id: Ia5ea1bbc05bdc52b43cb403d99994bad70613e08
Merged-In: Ia5ea1bbc05bdc52b43cb403d99994bad70613e08
2021-07-30 03:13:39 +00:00
Rick Yiu
cd9ddb134b gs101: Remove vendor_sched
Moved to system/sepolicy.

Bug: 194656257
Test: build pass
Change-Id: Ia5ea1bbc05bdc52b43cb403d99994bad70613e08
2021-07-30 03:12:26 +00:00
Mark Chang
a1aab562ca [DO NOT MERGE] sepolicy: Add "dontaudit" for twoshay dac_override.
Bug: 193224954
Test: build pass and boot to home
Signed-off-by: Mark Chang <changmark@google.com>
Change-Id: I5c330564cc026e113c5d33d5d093dbcdb3ede5e4
2021-07-30 01:49:59 +00:00
Jaineel Mehta
0474bcf10e Add vendor SELinux denial to allowlist
Change-Id: If7435e9c62811ef3c9757f22f06018c32a8d3597
Test: None
Bug: 194281028
2021-07-29 21:23:34 +00:00
TreeHugger Robot
0635946ef7 Merge "gs101: Allow camera hal to create file in persist camera folder" into sc-dev am: 750888bc5b am: c28011e995 am: 29b21cc5d2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15354010

Change-Id: Id8a54e2c04c626e99eb32058a0c3b801e8863ca7
2021-07-29 09:43:31 +00:00
TreeHugger Robot
275b077a0f Merge "gs101: Allow camera hal to create file in persist camera folder" into sc-dev am: 750888bc5b am: 8ab71529ce am: 163e32e837
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15354010

Change-Id: I0a97cbf5d5bc5a0b5ce7a9345128c9c2d7f60de3
2021-07-29 09:43:22 +00:00
TreeHugger Robot
29b21cc5d2 Merge "gs101: Allow camera hal to create file in persist camera folder" into sc-dev am: 750888bc5b am: c28011e995
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15354010

Change-Id: I7222c4a05ca838048d1add52b330612ed2ae7e56
2021-07-29 09:27:50 +00:00
TreeHugger Robot
163e32e837 Merge "gs101: Allow camera hal to create file in persist camera folder" into sc-dev am: 750888bc5b am: 8ab71529ce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15354010

Change-Id: I125b86fa619bba363534452b74a6149922e58bf0
2021-07-29 09:27:30 +00:00
TreeHugger Robot
8ab71529ce Merge "gs101: Allow camera hal to create file in persist camera folder" into sc-dev am: 750888bc5b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15354010

Change-Id: Ia321b3fa069583efadda94caab9b72a484f5631b
2021-07-29 09:14:51 +00:00
TreeHugger Robot
c28011e995 Merge "gs101: Allow camera hal to create file in persist camera folder" into sc-dev am: 750888bc5b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15354010

Change-Id: Ic99958700c8b28e81404a15b1446f7108fa7f7c6
2021-07-29 09:13:58 +00:00
TreeHugger Robot
750888bc5b Merge "gs101: Allow camera hal to create file in persist camera folder" into sc-dev 2021-07-29 08:40:36 +00:00
Michael Eastwood
8d6333024b Merge "Allow hal_dumpstate_default to access vendor_camera_debug_prop" into sc-dev am: 9bfbb3c0d4 am: ebd0f6cb6d am: 0ad7f649ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15406130

Change-Id: Iaac1d80e46114be9885c5e87ea2450951b49a971
2021-07-28 22:20:04 +00:00
Michael Eastwood
4dda9eab2c Merge "Allow hal_dumpstate_default to access vendor_camera_debug_prop" into sc-dev am: 9bfbb3c0d4 am: 8cda72b001 am: 9afedc311d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15406130

Change-Id: Id038cd7b8e907f7c07cc18d872ede3d14da98485
2021-07-28 22:19:57 +00:00
Michael Eastwood
0ad7f649ad Merge "Allow hal_dumpstate_default to access vendor_camera_debug_prop" into sc-dev am: 9bfbb3c0d4 am: ebd0f6cb6d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15406130

Change-Id: I2c086cd782e7f33cdcafeba632d0e4fda4ce291a
2021-07-28 22:07:22 +00:00
Michael Eastwood
9afedc311d Merge "Allow hal_dumpstate_default to access vendor_camera_debug_prop" into sc-dev am: 9bfbb3c0d4 am: 8cda72b001
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15406130

Change-Id: Idd9adbbb02ae75e641b1b867f6580799ef3c8a3c
2021-07-28 22:07:03 +00:00
Michael Eastwood
8cda72b001 Merge "Allow hal_dumpstate_default to access vendor_camera_debug_prop" into sc-dev am: 9bfbb3c0d4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15406130

Change-Id: Ida4fbd33da5d2ded18be388f989e27936b3bd955
2021-07-28 21:55:14 +00:00
Michael Eastwood
ebd0f6cb6d Merge "Allow hal_dumpstate_default to access vendor_camera_debug_prop" into sc-dev am: 9bfbb3c0d4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15406130

Change-Id: I2f951ec888186bd93fa3a671be8bd35dc61826fc
2021-07-28 21:53:39 +00:00
Michael Eastwood
9bfbb3c0d4 Merge "Allow hal_dumpstate_default to access vendor_camera_debug_prop" into sc-dev 2021-07-28 21:36:38 +00:00
Michael Eastwood
30bd5e8ed6 Allow hal_dumpstate_default to access vendor_camera_debug_prop
Bug: 193365129
Test: atest com.google.android.selinux.pts.SELinuxTest#scanBugreport
Change-Id: I43e389d46e8116844bb9ca4259e5ea28e86c50f4
2021-07-27 17:22:47 -07:00
TreeHugger Robot
37dd4c59ea Merge "Add AoC wakeup stats to dump state" into sc-dev am: fead41d573 am: bac578c7e4 am: 5bcb5ceb2b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15393321

Change-Id: I1df4322f9b0d0b5911d397394e90d1aaab48363a
2021-07-27 20:29:20 +00:00
TreeHugger Robot
dd2a70ad2b Merge "Add AoC wakeup stats to dump state" into sc-dev am: fead41d573 am: a96235b57b am: c5e4cd5b60
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15393321

Change-Id: I296349786c6756594b03f906eadf2bcf2fbb40e5
2021-07-27 20:28:31 +00:00
TreeHugger Robot
5bcb5ceb2b Merge "Add AoC wakeup stats to dump state" into sc-dev am: fead41d573 am: bac578c7e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15393321

Change-Id: I142abfcc18ffc38f6b84f8214e5492feda9c783f
2021-07-27 20:09:39 +00:00
TreeHugger Robot
c5e4cd5b60 Merge "Add AoC wakeup stats to dump state" into sc-dev am: fead41d573 am: a96235b57b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15393321

Change-Id: I19d2204c1328da774d2bb640df9e9fb4e4656e71
2021-07-27 20:08:00 +00:00
TreeHugger Robot
a96235b57b Merge "Add AoC wakeup stats to dump state" into sc-dev am: fead41d573
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15393321

Change-Id: Ia4cb5725b748fcccd901a28ca2e3dbb354c3e44e
2021-07-27 19:44:07 +00:00
TreeHugger Robot
bac578c7e4 Merge "Add AoC wakeup stats to dump state" into sc-dev am: fead41d573
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15393321

Change-Id: I885c2707858cd57aece41f8b91f3267a91607710
2021-07-27 19:42:54 +00:00
TreeHugger Robot
fead41d573 Merge "Add AoC wakeup stats to dump state" into sc-dev 2021-07-27 19:23:06 +00:00
Jack Wu
830183abd8 sepolicy: gs101: allows pixelstat to access pca file nodes am: d6c1a50bba am: e0c7fa7433 am: 65c825d2fd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15360184

Change-Id: I3caf230e756c5939c55db78dc1d983d546106321
2021-07-27 03:01:46 +00:00
Jack Wu
7a9774e4a9 sepolicy: gs101: allows pixelstat to access pca file nodes am: d6c1a50bba am: 2c79c75768 am: c5964bf33a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15360184

Change-Id: Ic3e0e44452cd042a6015fff5ba9f5f4071de6de9
2021-07-27 03:01:35 +00:00
Jack Wu
65c825d2fd sepolicy: gs101: allows pixelstat to access pca file nodes am: d6c1a50bba am: e0c7fa7433
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15360184

Change-Id: I76cd3f1374d205bf2f6b835451735e7f0633faad
2021-07-27 02:47:51 +00:00
Jack Wu
c5964bf33a sepolicy: gs101: allows pixelstat to access pca file nodes am: d6c1a50bba am: 2c79c75768
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15360184

Change-Id: I1dcf34ae4ab3fb1a9fda23334d4ed7e0f4723b2c
2021-07-27 02:47:03 +00:00
Jack Wu
2c79c75768 sepolicy: gs101: allows pixelstat to access pca file nodes am: d6c1a50bba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15360184

Change-Id: Ic3efb76715139aa335995b95e7756f23b5de226c
2021-07-27 02:29:16 +00:00
Jack Wu
e0c7fa7433 sepolicy: gs101: allows pixelstat to access pca file nodes am: d6c1a50bba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15360184

Change-Id: I904398c0eb47626b0398a5cb1fcea961ef35e6fb
2021-07-27 02:26:35 +00:00
Max Kogan
5374497df5 Add AoC wakeup stats to dump state
Need add support for wakeup stats to track AoC to AP messages
resulting in frequent wake-ups.

Bug: 192668026
Change-Id: I073406cc101e114135c863b0e0b86357e93c0415
2021-07-26 22:45:16 +00:00
Jack Wu
d6c1a50bba sepolicy: gs101: allows pixelstat to access pca file nodes
07-23 14:24:45.512  1000  3001  3001 I pixelstats-vend: type=1400 audit(0.0:10): avc: denied { open } for path="/sys/devices/platform/10d50000.hsi2c/i2c-5/5-0057/chg_stats" dev="sysfs" ino=72245 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
07-23 14:24:45.512  1000  3001  3001 I pixelstats-vend: type=1400 audit(0.0:11): avc: denied { getattr } for path="/sys/devices/platform/10d50000.hsi2c/i2c-5/5-0057/chg_stats" dev="sysfs" ino=72245 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
07-23 14:24:57.536  1000  3001  3001 I pixelstats-vend: type=1400 audit(0.0:12): avc: denied { read } for name="chg_stats" dev="sysfs" ino=72245 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
07-23 14:24:57.536  1000  3001  3001 I pixelstats-vend: type=1400 audit(0.0:13): avc: denied { open } for path="/sys/devices/platform/10d50000.hsi2c/i2c-5/5-0057/chg_stats" dev="sysfs" ino=72245 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
07-23 14:24:57.536  1000  3001  3001 I pixelstats-vend: type=1400 audit(0.0:14): avc: denied { getattr } for path="/sys/devices/platform/10d50000.hsi2c/i2c-5/5-0057/chg_stats" dev="sysfs" ino=72245 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
07-23 14:24:57.536  1000  3001  3001 I pixelstats-vend: type=1400 audit(0.0:15): avc: denied { write } for name="chg_stats" dev="sysfs" ino=72245 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

Bug: 194386750
Test: manually test, no avc: denied
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I1a16edb5bb7820f62b3ce598aa50eba2d9455927
2021-07-24 06:42:39 +00:00
TreeHugger Robot
e21c3638c2 Merge "Add SE policies for memtrack HAL" into sc-dev am: b3225f0f6c am: 5cdaa6a45f am: df6e6f021b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283133

Change-Id: I485f1604622b6c93489499d5f875dfad77d8b3be
2021-07-23 22:01:20 +00:00
TreeHugger Robot
fd0b83ae69 Merge "Add SE policies for memtrack HAL" into sc-dev am: b3225f0f6c am: cd16e38ab2 am: 10d4b623ec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283133

Change-Id: I02645c5c2c66f0e2141ec3969c559816cb6f7602
2021-07-23 22:00:46 +00:00
TreeHugger Robot
df6e6f021b Merge "Add SE policies for memtrack HAL" into sc-dev am: b3225f0f6c am: 5cdaa6a45f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283133

Change-Id: I7959cb1161e4a8e86b7344f487fb63e6bbb4e17b
2021-07-23 21:43:22 +00:00
TreeHugger Robot
10d4b623ec Merge "Add SE policies for memtrack HAL" into sc-dev am: b3225f0f6c am: cd16e38ab2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283133

Change-Id: I9a34df30f890f98711cdea42b6fc75492e66ddb4
2021-07-23 21:42:04 +00:00
TreeHugger Robot
cd16e38ab2 Merge "Add SE policies for memtrack HAL" into sc-dev am: b3225f0f6c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283133

Change-Id: I552351e0eac65c20d795b1682852896943f948c8
2021-07-23 21:24:50 +00:00
TreeHugger Robot
5cdaa6a45f Merge "Add SE policies for memtrack HAL" into sc-dev am: b3225f0f6c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283133

Change-Id: Iff4c3146f074c8dc40af1598002629bd9c0d46f3
2021-07-23 21:24:35 +00:00
TreeHugger Robot
b3225f0f6c Merge "Add SE policies for memtrack HAL" into sc-dev 2021-07-23 20:52:52 +00:00
Ankit Goyal
0f9820830c Add SE policies for memtrack HAL
Bug: 191966412
Test: adb shell dumpsys meminfo
Change-Id: Ia7ec64840d2bb7c3ae0d61304e109d2ceb9e5f78
2021-07-24 02:18:36 +08:00
Max Shi
aa837658f4 Allow USF sensor HAL to read camera persist files. am: 0bd50d1eb5 am: 0f58b38401 am: fdd51fb96e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15352099

Change-Id: Ia23cec46b858b19c9458bece061aa66f348248bc
2021-07-23 00:21:01 +00:00
Max Shi
b29ac33269 Allow USF sensor HAL to read camera persist files. am: 0bd50d1eb5 am: 50486c63f3 am: c53dbeaf0e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15352099

Change-Id: I7eaaac9df9f2910baed5f07f3e2359b0953641b5
2021-07-23 00:20:44 +00:00
Max Shi
fdd51fb96e Allow USF sensor HAL to read camera persist files. am: 0bd50d1eb5 am: 0f58b38401
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15352099

Change-Id: Id8dae3cb84473c38fdedcb15437e566e941edbde
2021-07-23 00:04:03 +00:00
Max Shi
c53dbeaf0e Allow USF sensor HAL to read camera persist files. am: 0bd50d1eb5 am: 50486c63f3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15352099

Change-Id: I79a5f932ccafd7dafa28f6978d524b4eccf809a4
2021-07-23 00:03:25 +00:00
Max Shi
50486c63f3 Allow USF sensor HAL to read camera persist files. am: 0bd50d1eb5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15352099

Change-Id: Id31975a653e79362c0dea9a86b52944d340f2fee
2021-07-22 23:46:11 +00:00
Max Shi
0f58b38401 Allow USF sensor HAL to read camera persist files. am: 0bd50d1eb5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15352099

Change-Id: I585215a1e0266ebb52ccec18834c4f0e68ec6c69
2021-07-22 23:45:02 +00:00
Badhri Jagan Sridharan
95c0544a0a Merge "Update Usb hal permissions to allow pushing overheat suez events" into sc-dev am: 49804d8d6f am: 00b89f5d8d am: f0f0de5d84
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283349

Change-Id: I477c9d19208646e3fffdd479e41f753038194ed9
2021-07-22 21:27:20 +00:00
Badhri Jagan Sridharan
0dc4da3547 Merge "Update Usb hal permissions to allow pushing overheat suez events" into sc-dev am: 49804d8d6f am: 31b15ff2bb am: f83fca5b70
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283349

Change-Id: I0c93e6058984873ea8d7ce101e6d65e48f1c9fba
2021-07-22 21:27:08 +00:00
Max Shi
0bd50d1eb5 Allow USF sensor HAL to read camera persist files.
USF sensor HAL requires access to camera persist files to determine if
the camera module has been replaced (e.g. via repair), which may affect
calibration of the magnetometer.

Bug: 193727762
Test: Verify sensor HAL can open and read files under
Test: /mnt/vendor/persist/camera/
Change-Id: Icb9d7a46bf8465e1a72054ac9c8493ba18445ef3
2021-07-22 21:11:44 +00:00
Badhri Jagan Sridharan
f0f0de5d84 Merge "Update Usb hal permissions to allow pushing overheat suez events" into sc-dev am: 49804d8d6f am: 00b89f5d8d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283349

Change-Id: Iff45d60431f1b3bcdeb267c317d78b124bcf4748
2021-07-22 21:10:02 +00:00
Badhri Jagan Sridharan
f83fca5b70 Merge "Update Usb hal permissions to allow pushing overheat suez events" into sc-dev am: 49804d8d6f am: 31b15ff2bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283349

Change-Id: I9d73177b869072e6aa4fcc504a055a3a9682a72d
2021-07-22 21:09:12 +00:00
Badhri Jagan Sridharan
31b15ff2bb Merge "Update Usb hal permissions to allow pushing overheat suez events" into sc-dev am: 49804d8d6f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283349

Change-Id: I6fc802f74aaf7e1f7a7b8574ed5ace1886b9623c
2021-07-22 20:52:11 +00:00
Badhri Jagan Sridharan
00b89f5d8d Merge "Update Usb hal permissions to allow pushing overheat suez events" into sc-dev am: 49804d8d6f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283349

Change-Id: I7ca2b0ea191d0fab866eca184a795091caa260ad
2021-07-22 20:50:56 +00:00
Badhri Jagan Sridharan
49804d8d6f Merge "Update Usb hal permissions to allow pushing overheat suez events" into sc-dev 2021-07-22 20:31:13 +00:00
George Lee
d46414f3d3 Merge "pixelstats: add bcl directory permission" into sc-dev am: 79a15eed2a am: a1b0983730 am: 59666184b6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145257

Change-Id: I71154e0ae9c31e9e885c360c1b11604449712dae
2021-07-22 19:11:22 +00:00
George Lee
59666184b6 Merge "pixelstats: add bcl directory permission" into sc-dev am: 79a15eed2a am: a1b0983730
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145257

Change-Id: I34670302ecc1d9adf5baa26c9c8a6573cb47628e
2021-07-22 18:35:15 +00:00
George Lee
608435c1bd Merge "pixelstats: add bcl directory permission" into sc-dev am: 79a15eed2a am: ef556f7fee am: 674a509d5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145257

Change-Id: I7d8ee55ea2669772f59525e4a68e4249b54a1ed2
2021-07-22 17:58:01 +00:00
George Lee
674a509d5d Merge "pixelstats: add bcl directory permission" into sc-dev am: 79a15eed2a am: ef556f7fee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145257

Change-Id: I7d41017bfda1e112667aef94a09dd645a69af9b5
2021-07-22 17:56:09 +00:00
George Lee
a1b0983730 Merge "pixelstats: add bcl directory permission" into sc-dev am: 79a15eed2a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145257

Change-Id: I5fe3e10576664cf3a73a210a5089d46574fcdf84
2021-07-22 17:48:25 +00:00
George Lee
ef556f7fee Merge "pixelstats: add bcl directory permission" into sc-dev am: 79a15eed2a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145257

Change-Id: I4d0c92d3074ef8e3112b6dade853b6b53dbb3cfe
2021-07-22 17:26:15 +00:00
George Lee
79a15eed2a Merge "pixelstats: add bcl directory permission" into sc-dev 2021-07-22 17:03:33 +00:00
Gary Jian
8f0737d8a2 Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev am: 9b5a97d65e am: 7adebe6c62 am: 7566282022
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15327671

Change-Id: I2c87292c07f67b0c9720b8e50e6f3eb1be112c83
2021-07-22 09:29:36 +00:00
Gary Jian
7566282022 Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev am: 9b5a97d65e am: 7adebe6c62
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15327671

Change-Id: I367078bd8adfdc278647ba8f6b19e845b064e5f0
2021-07-22 09:05:53 +00:00
Gary Jian
ea49c9e584 Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev am: 9b5a97d65e am: 11d8a4eb7e am: de4bd33a04
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15327671

Change-Id: I74af3911fc3ba07bb7b65ee35aefb54fc94264d0
2021-07-22 09:04:38 +00:00
Gary Jian
de4bd33a04 Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev am: 9b5a97d65e am: 11d8a4eb7e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15327671

Change-Id: I3c1e0377927df7e55a85a7d1609b08d0279afd5b
2021-07-22 08:46:11 +00:00
Gary Jian
7adebe6c62 Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev am: 9b5a97d65e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15327671

Change-Id: I942e721133992a86b4cab295e09a5fb99e5fa814
2021-07-22 08:42:08 +00:00
Gary Jian
11d8a4eb7e Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev am: 9b5a97d65e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15327671

Change-Id: I8e2e152f7ca71a0e5aa462093ebc10604d408814
2021-07-22 08:27:53 +00:00
Gary Jian
9b5a97d65e Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev 2021-07-22 08:16:42 +00:00
chened
561ce13d59 gs101: Allow camera hal to create file in persist camera folder
Test: build pass, no cts regression
Bug: 189844464
Change-Id: If150a94f184424f21c509a44001192e36b6ee24a
2021-07-22 07:11:05 +00:00
Petri Gynther
b1f6c14962 Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0 am: 056fbce364 am: ed848b779b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573

Change-Id: I8feab0f645228669c5d1680ffd1df22cbb67709b
2021-07-22 00:56:06 +00:00
Petri Gynther
e96d91bed6 Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0 am: adee4062ad am: 61f76249ec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573

Change-Id: I5d7ca462d2be586e5058444ae79c384cd452b3a0
2021-07-22 00:55:51 +00:00
Petri Gynther
ed848b779b Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0 am: 056fbce364
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573

Change-Id: If619e378579d32cb1734dd69350b702006991f75
2021-07-22 00:23:54 +00:00
Petri Gynther
61f76249ec Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0 am: adee4062ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573

Change-Id: Id2cbb2f9059a0cb3250582df866292f9fa7f795f
2021-07-22 00:22:42 +00:00
Petri Gynther
adee4062ad Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573

Change-Id: Ie5f417c81373d599403646c90ddeda78b84c0b7a
2021-07-21 23:50:44 +00:00
Petri Gynther
056fbce364 Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573

Change-Id: I7a64114eed37ee384dba61a492fbb58cc2a30831
2021-07-21 23:46:06 +00:00
Badhri Jagan Sridharan
1ebd84703b Update Usb hal permissions to allow pushing overheat suez events
Usb hal now pushes the Usb port overheat event through statsd.
Usb hal also accesses usbc-throttling stats to gather info.

Bug: 193615568
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
Change-Id: I4918458bc7a8a25d7655b66d1fe40eafc7ccb070
2021-07-21 14:38:55 -07:00
Sungwoo choi
b47cdf282a Allow to set vendor_rild_prop for oemrilservice_app
Bug: 193367138
Test: make sure no denied logs in oemrilservice_app when access the
radio property

Signed-off-by: Sungwoo choi <sungwoo48.choi@samsung.com>
Change-Id: I9014002476df7b4e650f7a5a2f153e4eca47d23d
2021-07-21 08:01:44 +00:00
Petri Gynther
d12714ccc0 Add vbmeta_vendor_[ab] to file_contexts
Bug: 181909612
Test: build + install + boot to home
Change-Id: Ibb7bd8e5a61d86de1b51a3780a5bfa8cf4caf59b
2021-07-20 23:41:31 -07:00
sukiliu
900722b46d Update avc error on ROM 7566803 am: 411aa59779 am: 8dfbba48d1 am: 8db9300fee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: I4b698ad6de11442b6f520fc6ec077c554bf52aca
2021-07-21 06:35:39 +00:00
sukiliu
ed55111a75 Update avc error on ROM 7566803 am: 411aa59779 am: d1f198d5eb am: f7c4032235
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: I6575e49f8d021d766f92de89c934858668ebbb27
2021-07-21 06:35:34 +00:00
sukiliu
8db9300fee Update avc error on ROM 7566803 am: 411aa59779 am: 8dfbba48d1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: I38bb7bb68cf50cbb03652809e7dddadb44328346
2021-07-21 06:14:01 +00:00
sukiliu
f7c4032235 Update avc error on ROM 7566803 am: 411aa59779 am: d1f198d5eb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: Id602f32ef1157321a7bc399bfb5398ccec4f3ca4
2021-07-21 06:13:41 +00:00
sukiliu
d1f198d5eb Update avc error on ROM 7566803 am: 411aa59779
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: I71dbe7cfb4ff8f409e9565e4a636ca8c4a3844ce
2021-07-21 06:02:08 +00:00
sukiliu
8dfbba48d1 Update avc error on ROM 7566803 am: 411aa59779
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15343071

Change-Id: I5a350cde5a79354fa11d1892425ca0f98e64003c
2021-07-21 06:00:47 +00:00
sukiliu
411aa59779 Update avc error on ROM 7566803
avc: denied { read } for name="platform:1cc40000.sysmmu--platform:1ce00000.abrolhos" dev="sysfs" ino=21006 scontext=u:r:hal_neuralnetworks_darwinn:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0

Bug: 194241380
Test: PtsSELinuxTestCases
Change-Id: If7ee99a36bca88fffc37c12dc306e0453afb1395
2021-07-21 09:36:05 +08:00
TreeHugger Robot
3692a146d3 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b am: 2260028f16 am: e813912c48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: Ic99027407b05745f4a6717e53d2db72a2a1c2f4c
2021-07-20 13:41:18 +00:00
Alex Hong
e8b1b7f221 Allow suspend_control to access the AOC wakeup node am: f0589d11df am: 2727807154 am: 361ee2d046
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: I62bc9380e42c9fb1446373ce37479df447a5df43
2021-07-20 13:41:14 +00:00
TreeHugger Robot
14fdf8b899 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b am: 0c411447d7 am: 090c2fb351
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: Ia3cf294164bea8d150a763baa2ecd831f65acf26
2021-07-20 13:41:09 +00:00
Alex Hong
4daa5b0914 Allow suspend_control to access the AOC wakeup node am: f0589d11df am: 5cc647e87d am: 10892fb570
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: I60bc7ac257b46bd9d30e9176afb401b415d1e6c8
2021-07-20 13:41:04 +00:00
TreeHugger Robot
e813912c48 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b am: 2260028f16
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: Ibb4101ddaebda394a4a678633fb27f57842e54a1
2021-07-20 13:30:51 +00:00
Alex Hong
361ee2d046 Allow suspend_control to access the AOC wakeup node am: f0589d11df am: 2727807154
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: I56d662d091bca5b89103868724caaa92aefd2075
2021-07-20 13:30:49 +00:00
TreeHugger Robot
090c2fb351 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b am: 0c411447d7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: I42629d18ea3fe0bf41db5800fad4529308128578
2021-07-20 13:30:34 +00:00
Alex Hong
10892fb570 Allow suspend_control to access the AOC wakeup node am: f0589d11df am: 5cc647e87d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: I19641fc130eb75e7220b4a070de6dd95f8f6a0a8
2021-07-20 13:30:29 +00:00
TreeHugger Robot
0c411447d7 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: Ie50b322dca7fc0292a200a721870c6679456c5b5
2021-07-20 13:13:02 +00:00
Alex Hong
5cc647e87d Allow suspend_control to access the AOC wakeup node am: f0589d11df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: Ibfbe41ba694a27408dbd3ff6bdb5632d55a9a05e
2021-07-20 13:12:56 +00:00
TreeHugger Robot
2260028f16 Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265

Change-Id: Ib3679aac5321fee05088ae34fd6aee63e9345599
2021-07-20 13:12:08 +00:00
Alex Hong
2727807154 Allow suspend_control to access the AOC wakeup node am: f0589d11df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275

Change-Id: I5279e246ce4ce654b76dc8fb213833c60ea32430
2021-07-20 13:12:04 +00:00
TreeHugger Robot
b3cc71258b Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev 2021-07-20 13:00:25 +00:00
Sungjun Park
0612b5aa85 ims: allow finding mediametrics_service for vendor_ims_app
For generate dtmf tone, ImsService find mediametrics_service.
So, added the seplicy rule for finding mediametrics_service.

<Related log>
07-14 15:37:21.391   411   411 E SELinux : avc:  denied  { find } for
pid=2263 uid=10217 name=media.metrics scontext=u:r:vendor_ims_app:s0:
c217,c256,c512,c768 tcontext=u:object_r:mediametrics_service:s0 tclass
=service_manager permissive=0

Bug: 192543653
Signed-off-by: Sungjun Park <sj19385.park@samsung.com>
Change-Id: Ia0f6610ecc454533d9584367694228245afe46e4
2021-07-20 09:35:23 +00:00
Alex Hong
f0589d11df Allow suspend_control to access the AOC wakeup node
Test: Check avc denials during boot
      $ adb shell su 0 dumpsys suspend_control
Bug: 194164089

Change-Id: I9edcf6398f61daec6fdde0f7ac69ddd5d275f753
2021-07-20 09:29:15 +00:00
TreeHugger Robot
7d2d731c50 Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc am: 8be9d35300 am: b53f02ed98
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: I4191c08a3b70c48bb438e7d542d0a478ee29936c
2021-07-20 06:47:13 +00:00
TreeHugger Robot
a8686b425c Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc am: 5c2f8d4ba6 am: 40be34ec64
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: Id31de032364cd3866d24f8a196589b2b11122947
2021-07-20 06:47:05 +00:00
TreeHugger Robot
b53f02ed98 Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc am: 8be9d35300
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: I45ec1aca94b08fe5c363567df3a03097b4470e53
2021-07-20 06:35:28 +00:00
TreeHugger Robot
40be34ec64 Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc am: 5c2f8d4ba6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: I0507619c0246eb44bab1edfcb878c03cdaf0a113
2021-07-20 06:31:18 +00:00
TreeHugger Robot
8be9d35300 Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: Ifdd759f02d516efa1691833b84e9129ed7136fe8
2021-07-20 06:23:08 +00:00
TreeHugger Robot
5c2f8d4ba6 Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev am: fa62e602fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15132550

Change-Id: I95b78d239e03912b0ecbaf17645a414f157a5320
2021-07-20 06:21:36 +00:00
TreeHugger Robot
fa62e602fc Merge "ssr_detector_app: Add additional vendor dir and crgroup allow for debug" into sc-dev 2021-07-20 06:09:35 +00:00
sukiliu
6d2e9331c6 Update avc error on ROM 7562467 am: d9309ef34d am: f89cc13852 am: e7a39a73f3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: I8c668ae87781d3b19a1516e3ab730531b4966a1a
2021-07-20 05:09:19 +00:00
sukiliu
49c7f0c978 Update avc error on ROM 7562467 am: d9309ef34d am: 909d2db713 am: ee3af65a55
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: I7083342fc615f04384dac46061fe5a4424787bc7
2021-07-20 05:09:12 +00:00
sukiliu
e7a39a73f3 Update avc error on ROM 7562467 am: d9309ef34d am: f89cc13852
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: I3745256ac645b80f60815bc002f7ac5c1d9a091e
2021-07-20 04:55:35 +00:00
sukiliu
ee3af65a55 Update avc error on ROM 7562467 am: d9309ef34d am: 909d2db713
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: Ie4f2b994297a682dfcec4306df1ad24dd9eb9bb3
2021-07-20 04:55:09 +00:00
sukiliu
909d2db713 Update avc error on ROM 7562467 am: d9309ef34d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: Ida52f53a71258077d8163be3984c006e1d905f00
2021-07-20 04:37:32 +00:00
sukiliu
f89cc13852 Update avc error on ROM 7562467 am: d9309ef34d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15328118

Change-Id: I5e5e3cb6af90ed614aeb32aca5697f903ccfa46b
2021-07-20 04:36:34 +00:00
sukiliu
d9309ef34d Update avc error on ROM 7562467
avc: denied { read } for name="u:object_r:odsign_prop:s0" dev="tmpfs" ino=229 scontext=u:r:postinstall_dexopt:s0 tcontext=u:object_r:odsign_prop:s0 tclass=file permissive=0
avc: denied { read } for comm="otapreopt" name="u:object_r:odsign_prop:s0" dev="tmpfs" ino=229 scontext=u:r:postinstall_dexopt:s0 tcontext=u:object_r:odsign_prop:s0 tclass=file permissive=0

Bug: 194142604
Bug: 194065991
Test: PtsSELinuxTestCases
Change-Id: Ic3bb544f05ffff0df42f820d2f9cf6cd7cb24879
2021-07-20 10:03:30 +08:00
TreeHugger Robot
5ca9d3123e Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53 am: 8b76ff03de am: 35ccf64620
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: I5374e770b6403c3e80526d21baf2088f9e6dc6c0
2021-07-19 21:40:17 +00:00
TreeHugger Robot
8f3b454362 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53 am: dd0acb63a4 am: 2706f2f475
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: I534de4958cc7e3ea0b024dedd9edf07febec0434
2021-07-19 21:40:02 +00:00
Craig Dooley
12a162fde5 Merge "Add AoC wakeup stats to dump state" 2021-07-19 21:36:17 +00:00
TreeHugger Robot
35ccf64620 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53 am: 8b76ff03de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: I5b462c51cf2b8024506b4907392a18d6d204b830
2021-07-19 21:22:48 +00:00
TreeHugger Robot
2706f2f475 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53 am: dd0acb63a4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: I9409592f8dfe46bfad18e232dbf313d084348260
2021-07-19 21:22:23 +00:00
TreeHugger Robot
dd0acb63a4 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: Ia0bf59df027d801313955161d53139b7176c8b19
2021-07-19 21:10:22 +00:00
TreeHugger Robot
8b76ff03de Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev am: f8b8e0cb53
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15316269

Change-Id: I0f77c7bfc41db1bdd361708218d5dd5750d5c682
2021-07-19 21:09:31 +00:00
TreeHugger Robot
f8b8e0cb53 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev 2021-07-19 20:54:38 +00:00
TreeHugger Robot
74b4bd3540 Merge "Allow HAL to access sysfs." into sc-dev am: fc321aabe2 am: 56491c6712 am: b6ca87033f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15308771

Change-Id: If83ee147397ffe12172ed666ac66dc47b42684a1
2021-07-19 19:26:33 +00:00
TreeHugger Robot
909689aab1 Merge "Allow HAL to access sysfs." into sc-dev am: fc321aabe2 am: 299745791f am: a4a693bcd5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15308771

Change-Id: Icb60043e6abdcae0103b06c8f6379e4775635f52
2021-07-19 19:26:20 +00:00
TreeHugger Robot
b6ca87033f Merge "Allow HAL to access sysfs." into sc-dev am: fc321aabe2 am: 56491c6712
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15308771

Change-Id: I83158b17a617cba5e70a0c68b4c6bc9bd4deae14
2021-07-19 19:07:59 +00:00
TreeHugger Robot
a4a693bcd5 Merge "Allow HAL to access sysfs." into sc-dev am: fc321aabe2 am: 299745791f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15308771

Change-Id: Ie869d006d0a5023eae8e1ce0a37d5691e98603a9
2021-07-19 19:07:21 +00:00
TreeHugger Robot
299745791f Merge "Allow HAL to access sysfs." into sc-dev am: fc321aabe2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15308771

Change-Id: If129d2a57a6d94ef42cc187b7d53eb5c5a536d80
2021-07-19 18:39:57 +00:00
TreeHugger Robot
56491c6712 Merge "Allow HAL to access sysfs." into sc-dev am: fc321aabe2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15308771

Change-Id: I2254f63fc551654694fa5ecda3b78cda80c76d5c
2021-07-19 18:39:16 +00:00
Andrew LeCain
bfe4467538 Merge "sepolicy allow fingerprint hal to read mfg_data" into sc-dev am: ff13d1adee am: d297941975 am: 4e4a1ba28e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15292860

Change-Id: I4f05f3b03da20d7757beb3c2133eb4e8cc3b7c96
2021-07-19 18:30:34 +00:00
Andrew LeCain
12c26c0377 Merge "sepolicy allow fingerprint hal to read mfg_data" into sc-dev am: ff13d1adee am: c854cd3e43 am: 950a16e796
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15292860

Change-Id: I30e5e043c3ced30db6a85503644ed266042ed152
2021-07-19 18:30:23 +00:00
Andrew LeCain
4e4a1ba28e Merge "sepolicy allow fingerprint hal to read mfg_data" into sc-dev am: ff13d1adee am: d297941975
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15292860

Change-Id: Id7851b07a3dea8f10c8fbc92076d392efbb7362c
2021-07-19 18:23:25 +00:00
TreeHugger Robot
fc321aabe2 Merge "Allow HAL to access sysfs." into sc-dev 2021-07-19 18:22:13 +00:00
Andrew LeCain
950a16e796 Merge "sepolicy allow fingerprint hal to read mfg_data" into sc-dev am: ff13d1adee am: c854cd3e43
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15292860

Change-Id: I0ceefa7b2f28075d40deb8db0e475b219665e67a
2021-07-19 18:18:41 +00:00
Andrew LeCain
d297941975 Merge "sepolicy allow fingerprint hal to read mfg_data" into sc-dev am: ff13d1adee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15292860

Change-Id: I53ca776b64edda2d1cabf505445f2f7768f04dc6
2021-07-19 18:06:19 +00:00
Andrew LeCain
c854cd3e43 Merge "sepolicy allow fingerprint hal to read mfg_data" into sc-dev am: ff13d1adee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15292860

Change-Id: I419c8ac06e29ad9bafadac397e3948794cd0f38d
2021-07-19 18:04:20 +00:00
Andrew LeCain
ff13d1adee Merge "sepolicy allow fingerprint hal to read mfg_data" into sc-dev 2021-07-19 17:46:18 +00:00
Max Kogan
5201b7dd08 Add AoC wakeup stats to dump state
Need add support for wakeup stats to track AoC to AP messages
resulting in frequent wake-ups.

Bug: 192988670
Signed-off-by: Max Kogan <maxkogan@google.com>
Change-Id: I5eec808ed2dba9996607151efe494a238491076d
2021-07-16 23:19:27 -07:00
Stephane Lee
022b61751e Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot
Test: adb bugreport; check "dumpstate_board.txt"
Bug: 193894298
Change-Id: I222405ab6d78bd4367a91cc0f13b8d8a0f1ca578
2021-07-16 16:27:42 -07:00
Sina Hassani
e763f3cc9b Allow HAL to access sysfs.
This is so that it can read fw metrics from sysfs and dump them through
dumpsys.

Test: Ran dumpsys and bugreport.
Bug: 193841666
Change-Id: I08c08e35bad35d0eefc3f6ad218fb47e24051b0c
2021-07-16 16:27:34 -07:00
Wenhao Wang
5cc03c3040 Merge "Add wakelock access for storageproxyd" into sc-dev am: 5305955a86 am: 2668a75c61 am: 235e505ec0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15306271

Change-Id: Ia6151848c70159ca4e71c85d553d30b73a3fd4fa
2021-07-16 17:59:58 +00:00
Wenhao Wang
8aa8abdece Merge "Add wakelock access for storageproxyd" into sc-dev am: 5305955a86 am: e4e2f33f14 am: 563d5cd06d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15306271

Change-Id: I53461b5457d89ae0bdda3540d8cb4e98b39725b4
2021-07-16 17:59:43 +00:00
Wenhao Wang
235e505ec0 Merge "Add wakelock access for storageproxyd" into sc-dev am: 5305955a86 am: 2668a75c61
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15306271

Change-Id: Id88ff0bb4c37025aaf9ae2a44740339f7f21cdec
2021-07-16 17:42:37 +00:00
Wenhao Wang
563d5cd06d Merge "Add wakelock access for storageproxyd" into sc-dev am: 5305955a86 am: e4e2f33f14
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15306271

Change-Id: I6c5948116b72226356517e7806a2f6a1f23fdd48
2021-07-16 17:42:11 +00:00
Wenhao Wang
e4e2f33f14 Merge "Add wakelock access for storageproxyd" into sc-dev am: 5305955a86
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15306271

Change-Id: I133982ece59c9dc571b858b189375d31b4f02542
2021-07-16 17:30:31 +00:00
Wenhao Wang
2668a75c61 Merge "Add wakelock access for storageproxyd" into sc-dev am: 5305955a86
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15306271

Change-Id: I9bc3270349b159cfd1e1a9e33162c0169d23494a
2021-07-16 17:29:45 +00:00
Wenhao Wang
5305955a86 Merge "Add wakelock access for storageproxyd" into sc-dev 2021-07-16 17:12:01 +00:00
Alex Hong
fdd26bf21e Merge "sepolicy: gs101: support tetheroffload hal version 1.y" into sc-dev am: ea6934fda9 am: 77236f96d6 am: 2a0fc76fb6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15296508

Change-Id: I4cade6701a99387b2c9836a3d799bf2a7979a2ac
2021-07-16 07:16:15 +00:00
Alex Hong
d5950fbebc Merge "sepolicy: gs101: support tetheroffload hal version 1.y" into sc-dev am: ea6934fda9 am: 603f871e41 am: f4db4f24d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15296508

Change-Id: Id273d682ff9a2a91ca470fa3cb8d95b544b59a07
2021-07-16 07:15:43 +00:00
Alex Hong
2a0fc76fb6 Merge "sepolicy: gs101: support tetheroffload hal version 1.y" into sc-dev am: ea6934fda9 am: 77236f96d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15296508

Change-Id: I43bd4ce43de474d3f8fdb0bba08cfde634fe52bc
2021-07-16 07:03:48 +00:00
Alex Hong
f4db4f24d3 Merge "sepolicy: gs101: support tetheroffload hal version 1.y" into sc-dev am: ea6934fda9 am: 603f871e41
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15296508

Change-Id: I7f1ff767b49acf6d69d0e29a7b653d0c7e33e837
2021-07-16 06:55:30 +00:00
Alex Hong
77236f96d6 Merge "sepolicy: gs101: support tetheroffload hal version 1.y" into sc-dev am: ea6934fda9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15296508

Change-Id: Id9c0bdad2c43886630107cbbbc7f51459481ddf9
2021-07-16 06:46:06 +00:00
Alex Hong
603f871e41 Merge "sepolicy: gs101: support tetheroffload hal version 1.y" into sc-dev am: ea6934fda9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15296508

Change-Id: Ie62db9de45aeb5244d1a53d35f2f216122378177
2021-07-16 06:45:21 +00:00
Alex Hong
ea6934fda9 Merge "sepolicy: gs101: support tetheroffload hal version 1.y" into sc-dev 2021-07-16 06:28:32 +00:00
Namkyu Kim
4055c31faf sepolicy: gs101: support tetheroffload hal version 1.y
Support both 1.0 and 1.1.

Bug: 186539538
Test: run vts -m VtsHalTetheroffloadControlV1_0TargetTest
      run vts -m VtsHalTetheroffloadControlV1_1TargetTest

Signed-off-by: Namkyu Kim <namkyu78.kim@samsung.com>
Change-Id: I76a26dcd22e1c8985d470a39b9aeae618f459d00
2021-07-16 04:05:21 +00:00
Stephane Lee
542e69a14b Merge "odpm: Rename the odpm_config sepolicies to be more consistent" into sc-dev am: ea6996bc52 am: 0a7e3ad9ea am: 804e13cb8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15289584

Change-Id: I764df9a5f74fb7a785a43a6ac87c28f47a229548
2021-07-16 02:45:17 +00:00
Stephane Lee
91fde6a7ca Merge "odpm: Rename the odpm_config sepolicies to be more consistent" into sc-dev am: ea6996bc52 am: b37fe8c071 am: 3d97807081
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15289584

Change-Id: I6df2b194f1d1a3ee4a6d64d611ab0086eaa5d3b1
2021-07-16 02:44:55 +00:00
Stephane Lee
804e13cb8c Merge "odpm: Rename the odpm_config sepolicies to be more consistent" into sc-dev am: ea6996bc52 am: 0a7e3ad9ea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15289584

Change-Id: I2218337eea58263408b8e782e1bdbeebe3cca62b
2021-07-16 02:30:30 +00:00
Stephane Lee
3d97807081 Merge "odpm: Rename the odpm_config sepolicies to be more consistent" into sc-dev am: ea6996bc52 am: b37fe8c071
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15289584

Change-Id: I237fac500741e1c15ca6fb7d3cf3c0e1a19a647a
2021-07-16 02:30:03 +00:00
Stephane Lee
b37fe8c071 Merge "odpm: Rename the odpm_config sepolicies to be more consistent" into sc-dev am: ea6996bc52
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15289584

Change-Id: I587aad68aafb8b4229fd76f2a35d94ccc4a51987
2021-07-16 02:11:29 +00:00
Stephane Lee
0a7e3ad9ea Merge "odpm: Rename the odpm_config sepolicies to be more consistent" into sc-dev am: ea6996bc52
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15289584

Change-Id: Ia8765b15f56c4a4da76ce47c0e38ebaef351d4a7
2021-07-16 02:10:10 +00:00
Stephane Lee
ea6996bc52 Merge "odpm: Rename the odpm_config sepolicies to be more consistent" into sc-dev 2021-07-16 01:55:33 +00:00
Wenhao Wang
5c009fb96f Add wakelock access for storageproxyd
The storageproxyd needs a wakelock around the sequence of UFS commands

Bug: 193456223
Test: Trusty storage tests
Change-Id: I1efe3144c8bcc17c056fc3b9b796e080f77991d5
2021-07-15 17:10:31 -07:00
Andrew LeCain
d8d8580281 sepolicy allow fingerprint hal to read mfg_data
declares new device context for mfg_data_block_device
give fp HAL permission to read/write/open
give fp HAL permission to search block_device dir

Bug: 189135413
Test: sideload calibration in enforcing mode.
Change-Id: I19e0cd13fc452b42c3f35772c4bafd433dbcc8b1
2021-07-15 10:58:53 -07:00
TreeHugger Robot
9135dc4bf4 Merge "Set sepolicy for shell script of disabling contaminant detection" into sc-dev am: f0dd8e2957 am: 9eca0031b0 am: c89296ff73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15269315

Change-Id: Ia47dc98a64130188e7b16328aca4d82f6a011040
2021-07-15 17:09:57 +00:00
TreeHugger Robot
897136d89c Merge "Set sepolicy for shell script of disabling contaminant detection" into sc-dev am: f0dd8e2957 am: 18ba5fc434 am: 34c83c5bdd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15269315

Change-Id: I8519eba1ede02cd42389422240913d3d297a8fdb
2021-07-15 17:09:47 +00:00
TreeHugger Robot
c89296ff73 Merge "Set sepolicy for shell script of disabling contaminant detection" into sc-dev am: f0dd8e2957 am: 9eca0031b0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15269315

Change-Id: Ifa6e5a1a8bdb7c8afc6fdbe5ac03f44cb3d468da
2021-07-15 16:45:28 +00:00
TreeHugger Robot
34c83c5bdd Merge "Set sepolicy for shell script of disabling contaminant detection" into sc-dev am: f0dd8e2957 am: 18ba5fc434
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15269315

Change-Id: Iee0a79fe68c84c92e55f9565d50301c8d6c45504
2021-07-15 16:45:05 +00:00
TreeHugger Robot
18ba5fc434 Merge "Set sepolicy for shell script of disabling contaminant detection" into sc-dev am: f0dd8e2957
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15269315

Change-Id: I6c76bc3520f86a8aa85172a38fbfe8ebec6d934c
2021-07-15 16:32:23 +00:00
TreeHugger Robot
9eca0031b0 Merge "Set sepolicy for shell script of disabling contaminant detection" into sc-dev am: f0dd8e2957
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15269315

Change-Id: I56fc4bbc6331e9b273f6deb9c324fcc2f48f7e74
2021-07-15 16:31:29 +00:00
TreeHugger Robot
f0dd8e2957 Merge "Set sepolicy for shell script of disabling contaminant detection" into sc-dev 2021-07-15 16:17:40 +00:00
sukiliu
42006bb60c Update avc error on ROM 7550575 am: 06ea8d9432 am: 5382253c4f am: ad022ab512
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283866

Change-Id: Iadbeb492f59328fc74341d3dfeddb78bdcf9b722
2021-07-15 09:52:00 +00:00
sukiliu
df86c7190e Update avc error on ROM 7550575 am: 06ea8d9432 am: 65cda2d3a4 am: 3ea8096eda
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283866

Change-Id: Ibdd0c4de9ae0a7975924c639268006218a18949d
2021-07-15 09:49:23 +00:00
sukiliu
ad022ab512 Update avc error on ROM 7550575 am: 06ea8d9432 am: 5382253c4f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283866

Change-Id: I2a6e59ecfa630338fe7425b19fd8ca4c91ec69a5
2021-07-15 09:29:19 +00:00
sukiliu
3ea8096eda Update avc error on ROM 7550575 am: 06ea8d9432 am: 65cda2d3a4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283866

Change-Id: Iaae31f3e2cd9607991b74fe4ec025b7586736bec
2021-07-15 09:28:31 +00:00
sukiliu
65cda2d3a4 Update avc error on ROM 7550575 am: 06ea8d9432
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283866

Change-Id: I5fd96bc2ab734e30683c77519fdf45594cb7904d
2021-07-15 09:01:40 +00:00
sukiliu
5382253c4f Update avc error on ROM 7550575 am: 06ea8d9432
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283866

Change-Id: I8a9c4dc678122acb58cec715bfed8707cd4701f3
2021-07-15 09:00:29 +00:00
Darren Hsu
3050ed8ed9 Set sepolicy for shell script of disabling contaminant detection
The avc denials are listed in b/192208389#comment10.

Bug: 192208389
Test: Manually tested
Change-Id: Ib2e3cf498851c0c9e5e74aacc9bf391549c0ad1a
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2021-07-15 11:11:11 +08:00
sukiliu
06ea8d9432 Update avc error on ROM 7550575
Bug: 193726003
Bug: 193633303
Bug: 193548421
Test: PtsSELinuxTestCases
Change-Id: Id6cb13602eb9a69f7815a0301a5708577c663bd2
2021-07-15 09:33:58 +08:00
Stephane Lee
c7342a7824 odpm: Rename the odpm_config sepolicies to be more consistent
Test: Ensure that there are no sepolicy errors on odpm_config
Bug: 192674986
Change-Id: I3043a544511c8c3051e1bd10e9f6b668b251cf5f
2021-07-14 16:11:51 -07:00
Orion Hodson
c90dc35778 Merge "Revert "Update avc error on ROM 7522385"" into sc-dev am: d4a7e81293 am: ea548a455a am: c508030c93
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15235283

Change-Id: I66c5b8d50265a14f98a108e3915781ab272cf6d0
2021-07-14 09:56:21 +00:00
Orion Hodson
a37c796023 Merge "Revert "Update avc error on ROM 7522385"" into sc-dev am: d4a7e81293 am: b611de527f am: 8df410d879
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15235283

Change-Id: I829b3f79dbdb364b74be03b37913aeae69cb78be
2021-07-14 09:55:56 +00:00
Orion Hodson
c508030c93 Merge "Revert "Update avc error on ROM 7522385"" into sc-dev am: d4a7e81293 am: ea548a455a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15235283

Change-Id: I1978089b667020a7182793bfc98aa1073eda750e
2021-07-14 09:38:57 +00:00
Orion Hodson
8df410d879 Merge "Revert "Update avc error on ROM 7522385"" into sc-dev am: d4a7e81293 am: b611de527f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15235283

Change-Id: I57f0580a78435a461b85fb52c0eb525a89a50c59
2021-07-14 09:38:38 +00:00
Orion Hodson
b611de527f Merge "Revert "Update avc error on ROM 7522385"" into sc-dev am: d4a7e81293
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15235283

Change-Id: I404a023228cee821b97a72b29394f81e517d56c7
2021-07-14 09:23:21 +00:00
Orion Hodson
ea548a455a Merge "Revert "Update avc error on ROM 7522385"" into sc-dev am: d4a7e81293
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15235283

Change-Id: Ia370863825c449a693fc0776f7573c2cb95da998
2021-07-14 09:22:27 +00:00
Orion Hodson
d4a7e81293 Merge "Revert "Update avc error on ROM 7522385"" into sc-dev 2021-07-14 09:08:32 +00:00
TreeHugger Robot
8038da1e16 Merge "Add create perm for tee" into sc-dev am: e7aab2cbdd am: 29508b1969 am: d2e5c8b65c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276267

Change-Id: Ia76ffe7ee21e731d89f00a461a6b381a3cf12377
2021-07-14 02:20:33 +00:00
TreeHugger Robot
9c4a36902f Merge "Add create perm for tee" into sc-dev am: e7aab2cbdd am: 67dfb20473 am: 10086de148
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276267

Change-Id: I05f2347a9bef7e8b124ad1ac1b60c4c68497d07b
2021-07-14 02:20:13 +00:00
TreeHugger Robot
d2e5c8b65c Merge "Add create perm for tee" into sc-dev am: e7aab2cbdd am: 29508b1969
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276267

Change-Id: I753e845f78c5593a17f4bb14c612207d0016fc7c
2021-07-14 01:42:58 +00:00
TreeHugger Robot
10086de148 Merge "Add create perm for tee" into sc-dev am: e7aab2cbdd am: 67dfb20473
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276267

Change-Id: I1e0d4f0048254c00db8ecb632ece21c9e18bef5a
2021-07-14 01:42:25 +00:00
TreeHugger Robot
67dfb20473 Merge "Add create perm for tee" into sc-dev am: e7aab2cbdd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276267

Change-Id: Id0970b0bfb90adb33206450bd88b823d8742fc47
2021-07-14 01:21:36 +00:00
TreeHugger Robot
29508b1969 Merge "Add create perm for tee" into sc-dev am: e7aab2cbdd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276267

Change-Id: I836c68f5138bc60a1ae4b1a74a8b634b2dbd9ac9
2021-07-14 01:20:32 +00:00
TreeHugger Robot
e7aab2cbdd Merge "Add create perm for tee" into sc-dev 2021-07-14 01:01:53 +00:00
Wenhao Wang
c60e44c29e Add create perm for tee
The storageproxyd needs to create persist/ss from scratch.
So we add the create perm.

Bug: 193489307
Test: Trusty storage tests
Change-Id: Ida1c07acac26494ae6bba0392fb2da0425803608
2021-07-13 16:26:17 -07:00
TreeHugger Robot
eb7ceb09ac Merge "Revert "Update avc error on ROM 7526917"" into sc-dev am: 0afce44985 am: 64e79c3514 am: 931449a6e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15265928

Change-Id: I4ace8c82dc34c473acfac7ab4325c3f99bab5aa7
2021-07-13 17:46:08 +00:00
TreeHugger Robot
e5a6bc8cfc Merge "Revert "Update avc error on ROM 7526917"" into sc-dev am: 0afce44985 am: e24d28c448 am: fe75b5b660
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15265928

Change-Id: I1f4e09af80994eaf3b1a85e080d4564efb7e6b29
2021-07-13 17:44:58 +00:00
TreeHugger Robot
931449a6e4 Merge "Revert "Update avc error on ROM 7526917"" into sc-dev am: 0afce44985 am: 64e79c3514
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15265928

Change-Id: Ia3bb2bf8f6b0e224098ef47d990dcb3b4bffba1b
2021-07-13 17:35:15 +00:00
TreeHugger Robot
fe75b5b660 Merge "Revert "Update avc error on ROM 7526917"" into sc-dev am: 0afce44985 am: e24d28c448
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15265928

Change-Id: I8640006ace7b62f5e072bf04e4d1ebb192af2361
2021-07-13 17:31:21 +00:00
TreeHugger Robot
64e79c3514 Merge "Revert "Update avc error on ROM 7526917"" into sc-dev am: 0afce44985
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15265928

Change-Id: Ic78c1af03bc8a748db3198dae28e5a104f9d4b45
2021-07-13 17:19:02 +00:00
TreeHugger Robot
e24d28c448 Merge "Revert "Update avc error on ROM 7526917"" into sc-dev am: 0afce44985
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15265928

Change-Id: I68f17cac42d705859eb3f22e694666f2f21f510e
2021-07-13 17:17:12 +00:00
TreeHugger Robot
0afce44985 Merge "Revert "Update avc error on ROM 7526917"" into sc-dev 2021-07-13 17:03:43 +00:00
Michael Ayoubi
04d9f1ac13 Revert "Update avc error on ROM 7526917"
This reverts commit 81a8e5b4ce.

Reason for revert: <Qorvo Version P2-S4(ag/15139489) which caused these errors got reverted from sc-dev in ag/15224151. It will now go into master>

Bug: 192924316
Change-Id: I772053cf512ba555a5fa657d39f957ac51f013c1
2021-07-13 17:03:26 +00:00
Automerger Merge Worker
f8bcce60dc Merge "Merge "suppress error for ag/15263334" into sc-dev am: 5de8701fae am: 44e0728dac" into sc-v2-dev-plus-aosp am: b820855772
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15258522

Change-Id: I399940afc8aa27b2196d328aec58e80ef561891c
2021-07-13 16:26:02 +00:00
Chris Fries
f82fca4131 Merge "suppress error for ag/15263334" into sc-dev am: 5de8701fae am: 0d6a29a714 am: aa9c7911e2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15258522

Change-Id: If9d5c8ba3e24a672783a821a9d73e175794493aa
2021-07-13 16:24:40 +00:00
Automerger Merge Worker
b820855772 Merge "Merge "suppress error for ag/15263334" into sc-dev am: 5de8701fae am: 44e0728dac" into sc-v2-dev-plus-aosp 2021-07-13 16:10:27 +00:00
Chris Fries
aa9c7911e2 Merge "suppress error for ag/15263334" into sc-dev am: 5de8701fae am: 0d6a29a714
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15258522

Change-Id: I36bff7c1ba25365183f2585f42c10bb80500fced
2021-07-13 16:10:10 +00:00
Chris Fries
13b1d8fdf4 Merge "suppress error for ag/15263334" into sc-dev am: 5de8701fae am: 44e0728dac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15258522

Change-Id: I1807be74d040e8928c5db6367ebd8c4bedd72a5e
2021-07-13 16:09:25 +00:00
Chris Fries
44e0728dac Merge "suppress error for ag/15263334" into sc-dev am: 5de8701fae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15258522

Change-Id: Idc466d8e5dd5e3733a840cf78e3dad02b9486fab
2021-07-13 15:52:31 +00:00
Chris Fries
0d6a29a714 Merge "suppress error for ag/15263334" into sc-dev am: 5de8701fae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15258522

Change-Id: I2d10c68c79ec36bdef20d89076bb3846844fdb25
2021-07-13 15:51:38 +00:00
Chris Fries
5de8701fae Merge "suppress error for ag/15263334" into sc-dev 2021-07-13 15:37:16 +00:00
Stephane Lee
a8f25ede0a Add DC Charging to server configurable parameters; ensure the sysfs node is writable am: 2046513eb7 am: ce93f1c3bf am: 9adb2753a8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15180033

Change-Id: Ic9809c47d31bfba0915abae29d3e9fb3240a0efd
2021-07-13 09:20:05 +00:00
Stephane Lee
5dc5be5967 Add DC Charging to server configurable parameters; ensure the sysfs node is writable am: 2046513eb7 am: ec44f8bfd2 am: c00638f5e9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15180033

Change-Id: Ic925a8f33ea373982cdbfb08d31b83d5b9009be3
2021-07-13 09:19:43 +00:00
Stephane Lee
9adb2753a8 Add DC Charging to server configurable parameters; ensure the sysfs node is writable am: 2046513eb7 am: ce93f1c3bf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15180033

Change-Id: Iff0f35885f40f27faa264d1c7c76b2f171ce361c
2021-07-13 09:06:24 +00:00
Stephane Lee
c00638f5e9 Add DC Charging to server configurable parameters; ensure the sysfs node is writable am: 2046513eb7 am: ec44f8bfd2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15180033

Change-Id: Ic7678ff67a26b33a336ae06987bfada700f6bd89
2021-07-13 09:05:51 +00:00
Stephane Lee
ec44f8bfd2 Add DC Charging to server configurable parameters; ensure the sysfs node is writable am: 2046513eb7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15180033

Change-Id: I3cd66320c887223d53506cb2ce741a1e04c02afd
2021-07-13 08:47:59 +00:00
Stephane Lee
ce93f1c3bf Add DC Charging to server configurable parameters; ensure the sysfs node is writable am: 2046513eb7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15180033

Change-Id: Id86535b96a58f1561b501c5c91ef43306031053c
2021-07-13 08:46:09 +00:00
Adam Shih
9d7e88c27e suppress error for ag/15263334
Bug: 193474772
Test: boot with no relevant error found
Change-Id: Ia3f49fbf9e623c6b81d6c595e19e275f64521dfe
2021-07-13 09:57:18 +08:00
Stephane Lee
2046513eb7 Add DC Charging to server configurable parameters; ensure the sysfs node is writable
hal_googlebattery will be writing to:
/sys/devices/platform/google,cpm/dc_ctl

Test: Ensure there are no errors on logcat | grep google_battery@
Bug: 183772980

Change-Id: Id4490d6de161eefe63c36c01d497696b16c6292d
2021-07-12 13:27:54 -07:00
SHUCHI LILU
6a49a24238 Merge "Update avc error on ROM 7539530" into sc-dev am: 4aa650714c am: d083bb9bfd am: 9d91aa113d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15250405

Change-Id: I6d34b3802ac507cc228d585774028fd94b5e3964
2021-07-12 04:31:12 +00:00
SHUCHI LILU
ac7a90f143 Merge "Update avc error on ROM 7539530" into sc-dev am: 4aa650714c am: 961b0a8689 am: ca1bbf991b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15250405

Change-Id: I31d0833a9abdaea7e53c49347092567d9f735571
2021-07-12 04:31:06 +00:00
SHUCHI LILU
9d91aa113d Merge "Update avc error on ROM 7539530" into sc-dev am: 4aa650714c am: d083bb9bfd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15250405

Change-Id: Ic0c2b6d340507e46754880865f6169ca2df0a61e
2021-07-12 04:19:07 +00:00
SHUCHI LILU
ca1bbf991b Merge "Update avc error on ROM 7539530" into sc-dev am: 4aa650714c am: 961b0a8689
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15250405

Change-Id: Ide0432596524ada48b52368045c9fbefddbf8112
2021-07-12 04:18:43 +00:00
SHUCHI LILU
961b0a8689 Merge "Update avc error on ROM 7539530" into sc-dev am: 4aa650714c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15250405

Change-Id: Ifeccd2009a20300026813565692ffb69aef971bd
2021-07-12 04:05:36 +00:00
SHUCHI LILU
d083bb9bfd Merge "Update avc error on ROM 7539530" into sc-dev am: 4aa650714c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15250405

Change-Id: I091a161f8c984c7a718d504aa3ef1da40655a4f8
2021-07-12 04:04:41 +00:00
SHUCHI LILU
4aa650714c Merge "Update avc error on ROM 7539530" into sc-dev 2021-07-12 03:45:34 +00:00
Salmax Chang
814e079dd3 Merge "init: change overlayfs_file rule to dontaudit" into sc-dev am: 3582ffbdbf am: dc5f944d31 am: 480e129294
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15243218

Change-Id: Ie606a12045944d7b80af4a886687463c57a8c96c
2021-07-12 03:19:55 +00:00
Salmax Chang
4fd7927c2d Merge "init: change overlayfs_file rule to dontaudit" into sc-dev am: 3582ffbdbf am: 75e43acd87 am: 85d2b46a46
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15243218

Change-Id: I05776596bfa9f02c5abc3207ee6dada0a3342f4f
2021-07-12 03:19:48 +00:00
Salmax Chang
480e129294 Merge "init: change overlayfs_file rule to dontaudit" into sc-dev am: 3582ffbdbf am: dc5f944d31
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15243218

Change-Id: I1be9c6745812a2e33dbb0f5539d9facc702d66d9
2021-07-12 03:10:35 +00:00
Salmax Chang
85d2b46a46 Merge "init: change overlayfs_file rule to dontaudit" into sc-dev am: 3582ffbdbf am: 75e43acd87
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15243218

Change-Id: I0ff6af431533a1b719463940723305464b04ae30
2021-07-12 03:10:11 +00:00
Salmax Chang
75e43acd87 Merge "init: change overlayfs_file rule to dontaudit" into sc-dev am: 3582ffbdbf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15243218

Change-Id: Ie4fbc4fdc55beb1e3cabb65f9454fccde8b1aa2d
2021-07-12 02:55:35 +00:00
Salmax Chang
dc5f944d31 Merge "init: change overlayfs_file rule to dontaudit" into sc-dev am: 3582ffbdbf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15243218

Change-Id: If111d5fe0ec75703abb1ca01a40820165e41d0c1
2021-07-12 02:54:39 +00:00
Salmax Chang
3582ffbdbf Merge "init: change overlayfs_file rule to dontaudit" into sc-dev 2021-07-12 02:40:43 +00:00
sukiliu
a06677ce7a Update avc error on ROM 7539530
avc: denied { read } for name="u:object_r:vendor_camera_debug_prop:s0" dev="tmpfs" ino=300 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:vendor_camera_debug_prop:s0 tclass=file permissive=0
avc: denied { read } for comm="dumpstate@1.1-s" name="u:object_r:vendor_camera_debug_prop:s0" dev="tmpfs" ino=300 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:vendor_camera_debug_prop:s0 tclass=file permissive=0

Bug: 193365129
Test: PtsSELinuxTestCases
Change-Id: I1d0258ec4ce2abbf8f899add86be2076c0c72be0
2021-07-12 09:49:17 +08:00
Long Ling
dc4d1b7f7e Merge "Allowed HWC HAL access TUI status node" into sc-dev am: 5a7c666290 am: c8efc49b29 am: 06bc91876e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15177771

Change-Id: I0e5c7d649ab99df15fe2f8541605d43794b15867
2021-07-10 03:08:59 +00:00
Long Ling
690138f2d2 Merge "Allowed HWC HAL access TUI status node" into sc-dev am: 5a7c666290 am: deec54fbfd am: 1ed5729921
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15177771

Change-Id: I8afcb0cec00d982950ba2c9b0737cab459ddb98c
2021-07-10 03:08:31 +00:00
Long Ling
06bc91876e Merge "Allowed HWC HAL access TUI status node" into sc-dev am: 5a7c666290 am: c8efc49b29
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15177771

Change-Id: I982efbeff33d4f49991069fc18c02099ad516873
2021-07-10 02:55:15 +00:00
Long Ling
1ed5729921 Merge "Allowed HWC HAL access TUI status node" into sc-dev am: 5a7c666290 am: deec54fbfd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15177771

Change-Id: Id392f1eb558e44db192b4ae7a174a9047dfeb4bf
2021-07-10 02:55:03 +00:00
Long Ling
deec54fbfd Merge "Allowed HWC HAL access TUI status node" into sc-dev am: 5a7c666290
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15177771

Change-Id: I7eb405191f7ef5e6e6d35cb4edda78a904484db2
2021-07-10 02:36:51 +00:00
Long Ling
c8efc49b29 Merge "Allowed HWC HAL access TUI status node" into sc-dev am: 5a7c666290
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15177771

Change-Id: I035cfe3c25903178bab1823d5f3ea61e2ad900e1
2021-07-10 02:35:42 +00:00
Long Ling
5a7c666290 Merge "Allowed HWC HAL access TUI status node" into sc-dev 2021-07-10 02:19:43 +00:00
SalmaxChang
12370586c9 init: change overlayfs_file rule to dontaudit
Workaround for modem_img being unlabeled after disable-verity.

Bug: 193113005

Change-Id: I64b528d9952849ff73bcd583211d33c3b220438d
2021-07-09 23:27:30 +08:00
Orion Hodson
da1f469dc8 Revert "Update avc error on ROM 7522385"
This reverts commit 46dfc784f5.

Bug: 192895524
Test: PtsSELinuxTestCases
Change-Id: Iaf00b567fbd3df575ea009036c2e35f6a7a87d90
2021-07-09 15:51:12 +01:00
Meng Wang
0efb525156 Merge "[RCS] Update sepolicy for RCS" into sc-dev am: 1c6e5c01eb am: 70052ef1c1 am: bf6a7a7548
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15185251

Change-Id: I92a4448c5727e50b15243785dfd4d742f15a6531
2021-07-08 18:07:35 +00:00
Meng Wang
2aea7ba571 Merge "[RCS] Update sepolicy for RCS" into sc-dev am: 1c6e5c01eb am: 7fb6fd8f29 am: 425c6cddc6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15185251

Change-Id: I770d52819732ca4f910043917581d7ab29265867
2021-07-08 18:07:26 +00:00
Meng Wang
bf6a7a7548 Merge "[RCS] Update sepolicy for RCS" into sc-dev am: 1c6e5c01eb am: 70052ef1c1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15185251

Change-Id: Ic81ae99b0e072e6e97ce1ec5c74587a6f12196d5
2021-07-08 17:52:13 +00:00
Meng Wang
425c6cddc6 Merge "[RCS] Update sepolicy for RCS" into sc-dev am: 1c6e5c01eb am: 7fb6fd8f29
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15185251

Change-Id: Ib153175c24e41667a615b0907b8362f654fb11b3
2021-07-08 17:50:26 +00:00
Meng Wang
7fb6fd8f29 Merge "[RCS] Update sepolicy for RCS" into sc-dev am: 1c6e5c01eb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15185251

Change-Id: Id84850bf689dd9b060fa3ef12dcb31937f84eab7
2021-07-08 17:29:20 +00:00
Meng Wang
70052ef1c1 Merge "[RCS] Update sepolicy for RCS" into sc-dev am: 1c6e5c01eb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15185251

Change-Id: Ib935cc9132f6b7239e973b43bd13b160b7df2747
2021-07-08 17:28:23 +00:00
Meng Wang
1c6e5c01eb Merge "[RCS] Update sepolicy for RCS" into sc-dev 2021-07-08 17:14:51 +00:00
TreeHugger Robot
88fd548ad2 Merge "[3A Coordinator] Enable to property_set for log.tag. prefix" into sc-dev am: 95756a2c79 am: 3d080673a4 am: 3464da6e27
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15223178

Change-Id: Ieb0ecc6219f37ba7e7d7b7ac1febf554ceff6d55
2021-07-08 07:32:49 +00:00
TreeHugger Robot
efcfe382f4 Merge "[3A Coordinator] Enable to property_set for log.tag. prefix" into sc-dev am: 95756a2c79 am: b2b7ac7cdb am: a9d707557e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15223178

Change-Id: I650d55d67695915a882182dc094d0bd65bd3cdef
2021-07-08 07:31:43 +00:00
TreeHugger Robot
3464da6e27 Merge "[3A Coordinator] Enable to property_set for log.tag. prefix" into sc-dev am: 95756a2c79 am: 3d080673a4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15223178

Change-Id: Ie8573a2b0823804bac8dd4624559cba5cb58adcd
2021-07-08 07:18:11 +00:00
TreeHugger Robot
a9d707557e Merge "[3A Coordinator] Enable to property_set for log.tag. prefix" into sc-dev am: 95756a2c79 am: b2b7ac7cdb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15223178

Change-Id: If5ff68c7d802c9f6d73bb1b4cafd1a3720228356
2021-07-08 07:14:53 +00:00
TreeHugger Robot
3d080673a4 Merge "[3A Coordinator] Enable to property_set for log.tag. prefix" into sc-dev am: 95756a2c79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15223178

Change-Id: I31a476f1d9db6714eb7a229639da600ed70c4877
2021-07-08 07:00:51 +00:00
TreeHugger Robot
b2b7ac7cdb Merge "[3A Coordinator] Enable to property_set for log.tag. prefix" into sc-dev am: 95756a2c79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15223178

Change-Id: Ia36378397d340c61fd8d3f0ce601cbcfc83f06e9
2021-07-08 06:59:59 +00:00
TreeHugger Robot
95756a2c79 Merge "[3A Coordinator] Enable to property_set for log.tag. prefix" into sc-dev 2021-07-08 05:55:52 +00:00
SHUCHI LILU
dedc652c5f Merge "Update avc error on ROM 7527858" into sc-dev am: 54780f7ae3 am: cc3d5bb968 am: 749cd00a0e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15222136

Change-Id: I5db3351b7ea4557e9ad72ce6f7a23312d24408ce
2021-07-08 03:31:41 +00:00
SHUCHI LILU
1dfa00b841 Merge "Update avc error on ROM 7527858" into sc-dev am: 54780f7ae3 am: 889d8d67b4 am: 53887edc30
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15222136

Change-Id: I92150b69127a59cae445d4674ff2efc78e91476f
2021-07-08 03:31:35 +00:00
SHUCHI LILU
749cd00a0e Merge "Update avc error on ROM 7527858" into sc-dev am: 54780f7ae3 am: cc3d5bb968
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15222136

Change-Id: I0e37422ed336313c5fa67782c7757ddfcb23794d
2021-07-08 03:22:15 +00:00
SHUCHI LILU
53887edc30 Merge "Update avc error on ROM 7527858" into sc-dev am: 54780f7ae3 am: 889d8d67b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15222136

Change-Id: Iaa5d7c055c52d721a7af7a41d307650103e6766c
2021-07-08 03:18:45 +00:00
SHUCHI LILU
889d8d67b4 Merge "Update avc error on ROM 7527858" into sc-dev am: 54780f7ae3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15222136

Change-Id: I6d978bcf07c78945666eb1b56454f7f457145dcc
2021-07-08 03:05:31 +00:00
SHUCHI LILU
cc3d5bb968 Merge "Update avc error on ROM 7527858" into sc-dev am: 54780f7ae3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15222136

Change-Id: I8d938fa6851835f1948964c373764a10dbcf36d8
2021-07-08 03:04:39 +00:00
SHUCHI LILU
54780f7ae3 Merge "Update avc error on ROM 7527858" into sc-dev 2021-07-08 02:53:28 +00:00
KRIS CHEN
da9b5d9925 Merge "Add sepolicy rules for fingerprint hal" into sc-dev am: ba9051de47 am: 11ce7d0f20 am: 65323c779b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15223175

Change-Id: I1031a8f24f44eb4d5c7b8f2381ce160a3ed46b6b
2021-07-08 02:47:44 +00:00
KRIS CHEN
e12716715f Merge "Add sepolicy rules for fingerprint hal" into sc-dev am: ba9051de47 am: 4108dc59c6 am: eb8ba8ed48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15223175

Change-Id: Icf35e412b863e85ee907b144dec12a6bd560c935
2021-07-08 02:47:39 +00:00
KRIS CHEN
65323c779b Merge "Add sepolicy rules for fingerprint hal" into sc-dev am: ba9051de47 am: 11ce7d0f20
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15223175

Change-Id: I2e7de0a4727fb1f3450d512363cdf63cd38f7b88
2021-07-08 02:35:34 +00:00
KRIS CHEN
eb8ba8ed48 Merge "Add sepolicy rules for fingerprint hal" into sc-dev am: ba9051de47 am: 4108dc59c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15223175

Change-Id: If42de0f985305c5bf390284cc8d1d0f29dae8a47
2021-07-08 02:35:12 +00:00
KRIS CHEN
4108dc59c6 Merge "Add sepolicy rules for fingerprint hal" into sc-dev am: ba9051de47
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15223175

Change-Id: I610ada122ff075bff8ef9e446fa91ceac293bf09
2021-07-08 02:22:04 +00:00
KRIS CHEN
11ce7d0f20 Merge "Add sepolicy rules for fingerprint hal" into sc-dev am: ba9051de47
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15223175

Change-Id: I52fc30783edc40b0e4a27307719a95e5ade1b4a4
2021-07-08 02:21:15 +00:00
Bo-Yuan Ye
20dd1ef66c [3A Coordinator] Enable to property_set for log.tag. prefix
major changes:
        1. add log_tag_prop for hal_camera_default

Test: go/p21-camera-test-checklist
Bug: 191923902
Change-Id: I767c235666c6761af6d21178d829a0f7cb8d42c8
2021-07-08 10:15:23 +08:00
KRIS CHEN
ba9051de47 Merge "Add sepolicy rules for fingerprint hal" into sc-dev 2021-07-08 02:05:03 +00:00
Myung-jong Kim
99e75b6ab9 [RCS] Update sepolicy for RCS
Fix seapp_contexts sepolicy for shannon-rcs, where
:shannonrcsservice process exceptions are not handled

Bug: 190581528
Signed-off-by: Myung-jong Kim <mj610.kim@samsung.com>
Change-Id: I15cbf103cea70f6db878305a8fca6b35aa521f9b
2021-07-07 10:57:12 -07:00
Maciej Zenczykowski
c9407cc1d1 Merge "add sepolicy for set_usb_irq.sh" into sc-dev am: 9b270f0fc5 am: 1886ddd1af am: fb0cdbd9b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15219696

Change-Id: Ia154ec304e119b3da20c47704c77e18ba6ca1c4e
2021-07-07 17:01:19 +00:00
Maciej Zenczykowski
b181dcf9f5 Merge "add sepolicy for set_usb_irq.sh" into sc-dev am: 9b270f0fc5 am: cb63eaae07 am: fec4ea662f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15219696

Change-Id: I59ef2ad246ce2e059837c1aa6932a13286e5369c
2021-07-07 17:01:11 +00:00
Kris Chen
a5c9028ced Add sepolicy rules for fingerprint hal
Fix following avc denial:
servicemanager: type=1400 audit(0.0:8): avc: denied { call } for scontext=u:r:servicemanager:s0 tcontext=u:r:hal_fingerprint_default:s0 tclass=binder permissive=0

Bug: 192040144
Test: No above avc denial in logcat.
Change-Id: I1b93474cac4ccb24736bc97665a7ca533ef0a7d3
2021-07-08 00:59:49 +08:00
Maciej Zenczykowski
fb0cdbd9b4 Merge "add sepolicy for set_usb_irq.sh" into sc-dev am: 9b270f0fc5 am: 1886ddd1af
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15219696

Change-Id: Iacd60849a60bb371a760706722ba1d22f43f96d8
2021-07-07 16:52:00 +00:00
Maciej Zenczykowski
fec4ea662f Merge "add sepolicy for set_usb_irq.sh" into sc-dev am: 9b270f0fc5 am: cb63eaae07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15219696

Change-Id: I5698d2394de8dc8d2afcd91f2ad7d8945c432aab
2021-07-07 16:48:04 +00:00
Maciej Zenczykowski
1886ddd1af Merge "add sepolicy for set_usb_irq.sh" into sc-dev am: 9b270f0fc5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15219696

Change-Id: I02f1d2dd5a9837c90a67db03f83cb9d8e7e6708a
2021-07-07 16:36:33 +00:00
Maciej Zenczykowski
cb63eaae07 Merge "add sepolicy for set_usb_irq.sh" into sc-dev am: 9b270f0fc5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15219696

Change-Id: Id1c777f39de6b69e459b7c0f6fb4042f78a19798
2021-07-07 16:35:39 +00:00
Maciej Zenczykowski
9b270f0fc5 Merge "add sepolicy for set_usb_irq.sh" into sc-dev 2021-07-07 16:23:13 +00:00
Maciej Żenczykowski
714075eba7 add sepolicy for set_usb_irq.sh
Bug: 185092876
Test: TreeHugger, booted on oriole, enabled/disabled tethering
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I7361a4390197e04b27eaf153a696e3f800f79b55
2021-07-07 16:22:33 +00:00
sukiliu
a2d9731099 Update avc error on ROM 7527858
avc:  denied  { find } for pid=2874 uid=1083 name=isub scontext=u:r:uwb_vendor_app:s0:c59,c260,c512,c768 tcontext=u:object_r:radio_service:s0 tclass=service_manager permissive=0

Bug: 193009345
Bug: 192924316
Test: PtsSELinuxTestCases
Change-Id: I694c1a98ab57123c44717d2af5e57cfc486f76a1
2021-07-07 20:01:18 +08:00
SHUCHI LILU
f57f07b601 Merge "Update avc error on ROM 7526917" into sc-dev am: 72bc4971df am: 61771fb7a7 am: fa479bcadb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15219030

Change-Id: I2160f8c17b3dc0baa7491c0b94f7cbd269e6f46d
2021-07-07 08:17:28 +00:00
SHUCHI LILU
049a4591f6 Merge "Update avc error on ROM 7526917" into sc-dev am: 72bc4971df am: 63db471d69 am: 83e5182038
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15219030

Change-Id: I706e6837f48f852f156dadf13ceca0c0ee15b553
2021-07-07 08:17:23 +00:00
SHUCHI LILU
fa479bcadb Merge "Update avc error on ROM 7526917" into sc-dev am: 72bc4971df am: 61771fb7a7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15219030

Change-Id: Iebcd67960ca66512adbac8016a0cdc6dae693b34
2021-07-07 08:08:18 +00:00
SHUCHI LILU
83e5182038 Merge "Update avc error on ROM 7526917" into sc-dev am: 72bc4971df am: 63db471d69
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15219030

Change-Id: I010c1c174ce911146b13ed8a31653aa864aeb54a
2021-07-07 08:07:04 +00:00
SHUCHI LILU
63db471d69 Merge "Update avc error on ROM 7526917" into sc-dev am: 72bc4971df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15219030

Change-Id: I6969bf3aca8bfd48c27eaecd1bb915b1ea0aeecc
2021-07-07 07:50:32 +00:00
SHUCHI LILU
61771fb7a7 Merge "Update avc error on ROM 7526917" into sc-dev am: 72bc4971df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15219030

Change-Id: Ia915f2d56f5f4c0d378201bd5e81b480293028b8
2021-07-07 07:49:38 +00:00
SHUCHI LILU
72bc4971df Merge "Update avc error on ROM 7526917" into sc-dev 2021-07-07 07:33:25 +00:00
sukiliu
81a8e5b4ce Update avc error on ROM 7526917
Bug: 192980495
Bug: 192980564
Bug: 192924316
Test: PtsSELinuxTestCases
Change-Id: If1042973df8d8eac24065e50e64d5a60c5a4dc49
2021-07-07 10:57:30 +08:00
Randall Huang
03f3971985 Fix overlayfs avc denied am: d328008234 am: b53d43c8c0 am: 92df6923e9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15211714

Change-Id: Ic6b73c6b5c985eee8b7babd3f805cb21cb9dc109
2021-07-07 02:38:44 +00:00
Randall Huang
e7313f6a03 Fix overlayfs avc denied am: d328008234 am: decd3637ef am: 86a1fff3a1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15211714

Change-Id: I5c0085680d4d5149e30ace21231f44d6a0d64c98
2021-07-07 02:37:54 +00:00
Randall Huang
92df6923e9 Fix overlayfs avc denied am: d328008234 am: b53d43c8c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15211714

Change-Id: I7f5a16e89a95108e4570dab1453e58c3dc6eb418
2021-07-07 02:21:32 +00:00
Randall Huang
86a1fff3a1 Fix overlayfs avc denied am: d328008234 am: decd3637ef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15211714

Change-Id: If6f477868e87783be4621ef109258521f43d0ea0
2021-07-07 02:21:07 +00:00
Randall Huang
decd3637ef Fix overlayfs avc denied am: d328008234
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15211714

Change-Id: Iebb750cacabf23753ce15d8d075d1e11867cb34b
2021-07-07 02:07:58 +00:00
Randall Huang
b53d43c8c0 Fix overlayfs avc denied am: d328008234
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15211714

Change-Id: I7facca6571dbd8afb8eba75112d575ab4cd41cf4
2021-07-07 02:07:05 +00:00
Randall Huang
d328008234 Fix overlayfs avc denied
avc: denied { rename } for comm="init" name="#b" dev="dm-6" ino=52
scontext=u:r:init:s0 tcontext=u:object_r:overlayfs_file:s0
tclass=file permissive=1

avc: denied { unlink } for comm="init" name="#b" dev="dm-6" ino=53
scontext=u:r:init:s0 tcontext=u:object_r:overlayfs_file:s0
tclass=chr_file permissive=1

Bug: 192617244
Test: boot & adb remount
Signed-off-by: Randall Huang <huangrandall@google.com>
Change-Id: I740ff317520439034d2bf6e0659b1418bf6dac5c
2021-07-06 18:19:04 +08:00
sukiliu
b85164d77d Update avc error on ROM 7522385 am: 46dfc784f5 am: 535515837d am: de4656e411
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15208469

Change-Id: I8c2f8d3e9cc220bc935fc3506b1edb07b369919d
2021-07-06 03:45:47 +00:00
sukiliu
d3d73415b7 Update avc error on ROM 7522385 am: 46dfc784f5 am: d4425d3438 am: 974e329267
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15208469

Change-Id: I116d9629bd6fb341732221330bd9d26a3eccce80
2021-07-06 03:45:34 +00:00
sukiliu
de4656e411 Update avc error on ROM 7522385 am: 46dfc784f5 am: 535515837d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15208469

Change-Id: Ia11e7f21eb2c8487dfd7db9c683d737c202983e3
2021-07-06 03:41:56 +00:00
sukiliu
974e329267 Update avc error on ROM 7522385 am: 46dfc784f5 am: d4425d3438
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15208469

Change-Id: I80eb6b3636d95f4d6817df2172bc3e793c1dd8b1
2021-07-06 03:34:04 +00:00
sukiliu
535515837d Update avc error on ROM 7522385 am: 46dfc784f5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15208469

Change-Id: I1fe3dfd7b11c9bed43edcb282f07574e7483c17c
2021-07-06 03:21:25 +00:00
sukiliu
d4425d3438 Update avc error on ROM 7522385 am: 46dfc784f5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15208469

Change-Id: I5a50d404c72eec58c2ac3e14050949331c1cccbc
2021-07-06 03:20:30 +00:00
Automerger Merge Worker
44710b0f19 Merge "Merge "Add system file of INT clock to sysfs_fabric group" into sc-dev am: 8318f84aef am: 3921e74df1" into sc-v2-dev-plus-aosp am: 8fd0d190a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15152132

Change-Id: Idbd30be82d574b556f1a4c9abd96e761f5569add
2021-07-06 01:58:49 +00:00
TreeHugger Robot
e0de88e4dc Merge "Add system file of INT clock to sysfs_fabric group" into sc-dev am: 8318f84aef am: 658fee07c2 am: 34ab6a3951
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15152132

Change-Id: Ide59e16a43a606b1d432ac88c1be150a7bea420e
2021-07-06 01:58:32 +00:00
Automerger Merge Worker
8fd0d190a2 Merge "Merge "Add system file of INT clock to sysfs_fabric group" into sc-dev am: 8318f84aef am: 3921e74df1" into sc-v2-dev-plus-aosp 2021-07-06 01:44:38 +00:00
TreeHugger Robot
ed2c84acb3 Merge "Add system file of INT clock to sysfs_fabric group" into sc-dev am: 8318f84aef am: 3921e74df1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15152132

Change-Id: I7c13fd1811d56628eef05354fec542ee5ffe248d
2021-07-06 01:44:35 +00:00
TreeHugger Robot
34ab6a3951 Merge "Add system file of INT clock to sysfs_fabric group" into sc-dev am: 8318f84aef am: 658fee07c2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15152132

Change-Id: I5e0e820af752ed40c2358bae177309b397ce32a1
2021-07-06 01:44:34 +00:00
sukiliu
46dfc784f5 Update avc error on ROM 7522385
avc: denied { read } for name="u:object_r:odsign_prop:s0" dev="tmpfs" ino=220 scontext=u:r:incidentd:s0 tcontext=u:object_r:odsign_prop:s0 tclass=file permissive=0
avc: denied { read } for comm="app_process" name="u:object_r:odsign_prop:s0" dev="tmpfs" ino=220 scontext=u:r:incidentd:s0 tcontext=u:object_r:odsign_prop:s0 tclass=file permissive=0

Bug: 192895524
Test: PtsSELinuxTestCases
Change-Id: I770c953e80920388e9c21e6dc8a12762c1f4fb8a
2021-07-06 09:42:31 +08:00
TreeHugger Robot
658fee07c2 Merge "Add system file of INT clock to sysfs_fabric group" into sc-dev am: 8318f84aef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15152132

Change-Id: I81b56ac19c9b6305037ffda1c2fe72c0505ece6d
2021-07-06 01:27:27 +00:00
TreeHugger Robot
3921e74df1 Merge "Add system file of INT clock to sysfs_fabric group" into sc-dev am: 8318f84aef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15152132

Change-Id: I9cffa8ae546c323679dd286eb79497094c02f25e
2021-07-06 01:26:34 +00:00
TreeHugger Robot
8318f84aef Merge "Add system file of INT clock to sysfs_fabric group" into sc-dev 2021-07-06 01:12:21 +00:00
Yu(Swim) Chih Ren
3aa97b5012 Add system file of INT clock to sysfs_fabric group
It is for power hal can access system file of INT clock

Bug: 168654554

Test: 1. Check file group of INT clock system file
      2. P21 Camera Test Checklist done

Change-Id: I1952c5d2ae39c338c9d2ccb8db49d1d119943c06
2021-07-06 00:33:55 +00:00
David Chen
81cf2f8a10 Merge "Allow twoshay to access fwk_stats_service and system_server" 2021-07-05 08:18:22 +00:00
Miller Liang
964dee8c6a Merge "Fix AAudio avc denied" into sc-dev am: a21c6081c9 am: 96e42a92ec am: 031c722dcf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15197030

Change-Id: I97f19e939bb589e7ba473f166956cbeea96ecc26
2021-07-05 03:11:41 +00:00
Miller Liang
c86fa01813 Merge "Fix AAudio avc denied" into sc-dev am: a21c6081c9 am: 8fc8ba0691 am: a8d0ff23c5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15197030

Change-Id: I3f33d6513f9c927a8348a1e47da1bee143920fe2
2021-07-05 03:11:36 +00:00
Miller Liang
031c722dcf Merge "Fix AAudio avc denied" into sc-dev am: a21c6081c9 am: 96e42a92ec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15197030

Change-Id: I39353ef4cb54be17e4a576ca1150b88006dc3876
2021-07-05 03:02:34 +00:00
Miller Liang
a8d0ff23c5 Merge "Fix AAudio avc denied" into sc-dev am: a21c6081c9 am: 8fc8ba0691
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15197030

Change-Id: I453bfbfc9ee0e6f7f0467ad012076e9bb7b68a3e
2021-07-05 02:57:23 +00:00
davidycchen
6e7338095b Allow twoshay to access fwk_stats_service and system_server
avc:  denied  { find } for pid=813 uid=0
name=android.frameworks.stats.IStats/default scontext=u:r:twoshay:s0
tcontext=u:object_r:fwk_stats_service:s0 tclass=service_manager

avc: denied { call } for scontext=u:r:twoshay:s0
tcontext=u:r:system_server:s0 tclass=binder

Bug: 179334953
Test: Make selinux_policy and push related files to the device.

Signed-off-by: davidycchen <davidycchen@google.com>
Change-Id: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
2021-07-05 10:50:53 +08:00
Miller Liang
96e42a92ec Merge "Fix AAudio avc denied" into sc-dev am: a21c6081c9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15197030

Change-Id: Icac39dfd3374ba28563a6b4254086dda6d5a9e72
2021-07-05 02:46:21 +00:00
Miller Liang
8fc8ba0691 Merge "Fix AAudio avc denied" into sc-dev am: a21c6081c9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15197030

Change-Id: I486f17f84c991e66b620478b5218af90e00b615c
2021-07-05 02:45:26 +00:00
Miller Liang
a21c6081c9 Merge "Fix AAudio avc denied" into sc-dev 2021-07-05 02:32:11 +00:00
millerliang
1e748ab270 Fix AAudio avc denied
E SELinux : avc:  denied  { find } for pid=765 uid=1041 name=audio
scontext=u:r:audioserver:s0 tcontext=u:object_r:audio_service:s0
tclass=service_manager permissive=0

Bug: 191103346
Test: build and run CtsNativeMediaAAudioTestCases
Change-Id: I8e9a41360a382ba5f461818b9f8d6658dd53c62a
2021-07-03 05:40:22 +00:00
sukiliu
8654c5aba2 Update avc error on ROM 7515047 am: 755c601dd8 am: 1b7b93c404 am: c469306e28
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15175228

Change-Id: Ia3ddef8ef9ff4b6c038cc0e4359b6ea403956670
2021-07-02 12:34:09 +00:00
sukiliu
106bc1da6c Update avc error on ROM 7515047 am: 755c601dd8 am: 334126304a am: 9aa9eb7e95
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15175228

Change-Id: I9e48a0610c0161da27d092ffb0fbed5569743223
2021-07-02 12:33:57 +00:00
sukiliu
c469306e28 Update avc error on ROM 7515047 am: 755c601dd8 am: 1b7b93c404
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15175228

Change-Id: I7f0a761171440186dc4f71c734411fac265b217b
2021-07-02 12:20:57 +00:00
sukiliu
9aa9eb7e95 Update avc error on ROM 7515047 am: 755c601dd8 am: 334126304a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15175228

Change-Id: I03d10e335c9b2b5d17277b7337dab73cc2bdff40
2021-07-02 12:17:21 +00:00
sukiliu
1b7b93c404 Update avc error on ROM 7515047 am: 755c601dd8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15175228

Change-Id: I73c3ffba1823e46d56e8c0c9139f522319cc4fa2
2021-07-02 12:04:22 +00:00
sukiliu
334126304a Update avc error on ROM 7515047 am: 755c601dd8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15175228

Change-Id: I19115f16b02be297118ff2055db15eb8f3fc172d
2021-07-02 12:03:28 +00:00
sukiliu
755c601dd8 Update avc error on ROM 7515047
Bug: 192617242
Bug: 192617244
Test: PtsSELinuxTestCases
Change-Id: I94f7fa36632147676adc46f520e9a2a4f9b413cd
2021-07-02 10:34:49 +08:00
YongWook Shin
eee09878b6 Allowed HWC HAL access TUI status node
Bug: 157272869
Signed-off-by: YongWook Shin <yongwook.shin@samsung.com>
Change-Id: Id4abb0277bda9c9ff13f753e6f74438ce55be0ab
2021-07-01 12:08:34 -07:00
TreeHugger Robot
29821c9e61 Merge "Fix hal_uwb_default dumpstate SELinux errors" into sc-dev am: 846cba7286 am: c077524883 am: 5e0c9ea69b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15164003

Change-Id: I69cdb71064eebb9edd5cf74686128a7bcd379246
2021-07-01 08:58:24 +00:00
TreeHugger Robot
3854b01e3b Merge "Fix hal_uwb_default dumpstate SELinux errors" into sc-dev am: 846cba7286 am: 6e8e0a52a0 am: cb2661c2ff
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15164003

Change-Id: Id048650979abb1a33a621e155acf5fa8a1114254
2021-07-01 08:58:15 +00:00
TreeHugger Robot
5e0c9ea69b Merge "Fix hal_uwb_default dumpstate SELinux errors" into sc-dev am: 846cba7286 am: c077524883
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15164003

Change-Id: I47f8fcde586afb9882dbf70e755fb85f5510a380
2021-07-01 08:43:18 +00:00
TreeHugger Robot
cb2661c2ff Merge "Fix hal_uwb_default dumpstate SELinux errors" into sc-dev am: 846cba7286 am: 6e8e0a52a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15164003

Change-Id: I830953b885beb1286aecc6394a4158ed31fd49c5
2021-07-01 08:42:07 +00:00
TreeHugger Robot
6e8e0a52a0 Merge "Fix hal_uwb_default dumpstate SELinux errors" into sc-dev am: 846cba7286
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15164003

Change-Id: I69d7c6077426c73f871a3c0710f57d1c043d18c5
2021-07-01 08:25:49 +00:00
TreeHugger Robot
c077524883 Merge "Fix hal_uwb_default dumpstate SELinux errors" into sc-dev am: 846cba7286
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15164003

Change-Id: Iec3adee2e2fbf126790a00719da38cef9f499e30
2021-07-01 08:24:42 +00:00
TreeHugger Robot
846cba7286 Merge "Fix hal_uwb_default dumpstate SELinux errors" into sc-dev 2021-07-01 08:07:05 +00:00
Michael Ayoubi
56beb62f69 Fix hal_uwb_default dumpstate SELinux errors
Fixes: b/192026913
Test: Run dumpstate and confirm no avc denials

Signed-off-by: Michael Ayoubi <mayoubi@google.com>
Change-Id: I3d818fb066a834663dc63b8757bd16c08a1a0e9e
2021-07-01 06:55:42 +00:00
TreeHugger Robot
cd99a4c4e4 Merge "remove obsolete errors" into sc-dev am: 5b4e06670f am: abc14c201f am: 9854483b71
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15143009

Change-Id: I23975cb764f8111028a01f8103b652b4e3a40e53
2021-07-01 04:41:49 +00:00
TreeHugger Robot
65c94063e4 Merge "remove obsolete errors" into sc-dev am: 5b4e06670f am: e86ced7327 am: 9a23826b9a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15143009

Change-Id: Id864297d4c39009b23490beaad91ffa199e12ffe
2021-07-01 04:41:43 +00:00
TreeHugger Robot
9854483b71 Merge "remove obsolete errors" into sc-dev am: 5b4e06670f am: abc14c201f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15143009

Change-Id: I11f562499e2f8aba25422bee267f96ec9b063502
2021-07-01 04:32:30 +00:00
TreeHugger Robot
9a23826b9a Merge "remove obsolete errors" into sc-dev am: 5b4e06670f am: e86ced7327
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15143009

Change-Id: I8389ba6d45a2910caf3d8a5bc57a160d9bc90e15
2021-07-01 04:22:22 +00:00
TreeHugger Robot
abc14c201f Merge "remove obsolete errors" into sc-dev am: 5b4e06670f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15143009

Change-Id: Ib9ad5fcbc383fe601cbb91935a88d72c7c428ed8
2021-07-01 04:12:47 +00:00
TreeHugger Robot
c6a5ac4911 Merge "Remove dontaudit form tracking_denials for maxfg and regmap" into sc-dev am: 2ee38e55f1 am: 3de85f4a86 am: c1639ad297
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15143006

Change-Id: I34019e9d46bf921e95dc3c45c3af2a03b88b1c60
2021-07-01 04:12:08 +00:00
TreeHugger Robot
735cf1b8b2 Merge "Remove dontaudit form tracking_denials for maxfg and regmap" into sc-dev am: 2ee38e55f1 am: 7a1f659fe2 am: df7911bf4b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15143006

Change-Id: Iffa26640d65082d0b4e7e9f6a26de593d7ba52bd
2021-07-01 04:12:01 +00:00
TreeHugger Robot
e86ced7327 Merge "remove obsolete errors" into sc-dev am: 5b4e06670f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15143009

Change-Id: Ic6d0bf859005720f75cc9e7d61595a7110a32bfe
2021-07-01 04:11:55 +00:00
TreeHugger Robot
5b4e06670f Merge "remove obsolete errors" into sc-dev 2021-07-01 04:01:19 +00:00
TreeHugger Robot
c1639ad297 Merge "Remove dontaudit form tracking_denials for maxfg and regmap" into sc-dev am: 2ee38e55f1 am: 3de85f4a86
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15143006

Change-Id: Ia5e88ed807360d1f2bda30082d2939b69be5660b
2021-07-01 03:59:05 +00:00
TreeHugger Robot
df7911bf4b Merge "Remove dontaudit form tracking_denials for maxfg and regmap" into sc-dev am: 2ee38e55f1 am: 7a1f659fe2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15143006

Change-Id: I2cefcf4800740b18bb3c8a147d60972ac3f0da4a
2021-07-01 03:58:50 +00:00
TreeHugger Robot
7a1f659fe2 Merge "Remove dontaudit form tracking_denials for maxfg and regmap" into sc-dev am: 2ee38e55f1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15143006

Change-Id: I772cdb62238a20cea310743193d36ad8532be918
2021-07-01 03:37:20 +00:00
TreeHugger Robot
3de85f4a86 Merge "Remove dontaudit form tracking_denials for maxfg and regmap" into sc-dev am: 2ee38e55f1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15143006

Change-Id: I7b0c3e0787280be673678827aec4d29d18456a47
2021-07-01 03:36:32 +00:00
TreeHugger Robot
2ee38e55f1 Merge "Remove dontaudit form tracking_denials for maxfg and regmap" into sc-dev 2021-07-01 03:18:01 +00:00
Adam Shih
1a2d199a28 remove obsolete errors
Bug: 183338543
Bug: 187015705
Bug: 191133059
Bug: 180963348
Bug: 187016930
Bug: 190563838
Test: boot with no relevant error
Change-Id: I8d194415dc823da9dec5c315a6068d0d2c2d4a6c
2021-07-01 10:49:59 +08:00
Krzysztof Kosiński
33659b30da Allow Power Stats HAL to access EdgeTPU sysfs files. am: 6d6a7c96ab am: 54a9267749 am: 4b97dd6236
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15162531

Change-Id: I843002d67a4c750a7c1a130b5f688cce7e102f5c
2021-07-01 00:24:24 +00:00
Krzysztof Kosiński
63712e05e6 Allow Power Stats HAL to access EdgeTPU sysfs files. am: 6d6a7c96ab am: fdfbdf2bd6 am: 326aedd878
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15162531

Change-Id: Ibe5cc4a8c4cca77f507152de192daacb3a2ef88c
2021-07-01 00:24:10 +00:00
Krzysztof Kosiński
4b97dd6236 Allow Power Stats HAL to access EdgeTPU sysfs files. am: 6d6a7c96ab am: 54a9267749
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15162531

Change-Id: I172c304e822ad27bbfb07566aaadb4a270919c36
2021-07-01 00:12:26 +00:00
Krzysztof Kosiński
326aedd878 Allow Power Stats HAL to access EdgeTPU sysfs files. am: 6d6a7c96ab am: fdfbdf2bd6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15162531

Change-Id: Iab2c285f25e838e81d4fcc92e9ea781697e6a63e
2021-07-01 00:12:03 +00:00
Krzysztof Kosiński
fdfbdf2bd6 Allow Power Stats HAL to access EdgeTPU sysfs files. am: 6d6a7c96ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15162531

Change-Id: I19b0b15c286cab140ed77b7eb2c3a741641da6de
2021-06-30 23:58:01 +00:00
Krzysztof Kosiński
54a9267749 Allow Power Stats HAL to access EdgeTPU sysfs files. am: 6d6a7c96ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15162531

Change-Id: I3f590b13d415682fe01024812084308de9be404a
2021-06-30 23:57:10 +00:00
Krzysztof Kosiński
6d6a7c96ab Allow Power Stats HAL to access EdgeTPU sysfs files.
Should fix intermittent failures of SELinuxUncheckedDenialBootTest.

Bug: 192485697
Test: build, checked for denials in logcat
Change-Id: I3b9cafd99f9ff343e5ab5c67f5f268e5eb4382d6
2021-06-30 14:02:27 -07:00
Michael Ayoubi
977f0e80bf Merge "allow recovery and fastboot to access secure elment" into sc-dev am: 075ba05575 am: 0536297aed am: ca130d840a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15152134

Change-Id: I73fe7859defe92544be930069d063dbccda5e4c8
2021-06-30 18:33:46 +00:00
Michael Ayoubi
a41f9fbc81 Merge "allow recovery and fastboot to access secure elment" into sc-dev am: 075ba05575 am: 0ed8e6763c am: ad5075e632
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15152134

Change-Id: Idc1b36681381d548cf6e816ee3a32ea4d097c565
2021-06-30 18:33:02 +00:00
Michael Ayoubi
ca130d840a Merge "allow recovery and fastboot to access secure elment" into sc-dev am: 075ba05575 am: 0536297aed
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15152134

Change-Id: I30b05a68fd64d34a655036b0733275f13e97eb47
2021-06-30 18:12:47 +00:00
Michael Ayoubi
ad5075e632 Merge "allow recovery and fastboot to access secure elment" into sc-dev am: 075ba05575 am: 0ed8e6763c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15152134

Change-Id: I0b89fa90a434680979a35f0d35f70f810d4e74df
2021-06-30 18:12:25 +00:00
Michael Ayoubi
0ed8e6763c Merge "allow recovery and fastboot to access secure elment" into sc-dev am: 075ba05575
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15152134

Change-Id: If808d197690820295f130d394c91a824a25ee834
2021-06-30 17:57:47 +00:00
Michael Ayoubi
0536297aed Merge "allow recovery and fastboot to access secure elment" into sc-dev am: 075ba05575
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15152134

Change-Id: I46ad2d1546b4145d8408aee5677b4395c4d8e1d6
2021-06-30 17:56:53 +00:00
Michael Ayoubi
075ba05575 Merge "allow recovery and fastboot to access secure elment" into sc-dev 2021-06-30 17:39:40 +00:00
Gazi Yamin Iqbal
d190943831 Merge "gs101-sepolicy: allow rlsservice to read display status files" into sc-dev am: 2e1cafdfd8 am: 737622596d am: 1252d0a2b9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100489

Change-Id: I1755cf956e7f170b9359618147c25563bdddc0e6
2021-06-30 06:27:08 +00:00
Gazi Yamin Iqbal
9aaf6aac9b Merge "gs101-sepolicy: allow rlsservice to read display status files" into sc-dev am: 2e1cafdfd8 am: 7edd8a7f81 am: 7674b074b2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100489

Change-Id: I3833f3cbd573cbbf2401e538d0e3a859d191b6f8
2021-06-30 06:26:57 +00:00
Jeffrey Carlyle
14fcd5ffaf allow recovery and fastboot to access secure elment
This is to enable clearing of secure element during a master reset.

Bug: 182508814
Test: master reset on device with keys; verified no keys after reset
Signed-off-by: Jeffrey Carlyle <jcarlyle@google.com>
Change-Id: I9bb569e09f8cd6f5640757bd0d10a14ef32946ff
2021-06-30 15:19:22 +09:00
Gazi Yamin Iqbal
1252d0a2b9 Merge "gs101-sepolicy: allow rlsservice to read display status files" into sc-dev am: 2e1cafdfd8 am: 737622596d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100489

Change-Id: Ib3c9391f2f4d129883e81bccc531dcf961a04c02
2021-06-30 06:17:43 +00:00
Gazi Yamin Iqbal
7674b074b2 Merge "gs101-sepolicy: allow rlsservice to read display status files" into sc-dev am: 2e1cafdfd8 am: 7edd8a7f81
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100489

Change-Id: I463e3640afba27f73d6e8fb9c3edf4949208d629
2021-06-30 06:12:41 +00:00
Gazi Yamin Iqbal
737622596d Merge "gs101-sepolicy: allow rlsservice to read display status files" into sc-dev am: 2e1cafdfd8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100489

Change-Id: I537e8c41624e8d8d85590d550691f6cda7266853
2021-06-30 05:58:42 +00:00
Gazi Yamin Iqbal
7edd8a7f81 Merge "gs101-sepolicy: allow rlsservice to read display status files" into sc-dev am: 2e1cafdfd8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100489

Change-Id: Idc69fa1c2e71dfa8ec660a52d4157a68afc1e27f
2021-06-30 05:57:03 +00:00
Gazi Yamin Iqbal
2e1cafdfd8 Merge "gs101-sepolicy: allow rlsservice to read display status files" into sc-dev 2021-06-30 05:41:19 +00:00
Ted Lin
cb3ca1e87b Remove dontaudit form tracking_denials for maxfg and regmap
Bug:190337297
Test: Check the bugreport
Change-Id: I0887e6256b4f158bd525ed66475cd1ef5672c9df
Signed-off-by: Ted Lin <tedlin@google.com>
2021-06-30 11:11:22 +08:00
Adam Shih
e4ca3bf861 Merge "Avoid VTS testDataTypeViolators failure" into sc-dev am: 3ded724256 am: 90ec2412b3 am: 50692acffd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15126901

Change-Id: Ia4c9400276ceeb47c4d353ee7953180e1838dc3d
2021-06-30 02:32:22 +00:00
Adam Shih
656cdea7aa Merge "Avoid VTS testDataTypeViolators failure" into sc-dev am: 3ded724256 am: 10da89a15e am: 28fa39c0e3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15126901

Change-Id: I4e145de4d5bd3e8bd4f2dda0c850bd5076aae6da
2021-06-30 02:32:14 +00:00
Adam Shih
50692acffd Merge "Avoid VTS testDataTypeViolators failure" into sc-dev am: 3ded724256 am: 90ec2412b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15126901

Change-Id: I4a4970543ce88eb7af7ca4891451e82c61749fa3
2021-06-30 02:19:06 +00:00
Adam Shih
28fa39c0e3 Merge "Avoid VTS testDataTypeViolators failure" into sc-dev am: 3ded724256 am: 10da89a15e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15126901

Change-Id: Iafa445c1dac685a8d14ea5a7c208f4f7d8da9130
2021-06-30 02:18:45 +00:00
Adam Shih
10da89a15e Merge "Avoid VTS testDataTypeViolators failure" into sc-dev am: 3ded724256
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15126901

Change-Id: I4825d3dd3e5cf204f73fc9139a355a04e33ef6ae
2021-06-30 02:06:56 +00:00
Adam Shih
90ec2412b3 Merge "Avoid VTS testDataTypeViolators failure" into sc-dev am: 3ded724256
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15126901

Change-Id: I3e3e0e580afbe6ccc971de2e81329495424c3b49
2021-06-30 02:04:32 +00:00
Adam Shih
3ded724256 Merge "Avoid VTS testDataTypeViolators failure" into sc-dev 2021-06-30 01:45:29 +00:00
George Lee
4aa936d63b pixelstats: add bcl directory permission
Bug: 186806028
Test: Local test
$>cmd stats print-logs
$>logcat | grep <atom id>

Signed-off-by: George Lee <geolee@google.com>
Change-Id: I7288a9ab44e2387d37c5442297cf80f5b5428c8f
2021-06-29 16:08:38 -07:00
Kevin Han
931321173a Merge "Revert "allow recovery and fastboot to access secure elment"" into sc-dev am: 1d54c8dd21 am: fc0c3c4939 am: 82892fdf94
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145159

Change-Id: I40419f36e3d48562340b3d9560d5df9c8e509de2
2021-06-29 20:22:46 +00:00
Kevin Han
04274c2bcc Merge "Revert "allow recovery and fastboot to access secure elment"" into sc-dev am: 1d54c8dd21 am: fcd18a6e4d am: fa1e0dd958
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145159

Change-Id: Ia294e95d1727868dfe04a69d0a5b94fbb3c5f959
2021-06-29 20:22:08 +00:00
Kevin Han
82892fdf94 Merge "Revert "allow recovery and fastboot to access secure elment"" into sc-dev am: 1d54c8dd21 am: fc0c3c4939
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145159

Change-Id: I436e066fd7f3d207e1f071162aa09cc79b356c7c
2021-06-29 20:08:27 +00:00
Kevin Han
fa1e0dd958 Merge "Revert "allow recovery and fastboot to access secure elment"" into sc-dev am: 1d54c8dd21 am: fcd18a6e4d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145159

Change-Id: I301c3c792e8f36d95b5196dc67939563abd21b3b
2021-06-29 20:08:06 +00:00
Kevin Han
fcd18a6e4d Merge "Revert "allow recovery and fastboot to access secure elment"" into sc-dev am: 1d54c8dd21
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145159

Change-Id: Ie5ffd99597f2b00758126fabf8032c94a8208a16
2021-06-29 19:51:41 +00:00
Kevin Han
fc0c3c4939 Merge "Revert "allow recovery and fastboot to access secure elment"" into sc-dev am: 1d54c8dd21
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145159

Change-Id: I70e74a9964444a39f9d0eeaca82394a8c6bbdc71
2021-06-29 19:50:38 +00:00
Kevin Han
1d54c8dd21 Merge "Revert "allow recovery and fastboot to access secure elment"" into sc-dev 2021-06-29 19:33:01 +00:00
Kevin Han
fd47b11162 Revert "allow recovery and fastboot to access secure elment"
Revert "add gs101-specific recovery library"

Revert "recovery: enable support for device-specific WipeSe impl..."

Revert "clear secure element of Digital Car Keys during factory ..."

Revert submission 14983788-clear_keys

Reason for revert: b/192373955
Reverted Changes:
Ia8fc29e6c:add gs101-specific recovery library
Icc1eabfd4:clear secure element of Digital Car Keys during fa...
I943d97b26:recovery: enable support for device-specific WipeS...
I15c7fbd7f:allow recovery and fastboot to access secure elmen...

Change-Id: Ic576b40641171298ad840bedbd4a9f7b67052d95
2021-06-29 19:19:24 +00:00
TreeHugger Robot
97b47bad56 Merge "allow recovery and fastboot to access secure elment" into sc-dev am: be3d2bf325 am: f65af527f1 am: 43bd20d774
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14681841

Change-Id: Ia137339dfc68cab7ae72edf141f3724e17a4ebd7
2021-06-29 18:37:17 +00:00
TreeHugger Robot
fdf388f2c4 Merge "allow recovery and fastboot to access secure elment" into sc-dev am: be3d2bf325 am: 7432c08ac9 am: af434666a3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14681841

Change-Id: Ic987b854fdd1c587ba0fb99f517240e6a4debf7f
2021-06-29 18:37:01 +00:00
TreeHugger Robot
43bd20d774 Merge "allow recovery and fastboot to access secure elment" into sc-dev am: be3d2bf325 am: f65af527f1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14681841

Change-Id: I58e397abf09d12fd840c99d9a91cbc22dd8735bb
2021-06-29 18:22:21 +00:00
TreeHugger Robot
af434666a3 Merge "allow recovery and fastboot to access secure elment" into sc-dev am: be3d2bf325 am: 7432c08ac9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14681841

Change-Id: Ib2249a2cddafebeb75032541792ee072e22aeeda
2021-06-29 18:22:03 +00:00
TreeHugger Robot
7432c08ac9 Merge "allow recovery and fastboot to access secure elment" into sc-dev am: be3d2bf325
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14681841

Change-Id: I642763bd029fdaa6fe11b440af187a37feeb7966
2021-06-29 18:03:40 +00:00
TreeHugger Robot
f65af527f1 Merge "allow recovery and fastboot to access secure elment" into sc-dev am: be3d2bf325
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14681841

Change-Id: I77eaf28b2117143037257359078954d8c0e27dd1
2021-06-29 18:03:22 +00:00
TreeHugger Robot
a42d6aa5e6 Merge "Fix denial when flashing vendor_boot in fastbootd." into sc-dev am: 432ed9b527 am: b9ab0e9c9d am: 23c23b4567
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15135682

Change-Id: Ifc492a64332b4e9c2ba73b42d2133db8d37b4f23
2021-06-29 17:55:26 +00:00
TreeHugger Robot
65bbfb2573 Merge "Fix denial when flashing vendor_boot in fastbootd." into sc-dev am: 432ed9b527 am: 3de1991b67 am: df1eaf4da6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15135682

Change-Id: I4c90eb2ed92688580f8192bc071c3280973b83a9
2021-06-29 17:54:44 +00:00
TreeHugger Robot
be3d2bf325 Merge "allow recovery and fastboot to access secure elment" into sc-dev 2021-06-29 17:50:35 +00:00
TreeHugger Robot
23c23b4567 Merge "Fix denial when flashing vendor_boot in fastbootd." into sc-dev am: 432ed9b527 am: b9ab0e9c9d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15135682

Change-Id: I06c8c56e5aa98b7ffddf57191b164ddc53c24a83
2021-06-29 17:37:03 +00:00
TreeHugger Robot
df1eaf4da6 Merge "Fix denial when flashing vendor_boot in fastbootd." into sc-dev am: 432ed9b527 am: 3de1991b67
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15135682

Change-Id: Ie649ff8c06f6ffbf8c3938fbe6988f2829327859
2021-06-29 17:36:36 +00:00
TreeHugger Robot
3de1991b67 Merge "Fix denial when flashing vendor_boot in fastbootd." into sc-dev am: 432ed9b527
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15135682

Change-Id: I84c80310cbd1897fe7ef1bac5d9b6c8bc024412e
2021-06-29 17:24:18 +00:00
TreeHugger Robot
b9ab0e9c9d Merge "Fix denial when flashing vendor_boot in fastbootd." into sc-dev am: 432ed9b527
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15135682

Change-Id: Ie2926714d97074c33ad052ff6ec87545451db8fb
2021-06-29 17:22:35 +00:00
TreeHugger Robot
432ed9b527 Merge "Fix denial when flashing vendor_boot in fastbootd." into sc-dev 2021-06-29 17:04:07 +00:00
David Anderson
2354e3a924 Fix denial when flashing vendor_boot in fastbootd.
This mirrors the same sepolicy line in previous Pixel devices.

Bug: 189493387
Test: fastboot flash vendor_boot on r4
Change-Id: Ie15c8e6e5c01b249e1e5e244666c461253279f0b
2021-06-28 21:06:05 -07:00
Neo Yu
9ec8491533 Merge "Fix avc denied for getprop "vendor.radio.call_end_reason"" into sc-dev am: 9c27ce91c8 am: 590f6c96f8 am: 369e5e7026
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15126897

Change-Id: I4333f65fe219b307b4c4f3f9d4f42bb810a3e693
2021-06-29 03:51:30 +00:00
Neo Yu
0dd75c76a6 Merge "Fix avc denied for getprop "vendor.radio.call_end_reason"" into sc-dev am: 9c27ce91c8 am: 145c181a70 am: 6b8b748b87
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15126897

Change-Id: Ie1ac5d1ec702b19fb97167767100d85b0f35aa5f
2021-06-29 03:51:17 +00:00
Neo Yu
369e5e7026 Merge "Fix avc denied for getprop "vendor.radio.call_end_reason"" into sc-dev am: 9c27ce91c8 am: 590f6c96f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15126897

Change-Id: I08fd92933c02452450d3b32e2cb7ab1dc9a074f4
2021-06-29 03:37:49 +00:00
Neo Yu
6b8b748b87 Merge "Fix avc denied for getprop "vendor.radio.call_end_reason"" into sc-dev am: 9c27ce91c8 am: 145c181a70
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15126897

Change-Id: I1fa13b77fe8576b76a0fc729b7b899602610578e
2021-06-29 03:37:27 +00:00
Neo Yu
145c181a70 Merge "Fix avc denied for getprop "vendor.radio.call_end_reason"" into sc-dev am: 9c27ce91c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15126897

Change-Id: Icefd3f8fb6cd01b2596e1ec41720bdbdd39b8a5c
2021-06-29 03:22:07 +00:00
Neo Yu
590f6c96f8 Merge "Fix avc denied for getprop "vendor.radio.call_end_reason"" into sc-dev am: 9c27ce91c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15126897

Change-Id: I585e6631ce4c913405d3b5fe2296391d30fe6c52
2021-06-29 03:20:31 +00:00
Neo Yu
9c27ce91c8 Merge "Fix avc denied for getprop "vendor.radio.call_end_reason"" into sc-dev 2021-06-29 03:05:02 +00:00
Automerger Merge Worker
42053beae6 Merge "Merge "Sepolicy: Remove permission for fuel gauge" into sc-dev am: 15f7a61603 am: 7c3b9b3401" into sc-v2-dev-plus-aosp am: f2d282dc3c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782008

Change-Id: I672cc6aa5337e4b8a4b9ed12d8a8ba03ff693426
2021-06-29 02:32:42 +00:00
TreeHugger Robot
b3182ce3b2 Merge "Sepolicy: Remove permission for fuel gauge" into sc-dev am: 15f7a61603 am: 64bc4eef75 am: ec89b80cf7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782008

Change-Id: I3ee401503d350d6546c32fdd8fa33166d4ebe8f8
2021-06-29 02:32:24 +00:00
Automerger Merge Worker
f2d282dc3c Merge "Merge "Sepolicy: Remove permission for fuel gauge" into sc-dev am: 15f7a61603 am: 7c3b9b3401" into sc-v2-dev-plus-aosp 2021-06-29 02:14:32 +00:00
TreeHugger Robot
69f19ef2c3 Merge "Sepolicy: Remove permission for fuel gauge" into sc-dev am: 15f7a61603 am: 7c3b9b3401
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782008

Change-Id: I7c7c5e755286de1a189ee880eddfb0f7cbb3782f
2021-06-29 02:14:29 +00:00
TreeHugger Robot
ec89b80cf7 Merge "Sepolicy: Remove permission for fuel gauge" into sc-dev am: 15f7a61603 am: 64bc4eef75
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782008

Change-Id: Ic875d2b2e69f4664e00655f37c818c4785ddb8bb
2021-06-29 02:14:26 +00:00
TreeHugger Robot
7c3b9b3401 Merge "Sepolicy: Remove permission for fuel gauge" into sc-dev am: 15f7a61603
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782008

Change-Id: Ieeaa691c55bedd880eda6ffeb96188f0deb3d01d
2021-06-29 02:01:24 +00:00
TreeHugger Robot
4cee4deb46 Merge "Sepolicy: Pixel stats wireless charger sepolicy" into sc-dev am: 22f27cb215 am: 960aaab672 am: bf1b5685c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456728

Change-Id: Id96a824eab07b409f0eb7e38769d43c00c3b63d4
2021-06-29 02:00:59 +00:00
TreeHugger Robot
64bc4eef75 Merge "Sepolicy: Remove permission for fuel gauge" into sc-dev am: 15f7a61603
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782008

Change-Id: I4e3ad8b720a7b0436eca036ff61da27f0f559de8
2021-06-29 02:00:54 +00:00
TreeHugger Robot
ba8db505db Merge "Sepolicy: Pixel stats wireless charger sepolicy" into sc-dev am: 22f27cb215 am: 03488b260f am: 90d03e4684
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456728

Change-Id: I7c8b3c67931a73550040b20e2e2e14e59343649d
2021-06-29 02:00:41 +00:00
TreeHugger Robot
bf1b5685c0 Merge "Sepolicy: Pixel stats wireless charger sepolicy" into sc-dev am: 22f27cb215 am: 960aaab672
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456728

Change-Id: Ibf2a3693e5b4d05a91a0594c03ec3126a65a57d9
2021-06-29 01:49:03 +00:00
TreeHugger Robot
90d03e4684 Merge "Sepolicy: Pixel stats wireless charger sepolicy" into sc-dev am: 22f27cb215 am: 03488b260f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456728

Change-Id: I6697f83c62d26b260503f91bc7c37ff24c61c147
2021-06-29 01:48:41 +00:00
TreeHugger Robot
15f7a61603 Merge "Sepolicy: Remove permission for fuel gauge" into sc-dev 2021-06-29 01:48:34 +00:00
TreeHugger Robot
03488b260f Merge "Sepolicy: Pixel stats wireless charger sepolicy" into sc-dev am: 22f27cb215
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456728

Change-Id: If3f1fa43325948305419f2b1e5995855bde42a4c
2021-06-29 01:31:17 +00:00
TreeHugger Robot
960aaab672 Merge "Sepolicy: Pixel stats wireless charger sepolicy" into sc-dev am: 22f27cb215
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456728

Change-Id: I747f7ab531ed52ce6f8312ed5360a9cd79d3ed29
2021-06-29 01:30:30 +00:00
neoyu
93944a8b1c Fix avc denied for getprop "vendor.radio.call_end_reason"
06-10 11:13:02.867 10224  2377  2377 W libc    : Access denied finding property "vendor.radio.call_end_reason"

Bug: 191204793
Test: error is gone with this fix
Change-Id: I50c1d21ba4e2343aa2cee0c533b8c3dbe535e4b5
2021-06-29 01:18:12 +00:00
TreeHugger Robot
22f27cb215 Merge "Sepolicy: Pixel stats wireless charger sepolicy" into sc-dev 2021-06-29 01:16:35 +00:00
Adam Shih
f9501fc87c Avoid VTS testDataTypeViolators failure
Bug: 192209720
Test: run -m CtsSecurityHostTestCases -t android.security.cts.SELinuxHostTest
Change-Id: I9043c5adfb544179bceb0f6e5cf73c2b2ddd3d02
2021-06-29 07:58:57 +08:00
David Lin
4b6bc8cb32 ssr_detector_app: Add additional vendor dir and crgroup allow for debug
Bug: 192126013

Signed-off-by: David Lin <dtwlin@google.com>
Change-Id: Idadf81cf92099804f300f87fb1bedf9bed7decbd
2021-06-28 21:52:51 +00:00
TreeHugger Robot
b777beecb7 Merge "Hardwareinfo: battery info porting" into sc-dev am: a63fbd68d4 am: 4a6403f455 am: c067c3f0a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608134

Change-Id: I8bec81c712ad63cf6423492e924df0a5ace551a6
2021-06-28 17:00:53 +00:00
TreeHugger Robot
c067c3f0a0 Merge "Hardwareinfo: battery info porting" into sc-dev am: a63fbd68d4 am: 4a6403f455
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608134

Change-Id: Id334134c0d8af6ad9b5296e58cad567ea16c06f5
2021-06-28 16:57:01 +00:00
TreeHugger Robot
21bc76645d Merge "Hardwareinfo: battery info porting" into sc-dev am: a63fbd68d4 am: 8d6a3d96a2 am: f82eb61a93
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608134

Change-Id: I6465a0df92f93a1ee0533ff95eac5fc87fd45302
2021-06-28 16:56:31 +00:00
TreeHugger Robot
f82eb61a93 Merge "Hardwareinfo: battery info porting" into sc-dev am: a63fbd68d4 am: 8d6a3d96a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608134

Change-Id: Ic169a8455fef3e8d9b9b9bf21e08e9f8660ceb07
2021-06-28 16:47:13 +00:00
TreeHugger Robot
4a6403f455 Merge "Hardwareinfo: battery info porting" into sc-dev am: a63fbd68d4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608134

Change-Id: I90ebe00451a871473545576b52fdcbbfff008793
2021-06-28 16:34:14 +00:00
TreeHugger Robot
8d6a3d96a2 Merge "Hardwareinfo: battery info porting" into sc-dev am: a63fbd68d4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608134

Change-Id: I9c8d1f7b0b57fa279557525d15cb307442390232
2021-06-28 16:33:20 +00:00
TreeHugger Robot
a63fbd68d4 Merge "Hardwareinfo: battery info porting" into sc-dev 2021-06-28 16:20:12 +00:00
Gazi Yamin Iqbal
4ea317bb6a gs101-sepolicy: allow rlsservice to read display status files
major changes:
        1. This change is to allow rlsservice to read the status of
        display status file. Similar method was employed in previous
        pixels.
Bug: 191122203
Test: p21 camera test checklist

Change-Id: I09483881294fd6dde46d4d0b7283311a2d20c404
2021-06-28 22:15:08 +08:00
TreeHugger Robot
ab3fbae9f8 Merge "gs101-sepolicy: add oemrilservice_app.te" into sc-dev am: 407d0cf58d am: 25fa293ed4 am: a257af7df7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072301

Change-Id: Ie8ad47c848dd3b421d1dcd5b12ad80750a897fa2
2021-06-27 02:24:17 +00:00
TreeHugger Robot
8a3ed5c061 Merge "gs101-sepolicy: add oemrilservice_app.te" into sc-dev am: 407d0cf58d am: 3863954bf4 am: 8d82d42f94
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072301

Change-Id: I09eccef75ecab74c01b78c3b43cea8f0daa562ca
2021-06-27 02:24:06 +00:00
TreeHugger Robot
a257af7df7 Merge "gs101-sepolicy: add oemrilservice_app.te" into sc-dev am: 407d0cf58d am: 25fa293ed4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072301

Change-Id: I47918418aa0b2985d09421762334fa39b4ac606a
2021-06-27 02:12:07 +00:00
TreeHugger Robot
8d82d42f94 Merge "gs101-sepolicy: add oemrilservice_app.te" into sc-dev am: 407d0cf58d am: 3863954bf4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072301

Change-Id: I9d7aac7890cc8c5c2ed2542cc85632f7803b47eb
2021-06-27 02:11:46 +00:00
TreeHugger Robot
3863954bf4 Merge "gs101-sepolicy: add oemrilservice_app.te" into sc-dev am: 407d0cf58d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072301

Change-Id: Icf8b698caf10af881a2a90a745f3e77d80666e94
2021-06-27 01:57:50 +00:00
TreeHugger Robot
25fa293ed4 Merge "gs101-sepolicy: add oemrilservice_app.te" into sc-dev am: 407d0cf58d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072301

Change-Id: Id862fe0bb0c01337a933653f6885bde170cd0324
2021-06-27 01:56:09 +00:00
TreeHugger Robot
407d0cf58d Merge "gs101-sepolicy: add oemrilservice_app.te" into sc-dev 2021-06-27 01:47:21 +00:00
Jeffrey Carlyle
9ac870aa22 allow recovery and fastboot to access secure elment
This is to enable clearing of secure element during a master reset.

Bug: 182508814
Test: master reset on device with keys; verified no keys after reset
Signed-off-by: Jeffrey Carlyle <jcarlyle@google.com>
Change-Id: I15c7fbd7f2c4fb34dcad0ae4f5cee3238f526fa5
2021-06-25 17:54:29 -07:00
sukiliu
b27afc2b7b Update avc error on ROM 7492139 am: 7ea816284d am: 6a881fe7d8 am: 2ee82785ea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100479

Change-Id: I592a7dfb8036b2449dc1621fa7f0a5c13168e067
2021-06-25 08:41:33 +00:00
sukiliu
ba582b2694 Update avc error on ROM 7492139 am: 7ea816284d am: 8a85dbd92d am: d2c18d2f31
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100479

Change-Id: I40c8228a1c27868eb933c5492ce9f5aebe6564e0
2021-06-25 08:41:22 +00:00
sukiliu
2ee82785ea Update avc error on ROM 7492139 am: 7ea816284d am: 6a881fe7d8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100479

Change-Id: I2b89a1359e7754917a26ef5cd2dd7863f173c37f
2021-06-25 08:28:22 +00:00
sukiliu
d2c18d2f31 Update avc error on ROM 7492139 am: 7ea816284d am: 8a85dbd92d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100479

Change-Id: Ib7070665647c6a0ad9fa81c9cc5fe9367e2a6a38
2021-06-25 08:28:01 +00:00
sukiliu
8a85dbd92d Update avc error on ROM 7492139 am: 7ea816284d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100479

Change-Id: I498cd2538fd38e9d1e8976e598b548bc20014647
2021-06-25 08:13:15 +00:00
sukiliu
6a881fe7d8 Update avc error on ROM 7492139 am: 7ea816284d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100479

Change-Id: I8c91559f00aca5f79f366cc99d23290f04a9e159
2021-06-25 08:11:34 +00:00
sukiliu
7ea816284d Update avc error on ROM 7492139
avc: denied { call } for comm="servicemanager" scontext=u:r:servicemanager:s0 tcontext=u:r:hal_fingerprint_default:s0 tclass=binder permissive=0

Bug: 192040144
Test: PtsSELinuxTestCases
Change-Id: I2de11d2706222a88c4234d99399b7b2437f36e31
2021-06-25 14:40:17 +08:00
sukiliu
766a004e9f Update avc error on ROM 7490489 am: e31c8840de am: 02998c1154 am: d6eeda4c2a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100471

Change-Id: Id1e9f3058e4ca10297f1e671e029e98b838370f1
2021-06-25 03:32:16 +00:00
sukiliu
c80d14ec73 Update avc error on ROM 7490489 am: e31c8840de am: 48a2a83361 am: 8d4680ac5c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100471

Change-Id: I3cb45b932d1cbd0f2a9082e35dcf08e7b24d34c5
2021-06-25 03:32:10 +00:00
sukiliu
d6eeda4c2a Update avc error on ROM 7490489 am: e31c8840de am: 02998c1154
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100471

Change-Id: If2ef4c72d55580bed095c6399c4df01f373bd791
2021-06-25 03:28:02 +00:00
sukiliu
8d4680ac5c Update avc error on ROM 7490489 am: e31c8840de am: 48a2a83361
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100471

Change-Id: Iad955cc54e3e2e27e8b88a30fa311547e93a53bb
2021-06-25 03:21:01 +00:00
sukiliu
02998c1154 Update avc error on ROM 7490489 am: e31c8840de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100471

Change-Id: Ibecea61f0430bdf847d3b12b641114372e0f943a
2021-06-25 03:12:10 +00:00
sukiliu
48a2a83361 Update avc error on ROM 7490489 am: e31c8840de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15100471

Change-Id: Ia5c201aeb91106643b2825bf3c530444af8ce7ec
2021-06-25 03:10:23 +00:00
Ilya Matyukhin
e391d3efef Merge "raviole: transition SystemUI to use HWC for LHBM" into sc-dev am: f9828a9944 am: bb50dd08c0 am: bc4b1153b7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15085906

Change-Id: I0af56806575e8c3a1384e446db4c8ec70eb17ae4
2021-06-25 02:22:24 +00:00
Adam Shih
6b539e1e46 Merge "modularize dmd" into sc-dev am: 99bfde4f38 am: 425d7cb7d4 am: 42f977a309
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072291

Change-Id: I53da0174987d3a6f2908a794c8f56bd595035096
2021-06-25 02:22:06 +00:00
Ilya Matyukhin
00b7e7d8b9 Merge "raviole: transition SystemUI to use HWC for LHBM" into sc-dev am: f9828a9944 am: 09792c098f am: 4c3bbb63d0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15085906

Change-Id: I9989b8fcec6b6c3d064e630a68121975a917ee56
2021-06-25 02:21:56 +00:00
Adam Shih
d8f6d7acef Merge "modularize dmd" into sc-dev am: 99bfde4f38 am: c418ff2db2 am: 8463b00d4b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072291

Change-Id: I481a22c4d9712fbb2b6446f216732e225355de7f
2021-06-25 02:21:44 +00:00
Ilya Matyukhin
bc4b1153b7 Merge "raviole: transition SystemUI to use HWC for LHBM" into sc-dev am: f9828a9944 am: bb50dd08c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15085906

Change-Id: Id9878ebfb6f1bc83181d26ce6ed69727e440ddd1
2021-06-25 02:03:59 +00:00
Adam Shih
42f977a309 Merge "modularize dmd" into sc-dev am: 99bfde4f38 am: 425d7cb7d4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072291

Change-Id: I4076f376f1cea37e3ec092aec17695d8f83b83fa
2021-06-25 02:03:50 +00:00
Ilya Matyukhin
4c3bbb63d0 Merge "raviole: transition SystemUI to use HWC for LHBM" into sc-dev am: f9828a9944 am: 09792c098f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15085906

Change-Id: I02c6e429c32b8ba0ee4d652d083048ba49298712
2021-06-25 02:03:41 +00:00
Adam Shih
8463b00d4b Merge "modularize dmd" into sc-dev am: 99bfde4f38 am: c418ff2db2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072291

Change-Id: I50b9c4c71d12a2ce60ddb392e76040df30c2f4b1
2021-06-25 02:03:30 +00:00
sukiliu
e31c8840de Update avc error on ROM 7490489
avc: denied { call } for scontext=u:r:dumpstate:s0 tcontext=u:r:hal_uwb_default:s0 tclass=binder permissive=0
avc: denied { call } for comm="dumpstate" scontext=u:r:dumpstate:s0 tcontext=u:r:hal_uwb_default:s0 tclass=binder permissive=0

Bug: 192026913
Test: PtsSELinuxTestCases
Change-Id: Ieca08e87db1b46f3b7fc7de1492e45d4a5bec868
2021-06-25 09:42:51 +08:00
Ilya Matyukhin
09792c098f Merge "raviole: transition SystemUI to use HWC for LHBM" into sc-dev am: f9828a9944
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15085906

Change-Id: If83496c47ac3e6450756a5dfc2342884a17e378d
2021-06-25 01:27:58 +00:00
Adam Shih
c418ff2db2 Merge "modularize dmd" into sc-dev am: 99bfde4f38
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072291

Change-Id: Idcd79ae7e96c304194279145cff7af20877cc30a
2021-06-25 01:27:41 +00:00
Ilya Matyukhin
bb50dd08c0 Merge "raviole: transition SystemUI to use HWC for LHBM" into sc-dev am: f9828a9944
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15085906

Change-Id: If4a97f8c91b5bb1c65506ff89d5bb811d0ec3366
2021-06-25 01:27:08 +00:00
Adam Shih
425d7cb7d4 Merge "modularize dmd" into sc-dev am: 99bfde4f38
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072291

Change-Id: If964605afd24a9c716e562a8e0ae541451e7a6f4
2021-06-25 01:26:54 +00:00
Ilya Matyukhin
f9828a9944 Merge "raviole: transition SystemUI to use HWC for LHBM" into sc-dev 2021-06-25 01:12:52 +00:00
Adam Shih
99bfde4f38 Merge "modularize dmd" into sc-dev 2021-06-25 01:12:50 +00:00
TreeHugger Robot
157b21d921 Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev am: 655f5cfd8f am: c882714de8 am: 10d8d5602e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072290

Change-Id: I9ca714857df9d351b15c88202cd42db4c75bc90f
2021-06-24 10:57:41 +00:00
TreeHugger Robot
3d20aa5c46 Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev am: 655f5cfd8f am: 1edfd8cfe6 am: 738837c130
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072290

Change-Id: I4cdf3d1543586a4488228461b6195c2e6796c26e
2021-06-24 10:57:24 +00:00
TreeHugger Robot
10d8d5602e Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev am: 655f5cfd8f am: c882714de8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072290

Change-Id: I0ef406436013bb9708482b5e0fbb06dcbaf2317b
2021-06-24 10:40:09 +00:00
TreeHugger Robot
738837c130 Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev am: 655f5cfd8f am: 1edfd8cfe6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072290

Change-Id: I52dc2da8ce1ccaa74368a2ac9580d190d547c80b
2021-06-24 10:39:45 +00:00
TreeHugger Robot
1edfd8cfe6 Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev am: 655f5cfd8f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072290

Change-Id: Icea3ba9901b7a05239a34a64852e0196c31003b8
2021-06-24 10:20:51 +00:00
TreeHugger Robot
c882714de8 Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev am: 655f5cfd8f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072290

Change-Id: Iebe2d27156e2dcb801cbf1a535fdd6e06826b814
2021-06-24 10:20:01 +00:00
TreeHugger Robot
655f5cfd8f Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev 2021-06-24 10:02:11 +00:00
Adam Shih
69dc1da5b3 Merge "modularize pktrouter" into sc-dev am: 9b0b96b907 am: 7e1e8dfecf am: 07902879ff
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048206

Change-Id: Ib09b8b35cc96b6b84d562a52eba859f748d187bb
2021-06-24 08:12:24 +00:00
Adam Shih
39c6f1987c Merge "modularize pktrouter" into sc-dev am: 9b0b96b907 am: 1f58e76864 am: 85bdce6ef7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048206

Change-Id: I20ec2da8e14c933dd69ca1d0dafe592b34b3c3d4
2021-06-24 08:12:05 +00:00
Adam Shih
07902879ff Merge "modularize pktrouter" into sc-dev am: 9b0b96b907 am: 7e1e8dfecf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048206

Change-Id: I65655919e73f7982eae9db3bb3b9f37cddd6c740
2021-06-24 07:57:49 +00:00
Adam Shih
85bdce6ef7 Merge "modularize pktrouter" into sc-dev am: 9b0b96b907 am: 1f58e76864
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048206

Change-Id: I1166426786f874a00bfb8a1d357677f4ab59964b
2021-06-24 07:57:35 +00:00
Adam Shih
1f58e76864 Merge "modularize pktrouter" into sc-dev am: 9b0b96b907
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048206

Change-Id: Ibd259d8b20c59e5e950125fbbae3bb14853d4348
2021-06-24 07:41:01 +00:00
Adam Shih
7e1e8dfecf Merge "modularize pktrouter" into sc-dev am: 9b0b96b907
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048206

Change-Id: Ia5c07a79795fb692ac65185a8ffa311bdca8a4e6
2021-06-24 07:40:06 +00:00
Adam Shih
9b0b96b907 Merge "modularize pktrouter" into sc-dev 2021-06-24 07:24:45 +00:00
Ilya Matyukhin
2460cdcc9f raviole: transition SystemUI to use HWC for LHBM
This change removes direct access to the LHBM sysfs node from SystemUI,
but allows SystemUI to make binder calls to the hardware composer (HWC),
which can be used to enable or disable LHBM.

Bug: 191132545
Bug: 190563896
Bug: 184768835
Test: no avc denials
Change-Id: I5417377ff096e869ad772e4fd2fb23f8c1fd4f1e
2021-06-23 23:38:27 -07:00
Adam Shih
8b326703e1 modularize dmd
Bug: 190331463
Test: build ROM and make sure dmd is launched
Change-Id: If1e51b6bc100e870a15a40f5e0d93a75fe68bac3
2021-06-24 14:17:29 +08:00
Alex Hong
68cfea5c6b Merge "Move the type definition of properties from product to vendor" into sc-dev am: d912300853 am: b053769bd3 am: 5764ab05da
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15080406

Change-Id: Ide47de310477ae9d01e1c55289b627ddd7196daa
2021-06-24 02:55:58 +00:00
Minchan Kim
d68af05291 Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev am: 650cf48406 am: 98d9d3971f am: 92202e06b1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15081303

Change-Id: Ib46b26e83d5c448ee51b2257d987988170b7880f
2021-06-24 02:55:52 +00:00
Alex Hong
eae86c1df5 Merge "Move the type definition of properties from product to vendor" into sc-dev am: d912300853 am: 485004935f am: c9ffe52783
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15080406

Change-Id: If637118deb2722a6990eb6d07d1b97681a4b04f3
2021-06-24 02:53:13 +00:00
Minchan Kim
32f9ba3b8e Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev am: 650cf48406 am: d8c003c9e1 am: ef8058e2e2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15081303

Change-Id: Id45cda9645d83e6ad7c1bde4c3c3c36768389066
2021-06-24 02:53:05 +00:00
Alex Hong
5764ab05da Merge "Move the type definition of properties from product to vendor" into sc-dev am: d912300853 am: b053769bd3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15080406

Change-Id: I36f80a5492fbc74b5d234d7d3164a5686a714fa0
2021-06-24 02:39:22 +00:00
Minchan Kim
92202e06b1 Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev am: 650cf48406 am: 98d9d3971f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15081303

Change-Id: Id63d2be3535a1ecb94226504ab771ed8dcbc235e
2021-06-24 02:39:16 +00:00
Alex Hong
c9ffe52783 Merge "Move the type definition of properties from product to vendor" into sc-dev am: d912300853 am: 485004935f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15080406

Change-Id: I05d5eaf6ada23116b72c8172a3254e42f74eb877
2021-06-24 02:38:47 +00:00
Minchan Kim
ef8058e2e2 Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev am: 650cf48406 am: d8c003c9e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15081303

Change-Id: Ib796ac2361d29cab35c56efb6a2b872cd872637f
2021-06-24 02:38:41 +00:00
Alex Hong
485004935f Merge "Move the type definition of properties from product to vendor" into sc-dev am: d912300853
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15080406

Change-Id: I08cf166cc9658f3bf72884ec1a492a9e7afdcd09
2021-06-24 02:19:02 +00:00
Minchan Kim
d8c003c9e1 Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev am: 650cf48406
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15081303

Change-Id: I8dd50fa4c57b82b6e887d5bd4df8f9035bb68bd6
2021-06-24 02:18:49 +00:00
Alex Hong
b053769bd3 Merge "Move the type definition of properties from product to vendor" into sc-dev am: d912300853
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15080406

Change-Id: I0f9867b9d5a0159a78c972695fad80365d259279
2021-06-24 02:18:16 +00:00
Minchan Kim
98d9d3971f Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev am: 650cf48406
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15081303

Change-Id: I6381f743dc34009706f2581d613df88384dad3fe
2021-06-24 02:17:25 +00:00
Alex Hong
d912300853 Merge "Move the type definition of properties from product to vendor" into sc-dev 2021-06-24 02:15:36 +00:00
Alex Hong
e44e432672 Move the type definition of properties from product to vendor
These properties cannot be resolved after product sepolicy is replaced.
  vendor_persist_config_default_prop
  vendor_rild_prop

Test: The device can boot to home after replacing with GSI
Bug: 191236468
Change-Id: Ib797601a44306987e5a85897c7b6cd7827ad91b2
2021-06-24 02:01:20 +00:00
Minchan Kim
650cf48406 Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev 2021-06-24 01:45:11 +00:00
Thierry Strudel
6f74ca979a Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd am: c45b4c7c51 am: 9608f4b83b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438

Change-Id: I27c4358d292e8fc64d2a655a22b65c8ac7692b61
2021-06-24 01:32:13 +00:00
Thierry Strudel
55f1569d32 Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd am: b491ce3a18 am: 6a940b5459
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438

Change-Id: Ib53dbc81f22f73f0af0039e8ecce36fc76b45d9f
2021-06-24 01:31:59 +00:00
Thierry Strudel
9608f4b83b Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd am: c45b4c7c51
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438

Change-Id: I0e3717a41c0b72e61dde822f1997ab80c61d776b
2021-06-24 01:13:03 +00:00
Thierry Strudel
6a940b5459 Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd am: b491ce3a18
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438

Change-Id: Id7f0e5a4b4ab5d083b021e8b91568acdd2d6eea7
2021-06-24 01:08:54 +00:00
Thierry Strudel
c45b4c7c51 Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438

Change-Id: Ia0ff6c0dceb663346fd48b6970e5a6035437eff0
2021-06-24 00:56:12 +00:00
Thierry Strudel
b491ce3a18 Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438

Change-Id: Ib43a3b2c888f48c70c6a71e117a8de04662f923a
2021-06-24 00:54:58 +00:00
Thierry Strudel
e99c749cbd Merge "Add support for non-su hal_uwb" into sc-dev 2021-06-24 00:45:49 +00:00
Minchan Kim
7f9abeee45 sepolicy: gs101: allow dump cma statistics
Provide necessary sepolicy for bugreport dump to access cma metric
information under /sys/kernel/pixel_stat/*

Test: Run "adb bugreport <zip>" and verify it contains the output
      from dumpstate_board.txt
Bug: 191904985
Signed-off-by: Minchan Kim <minchan@google.com>
Change-Id: Iaa92006eeb5158a0962652427d1af061fe1cf03d
2021-06-23 14:15:46 -07:00
TreeHugger Robot
f9efb72779 Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf am: 99b2f78bde am: d1473d3ec6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299

Change-Id: I520fd70291cd0c02bb88ab16f8d20b217773c5f4
2021-06-23 12:03:55 +00:00
TreeHugger Robot
573bf012b9 Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf am: b596f9dbd5 am: 101bb0fa5f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299

Change-Id: I785680b9842e956f7b1f94144c103093f01743eb
2021-06-23 12:03:37 +00:00
TreeHugger Robot
d1473d3ec6 Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf am: 99b2f78bde
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299

Change-Id: I0ec95809d1b25539217739f18f22f42f4863ba05
2021-06-23 11:49:13 +00:00
TreeHugger Robot
101bb0fa5f Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf am: b596f9dbd5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299

Change-Id: I06174f5bf937c42263cfe807dad3edaae7b0b6fd
2021-06-23 11:48:54 +00:00
TreeHugger Robot
b596f9dbd5 Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299

Change-Id: Id800243025f0eb916789582f6c9925924e94e4ec
2021-06-23 11:33:09 +00:00
TreeHugger Robot
99b2f78bde Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299

Change-Id: I9ca9b992d8f0c428bd36e437d8fc018f395ff8a0
2021-06-23 11:32:03 +00:00
TreeHugger Robot
c431abb5bf Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev 2021-06-23 11:20:51 +00:00
Denny cy Lee
78189986fb Pixelstat: battery history access premission am: 0b21a2d44a am: 632e7b95ab am: 1777ff558f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520

Change-Id: Ia33418e6c263eed4c8e63b1c092153e17a26c6ea
2021-06-23 09:17:53 +00:00
Denny cy Lee
2c65b9eebb Pixelstat: battery history access premission am: 0b21a2d44a am: 7185538f79 am: 4ac1899651
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520

Change-Id: Ib960713a501ab7798b6b53322ef579a59fc3040e
2021-06-23 09:17:34 +00:00
Denny cy Lee
1777ff558f Pixelstat: battery history access premission am: 0b21a2d44a am: 632e7b95ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520

Change-Id: Ibb82df26953257cbf0575e81d67c22ec72cedd8f
2021-06-23 08:58:21 +00:00
Denny cy Lee
4ac1899651 Pixelstat: battery history access premission am: 0b21a2d44a am: 7185538f79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520

Change-Id: Id1ce31235e04afd6571cca48c3aa9a9cc1cc4a5e
2021-06-23 08:57:50 +00:00
Sungwoo choi
5aaa0f6044 gs101-sepolicy: add oemrilservice_app.te
Seperate oemrilservice_app.te from vendor_telephony_app.te.
  - target process: com.samsung.slsi.telephony.oemril
  - selabel: oemrilservice_app
  - allow to find app_api_service
  - allow to find radio_service
  - allow to find vendor HAL
  - a binder communication with rild

Bug: 191830874
Test: Manual

Signed-off-by: Sungwoo choi <sungwoo48.choi@samsung.com>
Change-Id: I5e31b4a16f0b4d25bf4889da0150084937354808
2021-06-23 16:51:57 +08:00
Denny cy Lee
7185538f79 Pixelstat: battery history access premission am: 0b21a2d44a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520

Change-Id: Ida0cfc72b0bfcfc0943f012edc093f8d1d936679
2021-06-23 08:33:25 +00:00
Denny cy Lee
632e7b95ab Pixelstat: battery history access premission am: 0b21a2d44a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520

Change-Id: I8c5f44af025177d9c6063ae3c8b174118a100e3d
2021-06-23 08:32:29 +00:00
Kris Chen
a23d1bb37b Allow fingerprint hal to read sysfs_chosen
Fixes the following avc denial:
android.hardwar: type=1400 audit(0.0:49): avc: denied { search } for name="chosen" dev="sysfs" ino=9575 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=dir permissive=1
android.hardwar: type=1400 audit(0.0:50): avc: denied { read } for name="platform" dev="sysfs" ino=9591 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=file permissive=1
android.hardwar: type=1400 audit(0.0:51): avc: denied { open } for path="/sys/firmware/devicetree/base/chosen/plat/platform" dev="sysfs" ino=9591 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=file permissive=1

Bug: 191832617
Test: Enroll and authenticate fingerprints.
Change-Id: I5c576cc210d9e85b1999655bdc27736183db8aed
2021-06-23 16:20:57 +08:00
Denny cy Lee
433aeb2d4d Sepolicy: Pixel stats wireless charger sepolicy
Bug: 171853251
Bug: 188601686
Test: manually, do wirelees charge, check logcat
Change-Id: I4cbd7da038365ae92e34780131056da61b9a55dc
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-23 06:48:42 +00:00
Denny cy Lee
0b21a2d44a Pixelstat: battery history access premission
Test: manually, relate seploicy not show; battery history log printed
      05-24 13:29:19.637  2829  2829 D pixelstats_BatteryEEPROM:
      checkAndReport: 0940 0a80 0500 0200 0200 0000
Bug: 189050725
Change-Id: I20567e168db43fe2168a9a30ac7a4b0cec65a665
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-23 13:50:32 +08:00
Adam Shih
a5bdc2da5d modulize init.radio.sh am: d74e989739 am: af082207ce am: 9b7b36093f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203

Change-Id: I00a0c9af0070b96b3f22b4e9a9bdb64328c31bcb
2021-06-23 05:38:53 +00:00
Adam Shih
045cad750c modulize init.radio.sh am: d74e989739 am: 2812270759 am: 4d69f3c773
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203

Change-Id: Ie78548dc80eca0306ee767eaeaad1b46eba546a5
2021-06-23 05:38:15 +00:00
Adam Shih
a70819d2f0 modularize pktrouter
Bug: 190331212
Test: make sure pktrouter gets initialized
06-23 13:21:19.372  1 1 I init : Parsing file /vendor/etc/init/pktrouter.rc...
06-23 13:21:23.510     1     1 I init    : processing action (vendor.pktrouter=1) from (/vendor/etc/init/pktrouter.rc:7)
06-23 13:21:23.510     1     1 I init    : starting service 'pktrouter'...
Change-Id: Icc7ab88505aea47cfed5ffc5182d0625b7a7609d
2021-06-23 05:24:01 +00:00
Adam Shih
9b7b36093f modulize init.radio.sh am: d74e989739 am: af082207ce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203

Change-Id: I0e41b10f40aeed53c2c4a15d27e4a04fb0c9478a
2021-06-23 03:36:08 +00:00
Adam Shih
4d69f3c773 modulize init.radio.sh am: d74e989739 am: 2812270759
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203

Change-Id: Icb720abe930291037a1b3da65a52d8b94e6e8b69
2021-06-23 03:30:58 +00:00
Adam Shih
2812270759 modulize init.radio.sh am: d74e989739
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203

Change-Id: Ifae088c8915f6920de295286e6c34a9af17de8b3
2021-06-23 03:17:48 +00:00
Adam Shih
af082207ce modulize init.radio.sh am: d74e989739
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203

Change-Id: I9fd2463183e0b630daca6503b1655fd3bd88227f
2021-06-23 03:16:54 +00:00
SalmaxChang
a926055749 vendor_init/dumpstate: Grant to access logger prop
Bug: 176176656
Change-Id: I551ccfac57d983aab95aa23e1f350f78ee0a159f
2021-06-23 10:06:09 +08:00
Michael Ayoubi
cebbf14174 Add support for non-su hal_uwb
Bug: 187386527
Test: Boot and confirm HAL is up
Signed-off-by: Michael Ayoubi <mayoubi@google.com>
Change-Id: Ia9f3f90fba6981762fe375aa37c81f8474ad9c53
2021-06-23 01:26:25 +00:00
Adam Shih
d74e989739 modulize init.radio.sh
Bug: 190331600
Test: build ROM and make sure the file is there and functional.
Change-Id: Icb3e0e590ae315d53eb5251fd5e74d6aacab1fe2
2021-06-23 01:07:26 +00:00
TreeHugger Robot
cd0d9bc391 Merge "Fix denial when flashing vendor_boot in fastbootd." 2021-06-22 18:49:01 +00:00
TreeHugger Robot
4f1432d729 Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca am: 7ad9e45515 am: 2719d2f8ae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575

Change-Id: I6a3c41506d54fbb74c6317649c854539f449bb18
2021-06-22 12:54:55 +00:00
TreeHugger Robot
942b0853bf Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca am: 7559eac0df am: e5febaf579
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575

Change-Id: I2d6799ee1dfd1b92903956e606a4173a1e3863ad
2021-06-22 12:54:41 +00:00
TreeHugger Robot
2719d2f8ae Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca am: 7ad9e45515
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575

Change-Id: Ide59cfb052e501d809cb9a263297c5c6dd999ea2
2021-06-22 12:45:15 +00:00
TreeHugger Robot
e5febaf579 Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca am: 7559eac0df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575

Change-Id: I13e1fa6cdd1c266ae3f60fbd4569b0e39f82bcf4
2021-06-22 12:41:20 +00:00
TreeHugger Robot
7ad9e45515 Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575

Change-Id: I1922239b616469f421d75ac35a392d65d2521cc4
2021-06-22 12:30:09 +00:00
TreeHugger Robot
7559eac0df Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575

Change-Id: I053b84d7c183802f0e78511de11e18b60ad68709
2021-06-22 12:26:37 +00:00
TreeHugger Robot
e2ef28efca Merge "Allow camera hal to access devfreq query" into sc-dev 2021-06-22 12:06:16 +00:00
Speth Chang
419019a71a Allow camera hal to access devfreq query
Bug: 190687351
Test: p21 checklist
Change-Id: Id0cb74b483882a6ede93cadc475a7be334ecf20d
2021-06-22 10:19:49 +00:00
Alex Hong
33c043a89e Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2 am: 710cc3863d am: 902f2cf23c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028

Change-Id: If8aa3ba0762b39c5cfb32e8c68d62519e7706eda
2021-06-22 03:56:37 +00:00
Alex Hong
88bb041b20 Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2 am: fd43ace221 am: a23e74f7d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028

Change-Id: Ia76884ad5f7cb4ff8b2b95fdd622d0b871f1532b
2021-06-22 03:56:31 +00:00
Alex Hong
902f2cf23c Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2 am: 710cc3863d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028

Change-Id: Ie84cb1af05a719443261aebd22fabd03368d580d
2021-06-22 03:38:06 +00:00
Alex Hong
a23e74f7d3 Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2 am: fd43ace221
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028

Change-Id: Ib4bd5ba999bbc150892b332b59fc0dc2368e706e
2021-06-22 03:37:52 +00:00
Alex Hong
fd43ace221 Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028

Change-Id: I79ce5df849956b3b000ff6241ef0c20dd0a32f7c
2021-06-22 03:20:34 +00:00
Alex Hong
710cc3863d Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028

Change-Id: I3f65c53287d4ba739d640e40a458e169c92b78f6
2021-06-22 03:19:49 +00:00
Alex Hong
1f17829dc2 Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev 2021-06-22 03:01:07 +00:00
Srinivas Patibandla
3e36870b48 Update time sync seinfo to not use platform signature am: 51c891fa7b am: 38b0a12272 am: df7ad071fa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432

Change-Id: I86307b2f84b382fcbf5a83e540a322c1079975ba
2021-06-21 20:33:52 +00:00
Srinivas Patibandla
8fbb029ee9 Update time sync seinfo to not use platform signature am: 51c891fa7b am: 0d3d449ced am: ea69d530a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432

Change-Id: I1c56a1e27d167c6d6d399359adc8c30023190584
2021-06-21 20:32:32 +00:00
Srinivas Patibandla
df7ad071fa Update time sync seinfo to not use platform signature am: 51c891fa7b am: 38b0a12272
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432

Change-Id: Ie351ebfccec59c70a5287ddb5e11004a7df7cc5d
2021-06-21 20:22:06 +00:00
Srinivas Patibandla
ea69d530a0 Update time sync seinfo to not use platform signature am: 51c891fa7b am: 0d3d449ced
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432

Change-Id: I5bed4668b0e413af4251fd73dc05908e194d68ed
2021-06-21 20:12:47 +00:00
Srinivas Patibandla
38b0a12272 Update time sync seinfo to not use platform signature am: 51c891fa7b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432

Change-Id: Ia0719062e6021fb25aa88183eec92740c1e0bf3d
2021-06-21 19:56:40 +00:00
Srinivas Patibandla
0d3d449ced Update time sync seinfo to not use platform signature am: 51c891fa7b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432

Change-Id: I1ae881f223b3e014b74af2495255ef18c0e30ffc
2021-06-21 19:54:51 +00:00
Alex Hong
c598db170c Move the genfs_contexts of sched nodes from vendor to product
For sched nodes, "proc_vendor_sched" and "sysfs_vendor_sched",
their type definition is in product sepolicy,
while genfs_contexts is in vendor sepolicy.
In this case, genfs_contexts cannot be resolved after product sepolicy
is replaced by Dynamic System Update.

Need to keep the type definition and genfs_contexts in the same partition.
Now move genfs_contexts because the type definition has to be in product for now
since other private domains are accessing these sched nodes.

Test: $ make selinux_policy
      The device can boot to home after replacing with GSI.
Bug: 191236468
Change-Id: I02ea78b04dfcade4ceb426ff6ebf498daa81ac32
2021-06-21 14:55:08 +00:00
Srinivas Patibandla
51c891fa7b Update time sync seinfo to not use platform signature
Bug: b/190695230
Change-Id: I2dbee2e624c8794b3aa9ff85d8985a15ee159a0f
2021-06-21 14:47:28 +00:00
Thiebaud Weksteen
2d295d1b28 Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev am: c4d98b5c11 am: 24b135a5ba am: bf58949ba3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15018192

Change-Id: Id5993651d690df377d467ffcca86010c5e3f6c25
2021-06-21 09:36:56 +00:00
Thiebaud Weksteen
1a127a7006 Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev am: c4d98b5c11 am: e6f8977370 am: 344792d48a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15018192

Change-Id: I9c71b7208f1e2256bf1b4b7d3a73f4d081fca2ae
2021-06-21 09:35:04 +00:00
Thiebaud Weksteen
bf58949ba3 Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev am: c4d98b5c11 am: 24b135a5ba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15018192

Change-Id: I869dcdb0a0419de8c7d61cfeff45676ca44e6c8a
2021-06-21 09:21:00 +00:00
Thiebaud Weksteen
344792d48a Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev am: c4d98b5c11 am: e6f8977370
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15018192

Change-Id: I7de56040c97e5bd6c8cc1d8099e94a567817a5d6
2021-06-21 09:20:33 +00:00
Thiebaud Weksteen
e6f8977370 Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev am: c4d98b5c11
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15018192

Change-Id: Ia6ed028f32448e2475784a8e9406092b7ea6572e
2021-06-21 08:56:38 +00:00
Thiebaud Weksteen
24b135a5ba Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev am: c4d98b5c11
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15018192

Change-Id: Id422825604c3df974fbcd225c966742ceb1f6a7f
2021-06-21 08:55:44 +00:00
Thiebaud Weksteen
c4d98b5c11 Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev 2021-06-21 08:38:37 +00:00
Jack Wu
a740349dd6 sepolicy: gs101: allows pixelstat to access wlc file nodes am: 2794370557 am: e2aaccb114 am: 3fa70601e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14732233

Change-Id: If4438ae50d3ed0d4ef120fcf6489921d73ac8d2e
2021-06-19 03:26:49 +00:00
Jack Wu
5f5b92da76 sepolicy: gs101: allows pixelstat to access wlc file nodes am: 2794370557 am: 4266de165e am: e96cd5e870
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14732233

Change-Id: I99ff7c85ee82a67b0bfc9e881bdf7fae62baf3da
2021-06-19 03:26:30 +00:00
Jack Wu
3fa70601e4 sepolicy: gs101: allows pixelstat to access wlc file nodes am: 2794370557 am: e2aaccb114
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14732233

Change-Id: Ie4a85317295dc803b406b652fbbaedb4fe0555ef
2021-06-19 03:12:57 +00:00
Jack Wu
e96cd5e870 sepolicy: gs101: allows pixelstat to access wlc file nodes am: 2794370557 am: 4266de165e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14732233

Change-Id: Ibbb209fbbf878133292377a3a1ca23c41cac97b7
2021-06-19 03:12:25 +00:00
Jack Wu
4266de165e sepolicy: gs101: allows pixelstat to access wlc file nodes am: 2794370557
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14732233

Change-Id: I1568bee94e97333056a76bddf174a8dd75926e5a
2021-06-19 02:58:13 +00:00
Jack Wu
e2aaccb114 sepolicy: gs101: allows pixelstat to access wlc file nodes am: 2794370557
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14732233

Change-Id: I8b9f1e8b1dc1e945ef0f24431610d43f19aafa38
2021-06-19 02:57:02 +00:00
Jack Wu
2794370557 sepolicy: gs101: allows pixelstat to access wlc file nodes
05-31 11:14:57.280  1000  3126  3126 W pixelstats-vend: type=1400 audit(0.0:162): avc: denied { search } for name="i2c-p9412" dev="sysfs" ino=60862 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=0
05-31 11:14:57.280  1000  3126  3126 W pixelstats-vend: type=1400 audit(0.0:163): avc: denied { search } for name="i2c-p9412" dev="sysfs" ino=60862 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=0

05-31 13:12:23.940  1000  2838  2838 W pixelstats-vend: type=1400 audit(0.0:182): avc: denied { read } for name="charge_stats" dev="sysfs" ino=73276 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0

05-31 15:02:02.215  1000 13169 13169 W pixelstats-vend: type=1400 audit(0.0:166): avc: denied { write } for name="charge_stats" dev="sysfs" ino=73483 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
05-31 15:02:02.215  1000 13169 13169 W pixelstats-vend: type=1400 audit(0.0:167): avc: denied { write } for name="charge_stats" dev="sysfs" ino=73483 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0

Bug: 176195960
Test: manually test, no avc: denied
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I0af03dd8099e246c5f94e8e8530d7b2bcf50ff95
2021-06-18 13:50:59 +00:00
Franklin He
c6169d7bec Merge "Add new sepolicy to allow Power Hint" into sc-dev am: 6a488b8a81 am: d743a1a37b am: 7881005a7d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14997453

Change-Id: I00f1e5d04221e938dd9027e59c5354331c1b4fa1
2021-06-18 09:17:45 +00:00
Franklin He
5b482859fb Merge "Add new sepolicy to allow Power Hint" into sc-dev am: 6a488b8a81 am: e2757f1a2f am: 69d006583f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14997453

Change-Id: Ieb9e2c81db6b35bbfce53517dc903b66835b2446
2021-06-18 09:17:13 +00:00
Franklin He
7881005a7d Merge "Add new sepolicy to allow Power Hint" into sc-dev am: 6a488b8a81 am: d743a1a37b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14997453

Change-Id: I937e3238dfa7658b59570b9a254124b81b342f66
2021-06-18 09:06:47 +00:00
Franklin He
69d006583f Merge "Add new sepolicy to allow Power Hint" into sc-dev am: 6a488b8a81 am: e2757f1a2f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14997453

Change-Id: I7ac8d183e3189a0e8b66d6331c90549344d091f8
2021-06-18 09:05:50 +00:00
Franklin He
e2757f1a2f Merge "Add new sepolicy to allow Power Hint" into sc-dev am: 6a488b8a81
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14997453

Change-Id: I4fa13dd60ca94612acad3e5c2cce085a3499b164
2021-06-18 08:51:48 +00:00
Franklin He
d743a1a37b Merge "Add new sepolicy to allow Power Hint" into sc-dev am: 6a488b8a81
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14997453

Change-Id: Ib88e7249a095c051820f47ebedbc5b902490e3ab
2021-06-18 08:50:56 +00:00
Franklin He
6a488b8a81 Merge "Add new sepolicy to allow Power Hint" into sc-dev 2021-06-18 08:37:19 +00:00
Krzysztof Kosiński
b331441977 Merge changes I18cbcf1b,I28a27741 into sc-dev am: c18265aaaa am: e154e0957c am: 13354ee040
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15020911

Change-Id: I696aec9bc648efbaa6532ac539351f5eb4837bab
2021-06-18 08:27:06 +00:00
Krzysztof Kosiński
d3b07bc35b Merge changes I18cbcf1b,I28a27741 into sc-dev am: c18265aaaa am: 2bdd262506 am: 543113672a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15020911

Change-Id: If9eb6fbdfb9b331da4b11b3f2531c1d09938ade0
2021-06-18 08:26:53 +00:00
Krzysztof Kosiński
13354ee040 Merge changes I18cbcf1b,I28a27741 into sc-dev am: c18265aaaa am: e154e0957c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15020911

Change-Id: Ic57e29a616eb4cd07094ea1fee7b0cef51657f9a
2021-06-18 08:18:26 +00:00
Krzysztof Kosiński
543113672a Merge changes I18cbcf1b,I28a27741 into sc-dev am: c18265aaaa am: 2bdd262506
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15020911

Change-Id: Ia5237cf578159d4eff38b518d64d4e9d0ab38f48
2021-06-18 08:14:49 +00:00
Krzysztof Kosiński
e154e0957c Merge changes I18cbcf1b,I28a27741 into sc-dev am: c18265aaaa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15020911

Change-Id: Ibdc7bbd8f3943e08f3202e15f8a6eff51dd65d7b
2021-06-18 08:05:55 +00:00
Krzysztof Kosiński
2bdd262506 Merge changes I18cbcf1b,I28a27741 into sc-dev am: c18265aaaa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15020911

Change-Id: If57e9679a73833f2b3b9061a0baf765bc1c4cc6c
2021-06-18 08:03:54 +00:00
Krzysztof Kosiński
c18265aaaa Merge changes I18cbcf1b,I28a27741 into sc-dev
* changes:
  Allow camera HAL to set vendor.camera properties
  Allow rlsservice/camera HAL to read /apex/apex-info-list.xml
2021-06-18 07:46:33 +00:00
Adam Shih
a9bf7f2251 organize confirmationui settings am: d77bc5a970 am: 5f89bc8b4b am: 6b19178428
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15021790

Change-Id: Ie1a65dc852bdfb0c86f4676efeab4f52337b9c5e
2021-06-18 07:33:08 +00:00
Adam Shih
ae6adabe5c organize confirmationui settings am: d77bc5a970 am: 5e7be474d4 am: d3b52eeb7a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15021790

Change-Id: Ic25824b498dd49e8e7c5bcdf2e38b082fd9815fd
2021-06-18 07:32:43 +00:00
Adam Shih
6b19178428 organize confirmationui settings am: d77bc5a970 am: 5f89bc8b4b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15021790

Change-Id: I4b0f27c6bc8914838ce3697cb40cfe9eb9b785f4
2021-06-18 07:18:53 +00:00
Adam Shih
d3b52eeb7a organize confirmationui settings am: d77bc5a970 am: 5e7be474d4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15021790

Change-Id: If42f6ebaf1bef4b71831702611ed2dc619771e51
2021-06-18 07:18:30 +00:00
Adam Shih
5e7be474d4 organize confirmationui settings am: d77bc5a970
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15021790

Change-Id: I759065d2cbd5c0e8a5fc7153273c3f1016137000
2021-06-18 06:57:36 +00:00
Thiébaud Weksteen
7e232446dc Fix access permissions for sysfs_aoc_reset
avc: denied { getattr } for comm="UsfHalWorker" path="/sys/devices/platform/19000000.aoc/reset" dev="sysfs" ino=69873 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_aoc_reset:s0 tclass=file permissive=0

Bug: 190712449
Bug: 191415949
Change-Id: Ibad4e75aa60b06129221086031289c855c561e96
2021-06-18 08:56:59 +02:00
Adam Shih
5f89bc8b4b organize confirmationui settings am: d77bc5a970
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15021790

Change-Id: I9a10630cf9dd31ad3dca60c40e1c175da28deab2
2021-06-18 06:56:41 +00:00
Yuriy Romanenko
6bf4661e8f Allow camera HAL to set vendor.camera properties
Bug: 188246923
Test: See topic
Change-Id: I18cbcf1b622ad7cd6d6bd1ea258b3d537db54412
2021-06-17 21:58:54 -07:00
Adam Shih
d77bc5a970 organize confirmationui settings
Bug: 190331547
Bug: 190331370
Test: build ROM and make sure file and sepolicy is still there
Change-Id: I4cabf9280ab5e21038bcb72615799b7ed0fb1670
2021-06-18 12:56:05 +08:00
Badhri Jagan Sridharan
fc52565ca7 Merge "Add file context for /dev/logbuffer_tcpm" into sc-dev am: d9876fd266 am: 04302e6743 am: 1963b6b258
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15019635

Change-Id: I59b063f80b8e6e2cd833ce2be8e5c43c0cfa95ff
2021-06-18 04:22:39 +00:00
Badhri Jagan Sridharan
2470f9b14f Merge "Add file context for /dev/logbuffer_tcpm" into sc-dev am: d9876fd266 am: 4632b7aa7d am: 1711a13dcc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15019635

Change-Id: I5a41a0444d16453c1fc37f144f56324aea2b6dee
2021-06-18 04:21:24 +00:00
Badhri Jagan Sridharan
1963b6b258 Merge "Add file context for /dev/logbuffer_tcpm" into sc-dev am: d9876fd266 am: 04302e6743
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15019635

Change-Id: I5bab0be22f017491d8b38770682e60b3dd1843d2
2021-06-18 04:10:47 +00:00
Badhri Jagan Sridharan
1711a13dcc Merge "Add file context for /dev/logbuffer_tcpm" into sc-dev am: d9876fd266 am: 4632b7aa7d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15019635

Change-Id: Iecd2b65a1da20773557741b1e6971b63d6e2f3ef
2021-06-18 04:08:42 +00:00
Badhri Jagan Sridharan
04302e6743 Merge "Add file context for /dev/logbuffer_tcpm" into sc-dev am: d9876fd266
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15019635

Change-Id: Ibd2e13f7069bec378076c40f187d9707c85f6227
2021-06-18 03:55:10 +00:00
Badhri Jagan Sridharan
4632b7aa7d Merge "Add file context for /dev/logbuffer_tcpm" into sc-dev am: d9876fd266
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15019635

Change-Id: Ie59d003bc6d1e74f1b37f440b9f27059156503f6
2021-06-18 03:53:45 +00:00
Badhri Jagan Sridharan
d9876fd266 Merge "Add file context for /dev/logbuffer_tcpm" into sc-dev 2021-06-18 03:38:35 +00:00
Badhri Jagan Sridharan
eb3881dbe7 Add file context for /dev/logbuffer_tcpm
/dev/logbuffer_tcpm gets accessed by dumpstate while bugreport
generation.

Bug: 189792358
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
Change-Id: Ica0f3557ad9c41844f8411b0bdf68d66fbba00e5
2021-06-17 16:11:28 -07:00
Craig Dooley
1ed37dd090 Merge "Allow hal_dumpstate to collect AoC statistics" into sc-dev am: 7fe9d053e8 am: dfdc21e14f am: 87afb33cf7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15000356

Change-Id: Id73c6dd2d3fe1a91bfe47c2854b6e4a1b5852b31
2021-06-17 17:21:51 +00:00
Craig Dooley
98266c0ec1 Merge "Allow hal_dumpstate to collect AoC statistics" into sc-dev am: 7fe9d053e8 am: 5f7548f746 am: 9bbd6fae7a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15000356

Change-Id: Ie81b7db4e32698c0f77fbb64e8441244ce130125
2021-06-17 17:21:22 +00:00
Craig Dooley
87afb33cf7 Merge "Allow hal_dumpstate to collect AoC statistics" into sc-dev am: 7fe9d053e8 am: dfdc21e14f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15000356

Change-Id: I5f83bd88db00833accbb504debbca17a2cdf77af
2021-06-17 17:06:58 +00:00
Craig Dooley
9bbd6fae7a Merge "Allow hal_dumpstate to collect AoC statistics" into sc-dev am: 7fe9d053e8 am: 5f7548f746
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15000356

Change-Id: I6a33091f024ceb928ac83a2db4ce393d433384f4
2021-06-17 17:06:42 +00:00
Craig Dooley
5f7548f746 Merge "Allow hal_dumpstate to collect AoC statistics" into sc-dev am: 7fe9d053e8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15000356

Change-Id: I41d370542b4be1b052ba863df7c28c265ccd036c
2021-06-17 16:49:11 +00:00
Craig Dooley
dfdc21e14f Merge "Allow hal_dumpstate to collect AoC statistics" into sc-dev am: 7fe9d053e8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15000356

Change-Id: I77b03e12df36cdf81bddd1d51d64ea50800d9102
2021-06-17 16:48:35 +00:00
Craig Dooley
7fe9d053e8 Merge "Allow hal_dumpstate to collect AoC statistics" into sc-dev 2021-06-17 16:32:38 +00:00
Franklin He
c53c03b843 Add new sepolicy to allow Power Hint
SELinux policy changes to work with https://googleplex-android-review.git.corp.google.com/c/device/google/gs101/+/14997393
This allows the NNAPI HAL to make IPC calls to the Power HAL in order to request power hints

Bug: 191241561
Test: Pushed new SEPolicy to device, verified no AVC problems when making IPC calls
Change-Id: I8209b3677bedf908901389c07304f4478d0431b0
2021-06-17 07:59:11 +00:00
Yuriy Romanenko
14786d9b40 Allow rlsservice/camera HAL to read /apex/apex-info-list.xml
To detect apex updates

Bug: 188246923
Test: See topic
Change-Id: I28a27741c1c285f8b49a2aa50bc0665143c1b7cb
2021-06-16 20:55:38 -07:00
TreeHugger Robot
2811c93f93 Merge "vendor_telephony_app.te: add selinuxfs:file" into sc-dev am: 502b653380 am: a62f3266fc am: 9f15636f26
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963703

Change-Id: Ic2a8be1ef255277c007f8a0baf6e64aa3525271a
2021-06-17 02:17:14 +00:00
TreeHugger Robot
dcbe117d3d Merge "vendor_telephony_app.te: add selinuxfs:file" into sc-dev am: 502b653380 am: c3d33dfd8f am: 00d192d4d7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963703

Change-Id: If6573aee8591f350cc9cc2b7f5c15844ad6def15
2021-06-17 02:16:38 +00:00
Yu-Chi Cheng
01fd8e7b91 Allowed EdgeTPU compilation services (tflite and nnapi) to access am: 643e5a7123 am: 067e314a35 am: 101842ba63
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15004632

Change-Id: I42f4d6b0fb3f8dc36c2e045344a1129cec318914
2021-06-17 02:16:04 +00:00
Yu-Chi Cheng
15b2f375e5 Allowed EdgeTPU compilation services (tflite and nnapi) to access am: 643e5a7123 am: 66aac3e71f am: a46c57c1b2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15004632

Change-Id: Ib2e924dbbfffb70d4adf25d0e70286e009ef7573
2021-06-17 02:12:41 +00:00
TreeHugger Robot
9f15636f26 Merge "vendor_telephony_app.te: add selinuxfs:file" into sc-dev am: 502b653380 am: a62f3266fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963703

Change-Id: Idd8908e2cc25bcdafcc932e09335ccc6bf037dc7
2021-06-17 02:05:07 +00:00
TreeHugger Robot
00d192d4d7 Merge "vendor_telephony_app.te: add selinuxfs:file" into sc-dev am: 502b653380 am: c3d33dfd8f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963703

Change-Id: I197b8a0d86df33a98610bbcbf6b7567a23319862
2021-06-17 02:04:42 +00:00
TreeHugger Robot
c3d33dfd8f Merge "vendor_telephony_app.te: add selinuxfs:file" into sc-dev am: 502b653380
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963703

Change-Id: Id126e3c4849db6a693458c67215c81e08c33c1a2
2021-06-17 01:44:20 +00:00
TreeHugger Robot
a62f3266fc Merge "vendor_telephony_app.te: add selinuxfs:file" into sc-dev am: 502b653380
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963703

Change-Id: Id09fec7d2642bf8e67bd9425240408bc40728164
2021-06-17 01:43:19 +00:00
Yu-Chi Cheng
101842ba63 Allowed EdgeTPU compilation services (tflite and nnapi) to access am: 643e5a7123 am: 067e314a35
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15004632

Change-Id: I887964815acf4b80d14c51bec8cf21978fe54ad7
2021-06-17 01:29:36 +00:00
Yu-Chi Cheng
a46c57c1b2 Allowed EdgeTPU compilation services (tflite and nnapi) to access am: 643e5a7123 am: 66aac3e71f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15004632

Change-Id: Ia5c85b77e9dc6a4458c1e2f79b590f556c95569d
2021-06-17 01:29:19 +00:00
TreeHugger Robot
502b653380 Merge "vendor_telephony_app.te: add selinuxfs:file" into sc-dev 2021-06-17 01:14:20 +00:00
Yu-Chi Cheng
66aac3e71f Allowed EdgeTPU compilation services (tflite and nnapi) to access am: 643e5a7123
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15004632

Change-Id: I6d0883541ad8f5796cc0ef7ae8ca7fb9827ce5f2
2021-06-17 01:09:50 +00:00
Yu-Chi Cheng
067e314a35 Allowed EdgeTPU compilation services (tflite and nnapi) to access am: 643e5a7123
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15004632

Change-Id: I1c51e2b2c1d0afb0f3660ccc30cf1db51888d644
2021-06-17 01:08:59 +00:00
Yu-Chi Cheng
643e5a7123 Allowed EdgeTPU compilation services (tflite and nnapi) to access
overcommit_memory info.

This is required as part of the compilation process, likely part of
the jemalloc which was added recently.

Bug: 190790251
Test: verified on local P21 device.
Change-Id: I4d90ea92afd7beaa4c4efa6ed509d703764932a1
2021-06-16 16:17:14 -07:00
Craig Dooley
3031b077a3 Allow hal_dumpstate to collect AoC statistics
Bug: 188114650
Signed-off-by: Craig Dooley <dooleyc@google.com>
Change-Id: Iba5525af2c651070b9a5f7769c0439ef320d666b
2021-06-16 17:18:55 +00:00
TreeHugger Robot
8f75fdbf63 Merge "Add sepolicy for hwcomposer to access lhbm sysfs" into sc-dev am: 11ebd6122e am: 632d66fb17 am: 939fb40006
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14234767

Change-Id: I2bb4b1410a0b1655db302aefb4b4a302ee4f8cfb
2021-06-16 14:34:08 +00:00
TreeHugger Robot
d1c5765b10 Merge "Add sepolicy for hwcomposer to access lhbm sysfs" into sc-dev am: 11ebd6122e am: 41e4576f08 am: fc7440d590
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14234767

Change-Id: I16aec25614bc10d7dffe69cf91c71c8f61c286a1
2021-06-16 14:34:02 +00:00
TreeHugger Robot
939fb40006 Merge "Add sepolicy for hwcomposer to access lhbm sysfs" into sc-dev am: 11ebd6122e am: 632d66fb17
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14234767

Change-Id: Iaa50e2fe622b0ddf8f4a04a4a84d152c90c4c58d
2021-06-16 14:24:41 +00:00
TreeHugger Robot
fc7440d590 Merge "Add sepolicy for hwcomposer to access lhbm sysfs" into sc-dev am: 11ebd6122e am: 41e4576f08
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14234767

Change-Id: Ibd1300cb652041eaf78338aeb386bb1b1587c403
2021-06-16 14:21:03 +00:00
TreeHugger Robot
632d66fb17 Merge "Add sepolicy for hwcomposer to access lhbm sysfs" into sc-dev am: 11ebd6122e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14234767

Change-Id: Id3396b6103d217649292ec4338e72d4a52fdf18e
2021-06-16 14:05:25 +00:00
TreeHugger Robot
41e4576f08 Merge "Add sepolicy for hwcomposer to access lhbm sysfs" into sc-dev am: 11ebd6122e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14234767

Change-Id: I68363c30b1d6c3668434d277c542ef31a0d2419b
2021-06-16 14:04:36 +00:00
TreeHugger Robot
11ebd6122e Merge "Add sepolicy for hwcomposer to access lhbm sysfs" into sc-dev 2021-06-16 13:51:37 +00:00
Adam Shih
d544417073 Merge "remove vcd from user ROM" into sc-dev am: 2cdde93f15 am: f6940b0869 am: 31bf6f0384
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14934449

Change-Id: I77323fb73b032acbe81426f9c3ad5f81a54a2223
2021-06-16 07:22:30 +00:00
Adam Shih
648e1c51a0 Merge "remove vcd from user ROM" into sc-dev am: 2cdde93f15 am: 56f9c7730f am: ee90e93ae7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14934449

Change-Id: I03aff5ea491e8900c3350b84c9e10dfd65517b71
2021-06-16 07:22:16 +00:00
Adam Shih
31bf6f0384 Merge "remove vcd from user ROM" into sc-dev am: 2cdde93f15 am: f6940b0869
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14934449

Change-Id: Ieffc9613783fbbfe0f77202cb5c9fbaea2e25cf7
2021-06-16 07:09:38 +00:00
Adam Shih
ee90e93ae7 Merge "remove vcd from user ROM" into sc-dev am: 2cdde93f15 am: 56f9c7730f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14934449

Change-Id: I1a765518eb1b37354ba9ea0d5cd75e913de448cd
2021-06-16 07:09:17 +00:00
Adam Shih
56f9c7730f Merge "remove vcd from user ROM" into sc-dev am: 2cdde93f15
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14934449

Change-Id: Idceee76892481baf7c7c6339f088f003a7e735f3
2021-06-16 06:54:18 +00:00
Adam Shih
f6940b0869 Merge "remove vcd from user ROM" into sc-dev am: 2cdde93f15
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14934449

Change-Id: Ieb5700288ed53a6d904fe01d790567b1d1704b55
2021-06-16 06:53:24 +00:00
TreeHugger Robot
5818413a4d Merge "Use label persist_ss_file" into sc-dev am: 6550281b13 am: a0e1a8e2e4 am: 12454301ca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14987305

Change-Id: Idc178ff7bf241fc50f50f932e7aadf0a389db23d
2021-06-16 06:45:56 +00:00
TreeHugger Robot
60382bf1d1 Merge "Use label persist_ss_file" into sc-dev am: 6550281b13 am: 0bf84fa3c0 am: 240f424f7f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14987305

Change-Id: Ief8ee49a442b52588dd4d263f16630041cf7fa42
2021-06-16 06:45:42 +00:00
Adam Shih
2cdde93f15 Merge "remove vcd from user ROM" into sc-dev 2021-06-16 06:40:28 +00:00
TreeHugger Robot
12454301ca Merge "Use label persist_ss_file" into sc-dev am: 6550281b13 am: a0e1a8e2e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14987305

Change-Id: Ibae22f2f82d9535fb30162fa85905599c04bac59
2021-06-16 06:33:37 +00:00
TreeHugger Robot
240f424f7f Merge "Use label persist_ss_file" into sc-dev am: 6550281b13 am: 0bf84fa3c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14987305

Change-Id: I14fa68f9b1f25af6f98badc583505fa4c39d3755
2021-06-16 06:33:18 +00:00
TreeHugger Robot
0bf84fa3c0 Merge "Use label persist_ss_file" into sc-dev am: 6550281b13
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14987305

Change-Id: I4336b65c246f69138f6534fc76ea12ead51f786e
2021-06-16 06:04:59 +00:00
TreeHugger Robot
a0e1a8e2e4 Merge "Use label persist_ss_file" into sc-dev am: 6550281b13
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14987305

Change-Id: I7cfd671dd52f5422b317a6cd2f12847f65ee9a13
2021-06-16 06:04:10 +00:00
TreeHugger Robot
6550281b13 Merge "Use label persist_ss_file" into sc-dev 2021-06-16 05:45:04 +00:00
SHUCHI LILU
ef2e448dad Merge "Update avc error on ROM 7457955" into sc-dev am: 5624d07640 am: e79f75aa16 am: 537f9f01a7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980573

Change-Id: Iabaf0d3a91c2b14309fe3f55074c3ef4a6dc4219
2021-06-16 04:39:14 +00:00
SHUCHI LILU
537f9f01a7 Merge "Update avc error on ROM 7457955" into sc-dev am: 5624d07640 am: e79f75aa16
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980573

Change-Id: I052084f819b62d04b9c1f307f337497910163f5b
2021-06-16 04:18:20 +00:00
SHUCHI LILU
e79f75aa16 Merge "Update avc error on ROM 7457955" into sc-dev am: 5624d07640
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980573

Change-Id: I754282c66d68a873edd9b89919890d293bf90084
2021-06-16 04:01:22 +00:00
SHUCHI LILU
f360be9acd Merge "Update avc error on ROM 7457955" into sc-dev am: 5624d07640 am: 994d1f49da am: a97f039001
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980573

Change-Id: Iec26a1cc851e319ee524fbfe27a89f246f643be7
2021-06-16 02:45:56 +00:00
SHUCHI LILU
a97f039001 Merge "Update avc error on ROM 7457955" into sc-dev am: 5624d07640 am: 994d1f49da
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980573

Change-Id: I3f55acc9eebab648af2f454f2835df7c6d4aab2f
2021-06-16 02:07:02 +00:00
SHUCHI LILU
994d1f49da Merge "Update avc error on ROM 7457955" into sc-dev am: 5624d07640
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980573

Change-Id: If63ce2fb708833204108e529a8b9962cceff5d4c
2021-06-16 01:48:37 +00:00
SHUCHI LILU
5624d07640 Merge "Update avc error on ROM 7457955" into sc-dev 2021-06-16 01:25:10 +00:00
Wenhao Wang
dc0cdc36f3 Use label persist_ss_file
The label "persist_ss_file" was created for "/mnt/vendor/persist/ss(/.*)?".
But we erroneously didn't assign the label to the path.
This patch fixes the error.

Bug: 173971240
Bug: 173032298
Test: Trusty storage tests
Change-Id: I8e891ebd90ae47ab8a4aad1c2b0a3bbb734174d8
2021-06-15 17:24:01 -07:00
David Anderson
dfc3d86927 Fix denial when flashing vendor_boot in fastbootd.
This mirrors the same sepolicy line in previous Pixel devices.

Bug: 189493387
Test: fastboot flash vendor_boot on r4
Change-Id: Ie15c8e6e5c01b249e1e5e244666c461253279f0b
2021-06-15 15:34:55 -07:00
Armelle Laine
f317bd54ac Merge "add se-policy to /dev/trusty-log0 so it can be accessed by dumpstate hal" into sc-dev am: 10e8126e2d am: 6e23660e3d am: 2898603355
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14961880

Change-Id: Ib4839a7915d05d95b56171c7b07b3b21eb6500b5
2021-06-15 17:46:52 +00:00
Armelle Laine
2898603355 Merge "add se-policy to /dev/trusty-log0 so it can be accessed by dumpstate hal" into sc-dev am: 10e8126e2d am: 6e23660e3d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14961880

Change-Id: Ib37826f8d2e15f9f1e6c4429dcd9c270f7c1dea3
2021-06-15 17:20:52 +00:00
Armelle Laine
45fbb8c8fc Merge "add se-policy to /dev/trusty-log0 so it can be accessed by dumpstate hal" into sc-dev am: 10e8126e2d am: 4847b5d1f4 am: 3c61f8891a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14961880

Change-Id: Ic2f96c3fc589a7067a7daa07a06c3e5c5a0b8431
2021-06-15 15:30:20 +00:00
sukiliu
673b8f1014 Update avc error on ROM 7457955
Bug: 191132545
Bug: 191133059
Test: PtsSELinuxTestCases
Change-Id: I6a8e7924819734e38c2b6f761eb738f3e4d21c32
2021-06-15 23:23:43 +08:00
Armelle Laine
3c61f8891a Merge "add se-policy to /dev/trusty-log0 so it can be accessed by dumpstate hal" into sc-dev am: 10e8126e2d am: 4847b5d1f4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14961880

Change-Id: I2c3d321d5c1c964c60b0dda5b2a9a204df090890
2021-06-15 15:13:25 +00:00
Armelle Laine
4847b5d1f4 Merge "add se-policy to /dev/trusty-log0 so it can be accessed by dumpstate hal" into sc-dev am: 10e8126e2d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14961880

Change-Id: I9c29b33df803b368a71d68ce59e0f16cf3a2b66c
2021-06-15 14:52:27 +00:00
Armelle Laine
6e23660e3d Merge "add se-policy to /dev/trusty-log0 so it can be accessed by dumpstate hal" into sc-dev am: 10e8126e2d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14961880

Change-Id: Icc35b74bb0ac43562583282d2d39dc1eb9646642
2021-06-15 14:51:51 +00:00
Armelle Laine
10e8126e2d Merge "add se-policy to /dev/trusty-log0 so it can be accessed by dumpstate hal" into sc-dev 2021-06-15 14:35:43 +00:00
linpeter
81aaf6cda3 Add sepolicy for hwcomposer to access lhbm sysfs
avc: denied { read write } for comm="android.hardwar" name="local_hbm_mode" dev="sysfs" ino=70189 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:sysfs_lhbm:s0 tclass=file permissive=0

Bug: 190563896
test: check avc denied
Change-Id: I0f6abc1244d24781ff3318908b524a889490993d
2021-06-15 19:37:14 +08:00
Jiyoung
02ada4f463 vendor_telephony_app.te: add selinuxfs:file
- add selinuxfs:file for AP TCP dump
- allow userdebug or eng

Bug: 188422036

Signed-off-by: Jiyoung <ji_young.bae@samsung.com>
Change-Id: I9502f9f7320ca4ee298b38e40da0ccf11adfba7f
2021-06-15 15:06:39 +08:00
sukiliu
974ac04768 Move oriole bug map to whitechapel folder am: 90ae782e26 am: c8a74f7fce am: b220a0e873
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963698

Change-Id: I85f7e77e6937117a11f5a7e2ba71e35eb5741152
2021-06-15 06:43:25 +00:00
sukiliu
d1fe1b5c53 Move oriole bug map to whitechapel folder am: 90ae782e26 am: 8657bfaf73 am: e18a7658e9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963698

Change-Id: Idc1ae5052f021757094d0304ee791c5841134bc2
2021-06-15 06:43:18 +00:00
sukiliu
b220a0e873 Move oriole bug map to whitechapel folder am: 90ae782e26 am: c8a74f7fce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963698

Change-Id: I5faa78c559f4a6ddc0d7b92296d79b653b1a5e97
2021-06-15 06:30:33 +00:00
sukiliu
e18a7658e9 Move oriole bug map to whitechapel folder am: 90ae782e26 am: 8657bfaf73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963698

Change-Id: I7f8298eeb6d2988aa32f8cc4789f900ed57c04fb
2021-06-15 06:30:04 +00:00
sukiliu
8657bfaf73 Move oriole bug map to whitechapel folder am: 90ae782e26
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963698

Change-Id: I697e2270c71c1f5ce48318e9a3498ef05d954c82
2021-06-15 06:17:36 +00:00
sukiliu
c8a74f7fce Move oriole bug map to whitechapel folder am: 90ae782e26
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14963698

Change-Id: I20a6b1f291236b26224ca0fe94196b2ca91bd548
2021-06-15 06:16:50 +00:00
sukiliu
90ae782e26 Move oriole bug map to whitechapel folder
Bug: 190563896
Bug: 190671898
Test: PtsSELinuxTestCases
Change-Id: I15f1a6d2ebab9c5794a79abccf3530eb4bfc8307
2021-06-15 04:39:50 +00:00
TreeHugger Robot
14e0fab271 Merge "remove obsolete entries" into sc-dev am: 441bae6d1a am: d8aa5c7972 am: 8314b7f628
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14934444

Change-Id: If85b7eec532292b3fc903d916c4eed9a78ad90eb
2021-06-15 02:21:44 +00:00
TreeHugger Robot
f51643c9fc Merge "remove obsolete entries" into sc-dev am: 441bae6d1a am: ebcba2c62d am: 67bd98cff1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14934444

Change-Id: I6bf028823b92899a70875850d2d3ce80376607da
2021-06-15 02:21:01 +00:00
TreeHugger Robot
8314b7f628 Merge "remove obsolete entries" into sc-dev am: 441bae6d1a am: d8aa5c7972
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14934444

Change-Id: I808fa351bb12654bbaa66248d9f10e6ce62f16e8
2021-06-15 02:08:19 +00:00
TreeHugger Robot
67bd98cff1 Merge "remove obsolete entries" into sc-dev am: 441bae6d1a am: ebcba2c62d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14934444

Change-Id: Iec8b071a423c5243b9c1d8322ebc9e5698b48f88
2021-06-15 02:08:07 +00:00
TreeHugger Robot
ebcba2c62d Merge "remove obsolete entries" into sc-dev am: 441bae6d1a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14934444

Change-Id: I4d47c91c175d8a10e0cec3e974e684f3c44b6c63
2021-06-15 01:54:55 +00:00
TreeHugger Robot
d8aa5c7972 Merge "remove obsolete entries" into sc-dev am: 441bae6d1a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14934444

Change-Id: I31f6c2733c5cb977a8625ba473d506bfa50dbcc9
2021-06-15 01:54:09 +00:00
TreeHugger Robot
441bae6d1a Merge "remove obsolete entries" into sc-dev 2021-06-15 01:39:02 +00:00
Rick Yiu
57cccedd8b Merge "gs101-sepolicy: Fix avc denial for permissioncontroller_app" into sc-dev am: aa315a6082 am: 6976531ebe am: b7d809111c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14943962

Change-Id: I968771288ea94d176800d3301ddfdb0f508cb768
2021-06-15 01:11:51 +00:00
Rick Yiu
62a23399e3 Merge "gs101-sepolicy: Fix avc denial for permissioncontroller_app" into sc-dev am: aa315a6082 am: 25ce780b9c am: cc502abf3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14943962

Change-Id: I7bcbe9db7374589c95acbdeafed1f0d701ef6ecd
2021-06-15 01:11:39 +00:00
Rick Yiu
b7d809111c Merge "gs101-sepolicy: Fix avc denial for permissioncontroller_app" into sc-dev am: aa315a6082 am: 6976531ebe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14943962

Change-Id: I42bcfc55c789fdecf0a92dcfd0b6d07e9583765c
2021-06-15 00:58:01 +00:00
Rick Yiu
cc502abf3a Merge "gs101-sepolicy: Fix avc denial for permissioncontroller_app" into sc-dev am: aa315a6082 am: 25ce780b9c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14943962

Change-Id: Id22713f2f247609bbc304bb36ae85616598a9d64
2021-06-15 00:57:39 +00:00
Rick Yiu
25ce780b9c Merge "gs101-sepolicy: Fix avc denial for permissioncontroller_app" into sc-dev am: aa315a6082
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14943962

Change-Id: If015ce9946b16186eb8ed75c63ac8cfadde14266
2021-06-15 00:41:32 +00:00
Rick Yiu
6976531ebe Merge "gs101-sepolicy: Fix avc denial for permissioncontroller_app" into sc-dev am: aa315a6082
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14943962

Change-Id: Ie3aebe5d9b8e6bae0f8e0df65f0bd6a5b8d0d178
2021-06-15 00:40:39 +00:00
Rick Yiu
aa315a6082 Merge "gs101-sepolicy: Fix avc denial for permissioncontroller_app" into sc-dev 2021-06-15 00:28:52 +00:00
Armelle Laine
5bb07db1de add se-policy to /dev/trusty-log0 so it can be accessed by dumpstate hal
reuse logbuffer_device group as dumpstate hal already has read perms
on this group.

Bug: 188285071
Test: adb bugreport to include a trusty section in dumpstate_board.txt
Change-Id: I623a5d450bdbe2ceef4fe460bf31bfe740d847b2
2021-06-13 23:59:37 +00:00
Richard Hsu
7d405598c1 Merge "[BugFix] SEPolicy for libedgetpu_darwinn2.so logging to stats service" into sc-dev am: 753e62f39c am: 4eb4b8c73c am: db24463bc5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14555068

Change-Id: Ie3ad3239e8e24ddf34f1f24285bea923b032900d
2021-06-13 06:57:03 +00:00
Richard Hsu
be99d7ed77 Merge "[BugFix] SEPolicy for libedgetpu_darwinn2.so logging to stats service" into sc-dev am: 753e62f39c am: 64d8da84f2 am: 63e64193ea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14555068

Change-Id: Ie26a3d35465e1f6f7e1875a8a46194d4bf4ad572
2021-06-13 06:56:51 +00:00
Richard Hsu
db24463bc5 Merge "[BugFix] SEPolicy for libedgetpu_darwinn2.so logging to stats service" into sc-dev am: 753e62f39c am: 4eb4b8c73c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14555068

Change-Id: I9e4fc6b9d1f7fb63e51b82c0aca4fd78340adfbe
2021-06-13 06:40:41 +00:00
Richard Hsu
63e64193ea Merge "[BugFix] SEPolicy for libedgetpu_darwinn2.so logging to stats service" into sc-dev am: 753e62f39c am: 64d8da84f2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14555068

Change-Id: I064464c0e3dbdb8efebb3032dccfd70cb13177b1
2021-06-13 06:40:20 +00:00
Richard Hsu
64d8da84f2 Merge "[BugFix] SEPolicy for libedgetpu_darwinn2.so logging to stats service" into sc-dev am: 753e62f39c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14555068

Change-Id: Ie75eea82a16cd39cc56a015c96896a4fcd398138
2021-06-13 06:24:40 +00:00
Richard Hsu
4eb4b8c73c Merge "[BugFix] SEPolicy for libedgetpu_darwinn2.so logging to stats service" into sc-dev am: 753e62f39c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14555068

Change-Id: If0cd3732513d21503d31cd8f9f10756305c33c5c
2021-06-13 06:23:48 +00:00
Richard Hsu
753e62f39c Merge "[BugFix] SEPolicy for libedgetpu_darwinn2.so logging to stats service" into sc-dev 2021-06-13 06:11:41 +00:00
Jayachandran Chinnakkannu
b2cb30fdde Merge "Allow telephony to access the file descriptor of the priv_apps tcp_socket" into sc-dev am: 1c130a7e1d am: 26bcc88a9b am: c6218c4afe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14950196

Change-Id: I8d52fd72511f2e0c7abbdc78b71c1509fecba023
2021-06-12 18:00:01 +00:00
Jayachandran Chinnakkannu
1a8c6c973d Merge "Allow telephony to access the file descriptor of the priv_apps tcp_socket" into sc-dev am: 1c130a7e1d am: 40c2dd6b2e am: 8d0bcc93e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14950196

Change-Id: I5981327ed69c12b9270f1cac988c85b2d93d6609
2021-06-12 17:59:28 +00:00
Jayachandran Chinnakkannu
c6218c4afe Merge "Allow telephony to access the file descriptor of the priv_apps tcp_socket" into sc-dev am: 1c130a7e1d am: 26bcc88a9b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14950196

Change-Id: I05a6717e8e1368e248cec936ebaa0a8edf7dd1b3
2021-06-12 17:45:19 +00:00
Jayachandran Chinnakkannu
8d0bcc93e1 Merge "Allow telephony to access the file descriptor of the priv_apps tcp_socket" into sc-dev am: 1c130a7e1d am: 40c2dd6b2e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14950196

Change-Id: Ibdde5f144fff98c1bd52b08e57f2bb0909b45550
2021-06-12 17:44:58 +00:00
Jayachandran Chinnakkannu
40c2dd6b2e Merge "Allow telephony to access the file descriptor of the priv_apps tcp_socket" into sc-dev am: 1c130a7e1d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14950196

Change-Id: Ic723bb2542a94bb3c86d315a89f415eb962f6c39
2021-06-12 17:31:26 +00:00
Jayachandran Chinnakkannu
26bcc88a9b Merge "Allow telephony to access the file descriptor of the priv_apps tcp_socket" into sc-dev am: 1c130a7e1d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14950196

Change-Id: Id9b9f74bf5caf34af4aad329e0ea3b4ee544146f
2021-06-12 17:30:37 +00:00
Jayachandran Chinnakkannu
1c130a7e1d Merge "Allow telephony to access the file descriptor of the priv_apps tcp_socket" into sc-dev 2021-06-12 17:19:33 +00:00
TreeHugger Robot
6d84ffcd26 Merge "qllow priv-app to access Pixel power HAL extension." into sc-dev am: 694694857a am: c5d2eaeccb am: 7bddc387cb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692156

Change-Id: I4ac581e076d29dc6107c76969b8d155942450f54
2021-06-12 11:01:11 +00:00
Kris Chen
4e3de80e9e Add sepolicy to let fingerprint access power service am: 7db400b679 am: 5991ab5ba7 am: 293194f612
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14665430

Change-Id: Ib0068381e4d66ed92bea00999b71d5aed19807c9
2021-06-12 10:57:13 +00:00
TreeHugger Robot
922f9fe9f4 Merge "qllow priv-app to access Pixel power HAL extension." into sc-dev am: 694694857a am: a45a1ffc4d am: 35d0c523a6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692156

Change-Id: I7ec41dd15653e1692873ffa81b9a1559365077ce
2021-06-12 10:52:58 +00:00
Kris Chen
65d63122cd Add sepolicy to let fingerprint access power service am: 7db400b679 am: 89a68b0fac am: 1c6b824cd7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14665430

Change-Id: Ib89db503fb1b0939c8bd937c9656a9f283efba16
2021-06-12 10:52:48 +00:00
TreeHugger Robot
7bddc387cb Merge "qllow priv-app to access Pixel power HAL extension." into sc-dev am: 694694857a am: c5d2eaeccb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692156

Change-Id: I538a39764babaedab979782ca23cf8ad7531004b
2021-06-12 10:41:47 +00:00
Kris Chen
293194f612 Add sepolicy to let fingerprint access power service am: 7db400b679 am: 5991ab5ba7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14665430

Change-Id: I24c9c4dbc29c21e382f76e47c28c57715b1e309f
2021-06-12 10:41:38 +00:00
TreeHugger Robot
35d0c523a6 Merge "qllow priv-app to access Pixel power HAL extension." into sc-dev am: 694694857a am: a45a1ffc4d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692156

Change-Id: I034ae5e1c48a494405aaf915419af0c16cb628c2
2021-06-12 10:41:11 +00:00
Kris Chen
1c6b824cd7 Add sepolicy to let fingerprint access power service am: 7db400b679 am: 89a68b0fac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14665430

Change-Id: I78e827879c32515678288eee944b0b9f5e66c8ad
2021-06-12 10:41:01 +00:00
TreeHugger Robot
a45a1ffc4d Merge "qllow priv-app to access Pixel power HAL extension." into sc-dev am: 694694857a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692156

Change-Id: I2bc53103a317ac5e19642fb7bb8fe0586aab81dd
2021-06-12 10:28:06 +00:00
Kris Chen
89a68b0fac Add sepolicy to let fingerprint access power service am: 7db400b679
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14665430

Change-Id: Ieb52fb6f5ee68d0155f9acacda9853757fed4200
2021-06-12 10:27:55 +00:00
TreeHugger Robot
c5d2eaeccb Merge "qllow priv-app to access Pixel power HAL extension." into sc-dev am: 694694857a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692156

Change-Id: Idc40fc74a562912a8ee35b8db966c88421778949
2021-06-12 10:27:15 +00:00
Kris Chen
5991ab5ba7 Add sepolicy to let fingerprint access power service am: 7db400b679
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14665430

Change-Id: Id2d4cb0874a39145561fc6deb825a25ec40162d8
2021-06-12 10:27:04 +00:00
TreeHugger Robot
694694857a Merge "qllow priv-app to access Pixel power HAL extension." into sc-dev 2021-06-12 10:22:24 +00:00
Jayachandran C
5492a92a39 Allow telephony to access the file descriptor of the priv_apps tcp_socket
The priv_apps could register for QOS notifications for its tcp_socket.
This change allows telephony to access the file descriptor for the
tcp_socket so it could double check the source and destination address
of the socket when the QOS indication is received from modem.

This addresses the following SE policy denial
auditd  : type=1400 audit(0.0:219): avc: denied { read write } for
comm="ConnectivitySer" path="socket:[98511]" dev="sockfs" ino=98511
scontext=u:r:radio:s0 tcontext=u:r:priv_app:s0:c512,c768 tclass=tcp_socket
permissive=0

Bug: 190580419
Test: Manual
Change-Id: I35d4e1fb06242eb5fcbcb36439a55c11166b149b
2021-06-12 05:18:15 +00:00
Rick Yiu
ad47112c59 gs101-sepolicy: Fix avc denial for permissioncontroller_app
Bug: 190671898
Test: build pass
Change-Id: I3ccfe958892cd27ebbcacc651847d4277d39855b
2021-06-11 18:41:10 +08:00
Adam Shih
d0bb828434 remove vcd from user ROM
Bug: 190331325
Test: build all ROM variants with only user ROM without vcd
Change-Id: If9dc555ee8582b605ccdf9d60c3a9c89cd6634d8
2021-06-11 11:46:22 +08:00
Richard Hsu
8c979899cc [BugFix] SEPolicy for libedgetpu_darwinn2.so logging to stats service
In order to access the darwinn metrics library from the google camera
app (product partition), we need to create an SELinux exception for
the related shared library (in vendor) it uses. This CL adds the same_process_hal_file tag to allow this exception.

Bug: 190661153, 151063663

Test: App can load the .so and not crash after this change.
Before: No permission to access namespace.
(https://paste.googleplex.com/6602755121610752)
After: GCA doesn't crash on load.

Change-Id: I8671732184bbbe283c94d1acd3bb1ff397fe651c
2021-06-10 19:36:35 -07:00
Adam Shih
d00aafac75 remove obsolete entries
Bug: 190672147
Bug: 173969091
Bug: 171760921
Bug: 178331773
Bug: 178752616
Bug: 188752940
Bug: 184005231
Bug: 182086688
Bug: 177176899
Bug: 182953825
Bug: 176528557
Bug: 183935382
Test: boot and do bugreport with no relevant error showed up
Change-Id: I869db698e96d2d6cfd533b7fd24c8c88d39fd0eb
2021-06-11 10:35:59 +08:00
Denny cy Lee
25373353a7 Sepolicy: Remove permission for fuel gauge
Bug: 189811224
Test: manually, read success in enforcing mode
Change-Id: Ie56179980a9946010fb25683e3819cddbfb93cfb
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-11 09:39:53 +08:00
Kris Chen
7db400b679 Add sepolicy to let fingerprint access power service
Fix the following avc denial:
SELinux : avc:  denied  { find } for pid=1055 uid=1000 name=android.hardware.power.IPower/default scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:hal_power_service:s0 tclass=service_manager permissive=0

Bug: 185893477
Test: Observe from systrace that the CPU frequency is boosted when
      running fingerprint algorithm.
Change-Id: I245058b912ec2af3555154934dbe722b445181a9
2021-06-10 21:31:06 +00:00
Sung-fang Tsai
985aa698c7 qllow priv-app to access Pixel power HAL extension.
SELinux issues to solve:

native  : aion.cc:780 Error loading lib_aion_buffer.so dlopen failed: library "pixel-power-ext-V1-ndk_platform.so" not found: needed by /vendor/lib64/lib_aion_buffer.so in namespace sphal

05-23 10:11:32.055   420   420 E SELinux : avc:  denied  { find } for pid=6630 uid=10089 name=android.hardware.power.IPower/default scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:hal_power_service:s0 tclass=service_manager permissive=0

Bug: 187373665
Test: Passed, procedure listed in b/187373665#comment8 with forrest.
Change-Id: Ice7c69bca4a029a61ca1ccb7087ea01948ae5f24
2021-06-10 17:56:17 +00:00
SHUCHI LILU
f9e7e10fec Merge "Update avc error on ROM 7444346" into sc-dev am: 61843906c0 am: 7d1fa8b9ce am: 4e81985347
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928573

Change-Id: I4ef2e8abfbc7b3e0eb42b66599584249497fc6bf
2021-06-10 11:50:27 +00:00
SHUCHI LILU
cdbd079b96 Merge "Update avc error on ROM 7444346" into sc-dev am: 61843906c0 am: f2bc0d7bd7 am: b7394346cd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928573

Change-Id: Iebe2bd2b8902ac035babe572b31c927477429ac5
2021-06-10 11:50:20 +00:00
SHUCHI LILU
4e81985347 Merge "Update avc error on ROM 7444346" into sc-dev am: 61843906c0 am: 7d1fa8b9ce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928573

Change-Id: I2f7a9744c830156ce4b1ff8c9ad7c3c68e6d953e
2021-06-10 11:34:14 +00:00
SHUCHI LILU
b7394346cd Merge "Update avc error on ROM 7444346" into sc-dev am: 61843906c0 am: f2bc0d7bd7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928573

Change-Id: I7eca5fe2191e8b5b127d4efdc5594fb1eb53320a
2021-06-10 11:33:23 +00:00
SHUCHI LILU
f2bc0d7bd7 Merge "Update avc error on ROM 7444346" into sc-dev am: 61843906c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928573

Change-Id: I4ea6afe2de9a03eca793775f14ea24b8678931cf
2021-06-10 11:22:24 +00:00
SHUCHI LILU
7d1fa8b9ce Merge "Update avc error on ROM 7444346" into sc-dev am: 61843906c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928573

Change-Id: I4cfc4f0fb97b796a3a118859ac30399ab15a2446
2021-06-10 11:21:07 +00:00
SHUCHI LILU
61843906c0 Merge "Update avc error on ROM 7444346" into sc-dev 2021-06-10 11:06:35 +00:00
TreeHugger Robot
0a3828333f Merge "gs101-sepolicy: Fix avc denial for sysfs_vendor_sched" into sc-dev am: a501b656dd am: fadd9f9dd2 am: 891656c7a7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911637

Change-Id: Ic61dc65ea25f13648edfa9e6d8e0b3d638ef3f6e
2021-06-10 08:12:21 +00:00
TreeHugger Robot
1afe6a4ec1 Merge "gs101-sepolicy: Fix avc denial for sysfs_vendor_sched" into sc-dev am: a501b656dd am: e7d53d61b0 am: a086a78e86
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911637

Change-Id: I4159a90f2ca49abe353ab3daf7628cb386642aa0
2021-06-10 08:12:07 +00:00
TreeHugger Robot
891656c7a7 Merge "gs101-sepolicy: Fix avc denial for sysfs_vendor_sched" into sc-dev am: a501b656dd am: fadd9f9dd2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911637

Change-Id: If051249b25d3fd5dc96492a66dd274dc7c0e8446
2021-06-10 07:57:13 +00:00
TreeHugger Robot
a086a78e86 Merge "gs101-sepolicy: Fix avc denial for sysfs_vendor_sched" into sc-dev am: a501b656dd am: e7d53d61b0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911637

Change-Id: Ie9be7a6977b11a8f8e8330fe7f59404b01779e0f
2021-06-10 07:56:32 +00:00
TreeHugger Robot
e7d53d61b0 Merge "gs101-sepolicy: Fix avc denial for sysfs_vendor_sched" into sc-dev am: a501b656dd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911637

Change-Id: I64965eae7d9d39ed1495bb87b51358a55c894301
2021-06-10 07:39:05 +00:00
TreeHugger Robot
fadd9f9dd2 Merge "gs101-sepolicy: Fix avc denial for sysfs_vendor_sched" into sc-dev am: a501b656dd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911637

Change-Id: I65292901788f5e98123e550dc676be9b66f958b3
2021-06-10 07:37:41 +00:00
TreeHugger Robot
a501b656dd Merge "gs101-sepolicy: Fix avc denial for sysfs_vendor_sched" into sc-dev 2021-06-10 07:20:58 +00:00
sukiliu
d27e574f3e Update avc error on ROM 7444346
Bug: 190672147
Bug: 190671898
Test: Test: PtsSELinuxTestCases
Change-Id: Ie9400df24f30474915d757b61ddb1c3fb77903c5
2021-06-10 15:16:37 +08:00
Adam Shih
80c0cb9b27 Merge "reorganize trusty_metricsd settings" into sc-dev am: a81732dd6f am: 70121504b6 am: c36fe574f4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911639

Change-Id: I8fada5f930c907708fee2fc19435b832f8fd8d2c
2021-06-10 06:41:04 +00:00
Adam Shih
c09a0da122 Merge "reorganize trusty_metricsd settings" into sc-dev am: a81732dd6f am: 922b7f6057 am: c7a6a9f592
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911639

Change-Id: Ic22fe011000dc4804b7764d22c0be3ed8810aede
2021-06-10 06:40:51 +00:00
Adam Shih
c36fe574f4 Merge "reorganize trusty_metricsd settings" into sc-dev am: a81732dd6f am: 70121504b6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911639

Change-Id: I935fdf9107adb939dd61cc21bd1af4324fa3d907
2021-06-10 06:25:10 +00:00
Adam Shih
c7a6a9f592 Merge "reorganize trusty_metricsd settings" into sc-dev am: a81732dd6f am: 922b7f6057
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911639

Change-Id: Idb0cabcf72b3ab36cd01debf573a7d580e130418
2021-06-10 06:24:28 +00:00
Adam Shih
922b7f6057 Merge "reorganize trusty_metricsd settings" into sc-dev am: a81732dd6f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911639

Change-Id: I668f8e93d4edf03746aea4cf76155af17df5fb50
2021-06-10 06:13:24 +00:00
Adam Shih
70121504b6 Merge "reorganize trusty_metricsd settings" into sc-dev am: a81732dd6f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911639

Change-Id: Idc5ee712a86aa778f62abb93d6b6ff4cdcefec4c
2021-06-10 06:12:07 +00:00
Adam Shih
a81732dd6f Merge "reorganize trusty_metricsd settings" into sc-dev 2021-06-10 05:52:40 +00:00
TreeHugger Robot
28029ee0b7 Merge "update wakeup node" into sc-dev am: d3b0256025 am: a34e5d929b am: e967755371
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928571

Change-Id: Ia3c92dee2977db19fa560da278693faf9bc64d60
2021-06-10 04:41:15 +00:00
TreeHugger Robot
138e2962c0 Merge "update wakeup node" into sc-dev am: d3b0256025 am: 15c7fdc5bb am: 55540c1dd5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928571

Change-Id: If97f519f75464aad0f18c97602dcef5424f96bc8
2021-06-10 04:40:50 +00:00
TreeHugger Robot
e967755371 Merge "update wakeup node" into sc-dev am: d3b0256025 am: a34e5d929b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928571

Change-Id: I4369bc59ada2cf68681469d5a967238ff35951e9
2021-06-10 04:30:21 +00:00
TreeHugger Robot
55540c1dd5 Merge "update wakeup node" into sc-dev am: d3b0256025 am: 15c7fdc5bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928571

Change-Id: I85395aa73d49d6211f72b7943276a3b76cc7b14a
2021-06-10 04:29:27 +00:00
TreeHugger Robot
15c7fdc5bb Merge "update wakeup node" into sc-dev am: d3b0256025
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928571

Change-Id: I787229985b0214fff17ea2feae9b4788e9a35d95
2021-06-10 04:12:58 +00:00
TreeHugger Robot
a34e5d929b Merge "update wakeup node" into sc-dev am: d3b0256025
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928571

Change-Id: I5881e148d45f8a1361e28a85a296b774b5ca1269
2021-06-10 04:11:32 +00:00
Rick Yiu
797b646234 gs101-sepolicy: Fix avc denial for sysfs_vendor_sched
Fix mediaprovider_app and bluetooth

Bug: 190563839
Bug: 190563916
Test: build pass
Change-Id: I477325ee812d1362db4d5005e999cba989a44216
2021-06-10 04:10:24 +00:00
TreeHugger Robot
d3b0256025 Merge "update wakeup node" into sc-dev 2021-06-10 03:56:50 +00:00
Adam Shih
fcb7ae0daa Merge "organize EdgeTPU modules and sepolicy" into sc-dev am: 22fae537b5 am: 6f1be4dcf7 am: 7907b8eb44
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911633

Change-Id: I6f4332ce1fa8d96cd2b9b17fd82dc6d48bcd740d
2021-06-10 03:46:14 +00:00
Adam Shih
5d97c9085c Merge "organize EdgeTPU modules and sepolicy" into sc-dev am: 22fae537b5 am: 8879662f92 am: e53941fb89
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911633

Change-Id: Id41d7a7567fcc6e66a0e855d775b40e5614e0d7b
2021-06-10 03:46:05 +00:00
Adam Shih
7907b8eb44 Merge "organize EdgeTPU modules and sepolicy" into sc-dev am: 22fae537b5 am: 6f1be4dcf7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911633

Change-Id: I1749b2c7512067fdcd31e4b9fb66fd47ed449b68
2021-06-10 03:29:20 +00:00
Adam Shih
e53941fb89 Merge "organize EdgeTPU modules and sepolicy" into sc-dev am: 22fae537b5 am: 8879662f92
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911633

Change-Id: I8a7ba2a9bf58b81631cc2e699180147e9515f9dd
2021-06-10 03:24:10 +00:00
Adam Shih
ef113ab8ac update wakeup node
Bug: 190672147
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I3a8e8fa8b9007f556a5bfb402c4e8c726499d66f
2021-06-10 03:23:52 +00:00
Adam Shih
6f1be4dcf7 Merge "organize EdgeTPU modules and sepolicy" into sc-dev am: 22fae537b5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911633

Change-Id: I4e35a44d8e36220eb05fd478cbdfe8a264d90c29
2021-06-10 03:12:38 +00:00
Adam Shih
8879662f92 Merge "organize EdgeTPU modules and sepolicy" into sc-dev am: 22fae537b5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911633

Change-Id: If19b793eb2d76a6856b61b67ea6b001136c013ec
2021-06-10 03:09:57 +00:00
Adam Shih
8947d2dfeb reorganize trusty_metricsd settings
Bug: 190331503
Test: build ROM and see the file and sepolicy settings are still there
Change-Id: Ib157f64428166232c3bbbd176d3c1fbed4ac31d6
2021-06-10 02:54:00 +00:00
Adam Shih
22fae537b5 Merge "organize EdgeTPU modules and sepolicy" into sc-dev 2021-06-10 02:53:28 +00:00
SHUCHI LILU
464da19d9e Merge "Update avc error on ROM 7440434" into sc-dev am: e5c8613686 am: c5a1aeaf18 am: e2d6f14941
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911640

Change-Id: Ie63542ad91e2dfc5093ba56066895ed61333b395
2021-06-09 12:59:31 +00:00
SHUCHI LILU
8f05ef9583 Merge "Update avc error on ROM 7440434" into sc-dev am: e5c8613686 am: f8336cf329 am: fd325dda0b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911640

Change-Id: Ib949e2fb13f970b3695f092f766f85c7da9d9163
2021-06-09 12:58:18 +00:00
SHUCHI LILU
e2d6f14941 Merge "Update avc error on ROM 7440434" into sc-dev am: e5c8613686 am: c5a1aeaf18
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911640

Change-Id: I0d7de500d5482356bb076a6b1494718c072db2ee
2021-06-09 12:56:56 +00:00
SHUCHI LILU
fd325dda0b Merge "Update avc error on ROM 7440434" into sc-dev am: e5c8613686 am: f8336cf329
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911640

Change-Id: I5e7c0489ec0a5ea81402b8b818588e57553ab865
2021-06-09 12:43:55 +00:00
SHUCHI LILU
c5a1aeaf18 Merge "Update avc error on ROM 7440434" into sc-dev am: e5c8613686
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911640

Change-Id: Id833703d833b14d5a2411c06d021e51bc3790328
2021-06-09 12:28:28 +00:00
SHUCHI LILU
f8336cf329 Merge "Update avc error on ROM 7440434" into sc-dev am: e5c8613686
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14911640

Change-Id: I2a0d5dd5aa501f6fe07f835169b903d9d6b61b65
2021-06-09 12:26:45 +00:00
SHUCHI LILU
e5c8613686 Merge "Update avc error on ROM 7440434" into sc-dev 2021-06-09 12:05:04 +00:00
TreeHugger Robot
99aebc9e3d Merge "Grant powerhal access to thermal_link_device and sysfs_thermal" into sc-dev am: 3c66c45102 am: 54420d120a am: 72a928292e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14731906

Change-Id: I52419ea44b66ff204910ef5ce677ac669eb18fc2
2021-06-09 08:33:08 +00:00
TreeHugger Robot
6293341c9b Merge "Grant powerhal access to thermal_link_device and sysfs_thermal" into sc-dev am: 3c66c45102 am: ea845e1796 am: 2466ae7393
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14731906

Change-Id: I563628f470feda3aa6fd82db2b11a9529af839c3
2021-06-09 08:32:49 +00:00
TreeHugger Robot
72a928292e Merge "Grant powerhal access to thermal_link_device and sysfs_thermal" into sc-dev am: 3c66c45102 am: 54420d120a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14731906

Change-Id: I3ff031f2bbff5ef038ca78fa6d38416defed0390
2021-06-09 08:27:11 +00:00
TreeHugger Robot
2466ae7393 Merge "Grant powerhal access to thermal_link_device and sysfs_thermal" into sc-dev am: 3c66c45102 am: ea845e1796
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14731906

Change-Id: Ica2dd97db3acb67af082661c1ebcf5ce6d6c0661
2021-06-09 08:21:15 +00:00
TreeHugger Robot
54420d120a Merge "Grant powerhal access to thermal_link_device and sysfs_thermal" into sc-dev am: 3c66c45102
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14731906

Change-Id: I13e36ee7e00f0466e46d0ae340571342fcae197a
2021-06-09 08:08:15 +00:00
sukiliu
6ce3aa9d75 Update avc error on ROM 7440434
Bug: b/190563838
Bug: b/190563916
Bug: b/190563896
Bug: b/190563897
Test: Test: PtsSELinuxTestCases
Change-Id: Idbd0bc0f9a4770b3f976196058a311820e6e3c11
2021-06-09 16:07:32 +08:00
TreeHugger Robot
ea845e1796 Merge "Grant powerhal access to thermal_link_device and sysfs_thermal" into sc-dev am: 3c66c45102
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14731906

Change-Id: I0c86b40d9bdaf76bfefaee1aa2376985925564b0
2021-06-09 08:06:26 +00:00
TreeHugger Robot
3c66c45102 Merge "Grant powerhal access to thermal_link_device and sysfs_thermal" into sc-dev 2021-06-09 07:46:26 +00:00
TreeHugger Robot
b579d86686 Merge "Add sysfs_camera label for powerhint flow to access intcam & tnr clock" into sc-dev am: c5d10f245a am: 6058fd94db am: 48130880f5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795451

Change-Id: I009f2eaee4d492e2213baadfb5e2caa8ae7a110e
2021-06-09 05:20:52 +00:00
TreeHugger Robot
d6aab63c00 Merge "Add sysfs_camera label for powerhint flow to access intcam & tnr clock" into sc-dev am: c5d10f245a am: 08f92cd2bd am: 000769b540
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795451

Change-Id: Ib52b0377f8463ee6bbf938d256bacb9679fcd84b
2021-06-09 05:20:44 +00:00
TreeHugger Robot
48130880f5 Merge "Add sysfs_camera label for powerhint flow to access intcam & tnr clock" into sc-dev am: c5d10f245a am: 6058fd94db
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795451

Change-Id: I27dc6741659605a5fc0a4abd4551e2cadc7a8d6e
2021-06-09 05:00:39 +00:00
TreeHugger Robot
000769b540 Merge "Add sysfs_camera label for powerhint flow to access intcam & tnr clock" into sc-dev am: c5d10f245a am: 08f92cd2bd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795451

Change-Id: I7478605f57d9d0bb7286413b002ec6f425453837
2021-06-09 04:59:56 +00:00
TreeHugger Robot
08f92cd2bd Merge "Add sysfs_camera label for powerhint flow to access intcam & tnr clock" into sc-dev am: c5d10f245a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795451

Change-Id: Iafa97d33e0ecefa938654e15ce0c1e2f4c1660c8
2021-06-09 04:37:08 +00:00
TreeHugger Robot
6058fd94db Merge "Add sysfs_camera label for powerhint flow to access intcam & tnr clock" into sc-dev am: c5d10f245a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795451

Change-Id: I18fe9817dda5b3d9085d78cf7a086e1358936028
2021-06-09 04:35:29 +00:00
TreeHugger Robot
c5d10f245a Merge "Add sysfs_camera label for powerhint flow to access intcam & tnr clock" into sc-dev 2021-06-09 04:18:05 +00:00
Rick Yiu
feff1a46ad Merge "gs101-sepolicy: Fix tracking_denials of sysfs_vendor_sched" into sc-dev am: 2332c6a43f am: e6deaa6d99 am: 6ada5de1d9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881664

Change-Id: I1c88bcb442c888ab6a872527b11674d76a5a8771
2021-06-09 04:02:06 +00:00
Adam Shih
ddc5c6f06f Merge "modulize hal_neuralnetwork_armnn" into sc-dev am: 86c45c70e6 am: 3277c46446 am: 6757effca7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881659

Change-Id: I3e228a8806bdb5080ae63a502929633c69c143f1
2021-06-09 04:02:00 +00:00
Rick Yiu
6c6c072bd6 Merge "gs101-sepolicy: Fix tracking_denials of sysfs_vendor_sched" into sc-dev am: 2332c6a43f am: 34ead673c6 am: 90b596009f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881664

Change-Id: I859246c025db4f937c8f6cd7f1f91d47b787896e
2021-06-09 04:01:48 +00:00
Rick Yiu
6ada5de1d9 Merge "gs101-sepolicy: Fix tracking_denials of sysfs_vendor_sched" into sc-dev am: 2332c6a43f am: e6deaa6d99
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881664

Change-Id: I15ec5094c0b58830626882bb9771c9c22d609404
2021-06-09 04:01:32 +00:00
Adam Shih
a30e9d245b Merge "modulize hal_neuralnetwork_armnn" into sc-dev am: 86c45c70e6 am: 0dd0c26b36 am: 8b8a10cfcb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881659

Change-Id: I6498ce85d69911cdc781ba5e4f74d67d0e608206
2021-06-09 04:01:29 +00:00
Adam Shih
6757effca7 Merge "modulize hal_neuralnetwork_armnn" into sc-dev am: 86c45c70e6 am: 3277c46446
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881659

Change-Id: Ia4feb47da76106bbfab79d0da88dfed8a2d88e64
2021-06-09 04:01:27 +00:00
Rick Yiu
e6deaa6d99 Merge "gs101-sepolicy: Fix tracking_denials of sysfs_vendor_sched" into sc-dev am: 2332c6a43f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881664

Change-Id: Idbf01bc803152688c07777fe18fd3d67034d5897
2021-06-09 03:37:29 +00:00
Rick Yiu
90b596009f Merge "gs101-sepolicy: Fix tracking_denials of sysfs_vendor_sched" into sc-dev am: 2332c6a43f am: 34ead673c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881664

Change-Id: I47e3f0897e812669ede46f223b75a9ef9b6000c5
2021-06-09 03:37:27 +00:00
Adam Shih
3277c46446 Merge "modulize hal_neuralnetwork_armnn" into sc-dev am: 86c45c70e6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881659

Change-Id: Id271462cc29108a306f703f7de3ba8499606332e
2021-06-09 03:37:23 +00:00
Adam Shih
8b8a10cfcb Merge "modulize hal_neuralnetwork_armnn" into sc-dev am: 86c45c70e6 am: 0dd0c26b36
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881659

Change-Id: I8d79e1188e7c5420ab52a39001ceb63d3ed017a6
2021-06-09 03:37:21 +00:00
Rick Yiu
34ead673c6 Merge "gs101-sepolicy: Fix tracking_denials of sysfs_vendor_sched" into sc-dev am: 2332c6a43f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881664

Change-Id: Idae83deb38d012faa86e27e7e83ee9ca53be3775
2021-06-09 03:20:07 +00:00
Adam Shih
0dd0c26b36 Merge "modulize hal_neuralnetwork_armnn" into sc-dev am: 86c45c70e6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881659

Change-Id: I01829f781aa4763f4b7ae62008fd74b1f6793562
2021-06-09 03:20:00 +00:00
Rick Yiu
2332c6a43f Merge "gs101-sepolicy: Fix tracking_denials of sysfs_vendor_sched" into sc-dev 2021-06-09 03:02:37 +00:00
Adam Shih
e7ed46c52c organize EdgeTPU modules and sepolicy
Bug: 190331327
Bug: 190331548
Bug: 189895600
Bug: 190331108
Bug: 182524105
Bug: 183935302
Test: build ROM and check if the modules and sepolicy are still there
Change-Id: I40391a239a16c4fe79d58fab209dcbd1a8f25ede
2021-06-09 10:39:04 +08:00
Rick Yiu
a457b1d640 gs101-sepolicy: Fix tracking_denials of sysfs_vendor_sched
Bug: 190368350
Test: build pass
Change-Id: Id742e8328f63c04e5448225975897d8f6adc1e13
2021-06-09 01:34:50 +00:00
Adam Shih
86c45c70e6 Merge "modulize hal_neuralnetwork_armnn" into sc-dev 2021-06-08 23:03:04 +00:00
Denny cy Lee
1eb6bfcd3e Hardwareinfo: battery info porting
Test: No read error in logcat
Bug: 171947164
Bug: 181915166
Bug: 181177926
Bug: 181914888
Bug: 188627513
Change-Id: Ibbed06cc7e6eb00c8611cdc8bc95356b17c7e043
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-08 15:34:31 +08:00
SHUCHI LILU
08ea3ff201 Merge "Update avc error on ROM 7432667" into sc-dev am: 699d68a092 am: ebbc3289b3 am: 236402d58b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14860443

Change-Id: Iee74794d627e0cb06f3577f5af2dc11a6a01d224
2021-06-08 06:43:19 +00:00
SHUCHI LILU
58a139c6b5 Merge "Update avc error on ROM 7432667" into sc-dev am: 699d68a092 am: 0969a773c2 am: 5bcccd768e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14860443

Change-Id: Ida3bddef897ba8eae57a5223f189e6b73a5b2b4b
2021-06-08 06:43:03 +00:00
SHUCHI LILU
236402d58b Merge "Update avc error on ROM 7432667" into sc-dev am: 699d68a092 am: ebbc3289b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14860443

Change-Id: I6c0a4018d66bd982044987833f7549b62a99cf23
2021-06-08 06:22:49 +00:00
SHUCHI LILU
5bcccd768e Merge "Update avc error on ROM 7432667" into sc-dev am: 699d68a092 am: 0969a773c2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14860443

Change-Id: I2a78e657d1a6328ae19a9f8a6e9255fe84e1d9d7
2021-06-08 06:21:24 +00:00
SHUCHI LILU
0969a773c2 Merge "Update avc error on ROM 7432667" into sc-dev am: 699d68a092
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14860443

Change-Id: Iaef188dc7364e163a4f37c4029d5ac21bd4443a2
2021-06-08 06:08:26 +00:00
Maciej Żenczykowski
24c89434d0 R4/raven: correctly label wpan0 device as networking am: b22c6cd04a am: 0dba97d5f2 am: f0d45f1b21
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14889941

Change-Id: I04d71ccffd5b88f604c83d45495675db7c6fac9f
2021-06-08 06:07:39 +00:00
Maciej Żenczykowski
a5b4f38186 R4/raven: correctly label wpan0 device as networking am: b22c6cd04a am: 064f02f407 am: 8b323c76df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14889941

Change-Id: I3d104ed5ac615b79c12db702d446ccbb1165cda0
2021-06-08 06:07:02 +00:00
SHUCHI LILU
ebbc3289b3 Merge "Update avc error on ROM 7432667" into sc-dev am: 699d68a092
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14860443

Change-Id: I98ef9d496413a77bfbe71de966cbe4ef2484b68e
2021-06-08 06:06:44 +00:00
Maciej Żenczykowski
f0d45f1b21 R4/raven: correctly label wpan0 device as networking am: b22c6cd04a am: 0dba97d5f2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14889941

Change-Id: I92bf74b8531615a385728f7cf505be35d600b899
2021-06-08 05:54:24 +00:00
SHUCHI LILU
699d68a092 Merge "Update avc error on ROM 7432667" into sc-dev 2021-06-08 05:50:50 +00:00
Maciej Żenczykowski
8b323c76df R4/raven: correctly label wpan0 device as networking am: b22c6cd04a am: 064f02f407
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14889941

Change-Id: Idc8c3c66b371b813f10b2ab00e80e6eea79d8a6d
2021-06-08 05:48:22 +00:00
Maciej Żenczykowski
0dba97d5f2 R4/raven: correctly label wpan0 device as networking am: b22c6cd04a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14889941

Change-Id: Idae2b832bff3c3d4ed5f22d49c0d0d4538efbc1a
2021-06-08 05:35:03 +00:00
Maciej Żenczykowski
064f02f407 R4/raven: correctly label wpan0 device as networking am: b22c6cd04a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14889941

Change-Id: I72c70a56bd785377984de6149dd13a9123e3a59c
2021-06-08 05:33:23 +00:00
sukiliu
bb8b462d7a Update avc error on ROM 7432667
Bug: b/190337281
Bug: b/190337282
Bug: b/190336524
Bug: b/190337295
Bug: b/190337296
Bug: b/190337283
Bug: b/190336723
Bug: b/190336841
Bug: b/190337297
Bug: b/190336525
Test: PtsSELinuxTestCases
Change-Id: I2edda1bf554c0239953b8a31152a09045fb1f15a
2021-06-08 12:48:06 +08:00
Adam Shih
faeeb17016 Remove obsolete context am: c8b02fc4c3 am: 3cca7c4a0d am: a94bbaea55
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881658

Change-Id: If65fc58472b5d071a94d052ccf140c938fddf95a
2021-06-08 04:41:43 +00:00
Adam Shih
2a0fe77d3a Remove obsolete context am: c8b02fc4c3 am: bd69cf5ab8 am: 8395d25ad8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881658

Change-Id: I5904e4aed987409a380c597a62847fff136ab2ea
2021-06-08 04:41:30 +00:00
Adam Shih
a94bbaea55 Remove obsolete context am: c8b02fc4c3 am: 3cca7c4a0d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881658

Change-Id: I20fbc91781cb27fc0dba606be0b2edc2735e3df9
2021-06-08 04:18:23 +00:00
Adam Shih
8395d25ad8 Remove obsolete context am: c8b02fc4c3 am: bd69cf5ab8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881658

Change-Id: I57d0aea0885aaa03165b1b0f2def479898b74640
2021-06-08 04:17:26 +00:00
Adam Shih
bd69cf5ab8 Remove obsolete context am: c8b02fc4c3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881658

Change-Id: I70fa03febaac4737747d3ad97edec659a33e5918
2021-06-08 03:59:19 +00:00
Adam Shih
3cca7c4a0d Remove obsolete context am: c8b02fc4c3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14881658

Change-Id: I4ac714dcf0033fc5fff07e6a3aabc76db1f7dee0
2021-06-08 03:57:29 +00:00
Maciej Żenczykowski
b22c6cd04a R4/raven: correctly label wpan0 device as networking
Test: atest, TreeHugger, manual observation of labeling
Bug: 185962988
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I068b7da17590fc9dc914db80263b72cc7536c095
2021-06-07 20:34:05 -07:00
Adam Shih
02f93b6096 modulize hal_neuralnetwork_armnn
Bug: 189895314
Bug: 171160755
Bug: 171670122
Bug: 180858476
Test: make sure all affected devices' armnn module has the right label
Change-Id: I6ca736f156497738167ba5eea5606a0e654611b9
2021-06-08 11:17:22 +08:00
Adam Shih
c8b02fc4c3 Remove obsolete context
Bug: 190330778
Test: make selinux_policy with such entry gone
Change-Id: I28844c361a951de35d509ce042e64e090188e755
2021-06-08 11:17:17 +08:00
TreeHugger Robot
8e3afdccc3 Merge "Remove unnecessary rules for vendor rcs app" into sc-dev am: 17b8f5cd4e am: 8026fa508e am: 9586364cc9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14848259

Change-Id: I9d83cfc2a8374779fd17bae5029ae7bfda480023
2021-06-07 20:09:43 +00:00
TreeHugger Robot
cd05300b7d Merge "Remove unnecessary rules for vendor rcs app" into sc-dev am: 17b8f5cd4e am: 293917d723 am: 72743e8cae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14848259

Change-Id: Ie9df20141cfe548b944ced4443351587db31695e
2021-06-07 20:09:30 +00:00
TreeHugger Robot
9586364cc9 Merge "Remove unnecessary rules for vendor rcs app" into sc-dev am: 17b8f5cd4e am: 8026fa508e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14848259

Change-Id: I7c6fb3cc48856464c9f4fea11f86d75f1378ba45
2021-06-07 19:50:58 +00:00
TreeHugger Robot
72743e8cae Merge "Remove unnecessary rules for vendor rcs app" into sc-dev am: 17b8f5cd4e am: 293917d723
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14848259

Change-Id: I356823d3183ca8031f445438f66a7e92356c7c15
2021-06-07 19:49:53 +00:00
TreeHugger Robot
293917d723 Merge "Remove unnecessary rules for vendor rcs app" into sc-dev am: 17b8f5cd4e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14848259

Change-Id: Ic3608b4cd9e2271de3db934f188f5c3a8a540b86
2021-06-07 19:29:29 +00:00
TreeHugger Robot
8026fa508e Merge "Remove unnecessary rules for vendor rcs app" into sc-dev am: 17b8f5cd4e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14848259

Change-Id: I898b08642de6800f22f19cd1b385d5f61cd492bb
2021-06-07 19:27:49 +00:00
TreeHugger Robot
17b8f5cd4e Merge "Remove unnecessary rules for vendor rcs app" into sc-dev 2021-06-07 19:01:45 +00:00
Long Ling
ba423615f9 Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev am: 5afbe4584f am: 0fcd3a3b25 am: 68dad3b3ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14877618

Change-Id: If21b83936af613e6a5e46155ae08e2285aed1905
2021-06-07 17:37:19 +00:00
Long Ling
97af6485a5 Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev am: 5afbe4584f am: a2d45360d3 am: 46fabd3655
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14877618

Change-Id: Id24f83630a79ba6e8d7891f1ff6df21c778817c1
2021-06-07 17:33:15 +00:00
Long Ling
68dad3b3ab Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev am: 5afbe4584f am: 0fcd3a3b25
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14877618

Change-Id: If3488019c253463a715c9bb0a6107c7ea5cabc9f
2021-06-07 17:26:01 +00:00
Long Ling
46fabd3655 Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev am: 5afbe4584f am: a2d45360d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14877618

Change-Id: I542813f1b1fde1a914d608100d43af0c9ba95655
2021-06-07 17:19:14 +00:00
Long Ling
0fcd3a3b25 Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev am: 5afbe4584f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14877618

Change-Id: Icb822dbf08c25a1caf7148c0317ac92e56150f50
2021-06-07 17:07:54 +00:00
Long Ling
a2d45360d3 Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev am: 5afbe4584f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14877618

Change-Id: I201f737fd913061524d1f5a2fc7859920d3b0513
2021-06-07 17:03:36 +00:00
Long Ling
5afbe4584f Merge "sepolicy: gs101: display: fix dumpstate of displaycolor" into sc-dev 2021-06-07 16:36:32 +00:00
SalmaxChang
88ebda06d7 cbd: Fix avc error am: 7865bf8577 am: 8c50ba3b67 am: b6ecd6f406
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14847064

Change-Id: Ib50ba22233dad0be856f5587e2169fd4c3b09324
2021-06-07 12:10:30 +00:00
SalmaxChang
8039fefa60 cbd: Fix avc error am: 7865bf8577 am: 5103918441 am: 1429a9a2d7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14847064

Change-Id: I80d17cb1fbe8799f5347991e420b06561531d89e
2021-06-07 12:10:21 +00:00
SalmaxChang
b6ecd6f406 cbd: Fix avc error am: 7865bf8577 am: 8c50ba3b67
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14847064

Change-Id: Ifa1fbdae32a36105529d7d3c6b26a3c4f0e0a9ca
2021-06-07 11:48:59 +00:00
SalmaxChang
1429a9a2d7 cbd: Fix avc error am: 7865bf8577 am: 5103918441
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14847064

Change-Id: Ied974f9f2d387ec4e1577a1063710e2f8f54aa86
2021-06-07 11:44:05 +00:00
SalmaxChang
8c50ba3b67 cbd: Fix avc error am: 7865bf8577
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14847064

Change-Id: Ie2c42d0aff8e56e9edcb2d7bcf76a17cc546ac88
2021-06-07 11:30:07 +00:00
SalmaxChang
5103918441 cbd: Fix avc error am: 7865bf8577
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14847064

Change-Id: I02c860658a85721b71e5e5d4f8ee1befe7d4a9cd
2021-06-07 11:28:29 +00:00
Yu(Swim) Chih Ren
d45ada475b Add sysfs_camera label for powerhint flow to access intcam & tnr clock
Test: 1. build selinux and push related files to phone
      2. Use ls -Z "file" to check if selinux content of file is
      expected
      3. P21 camera checklist
Bug: 168654554

Change-Id: Ie757dd3e8adc151c6340e9ca662efbdf0ccb6110
2021-06-07 06:31:09 +00:00
Long Ling
1064df0f26 sepolicy: gs101: display: fix dumpstate of displaycolor
displaycolor service runs in HW Composer. This change allow displaycolor
to output to dumpstate via pipe fd.

Bug: 189846843
Test: adb bugreport and check displaycolor dump in dumpstate_board.txt
Change-Id: I109db9374124caf9053a9fd7ba6159f83c372038
2021-06-06 22:20:19 -07:00
SalmaxChang
7865bf8577 cbd: Fix avc error
avc: denied { search } for comm="cbd" name="/" dev="sda1" ino=2 scontext=u:r:cbd:s0 tcontext=u:object_r:persist_file:s0 tclass=dir permissive=0

Bug: 180687795
Change-Id: I149163760fa47378d03dc2d8c8a00c590788796c
2021-06-07 01:40:59 +00:00
Rick Yiu
3d5915a3b9 Merge "gs101-sepolicy: Fix avc denials for sysfs_vendor_sched" into sc-dev am: f275064208 am: a6143b9039 am: f763985cba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14814591

Change-Id: Id8727302d77f359a053abcf8acf5e9eae03bc5fa
2021-06-07 01:35:51 +00:00
Rick Yiu
ade38110a5 Merge "gs101-sepolicy: Fix avc denials for sysfs_vendor_sched" into sc-dev am: f275064208 am: d5fa128a7d am: 6a7eacb184
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14814591

Change-Id: Ie70a8b32feae9ad6b45c7e905ad0be3a046c5af7
2021-06-07 01:35:40 +00:00
Rick Yiu
f763985cba Merge "gs101-sepolicy: Fix avc denials for sysfs_vendor_sched" into sc-dev am: f275064208 am: a6143b9039
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14814591

Change-Id: I9f14b0c89a85d50d218b59d93b90256c43b39a05
2021-06-07 01:20:54 +00:00
Rick Yiu
6a7eacb184 Merge "gs101-sepolicy: Fix avc denials for sysfs_vendor_sched" into sc-dev am: f275064208 am: d5fa128a7d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14814591

Change-Id: I17b8291843c6c5b98fc74382de631a412c45e04d
2021-06-07 01:14:09 +00:00
Rick Yiu
a6143b9039 Merge "gs101-sepolicy: Fix avc denials for sysfs_vendor_sched" into sc-dev am: f275064208
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14814591

Change-Id: Ie6a563b2454d7d542b4d2050734f5a7928c80b11
2021-06-07 01:00:08 +00:00
Rick Yiu
d5fa128a7d Merge "gs101-sepolicy: Fix avc denials for sysfs_vendor_sched" into sc-dev am: f275064208
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14814591

Change-Id: I87ce390d45ce8fda3a90cebf126922a76f0470e2
2021-06-07 00:58:53 +00:00
Rick Yiu
f275064208 Merge "gs101-sepolicy: Fix avc denials for sysfs_vendor_sched" into sc-dev 2021-06-07 00:38:36 +00:00
TreeHugger Robot
b5b92adeb3 Merge "Add CccDkTimeSyncService" into sc-dev am: 77cbbc1237 am: 3c2d8cd22c am: 09c1394813
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14273480

Change-Id: Icbbf13e6f96035d357fd26a20ef8c843bb4dde11
2021-06-04 22:19:20 +00:00
TreeHugger Robot
f63ac851dc Merge "Add CccDkTimeSyncService" into sc-dev am: 77cbbc1237 am: ce3aeb1167 am: 33e88263c9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14273480

Change-Id: I61d0f9dd1082ec24a177adef751c4bb4d93b2a31
2021-06-04 22:18:28 +00:00
TreeHugger Robot
09c1394813 Merge "Add CccDkTimeSyncService" into sc-dev am: 77cbbc1237 am: 3c2d8cd22c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14273480

Change-Id: Id392b06f621ba4fd28770afee965d53f6b46a420
2021-06-04 22:05:20 +00:00
TreeHugger Robot
33e88263c9 Merge "Add CccDkTimeSyncService" into sc-dev am: 77cbbc1237 am: ce3aeb1167
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14273480

Change-Id: Ide671423fb2e80d07ee432efaec806dedac28dae
2021-06-04 22:04:23 +00:00
TreeHugger Robot
ce3aeb1167 Merge "Add CccDkTimeSyncService" into sc-dev am: 77cbbc1237
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14273480

Change-Id: I96d9ae4694d61f85c12cc5a7703987e2126390e4
2021-06-04 21:50:06 +00:00
TreeHugger Robot
3c2d8cd22c Merge "Add CccDkTimeSyncService" into sc-dev am: 77cbbc1237
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14273480

Change-Id: I77d39d4b2d1b2bf19407e63444c0e4fb26b6742d
2021-06-04 21:45:42 +00:00
TreeHugger Robot
77cbbc1237 Merge "Add CccDkTimeSyncService" into sc-dev 2021-06-04 21:23:24 +00:00
Hui Wang
724ea61092 Remove unnecessary rules for vendor rcs app
Bug: 190194610
Test: make, manual
Change-Id: I99f624a70a36ad6cf47806faf0eed693383dac5f
2021-06-04 14:03:31 -07:00
TreeHugger Robot
cf2f1a0ef5 Merge "whitechapel: make vframe-secure a system heap" into sc-dev am: aa7a8405e2 am: c6db38ea50 am: 8399e7d79a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14083385

Change-Id: I6062bddff1ad3ba1746e2f21ccf01d69c352a547
2021-06-04 18:58:02 +00:00
TreeHugger Robot
eb5f332d1b Merge "whitechapel: make vframe-secure a system heap" into sc-dev am: aa7a8405e2 am: dc56bccef6 am: df281bc423
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14083385

Change-Id: I09ade82addbfef8012dca086cbcd5aee7a63e3d0
2021-06-04 18:57:53 +00:00
TreeHugger Robot
8399e7d79a Merge "whitechapel: make vframe-secure a system heap" into sc-dev am: aa7a8405e2 am: c6db38ea50
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14083385

Change-Id: Ie69fe90bb28368ec21e66ab91e0f046a4360ab40
2021-06-04 18:36:10 +00:00
TreeHugger Robot
df281bc423 Merge "whitechapel: make vframe-secure a system heap" into sc-dev am: aa7a8405e2 am: dc56bccef6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14083385

Change-Id: Ife047e32c6d92289d4e783525827e3524bd6405f
2021-06-04 18:34:36 +00:00
TreeHugger Robot
dc56bccef6 Merge "whitechapel: make vframe-secure a system heap" into sc-dev am: aa7a8405e2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14083385

Change-Id: I1923a0062cb753d9a4ce53d900a83a1eed14e59b
2021-06-04 18:21:04 +00:00
TreeHugger Robot
c6db38ea50 Merge "whitechapel: make vframe-secure a system heap" into sc-dev am: aa7a8405e2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14083385

Change-Id: I57abe05ecdb311160459a3a3c7dc1fcdf58293ef
2021-06-04 18:19:15 +00:00
TreeHugger Robot
aa7a8405e2 Merge "whitechapel: make vframe-secure a system heap" into sc-dev 2021-06-04 18:02:34 +00:00
Sean Callanan
77432c5015 whitechapel: make vframe-secure a system heap
The GPU driver uses vframe-secure for secure allocations, so the
corresponding DMA heap file should be visible to all processes so
use the dmabuf_system_secure_heap_device type instead.

In order for this type to be used, we need to ensure that the HAL
Allocator has access to it, so update hal_graphics_allocator_default.te

Finally, since there are no longer any buffer types associated with the
vframe_heap_device type, remove it.

Bug: 182090311
Test: run cts-dev -m CtsDeqpTestCases --module-arg CtsDeqpTestCases:include-filter:dEQP-VK.protected_memory.stack.stacksize_64 and ensure secure allocations succeed
Test: Play DRM-protected video in ExoPlayer and ensure videos render correctly via MFC->DPU.
Change-Id: Id341e52322a438974d4634a4274a7be2ddb4c9fe
2021-06-04 18:01:34 +00:00
TreeHugger Robot
c9a03fd6a7 Merge "storage: update sepolicy for hardwareinfoservice" into sc-dev am: 29a5be5603 am: 86bc19fafb am: 0d618d40de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696013

Change-Id: I3083b3d324d10d3e657667a678391bea60a5db5e
2021-06-04 11:43:26 +00:00
TreeHugger Robot
6f18a1f6f6 Merge "storage: update sepolicy for hardwareinfoservice" into sc-dev am: 29a5be5603 am: eaa781a17f am: a6c61c6f9e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696013

Change-Id: Ib32feb435da561e3a0d56b9b0f0229b3268b4cda
2021-06-04 11:43:06 +00:00
TreeHugger Robot
0d618d40de Merge "storage: update sepolicy for hardwareinfoservice" into sc-dev am: 29a5be5603 am: 86bc19fafb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696013

Change-Id: I391bc888b2c6e7abbed53c55c2e67370f5e28a89
2021-06-04 11:22:22 +00:00
TreeHugger Robot
a6c61c6f9e Merge "storage: update sepolicy for hardwareinfoservice" into sc-dev am: 29a5be5603 am: eaa781a17f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696013

Change-Id: Ia8e362c4fb790085da4cbc470b542abcf1e6b58d
2021-06-04 11:21:30 +00:00
TreeHugger Robot
eaa781a17f Merge "storage: update sepolicy for hardwareinfoservice" into sc-dev am: 29a5be5603
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696013

Change-Id: Iefaf730047553bbeac9788869b91679fc787c78d
2021-06-04 11:04:23 +00:00
TreeHugger Robot
86bc19fafb Merge "storage: update sepolicy for hardwareinfoservice" into sc-dev am: 29a5be5603
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696013

Change-Id: I11ed5570c71bbb4f1dd80ff0411587aceabc6dc9
2021-06-04 11:02:36 +00:00
TreeHugger Robot
29a5be5603 Merge "storage: update sepolicy for hardwareinfoservice" into sc-dev 2021-06-04 10:45:34 +00:00
TreeHugger Robot
4861ec21c7 Merge "[RCS] Add sepolicy for RCS as non-system app" into sc-dev am: be1f56dba1 am: a19e1a15e9 am: 63fceb570c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14719163

Change-Id: Ic8afdaffaeb418cdc5e839049d5ccbd21015d23c
2021-06-04 07:29:48 +00:00
Maciej Żenczykowski
cc9338ebec allow hal_usb_impl configfs:dir { create rmdir }; am: 729e8901ab am: f0b64bb73f am: 0c2228d79e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542109

Change-Id: I0e75ce21fad83ed1e72a4024ef0a83cf04b5dd7b
2021-06-04 07:29:35 +00:00
TreeHugger Robot
23a53b754f Merge "[RCS] Add sepolicy for RCS as non-system app" into sc-dev am: be1f56dba1 am: 54767e9f18 am: 233f69af0e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14719163

Change-Id: Ia0d8e8a23bd1f747d091c28362b4d246b68502ff
2021-06-04 07:29:24 +00:00
Maciej Żenczykowski
30212687d3 allow hal_usb_impl configfs:dir { create rmdir }; am: 729e8901ab am: bfebab07d6 am: df4893b27d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542109

Change-Id: If3e2ea7c5c6e3935aeae33612619cd4167a8c14a
2021-06-04 07:29:10 +00:00
TreeHugger Robot
63fceb570c Merge "[RCS] Add sepolicy for RCS as non-system app" into sc-dev am: be1f56dba1 am: a19e1a15e9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14719163

Change-Id: Ia4d933dee8d7dab96a0aa3679a1c09d59e344bb9
2021-06-04 07:06:20 +00:00
Maciej Żenczykowski
0c2228d79e allow hal_usb_impl configfs:dir { create rmdir }; am: 729e8901ab am: f0b64bb73f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542109

Change-Id: I0d5bd327f4e91a743c7d6c43dfe76c1e7e197967
2021-06-04 07:06:10 +00:00
TreeHugger Robot
233f69af0e Merge "[RCS] Add sepolicy for RCS as non-system app" into sc-dev am: be1f56dba1 am: 54767e9f18
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14719163

Change-Id: I9a63898e64a78b2dc6de8e561144d2c66507f45b
2021-06-04 06:59:50 +00:00
Maciej Żenczykowski
df4893b27d allow hal_usb_impl configfs:dir { create rmdir }; am: 729e8901ab am: bfebab07d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542109

Change-Id: I1360e670af6fd7f5efa5db9118ee24cc665568a7
2021-06-04 06:59:41 +00:00
TreeHugger Robot
a19e1a15e9 Merge "[RCS] Add sepolicy for RCS as non-system app" into sc-dev am: be1f56dba1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14719163

Change-Id: I9b46f94b8a8b12fed6f388b5591c809f18e3adb4
2021-06-04 06:44:11 +00:00
Maciej Żenczykowski
f0b64bb73f allow hal_usb_impl configfs:dir { create rmdir }; am: 729e8901ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542109

Change-Id: Idd9e05143cf953dbba1c56deedd54264d8ea6ffc
2021-06-04 06:44:01 +00:00
TreeHugger Robot
54767e9f18 Merge "[RCS] Add sepolicy for RCS as non-system app" into sc-dev am: be1f56dba1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14719163

Change-Id: Ic7ee2c3ff0a036229000191881e0255fee2f6b56
2021-06-04 06:42:19 +00:00
Maciej Żenczykowski
bfebab07d6 allow hal_usb_impl configfs:dir { create rmdir }; am: 729e8901ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542109

Change-Id: I0803ce3e0ab48c7d1f258789dcb0d3b12fc4ede6
2021-06-04 06:42:09 +00:00
TreeHugger Robot
be1f56dba1 Merge "[RCS] Add sepolicy for RCS as non-system app" into sc-dev 2021-06-04 06:22:03 +00:00
Maciej Żenczykowski
729e8901ab allow hal_usb_impl configfs:dir { create rmdir };
This is needed to allow USB HAL to create multi-config gadget
(ie. rndis + ncm).

Bug: 172793258
Test: built and booted on oriole
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Ifb98b23138122ad4e0aeea8dd9c93d7b3e16d3aa
2021-06-04 02:53:11 +00:00
jznpark
3d127f9224 [RCS] Add sepolicy for RCS as non-system app
As shannon-rcs has been changed from system app
to non-system app, sepolicy has to be updated.

Bug: 186135775
Bug: 189707387
Test: sanity test
Signed-off-by: jznpark <jzn.park@samsung.com>
Change-Id: I32cce90611c619494136a6b1d01b3fb48330d169
2021-06-03 13:30:26 -07:00
Chiawei Wang
f5ca97f1e7 Merge "pixelstats: fix permission errors" into sc-dev am: 9cfc661bee am: a1a00508b1 am: bc80f56382
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14781915

Change-Id: I98fde1cd10a64f84cc4b3e443f921a8b5cdaa85f
2021-06-03 09:56:00 +00:00
Chiawei Wang
a8d15f6691 Merge "pixelstats: fix permission errors" into sc-dev am: 9cfc661bee am: 2d240b30a8 am: ccb61d83df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14781915

Change-Id: Icc7d240fae4677853861260e865a68f7444898d9
2021-06-03 09:55:29 +00:00
Rick Yiu
a4dbe2ef40 gs101-sepolicy: Fix avc denials for sysfs_vendor_sched
Bug: 190011861
Bug: 190011862
Bug: 190011863
Bug: 190012301
Bug: 190012320
Test: boot to home
Change-Id: Icddb42fb194547211e33cf1d871e839a954b0919
2021-06-03 17:55:17 +08:00
Chiawei Wang
bc80f56382 Merge "pixelstats: fix permission errors" into sc-dev am: 9cfc661bee am: a1a00508b1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14781915

Change-Id: I3c76cb431b38fc09508198ba6bfc6aef43d36493
2021-06-03 09:41:59 +00:00
Chiawei Wang
ccb61d83df Merge "pixelstats: fix permission errors" into sc-dev am: 9cfc661bee am: 2d240b30a8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14781915

Change-Id: Ie91ad4bf9eefd33df53f9f2f26aa7b95c7cf7811
2021-06-03 09:30:21 +00:00
Chiawei Wang
2d240b30a8 Merge "pixelstats: fix permission errors" into sc-dev am: 9cfc661bee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14781915

Change-Id: I74c9d026da00446746d0e2cbd4eb3570b99e0527
2021-06-03 09:06:10 +00:00
Chiawei Wang
a1a00508b1 Merge "pixelstats: fix permission errors" into sc-dev am: 9cfc661bee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14781915

Change-Id: I89bbeeca2f88a9a82b5d7a1a66a70d16f79627ce
2021-06-03 09:03:14 +00:00
Chiawei Wang
9cfc661bee Merge "pixelstats: fix permission errors" into sc-dev 2021-06-03 08:45:12 +00:00
Chiawei Wang
9d5830ac19 pixelstats: fix permission errors
1. sysfs_dma_heap erros are fixed by ag/13926718
2. debugfs_mgm error is fixed by ag/14683912

Bug: 188114896
Bug: 183338421
Bug: 188495492
Test: pts-tradefed run pts -m PtsSELinuxTest
      http://sponge2/6cbd0af0-5414-4f2c-aea0-99b4981360a4

Signed-off-by: Chiawei Wang <chiaweiwang@google.com>
Change-Id: Icd2fa4e7f168d15fd4cec3000bc0e7a33eab4d3e
2021-06-03 02:52:33 +00:00
Rick Yiu
13a2d518cc Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f am: 3ad28926f7 am: 85aaaab7bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943

Change-Id: I392863914a6a87bcae0bcf5b0918372ad3d0ff10
2021-06-03 02:04:21 +00:00
Rick Yiu
92f4310aef Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f am: b6b7564259 am: ca8dc8bfe3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943

Change-Id: Iac5edca6ef8448f81a82ef720cf23587576abb98
2021-06-03 02:04:10 +00:00
Rick Yiu
85aaaab7bb Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f am: 3ad28926f7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943

Change-Id: Ia9a01e54849d669e01f97bff67570a3fcb2ae6c6
2021-06-03 01:37:53 +00:00
Rick Yiu
ca8dc8bfe3 Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f am: b6b7564259
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943

Change-Id: If3c7cef9f544fd8e038969952183e7f56b76a7a2
2021-06-03 01:36:08 +00:00
Rick Yiu
b6b7564259 Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943

Change-Id: Id352df8328a33017692f2a0df544b9db1556d1cf
2021-06-03 01:20:00 +00:00
Rick Yiu
3ad28926f7 Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev am: b530a26f1f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14774943

Change-Id: I47a0e9367819d6ddd3b384f93c7199dead2e809e
2021-06-03 01:16:38 +00:00
Rick Yiu
b530a26f1f Merge "gs101-sepolicy: Refine policy for sysfs_vendor_sched" into sc-dev 2021-06-03 00:56:00 +00:00
Peter Csaszar
44a98c9c17 pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719 am: c9da551db2 am: a6bde7a1d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010

Change-Id: Idbe7ddb81cf5c61e6ff1af3bbb2cedd88108459f
2021-06-02 21:35:09 +00:00
Peter Csaszar
2063a7ea18 pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719 am: 7a3703432e am: 72500dfbe6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010

Change-Id: I4d704e4a0b953b2fb78487252a1296ace9c208fb
2021-06-02 21:34:03 +00:00
Peter Csaszar
a6bde7a1d6 pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719 am: c9da551db2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010

Change-Id: Iac6d4896dcb274355ba690604399586e7923e49f
2021-06-02 21:17:34 +00:00
Peter Csaszar
72500dfbe6 pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719 am: 7a3703432e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010

Change-Id: I4f26f81458ce2205236a945fc8e0a236746a7921
2021-06-02 21:15:33 +00:00
Peter Csaszar
7a3703432e pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010

Change-Id: I943d236681c0c24d2c6f6a70eda2081c78abf9df
2021-06-02 20:59:29 +00:00
Peter Csaszar
c9da551db2 pixel-selinux: Add mlstrustedobject for SJTAG am: 7ea6a44719
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14794010

Change-Id: I2b1b51ecfec820558988666ab03082951dd21fec
2021-06-02 20:56:54 +00:00
Peter Csaszar
7ea6a44719 pixel-selinux: Add mlstrustedobject for SJTAG
This CL adds the "mlstrustedobject" to types for files involved in the
SJTAG authentication flow, in order to address MLS-based AVC denials.

Bug: 189466122
Test: No more AVC denials when activating SJTAG in BetterBug
Signed-off-by: Peter Csaszar <pcsaszar@google.com>
Change-Id: Ieb88653830ce95751eee5cf26c26fd6302067bce
2021-06-02 12:23:01 -07:00
Aaron Ding
8e334be407 pixel-selinux: add SJTAG policies am: 9f8d552411 am: 9a43bd9ead am: a260db294e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132

Change-Id: I647dfacb8ac1e72300dca6e61346d485524929f1
2021-06-02 07:10:34 +00:00
Aaron Ding
bbba17dde3 remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943 am: 2f3336940b am: 15e36312cd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004

Change-Id: If213a0c164c7bfeacee2779cb9391ce207998960
2021-06-02 07:10:30 +00:00
Aaron Ding
c1748eb562 pixel-selinux: add SJTAG policies am: 9f8d552411 am: 86e17fa6a1 am: ae49d5d313
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132

Change-Id: Ia90da11b5ff23e67d81d453b9b091f60e92db65c
2021-06-02 07:10:25 +00:00
Aaron Ding
b31322c604 remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943 am: 59a7ae7afe am: 28493f84c5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004

Change-Id: I19fd48abfa9f918f2628c234cbd7b98e9d8b915f
2021-06-02 07:10:15 +00:00
Aaron Ding
a260db294e pixel-selinux: add SJTAG policies am: 9f8d552411 am: 9a43bd9ead
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132

Change-Id: If999a72b561a4e3f0ebf9ce2ec1f082cb98adaa4
2021-06-02 06:51:46 +00:00
Aaron Ding
15e36312cd remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943 am: 2f3336940b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004

Change-Id: I21cad6d28945ae9cbb26e586d86ab1a02dbebb1e
2021-06-02 06:51:41 +00:00
Aaron Ding
ae49d5d313 pixel-selinux: add SJTAG policies am: 9f8d552411 am: 86e17fa6a1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132

Change-Id: I0c1b46866c6813baac6e409924bc5928e3b85d86
2021-06-02 06:48:58 +00:00
Aaron Ding
28493f84c5 remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943 am: 59a7ae7afe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004

Change-Id: I46dbfe1f8d6830eed0d651a291d90f7a2279ae07
2021-06-02 06:48:54 +00:00
Aaron Ding
86e17fa6a1 pixel-selinux: add SJTAG policies am: 9f8d552411
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132

Change-Id: I6ffbe3fc2053c12c4ef0138a9add21674955f2cb
2021-06-02 06:28:53 +00:00
Aaron Ding
59a7ae7afe remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004

Change-Id: Ifad186cc34fef21b4686fe328ca904b62ae86357
2021-06-02 06:28:49 +00:00
Aaron Ding
9a43bd9ead pixel-selinux: add SJTAG policies am: 9f8d552411
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14795132

Change-Id: Ia7c9bd89f0c958eeed16828186948a045044223a
2021-06-02 06:23:03 +00:00
Aaron Ding
2f3336940b remove sysfs_type from vendor_page_pinner_debugfs am: 2dbe515943
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14782004

Change-Id: I12715f8c51af7decc14aedf173e3bb13c8f51c1d
2021-06-02 06:22:59 +00:00
Rick Yiu
9e8bd699e9 gs101-sepolicy: Refine policy for sysfs_vendor_sched
Chagne it to directory based.

Bug: 182509410
Test: device boot normally
Change-Id: I1cfaa95cf07e1e829e747eb99ed39ab64d3ddac1
2021-06-02 04:52:45 +00:00
Aaron Ding
9f8d552411 pixel-selinux: add SJTAG policies
This reverts commit b078284e5d.

Bug: 184768605
Change-Id: Ib0080e2ba3edf7fa654155fb4a7403d52ad2494a
2021-06-02 10:25:51 +08:00
Aaron Ding
2dbe515943 remove sysfs_type from vendor_page_pinner_debugfs
Bug: 186500818
Change-Id: If97126a3d46d96342faf89b9698218b6a480a84b
2021-06-01 17:38:28 +08:00
David Chao
6026cf5181 Grant powerhal access to thermal_link_device and sysfs_thermal
Bug: 188579571
Test: boot
Change-Id: I8e4675e2817fe3778236618e0dba76f1233e77e2
2021-06-01 05:17:13 +00:00
Aaron Ding
badf5a5b1c Revert "pixel-selinux: add SJTAG policies" am: b078284e5d am: 2d35ae6cb8 am: da4f353e42
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664

Change-Id: I964163241b814415d6bfe9f45d66a224b1c773ae
2021-05-31 19:41:54 +00:00
Aaron Ding
ffe0233223 Revert "pixel-selinux: add SJTAG policies" am: b078284e5d am: 5825ee37e3 am: 2a1f5eb8b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664

Change-Id: I2e2fb9e52a52f4fbf24cf077d1b6ce24e305cbce
2021-05-31 19:41:44 +00:00
Aaron Ding
da4f353e42 Revert "pixel-selinux: add SJTAG policies" am: b078284e5d am: 2d35ae6cb8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664

Change-Id: Ib6b5b24801f721891ab64e09259217ca9d3ab954
2021-05-31 19:20:35 +00:00
Aaron Ding
2a1f5eb8b3 Revert "pixel-selinux: add SJTAG policies" am: b078284e5d am: 5825ee37e3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664

Change-Id: I3647845eba2262b9701d8c0a4c028473ba500a04
2021-05-31 19:17:45 +00:00
Aaron Ding
5825ee37e3 Revert "pixel-selinux: add SJTAG policies" am: b078284e5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664

Change-Id: I05c1e374972a89fe6d5dcd75f4c8fe41b383f3ff
2021-05-31 18:46:59 +00:00
Aaron Ding
2d35ae6cb8 Revert "pixel-selinux: add SJTAG policies" am: b078284e5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14528664

Change-Id: I819e31237595331138b5230a77d5f85dbd368bc0
2021-05-31 18:43:52 +00:00
Aaron Ding
b078284e5d Revert "pixel-selinux: add SJTAG policies"
This reverts commit bc525e1a49.

Bug: 186500818
Change-Id: I0bab67d42530270a819598ac320a5946e5d7aa6d
Signed-off-by: Aaron Ding <aaronding@google.com>
2021-06-01 01:21:14 +08:00
Vova Sharaienko
2aa6db04f9 Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a am: 977bc88d0b am: a4660c88a9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712

Change-Id: I4b945f561a0e50e7c057802dbe45fc57ca28054a
2021-05-28 18:45:35 +00:00
Vova Sharaienko
88bdaf0aa3 Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a am: e133184c45 am: d0fa6b0ab5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712

Change-Id: I1fe4d64caac6bb4ca7a5387484f44511f2e4e83b
2021-05-28 18:45:29 +00:00
Vova Sharaienko
a4660c88a9 Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a am: 977bc88d0b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712

Change-Id: I75846a70a82ecd1762fb9dbd20117d8627d8998e
2021-05-28 18:29:50 +00:00
Vova Sharaienko
d0fa6b0ab5 Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a am: e133184c45
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712

Change-Id: I9358a2cc6de91a13c46e868d8b80ae4cedc00758
2021-05-28 18:19:43 +00:00
Vova Sharaienko
977bc88d0b Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712

Change-Id: I4ea468c2ebfdec8a35bfb02897f411bb8c814f22
2021-05-28 18:06:52 +00:00
Vova Sharaienko
e133184c45 Merge "hal_health_default: updated sepolicy" into sc-dev am: ce4002966a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14738712

Change-Id: I19ce2ef9b6f771d35036dcd5fd8217bc8eb8219a
2021-05-28 17:59:27 +00:00
Vova Sharaienko
ce4002966a Merge "hal_health_default: updated sepolicy" into sc-dev 2021-05-28 17:42:45 +00:00
Rick Yiu
b92e2a4989 Merge "gs101-sepolicy: Allow dumping vendor groups values" into sc-dev am: 6c5779d0af am: 8b7354ea6c am: 25f9147d6e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692150

Change-Id: Ibb4c135171b788ed1aeb1db7273788d1be986f43
2021-05-28 02:33:58 +00:00
Rick Yiu
6d1fe62c79 Merge "gs101-sepolicy: Allow dumping vendor groups values" into sc-dev am: 6c5779d0af am: 32838e85d8 am: 94af2e728b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692150

Change-Id: Ie628b9da89e14551bfdba3777c0df783b39983f3
2021-05-28 02:33:26 +00:00
Rick Yiu
25f9147d6e Merge "gs101-sepolicy: Allow dumping vendor groups values" into sc-dev am: 6c5779d0af am: 8b7354ea6c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692150

Change-Id: I3a8ec644efa86e0e059ff043edfcce44e7e871d1
2021-05-28 02:09:45 +00:00
Rick Yiu
94af2e728b Merge "gs101-sepolicy: Allow dumping vendor groups values" into sc-dev am: 6c5779d0af am: 32838e85d8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692150

Change-Id: I4723916265a0301e4cb5b0bfac9e71e5c86acbc2
2021-05-28 02:06:23 +00:00
Rick Yiu
32838e85d8 Merge "gs101-sepolicy: Allow dumping vendor groups values" into sc-dev am: 6c5779d0af
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692150

Change-Id: I1b2c4fb8582bf71543ea0c115f369dbb6f8abe9b
2021-05-28 01:44:23 +00:00
Rick Yiu
8b7354ea6c Merge "gs101-sepolicy: Allow dumping vendor groups values" into sc-dev am: 6c5779d0af
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14692150

Change-Id: I5cdb6420dd45a50867d20a3b1ec97b1989af7a53
2021-05-28 01:40:56 +00:00
Rick Yiu
6c5779d0af Merge "gs101-sepolicy: Allow dumping vendor groups values" into sc-dev 2021-05-28 01:16:34 +00:00
Vova Sharaienko
144b6b06b3 hal_health_default: updated sepolicy
This allows the android.hardware.health service to access
AIDL Stats service

Bug: 186578402
Test: Build, flash, boot & and logcat | grep "avc"
Change-Id: I1bfd8dbca4a8a87387c5fc0cc47b9f09a6d07ea4
2021-05-27 01:51:21 +00:00
Harpreet Eli Sangha
e952c414ec Add CccDkTimeSyncService
Bug: 183676280
Test: Build and run example client.
Signed-off-by: Harpreet Eli Sangha <eliptus@google.com>
Change-Id: I862d5f3e8be3cf7d23489be374fabf26e29e0ca5
2021-05-26 16:59:51 +00:00
TreeHugger Robot
c7580a05a3 Merge "Add sepolicy for Trusty keymint" into sc-dev am: 9e9c6a75da am: 51a593d480 am: 61d2448998
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14414676

Change-Id: I685624040d40e910b219426ce50a72859d800ce7
2021-05-26 14:23:55 +00:00
TreeHugger Robot
ca287435ec Merge "Add sepolicy for Trusty keymint" into sc-dev am: 9e9c6a75da am: 607ba868d5 am: 2acb9f0f89
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14414676

Change-Id: Ide844dd8cc37365198485afc6c4fb0827dc18798
2021-05-26 14:23:23 +00:00
TreeHugger Robot
61d2448998 Merge "Add sepolicy for Trusty keymint" into sc-dev am: 9e9c6a75da am: 51a593d480
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14414676

Change-Id: I74bd030d4720f08730ea6fe8bffbf3c314a07b5b
2021-05-26 14:09:52 +00:00
TreeHugger Robot
2acb9f0f89 Merge "Add sepolicy for Trusty keymint" into sc-dev am: 9e9c6a75da am: 607ba868d5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14414676

Change-Id: I1a2b71b4577ffe4e3cafc69e64b9adc356fe9140
2021-05-26 14:08:54 +00:00
TreeHugger Robot
607ba868d5 Merge "Add sepolicy for Trusty keymint" into sc-dev am: 9e9c6a75da
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14414676

Change-Id: I770a835945c9c73226bcbeaf06120cadb6af5cd0
2021-05-26 13:46:37 +00:00
TreeHugger Robot
51a593d480 Merge "Add sepolicy for Trusty keymint" into sc-dev am: 9e9c6a75da
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14414676

Change-Id: I5e2c27949cd69819a9aa12da921494adefa16606
2021-05-26 13:44:53 +00:00
TreeHugger Robot
9e9c6a75da Merge "Add sepolicy for Trusty keymint" into sc-dev 2021-05-26 13:23:20 +00:00
sukiliu
744a9a1f8f Update avc error on ROM 7395282 am: 073a0f5ed1 am: 826d258fcf am: 498d13f245
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14717075

Change-Id: I22de4124a2e0c31293b40b8a456dda713ad36120
2021-05-26 05:28:21 +00:00
sukiliu
414a7c2eb2 Update avc error on ROM 7395282 am: 073a0f5ed1 am: 248d61e87a am: af73c8c528
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14717075

Change-Id: I545772cd307c0471e0fce1c8909aff29fefbbd2f
2021-05-26 05:27:46 +00:00
sukiliu
498d13f245 Update avc error on ROM 7395282 am: 073a0f5ed1 am: 826d258fcf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14717075

Change-Id: I96c0146d4c54620b6967f5494cac1d46450de195
2021-05-26 05:14:25 +00:00
sukiliu
af73c8c528 Update avc error on ROM 7395282 am: 073a0f5ed1 am: 248d61e87a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14717075

Change-Id: I38be92b164e8d52e1413f31466c07e9999f02609
2021-05-26 05:12:26 +00:00
sukiliu
248d61e87a Update avc error on ROM 7395282 am: 073a0f5ed1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14717075

Change-Id: I40f8e723d005fad45b4ba480fbc456cb34360910
2021-05-26 04:56:37 +00:00
sukiliu
826d258fcf Update avc error on ROM 7395282 am: 073a0f5ed1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14717075

Change-Id: Ifa05ac25bfcf263c9cac8584420b17bb84fce60c
2021-05-26 04:54:42 +00:00
sukiliu
073a0f5ed1 Update avc error on ROM 7395282
avc: denied { dac_override } for comm="rebalance_inter" capability=1 scontext=u:r:rebalance_interrupts_vendor:s0 tcontext=u:r:rebalance_interrupts_vendor:s0 tclass=capability permissive=0

Bug: 189275648
Test: PtsSELinuxTestCases
Change-Id: I637f1fcd901b8bf59096ba83c927b4d353f0405b
2021-05-26 11:11:03 +08:00
Shawn Willden
c5fdb59287 Add sepolicy for Trusty keymint
Bug: 177729159
Test: VtsAidlKeyMintTargetTest on P21
Change-Id: I993faa2a829d3ad4f1b920ff59ba4fd5ef8e7db7
2021-05-25 16:37:29 -06:00
TreeHugger Robot
466d84f1aa Merge "Allow mediacodec to access the vframe-secure DMA-BUF heap" into sc-dev am: 477e19f032 am: a85442bd10 am: 0578de6766
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14704012

Change-Id: Ie994073180e896c3a17e7cd566620141c9bb167d
2021-05-25 19:54:27 +00:00
TreeHugger Robot
c8f7602949 Merge "Allow mediacodec to access the vframe-secure DMA-BUF heap" into sc-dev am: 477e19f032 am: 1e8934b03c am: efe8194fe0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14704012

Change-Id: I9d2fcc5fd036a8ab297f5f6532d97286ee1fca76
2021-05-25 19:54:13 +00:00
TreeHugger Robot
0578de6766 Merge "Allow mediacodec to access the vframe-secure DMA-BUF heap" into sc-dev am: 477e19f032 am: a85442bd10
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14704012

Change-Id: Id12fcf0e304c0bf06261ec1032a7b12577e6b4b8
2021-05-25 19:30:55 +00:00
TreeHugger Robot
efe8194fe0 Merge "Allow mediacodec to access the vframe-secure DMA-BUF heap" into sc-dev am: 477e19f032 am: 1e8934b03c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14704012

Change-Id: I728c697e49d26bc6d69d207d65599ca3e9a058c9
2021-05-25 19:29:59 +00:00
TreeHugger Robot
1e8934b03c Merge "Allow mediacodec to access the vframe-secure DMA-BUF heap" into sc-dev am: 477e19f032
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14704012

Change-Id: Id748c228fb796c76ccc01d3b19f829928c185adf
2021-05-25 19:07:26 +00:00
TreeHugger Robot
a85442bd10 Merge "Allow mediacodec to access the vframe-secure DMA-BUF heap" into sc-dev am: 477e19f032
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14704012

Change-Id: Ib1fe025493a3021d69bf7f79c8809098933ba1b8
2021-05-25 19:05:23 +00:00
TreeHugger Robot
477e19f032 Merge "Allow mediacodec to access the vframe-secure DMA-BUF heap" into sc-dev 2021-05-25 18:45:37 +00:00
TreeHugger Robot
2755d9f535 Merge "dumpstate: add sepolicy for hal_dumpstate to access sysfs_display" into sc-dev am: 57eefb5b13 am: cb80570b92 am: be0ea48cef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608138

Change-Id: I7dbf7bd64e47bac0ee9313b4f9d55df779f0ba7e
2021-05-25 12:55:52 +00:00
TreeHugger Robot
91efdd8266 Merge "dumpstate: add sepolicy for hal_dumpstate to access sysfs_display" into sc-dev am: 57eefb5b13 am: eeb41949c2 am: 667ba8cb19
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608138

Change-Id: Ibca092073fb4ce8cee4afe15f4d995d6fe80b9e3
2021-05-25 12:55:27 +00:00
TreeHugger Robot
be0ea48cef Merge "dumpstate: add sepolicy for hal_dumpstate to access sysfs_display" into sc-dev am: 57eefb5b13 am: cb80570b92
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608138

Change-Id: Ifa1536ee09f4cd8b3c048001798d5a2b6368bd70
2021-05-25 11:58:29 +00:00
TreeHugger Robot
667ba8cb19 Merge "dumpstate: add sepolicy for hal_dumpstate to access sysfs_display" into sc-dev am: 57eefb5b13 am: eeb41949c2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608138

Change-Id: I87d15c071e3de40b367badbe185db35cc14bb332
2021-05-25 11:51:11 +00:00
TreeHugger Robot
cb80570b92 Merge "dumpstate: add sepolicy for hal_dumpstate to access sysfs_display" into sc-dev am: 57eefb5b13
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608138

Change-Id: I594759be23e922d975f395da8a1d363925dc30ca
2021-05-25 11:50:55 +00:00
TreeHugger Robot
eeb41949c2 Merge "dumpstate: add sepolicy for hal_dumpstate to access sysfs_display" into sc-dev am: 57eefb5b13
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608138

Change-Id: I7a32e0b2bcef407665e75e58d0af2db52c08323b
2021-05-25 11:49:35 +00:00
TreeHugger Robot
57eefb5b13 Merge "dumpstate: add sepolicy for hal_dumpstate to access sysfs_display" into sc-dev 2021-05-25 10:12:38 +00:00
Ocean Chen
b8aebc85e1 storage: update sepolicy for hardwareinfoservice
avc: denied { search } for name="0:0:0:0" dev="sysfs" ino=57525 scontext=u:r:hardware_info_app:s0:c512,c768 avc: denied { search } for name="health_descriptor" dev="sysfs" ino=57017 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=dir permissive=0 app=com.google.android.hardwareinfo
avc: denied { search } for name="health_descriptor" dev="sysfs" ino=57017 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=dir permissive=0 app=com.google.android.hardwareinfo

avc: denied { read } for name="vpd_pg80" dev="sysfs" ino=57559 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0 app=com.google.android.hardwareinfo
avc: denied { read } for name="model" dev="sysfs" ino=57534 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0 app=com.google.android.hardwareinfo
avc: denied { read } for name="vendor" dev="sysfs" ino=57533 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0 app=com.google.android.hardwareinfo
avc: denied { read } for name="rev" dev="sysfs" ino=57535 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0 app=com.google.android.hardwareinfo
avc: denied { read } for name="eol_info" dev="sysfs" ino=57020 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0 app=com.google.android.hardwareinfo
avc: denied { read } for name="life_time_estimation_a" dev="sysfs" ino=57021 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0 app=com.google.android.hardwareinfo

Bug: 188755652
Test: reboot then check hardwareinfo and avc denined log
Change-Id: Ia03ebdd6b0b46b4c9ace5fbf1fc47a455a55abcb
2021-05-25 16:57:20 +08:00
Roger Fang
2ca5dff832 Merge "sepolicy: gs101: add permission for the hardware info dsp part number" into sc-dev am: 56cbfd5a0a am: 21d7509c17 am: 594eecad3e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696016

Change-Id: I1e7842f1594234b674714d5be3e637e9f5ff3fa5
2021-05-25 02:18:51 +00:00
Roger Fang
c35b8c491e Merge "sepolicy: gs101: add permission for the hardware info dsp part number" into sc-dev am: 56cbfd5a0a am: 292faf8ed3 am: 8522122b5f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696016

Change-Id: I11e4eb0a8c44b5098f0835c078a4f111230bcd37
2021-05-25 02:18:00 +00:00
Roger Fang
594eecad3e Merge "sepolicy: gs101: add permission for the hardware info dsp part number" into sc-dev am: 56cbfd5a0a am: 21d7509c17
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696016

Change-Id: I1d70340b2152d73bec3d51651bb10f68e91952ae
2021-05-25 01:49:44 +00:00
Roger Fang
8522122b5f Merge "sepolicy: gs101: add permission for the hardware info dsp part number" into sc-dev am: 56cbfd5a0a am: 292faf8ed3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696016

Change-Id: I9278fff7d05c8e65bd8a9e4d39cc4a1a380ca10f
2021-05-25 01:47:48 +00:00
Roger Fang
292faf8ed3 Merge "sepolicy: gs101: add permission for the hardware info dsp part number" into sc-dev am: 56cbfd5a0a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696016

Change-Id: I929b5c4b1f37c2e0d8bee655fc0141a5a0bbbd4e
2021-05-25 01:24:04 +00:00
Roger Fang
21d7509c17 Merge "sepolicy: gs101: add permission for the hardware info dsp part number" into sc-dev am: 56cbfd5a0a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14696016

Change-Id: If394b6c1a719b26a295b97980b94fb217442ef76
2021-05-25 01:22:03 +00:00
Ines Ayara
7593a655ed Merge "Transition to using libedgetpu_util.so instead of libedgetpu_darwinn2.so. bug: b/182303547" into sc-dev am: dfb3783187 am: 304a92ea86 am: b311856023
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14652412

Change-Id: Ie6de0c54669ccbad8f3d267596e370c62feaea56
2021-05-25 01:05:02 +00:00
Ines Ayara
cd4e8e3737 Merge "Transition to using libedgetpu_util.so instead of libedgetpu_darwinn2.so. bug: b/182303547" into sc-dev am: dfb3783187 am: 1a7f873b06 am: 23ccf9362e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14652412

Change-Id: I3c2abc270c2cada2124f86fa51687deb49225988
2021-05-25 01:04:03 +00:00
Roger Fang
56cbfd5a0a Merge "sepolicy: gs101: add permission for the hardware info dsp part number" into sc-dev 2021-05-25 01:02:39 +00:00
Ines Ayara
b311856023 Merge "Transition to using libedgetpu_util.so instead of libedgetpu_darwinn2.so. bug: b/182303547" into sc-dev am: dfb3783187 am: 304a92ea86
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14652412

Change-Id: I1c76cbd2013a9a3b4c8ca34184796a5a2719fdba
2021-05-25 00:41:40 +00:00
Ines Ayara
23ccf9362e Merge "Transition to using libedgetpu_util.so instead of libedgetpu_darwinn2.so. bug: b/182303547" into sc-dev am: dfb3783187 am: 1a7f873b06
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14652412

Change-Id: I330983da9a9c6d35f341c15cb5c367e3be7a6ce7
2021-05-25 00:39:48 +00:00
Ines Ayara
1a7f873b06 Merge "Transition to using libedgetpu_util.so instead of libedgetpu_darwinn2.so. bug: b/182303547" into sc-dev am: dfb3783187
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14652412

Change-Id: I46ee22509e42f4baf7df226b2e2eedcf3ecfaa6c
2021-05-25 00:18:54 +00:00
Ines Ayara
304a92ea86 Merge "Transition to using libedgetpu_util.so instead of libedgetpu_darwinn2.so. bug: b/182303547" into sc-dev am: dfb3783187
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14652412

Change-Id: Ie52a7d786c4344a7ba0e8bf6bbba87ae7f9d0999
2021-05-25 00:16:44 +00:00
Vinay Kalia
68849437bd Allow mediacodec to access the vframe-secure DMA-BUF heap
This patch fixes the following denial:

HwBinder:751_2: type=1400 audit(0.0:9): avc: denied { open } for
path="/dev/dma_heap/vframe-secure" dev="tmpfs" ino=734
scontext=u:r:mediacodec:s0 tcontext=u:object_r:vframe_heap_device:s0
tclass=chr_file permissive=0

Bug: 188121584
Test: AV1 secure video playback

Signed-off-by: Vinay Kalia <vinaykalia@google.com>
Change-Id: I455b39914dd4316a427f5f756b4fb94a2c4db204
2021-05-24 23:57:28 +00:00
Ines Ayara
dfb3783187 Merge "Transition to using libedgetpu_util.so instead of libedgetpu_darwinn2.so. bug: b/182303547" into sc-dev 2021-05-24 23:55:32 +00:00
Roger Fang
a97bfcc1e1 sepolicy: gs101: add permission for the hardware info dsp part number
Bug: 188757638
Test: Manually test passed

Signed-off-by: Roger Fang <rogerfang@google.com>
Change-Id: Id0c3226411b058b613b92e67174f14e64c6c3a2b
2021-05-24 08:16:34 +00:00
Chase Wu
0924a30a37 Merge "genfs_contexts: fix path for cs40l25a i2c devices" into sc-v2-dev am: 80ab102382 am: 373fed0402
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14675588

Change-Id: I4c5e3bd7131eeca02c6acf1dcb0220dca87c8fc5
2021-05-24 01:35:39 +00:00
Chase Wu
373fed0402 Merge "genfs_contexts: fix path for cs40l25a i2c devices" into sc-v2-dev am: 80ab102382
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14675588

Change-Id: Id5204cd25e6fa512e485fc771cd1982b0e8f55dd
2021-05-24 01:20:31 +00:00
Chase Wu
80ab102382 Merge "genfs_contexts: fix path for cs40l25a i2c devices" into sc-v2-dev 2021-05-24 01:03:51 +00:00
Rick Yiu
5aeb1b9e45 gs101-sepolicy: Allow dumping vendor groups values
Fix:
avc: denied { read } for name="vendor_sched" dev="sysfs" ino=45566 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0

avc: denied { read } for name="dump_task_group_ta" dev="proc" ino=4026532542 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:proc:s0 tclass=file permissive=0

Bug: 172112042
Test: dump data as expected
Change-Id: I9945953dba4afddd34c1535c12193b1f00fdcef9
2021-05-22 21:30:47 +08:00
Grace Chen
9aac443958 Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c am: f8cf5a7354 am: 2930cbecc8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I3690feb255d227aebef57b9f33656590f5dcafc8
2021-05-21 19:54:23 +00:00
Grace Chen
b5b17de9f7 Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c am: ebadda8749 am: cd5abb427f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I6203e687fa579baa11bbe551cb1c0964f0d82791
2021-05-21 19:53:43 +00:00
Grace Chen
2930cbecc8 Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c am: f8cf5a7354
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I60b4d83788f3a3050341d5fea90500d193b69405
2021-05-21 19:39:12 +00:00
Grace Chen
cd5abb427f Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c am: ebadda8749
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I911c9d6ce67e9632b51dd1b6395cd59f59e1b29f
2021-05-21 19:37:36 +00:00
Grace Chen
ebadda8749 Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I62e7a0b9ff71f63221d6eaaad17a9333183912ec
2021-05-21 19:15:18 +00:00
Grace Chen
f8cf5a7354 Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev am: 16a38b2b6c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14514065

Change-Id: I3ea91e07cb86b9ccbe5c27fdbd29eee2cb4512c6
2021-05-21 19:14:16 +00:00
Grace Chen
16a38b2b6c Merge "Add selinux permissions for NFC/eSIM firmware upgrade and recovery" into sc-dev 2021-05-21 19:10:52 +00:00
chasewu
168a6b0c72 genfs_contexts: fix path for cs40l25a i2c devices
Due to recent changes which modifies the device name for i2c devices,
cs40l25a device names are now changed from ?-0043 and ?-0042 to
"i2c-cs40l25a" and "i2c-cs40l25a-dual"

Bug: 188078957
Bug: 188651116
Test: manual check avc denied logs
Signed-off-by: chasewu <chasewu@google.com>
Change-Id: I97d3a030c94166f8e2cda7daa38166b1532b6d9f
2021-05-21 17:32:53 +08:00
TreeHugger Robot
af3d05b467 Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e am: 62e330941f am: 2181d522f2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: I7666583ab9d9d165f4438c6f5f116eb7f1203fa3
2021-05-21 07:35:50 +00:00
TreeHugger Robot
fe9ca33bd0 Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e am: 257af6acb7 am: dc8c0f809d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: I32937a8dc1ed31ece7ec8e83f0d03349c5c90c13
2021-05-21 07:35:12 +00:00
TreeHugger Robot
2181d522f2 Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e am: 62e330941f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: I63745fe15fde523fadda9500cd759c9b71e12ee7
2021-05-21 07:21:25 +00:00
TreeHugger Robot
dc8c0f809d Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e am: 257af6acb7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: Ib3e9bc54dc3bb1e8bbebe07fe75ed5c23a132076
2021-05-21 07:19:35 +00:00
TreeHugger Robot
257af6acb7 Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: I57862e73bb90e64631501678dac852a7e4d96d45
2021-05-21 06:59:14 +00:00
TreeHugger Robot
62e330941f Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev am: b42a03fa9e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160586

Change-Id: I1f5224c5e295837500f52c7f2a91c7cf0c12e748
2021-05-21 06:57:16 +00:00
TreeHugger Robot
b42a03fa9e Merge "Grant sepolicy for Bluetooth Ccc Timesync feature" into sc-dev 2021-05-21 06:41:20 +00:00
SHUCHI LILU
85c06dce3c Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7 am: d041f55312 am: c685a924df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: Icc29858c5a94063aeec2f8647eafaf207bbe5bcc
2021-05-21 02:53:56 +00:00
SHUCHI LILU
f680c33593 Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7 am: aeb7f90af4 am: 119ce0c72d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: I857f5300f91a604aacc0154ec0c9fa3f11ff39bf
2021-05-21 02:53:03 +00:00
SHUCHI LILU
c685a924df Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7 am: d041f55312
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: Id1b3d85c7bd1ad4e4c223d0b8664f04ba519294e
2021-05-21 02:45:49 +00:00
SHUCHI LILU
119ce0c72d Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7 am: aeb7f90af4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: I24ff7f799fb7fbcf9ef61d95670f8838d7c8f361
2021-05-21 02:40:37 +00:00
SHUCHI LILU
d041f55312 Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: Ifa70b0837abb760f0d98ed67c2ecb00687e4ba04
2021-05-21 02:24:48 +00:00
SHUCHI LILU
aeb7f90af4 Merge "Update avc error on ROM 7380236" into sc-dev am: 5128ec7db7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14660737

Change-Id: I9ec909e4a4d07e8a46e6e4508b43a0ca8e5a5374
2021-05-21 02:22:40 +00:00
SHUCHI LILU
5128ec7db7 Merge "Update avc error on ROM 7380236" into sc-dev 2021-05-21 02:08:56 +00:00
TreeHugger Robot
fb3ed5bb15 Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c am: 91bf8bf616 am: 029e66f94a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: I0f7a9863564725aeffafb09d810342675932d319
2021-05-21 01:53:15 +00:00
TreeHugger Robot
c2f9f2d9cb Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c am: 69ccb014e3 am: addf784b3c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: I222d2ff6cf74f7d1d15c1e92fba62337fe9c3760
2021-05-21 01:51:59 +00:00
TreeHugger Robot
029e66f94a Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c am: 91bf8bf616
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: I256ec8b202ec7c76556be2bb6d80e414fde91b9d
2021-05-21 01:30:21 +00:00
TreeHugger Robot
addf784b3c Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c am: 69ccb014e3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: Ibb80f378387945abfefb7f33c53a297c3cdd0f7b
2021-05-21 01:28:45 +00:00
TreeHugger Robot
69ccb014e3 Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: Idf3d758f0b1f6781bd8771d8bc82af7f599a42be
2021-05-21 01:14:52 +00:00
TreeHugger Robot
91bf8bf616 Merge "pixel-selinux: add SJTAG policies" into sc-dev am: 73b7ad4a3c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604512

Change-Id: I462cc640fc849f81ecf49e3f39e802e7ab5fa483
2021-05-21 01:12:47 +00:00
TreeHugger Robot
73b7ad4a3c Merge "pixel-selinux: add SJTAG policies" into sc-dev 2021-05-21 00:49:42 +00:00
Maurice Lam
c0709a94c5 [automerger skipped] Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da -s ours am: 370ca9d7c9 am: d6ab0639e5 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: Ib7964ac511b3d3e29b8deb366bce4089c17b2196
2021-05-20 18:44:05 +00:00
Maurice Lam
a7e7b50ca6 [automerger skipped] Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da am: feba9d73d4 -s ours am: 93e06391c7 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: Ie4b0156aded91e90e3a276e8948fe57b18c00fbd
2021-05-20 18:43:44 +00:00
Maurice Lam
967e2b67cb [automerger skipped] DO NOT MERGE. Revert Exo selinux policies for S am: a1bf959f13 am: cfee7fe9bc -s ours am: a8607c248f -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: Id6387adf7313d0e16951c4728fb07e4be838ff7f
2021-05-20 18:43:43 +00:00
Maurice Lam
d6ab0639e5 [automerger skipped] Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da -s ours am: 370ca9d7c9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: I166892d8e696ee7f25ea415f4de1a474f8b8f75a
2021-05-20 18:13:42 +00:00
Maurice Lam
93e06391c7 [automerger skipped] Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da am: feba9d73d4 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: I85bc048c45e44478850f465ab715b2696d2bf9fa
2021-05-20 18:08:01 +00:00
Maurice Lam
a8607c248f [automerger skipped] DO NOT MERGE. Revert Exo selinux policies for S am: a1bf959f13 am: cfee7fe9bc -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: I05835e12536db178fbfc9fdfeade2be4dbe8e57a
2021-05-20 18:08:00 +00:00
Maurice Lam
370ca9d7c9 [automerger skipped] Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: I58c7628b630bb1c3b0d1433aa3dc0f5bf08a1c0a
2021-05-20 17:51:46 +00:00
Maurice Lam
feba9d73d4 Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev am: 32848785da
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: Id77a1e6b874638e4f12e2e885d1ccde957cb496c
2021-05-20 17:50:09 +00:00
Maurice Lam
cfee7fe9bc DO NOT MERGE. Revert Exo selinux policies for S am: a1bf959f13
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14533075

Change-Id: I5bf8406b143b44e5b7442963d5174e3409726710
2021-05-20 17:50:08 +00:00
Maurice Lam
32848785da Merge "DO NOT MERGE. Revert Exo selinux policies for S" into sc-dev 2021-05-20 17:31:08 +00:00
George Lee
f976b61580 Merge "power: mod sysfs_bcl path" into sc-dev am: 3561520ae2 am: a3b5872145 am: 754e75ce51
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14655334

Change-Id: Idcf8b2754c31c9709598d7881c2ef24a30f9f9a3
2021-05-20 16:00:08 +00:00
George Lee
1a9f861aaa Merge "power: mod sysfs_bcl path" into sc-dev am: 3561520ae2 am: aa5dc74e98 am: b32fe91162
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14655334

Change-Id: Ia9b2d1aad8103193a83feee1848ac169d34226cc
2021-05-20 15:59:58 +00:00
George Lee
754e75ce51 Merge "power: mod sysfs_bcl path" into sc-dev am: 3561520ae2 am: a3b5872145
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14655334

Change-Id: Ib058f0f463a099431e260816c68e58e08afbfc70
2021-05-20 15:51:57 +00:00
George Lee
b32fe91162 Merge "power: mod sysfs_bcl path" into sc-dev am: 3561520ae2 am: aa5dc74e98
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14655334

Change-Id: Ia749b07fe87455d6fe3bef4dbaaa480e362c672f
2021-05-20 15:46:08 +00:00
George Lee
a3b5872145 Merge "power: mod sysfs_bcl path" into sc-dev am: 3561520ae2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14655334

Change-Id: Id3f7f4b34fdae339edb5005028f6b930347b8574
2021-05-20 15:31:16 +00:00
George Lee
aa5dc74e98 Merge "power: mod sysfs_bcl path" into sc-dev am: 3561520ae2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14655334

Change-Id: Ie46877765eb766a63d79f641f2df37f2e82e8f34
2021-05-20 15:27:31 +00:00
George Lee
3561520ae2 Merge "power: mod sysfs_bcl path" into sc-dev 2021-05-20 15:12:44 +00:00
Ken Huang
560d12c3f1 dumpstate: add sepolicy for hal_dumpstate to access sysfs_display
Allow dumpstate to read panel extra info.

Bug: 183061481
Test: adb bugreport
Change-Id: I1902f28c2edceeb5b74ce655f83c8aea7c60825b
2021-05-20 13:53:39 +00:00
sukiliu
ba92629794 Update avc error on ROM 7380236
Bug: 188752787
Bug: 188752940
Test: PtsSELinuxTestCases
Change-Id: I5b674d4696ef470956301388f3d0fcc4883010c6
2021-05-20 16:52:43 +08:00
Peter Csaszar
8fd76cee44 pixel-selinux: add SJTAG policies
These are the SELinux policies for the sysfs files of the SJTAG
kernel interface. The files are in the following directories:

  /sys/devices/platform/sjtag_ap/interface/
  /sys/devices/platform/sjtag_gsa/interface/

Bug: 184768605
Signed-off-by: Peter Csaszar <pcsaszar@google.com>
Change-Id: I4ecf5cec5bbd08a44d7dbf88de5f3bc58b6c4fe5
2021-05-20 00:00:30 -07:00
Maurice Lam
f77550a04b [automerger skipped] DO NOT MERGE. Revert Exo selinux policies for S am: d733108c8f am: 96f42f2503 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14625317

Change-Id: I7121516e7d1406e6afb8b2e864a211f75a9ccb32
2021-05-20 05:09:34 +00:00
Maurice Lam
96f42f2503 DO NOT MERGE. Revert Exo selinux policies for S am: d733108c8f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14625317

Change-Id: I14efc89b61e4f87dc7408f51046cde2d7e22ff10
2021-05-20 04:47:11 +00:00
TreeHugger Robot
f59e055289 Merge "logger_app: Fix avc error" into sc-dev am: dc4db7d1cc am: 34471d4e60 am: d6d9fbd94e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14636312

Change-Id: Ie2ee17f732728fffae0d5c6adf6bde5f4bb545ff
2021-05-20 03:44:14 +00:00
yixuanjiang
621fca9df4 Add sepolicy for aocdump to access wlan_logs folder am: 494ac0cfe3 am: ddb8f48006 am: aa8edecbd9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14636311

Change-Id: Iaa51c922887e3f1eaf90ea58f487be0e37779c58
2021-05-20 03:39:22 +00:00
TreeHugger Robot
273f54f6df Merge "logger_app: Fix avc error" into sc-dev am: dc4db7d1cc am: b79874f1b2 am: bf71be56f2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14636312

Change-Id: Idd44ad11201c6f68dc3b43f1d34dd258f6583961
2021-05-20 03:37:46 +00:00
yixuanjiang
37f2ff7aa2 Add sepolicy for aocdump to access wlan_logs folder am: 494ac0cfe3 am: 826c703c8c am: cb9d2b7724
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14636311

Change-Id: I96ab58e1810d519e6eba56c279eeff84e950a204
2021-05-20 03:36:16 +00:00
Jinting Lin
841d4c7207 Merge "logger_app: Fix avc errors" into sc-dev am: c57a3fc989 am: 2ffb2eb505
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608140

Change-Id: If7df24b88d7426f9548e66cc0ffce6a6987ac453
2021-05-20 03:28:05 +00:00
Tri Vo
616b9b5c4a Merge "Fix file_contexts path for trusty_metricsd" into sc-dev am: 6a558ac02b am: 00566d516b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14605122

Change-Id: I06e62d27efd95083a0166c15f21719332d9bceca
2021-05-20 03:26:14 +00:00
Yu-Chi Cheng
811b4b85ec Merge "Renamed edgetpu_service to edgetpu_app_service." into sc-dev am: 8ebeb48b39 am: 8f44cf052c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14607191

Change-Id: I0eda1261b3beb99fc23da16074e951eb93479511
2021-05-20 03:20:51 +00:00
Roger Fang
efb69451da Merge changes from topic "IAudioMetricExt@1.0" into sc-dev am: 834331af79 am: 3d9dfa1e58
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14281930

Change-Id: Ia019993cb5bf40447d7d95fc2b2378faecdc1d31
2021-05-20 03:18:13 +00:00
Gary Jian
73dcf0f36d Add permission to access audiometricext hal for grilservice_app am: b9e4f7a759 am: b724a106ed
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13885467

Change-Id: Ie2fe5f9f791210b5d6396a84adeacac1e02f7c7a
2021-05-20 03:10:56 +00:00
Kevin DuBois
dbc10cab33 Merge "sepolicy: update gpu nnhal file" into sc-dev am: 811dbd6611 am: 0afea3c02d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14551347

Change-Id: I6521948b2700783a43d64423ccc5122579dc49cb
2021-05-20 03:00:13 +00:00
TreeHugger Robot
5f67d85c11 Merge "genfs_contexts: Specify correct GPU clock hint node" into sc-dev am: ac53196839 am: 3075216794
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14599591

Change-Id: I0e5a05529c55ecc7aba8c79da9b33669997ca972
2021-05-20 02:57:02 +00:00
TreeHugger Robot
ea19a0a015 Merge "Grant dumpstate hal read permission of camera hal dump files" into sc-dev am: 09a98d233d am: 843c90e0ae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604511

Change-Id: Id4316f3a2138761c46ce6fd619140bf5ec78219d
2021-05-20 02:45:51 +00:00
Minchan Kim
e5894651ef sepolicy: gs101: allow duump page_pinner am: 304a32c17e am: 2d7105504c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14472545

Change-Id: I95f1d1314127830bc5a1d361e610a445c79ac895
2021-05-20 02:30:40 +00:00
qinyiyan
c7a9c0331e Allows the edgetpu_logging service to write to the edgetpu sysfs. am: bfbf29c18c am: 8c575a737d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14554224

Change-Id: I719906e922fe3463e1ec2bc207da154afe062ff8
2021-05-20 02:21:03 +00:00
George Lee
f7a9784254 power: mod sysfs_bcl path
Recent change in kernel prompted path change.

Bug: 186879633
Test: adb bugreport
dumpstate_board.txt shows:
------ Mitigation Stats (/vendor/bin/sh -c echo "Source\t\tCount\tSOC\tTime\tVoltage"; for f in `ls /sys/devices/virtual/pmic/mitigation/last_triggered_count/*` ; do count=`cat $f`; a=${f/\/sys\/devices\/virtual\/pmic\/mitigation\/last_triggered_count\//}; b=${f/last_triggered_count/last_triggered_capacity}; c=${f/last_triggered_count/last_triggered_timestamp/}; d=${f/last_triggered_count/last_triggered_voltage/}; cnt=`cat $f`; cap=`cat ${b/count/cap}`; ti=`cat ${c/count/time}`; volt=`cat ${d/count/volt}`; echo "${a/_count/} \t$cnt\t$cap\t$ti\t$volt" ; done) ------
Source		Count	SOC	Time	Voltage
batoilo 	0	0	0	0
ocp_cpu1 	0	0	0	0
ocp_cpu2 	0	0	0	0
ocp_gpu 	0	0	0	0
ocp_tpu 	0	0	0	0
smpl_warn 	0	0	0	0
soft_ocp_cpu1 	0	0	0	0
soft_ocp_cpu2 	0	0	0	0
soft_ocp_gpu 	0	0	0	0
soft_ocp_tpu 	0	0	0	0
vdroop1 	0	0	0	0
vdroop2 	0	0	0	0
------ Clock Divider Ratio (/vendor/bin/sh -c echo "Source\t\tRatio"; for f in `ls /sys/devices/virtual/pmic/mitigation/clock_ratio/*` ; do ratio=`cat $f`; a=${f/\/sys\/devices\/virtual\/pmic\/mitigation\/clock_ratio\//}; echo "${a/_ratio/} \t$ratio" ; done) ------
Source		Ratio
cpu0_clk 	0xf041c3
cpu1_heavy_clk 	0xf041c3
cpu1_light_clk 	0xf041c5
cpu2_heavy_clk 	0xf041c3
cpu2_light_clk 	0xf041c5
gpu_heavy_clk 	off
gpu_light_clk 	off
tpu_heavy_clk 	off
tpu_light_clk 	off
------ Clock Stats (/vendor/bin/sh -c echo "Source\t\tStats"; for f in `ls /sys/devices/virtual/pmic/mitigation/clock_stats/*` ; do stats=`cat $f`; a=${f/\/sys\/devices\/virtual\/pmic\/mitigation\/clock_stats\//}; echo "${a/_stats/} \t$stats" ; done) ------
Source		Stats
cpu0_clk 	0x101
cpu1_clk 	0x101
cpu2_clk 	0x101
gpu_clk 	off
tpu_clk 	off
------ Triggered Level (/vendor/bin/sh -c echo "Source\t\tLevel"; for f in `ls /sys/devices/virtual/pmic/mitigation/triggered_lvl/*` ; do lvl=`cat $f`; a=${f/\/sys\/devices\/virtual\/pmic\/mitigation\/triggered_lvl\//}; echo "${a/_lvl/} \t$lvl" ; done) ------
Source		Level
ocp_cpu1 	7000mA
ocp_cpu2 	12000mA
ocp_gpu 	12000mA
ocp_tpu 	10500mA
smpl 	2900mV
soft_ocp_cpu1 	7000mA
soft_ocp_cpu2 	12000mA
soft_ocp_gpu 	12000mA
soft_ocp_tpu 	10500mA

Change-Id: Ibe303ad69ffb29f3c3bbd79d557d04138cd09bd7
2021-05-20 02:07:55 +00:00
Quinn Yan
8d40e6689f Merge "Add the TPU AIDL NNAPI HAL to the sepolicy." into sc-dev am: d2558a05b3 am: 73b67b2d9f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506028

Change-Id: I866ac143e6093a33ae24543a8589d6f8db4f2500
2021-05-20 01:13:37 +00:00
Bill Rassieur
911927a37c merge sc-v2-dev-plus-aosp to master. BUG:188412061
Change-Id: If57e38dbfed95b2170c3da3368c438e72c3fb245
2021-05-20 00:29:52 +00:00
iayara
53aff191d2 Transition to using libedgetpu_util.so instead of libedgetpu_darwinn2.so.
bug: b/182303547

Change-Id: Ia84e63fdfdeac5094752dfe9de84b75bd56aa131
2021-05-20 00:10:01 +00:00
Aaron Tsai
efff15f1ea Fix avc denied for shannon-ims am: 6a9a85cd07 am: 2cea3621b0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410097

Change-Id: I6d8d1bb6f768f720ec14e12a72f788670b15930c
2021-05-19 22:16:30 +00:00
TreeHugger Robot
c4e2b8d992 Merge "HardwareInfo: Add sepolicy for display" into sc-dev am: 6978eeaea4 am: 5f2f2a672b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824666

Change-Id: Ia9de666802e5497d8ac7b7a9a776706062e3bc0d
2021-05-19 21:59:48 +00:00
TreeHugger Robot
e5657163d2 Merge "wlc fwupdate implementation" into sc-dev am: 577f562727 am: 4a6a02638b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14063269

Change-Id: I76ed261622a76bc09fc5a607492c3556465aac25
2021-05-19 21:04:37 +00:00
SalmaxChang
b81e3416fe logger_app: Fix avc errors am: ab97657410 am: 48327b8da1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439439

Change-Id: I1fcd1e3f289130b2ef457ce9a3970cc2d1db8932
2021-05-19 20:46:59 +00:00
Jack Wu
81f33511df sepolicy: gs101: Fix hal_health_default avc denials am: 2c1ecf3a54 am: 9ac90fc4c1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439451

Change-Id: I3997e1059fa656bbf0dbc84f7c4203041cb9be0e
2021-05-19 20:30:14 +00:00
Alex Hong
791ff21f5b Merge "sepolicy: Update dumpstate HAL to V1.1" into sc-dev am: be17ec14cc am: 00279692ff
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14424440

Change-Id: I7af547ab1cf1fbb5aea7af071a548f16a6bf33f0
2021-05-19 20:14:18 +00:00
TreeHugger Robot
d90432a33a Merge "add sepolicy for dump TRICKLE/TEMP/DWELL defend config" into sc-dev am: 6978cd7220 am: 5853581df5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14419455

Change-Id: Iee7ed2e1f20803e07c9e6f245d4771a9441b61b4
2021-05-19 19:35:07 +00:00
qinyiyan
51678e8018 [SEPolicy] Allow EdgeTPU related service to log to stats service am: 9eeae92ade am: d781335da0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14431799

Change-Id: I65e250330db0e3c8361c4d771ebab21a6ff0d114
2021-05-19 18:15:50 +00:00
Chris Kuiper
a58d51be7f Merge "sepolicy: gs101: allow usf_reg_edit to run" into sc-dev am: d0d0304443 am: 0b3635fb29
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14415568

Change-Id: I3cf987c4d8b666da1e167f10d98e16fdaadbb84e
2021-05-19 18:05:13 +00:00
Yu-Chi Cheng
aca71c1ff6 Merge "Added the SELinux rule for the EdgeTPU vendor service." into sc-dev am: 7eef8643a3 am: c454ab19c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299125

Change-Id: Ib8c8c4fb2e72ec185990eb69ca8496a8d2375542
2021-05-19 16:07:24 +00:00
Daniel Mentz
3dd29e7961 Merge "Remove /vendor/lib/modules from file_contexts" into sc-dev am: 48e3555770 am: ff7a1a95d0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14416770

Change-Id: I2c6b9aee4ee389f59fbe12654bf051f6ff35a8bc
2021-05-19 15:58:30 +00:00
Daniel Mentz
5b3af10a77 Merge "Revert "remove wildcard on kernel modules"" into sc-dev am: 1473b1d155 am: 00288cf620
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14393364

Change-Id: I54624278b646120550c92a7361ca3987b470abb1
2021-05-19 15:32:48 +00:00
TreeHugger Robot
d12cd90647 Merge changes from topic "tcpdump_logger" into sc-dev am: 3186a0f24c am: ce190bb6ba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14048497

Change-Id: Iae259495aa9142f6c134be3c601a91c778607d8e
2021-05-19 13:33:47 +00:00
lucaslin
14a43257a3 Add sepolicy for tcpdump_logger to access wlan_logs folder am: 4099f60681 am: 6bc595ff73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410096

Change-Id: I678da68923db4ea19a69a9bee892c623c31e4f8c
2021-05-19 12:59:11 +00:00
Jenny Ho
bf530458a8 Merge "set sepolicy for testing_battery_profile" into sc-dev am: 93e25c878a am: 7fa843a6c5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14409676

Change-Id: I37a0d3b53bfedebba1931612eacf81793e5e65eb
2021-05-19 12:31:18 +00:00
SHUCHI LILU
9301ff00d6 Merge "Update avc error on ROM 7330059" into sc-dev am: 1d6ffc2305 am: 132080ab36
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14408671

Change-Id: I31fc4552614279fa0106401c80a62ab13b6efa31
2021-05-19 11:23:57 +00:00
TreeHugger Robot
5ffab576f1 Merge "update error on ROM 7331131" into sc-dev am: 4ae391d780 am: 6c360ca9d9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14409678

Change-Id: I38e872aec7f970357463442ad9459926787a7f3f
2021-05-19 11:13:27 +00:00
TreeHugger Robot
b7ce4ed92d Merge "Add sepolicy for sensor HAL accessing AOC sysfs node." into sc-dev am: 2391c852bd am: 702902ab26
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14327406

Change-Id: I80c3ea093f437522e0ff7abde0a4141a15c1ae08
2021-05-19 11:02:55 +00:00
Eddie Lan
cd0809040e Merge "Add sepolicy for fpc AIDL HAL" into sc-dev am: 2d4071ca8c am: cc4e6fa558
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14282485

Change-Id: I117a78d405efee730eb9ad4c184c4a89a2706f17
2021-05-19 10:48:05 +00:00
TreeHugger Robot
263693185e Merge "Provide fastbootd permissions to invoke the set_active command" into sc-dev am: 1256869c5c am: d9ca54da9b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14391698

Change-Id: Ib6a1292eebdde4e6ffc483009c6e9e7498c1017c
2021-05-19 09:47:47 +00:00
Maurice Lam
d733108c8f DO NOT MERGE. Revert Exo selinux policies for S
Bug: 188074060
Test: Forrest
Change-Id: I3465d10c3731ae49fec6e6fb7f2873cf2e5b9c23
2021-05-19 09:07:56 +00:00
TreeHugger Robot
d6d9fbd94e Merge "logger_app: Fix avc error" into sc-dev am: dc4db7d1cc am: 34471d4e60
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14636312

Change-Id: I2eb01590196f48dbed7b3f185cf0aeb9276c9b2e
2021-05-19 08:57:55 +00:00
yixuanjiang
aa8edecbd9 Add sepolicy for aocdump to access wlan_logs folder am: 494ac0cfe3 am: ddb8f48006
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14636311

Change-Id: I08550b20be580ab828ead72d656d7a8a6e50be30
2021-05-19 08:57:51 +00:00
TreeHugger Robot
bf71be56f2 Merge "logger_app: Fix avc error" into sc-dev am: dc4db7d1cc am: b79874f1b2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14636312

Change-Id: Ie1867dc41ddbadc37ca5c70843e015585af3a666
2021-05-19 08:48:05 +00:00
TreeHugger Robot
b79874f1b2 Merge "logger_app: Fix avc error" into sc-dev am: dc4db7d1cc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14636312

Change-Id: I4ec355ab7418f960c967984aded20fa9322030b7
2021-05-19 08:43:40 +00:00
TreeHugger Robot
34471d4e60 Merge "logger_app: Fix avc error" into sc-dev am: dc4db7d1cc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14636312

Change-Id: Id6de718c78cbca19c45ef9a1a9feda9d95ecb476
2021-05-19 08:38:09 +00:00
yixuanjiang
cb9d2b7724 Add sepolicy for aocdump to access wlan_logs folder am: 494ac0cfe3 am: 826c703c8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14636311

Change-Id: I8b6d7779a5d3b5c945c7b8206f510135d8d0424a
2021-05-19 08:36:47 +00:00
yixuanjiang
ddb8f48006 Add sepolicy for aocdump to access wlan_logs folder am: 494ac0cfe3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14636311

Change-Id: I86a482f9ad157738fd4163d4490069ebb764e21e
2021-05-19 08:36:16 +00:00
TreeHugger Robot
dc4db7d1cc Merge "logger_app: Fix avc error" into sc-dev 2021-05-19 08:31:39 +00:00
yixuanjiang
826c703c8c Add sepolicy for aocdump to access wlan_logs folder am: 494ac0cfe3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14636311

Change-Id: Iefe2f8ef7f6cda5896da75634a3eaa9560be44ff
2021-05-19 08:10:35 +00:00
SalmaxChang
b486ddedc5 logger_app: Fix avc error
avc: denied { search } for name="ramdump" dev="dm-7" ino=316 scontext=u:r:logger_app:s0:c17,c257,c512,c768 tcontext=u:object_r:ramdump_vendor_data_file:s0 tclass=dir permissive=0
avc: denied { search } for name="ssrdump" dev="dm-11" ino=292 scontext=u:r:logger_app:s0:c23,c257,c512,c768 tcontext=u:object_r:sscoredump_vendor_data_crashinfo_file:s0 tclass=dir permissive=0

Bug: 188601292
Bug: 188611595

Change-Id: If6b204bf0d5c502cf09c9fe70bcd572cfe2db016
2021-05-19 07:39:36 +00:00
yixuanjiang
494ac0cfe3 Add sepolicy for aocdump to access wlan_logs folder
Add related sepolicies on aoc dump when pixel logger using
wlan config

Bug: 188411088
Signed-off-by: yixuanjiang <yixuanjiang@google.com>
Change-Id: I7a786f25b9094cc9ebeef79e4aff5522bde17d19
2021-05-19 14:11:42 +08:00
Jinting Lin
2ffb2eb505 Merge "logger_app: Fix avc errors" into sc-dev am: c57a3fc989
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608140

Change-Id: Id284f7befba9cc5f404087efab266d2a94b983e7
2021-05-19 02:39:22 +00:00
Jinting Lin
c57a3fc989 Merge "logger_app: Fix avc errors" into sc-dev 2021-05-19 02:18:39 +00:00
Tri Vo
00566d516b Merge "Fix file_contexts path for trusty_metricsd" into sc-dev am: 6a558ac02b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14605122

Change-Id: I73654ca4cb0e8dac699db1b99a1722b85101f2f4
2021-05-18 22:38:38 +00:00
Tri Vo
6a558ac02b Merge "Fix file_contexts path for trusty_metricsd" into sc-dev 2021-05-18 22:18:39 +00:00
Tri Vo
970f15b13d Fix file_contexts path for trusty_metricsd
Bug: 188417701
Bug: 173423860
Test: trusty_metricsd starts
Change-Id: I212c2d449441ac4b9238c8f7171982b253d4b6e0
2021-05-18 19:39:42 +00:00
Yu-Chi Cheng
8f44cf052c Merge "Renamed edgetpu_service to edgetpu_app_service." into sc-dev am: 8ebeb48b39
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14607191

Change-Id: I9c17d89a677f02dfb329933db057fcf9257ce68b
2021-05-18 19:23:15 +00:00
Yu-Chi Cheng
8ebeb48b39 Merge "Renamed edgetpu_service to edgetpu_app_service." into sc-dev 2021-05-18 19:13:21 +00:00
TreeHugger Robot
87f6042d23 Merge "Remove platform certification from imsservice" into sc-dev am: 6a5cfd86f5 am: b33a1a4042 am: 067716b11c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14343989

Change-Id: I6e70c1f4dd5d11149ed0781181899c476dcde245
2021-05-18 18:13:58 +00:00
Roger Fang
3d9dfa1e58 Merge changes from topic "IAudioMetricExt@1.0" into sc-dev am: 834331af79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14281930

Change-Id: If56802dd85f6a6be85982ff7bbd2139f7a5518ea
2021-05-18 17:38:54 +00:00
Gary Jian
b724a106ed Add permission to access audiometricext hal for grilservice_app am: b9e4f7a759
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13885467

Change-Id: I7b4da71ea18f09d42bacffd9aa28644b38b92513
2021-05-18 17:38:52 +00:00
Roger Fang
834331af79 Merge changes from topic "IAudioMetricExt@1.0" into sc-dev
* changes:
  sepolicy: gs101: add IAudioMetricExt settings
  Add permission to access audiometricext hal for grilservice_app
2021-05-18 17:21:48 +00:00
TreeHugger Robot
9f7e2553f4 Merge "Update gs101 sepolicy for contexthub HAL" into sc-dev am: ff7948fc48 am: 81e7e0d374 am: 268781c624
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14354723

Change-Id: I8485dfc27c7c55ecf65e953708426babf2b5aa1c
2021-05-18 16:42:31 +00:00
TreeHugger Robot
e661572624 Merge "sepolicy:gs101: allow init-insmod-sh to access sysfs_leds nodes" into sc-dev am: c134ed985a am: 56305a9427 am: 4176a39915
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14357213

Change-Id: I57ca717aba8ceb55035814d0eaf233fca92ee3fc
2021-05-18 16:42:22 +00:00
TreeHugger Robot
cb5e052aec Merge "change persist.camera to persit.vendor.camera" into sc-dev am: 2c4b0fd96a am: 82f13cbf48 am: b41e03b3a6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14356785

Change-Id: Ifb927bf6f387d294b39092517a5aec21c8017cbb
2021-05-18 16:42:17 +00:00
TreeHugger Robot
c64692dc40 Merge "Add sepolicy for sensor HAL to read lhbm" into sc-dev am: 7a4cd3a6e0 am: 04b1f2cdec am: a8f126d70c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299201

Change-Id: I54fa74806e8400d5e012a6dbe6c606d00bb9f8f9
2021-05-18 16:42:11 +00:00
Kevin DuBois
0afea3c02d Merge "sepolicy: update gpu nnhal file" into sc-dev am: 811dbd6611
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14551347

Change-Id: Ia73a117f48808441194e827384ebf88ee671c127
2021-05-18 15:28:16 +00:00
Kevin DuBois
811dbd6611 Merge "sepolicy: update gpu nnhal file" into sc-dev 2021-05-18 15:07:05 +00:00
Quinn Yan
3175af2d48 Merge "Add the TPU AIDL NNAPI HAL to the sepolicy." into sc-dev am: d2558a05b3 am: 5145ae8e4c am: e11173811e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506028

Change-Id: I387df14cf83a29032cb5595f2be42eb4c74d9c63
2021-05-18 13:29:12 +00:00
SHUCHI LILU
360a59388c Merge "Update avc error on ROM 7358093" into sc-dev am: 60bf6343be am: 64a1e16887 am: 218a434cd8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542522

Change-Id: I223178f7c40891ed4826ce95516ab9feda8a4df9
2021-05-18 13:28:35 +00:00
Midas Chien
c88435dc47 Merge "Allowed PowerHAL service access Display node" into sc-dev am: b610fd307e am: d2e21ded9a am: c5d3b92fe5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14308761

Change-Id: I0e8573afece7fe30bb218bde22510bfeb29935bd
2021-05-18 13:28:28 +00:00
SalmaxChang
f4b979cf7f rfsd: fix permission error am: 30b9f8f277 am: 272b4e5590 am: 4c134fec1b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467419

Change-Id: I0d3ee4e34ea238c410222c8caabe52573af06bb1
2021-05-18 13:28:21 +00:00
Manish Varma
6021febd2c genfs_contexts: fix path for st21nfc i2c devices am: 705ecbe0ab am: 4aa4640559 am: a5a368cdfc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538367

Change-Id: I2f4729c09419c0c852e1e5e47d8232deac3fcb25
2021-05-18 13:28:13 +00:00
Manish Varma
3f343b7b2c genfs_contexts: fix path for s2mpg1X i2c devices am: fd2a6b9a74 am: a592b23a80 am: 03657f8e3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538366

Change-Id: I51931583362903d08cc8962eb38f499493d7145d
2021-05-18 13:28:12 +00:00
Manish Varma
1f6bee9cb4 genfs_contexts: fix path for cs40l25a i2c devices am: 194fef8b5a am: 67d28bdf03 am: 459bdb2a40
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538365

Change-Id: I9c538a63d33730aea7175754625d7af2fcdf028e
2021-05-18 13:28:11 +00:00
Manish Varma
739bbced69 genfs_contexts: fix path for max77759tcpc i2c devices am: 3868f8aa88 am: aaee225e77 am: db3f825375
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538364

Change-Id: Ide601be79ed433a0831c0b1432e5efa524dac52b
2021-05-18 13:28:10 +00:00
Manish Varma
a08d344be1 genfs_contexts: fix path for p9412 i2c devices am: b08c98c2b4 am: 9ba9e2a783 am: 529d215c31
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14535947

Change-Id: I653d91e668e5fbaa3004fbc0ecdc499a53b8aa19
2021-05-18 13:28:09 +00:00
TreeHugger Robot
8b4923b7c8 Merge changes from topic "186500818-set1" into sc-dev am: 775771b811 am: a019f35a3b am: c833549d8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14490413

Change-Id: I24fc274705adfec6ee3060a67829a9e6726550b6
2021-05-18 13:27:55 +00:00
Vineeta Srivastava
0bf4c5c898 Merge "Add sepolicy for the UDFPS antispoof property" into sc-dev am: 14a07e230a am: 4d42a986f8 am: 5e7734b411
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467424

Change-Id: I6251fb8f52360cfa753797212ad088ad3ff7fb54
2021-05-18 13:26:17 +00:00
jintinglin
3be06b2ec9 logger_app: Fix avc errors
avc: denied { read } for name="level" dev="sysfs" ino=57112 scontext=u:r:logger_app:s0:c29,c257,c512,c768 tcontext=u:object_r:sysfs_sscoredump_level:s0 tclass=file permissive=0 app=com.android.pixellogger

Bug: 187909426
Change-Id: I2037b1d2613736c8e1789bc96bfd4be0168444e0
2021-05-18 18:46:00 +08:00
Roger Fang
9de2688cd4 sepolicy: gs101: add IAudioMetricExt settings
E init    : Could not start service 'audiometricext' as part of class 'hal': File /vendor/bin/hw/vendor.google.audiometricext@1.0-service-vendor(labeled "u:object_r:vendor_file:s0")

vendor.google.a: type=1400 audit(0.0:3): avc: denied { read } for name="u:object_r:hwservicemanager_prop:s0" dev="tmpfs" ino=188 scontext=u:r:hal_audiometricext_default:s0 tcontext=u:object_r:hwservicemanager_prop:s0 tclass=file permissive=1

E SELinux : avc:  denied  { find } for interface=vendor.google.audiometricext::IAudioMetricExt sid=u:r:hal_audiometricext_default:s0 pid=819 scontext=u:r:hal_audiometricext_default:s0 tcontext=u:object_r:default_android_hwservice:s0 tclass=hwservice_manager permissive=1

E SELinux : avc:  denied  { add } for interface=android.hidl.base::IBase sid=u:r:hal_audiometricext_default:s0 pid=795 scontext=u:r:hal_audiometricext_default:s0 tcontext=u:object_r:hidl_base_hwservice:s0 tclass=hwservice_manager permissive=1

Bug: 180627405
Test: manually test passed
Signed-off-by: Roger Fang <rogerfang@google.com>
Change-Id: I91d76eb0ad5850e75ad865304d83f3025b981915
2021-05-18 05:06:58 +00:00
Gary Jian
b9e4f7a759 Add permission to access audiometricext hal for grilservice_app
Bug: 182526894
Test: Manual
Change-Id: I3ca85be7e5ab244e2dea2c6f7768f59c07b44525
2021-05-18 02:18:56 +00:00
TreeHugger Robot
3075216794 Merge "genfs_contexts: Specify correct GPU clock hint node" into sc-dev am: ac53196839
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14599591

Change-Id: Ifc1411973f3dcb258d3673e05d8d519e9132cd64
2021-05-18 00:54:21 +00:00
TreeHugger Robot
843c90e0ae Merge "Grant dumpstate hal read permission of camera hal dump files" into sc-dev am: 09a98d233d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604511

Change-Id: I96a4843b04f81194053e1c552757b76bb6f0a134
2021-05-18 00:53:51 +00:00
TreeHugger Robot
ac53196839 Merge "genfs_contexts: Specify correct GPU clock hint node" into sc-dev 2021-05-18 00:50:53 +00:00
TreeHugger Robot
09a98d233d Merge "Grant dumpstate hal read permission of camera hal dump files" into sc-dev 2021-05-18 00:42:12 +00:00
Yu-Chi Cheng
e8ee41f9af Renamed edgetpu_service to edgetpu_app_service.
edgetpu_service was splitted into two in previous change:
edgetpu_service and edgetpu_vendor_service, where the new
vendor service for vendor clients, and the old service keeps
serving app clients.

This change updated the SELinux policy to rename the edgetpu_service
into edgetpu_app_service to make the purpose clearer.

Bug: 188463446
Test: Oriole + GCA
Change-Id: I3a133319edc84fc02ef211934d0542575580da14
2021-05-17 15:38:24 -07:00
Zhijun He
a8ceb3a751 Grant dumpstate hal read permission of camera hal dump files
Test: Build and capture bugreport
Bug: 178737594
Change-Id: Iae9792a75dec574ff9fe0d246a7c166221565b16
2021-05-17 14:23:46 -07:00
Minchan Kim
2d7105504c sepolicy: gs101: allow duump page_pinner am: 304a32c17e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14472545

Change-Id: Ibae22fcdcc54e799d249da2049877764ff81f79f
2021-05-17 18:49:05 +00:00
TreeHugger Robot
cf875452ff Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: d4f9ef4303 am: 1fbb91ef97 am: 292337148c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14512449

Change-Id: I550e0ba737fe9c66aa6e9eb906d4a49f6d501f64
2021-05-17 17:02:21 +00:00
TreeHugger Robot
832ffb5dc7 Merge "Add SELinux policy for allowing dumping GSC info" into sc-dev am: 1f594ec562 am: e723f80ba9 am: 6432a7bc7a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14491675

Change-Id: Ie16aea227c99d56ed832c48de1b1565bf82c4830
2021-05-17 17:02:02 +00:00
TreeHugger Robot
f7019f3647 Merge "correctly label networking gadgets" into sc-dev am: 7fd939fdd7 am: b3ae9a8c03 am: 8a1ed47bba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14495070

Change-Id: I86101c58b829c283d05e3b7ff3225e331d74e856
2021-05-17 17:01:48 +00:00
TreeHugger Robot
ae5a7ec6ed Merge "bthal: allow bthal to access bluetooth kernel driver logbuffer_btlpm and logbuffer_btuart device node" into sc-dev am: 9b8e2b7ba8 am: e7fe59fb13 am: 0c4611ecb0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14009545

Change-Id: Iaa8806ecaae37a4097ac122a34b41d8949e2fd3a
2021-05-17 17:00:43 +00:00
Minchan Kim
304a32c17e sepolicy: gs101: allow duump page_pinner
Provide necessary sepolicy for dumpreport to access page_pinner
information in /sys/kernel/debug/page_pinner/{longterm_pinner,
alloc_contig_failed}

Bug: 187552095
Test: Run "adb bugreport <zip>" and verify it contains the output
      from page_pinner.
Signed-off-by: Minchan Kim <minchan@google.com>
Change-Id: I2abc48f2a156718fd4bed3b51bdd285c6bf9f175
2021-05-17 09:18:50 -07:00
TreeHugger Robot
9164ea0848 Merge "com.qorvo.uwb: signed with dedicated key and running as android.uid.uwb uid" into sc-dev am: e2a0158fdf am: 6d2c152bcf am: 7a4d420378
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506301

Change-Id: Ie10fdf67607a0cdf76e9b6877f296a1370a978ba
2021-05-17 15:45:06 +00:00
Wei Wang
f89b58e4ac Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev am: 53ae55618a am: c515c8345d am: 6883250a44
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14509955

Change-Id: Ib553fe84ec690d58c491e017ae3ca1e385bb2d70
2021-05-17 15:05:41 +00:00
TreeHugger Robot
74b9e1e145 Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev am: 004c299011 am: 223f9da106 am: 8966b0738f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14485438

Change-Id: I8d91d3c920f066cb7ed12e247e29e6d30e438c31
2021-05-17 14:51:52 +00:00
Sidath Senanayake
828114d410 genfs_contexts: Specify correct GPU clock hint node
Bug: 188404581
Bug: 188034128
Signed-off-by: Sidath Senanayake <sidaths@google.com>
Change-Id: Id69f5cf8c95081fea7784520838a3f85aa58589c
2021-05-17 15:44:19 +01:00
Wei Wang
cb3efaa340 Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: 3a2d20a1a2 am: a04548a17c am: 82e3d3146f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14462495

Change-Id: Id16c3fd3cd5370c86c9ffbeedc4ff5141960f097
2021-05-17 14:28:15 +00:00
sukiliu
8ed18dc446 Update avc error on ROM 7349999 am: 99853e483b am: d5d461cc4e am: 7a1938e846
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14500956

Change-Id: I8db5256fde25bf063f6407e48c9234232df5785a
2021-05-17 14:06:04 +00:00
Peter Csaszar
c1f4edead1 pixel-selinux: add SJTAG policies am: bc525e1a49 am: 6ff24d2a06 am: d39d9e517f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14489636

Change-Id: I30814d03394d87a1009618b709d7bc0a26cf0018
2021-05-17 12:05:19 +00:00
Wei Wang
d348574869 Merge "Add policy for memlat governor needs create/delete perf events" into sc-dev am: 551505ae05 am: 8181bbaaac am: ff1bb37173
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14486216

Change-Id: I9b0844c573b6742b6a9b2b44bf9ed0b5048eecfb
2021-05-17 07:08:20 +00:00
Jia-yi Chen
14fe4108f0 Merge "Add high_capacity_start_cpu to u:object_r:sysfs_vendor_sched:s0" into sc-dev am: 06a0792bf1 am: 1912dc976e am: 344b354f8b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14460156

Change-Id: I710d900d9b1ac49bf038abc6aa2d46bae943a9d7
2021-05-17 07:08:11 +00:00
JJ Lee
66d7ed975d Merge "sepolicy: gs101: allow audio hal to use wakelock" into sc-dev am: df02b6ef77 am: 51c75a291e am: 2a2ce4a0ae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14452416

Change-Id: I9455603978406f34f41be37124ae0ef340321dc7
2021-05-17 07:07:28 +00:00
TreeHugger Robot
b3d62141dc Merge "vibrator: Remove temporary method" into sc-dev am: ec3144742f am: e853b4335e am: df80f0be9f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467421

Change-Id: I4cc152563263416ae2601e16303e3d0e81c51c65
2021-05-17 07:07:08 +00:00
TreeHugger Robot
f909b51e46 Merge changes Ic697ffe8,Idcf38e09 into sc-dev am: a2d2ebd508 am: 41d657e591 am: eb15c49e77
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456725

Change-Id: Ib2667e9dbe8bc98e9651fafeba9aa143740a59a7
2021-05-17 07:07:03 +00:00
TreeHugger Robot
e248e30edb Merge "Allow radioext to communicate with bt hal" into sc-dev am: c03c055812 am: 93008dc81a am: 73f7604819
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456718

Change-Id: Ie375c0b56617064e9a55763659a4f238f5b42802
2021-05-17 07:06:58 +00:00
TreeHugger Robot
d31171629a Merge "iwlan: update sepolicy for qualifiednetworksservice" into sc-dev am: 296f8ddc5d am: cb8de215f8 am: 73e866b8c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14440528

Change-Id: I7b561e1688c0da825498186427c798ce12f01f12
2021-05-17 07:06:51 +00:00
qinyiyan
8c575a737d Allows the edgetpu_logging service to write to the edgetpu sysfs. am: bfbf29c18c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14554224

Change-Id: Id78817a5c8d6fe6bbbeec7a300e057d8b22b73dd
2021-05-17 05:35:46 +00:00
Tri Vo
c9d3d82697 Merge "trusty: sepolicy for metrics reporter" into sc-dev am: f7bec8b3c6 am: f40a4f7416 am: b38ed0c788
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14286451

Change-Id: I325bf45753fd872d7fa3242acfcb8aa925ba5f96
2021-05-17 01:20:16 +00:00
Aaron Tsai
caefc1e4f0 Fix avc denied for shannon-ims am: 6a9a85cd07 am: 71aa99edff am: e4773d1db2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410097

Change-Id: Id2f9da7949b464cd3844ff83aea27f243db2a68c
2021-05-17 01:20:09 +00:00
TreeHugger Robot
1475a1287a Merge "HardwareInfo: Add sepolicy for display" into sc-dev am: 6978eeaea4 am: 5bb2c8ab79 am: 647dcaf48d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824666

Change-Id: I3b19e9fb32d884a9712c10f36094e805ed9bc928
2021-05-17 01:19:40 +00:00
TreeHugger Robot
4c84d700b2 Merge "wlc fwupdate implementation" into sc-dev am: 577f562727 am: 9fccfb01ce am: 51380a7089
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14063269

Change-Id: I6a70d0de2f8eb390908310dae1bd3a5ea250d200
2021-05-17 00:12:35 +00:00
SalmaxChang
354e935eb8 logger_app: Fix avc errors am: ab97657410 am: ebf55ff9f1 am: 12593ef488
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439439

Change-Id: I3c0ca482cfcd290838d610797db853310b386c39
2021-05-16 23:48:56 +00:00
Jack Wu
b00f1351a8 sepolicy: gs101: Fix hal_health_default avc denials am: 2c1ecf3a54 am: 388860a7ba am: 8afb8bee7b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439451

Change-Id: I984d0bf8dba0ac3de6996984a35ca8d268ad7abe
2021-05-16 23:48:51 +00:00
Alex Hong
f47e5ae394 Merge "sepolicy: Update dumpstate HAL to V1.1" into sc-dev am: be17ec14cc am: a0e4da3cb4 am: ef86b642ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14424440

Change-Id: Ibf1518eddd12e55a0805d4812cfc4925ac606a31
2021-05-16 23:48:44 +00:00
TreeHugger Robot
7830ec50a1 Merge "add sepolicy for dump TRICKLE/TEMP/DWELL defend config" into sc-dev am: 6978cd7220 am: fed9fee663 am: 263452b0f9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14419455

Change-Id: I520d23d1a11c2791716b863dcd1b02a387fdd73b
2021-05-16 23:48:32 +00:00
qinyiyan
bb199be00c [SEPolicy] Allow EdgeTPU related service to log to stats service am: 9eeae92ade am: ac59670250 am: c28198ce01
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14431799

Change-Id: I60c1de7edc2c02bc04dd3ab965b6cd683ace6f89
2021-05-16 22:18:04 +00:00
Chris Kuiper
bf2cfb4d6e Merge "sepolicy: gs101: allow usf_reg_edit to run" into sc-dev am: d0d0304443 am: adb83f2a07 am: 5db8d9f987
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14415568

Change-Id: I6e2b296cf991cb37183883ffd93f23a3d43d9e47
2021-05-16 22:18:00 +00:00
Yu-Chi Cheng
6da18fabe1 Merge "Added the SELinux rule for the EdgeTPU vendor service." into sc-dev am: 7eef8643a3 am: b989b6c2d5 am: 99d5b083f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299125

Change-Id: I0e1e47b7f1d491a281fab391db67486c31cbc549
2021-05-16 22:17:52 +00:00
Daniel Mentz
73881b0b14 Merge "Remove /vendor/lib/modules from file_contexts" into sc-dev am: 48e3555770 am: dfd70f5140 am: 5aed8b6921
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14416770

Change-Id: I88ec35821e3da8a566ac02fd2e0f1c60de18fa37
2021-05-16 22:17:17 +00:00
Daniel Mentz
81c8ebed78 Merge "Revert "remove wildcard on kernel modules"" into sc-dev am: 1473b1d155 am: 3d63e648fa am: 23c0cba680
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14393364

Change-Id: I9df075882b52a99038f4b6bd52ac2dd15523d55b
2021-05-16 22:17:12 +00:00
TreeHugger Robot
590a9968dd Merge changes from topic "tcpdump_logger" into sc-dev am: 3186a0f24c am: 869798380a am: 4a089a1a14
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14048497

Change-Id: I8f280558980f798f80b72640a6b38ddb15619047
2021-05-16 21:56:55 +00:00
lucaslin
00f3a82937 Add sepolicy for tcpdump_logger to access wlan_logs folder am: 4099f60681 am: a068c23698 am: d68ecabda7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410096

Change-Id: I100d315dc029e0c64de04acb5fc3a7afa5b7149d
2021-05-16 21:56:55 +00:00
Jenny Ho
e3997a46a6 Merge "set sepolicy for testing_battery_profile" into sc-dev am: 93e25c878a am: e6334ffd7c am: 9d53cfccb8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14409676

Change-Id: Ia2477448be5ffd3a67b3278725c049b9c257564f
2021-05-16 21:56:44 +00:00
SHUCHI LILU
dd85274e3d Merge "Update avc error on ROM 7330059" into sc-dev am: 1d6ffc2305 am: 1ed37f06e9 am: 5b2e7de887
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14408671

Change-Id: I165887c7d5bd11b1ac5dc14d5e8ee10a73f92876
2021-05-16 21:56:38 +00:00
TreeHugger Robot
a23f6aa3e2 Merge "update error on ROM 7331131" into sc-dev am: 4ae391d780 am: 76c9592ec4 am: 08ac0f06bf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14409678

Change-Id: I6b39f60e6276ce0324b2e4dda7b3f26aad82b163
2021-05-16 21:56:32 +00:00
TreeHugger Robot
ab007cca1e Merge "Add sepolicy for sensor HAL accessing AOC sysfs node." into sc-dev am: 2391c852bd am: d51f97bd33 am: 80114dd11e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14327406

Change-Id: Iee5ce70fbc7f95211527b5311582d58a232c2930
2021-05-16 21:56:24 +00:00
Eddie Lan
e12dc7f3e1 Merge "Add sepolicy for fpc AIDL HAL" into sc-dev am: 2d4071ca8c am: 94500a15a8 am: 4099526a9b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14282485

Change-Id: Ie8af215267d827ab251804746257f65c360693ef
2021-05-16 20:38:38 +00:00
TreeHugger Robot
29e1ffaf68 Merge "Provide fastbootd permissions to invoke the set_active command" into sc-dev am: 1256869c5c am: e72dd4fc97 am: 55abb63383
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14391698

Change-Id: I6296656199828a25a75181a6ab25984cc4275dda
2021-05-16 20:38:33 +00:00
TreeHugger Robot
4468bf95ba Merge "Remove platform certification from imsservice" into sc-dev am: 6a5cfd86f5 am: 0adcb526f5 am: 8114fd6b37
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14343989

Change-Id: I7d7a30d0be5c37c789416aa07548b42f5508e763
2021-05-16 14:56:17 +00:00
TreeHugger Robot
2185127508 Merge "Update gs101 sepolicy for contexthub HAL" into sc-dev am: ff7948fc48 am: 5c14296690 am: 2ab009f72e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14354723

Change-Id: I7c424a7379648ad3a204261dcf82fdedecf8c78b
2021-05-16 04:30:21 +00:00
TreeHugger Robot
6937cd9a80 Merge "sepolicy:gs101: allow init-insmod-sh to access sysfs_leds nodes" into sc-dev am: c134ed985a am: 521d0635f1 am: b93162946f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14357213

Change-Id: Ia98997b652c66af162085cd649132aabbac0f37d
2021-05-16 04:30:12 +00:00
TreeHugger Robot
8e5b40af5b Merge "change persist.camera to persit.vendor.camera" into sc-dev am: 2c4b0fd96a am: 52ba04007b am: 5757ee6b22
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14356785

Change-Id: I47b13820db286100e032974cf5e8f5f671a3e735
2021-05-16 04:30:08 +00:00
TreeHugger Robot
992320ef3d Merge "Add sepolicy for sensor HAL to read lhbm" into sc-dev am: 7a4cd3a6e0 am: 18525b89e6 am: 25566f87c3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299201

Change-Id: I532a1a1ed137d29f741917b6a1c62b3330fa22b4
2021-05-16 04:30:03 +00:00
TreeHugger Robot
843d7fe45d Merge "Fix android.hardware.drm@1.4-service.clearkey label" into sc-dev am: 7ecd67743c am: cbce7f27e3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14340676

Change-Id: I87f488fef4c220f702b684bccf4982237dbf50eb
2021-05-16 04:29:58 +00:00
Victor Liu
221c245eca Merge "uwb: allow uwb service to access nfc service" into sc-dev am: 247097a000 am: 2d6895ee81
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14281933

Change-Id: I9f2e814112585da5678347bfd3a0ec03d7aa6e77
2021-05-16 04:29:54 +00:00
Roger Fang
62ea8f9182 sepolicy: gs101: allows pixelstat to access audio metrics nodes am: 66634d4d20 am: abd2189b79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14255523

Change-Id: I4a87affd42e1c896ac253328b8badcdcad17e40f
2021-05-16 04:29:50 +00:00
TreeHugger Robot
2298aea8cd Merge "Add sepolicy for wlan logger and sniffer logger" into sc-dev am: d60ae7dfed am: 6f8aeeb560
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299186

Change-Id: I0a6e1147cd05b3feb9c921d3797681332f9532f6
2021-05-16 04:29:46 +00:00
TreeHugger Robot
de7ed68e8e Merge "Grant powerhal access to sysfs_devfreq_dir" into sc-dev am: 68bbf709c2 am: c55550bfe5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14329748

Change-Id: Ie4d95c2f6f39b10810316dccea458e9734dd67e6
2021-05-16 04:29:42 +00:00
TreeHugger Robot
0ed0307954 Merge "update wakeup node" into sc-dev am: 27c30c1cc6 am: 9218a52b63
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14319145

Change-Id: I3f08186bed503381d521a09cd62ac88575e0aea6
2021-05-16 04:29:37 +00:00
Adam Shih
82011e43c6 Merge "move vendor_executes_system_violators to userdebug" into sc-dev am: ab9437c069 am: 019616a985
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299203

Change-Id: Ibb4bc1a39306211f21a249975ca7a22b55203af5
2021-05-16 04:29:33 +00:00
TreeHugger Robot
1f42c7ad0c Merge "logger_app: Grant access to control usb debug port" into sc-dev am: 6f18d69b86 am: 0d57b91246
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14308745

Change-Id: I46ef7c8b6a1114b01d2725fd32680e4a44bf90ec
2021-05-16 04:29:29 +00:00
TreeHugger Robot
88012c2938 Merge "usb: Add sepolicy for extcon access" into sc-dev am: a18b6c2e99 am: 49311401b7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14182157

Change-Id: Ib57b30e1e7d126c31142b155525f03ef9df9a844
2021-05-16 04:29:25 +00:00
David Massoud
dffb651f1a Add gs101 specific sysfs_devfreq_cur entries am: e03291c6af am: fb32b81473
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14187061

Change-Id: I59e7b717a92b4490a3efb0a269675d7171a5e016
2021-05-16 04:29:21 +00:00
TreeHugger Robot
d0c890351c Merge "allow RilConfigService to call oemrilhook api" into sc-dev am: 707d297dd8 am: 021e9288fd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14232872

Change-Id: I1511b5ddd8bcca2354475e353deeac1885a88135
2021-05-16 04:29:17 +00:00
TreeHugger Robot
87586c7661 Merge "Mark GS101 camera HAL as using Binder." into sc-dev am: 16730f3087 am: f1af2d0f15
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14285352

Change-Id: I07e625c7a8426e78215627bbaf2e920255d74483
2021-05-16 04:29:13 +00:00
TreeHugger Robot
9d9ba36199 Merge "Allow access to NFC power stats" into sc-dev am: 0f87f26134 am: 3cb81978f7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14268788

Change-Id: I2341c2aa0e46d6434507c9e18d117c075b3d0860
2021-05-16 04:29:08 +00:00
TreeHugger Robot
2a2a939000 Merge "gs101-sepolicy: Allow platform_app to call uwb" into sc-dev am: 9573fc21a0 am: 3b2fb2e196
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14133747

Change-Id: Ie1bd93bf778769919728ee92fbd1367147ccba48
2021-05-16 04:29:03 +00:00
Michael Ayoubi
720360f555 Merge "gs101: Remove kernel.te after UWB fixes" into sc-dev am: 134a3882cc am: 3abc895e64
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14275478

Change-Id: Ie5423f9790e13d62cf2d13259be6871cb57fb002
2021-05-16 04:28:59 +00:00
sukiliu
b2716bd046 Update avc error on ROM 7302474 am: 89e016d436 am: 009867dc37
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14276161

Change-Id: I978c07838973e6a9bbee54c0365ffee35651a570
2021-05-16 04:28:55 +00:00
Wei Wang
7b504db842 Merge "thermal: add sepolicy rule to access ODPM sysfs" into sc-dev am: aa3d3a3adb am: 239eb17582
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14182158

Change-Id: I29a13c65d8fc173c1110dfa8eacf1ecd860f49ce
2021-05-16 04:28:51 +00:00
TreeHugger Robot
063671a888 Merge "fingerprint: fps hal can connect Stats service" into sc-dev am: 11871825f3 am: fb465ba7f5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14211588

Change-Id: I47a8a68e66a703e352310c09357a6cb3e306b39f
2021-05-16 04:28:47 +00:00
Aaron Tsai
05e72f3f8e Update tracking error for Silent Logging tool am: 90ead0f9cb am: 028bdd6369
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207370

Change-Id: I0c143d16c72052fd9bc62be20cf9b723ce612b84
2021-05-16 04:28:42 +00:00
Yu-Chi Cheng
3697fcad73 Merge "Allowed EdgeTPU service to generate Perfetto trace." into sc-dev am: e08f769244 am: f63eb384e8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14170537

Change-Id: I58266f3542175eb8ee0d30b92dd80fd01e41ca7c
2021-05-16 04:28:38 +00:00
Wenhao Wang
8983c5f442 Merge "Fix selinux for RPMB daemon" into sc-dev am: a16b1668be am: 2c1249a5e6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14242046

Change-Id: I38f463ae61ad9d1e3788720967dcb1f52e6dab91
2021-05-16 04:28:34 +00:00
TreeHugger Robot
b29a5b8872 Merge "sepolicy: add cs40l26 haptics modules" into sc-dev am: 77725ac5f8 am: e8db72539b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14236565

Change-Id: I6873ede8973fb1d8cee490506b2a513b18bd09b4
2021-05-16 04:28:25 +00:00
TreeHugger Robot
6218641490 Merge "remove obsolete entry" into sc-dev am: a0fbe1508d am: 9a2b85d7b7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14233638

Change-Id: If2b5d4597c067741dfc0ac7c068985c87181d510
2021-05-16 04:28:21 +00:00
Adam Shih
28cd17ae39 suppress logs created by userdebug-only features am: a2f8a45c46 am: f8e2285581
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14233635

Change-Id: I62dc1924518701981b9d3d0458fcf4e9d737ffd7
2021-05-16 04:28:17 +00:00
Wei Wang
b4a194a418 Merge "Grant Fabric node access for memory min frequency setting" into sc-dev am: 0ae24df58d am: 0d9dfcc1f6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14242545

Change-Id: I21fe4bb7b466b039ffb0f143ea0a2bd9cdf5940a
2021-05-16 04:28:13 +00:00
Salmax Chang
4579229b1a Merge "dumpstate/incident: Fix avc errors" into sc-dev am: 854e4dfd60 am: 4769345944
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207379

Change-Id: Icd3fba92083f25ae7d33db079e136d752e121354
2021-05-16 04:28:09 +00:00
TreeHugger Robot
3a636a1c0d Merge "Add sepolicy rules when PowerAnomalyDataDetection service enabled" into sc-dev am: 8c30e63758 am: c049172863
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207376

Change-Id: If59034462bd1444b887c69fbb69a10def6380e73
2021-05-16 04:28:04 +00:00
TreeHugger Robot
bb98ac8ffe Merge "remove obsolete domains" into sc-dev am: 07121f1245 am: 8a2e0ac237
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14230396

Change-Id: Ie45d1dc64b6af3273dc0e53b8cb1fddbc4dfb74d
2021-05-16 04:27:59 +00:00
Rios Kao
3f0b585544 Merge "Allow ssr_detector to read aoc version property" into sc-dev am: 1b25799252 am: 546bc74b3e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14185472

Change-Id: I7b207977b76be8022177f6fa32c82aa86f41cdcf
2021-05-15 21:45:25 +00:00
Adam Shih
2e5c47a928 update error on ROM 7293525 am: 59a1c3f04a am: 487b7ef4ef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14230390

Change-Id: Iea2dbffc3ca0f5ba4d71be9dad5eae002d1118ea
2021-05-15 21:45:19 +00:00
TreeHugger Robot
c48f94d9b6 Merge "sepolicy: fix fingerprint sepolicy" into sc-dev am: 96ed3bb51c am: 3e60566e85
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207375

Change-Id: I118ba0bf5a5b36a9c1c2195639fce76735ac0061
2021-05-15 08:01:49 +00:00
SalmaxChang
b9f86f9cf5 Create vendor_logger_prop am: 3c692b942a am: c73d07ada1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207372

Change-Id: I9e17404e021b8f3fae3d2b84749cea3ec69c2120
2021-05-15 08:01:44 +00:00
TreeHugger Robot
8fc788dbe7 Merge "Update sepolicy for the egetpu_logging service to access the sysfs." into sc-dev am: ca24e70422 am: e13ba8bc04
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14194013

Change-Id: Ic82456599943488f93299b5d839660329a43e9bd
2021-05-15 08:01:40 +00:00
Max Shi
d49aa486e1 Add sepolicy for sensor HAL accessing AOC reset sysfs node. am: 55bd05960f am: bf808b39f5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14167428

Change-Id: I2282f61a5335243209fed95ef2e715e20bac914c
2021-05-15 08:01:35 +00:00
Ahmed ElArabawy
a7427decd9 Merge "ssr_detector: provide wlan firmware version" into sc-dev am: 4a5d646504 am: d191543cb2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14197331

Change-Id: I42f5ce8af19a18799fa4924d1cc6691ddfc9f4d5
2021-05-15 08:01:29 +00:00
Jenny Ho
776a8afca5 Merge "Allow to dump pps-dc" into sc-dev am: 9ec58d031a am: c15e4b72f2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14140257

Change-Id: I855c7d05a307710898da28417e87fe8dcc157544
2021-05-15 08:01:24 +00:00
Charlie Chen
73d2ff867c Merge changes from topic "remove_video_system_heap" into sc-dev am: 742daf873c am: bbe9ffe0e8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14187064

Change-Id: I83a2c338e28a2e4ff5a57779f58bf8754a01374a
2021-05-15 08:01:20 +00:00
TreeHugger Robot
2099355da8 Merge "Allow power stats HAL read uwb power_stats sysfs node" into sc-dev am: a4d458026a am: 6b2103ed0c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14189309

Change-Id: I56f3c1c21396e97ec839923e98f39852ee9e03f0
2021-05-15 08:01:15 +00:00
Benjamin Schwartz
cbffb84350 Merge "Allow power stats HAL to read gnss stats" into sc-dev am: 948f48997b am: 09c2e2802a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14106551

Change-Id: Ic9409d79e53fa3351b647360461b5814b77a8911
2021-05-15 08:01:11 +00:00
Vova Sharaienko
180b8d1901 Merge "Stats: removed obsolete IStats HIDL sepolicies" into sc-dev am: d7e81afb35 am: 350b5e41c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14192518

Change-Id: I182f4be3960f7bd4e50171c528b379299c452ac6
2021-05-15 08:01:06 +00:00
Chris Lu
72fc27fecf display: remove dontaudit for hal_memtrack_default am: 86582e6ce0 am: bbabdc9504
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14187062

Change-Id: I67bf88fab71c3e85ea40b95c743b682902dd0220
2021-05-15 08:01:02 +00:00
Aaron Tsai
f08421e50c Fix avc denied for Silent Logging am: 204dc05aa4 am: ab5ab00a89
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14182163

Change-Id: I06c2be07f444556ca3a8c92be9851d1ee106756d
2021-05-15 08:00:57 +00:00
Adam Shih
c511ea832d Merge "change assigned bug" into sc-dev am: 65355b49a3 am: 6c77867c16
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14167787

Change-Id: Ic99c235648350f5828969a1b64e2c1ca9d937a22
2021-05-15 08:00:53 +00:00
SalmaxChang
069758447d Add more modem properties am: f23a4423c4 am: eac287b429
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14173742

Change-Id: Iff34898b9b49f33638a83ebb763331256f081123
2021-05-15 08:00:49 +00:00
Roshan Pius
348c6e5d96 Uwb: Create a new Uwb system service am: 8119d482ed am: 2b15027412
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14057967

Change-Id: Ib131cb3b4afab98ff67b145379c47df1dec29da7
2021-05-15 08:00:44 +00:00
Ilya Matyukhin
1099e73569 Merge "Add sepolicy for SystemUIGoogle to write to lhbm" into sc-dev am: 75d0cce94f am: d22884d3cd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14105113

Change-Id: I93631396ab0eb49ff336f0eafbb1e2cee14c8c48
2021-05-15 08:00:40 +00:00
Vova Sharaienko
00bef6431e wirelesscharger-adapter: updated sepolicy am: 72f80a3c90 am: b0a79e65a1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14176231

Change-Id: I9ced7dc9dbc40eb29bb3832016527037aae79855
2021-05-15 08:00:35 +00:00
TreeHugger Robot
067716b11c Merge "Remove platform certification from imsservice" into sc-dev am: 6a5cfd86f5 am: b33a1a4042
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14343989

Change-Id: Ia5a8036716a4b86017bfa637ac2f7490fc8fa2a9
2021-05-15 07:33:02 +00:00
TreeHugger Robot
268781c624 Merge "Update gs101 sepolicy for contexthub HAL" into sc-dev am: ff7948fc48 am: 81e7e0d374
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14354723

Change-Id: I70e38ecb15a31a294661e2d683583423942a95fb
2021-05-15 07:31:18 +00:00
TreeHugger Robot
4176a39915 Merge "sepolicy:gs101: allow init-insmod-sh to access sysfs_leds nodes" into sc-dev am: c134ed985a am: 56305a9427
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14357213

Change-Id: Id642e05d205b1f0e78b90178b3a7c63a404c9f24
2021-05-15 07:30:38 +00:00
TreeHugger Robot
b41e03b3a6 Merge "change persist.camera to persit.vendor.camera" into sc-dev am: 2c4b0fd96a am: 82f13cbf48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14356785

Change-Id: If4861375981b0bd1b74fd2b79af7852cce2f693c
2021-05-15 07:30:35 +00:00
TreeHugger Robot
a8f126d70c Merge "Add sepolicy for sensor HAL to read lhbm" into sc-dev am: 7a4cd3a6e0 am: 04b1f2cdec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299201

Change-Id: I53405a3c3d1c593ab4068a796dc9cdf8123ff551
2021-05-15 04:18:27 +00:00
Quinn Yan
e11173811e Merge "Add the TPU AIDL NNAPI HAL to the sepolicy." into sc-dev am: d2558a05b3 am: 5145ae8e4c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506028

Change-Id: I49d65fc12932e44d8bed5d2f015d4e7799cae10d
2021-05-14 21:08:26 +00:00
qinyiyan
bfbf29c18c Allows the edgetpu_logging service to write to the edgetpu sysfs.
Test: make selinux_policy -j128
Bug: 151063663
Change-Id: I5ac619b34bb6fb17caa4c00ac62ac6802c776d84
2021-05-14 13:54:04 -07:00
Quinn Yan
5145ae8e4c Merge "Add the TPU AIDL NNAPI HAL to the sepolicy." into sc-dev am: d2558a05b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506028

Change-Id: I1e474d36cdbd99753f6bce4c38314eff170bb9f1
2021-05-14 20:46:49 +00:00
Quinn Yan
631206bfa2 Merge "Add the TPU AIDL NNAPI HAL to the sepolicy." into sc-dev am: d2558a05b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506028

Change-Id: I4e88739fa33b60546468e2856b495ebffe301bab
2021-05-14 20:44:46 +00:00
Quinn Yan
73b67b2d9f Merge "Add the TPU AIDL NNAPI HAL to the sepolicy." into sc-dev am: d2558a05b3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506028

Change-Id: I45981dd19e54cae6d96b6cde5ab33a81d81d222f
2021-05-14 20:44:45 +00:00
Quinn Yan
d2558a05b3 Merge "Add the TPU AIDL NNAPI HAL to the sepolicy." into sc-dev 2021-05-14 20:15:37 +00:00
Kevin DuBois
82408c931b sepolicy: update gpu nnhal file
GPU nnhal needed a file update when update upgrading to 1.3 revision,
modify this so the device uses all the 1.2 rules.

Fixes: 187981206
Test: make sure hal starts
Change-Id: Ie1054fc092f1aa459cd36b6eb0f0a1a5cc032dbc
2021-05-14 10:55:25 -07:00
SHUCHI LILU
218a434cd8 Merge "Update avc error on ROM 7358093" into sc-dev am: 60bf6343be am: 64a1e16887
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542522

Change-Id: Ia00baf774f5ff6022c01bb15a9b22cfc84eba0ea
2021-05-14 10:10:45 +00:00
SHUCHI LILU
64a1e16887 Merge "Update avc error on ROM 7358093" into sc-dev am: 60bf6343be
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542522

Change-Id: Icfc220bc3fd65730dd5acba470b504a0ae3114ab
2021-05-14 09:38:29 +00:00
SHUCHI LILU
53f59f5d9b Merge "Update avc error on ROM 7358093" into sc-dev am: 60bf6343be
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542522

Change-Id: I7f581a8b4372a04bdcb49dea62d2e4c2d4980360
2021-05-14 09:37:01 +00:00
SHUCHI LILU
d081badaa2 Merge "Update avc error on ROM 7358093" into sc-dev am: 60bf6343be
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14542522

Change-Id: I6d37300c7842d194db5ed736eac8137aec105b0e
2021-05-14 09:35:54 +00:00
SHUCHI LILU
60bf6343be Merge "Update avc error on ROM 7358093" into sc-dev 2021-05-14 08:31:59 +00:00
Midas Chien
c5d3b92fe5 Merge "Allowed PowerHAL service access Display node" into sc-dev am: b610fd307e am: d2e21ded9a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14308761

Change-Id: I8c1e6dd9ad073cc5c9d9e647215c87b0000d5395
2021-05-14 06:25:06 +00:00
sukiliu
53c9a79002 Update avc error on ROM 7358093
Bug: 188114822
Bug: 188114896
Test: PtsSELinuxTestCases
Change-Id: Ic5e865a921d0db981acfd936e1599a0ab220b975
2021-05-14 14:23:22 +08:00
Midas Chien
d2e21ded9a Merge "Allowed PowerHAL service access Display node" into sc-dev am: b610fd307e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14308761

Change-Id: I44603831dfd836d4c7641ec26dd8081fe64e5316
2021-05-14 06:05:04 +00:00
Midas Chien
489478f82e Merge "Allowed PowerHAL service access Display node" into sc-dev am: b610fd307e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14308761

Change-Id: If5dcf3b82fa17accf25704e913f47e450fdb6a94
2021-05-14 06:03:08 +00:00
Midas Chien
3c7b2a49d5 Merge "Allowed PowerHAL service access Display node" into sc-dev am: b610fd307e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14308761

Change-Id: Ic93bf422660a5423f29807f2b3858d6c5dc75c81
2021-05-14 06:03:07 +00:00
Midas Chien
b610fd307e Merge "Allowed PowerHAL service access Display node" into sc-dev 2021-05-14 05:47:32 +00:00
qinyiyan
989855def7 Add the TPU AIDL NNAPI HAL to the sepolicy.
Test: Created Forrest build and flashed to phone.
Bug: 187846367
Change-Id: I3ada9ecf3f94a594185049ddb95f13a6853841ba
2021-05-13 22:23:48 -07:00
SalmaxChang
4c134fec1b rfsd: fix permission error am: 30b9f8f277 am: 272b4e5590
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467419

Change-Id: I7f37ffa05f100f10d3a3b63838aa72131e097e6f
2021-05-14 05:01:10 +00:00
SalmaxChang
272b4e5590 rfsd: fix permission error am: 30b9f8f277
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467419

Change-Id: Ib166093bda7818f7be45468efbefe3df30fb0443
2021-05-14 04:47:35 +00:00
SalmaxChang
febf2cd145 rfsd: fix permission error am: 30b9f8f277
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467419

Change-Id: I142c8c1c85c8ffb50abf5b5479ea598735255adc
2021-05-14 04:45:43 +00:00
SalmaxChang
1b6d7e0442 rfsd: fix permission error am: 30b9f8f277
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467419

Change-Id: Ie2c37b65f1d83e86eb9da49b8585e67bb4a83f59
2021-05-14 04:45:39 +00:00
SalmaxChang
30b9f8f277 rfsd: fix permission error
[RfsService::File] Failed to open file (4) (reason:Permission denied)

Bug: 187148595
Change-Id: Ia553bbc1e1c86b7740b3925679a2da65d3314714
2021-05-14 04:19:50 +00:00
Manish Varma
a5a368cdfc genfs_contexts: fix path for st21nfc i2c devices am: 705ecbe0ab am: 4aa4640559
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538367

Change-Id: I16d24056befe5c7af7d1cc3c650755736ccda9b0
2021-05-14 03:24:29 +00:00
Manish Varma
03657f8e3a genfs_contexts: fix path for s2mpg1X i2c devices am: fd2a6b9a74 am: a592b23a80
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538366

Change-Id: Id4aea52b7d4e327f9a7d44ef52c7b548ffc4bcd3
2021-05-14 03:24:28 +00:00
Manish Varma
459bdb2a40 genfs_contexts: fix path for cs40l25a i2c devices am: 194fef8b5a am: 67d28bdf03
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538365

Change-Id: Id4e533c9c71b23a65cd7af0d3cd602263503bc45
2021-05-14 03:24:28 +00:00
Manish Varma
db3f825375 genfs_contexts: fix path for max77759tcpc i2c devices am: 3868f8aa88 am: aaee225e77
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538364

Change-Id: I021fbcd94e6085cfb1928fd116852933ff347d89
2021-05-14 03:24:27 +00:00
Manish Varma
529d215c31 genfs_contexts: fix path for p9412 i2c devices am: b08c98c2b4 am: 9ba9e2a783
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14535947

Change-Id: Ib96389e2291833fbf89892992a39a5d642585398
2021-05-14 03:24:26 +00:00
Manish Varma
4aa4640559 genfs_contexts: fix path for st21nfc i2c devices am: 705ecbe0ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538367

Change-Id: I189d9d114c580d0cbb00611c0ad2239439ddf1c5
2021-05-14 03:02:53 +00:00
Manish Varma
a592b23a80 genfs_contexts: fix path for s2mpg1X i2c devices am: fd2a6b9a74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538366

Change-Id: I872b4ba0c56e5ec30b5e43f3ac0ba029c265d08a
2021-05-14 03:02:52 +00:00
Manish Varma
67d28bdf03 genfs_contexts: fix path for cs40l25a i2c devices am: 194fef8b5a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538365

Change-Id: I99768e7485ed5b6c9e5d79dcebbf75c8ded2c5c2
2021-05-14 03:02:51 +00:00
Manish Varma
aaee225e77 genfs_contexts: fix path for max77759tcpc i2c devices am: 3868f8aa88
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538364

Change-Id: I144505ad7a6ff6a4b481c0a0aa5de75439195edf
2021-05-14 03:02:50 +00:00
Manish Varma
9ba9e2a783 genfs_contexts: fix path for p9412 i2c devices am: b08c98c2b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14535947

Change-Id: Iae81f3b32532152f8c8ff4d004887252ad3de889
2021-05-14 03:02:49 +00:00
Manish Varma
ef7f771b9c genfs_contexts: fix path for st21nfc i2c devices am: 705ecbe0ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538367

Change-Id: Ib894e30bf0033777ac939e6c8eb0c6ff68c5f5ad
2021-05-14 03:00:54 +00:00
Manish Varma
7baa13c32c genfs_contexts: fix path for s2mpg1X i2c devices am: fd2a6b9a74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538366

Change-Id: If2fe324271da57e0e3eb9623d26f493d7282929a
2021-05-14 03:00:53 +00:00
Manish Varma
1045fd2031 genfs_contexts: fix path for cs40l25a i2c devices am: 194fef8b5a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538365

Change-Id: I845f1ce03511dba85383f82b8eb2bb7f06b78d8d
2021-05-14 03:00:52 +00:00
Manish Varma
a273bf01b2 genfs_contexts: fix path for max77759tcpc i2c devices am: 3868f8aa88
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538364

Change-Id: If29cb659f6a76a5915d909b7a66453e61336ac36
2021-05-14 03:00:51 +00:00
Manish Varma
5244598a27 genfs_contexts: fix path for p9412 i2c devices am: b08c98c2b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14535947

Change-Id: Ie2629aa0108804906fefdfd60864b5ee49acc1b6
2021-05-14 03:00:50 +00:00
Manish Varma
6dce8344b1 genfs_contexts: fix path for st21nfc i2c devices am: 705ecbe0ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538367

Change-Id: I5a7c64dc777368bed360839d9906bc60db0b3a9f
2021-05-14 03:00:39 +00:00
Manish Varma
babe6566a2 genfs_contexts: fix path for s2mpg1X i2c devices am: fd2a6b9a74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538366

Change-Id: I625538f50d3498a38552e8b43ea69898d1f02d6c
2021-05-14 03:00:38 +00:00
Manish Varma
b6aae5a059 genfs_contexts: fix path for cs40l25a i2c devices am: 194fef8b5a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538365

Change-Id: Ic58f5ad1a500a1f00caa16e1368a7392968f13d9
2021-05-14 03:00:38 +00:00
Manish Varma
81a8741a5d genfs_contexts: fix path for max77759tcpc i2c devices am: 3868f8aa88
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538364

Change-Id: Id7a7f9879b4f37978dcd61ba8a97fb275ef3b3f4
2021-05-14 03:00:36 +00:00
Manish Varma
bf803a2bef genfs_contexts: fix path for p9412 i2c devices am: b08c98c2b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14535947

Change-Id: If85a1882e5716cc31b8d1a46f3e60a95895c8352
2021-05-14 03:00:35 +00:00
Manish Varma
705ecbe0ab genfs_contexts: fix path for st21nfc i2c devices
Due to recent changes which modifies the device name for i2c devices,
st21nfc device names are now changed from ?-0008 to "i2c-st21nfc"

Bug: 188078957
Test: Verified haptic works and no avc denials when running following command:
$ dmesg | grep avc | grep sysfs
Signed-off-by: Manish Varma <varmam@google.com>
Change-Id: I17464d2d01fb64447dd8828eb8f91e38717fac4c
2021-05-13 17:43:26 -07:00
Manish Varma
fd2a6b9a74 genfs_contexts: fix path for s2mpg1X i2c devices
Due to recent changes which modifies the device name for i2c devices,
s2mpg1xmfd device names are now changed from ?-00?f to "i2c-s2mpg10mfd" or
"i2c-s2mpg11mfd"

Bug: 188078957
Test: Verified no avc denials when running following command:
$ dmesg | grep avc | grep sysfs

Signed-off-by: Manish Varma <varmam@google.com>
Change-Id: I2c58773613071147336b4f338e4c4034ce90e9bd
2021-05-13 17:42:08 -07:00
Manish Varma
194fef8b5a genfs_contexts: fix path for cs40l25a i2c devices
Due to recent changes which modifies the device name for i2c devices,
cs40l25a device names are now changed from ?-0043 to "i2c-cs40l25a"

Bug: 188078957
Test: Verified haptic works and no avc denials when running following command:
$ dmesg | grep avc | grep sysfs

Signed-off-by: Manish Varma <varmam@google.com>
Change-Id: I47c423661d788c467d4cd1602fbc145bd715c67a
2021-05-13 17:37:32 -07:00
Manish Varma
3868f8aa88 genfs_contexts: fix path for max77759tcpc i2c devices
Due to recent changes which modifies the device name for i2c devices,
max77759tcpc device names are now changed from ?-0025 to "i2c-max77759tcpc"

Bug: 188078957
Test: Verified charging works and no avc denials when running
$ dmesg | grep avc | grep sysfs

Signed-off-by: Manish Varma <varmam@google.com>
Change-Id: Ic1f6d018ce74348b4faa937720b50c7924bf9b7a
2021-05-13 17:36:59 -07:00
Manish Varma
b08c98c2b4 genfs_contexts: fix path for p9412 i2c devices
Due to recent changes which modifies the device name for i2c devices,
p9412 device names are now changed from ?-003c to "i2c-p9412"

Bug: 188078957
Test: Verified wlc works and no avc denials when running following command:
$ dmesg | grep avc | grep sysfs

Signed-off-by: Manish Varma <varmam@google.com>
Change-Id: Id0af1122f7182a866ab28c5317db139d8083a45d
2021-05-13 17:36:24 -07:00
Maurice Lam
a1bf959f13 DO NOT MERGE. Revert Exo selinux policies for S
Bug: 188074060
Test: Forrest
Change-Id: I3465d10c3731ae49fec6e6fb7f2873cf2e5b9c23
2021-05-13 19:32:57 +00:00
TreeHugger Robot
c833549d8c Merge changes from topic "186500818-set1" into sc-dev am: 775771b811 am: a019f35a3b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14490413

Change-Id: I808af635b42fe65f761f845c4fdc02650e498cb5
2021-05-13 08:02:38 +00:00
TreeHugger Robot
a019f35a3b Merge changes from topic "186500818-set1" into sc-dev am: 775771b811
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14490413

Change-Id: I51cc2dd5c356ea0dd1653a8fc3769e360683e002
2021-05-13 07:41:56 +00:00
TreeHugger Robot
768fb9a152 Merge changes from topic "186500818-set1" into sc-dev am: 775771b811
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14490413

Change-Id: I9a9735eb2ad617b1b564f6b7eb376e9f5b312ce7
2021-05-13 07:39:51 +00:00
Hridya Valsaraju
92448c6830 Label debugfs files correctly am: 9e6528da08
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14490412

Change-Id: I2b511b5931ab3175615a99b0d23c15a55e14252c
2021-05-13 07:39:50 +00:00
TreeHugger Robot
3e000a7c04 Merge changes from topic "186500818-set1" into sc-dev am: 775771b811
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14490413

Change-Id: I62c1f964005d368cab7972aa05a3b03dd6cfa031
2021-05-13 07:39:05 +00:00
TreeHugger Robot
775771b811 Merge changes from topic "186500818-set1" into sc-dev
* changes:
  Let debugfs be accessed only for non-user builds
  Label debugfs files correctly
2021-05-13 07:07:13 +00:00
Vineeta Srivastava
5e7734b411 Merge "Add sepolicy for the UDFPS antispoof property" into sc-dev am: 14a07e230a am: 4d42a986f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467424

Change-Id: Ia6d1856f2936d25405cec14da6f6d38f84e77248
2021-05-12 22:43:29 +00:00
TreeHugger Robot
292337148c Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: d4f9ef4303 am: 1fbb91ef97
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14512449

Change-Id: I530ba8b8ffc0c0c49c3f18bcab0eae4726ba77ff
2021-05-12 22:42:35 +00:00
Vineeta Srivastava
a48428ff45 Merge "Add sepolicy for the UDFPS antispoof property" into sc-dev am: 14a07e230a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467424

Change-Id: I748e49d7b4d5da35007b83c9e8f0795cc2847e02
2021-05-12 22:21:39 +00:00
Vineeta Srivastava
4d42a986f8 Merge "Add sepolicy for the UDFPS antispoof property" into sc-dev am: 14a07e230a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467424

Change-Id: Ib9a1b9ecff6942671528b782229ea60605437ea5
2021-05-12 22:21:10 +00:00
Vineeta Srivastava
f4d2a0d365 Merge "Add sepolicy for the UDFPS antispoof property" into sc-dev am: 14a07e230a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467424

Change-Id: Iab230781e0e88d86bcc08deecf0a2deca3c99756
2021-05-12 22:19:10 +00:00
Vineeta Srivastava
14a07e230a Merge "Add sepolicy for the UDFPS antispoof property" into sc-dev 2021-05-12 21:45:44 +00:00
TreeHugger Robot
1fbb91ef97 Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: d4f9ef4303
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14512449

Change-Id: Iedca46d44602399a84822bc636c8b54ed025f045
2021-05-12 18:49:09 +00:00
TreeHugger Robot
7ef1e1ee2a Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: d4f9ef4303
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14512449

Change-Id: I9e281e324c3906eb309a77ad103fbcfc703fd26b
2021-05-12 18:47:24 +00:00
TreeHugger Robot
c232d79fdc Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: d4f9ef4303
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14512449

Change-Id: Id53d3d71b57e49fc30f1079c6544a70f9c26fca5
2021-05-12 18:47:09 +00:00
TreeHugger Robot
d4f9ef4303 Merge "Grant vendor_sched sysfs nodes access" into sc-dev 2021-05-12 18:28:51 +00:00
Grace Chen
4b59c5b98e Add selinux permissions for NFC/eSIM firmware upgrade and recovery
Bug: 181246088
Test: Confirm selinux permissions.
Change-Id: I71c59d1afc50e273b840cd2df7600b4e806c0661
2021-05-12 10:07:55 -07:00
TreeHugger Robot
6432a7bc7a Merge "Add SELinux policy for allowing dumping GSC info" into sc-dev am: 1f594ec562 am: e723f80ba9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14491675

Change-Id: I08ae3cbad6204c0b25415d1eea95f4a1af30d33c
2021-05-12 10:41:16 +00:00
TreeHugger Robot
8a1ed47bba Merge "correctly label networking gadgets" into sc-dev am: 7fd939fdd7 am: b3ae9a8c03
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14495070

Change-Id: I32c987673a819fea3bd13ecb9527b8fd15552fbf
2021-05-12 10:41:11 +00:00
TreeHugger Robot
e723f80ba9 Merge "Add SELinux policy for allowing dumping GSC info" into sc-dev am: 1f594ec562
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14491675

Change-Id: I2be4e332d0f1b79f9e744203127b48da25cd1554
2021-05-12 10:26:57 +00:00
TreeHugger Robot
5d91d63244 Merge "Add SELinux policy for allowing dumping GSC info" into sc-dev am: 1f594ec562
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14491675

Change-Id: I21e2facab7cb7b83c86d38788343eb8d7304585a
2021-05-12 10:25:05 +00:00
TreeHugger Robot
2264b80f38 Merge "correctly label networking gadgets" into sc-dev am: 7fd939fdd7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14495070

Change-Id: I21f3ceffcd4e137da42f94c204ada2bae896683f
2021-05-12 10:24:58 +00:00
TreeHugger Robot
70273f60f7 Merge "Add SELinux policy for allowing dumping GSC info" into sc-dev am: 1f594ec562
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14491675

Change-Id: Iac966d1822a7f47a2b700cb424cb1c93286eeb01
2021-05-12 10:23:17 +00:00
TreeHugger Robot
41c6887b56 Merge "correctly label networking gadgets" into sc-dev am: 7fd939fdd7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14495070

Change-Id: I884720235281e77408a0872697d0ade9ea7d817d
2021-05-12 10:23:11 +00:00
TreeHugger Robot
0c4611ecb0 Merge "bthal: allow bthal to access bluetooth kernel driver logbuffer_btlpm and logbuffer_btuart device node" into sc-dev am: 9b8e2b7ba8 am: e7fe59fb13
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14009545

Change-Id: I428409b43fbac1c0c6d4613b5be5d9e8c60f7e93
2021-05-12 10:02:42 +00:00
TreeHugger Robot
1f594ec562 Merge "Add SELinux policy for allowing dumping GSC info" into sc-dev 2021-05-12 10:02:28 +00:00
TreeHugger Robot
b3ae9a8c03 Merge "correctly label networking gadgets" into sc-dev am: 7fd939fdd7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14495070

Change-Id: I27d3d5a87b676167ffc00af83099c8547c4e3810
2021-05-12 07:43:07 +00:00
TreeHugger Robot
7fd939fdd7 Merge "correctly label networking gadgets" into sc-dev 2021-05-12 07:38:42 +00:00
TreeHugger Robot
e7fe59fb13 Merge "bthal: allow bthal to access bluetooth kernel driver logbuffer_btlpm and logbuffer_btuart device node" into sc-dev am: 9b8e2b7ba8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14009545

Change-Id: I2c7c39f279ec96eaa6138859ca3982bc85a21f6b
2021-05-12 07:35:16 +00:00
TreeHugger Robot
96d84253b8 Merge "bthal: allow bthal to access bluetooth kernel driver logbuffer_btlpm and logbuffer_btuart device node" into sc-dev am: 9b8e2b7ba8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14009545

Change-Id: Ia305e564de5aeac5f395f4bd20b2a793e1377db2
2021-05-12 07:33:40 +00:00
TreeHugger Robot
2ac2a0fa96 Merge "bthal: allow bthal to access bluetooth kernel driver logbuffer_btlpm and logbuffer_btuart device node" into sc-dev am: 9b8e2b7ba8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14009545

Change-Id: Ic6bc599ae9c6a55d3a9bec762f34a05a1b2f61c1
2021-05-12 07:33:38 +00:00
TreeHugger Robot
9b8e2b7ba8 Merge "bthal: allow bthal to access bluetooth kernel driver logbuffer_btlpm and logbuffer_btuart device node" into sc-dev 2021-05-12 07:06:45 +00:00
TreeHugger Robot
7a4d420378 Merge "com.qorvo.uwb: signed with dedicated key and running as android.uid.uwb uid" into sc-dev am: e2a0158fdf am: 6d2c152bcf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506301

Change-Id: Ie31251dcf3d49a4844c13b223452caac39f93681
2021-05-12 07:02:52 +00:00
TreeHugger Robot
6d2c152bcf Merge "com.qorvo.uwb: signed with dedicated key and running as android.uid.uwb uid" into sc-dev am: e2a0158fdf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506301

Change-Id: Id1e7ebe45d7abab203646ed038cd74d194fd2014
2021-05-12 06:41:43 +00:00
TreeHugger Robot
3e991c2d81 Merge "com.qorvo.uwb: signed with dedicated key and running as android.uid.uwb uid" into sc-dev am: e2a0158fdf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506301

Change-Id: If8d04254549b617266e9c8fc097a80b285a890fe
2021-05-12 06:39:56 +00:00
TreeHugger Robot
48d64f3f99 Merge "com.qorvo.uwb: signed with dedicated key and running as android.uid.uwb uid" into sc-dev am: e2a0158fdf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506301

Change-Id: I774b7fad8823b9b5cb30fca010350c1449a4ebc1
2021-05-12 06:39:40 +00:00
TreeHugger Robot
e2a0158fdf Merge "com.qorvo.uwb: signed with dedicated key and running as android.uid.uwb uid" into sc-dev 2021-05-12 06:22:21 +00:00
jonerlin
cb3f59b89e bthal: allow bthal to access bluetooth kernel driver logbuffer_btlpm
and logbuffer_btuart device node

* add sepolicy rules to let bthal can access bluetooth kernel device
  nodes dev/logbuffer_btlpm and dev/logbuffer_tty16 in engineer
  or user debug build

Bug: 177794127
Test: Manually
Change-Id: I5253719df82ca7ef8e64cbd3f2b0ff6d3f088edc
2021-05-12 13:27:40 +08:00
Wei Wang
6883250a44 Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev am: 53ae55618a am: c515c8345d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14509955

Change-Id: I7f52c6c8fe5f6eac81410f10c4db73f13eaf46dc
2021-05-12 04:49:43 +00:00
Wei Wang
c515c8345d Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev am: 53ae55618a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14509955

Change-Id: I9a79e69ca43827358937aebcab730471715acb4c
2021-05-12 04:28:06 +00:00
Wei Wang
1e378dbfa3 Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev am: 53ae55618a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14509955

Change-Id: Ib6ade70fbfd568b17f9ca1ff49b8dc0c78590bb0
2021-05-12 04:26:57 +00:00
Wei Wang
edf3463646 Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev am: 53ae55618a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14509955

Change-Id: I680bd82ec4b05f197db3f520e0416fa12204d1e2
2021-05-12 04:26:40 +00:00
Thierry Strudel
03f4884884 com.qorvo.uwb: signed with dedicated key and running as android.uid.uwb uid
Test:
05-11 21:05:48.077   786   786 I qorvo.uwb.main: UWB HAL start
05-11 21:05:48.078   412   412 I servicemanager: Found hardware.qorvo.uwb.IUwb/default in device VINTF manifest.
05-11 21:05:50.960  1639  1639 W PackageSettings: Missing permission state for package: com.qorvo.uwbtestapp.system
05-11 21:05:53.530  1639  1639 V StorageManagerService: Package com.qorvo.uwb does not have legacy storage
05-11 21:05:53.548  1639  1639 V StorageManagerService: Package com.qorvo.uwbtestapp.system does not have legacy storage
05-11 21:05:56.571  1639  1902 I am_proc_start: [0,3055,1083,com.qorvo.uwb,added application,com.qorvo.uwb]
05-11 21:05:56.571  1639  1902 I ActivityManager: Start proc 3055:com.qorvo.uwb/1083 for added application com.qorvo.uwb
05-11 21:05:56.653  1639  2264 I am_proc_bound: [0,3055,com.qorvo.uwb]
05-11 21:05:56.709  3055  3055 I TetheringManager: registerTetheringEventCallback:com.qorvo.uwb
05-11 21:05:56.710  3055  3055 V GraphicsEnvironment: ANGLE Developer option for 'com.qorvo.uwb' set to: 'default'
05-11 21:06:05.045  1639  1900 I am_pss  : [3055,1083,com.qorvo.uwb,5719040,4239360,0,88702976,2,0,6]
05-11 21:06:07.233  1639  1981 I am_compact: [3055,com.qorvo.uwb,all,84816,39052,44628,0,-816,0,-816,816,26,0,0,-800,0,1921532,-768]
05-11 21:06:38.442   786   786 I qorvo.Uwb: open
05-11 21:06:38.443   786   786 I qorvo.uwb.McpsUtils: ListHardware
05-11 21:06:38.443   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse
05-11 21:06:38.443   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse: Read message
05-11 21:06:38.443   786   786 I qorvo.uwb.IeeeUtils: ListDevices
05-11 21:06:38.443   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse
05-11 21:06:38.443   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse: Read message
05-11 21:06:38.443   786   786 I qorvo.uwb.UwbIface: Load calibration on wpan0, hw index: 0
05-11 21:06:38.445   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse
05-11 21:06:38.445   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse: Read message
05-11 21:06:38.445   786   786 I qorvo.uwb.UwbIface: Load properties on wpan0, hw index: 0
05-11 21:06:38.446   786   786 I qorvo.Uwb: getIface
05-11 21:06:38.449   786   786 I qorvo.uwb.UwbIface: firaController
05-11 21:06:38.449   786   786 I qorvo.Uwb: listHardwareIndex
05-11 21:06:38.449   786   786 I qorvo.uwb.McpsUtils: ListHardware
05-11 21:06:38.449   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse
05-11 21:06:38.450   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse: Read message
05-11 21:06:38.450   786   786 I qorvo.Uwb: getIface
05-11 21:06:38.450   786   786 I qorvo.uwb.UwbIface: cccController

Bug: 187766150
Signed-off-by: Thierry Strudel <tstrudel@google.com>
Change-Id: Ie667a666a445e907aa99542f1c52046522b5dd02
2021-05-12 04:07:58 +00:00
Taeju Park
1d0e8106f3 Grant vendor_sched sysfs nodes access
Bug: 182509410
Signed-off-by: Taeju Park <taeju@google.com>
Change-Id: I68bf0c6e4f7b53a871a3393cb317bf6c79ace5e3
2021-05-11 21:03:30 -07:00
Wei Wang
53ae55618a Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev 2021-05-12 03:56:58 +00:00
Wei Wang
73b65a0f8b Revert "Grant vendor_sched sysfs nodes access"
This reverts commit 638778c654.

Reason for revert: b/187884708
Bug: 187884708
Change-Id: I60e80246345ca3e827d7b4749f25e2d5c4dddf9d
2021-05-12 03:56:42 +00:00
TreeHugger Robot
8966b0738f Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev am: 004c299011 am: 223f9da106
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14485438

Change-Id: Id7fa2e92ca7ec7ef0cf92bca58d54bcd3bd3428f
2021-05-12 02:43:53 +00:00
TreeHugger Robot
223f9da106 Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev am: 004c299011
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14485438

Change-Id: Ib9d1708d8e53619827b81850d6e5e97729754825
2021-05-12 02:16:15 +00:00
TreeHugger Robot
0c07533adc Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev am: 004c299011
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14485438

Change-Id: Ia25ada37e66cdb62f56b3e97b6a43d53fee711a8
2021-05-12 02:14:29 +00:00
TreeHugger Robot
a4e1f1a4fb Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev am: 004c299011
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14485438

Change-Id: If42fcd5d12b79c15b9bb69a602a8c36007939a10
2021-05-12 02:14:08 +00:00
Kris Chen
00e1b9a704 Add sepolicy for the UDFPS antispoof property
Fixes the following avc denial:
/system/bin/init: type=1107 audit(0.0:4): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=fingerprint.disable.fake pid=364 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:default_prop:s0 tclass=property_service permissive=0'
android.hardwar: type=1400 audit(0.0:7): avc: denied { read } for name="u:object_r:vendor_fingerprint_fake_prop:s0" dev="tmpfs" ino=307 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:vendor_fingerprint_fake_prop:s0 tclass=file permissive=0

Bug: 187394838
Bug: 187562932
Test: Antispoof is disabled by default.
Test: Use the following adb command to manully turn on antispoof.
      "setprop persist.vendor.fingerprint.disable.fake.override 0"
Change-Id: I90d6ea70d5e0e1a125efb902f1fd61ff4b51baa2
2021-05-12 09:48:48 +08:00
TreeHugger Robot
004c299011 Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev 2021-05-12 01:32:03 +00:00
Hridya Valsaraju
70551d2bc9 Let debugfs be accessed only for non-user builds
Since production devices(with user builds) must not mount debugfs,
provide dumpstate HAL permission to access debugfs only in userdebug/eng
builds.

Also, delete dumpstate domain's access to
vendor_dmabuf_debugfs(/d/dma_buf/bufinfo) since dumpstate now obtains
the same information from /sys/kernel/dmabuf.

Test: build
Bug: 186500818
Change-Id: I17007d495fba6332bbf17dc7d030e5c6e4d5248b
2021-05-11 17:35:20 -07:00
Hridya Valsaraju
9e6528da08 Label debugfs files correctly
A few debugfs files are labelled as belonging to both debugfs_type and
sysfs_type. Hence, any client that is provided access to sysfs_type will
automatically be provided access to these files. This patch corrects the
labelling for these files to prevent this.

Test: build
Bug: 186500818
Change-Id: I364a73a960824cc9051610032179fd5caeca09de
2021-05-11 17:35:17 -07:00
Qinchen Gu
ab6df9cc18 Add SELinux policy for allowing dumping GSC info
Bug: 185939493
Test: adb bugreport. Look for GSC-related info.

Change-Id: I30dbb51781526d763205594283ca3b808f45d28f
2021-05-11 17:27:14 -07:00
Wei Wang
82e3d3146f Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: 3a2d20a1a2 am: a04548a17c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14462495

Change-Id: Ia8f8af31038a6fe8a872e1632c750a0e693a8f60
2021-05-11 18:10:48 +00:00
Wei Wang
a04548a17c Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: 3a2d20a1a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14462495

Change-Id: I957522e3cdb7c45401b50601e2a92cd617d3473a
2021-05-11 17:42:16 +00:00
Wei Wang
776b6040fa Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: 3a2d20a1a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14462495

Change-Id: Ib9103633531cc02bed37acfd53fa314d6d47394e
2021-05-11 17:41:51 +00:00
Wei Wang
e529fc3cfb Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: 3a2d20a1a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14462495

Change-Id: I7a96d0859bd09ebb961af6b18a7d5687aa01b391
2021-05-11 17:40:29 +00:00
Wei Wang
3a2d20a1a2 Merge "Grant vendor_sched sysfs nodes access" into sc-dev 2021-05-11 17:24:38 +00:00
sukiliu
7a1938e846 Update avc error on ROM 7349999 am: 99853e483b am: d5d461cc4e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14500956

Change-Id: I3e39d50fcfcf238866363c2ea927286dddb3eb55
2021-05-11 11:34:06 +00:00
sukiliu
d5d461cc4e Update avc error on ROM 7349999 am: 99853e483b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14500956

Change-Id: If71f414f52934e892475a040684dd91a2a75dfee
2021-05-11 11:04:31 +00:00
sukiliu
fd763f3ee9 Update avc error on ROM 7349999 am: 99853e483b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14500956

Change-Id: Icc17da37ec14a7834091bd1ace72dda52dbdf842
2021-05-11 11:02:46 +00:00
sukiliu
0d483277cf Update avc error on ROM 7349999 am: 99853e483b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14500956

Change-Id: Ieaa2460666b2d154333bbed9833abcaee833477f
2021-05-11 11:02:14 +00:00
Midas Chien
873511167c Allowed PowerHAL service access Display node
Bug: 164411401
Test: boot
Change-Id: Idcc1338bc66a7479aed9efd4d1ebc82efd1b7c4d
2021-05-11 10:23:58 +00:00
sukiliu
99853e483b Update avc error on ROM 7349999
avc: denied { call } for scontext=u:r:dumpstate:s0 tcontext=u:r:twoshay:s0 tclass=binder permissive=0

Bug: 187795940
Test: PtsSELinuxTestCases
Change-Id: Ib85ee1d52915b292295b21df8df48c18761c088e
2021-05-11 17:24:08 +08:00
Peter Csaszar
d39d9e517f pixel-selinux: add SJTAG policies am: bc525e1a49 am: 6ff24d2a06
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14489636

Change-Id: Icab05e0fb309a6eaa0befd3d3960e84569957005
2021-05-11 07:47:11 +00:00
Maciej Żenczykowski
60e0a18e2a correctly label networking gadgets
This is to pass system/netd/tests/netd_test.cpp:

TEST(NetdSELinuxTest, CheckProperMTULabels) {
    // Since we expect the egrep regexp to filter everything out,
    // we thus expect no matches and thus a return code of 1
    ASSERT_EQ(W_EXITCODE(1, 0), system("ls -Z /sys/class/net/*/mtu | egrep -q -v "
                                       "'^u:object_r:sysfs_net:s0 /sys/class/net/'"));
}

Test: atest, TreeHugger, manual observation of labeling
Bug: 185962988
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Ib4f8aa6cc2e0f5a5bd432bcfe473e550f5c68132
2021-05-11 07:40:38 +00:00
Peter Csaszar
6ff24d2a06 pixel-selinux: add SJTAG policies am: bc525e1a49
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14489636

Change-Id: I19e3462634d1e299ca6bfb8e8e01bd3e689bd903
2021-05-11 07:24:12 +00:00
Peter Csaszar
c8e24207eb pixel-selinux: add SJTAG policies am: bc525e1a49
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14489636

Change-Id: I007fd343a1cea81e73989bd3aa097341fe0e8d6c
2021-05-11 07:21:52 +00:00
Peter Csaszar
6a9f52b022 pixel-selinux: add SJTAG policies am: bc525e1a49
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14489636

Change-Id: I15f0713b466b5717e66cea151ac618eb0dfc21e1
2021-05-11 07:19:46 +00:00
Taeju Park
638778c654 Grant vendor_sched sysfs nodes access
Bug: 182509410
Signed-off-by: Taeju Park <taeju@google.com>
Change-Id: I53a879e904bef3c5b13127404f4f5c422abd46b4
2021-05-11 04:27:23 +00:00
Peter Csaszar
bc525e1a49 pixel-selinux: add SJTAG policies
These are the SELinux policies for the DebugFS files of the SJTAG
kernel interface.

Bug: 184768605
Signed-off-by: Peter Csaszar <pcsaszar@google.com>
Change-Id: I36996d6fd5fe09adb7a36be573cf57f15ea35756
2021-05-10 17:58:04 -07:00
Wei Wang
ff1bb37173 Merge "Add policy for memlat governor needs create/delete perf events" into sc-dev am: 551505ae05 am: 8181bbaaac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14486216

Change-Id: I616fa1b699d2b2fee93496cf06b24786f7e4e74b
2021-05-11 00:34:34 +00:00
Wei Wang
8181bbaaac Merge "Add policy for memlat governor needs create/delete perf events" into sc-dev am: 551505ae05
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14486216

Change-Id: I28349709c6a549e25ed8dffd490c84af777b83e9
2021-05-11 00:18:41 +00:00
Wei Wang
8c19aec1ee Merge "Add policy for memlat governor needs create/delete perf events" into sc-dev am: 551505ae05
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14486216

Change-Id: I18294c64c2dc118e1af978614d5feaec92ac0445
2021-05-11 00:16:50 +00:00
Wei Wang
b7b6bd8736 Merge "Add policy for memlat governor needs create/delete perf events" into sc-dev am: 551505ae05
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14486216

Change-Id: I04832fd37ac2d60fe7b9f969a606501274d29789
2021-05-11 00:14:18 +00:00
Wei Wang
551505ae05 Merge "Add policy for memlat governor needs create/delete perf events" into sc-dev 2021-05-10 23:59:50 +00:00
Jia-yi Chen
344b354f8b Merge "Add high_capacity_start_cpu to u:object_r:sysfs_vendor_sched:s0" into sc-dev am: 06a0792bf1 am: 1912dc976e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14460156

Change-Id: I7d847033afc8548522bac80ad657bcbae806dbd7
2021-05-10 19:07:21 +00:00
Jia-yi Chen
1912dc976e Merge "Add high_capacity_start_cpu to u:object_r:sysfs_vendor_sched:s0" into sc-dev am: 06a0792bf1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14460156

Change-Id: I1ddc002e6e20ca3dec0db9f018260ec0e56db574
2021-05-10 18:52:15 +00:00
Jia-yi Chen
d723c9dc53 Merge "Add high_capacity_start_cpu to u:object_r:sysfs_vendor_sched:s0" into sc-dev am: 06a0792bf1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14460156

Change-Id: I68e32fbfbb738a36a53f18e96a5f7ca072828102
2021-05-10 18:48:49 +00:00
Jia-yi Chen
9894e8e202 Merge "Add high_capacity_start_cpu to u:object_r:sysfs_vendor_sched:s0" into sc-dev am: 06a0792bf1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14460156

Change-Id: I206c35135cf16ff9956d1d7b5080697c9ea566b6
2021-05-10 18:48:39 +00:00
Jia-yi Chen
06a0792bf1 Merge "Add high_capacity_start_cpu to u:object_r:sysfs_vendor_sched:s0" into sc-dev 2021-05-10 18:29:41 +00:00
Kyle Lin
1124aeaf32 Add policy for memlat governor needs create/delete perf events
[   31.756984] type=1400 audit(1620144320.436:11): avc: denied { perfmon } for comm="cpuhp/4" capability=38 scontext=u:r:kernel:s0 tcontext=u:r:kernel:s0 tclass=capability2 permissive=0
[   31.757246] type=1400 audit(1620144320.436:12): avc: denied { sys_admin } for comm="cpuhp/4" capability=21 scontext=u:r:kernel:s0 tcontext=u:r:kernel:s0 tclass=capability permissive=0
[   31.757352] type=1400 audit(1620144320.436:13): avc: denied { perfmon } for comm="cpuhp/4" capability=38 scontext=u:r:kernel:s0 tcontext=u:r:kernel:s0 tclass=capability2 permissive=0
[   31.757450] type=1400 audit(1620144320.436:14): avc: denied { sys_admin } for comm="cpuhp/4" capability=21 scontext=u:r:kernel:s0 tcontext=u:r:kernel:s0 tclass=capability permissive=0
...
...
[  215.584932] type=1400 audit(1620634018.936:191): avc: denied { cpu } for comm="cpuhp/4" scontext=u:r:kernel:s0 tcontext=u:r:kernel:s0 tclass=perf_event permissive=0

Bug: 187437491
Bug: 170479743
Test: build, boot and suspend/resume test 200 times.

Change-Id: I4fd3d3fb915ca518ffa226f25298c94faaf867f1
2021-05-10 16:18:58 +08:00
chenpaul
6297e8a5a7 Sniffer Logger: Add dontaudit getattr for sysfs_wifi
05-10 15:04:37.376 12958 12958 I auditd  : type=1400 audit(0.0:14): avc: denied { getattr } for comm="wifi_sniffer" path="/sys/wifi/firmware_path" dev="sysfs" ino=81201 scontext=u:r:wifi_sniffer:s0 tcontext=u:object_r:sysfs_wifi:s0 tclass=file permissive=0

Bug: 187583019
Test: Sniffer Logger is workable
Change-Id: I6bce0bb58d951b6be39f58340b6418b328ffe386
2021-05-10 15:28:47 +08:00
JJ Lee
2a2ce4a0ae Merge "sepolicy: gs101: allow audio hal to use wakelock" into sc-dev am: df02b6ef77 am: 51c75a291e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14452416

Change-Id: I085a5e10dc22ac41c84c98614dbe3133c5971d40
2021-05-10 02:58:04 +00:00
JJ Lee
51c75a291e Merge "sepolicy: gs101: allow audio hal to use wakelock" into sc-dev am: df02b6ef77
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14452416

Change-Id: I9da7211554c5f2fdce509051caa4f3b2e381f9c1
2021-05-10 02:34:31 +00:00
JJ Lee
4be4faa1dc Merge "sepolicy: gs101: allow audio hal to use wakelock" into sc-dev am: df02b6ef77
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14452416

Change-Id: I51e769688205bbb6ea24e4afe736f22876e7b104
2021-05-10 02:31:46 +00:00
JJ Lee
7a46007222 Merge "sepolicy: gs101: allow audio hal to use wakelock" into sc-dev am: df02b6ef77
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14452416

Change-Id: I662932d3b069766e8c915578610b2524e8c8d396
2021-05-10 02:31:37 +00:00
JJ Lee
df02b6ef77 Merge "sepolicy: gs101: allow audio hal to use wakelock" into sc-dev 2021-05-10 02:14:07 +00:00
TreeHugger Robot
df80f0be9f Merge "vibrator: Remove temporary method" into sc-dev am: ec3144742f am: e853b4335e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467421

Change-Id: I6170cab39b5fec5c777500dab7506fafafba7000
2021-05-10 01:58:17 +00:00
TreeHugger Robot
eb15c49e77 Merge changes Ic697ffe8,Idcf38e09 into sc-dev am: a2d2ebd508 am: 41d657e591
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456725

Change-Id: I7c502814dadb2a5bb026fb856b0d8a6c7905085a
2021-05-10 01:57:50 +00:00
TreeHugger Robot
e853b4335e Merge "vibrator: Remove temporary method" into sc-dev am: ec3144742f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467421

Change-Id: I8abc6a5985a10691d2a6b2350aaf7c1b3b523056
2021-05-10 01:41:55 +00:00
TreeHugger Robot
41d657e591 Merge changes Ic697ffe8,Idcf38e09 into sc-dev am: a2d2ebd508
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456725

Change-Id: I31ebc93fd8a8a664f75e623c007482fa345a1248
2021-05-10 01:41:42 +00:00
TreeHugger Robot
11accc9f2f Merge "vibrator: Remove temporary method" into sc-dev am: ec3144742f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467421

Change-Id: I4a0d4f360b28e6a0496f8887488f76824d867808
2021-05-10 01:40:05 +00:00
TreeHugger Robot
26cf3f59ac Merge changes Ic697ffe8,Idcf38e09 into sc-dev am: a2d2ebd508
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456725

Change-Id: Ia366cfb74424fe2d8dbba868c92649fbc738fc47
2021-05-10 01:39:57 +00:00
TreeHugger Robot
bba2a7a0c9 Merge "vibrator: Remove temporary method" into sc-dev am: ec3144742f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467421

Change-Id: Ieb1405f8124528b337ee3273ebe79b6c522c2f44
2021-05-10 01:39:54 +00:00
TreeHugger Robot
0121aed44a Merge changes Ic697ffe8,Idcf38e09 into sc-dev am: a2d2ebd508
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456725

Change-Id: I55d5ff71adec66427fb69a36bfd17a8cc7a37d0b
2021-05-10 01:39:34 +00:00
TreeHugger Robot
ec3144742f Merge "vibrator: Remove temporary method" into sc-dev 2021-05-10 01:13:47 +00:00
TreeHugger Robot
a2d2ebd508 Merge changes Ic697ffe8,Idcf38e09 into sc-dev
* changes:
  Remove dumpstate AVC denials dontaudit for twoshay
  Allow dumpstate to access twoshay
2021-05-10 01:11:46 +00:00
TreeHugger Robot
73f7604819 Merge "Allow radioext to communicate with bt hal" into sc-dev am: c03c055812 am: 93008dc81a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456718

Change-Id: I04601b7854246242a3e73d12ceb0491c7428c3c4
2021-05-08 19:33:35 +00:00
TreeHugger Robot
93008dc81a Merge "Allow radioext to communicate with bt hal" into sc-dev am: c03c055812
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456718

Change-Id: I3d1fed21b348e309acf8c981d0295fc0c6db1597
2021-05-08 19:13:26 +00:00
TreeHugger Robot
c3c5ca4ddb Merge "Allow radioext to communicate with bt hal" into sc-dev am: c03c055812
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456718

Change-Id: Ie6e2ad1c7f522db72d1376aae37c5501f85e29be
2021-05-08 19:10:01 +00:00
TreeHugger Robot
4e4b697ebc Merge "Allow radioext to communicate with bt hal" into sc-dev am: c03c055812
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456718

Change-Id: Ieab3a480c6a09103b09b09f5f238f975ee4845ad
2021-05-08 19:09:55 +00:00
TreeHugger Robot
c03c055812 Merge "Allow radioext to communicate with bt hal" into sc-dev 2021-05-08 18:59:51 +00:00
TreeHugger Robot
73e866b8c8 Merge "iwlan: update sepolicy for qualifiednetworksservice" into sc-dev am: 296f8ddc5d am: cb8de215f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14440528

Change-Id: I5f0f438dd488cb64579f777809ddf2ab31fd9926
2021-05-07 23:59:40 +00:00
TreeHugger Robot
cb8de215f8 Merge "iwlan: update sepolicy for qualifiednetworksservice" into sc-dev am: 296f8ddc5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14440528

Change-Id: I99470e75b9839107b8ea89232437d3c91a722a23
2021-05-07 23:45:52 +00:00
TreeHugger Robot
978d75fba7 Merge "iwlan: update sepolicy for qualifiednetworksservice" into sc-dev am: 296f8ddc5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14440528

Change-Id: I336b1e613abebe0e56faf3732dce5d3fea52b0dc
2021-05-07 23:43:53 +00:00
TreeHugger Robot
776d3de596 Merge "iwlan: update sepolicy for qualifiednetworksservice" into sc-dev am: 296f8ddc5d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14440528

Change-Id: I99208ec0b4e5af7ae08b16e7bc4dc2e1c1a9894d
2021-05-07 23:43:49 +00:00
TreeHugger Robot
296f8ddc5d Merge "iwlan: update sepolicy for qualifiednetworksservice" into sc-dev 2021-05-07 23:29:31 +00:00
chasewu
59161a5745 vibrator: Remove temporary method
Bug: 177176811
Test: no avc denied logs
Signed-off-by: chasewu <chasewu@google.com>
Change-Id: I424e15037b3e20824f5e072d88bdf71a50cfdabf
2021-05-07 18:33:15 +08:00
Seungah Lim
72e6339123 iwlan: update sepolicy for qualifiednetworksservice
Bug: 185942456
Test: VoLTE/VoWifi

Change-Id: I352bb933e577b11bb052a297d17776ff0a5f3a75
Signed-off-by: Seungah Lim <sss.lim@samsung.com>
2021-05-07 17:14:00 +08:00
Tai Kuo
8e3aaa30ff Remove dumpstate AVC denials dontaudit for twoshay
Bug: 187014717
Test: pts-tradefed run pts -m PtsSELinuxTest -t \
  com.google.android.selinux.pts.SELinuxTest#scanBugreport
Signed-off-by: Tai Kuo <taikuo@google.com>
Change-Id: Ic697ffe8f6ee15fb9d9330173a3c92aeca61de67
2021-05-07 14:56:22 +08:00
Tai Kuo
0e68aed154 Allow dumpstate to access twoshay
Bug: 173330981
Bug: 187014717
Test: no avc denials for twoshay was found.
Signed-off-by: Tai Kuo <taikuo@google.com>
Change-Id: Idcf38e0921fb4d6d617e7cd443425193aea3fe91
2021-05-07 14:55:43 +08:00
Jia-yi Chen
15c046878b Add high_capacity_start_cpu to u:object_r:sysfs_vendor_sched:s0
Bug: 186564130
Test: Boot & check powerhal log
Change-Id: I1a828f113266d4b3386b2f6fa74df050255113a9
2021-05-06 21:00:08 -07:00
Labib
a27f8c4480 Allow radioext to communicate with bt hal
Bug: 187447420
Change-Id: I1a1626502a6c3913846b957c3c0a31fdd99feb31
2021-05-07 09:20:02 +08:00
Tri Vo
b38ed0c788 Merge "trusty: sepolicy for metrics reporter" into sc-dev am: f7bec8b3c6 am: f40a4f7416
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14286451

Change-Id: I03c47276db396ec87b7f6bb27af99fa4033e7b52
2021-05-06 16:29:52 +00:00
Tri Vo
f40a4f7416 Merge "trusty: sepolicy for metrics reporter" into sc-dev am: f7bec8b3c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14286451

Change-Id: I9723772bdbd3c02e6af0e7348d45a3717a19cc0c
2021-05-06 16:09:53 +00:00
Tri Vo
7c585329ec Merge "trusty: sepolicy for metrics reporter" into sc-dev am: f7bec8b3c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14286451

Change-Id: I65819ea555dafbd575e26c1f9e45fbb1ce8617ff
2021-05-06 16:08:19 +00:00
Tri Vo
da485f1270 Merge "trusty: sepolicy for metrics reporter" into sc-dev am: f7bec8b3c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14286451

Change-Id: I3442adb02d7ae36f4533c2b94154a7c32ca9ea6f
2021-05-06 16:08:09 +00:00
Tri Vo
f7bec8b3c6 Merge "trusty: sepolicy for metrics reporter" into sc-dev 2021-05-06 15:52:51 +00:00
JJ Lee
43735f0fc3 sepolicy: gs101: allow audio hal to use wakelock
Bug: 178789331
Test: build pass
Signed-off-by: JJ Lee <leejj@google.com>
Change-Id: I1d5c9ea8726f2e53bc05e0ecd5dedddede274794
2021-05-06 19:43:24 +08:00
Aaron Tsai
e4773d1db2 Fix avc denied for shannon-ims am: 6a9a85cd07 am: 71aa99edff
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410097

Change-Id: I8935b75ce3632935b127d7c1a4038886d40461bf
2021-05-06 11:07:46 +00:00
Aaron Tsai
71aa99edff Fix avc denied for shannon-ims am: 6a9a85cd07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410097

Change-Id: I84e986338a7985fe26cdf179bd1734771956defa
2021-05-06 10:53:09 +00:00
Aaron Tsai
c49f82b712 Fix avc denied for shannon-ims am: 6a9a85cd07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410097

Change-Id: I480df5510301d889390c92f2cad68c0fb4e489e5
2021-05-06 10:51:12 +00:00
Aaron Tsai
2cea3621b0 Fix avc denied for shannon-ims am: 6a9a85cd07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410097

Change-Id: I5289bf698f1bfad5074d446beff9aeeace50e27d
2021-05-06 10:49:37 +00:00
Aaron Tsai
6a9a85cd07 Fix avc denied for shannon-ims
04-01 19:10:22.956 10272  2327  2327 W Binder:2327_4: type=1400 audit(0.0:8): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=139 scontext=u:r:vendor_ims_app:s0:c16,c257,c512,c768 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0 app=com.shannon.imsservice
04-01 19:10:22.960 10272  2327  4608 E libc    : Access denied finding property "persist.dbg.wfc_avail_ovr0"
04-01 19:10:22.981 10272  2327  4608 E libc    : Access denied finding property "persist.dbg.vt_avail_ovr0"
04-01 19:10:22.982 10272  2327  4980 E libc    : Access denied finding property "persist.dbg.volte_avail_ovr0"

Bug: 183935382
Bug: 184858478
Test: verified with the forrest ROM and error log goneFix
Change-Id: I0754c6be7f74ed73533e9570c7d1916320ab2897
2021-05-06 09:04:03 +00:00
TreeHugger Robot
647dcaf48d Merge "HardwareInfo: Add sepolicy for display" into sc-dev am: 6978eeaea4 am: 5bb2c8ab79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824666

Change-Id: I30ae225a60b80f8167c4dd9a3723725d6e53ab3c
2021-05-06 06:31:05 +00:00
TreeHugger Robot
51380a7089 Merge "wlc fwupdate implementation" into sc-dev am: 577f562727 am: 9fccfb01ce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14063269

Change-Id: Ie01bf8328923a33c63ae7070dac41e687afdeec5
2021-05-06 06:30:22 +00:00
TreeHugger Robot
5f2f2a672b Merge "HardwareInfo: Add sepolicy for display" into sc-dev am: 6978eeaea4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824666

Change-Id: I79da8abcc3cdaab61fe2932fa8da8ab9f6400eef
2021-05-06 06:13:04 +00:00
TreeHugger Robot
89e2f50371 Merge "HardwareInfo: Add sepolicy for display" into sc-dev am: 6978eeaea4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824666

Change-Id: Id3e71b7c4c9b920ec277716861ec6a9b2e6b12a4
2021-05-06 06:12:55 +00:00
TreeHugger Robot
5bb2c8ab79 Merge "HardwareInfo: Add sepolicy for display" into sc-dev am: 6978eeaea4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824666

Change-Id: Ifa6682feee948555974d8776d60accb4cc3b356e
2021-05-06 06:07:06 +00:00
TreeHugger Robot
6978eeaea4 Merge "HardwareInfo: Add sepolicy for display" into sc-dev 2021-05-06 06:03:18 +00:00
TreeHugger Robot
9fccfb01ce Merge "wlc fwupdate implementation" into sc-dev am: 577f562727
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14063269

Change-Id: I2fa4b8768369139bb9d0ea226b6e98ecd38e2ee0
2021-05-06 05:59:24 +00:00
TreeHugger Robot
4a6a02638b Merge "wlc fwupdate implementation" into sc-dev am: 577f562727
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14063269

Change-Id: I62224845358e55795a969607313d0e69215b4e36
2021-05-06 05:57:43 +00:00
TreeHugger Robot
eca11f8843 Merge "wlc fwupdate implementation" into sc-dev am: 577f562727
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14063269

Change-Id: I0ab5c9fb9f10820fda8bfd7e9e4fefc2f36e423a
2021-05-06 05:57:17 +00:00
TreeHugger Robot
577f562727 Merge "wlc fwupdate implementation" into sc-dev 2021-05-06 05:41:01 +00:00
SalmaxChang
12593ef488 logger_app: Fix avc errors am: ab97657410 am: ebf55ff9f1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439439

Change-Id: I066f7b1bbcde9324172955b9997c65554c66709f
2021-05-06 04:41:26 +00:00
SalmaxChang
ebf55ff9f1 logger_app: Fix avc errors am: ab97657410
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439439

Change-Id: Ia96374b57725305faa7c900ee4702bc2167fde7c
2021-05-06 04:16:28 +00:00
SalmaxChang
747868bae7 logger_app: Fix avc errors am: ab97657410
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439439

Change-Id: I359355128d4569832e88bf1f188275610c6c3dd6
2021-05-06 04:14:44 +00:00
SalmaxChang
48327b8da1 logger_app: Fix avc errors am: ab97657410
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439439

Change-Id: I53a9905e749c8b6647b42e70f87a221751fb0432
2021-05-06 04:14:28 +00:00
SalmaxChang
ab97657410 logger_app: Fix avc errors
avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=141 scontext=u:r:logger_app:s0:c21,c257,c512,c768 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0 app=com.android.pixellogger
Access denied finding property "viewroot.profile_rendering"
Access denied finding property "ro.input.resampling"
Access denied finding property "persist.input.velocitytracker.strategy"

avc: denied { read } for comm="oid.pixellogger" name="u:object_r:usb_control_prop:s0" dev="tmpfs" ino=281 scontext=u:r:logger_app:s0:c21,c257,c512,c768 tcontext=u:object_r:usb_control_prop:s0 tclass=file permissive=0 app=com.android.pixellogger

Bug: 186612284
Change-Id: I15f00d9ed3cc0c0657c854292caad60e3f7a3011
2021-05-06 03:57:01 +00:00
Jack Wu
8afb8bee7b sepolicy: gs101: Fix hal_health_default avc denials am: 2c1ecf3a54 am: 388860a7ba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439451

Change-Id: I08759859df54a805168b3ee1aa5a1c9fa7d0ffea
2021-05-05 22:30:20 +00:00
Jack Wu
388860a7ba sepolicy: gs101: Fix hal_health_default avc denials am: 2c1ecf3a54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439451

Change-Id: I9c4332385e1a22043938a022c2074d34b490adbf
2021-05-05 22:16:08 +00:00
Jack Wu
41284f3e10 sepolicy: gs101: Fix hal_health_default avc denials am: 2c1ecf3a54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439451

Change-Id: I65455bb121c39aafc58a087645aecbed71505ecd
2021-05-05 22:14:02 +00:00
Jack Wu
9ac90fc4c1 sepolicy: gs101: Fix hal_health_default avc denials am: 2c1ecf3a54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439451

Change-Id: I3a8dfac579c6d631faa4b11a0a2dc2f2669647d5
2021-05-05 22:13:35 +00:00
Jack Wu
2c1ecf3a54 sepolicy: gs101: Fix hal_health_default avc denials
01-01 12:00:08.752  1000   682   682 I android.hardwar: type=1400 audit(0.0:3): avc: denied { read } for name="type" dev="sysfs" ino=68812 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
01-01 12:00:08.752  1000   682   682 I android.hardwar: type=1400 audit(0.0:4): avc: denied { open } for path="/sys/devices/platform/10d50000.hsi2c/i2c-7/7-0069/power_supply/dc/type" dev="sysfs" ino=68812 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
01-01 12:00:08.752  1000   682   682 I android.hardwar: type=1400 audit(0.0:5): avc: denied { getattr } for path="/sys/devices/platform/10d50000.hsi2c/i2c-7/7-0069/power_supply/dc/type" dev="sysfs" ino=68812 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

Bug: 184429394
Test: Verify pass by checking device log are w/o above errors after
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: If1253c902af1723ca80d31223f51ebf439404527
2021-05-06 00:26:14 +08:00
Alex Hong
ef86b642ad Merge "sepolicy: Update dumpstate HAL to V1.1" into sc-dev am: be17ec14cc am: a0e4da3cb4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14424440

Change-Id: I89c2aacb07e5c2d4cc15e1cfa74933dc0d6fc216
2021-05-05 07:00:22 +00:00
Alex Hong
a0e4da3cb4 Merge "sepolicy: Update dumpstate HAL to V1.1" into sc-dev am: be17ec14cc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14424440

Change-Id: I381c9f63d18cd7568f3ea912e5a77010909a1fbf
2021-05-05 06:31:55 +00:00
Alex Hong
00279692ff Merge "sepolicy: Update dumpstate HAL to V1.1" into sc-dev am: be17ec14cc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14424440

Change-Id: I70997d234403030cb0e06d51dad4bad965e39758
2021-05-05 06:30:01 +00:00
Alex Hong
ad3113cee8 Merge "sepolicy: Update dumpstate HAL to V1.1" into sc-dev am: be17ec14cc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14424440

Change-Id: I449c5e89858a5365961c82c4ac8a8a87c9de9438
2021-05-05 06:30:00 +00:00
Alex Hong
be17ec14cc Merge "sepolicy: Update dumpstate HAL to V1.1" into sc-dev 2021-05-05 06:09:11 +00:00
Tri Vo
1dac39e833 trusty: sepolicy for metrics reporter
Bug: 173423860
Test: m
Change-Id: I42d646c6c9453662e670e7c22712f2bde2368bba
2021-05-05 05:38:34 +00:00
TreeHugger Robot
263452b0f9 Merge "add sepolicy for dump TRICKLE/TEMP/DWELL defend config" into sc-dev am: 6978cd7220 am: fed9fee663
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14419455

Change-Id: I49e37210d62b6f31d9c5ff34430312b179815594
2021-05-05 04:15:11 +00:00
TreeHugger Robot
fed9fee663 Merge "add sepolicy for dump TRICKLE/TEMP/DWELL defend config" into sc-dev am: 6978cd7220
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14419455

Change-Id: Ib650be96e3439600b2975ab0d20fad5710eebc8a
2021-05-05 03:24:10 +00:00
TreeHugger Robot
5853581df5 Merge "add sepolicy for dump TRICKLE/TEMP/DWELL defend config" into sc-dev am: 6978cd7220
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14419455

Change-Id: Iae2b95ad4cb344b3783d00b8a9f003226f4bbdc4
2021-05-05 03:22:22 +00:00
TreeHugger Robot
02d5ccc76d Merge "add sepolicy for dump TRICKLE/TEMP/DWELL defend config" into sc-dev am: 6978cd7220
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14419455

Change-Id: If12d03a3aefbfa5380f57a271fe759de61ad54ea
2021-05-05 03:21:58 +00:00
TreeHugger Robot
6978cd7220 Merge "add sepolicy for dump TRICKLE/TEMP/DWELL defend config" into sc-dev 2021-05-05 02:55:28 +00:00
qinyiyan
c28198ce01 [SEPolicy] Allow EdgeTPU related service to log to stats service am: 9eeae92ade am: ac59670250
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14431799

Change-Id: I4fde66b57df8e0c1af1145c7163cadf5ba55a6be
2021-05-05 02:43:41 +00:00
qinyiyan
ac59670250 [SEPolicy] Allow EdgeTPU related service to log to stats service am: 9eeae92ade
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14431799

Change-Id: Ie3341d449912158725a1d5292db97278b13605f7
2021-05-05 02:28:49 +00:00
qinyiyan
e86759fd5f [SEPolicy] Allow EdgeTPU related service to log to stats service am: 9eeae92ade
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14431799

Change-Id: Ib6975baa6dc546550f6c7b3b0ed980a2b9c49017
2021-05-05 02:26:56 +00:00
qinyiyan
d781335da0 [SEPolicy] Allow EdgeTPU related service to log to stats service am: 9eeae92ade
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14431799

Change-Id: I9ea7c9a787fc7e74b9e934c029ca0d4a4d7cb2d9
2021-05-05 02:26:55 +00:00
qinyiyan
9eeae92ade [SEPolicy] Allow EdgeTPU related service to log to stats service
We are collecting Suez metrics from TPU related services. This includes
NNAPI HAL, edgetput logging service, and edgetpu service.

This change allows them all to find stats_service.

Bug: 151063663
Test: Pushed selinx module to device and successfully logged Stats
service.

Change-Id: I80774485ae7c2a5f994d48a71b6406fac753a9f8
2021-05-04 17:08:56 -07:00
Chris Kuiper
5db8d9f987 Merge "sepolicy: gs101: allow usf_reg_edit to run" into sc-dev am: d0d0304443 am: adb83f2a07
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14415568

Change-Id: I83c062d199c58c459c1dc378924d6b7181a56ba3
2021-05-04 23:12:05 +00:00
Chris Kuiper
adb83f2a07 Merge "sepolicy: gs101: allow usf_reg_edit to run" into sc-dev am: d0d0304443
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14415568

Change-Id: I7eba5b27a274180a9bbf3389018549b7e1188a98
2021-05-04 22:56:31 +00:00
Chris Kuiper
1befba6214 Merge "sepolicy: gs101: allow usf_reg_edit to run" into sc-dev am: d0d0304443
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14415568

Change-Id: I8f10abf38be234dd6fab6d632a157c7624115579
2021-05-04 22:54:39 +00:00
Chris Kuiper
0b3635fb29 Merge "sepolicy: gs101: allow usf_reg_edit to run" into sc-dev am: d0d0304443
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14415568

Change-Id: Ifd5885646dbfac42f16fc867296717e173f6ff18
2021-05-04 22:54:13 +00:00
Chris Kuiper
d0d0304443 Merge "sepolicy: gs101: allow usf_reg_edit to run" into sc-dev 2021-05-04 22:33:57 +00:00
Yu-Chi Cheng
99d5b083f8 Merge "Added the SELinux rule for the EdgeTPU vendor service." into sc-dev am: 7eef8643a3 am: b989b6c2d5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299125

Change-Id: Ie29cfc8d8a473f3d047ee9c825096daeef405e6d
2021-05-04 20:33:22 +00:00
Yu-Chi Cheng
b989b6c2d5 Merge "Added the SELinux rule for the EdgeTPU vendor service." into sc-dev am: 7eef8643a3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299125

Change-Id: I7413d1da70dc4e5a5895296f7dde4be3dde45291
2021-05-04 20:11:24 +00:00
Yu-Chi Cheng
c454ab19c0 Merge "Added the SELinux rule for the EdgeTPU vendor service." into sc-dev am: 7eef8643a3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299125

Change-Id: Ia605bdd86e266c6487d591ddc30d64101365e929
2021-05-04 20:09:19 +00:00
Yu-Chi Cheng
51bb36a753 Merge "Added the SELinux rule for the EdgeTPU vendor service." into sc-dev am: 7eef8643a3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299125

Change-Id: I70e2180befe6e6371d01d1f45ed92bb1e0318381
2021-05-04 20:09:17 +00:00
Yu-Chi Cheng
7eef8643a3 Merge "Added the SELinux rule for the EdgeTPU vendor service." into sc-dev 2021-05-04 19:39:32 +00:00
Yu-Chi Cheng
b844190a34 Added the SELinux rule for the EdgeTPU vendor service.
To comply with the GSI compliance test, this change
splits the compiler part of the edgetpu_service into a
separate edgetpu_vendor_service under vendor.

The edgetpu_service locates under /system_ext/ and used
to be connected by both applications and vendor clients.
With this change, vendor clients could talk to the vendor
part of this service directly without having to cross
the system and vendor boundary.

Applications will still talk to the system_ext one, which
will forward the requests to the vendor service.

Bug: 185432427
Test: tested on Oriole + GCA.
Change-Id: I1ee47946f1fc3694d5f8b5325c192d6bd720a76e
2021-05-04 10:36:21 -07:00
Alex Hong
ea5b597e3d sepolicy: Update dumpstate HAL to V1.1
Test: $ make selinux_policy
      Check the label after boot completed
Bug: 186539439
Change-Id: I6690e2bc485aceb53dc607b8a7656a4f57edf70e
2021-05-04 17:11:07 +08:00
Jenny Ho
f5b47095be add sepolicy for dump TRICKLE/TEMP/DWELL defend config
type=1400 audit(0.0:12): avc: denied { read } for name="google,charger" dev="sysfs" ino=25880 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=0

Bug: 186872139
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: Id8868d2b12408d4a39ba42c8b0faf801923f73f3
2021-05-04 15:24:38 +08:00
Daniel Mentz
5aed8b6921 Merge "Remove /vendor/lib/modules from file_contexts" into sc-dev am: 48e3555770 am: dfd70f5140
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14416770

Change-Id: I24ba3f169ef7a82eefaaf27e1b339882dd8c7b4d
2021-05-04 05:06:12 +00:00
Daniel Mentz
dfd70f5140 Merge "Remove /vendor/lib/modules from file_contexts" into sc-dev am: 48e3555770
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14416770

Change-Id: Id338f87631bcd0dac2a8f98cf85c3372b0b5fe84
2021-05-04 04:49:30 +00:00
Daniel Mentz
c4428736aa Merge "Remove /vendor/lib/modules from file_contexts" into sc-dev am: 48e3555770
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14416770

Change-Id: I2e45bde537960b09ee7e4f635e081bae95a895ec
2021-05-04 04:47:16 +00:00
Daniel Mentz
ff7a1a95d0 Merge "Remove /vendor/lib/modules from file_contexts" into sc-dev am: 48e3555770
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14416770

Change-Id: Ifde63969cc43d9730285fc3838f11f46755794bd
2021-05-04 04:46:03 +00:00
Daniel Mentz
23c0cba680 Merge "Revert "remove wildcard on kernel modules"" into sc-dev am: 1473b1d155 am: 3d63e648fa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14393364

Change-Id: I176f41a779b5ebc7f7382664b4f80a9f6eb4f2b3
2021-05-04 04:29:22 +00:00
TreeHugger Robot
4a089a1a14 Merge changes from topic "tcpdump_logger" into sc-dev am: 3186a0f24c am: 869798380a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14048497

Change-Id: I95a6fd717f9cb2aab31030a39e90c9a0bb66f572
2021-05-04 04:29:13 +00:00
lucaslin
d68ecabda7 Add sepolicy for tcpdump_logger to access wlan_logs folder am: 4099f60681 am: a068c23698
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410096

Change-Id: I56c28001f2c1dc61bfe349d8b443bb6c42e46198
2021-05-04 04:29:12 +00:00
Daniel Mentz
48e3555770 Merge "Remove /vendor/lib/modules from file_contexts" into sc-dev 2021-05-04 04:28:49 +00:00
Daniel Mentz
3d63e648fa Merge "Revert "remove wildcard on kernel modules"" into sc-dev am: 1473b1d155
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14393364

Change-Id: I108e79936a1bf016b84e3442eca15d559b5b09d0
2021-05-04 04:15:30 +00:00
TreeHugger Robot
869798380a Merge changes from topic "tcpdump_logger" into sc-dev am: 3186a0f24c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14048497

Change-Id: I4ac7202553d43883b405b68b9342e056bcfadfe3
2021-05-04 04:15:25 +00:00
lucaslin
a068c23698 Add sepolicy for tcpdump_logger to access wlan_logs folder am: 4099f60681
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410096

Change-Id: Ib593cb56d978978d6a2dce2649ce7eb83dbcc565
2021-05-04 04:15:24 +00:00
Daniel Mentz
00288cf620 Merge "Revert "remove wildcard on kernel modules"" into sc-dev am: 1473b1d155
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14393364

Change-Id: I3caa7f3715ca52992975f70383340900374b5687
2021-05-04 04:13:30 +00:00
Daniel Mentz
63c778b383 Merge "Revert "remove wildcard on kernel modules"" into sc-dev am: 1473b1d155
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14393364

Change-Id: Ifdcd4ac933b75be818d17f28f35b68ac330bdb09
2021-05-04 04:13:27 +00:00
TreeHugger Robot
ce190bb6ba Merge changes from topic "tcpdump_logger" into sc-dev am: 3186a0f24c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14048497

Change-Id: I01f9defbf0476465743e2db691958def15a06258
2021-05-04 04:13:15 +00:00
lucaslin
6bc595ff73 Add sepolicy for tcpdump_logger to access wlan_logs folder am: 4099f60681
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410096

Change-Id: I5f29c548309fcc697f1432047a48150f5d991e88
2021-05-04 04:13:15 +00:00
TreeHugger Robot
b25b9295a0 Merge changes from topic "tcpdump_logger" into sc-dev am: 3186a0f24c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14048497

Change-Id: I3114c2224f7dc2a19d717ff930821677a09af154
2021-05-04 04:13:14 +00:00
Daniel Mentz
1473b1d155 Merge "Revert "remove wildcard on kernel modules"" into sc-dev 2021-05-04 03:50:16 +00:00
TreeHugger Robot
3186a0f24c Merge changes from topic "tcpdump_logger" into sc-dev
* changes:
  Add sepolicy for dumpstate to access logs of tcpdump_logger
  Add sepolicy for tcpdump_logger to access wlan_logs folder
2021-05-04 03:48:04 +00:00
Jenny Ho
9d53cfccb8 Merge "set sepolicy for testing_battery_profile" into sc-dev am: 93e25c878a am: e6334ffd7c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14409676

Change-Id: I986a7bfabe592c60ef82aa01a87e30b8b210147d
2021-05-04 03:27:20 +00:00
Jenny Ho
e6334ffd7c Merge "set sepolicy for testing_battery_profile" into sc-dev am: 93e25c878a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14409676

Change-Id: Id42c10ec5258075cea310766db6e72c75e602820
2021-05-04 03:06:09 +00:00
Jenny Ho
2a12ff4f99 Merge "set sepolicy for testing_battery_profile" into sc-dev am: 93e25c878a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14409676

Change-Id: I7ccde0258cf80237683685e3263dc99d641d1624
2021-05-04 03:04:00 +00:00
Jenny Ho
7fa843a6c5 Merge "set sepolicy for testing_battery_profile" into sc-dev am: 93e25c878a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14409676

Change-Id: Ie708a143b6ceee8a648f2206d880b6c4f04055ba
2021-05-04 03:03:56 +00:00
Jenny Ho
93e25c878a Merge "set sepolicy for testing_battery_profile" into sc-dev 2021-05-04 02:48:41 +00:00
lucaslin
34278f05a0 Add sepolicy for dumpstate to access logs of tcpdump_logger
Bug: 183467815
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: I178aca40d94602994eef619f05a26ceb78eeff1f
2021-05-04 10:30:22 +08:00
Ted Lin
69c8212a41 wlc fwupdate implementation
Fix sepolicy problems.

Bug: 183465596
Test: logcat/dmesg grep wlc.
Signed-off-by: Ted Lin <tedlin@google.com>
Change-Id: I834f4d83f822b8189a576ac198bae9a7d77a3e10
2021-05-04 02:09:32 +00:00
Daniel Mentz
2fb432f08c Remove /vendor/lib/modules from file_contexts
Vendor kernel modules were moved to /vendor_dlkm/lib/modules. Let's
remove the old directory /vendor/lib/modules from file_contexts.

Bug: 185184472
Bug: 186777291
Change-Id: I38f1b25cb2d73a804f1cdb113edc9b11f8e516f7
2021-05-03 18:16:05 -07:00
Chris Kuiper
db03875ebe sepolicy: gs101: allow usf_reg_edit to run
Provide necessary permissions to run usf_reg_edit from bugreport.

Bug: 187081112
Test: Run "adb bugreport <zip>" and verify it contains the output
      from "usf_reg_edit save -".
Change-Id: Iade132d93105d461d51273d19fe570d48cce46fe
2021-05-03 16:34:58 -07:00
Daniel Mentz
a3c0b2ba9e Revert "remove wildcard on kernel modules"
This reverts commit a346a7fa34.

Let's move back to wildcards for kernel modules. This better supports
kernel pre-submit testing and local kernel development where the script
build.sh from the kernel repo is used to create the vendor_dlkm parition
image.  With build.sh, the path to a .ko file includes the kernel
version as well as additional directory components like "extra/" that
describe where in the kernel source key the module is located. Example:

/vendor_dlkm/lib/modules/5.10.33-g2f01cf4c7282-dirty/extra/ftm5.ko

Bug: 185184472
Bug: 186777291
Change-Id: I32f85dae7ca60d9063ad6c63f21ffdaecbb66039
2021-05-03 15:38:56 -07:00
SHUCHI LILU
5b2e7de887 Merge "Update avc error on ROM 7330059" into sc-dev am: 1d6ffc2305 am: 1ed37f06e9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14408671

Change-Id: Ia52856c1c9267e6d786e5c9a0989f2ab39ec8b92
2021-05-03 10:16:08 +00:00
SHUCHI LILU
1ed37f06e9 Merge "Update avc error on ROM 7330059" into sc-dev am: 1d6ffc2305
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14408671

Change-Id: I80d6669d7fc3c072d41469754fa4ba238925948e
2021-05-03 09:51:00 +00:00
SHUCHI LILU
132080ab36 Merge "Update avc error on ROM 7330059" into sc-dev am: 1d6ffc2305
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14408671

Change-Id: I2b04adff85753f838bff832b98f02b3953213381
2021-05-03 09:49:01 +00:00
SHUCHI LILU
626843c9fb Merge "Update avc error on ROM 7330059" into sc-dev am: 1d6ffc2305
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14408671

Change-Id: I0514008ad4d4f75f2dcf8ca368b98a8f63301fed
2021-05-03 09:49:01 +00:00
SHUCHI LILU
1d6ffc2305 Merge "Update avc error on ROM 7330059" into sc-dev 2021-05-03 09:34:35 +00:00
TreeHugger Robot
08ac0f06bf Merge "update error on ROM 7331131" into sc-dev am: 4ae391d780 am: 76c9592ec4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14409678

Change-Id: I6c11c29d94742623a82a9ae31ebf9f3dc1beb4ca
2021-05-03 09:32:58 +00:00
TreeHugger Robot
76c9592ec4 Merge "update error on ROM 7331131" into sc-dev am: 4ae391d780
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14409678

Change-Id: I352882dc64ceff300d4a69cc3cf1b9f77bdd7c84
2021-05-03 09:11:39 +00:00
TreeHugger Robot
6c360ca9d9 Merge "update error on ROM 7331131" into sc-dev am: 4ae391d780
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14409678

Change-Id: I591d93f1304a950257ff5feec2aae9009375f636
2021-05-03 09:08:13 +00:00
TreeHugger Robot
332870ab49 Merge "update error on ROM 7331131" into sc-dev am: 4ae391d780
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14409678

Change-Id: I90edfa36d389d23e5fc918fe41272776d4a93cc1
2021-05-03 09:07:54 +00:00
TreeHugger Robot
4ae391d780 Merge "update error on ROM 7331131" into sc-dev 2021-05-03 08:56:20 +00:00
lucaslin
4099f60681 Add sepolicy for tcpdump_logger to access wlan_logs folder
tcpdump cannot be zipped into wlan logs when using tcpdump_logger
on-demand function is because tcpdump_logger doesn't have access
of wlan_logs folder.
Add related sepolicies to fix it.

Bug: 183467815
Test: 1. Set logger to wlan
      2. Enable tcpdump_logger on-demand
      3. Start logging
      4. Stop logging
      5. Pull wlan_logs
      6. Check if tcpdump.pcap is zipped into the zip file
Change-Id: Ib1b6c8cbd4512acdbe756d11bfe6f540e16c8db6
2021-05-03 16:29:18 +08:00
TreeHugger Robot
80114dd11e Merge "Add sepolicy for sensor HAL accessing AOC sysfs node." into sc-dev am: 2391c852bd am: d51f97bd33
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14327406

Change-Id: I949da0c0d85b9f818dc79a44467169237eaaa1ba
2021-05-03 08:10:49 +00:00
TreeHugger Robot
d51f97bd33 Merge "Add sepolicy for sensor HAL accessing AOC sysfs node." into sc-dev am: 2391c852bd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14327406

Change-Id: I5757a039510386f588b934debeb279312f3f3f8d
2021-05-03 07:57:01 +00:00
TreeHugger Robot
7b44964c60 Merge "Add sepolicy for sensor HAL accessing AOC sysfs node." into sc-dev am: 2391c852bd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14327406

Change-Id: I51ac93ab8dd7edf5b07c302a5fb4f3b38a16fc9c
2021-05-03 07:55:07 +00:00
TreeHugger Robot
702902ab26 Merge "Add sepolicy for sensor HAL accessing AOC sysfs node." into sc-dev am: 2391c852bd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14327406

Change-Id: Ia92e0fae422be44e87903e5ca47601b5361965e6
2021-05-03 07:52:22 +00:00
Adam Shih
722b181dd3 update error on ROM 7331131
Bug: 187016929
Bug: 187016930
Bug: 187016910
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I294a27fd272f73cc371a4a8dc9783ba5f60203ff
2021-05-03 15:48:46 +08:00
Jenny Ho
4510c55091 set sepolicy for testing_battery_profile
need run /vendor/bin/sh before setprop

Bug: 180511460
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: I3dbaa984407c82662dea537da671745851035fa2
2021-05-03 15:47:14 +08:00
TreeHugger Robot
2391c852bd Merge "Add sepolicy for sensor HAL accessing AOC sysfs node." into sc-dev 2021-05-03 07:42:00 +00:00
sukiliu
58238158ab Update avc error on ROM 7330059
Bug: 187014717
Bug: 187015705
Bug: 187015816
Test: PtsSELinuxTestCases
Change-Id: I2d79fee24d18865090cd350485daea4e66bb5184
2021-05-03 15:25:20 +08:00
Eddie Lan
4099526a9b Merge "Add sepolicy for fpc AIDL HAL" into sc-dev am: 2d4071ca8c am: 94500a15a8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14282485

Change-Id: Ie278a85d9ab89a3773bb0f9488bd61d977e4c1d7
2021-05-03 04:33:12 +00:00
Eddie Lan
94500a15a8 Merge "Add sepolicy for fpc AIDL HAL" into sc-dev am: 2d4071ca8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14282485

Change-Id: I6803cbc12ccf7eb331ceb98eeae12a23e7d0b77d
2021-05-03 04:06:44 +00:00
Eddie Lan
0727a341dd Merge "Add sepolicy for fpc AIDL HAL" into sc-dev am: 2d4071ca8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14282485

Change-Id: I05395504ff6d04b5a7fa0707084872525fcec39c
2021-05-03 04:02:39 +00:00
Eddie Lan
cc4e6fa558 Merge "Add sepolicy for fpc AIDL HAL" into sc-dev am: 2d4071ca8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14282485

Change-Id: Ic89331057d89747796ed29741091a0d79d9e6fd3
2021-05-03 04:02:34 +00:00
TreeHugger Robot
55abb63383 Merge "Provide fastbootd permissions to invoke the set_active command" into sc-dev am: 1256869c5c am: e72dd4fc97
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14391698

Change-Id: I9f4587cdb1a6597ce86ff203a7418dc9cd1fa0eb
2021-05-03 03:50:10 +00:00
Eddie Lan
2d4071ca8c Merge "Add sepolicy for fpc AIDL HAL" into sc-dev 2021-05-03 03:48:40 +00:00
TreeHugger Robot
e72dd4fc97 Merge "Provide fastbootd permissions to invoke the set_active command" into sc-dev am: 1256869c5c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14391698

Change-Id: I7c45dee73fa499b2188126ec642c64e6921a6999
2021-05-03 03:36:00 +00:00
TreeHugger Robot
fdbbf28fa0 Merge "Provide fastbootd permissions to invoke the set_active command" into sc-dev am: 1256869c5c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14391698

Change-Id: I496ba2c956296cc09ef3115fafe5d6c1af589b5e
2021-05-03 03:31:35 +00:00
TreeHugger Robot
d9ca54da9b Merge "Provide fastbootd permissions to invoke the set_active command" into sc-dev am: 1256869c5c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14391698

Change-Id: Ied6ebf69ba45c5a50a9ba35703b1cee14c31fa05
2021-05-03 03:31:31 +00:00
TreeHugger Robot
1256869c5c Merge "Provide fastbootd permissions to invoke the set_active command" into sc-dev 2021-05-03 03:19:23 +00:00
Hridya Valsaraju
1711a2d5c7 Provide fastbootd permissions to invoke the set_active command
These permissions fix the following denials:
[   66.641731][   T59] audit: type=1400 audit(1619815760.952:17): avc:
denied  { open } for  pid=360 comm="fastbootd" path="/dev/block/sdd1"
dev="tmpfs" ino=416 scontext=u:r:fastbootd:s0
tcontext=u:object_r:devinfo_block_device:s0 tclass=blk_file permissive=1
[   66.664509][   T59] audit: type=1400 audit(1619815760.952:18): avc:
denied  { write } for  pid=360 comm="fastbootd" name="sdd1" dev="tmpfs"
ino=416 scontext=u:r:fastbootd:s0
tcontext=u:object_r:devinfo_block_device:s0 tclass=blk_file permissive=1
[   66.686431][   T59] audit: type=1400 audit(1619815760.952:19): avc:
denied  { read write } for  pid=360 comm="fastbootd"
name="boot_lun_enabled" dev="sysfs" ino=57569 scontext=u:r:fastbootd:s0
tcontext=u:object_r:sysfs_ota:s0 tclass=file permissive=1
[   66.708623][   T59] audit: type=1400 audit(1619815760.952:20): avc:
denied  { open } for  pid=360 comm="fastbootd"
path="/sys/devices/platform/14700000.ufs/pixel/boot_lun_enabled"
dev="sysfs" ino=57569 scontext=u:r:fastbootd:s0
tcontext=u:object_r:sysfs_ota:s0 tclass=file permissive=1
[   56.680861][   T59] audit: type=1400 audit(1619806507.020:10): avc:
denied  { read write } for  pid=357 comm="fastbootd" name="sda"
dev="tmpfs" ino=476 scontext=u:r:fastbootd:s0
tcontext=u:object_r:sda_block_device:s0 tclass=blk_file permissive=0

Test: fastboot set_active
Bug: 185955438
Change-Id: I9339b2a5f2a00c9e1768f479fdeac2e1f27f04bc
2021-04-30 14:37:58 -07:00
TreeHugger Robot
8114fd6b37 Merge "Remove platform certification from imsservice" into sc-dev am: 6a5cfd86f5 am: 0adcb526f5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14343989

Change-Id: I06e4f93716fda0ac8b84009ed3308ad7c73a5eaf
2021-04-30 17:15:25 +00:00
TreeHugger Robot
2ab009f72e Merge "Update gs101 sepolicy for contexthub HAL" into sc-dev am: ff7948fc48 am: 5c14296690
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14354723

Change-Id: Ia3db2de242cd75c840f8cf2fa1283e683f9bccd6
2021-04-30 17:15:16 +00:00
TreeHugger Robot
0d8edba50f Merge "Remove platform certification from imsservice" into sc-dev am: 6a5cfd86f5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14343989

Change-Id: Ib5bd0d2f54aa7d4133bdfe5ab2ffaf16936716f4
2021-04-30 17:14:29 +00:00
TreeHugger Robot
b33a1a4042 Merge "Remove platform certification from imsservice" into sc-dev am: 6a5cfd86f5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14343989

Change-Id: I846fdc99e252a3af2f9307e4e988f16d5eaa4b4c
2021-04-30 17:12:29 +00:00
TreeHugger Robot
0adcb526f5 Merge "Remove platform certification from imsservice" into sc-dev am: 6a5cfd86f5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14343989

Change-Id: I6c66e6103c284a46e57efb5760226139e8e2a965
2021-04-30 17:01:41 +00:00
TreeHugger Robot
6a5cfd86f5 Merge "Remove platform certification from imsservice" into sc-dev 2021-04-30 16:55:56 +00:00
TreeHugger Robot
5c14296690 Merge "Update gs101 sepolicy for contexthub HAL" into sc-dev am: ff7948fc48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14354723

Change-Id: Ibba6e73ddecc5a7984dc59900f256ad9a1ff114f
2021-04-30 16:54:08 +00:00
TreeHugger Robot
2d1988d06d Merge "Update gs101 sepolicy for contexthub HAL" into sc-dev am: ff7948fc48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14354723

Change-Id: I5d18bfc7ec389676856b19c0d78b88bafb185f85
2021-04-30 16:52:14 +00:00
TreeHugger Robot
81e7e0d374 Merge "Update gs101 sepolicy for contexthub HAL" into sc-dev am: ff7948fc48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14354723

Change-Id: I2c1056d41a703ebc09ae20ee5b196da88ae3a34a
2021-04-30 16:49:38 +00:00
TreeHugger Robot
ff7948fc48 Merge "Update gs101 sepolicy for contexthub HAL" into sc-dev 2021-04-30 16:34:37 +00:00
TreeHugger Robot
b93162946f Merge "sepolicy:gs101: allow init-insmod-sh to access sysfs_leds nodes" into sc-dev am: c134ed985a am: 521d0635f1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14357213

Change-Id: Ie9b502d89ed42909718e2672b9c6a9698778f6df
2021-04-29 23:44:10 +00:00
TreeHugger Robot
521d0635f1 Merge "sepolicy:gs101: allow init-insmod-sh to access sysfs_leds nodes" into sc-dev am: c134ed985a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14357213

Change-Id: Idd9f94fa544f5a2248cc68f8bb93e1bd155fb8f0
2021-04-29 23:14:57 +00:00
TreeHugger Robot
56305a9427 Merge "sepolicy:gs101: allow init-insmod-sh to access sysfs_leds nodes" into sc-dev am: c134ed985a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14357213

Change-Id: I3baf533b80ea3e44e0e8e4ee91a8c985bec93a58
2021-04-29 23:07:38 +00:00
TreeHugger Robot
61f2e4ad4a Merge "sepolicy:gs101: allow init-insmod-sh to access sysfs_leds nodes" into sc-dev am: c134ed985a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14357213

Change-Id: Ie77154a8220419986654f288ece820c1edc56606
2021-04-29 23:07:37 +00:00
TreeHugger Robot
c134ed985a Merge "sepolicy:gs101: allow init-insmod-sh to access sysfs_leds nodes" into sc-dev 2021-04-29 22:48:22 +00:00
TreeHugger Robot
5757ee6b22 Merge "change persist.camera to persit.vendor.camera" into sc-dev am: 2c4b0fd96a am: 52ba04007b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14356785

Change-Id: I3f4322bae0bf65813cc63d2cf3e664f6d2ffc582
2021-04-29 22:14:24 +00:00
TreeHugger Robot
82f13cbf48 Merge "change persist.camera to persit.vendor.camera" into sc-dev am: 2c4b0fd96a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14356785

Change-Id: Id34f09b33da5cc62d6958fe3fad3952b5cd319a7
2021-04-29 21:46:21 +00:00
TreeHugger Robot
52ba04007b Merge "change persist.camera to persit.vendor.camera" into sc-dev am: 2c4b0fd96a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14356785

Change-Id: Idb7fed4b35a5342936aa4247c79a20077ca82083
2021-04-29 21:44:32 +00:00
TreeHugger Robot
43c5bf6ed6 Merge "change persist.camera to persit.vendor.camera" into sc-dev am: 2c4b0fd96a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14356785

Change-Id: I8ece2241cea3bf27a1fa7294b29703f56030f27f
2021-04-29 21:42:50 +00:00
Oleg Matcovschi
963848fdaa sepolicy:gs101: allow init-insmod-sh to access sysfs_leds nodes
Bug: 186788772
Signed-off-by: Oleg Matcovschi <omatcovschi@google.com>
Change-Id: I9cc44571eb5c8f52d6307bff9cb77f08712c5404
2021-04-29 14:34:55 -07:00
TreeHugger Robot
2c4b0fd96a Merge "change persist.camera to persit.vendor.camera" into sc-dev 2021-04-29 21:26:12 +00:00
Lida Wang
bb7ae85a0d change persist.camera to persit.vendor.camera
Bug: 186670529
Change-Id: I3a6d4202ec2b90cc0ce9cc9ba62d2cf2ce3a5c29
2021-04-29 13:18:01 -07:00
Anthony Stange
836f25d64b Update gs101 sepolicy for contexthub HAL
Bug: 168941570
Test: Load nanoapp via HAL
Change-Id: If133a3290e4fc02677523d737980ee5944885c36
2021-04-29 16:59:36 +00:00
TreeHugger Robot
25566f87c3 Merge "Add sepolicy for sensor HAL to read lhbm" into sc-dev am: 7a4cd3a6e0 am: 18525b89e6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299201

Change-Id: Icac3459a27db13bec70cfbeeca2198a29e85aec1
2021-04-29 16:58:00 +00:00
TreeHugger Robot
18525b89e6 Merge "Add sepolicy for sensor HAL to read lhbm" into sc-dev am: 7a4cd3a6e0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299201

Change-Id: Ib1331ad73723ea5518f0e80d0a52f64d008255a8
2021-04-29 16:33:03 +00:00
TreeHugger Robot
0071fe0bc0 Merge "Add sepolicy for sensor HAL to read lhbm" into sc-dev am: 7a4cd3a6e0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299201

Change-Id: I9bb9d0d61ba1cf7525c0231e5177318501c5d0ae
2021-04-29 16:31:59 +00:00
TreeHugger Robot
04b1f2cdec Merge "Add sepolicy for sensor HAL to read lhbm" into sc-dev am: 7a4cd3a6e0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299201

Change-Id: I92d60c2f1f068b48df1b10ff852858b560127dfe
2021-04-29 16:31:33 +00:00
TreeHugger Robot
7a4cd3a6e0 Merge "Add sepolicy for sensor HAL to read lhbm" into sc-dev 2021-04-29 15:48:15 +00:00
Taesoon Park
b6f2b0bad9 Remove platform certification from imsservice
The platform certification is removed form com.shannon.imsservice.
So, remove seinfo from com.shannon.imsservice item.

Bug: 186135657
Test: VoLTE and VoWiFi

Signed-off-by: Taesoon Park <ts89.park@samsung.com>
Change-Id: Ie493abfd7a146766ad819bb7a5240d9f1e2f1d0e
2021-04-29 11:28:08 +08:00
Chia-Ching Yu
3f91d6417a Add sepolicy for sensor HAL to read lhbm
04-23 08:54:18.000   742   742 I /vendor/bin/hw/android.hardware.sensors@2.0-service.multihal: type=1400 audit(0.0:23): avc: denied { read } for comm=504F5349582074696D6572203430 name="local_hbm_mode" dev="sysfs" ino=70515 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_lhbm:s0 tclass=file permissive=1

Bug: 181617640
Test: Forrest build with this patch(ab/P22167685).
      No local_hbm_mode related avc deined log.
Change-Id: Ibac3317cbca8652885310b1f5af8f4ea4d44a5c4
2021-04-29 03:00:19 +00:00
TreeHugger Robot
cbce7f27e3 Merge "Fix android.hardware.drm@1.4-service.clearkey label" into sc-dev am: 7ecd67743c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14340676

Change-Id: I161a70490c9e985c731c4880cce9b0aeda19276f
2021-04-28 23:12:22 +00:00
TreeHugger Robot
c17392b08c Merge "Fix android.hardware.drm@1.4-service.clearkey label" into sc-dev am: 7ecd67743c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14340676

Change-Id: I968ae5379dbe36e54eb931712083f969ead85522
2021-04-28 23:10:56 +00:00
TreeHugger Robot
7ecd67743c Merge "Fix android.hardware.drm@1.4-service.clearkey label" into sc-dev 2021-04-28 22:26:38 +00:00
Victor Liu
2d6895ee81 Merge "uwb: allow uwb service to access nfc service" into sc-dev am: 247097a000
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14281933

Change-Id: I25542ed6cc608427679b8b347d6e60aaad7d9014
2021-04-28 21:22:23 +00:00
Victor Liu
e8b972be35 Merge "uwb: allow uwb service to access nfc service" into sc-dev am: 247097a000
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14281933

Change-Id: Ie088c98ae196ebc9982808b0140494c30618eb03
2021-04-28 21:19:21 +00:00
Victor Liu
247097a000 Merge "uwb: allow uwb service to access nfc service" into sc-dev 2021-04-28 20:49:50 +00:00
Chris Fries
2d2adb3e56 Fix android.hardware.drm@1.4-service.clearkey label
Bug: 186617617
Change-Id: Icad8008686ef57d4b6c3fca27af41e2b2991f74f
2021-04-28 14:40:02 -05:00
Roger Fang
abd2189b79 sepolicy: gs101: allows pixelstat to access audio metrics nodes am: 66634d4d20
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14255523

Change-Id: If94b15e8cee4d025b5959ec3f160306b29528f4e
2021-04-28 08:55:58 +00:00
Roger Fang
5ef9766dc6 sepolicy: gs101: allows pixelstat to access audio metrics nodes am: 66634d4d20
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14255523

Change-Id: Ic367dfd6c1e4e43a43dd4327337faa4ca124685b
2021-04-28 08:54:23 +00:00
Roger Fang
66634d4d20 sepolicy: gs101: allows pixelstat to access audio metrics nodes
audio.service: type=1400 audit(0.0:30): avc: denied { read write } for name="amcs" dev="tmpfs" ino=739 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:amcs_device:s0 tclass=chr_file permissive=0

pixelstats-vend: type=1400 audit(0.0:9): avc: denied { read } for name="speaker_impedance" dev="sysfs" ino=67611 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

HwBinder:696_2: type=1400 audit(0.0:8): avc: denied { open } for path="/dev/amcs" dev="tmpfs" ino=766 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:amcs_device:s0 tclass=chr_file permissive=0

Bug: 171854614
Test: manually test, no avc: denied.
Change-Id: I82ebd22f167200ab3cf59e6525ef43c0be8f722a
2021-04-28 10:52:06 +08:00
TreeHugger Robot
6f8aeeb560 Merge "Add sepolicy for wlan logger and sniffer logger" into sc-dev am: d60ae7dfed
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299186

Change-Id: I510b39ee867096b5561ce81520281ae5d26732da
2021-04-28 02:23:56 +00:00
TreeHugger Robot
0df634be79 Merge "Add sepolicy for wlan logger and sniffer logger" into sc-dev am: d60ae7dfed
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299186

Change-Id: Ifbb5f94a5658a0a61b2d16411752f7975ae63ef1
2021-04-28 02:23:38 +00:00
TreeHugger Robot
c55550bfe5 Merge "Grant powerhal access to sysfs_devfreq_dir" into sc-dev am: 68bbf709c2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14329748

Change-Id: I05a052c176bab7ede521050ea1ffb2860cf010fd
2021-04-28 02:23:23 +00:00
TreeHugger Robot
7cef5be775 Merge "Grant powerhal access to sysfs_devfreq_dir" into sc-dev am: 68bbf709c2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14329748

Change-Id: I195b2997f64f968f79306241a94b57c4d68b1b84
2021-04-28 02:21:53 +00:00
TreeHugger Robot
d60ae7dfed Merge "Add sepolicy for wlan logger and sniffer logger" into sc-dev 2021-04-28 02:12:26 +00:00
TreeHugger Robot
68bbf709c2 Merge "Grant powerhal access to sysfs_devfreq_dir" into sc-dev 2021-04-28 02:03:58 +00:00
Jia-yi Chen
09d5fc647d Grant powerhal access to sysfs_devfreq_dir
Bug: 186576303
Test: Boot & check logcat
Change-Id: Ia07991c3a8a7dfd8388a228fbdec1f28d2f5b4c3
2021-04-27 16:16:02 -07:00
chiayupei
3fefc8a57b Add sepolicy for sensor HAL accessing AOC sysfs node.
Bug: 177943509
Test: make selinux_policy -j128 and push to device.
      No hal_sensors_default related avc deined log while suez polling.

Signed-off-by: chiayupei <chiayupei@google.com>
Change-Id: Ie32eaccf551fcb9f2d7bc763c801891f637ccc1a
2021-04-28 03:50:26 +08:00
chenpaul
920b0e11a9 Add sepolicy for wlan logger and sniffer logger
Bug: 186069127
Test: Sniffer logger can be start by Pixel Logger app
      wlan logger is workable.
Change-Id: I1e7a75a08de37668316b06e066c080e837d7896b
2021-04-27 19:37:28 +08:00
TreeHugger Robot
9218a52b63 Merge "update wakeup node" into sc-dev am: 27c30c1cc6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14319145

Change-Id: I2f9ef19575a7ec777cfe50505d59aefef20876dd
2021-04-27 10:14:17 +00:00
TreeHugger Robot
5c94d31dc9 Merge "update wakeup node" into sc-dev am: 27c30c1cc6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14319145

Change-Id: Ife4d984e68a5f6b29cd28d6c0a07c0f57e5d0205
2021-04-27 10:13:09 +00:00
TreeHugger Robot
27c30c1cc6 Merge "update wakeup node" into sc-dev 2021-04-27 08:47:38 +00:00
Adam Shih
72ca81757a update wakeup node
Bug: 186492032
Test: pts-tradefed run pts -m PtsSELinuxTest
-t com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot

Change-Id: I9bac40334001d4073dae1846a2cd0310d59ebfe7
2021-04-27 15:30:55 +08:00
Adam Shih
53a9f71190 Merge "move vendor_executes_system_violators to userdebug" into sc-dev am: ab9437c069
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299203

Change-Id: I8a407dfe4bc3d2c03f8e66c689c12c162a87026e
2021-04-27 01:36:11 +00:00
Adam Shih
019616a985 Merge "move vendor_executes_system_violators to userdebug" into sc-dev am: ab9437c069
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299203

Change-Id: I4f5007f307793b58e07d6a8e1055858aeb5eed5e
2021-04-27 01:30:05 +00:00
Adam Shih
ab9437c069 Merge "move vendor_executes_system_violators to userdebug" into sc-dev 2021-04-27 01:01:21 +00:00
TreeHugger Robot
0d57b91246 Merge "logger_app: Grant access to control usb debug port" into sc-dev am: 6f18d69b86
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14308745

Change-Id: I8a0df127bdc0e445eed402da8da96319ca67d0e5
2021-04-26 19:01:56 +00:00
TreeHugger Robot
3dbe7f02c2 Merge "logger_app: Grant access to control usb debug port" into sc-dev am: 6f18d69b86
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14308745

Change-Id: Ief16ac8bc40f65f04ca9cea9ec9fc1822901b18c
2021-04-26 19:00:20 +00:00
TreeHugger Robot
6f18d69b86 Merge "logger_app: Grant access to control usb debug port" into sc-dev 2021-04-26 18:19:35 +00:00
TreeHugger Robot
49311401b7 Merge "usb: Add sepolicy for extcon access" into sc-dev am: a18b6c2e99
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14182157

Change-Id: Ibf319b50694f0fca4a18f042e5fdff45197e3b14
2021-04-26 10:27:23 +00:00
TreeHugger Robot
8036588f9d Merge "usb: Add sepolicy for extcon access" into sc-dev am: a18b6c2e99
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14182157

Change-Id: I75002cf2eaab353efb1ceb4eaf77cd83b9370dd7
2021-04-26 10:25:33 +00:00
TreeHugger Robot
a18b6c2e99 Merge "usb: Add sepolicy for extcon access" into sc-dev 2021-04-26 10:00:15 +00:00
David Massoud
fb32b81473 Add gs101 specific sysfs_devfreq_cur entries am: e03291c6af
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14187061

Change-Id: I4bad92f54492dbbb727eb286f060093ede407316
2021-04-26 05:28:13 +00:00
David Massoud
1d03a77dd2 Add gs101 specific sysfs_devfreq_cur entries am: e03291c6af
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14187061

Change-Id: I84e32ee0fec61b99658b9e283a5a6bf3155dbcb1
2021-04-26 05:26:22 +00:00
Nicole Lee
b3dfc87e03 logger_app: Grant access to control usb debug port
avc: denied { read } for comm="oid.pixellogger" name="u:object_r:vendor_usb_config_prop:s0" dev="tmpfs" ino=325 scontext=u:r:logger_app:s0:c22,c257,c512,c768 tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=file permissive=1 app=com.android.pixellogger
avc: denied { open } for comm="oid.pixellogger" path="/dev/__properties__/u:object_r:vendor_usb_config_prop:s0" dev="tmpfs" ino=325 scontext=u:r:logger_app:s0:c22,c257,c512,c768 tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=file permissive=1 app=com.android.pixellogger
avc: denied { set } for property=vendor.usb.config pid=8892 uid=10278 gid=10278 scontext=u:r:logger_app:s0:c22,c257,c512,c768 tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=property_service permissive=1

Bug: 186365435
Change-Id: Ie7aef49eee1dd66a6ca6ca9a1a4f8d31cc793551
2021-04-26 11:50:51 +08:00
David Massoud
e03291c6af Add gs101 specific sysfs_devfreq_cur entries
Device specific implementation for go/oag/1676945

Bug: 181850306
Test: See go/oag/1676945
Change-Id: I8a973f400c89ada880edb5566ec31fc6ee7b97c1
2021-04-26 00:56:42 +00:00
Adam Shih
22f18adb26 move vendor_executes_system_violators to userdebug
Bug: 186189967
Test: com.google.android.security.gts.SELinuxHostTest#testNoExemptionsForVendorExecutingCore
Change-Id: I277cec72377b647c9af40e32b5582e30e9e3730e
2021-04-26 08:41:02 +08:00
TreeHugger Robot
021e9288fd Merge "allow RilConfigService to call oemrilhook api" into sc-dev am: 707d297dd8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14232872

Change-Id: I4f9632117898e6161e45f638a517c608a2f652bd
2021-04-23 18:06:33 +00:00
TreeHugger Robot
9ad9197a2a Merge "allow RilConfigService to call oemrilhook api" into sc-dev am: 707d297dd8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14232872

Change-Id: Ib1614e1d5e69520186828521821070738e035be6
2021-04-23 18:04:35 +00:00
TreeHugger Robot
707d297dd8 Merge "allow RilConfigService to call oemrilhook api" into sc-dev 2021-04-23 17:48:32 +00:00
TreeHugger Robot
f1af2d0f15 Merge "Mark GS101 camera HAL as using Binder." into sc-dev am: 16730f3087
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14285352

Change-Id: I9c8c5a7fe388caf3cf01702df3445e7d7468ed1c
2021-04-23 01:19:27 +00:00
TreeHugger Robot
c56a543145 Merge "Mark GS101 camera HAL as using Binder." into sc-dev am: 16730f3087
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14285352

Change-Id: Ib4d077f259a95fbcdedbd55ad39a91039d702e11
2021-04-23 01:17:47 +00:00
TreeHugger Robot
16730f3087 Merge "Mark GS101 camera HAL as using Binder." into sc-dev 2021-04-23 00:52:20 +00:00
TreeHugger Robot
3cb81978f7 Merge "Allow access to NFC power stats" into sc-dev am: 0f87f26134
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14268788

Change-Id: I1a1ef7a01f7859ff8e945498315c683951114424
2021-04-23 00:01:48 +00:00
TreeHugger Robot
81385411d7 Merge "Allow access to NFC power stats" into sc-dev am: 0f87f26134
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14268788

Change-Id: Iaa3c444692b7d7ba39c7f57e7830ff110ba82657
2021-04-22 23:59:39 +00:00
TreeHugger Robot
0f87f26134 Merge "Allow access to NFC power stats" into sc-dev 2021-04-22 23:38:44 +00:00
TreeHugger Robot
3b2fb2e196 Merge "gs101-sepolicy: Allow platform_app to call uwb" into sc-dev am: 9573fc21a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14133747

Change-Id: I8d59dd14289027636f1fb6eded5c774766b0eebb
2021-04-22 22:42:13 +00:00
TreeHugger Robot
ccace2f90f Merge "gs101-sepolicy: Allow platform_app to call uwb" into sc-dev am: 9573fc21a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14133747

Change-Id: Ia285a61d54b3467eb56b0ae0964c1042d38f5ae2
2021-04-22 22:39:04 +00:00
TreeHugger Robot
9573fc21a0 Merge "gs101-sepolicy: Allow platform_app to call uwb" into sc-dev 2021-04-22 22:12:28 +00:00
Krzysztof Kosiński
de973d797a Mark GS101 camera HAL as using Binder.
The service implements a public API, so it will communicate over
Binder in both the framework domain and the vendor domain.

Bug: 186067463
Test: boot on oriole & check logs
Change-Id: If5bee474f79b7d14f65351580544c0dcb701d604
2021-04-22 13:50:42 -07:00
Victor Liu
4605f4b82c uwb: allow uwb service to access nfc service
04-22 00:47:16.771  9777  9777 V UwbService: Service: Getting Nfc
adapter 04-22 00:47:16.771   412   412 E SELinux : avc:  denied
{ find } for pid=9777 uid=1000 name=nfc scontext=u:r:uwb_vendor_app:
s0:c232,c259,c512,c768 tcontext=u:object_r:nfc_service:s0
tclass=service_manager permissive=1

Bug: 185389669
Test: on device, no avc: denied message
Change-Id: Ib31385d88a68878eaca5e53b4ddeddc5a6e7c87d
2021-04-22 08:51:21 -07:00
Michael Ayoubi
3abc895e64 Merge "gs101: Remove kernel.te after UWB fixes" into sc-dev am: 134a3882cc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14275478

Change-Id: I3be08d9692d8d5c9e28100efa700b5c1d1b25ce6
2021-04-22 15:35:43 +00:00
Michael Ayoubi
0f58cb9a66 Merge "gs101: Remove kernel.te after UWB fixes" into sc-dev am: 134a3882cc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14275478

Change-Id: I4bcdce350de5be018f303b87f839a9c9d3e1204e
2021-04-22 15:33:42 +00:00
Michael Ayoubi
134a3882cc Merge "gs101: Remove kernel.te after UWB fixes" into sc-dev 2021-04-22 15:11:23 +00:00
eddielan
09e529d78c Add sepolicy for fpc AIDL HAL
Bug: 185464439
Test: Build Pass
Change-Id: I7ac26b2bf50fdfc1d32fb88efc2bee07f0525b0c
2021-04-22 22:01:32 +08:00
sukiliu
009867dc37 Update avc error on ROM 7302474 am: 89e016d436
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14276161

Change-Id: Ia3568364f0f03f90e5b8b96d4316025e6358708b
2021-04-22 07:24:00 +00:00
sukiliu
0370eaf549 Update avc error on ROM 7302474 am: 89e016d436
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14276161

Change-Id: I77cf5bdbb398272ccc1064c26e661c44e9d73b95
2021-04-22 07:22:31 +00:00
Michael Ayoubi
d17f3bad0f gs101: Remove kernel.te after UWB fixes
tracking_denials/kernel.te is no longer needed after fixes from b/182954062.

Bug: 171943668
Test: Add dw3000 module back into build
      Compile and test image on Raven
      Confirm no avc denial logs are seen and that the dw3000 driver
      loads successfully.
Signed-off-by: Michael Ayoubi <mayoubi@google.com>
Change-Id: I9a8510ed3852c053319a3395871728048a57ecb5
2021-04-22 05:38:21 +00:00
sukiliu
89e016d436 Update avc error on ROM 7302474
avc: denied { call } for scontext=u:r:servicemanager:s0 tcontext=u:r:hal_camera_default:s0 tclass=binder permissive=0

Bug: 186067463
Test: PTS SELinuxTest
Change-Id: I2792875a195fa3ca75d6fa57537f81e7dbeb5bac
2021-04-22 11:21:10 +08:00
Benjamin Schwartz
5293925c65 Allow access to NFC power stats
Bug: 184722506
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Ie4b5a6823aacf5e5a84760b1d4872fbb4cc2826d
2021-04-21 11:30:55 -07:00
Wei Wang
239eb17582 Merge "thermal: add sepolicy rule to access ODPM sysfs" into sc-dev am: aa3d3a3adb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14182158

Change-Id: If3f0e8a183ef0dc5da3d20f0b35415c89862dcfd
2021-04-21 16:14:34 +00:00
Wei Wang
75fe88e1a7 Merge "thermal: add sepolicy rule to access ODPM sysfs" into sc-dev am: aa3d3a3adb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14182158

Change-Id: I896ddd5a9d1fb6c79f6c3509b6dd3bbd351ab89a
2021-04-21 16:12:15 +00:00
Wei Wang
aa3d3a3adb Merge "thermal: add sepolicy rule to access ODPM sysfs" into sc-dev 2021-04-21 15:44:40 +00:00
TreeHugger Robot
fb465ba7f5 Merge "fingerprint: fps hal can connect Stats service" into sc-dev am: 11871825f3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14211588

Change-Id: Id2a75c967637114d741fae404416cb7dbd17ce23
2021-04-21 10:04:14 +00:00
TreeHugger Robot
03669af095 Merge "fingerprint: fps hal can connect Stats service" into sc-dev am: 11871825f3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14211588

Change-Id: Id70bad75b004252631ed22a2b65eaea083b56fac
2021-04-21 10:02:07 +00:00
TreeHugger Robot
11871825f3 Merge "fingerprint: fps hal can connect Stats service" into sc-dev 2021-04-21 09:46:56 +00:00
eddielan
97b2c469fa fingerprint: fps hal can connect Stats service
04-16 23:23:42.746   402   402 E
SELinux : avc:  denied  { find } for pid=4314 uid=1000
name=android.frameworks.stats.IStats/default
scontext=u:r:hal_fingerprint_default:s0
tcontext=u:object_r:fwk_stats_service:s0
tclass=service_manager permissive=0

Bug: 183486186
Test: Build Pass
Change-Id: Ie685db6ffd27bb2ad7936f55b70c3e2e5189b0ed
2021-04-21 09:45:52 +00:00
Aaron Tsai
028bdd6369 Update tracking error for Silent Logging tool am: 90ead0f9cb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207370

Change-Id: I3d89c02fc66ec0f3acf700047734be9c835bc20c
2021-04-21 08:41:40 +00:00
Aaron Tsai
721ba4e6f2 Update tracking error for Silent Logging tool am: 90ead0f9cb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207370

Change-Id: I5ed8b83a65356d334f122c57e1939fb6e184ddc2
2021-04-21 08:39:25 +00:00
Aaron Tsai
90ead0f9cb Update tracking error for Silent Logging tool
04-06 20:16:59.772  1000  5754  5754 W RenderThread: type=1400 audit(0.0:17): avc: denied { write } for name="code_cache" dev="dm-7" ino=4477 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0
[   65.233590] type=1400 audit(1618796326.840:4): avc: denied { getattr } for comm="y.silentlogging" path="/data/user/0/com.samsung.slsi.telephony.silentlogging" dev="dm-11" ino=6338 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0
[   65.280798] type=1400 audit(1618796326.888:6): avc: denied { search } for comm="y.silentlogging" name="com.samsung.slsi.telephony.silentlogging" dev="dm-11" ino=6338 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0

04-06 21:07:23.576  7458  7458 I auditd  : type=1400 audit(0.0:64): avc: denied { create } for comm="RenderThread" name="com.android.skia.shaders_cache" scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0:c232,c259,c512,c768 tclass=file permissive=0
04-13 14:14:38.572  1000  8875  8875 I SharedPreferenc: type=1400 audit(0.0:524): avc: denied { read } for name="SHARED_PREF.xml" dev="dm-7" ino=16734 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0:c232,c259,c512,c768 tclass=file permissive=1
04-13 14:14:38.572  1000  8875  8875 I SharedPreferenc: type=1400 audit(0.0:525): avc: denied { read } for name="com.samsung.slsi.telephony.silentlogging_preferences.xml" dev="dm-7" ino=17227 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0:c232,c259,c512,c768 tclass=file permissive=1
04-13 14:14:38.572  1000  8875  8875 I SharedPreferenc: type=1400 audit(0.0:526): avc: denied { getattr } for path="/data/user/0/com.samsung.slsi.telephony.silentlogging/shared_prefs/com.samsung.slsi.telephony.silentlogging_preferences.xml" dev="dm-7" ino=17227 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0:c232,c259,c512,c768 tclass=file permissive=1
04-13 14:14:38.572  1000  8875  8875 I SharedPreferenc: type=1400 audit(0.0:527): avc: denied { getattr } for path="/data/user/0/com.samsung.slsi.telephony.silentlogging/shared_prefs/SHARED_PREF.xml" dev="dm-7" ino=16734 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0:c232,c259,c512,c768 tclass=file permissive=1

04-06 12:02:03.460  1000  9117  9117 W si.sysdebugmode: type=1400 audit(0.0:35): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=139 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0
04-06 12:02:03.465  1000  9117  9117 W libc    : Access denied finding property "persist.input.velocitytracker.strategy"

04-13 15:01:12.636  1000  8718  8718 W y.silentlogging: type=1400 audit(0.0:60): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=131 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0
04-13 15:01:12.638  1000  8718  8718 W libc    : Access denied finding property "ro.input.resampling"

04-13 15:01:12.724  1000  8718  8718 W y.silentlogging: type=1400 audit(0.0:61): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=131 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0
04-13 15:01:12.726  1000  8718  8718 W libc    : Access denied finding property "viewroot.profile_rendering"


Bug: 184921478
Test: manual
Change-Id: Ia842b3dcfd8ec2ad30acc065f9caceafdc0458cd
2021-04-21 06:59:01 +00:00
Yu-Chi Cheng
f63eb384e8 Merge "Allowed EdgeTPU service to generate Perfetto trace." into sc-dev am: e08f769244
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14170537

Change-Id: I2123e576556454c539af6bd3c181082e297ee4cc
2021-04-21 01:55:11 +00:00
Yu-Chi Cheng
0c21817ad1 Merge "Allowed EdgeTPU service to generate Perfetto trace." into sc-dev am: e08f769244
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14170537

Change-Id: I24b613658d31195eca9215bef2cc0638c778db0b
2021-04-21 01:55:11 +00:00
Yu-Chi Cheng
e08f769244 Merge "Allowed EdgeTPU service to generate Perfetto trace." into sc-dev 2021-04-21 01:15:33 +00:00
Yu-Chi Cheng
f5bb17ab49 Allowed EdgeTPU service to generate Perfetto trace.
Bug: 185238493
Test: tested on local Oriole
Change-Id: I2973ccedd05d5f6dd06c3044adeb983ffb4628aa
2021-04-20 12:08:42 -07:00
Wenhao Wang
2c1249a5e6 Merge "Fix selinux for RPMB daemon" into sc-dev am: a16b1668be
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14242046

Change-Id: I2ad8925163f530bcbb87acfca16b6fe915d80e7d
2021-04-20 17:56:21 +00:00
Wenhao Wang
dc7970d82a Merge "Fix selinux for RPMB daemon" into sc-dev am: a16b1668be
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14242046

Change-Id: I814c3fa64629e08a15552af192244e61e8895faf
2021-04-20 17:54:13 +00:00
Wenhao Wang
a16b1668be Merge "Fix selinux for RPMB daemon" into sc-dev 2021-04-20 17:20:50 +00:00
TreeHugger Robot
e8db72539b Merge "sepolicy: add cs40l26 haptics modules" into sc-dev am: 77725ac5f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14236565

Change-Id: If36da822957ff0a725f849a81df8b355f36fad12
2021-04-20 12:20:10 +00:00
TreeHugger Robot
cd0abec4c6 Merge "sepolicy: add cs40l26 haptics modules" into sc-dev am: 77725ac5f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14236565

Change-Id: I3f53c457c0057aef86e9c7bb24aacc92a5f60830
2021-04-20 12:18:21 +00:00
TreeHugger Robot
77725ac5f8 Merge "sepolicy: add cs40l26 haptics modules" into sc-dev 2021-04-20 11:49:51 +00:00
Tai Kuo
0e9abb4ef2 sepolicy: add cs40l26 haptics modules
Fix the following avc denial:
avc: denied { module_load } for comm="insmod" path="/vendor_dlkm/lib/modules/cl_dsp.ko" dev="overlay" ino=41 scontext=u:r:init-insmod-sh:s0 tcontext=u:object_r:vendor_file:s0 tclass=system permissive=1

Bug: 184610991
Test: Full built. Check if the avc denial was gone.
Signed-off-by: Tai Kuo <taikuo@google.com>
Change-Id: Ic41ea6a6add818bfdf95e71e20df77b9e06db6c1
2021-04-20 11:43:03 +00:00
TreeHugger Robot
9a2b85d7b7 Merge "remove obsolete entry" into sc-dev am: a0fbe1508d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14233638

Change-Id: Iacbbcc182c23ff8166eabeb3e9a6f6ac3e167b89
2021-04-20 08:03:00 +00:00
TreeHugger Robot
c5281c95d2 Merge "remove obsolete entry" into sc-dev am: a0fbe1508d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14233638

Change-Id: I0e8497caa9243d4831fb53ed1ed901c6d427fff2
2021-04-20 08:00:34 +00:00
TreeHugger Robot
a0fbe1508d Merge "remove obsolete entry" into sc-dev 2021-04-20 07:52:18 +00:00
Adam Shih
f8e2285581 suppress logs created by userdebug-only features am: a2f8a45c46
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14233635

Change-Id: If29bed5d475e1860cac8a114a86bef3418efb879
2021-04-20 07:50:52 +00:00
Adam Shih
39e65e661e suppress logs created by userdebug-only features am: a2f8a45c46
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14233635

Change-Id: I32e986dd5b9c01b5ed7adc8c3aabf06a81d56648
2021-04-20 07:48:53 +00:00
Adam Shih
93b498ea78 remove obsolete entry
Bug: 182531832
Test: do bugreport with no dumpstate related error
Change-Id: I3f19f82f37b11221f4816d958797336da23b14b4
2021-04-20 14:42:55 +08:00
Ted Wang
4233336296 Grant sepolicy for Bluetooth Ccc Timesync feature
Add sepolicy rules for Bluetooth Ccc Timessync

Bug: 175836015
Test: make
Change-Id: If2d3f953a5899cd5ea0695a57132dd69a2a29675
2021-04-20 06:32:49 +00:00
Adam Shih
a2f8a45c46 suppress logs created by userdebug-only features
Bug: 185439604
Test: cts-tradefed run commandAndExit cts -m CtsSecurityHostTestCases
Change-Id: I8d993154e8e6c3205e1e83c6b81d4d9064dc3171
2021-04-20 06:17:20 +00:00
Wenhao Wang
f5277482c1 Fix selinux for RPMB daemon
Secure persistent storage has been moved to persist root.
The corresponding pathes on SELinux policy has to be updated.

Bug: 173971240
Bug: 173032298
Test: Trusty storage tests
Change-Id: I0e7756f3b4d5c6be705a87e1d7d80247df1ec4bb
2021-04-20 13:01:23 +08:00
Wei Wang
0d9dfcc1f6 Merge "Grant Fabric node access for memory min frequency setting" into sc-dev am: 0ae24df58d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14242545

Change-Id: I5c962987a7801d10506f35488672fb48ac3833a3
2021-04-20 02:54:36 +00:00
Wei Wang
2eecd29f2f Merge "Grant Fabric node access for memory min frequency setting" into sc-dev am: 0ae24df58d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14242545

Change-Id: I47da08d8684a588094705204ac56c56334751e62
2021-04-20 02:53:43 +00:00
Wei Wang
0ae24df58d Merge "Grant Fabric node access for memory min frequency setting" into sc-dev 2021-04-20 02:14:18 +00:00
Taeju Park
3e824702f2 Grant Fabric node access for memory min frequency setting
Bug: 170510392
Signed-off-by: Taeju Park <taeju@google.com>
Change-Id: Ia96c8d9e890251a4f82bf8c8bb042ae6ce57182b
2021-04-20 00:46:32 +00:00
Salmax Chang
f9718d7bab Merge "dumpstate/incident: Fix avc errors" into sc-dev am: 854e4dfd60
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207379

Change-Id: I1e4499000e0a3a3589bf61333038e8391ca9cf79
2021-04-19 10:32:04 +00:00
Salmax Chang
4769345944 Merge "dumpstate/incident: Fix avc errors" into sc-dev am: 854e4dfd60
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207379

Change-Id: I7b6bbf41ea0df757b32e74d47e96efc80831dce4
2021-04-19 10:20:31 +00:00
Salmax Chang
854e4dfd60 Merge "dumpstate/incident: Fix avc errors" into sc-dev 2021-04-19 10:00:10 +00:00
SalmaxChang
1b17b0fbaa dumpstate/incident: Fix avc errors
avc: denied { append } for path="/storage/emulated/0/Android/data/com.android.pixellogger/files/bugreport-oriole-MASTER-2021-04-19-14-57-22.zip" dev="dm-7" ino=35424 scontext=u:r:dumpstate:s0 tcontext=u:object_r:media_rw_data_file:s0:c28,c257,c512,c768 tclass=file
avc: denied { use } for path="/storage/emulated/0/Android/data/com.android.pixellogger/files/bugreport-oriole-MASTER-2021-04-19-14-57-22.zip" dev="dm-7" ino=35424 scontext=u:r:incident:s0 tcontext=u:r:logger_app:s0:c28,c257,c512,c768 tclass=fd
avc: denied { append } for path="/storage/emulated/0/Android/data/com.android.pixellogger/files/bugreport-oriole-MASTER-2021-04-19-16-30-05.zip" dev="dm-7" ino=12639 scontext=u:r:incident:s0 tcontext=u:object_r:media_rw_data_file:s0:c30,c257,c512,c768 tclass=file

Bug: 178744858
Change-Id: I07eb1f4abf6cb9b399c773854ca6f47fcd5e2f37
2021-04-19 08:34:57 +00:00
Hongbo Zeng
8b9e2b3834 allow RilConfigService to call oemrilhook api
04-15 21:19:42.312   373   373 E SELinux : avc:  denied  { find } for pid=10245 uid=1001 name=telephony.oem.oemrilhook scontext=u:r:ril_config_service_app:s0 tcontext=u:object_r:radio_service:s0 tclass=service_manager permissive=0

Bug: 185747692
Test: after apply the rule, the denial log is gone
Change-Id: I447c9c695f48ee3b528190ff33261ca3e9cd69df
2021-04-19 16:26:59 +08:00
TreeHugger Robot
c049172863 Merge "Add sepolicy rules when PowerAnomalyDataDetection service enabled" into sc-dev am: 8c30e63758
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207376

Change-Id: I623850de79cd6d44921f5ea79c8ab8d3ea56016f
2021-04-19 06:20:23 +00:00
TreeHugger Robot
8a2e0ac237 Merge "remove obsolete domains" into sc-dev am: 07121f1245
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14230396

Change-Id: I1b821e90e2dfe6ad07440a14d15d41d4291d6143
2021-04-19 06:20:01 +00:00
TreeHugger Robot
c7657f946d Merge "Add sepolicy rules when PowerAnomalyDataDetection service enabled" into sc-dev am: 8c30e63758
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207376

Change-Id: Id20a8bf887bea871ea558e91f6c4f9f2fa2a2aa6
2021-04-19 06:18:21 +00:00
TreeHugger Robot
ad00a4479c Merge "remove obsolete domains" into sc-dev am: 07121f1245
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14230396

Change-Id: I5649646be20304eb0c2f4d2289c8d42cdacf3af0
2021-04-19 06:17:34 +00:00
TreeHugger Robot
8c30e63758 Merge "Add sepolicy rules when PowerAnomalyDataDetection service enabled" into sc-dev 2021-04-19 06:03:11 +00:00
TreeHugger Robot
07121f1245 Merge "remove obsolete domains" into sc-dev 2021-04-19 05:56:38 +00:00
Rios Kao
546bc74b3e Merge "Allow ssr_detector to read aoc version property" into sc-dev am: 1b25799252
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14185472

Change-Id: I670b3c3cae62c0b7f0cd5acf26ab4c769f0905e5
2021-04-19 04:35:23 +00:00
Rios Kao
3b36f9f4e9 Merge "Allow ssr_detector to read aoc version property" into sc-dev am: 1b25799252
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14185472

Change-Id: I6f06b0d6e7e1aaf1371491d14eaa374b2a78eef1
2021-04-19 04:33:27 +00:00
Rios Kao
1b25799252 Merge "Allow ssr_detector to read aoc version property" into sc-dev 2021-04-19 04:19:34 +00:00
Adam Shih
487b7ef4ef update error on ROM 7293525 am: 59a1c3f04a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14230390

Change-Id: I4df5074d99314748940179af7678e61c5e03a33c
2021-04-19 03:45:17 +00:00
Adam Shih
597926934c update error on ROM 7293525 am: 59a1c3f04a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14230390

Change-Id: Ie51d0e43b7c8b0c85102ab22bd3e8a835cbc1ee6
2021-04-19 03:42:21 +00:00
Adam Shih
99988c4c5f remove obsolete domains
Bug: 168013500
Test: Check that abox and rpmbd are not in ROM anywhere in oriole, raven user,
userdebug and factory ROM

Change-Id: Ie091a1036ba6c25a3c7f0ef0b8f69cc9fc4e306a
2021-04-19 11:14:54 +08:00
Adam Shih
59a1c3f04a update error on ROM 7293525
Bug: 185723618
Bug: 185723492
Bug: 185723694
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I5cc12384aca5dcc2658b914e5c7783f2e1e70b5d
2021-04-19 09:52:55 +08:00
TreeHugger Robot
3e60566e85 Merge "sepolicy: fix fingerprint sepolicy" into sc-dev am: 96ed3bb51c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207375

Change-Id: Iaae8bfba152a1411ab33e66128fde5e2a8d26f5b
2021-04-16 09:57:44 +00:00
TreeHugger Robot
24cbff3fd4 Merge "sepolicy: fix fingerprint sepolicy" into sc-dev am: 96ed3bb51c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207375

Change-Id: Id443be6287e001621a2d801aebbc75bf3122c7b4
2021-04-16 09:55:29 +00:00
TreeHugger Robot
96ed3bb51c Merge "sepolicy: fix fingerprint sepolicy" into sc-dev 2021-04-16 09:25:33 +00:00
eddielan
75a9ea1ee4 sepolicy: fix fingerprint sepolicy
04-16 01:56:07.948  1039  1039 W fingerprint@2.1: type=1400 audit(0.0:110):
avc: denied { write } for name="wakeup_enable" dev="sysfs" ino=69197
scontext=u:r:hal_fingerprint_default:s0
tcontext=u:object_r:sysfs:s0
tclass=file permissive=0

Bug: 185538163
Test: Build Pass
Change-Id: I8f75daf22577e6a68f3b2a0250eebebd1873ea28
2021-04-16 15:17:20 +08:00
SalmaxChang
c73d07ada1 Create vendor_logger_prop am: 3c692b942a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207372

Change-Id: I32ef66fbc32e1ca1a1c5cf4765ce0ff586c23b26
2021-04-16 06:33:03 +00:00
SalmaxChang
5b14e5db89 Create vendor_logger_prop am: 3c692b942a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207372

Change-Id: I5c767d97a1e4ddd55a2ba22c58a24fc3be4c10f4
2021-04-16 06:30:53 +00:00
SalmaxChang
3c692b942a Create vendor_logger_prop
Bug: 178744858
Change-Id: I4abb6f73b068c5ed265979c3190bcc2feac76f94
2021-04-16 06:06:36 +00:00
Hsiaoan Hsu
0790114826 Add sepolicy rules when PowerAnomalyDataDetection service enabled
- Fix avc denied when Power anomaly data detection enable.

Bug: 185544799
Test: Verified Pass
Change-Id: I7b81e09842acb71767f60df18fd0ca4a95e0ff09
2021-04-16 13:37:04 +08:00
TreeHugger Robot
e13ba8bc04 Merge "Update sepolicy for the egetpu_logging service to access the sysfs." into sc-dev am: ca24e70422
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14194013

Change-Id: I38b0a7ebaed84c336440558b030329fdcdd06e10
2021-04-16 02:38:54 +00:00
TreeHugger Robot
f6fff87e28 Merge "Update sepolicy for the egetpu_logging service to access the sysfs." into sc-dev am: ca24e70422
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14194013

Change-Id: Icfcdfb4d7fc0b437d3bd0d60bc10239bcdbd514e
2021-04-16 02:36:18 +00:00
TreeHugger Robot
ca24e70422 Merge "Update sepolicy for the egetpu_logging service to access the sysfs." into sc-dev 2021-04-16 02:15:58 +00:00
Max Shi
bf808b39f5 Add sepolicy for sensor HAL accessing AOC reset sysfs node. am: 55bd05960f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14167428

Change-Id: Ibcd80f9711e1d9976dfcf9a745c7bdd600479235
2021-04-16 00:04:38 +00:00
Ahmed ElArabawy
d191543cb2 Merge "ssr_detector: provide wlan firmware version" into sc-dev am: 4a5d646504
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14197331

Change-Id: I1a439519d7d2150983b17e606126a95cfb2d3181
2021-04-16 00:04:32 +00:00
Max Shi
0fd9e3970a Add sepolicy for sensor HAL accessing AOC reset sysfs node. am: 55bd05960f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14167428

Change-Id: I63c1b97911f6e853dcc41f3ab1ebde385235d3a5
2021-04-16 00:02:00 +00:00
Ahmed ElArabawy
8e2e50c07a Merge "ssr_detector: provide wlan firmware version" into sc-dev am: 4a5d646504
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14197331

Change-Id: Ice4ffb15a7f0f042b9a57bfad404a204fcf94bd8
2021-04-16 00:00:49 +00:00
qinyiyan
4585613637 Update sepolicy for the egetpu_logging service to access the sysfs.
Test: make selinux_policy -j128 and pushed sepolicy modules to the
device. The avc denials are gone.
Bug:185448476

Change-Id: Ibff482b64a6cdbc5a7967bb8cc4281c8bd0b5b98
2021-04-15 23:57:32 +00:00
Max Shi
55bd05960f Add sepolicy for sensor HAL accessing AOC reset sysfs node.
Bug: 184858369
Test: Verify sensor HAL process can write to the sysfs node.
Change-Id: I9700323bafa413b88f25e4117499bcc936bce9c6
2021-04-15 23:37:15 +00:00
Ahmed ElArabawy
4a5d646504 Merge "ssr_detector: provide wlan firmware version" into sc-dev 2021-04-15 23:32:26 +00:00
rioskao
a0a4a7f2a2 Allow ssr_detector to read aoc version property
sst_detector would need firmware version in order to
parse dump information with corresponding symbol of the version

04-15 13:05:39.196 28845 28864 W libc    : Access denied finding property "vendor.aoc.firmware.version"

Bug: 185473950
Test: validate by force ramdump of aoc.

Change-Id: Iebf62b97897ccc2a84a174dafca90f446b771915
2021-04-15 22:53:18 +08:00
Jenny Ho
c15e4b72f2 Merge "Allow to dump pps-dc" into sc-dev am: 9ec58d031a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14140257

Change-Id: Iacaa2d56fc4ace8a91cc2e341f4f1f20dff5a6af
2021-04-15 11:21:24 +00:00
Jenny Ho
2dd8bf92c6 Merge "Allow to dump pps-dc" into sc-dev am: 9ec58d031a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14140257

Change-Id: I36e4f653f1bfcab9b5c884e452ec053894177d99
2021-04-15 11:16:01 +00:00
Jenny Ho
9ec58d031a Merge "Allow to dump pps-dc" into sc-dev 2021-04-15 10:26:57 +00:00
Roger Wang
da8122c867 ssr_detector: provide wlan firmware version
In this commit, we allow ssr_detector to collect
wlan firmware version from property. This information
is useful for doing SSR statistic.

avc log:
avc: denied { read } for comm="FileObserver" name="u:object_r:vendor_wifi_version:s0" dev="tmpfs" ino=324 scontext=u:r:ssr_detector_app:s0:c512,c768 tcontext=u:object_r:vendor_wifi_version:s0 tclass=file permissive=0

Bug: 185457155
Test: check firmware version can be collected.
ssrInfo SSRInfo{mSubsystem='wlan', mCrashReason='Dongle_Trap_traptest+0x8_pcidev_handle_user_disconnect+0xbb', mRamdumpFile='coredump_wlan_2021-04-15_18-01-54.bin', mTimeStamp='2021-04-15_18-01-54', mBuildVersion='20.25.423.4', mUID='05a6029c-4f74-3172-9a3f-7fa8e8bcc6c4', mExtraBuildVersion=''}, uid 05a6029c-4f74-3172-9a3f-7fa8e8bcc6c4

Change-Id: Ibf2ce8f0c7a7dd752963c738bf28da14034cc209
2021-04-15 18:08:52 +08:00
Charlie Chen
bbe9ffe0e8 Merge changes from topic "remove_video_system_heap" into sc-dev am: 742daf873c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14187064

Change-Id: If5d1cecad9d65888364eb43f4ba2d5b296452058
2021-04-15 09:11:41 +00:00
Charlie Chen
89e6693435 Merge changes from topic "remove_video_system_heap" into sc-dev am: 742daf873c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14187064

Change-Id: I98048923a0865e28d6b67c5efffce8b8295371c5
2021-04-15 08:59:10 +00:00
Charlie Chen
742daf873c Merge changes from topic "remove_video_system_heap" into sc-dev
* changes:
  Formatting file_contexts
  remove video_system_heap
2021-04-15 07:56:19 +00:00
TreeHugger Robot
6b2103ed0c Merge "Allow power stats HAL read uwb power_stats sysfs node" into sc-dev am: a4d458026a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14189309

Change-Id: I67474bd39ad5bb247df79ad27d88cb14b7bc8955
2021-04-15 06:57:10 +00:00
TreeHugger Robot
29e20026d9 Merge "Allow power stats HAL read uwb power_stats sysfs node" into sc-dev am: a4d458026a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14189309

Change-Id: I4e5d42b5a2f8e7a613fe6276196c56f4404ecb1e
2021-04-15 06:51:17 +00:00
TreeHugger Robot
a4d458026a Merge "Allow power stats HAL read uwb power_stats sysfs node" into sc-dev 2021-04-15 06:26:00 +00:00
TeYuan Wang
66fd237730 thermal: add sepolicy rule to access ODPM sysfs
Bug: 170653634
Test: test thermal behavior under enforcing mode
Change-Id: I37500de957cc2375213f1d0416a88356f36d2367
2021-04-15 05:55:10 +00:00
Benjamin Schwartz
09c2e2802a Merge "Allow power stats HAL to read gnss stats" into sc-dev am: 948f48997b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14106551

Change-Id: I3668916da82cf5f5ec4f31710fd91ccdd0ee6a39
2021-04-15 05:27:07 +00:00
Vova Sharaienko
350b5e41c8 Merge "Stats: removed obsolete IStats HIDL sepolicies" into sc-dev am: d7e81afb35
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14192518

Change-Id: I8a06090a82aa3c3fad6797af240a69bbccbcef90
2021-04-15 05:26:51 +00:00
Chris Lu
bbabdc9504 display: remove dontaudit for hal_memtrack_default am: 86582e6ce0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14187062

Change-Id: I71b0e37954933ed6f0fae9eb18e57d3ef7d5ccf2
2021-04-15 05:26:29 +00:00
Benjamin Schwartz
34cdd13183 Merge "Allow power stats HAL to read gnss stats" into sc-dev am: 948f48997b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14106551

Change-Id: I677e694c52a44e7931f45017ce05ab8f1f652e9a
2021-04-15 05:21:05 +00:00
Vova Sharaienko
52d208d3ed Merge "Stats: removed obsolete IStats HIDL sepolicies" into sc-dev am: d7e81afb35
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14192518

Change-Id: I92c7a1f4705b9d4f85dcba7e3cda05d0fd349769
2021-04-15 05:20:51 +00:00
Chris Lu
fd0a28c8d1 display: remove dontaudit for hal_memtrack_default am: 86582e6ce0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14187062

Change-Id: I6de95dadec78a8a7ba9a31ca7817a52e93bf6925
2021-04-15 05:20:38 +00:00
Benjamin Schwartz
948f48997b Merge "Allow power stats HAL to read gnss stats" into sc-dev 2021-04-15 05:08:16 +00:00
Vova Sharaienko
d7e81afb35 Merge "Stats: removed obsolete IStats HIDL sepolicies" into sc-dev 2021-04-15 05:01:22 +00:00
Charlie Chen
01a33d0cb7 Formatting file_contexts
Test: Youtube playback, video recording, ExoPlayer playback
Bug: 181380463
Change-Id: I9eeb08987794336aafa7945a9d648a38f0e7989a
2021-04-15 11:08:10 +08:00
Taehwan Kim
9d20b97534 remove video_system_heap
Test: Youtube playback, video recording, ExoPlayer playback
Bug: 181380463
Signed-off-by: Taehwan Kim <t_h.kim@samsung.com>
Change-Id: If2aad557365755156e4c088048dc351bc66df281
2021-04-15 11:07:20 +08:00
Chris Lu
86582e6ce0 display: remove dontaudit for hal_memtrack_default
Bug: 181913683
Test: make pts -j60 pts-tradefed run pts -m PtsSELinuxTest -t
com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot

Change-Id: I72963aed5aff9bcbf2de16b11b16033ca594d7f0
2021-04-15 10:12:01 +08:00
Vova Sharaienko
a0a8cb2dff Stats: removed obsolete IStats HIDL sepolicies
Bug: 181887265
Test: Build, flash, and logcat for sepolicies messages
Change-Id: I702a8d59fadf04658addd6e3acf3a126a0a4cae7
2021-04-15 01:42:45 +00:00
Benjamin Schwartz
dde4b6bf1f Allow power stats HAL to read gnss stats
Bug: 181577366
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Iea8c332f9b73358e1a6464d69cbef6af4a603f84
2021-04-14 17:28:02 -07:00
Benjamin Schwartz
a791d93318 Allow power stats HAL read uwb power_stats sysfs node
Bug: 180956351
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Id157c1e10f4d9491ae54dd1babb82e6f282c257c
2021-04-14 15:35:53 -07:00
Aaron Tsai
ab5ab00a89 Fix avc denied for Silent Logging am: 204dc05aa4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14182163

Change-Id: I23df127195424ce93b544767f450bd687a3a604c
2021-04-14 12:47:34 +00:00
Aaron Tsai
9c8ec42d54 Fix avc denied for Silent Logging am: 204dc05aa4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14182163

Change-Id: I32b6542ade23e244d4758e88d8d2f2faa10bfdcb
2021-04-14 12:42:13 +00:00
Aaron Tsai
204dc05aa4 Fix avc denied for Silent Logging
04-08 23:18:20.684   920   920 I HwBinder:920_1: type=1400 audit(0.0:486): avc: denied { call } for scontext=u:r:sced:s0 tcontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tclass=binder permissive=1
04-08 22:51:36.312  1000  6890  6890 I Thread-2: type=1400 audit(0.0:1390): avc: denied { call } for scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:r:sced:s0 tclass=binder permissive=1

04-08 23:18:20.684  7099  7099 I auditd  : type=1400 audit(0.0:487): avc: denied { execute } for comm="HwBinder:920_1" name="sh" dev="dm-0" ino=464 scontext=u:r:sced:s0 tcontext=u:object_r:shell_exec:s0 tclass=file permissive=1
04-08 23:18:20.684  7099  7099 I auditd  : type=1400 audit(0.0:488): avc: denied { read open } for comm="HwBinder:920_1" path="/system/bin/sh" dev="overlay" ino=464 scontext=u:r:sced:s0 tcontext=u:object_r:shell_exec:s0 tclass=file permissive=1

04-08 22:51:36.312  1000  8554  8554 I HwBinder:908_1: type=1400 audit(0.0:1391): avc: denied { execute_no_trans } for path="/vendor/bin/sh" dev="overlay" ino=377 scontext=u:r:sced:s0 tcontext=u:object_r:vendor_shell_exec:s0 tclass=file permissive=1
04-08 22:51:36.324  1000   908   908 I HwBinder:908_1: type=1400 audit(0.0:1392): avc: denied { search } for name="slog" dev="dm-7" ino=245 scontext=u:r:sced:s0 tcontext=u:object_r:vendor_slog_file:s0 tclass=dir permissive=1
04-08 22:51:36.324  1000   908   908 I HwBinder:908_1: type=1400 audit(0.0:1393): avc: denied { write } for name="slog" dev="dm-7" ino=245 scontext=u:r:sced:s0 tcontext=u:object_r:vendor_slog_file:s0 tclass=dir permissive=1
04-08 22:51:36.324  1000   908   908 I HwBinder:908_1: type=1400 audit(0.0:1394): avc: denied { add_name } for name="tcplog_20210408225136.pcap" scontext=u:r:sced:s0 tcontext=u:object_r:vendor_slog_file:s0 tclass=dir permissive=1
04-08 22:52:24.720  1000   908   908 I HwBinder:908_1: type=1400 audit(0.0:1427): avc: denied { create } for name="tcplog_20210408225224.pcap" scontext=u:r:sced:s0 tcontext=u:object_r:vendor_slog_file:s0 tclass=file permissive=1

04-08 23:18:23.160  7099  7099 I auditd  : type=1400 audit(0.0:505): avc: denied { getopt } for comm="tcpdump" scontext=u:r:sced:s0 tcontext=u:r:sced:s0 tclass=packet_socket permissive=1
04-08 23:18:23.160  7099  7099 I tcpdump : type=1400 audit(0.0:505): avc: denied { getopt } for scontext=u:r:sced:s0 tcontext=u:r:sced:s0 tclass=packet_socket permissive=1
04-08 23:18:23.160  7099  7099 I auditd  : type=1400 audit(0.0:506): avc: denied { setopt } for comm="tcpdump" scontext=u:r:sced:s0 tcontext=u:r:sced:s0 tclass=packet_socket permissive=1
04-08 23:18:23.160  7099  7099 I tcpdump : type=1400 audit(0.0:506): avc: denied { setopt } for scontext=u:r:sced:s0 tcontext=u:r:sced:s0 tclass=packet_socket permissive=1

04-08 23:58:53.664  8514  8514 I auditd  : type=1400 audit(0.0:500): avc: denied { getattr } for comm="sh" path="/system/bin/tcpdump" dev="overlay" ino=502 scontext=u:r:sced:s0 tcontext=u:object_r:tcpdump_exec:s0 tclass=file permissive=1
04-08 23:58:53.664  8514  8514 I auditd  : type=1400 audit(0.0:501): avc: denied { execute } for comm="sh" name="tcpdump" dev="dm-0" ino=502 scontext=u:r:sced:s0 tcontext=u:object_r:tcpdump_exec:s0 tclass=file permissive=1
04-08 23:58:53.664  8514  8514 I auditd  : type=1400 audit(0.0:502): avc: denied { read open } for comm="sh" path="/system/bin/tcpdump" dev="overlay" ino=502 scontext=u:r:sced:s0 tcontext=u:object_r:tcpdump_exec:s0 tclass=file permissive=1
04-08 23:58:53.668  8514  8514 I auditd  : type=1400 audit(0.0:503): avc: denied { execute_no_trans } for comm="sh" path="/system/bin/tcpdump" dev="overlay" ino=502 scontext=u:r:sced:s0 tcontext=u:object_r:tcpdump_exec:s0 tclass=file permissive=1
04-08 23:58:53.668  8514  8514 I auditd  : type=1400 audit(0.0:504): avc: denied { map } for comm="tcpdump" path="/system/bin/tcpdump" dev="overlay" ino=502 scontext=u:r:sced:s0 tcontext=u:object_r:tcpdump_exec:s0 tclass=file permissive=1

04-08 23:58:53.680  8514  8514 I auditd  : type=1400 audit(0.0:505): avc: denied { create } for comm="tcpdump" scontext=u:r:sced:s0 tcontext=u:r:sced:s0 tclass=packet_socket permissive=1
04-08 23:58:53.680  8514  8514 I auditd  : type=1400 audit(0.0:506): avc: denied { net_raw } for comm="tcpdump" capability=13 scontext=u:r:sced:s0 tcontext=u:r:sced:s0 tclass=capability permissive=1
04-08 23:58:53.680  8514  8514 I auditd  : type=1400 audit(0.0:507): avc: denied { ioctl } for comm="tcpdump" path="socket:[96140]" dev="sockfs" ino=96140 ioctlcmd=0x8933 scontext=u:r:sced:s0 tcontext=u:r:sced:s0 tclass=packet_socket permissive=1

04-13 19:19:38.493  1000   403   403 I auditd  : avc:  denied  { find } for interface=vendor.samsung_slsi.telephony.hardware.oemservice::IOemService sid=u:r:sced:s0 pid=909 scontext=u:r:sced:s0 tcontext=u:object_r:hal_vendor_oem_hwservice:s0 tclass=hwservice_manager permissive=0
04-13 21:40:13.054   404   404 I auditd  : avc:  denied  { add } for interface=vendor.samsung_slsi.telephony.hardware.oemservice::IOemService sid=u:r:sced:s0 pid=911 scontext=u:r:sced:s0 tcontext=u:object_r:hal_vendor_oem_hwservice:s0 tclass=hwservice_manager permissive=1
04-13 21:40:13.055   404   404 I auditd  : avc:  denied  { add } for interface=android.hidl.base::IBase sid=u:r:sced:s0 pid=911 scontext=u:r:sced:s0 tcontext=u:object_r:hidl_base_hwservice:s0 tclass=hwservice_manager permissive=1


Bug: 184921478
Test: manual test
Change-Id: I39eb403272a8a4fba0728c9f8eab5ea23096a540
2021-04-14 18:18:55 +08:00
Adam Shih
6c77867c16 Merge "change assigned bug" into sc-dev am: 65355b49a3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14167787

Change-Id: Ide6ac2b00c2a571517c3496a95a84aed22b9428c
2021-04-14 08:01:55 +00:00
Adam Shih
42c83f05e5 Merge "change assigned bug" into sc-dev am: 65355b49a3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14167787

Change-Id: I23f0d624063b78900c88c375df8c242c889d1640
2021-04-14 07:56:12 +00:00
Adam Shih
65355b49a3 Merge "change assigned bug" into sc-dev 2021-04-14 07:09:32 +00:00
Ray Chi
f4589fecba usb: Add sepolicy for extcon access
USB gadget hal will access extcon folder so that this patch
will add new rule to allow USB gadget hal to access extcon.

Bug: 185302867
Test: apply the rule and verify it
Change-Id: I0bc44dbf89a02c4fa5b561baf1c0c1c43d5183e9
2021-04-14 14:36:44 +08:00
SalmaxChang
eac287b429 Add more modem properties am: f23a4423c4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14173742

Change-Id: I2d5ad4b11041c31259bcda951ea8463653be1c2a
2021-04-14 05:50:35 +00:00
SalmaxChang
335dfc11c3 Add more modem properties am: f23a4423c4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14173742

Change-Id: I4e6ae1e9739e895de2499f8b97b1fc0ce0426998
2021-04-14 05:44:57 +00:00
SalmaxChang
f23a4423c4 Add more modem properties
init    : Do not have permissions to set 'ro.vendor.sys.modem.logging.loc' to '/data/vendor/slog' in property file '/vendor/build.prop': SELinux permission check failed

Bug: 184101903
Change-Id: I8c2dfd48e177e4a5127c1efd977c0f6c18b50379
2021-04-14 04:46:32 +00:00
Roshan Pius
2b15027412 Uwb: Create a new Uwb system service am: 8119d482ed
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14057967

Change-Id: I8b6f621cfc308e31b746388329af060420f528e9
2021-04-14 03:48:04 +00:00
Roshan Pius
7658d333ea Uwb: Create a new Uwb system service am: 8119d482ed
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14057967

Change-Id: I3b402d319fe6527c2f227494546320586970c742
2021-04-14 03:42:09 +00:00
Ilya Matyukhin
d22884d3cd Merge "Add sepolicy for SystemUIGoogle to write to lhbm" into sc-dev am: 75d0cce94f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14105113

Change-Id: Iaaf7aacccae46d584eacc2f687f31583d6c605b2
2021-04-14 01:31:44 +00:00
Ilya Matyukhin
0226800307 Merge "Add sepolicy for SystemUIGoogle to write to lhbm" into sc-dev am: 75d0cce94f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14105113

Change-Id: I232b907292500d053fa55696a388a04c1bdd9879
2021-04-14 01:25:39 +00:00
Roshan Pius
8119d482ed Uwb: Create a new Uwb system service
Move the vendor service to a different name which will be used by AOSP
uwb service.

Also, create a new domain for the UWB vendor app which can expose this
vendor service.

Denials:
04-12 16:38:38.282   411   411 E SELinux : avc:  denied  { find } for pid=2964
uid=1000 name=tethering scontext=u:r:uwb_vendor_app:s0:c232,c259,c512,c768
tcontext=u:object_r:tethering_service:s0 tclass=service_manager permissive=0

04-12 17:56:49.320   411   411 E SELinux : avc:  denied  { find } for pid=2964
uid=1000 name=hardware.qorvo.uwb.IUwb/default scontext=u:r:uwb_vendor_app:s0:c232,c259,c512,c768
tcontext=u:object_r:hal_uwb_service:s0 tclass=service_manager permissive=0

04-12 20:13:37.952  3034  3034 W com.qorvo.uwb: type=1400 audit(0.0:8): avc: denied
{ getattr } for path="/data/user/0/com.qorvo.uwb" dev="dm-11" ino=7176
scontext=u:r:uwb_vendor_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0
tclass=dir permissive=0

04-12 20:13:38.003   408   408 E SELinux : avc:  denied  { find } for pid=3034
uid=1000 name=content_capture scontext=u:r:uwb_vendor_app:s0:c232,c259,c512,c768
tcontext=u:object_r:content_capture_service:s0 tclass=service_manager permissive=0

04-12 21:25:03.244  2992  2992 W com.qorvo.uwb: type=1400 audit(0.0:7): avc: denied
{ getattr } for path="/data/user/0/com.qorvo.uwb" dev="dm-11" ino=7176
scontext=u:r:uwb_vendor_app:s0:c232,c259,c512,c768 tcontext=u:object_r:
system_app_data_file:s0:c232,c259,c512,c768 tclass=dir permissive=0

Bug: 183904955
Test: atest android.uwb.cts.UwbManagerTest
Change-Id: Iecb871902ebe7d110f2deb9ddb960c1a3945d8e9
2021-04-13 17:54:42 -07:00
Ilya Matyukhin
75d0cce94f Merge "Add sepolicy for SystemUIGoogle to write to lhbm" into sc-dev 2021-04-14 00:16:35 +00:00
Vova Sharaienko
b0a79e65a1 wirelesscharger-adapter: updated sepolicy am: 72f80a3c90
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14176231

Change-Id: Id446f4625b0d89a27365d3385395ef190f6cf0e2
2021-04-13 23:53:23 +00:00
Vova Sharaienko
54fbaee2e2 wirelesscharger-adapter: updated sepolicy am: 72f80a3c90
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14176231

Change-Id: I8c5bd90516347079ea1a51e744614f4d30921805
2021-04-13 23:48:26 +00:00
Vova Sharaienko
72f80a3c90 wirelesscharger-adapter: updated sepolicy
This allows the wirelesscharger-adapter to access AIDL Stats service

Bug: 181892307
Test: Build, flash, boot & and logcat | grep "platform_app"
Change-Id: I801e801133e4c7a0977f6c1e816b7c64135f59a3
2021-04-13 19:26:01 +00:00
Ilya Matyukhin
acf6b1f5ae Add sepolicy for SystemUIGoogle to write to lhbm
Bug: 184768835
Bug: 182520014
Test: adb logcat | grep "avc: denied"
Change-Id: Ia200983c87e0b826a0b62052e65cc731453a632f
2021-04-13 11:26:34 -07:00
TreeHugger Robot
ad6d6919ec Merge "logger_app: Remove Pixelize rule" into sc-dev am: 421bee976b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13805048

Change-Id: I3fcb8e777ebb3b22be823603eb9260a45762e9e5
2021-04-13 12:37:11 +00:00
TreeHugger Robot
2a113e7403 Merge "Fix Android GPU Inspector (AGI) support" into sc-dev am: f7c08818e6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160223

Change-Id: Id30e6d4082331c23514da82d3f515e9da4a0abd8
2021-04-13 12:36:39 +00:00
TreeHugger Robot
421bee976b Merge "logger_app: Remove Pixelize rule" into sc-dev 2021-04-13 11:54:20 +00:00
TreeHugger Robot
f7c08818e6 Merge "Fix Android GPU Inspector (AGI) support" into sc-dev 2021-04-13 10:27:29 +00:00
SalmaxChang
674ed8943f hal_dumpstate_default: Fix avc error am: cbc7709c10
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160604

Change-Id: I246ab92b5e9ab33312e78eca151fb8fa6aa80bb9
2021-04-13 08:50:47 +00:00
SalmaxChang
cbc7709c10 hal_dumpstate_default: Fix avc error
avc: denied { set } for property=vendor.sys.modem.logging.enable pid=9743 uid=1000 gid=1000 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:vendor_modem_prop:s0 tclass=property_service permissive=0

Bug: 185196642
Change-Id: I955271fa4d2d9bc2ef4b306068623f79f5b37c74
2021-04-13 07:43:29 +00:00
Adam Shih
e541cce49b change assigned bug
Bug: 182531832
Test: take bugreport and see no relevant log
Change-Id: I33911bf652c7d21eb2a153e6b6129162434be72f
2021-04-13 15:08:13 +08:00
KRIS CHEN
257a9b2464 Merge "Allow fingerprint hal to access dmabuf_system_heap_device" into sc-dev am: ef5cde63e6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14112452

Change-Id: I9ee3f7401b214f0544049f6d5743c57566f42496
2021-04-13 06:53:39 +00:00
Adam Shih
77e7ed4983 Merge changes Ieac81e9d,I7c069770 into sc-dev am: a071425509
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160597

Change-Id: Ib81459027e1949d2b1756e236b5d9ace46dc49e0
2021-04-13 06:53:10 +00:00
KRIS CHEN
ef5cde63e6 Merge "Allow fingerprint hal to access dmabuf_system_heap_device" into sc-dev 2021-04-13 06:22:13 +00:00
Kris Chen
c14f02da5d Allow fingerprint hal to access dmabuf_system_heap_device
Fixes the following avc denial:
android.hardwar: type=1400 audit(0.0:1207): avc: denied { read } for name="system" dev="tmpfs" ino=689 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:dmabuf_system_heap_device:s0 tclass=chr_file permissive=0

Bug: 171791180
Bug: 184034094
Test: Enroll and authenticate fingerprints.
Change-Id: Ie86143ac2484d8909b1070829ff20cf02572f17d
2021-04-13 06:21:09 +00:00
Adam Shih
a071425509 Merge changes Ieac81e9d,I7c069770 into sc-dev
* changes:
  dump hal_graphics_composer
  allow init to set readahead_size
2021-04-13 05:56:39 +00:00
Adam Shih
440e15e109 Merge "update error on ROM 7278058" into sc-dev am: c8d0ba4326
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14160592

Change-Id: Ia9b2876f6ed9044c83522fab28281acf7bbb8917
2021-04-13 05:17:36 +00:00
Jim Sun
0c1e46a6b3 Merge "gs101: fix grilservice context" into sc-dev am: 9e25f06368
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13880430

Change-Id: I5397c2ad98abbc2b5939f8a4f61dacdd4f24d191
2021-04-13 05:17:20 +00:00
Adam Shih
c8d0ba4326 Merge "update error on ROM 7278058" into sc-dev 2021-04-13 05:10:03 +00:00
Jim Sun
9e25f06368 Merge "gs101: fix grilservice context" into sc-dev 2021-04-13 04:31:21 +00:00
Adam Shih
7e071d6cb2 dump hal_graphics_composer
Bug: 179310854
Bug: 176868159
Bug: 177176812
Bug: 177389412
Bug: 177614642
Bug: 177778217
Bug: 177860841
Bug: 178752460
Bug: 179310909
Bug: 179437463
Bug: 180963481
Bug: 181177909
Bug: 174961421
Test: do bugreport with no relevant error logs
Change-Id: Ieac81e9d684044fbd649b4fec608f393627c34cb
2021-04-13 11:59:13 +08:00
Adam Shih
7e60d3a032 allow init to set readahead_size
Bug: 185186743
Test: boot with no error found during boot
Change-Id: I7c06977023a1125d0187b96103e94c355a9d17a2
2021-04-13 11:17:31 +08:00
Adam Shih
06cc3ee882 update error on ROM 7278058
Bug: 185186743
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I40066584800e1a40fbd75dc2d97ee44f9e6dde89
2021-04-13 10:55:33 +08:00
SalmaxChang
6f1275582c logger_app: Grant to access new logger properties am: 2c1b29b494
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14140254

Change-Id: I7b4a9da5ba9d1ac3dc43469c11f360ca7e887d9d
2021-04-13 02:18:43 +00:00
Sidath Senanayake
7c8d4d86e8 Fix Android GPU Inspector (AGI) support
In order for AGI to work, it needs to dlopen the libgpudataproducer.so
shared object.

Bug: 185127179
Bug: 175593589
Change-Id: I9ad9c587f10e0fd6e27c4743c1d4cb85c896c41d
2021-04-12 17:41:01 +01:00
Ted Lin
cd12670940 Allow to dump pps-dc
Bug:185041587
Test: adb bugreport
Change-Id: Ia4adcc335b05f5f7d06625c274842e6a9f5d2637
Signed-off-by: Ted Lin <tedlin@google.com>
2021-04-12 18:27:20 +08:00
SalmaxChang
2c1b29b494 logger_app: Grant to access new logger properties
avc: denied { read } for comm="oid.pixellogger" name="u:object_r:vendor_ssrdump_prop:s0" dev="tmpfs" ino=308 scontext=u:r:logger_app:s0:c24,c257,c512,c768 tcontext=u:object_r:vendor_ssrdump_prop:s0 tclass=file permissive=1
avc: denied { set } for property=vendor.debug.ramdump.full pid=5081 uid=10280 gid=10280 scontext=u:r:logger_app:s0:c24,c257,c512,c768 tcontext=u:object_r:vendor_ramdump_prop:s0 tclass=property_service permissive=1
avc: denied { set } for property=persist.logd.logpersistd.count pid=5081 uid=10280 gid=10280 scontext=u:r:logger_app:s0:c24,c257,c512,c768 tcontext=u:object_r:logpersistd_logging_prop:s0 tclass=property_service permissive=1
avc: denied { set } for property=persist.vendor.ril.crash_handling_mode pid=5081 uid=10280 gid=10280 scontext=u:r:logger_app:s0:c24,c257,c512,c768 tcontext=u:object_r:vendor_rild_prop:s0 tclass=property_service permissive=1
avc: denied { set } for property=persist.logd.size pid=5081 uid=10280 gid=10280 scontext=u:r:logger_app:s0:c24,c257,c512,c768 tcontext=u:object_r:logd_prop:s0 tclass=property_service permissive=1

Bug: 178744858
Change-Id: I42629335e82565fbf305be242098870aef6ea317
2021-04-12 15:08:30 +08:00
Jenny Ho
2d617d57ef Merge "Fix avc denied for maxfg_base/flip and wireless dump" into sc-dev am: 3b6d7aeb94
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14139366

Change-Id: I6ecd5edf52d62b58fe8aeeed700f2501fe2ec0e7
2021-04-12 04:39:22 +00:00
Jenny Ho
3b6d7aeb94 Merge "Fix avc denied for maxfg_base/flip and wireless dump" into sc-dev 2021-04-12 04:05:09 +00:00
Andy Chou
72aaa16452 Merge "Remove sepolicy of Wirecutter" into sc-dev am: deaf447bc6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14136827

Change-Id: I3a6bfb4d8f39ca7e4319eb14fd234e2ab1bfa806
2021-04-12 02:27:42 +00:00
Erik Staats
7e5ceecdf6 Add policy for USF low latency transport gralloc usage. am: 1082e886c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14144079

Change-Id: I32cc4ea5c2f396ddb1b3b288d5531116bf185baf
2021-04-12 02:27:27 +00:00
Andy Chou
deaf447bc6 Merge "Remove sepolicy of Wirecutter" into sc-dev 2021-04-12 02:06:48 +00:00
Erik Staats
1082e886c0 Add policy for USF low latency transport gralloc usage.
Bug: 183233052
Test: Verified regular and direct report sampling on Raven with shared
 memory transport enabled.
Test: See details in testing done comment in
 https://googleplex-android-review.git.corp.google.com/14144079 .
Change-Id: Ia852a4a9ca6e8eacb0fb465884d17f95445a6822
2021-04-12 01:33:52 +00:00
millerliang
b67548e8cf Fix avc denied in MMAP audio exclusive mode am: b4bab832f9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14063265

Change-Id: Ib5a43be93cfcff6ec0a4f2a6e10db267f7c2047c
2021-04-09 14:36:47 +00:00
millerliang
b4bab832f9 Fix avc denied in MMAP audio exclusive mode
04-01 15:26:30.936 16390 16390 I auditd  : type=1400 audit(0.0:55): avc:
denied { read } for comm="HwBinder:16390_" name="aaudio_playback_heap"
dev="tmpfs" ino=400 scontext=u:r:hal_audio_default:s0
tcontext=u:object_r:dmabuf_heap_device:s0 tclass=chr_file permissive=1

Bug: 165737390
Test: Build and use OboeTester to run MMAP audio
Change-Id: I22201dfd4a3f579b52d4cfbc86fc6148dc481cb0
2021-04-09 20:43:54 +08:00
Jenny Ho
b94e7586ce Fix avc denied for maxfg_base/flip and wireless dump
Bug: 184780667
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: Ice4102cf541dc80c85beb05ad5c523a4306a77bc
2021-04-09 18:24:32 +08:00
andychou
b370d9d2c3 Remove sepolicy of Wirecutter
Bug: 184886787
Test: build pass
Change-Id: Ibe539d31dc70cc4ea478f074ef4bf75d918bcb67
2021-04-09 17:06:51 +08:00
TreeHugger Robot
95d168126d Merge "Fix avc denied for Silent Logging" into sc-dev am: 60a2a6c09b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14103373

Change-Id: I77f2d19f407e8b0e0bcda835885b50218da6ad1c
2021-04-09 06:53:47 +00:00
TreeHugger Robot
60a2a6c09b Merge "Fix avc denied for Silent Logging" into sc-dev 2021-04-09 06:20:41 +00:00
TreeHugger Robot
70ba745b79 Merge "cbd: Grant to access slog file" into sc-dev am: 5c9b9d882f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14119811

Change-Id: Ia792e85b0627e4134db6dc784bc3d3c7e3831ae3
2021-04-09 05:54:29 +00:00
TreeHugger Robot
5c9b9d882f Merge "cbd: Grant to access slog file" into sc-dev 2021-04-09 05:15:34 +00:00
Aaron Tsai
06b410dc4a Fix avc denied for Silent Logging
04-06 15:18:31.513  root     1     1 E init    : Do not have permissions to set 'persist.vendor.sys.silentlog.tcp' to 'On' in property file '/vendor/build.prop': SELinux permission check failed
04-06 15:20:17.988  root     1     1 W /system/bin/init: type=1107 audit(0.0:33): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=persist.vendor.sys.silentlog.ap pid=8917 uid=1000 gid=1000 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:vendor_persist_sys_default_prop:s0 tclass=property_service permissive=0'
04-06 15:20:23.256  root     1     1 W /system/bin/init: type=1107 audit(0.0:38): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=persist.vendor.sys.silentlog.cp pid=9025 uid=1000 gid=1000 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:vendor_persist_sys_default_prop:s0 tclass=property_service permissive=0'
04-06 15:20:51.340  root     1     1 W /system/bin/init: type=1107 audit(0.0:43): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=persist.vendor.sys.silentlog pid=9291 uid=1000 gid=1000 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:vendor_persist_sys_default_prop:s0 tclass=property_service permissive=0'
04-06 15:21:03.608  root     1     1 W /system/bin/init: type=1107 audit(0.0:54): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=persist.vendor.sys.silentlog.tcp pid=9473 uid=1000 gid=1000 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:vendor_persist_sys_default_prop:s0 tclass=property_service permissive=0'

04-06 20:17:08.060  1000  5754  5754 W Thread-3: type=1400 audit(0.0:21): avc: denied { write } for name="slog" dev="dm-7" ino=245 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:vendor_slog_file:s0 tclass=dir permissive=0
04-06 20:17:09.194  1000   398   398 E SELinux : avc:  denied  { find } for interface=vendor.samsung_slsi.telephony.hardware.oemservice::IOemService sid=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 pid=5754 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:hal_vendor_oem_hwservice:s0 tclass=hwservice_manager permissive=0
04-06 21:07:18.376  7458  7458 I auditd  : type=1400 audit(0.0:20): avc: denied { call } for comm="y.silentlogging" scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:r:dmd:s0 tclass=binder permissive=0

04-06 21:16:53.200  8873  8873 W Thread-4: type=1400 audit(0.0:85): avc: denied { create } for name="NNEXT_PROFILE.nprf" scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:vendor_slog_file:s0:c232,c259,c512,c768 tclass=file permissive=0


Bug: 184608648
Test: verified with the forrest ROM and error log gone
Change-Id: Id9cdf15478c751de92a9a84bcfdc8233d6e9d294
2021-04-09 04:33:13 +00:00
TreeHugger Robot
b415e72482 Merge "init: allow to set tcpdump property" into sc-dev am: 83d6ee82fb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14124655

Change-Id: Ia3dd270c6ea9f90658f1657051c19a4732c4b38d
2021-04-09 04:30:36 +00:00
TreeHugger Robot
83d6ee82fb Merge "init: allow to set tcpdump property" into sc-dev 2021-04-09 03:54:18 +00:00
Speth Chang
7d74437b07 Merge "allow camera to connect stats service" into sc-dev am: 6c4d851d28
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14108661

Change-Id: I008cdb58623b13e644ad0f2d5e76261271b54dd8
2021-04-09 03:21:05 +00:00
SalmaxChang
6dd6d9872e cbd: Grant to access slog file
Bug: 184646743
Change-Id: I06ecfbc8b9276b3801725f0965b03b849eddbdfc
2021-04-09 03:11:25 +00:00
Speth Chang
6c4d851d28 Merge "allow camera to connect stats service" into sc-dev 2021-04-09 03:01:14 +00:00
TreeHugger Robot
8f541049bc Merge "Create sepolicy for the fingerprint GHBM sysprop" into sc-dev am: 4a3f3550f5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14105112

Change-Id: I627caec9927f15bc7f88af0ab298ad876a01f169
2021-04-09 02:59:26 +00:00
jimsun
17f08b3cba gs101: fix grilservice context
The app is no longer signed with the platform key.

Bug: 162313924
Test: verify gril service function works normally
Change-Id: I9bf0494e65cafca9432665be199c30508d36417e
2021-04-09 02:48:30 +00:00
SalmaxChang
5feb916e47 init: allow to set tcpdump property
init: Unable to set property 'persist.vendor.tcpdump.log.alwayson' from uid:10273 gid:10273 pid:7074: SELinux permission check failed

Bug: 184411489

Change-Id: If449e0d883fa4cbf8dd5ac3a6a84d205e7ac1f31
2021-04-09 10:47:56 +08:00
Nick Sanders
d59ea41ac8 gs101-sepolicy: Allow platform_app to call uwb
This is to fix below avc denial:
  SELinux : avc: denied { find } for pid=10783 uid=10294 name=uwb
  scontext=u:r:platform_app:s0:c512,c768
  tcontext=u:object_r:uwb_service:s0 tclass=service_manager permissive=0

Bug: 184286788
Test: Run Qorvo app without failure
Change-Id: I9673a3eef3f0b0bedb50ef2a5c336d8bfe7620e7
2021-04-09 02:21:20 +00:00
TreeHugger Robot
4a3f3550f5 Merge "Create sepolicy for the fingerprint GHBM sysprop" into sc-dev 2021-04-09 02:11:57 +00:00
Ilya Matyukhin
b9e10feefb Create sepolicy for the fingerprint GHBM sysprop
Bug: 184761756
Bug: 183728349
Test: adb logcat | grep "avc: denied"
Change-Id: I5209bdf859e86a83ac3fa29ecf8bfd8d5b6d88ce
2021-04-08 23:21:22 +00:00
TreeHugger Robot
5d9cf2c7ee Merge "Give hal_dumpstate_default read access to slog files" into sc-dev am: f15b8edbd1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14127725

Change-Id: I523ad11883f342ac65d868a04cbb498d6cfb4609
2021-04-08 22:10:28 +00:00
TreeHugger Robot
f15b8edbd1 Merge "Give hal_dumpstate_default read access to slog files" into sc-dev 2021-04-08 21:40:31 +00:00
Eddie Tashjian
ce90dbfb57 Merge "Add TCP dump permissions." into sc-dev am: 5bbdd82a4e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14119567

Change-Id: I7ca93885708d1ca028aa6addc56da126a0635a87
2021-04-08 18:38:47 +00:00
Eddie Tashjian
5bbdd82a4e Merge "Add TCP dump permissions." into sc-dev 2021-04-08 18:25:30 +00:00
Craig Dooley
cf558dbf33 Merge "Fix SELinux errors with aocd" into sc-dev am: cd888e847f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14105108

Change-Id: Ie4bbc58c3471209486cf380fb6f5ed209bda789c
2021-04-08 18:11:31 +00:00
Craig Dooley
cd888e847f Merge "Fix SELinux errors with aocd" into sc-dev 2021-04-08 17:27:56 +00:00
Chris Fries
1d379dfbc9 Give hal_dumpstate_default read access to slog files
Bug: 184821900

Bugreports require access to "silent log" files.

cp      : type=1400 audit(0.0:20): avc: denied { getattr } for path="/data/vendor/radio/logs/always-on/sbuff_20210408191538.sdm" dev="dm-11" ino=9075 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:vendor_slog_file:s0 tclass=file permissive=0

Change-Id: Iacc4778d1242f304e9519180437ceb0f0e9d350d
2021-04-08 16:27:29 +00:00
Cliff Wu
816fefcd34 Merge "[Bug] Change the sepolicy name for exo_camera_injection" into sc-dev am: ec6bd9449b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14112451

Change-Id: Ice4fe2982eeef2ef8c6f45eebcf4df4305e9bfa0
2021-04-08 14:41:08 +00:00
Cliff Wu
ec6bd9449b Merge "[Bug] Change the sepolicy name for exo_camera_injection" into sc-dev 2021-04-08 14:09:47 +00:00
Craig Dooley
3d4d9159c9 Fix SELinux errors with aocd
Add inotify support for /dev
Fix the aoc vendor property

Bug: 184173298
Change-Id: I40a71edd56b2d51f848085c43ae1d10a4c2c0c4b
2021-04-08 03:59:23 +00:00
Speth Chang
1c64cd89a2 allow camera to connect stats service
Bug: 177076189
Test: build pass
Change-Id: I1132e8a6794d09306b70fe902fc82fbdb7bf9bb4
2021-04-08 11:48:08 +08:00
Eddie Tashjian
b2fb9cdace Add TCP dump permissions.
Copy selinux policy for tcp dump binary from previous Pixel to support
TCP logging on P21 through PixelLogger.

Bug: 184777243
Test: Check PixelLogger TCP dump works.
Change-Id: Id958c8a3e6375a7aae569d6fc94deb9f8072b57b
2021-04-08 03:13:55 +00:00
Chase Wu
dfd9b4376d Merge "update label missing vibrator sys nodes for dual part" into sc-dev am: 682e3a348f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14033446

Change-Id: I2c8db9943b6d619194718226a2efc9a563902fe4
2021-04-08 02:41:21 +00:00
Mat Bevilacqua
8c46fe8986 Merge "Fix selinux permissions errors for UwbService" into sc-dev am: b58243632d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14096432

Change-Id: Iffdeac5d97da71c279e83d61db670b71a7ec6b36
2021-04-08 02:37:23 +00:00
Chase Wu
682e3a348f Merge "update label missing vibrator sys nodes for dual part" into sc-dev 2021-04-08 02:24:28 +00:00
Mat Bevilacqua
b58243632d Merge "Fix selinux permissions errors for UwbService" into sc-dev 2021-04-08 02:09:57 +00:00
TreeHugger Robot
034ecec70b Merge "whitechapel: add permission for pixellogger set audio property" into sc-dev am: 34e0106672
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14100415

Change-Id: I417358ac866cb6c57fd339ba172abbf5840b2b99
2021-04-08 01:57:35 +00:00
Adam Shih
3092cd1cb5 Merge "remove wildcard on kernel modules" into sc-dev am: bf832c3b49
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14108662

Change-Id: I14680d1c5dca483f44c8e95bccbb253cad26a050
2021-04-08 01:57:23 +00:00
TreeHugger Robot
34e0106672 Merge "whitechapel: add permission for pixellogger set audio property" into sc-dev 2021-04-08 01:31:35 +00:00
Adam Shih
bf832c3b49 Merge "remove wildcard on kernel modules" into sc-dev 2021-04-08 01:10:56 +00:00
Eddie Tashjian
61b20db123 Merge "Fix modem logging configuration." into sc-dev am: aa9ecdc436
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14106552

Change-Id: I144856a3f19f521eabb2d5872f2ac189682db079
2021-04-07 19:04:54 +00:00
Mat Bevilacqua
82d7164b5c Fix selinux permissions errors for UwbService
Fixes gmscore access to UwbManager APIs, fixes UwbService access to UWB
HAL APIs, and fixes CTS UwbService presence test.

Bug: 184402100
Test: atest CtsUwbTestCases
Change-Id: I7450242f8b35570c3d5a676c5835b01f74995202
2021-04-07 11:39:31 -07:00
Eddie Tashjian
aa9ecdc436 Merge "Fix modem logging configuration." into sc-dev 2021-04-07 16:56:47 +00:00
Yabin Cui
673d8457be Merge "Move vendor_kernel_modules to public." into sc-dev am: a4af5bb39c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14106320

Change-Id: Ic24db5a261a4e090f14342d59bbd53767ca9485e
2021-04-07 16:35:56 +00:00
Yabin Cui
a4af5bb39c Merge "Move vendor_kernel_modules to public." into sc-dev 2021-04-07 16:14:32 +00:00
Cliff Wu
c0b806fd2d [Bug] Change the sepolicy name for exo_camera_injection
- Change the sepolicy name from platfrom_app to exo_app.
- Selinux avc log:
E/SELinux: avc:  denied  { find } for interface=vendor.google.exo_camera_injection::IExoCameraInjection sid=u:r:exo_app:s0:c248,c256,c512,c768 pid=11479 scontext=u:r:exo_app:s0:c248,c256,c512,c768 tcontext=u:object_r:hal_exo_camera_injection_hwservice:s0 tclass=hwservice_manager permissive=0

Bug: 184736718
Test: Verified exo_camera_injection provider service use cases function as expected; no denials.
Change-Id: I08887b8b6020cb7b3fb3da77cea9a1f453655bea
2021-04-07 15:17:44 +00:00
chenpaul
7376656ff4 logger_app: Remove Pixelize rule
In original design, pixellogger was included in Pixelize mk file,
but the sepolicy are defined by the product specific te file.
These are not aligned and have dependency concern if add new sepolicy rule
in Pixelize te file.

This change remove the Pixelize rule from the device specifc te file.
And the Pixelize rule will be defined by
hardware/google/pixel-sepolicy/logger_app/logger_app.te

Bug: 159650456
Test: Pixel Logger is workable
Change-Id: If13e05b7979f7be02a728b40f8032b81f7c53e06
2021-04-07 21:31:32 +08:00
chasewu
d57865ec05 update label missing vibrator sys nodes for dual part
Bug: 184026143
Test: no Permission denied logs
Signed-off-by: chasewu <chasewu@google.com>
Change-Id: Id75f89f5d0f1568942ef787be295b2fa5b0ca2a2
2021-04-07 09:35:32 +00:00
TreeHugger Robot
d0eb25628f Merge "audio: add support for aocdump to aceess audio state" into sc-dev am: dce254b11d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14098530

Change-Id: I967334de2587971edd213d65f0a987b58b41c0fb
2021-04-07 08:53:38 +00:00
TreeHugger Robot
dce254b11d Merge "audio: add support for aocdump to aceess audio state" into sc-dev 2021-04-07 08:39:49 +00:00
Sriram Kashyap M S
830b2c0009 Allow EdgeTPU NNAPI HAL to access socket files for IPC. am: dcd42938da
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14094386

Change-Id: I9948b7fc288a786f1d86ecb58f6e369929db1c7a
2021-04-07 08:32:38 +00:00
yixuanjiang
7e8fca8041 whitechapel: add permission for pixellogger set audio property
Bug: 184708066
Test: local test
Signed-off-by: yixuanjiang <yixuanjiang@google.com>
Change-Id: I6a43959fc3565db8d2a1679ce722c11f58398794
2021-04-07 07:06:53 +00:00
Adam Shih
a346a7fa34 remove wildcard on kernel modules
Bug: 170786122
Test: Boot with all kernal modules loaded
Change-Id: I0d1d861af290181231223630497788c051c83ecb
2021-04-07 14:10:00 +08:00
Adam Shih
5a648ae1e7 grant debugfs access to insmod under userdebug am: 59ba0f97aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14108655

Change-Id: Ic35524068f3f5d6e2715f6b782063b3a0e16b270
2021-04-07 06:00:38 +00:00
Sriram Kashyap M S
dcd42938da Allow EdgeTPU NNAPI HAL to access socket files for IPC.
Bug: 182524105
Test: ./scripts/run_tests.sh on Oriole.
Change-Id: I85106f004fcee2cccc44609584165a0e2ce654e3
2021-04-07 05:58:58 +00:00
Adam Shih
59ba0f97aa grant debugfs access to insmod under userdebug
Bug: 182086611
Test: boot with the error gone
Change-Id: I555c12b4ccbb61266dc289aac577d0240bde4d28
2021-04-07 11:56:49 +08:00
Adam Shih
88c6c2e183 Merge "remove obsolete mobicore operations" into sc-dev am: 58b693aff0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14098526

Change-Id: Ib68a2892065fa38691af2f8fcb82bd9ef801ce8d
2021-04-07 01:13:57 +00:00
Adam Shih
58b693aff0 Merge "remove obsolete mobicore operations" into sc-dev 2021-04-07 00:48:11 +00:00
Eddie Tashjian
8066a9f471 Fix modem logging configuration.
Missing binder configuration for dmd to return responses to modem
logging control binary, for cases when it needs to get log mask
configuration information.

Bug: 184605350
Test: Check logging works with selinux enabled.
Change-Id: Ia9a80870927fd890266f702b091343b4b4018673
2021-04-06 16:42:03 -07:00
Yabin Cui
05825886f4 Move vendor_kernel_modules to public.
Bug: 166559473
Bug: 183135316
Test: build
Change-Id: Ib62080d3d12aa197571a0697c17f6fd5d981d653
2021-04-06 21:46:27 +00:00
Yabin Cui
e0581165da Merge "Move vendor_kernel_modules to public." 2021-04-06 20:54:56 +00:00
Krzysztof Kosiński
d52ad2a277 Merge "camera: allow the camera hal to set fatp prop" into sc-dev am: 2a96bc108c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14095704

Change-Id: I7dcd91db0f7774070705a56768acae1d04ea6b3c
2021-04-06 06:29:22 +00:00
Adam Shih
63c5fb0115 Merge "update error on ROM 7260355" into sc-dev am: f2d78c7d14
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14098527

Change-Id: Icc615ce54290326d8e416dc21c24ee88374ad801
2021-04-06 06:28:42 +00:00
Yu-Chi Cheng
021fe39d69 Merge "Allowed EdgeTPU service to read system properties related to vendor." into sc-dev am: 26cc7d6499
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14042450

Change-Id: I650b24c2e44106b738dd9149eda59ed9ab9b0aac
2021-04-06 06:28:04 +00:00
Krzysztof Kosiński
2a96bc108c Merge "camera: allow the camera hal to set fatp prop" into sc-dev 2021-04-06 06:23:53 +00:00
Adam Shih
f2d78c7d14 Merge "update error on ROM 7260355" into sc-dev 2021-04-06 05:42:40 +00:00
Yu-Chi Cheng
26cc7d6499 Merge "Allowed EdgeTPU service to read system properties related to vendor." into sc-dev 2021-04-06 05:40:44 +00:00
yixuanjiang
1a25f34051 audio: add support for aocdump to aceess audio state
check audio state for SSR usage

Test: local with enforcing mode
Bug: 184239981
Signed-off-by: yixuanjiang <yixuanjiang@google.com>
Change-Id: I45db556434251576a1d691f1aebf2940fff283fe
2021-04-06 12:41:24 +08:00
Adam Shih
fc69c665ee update error on ROM 7260355
Bug: 184593993
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I49fb702a81f2fcd17e395954f24cd69ab2d272fc
2021-04-06 11:08:59 +08:00
Adam Shih
91c7813ea8 remove obsolete mobicore operations
Bug: 183935443
Test: boot to home with no related avc error
Change-Id: Ief907a7a77f721e58820670e9f37570fd640b473
2021-04-06 10:31:16 +08:00
Grace Chen
63bf6d5ea6 Merge "Add selinux permissions for NFC/eSIM fw upgrade" into sc-dev am: 404937b03b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14015608

Change-Id: Ib0b584200641b8b14150c64e5a783515124fe1d9
2021-04-06 01:05:34 +00:00
Vova Sharaienko
153de8ba1f Merge "exo: updated sepolicy" into sc-dev am: 25f19371aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14065696

Change-Id: I3ea11a6661f28a4b3c56d9b6045b4334bf1c5985
2021-04-06 01:05:11 +00:00
Grace Chen
404937b03b Merge "Add selinux permissions for NFC/eSIM fw upgrade" into sc-dev 2021-04-06 00:28:22 +00:00
Vova Sharaienko
25f19371aa Merge "exo: updated sepolicy" into sc-dev 2021-04-06 00:27:04 +00:00
Zhijun He
60872ac2e9 camera: allow the camera hal to set fatp prop
Test: camera tests
Bug: 184572956
Change-Id: Ie8bc386aa60cf2e46732f2f68c8cb7e86733cb53
2021-04-05 16:37:20 -07:00
Grace Chen
a4b253476c Add selinux permissions for NFC/eSIM fw upgrade
Bug: 183709811
Test: Confirm no selinux permissions errors.
Change-Id: Ibd98558a2446567d4beb1f6b88acafc05c3c1951
2021-04-05 15:38:59 -07:00
Cheng Gu
5ddabea73a Merge "gs101-sepolicy: Allow rlsservice to access range sensor" into sc-dev am: ce42ee4660
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14077743

Change-Id: Iac5f745c35fcdcf77169d77660e538ed52639b75
2021-04-05 21:35:12 +00:00
Cheng Gu
ce42ee4660 Merge "gs101-sepolicy: Allow rlsservice to access range sensor" into sc-dev 2021-04-05 20:45:08 +00:00
TreeHugger Robot
46dac40fc2 Merge "Grant GPU and Fabric node access" into sc-dev am: 71e96842ca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14078302

Change-Id: I004916c1aace1af25a5a110d01350f6de774dd9b
2021-04-03 00:01:54 +00:00
TreeHugger Robot
71e96842ca Merge "Grant GPU and Fabric node access" into sc-dev 2021-04-02 22:59:18 +00:00
Cheng Gu
72011a8a87 gs101-sepolicy: Allow rlsservice to access range sensor
Fix: 184295618
Test: rlsservice_test
Change-Id: Iee4cc5376e0eb67e75ae94cd15b5211a7ec819ef
2021-04-02 22:27:48 +00:00
Wei Wang
852d1dc3c1 Grant GPU and Fabric node access
Bug: 183626384
Test: boot
Signed-off-by: Wei Wang <wvw@google.com>
Change-Id: Ibb700110795f81a2da4358352111f61ef987c29b
2021-04-02 14:22:37 -07:00
Vova Sharaienko
ceafb82c02 exo: updated sepolicy
This allows the Exo to access AIDL Stats service

Bug: 181892307
Test: Build, flash, boot & and logcat | grep "IStats"
Change-Id: I6ae1c37505b312617376bc3c954720c8a1f223d2
2021-04-02 19:13:12 +00:00
Steve Pfetsch
ec75ec5676 Merge "Add new ITouchContextService interface to twoshay" into sc-dev am: 48f88fb26b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13959947

Change-Id: I78f7639e542b60c68deb2651dc43c26a2da6eb98
2021-04-02 18:18:07 +00:00
Steve Pfetsch
48f88fb26b Merge "Add new ITouchContextService interface to twoshay" into sc-dev 2021-04-02 18:01:02 +00:00
Krzysztof Kosiński
3feab91f9a Mark libGralloc4Wrapper.so as same-process HAL. am: 8a1f0bed01
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14065699

Change-Id: I8bbfefe1a144c621dc963e8e84d305c02f7e3a3d
2021-04-02 17:31:59 +00:00
Krzysztof Kosiński
8a1f0bed01 Mark libGralloc4Wrapper.so as same-process HAL.
Updating the library name after upgrade to gralloc version 4.

Bug: 178656396
Test: GCA on oriole
Change-Id: I638b3cd0d7f4759f89a62a1d102cc98d9a3db622
2021-04-01 22:21:44 -07:00
SalmaxChang
977d5bc22a e2fs: Fix avc errors am: e277259f08
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14057402

Change-Id: If45de2ed7b5537fdff112867048c33ec1ced880b
2021-04-02 03:39:03 +00:00
SalmaxChang
e277259f08 e2fs: Fix avc errors
avc: denied { read } for comm="mke2fs" name="sda5" dev="tmpfs" ino=574 scontext=u:r:e2fs:s0 tcontext=u:object_r:efs_block_device:s0 tclass=blk_file
avc: denied { ioctl } for comm="mke2fs" path="/dev/block/sda5" dev="tmpfs" ino=510 ioctlcmd=0x127b scontext=u:r:e2fs:s0 tcontext=u:object_r:efs_block_device:s0 tclass=blk_file

Bug: 184221482
Change-Id: Ic0c697bb591135d9830cd9e32e110cb5b5eb1504
2021-04-02 01:13:27 +00:00
Michael Wright
98c223e862 Add new ITouchContextService interface to twoshay
Bug: 174626987
Test: boot, see no denials

Change-Id: I963d5b77969571182b94c4265653c5d22e124247
2021-04-01 23:32:19 +00:00
TreeHugger Robot
72e640e63d Merge "gs101-sepolicy: Allow binder call rlsservice from camera" into sc-dev am: 8948e498c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14065690

Change-Id: I6a641820adbdbbf5a6e488dd1fc55b82538f53c2
2021-04-01 21:34:20 +00:00
TreeHugger Robot
8948e498c8 Merge "gs101-sepolicy: Allow binder call rlsservice from camera" into sc-dev 2021-04-01 21:04:11 +00:00
Cheng Gu
765e8e2374 gs101-sepolicy: Allow binder call rlsservice from camera
This is to fix below avc denial:
  E SELinux : avc:  denied  { find } for pid=28954 uid=1000
  name=rlsservice scontext=u:r:hal_camera_default:s0
  tcontext=u:object_r:rls_service:s0 tclass=service_manager permissive=0

The solution is similar to ag/7253836 (coral) and ag/10232101 (redbull).

Fix: 183620858
Test: adb shell setprop persist.vendor.camera.dump_range_data 1 &&
      adb shell pkill -f camera, then retest camera
Change-Id: I6bb743c15ee64e3c4ecb8359126b238554aa649e
2021-04-01 21:03:02 +00:00
Yu-Chi Cheng
f27370db65 Allowed EdgeTPU service to read system properties related to vendor.
The EdgeTPU service will read properties including
"vendor.edgetpu.service.allow_unlisted_app". This change added the
related SELinux rule for it.

Bug: 182209462
Test: tested on local Oriole + GCA
Change-Id: I8e7f7975bf144593d00a305554d75a5e0200a428
2021-04-01 11:40:36 -07:00
TreeHugger Robot
025ddae3f5 Merge "remove obsolete entries" into sc-dev am: 3504d25fb6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14057401

Change-Id: I43b31230b9a17bab788d6bb12dceab0874f1c27a
2021-04-01 08:37:51 +00:00
TreeHugger Robot
3504d25fb6 Merge "remove obsolete entries" into sc-dev 2021-04-01 08:05:31 +00:00
Charlie Chen
df4340620f Merge "SELinux error coming from mediacodec when using GCA and secure playback" into sc-dev am: 1a03008756
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14057389

Change-Id: Ia11cf3a7b21e91b79450fb73f32b4016d6bfca91
2021-04-01 07:15:31 +00:00
Adam Shih
f96f0c79a3 remove obsolete entries
Bug: 183560282
Bug: 180858511
Bug: 183161715
Bug: 178331791
Bug: 178433597
Test: pts -m PtsSELinuxTest -t
com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot

Change-Id: Iba208b69389450b8ef69aaecfb799ef696515669
2021-04-01 15:02:46 +08:00
Charlie Chen
1a03008756 Merge "SELinux error coming from mediacodec when using GCA and secure playback" into sc-dev 2021-04-01 06:48:14 +00:00
Gillian Lin
acbe8fea4a Merge "Fix SELinux error from vendor_init" into sc-dev am: cdfffb7213
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14048486

Change-Id: Ibe02e5539c1d72b924489efd818014be29b2ce94
2021-04-01 05:42:24 +00:00
Gillian Lin
cdfffb7213 Merge "Fix SELinux error from vendor_init" into sc-dev 2021-04-01 05:08:50 +00:00
Charlie Chen
5602dfde45 SELinux error coming from mediacodec when using GCA and secure playback
Fixes the following denials:

avc: denied { read } for name="name" dev="sysfs" ino=63727 \
scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 tclass=file \
permissive=0

avc: denied { read } for name="name" dev="sysfs" ino=63743 \
scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 tclass=file \
permissive=0

avc: denied { read } for name="name" dev="sysfs" ino=64010 \
scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 tclass=file \
permissive=0

avc: denied { search } for name="video6" dev="sysfs" ino=64587 \
scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs_video:s0 \
tclass=dir permissive=0

Bug: 182525521
Bug: 184145552
Test: GCA recording works properly, \
      Netflix and ExoPlayer can play videos
Change-Id: Ib7220feedc5031fb0e5c05a2b487da2ddf8b98cd
2021-04-01 02:53:24 +00:00
Eddie Tashjian
e13fc96b1f Merge "Allow radio vendor apps to modify slog props." into sc-dev am: 6171dc4503
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14056485

Change-Id: I0434283eaf0c403548a96da40c050653be779b63
2021-04-01 02:36:46 +00:00
gillianlin
52a776889c Fix SELinux error from vendor_init
03-17 09:12:55.380     1     1 I /system/bin/init: type=1107 audit(0.0:3): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { read } for property=mfgapi.touchpanel.permission pid=0 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=1'

Bug: 182954248
Change-Id: I9ffff1aab20577950cb43c35d788e6a9c9acd571
2021-04-01 10:16:41 +08:00
Eddie Tashjian
6171dc4503 Merge "Allow radio vendor apps to modify slog props." into sc-dev 2021-04-01 01:32:04 +00:00
Ilya Matyukhin
881763c14e Merge "Add sepolicy for Goodix AIDL HAL" into sc-dev am: 52a4f701c1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13990421

Change-Id: I98013d8691da399355ea0f3746d0f239d105f5b2
2021-03-31 22:40:05 +00:00
Yabin Cui
79304978ae Move vendor_kernel_modules to public.
Bug: 166559473
Bug: 183135316
Test: build
Change-Id: Ib62080d3d12aa197571a0697c17f6fd5d981d653
2021-03-31 15:28:10 -07:00
Ilya Matyukhin
52a4f701c1 Merge "Add sepolicy for Goodix AIDL HAL" into sc-dev 2021-03-31 21:57:29 +00:00
Eddie Tashjian
022de778ed Allow radio vendor apps to modify slog props.
Radio vendor silent logging app needs access to the vendor slog
properties in order to configure logging.

Bug: 184102091
Test: Check vendor silent logging app works.
Change-Id: I1a7c590b80d94c0b147743372ba3cd1a0817baf3
2021-03-31 20:57:31 +00:00
Eddie Tashjian
964eb91728 Merge "Add sepolicy for CBRS setup app." into sc-dev am: 606a9ea28d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13990414

Change-Id: If299e9dc9732742f75f26385c82b342caf765cef
2021-03-31 18:47:55 +00:00
Eddie Tashjian
606a9ea28d Merge "Add sepolicy for CBRS setup app." into sc-dev 2021-03-31 18:23:07 +00:00
Zhijun He
1e4b402323 Merge "Revert "Allow Exoplayer access to the vstream-secure heap for secure playback"" into sc-dev am: a7d3992396
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14048500

Change-Id: Ide1c51c17bce737ba9132bb0d58c6aa994d62dcc
2021-03-31 16:24:51 +00:00
Zhijun He
a7d3992396 Merge "Revert "Allow Exoplayer access to the vstream-secure heap for secure playback"" into sc-dev 2021-03-31 15:38:31 +00:00
Charlie Chen
ac3d49d41d Revert "Allow Exoplayer access to the vstream-secure heap for secure playback"
This reverts commit 7c92613185.

Reason for revert: This commit breaks camera recording

Bug: 184154831
Change-Id: Ia4286dab9c5d44c59a3b224e0e24c191eb2be84b
2021-03-31 15:37:48 +00:00
Yu-Chi Cheng
62e7f60757 Merge "Allowed EdgeTPU service and the EdgeTPU NNAPI hal to read /proc/version." into sc-dev am: f9668d2b94
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14035811

Change-Id: Iec2f2d735c6c44e655ef15a0a660a7189e368422
2021-03-31 15:04:44 +00:00
Yu-Chi Cheng
5157e0dc04 Merge "Labelled EdgeTPU service libraries as SP-HAL." into sc-dev am: 53982a4372
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14026058

Change-Id: I1a1a0fd94e4e613c964598de6bb615608fd1a6c5
2021-03-31 15:03:56 +00:00
Yu-Chi Cheng
f9668d2b94 Merge "Allowed EdgeTPU service and the EdgeTPU NNAPI hal to read /proc/version." into sc-dev 2021-03-31 14:26:10 +00:00
Yu-Chi Cheng
53982a4372 Merge "Labelled EdgeTPU service libraries as SP-HAL." into sc-dev 2021-03-31 14:24:54 +00:00
millerliang
7532dd7d1f Fix MMAP audio avc denied am: f01cb384d8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14029670

Change-Id: I6700779ed0c8077b21054f24296e8088b812bf16
2021-03-31 09:43:37 +00:00
TreeHugger Robot
bb571e8736 Merge "remove obsolete entries" into sc-dev am: 6bcc46cec5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14041327

Change-Id: I01fe41955f235712bcb04bf48c7e7c59c699ccd4
2021-03-31 07:52:42 +00:00
millerliang
f01cb384d8 Fix MMAP audio avc denied
03-30 16:45:16.840   738   738 I auditd  : type=1400 audit(0.0:76): avc:
denied { read } for comm="HwBinder:738_2"
name="u:object_r:audio_prop:s0" dev="tmpfs" ino=87
scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:audio_prop:s0
tclass=file permissive=0
03-30 16:45:16.980   644   644 I auditd  : type=1400 audit(0.0:78): avc:
denied { map } for comm="audioserver" path="/dev/snd/pcmC0D0p"
dev="tmpfs" ino=977 scontext=u:r:audioserver:s0
tcontext=u:object_r:audio_device:s0 tclass=chr_file permissive=0

Bug: 165737390
Test: verified with the forrest ROM and error log gone
Change-Id: I1c8721a051844d3410cffa23411a434c832b416e
2021-03-31 15:51:32 +08:00
TreeHugger Robot
6bcc46cec5 Merge "remove obsolete entries" into sc-dev 2021-03-31 07:35:51 +00:00
Charlie Chen
4618354e8d Merge "Allow Exoplayer access to the vstream-secure heap for secure playback" into sc-dev am: c0066d5cce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13988004

Change-Id: Id10cade6955c3592babb70d9c82983f17cb8ff12
2021-03-31 07:23:55 +00:00
Charlie Chen
c0066d5cce Merge "Allow Exoplayer access to the vstream-secure heap for secure playback" into sc-dev 2021-03-31 07:03:16 +00:00
Adam Shih
fcd7cab8c9 Merge "allow vendor_init to set logpersist" into sc-dev am: 4166a4d03b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14033458

Change-Id: I50066c93d92dcfee240f532e690c8bfaeecbcaf4
2021-03-31 06:36:10 +00:00
Adam Shih
781e00d4c0 Merge "update error on ROM" into sc-dev am: 00f6651d46
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14033452

Change-Id: Ia3e2c5ab1c9acd6461c772a5db02bd9d2bf05bf4
2021-03-31 06:35:40 +00:00
Adam Shih
fc7c2e2c3a remove obsolete entries
Bug: 183560076
Bug: 183338483
Bug: 183467306
Bug: 171760597
Test: pts-tradefed run commandAndExit pts -m PtsSELinuxTest -t
com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot

Change-Id: Ib35a05176fccd251dfea8b58304a68b0e9bd6412
2021-03-31 14:28:29 +08:00
Adam Shih
4166a4d03b Merge "allow vendor_init to set logpersist" into sc-dev 2021-03-31 06:03:04 +00:00
Adam Shih
00f6651d46 Merge "update error on ROM" into sc-dev 2021-03-31 06:02:36 +00:00
Charlie Chen
7c92613185 Allow Exoplayer access to the vstream-secure heap for secure playback
Fixes the following denials:

avc: denied { read } for name="name" dev="sysfs" ino=63727 \
scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 tclass=file \
permissive=0

avc: denied { read } for name="name" dev="sysfs" ino=63743 \
scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 tclass=file \
permissive=0

avc: denied { read } for name="name" dev="sysfs" ino=64010 \
scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 tclass=file \
permissive=0

Bug: 182525521
Test: no more denials and able to play video via ExoPlayer App
Change-Id: I21033bc78858fd407c16d2cd2df4549f97273221
2021-03-31 05:41:26 +00:00
Erik Cheng
d11fbf8861 Merge "Grant permission for more camera device nodes" into sc-dev am: 90ed4cc72e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14029672

Change-Id: I478755c4d3d6f1940b8d701323b9243a6353581c
2021-03-31 03:39:32 +00:00
Adam Shih
1db99c759f allow vendor_init to set logpersist
Bug: 184093803
Test: boot with the permission error gone
03-31 11:11:19.447     1     1 E init    : Do not have permissions to
set ...

Change-Id: Idc4023b2fa1b04ae4a4b95a2e105700e89e9dffa
2021-03-31 11:34:12 +08:00
Erik Cheng
90ed4cc72e Merge "Grant permission for more camera device nodes" into sc-dev 2021-03-31 03:09:15 +00:00
Maurice Lam
af24bc97cc Merge "Fix cuttlefish test fail due to sepolicy of Wirecutter" into sc-dev am: 6bc7204b64
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14039290

Change-Id: I9972e90b95ae9f74321f20a5ba18dcf9700958ab
2021-03-31 01:37:50 +00:00
Maurice Lam
6bc7204b64 Merge "Fix cuttlefish test fail due to sepolicy of Wirecutter" into sc-dev 2021-03-31 01:20:12 +00:00
TreeHugger Robot
5268d84b5d Merge "Allow mediacodec to access the vstream-secure DMA-BUF heap" into sc-dev am: a548cd7773
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14035947

Change-Id: Ibf371ed6a35555a222bc18c7121d93699730873a
2021-03-31 01:16:32 +00:00
Xu Han
d0a3644eaa Merge "Allow camera HAL access radioext service" into sc-dev am: f34ff90b48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14025054

Change-Id: Ia978600ea310f05df3d4e3099e87f734ac59ab24
2021-03-31 01:16:18 +00:00
Eddie Tashjian
44799a27ba Add sepolicy for CBRS setup app.
Bug: 182519609
Test: Test CBRS setup
Change-Id: I3ee27dd80eb0484c9cf2c6be0c63aee996383f7f
2021-03-30 18:06:14 -07:00
TreeHugger Robot
a548cd7773 Merge "Allow mediacodec to access the vstream-secure DMA-BUF heap" into sc-dev 2021-03-31 01:05:14 +00:00
Xu Han
f34ff90b48 Merge "Allow camera HAL access radioext service" into sc-dev 2021-03-31 00:45:11 +00:00
Adam Shih
98d890424d update error on ROM
Bug: 184091381
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ia37d49cf2e347a22181058987b0edf8f93457c53
2021-03-31 08:32:56 +08:00
Eddie Tashjian
fd3a304ec2 Merge "Allow radioext to access bluetooth coex hal." into sc-dev am: a5879bec5b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14020221

Change-Id: I76dbea4d35a134a2f32aeea963717f2620a864ac
2021-03-30 23:29:48 +00:00
Eddie Tashjian
a5879bec5b Merge "Allow radioext to access bluetooth coex hal." into sc-dev 2021-03-30 23:03:24 +00:00
Maurice Lam
880dd70064 Fix cuttlefish test fail due to sepolicy of Wirecutter
Need to grant gpu_device dir search permission to be able to render UI
on cuttlefish.

Fixes: 183995046
Test: atest WirecutterTests
Change-Id: I122e541188ce659381769339e3f9e6b720441a92
2021-03-30 22:18:45 +00:00
TreeHugger Robot
3bc4072b14 Merge "sepolicy: allow hwservice to see armnn nnhal." into sc-dev am: 8250408148
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14020212

Change-Id: I930d8db6e73fc5e3d1172ddb063c4f7aeed94c1c
2021-03-30 21:43:53 +00:00
TreeHugger Robot
8250408148 Merge "sepolicy: allow hwservice to see armnn nnhal." into sc-dev 2021-03-30 21:16:27 +00:00
Kevin DuBois
4f5d60403d sepolicy: allow hwservice to see armnn nnhal.
Allows hwservice to see armnn nnhal.

Fixes: 183917925
Test: build, check for absence of error msg in logcat.
Test: run_nnapi_tests for darwinn
Test: CtsNNAPITestCases64 --hal_service_instance=android.hardware.neuralnetworks@1.3::IDevice/google-edgetpu --gtest_filter="TestGenerated*"
Change-Id: I9778e92d6f15e9aa74774c6a8d143969951046eb
2021-03-30 19:58:52 +00:00
Hridya Valsaraju
ef8172c028 Allow mediacodec to access the vstream-secure DMA-BUF heap
This patch fixes the following denial:

avc: denied { read } for comm="HwBinder:727_3" name="vstream-secure"
dev="tmpfs" ino=693 scontext=u:r:mediacodec:s0
tcontext=u:object_r:dmabuf_system_secure_heap_device:s0 tclass=chr_file
permissive=0

Bug: 183681871
Test: build
Change-Id: I018a8d42afe2bb58416b47864b8ffd53de9292cb
2021-03-30 12:41:17 -07:00
Oleg Matcovschi
5debfd67eb Merge "gs101-sepolicy: add sscoredump" into sc-dev am: 20c4be9a06
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14035188

Change-Id: I9d5ee813005d868290310a6fba85930b40064db3
2021-03-30 18:26:15 +00:00
Xu Han
6932235e89 Allow camera HAL access radioext service
Camera needs to query radioext for preferred MIPI clock rate.

Bug: 178038924
Test: camera CTS
Change-Id: Id1dbe8a12d07b5ccfb4fc7db69dda7ce78a163a7
2021-03-30 11:15:44 -07:00
Oleg Matcovschi
20c4be9a06 Merge "gs101-sepolicy: add sscoredump" into sc-dev 2021-03-30 18:02:18 +00:00
Ankit Goyal
04b05f86bc Merge "Fix SELinux denials for arm.graphics AIDL interface" into sc-dev am: 4097aa96ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14026225

Change-Id: I5d43362df8360be6f37bce92123df0c00795feb6
2021-03-30 17:08:17 +00:00
Yu-Chi Cheng
755a1de452 Allowed EdgeTPU service and the EdgeTPU NNAPI hal to read /proc/version.
Both services invoke InitGoogle in order to use google utilities (e.g.
file).  Since InitGoogle reads the kernel info from /proc/version,
this change added the corresponding selinux rules to allow that.

Bug: 183935416
Test: tested on Oriole.
Change-Id: Icb8f3a57e249774b5fad3284413661b04ff7dae6
2021-03-30 10:07:43 -07:00
TreeHugger Robot
948fc1d359 Merge "vendor_init: allow set_prop for vendor_ro_config_default_prop" into sc-dev am: fd3d8c0467
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14025026

Change-Id: Ic26319bc3be5f80b249825f7b1f3abc0e04f63fe
2021-03-30 17:00:17 +00:00
Ankit Goyal
4097aa96ab Merge "Fix SELinux denials for arm.graphics AIDL interface" into sc-dev 2021-03-30 16:27:55 +00:00
TreeHugger Robot
fd3d8c0467 Merge "vendor_init: allow set_prop for vendor_ro_config_default_prop" into sc-dev 2021-03-30 16:06:04 +00:00
Oleg Matcovschi
de30c53177 gs101-sepolicy: add sscoredump
Bug: 183995288
Change-Id: I5363d0c45c183d809c03fe755835c1fc95a33159
2021-03-30 15:31:10 +00:00
Ankit Goyal
b07d84f087 Fix SELinux denials for arm.graphics AIDL interface
Denial example:
03-30 05:44:44.468   490   490 W RenderEngine: type=1400 audit(0.0:4): avc: denied { read } for name="arm.graphics-V1-ndk_platform.so" dev="dm-9" ino=1923 scontext=u:r:surfaceflinger:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0

Bug: 143246001
Test: Build and boot to home
Change-Id: Id7c2bd98aa634f852a21812fb2421a2e96ef7636
2021-03-30 22:22:22 +08:00
Erik Cheng
5f6e263527 Grant permission for more camera device nodes
Bug: 184004655
Test: aosp camera
Change-Id: I52fdb3f7f3d37537461c94b139e72add1a300bb2
2021-03-30 17:34:38 +08:00
Yu-Chi Cheng
93bf9b613b Labelled EdgeTPU service libraries as SP-HAL.
The EdgeTPU service libraries (libedgetpu_client.google.so and
com.google.edgetpu-V1-ndk.so) provide both the system_ext and
vendor variants.  Since these need to be linked by pre-built
applications from /product/, this change labelled them as
the same_process_hal_file in order to allow the applications
to link with the vendor variant.

Bug: 184008444
Test: tested on local Oriole with GCA.
Change-Id: I8c510f51ccc1a76d14978962d72fd91f15bf7a90
2021-03-29 23:22:33 -07:00
Krzysztof Kosiński
946ea5bebc Improve camera HAL SELinux policy. am: dffdeca76d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13986903

Change-Id: Id5e9c98002a9be4293a1e5a381864c35abf3fc2f
2021-03-30 05:36:52 +00:00
Krzysztof Kosiński
dffdeca76d Improve camera HAL SELinux policy.
- Grant access to DMA system heap for Tuscany.
- Reorder statements for more logical grouping.
- Allow access to isolated tmpfs for google3 prebuilts.
- Remove fixed denials.

Bug: 181913550
Bug: 182705901
Test: Inspected logcat, no denials from hal_camera_default
Change-Id: I9bf1ce207c3bcae1b9f9ab0f0072bb7501201451
2021-03-29 20:42:50 -07:00
Aaron Tsai
181f1d3cd0 vendor_init: allow set_prop for vendor_ro_config_default_prop
03-29 15:18:56.425  root     1     1 E init    : Do not have permissions to set 'ro.vendor.config.build_carrier' to 'europen' in property file '/vendor/build.prop': SELinux permission check failed

Bug: 183919837
Test: verified with the forrest ROM and error log gone
Change-Id: I87cc05306f9c038df779040514a879fc2b8ab929
2021-03-30 11:38:19 +08:00
John Tsai
d51c2f2533 Merge "Allowed Camera hal to create debug files" into sc-dev am: f06c0a9f38
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14016760

Change-Id: Ifff513d0434a7c17fd9e079b8a2ade7be4d34541
2021-03-30 03:24:52 +00:00
John Tsai
f06c0a9f38 Merge "Allowed Camera hal to create debug files" into sc-dev 2021-03-30 02:51:28 +00:00
Oleg Matcovschi
ef2a28f9a9 Merge "vendor_init: allow set_prop for vendor_ssrdump_prop" into sc-dev am: 5a504a1708
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13999606

Change-Id: I0f61d009637a57ade59a591f31aa15008727ed5a
2021-03-30 01:13:37 +00:00
Oleg Matcovschi
5a504a1708 Merge "vendor_init: allow set_prop for vendor_ssrdump_prop" into sc-dev 2021-03-30 00:39:12 +00:00
Oleg Matcovschi
a91ba31808 vendor_init: allow set_prop for vendor_ssrdump_prop
Bug: 183686188
Change-Id: I6a22419909cd85c55bd1c7e500b06f0420d0ec86
Signed-off-by: Oleg Matcovschi <omatcovschi@google.com>
2021-03-30 00:28:04 +00:00
Oleg Matcovschi
cf08b32308 Merge changes from topic "b180760068" into sc-dev am: 3872f8015f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14017040

Change-Id: I9b89eea1dfd61d9789f396232d744d9db5da4ddf
2021-03-29 22:50:27 +00:00
Oleg Matcovschi
994f5fc31e vendor: remove sscoredump policies am: 6862b8e239
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14006443

Change-Id: Icd0bba0cb154fc525d261f73c2f2ef24ef24bc79
2021-03-29 22:50:25 +00:00
Oleg Matcovschi
3872f8015f Merge changes from topic "b180760068" into sc-dev
* changes:
  genfs_contexts: add sscoredump per-subsystem policies
  vendor: remove sscoredump policies
2021-03-29 22:05:23 +00:00
Eddie Tashjian
ffd2cf4eb7 Allow radioext to access bluetooth coex hal.
Allow radio extension hal to forward coexistence message from modem to
bluetooth hal.

Bug: 183978772
Test: Check selinux denials
Change-Id: Idc288ce2a1fdcf380301e2d7c10ea03af520e4d0
2021-03-29 15:03:40 -07:00
Alex Hong
f8f1b8498c Merge "update error on ROM 7242124" into sc-dev am: 122849026f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14018649

Change-Id: Id86ffa0c2c73356efa4412bc4809cffc91d6d4a7
2021-03-29 17:19:51 +00:00
Oleg Matcovschi
005fafff5b genfs_contexts: add sscoredump per-subsystem policies
Bug: 180760068
Signed-off-by: Oleg Matcovschi <omatcovschi@google.com>
Change-Id: I448dd8d5ea1e11eb774c62e129eb4c7896a5bd15
2021-03-29 10:04:57 -07:00
Alex Hong
122849026f Merge "update error on ROM 7242124" into sc-dev 2021-03-29 16:37:47 +00:00
Alex Hong
68569d8fe3 update error on ROM 7242124
Bug: 183935416
Bug: 183935302
Bug: 183935382
Bug: 183935443
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Iccdfc8a9eea3e8d52bebc89ca1eafcd2ec26e3c6
2021-03-29 22:18:39 +08:00
Hsiaoan Hsu
3a4feeb1b9 Fix netutils_wrapper avc denied am: c9f580b083
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14011940

Change-Id: If6d570e2278ec3a4da2f308e5e2c5e1a780528c0
2021-03-29 11:30:53 +00:00
JohnCH Tsai
522c283dee Allowed Camera hal to create debug files
For steadiface and eis, they needs to create debug folders and files
under /data/vendor/camera.

Bug: 183708219
Test: GCA and check debug files
Change-Id: I5b87120702278199ac4f98cfa9114be47c760433
2021-03-29 15:26:44 +08:00
Hsiaoan Hsu
c9f580b083 Fix netutils_wrapper avc denied
avc denied log:
03-25 22:30:40.226  root 22962 22962 W iptables-wrappe: type=1400 audit(0.0:2269): avc: denied { read write } for path="/dev/umts_wfc1" dev="tmpfs" ino=748 scontext=u:r:netutils_wrapper:s0 tcontext=u:object_r:pktrouter_device:s0 tclass=chr_file permissive=0

03-25 22:30:40.226  root 22962 22962 W iptables-wrappe: type=1400 audit(0.0:2270): avc: denied { read write } for path="socket:[1017]" dev="sockfs" ino=1017 scontext=u:r:netutils_wrapper:s0 tcontext=u:r:pktrouter:s0 tclass=netlink_route_socket permissive=0

03-25 22:30:40.226  root 22962 22962 W iptables-wrappe: type=1400 audit(0.0:2274): avc: denied { read write } for path="socket:[655847]" dev="sockfs" ino=655847 scontext=u:r:netutils_wrapper:s0 tcontext=u:r:pktrouter:s0 tclass=udp_socket permissive=0

Bug: 183713618
Test: WFC/WFC handover

Change-Id: I363bf009c3b05ac2ceccb5580e786fcebf0f5631
2021-03-29 05:22:41 +00:00
Oleg Matcovschi
6862b8e239 vendor: remove sscoredump policies
Bug: 180760068
Signed-off-by: Oleg Matcovschi <omatcovschi@google.com>
Change-Id: Ib8d360b227286bdea7de00125ef2ed6ad7978e67
2021-03-28 21:26:34 -07:00
TreeHugger Robot
a6b062f1e7 Merge "SELinux: Grant camera HAL TEE access" into sc-dev am: 6d56fb7391
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13997191

Change-Id: I4aaa68feccc12ff6ee9a335b26558663b5b00e48
2021-03-26 06:39:36 +00:00
TreeHugger Robot
6d56fb7391 Merge "SELinux: Grant camera HAL TEE access" into sc-dev 2021-03-26 06:21:05 +00:00
Kevin DuBois
25b3b67b30 Merge "hal_neuralnetworks_armnn: allow GPU access" into sc-dev am: 978b3b4e9b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13994637

Change-Id: I82f36fd0432c06f3575130f0d183f94e4039a176
2021-03-25 22:36:09 +00:00
Kevin DuBois
978b3b4e9b Merge "hal_neuralnetworks_armnn: allow GPU access" into sc-dev 2021-03-25 22:01:42 +00:00
Jidong Sun
eda148cd47 SELinux: Grant camera HAL TEE access
Bug: 183714594
Signed-off-by: Jidong Sun <jidong@google.com>
Change-Id: I84fd3a7cf18bc3b574632b665be86c0fcb505704
2021-03-25 20:01:12 +00:00
Kevin DuBois
9c8327de8d hal_neuralnetworks_armnn: allow GPU access
Neuralnetworks for armnn driver needs GPU access in order to issue
OpenCL commands to GPU. Add rule that allows this.

Fixes: 183673130
Test: setenforce 1, stop and start hal, see that hal started.
Change-Id: I9be0ee4326e5e128a37f2c4df0878f8fbbea7f8d
2021-03-25 11:10:40 -07:00
Krzysztof Kosiński
4650213e1e Merge "Mark libGrallocWrapper.so as same-process HAL." into sc-dev am: 74bc4bf947
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13986904

Change-Id: I8839372f0a5f181089cb56192f52b51d660f7731
2021-03-25 17:18:23 +00:00
Krzysztof Kosiński
74bc4bf947 Merge "Mark libGrallocWrapper.so as same-process HAL." into sc-dev 2021-03-25 16:34:28 +00:00
Terry Huang
d426c1dd4f Merge "Fix VT issue avc denied" into sc-dev am: bea1d217b5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13992794

Change-Id: I6b8750edc7d4de209133c1a9a10a5fe5e547bd7e
2021-03-25 16:02:47 +00:00
Terry Huang
bea1d217b5 Merge "Fix VT issue avc denied" into sc-dev 2021-03-25 15:21:53 +00:00
Steven Liu
3dee8cecad Merge "Add sepolicy for the wifi firmware config OTA feature" into sc-dev am: acf218cb51
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13983837

Change-Id: I00b8c3c91c9373168d80a7fda2268add40375310
2021-03-25 15:05:44 +00:00
Steven Liu
acf218cb51 Merge "Add sepolicy for the wifi firmware config OTA feature" into sc-dev 2021-03-25 14:40:18 +00:00
terrycrhuang
3316a7135d Fix VT issue avc denied
03-25 19:59:12.604 E SELinux : avc:  denied  { find } for pid=3822
uid=10264 name=media.camera
scontext=u:r:vendor_ims_app:s0:c8,c257,c512,c768
tcontext=u:object_r:cameraserver_service:s0 tclass=service_manager
permissive=0

03-25 19:59:19.283 E SELinux : avc:  denied  { find } for pid=3822
uid=10264 name=media.player
scontext=u:r:vendor_ims_app:s0:c8,c257,c512,c768
tcontext=u:object_r:mediaserver_service:s0 tclass=service_manager
permissive=0

Bug: 183698793
Test: Manual

Change-Id: I5ccff82df99b6bcb3883b880ef1fbfe8710b2e99
2021-03-25 21:22:33 +08:00
terrycrhuang
79d2510748 Fix pktrouter avc denied am: dbef5fe678
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13992789

Change-Id: I42fde09a926575d0c2cff90463e4eeccea436b55
2021-03-25 10:26:22 +00:00
terrycrhuang
b80a40f7bc Fix vendor.pktrouter avc denied am: 986fe49987
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13992787

Change-Id: I99535459516df8cfc6289585e0211ccc80fbbbca
2021-03-25 09:23:59 +00:00
terrycrhuang
dbef5fe678 Fix pktrouter avc denied
03-25 15:28:05.656 I auditd  : type=1400 audit(0.0:48): avc: denied {
net_raw } for comm="wfc-pkt-router" capability=13
scontext=u:r:pktrouter:s0 tcontext=u:r:pktrouter:s0 tclass=capability
permissive=0

Bug: 183664765
Test: Manual

Change-Id: I378b2c0ed8af9e4ba1accfdcc5380a1f9f066b81
2021-03-25 15:56:35 +08:00
terrycrhuang
986fe49987 Fix vendor.pktrouter avc denied
03-24 19:45:17.324 E init : Do not have permissions to set
'vendor.pktrouter' to '1' in property file '/vendor/build.prop': SELinux
permission check failed

Bug: 183664765
Test: Manual

Change-Id: Ibf0f764c905c4797b179dff2cdd1faa98fae5bc0
2021-03-25 14:36:05 +08:00
TreeHugger Robot
80df40415d Merge "Fix avc denied for vendor_ims_app" into sc-dev am: f112196d64
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13987992

Change-Id: Id635d595a0551821b794690f990325fcc486db48
2021-03-25 05:06:18 +00:00
Aaron Tsai
239310d8a6 Fix selinux errors for rild am: d135bde241
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13975653

Change-Id: I595e55a3db7bb5c5570b7c25f3aa1519b97cb061
2021-03-25 05:04:39 +00:00
TreeHugger Robot
f112196d64 Merge "Fix avc denied for vendor_ims_app" into sc-dev 2021-03-25 04:59:51 +00:00
Ilya Matyukhin
3233492f78 Add sepolicy for Goodix AIDL HAL
Bug: 183054007
Test: adb logcat | grep "avc: denied"
Change-Id: Iea9a652dbc78c488a72600b4226140ccf123b004
2021-03-24 21:00:41 -07:00
terrycrhuang
9778af3cef Fix avc denied for vendor_ims_app
03-25 09:24:16.810 E SELinux : avc:  denied  { find } for pid=3681
uid=10272 name=media.audio_flinger
scontext=u:r:vendor_ims_app:s0:c16,c257,c512,c768
tcontext=u:object_r:audioserver_service:s0 tclass=service_manager
permissive=0

Bug: 183593669
Test: Manual

Change-Id: I9d659b475d5d19ae5dd1642974f9064c152ee4b0
2021-03-25 10:57:57 +08:00
Aaron Tsai
d135bde241 Fix selinux errors for rild
03-10 09:33:20.380   849   849 I rild_exynos: type=1400 audit(0.0:11): avc: denied { map } for path="/dev/__properties__/u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1
03-10 09:33:20.380   849   849 I rild_exynos: type=1400 audit(0.0:10): avc: denied { getattr } for path="/dev/__properties__/u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1
03-10 09:33:20.380   849   849 I rild_exynos: type=1400 audit(0.0:9): avc: denied { open } for path="/dev/__properties__/u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1
03-10 09:33:20.380   849   849 I rild_exynos: type=1400 audit(0.0:8): avc: denied { read } for name="u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1
[   16.814981] type=1400 audit(1615340000.380:8): avc: denied { read } for comm="rild_exynos" name="u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1
[   16.815057] type=1400 audit(1615340000.380:9): avc: denied { open } for comm="rild_exynos" path="/dev/__properties__/u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1
[   16.815089] type=1400 audit(1615340000.380:10): avc: denied { getattr } for comm="rild_exynos" path="/dev/__properties__/u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1
[   16.815108] type=1400 audit(1615340000.380:11): avc: denied { map } for comm="rild_exynos" path="/dev/__properties__/u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1

Bug: 182320172
Test: verified with the forrest ROM and error log gone
Change-Id: Ib0300629de5a0186c4f9fd2f603be52aefd085bc
2021-03-25 02:47:16 +00:00
TreeHugger Robot
3c3585d3a6 Merge "Fix hangup Volte call fail" into sc-dev am: 14ff0e6ac5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13987985

Change-Id: Ie640695ab69c9b7a43f62dc340b83977aa884184
2021-03-25 02:36:29 +00:00
Eddie Tashjian
4cdfd5b4ac Merge "Allow init to set RIL properties." into sc-dev am: 5dbe586a1d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13986934

Change-Id: Ib1366e4bb178ae6111ceb4e7b3219cac9c09765f
2021-03-25 02:35:42 +00:00
TreeHugger Robot
14ff0e6ac5 Merge "Fix hangup Volte call fail" into sc-dev 2021-03-25 02:19:49 +00:00
Eddie Tashjian
5dbe586a1d Merge "Allow init to set RIL properties." into sc-dev 2021-03-25 01:51:20 +00:00
terrycrhuang
8b3601f87d Fix hangup Volte call fail
03-24 19:45:59.920 I auditd  : type=1107 audit(0.0:35): uid=0
auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set }
for property=persist.radio.call.audio.output pid=2328 uid=10260
gid=10260 scontext=u:r:vendor_ims_app:s0:c4,c257,c512,c768
tcontext=u:object_r:radio_prop:s0 tclass=property_service permissive=0'

03-24 19:45:59.923 W libc    : Unable to set property
"persist.radio.call.audio.output" to "0": error code: 0x18

Bug: 183593669
Bug: 182978936
Test: Manual
Change-Id: I7f4491348ca6d97e0997f51359f1c42d98d61c75
2021-03-25 05:33:56 +08:00
Krzysztof Kosiński
fc18626210 Merge "Revert "Add lazy service binary to hal_camera_default domain."" into sc-dev am: 1314a15cb9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13985005

Change-Id: I38a71c99ebdf718b396e49fd1cf4489b6a1525f7
2021-03-24 21:33:06 +00:00
Krzysztof Kosiński
1314a15cb9 Merge "Revert "Add lazy service binary to hal_camera_default domain."" into sc-dev 2021-03-24 20:57:35 +00:00
Eddie Tashjian
d3579bb3ec Allow init to set RIL properties.
Init sequence needs to set several properties under *vendor.ril*. Change
permission to set instead of get.

Bug: 183633407
Test: Check selinux denials.
Change-Id: Id7ecff48f36ee87f251ee6121f1782fa57b39844
2021-03-24 13:35:11 -07:00
Krzysztof Kosiński
9818e25500 Revert "Add lazy service binary to hal_camera_default domain."
This reverts commit d02e73b966.

Reason for revert: This HAL is actually not intended to be present
on GS101 devices. The denial logs come from people who did "adb sync"
after building binaries that are not included in the device image.
SELinux should not allow access to this HAL.

Change-Id: Id179023eeb79d749a0bde13e1d83af41fc42780e
2021-03-24 15:59:55 +00:00
Steven Liu
c6eca53b9e Add sepolicy for the wifi firmware config OTA feature
Bug: 177083009
Test: the OTA updated files can be updated and applied.
Change-Id: I2f269dbc146aae41cab57abd568af7e26fd23876
2021-03-24 06:59:08 -07:00
Krzysztof Kosiński
7e469b9941 Mark libGrallocWrapper.so as same-process HAL.
This library is indirectly loaded by lib_aion_buffer.so, which
is an ABI-stable wrapper for some vendor-specific APIs used by
GCA (the Pixel camera app)

Bug: 182962346
Test: ran GCA on oriole
Change-Id: Ida5171110081cac0ac13ea769f9d434499faebe6
2021-03-24 06:42:05 -07:00
Adam Shih
5838ee55bc allow bootctl to access devinfo am: 5b5a004593
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13981527

Change-Id: If110be4ad37cedc65fac2e737165d36f3d8881d4
2021-03-24 13:26:53 +00:00
Adam Shih
5b5a004593 allow bootctl to access devinfo
[   22.798274] type=1400 audit(1616580486.404:10): avc:
denied { write } for comm="boot@1.2-servic" name="sdd1"
dev="tmpfs" ino=705 scontext=u:r:hal_bootctl_default:s0
tcontext=u:object_r:devinfo_block_device:s0 tclass=blk_file
permissive=1
Bug: 177882574
Test: boot to home after factory reset
Change-Id: I6774ffd46a74c75b2fee962757901ea97e9033fe
2021-03-24 10:32:37 +00:00
SalmaxChang
68d69074e3 mds: Update radio_vendor_data_file permission am: 3a27f85dc8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13975652

Change-Id: Id5fbdc1545c5d144d9d51329754b2697b040a020
2021-03-24 10:10:12 +00:00
SalmaxChang
3a27f85dc8 mds: Update radio_vendor_data_file permission
Bug: 181174034
Change-Id: Ie22e19b179d41a97198c07cb922dd5c60f095ad4
2021-03-24 09:23:18 +00:00
Adam Shih
398ee2091b Merge "fix reset problem caused by ims" into sc-dev am: c58780d645
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13975655

Change-Id: I7f97b020b8ccf4ec69cab4018f1e27591fe51f86
2021-03-24 08:51:27 +00:00
Adam Shih
c58780d645 Merge "fix reset problem caused by ims" into sc-dev 2021-03-24 08:13:23 +00:00
Adam Shih
692faeedaf fix reset problem caused by ims
Bug: 183209764
Test: unplug device, reboot, enter sim code and survived
Change-Id: I23c39290731a76ec4a364e4f92d3994254d70eae
2021-03-24 14:31:31 +08:00
TreeHugger Robot
72c6df70bf Merge "Remove tracking_denials/bootanim.te" into sc-dev am: e8ac32ef2e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13979105

Change-Id: I1190b5b123aea72d0e569e292537fec5fa5291b3
2021-03-24 05:45:24 +00:00
TreeHugger Robot
5a5f5b98d5 Merge "work around for uwb" into sc-dev am: 9e41379b9e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960253

Change-Id: I9490b8021f180b9b5aec5db98a7ee49453497993
2021-03-24 05:44:46 +00:00
TreeHugger Robot
e8ac32ef2e Merge "Remove tracking_denials/bootanim.te" into sc-dev 2021-03-24 05:06:44 +00:00
TreeHugger Robot
9e41379b9e Merge "work around for uwb" into sc-dev 2021-03-24 05:01:12 +00:00
SalmaxChang
dfd490b604 vendor_init: Update tracking denials am: 14d068b640
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13899374

Change-Id: If2aa80b11fe37122ce072c2a019dbe2aaea3aa2e
2021-03-24 04:02:11 +00:00
TreeHugger Robot
57226560a8 Merge "update error on ROM 7230950" into sc-dev am: 1bc06a6de6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13977868

Change-Id: I3ae2d34b90ddc511af1056141d5decee00dcf2bc
2021-03-24 04:01:31 +00:00
SalmaxChang
14d068b640 vendor_init: Update tracking denials
Bug: 176528556
Change-Id: I1ad621c14a1705420f63aeb63b0c68452d991f93
2021-03-24 03:49:03 +00:00
Jesse Hall
6efd563361 Remove tracking_denials/bootanim.te
The action that was being denied no longer occurs.

Bug: 180567480
Test: boot past bootanim, check audit log
Change-Id: I58a1b307538a1198d69120c0797a9e0542f30bdf
2021-03-23 20:43:59 -07:00
TreeHugger Robot
1bc06a6de6 Merge "update error on ROM 7230950" into sc-dev 2021-03-24 03:28:03 +00:00
TreeHugger Robot
e1a5e4c82c Merge "Add se-policy for new GRIL service and RadioExt hal APIs" into sc-dev am: fb3fe04feb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13974811

Change-Id: I6ab45de430900ff6c0ce18eedf678d34fac1cbcd
2021-03-24 02:55:47 +00:00
TreeHugger Robot
abb3620d8f Merge "Add the sepolicy for UWB hal" into sc-dev am: 40df476219
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13874847

Change-Id: I9c6caf5690cb247d9d2ec079cbe829169e60f181
2021-03-24 02:55:02 +00:00
TreeHugger Robot
fb3fe04feb Merge "Add se-policy for new GRIL service and RadioExt hal APIs" into sc-dev 2021-03-24 02:39:23 +00:00
TreeHugger Robot
40df476219 Merge "Add the sepolicy for UWB hal" into sc-dev 2021-03-24 02:13:43 +00:00
Adam Shih
d28724fdb1 update error on ROM 7230950
Bug: 183560076
Bug: 183560282
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I329cd3f1e4c5eed986c21724bf42730bed46ab3b
2021-03-24 10:03:35 +08:00
TreeHugger Robot
3a05b06511 Merge "Fix denials for ril_config_service_app" into sc-dev am: 835a255138
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960264

Change-Id: I5494cde9c8f7b4c04220d19e5b614a7560407445
2021-03-24 01:35:47 +00:00
TreeHugger Robot
13b3e58059 Merge "Allow Exoplayer access to the vstream-secure heap for secure playback" into sc-dev am: d70813575b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13974361

Change-Id: I5b7c199261a4f46f3ab6ca6caa019a41889cf7cc
2021-03-24 01:23:22 +00:00
Adam Shih
77f6de6ea6 work around for uwb
Bug: 171943668
Test: dw3000 kthread and uwb service came up fine
Change-Id: I4288e07b9b9a2741bfe64b35bd4681ffe4a66039
2021-03-24 00:41:27 +00:00
TreeHugger Robot
835a255138 Merge "Fix denials for ril_config_service_app" into sc-dev 2021-03-24 00:41:22 +00:00
TreeHugger Robot
d70813575b Merge "Allow Exoplayer access to the vstream-secure heap for secure playback" into sc-dev 2021-03-24 00:26:19 +00:00
Christine Franks
697b71b400 Merge "Add uhid access for exo" into sc-dev am: 28ab0ae8c3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13933043

Change-Id: Idb4c0e31fa115cc5ff381ed17872f8dce21a2590
2021-03-23 22:33:21 +00:00
labib
a0c5ec2305 Add se-policy for new GRIL service and RadioExt hal APIs
Bug: 172294179
Change-Id: Ief4c7ec7959676126f35037006016e1454a34f5e
2021-03-24 06:16:03 +08:00
Christine Franks
28ab0ae8c3 Merge "Add uhid access for exo" into sc-dev 2021-03-23 21:57:15 +00:00
Hridya Valsaraju
fb862c0888 Allow Exoplayer access to the vstream-secure heap for secure playback
Fixes the following denials:

avc: denied { read } for name="vstream-secure" dev="tmpfs"
ino=736 scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:dmabuf_heap_device:s0 tclass=chr_file permissive=0
app=com.google.android.exoplayer.demo
avc: denied { read } for name="vstream-secure" dev="tmpfs" ino=736
scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:dmabuf_heap_device:s0
tclass=chr_file permissive=0 app=com.google.android.exoplayer.demo
avc: denied { read } for name="vstream-secure" dev="tmpfs" ino=736
scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:dmabuf_heap_device:s0
tclass=chr_file permissive=0 app=com.google.android.exoplayer.demo

Bug: 178865267
Test: no more denials
Change-Id: I6612bd56c49558b13e2ae72cfbf3552715729e7a
Signed-off-by: Hridya Valsaraju <hridya@google.com>
2021-03-23 14:37:01 -07:00
Greg Kaiser
d10bc2029c Merge "Revert "Add se-policy for new GRIL service and RadioExt hal APIs"" into sc-dev am: 9ec1be4eb9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13974086

Change-Id: Ie04f0e9e1d4df1d225a53da99d6b8b9a81710659
2021-03-23 19:49:49 +00:00
Greg Kaiser
9ec1be4eb9 Merge "Revert "Add se-policy for new GRIL service and RadioExt hal APIs"" into sc-dev 2021-03-23 19:12:13 +00:00
LABIB MD RASHID
97bfa35d4f Revert "Add se-policy for new GRIL service and RadioExt hal APIs"
Revert "BT SAR client implementation for GRIL"

Revert submission 13944227-gril-bt-sar

Reason for revert: TreeHugger builds failing due to changes requiring se-linux permissions for GRIL. Need to add permissions for more devices before attempting this change again.

Reverted Changes:
I556657928:Add se-policy for new GRIL service and RadioExt ha...
I96cf9176a:BT SAR client implementation for GRIL

Change-Id: Ib800962d07d305a5a42ee40f019535f663beacd1
2021-03-23 19:00:57 +00:00
TreeHugger Robot
f87d5740f6 Merge "Add se-policy for new GRIL service and RadioExt hal APIs" into sc-dev am: 25e39f7d37
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13944227

Change-Id: If101de29d62c1fa07ba39c501c9954fbc2510630
2021-03-23 16:30:55 +00:00
TreeHugger Robot
25e39f7d37 Merge "Add se-policy for new GRIL service and RadioExt hal APIs" into sc-dev 2021-03-23 16:02:35 +00:00
TreeHugger Robot
fcf368d2dd Merge "modem_svc_sit: Fix avc errors" into sc-dev am: 3bf9cddeb7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960255

Change-Id: Icf37a2009e9fe585e703d0492686643100ba35a5
2021-03-23 11:47:41 +00:00
TreeHugger Robot
6ba162f8c3 Merge "update error on ROM 7228492" into sc-dev am: 1cf98386f6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960254

Change-Id: I7609764ad40566346526f40be15310492598bca3
2021-03-23 11:47:16 +00:00
TreeHugger Robot
3bf9cddeb7 Merge "modem_svc_sit: Fix avc errors" into sc-dev 2021-03-23 11:16:25 +00:00
TreeHugger Robot
1cf98386f6 Merge "update error on ROM 7228492" into sc-dev 2021-03-23 11:16:22 +00:00
Hongbo Zeng
4211025746 Fix denials for ril_config_service_app
- RilConfigService is a common google project in vendor/google/tools,
  sync related rules from the previous project(ag/6697240, ag/7153946)
  to allow it to:
  (1) receive intents
  (2) update database files under /data/vendor/radio
  (3) update RIL properties
- Two new denials found in this project only:
  avc: denied { search } for name="data" dev="dm-7" ino=93
      scontext=u:r:ril_config_service_app:s0
      tcontext=u:object_r:system_data_file:s0:c512,c768 tclass=dir permissive=1
  avc: denied { search } for name="0" dev="dm-7" ino=192
      scontext=u:r:ril_config_service_app:s0
      tcontext=u:object_r:user_profile_root_file:s0:c512,c768 tclass=dir permissive=1

Bug: 182715439
Test: apply these rules and check there is no denial for
      RilConfigService finally
Change-Id: Icfb0e121d0d11600bda900dff0511187518105ab
2021-03-23 17:22:33 +08:00
labib
6516f369ff Add se-policy for new GRIL service and RadioExt hal APIs
Bug: 172294179
Change-Id: I556657928caa441b3530bb371902d5f4ce0be257
2021-03-23 09:20:18 +00:00
Adam Shih
b182a7166e permission required for adb sideload to work am: fd45b5ef27
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960252

Change-Id: Ib93eae652d1e1c3cf636a3e53cd0593ade481c64
2021-03-23 08:40:29 +00:00
SalmaxChang
b4fbecb9fb modem_svc_sit: Fix avc errors
avc: denied { search } for comm="modem_svc_sit" name="vendor" dev="tmpfs" ino=2 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir
avc: denied { write open } for path="/mnt/vendor/modem_userdata/replay/dds.bin" dev="sda7" ino=14 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:modem_userdata_file:s0 tclass=file
avc: denied { remove_name } for name="dds.bin" dev="sda7" ino=14 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:modem_userdata_file:s0 tclass=dir

Bug: 183467321
Change-Id: Ic5b8fcf324bb0a8b0f6312b3ae755d73a53f0e9c
2021-03-23 15:11:38 +08:00
Adam Shih
01376cbe06 update error on ROM 7228492
Bug: 183467306
Bug: 183467321
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ia8473c1a4e1f56cc52bc765dea56e3bc497c7cc9
2021-03-23 15:11:24 +08:00
Adam Shih
fd45b5ef27 permission required for adb sideload to work
Bug: 183174452
Test: do adb sideload under enforcing mode
Change-Id: I2ba05b22729894d2677859fd33a6370f2ff9d409
2021-03-23 14:23:44 +08:00
TreeHugger Robot
22ab0cc731 Merge "permissions required for OTA" into sc-dev am: 9c46632091
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13960245

Change-Id: I2b125c5603680ecbea34ceb6ef0ccf89533540aa
2021-03-23 05:08:23 +00:00
TreeHugger Robot
9c46632091 Merge "permissions required for OTA" into sc-dev 2021-03-23 04:45:37 +00:00
Krzysztof Kosiński
f6fddb20ad Merge "Add lazy service binary to hal_camera_default domain." into sc-dev am: 61e515e4ce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13957807

Change-Id: I10fa91098ff56ab9ef01409647f097ca484bc41f
2021-03-23 02:09:47 +00:00
Adam Shih
7314a7b522 permissions required for OTA
Bug: 183174452
Test: do OTA under enforcing mode
Change-Id: I0edf7703713e24351f57ef0e68096ca03c59e6f8
2021-03-23 09:49:02 +08:00
Krzysztof Kosiński
61e515e4ce Merge "Add lazy service binary to hal_camera_default domain." into sc-dev 2021-03-23 01:31:50 +00:00
Krzysztof Kosiński
d02e73b966 Add lazy service binary to hal_camera_default domain.
Avoids denial logs from init on service (re)start. See bug for
details.

Bug: 183441948
Test: Restarted the service
Change-Id: I9ee9b8099d2ffae4d6a115552800fa844c192132
2021-03-22 16:25:57 -07:00
TreeHugger Robot
123411f826 Merge "allow bootctl to read devinfo" into sc-dev am: 8d9094345e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13946008

Change-Id: I079480b87535460a59f3eff2164e5f73f3b466d8
2021-03-22 14:25:43 +00:00
TreeHugger Robot
b7322c9c6b Merge "update error on ROM 7225160" into sc-dev am: df64c08266
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13944228

Change-Id: I7f4fbec0c249cc02ceb8f853a1f309c1f5096dc0
2021-03-22 13:56:52 +00:00
David Li
da5e908d0f Merge "audio: add /dev/acd-audio_dcdoff_ref for audio effect visualizer" into sc-dev am: 6dce033807
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13921067

Change-Id: I16da30f8f4d31bcfcd1697a33bdb976d903ae684
2021-03-22 13:54:42 +00:00
TreeHugger Robot
8d9094345e Merge "allow bootctl to read devinfo" into sc-dev 2021-03-22 09:16:23 +00:00
Adam Shih
f05cdba220 allow bootctl to read devinfo
Bug: 182705986
Test: boot with no relevant log found
Change-Id: I6d4c699fe1492f8fbcd5b8a9ba98da2fade57bd7
2021-03-22 16:10:22 +08:00
TreeHugger Robot
df64c08266 Merge "update error on ROM 7225160" into sc-dev 2021-03-22 02:52:56 +00:00
David Li
6dce033807 Merge "audio: add /dev/acd-audio_dcdoff_ref for audio effect visualizer" into sc-dev 2021-03-22 02:07:33 +00:00
Adam Shih
38e55f2331 update error on ROM 7225160
Bug: 183338483
Bug: 183338543
Bug: 183338421
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I16548c00f2a2c38b190664a5cc20ae67d04a8454
2021-03-22 09:52:45 +08:00
Christine Franks
a334f079cc Add uhid access for exo
This is required to write input events to /dev/uinput.

Bug: 182854143
Test: n/a
Change-Id: Icd9714a61be62d40d1b3e5e9d7dcb33ce5f0bf6b
2021-03-19 23:31:08 +00:00
Alex Hong
b640326154 Add the sepolicy for UWB hal
Bug: 182727934
Test: $ make selinux_policy
      Push SELinux modules and check the denials during boot
Change-Id: I630e6e353897a85d1b90c7d8a4250703a4c3a245
2021-03-19 21:42:07 +08:00
TreeHugger Robot
8d7d184bcf Merge "remove workaround as vendor_init is ready" into sc-dev am: 9225f4e5d0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13921069

Change-Id: Ia0d7bf18a52ff1069fc692e270eb79837290af2e
2021-03-19 07:24:08 +00:00
TreeHugger Robot
9225f4e5d0 Merge "remove workaround as vendor_init is ready" into sc-dev 2021-03-19 06:43:54 +00:00
Adam Shih
42bd5867e8 Merge "label missing vibrator sys nodes" into sc-dev am: 3f6e2bba41
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13908553

Change-Id: I7f44920dd91712c201a8fc55d15ee89ab405dcbb
2021-03-19 06:05:41 +00:00
Adam Shih
3f6e2bba41 Merge "label missing vibrator sys nodes" into sc-dev 2021-03-19 05:32:27 +00:00
TreeHugger Robot
78976ea7e1 Merge "Add sepolicy rules for fingerprint hal" into sc-dev am: fc6b81d188
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13918107

Change-Id: Ib09464497cc1b3c366ff2939b5885d565069d15d
2021-03-19 05:01:34 +00:00
TreeHugger Robot
fc6b81d188 Merge "Add sepolicy rules for fingerprint hal" into sc-dev 2021-03-19 04:37:58 +00:00
TreeHugger Robot
c197961ab5 Merge "update error on ROM 7219510" into sc-dev am: 4eba688673
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13921068

Change-Id: Ia35cde269940c847ec6e064c845bad98c5c4d595
2021-03-19 04:23:51 +00:00
TreeHugger Robot
a5cfd7aaab Merge "power: Add policy to access sysfs_bcl" into sc-dev am: 46b51cd204
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13876026

Change-Id: I829fe7b028908f791e72fd551b1d24bd92c880c3
2021-03-19 04:23:17 +00:00
Adam Shih
ac6b1273e4 remove workaround as vendor_init is ready
Bug: 171942789
Test: boot under enforcing ROM
Change-Id: If4bb070ecf2272dd927ceaeda1882d2fad62b4c3
2021-03-19 11:58:39 +08:00
TreeHugger Robot
4eba688673 Merge "update error on ROM 7219510" into sc-dev 2021-03-19 03:51:31 +00:00
Kris Chen
09996bc810 Add sepolicy rules for fingerprint hal
Fixes the following avc denials:
03-18 11:23:15.692   956   956 I android.hardwar: type=1400 audit(0.0:7): avc: denied { read write } for name="trusty-ipc-dev0" dev="tmpfs" ino=691 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:tee_device:s0 tclass=chr_file permissive=1
03-18 11:23:15.692   956   956 I android.hardwar: type=1400 audit(0.0:8): avc: denied { open } for path="/dev/trusty-ipc-dev0" dev="tmpfs" ino=691 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:tee_device:s0 tclass=chr_file permissive=1
03-18 11:23:15.692   956   956 I android.hardwar: type=1400 audit(0.0:9): avc: denied { ioctl } for path="/dev/trusty-ipc-dev0" dev="tmpfs" ino=691 ioctlcmd=0x7280 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:tee_device:s0 tclass=chr_file permissive=1
03-18 11:40:56.072   973   973 I fingerprint@2.1: type=1400 audit(0.0:39): avc: denied { search } for name="battery" dev="sysfs" ino=66502 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1
03-18 11:40:56.072   973   973 I fingerprint@2.1: type=1400 audit(0.0:40): avc: denied { read } for name="temp" dev="sysfs" ino=66520 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
03-18 11:40:56.072   973   973 I fingerprint@2.1: type=1400 audit(0.0:41): avc: denied { open } for path="/sys/devices/platform/google,battery/power_supply/battery/temp" dev="sysfs" ino=66520 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
03-18 14:11:23.476   979   979 I fingerprint@2.1: type=1400 audit(0.0:13): avc: denied { search } for name="battery" dev="sysfs" ino=66502 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1
03-18 12:03:08.248   978   978 I android.hardwar: type=1400 audit(0.0:9): avc: denied { create } for scontext=u:r:hal_fingerprint_default:s0 tcontext=u:r:hal_fingerprint_default:s0 tclass=netlink_socket permissive=1
03-18 12:03:08.248   978   978 I android.hardwar: type=1400 audit(0.0:10): avc: denied { bind } for scontext=u:r:hal_fingerprint_default:s0 tcontext=u:r:hal_fingerprint_default:s0 tclass=netlink_socket permissive=1
03-18 12:03:08.248   978   978 I android.hardwar: type=1400 audit(0.0:11): avc: denied { write } for scontext=u:r:hal_fingerprint_default:s0 tcontext=u:r:hal_fingerprint_default:s0 tclass=netlink_socket permissive=1
03-18 12:03:08.248   978   978 I android.hardwar: type=1400 audit(0.0:12): avc: denied { read } for scontext=u:r:hal_fingerprint_default:s0 tcontext=u:r:hal_fingerprint_default:s0 tclass=netlink_socket permissive=1
03-18 12:56:30.446   404   404 E SELinux : avc:  denied  { add } for interface=vendor.goodix.hardware.biometrics.fingerprint::IGoodixFingerprintDaemon sid=u:r:hal_fingerprint_default:s0 pid=967 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:default_android_hwservice:s0 tclass=hwservice_manager permissive=1

Bug: 171943101
Test: No above avc denials in logcat.
Change-Id: I67b397f86c39625b77ebe6d32d37e42cd87b3f93
2021-03-19 03:41:18 +00:00
TreeHugger Robot
46b51cd204 Merge "power: Add policy to access sysfs_bcl" into sc-dev 2021-03-19 03:39:32 +00:00
Adam Shih
8d2feed7ed label missing vibrator sys nodes
Bug: 182954060
Test: boot with no avc error found
Change-Id: I1ffd97c6646d106c88efe36bfb4483ae44415eaa
2021-03-19 11:14:36 +08:00
TreeHugger Robot
71f0fd6e55 Merge "Allow fingerprint hal to access fingerprint device" into sc-dev am: 9a865e84c7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13918106

Change-Id: I7f56e90224fe24568d84bcdd4a6a91deed3194bb
2021-03-19 03:08:00 +00:00
George Lee
9c3d77d088 power: Add policy to access sysfs_bcl
Bug: 180620276
Test: adb bugreport
dumpstate_board.txt shows:
------ BCL (/sys/devices/virtual/pmic/mitigation/triggered_stats) ------
Source    	Count	Last Triggered	Last SOC	Last Voltage
smpl_warn      	0	0		0		0
ocp_cpu1       	0	0		0		0
ocp_cpu2       	0	0		0		0
soft_ocp_cpu1  	0	0		0		0
soft_ocp_cpu2  	0	0		0		0
ocp_tpu        	0	0		0		0
soft_ocp_tpu   	0	0		0		0
pmic_120c      	0	0		0		0
pmic_140c      	0	0		0		0
pmic_overheat  	0	0		0		0
ocp_gpu        	0	0		0		0
soft_ocp_gpu   	0	0		0		0

------ IF PMIC (/sys/devices/virtual/pmic/max77759-mitigation/triggered_stats) ------
Source    	Count	Last Triggered	Last SOC	Last Voltage
VDROOP1        	0	0		0		0
VDROOP2        	0	0		0		0
BATOILO        	0	0		0		0

Signed-off-by: George Lee <geolee@google.com>
Change-Id: If7874e19b8202175071d474502e77748168565ce
2021-03-19 02:56:32 +00:00
Adam Shih
857ea2e064 update error on ROM 7219510
Bug: 183161715
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Id5c7856e7b77600f47df652a95ac342f11c924f5
2021-03-19 10:52:09 +08:00
TreeHugger Robot
9a865e84c7 Merge "Allow fingerprint hal to access fingerprint device" into sc-dev 2021-03-19 02:19:59 +00:00
David Li
fa11af6a07 audio: add /dev/acd-audio_dcdoff_ref for audio effect visualizer
Set /dev/acd-audio_dcdoff_ref as u:object_r:aoc_device:s0
crw-rw---- 1 system audio u:object_r:aoc_device:s0  500,  29 2021-03-18 22:19 /dev/acd-audio_dcdoff_ref

Bug: 180984363
Bug: 165719427
Test: make -j128
Test: ls -alZ /dev/acd-audio_dcdoff_ref
Change-Id: If7cd3ef99885730287648afebb222d4f925d325e
2021-03-19 10:10:49 +08:00
Kris Chen
10fda56cd1 Allow fingerprint hal to access fingerprint device
Fixes the following avc denials:
03-18 10:57:10.612   947   947 I android.hardwar: type=1400 audit(0.0:8): avc: denied { open } for path="/dev/goodix_fp" dev="tmpfs" ino=482 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1
03-18 10:57:10.632   947   947 I android.hardwar: type=1400 audit(0.0:9): avc: denied { ioctl } for path="/dev/goodix_fp" dev="tmpfs" ino=482 ioctlcmd=0x6707 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1
03-18 10:57:13.672   947   947 I android.hardwar: type=1400 audit(0.0:14): avc: denied { ioctl } for path="/dev/goodix_fp" dev="tmpfs" ino=482 ioctlcmd=0x6706 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1
03-18 10:57:32.704   947   947 I HwBinder:947_1: type=1400 audit(0.0:26): avc: denied { ioctl } for path="/dev/goodix_fp" dev="tmpfs" ino=482 ioctlcmd=0x6705 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1

Bug: 171943101
Test: No above avc denials in logcat.
Change-Id: I254a01a2c11fcaba9ad3f387862a8d0ddafffd38
2021-03-18 19:23:54 +08:00
TreeHugger Robot
005b56dc05 Merge "sepolicy: fix usb hal selinux permission" into sc-dev am: 2433a82427
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13899365

Change-Id: Iec98ad83437265a5b557eaaddc22d52dd7fe0269
2021-03-18 06:20:40 +00:00
TreeHugger Robot
2433a82427 Merge "sepolicy: fix usb hal selinux permission" into sc-dev 2021-03-18 05:47:52 +00:00
SalmaxChang
4393badd84 Update vendor_modem_prop and add rules for mds am: 2797490192
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13895427

Change-Id: Id23adbbf9cbf6cb7dcb76632cca5adfba44e369b
2021-03-18 05:27:50 +00:00
SalmaxChang
2797490192 Update vendor_modem_prop and add rules for mds
Bug: 181185131
Change-Id: Ie709e08152d23428a687c949359316206843b9fa
2021-03-18 04:48:19 +00:00
TreeHugger Robot
ddd3cf4514 Merge changes I15473321,Id60bb2e8 into sc-dev am: 8a191daf92
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13908551

Change-Id: I59cf2780c00e6b9b524edf0bdd7ef20c7ecc796b
2021-03-18 04:28:48 +00:00
TreeHugger Robot
8a191daf92 Merge changes I15473321,Id60bb2e8 into sc-dev
* changes:
  remove obsolete entries
  update error on ROM 7216638
2021-03-18 04:02:01 +00:00
Ines Ayara
7a8dcc0893 Merge "Add "libedgetpu_darwinn2.so" library duplicate to be used for external launch." into sc-dev am: 338d324e5a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13904945

Change-Id: I43397196ba9d57b84bde59d1f0034b8f68052810
2021-03-18 03:41:15 +00:00
Ines Ayara
338d324e5a Merge "Add "libedgetpu_darwinn2.so" library duplicate to be used for external launch." into sc-dev 2021-03-18 02:54:19 +00:00
Adam Shih
c36661eb0b remove obsolete entries
Bug: 177389198
Bug: 177860960
Bug: 178752576
Bug: 178753472
Bug: 179310892
Bug: 179437292
Bug: 179437988
Bug: 180656125
Bug: 180960879
Bug: 182705863
Test: boot and grab bugreport with no gmscore error found
Change-Id: I154733215aeca58a76add8d346cc0016a5f0dff7
2021-03-18 10:15:43 +08:00
Adam Shih
15a0c61432 update error on ROM 7216638
Bug: 183055762
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Id60bb2e822734e23803b8f937b71dc59a325c27b
2021-03-18 10:03:37 +08:00
Albert Wang
beb4f82d32 sepolicy: fix usb hal selinux permission
avc: denied { read } for name="port0-partner" dev="sysfs" ino=98412 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1
avc: denied { open } for path="/sys/devices/platform/10d50000.hsi2c/i2c-6/6-0025/typec/port0/port0-partner" dev="sysfs" ino=98412 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1
avc: denied { getattr } for path="/sys/devices/platform/10d50000.hsi2c/i2c-5/5-0025/typec/port0/power_role" dev="sysfs" ino=67861 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
avc: denied { open } for path="/sys/devices/platform/10d50000.hsi2c/i2c-5/5-0025/typec/port0/power_role" dev="sysfs" ino=67861 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
avc: denied { write } for name="port_type" dev="sysfs" ino=71778 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1

Bug: 182122983
Test: atest VtsHalUsbV1_0TargetTest
      atest HalUsbGadgetV1_0HostTest
Signed-off-by: Albert Wang <albertccwang@google.com>
Change-Id: Ia2cf9061dd5eaa7af582331477afd34db56531e8
2021-03-18 09:51:14 +08:00
TreeHugger Robot
2a61dddc6f Merge "Fix selinux error for vendor_init" into sc-dev am: 57ec723c5e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13880426

Change-Id: I66406cd526eaebca4ce94ab9dd3f9594e3e1c5ae
2021-03-18 01:18:38 +00:00
TreeHugger Robot
57ec723c5e Merge "Fix selinux error for vendor_init" into sc-dev 2021-03-18 00:49:15 +00:00
iayara
adeaaead76 Add "libedgetpu_darwinn2.so" library duplicate to be used for external
launch.

This change is intended to keep naming consistency with previous
Darwinn external launch. In the future, all "libedgetpu_darwinn2.so"
instances should be replaced by "libedgetpu_util.so".

Bug: 182303547
Change-Id: I99e83f5f2e317b195b2061c781cb23544e547c55
2021-03-17 23:47:07 +00:00
Hridya Valsaraju
fed91e74ba Merge "Add a label for Pixel DMA-BUF heap tracepoints" into sc-dev am: 2f772dd166
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13896546

Change-Id: Idfe3aa3b34bb8b6b8eb8f348b940327656a96c2f
2021-03-17 22:44:05 +00:00
Hridya Valsaraju
2f772dd166 Merge "Add a label for Pixel DMA-BUF heap tracepoints" into sc-dev 2021-03-17 21:58:55 +00:00
Yu-Chi Cheng
bcb92ac0c9 Merge "Allowed Camera hal to access EdgeTPU service for on-device compilation." into sc-dev am: a802ac3b05
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13889939

Change-Id: Iff962bcb9446a4a48123dc0ff435ffd56a115079
2021-03-17 21:10:37 +00:00
Yu-Chi Cheng
a802ac3b05 Merge "Allowed Camera hal to access EdgeTPU service for on-device compilation." into sc-dev 2021-03-17 20:37:44 +00:00
Yu-Chi Cheng
86aa156202 Allowed Camera hal to access EdgeTPU service for on-device compilation.
Camera hal DarwiNN pipelines are switching to use the on-device
compilation, which achieves by talking to the EdgeTPU service.
This change added the required selinux policies to allow accessing
the service, as well as allowing file descriptors to be shared
between them for passing the compilation info around.

Bug: 182423730
Bug: 182706078
Test: verified on Oriole running camera.
Change-Id: I5d3bc84fd54d4618f505f37d9773894261061d7f
2021-03-17 08:18:55 -07:00
Aaron Tsai
185dbee4eb Fix selinux error for vendor_init
03-12 18:15:16.240  root     1     1 I /system/bin/init: type=1107 audit(0.0:19): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.sys.modem_reset pid=354 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_sys_default_prop:s0 tclass=property_service permissive=1'

Bug: 182715587
Test: verified with the forrest ROM and error log gone
Change-Id: Icfea06220c491d414f6bdbf04ceda4c46299fb29
2021-03-17 10:14:31 +00:00
TreeHugger Robot
afdfc82734 Merge "label uwb service to prevent reset after unplugging USB" into sc-dev am: 64c726720b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13895430

Change-Id: I7d50b4777a52b307272c8b9ab68f2eeb279ebb4d
2021-03-17 08:36:35 +00:00
Jenny Ho
673ba29390 Merge "genfs_contexts: add sepolicy for dumping eeprom data" into sc-dev am: 208d1aed01
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13895428

Change-Id: I39b601de53ad1b2ccfec2274194b9dfcb8f1dbf1
2021-03-17 08:36:13 +00:00
TreeHugger Robot
64c726720b Merge "label uwb service to prevent reset after unplugging USB" into sc-dev 2021-03-17 08:35:08 +00:00
Jenny Ho
208d1aed01 Merge "genfs_contexts: add sepolicy for dumping eeprom data" into sc-dev 2021-03-17 08:07:45 +00:00
Adam Shih
ebeae6abc3 label uwb service to prevent reset after unplugging USB
Bug: 182953824
Test: unplug USB under enforcing mode
Change-Id: Ib4bdf9b9339fc631d045bde57f78a46ce3ca8b6e
2021-03-17 15:25:27 +08:00
TreeHugger Robot
188c7e93fc Merge "sensors: Add sensor related rule to chre." into sc-dev am: b8ec327d5c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13885466

Change-Id: I9a4f8817963617f8e212d8ffdf36a17e5580d192
2021-03-17 07:00:57 +00:00
TreeHugger Robot
b8ec327d5c Merge "sensors: Add sensor related rule to chre." into sc-dev 2021-03-17 06:28:41 +00:00
Hridya Valsaraju
a570dc6991 Add a label for Pixel DMA-BUF heap tracepoints
These tracepoint are the DMA-BUF equivalents to the ION tracepoints.
They expose the size of the DMA-BUF, unique inode number of the DMA-BUF
and total size of all DMA-BUFs exported from the DMA-BUF heap framework.

Test: build
Bug: 182328989
Change-Id: I311b68275ebd668f73d0ccff0fcaa01d251250bc
2021-03-16 23:00:41 -07:00
Adam Shih
afb246e88a Merge changes I33cd99d5,I8417d4eb into sc-dev am: 63143cdf96
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13895426

Change-Id: I9fa4c9593bb10eae995d38922a41b0ddd917e5b8
2021-03-17 05:40:37 +00:00
Jenny Ho
2dc4d2d61f genfs_contexts: add sepolicy for dumping eeprom data
I auditd  : type=1400 audit(0.0:53): avc: denied { getattr } for comm="sh" path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I sh      : type=1400 audit(0.0:53): avc: denied { getattr } for path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I auditd  : type=1400 audit(0.0:57): avc: denied { getattr } for comm="ls" path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I ls      : type=1400 audit(0.0:57): avc: denied { getattr } for path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

Bug: 182531832
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: If189575c6db8b43b59c6009378ec724bd075c0d1
2021-03-17 13:07:55 +08:00
Adam Shih
63143cdf96 Merge changes I33cd99d5,I8417d4eb into sc-dev
* changes:
  label missing power sys nodes
  update error on ROM 7213588
2021-03-17 05:03:29 +00:00
TreeHugger Robot
2d39854611 Merge "Add Sepolicy rule for connectivity monitor app" into sc-dev am: 0aef3b56c5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13880431

Change-Id: Ia4981828bf05e6b824ab071c0475579405693bb3
2021-03-17 03:44:56 +00:00
TreeHugger Robot
0aef3b56c5 Merge "Add Sepolicy rule for connectivity monitor app" into sc-dev 2021-03-17 03:12:31 +00:00
Adam Shih
74052118a8 label missing power sys nodes
Bug: 182954169
Test: boot with no avc error found
Change-Id: I33cd99d5748dd9fc40301c460a050b6e969f30f4
2021-03-17 10:49:24 +08:00
Rick Chen
78047fa17b sensors: Add sensor related rule to chre.
[    8.417813] type=1400 audit(1615518074.988:4): avc: denied { write } for comm="sensors@2.0-ser" name="chre" dev="tmpfs" ino=908 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:chre_socket:s0 tclass=sock_file permissive=1
[    8.418075] type=1400 audit(1615518074.988:5): avc: denied { connectto } for comm="sensors@2.0-ser" path="/dev/socket/chre" scontext=u:r:hal_sensors_default:s0 tcontext=u:r:chre:s0 tclass=unix_stream_socket permissive=1
03-12 11:01:14.988   694   694 I sensors@2.0-ser: type=1400 audit(0.0:5): avc: denied { connectto } for path="/dev/socket/chre" scontext=u:r:hal_sensors_default:s0 tcontext=u:r:chre:s0 tclass=unix_stream_socket permissive=1

Also merge two sensor_hal related files into single file.

Bug: 182523946
Test: make selinux_policy -j128 and push to device.
      No hal_sensors_default related avc deined log during boot.
Signed-off-by: Rick Chen <rickctchen@google.com>
Change-Id: I49ce71ba4703528fb2e26dd8956c4ed741337ffc
2021-03-17 10:34:14 +08:00
Benjamin Schwartz
6beac59d8d Merge "Give power stats HAL permission to read ufs stats" into sc-dev am: fe980b935b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13881265

Change-Id: I21a2217c38a764545fc4a19b4b114eaee260efe3
2021-03-17 02:25:59 +00:00
TreeHugger Robot
120967467a Merge "allow df to collect partition info" into sc-dev am: 23017e956d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13856371

Change-Id: I53f473fa1d949eb035367b5bfa16022dd3098ebc
2021-03-17 02:25:39 +00:00
Adam Shih
7c0fd2a413 update error on ROM 7213588
Bug: 182954169
Bug: 182954060
Bug: 182954138
Bug: 182954062
Bug: 182953824
Bug: 182953825
Bug: 182954248
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I8417d4ebacefa691838e25131749b0e4fd152a2f
2021-03-17 10:15:02 +08:00
Benjamin Schwartz
fe980b935b Merge "Give power stats HAL permission to read ufs stats" into sc-dev 2021-03-17 02:09:54 +00:00
TreeHugger Robot
23017e956d Merge "allow df to collect partition info" into sc-dev 2021-03-17 01:52:43 +00:00
Benjamin Schwartz
d5ab86411f Fix sepolicies for hal_power_stats_default am: ed8fdc9997
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13877746

Change-Id: I01e5424a15c0a2771f0b958c2d29adf4d43d33a9
2021-03-16 20:54:07 +00:00
Benjamin Schwartz
ed8fdc9997 Fix sepolicies for hal_power_stats_default
Bug: 182320246
Test: No more avc denied log messages for hal_power_stats_default
Change-Id: I1cd801bb4823e80bd5ea112fb0b7bdfaeabbdef5
2021-03-16 10:37:09 -07:00
TreeHugger Robot
411cd08e91 Merge "display: add sepolicy for hal_graphics_composer" into sc-dev am: 96d0c28dc4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13880429

Change-Id: I0f7c6b3d3c172fd4e2038f9bef7d6b7a0fa9436b
2021-03-16 12:38:49 +00:00
TreeHugger Robot
96d0c28dc4 Merge "display: add sepolicy for hal_graphics_composer" into sc-dev 2021-03-16 12:05:50 +00:00
Hsiaoan Hsu
46fedc2148 Add Sepolicy rule for connectivity monitor app
sync sepolicy from previous projects.

Bug: 182715920
Test: build pass. connetivity monitor service running successfully.
Change-Id: Id5606b5db74fbf672ac41549862a83557734ac57
2021-03-16 15:48:53 +08:00
raylinhsu
031fe80418 display: add sepolicy for hal_graphics_composer
Allow HWC to access vendor_log_file and also allow hwc to access
power hal

Bug: 181712799
Test: pts -m PtsSELinuxTest -t
com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot

Change-Id: I403a528f651b9ee5755d11525f2a33c39628ecee
2021-03-16 13:50:48 +08:00
SalmaxChang
81104c001c MDS: Fix avc errors am: b70e0bebdd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13816042

Change-Id: I7438c1c4654e8053e0315623c42475e656737a11
2021-03-16 04:26:46 +00:00
SalmaxChang
b70e0bebdd MDS: Fix avc errors
avc: denied { search } for name="vendor" dev="tmpfs" ino=2 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=1 app=com.google.mds
avc: denied { search } for name="vendor" dev="tmpfs" ino=2 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=1 app=com.google.mds
avc: denied { search } for comm=4173796E635461736B202332 name="radio" dev="dm-9" ino=242 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=dir permissive=1 app=com.google.mds
avc: denied { call } for comm=4173796E635461736B202331 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:r:dmd:s0 tclass=binder permissive=1 app=com.google.mds
avc: denied { write } for name="property_service" dev="tmpfs" ino=316 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=1 app=com.google.mds
avc: denied { read } for name="u:object_r:vendor_modem_prop:s0" dev="tmpfs" ino=289 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:vendor_modem_prop:s0 tclass=file permissive=1 app=com.google.mds
avc: denied { search } for comm=4173796E635461736B202331 name="chosen" dev="sysfs" ino=9330 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs_chosen:s0 tclass=dir permissive=1 app=com.google.mds

Bug: 181185131
Bug: 179110848

Change-Id: I1ac00b68e2db44cc86f6b5c70001cda78264ff6e
2021-03-16 02:27:54 +00:00
Adam Shih
df5b767adf Merge "label power.stats-vendor properly" into sc-dev am: dd7f31a99f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13856370

Change-Id: I301a946f6fbfeab735b81fb92e37a657ede3e9a6
2021-03-16 01:50:01 +00:00
Adam Shih
dd7f31a99f Merge "label power.stats-vendor properly" into sc-dev 2021-03-16 01:16:20 +00:00
Adam Shih
142e40a2e0 Merge "Allow bluetooth hal to get boot status" into sc-dev am: 3887fc2628
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13856369

Change-Id: I7c25de614a2e2625f2cfc8fd8a3df8a5d74f877d
2021-03-16 00:57:19 +00:00
Benjamin Schwartz
a1f92cdd90 Give power stats HAL permission to read ufs stats
Bug: 140217385
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Ib3fa9440982bc5846053e9ddf56d3ed178599c0c
2021-03-15 17:37:29 -07:00
Adam Shih
3887fc2628 Merge "Allow bluetooth hal to get boot status" into sc-dev 2021-03-16 00:35:59 +00:00
Alex Hong
21a2c8b6e8 Merge "Clean up the obsoleted dontaudit rules" into sc-dev am: e2f3348361
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13839793

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I588088235e0172d82beb1ab15942e20706112c26
2021-03-15 08:58:29 +00:00
Alex Hong
e2f3348361 Merge "Clean up the obsoleted dontaudit rules" into sc-dev 2021-03-15 08:22:53 +00:00
Alex Hong
abfa9355ee Clean up the obsoleted dontaudit rules
Verify with the ROM: go/ab/7203892 oriole-userdebug

Test: $ make selinux_policy
      Push selinux modules. Check the denials during boot.

      $ pts-tradefed run commandAndExit pts -m PtsSELinuxTest -t com.google.android.selinux.pts.SELinuxTest#scanBugreport
      $ pts-tradefed run commandAndExit pts -m PtsSELinuxTest -t com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Bug: 171760597
Bug: 171760846
Bug: 173969190
Bug: 174443175
Bug: 176777145
Bug: 176868315
Bug: 177386448
Bug: 177389321
Bug: 177614659
Bug: 177616188
Bug: 177778551
Bug: 177778793
Bug: 177860838
Bug: 177862403
Bug: 177862777
Bug: 177966144
Bug: 178433506
Bug: 178433618
Bug: 178753151
Bug: 178752409
Bug: 178979985
Bug: 178980142
Bug: 179093352
Bug: 179310875
Bug: 179435036
Bug: 179437293
Bug: 179437737
Bug: 180551518
Bug: 180567612
Bug: 180655373
Bug: 180656244
Bug: 180874342
Bug: 180963328
Bug: 180963587
Change-Id: I19e19e49d36e5635629c1e68c7d23a98c714ebcf
2021-03-15 06:24:59 +00:00
Adam Shih
881d24db37 update error on ROM 7207833 am: 36e82d438a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13856368

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I2f9b3e1e7f93b2eb35a908b55e10e724ddea459d
2021-03-15 03:08:09 +00:00
Adam Shih
0218941cb8 allow df to collect partition info
Bug: 179310854
Test: do bugreport and the error disappear
Change-Id: I9fdcbb27742a70f3b796c668c3e0d4688d36b4d8
2021-03-15 11:00:41 +08:00
Adam Shih
cf96663690 label power.stats-vendor properly
Bug: 182320246
Test: boot with power.stats-vendor labeled
Change-Id: Icc3ff763be1a23e8f3e9d1ed076fcb5c74401abe
2021-03-15 10:21:24 +08:00
Adam Shih
45e33146f1 Allow bluetooth hal to get boot status
[    5.299448] type=1400 audit(1615772363.892:3): avc: denied { read } for comm="bluetooth@1.1-s" name="u:object_r:boot_status_prop:s0" dev="tmpfs" ino=81 scontext=u:r:hal_bluetooth_btlinux:s0 tcontext=u:object_r:boot_status_prop:s0 tclass=file permissive=1
Bug: 171942789
Test: boot and see such log no longer appear

Change-Id: Ib27585183be1ba9913b5f0620d987f26fad663e0
2021-03-15 09:41:48 +08:00
Adam Shih
36e82d438a update error on ROM 7207833
Bug: 182706078
Bug: 182705863
Bug: 182705986
Bug: 182705901
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I37728b3b475998668f37d50a70ce980eeff70a63
2021-03-15 09:26:46 +08:00
Benjamin Schwartz
7615ee47bf Merge "whitechapel: Correct acpm_stats path" into sc-dev am: aa41c84ad1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13840133

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I886976749073f18187b74bd6030bdabdd0dbee7f
2021-03-12 18:11:53 +00:00
Benjamin Schwartz
aa41c84ad1 Merge "whitechapel: Correct acpm_stats path" into sc-dev 2021-03-12 17:41:35 +00:00
TreeHugger Robot
0e272c63ed Merge "allow init to mount modem_img" into sc-dev am: 3b10aeadae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13839800

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: Icd3cac3c5d48ea9e1c438cad2a8c8564ab20a378
2021-03-12 06:49:17 +00:00
TreeHugger Robot
3b10aeadae Merge "allow init to mount modem_img" into sc-dev 2021-03-12 06:01:50 +00:00
Wen Chang Liu
8cbf2bcb97 Merge changes Ie0ed96d7,Id7f43fe1 into sc-dev am: e72c30346f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13839790

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I3c68b42795c4b0b2cfd9510a9b393c80f2f9bc81
2021-03-12 05:51:09 +00:00
Wen Chang Liu
e72c30346f Merge changes Ie0ed96d7,Id7f43fe1 into sc-dev
* changes:
  Add sepolicy for BigOcean device
  Add sepolicy for MFC device
2021-03-12 05:41:08 +00:00
Andy Chou
4a1b96d9aa Merge "Fix cuttlefish test fail due to sepolicy of Exo" into sc-dev am: 737059042f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13839799

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I0d271ce84e87f4042bd8cb95a3bea881377dc2ae
2021-03-12 05:35:47 +00:00
TreeHugger Robot
71f2717803 Merge "update error on ROM 7202683" into sc-dev am: 8e2430d151
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13839797

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I4051250e1e3ce7dfb7ce181004f91030827cd1c8
2021-03-12 05:32:33 +00:00
Andy Chou
737059042f Merge "Fix cuttlefish test fail due to sepolicy of Exo" into sc-dev 2021-03-12 05:32:18 +00:00
TreeHugger Robot
8e2430d151 Merge "update error on ROM 7202683" into sc-dev 2021-03-12 05:19:01 +00:00
Sung-fang Tsai
56c3a11f4a Merge "Mark lib_aion_buffer and related library as same_process_hal_file" into sc-dev am: 1bcf7d412a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824574

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: Ibbde6769b1760f55c920600c969b46d2ddb06375
2021-03-12 05:11:49 +00:00
Adam Shih
fdeedcba65 allow init to mount modem_img
Bug: 182524202
Bug: 182524203
Test: modem_img is mounted under enforcing mode
Change-Id: Ie5448468d4d7f1ad6acdd2c93055bba9001185d1
2021-03-12 12:54:22 +08:00
Sung-fang Tsai
1bcf7d412a Merge "Mark lib_aion_buffer and related library as same_process_hal_file" into sc-dev 2021-03-12 04:18:59 +00:00
Vova Sharaienko
c3ec7bbf3e Merge "Stats: new sepolicy for the AIDL service" into sc-dev am: 175c2eaa31
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13845133

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I981065070c26b2fa74d862cddbf551e03a426379
2021-03-12 03:54:09 +00:00
TreeHugger Robot
73df265217 Merge "Add atc sysfs permission for composer service" into sc-dev am: 1dd171b66f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13839786

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I90a0f6f3633e9e83aa1052f82630778acf43dd1d
2021-03-12 03:53:33 +00:00
andychou
9e582d4bc3 Fix cuttlefish test fail due to sepolicy of Exo
Need to grant gpu_device dir search permission and
device_config_runtime_native_boot_prop for testing.

Bug: 182445508
Test: atest ExoTests pass  on Cuttlefish
Change-Id: Ia4c27efa2a900a3781301de19ab38209f818aba1
2021-03-12 11:41:24 +08:00
Vova Sharaienko
175c2eaa31 Merge "Stats: new sepolicy for the AIDL service" into sc-dev 2021-03-12 03:32:22 +00:00
Adam Shih
526da2f9b1 update error on ROM 7202683
Bug: 182524105
Bug: 182523946
Bug: 182524202
Bug: 182524203
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I4c97960d106a74cbe2ba819671612514d4cba282
2021-03-12 11:18:10 +08:00
wenchangliu
f98706e87b Add sepolicy for BigOcean device
add /dev/bigocean to video_device

avc: denied { read write } for name="bigocean" dev="tmpfs" ino=629 \
scontext=u:r:mediacodec:s0 tcontext=u:object_r:device:s0 \
tclass=chr_file permissive=1
avc: denied { open } for path="/dev/bigocean" dev="tmpfs" ino=629 \
scontext=u:r:mediacodec:s0 tcontext=u:object_r:device:s0 \
tclass=chr_file permissive=1
avc: denied { ioctl } for path="/dev/bigocean" dev="tmpfs" ino=629 \
ioctlcmd=0x4202 scontext=u:r:mediacodec:s0 tcontext=u:object_r:device:s0 \
tclass=chr_file permissive=1
avc: denied { ioctl } for comm=436F646563322E30204C6F6F706572 path="/dev/bigocean" \
dev="tmpfs" ino=629 ioctlcmd=0x4202 scontext=u:r:mediacodec:s0 \
tcontext=u:object_r:device:s0 tclass=chr_file permissive=1

Bug: 172173484
Test: Play AV1 clips in enforcing mode
Change-Id: Ie0ed96d7bf4324bd38a9c42500f4f747f092bfd9
2021-03-12 10:54:10 +08:00
wenchangliu
b52121a259 Add sepolicy for MFC device
- Add sysfs_video type for mfc device
- Allow mediacode to access sysfs_video

avc: denied { read } for name="name" dev="sysfs" ino=62278 \
scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 \
tclass=file permissive=1

avc: denied { open } for path="/sys/devices/platform/mfc/video4linux/video7/name" \
dev="sysfs" ino=62278 scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 \
tclass=file permissive=1

avc: denied { getattr } for path="/sys/devices/platform/mfc/video4linux/video7/name" \
dev="sysfs" ino=62278 scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 \
tclass=file permissive=1

avc: denied { read } for name="name" dev="sysfs" ino=62230 \
scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 \
tclass=file permissive=1

avc: denied { open } for path="/sys/devices/platform/mfc/video4linux/video6/name" \
dev="sysfs" ino=62230 scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 \
tclass=file permissive=1

avc: denied { getattr } for path="/sys/devices/platform/mfc/video4linux/video6/name" \
dev="sysfs" ino=62230 scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 \
tclass=file permissive=1

Bug: 172173484
Test: video playback / camera recording with enforcing mode
Change-Id: Id7f43fe11c9ed089067f43a50d7f765df873d6c6
2021-03-12 10:51:41 +08:00
TreeHugger Robot
1dd171b66f Merge "Add atc sysfs permission for composer service" into sc-dev 2021-03-12 02:44:43 +00:00
Ahmed ElArabawy
6219c84925 Merge "Wifi: Add sepolicy files for wifi_ext service" into sc-dev am: 4a0294348b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13806170

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I119212a1f114011a7adbbd1b48c276ef0d7e5e13
2021-03-12 02:29:24 +00:00
Ahmed ElArabawy
4a0294348b Merge "Wifi: Add sepolicy files for wifi_ext service" into sc-dev 2021-03-12 01:37:36 +00:00
Vova Sharaienko
2ed30c23e3 Stats: new sepolicy for the AIDL service
This allows the pixelstats_vendor communicate with new AIDL IStats service via ServiceManager

Bug: 181914749
Test: Build, flash, and logcat -s "pixelstats_vendor"
Change-Id: Icf1bbbd7f72835fe8f9c2f23281a2f5b4bf8e698
2021-03-12 01:12:21 +00:00
Benjamin Schwartz
bfa18a7b2a whitechapel: Correct acpm_stats path
Bug: 182320246
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: I7a67b31e28f34d606cfab369b9e982e9fffe3b3f
2021-03-11 15:52:48 -08:00
Pat Tjin
940d04fd2b Merge "Move wireless charger HAL to 1.3" into sc-dev am: 854db479bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824572

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: Iabc01056a01b06c0a23a79cc7dbc4a349aa10ac7
2021-03-11 20:28:53 +00:00
Pat Tjin
854db479bb Merge "Move wireless charger HAL to 1.3" into sc-dev 2021-03-11 19:57:54 +00:00
Sung-fang Tsai
82376e2d49 Mark lib_aion_buffer and related library as same_process_hal_file
To allow access by Google Camera App, which needs this for vendor-specific
buffer management functionality to enable zero-copy camera RAW->GPU buffer
handling.

Test: GCA works with forrest build P20546991.
Bug: 159839616
Change-Id: I71bdcd12f17013881d7a5da2f11e444f0d3b4f94
2021-03-11 12:02:04 +00:00
linpeter
ebd2a24596 Add atc sysfs permission for composer service
avc: denied { read write } for name="en" dev="sysfs" ino=66979 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
avc: denied { open } for path="/sys/devices/platform/1c300000.drmdecon/dqe/atc/en" dev="sysfs" ino=66979 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
avc: denied { getattr } for path="/sys/devices/platform/1c300000.drmdecon/dqe/atc/en" dev="sysfs" ino=66979 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

avc: denied { read write } for name="gain_limit" dev="sysfs" ino=66998 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
avc: denied { open } for path="/sys/devices/platform/1c300000.drmdecon/dqe/atc/gain_limit" dev="sysfs" ino=66998 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
avc: denied { getattr } for path="/sys/devices/platform/1c300000.drmdecon/dqe/atc/gain_limit" dev="sysfs" ino=66998 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

avc: denied { read write } for name="st" dev="sysfs" ino=66982 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
avc: denied { open } for path="/sys/devices/platform/1c300000.drmdecon/dqe/atc/st" dev="sysfs" ino=66982 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
avc: denied { getattr } for path="/sys/devices/platform/1c300000.drmdecon/dqe/atc/st" dev="sysfs" ino=66982 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

Bug: 168848203
test: test: check avc denied
Change-Id: I48dd839e0ca6f3eb16e35f1b7a4d5f6d4a1fd88b
2021-03-11 20:01:21 +08:00
Eddie Tashjian
7a501cba00 Add selinux policies for mounted modem parition am: 78cd6eb78e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824571

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I5dc47429ad5dd846679fbde04f2b5144d39ce977
2021-03-11 10:41:57 +00:00
Eddie Tashjian
78cd6eb78e Add selinux policies for mounted modem parition
Bug: 178980032
Bug: 178979986
Bug: 179198083
Bug: 179198085
Bug: 178980065

Test: Check selinux denials
Change-Id: I7f826442d1536946d0e84aadfd80f679c0f4d6da
2021-03-11 10:16:27 +00:00
TreeHugger Robot
75e52314ad Merge changes I68aace66,Idf510e4a into sc-dev am: ef6e91692a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824668

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: Ie76c219de19bfeb0ec28895580e1ae631f4dc032
2021-03-11 09:43:48 +00:00
TreeHugger Robot
ef6e91692a Merge changes I68aace66,Idf510e4a into sc-dev
* changes:
  gs101-sepolicy: Add twoshay permissions
  Add touch procfs and sysfs sepolicy
2021-03-11 09:16:51 +00:00
Lopy Cheng
5019452cbb HardwareInfo: Add sepolicy for display
hardwareinfo: type=1400 audit(0.0:17): avc: denied { read } for name="serial_number" dev="sysfs" ino=68309 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_display:s0 tclass=file permissive=1 app=com.google.android.hardwareinfo
hardwareinfo: type=1400 audit(0.0:18): avc: denied { open } for path="/sys/devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/serial_number" dev="sysfs" ino=68309 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_display:s0 tclass=file permissive=1 app=com.google.android.hardwareinfo
hardwareinfo: type=1400 audit(0.0:19): avc: denied { getattr } for path="/sys/devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/serial_number" dev="sysfs" ino=68309 scontext=u:r:hardware_info_app:s0:c512,c768 tcontext=u:object_r:sysfs_display:s0 tclass=file permissive=1 app=com.google.android.hardwareinfo

Bug: 161943795
Test:
1. Remove hardwareinfo app
rm -r /data/data/com.google.android.hardwareinfo/
2. Connect wifi and reboot
3. Check the HardwareInfoService status.
4. There is no AVC denied log.

Change-Id: I4d1c83a1c5b0f2f3bdd64ab79ab45fb69470b25b
2021-03-11 08:38:43 +00:00
yihsiangpeng
cc8429cc0d Move wireless charger HAL to 1.3
Bug: 179464598
Signed-off-by: yihsiangpeng <yihsiangpeng@google.com>
Change-Id: I73d1d811f2483bbe80e7d4aea1f6e9f143bc2836
2021-03-11 14:47:49 +08:00
TreeHugger Robot
152dcc1b4d Merge changes I6f6e8359,Ib7bf4029 into sc-dev am: db0ca5a3b2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13816037

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I4817667db5897b8eac0e12f45d9d8c630128b1cb
2021-03-11 04:35:25 +00:00
TreeHugger Robot
db0ca5a3b2 Merge changes I6f6e8359,Ib7bf4029 into sc-dev
* changes:
  label kernel modules and grant bt permission
  update error on ROM 7196668
2021-03-11 03:53:57 +00:00
TreeHugger Robot
f77f159364 Merge "Fix avc denied issue when accessing to IStats service" into sc-dev am: 6657774b4c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13806168

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I64600db02c76e2bfaa3ddf03373585817d33daab
2021-03-10 17:31:10 +00:00
TreeHugger Robot
6657774b4c Merge "Fix avc denied issue when accessing to IStats service" into sc-dev 2021-03-10 16:57:56 +00:00
TreeHugger Robot
72cfb31ebe Merge "Fix avc denied in OMA DM" into sc-dev am: d2cee097f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13816043

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I4c471c8e3d6d29082744dc044fb22af6849411b2
2021-03-10 16:37:32 +00:00
TreeHugger Robot
d2cee097f8 Merge "Fix avc denied in OMA DM" into sc-dev 2021-03-10 15:52:45 +00:00
Tai Kuo
8cac55487b gs101-sepolicy: Add twoshay permissions
Add twoshay and touch input context library permissions

Bug: 173330899
Bug: 173330981
Test: check boot-time twoshay startup and no denials.
Signed-off-by: Steve Pfetsch <spfetsch@google.com>
Change-Id: I68aace66f49c2af1ebfd4bde7082039f9caf3f64
Signed-off-by: Tai Kuo <taikuo@google.com>
2021-03-10 22:23:49 +08:00
SalmaxChang
2b90406669 cbd: Fix avc errors am: 6247ff69b2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13816040

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: Ibf0d222fc8bafcdaa0b7b8c5fe861749a6192bc6
2021-03-10 14:03:20 +00:00
SalmaxChang
ebab404edb vendor_init: Update tracking denials am: 7edb7e30c4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13816041

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I9e928515b554984b84d853608d6ecd9351b2a39f
2021-03-10 14:03:14 +00:00
SalmaxChang
6247ff69b2 cbd: Fix avc errors
avc: denied { setuid } for comm="cbd" capability=7 scontext=u:r:cbd:s0 tcontext=u:r:cbd:s0 tclass=capability permissive=1
avc: denied { search } for comm="cbd" name="vendor" dev="tmpfs" ino=2 scontext=u:r:cbd:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=1

Bug: 178331928
Bug: 171267363
Change-Id: Icf28f494f05ee386ce94213929926369f2775173
2021-03-10 13:33:43 +00:00
SalmaxChang
7edb7e30c4 vendor_init: Update tracking denials
Removed the path creation from init rc.

Bug: 177186257
Change-Id: I5a8e99ae273d0c8370255bcdb4b9e802fa9895ca
2021-03-10 13:33:19 +00:00
Jack Wu
b10c77244b hal_health_default: Fix avc denials am: 522a8aefcf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13816038

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I543f53ff53fd1db6d12c66683c956ff21a7f5da8
2021-03-10 12:46:33 +00:00
Tai Kuo
4dd3e1e99e Add touch procfs and sysfs sepolicy
Touch palm sepolicies are not included.

Bug: 173330981
Test: No avc denied log for touch sysfs, procfs access.
Signed-off-by: Tai Kuo <taikuo@google.com>
Change-Id: Idf510e4a9c65e5af0885159353ef85d6b6ec553f
2021-03-10 17:00:16 +08:00
Calvin Pan
47bf48c03b Fix avc denied in OMA DM
03-10 11:30:05.640 30617 30617 I auditd  : type=1400 audit(0.0:493): avc: denied { search } for comm="IntentService[D" name="radio" dev="dm-6" ino=242 scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=dir permissive=1 app=com.android.omadm.service
03-10 11:30:05.640 30617 30617 I IntentService[D: type=1400 audit(0.0:493): avc: denied { search } for name="radio" dev="dm-6" ino=242 scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=dir permissive=1 app=com.android.omadm.service
03-10 11:30:05.640 30617 30617 I auditd  : type=1400 audit(0.0:494): avc: denied { getattr } for comm="IntentService[D" path="/data/vendor/radio/omadm_logs.txt" dev="dm-6" ino=17137 scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:radio_vendor_data_file:s0:c512,c768 tclass=file permissive=1 app=com.android.omadm.service
03-10 11:30:05.640 30617 30617 I IntentService[D: type=1400 audit(0.0:494): avc: denied { getattr } for path="/data/vendor/radio/omadm_logs.txt" dev="dm-6" ino=17137 scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:radio_vendor_data_file:s0:c512,c768 tclass=file permissive=1 app=com.android.omadm.service
03-10 11:30:05.640 30617 30617 I auditd  : type=1400 audit(0.0:495): avc: denied { setattr } for comm="IntentService[D" name="omadm_logs.txt" dev="dm-6" ino=17137 scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:radio_vendor_data_file:s0:c512,c768 tclass=file permissive=1 app=com.android.omadm.service
03-10 11:30:05.640 30617 30617 I IntentService[D: type=1400 audit(0.0:495): avc: denied { setattr } for name="omadm_logs.txt" dev="dm-6" ino=17137 scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:radio_vendor_data_file:s0:c512,c768 tclass=file permissive=1 app=com.android.omadm.service
03-10 11:30:05.640 30617 30617 I auditd  : type=1400 audit(0.0:496): avc: denied { append } for comm="IntentService[D" name="omadm_logs.txt" dev="dm-6" ino=17137 scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:radio_vendor_data_file:s0:c512,c768 tclass=file permissive=1 app=com.android.omadm.service
03-10 11:30:05.640 30617 30617 I IntentService[D: type=1400 audit(0.0:496): avc: denied { append } for name="omadm_logs.txt" dev="dm-6" ino=17137 scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:radio_vendor_data_file:s0:c512,c768 tclass=file permissive=1 app=com.android.omadm.service
03-10 11:30:05.640 30617 30617 I auditd  : type=1400 audit(0.0:497): avc: denied { open } for comm="IntentService[D" path="/data/vendor/radio/omadm_logs.txt" dev="dm-6" ino=17137 scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:radio_vendor_data_file:s0:c512,c768 tclass=file permissive=1 app=com.android.omadm.service
03-10 11:30:05.640 30617 30617 I IntentService[D: type=1400 audit(0.0:497): avc: denied { open } for path="/data/vendor/radio/omadm_logs.txt" dev="dm-6" ino=17137 scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:radio_vendor_data_file:s0:c512,c768 tclass=file permissive=1 app=com.android.omadm.service

03-10 11:57:07.155   386   386 E SELinux : avc:  denied  { find } for pid=8406 uid=10141 name=autofill scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:autofill_service:s0 tclass=service_manager permissive=1
03-10 11:57:07.155   386   386 I auditd  : avc:  denied  { find } for pid=8406 uid=10141 name=autofill scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:autofill_service:s0 tclass=service_manager permissive=1

03-10 12:26:05.904   388   388 E SELinux : avc:  denied  { find } for pid=12124 uid=10141 name=activity scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:activity_service:s0 tclass=service_manager permissive=1
03-10 12:26:05.904   388   388 I auditd  : avc:  denied  { find } for pid=12124 uid=10141 name=activity scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:activity_service:s0 tclass=service_manager permissive=1
03-10 12:26:05.931   388   388 E SELinux : avc:  denied  { find } for pid=12124 uid=10141 name=activity_task scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:activity_task_service:s0 tclass=service_manager permissive=1
03-10 12:26:05.931   388   388 I auditd  : avc:  denied  { find } for pid=12124 uid=10141 name=activity_task scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:activity_task_service:s0 tclass=service_manager permissive=1
03-10 12:26:05.960   388   388 E SELinux : avc:  denied  { find } for pid=12124 uid=10141 name=SurfaceFlinger scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:surfaceflinger_service:s0 tclass=service_manager permissive=1
03-10 12:26:05.960   388   388 I auditd  : avc:  denied  { find } for pid=12124 uid=10141 name=SurfaceFlinger scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:surfaceflinger_service:s0 tclass=service_manager permissive=1
03-10 12:26:05.960   388   388 E SELinux : avc:  denied  { find } for pid=12124 uid=10141 name=gpu scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:gpu_service:s0 tclass=service_manager permissive=1
03-10 12:26:05.960   388   388 I auditd  : avc:  denied  { find } for pid=12124 uid=10141 name=gpu scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:gpu_service:s0 tclass=service_manager permissive=1
03-10 12:26:06.041   388   388 E SELinux : avc:  denied  { find } for pid=12124 uid=10141 name=audio scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:audio_service:s0 tclass=service_manager permissive=1
03-10 12:26:06.041   388   388 I auditd  : avc:  denied  { find } for pid=12124 uid=10141 name=audio scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:audio_service:s0 tclass=service_manager permissive=1

03-10 12:35:40.653   387   387 E SELinux : avc:  denied  { find } for pid=8328 uid=10141 name=tethering scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:tethering_service:s0 tclass=service_manager permissive=1
03-10 12:35:40.654   387   387 I auditd  : avc:  denied  { find } for pid=8328 uid=10141 name=tethering scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:tethering_service:s0 tclass=service_manager permissive=1
03-10 12:35:40.658   387   387 E SELinux : avc:  denied  { find } for pid=8328 uid=10141 name=isub scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:radio_service:s0 tclass=service_manager permissive=1
03-10 12:35:40.658   387   387 I auditd  : avc:  denied  { find } for pid=8328 uid=10141 name=isub scontext=u:r:omadm_app:s0:c141,c256,c512,c768 tcontext=u:object_r:radio_service:s0 tclass=service_manager permissive=1

Bug: 173990082
Test: Trigger OMA DM
Change-Id: Ie66ecd1c9d80f7b12a4545f3651dd2c5f02b119b
2021-03-10 15:54:08 +08:00
Jack Wu
522a8aefcf hal_health_default: Fix avc denials
[    5.146740] type=1400 audit(1611123521.796:23): avc: denied { search } for comm="android.hardwar" name="4-003c" dev="sysfs" ino=56632 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=1
[    5.425436] type=1400 audit(1611123522.076:24): avc: denied { search } for comm="health@2.1-serv" name="4-003c" dev="sysfs" ino=56632 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=1
[   29.943710] type=1400 audit(1611123546.592:483): avc: denied { write } for comm="health@2.1-serv" name="mode" dev="sysfs" ino=14741 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=1
01-20 14:18:41.796   656   656 I android.hardwar: type=1400 audit(0.0:23): avc: denied { search } for name="4-003c" dev="sysfs" ino=56632 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=1

Bug: 177966434
Test: Verify pass by checking device log are w/o above errors after
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I576547e27dceb55fd768de2834e3bb0155857f56
2021-03-10 14:13:38 +08:00
TreeHugger Robot
552849b103 Merge "hal_power_stats_default: Fix avc denials" into sc-dev am: c625222492
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13806171

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: Ie4d9a36afac8785c4b0a3a5855ce5e62d92195fa
2021-03-10 02:50:50 +00:00
Adam Shih
58b3344c7a label kernel modules and grant bt permission
Bug: 182320300
Bug: 182320258
Test: boot to home and connect to bluetooth headset under enforcing mode
Change-Id: I6f6e8359d03eb4205268d56a1fcd50ce1445f442
2021-03-10 10:36:45 +08:00
Adam Shih
487f66f754 update error on ROM 7196668
Bug: 182320300
Bug: 182320246
Bug: 182320258
Bug: 182320172
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ib7bf40299374061526a87714cfd8982544a1698f
2021-03-10 10:34:03 +08:00
TreeHugger Robot
c625222492 Merge "hal_power_stats_default: Fix avc denials" into sc-dev 2021-03-10 02:11:04 +00:00
Adam Shih
84bb9a87b8 Merge "remove obsolete entries and put crucial domains to permissive" into sc-dev am: 48113ddced
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13805052

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: If914068d4fb3369486f1dbef8af614245b9dfa0b
2021-03-10 01:46:48 +00:00
TreeHugger Robot
4926c30d09 Merge "dumpstate: allow dumpstate to access displaycolor" into sc-dev am: c8e903d1c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13806024

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: If0f57e685973290e3323cd954367cb60864bd654
2021-03-10 01:46:19 +00:00
andychou
ce711fd18e Fix avc denied issue when accessing to IStats service
Originally we use isPriv=true but Exo APP is not located in priv-app
folder.
So has to remove isPriv=true and add into net_domain in order to network
accessing.
This is a clone cl updated from ag/13794482

Bug: 180594376
Test: manual test if there is avc denied
Change-Id: Icb5009248d10c23e772040aad8ac2fed849bafa0
2021-03-10 09:27:04 +08:00
Adam Shih
48113ddced Merge "remove obsolete entries and put crucial domains to permissive" into sc-dev 2021-03-10 01:24:44 +00:00
TreeHugger Robot
c8e903d1c8 Merge "dumpstate: allow dumpstate to access displaycolor" into sc-dev 2021-03-10 01:15:42 +00:00
Yu-Chi Cheng
9ba0f29835 Merge "Allowed the EdgeTPU service to access Package Manager binder service." into sc-dev am: 02ecfdcc0d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13809458

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: Iad3c70644d6dce4045a9cac95315d7b60d1721b8
2021-03-09 15:38:26 +00:00
Yu-Chi Cheng
02ecfdcc0d Merge "Allowed the EdgeTPU service to access Package Manager binder service." into sc-dev 2021-03-09 15:00:12 +00:00
Jack Wu
a3678d9487 hal_power_stats_default: Fix avc denials
[  351.298850] type=1400 audit(1614041245.976:13): avc: denied { read } for comm="android.hardwar" name="hf1_wfi" dev="sysfs" ino=78155 scontext=u:r:hal_power_stats_default:s0 tcontext=u:object_r:sysfs_aoc:s0 tclass=file permissive=1
[  698.658433] type=1400 audit(1614041593.336:1733): avc: denied { open } for comm="stats@1.0-servi" path="/sys/devices/platform/19000000.aoc/control/monitor_mode" dev="sysfs" ino=78158 scontext=u:r:hal_power_stats_default:s0 tcontext=u:object_r:sysfs_aoc:s0 tclass=file permissive=1
02-23 08:53:13.336   673   673 I stats@1.0-servi: type=1400 audit(0.0:1734): avc: denied { getattr } for path="/sys/devices/platform/19000000.aoc/control/monitor_mode" dev="sysfs" ino=78158 scontext=u:r:hal_power_stats_default:s0 tcontext=u:object_r:sysfs_aoc:s0 tclass=file permissive=1
02-23 08:52:26.228   670   670 I android.hardwar: type=1400 audit(0.0:724): avc: denied { search } for name="19000000.aoc" dev="sysfs" ino=18343 scontext=u:r:hal_power_stats_default:s0 tcontext=u:object_r:sysfs_aoc:s0 tclass=dir permissive=1

Bug: 180963514
Test: Verify pass by checking device log are w/o above errors after
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: Iab245b320c1f6e75407f1fafb5ad20a087b1a707
2021-03-09 14:21:20 +00:00
raylinhsu
43fb32d300 dumpstate: allow dumpstate to access displaycolor
In bugreport, we need to dump libdisplaycolor information.
Hence, we should add corresponding sepolicy.

Bug: 181915591
Test: There is no avc denied regarding to displaycolor when we
capture the bugreport.

Change-Id: I9f7f8f451fab24b4d0c49305d96b8db6b4d0eed4
2021-03-09 19:06:24 +08:00
Adam Shih
df06cd7760 remove obsolete entries and put crucial domains to permissive
Bug: 171942789
Bug: 178979986
Bug: 179310854
Bug: 178980065
Bug: 179198085
Bug: 178980032
Test: boot to home under enforcing mode
Change-Id: Ic925dbbb74ca2ba38b22c982761c1e214886bfa1
2021-03-09 13:46:42 +08:00
Charlie Chen
4cb9150dc0 Merge changes I8de6132f,I2bc6057d into sc-dev am: e265637395
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13775695

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: Iabd11156d2fcf57c745c90353baf089417ed3984
2021-03-09 05:11:25 +00:00
Charlie Chen
e265637395 Merge changes I8de6132f,I2bc6057d into sc-dev
* changes:
  Remove dma_buf_heap tracking_denials
  Add missing permission to dmabuf_video_system_heap
2021-03-09 04:58:08 +00:00
TreeHugger Robot
5ce78ab9bf Merge "update error on ROM 7193586" into sc-dev am: ce148d20c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13775691

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I8be41bf126ea037a133810f05364050efa6f37f0
2021-03-09 04:48:12 +00:00
TreeHugger Robot
ce148d20c6 Merge "update error on ROM 7193586" into sc-dev 2021-03-09 04:05:05 +00:00
Charlie Chen
019eec3f64 Remove dma_buf_heap tracking_denials
Bug: 182086551
Bug: 182086552
Bug: 182086686
Bug: 182086482
Bug: 182086481
Bug: 182086550
Test: atest VtsHalMediaC2V1_0TargetVideoDecTest
Change-Id: I8de6132fb41b0418f67baac4971ee03031ec3e32
2021-03-09 02:42:56 +00:00
TreeHugger Robot
a60b76aae2 Merge "sepolicy: add sensor related rules for AIDL APIs" into sc-dev am: 9c51e64c6e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13805046

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: Ic7ec7dc37858c5f79918208873bad661a6e60bda
2021-03-09 02:37:08 +00:00
Taehwan Kim
7d77820127 Add missing permission to dmabuf_video_system_heap
Bug: 153786620
Bug: 182086551
Bug: 182086552
Bug: 182086686
Bug: 182086482
Bug: 182086481
Bug: 182086550
Test: atest VtsHalMediaC2V1_0TargetVideoDecTest
Signed-off-by: Taehwan Kim <t_h.kim@samsung.com>
Change-Id: I2bc6057d16bbcc32ef8891f89c0440618d174982
2021-03-09 02:19:06 +00:00
TreeHugger Robot
9c51e64c6e Merge "sepolicy: add sensor related rules for AIDL APIs" into sc-dev 2021-03-09 02:03:39 +00:00
Adam Shih
47abac4459 update error on ROM 7193586
Bug: 182218891
Bug: 182219008
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Id3d823c2ec41f9b777ccb666338a195bbd3047b6
2021-03-09 09:53:59 +08:00
TreeHugger Robot
b33e0adb8b Merge "Fix selinux error for vendor_telephony_app" into sc-dev am: 9185f0aafd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13805051

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: If06a9bc3c1794342f7c67eac5630cf930a761d4e
2021-03-09 01:38:24 +00:00
TreeHugger Robot
82903ddc8b Merge "trusty_apploader: Fix avc errors" into sc-dev am: c5c7a85a0d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13805060

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: Ia054941d8d4a804355e0b7a2f5008392b14528b9
2021-03-09 01:37:50 +00:00
TreeHugger Robot
9185f0aafd Merge "Fix selinux error for vendor_telephony_app" into sc-dev 2021-03-09 01:01:45 +00:00
TreeHugger Robot
c5c7a85a0d Merge "trusty_apploader: Fix avc errors" into sc-dev 2021-03-09 00:55:06 +00:00
Yu-Chi Cheng
d18a92b0ef Allowed the EdgeTPU service to access Package Manager binder service.
EdgeTPU service will connect to the Package Manager service
to verify applicatoin signatures.
This change added the corresponding SELinux rules to allow such
connection.

Bug: 181821398
Test: Verified using Google Camera App on local device.
Change-Id: Ia32b3de102c162e28710e0aa917831e8de784183
2021-03-08 16:02:14 -08:00
Isaac Chiou
73ce34397a Wifi: Add sepolicy files for wifi_ext service
This commit adds the sepolicy related files for wifi_ext service.

Bug: 171944352
Bug: 177966433
Bug: 177673356
Test: Manual
Change-Id: I1613e396fd4c904ed563dfd533fb4b8f807f9657
2021-03-08 19:36:29 +08:00
TreeHugger Robot
a065e95101 Merge "sepolicy: add usf folder to BOARD_SEPOLICY_DIRS." into sc-dev am: cd3a13deaf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13805047

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I1c4d2d007c2aed0b04d33b9c6963361eda847d06
2021-03-08 09:11:36 +00:00
TreeHugger Robot
81e4375464 Merge "Allow vendor_init to set USB properties" into sc-dev am: 433719c74f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13805049

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: Ib28bddd965e4644c09ece13ec1cabd338097b581
2021-03-08 09:11:29 +00:00
TreeHugger Robot
cd3a13deaf Merge "sepolicy: add usf folder to BOARD_SEPOLICY_DIRS." into sc-dev 2021-03-08 09:02:32 +00:00
matthuang
94095e1fd3 sepolicy: add sensor related rules for AIDL APIs
SELinux : avc:  denied  { find } for pid=703 uid=1000name=android.frameworks.stats.IStats/default
scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:fwk_stats_service:s0 tclass=service_manager permissive=1
android.hardwar: type=1400 audit(0.0:24): avc: denied { transfer } for scontext=u:r:hal_sensors_default:s0
tcontext=u:r:servicemanager:s0 tclass=binder permissive=1

Bug: 182086688
Test: make selinux_policy -j128 and push to device.
Test: avc denials are disappeared in boot log.
Change-Id: I13e658c1cef3bd24ae25cc1c22dd9336b4e45b0f
2021-03-08 09:00:36 +00:00
Kris Chen
5c76e0c1f3 trusty_apploader: Fix avc errors
Fix the following avc denials:
trusty_apploade: type=1400 audit(0.0:3): avc: denied { read } for name="system" dev="tmpfs" ino=713 scontext=u:r:trusty_apploader:s0 tcontext=u:object_r:dmabuf_system_heap_device:s0 tclass=chr_file permissive=1
trusty_apploade: type=1400 audit(0.0:4): avc: denied { open } for path="/dev/dma_heap/system" dev="tmpfs" ino=713 scontext=u:r:trusty_apploader:s0 tcontext=u:object_r:dmabuf_system_heap_device:s0 tclass=chr_file permissive=1
trusty_apploade: type=1400 audit(0.0:5): avc: denied { ioctl } for path="/dev/dma_heap/system" dev="tmpfs" ino=713 ioctlcmd=0x4800 scontext=u:r:trusty_apploader:s0 tcontext=u:object_r:dmabuf_system_heap_device:s0 tclass=chr_file permissive=1

Bug: 180874342
Test: Verify no avc denied when trusty app is loaded.
Change-Id: Idbd850580220a1cb85a221d769d741f63cd8751f
2021-03-08 16:42:27 +08:00
TreeHugger Robot
433719c74f Merge "Allow vendor_init to set USB properties" into sc-dev 2021-03-08 08:38:01 +00:00
SalmaxChang
e0e29b3505 cbd: Fix avc errors am: 4d87bc0f2a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13805045

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I088a4f7fec8e864e44f8bcb2066b21d523a60cff
2021-03-08 08:04:19 +00:00
Aaron Tsai
5e63caa568 Fix selinux error for vendor_telephony_app
// b/174961423
[   43.295540] type=1400 audit(1607136492.652:21): avc: denied { open } for comm="y.silentlogging" path="/dev/__properties__/u:object_r:vendor_persist_sys_default_prop:s0" dev="tmpfs" ino=261 scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:vendor_persist_sys_default_prop:s0 tclass=file permissive=1
[   43.295445] type=1400 audit(1607136492.652:20): avc: denied { read } for comm="y.silentlogging" name="u:object_r:vendor_persist_sys_default_prop:s0" dev="tmpfs" ino=261 scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:vendor_persist_sys_default_prop:s0 tclass=file permissive=1
[   43.290494] type=1400 audit(1607136492.648:19): avc: denied { search } for comm="y.silentlogging" name="com.samsung.slsi.telephony.silentlogging" dev="dm-6" ino=3751 scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=1
[   43.267396] type=1400 audit(1607136492.624:18): avc: denied { getattr } for comm="y.silentlogging" path="/data/user/0/com.samsung.slsi.telephony.silentlogging" dev="dm-6" ino=3751 scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=1
[   43.267076] type=1400 audit(1607136492.624:17): avc: denied { search } for comm="y.silentlogging" name="data" dev="dm-6" ino=87 scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:system_data_file:s0:c512,c768 tclass=dir permissive=1

// b/176868380
[   44.640326] type=1400 audit(1609377760.052:32): avc: denied { search } for comm="y.silentlogging" name="0" dev="dm-6" ino=181 scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:user_profile_root_file:s0:c512,c768 tclass=dir permissive=1
[   44.705763] type=1400 audit(1609377760.120:36): avc: denied { search } for comm="ephony.testmode" name="0" dev="dm-6" ino=181 scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:user_profile_root_file:s0:c512,c768 tclass=dir permissive=1
[   44.649879] type=1400 audit(1609377760.064:33): avc: denied { getattr } for comm="y.silentlogging" path="/dev/__properties__/u:object_r:vendor_persist_sys_default_prop:s0" dev="tmpfs" ino=261 scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:vendor_persist_sys_default_prop:s0 tclass=file permissive=1
[   44.649981] type=1400 audit(1609377760.064:34): avc: denied { map } for comm="y.silentlogging" path="/dev/__properties__/u:object_r:vendor_persist_sys_default_prop:s0" dev="tmpfs" ino=261 scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:vendor_persist_sys_default_prop:s0 tclass=file permissive=1
[   44.650286] type=1400 audit(1609377760.064:35): avc: denied { search } for comm="y.silentlogging" name="slog" dev="dm-6" ino=228 scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:vendor_slog_file:s0 tclass=dir permissive=1

// b/177176900
[   46.609809] type=1400 audit(1610075109.964:21): avc: denied { getattr } for comm="ephony.testmode" path="/dev/__properties__/u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=266 scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=1
[   46.609747] type=1400 audit(1610075109.964:20): avc: denied { open } for comm="ephony.testmode" path="/dev/__properties__/u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=266 scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=1
[   46.609580] type=1400 audit(1610075109.960:19): avc: denied { read } for comm="ephony.testmode" name="u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=266 scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=1
[   46.609867] type=1400 audit(1610075109.964:22): avc: denied { map } for comm="ephony.testmode" path="/dev/__properties__/u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=266 scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=1

// b/179437464
02-05 09:46:38.796   376   376 E SELinux : avc:  denied  { find } for pid=9609 uid=1000 name=activity scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:activity_service:s0 tclass=service_manager permissive=1
02-05 09:46:38.894   376   376 E SELinux : avc:  denied  { find } for pid=9631 uid=1000 name=thermalservice scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:thermal_service:s0 tclass=service_manager permissive=1
02-05 09:46:38.825   376   376 E SELinux : avc:  denied  { find } for pid=9609 uid=1000 name=tethering scontext=u:r:vendor_telephony_app:s0 tcontext=u:object_r:tethering_service:s0 tclass=service_manager permissive=1


Bug: 174961423
Bug: 176868380
Bug: 177176900
Bug: 179437464

Test: verified with the forrest ROM and error log gone
Change-Id: Ibd2dfb61eb58b381504ac43595e99695a5e21b7e
2021-03-08 15:48:34 +08:00
Alex Hong
6bfbfc3c3a Allow vendor_init to set USB properties
Bug: 181925042
Test: $ make selinux_policy
      Push SELinux modules, switch to Enforcing mode
      Ensure the vendor_init denials are gone
Change-Id: I4007cbc2396fa1fc22f1d18a977beb11c57e3b12
2021-03-08 14:59:13 +08:00
matthuang
04275485f7 sepolicy: add usf folder to BOARD_SEPOLICY_DIRS.
03-08 09:26:34.320   701   701 I MonitorFdThread: type=1400
audit(0.0:5): avc: denied { read } for name="/" dev="tmpfs" ino=1
scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:device:s0
tclass=dir permissive=1
03-08 09:26:34.320   701   701 I MonitorFdThread: type=1400
audit(0.0:6): avc: denied { watch } for path="/dev" dev="tmpfs" ino=1
scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:device:s0
tclass=dir permissive=1
03-08 09:26:36.344   701   701 I android.hardwar: type=1400
audit(0.0:11): avc: denied { read write } for name="acd-com.google.usf"
dev="tmpfs" ino=932 scontext=u:r:hal_sensors_default:s0
tcontext=u:object_r:aoc_device:s0 tclass=chr_file permissive=1
03-08 09:26:36.344   701   701 I android.hardwar: type=1400
audit(0.0:12): avc: denied { open } for path="/dev/acd-com.google.usf"
dev="tmpfs" ino=932 scontext=u:r:hal_sensors_default:s0
tcontext=u:object_r:aoc_device:s0 tclass=chr_file permissive=1
03-08 09:26:36.948   701   701 I android.hardwar: type=1400
audit(0.0:13): avc: denied { search } for name="vendor" dev="tmpfs"
ino=2 scontext=u:r:hal_sensors_default:s0
tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=1
03-08 09:26:36.948   701   701 I android.hardwar: type=1400
audit(0.0:14): avc: denied { search } for name="/" dev="sda1" ino=2
scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:persist_file:s0
tclass=dir permissive=1
03-08 09:26:36.952   701   701 I android.hardwar: type=1400
audit(0.0:15): avc: denied { getattr } for
path="/mnt/vendor/persist/sensors/registry" dev="sda1" ino=24
scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:persist_file:s0
tclass=dir permissive=1
03-08 09:26:36.952   701   701 I android.hardwar: type=1400
audit(0.0:16): avc: denied { read } for name="registry" dev="sda1"
ino=24

Bug:182086633
Test: make selinux_policy -j128 and push to device.
Test: avc denials are disappeared in boot log.

Change-Id: Id7ad6dcb63c880a4b7b07dbe4588ec231e9e00b5
2021-03-08 14:08:19 +08:00
SalmaxChang
4d87bc0f2a cbd: Fix avc errors
avc: denied { write } for comm="cbd" name="ssrdump" dev="dm-9" ino=284 scontext=u:r:cbd:s0 tcontext=u:object_r:sscoredump_vendor_data_crashinfo_file:s0 tclass=dir
avc: denied { add_name } for comm="cbd" name="crashinfo_modem_2021-03-02_10-57-06.txt" scontext=u:r:cbd:s0 tcontext=u:object_r:sscoredump_vendor_data_crashinfo_file:s0 tclass=dir
avc: denied { write } for comm="sh" name="image" dev="dm-9" ino=231 scontext=u:r:cbd:s0 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=dir
avc: denied { read } for comm="cbd" name="u:object_r:radio_prop:s0" dev="tmpfs" ino=206 scontext=u:r:cbd:s0 tcontext=u:object_r:radio_prop:s0 tclass=file
avc: denied { search } for comm="cbd" name="/" dev="sda15" ino=2 scontext=u:r:cbd:s0 tcontext=u:object_r:persist_file:s0 tclass=dir
avc: denied { syslog_read } for comm="cbd" scontext=u:r:cbd:s0 tcontext=u:r:kernel:s0 tclass=system

Bug: 179198083
Bug: 178331928
Bug: 171267363
Change-Id: I8a89e360e6d614ad76ed2eb78467fcbedf1ea0ce
2021-03-08 06:00:45 +00:00
Adam Shih
5507bcec80 update error on ROM 7191013 am: fc5a6a88db
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13774535

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I72fd905ee651ecd95613d9ae001edc1a95830323
2021-03-08 03:51:27 +00:00
Adam Shih
fc5a6a88db update error on ROM 7191013
Bug: 182086633
Bug: 182086611
Bug: 182086552
Bug: 182086686
Bug: 182086550
Bug: 182086551
Bug: 182086482
Bug: 182086688
Bug: 182086481
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I3c8c411d985a4a3c9210a39aa30ea0c3626f65e0
2021-03-08 09:42:05 +08:00
Robin Peng
a735e7cdca Move slider-sepolicy into gs101-sepolicy am: 5009efa776
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13621329

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: Icaa962713fdc9bec23c02354912586f57c7d99d3
2021-03-07 09:15:06 +00:00
Robin Peng
5009efa776 Move slider-sepolicy into gs101-sepolicy
from: 71e609c24c97fc8d44843af30527cbeb90d5dcdf

Bug: 167996145
Change-Id: Ie00e7e0983a3ca695bbd5140c929d07a80144301
2021-03-06 16:15:39 +08:00
Robin Peng
02ec626eb7 Add owners file am: ed6fcdbdc1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13768969

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: Ia1ae271ee6508588ec8496fb1428fe8b1a2aa992
2021-03-04 18:57:27 +00:00
Robin Peng
ed6fcdbdc1 Add owners file
Bug: 167996145
Change-Id: I0865c8272d32859ab5ce44841582ee371b0cf972
2021-03-04 16:33:18 +08:00
Inna Palant
28ea155558 Initial empty repository 2021-01-22 08:06:42 -08:00
273 changed files with 5822 additions and 616 deletions

1
.gitupstream Normal file
View File

@@ -0,0 +1 @@
https://android.googlesource.com/device/google/gs101

View File

@@ -1,37 +0,0 @@
#
# Copyright (C) 2011 The Android Open-Source Project
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# WARNING: Everything listed here will be built on ALL platforms,
# including x86, the universal, and the SDK. Modules must be uniquely
# named (liblights.panda), and must build everywhere, or limit themselves
# to only building on ARM if they include assembly. Individual makefiles
# are responsible for having their own logic, for fine-grained control.
$(eval $(call declare-copy-files-license-metadata,device/google/gs101,default-permissions.xml,SPDX-license-identifier-Apache-2.0,notice,build/soong/licenses/LICENSE,))
$(eval $(call declare-copy-files-license-metadata,device/google/gs101,libnfc-nci.conf,SPDX-license-identifier-Apache-2.0,notice,build/soong/licenses/LICENSE,))
$(eval $(call declare-copy-files-license-metadata,device/google/gs101,fstab.postinstall,SPDX-license-identifier-Apache-2.0,notice,build/soong/licenses/LICENSE,))
$(eval $(call declare-copy-files-license-metadata,device/google/gs101,ueventd.rc,SPDX-license-identifier-Apache-2.0,notice,build/soong/licenses/LICENSE,))
$(eval $(call declare-copy-files-license-metadata,device/google/gs101,wpa_supplicant.conf,SPDX-license-identifier-Apache-2.0,notice,build/soong/licenses/LICENSE,))
$(eval $(call declare-copy-files-license-metadata,device/google/gs101,hals.conf,SPDX-license-identifier-Apache-2.0,notice,build/soong/licenses/LICENSE,))
$(eval $(call declare-copy-files-license-metadata,device/google/gs101,media_profiles_V1_0.xml,SPDX-license-identifier-Apache-2.0,notice,build/soong/licenses/LICENSE,))
$(eval $(call declare-copy-files-license-metadata,device/google/gs101,media_codecs_performance.xml,SPDX-license-identifier-Apache-2.0,notice,build/soong/licenses/LICENSE,))
$(eval $(call declare-copy-files-license-metadata,device/google/gs101,device_state_configuration.xml,SPDX-license-identifier-Apache-2.0,notice,build/soong/licenses/LICENSE,))
$(eval $(call declare-copy-files-license-metadata,device/google/gs101,task_profiles.json,SPDX-license-identifier-Apache-2.0,notice,build/soong/licenses/LICENSE,))
$(eval $(call declare-copy-files-license-metadata,device/google/gs101,p2p_supplicant_overlay.conf,SPDX-license-identifier-Apache-2.0,notice,build/soong/licenses/LICENSE,))
$(eval $(call declare-copy-files-license-metadata,device/google/gs101,wpa_supplicant.conf,SPDX-license-identifier-Apache-2.0,notice,build/soong/licenses/LICENSE,))
$(eval $(call declare-copy-files-license-metadata,device/google/gs101,wpa_supplicant_overlay.conf,SPDX-license-identifier-Apache-2.0,notice,build/soong/licenses/LICENSE,))
$(eval $(call declare-1p-copy-files,device/google/gs101,audio_policy_configuration.xml))

View File

@@ -16,21 +16,18 @@
include build/make/target/board/BoardConfigMainlineCommon.mk
include build/make/target/board/BoardConfigPixelCommon.mk
# Should be uncommented after fixing vndk-sp violation is fixed.
PRODUCT_FULL_TREBLE_OVERRIDE := true
# HACK : To fix up after bring up multimedia devices.
TARGET_SOC := gs101
TARGET_SOC_NAME := google
USES_DEVICE_GOOGLE_GS101 := true
$(call soong_config_set,CitadelProvision,target_soc,gs101)
TARGET_ARCH := arm64
TARGET_ARCH_VARIANT := armv8-2a
TARGET_CPU_ABI := arm64-v8a
TARGET_CPU_VARIANT := cortex-a55
TARGET_CPU_VARIANT_RUNTIME := cortex-a55
DEVICE_IS_64BIT_ONLY ?= $(if $(filter %_64,$(TARGET_PRODUCT)),true,false)
@@ -46,7 +43,9 @@ endif
BOARD_KERNEL_CMDLINE += dyndbg=\"func alloc_contig_dump_pages +p\"
BOARD_KERNEL_CMDLINE += earlycon=exynos4210,0x10A00000 console=ttySAC0,115200 androidboot.console=ttySAC0 printk.devkmsg=on
BOARD_KERNEL_CMDLINE += cma_sysfs.experimental=Y
BOARD_KERNEL_CMDLINE += rcupdate.rcu_expedited=1 rcu_nocbs=all rcutree.enable_rcu_lazy
BOARD_KERNEL_CMDLINE += swiotlb=noforce
BOARD_KERNEL_CMDLINE += cgroup.memory=nokmem
BOARD_BOOTCONFIG += androidboot.boot_devices=14700000.ufs
TARGET_NO_BOOTLOADER := true
@@ -70,7 +69,7 @@ TARGET_RECOVERY_FSTAB_GENRULE = gen_fstab.gs101
TARGET_RECOVERY_PIXEL_FORMAT := ABGR_8888
TARGET_RECOVERY_UI_MARGIN_HEIGHT := 165
TARGET_RECOVERY_UI_LIB := \
librecovery_ui_pixel \
//hardware/google/pixel/recovery:librecovery_ui_pixel \
libfstab
AB_OTA_UPDATER := true
@@ -91,6 +90,9 @@ endif
ifneq ($(PRODUCT_BUILD_VBMETA_IMAGE),false)
AB_OTA_PARTITIONS += vbmeta
endif
ifneq ($(PRODUCT_BUILD_PVMFW_IMAGE),false)
AB_OTA_PARTITIONS += pvmfw
endif
# EMULATOR common modules
BOARD_EMULATOR_COMMON_MODULES := liblight
@@ -146,7 +148,6 @@ BOARD_AVB_BOOT_ROLLBACK_INDEX_LOCATION := 2
TARGET_USERIMAGES_USE_EXT4 := true
TARGET_USERIMAGES_USE_F2FS := true
BOARD_USERDATAIMAGE_PARTITION_SIZE := 11796480000
BOARD_USERDATAIMAGE_FILE_SYSTEM_TYPE := f2fs
PRODUCT_FS_COMPRESSION := 1
BOARD_FLASH_BLOCK_SIZE := 4096
BOARD_MOUNT_SDCARD_RW := true
@@ -171,7 +172,16 @@ BOARD_SUPPORT_MFC_ENC_RGB := true
BOARD_USE_BLOB_ALLOCATOR := false
BOARD_SUPPORT_MFC_ENC_BT2020 := true
BOARD_SUPPORT_FLEXIBLE_P010 := true
$(call soong_config_set,video_codec,target_soc_name,$(TARGET_SOC_NAME))
$(call soong_config_set_bool,video_codec,board_use_codec2_hidl_1_2,$(BOARD_USE_CODEC2_HIDL_1_2))
$(call soong_config_set_bool,video_codec,board_use_csc_filter,$(BOARD_USE_CSC_FILTER))
$(call soong_config_set_bool,video_codec,board_use_dec_sw_csc,$(BOARD_USE_DEC_SW_CSC))
$(call soong_config_set_bool,video_codec,board_use_enc_sw_csc,$(BOARD_USE_ENC_SW_CSC))
$(call soong_config_set_bool,video_codec,board_support_mfc_enc_rgb,$(BOARD_SUPPORT_MFC_ENC_RGB))
$(call soong_config_set_bool,video_codec,board_use_blob_allocator,$(BOARD_USE_BLOB_ALLOCATOR))
$(call soong_config_set_bool,video_codec,board_support_mfc_enc_bt2020,$(BOARD_SUPPORT_MFC_ENC_BT2020))
$(call soong_config_set_bool,video_codec,board_support_flexible_p010,$(BOARD_SUPPORT_FLEXIBLE_P010))
$(call soong_config_set_bool,video_codec,board_use_codec2_aidl,$(if $(BOARD_USE_CODEC2_AIDL),true,false))
########################
BOARD_SUPER_PARTITION_SIZE := 8531214336
@@ -185,8 +195,8 @@ BOARD_GOOGLE_DYNAMIC_PARTITIONS_PARTITION_LIST := \
vendor \
vendor_dlkm
# Set error limit to BOARD_SUPER_PARTITON_SIZE - 500MB
BOARD_SUPER_PARTITION_ERROR_LIMIT := 8006926336
# Set error limit to BOARD_SUPER_PARTITON_SIZE - 400MB
BOARD_SUPER_PARTITION_ERROR_LIMIT := 8111783936
# Testing related defines
BOARD_PERFSETUP_SCRIPT := platform_testing/scripts/perf-setup/r4o6-setup.sh
@@ -198,7 +208,7 @@ BOARD_USES_GENERIC_AUDIO := true
$(call soong_config_set,aoc_audio_func,ext_hidl,true)
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
$(call soong_config_set,aoc_audio_func,dump_usecase_data,true)
$(call soong_config_set,aoc_audio_func,hal_socket_control,true)
$(call soong_config_set,aoc_audio_func,record_tuning_keys,true)
@@ -240,6 +250,8 @@ BOARD_USES_EXYNOS_AFBC_FEATURE := true
BOARD_LIBACRYL_DEFAULT_COMPOSITOR := fimg2d_gs101
BOARD_LIBACRYL_G2D_HDR_PLUGIN := libacryl_hdr_plugin
$(call soong_config_set,acryl,libacryl_g2d_hdr_plugin,//hardware/google/graphics/gs101/libacryl_plugins:libacryl_hdr_plugin)
$(call soong_config_set,acryl,libacryl_c_include,hardware/google/graphics/$(TARGET_BOARD_PLATFORM)/libcap)
# HWCServices
BOARD_USES_HWC_SERVICES := true
@@ -357,12 +369,16 @@ BOARD_VENDOR_KERNEL_MODULES_BLOCKLIST_FILE := $(KERNEL_MODULE_DIR)/vendor_dlkm.m
BOARD_DO_NOT_STRIP_VENDOR_MODULES := true
# Prebuilt kernel modules that are *not* listed in vendor_boot.modules.load
BOARD_PREBUILT_VENDOR_RAMDISK_KERNEL_MODULES = fips140/fips140.ko
BOARD_PREBUILT_VENDOR_RAMDISK_KERNEL_MODULES = fips140.ko
BOARD_VENDOR_RAMDISK_KERNEL_MODULES_LOAD_EXTRA = $(foreach k,$(BOARD_PREBUILT_VENDOR_RAMDISK_KERNEL_MODULES),$(if $(wildcard $(KERNEL_MODULE_DIR)/$(k)), $(k)))
KERNEL_MODULES += $(addprefix $(KERNEL_MODULE_DIR)/, $(BOARD_VENDOR_RAMDISK_KERNEL_MODULES_LOAD_EXTRA))
# Kernel modules that are listed in vendor_boot.modules.load
BOARD_VENDOR_RAMDISK_KERNEL_MODULES_LOAD_FILE := $(strip $(shell cat $(KERNEL_MODULE_DIR)/vendor_boot.modules.load))
# Starting from 6.1, use modules.load instead. It lists modules for vendor ramdisk regardless of the partition name.
ifneq ($(wildcard $(KERNEL_MODULE_DIR)/modules.load),)
BOARD_VENDOR_RAMDISK_KERNEL_MODULES_LOAD_FILE := $(strip $(shell cat $(KERNEL_MODULE_DIR)/modules.load))
else
BOARD_VENDOR_RAMDISK_KERNEL_MODULES_LOAD_FILE := $(strip $(shell cat $(KERNEL_MODULE_DIR)/vendor_boot.modules.load))
endif
ifndef BOARD_VENDOR_RAMDISK_KERNEL_MODULES_LOAD_FILE
$(error vendor_boot.modules.load not found or empty)
endif
@@ -380,7 +396,7 @@ BOARD_VENDOR_KERNEL_MODULES += $(KERNEL_MODULES)
# Using BUILD_COPY_HEADERS
BUILD_BROKEN_USES_BUILD_COPY_HEADERS := true
include device/google/gs101-sepolicy/gs101-sepolicy.mk
include device/google/gs101/sepolicy/gs101-sepolicy.mk
# Battery options
BOARD_KERNEL_CMDLINE += at24.write_timeout=100
@@ -392,3 +408,6 @@ BOARD_KERNEL_CMDLINE += log_buf_len=1024K
BOARD_PVMFWIMAGE_PARTITION_SIZE := 0x00100000
-include vendor/google_devices/gs-common/proprietary/BoardConfigVendor.mk
include device/google/gs101/BoardConfigLineage.mk
include device/google/gs101/BoardConfigEvolution.mk

9
BoardConfigEvolution.mk Normal file
View File

@@ -0,0 +1,9 @@
#
# Copyright (C) 2024 The Evolution X Project
#
# SPDX-License-Identifier: Apache-2.0
#
BUILD_BROKEN_DUP_RULES := true
DISABLE_ARTIFACT_PATH_REQUIREMENTS := true

34
BoardConfigLineage.mk Normal file
View File

@@ -0,0 +1,34 @@
#
# SPDX-FileCopyrightText: 2021-2024 The LineageOS Project
# SPDX-FileCopyrightText: 2021-2024 The Calyx Institute
# SPDX-License-Identifier: Apache-2.0
#
# Manifests
DEVICE_FRAMEWORK_COMPATIBILITY_MATRIX_FILE += vendor/lineage/config/device_framework_matrix.xml
DEVICE_MANIFEST_FILE += device/google/gs101/manifest_radio.xml
# Partitions
AB_OTA_PARTITIONS += \
vendor \
vendor_dlkm
BOARD_VENDORIMAGE_FILE_SYSTEM_TYPE := ext4
BOARD_VENDOR_DLKMIMAGE_FILE_SYSTEM_TYPE := ext4
TARGET_COPY_OUT_VENDOR_DLKM := vendor_dlkm
# Enable chain partition for vendor.
BOARD_AVB_VBMETA_VENDOR := vendor
BOARD_AVB_VBMETA_VENDOR_KEY_PATH := external/avb/test/data/testkey_rsa2048.pem
BOARD_AVB_VBMETA_VENDOR_ALGORITHM := SHA256_RSA2048
BOARD_AVB_VBMETA_VENDOR_ROLLBACK_INDEX := $(PLATFORM_SECURITY_PATCH_TIMESTAMP)
BOARD_AVB_VBMETA_VENDOR_ROLLBACK_INDEX_LOCATION := 3
AB_OTA_PARTITIONS += \
vbmeta_vendor
# Reserve space for gapps install
-include vendor/lineage/config/BoardConfigReservedSize.mk
# Verified Boot
BOARD_AVB_MAKE_VBMETA_IMAGE_ARGS += --flags 3

2
OWNERS
View File

@@ -2,4 +2,4 @@ per-file powerhint.json = wvw@google.com,joaodias@google.com,jenhaochen@google.c
per-file powerhint.json = wvw@google.com,joaodias@google.com,jenhaochen@google.com,rkganesh@google.com,jychen@google.com
# per-file for Pixel device makefiles, see go/pixel-device-mk-owner-checklist for details.
per-file *.mk=file:device/google/gs-common:main:/OWNERS
per-file *.mk,{**/,}Android.bp=file:device/google/gs-common:main:/MK_OWNERS

View File

@@ -0,0 +1,31 @@
<?xml version="1.0" encoding="utf-8"?>
<!-- Copyright (C) 2022 The LineageOS Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<config>
<!-- Specify the explicit set of other applications that AI services are allowed to
interact with, including the providers that back the implementation of the APIs
provided by the package. -->
<allow-association target="com.google.android.as" allowed="com.android.bluetooth" />
<allow-association target="com.google.android.as" allowed="com.android.bluetooth.services" />
<allow-association target="com.google.android.as" allowed="com.android.providers.contacts" />
<allow-association target="com.google.android.as" allowed="com.android.providers.media" />
<allow-association target="com.google.android.as" allowed="com.android.providers.telephony" />
<allow-association target="com.google.android.as" allowed="com.android.systemui" />
<!-- AI services can bind to its open-source network component. -->
<allow-association target="com.google.android.as" allowed="com.google.android.as.oss" />
<!-- AI services open-source network component can only bind back to the core package. -->
<allow-association target="com.google.android.as.oss" allowed="com.google.android.as" />
</config>

View File

@@ -53,7 +53,3 @@ $(call inherit-product, $(SRC_TARGET_DIR)/product/telephony_vendor.mk)
# TODO: fix
# PRODUCT_RESTRICT_VENDOR_FILES := all
# Exclude features that are not available on AOSP devices.
PRODUCT_COPY_FILES += \
frameworks/native/data/etc/aosp_excluded_hardware.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/aosp_excluded_hardware.xml

2
conf/OWNERS Normal file
View File

@@ -0,0 +1,2 @@
# per-file for Pixel fstab
per-file fstab.*=file:device/google/gs-common:main:/FSTAB_OWNERS

View File

@@ -1,3 +1,4 @@
import /vendor/etc/init/hw/init.gs101.storage.rc
import /vendor/etc/init/hw/init.gs101.usb.rc
import android.hardware.drm@1.2-service.widevine.rc
import init.exynos.sensorhub.rc
@@ -15,10 +16,6 @@ on init
# Disable util-awareness
write /proc/vendor_sched/teo_util_threshold "1024 1024 1024"
# Boot time fs tuning
write /sys/block/sda/queue/scheduler bfq
write /sys/block/sda/queue/iosched/slice_idle 0
chown system system /proc/vendor_sched/groups/bg/set_task_group
chown system system /proc/vendor_sched/groups/cam/set_task_group
chown system system /proc/vendor_sched/groups/fg/set_task_group
@@ -47,6 +44,8 @@ on init
chown system system /proc/vendor_sched/prefer_idle_clear
chown system system /proc/vendor_sched/pmu_poll_enable
chown system system /proc/vendor_sched/pmu_poll_time
chown system system /proc/vendor_sched/uclamp_fork_reset_clear
chown system system /proc/vendor_sched/uclamp_fork_reset_set
chown system system /sys/devices/system/cpu/cpufreq/policy0/sched_pixel/lcpi_threshold
chown system system /sys/devices/system/cpu/cpufreq/policy0/sched_pixel/spc_threshold
chown system system /sys/devices/system/cpu/cpufreq/policy0/sched_pixel/limit_frequency
@@ -94,11 +93,90 @@ on init
chmod 0220 /proc/vendor_sched/groups/ota/set_proc_group
chmod 0220 /proc/vendor_sched/prefer_idle_set
chmod 0220 /proc/vendor_sched/prefer_idle_clear
chmod 0220 /proc/vendor_sched/pmu_poll_enable
chmod 0660 /proc/vendor_sched/pmu_poll_enable
chmod 0220 /proc/vendor_sched/pmu_poll_time
chmod 0220 /proc/vendor_sched/uclamp_fork_reset_clear
chmod 0220 /proc/vendor_sched/uclamp_fork_reset_set
start vendor.keymaster-3-0
# Change permission of sched qos nodes
chown system system /proc/vendor_sched/sched_qos/adpf_set
chown system system /proc/vendor_sched/sched_qos/adpf_clear
chown system system /proc/vendor_sched/sched_qos/auto_uclamp_max_set
chown system system /proc/vendor_sched/sched_qos/auto_uclamp_max_clear
chown system system /proc/vendor_sched/sched_qos/boost_prio_set
chown system system /proc/vendor_sched/sched_qos/boost_prio_clear
chown system system /proc/vendor_sched/sched_qos/preempt_wakeup_set
chown system system /proc/vendor_sched/sched_qos/preempt_wakeup_clear
chown system system /proc/vendor_sched/sched_qos/prefer_fit_set
chown system system /proc/vendor_sched/sched_qos/prefer_fit_clear
chown system system /proc/vendor_sched/sched_qos/prefer_high_cap_set
chown system system /proc/vendor_sched/sched_qos/prefer_high_cap_clear
chown system system /proc/vendor_sched/sched_qos/prefer_idle_set
chown system system /proc/vendor_sched/sched_qos/prefer_idle_clear
chown system system /proc/vendor_sched/sched_qos/rampup_multiplier_set
chown system system /proc/vendor_sched/sched_qos/rampup_multiplier_clear
chmod 0220 /proc/vendor_sched/sched_qos/adpf_set
chmod 0220 /proc/vendor_sched/sched_qos/adpf_clear
chmod 0220 /proc/vendor_sched/sched_qos/auto_uclamp_max_set
chmod 0220 /proc/vendor_sched/sched_qos/auto_uclamp_max_clear
chmod 0220 /proc/vendor_sched/sched_qos/boost_prio_set
chmod 0220 /proc/vendor_sched/sched_qos/boost_prio_clear
chmod 0220 /proc/vendor_sched/sched_qos/preempt_wakeup_set
chmod 0220 /proc/vendor_sched/sched_qos/preempt_wakeup_clear
chmod 0220 /proc/vendor_sched/sched_qos/prefer_fit_set
chmod 0220 /proc/vendor_sched/sched_qos/prefer_fit_clear
chmod 0220 /proc/vendor_sched/sched_qos/prefer_high_cap_set
chmod 0220 /proc/vendor_sched/sched_qos/prefer_high_cap_clear
chmod 0220 /proc/vendor_sched/sched_qos/prefer_idle_set
chmod 0220 /proc/vendor_sched/sched_qos/prefer_idle_clear
chmod 0220 /proc/vendor_sched/sched_qos/rampup_multiplier_set
chmod 0220 /proc/vendor_sched/sched_qos/rampup_multiplier_clear
# Enable sched_qos for some groups
write /proc/vendor_sched/groups/ta/qos_adpf_enable 1
write /proc/vendor_sched/groups/ta/qos_auto_uclamp_max_enable 1
write /proc/vendor_sched/groups/ta/qos_boost_prio_enable 1
write /proc/vendor_sched/groups/ta/qos_preempt_wakeup_enable 1
write /proc/vendor_sched/groups/ta/qos_prefer_fit_enable 1
write /proc/vendor_sched/groups/ta/qos_prefer_high_cap_enable 1
write /proc/vendor_sched/groups/ta/qos_prefer_idle_enable 1
write /proc/vendor_sched/groups/ta/qos_rampup_multiplier_enable 1
write /proc/vendor_sched/groups/fg/qos_adpf_enable 1
write /proc/vendor_sched/groups/fg/qos_auto_uclamp_max_enable 1
write /proc/vendor_sched/groups/fg/qos_boost_prio_enable 1
write /proc/vendor_sched/groups/fg/qos_preempt_wakeup_enable 1
write /proc/vendor_sched/groups/fg/qos_prefer_fit_enable 1
write /proc/vendor_sched/groups/fg/qos_prefer_high_cap_enable 1
write /proc/vendor_sched/groups/fg/qos_prefer_idle_enable 1
write /proc/vendor_sched/groups/fg/qos_rampup_multiplier_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_adpf_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_auto_uclamp_max_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_boost_prio_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_preempt_wakeup_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_prefer_fit_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_prefer_high_cap_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_prefer_idle_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_rampup_multiplier_enable 1
write /proc/vendor_sched/groups/cam/qos_adpf_enable 1
write /proc/vendor_sched/groups/cam/qos_auto_uclamp_max_enable 1
write /proc/vendor_sched/groups/cam/qos_prefer_fit_enable 1
write /proc/vendor_sched/groups/cam/qos_prefer_high_cap_enable 1
write /proc/vendor_sched/groups/cam/qos_prefer_idle_enable 1
write /proc/vendor_sched/groups/cam/qos_rampup_multiplier_enable 1
write /proc/vendor_sched/groups/cam_power/qos_adpf_enable 1
write /proc/vendor_sched/groups/cam_power/qos_auto_uclamp_max_enable 1
write /proc/vendor_sched/groups/cam_power/qos_prefer_fit_enable 1
write /proc/vendor_sched/groups/cam_power/qos_prefer_high_cap_enable 1
write /proc/vendor_sched/groups/cam_power/qos_prefer_idle_enable 1
write /proc/vendor_sched/groups/cam_power/qos_rampup_multiplier_enable 1
write /proc/vendor_sched/groups/rt/qos_adpf_enable 1
write /proc/vendor_sched/groups/rt/qos_rampup_multiplier_enable 1
write /proc/vendor_sched/groups/sf/qos_adpf_enable 1
write /proc/vendor_sched/groups/sf/qos_rampup_multiplier_enable 1
# ZRAM setup
write /sys/block/zram0/comp_algorithm lz77eh
write /proc/sys/vm/page-cluster 0
@@ -137,16 +215,6 @@ on init
write /sys/class/net/rmnet6/queues/rx-0/rps_cpus fe
write /sys/class/net/rmnet7/queues/rx-0/rps_cpus fe
# Create UDS structure for base VR services.
mkdir /dev/socket/pdx 0775 system system
mkdir /dev/socket/pdx/system 0775 system system
mkdir /dev/socket/pdx/system/buffer_hub 0775 system system
mkdir /dev/socket/pdx/system/performance 0775 system system
mkdir /dev/socket/pdx/system/vr 0775 system system
mkdir /dev/socket/pdx/system/vr/display 0775 system system
mkdir /dev/socket/pdx/system/vr/pose 0775 system system
mkdir /dev/socket/pdx/system/vr/sensors 0775 system system
# Boot time 183626384
write /proc/vendor_sched/groups/ta/uclamp_min 201
write /proc/vendor_sched/groups/ta/prefer_idle 1
@@ -158,14 +226,11 @@ on init
# governor setting
write /sys/devices/system/cpu/cpu0/cpufreq/scaling_governor sched_pixel
write /sys/devices/system/cpu/cpu0/cpufreq/sched_pixel/up_rate_limit_us 500
write /sys/devices/system/cpu/cpu0/cpufreq/sched_pixel/down_rate_limit_us 5000
write /sys/devices/system/cpu/cpu0/cpufreq/sched_pixel/down_rate_limit_scale_pow 2
write /sys/devices/system/cpu/cpu4/cpufreq/scaling_governor sched_pixel
write /sys/devices/system/cpu/cpu4/cpufreq/sched_pixel/up_rate_limit_us 500
write /sys/devices/system/cpu/cpu4/cpufreq/sched_pixel/down_rate_limit_us 20000
write /sys/devices/system/cpu/cpu6/cpufreq/scaling_governor sched_pixel
write /sys/devices/system/cpu/cpu6/cpufreq/sched_pixel/up_rate_limit_us 500
write /sys/devices/system/cpu/cpu6/cpufreq/sched_pixel/down_rate_limit_us 20000
# memlat cpuidle awareness setting
write /sys/class/devfreq/gs_memlat_devfreq:devfreq_mif_cpu0_memlat@17000010/memlat_cpuidle_state_aware 2
@@ -277,6 +342,7 @@ on init
chown system system /sys/class/power_supply/wireless/device/version
chown system system /sys/class/power_supply/wireless/device/features
chown system system /sys/class/power_supply/wireless/device/authtype
chown system system /sys/class/power_supply/wireless/device/authtstart
# Adaptive charge
chown system system /sys/class/power_supply/battery/charge_deadline
@@ -370,6 +436,11 @@ on late-fs
# Mount RW partitions which need run fsck
mount_all --late
on late-init
write /sys/devices/system/cpu/cpu0/cpufreq/sched_pixel/down_rate_limit_us 5000
write /sys/devices/system/cpu/cpu4/cpufreq/sched_pixel/down_rate_limit_us 20000
write /sys/devices/system/cpu/cpu6/cpufreq/sched_pixel/down_rate_limit_us 20000
on post-fs-data
# Log data folder
mkdir /data/vendor 0771 radio system
@@ -388,7 +459,7 @@ on post-fs-data
mkdir /data/vendor/radio/logs/always-on 777 system radio
# Modem extended log folder
mkdir /data/vendor/radio/extended_logs 0770 radio system
mkdir /data/vendor/radio/extended_logs 0771 radio system
# Modem MDS log folder
mkdir /data/vendor/radio/mds 0771 radio system
@@ -425,8 +496,8 @@ on post-fs-data
restorecon /sys/kernel/debug/tracing/trace_marker
# ranging sensor
chown system system /dev/stmvl53l1_ranging
chmod 0660 /dev/stmvl53l1_ranging
chown system system /dev/ispolin_ranging
chmod 0660 /dev/ispolin_ranging
# Factory calibration files
chmod 0771 /mnt/vendor/persist/camera
@@ -635,8 +706,8 @@ service abox /vendor/bin/main_abox 17c50000.abox
group audioserver
seclabel u:r:abox:s0
# on userdebug and eng builds, enable kgdb on the serial console
on property:ro.debuggable=1
# on eng builds, enable kgdb on the serial console
on property:ro.build.type=eng
write /sys/module/kgdboc/parameters/kgdboc ttyFIQ1
write /sys/module/fiq_debugger/parameters/kgdb_enable 1
@@ -702,6 +773,12 @@ on property:sys.boot_completed=1
write /dev/cpuset/camera-daemon/cpus ${persist.device_config.vendor_system_native.camera-daemon_cpuset:-0-7}
setprop vendor.powerhal.init 1
# Setup scheduler parameters
write /proc/vendor_sched/min_granularity_ns 1000000
write /proc/vendor_sched/latency_ns 8000000
write /proc/vendor_sched/max_load_balance_interval 1
write /proc/vendor_sched/enable_hrtick 1
# Setup final cpu.uclamp
write /proc/vendor_sched/groups/ta/uclamp_min 1
write /proc/vendor_sched/groups/fg/uclamp_min 0
@@ -829,10 +906,12 @@ on property:ro.build.fingerprint=*
write /sys/module/debug_kinfo/parameters/build_info ${ro.build.fingerprint}
# Bluetooth
on post-fs-data
on early-boot
chown bluetooth system /sys/devices/platform/175b0000.serial/serial0/serial0-0/bluetooth/hci0/rfkill0/state
chown bluetooth system /sys/devices/platform/odm/odm:btbcm/rfkill/rfkill0/state
chown bluetooth system /sys/devices/platform/odm/odm:btbcm/rfkill/rfkill2/state
on post-fs-data
chown bluetooth system /proc/bluetooth/sleep/btwake
chown bluetooth system /proc/bluetooth/sleep/lpm
chown bluetooth system /proc/bluetooth/sleep/btwrite
@@ -852,50 +931,12 @@ on property:vendor.thermal.link_ready=1
write /sys/devices/virtual/pmic/mitigation/clock_ratio/gpu_heavy_clk_ratio 0xfff04385
write /sys/devices/virtual/pmic/mitigation/clock_ratio/tpu_heavy_clk_ratio 0xfff041c1
write /sys/devices/virtual/pmic/mitigation/clock_ratio/cpu2_heavy_clk_ratio 0xfff041c0
write /dev/thermal/tz-by-name/smpl_gm/policy user_space
write /dev/thermal/tz-by-name/vdroop1/policy user_space
write /dev/thermal/tz-by-name/vdroop2/policy user_space
write /dev/thermal/tz-by-name/ocp_cpu1/policy user_space
write /dev/thermal/tz-by-name/ocp_cpu2/policy user_space
write /dev/thermal/tz-by-name/ocp_tpu/policy user_space
write /dev/thermal/tz-by-name/ocp_gpu/policy user_space
write /dev/thermal/tz-by-name/soft_ocp_cpu1/policy user_space
write /dev/thermal/tz-by-name/soft_ocp_cpu2/policy user_space
write /dev/thermal/tz-by-name/soft_ocp_tpu/policy user_space
write /dev/thermal/tz-by-name/soft_ocp_gpu/policy user_space
write /dev/thermal/tz-by-name/soc/policy user_space
write /dev/thermal/tz-by-name/batoilo/policy user_space
write /sys/devices/virtual/pmic/mitigation/triggered_lvl/smpl_lvl 3100
write /sys/devices/virtual/pmic/mitigation/triggered_lvl/ocp_cpu1_lvl 7000
write /sys/devices/virtual/pmic/mitigation/triggered_lvl/soft_ocp_cpu1_lvl 7000
write /sys/devices/virtual/pmic/mitigation/clock_div/tpu_clk_div 0x1
write /sys/devices/virtual/pmic/mitigation/clock_div/gpu_clk_div 0x1
write /sys/devices/virtual/pmic/mitigation/clock_div/cpu2_clk_div 0x1
chown system system /dev/thermal/tz-by-name/soc/mode
chown system system /dev/thermal/tz-by-name/batoilo/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/batoilo/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/vdroop2/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/vdroop2/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/vdroop1/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/vdroop1/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/smpl_gm/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/smpl_gm/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/ocp_cpu1/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/ocp_cpu1/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/ocp_cpu2/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/ocp_cpu2/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/ocp_tpu/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/ocp_tpu/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/ocp_gpu/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/ocp_gpu/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/soft_ocp_cpu1/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/soft_ocp_cpu1/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/soft_ocp_cpu2/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/soft_ocp_cpu2/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/soft_ocp_tpu/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/soft_ocp_tpu/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/soft_ocp_gpu/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/soft_ocp_gpu/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/soc/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/soc/trip_point_0_hyst
# Thermal
chown system system /dev/thermal/tz-by-name/quiet_therm/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/quiet_therm/trip_point_0_hyst

View File

@@ -414,3 +414,7 @@ on property:vendor.usb.contaminantdisable=true
on property:ro.bootmode=usbuwb
setprop persist.vendor.usb.usbradio.config uwb_acm
# WAR for kernel 5.10 with CONFIG_USB_DUMMY_HCD enabled
on property:sys.usb.controller=dummy_udc.0
setprop sys.usb.controller "11110000.dwc3"

View File

@@ -3,7 +3,7 @@ on init
setprop sys.usb.controller "11110000.dwc3"
setprop sys.usb.configfs 1
on init && property:ro.debuggable=1 && property:ro.boot.mode=recovery
on init && property:ro.build.type=eng && property:ro.boot.mode=recovery
start recovery-console
service recovery-console /system/bin/sh

View File

@@ -6,4 +6,4 @@ PRODUCT_PACKAGES += \
PRODUCT_PACKAGES += \
securedpud.slider
BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs101-sepolicy/confirmationui/
BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs101/sepolicy/confirmationui/

View File

@@ -55,7 +55,6 @@
<!-- Camera -->
<permission name="android.permission.CAMERA" fixed="false"/>
<!-- Camera Connectivity -->
<permission name="android.permission.ACCESS_FINE_LOCATION" fixed="false"/>
<permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
<permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/>
<permission name="android.permission.BLUETOOTH_SCAN" fixed="false"/>
@@ -73,6 +72,8 @@
<permission name="android.permission.ACTIVITY_RECOGNITION" fixed="false"/>
<!-- Notifications -->
<permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
<!-- Used by Bluetooth Module to collect bluetooth info -->
<permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/>
</exception>
<exception
@@ -170,4 +171,11 @@
<!-- Notifications -->
<permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
</exception>
<exception package="com.google.android.apps.pixel.relationships">
<permission name="android.permission.CALL_PHONE" fixed="false"/>
<permission name="android.permission.READ_CALL_LOG" fixed="false"/>
<permission name="android.permission.READ_CONTACTS" fixed="false"/>
<permission name="android.permission.WRITE_CONTACTS" fixed="false"/>
</exception>
</exceptions>

142
device.mk
View File

@@ -16,7 +16,7 @@
include device/google/gs-common/device.mk
include device/google/gs-common/gs_watchdogd/watchdog.mk
include device/google/gs-common/ramdump/ramdump.mk
include device/google/gs-common/ramdump_and_coredump/ramdump_and_coredump.mk
include device/google/gs-common/soc/soc.mk
include device/google/gs-common/soc/freq.mk
include device/google/gs-common/modem/modem.mk
@@ -25,6 +25,7 @@ include device/google/gs-common/thermal/dump/thermal.mk
include device/google/gs-common/thermal/thermal_hal/device.mk
include device/google/gs-common/pixel_metrics/pixel_metrics.mk
include device/google/gs-common/performance/perf.mk
include device/google/gs-common/power/power.mk
include device/google/gs-common/display/dump.mk
include device/google/gs101/dumpstate/item.mk
include device/google/gs-common/radio/dump.mk
@@ -36,9 +37,11 @@ include device/google/gs-common/sota_app/factoryota.mk
include device/google/gs-common/misc_writer/misc_writer.mk
include device/google/gs-common/gyotaku_app/gyotaku.mk
include device/google/gs-common/bootctrl/bootctrl_aidl.mk
include device/google/gs-common/betterbug/betterbug.mk
ifneq ($(filter oriole raven bluejay, $(TARGET_PRODUCT)),)
include device/google/gs-common/bcmbt/dump/dumplog.mk
endif
include device/google/gs-common/fingerprint/fingerprint.mk
TARGET_BOARD_PLATFORM := gs101
DEVICE_IS_64BIT_ONLY ?= $(if $(filter %_64,$(TARGET_PRODUCT)),true,false)
@@ -73,7 +76,6 @@ PRODUCT_SOONG_NAMESPACES += \
vendor/google/whitechapel/tools \
vendor/google/camera \
vendor/google/interfaces \
vendor/google_devices/common/proprietary/confirmatioui_hal \
vendor/google_nos/host/android \
vendor/google_nos/test/system-test-harness
@@ -89,7 +91,7 @@ PRODUCT_SOONG_NAMESPACES += \
vendor/samsung_slsi/telephony/$(BOARD_USES_SHARED_VENDOR_TELEPHONY)
endif
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
#Set IKE logs to verbose for WFC
PRODUCT_PROPERTY_OVERRIDES += log.tag.IKE=VERBOSE
@@ -110,7 +112,7 @@ endif
include device/google/gs101/modem/user.mk
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
# b/36703476: Set default log size to 1M
PRODUCT_PROPERTY_OVERRIDES += \
ro.logd.size=1M
@@ -179,9 +181,16 @@ PRODUCT_PROPERTY_OVERRIDES += \
telephony.active_modems.max_count=2
USE_LASSEN_OEMHOOK := true
# The "power-anomaly-sitril" is added into PRODUCT_SOONG_NAMESPACES when
# $(USE_LASSEN_OEMHOOK) is true and $(BOARD_WITHOUT_RADIO) is not true.
ifneq ($(BOARD_WITHOUT_RADIO),true)
PRODUCT_SOONG_NAMESPACES += vendor/google/tools/power-anomaly-sitril
$(call soong_config_set,sitril,use_lassen_oemhook_with_radio,true)
endif
# Use for GRIL
USES_LASSEN_MODEM := true
$(call soong_config_set, vendor_ril_google_feature, use_lassen_modem, true)
ifeq ($(USES_GOOGLE_DIALER_CARRIER_SETTINGS),true)
USE_GOOGLE_DIALER := true
@@ -201,17 +210,27 @@ USE_SWIFTSHADER := false
TARGET_USES_VULKAN = true
PRODUCT_SOONG_NAMESPACES += \
vendor/arm/mali/valhall
vendor/arm/mali/gs101
$(call soong_config_set,pixel_mali,soc,$(TARGET_BOARD_PLATFORM))
# Used in gfx_tools when defining tests with composer2 interface for gs101 devices
$(call soong_config_set,gfx_tools,use_hwc2,true)
include device/google/gs-common/gpu/gpu.mk
PRODUCT_PACKAGES += \
libGLES_mali \
vulkan.mali \
libOpenCL \
libgpudataproducer
# Install the OpenCL ICD Loader
PRODUCT_SOONG_NAMESPACES += external/OpenCL-ICD-Loader
PRODUCT_PACKAGES += \
libOpenCL \
mali_icd__customer_pixel_opencl-icd_ARM.icd
ifeq ($(DEVICE_IS_64BIT_ONLY),false)
PRODUCT_PACKAGES += \
mali_icd__customer_pixel_opencl-icd_ARM32.icd
endif
PRODUCT_VENDOR_PROPERTIES += \
ro.hardware.vulkan=mali
@@ -222,7 +241,7 @@ PRODUCT_DEFAULT_PROPERTY_OVERRIDES += \
PRODUCT_VENDOR_PROPERTIES += \
vendor.mali.platform.config=/vendor/etc/mali/platform.config \
vendor.mali.debug.config=/vendor/etc/mali/debug.config \
vendor.mali.base_protected_max_core_count=3 \
vendor.mali.base_protected_max_core_count=4 \
vendor.mali.base_protected_tls_max=67108864 \
vendor.mali.platform_agt_frequency_khz=24576
@@ -238,9 +257,8 @@ PRODUCT_COPY_FILES += \
frameworks/native/data/etc/android.hardware.vulkan.version-1_3.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.hardware.vulkan.version.xml \
frameworks/native/data/etc/android.hardware.vulkan.level-1.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.hardware.vulkan.level.xml \
frameworks/native/data/etc/android.hardware.vulkan.compute-0.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.hardware.vulkan.compute.xml \
frameworks/native/data/etc/android.software.contextualsearch.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.contextualsearch.xml \
frameworks/native/data/etc/android.software.vulkan.deqp.level-2023-03-01.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.vulkan.deqp.level.xml \
frameworks/native/data/etc/android.software.opengles.deqp.level-2023-03-01.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.opengles.deqp.level.xml
frameworks/native/data/etc/android.software.vulkan.deqp.level-2024-03-01.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.vulkan.deqp.level.xml \
frameworks/native/data/etc/android.software.opengles.deqp.level-2024-03-01.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.opengles.deqp.level.xml
ifeq ($(USE_SWIFTSHADER),true)
PRODUCT_VENDOR_PROPERTIES += \
@@ -269,6 +287,7 @@ PRODUCT_VENDOR_PROPERTIES += ro.surface_flinger.prime_shader_cache.ultrahdr=1
DEVICE_MANIFEST_FILE := \
device/google/gs101/manifest$(LOCAL_64ONLY).xml
BOARD_USE_CODEC2_AIDL := V1
ifneq (,$(filter aosp_%,$(TARGET_PRODUCT)))
DEVICE_MANIFEST_FILE += \
device/google/gs101/manifest_media_aosp.xml
@@ -302,11 +321,19 @@ PRODUCT_COPY_FILES += \
PRODUCT_COPY_FILES += \
device/google/gs101/conf/init.gs101.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/hw/init.gs101.rc
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_COPY_FILES += \
device/google/gs101/conf/init.debug.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/init.debug.rc
endif
ifneq (,$(filter 5.%, $(TARGET_LINUX_KERNEL_VERSION)))
PRODUCT_COPY_FILES += \
device/google/gs101/storage/5.10/init.gs101.storage.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/hw/init.gs101.storage.rc
else
PRODUCT_COPY_FILES += \
device/google/gs101/storage/6.1/init.gs101.storage.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/hw/init.gs101.storage.rc
endif
# Recovery files
PRODUCT_COPY_FILES += \
device/google/gs101/conf/init.recovery.device.rc:$(TARGET_COPY_OUT_RECOVERY)/root/init.recovery.gs101.rc
@@ -333,6 +360,10 @@ PRODUCT_COPY_FILES += \
include device/google/gs-common/insmod/insmod.mk
# Insmod config files
PRODUCT_COPY_FILES += \
$(call find-copy-subdir-files,init.insmod.*.cfg,$(TARGET_KERNEL_DIR),$(TARGET_COPY_OUT_VENDOR_DLKM)/etc)
# For creating dtbo image
PRODUCT_HOST_PACKAGES += \
mkdtimg
@@ -342,7 +373,7 @@ PRODUCT_PACKAGES += \
# CHRE
## tools
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PACKAGES += \
chre_power_test_client \
chre_test_client \
@@ -367,7 +398,7 @@ PRODUCT_PACKAGES += \
checkpoint_gc
# Vendor verbose logging default property
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PROPERTY_OVERRIDES += \
persist.vendor.verbose_logging_enabled=true
else
@@ -385,7 +416,7 @@ PRODUCT_PROPERTY_OVERRIDES += \
persist.vendor.sys.modem.logging.enable=true
# Enable silent CP crash handling
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PROPERTY_OVERRIDES += \
persist.vendor.ril.crash_handling_mode=1
else
@@ -446,7 +477,7 @@ PRODUCT_COPY_FILES += \
frameworks/native/data/etc/android.software.midi.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.midi.xml
# default usb debug functions
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PROPERTY_OVERRIDES += \
persist.vendor.usb.usbradio.config=dm
endif
@@ -508,10 +539,6 @@ PRODUCT_PACKAGES += \
com.android.future.usb.accessory
# for now include gralloc here. should come from hardware/google_devices/exynos5
PRODUCT_PACKAGES += \
android.hardware.graphics.mapper@4.0-impl \
android.hardware.graphics.allocator-V1-service
PRODUCT_PACKAGES += \
android.hardware.memtrack-service.pixel \
libion_exynos \
@@ -535,7 +562,6 @@ $(call soong_config_set,google3a_config,soc,gs101)
# WiFi
PRODUCT_PACKAGES += \
android.hardware.wifi-service \
wificond \
libwpa_client \
WifiOverlay \
@@ -544,7 +570,7 @@ PRODUCT_PACKAGES += \
PRODUCT_PACKAGES += \
ConnectivityOverlay
PRODUCT_PACKAGES_DEBUG += \
PRODUCT_PACKAGES_ENG += \
f2fs_io \
check_f2fs \
f2fs.fibmap \
@@ -557,13 +583,16 @@ include device/google/gs-common/storage/storage.mk
PRODUCT_PACKAGES += \
android.hardware.health.storage-service.default
# Battery Mitigation
include device/google/gs-common/battery_mitigation/bcl.mk
# storage pixelstats
-include hardware/google/pixel/pixelstats/device.mk
# Enable project quotas and casefolding for emulated storage without sdcardfs
$(call inherit-product, $(SRC_TARGET_DIR)/product/emulated_storage.mk)
$(call inherit-product, $(SRC_TARGET_DIR)/product/virtual_ab_ota/compression_with_xor.mk)
$(call inherit-product, $(SRC_TARGET_DIR)/product/virtual_ab_ota/launch_with_vendor_ramdisk.mk)
# Enable usage of io_uring in fastbootd
PRODUCT_VENDOR_PROPERTIES += sys.usb.ffs.io_uring_enabled=true
@@ -635,7 +664,7 @@ PRODUCT_PACKAGES += \
libdisplaycolor \
hwcomposer.$(TARGET_BOARD_PLATFORM)
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PACKAGES += displaycolor_service
endif
@@ -712,7 +741,7 @@ PRODUCT_PACKAGES += wpa_supplicant.conf
WIFI_PRIV_CMD_UPDATE_MBO_CELL_STATUS := enabled
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PACKAGES += wpa_cli
PRODUCT_PACKAGES += hostapd_cli
endif
@@ -733,16 +762,25 @@ PRODUCT_COPY_FILES += \
device/google/gs101/media_codecs_performance_c2.xml:$(TARGET_COPY_OUT_VENDOR)/etc/media_codecs_performance_c2.xml \
PRODUCT_PROPERTY_OVERRIDES += \
debug.stagefright.c2-poolmask=458752 \
debug.c2.use_dmabufheaps=1 \
media.c2.dmabuf.padding=512 \
debug.stagefright.ccodec_delayed_params=1 \
ro.vendor.gpu.dataspace=1
ifneq ($(BOARD_USE_CODEC2_AIDL), )
PRODUCT_PROPERTY_OVERRIDES += \
debug.stagefright.c2-poolmask=1507328
else
PRODUCT_PROPERTY_OVERRIDES += \
debug.stagefright.c2-poolmask=458752
endif
# Create input surface on the framework side
PRODUCT_PROPERTY_OVERRIDES += \
debug.stagefright.c2inputsurface=-1 \
PRODUCT_PROPERTY_OVERRIDES += media.c2.hal.selection=aidl
# 2. OpenMAX IL
PRODUCT_COPY_FILES += \
device/google/gs101/media_codecs.xml:$(TARGET_COPY_OUT_VENDOR)/etc/media_codecs.xml \
@@ -776,7 +814,7 @@ ifeq (,$(filter tangor citron,$(subst _, ,$(TARGET_PRODUCT))))
include device/google/gs-common/gps/brcm/device.mk
PRODUCT_COPY_FILES += \
device/google/gs101/location/gps.cer:$(TARGET_COPY_OUT_VENDOR)/etc/gnss/gps.cer
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_COPY_FILES += \
device/google/gs101/location/lhd.conf:$(TARGET_COPY_OUT_VENDOR)/etc/gnss/lhd.conf \
device/google/gs101/location/scd.conf:$(TARGET_COPY_OUT_VENDOR)/etc/gnss/scd.conf
@@ -794,9 +832,9 @@ $(call inherit-product, system/core/trusty/trusty-base.mk)
include device/google/gs-common/trusty/trusty.mk
# Trusty unit test tool
PRODUCT_PACKAGES_DEBUG += trusty-ut-ctrl
include device/google/gs101/confirmationui/confirmationui.mk
PRODUCT_PACKAGES_ENG += \
trusty-ut-ctrl \
tipc-test
include device/google/gs101/trusty_metricsd/trusty_metricsd.mk
@@ -809,7 +847,7 @@ PRODUCT_PROPERTY_OVERRIDES += \
ro.frp.pst=/dev/block/by-name/frp
# System props to enable Bluetooth Quality Report (BQR) feature
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PRODUCT_PROPERTIES += \
persist.bluetooth.bqr.event_mask=262174 \
persist.bluetooth.bqr.min_interval_ms=500
@@ -819,6 +857,10 @@ PRODUCT_PRODUCT_PROPERTIES += \
persist.bluetooth.bqr.min_interval_ms=500
endif
# Enable Bluetooth AutoOn feature
PRODUCT_PRODUCT_PROPERTIES += \
bluetooth.server.automatic_turn_on=true
#VNDK
PRODUCT_PACKAGES += \
vndk-libs
@@ -849,8 +891,8 @@ PRODUCT_PACKAGES += \
PRODUCT_PACKAGES += \
Iwlan
#Iwlan test app for userdebug/eng builds
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
#Iwlan test app for eng builds
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PACKAGES += \
IwlanTestApp
endif
@@ -875,7 +917,7 @@ PRODUCT_PACKAGES += ShannonIms
$(call inherit-product-if-exists, vendor/samsung_slsi/telephony/$(BOARD_USES_SHARED_VENDOR_TELEPHONY)/shannon-iwlan/device-vendor.mk)
PRODUCT_PACKAGES_DEBUG += \
PRODUCT_PACKAGES_ENG += \
preinstalled-packages-product-gs101-device-debug.xml
PRODUCT_PACKAGES += ShannonRcs
@@ -884,6 +926,7 @@ endif
# Exynos RIL and telephony
# Multi SIM(DSDS)
SIM_COUNT := 2
$(call soong_config_set,sim,sim_count,$(SIM_COUNT))
SUPPORT_MULTI_SIM := true
# Support NR
SUPPORT_NR := true
@@ -915,9 +958,6 @@ PRODUCT_COPY_FILES += \
device/google/gs101/default-permissions.xml:$(TARGET_COPY_OUT_PRODUCT)/etc/default-permissions/default-permissions.xml \
device/google/gs101/component-overrides.xml:$(TARGET_COPY_OUT_VENDOR)/etc/sysconfig/component-overrides.xml
# modem_svc_sit daemon
PRODUCT_PACKAGES += modem_svc_sit
# modem logging binary/configs
PRODUCT_PACKAGES += modem_logging_control
@@ -946,7 +986,7 @@ PRODUCT_COPY_FILES += \
device/google/gs101/radio/gnss_blanking.csv:$(TARGET_COPY_OUT_VENDOR)/etc/modem/gnss_blanking.csv
# Vibrator Diag
PRODUCT_PACKAGES_DEBUG += \
PRODUCT_PACKAGES_ENG += \
diag-vibrator \
diag-vibrator-cs40l25a \
diag-vibrator-drv2624 \
@@ -986,7 +1026,7 @@ PRODUCT_PACKAGES += vndservicemanager
PRODUCT_PACKAGES += vndservice
# TinyTools, debug tool and cs35l41 speaker calibration tool for Audio
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PACKAGES += \
tinyplay \
tinycap \
@@ -1024,7 +1064,9 @@ PRODUCT_SOONG_NAMESPACES += \
vendor/google_devices/gs101/proprietary/gchips/tpu/darwinn_logging_service \
vendor/google_devices/gs101/proprietary/gchips/tpu/nnapi_stable_aidl \
vendor/google_devices/gs101/proprietary/gchips/tpu/aidl \
vendor/google_devices/gs101/proprietary/gchips/tpu/hal
vendor/google_devices/gs101/proprietary/gchips/tpu/hal \
vendor/google_devices/gs101/proprietary/gchips/tpu/tachyon/tachyon_apis \
vendor/google_devices/gs101/proprietary/gchips/tpu/tachyon/service
# TPU firmware
PRODUCT_PACKAGES += edgetpu-abrolhos.fw
@@ -1085,7 +1127,7 @@ endif
include hardware/google/pixel/wifi_ext/device.mk
# Battery Stats Viewer
PRODUCT_PACKAGES_DEBUG += BatteryStatsViewer
PRODUCT_PACKAGES_ENG += BatteryStatsViewer
# Install product specific framework compatibility matrix
# (TODO: b/169535506) This includes the FCM for system_ext and product partition.
@@ -1093,12 +1135,19 @@ PRODUCT_PACKAGES_DEBUG += BatteryStatsViewer
DEVICE_PRODUCT_COMPATIBILITY_MATRIX_FILE += device/google/gs101/device_framework_matrix_product.xml
# Preopt SystemUI
ifneq ($(RELEASE_SYSTEMUI_USE_SPEED_PROFILE), true)
PRODUCT_DEXPREOPT_SPEED_APPS += SystemUIGoogle # For internal
PRODUCT_DEXPREOPT_SPEED_APPS += SystemUI # For AOSP
PRODUCT_DEXPREOPT_SPEED_APPS += SystemUI # For AOSP
endif
# Compile SystemUI on device with `speed`.
# Set on-device compilation mode for SystemUI.
ifeq ($(RELEASE_SYSTEMUI_USE_SPEED_PROFILE), true)
PRODUCT_PROPERTY_OVERRIDES += \
dalvik.vm.systemuicompilerfilter=speed-profile
else
PRODUCT_PROPERTY_OVERRIDES += \
dalvik.vm.systemuicompilerfilter=speed
endif
# Keymaster configuration
PRODUCT_COPY_FILES += \
@@ -1117,3 +1166,10 @@ include hardware/google/pixel/HardwareInfo/HardwareInfo.mk
# Touch service
include device/google/gs-common/touch/twoshay/aidl_gs101.mk
include device/google/gs-common/touch/twoshay/twoshay.mk
# Allow longer timeout for incident report generation in bugreport
# Overriding in /product partition instead of /vendor intentionally,
# since it can't be overridden from /vendor.
PRODUCT_PRODUCT_PROPERTIES += \
dumpstate.strict_run=false

View File

@@ -78,7 +78,7 @@
</hal>
<hal format="aidl" optional="true">
<name>com.google.hardware.pixel.display</name>
<version>10</version>
<version>13</version>
<interface>
<name>IDisplay</name>
<instance>default</instance>
@@ -118,7 +118,7 @@
</hal>
<hal format="aidl" optional="true">
<name>vendor.google.wifi_ext</name>
<version>2-3</version>
<version>2-4</version>
<interface>
<name>IWifiExt</name>
<instance>default</instance>

View File

@@ -2,10 +2,20 @@ package {
default_applicable_licenses: ["Android-Apache-2.0"],
}
sh_binary {
name: "dump_gs101.sh",
src: "dump_gs101.sh",
cc_binary {
name: "dump_power",
srcs: ["dump_power.cpp"],
cflags: [
"-Wall",
"-Wextra",
"-Werror",
],
shared_libs: [
"libbase",
"libdump",
"libdumpstateutil",
],
vendor: true,
sub_dir: "dump",
relative_install_path: "dump",
init_rc: ["dump_power.rc"],
}

View File

@@ -1,292 +0,0 @@
#!/vendor/bin/sh
echo "------ Camera HAL Graph State Dump ------"
for f in $(ls -t /data/vendor/camera/hal_graph_state*.txt |head -1); do
echo $f
cat $f
done
build_type="$(getprop ro.build.type)"
echo "\n------ Power Stats Times ------"
echo -n "Boot: " && /vendor/bin/uptime -s && echo -n "Now: " && date;
echo "\n------ ACPM stats ------"
for f in /sys/devices/platform/acpm_stats/*_stats ; do
echo "\n\n$f"
cat $f
done
echo "\n------ CPU PM stats ------"
cat "/sys/devices/system/cpu/cpupm/cpupm/time_in_state"
echo "\n------ GENPD summary ------"
cat "/d/pm_genpd/pm_genpd_summary"
echo "\n------ Power supply property battery ------"
cat "/sys/class/power_supply/battery/uevent"
echo "\n------ Power supply property dc ------"
cat "/sys/class/power_supply/dc/uevent"
echo "\n------ Power supply property gcpm ------"
cat "/sys/class/power_supply/gcpm/uevent"
echo "\n------ Power supply property gcpm_pps ------"
cat "/sys/class/power_supply/gcpm_pps/uevent"
echo "\n------ Power supply property main-charger ------"
cat "/sys/class/power_supply/main-charger/uevent"
echo "\n------ Power supply property pca9486-mains ------"
cat "/sys/class/power_supply/pca9468-mains/uevent"
echo "\n------ Power supply property tcpm ------"
cat /sys/class/power_supply/tcpm-source-psy-*/uevent
echo "\n------ Power supply property usb ------"
cat "/sys/class/power_supply/usb/uevent"
echo "\n------ Power supply property wireless ------"
cat "/sys/class/power_supply/wireless/uevent"
if [ -d "/sys/class/power_supply/maxfg" ]
then
echo "\n------ Power supply property maxfg ------"
cat "/sys/class/power_supply/maxfg/uevent"
echo "\n------ m5_state ------"
cat "/sys/class/power_supply/maxfg/m5_model_state"
echo "\n------ maxfg ------"
cat "/dev/logbuffer_maxfg"
echo "\n------ maxfg ------"
cat "/dev/logbuffer_maxfg_monitor"
else
echo "\n------ Power supply property maxfg_base ------"
cat "/sys/class/power_supply/maxfg_base/uevent"
echo "\n------ Power supply property maxfg_flip ------"
cat "/sys/class/power_supply/maxfg_flip/uevent"
echo "\n------ m5_state ------"
cat "/sys/class/power_supply/maxfg_base/m5_model_state"
echo "\n------ maxfg_base ------"
cat "/dev/logbuffer_maxfg_base"
echo "\n------ maxfg_flip ------"
cat "/dev/logbuffer_maxfg_flip"
echo "\n------ maxfg_base ------"
cat "/dev/logbuffer_maxfg_base_monitor"
echo "\n------ maxfg_flip ------"
cat "/dev/logbuffer_maxfg_flip_monitor"
fi
if [ -d "/sys/class/power_supply/dock" ]
then
echo "\n------ Power supply property dock ------"
cat "/sys/class/power_supply/dock/uevent"
fi
if [ -e "/dev/logbuffer_tcpm" ]
then
echo "\n------ Logbuffer TCPM ------"
cat "/dev/logbuffer_tcpm"
if [ -d "/sys/kernel/debug/tcpm" ]
then
echo "\n------ TCPM logs ------"
cat /sys/kernel/debug/tcpm/*
else
echo "\n------ TCPM logs ------"
cat /sys/kernel/debug/usb/tcpm*
fi
fi
echo "\n------ TCPC ------"
max77759tcpc_path="/sys/devices/platform/10d50000.hsi2c/i2c-12/12-0025"
echo "registers:"
cat $max77759tcpc_path/registers
echo "frs:"
cat $max77759tcpc_path/frs
echo "auto_discharge:"
cat $max77759tcpc_path/auto_discharge
echo "bc12_enabled:"
cat $max77759tcpc_path/bc12_enabled
echo "cc_toggle_enable:"
cat $max77759tcpc_path/cc_toggle_enable
echo "contaminant_detection:"
cat $max77759tcpc_path/contaminant_detection
echo "contaminant_detection_status:"
cat $max77759tcpc_path/contaminant_detection_status
echo "\n------ PD Engine ------"
cat "/dev/logbuffer_usbpd"
echo "\n------ POGO Transport ------"
cat "/dev/logbuffer_pogo_transport"
echo "\n------ PPS-google_cpm ------"
cat "/dev/logbuffer_cpm"
echo "\n------ PPS-dc ------"
cat "/dev/logbuffer_pca9468"
echo "\n------ Battery Health ------"
cat "/sys/class/power_supply/battery/health_index_stats"
echo "\n------ Battery Health SoC Residency ------"
cat "/sys/class/power_supply/battery/swelling_data"
echo "\n------ BMS ------"
cat "/dev/logbuffer_ssoc"
echo "\n------ TTF ------"
cat "/dev/logbuffer_ttf"
echo "\n------ TTF details ------"
cat "/sys/class/power_supply/battery/ttf_details"
echo "\n------ TTF stats ------"
cat "/sys/class/power_supply/battery/ttf_stats"
echo "\n------ maxq ------"
cat "/dev/logbuffer_maxq"
echo "\n------ aacr_state ------"
cat "/sys/class/power_supply/battery/aacr_state"
echo "\n------ TEMP/DOCK-DEFEND ------"
cat "/dev/logbuffer_bd"
echo "\n------ TRICKLE-DEFEND Config ------"
cd /sys/devices/platform/google,battery/power_supply/battery/
for f in `ls bd_*`
do
echo $f: `cat $f`
done
echo "\n------ DWELL-DEFEND Config ------"
cd /sys/devices/platform/google,charger/
for f in `ls charge_s*`
do
echo "$f: `cat $f`"
done
echo "\n------ TEMP-DEFEND Config ------"
cd /sys/devices/platform/google,charger/
for f in `ls bd_*`
do
echo "$f: `cat $f`"
done
echo "\n------ DC_registers dump ------"
cat "/sys/class/power_supply/pca9468-mains/device/registers_dump"
echo "\n------ max77759_chg registers dump ------"
cat "/sys/class/power_supply/main-charger/device/registers_dump"
echo "\n------ max77729_pmic registers dump ------"
cat /sys/devices/platform/10d50000.hsi2c/i2c-*/*-0066/registers_dump
if [ $build_type = "userdebug" ]
then
echo "\n------ Charging table dump ------"
cat "/d/google_battery/chg_raw_profile"
echo "\n------ fg_model ------"
for f in /d/maxfg*
do
regs=`cat $f/fg_model`
echo $f:
echo "$regs"
done
echo "\n------ fg_alo_ver ------"
for f in /d/maxfg*
do
regs=`cat $f/algo_ver`
echo $f:
echo "$regs"
done
echo "\n------ fg_model_ok ------"
for f in /d/maxfg*
do
regs=`cat $f/model_ok`
echo $f:
echo "$regs"
done
echo "\n------ fg registers ------"
for f in /d/maxfg*
do
regs=`cat $f/registers`
echo $f:
echo "$regs"
done
fi
echo "\n------ Battery EEPROM ------"
if [ -e "/sys/devices/platform/10970000.hsi2c/i2c-8/8-0050/eeprom" ]
then
xxd /sys/devices/platform/10970000.hsi2c/i2c-8/8-0050/eeprom
fi
echo "\n------ Charger Stats ------"
cat "/sys/class/power_supply/battery/charge_details"
if [ $build_type = "userdebug" ]
then
echo "\n------ Google Charger ------"
cd /sys/kernel/debug/google_charger/
for f in `ls pps_*`
do
echo "$f: `cat $f`"
done
echo "\n------ Google Battery ------"
cd /sys/kernel/debug/google_battery/
for f in `ls ssoc_*`
do
echo "$f: `cat $f`"
done
fi
echo "\n------ WLC logs ------"
cat "/dev/logbuffer_wireless"
echo "\n------ WLC VER ------"
cat "/sys/class/power_supply/wireless/device/version"
echo "\n------ WLC STATUS ------"
cat "/sys/class/power_supply/wireless/device/status"
echo "\n------ WLC FW Version ------"
cat "/sys/class/power_supply/wireless/device/fw_rev"
echo "\n------ RTX ------"
cat "/dev/logbuffer_rtx"
if [ $build_type = "userdebug" ]
then
echo "\n------ gvotables ------"
cat /sys/kernel/debug/gvotables/*/status
fi
echo "\n------ Mitigation Stats ------"
echo "Source\t\tCount\tSOC\tTime\tVoltage"
for f in `ls /sys/devices/virtual/pmic/mitigation/last_triggered_count/*`
do
count=`cat $f`
a=${f/\/sys\/devices\/virtual\/pmic\/mitigation\/last_triggered_count\//}
b=${f/last_triggered_count/last_triggered_capacity}
c=${f/last_triggered_count/last_triggered_timestamp/}
d=${f/last_triggered_count/last_triggered_voltage/}
cnt=`cat $f`
cap=`cat ${b/count/cap}`
ti=`cat ${c/count/time}`
volt=`cat ${d/count/volt}`
echo "${a/_count/} \t$cnt\t$cap\t$ti\t$volt"
done
echo "\n------ Clock Divider Ratio ------"
echo \"Source\t\tRatio\"
for f in `ls /sys/devices/virtual/pmic/mitigation/clock_ratio/*`
do ratio=`cat $f`
a=${f/\/sys\/devices\/virtual\/pmic\/mitigation\/clock_ratio\//}
echo "${a/_ratio/} \t$ratio"
done
echo "\n------ Clock Stats ------"
echo "Source\t\tStats"
for f in `ls /sys/devices/virtual/pmic/mitigation/clock_stats/*`
do
stats=`cat $f`
a=${f/\/sys\/devices\/virtual\/pmic\/mitigation\/clock_stats\//};
echo "${a/_stats/} \t$stats"
done
echo "\n------ Triggered Level ------"
echo "Source\t\tLevel"
for f in `ls /sys/devices/virtual/pmic/mitigation/triggered_lvl/*`
do
lvl=`cat $f`
a=${f/\/sys\/devices\/virtual\/pmic\/mitigation\/triggered_lvl\//}
echo "${a/_lvl/} \t$lvl"
done
echo "\n------ Instruction ------"
for f in `ls /sys/devices/virtual/pmic/mitigation/instruction/*`
do
val=`cat $f`
a=${f/\/sys\/devices\/virtual\/pmic\/mitigation\/instruction\//}
echo "$a=$val"
done

788
dumpstate/dump_power.cpp Normal file
View File

@@ -0,0 +1,788 @@
/*
* Copyright 2023 The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#include <cstring>
#include <dirent.h>
#include <dump/pixel_dump.h>
#include <fstream>
#include <stdio.h>
#include <stdlib.h>
#include <sys/sysinfo.h>
#include <time.h>
#include <vector>
#include <android-base/file.h>
#include <android-base/strings.h>
#include "DumpstateUtil.h"
void printTitle(const char *msg) {
printf("\n------ %s ------\n", msg);
}
int getCommandOutput(const char *cmd, std::string *output) {
char buffer[1024];
FILE *pipe = popen(cmd, "r");
if (!pipe) {
return -1;
}
while (fgets(buffer, sizeof buffer, pipe) != NULL) {
*output += buffer;
}
pclose(pipe);
if (output->back() == '\n')
output->pop_back();
return 0;
}
bool isValidFile(const char *file) {
FILE *fp = fopen(file, "r");
if (fp != NULL) {
fclose(fp);
return true;
}
return false;
}
bool isValidDir(const char *directory) {
DIR *dir = opendir(directory);
if (dir == NULL)
return false;
closedir(dir);
return true;
}
bool isUserBuild() {
return ::android::os::dumpstate::PropertiesHelper::IsUserBuild();
}
int getFilesInDir(const char *directory, std::vector<std::string> *files) {
std::string content;
struct dirent *entry;
DIR *dir = opendir(directory);
if (dir == NULL)
return -1;
files->clear();
while ((entry = readdir(dir)) != NULL)
files->push_back(entry->d_name);
closedir(dir);
sort(files->begin(), files->end());
return 0;
}
void dumpPowerStatsTimes() {
const char *title = "Power Stats Times";
char rBuff[128];
struct timespec rTs;
struct sysinfo info;
int ret;
printTitle(title);
sysinfo(&info);
const time_t boottime = time(NULL) - info.uptime;
ret = clock_gettime(CLOCK_REALTIME, &rTs);
if (ret)
return;
struct tm *nowTime = std::localtime(&rTs.tv_sec);
std::strftime(rBuff, sizeof(rBuff), "%m/%d/%Y %H:%M:%S", nowTime);
printf("Boot: %s", ctime(&boottime));
printf("Now: %s\n", rBuff);
}
int readContentsOfDir(const char* title, const char* directory, const char* strMatch,
bool useStrMatch = false, bool printDirectory = false) {
std::vector<std::string> files;
std::string content;
std::string fileLocation;
int ret;
ret = getFilesInDir(directory, &files);
if (ret < 0)
return ret;
printTitle(title);
for (auto &file : files) {
if (useStrMatch && std::string::npos == std::string(file).find(strMatch)) {
continue;
}
fileLocation = std::string(directory) + std::string(file);
if (!android::base::ReadFileToString(fileLocation, &content)) {
continue;
}
if (printDirectory) {
printf("\n\n%s\n", fileLocation.c_str());
}
if (content.back() == '\n')
content.pop_back();
printf("%s\n", content.c_str());
}
return 0;
}
void dumpAcpmStats() {
const char* acpmDir = "/sys/devices/platform/acpm_stats/";
const char* statsSubStr = "_stats";
const char* acpmTitle = "ACPM stats";
readContentsOfDir(acpmTitle, acpmDir, statsSubStr, true, true);
}
void dumpPowerSupplyStats() {
const char* dumpList[][2] = {
{"CPU PM stats", "/sys/devices/system/cpu/cpupm/cpupm/time_in_state"},
{"Power supply property battery", "/sys/class/power_supply/battery/uevent"},
{"Power supply property dc", "/sys/class/power_supply/dc/uevent"},
{"Power supply property gcpm", "/sys/class/power_supply/gcpm/uevent"},
{"Power supply property gcpm_pps", "/sys/class/power_supply/gcpm_pps/uevent"},
{"Power supply property main-charger", "/sys/class/power_supply/main-charger/uevent"},
{"Power supply property pca9468-mains", "/sys/class/power_supply/pca9468-mains/uevent"},
{"Power supply property tcpm", "/sys/class/power_supply/tcpm-source-psy-i2c-max77759tcpc/uevent"},
{"Power supply property usb", "/sys/class/power_supply/usb/uevent"},
{"Power supply property wireless", "/sys/class/power_supply/wireless/uevent"},
};
for (const auto &row : dumpList) {
dumpFileContent(row[0], row[1]);
}
}
void dumpMaxFg() {
const char *maxfgLoc = "/sys/class/power_supply/maxfg";
const char *maxfg [][2] = {
{"Power supply property maxfg", "/sys/class/power_supply/maxfg/uevent"},
{"m5_state", "/sys/class/power_supply/maxfg/m5_model_state"},
{"maxfg registers", "/sys/class/power_supply/maxfg/registers_dump"},
{"maxfg logbuffer", "/dev/logbuffer_maxfg"},
{"maxfg_monitor logbuffer", "/dev/logbuffer_maxfg_monitor"},
};
std::string content;
if (isValidDir(maxfgLoc)) {
for (const auto &row : maxfg) {
dumpFileContent(row[0], row[1]);
}
}
}
void dumpPowerSupplyDock() {
const char* powerSupplyPropertyDockTitle = "Power supply property dock";
const char* powerSupplyPropertyDockFile = "/sys/class/power_supply/dock/uevent";
dumpFileContent(powerSupplyPropertyDockTitle, powerSupplyPropertyDockFile);
}
void dumpLogBufferTcpm() {
const char* logbufferTcpmTitle = "Logbuffer TCPM";
const char* logbufferTcpmFile = "/dev/logbuffer_tcpm";
const char* debugTcpmFile = "/sys/kernel/debug/tcpm";
const char* tcpmLogTitle = "TCPM logs";
const char* tcpmFile = "/sys/kernel/debug/tcpm";
const char* tcpmFileAlt = "/sys/kernel/debug/usb/tcpm";
int retCode;
dumpFileContent(logbufferTcpmTitle, logbufferTcpmFile);
retCode = readContentsOfDir(tcpmLogTitle, isValidFile(debugTcpmFile) ? tcpmFile : tcpmFileAlt,
NULL);
if (retCode < 0)
printTitle(tcpmLogTitle);
}
void dumpTcpc() {
int ret;
const char* max77759TcpcHead = "TCPC";
const char* i2cSubDirMatch = "i2c-";
const char* directory = "/sys/devices/platform/10d60000.hsi2c/";
const char* max77759Tcpc [][2] {
{"registers:", "/i2c-max77759tcpc/registers"},
{"frs:", "/i2c-max77759tcpc/frs"},
{"auto_discharge:", "/i2c-max77759tcpc/auto_discharge"},
{"bcl2_enabled:", "/i2c-max77759tcpc/bcl2_enabled"},
{"cc_toggle_enable:", "/i2c-max77759tcpc/cc_toggle_enable"},
{"containment_detection:", "/i2c-max77759tcpc/containment_detection"},
{"containment_detection_status:", "/i2c-max77759tcpc/containment_detection_status"},
};
std::vector<std::string> files;
std::string content;
printTitle(max77759TcpcHead);
ret = getFilesInDir(directory, &files);
if (ret < 0) {
for (auto &tcpcVal : max77759Tcpc)
printf("%s\n", tcpcVal[0]);
return;
}
for (auto &file : files) {
for (auto &tcpcVal : max77759Tcpc) {
printf("%s ", tcpcVal[0]);
if (std::string::npos == std::string(file).find(i2cSubDirMatch)) {
continue;
}
std::string fileName = directory + file + "/" + std::string(tcpcVal[1]);
if (!android::base::ReadFileToString(fileName, &content)) {
continue;
}
printf("%s\n", content.c_str());
}
}
}
void dumpPdEngine() {
const char* pdEngine [][2] {
{"PD Engine", "/dev/logbuffer_usbpd"},
{"PPS-google_cpm logbuffer", "/dev/logbuffer_cpm"},
{"PPS-pca9468 logbuffer", "/dev/logbuffer_pca9468"},
};
for (const auto &row : pdEngine) {
dumpFileContent(row[0], row[1]);
}
}
void dumpBatteryHealth() {
const char* batteryHealth [][2] {
{"Battery Health", "/sys/class/power_supply/battery/health_index_stats"},
{"Battery Health SoC Residency", "/sys/class/power_supply/battery/swelling_data"},
{"BMS", "/dev/logbuffer_ssoc"},
{"TTF", "/dev/logbuffer_ttf"},
{"TTF details", "/sys/class/power_supply/battery/ttf_details"},
{"TTF stats", "/sys/class/power_supply/battery/ttf_stats"},
{"aacr_state", "/sys/class/power_supply/battery/aacr_state"},
{"maxq", "/dev/logbuffer_maxq"},
{"TEMP/DOCK-DEFEND", "/dev/logbuffer_bd"},
};
for (const auto &row : batteryHealth) {
dumpFileContent(row[0], row[1]);
}
}
void dumpBatteryDefend() {
const char* defendConfig [][3] {
{"TRICKLE-DEFEND Config",
"/sys/devices/platform/google,battery/power_supply/battery/", "bd_"},
{"DWELL-DEFEND Config", "/sys/devices/platform/google,charger/", "charge_s"},
{"TEMP-DEFEND Config", "/sys/devices/platform/google,charger/", "bd_"},
};
std::vector<std::string> files;
struct dirent *entry;
std::string content;
std::string fileLocation;
for (auto &config : defendConfig) {
DIR *dir = opendir(config[1]);
if (dir == NULL)
continue;
printTitle(config[0]);
while ((entry = readdir(dir)) != NULL) {
if (std::string(entry->d_name).find(config[2]) != std::string::npos &&
strncmp(config[2], entry->d_name, strlen(config[2])) == 0) {
files.push_back(entry->d_name);
}
}
closedir(dir);
sort(files.begin(), files.end());
for (auto &file : files) {
fileLocation = std::string(config[1]) + std::string(file);
if (!android::base::ReadFileToString(fileLocation, &content) || content.empty()) {
content = "\n";
}
printf("%s: %s", file.c_str(), content.c_str());
if (content.back() != '\n')
printf("\n");
}
files.clear();
}
}
void dumpBatteryCaretaker() {
const char* aacpConfig [][3] {
{"AACP Version",
"/sys/devices/platform/google,battery/power_supply/battery/", "aacp_"},
{"AACR Config",
"/sys/devices/platform/google,battery/power_supply/battery/", "aacr_"},
{"AAFV Config",
"/sys/devices/platform/google,battery/power_supply/battery/", "aafv_"},
{"AACT Config",
"/sys/devices/platform/google,battery/power_supply/battery/", "aact_"},
{"AACC",
"/sys/devices/platform/google,battery/power_supply/battery/", "aacc"},
};
std::vector<std::string> files;
struct dirent *entry;
std::string content;
std::string fileLocation;
for (auto &config : aacpConfig) {
DIR *dir = opendir(config[1]);
if (dir == NULL)
continue;
printTitle(config[0]);
while ((entry = readdir(dir)) != NULL) {
if (std::string(entry->d_name).find(config[2]) != std::string::npos &&
strncmp(config[2], entry->d_name, strlen(config[2])) == 0) {
files.push_back(entry->d_name);
}
}
closedir(dir);
sort(files.begin(), files.end());
for (auto &file : files) {
fileLocation = std::string(config[1]) + std::string(file);
if (!android::base::ReadFileToString(fileLocation, &content) || content.empty()) {
content = "\n";
}
printf("%s: %s", file.c_str(), content.c_str());
if (content.back() != '\n')
printf("\n");
}
files.clear();
}
}
void printValuesOfDirectory(const char *directory, std::string debugfs, const char *strMatch) {
std::vector<std::string> files;
auto info = directory;
std::string content;
struct dirent *entry;
DIR *dir = opendir(debugfs.c_str());
if (dir == NULL)
return;
printTitle((debugfs + std::string(strMatch) + "/" + std::string(info)).c_str());
while ((entry = readdir(dir)) != NULL)
if (std::string(entry->d_name).find(strMatch) != std::string::npos)
files.push_back(entry->d_name);
closedir(dir);
sort(files.begin(), files.end());
for (auto &file : files) {
std::string fileDirectory = debugfs + file;
std::string fileLocation = fileDirectory + "/" + std::string(info);
if (!android::base::ReadFileToString(fileLocation, &content)) {
content = "\n";
}
printf("%s:\n%s", fileDirectory.c_str(), content.c_str());
if (content.back() != '\n')
printf("\n");
}
files.clear();
}
void dumpChg() {
const std::string pmic_bus = "/sys/devices/platform/10d50000.hsi2c/i2c-12/12-0066";
const char* chg_reg_dump_file = "/sys/class/power_supply/main-charger/device/registers_dump";
const std::string chg_name_cmd = "/sys/class/power_supply/main-charger/device/name";
const std::string pmic_name_cmd = pmic_bus + "/name";
const std::string pmic_reg_dump_file = pmic_bus + "/registers_dump";
const std::string reg_dump_str = " registers dump";
const char* chgConfig [][2] {
{"DC_registers dump", "/sys/class/power_supply/pca9468-mains/device/registers_dump"},
};
std::string chg_name;
std::string pmic_name;
printf("\n");
int ret = android::base::ReadFileToString(chg_name_cmd, &chg_name);
if (ret && !chg_name.empty()) {
chg_name.erase(chg_name.length() - 1); // remove new line
const std::string chg_reg_dump_title = chg_name + reg_dump_str;
/* CHG reg dump */
dumpFileContent(chg_reg_dump_title.c_str(), chg_reg_dump_file);
}
ret = android::base::ReadFileToString(pmic_name_cmd, &pmic_name);
if (ret && !pmic_name.empty()) {
pmic_name.erase(pmic_name.length() - 1); // remove new line
const std::string pmic_reg_dump_title = pmic_name + reg_dump_str;
/* PMIC reg dump */
dumpFileContent(pmic_reg_dump_title.c_str(), pmic_reg_dump_file.c_str());
}
for (auto &config : chgConfig) {
dumpFileContent(config[0], config[1]);
}
}
void dumpChgUserDebug() {
const std::string debugfs = "/d/";
const char *maxFgDir = "/d/maxfg";
const char *maxFgStrMatch = "maxfg";
const char *chgTblName = "Charging table dump";
const char *chgTblDir = "/d/google_battery/chg_raw_profile";
const char *maxFgInfo [] {
"fg_model",
"algo_ver",
"model_ok",
};
if (isUserBuild())
return;
dumpFileContent(chgTblName, chgTblDir);
if (isValidDir(maxFgDir)) {
for (auto & directory : maxFgInfo) {
printValuesOfDirectory(directory, debugfs, maxFgStrMatch);
}
}
}
void dumpBatteryEeprom() {
const char *title = "Battery EEPROM";
const char *files[] {
"/sys/devices/platform/10970000.hsi2c/i2c-8/8-0050/eeprom",
};
std::string result;
std::string xxdCmd;
printTitle(title);
for (auto &file : files) {
if (!isValidFile(file))
continue;
xxdCmd = "xxd " + std::string(file);
int ret = getCommandOutput(xxdCmd.c_str(), &result);
if (ret < 0)
return;
printf("%s\n", result.c_str());
}
}
void dumpChargerStats() {
const char *chgStatsTitle = "Charger Stats";
const char *chgStatsLocation = "/sys/class/power_supply/battery/charge_details";
const char *chargerStats [][3] {
{"Google Charger", "/sys/kernel/debug/google_charger/", "pps_"},
{"Google Battery", "/sys/kernel/debug/google_battery/", "ssoc_"},
};
std::vector<std::string> files;
std::string content;
struct dirent *entry;
dumpFileContent(chgStatsTitle, chgStatsLocation);
if (isUserBuild())
return;
for (auto &stat : chargerStats) {
DIR *dir = opendir(stat[1]);
if (dir == NULL)
return;
printTitle(stat[0]);
while ((entry = readdir(dir)) != NULL)
if (std::string(entry->d_name).find(stat[2]) != std::string::npos)
files.push_back(entry->d_name);
closedir(dir);
sort(files.begin(), files.end());
for (auto &file : files) {
std::string fileLocation = std::string(stat[1]) + file;
if (!android::base::ReadFileToString(fileLocation, &content)) {
content = "\n";
}
printf("%s: %s", file.c_str(), content.c_str());
if (content.back() != '\n')
printf("\n");
}
files.clear();
}
}
void dumpWlcLogs() {
const char *dumpWlcList [][2] {
{"WLC Logs", "/dev/logbuffer_wireless"},
{"WLC VER", "/sys/class/power_supply/wireless/device/version"},
{"WLC STATUS", "/sys/class/power_supply/wireless/device/status"},
{"WLC FW Version", "/sys/class/power_supply/wireless/device/fw_rev"},
{"RTX", "/dev/logbuffer_rtx"},
};
for (auto &row : dumpWlcList) {
if (!isValidFile(row[1]))
printTitle(row[0]);
dumpFileContent(row[0], row[1]);
}
}
void dumpGvoteables() {
const char *directory = "/sys/kernel/debug/gvotables/";
const char *statusName = "/status";
const char *title = "gvotables";
std::string content;
std::vector<std::string> files;
int ret;
if (isUserBuild())
return;
ret = getFilesInDir(directory, &files);
if (ret < 0)
return;
printTitle(title);
for (auto &file : files) {
std::string fileLocation = std::string(directory) + file + std::string(statusName);
if (!android::base::ReadFileToString(fileLocation, &content)) {
continue;
}
printf("%s: %s", file.c_str(), content.c_str());
if (content.back() != '\n')
printf("\n");
}
files.clear();
}
void dumpMitigation() {
const char *mitigationList [][2] {
{"Lastmeal" , "/data/vendor/mitigation/lastmeal.txt"},
{"Thismeal" , "/data/vendor/mitigation/thismeal.txt"},
};
for (auto &row : mitigationList) {
if (!isValidFile(row[1]))
printTitle(row[0]);
dumpFileContent(row[0], row[1]);
}
}
void dumpMitigationStats() {
int ret;
const char *directory = "/sys/devices/virtual/pmic/mitigation/last_triggered_count/";
const char *capacityDirectory = "/sys/devices/virtual/pmic/mitigation/last_triggered_capacity/";
const char *timestampDirectory =
"/sys/devices/virtual/pmic/mitigation/last_triggered_timestamp/";
const char *voltageDirectory = "/sys/devices/virtual/pmic/mitigation/last_triggered_voltage/";
const char *capacitySuffix = "_cap";
const char *timeSuffix = "_time";
const char *voltageSuffix = "_volt";
const char *countSuffix = "_count";
const char *title = "Mitigation Stats";
std::vector<std::string> files;
std::string content;
std::string fileLocation;
std::string source;
std::string subModuleName;
int count;
int soc;
int time;
int voltage;
ret = getFilesInDir(directory, &files);
if (ret < 0)
return;
printTitle(title);
printf("Source\t\tCount\tSOC\tTime\tVoltage\n");
for (auto &file : files) {
fileLocation = std::string(directory) + std::string(file);
if (!android::base::ReadFileToString(fileLocation, &content)) {
continue;
}
ret = atoi(android::base::Trim(content).c_str());
if (ret == -1)
continue;
count = ret;
subModuleName = std::string(file);
subModuleName.erase(subModuleName.find(countSuffix), strlen(countSuffix));
fileLocation = std::string(capacityDirectory) + std::string(subModuleName) +
std::string(capacitySuffix);
if (!android::base::ReadFileToString(fileLocation, &content)) {
continue;
}
ret = atoi(android::base::Trim(content).c_str());
if (ret == -1)
continue;
soc = ret;
fileLocation = std::string(timestampDirectory) + std::string(subModuleName) +
std::string(timeSuffix);
if (!android::base::ReadFileToString(fileLocation, &content)) {
continue;
}
ret = atoi(android::base::Trim(content).c_str());
if (ret == -1)
continue;
time = ret;
fileLocation = std::string(voltageDirectory) + std::string(subModuleName) +
std::string(voltageSuffix);
if (!android::base::ReadFileToString(fileLocation, &content)) {
continue;
}
ret = atoi(android::base::Trim(content).c_str());
if (ret == -1)
continue;
voltage = ret;
printf("%s \t%i\t%i\t%i\t%i\n", subModuleName.c_str(), count, soc, time, voltage);
}
}
void dumpMitigationDirs() {
const int paramCount = 4;
const char *titles[] = {
"Clock Divider Ratio",
"Clock Stats",
"Triggered Level",
"Instruction",
};
const char *directories[] = {
"/sys/devices/virtual/pmic/mitigation/clock_ratio/",
"/sys/devices/virtual/pmic/mitigation/clock_stats/",
"/sys/devices/virtual/pmic/mitigation/triggered_lvl/",
"/sys/devices/virtual/pmic/mitigation/instruction/",
};
const char *paramSuffix[] = {"_ratio", "_stats", "_lvl", ""};
const char *titleRowVal[] = {
"Source\t\tRatio",
"Source\t\tStats",
"Source\t\tLevel",
"",
};
const int eraseCnt[] = {6, 6, 4, 0};
const bool useTitleRow[] = {true, true, true, false};
std::vector<std::string> files;
std::string content;
std::string fileLocation;
std::string source;
std::string subModuleName;
std::string readout;
for (int i = 0; i < paramCount; i++) {
printTitle(titles[i]);
if (useTitleRow[i]) {
printf("%s\n", titleRowVal[i]);
}
getFilesInDir(directories[i], &files);
for (auto &file : files) {
fileLocation = std::string(directories[i]) + std::string(file);
if (!android::base::ReadFileToString(fileLocation, &content)) {
continue;
}
readout = android::base::Trim(content);
subModuleName = std::string(file);
subModuleName.erase(subModuleName.find(paramSuffix[i]), eraseCnt[i]);
if (useTitleRow[i]) {
printf("%s \t%s\n", subModuleName.c_str(), readout.c_str());
} else {
printf("%s=%s\n", subModuleName.c_str(), readout.c_str());
}
}
}
}
void dumpIrqDurationCounts() {
const char *title = "IRQ Duration Counts";
const char *colNames = "Source\t\t\t\tlt_5ms_cnt\tbt_5ms_to_10ms_cnt\tgt_10ms_cnt\tCode"
"\tCurrent Threshold (uA)\tCurrent Reading (uA)\n";
const int nonOdpmChannelCnt = 9;
const int odpmChCnt = 12;
enum Duration {
LT_5MS,
BT_5MS_10MS,
GT_10MS,
DUR_MAX,
};
const char *irqDurDirectories[] = {
"/sys/devices/virtual/pmic/mitigation/irq_dur_cnt/less_than_5ms_count",
"/sys/devices/virtual/pmic/mitigation/irq_dur_cnt/between_5ms_to_10ms_count",
"/sys/devices/virtual/pmic/mitigation/irq_dur_cnt/greater_than_10ms_count",
};
enum PowerWarn {
MAIN,
SUB,
PWRWARN_MAX,
};
const char *pwrwarnDirectories[] = {
"/sys/devices/virtual/pmic/mitigation/main_pwrwarn/",
"/sys/devices/virtual/pmic/mitigation/sub_pwrwarn/",
};
const char *lpfCurrentDirs[] = {
"/sys/devices/platform/acpm_mfd_bus@15500000/i2c-1/1-001f/s2mpg14-meter/"
"s2mpg14-odpm/iio:device1/lpf_current",
"/sys/devices/platform/acpm_mfd_bus@15510000/i2c-0/0-002f/s2mpg15-meter/"
"s2mpg15-odpm/iio:device0/lpf_current",
};
bool titlesInitialized = false;
std::vector<std::string> channelNames;
std::vector<std::string> channelData[DUR_MAX];
std::vector<std::string> pwrwarnThreshold[PWRWARN_MAX];
std::vector<std::string> pwrwarnCode[PWRWARN_MAX];
std::vector<std::string> lpfCurrentVals[PWRWARN_MAX];
std::vector<std::string> files;
std::string content;
std::string token;
std::string tokenCh;
std::string fileLocation;
for (int i = 0; i < DUR_MAX; i++) {
if (!android::base::ReadFileToString(irqDurDirectories[i], &content)) {
return;
}
std::istringstream tokenStream(content);
while (std::getline(tokenStream, token, '\n')) {
if (!titlesInitialized) {
tokenCh = token;
tokenCh.erase(tokenCh.find(':'), tokenCh.length());
channelNames.push_back(tokenCh);
}
// there is a space after the ':' which needs to be removed
token.erase(0, token.find(':') + 1);
channelData[i].push_back(token);
}
if (!titlesInitialized)
titlesInitialized = true;
}
for (int i = 0; i < PWRWARN_MAX; i++) {
getFilesInDir(pwrwarnDirectories[i], &files);
for (auto &file : files) {
fileLocation = std::string(pwrwarnDirectories[i]) + std::string(file);
if (!android::base::ReadFileToString(fileLocation, &content)) {
continue;
}
std::string readout;
readout = android::base::Trim(content);
std::string readoutThreshold = readout;
readoutThreshold.erase(0, readoutThreshold.find('=') + 1);
std::string readoutCode = readout;
readoutCode.erase(readoutCode.find('='), readoutCode.length());
pwrwarnThreshold[i].push_back(readoutThreshold);
pwrwarnCode[i].push_back(readoutCode);
}
}
for (int i = 0; i < PWRWARN_MAX; i++) {
if (!android::base::ReadFileToString(lpfCurrentDirs[i], &content)) {
continue;
}
std::istringstream tokenStream(content);
bool first = true;
while (std::getline(tokenStream, token, '\n')) {
token.erase(0, token.find(' '));
if (first) {
first = false;
continue;
}
lpfCurrentVals[i].push_back(token);
}
}
printTitle(title);
printf("%s", colNames);
for (uint i = 0; i < channelNames.size(); i++) {
std::string code = "";
std::string threshold = "";
std::string current = "";
std::string ltDataMsg = "";
std::string btDataMsg = "";
std::string gtDataMsg = "";
int pmicSel = 0;
int offset = 0;
std::string channelNameSuffix = " \t";
if (i >= nonOdpmChannelCnt) {
offset = nonOdpmChannelCnt;
if (i >= (odpmChCnt + nonOdpmChannelCnt)) {
pmicSel = 1;
offset = odpmChCnt + nonOdpmChannelCnt;
}
channelNameSuffix = "";
code = pwrwarnCode[pmicSel][i - offset];
threshold = pwrwarnThreshold[pmicSel][i - offset];
current = lpfCurrentVals[pmicSel][i - offset];
}
if (i < channelData[0].size())
ltDataMsg = channelData[0][i];
if (i < channelData[1].size())
btDataMsg = channelData[1][i];
if (i < channelData[2].size())
gtDataMsg = channelData[2][i];
std::string adjustedChannelName = channelNames[i] + channelNameSuffix;
printf("%s \t%s\t\t%s\t\t\t%s\t\t%s \t%s \t\t%s\n",
adjustedChannelName.c_str(),
ltDataMsg.c_str(),
btDataMsg.c_str(),
gtDataMsg.c_str(),
code.c_str(),
threshold.c_str(),
current.c_str());
}
}
int main() {
dumpPowerStatsTimes();
dumpAcpmStats();
dumpPowerSupplyStats();
dumpMaxFg();
dumpPowerSupplyDock();
dumpLogBufferTcpm();
dumpTcpc();
dumpPdEngine();
dumpBatteryHealth();
dumpBatteryDefend();
dumpBatteryCaretaker();
dumpChg();
dumpChgUserDebug();
dumpBatteryEeprom();
dumpChargerStats();
dumpWlcLogs();
dumpGvoteables();
dumpMitigation();
dumpMitigationStats();
dumpMitigationDirs();
dumpIrqDurationCounts();
}

131
dumpstate/dump_power.rc Normal file
View File

@@ -0,0 +1,131 @@
on init
# Dump maxfg
chown system system /sys/class/power_supply/maxfg/m5_model_state
chown system system /sys/class/power_supply/maxfg_base/model_state
chown system system /sys/class/power_supply/max77779fg/model_state
# Dump eeprom
chown system system /sys/devices/platform/10c90000.hsi2c/i2c-9/9-0050/eeprom
chown system system /sys/devices/platform/10ca0000.hsi2c/i2c-10/10-0050/eeprom
chown system system /dev/battery_history
chmod 0644 /dev/battery_history
chown system system /dev/maxfg_history
chmod 0644 /dev/maxfg_history
# Charge stats (write 0)
chown system system /sys/class/power_supply/battery/charge_stats
# Pca Charge stats (write 0)
chown system system /sys/class/power_supply/dc-mains/device/chg_stats
# Wireless Charge stats (write 0)
chown system system /sys/class/power_supply/wireless/device/charge_stats
# Thermal Charge stats (write 0)
chown system system /sys/devices/platform/google,charger/thermal_stats
# Google Charger stats (write 0)
chown system system /sys/devices/platform/google,charger/charge_stats
# Permission for wireless charging
chown system system /sys/class/power_supply/wireless/capacity
chown system system /sys/class/power_supply/wireless/device/rtx
chown system system /sys/class/power_supply/wireless/device/rxdata
chown system system /sys/class/power_supply/wireless/device/txdata
chown system system /sys/class/power_supply/wireless/device/rxlen
chown system system /sys/class/power_supply/wireless/device/txlen
chown system system /sys/class/power_supply/wireless/device/ccreset
chown system system /sys/class/power_supply/wireless/device/status
chown system system /sys/class/power_supply/wireless/device/version
chown system system /sys/class/power_supply/wireless/device/features
chown system system /sys/class/power_supply/wireless/device/authtype
chown system system /sys/class/power_supply/wireless/device/authstart
# Adaptive charge
chown system system /sys/class/power_supply/battery/charge_deadline
# Charging policy
chown system system /sys/class/power_supply/battery/charging_policy
# BatteryHealthData
chown system system /sys/class/power_supply/battery/first_usage_date
# Battery Defender
chown system system /sys/devices/platform/google,battery/power_supply/battery/bd_trickle_cnt
chown system system /sys/devices/platform/google,battery/power_supply/battery/bd_trickle_dry_run
chown system system /sys/devices/platform/google,battery/power_supply/battery/bd_trickle_enable
chown system system /sys/devices/platform/google,battery/power_supply/battery/bd_trickle_recharge_soc
chown system system /sys/devices/platform/google,battery/power_supply/battery/bd_trickle_reset_sec
chown system system /sys/devices/platform/google,battery/power_supply/battery/bd_clear
chown system system /sys/devices/platform/google,battery/power_supply/battery/health_safety_margin
chown system system /sys/devices/platform/google,battery/power_supply/battery/swelling_data
chown system system /sys/devices/platform/google,charger/bd_drainto_soc
chown system system /sys/devices/platform/google,charger/bd_recharge_soc
chown system system /sys/devices/platform/google,charger/bd_recharge_voltage
chown system system /sys/devices/platform/google,charger/bd_resume_abs_temp
chown system system /sys/devices/platform/google,charger/bd_resume_soc
chown system system /sys/devices/platform/google,charger/bd_resume_temp
chown system system /sys/devices/platform/google,charger/bd_resume_time
chown system system /sys/devices/platform/google,charger/bd_temp_dry_run
chown system system /sys/devices/platform/google,charger/bd_temp_enable
chown system system /sys/devices/platform/google,charger/bd_trigger_temp
chown system system /sys/devices/platform/google,charger/bd_trigger_time
chown system system /sys/devices/platform/google,charger/bd_trigger_voltage
chown system system /sys/devices/platform/google,charger/bd_clear
chown system system /sys/devices/platform/google,charger/charge_start_level
chown system system /sys/devices/platform/google,charger/charge_stop_level
chown system system /sys/devices/platform/google,cpm/dc_ctl
# Important to include dd_state as it's used in battery defender in charger mode
chown system system /sys/devices/platform/google,charger/dd_state
chown system system /sys/devices/platform/google,charger/dd_settings
# for parsing thismeal.bin
chown system system /vendor/bin/hw/battery_mitigation
on early-boot
# Wait for insmod_sh to finish all common modules
wait_for_prop vendor.common.modules.ready 1
# logbuffer
chown system system /dev/logbuffer_maxfg
chown system system /dev/logbuffer_maxfg_monitor
chown system system /dev/logbuffer_max77779fg
chown system system /dev/logbuffer_max77779fg_monitor
chown system system /dev/logbuffer_maxfg_base
chown system system /dev/logbuffer_maxfg_secondary
chown system system /dev/logbuffer_maxfg_base_monitor
chown system system /dev/logbuffer_maxfg_secondary_monitor
chown system system /dev/logbuffer_maxq
chown system system /dev/logbuffer_rtx
chown system system /dev/logbuffer_ssoc
chown system system /dev/logbuffer_ttf
chown system system /dev/logbuffer_tcpm
chown system system /dev/logbuffer_usbpd
chown system system /dev/logbuffer_pogo_transport
chown system system /dev/logbuffer_wireless
chown system system /dev/logbuffer_pca9468
chown system system /dev/logbuffer_ln8411
chown system system /dev/logbuffer_cpm
chown system system /dev/logbuffer_wc68
chown system system /dev/logbuffer_max77779_fwupdate
on property:sys.boot_completed=1
# gvotables for dumpstate
chown system system /sys/kernel/debug/gvotables
# Permission for wireless charging
chown system system /sys/class/power_supply/wireless/capacity
chown system system /sys/class/power_supply/wireless/device/rtx
chown system system /sys/class/power_supply/wireless/device/rxdata
chown system system /sys/class/power_supply/wireless/device/txdata
chown system system /sys/class/power_supply/wireless/device/rxlen
chown system system /sys/class/power_supply/wireless/device/txlen
chown system system /sys/class/power_supply/wireless/device/ccreset
chown system system /sys/class/power_supply/wireless/device/status
chown system system /sys/class/power_supply/wireless/device/version
chown system system /sys/class/power_supply/wireless/device/authstart
# write serialno to battery path for pairing
write /sys/class/power_supply/battery/dev_sn ${ro.boot.serialno}

View File

@@ -1,2 +1,2 @@
PRODUCT_PACKAGES += dump_gs101.sh
PRODUCT_PACKAGES += dump_power

10
evolution.dependencies Normal file
View File

@@ -0,0 +1,10 @@
[
{
"repository": "device_google_gs-common",
"target_path": "device/google/gs-common"
},
{
"repository": "packages_apps_PixelParts",
"target_path": "packages/apps/PixelParts"
}
]

11
evolution_common.mk Normal file
View File

@@ -0,0 +1,11 @@
#
# Copyright (C) 2024 The Evolution X Project
#
# SPDX-License-Identifier: Apache-2.0
#
# PixelParts
include packages/apps/PixelParts/device.mk
# UDFPS
TARGET_HAS_UDFPS += true

View File

@@ -74,9 +74,9 @@ PRODUCT_PACKAGES += \
PRODUCT_SET_DEBUGFS_RESTRICTIONS := false
# PixelLogger for RF testing
PRODUCT_PACKAGES_DEBUG += \
PRODUCT_PACKAGES_ENG += \
PixelLogger
# Tool for installing Widevine keybox
PRODUCT_PACKAGES_DEBUG += \
PRODUCT_PACKAGES_ENG += \
WvInstallKeybox

View File

@@ -2,7 +2,7 @@
ifneq (,$(filter aosp% factory%, $(TARGET_PRODUCT)))
# Skip if device is AOSP or factory build
else
ifneq (,$(filter userdebug, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
$(call soong_config_set,fp_hal_feature,report_bug_support,true)
BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/fingerprint-extension/vendor/
SYSTEM_EXT_PUBLIC_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/fingerprint-extension/system_ext/public/

View File

@@ -1,7 +1,7 @@
<manifest version="1.0" type="device">
<hal format="aidl">
<name>android.hardware.health</name>
<version>3</version>
<version>4</version>
<fqname>IHealth/default</fqname>
</hal>
</manifest>

46
lineage_common.mk Normal file
View File

@@ -0,0 +1,46 @@
#
# SPDX-FileCopyrightText: 2021-2024 The LineageOS Project
# SPDX-FileCopyrightText: 2021-2024 The Calyx Institute
# SPDX-License-Identifier: Apache-2.0
#
# Overlays
DEVICE_PACKAGE_OVERLAYS += device/google/gs101/overlay-lineage
# AiAi Config
PRODUCT_COPY_FILES += \
device/google/gs101/allowlist_com.google.android.as.xml:$(TARGET_COPY_OUT_PRODUCT)/etc/sysconfig/allowlist_com.google.android.as.xml
# Camera
PRODUCT_PRODUCT_PROPERTIES += \
ro.vendor.camera.extensions.package=com.google.android.apps.camera.services \
ro.vendor.camera.extensions.service=com.google.android.apps.camera.services.extensions.service.PixelExtensions
# Google Assistant
PRODUCT_PRODUCT_PROPERTIES += ro.opa.eligible_device=true
# EUICC
PRODUCT_PACKAGES += \
EuiccSupportPixelOverlay
# Lineage Health
include hardware/google/pixel/lineage_health/device.mk
$(call soong_config_set,lineage_health,charging_control_supports_deadline,true)
$(call soong_config_set,lineage_health,charging_control_supports_limit,true)
$(call soong_config_set,lineage_health,charging_control_supports_toggle,false)
# Linker config
PRODUCT_VENDOR_LINKER_CONFIG_FRAGMENTS += \
device/google/gs101/linker.config.json
# Parts
PRODUCT_PACKAGES += \
GoogleParts
# Tethering
PRODUCT_PACKAGES += \
TetheringOverlay
# Touch
include hardware/google/pixel/touch/device.mk

9
linker.config.json Normal file
View File

@@ -0,0 +1,9 @@
{
"provideLibs": [
"liboemcrypto.so",
"lib_aion_buffer.so",
"libedgetpu_client.google.so",
"libedgetpu_tachyon.google.so",
"libedgetpu_util.so"
]
}

View File

@@ -12,15 +12,6 @@
<instance>default</instance>
</interface>
</hal>
<hal format="hidl">
<name>android.hardware.graphics.mapper</name>
<transport arch="32+64">passthrough</transport>
<version>4.0</version>
<interface>
<name>IMapper</name>
<instance>default</instance>
</interface>
</hal>
<hal format="hidl">
<name>android.hardware.graphics.composer</name>
<transport>hwbinder</transport>

View File

@@ -1,13 +1,4 @@
<manifest version="1.0" type="device" target-level="5">
<hal format="hidl">
<name>android.hardware.graphics.mapper</name>
<transport arch="32+64">passthrough</transport>
<version>4.0</version>
<interface>
<name>IMapper</name>
<instance>default</instance>
</interface>
</hal>
<hal format="hidl">
<name>android.hardware.graphics.composer</name>
<transport>hwbinder</transport>

View File

@@ -1,20 +1,12 @@
<manifest version="1.0" type="device">
<hal format="hidl">
<hal format="aidl">
<name>android.hardware.media.c2</name>
<transport>hwbinder</transport>
<version>1.0</version>
<interface>
<name>IComponentStore</name>
<instance>default1</instance>
</interface>
<version>1</version>
<fqname>IComponentStore/default1</fqname>
</hal>
<hal format="hidl">
<hal format="aidl">
<name>android.hardware.media.c2</name>
<transport>hwbinder</transport>
<version>1.2</version>
<interface>
<name>IComponentStore</name>
<instance>default</instance>
</interface>
<version>1</version>
<fqname>IComponentStore/default</fqname>
</hal>
</manifest>

View File

@@ -8,4 +8,9 @@
<instance>default</instance>
</interface>
</hal>
<hal format="aidl">
<name>android.hardware.media.c2</name>
<version>1</version>
<fqname>IComponentStore/default</fqname>
</hal>
</manifest>

26
manifest_radio.xml Normal file
View File

@@ -0,0 +1,26 @@
<manifest version="1.0" type="device">
<hal format="hidl">
<name>android.hardware.radio</name>
<transport>hwbinder</transport>
<fqname>@1.2::ISap/slot1</fqname>
<fqname>@1.2::ISap/slot2</fqname>
<fqname>@1.6::IRadio/slot1</fqname>
<fqname>@1.6::IRadio/slot2</fqname>
</hal>
<hal format="hidl">
<name>android.hardware.radio.config</name>
<transport>hwbinder</transport>
<fqname>@1.1::IRadioConfig/default</fqname>
</hal>
<hal format="hidl">
<name>android.hardware.secure_element</name>
<transport>hwbinder</transport>
<fqname>@1.2::ISecureElement/SIM1</fqname>
<fqname>@1.2::ISecureElement/SIM2</fqname>
</hal>
<hal format="hidl">
<name>vendor.samsung_slsi.telephony.hardware.radioExternal</name>
<transport>hwbinder</transport>
<fqname>@1.1::IOemSlsiRadioExternal/rilExternal</fqname>
</hal>
</manifest>

View File

@@ -100,7 +100,7 @@
</MediaCodec>
<MediaCodec name="c2.exynos.vp8.decoder" type="video/x-vnd.on2.vp8" >
<Limit name="size" min="32x32" max="3840x2160" />
<Limit name="alignment" value="2x2" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="16x16" />
<Limit name="block-count" range="1-32400" />
<Limit name="blocks-per-second" min="1" max="3888000" />
@@ -113,7 +113,7 @@
</MediaCodec>
<MediaCodec name="c2.exynos.vp9.decoder" type="video/x-vnd.on2.vp9" >
<Limit name="size" min="64x64" max="3840x2176" />
<Limit name="alignment" value="2x2" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="64x64" />
<Limit name="block-count" range="1-2040" />
<Limit name="blocks-per-second" min="1" max="3888000" />
@@ -126,7 +126,7 @@
</MediaCodec>
<MediaCodec name="c2.exynos.vp9.decoder.secure" type="video/x-vnd.on2.vp9" >
<Limit name="size" min="64x64" max="3840x2176" />
<Limit name="alignment" value="2x2" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="64x64" />
<Limit name="block-count" range="1-2040" />
<Limit name="blocks-per-second" min="1" max="3888000" />
@@ -203,7 +203,7 @@
</MediaCodec>
<MediaCodec name="c2.exynos.vp8.encoder" type="video/x-vnd.on2.vp8" >
<Limit name="size" min="32x32" max="3840x2160" />
<Limit name="alignment" value="2x2" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="16x16" />
<Limit name="block-count" range="1-32400" />
<Limit name="blocks-per-second" min="1" max="3888000" />
@@ -218,7 +218,7 @@
</MediaCodec>
<MediaCodec name="c2.exynos.vp9.encoder" type="video/x-vnd.on2.vp9" >
<Limit name="size" min="64x64" max="3840x2176" />
<Limit name="alignment" value="2x2" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="64x64" />
<Limit name="block-count" range="1-2040" />
<Limit name="blocks-per-second" min="1" max="243000" />

View File

@@ -19,7 +19,7 @@
<Decoders>
<MediaCodec name="c2.google.av1.decoder" type="video/av01">
<Limit name="size" min="96x96" max="3840x2160" />
<Limit name="alignment" value="2x2" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="16x16" />
<Limit name="block-count" range="36-32400" />
<Limit name="blocks-per-second" min="24" max="1944000" />
@@ -34,7 +34,7 @@
</MediaCodec>
<MediaCodec name="c2.google.av1.decoder.secure" type="video/av01">
<Limit name="size" min="96x96" max="3840x2160" />
<Limit name="alignment" value="2x2" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="16x16" />
<Limit name="block-count" range="36-32400" />
<Limit name="blocks-per-second" min="24" max="1944000" />

View File

@@ -115,20 +115,20 @@
</MediaCodec>
<MediaCodec name="c2.android.avc.decoder" type="video/avc" update="true">
<!-- measured 90%:342-360 med:343 N=2 -->
<Limit name="measured-frame-rate-320x240" range="342-351" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-320x240" range="542-971" /> <!-- v90%=1.0 -->
<!-- measured 90%:142-147 med:143 N=2 -->
<Limit name="measured-frame-rate-720x480" range="142-145" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-720x480" range="162-301" /> <!-- v90%=1.0 -->
<!-- measured 90%:54-56 med:55 N=2 -->
<Limit name="measured-frame-rate-1280x720" range="54-55" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-1280x720" range="54-77" /> <!-- v90%=1.0 -->
<!-- measured 90%:25-26 med:26 N=2 -->
<Limit name="measured-frame-rate-1920x1080" range="25-26" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-1920x1080" range="25-34" /> <!-- v90%=1.0 -->
</MediaCodec>
<MediaCodec name="c2.android.hevc.decoder" type="video/hevc" update="true">
<Limit name="measured-frame-rate-352x288" range="583-674" /> <!-- N=20 v90%=1.0 -->
<Limit name="measured-frame-rate-640x360" range="337-352" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-720x480" range="312-324" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-1280x720" range="104-108" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-1920x1080" range="54-56" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-352x288" range="583-972" /> <!-- N=20 v90%=1.0 -->
<Limit name="measured-frame-rate-640x360" range="337-537" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-720x480" range="312-470" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-1280x720" range="104-165" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-1920x1080" range="54-68" /> <!-- v90%=1.0 -->
</MediaCodec>
<MediaCodec name="c2.android.mpeg4.decoder" type="video/mp4v-es" update="true">
<Limit name="measured-frame-rate-176x144" range="1215-1823" />

View File

@@ -1,4 +1,4 @@
ifneq ($(BOARD_WITHOUT_RADIO),true)
PRODUCT_PACKAGES += dmd
endif
BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs101-sepolicy/modem/user
BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs101/sepolicy/modem/user

View File

@@ -1,4 +1,4 @@
ifneq ($(BOARD_WITHOUT_RADIO),true)
PRODUCT_PACKAGES += vcd
endif
BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs101-sepolicy/modem/userdebug/
BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs101/sepolicy/modem/userdebug/

View File

@@ -0,0 +1,64 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
/*
** Copyright 2021, The LineageOS Project
**
** Licensed under the Apache License, Version 2.0 (the "License");
** you may not use this file except in compliance with the License.
** You may obtain a copy of the License at
**
** http://www.apache.org/licenses/LICENSE-2.0
**
** Unless required by applicable law or agreed to in writing, software
** distributed under the License is distributed on an "AS IS" BASIS,
** WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
** See the License for the specific language governing permissions and
** limitations under the License.
*/
-->
<resources xmlns:xliff="urn:oasis:names:tc:xliff:document:1.2">
<string-array name="config_nightDisplayColorTemperatureCoefficients">
<!-- R a-coefficient --> <item>0.0</item>
<!-- R b-coefficient --> <item>0.0</item>
<!-- R y-intercept --> <item>1.0</item>
<!-- G a-coefficient --> <item>-0.000000014365268757</item>
<!-- G b-coefficient --> <item>0.000255092801250106</item>
<!-- G y-intercept --> <item>-0.064156942434907716</item>
<!-- B a-coefficient --> <item>-0.000000000910931179</item>
<!-- B b-coefficient --> <item>0.000207598323269139</item>
<!-- B y-intercept --> <item>-0.349361641294833436</item>
</string-array>
<!-- List of comma separated package names for which we the system will not show crash, ANR,
etc. dialogs. -->
<string translatable="false" name="config_appsNotReportingCrashes">com.google.android.euicc</string>
<!-- Flag indicating whether we should enable the adaptive sleep.-->
<bool name="config_adaptive_sleep_available">true</bool>
<!-- The component name for the default system attention service.
This service must be trusted, as it can be activated without explicit consent of the user.
See android.attention.AttentionManagerService.
-->
<string name="config_defaultAttentionService" translatable="false">com.google.android.as/com.google.android.apps.miphone.aiai.attention.service.AiAiAttentionService</string>
<!-- Live Captions -->
<string name="config_defaultSystemCaptionsManagerService">com.google.android.as/com.google.android.apps.miphone.aiai.captions.SystemCaptionsManagerService</string>
<!-- Recents text and image selection for Pixel Launcher (not supported by Launcher3) -->
<string name="config_defaultContentSuggestionsService" translatable="false">com.google.android.as/com.google.android.apps.miphone.aiai.app.AiAiContentSuggestionsService</string>
<!-- Launcher app suggestions -->
<string name="config_defaultAppPredictionService" translatable="false">com.google.android.as/com.google.android.apps.miphone.aiai.app.AiAiPredictionService</string>
<!-- Make AiAi the default role holder for System Intelligence -->
<string name="config_systemAmbientAudioIntelligence">com.google.android.as</string>
<string name="config_systemAudioIntelligence">com.google.android.as</string>
<string name="config_systemNotificationIntelligence">com.google.android.as</string>
<string name="config_systemTextIntelligence">com.google.android.as</string>
<string name="config_systemUiIntelligence">com.google.android.as</string>
<string name="config_systemVisualIntelligence">com.google.android.as</string>
</resources>

View File

@@ -1,7 +1,7 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
/**
* Copyright (c) 2020, The Android Open Source Project
* Copyright 2021, The LineageOS Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
@@ -16,7 +16,9 @@
* limitations under the License.
*/
-->
<resources xmlns:xliff="urn:oasis:names:tc:xliff:document:1.2">
<!-- Content description of the data connection type 5G UW. [CHAR LIMIT=NONE] -->
<string name="data_connection_5g_plus" translatable="false">5G UW</string>
<resources>
<!-- Default screen brightness, from 0 to 255. 102 is 40%. -->
<integer name="def_screen_brightness">82</integer>
<!-- Set the automatic brightness mode on by default -->
<bool name="def_screen_brightness_automatic_mode">true</bool>
</resources>

View File

@@ -0,0 +1,34 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
/*
** Copyright 2009, The Android Open Source Project
**
** Licensed under the Apache License, Version 2.0 (the "License");
** you may not use this file except in compliance with the License.
** You may obtain a copy of the License at
**
** http://www.apache.org/licenses/LICENSE-2.0
**
** Unless required by applicable law or agreed to in writing, software
** distributed under the License is distributed on an "AS IS" BASIS,
** WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
** See the License for the specific language governing permissions and
** limitations under the License.
*/
-->
<!-- These resources are around just to allow their values to be customized
for different hardware and product builds. -->
<resources>
<!-- Should we vibrate on an icon animation of the shelf. This should only be active if the
vibrator is capable of subtle vibrations -->
<bool name="config_vibrateOnIconAnimation">true</bool>
<!-- Whether to show a warning notification when device's skin temperature is high. -->
<integer name="config_showTemperatureWarning">1</integer>
<!-- Whether to show a alarm dialog when device's usb port is overheating. -->
<integer name="config_showUsbPortAlarm">1</integer>
</resources>

View File

@@ -0,0 +1,33 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
/*
** Copyright 2019, The LineageOS Project
**
** Licensed under the Apache License, Version 2.0 (the "License");
** you may not use this file except in compliance with the License.
** You may obtain a copy of the License at
**
** http://www.apache.org/licenses/LICENSE-2.0
**
** Unless required by applicable law or agreed to in writing, software
** distributed under the License is distributed on an "AS IS" BASIS,
** WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
** See the License for the specific language governing permissions and
** limitations under the License.
*/
-->
<resources xmlns:xliff="urn:oasis:names:tc:xliff:document:1.2">
<!-- Whether device has screen with higher aspect ratio -->
<bool name="config_haveHigherAspectRatioScreen">true</bool>
<!-- Defines the actions shown in advanced reboot submenu -->
<string-array name="config_restartActionsList">
<item>restart</item>
<item>restart_systemui</item>
<item>restart_recovery</item>
<item>restart_fastboot</item>
<item>restart_bootloader</item>
</string-array>
</resources>

View File

@@ -0,0 +1,20 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
Copyright (C) 2021 The LineageOS Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<resources>
<bool name="call_recording_enabled">true</bool>
<integer name="call_recording_audio_source">4</integer>
</resources>

View File

@@ -0,0 +1,49 @@
<?xml version="1.0" encoding="utf-8"?>
<!-- Copyright (C) 2007 The Android Open Source Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<resources xmlns:xliff="urn:oasis:names:tc:xliff:document:1.2">
<!-- Display settings screen, Color mode options. Must be the same length and order as
config_color_mode_options_strings above. Only the values that also appear in
frameworks/base/core/res/res/values/config.xml's config_availableColorModes are shown. -->
<integer-array name="config_color_mode_options_values" translatable="false">
<item>0</item>
<item>256</item>
<item>2</item>
<item>3</item>
</integer-array>
<!-- The number of vibration intensity levels supported by the device.
Note that this should correspond to the ability to vary the vibration amplitude, with
enough dynamic range to have at least as many distinct intensity levels as defined here.
Supported values are 1, 2, 3. If '1', the settings app will use a toggle for the settings,
otherwise a slider. If '3', the settings app maps intensities directly to the levels
supported by the Vibrator HAL APIs. If '2', then the levels will be mapped to
VIBRATION_INTENSITY_LOW and VIBRATION_INTENSITY_HIGH, which gives the most range for
scaling vibrations. The medium intensity will be skipped.
The default intensity values are configured at
frameworks/base/core/res/res/values/config.xml's config_default[type]VibrationIntensity.
Make sure that each default intensity value is consistent with the supported levels set
here. If this settings supports only 2 levels, for example, then the default intensity
should be either LOW (1) or HIGH (3).
-->
<integer name="config_vibration_supported_intensity_levels">3</integer>
<!-- Whether to show the Preference for Adaptive connectivity -->
<bool name="config_show_adaptive_connectivity">true</bool>
</resources>

View File

@@ -0,0 +1,20 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
Copyright (C) 2020-2024 The LineageOS Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<resources>
<!-- Show battery cycle count -->
<bool name="config_show_battery_cycle_count" translatable="false">true</bool>
</resources>

View File

@@ -0,0 +1,165 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
Copyright (C) 2020 The Proton AOSP Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<resources>
<string-array name="configs_device">
<!-- ConnectivityThermalPowerManager 5G modem monitoring rules -->
<item>connectivity_thermal_power_manager/apply_action_time_seconds=10</item>
<item>connectivity_thermal_power_manager/atm_power_threshold_mw=800</item>
<item>connectivity_thermal_power_manager/cellular_thermal_adaptive_thermal_status_adaptive_action_list=</item>
<item>connectivity_thermal_power_manager/criteria_1_enabled=true</item>
<item>connectivity_thermal_power_manager/criteria_4_lte_pref_mode=3</item>
<item>connectivity_thermal_power_manager/wifi_disconnected_time_seconds=180</item>
<item>connectivity_thermal_power_manager/wifi_internet_driven_endc_product_carrier_id_set=shiba,husky,akita,komodo,tokay,caiman,comet@1,1989,2023,2576,2067,2071,2073,2577,2522,2075,2578,2083,2433,1949</item>
<!-- Live Caption (Pixel 2017 + OEM) -->
<item>device_personalization_services/Captions__allow_box_x_axis_movement=true</item>
<item>device_personalization_services/Captions__allow_use_public_speech_recognition=true</item>
<item>device_personalization_services/Captions__allow_voip_call_without_audio_recording=true</item>
<item>device_personalization_services/Captions__available_for_download=en-US;en-GB;en-CA;en-IE;en-AU;en-SG;en-IN;fr-FR;fr-CA;fr-BE;fr-CH;it-IT;it-CH;de-DE;de-AT;de-BE;de-CH;ja-JP;es-ES;es-US;cmn-Hant-TW;hi-IN;pt-BR;tr-TR;pl-PL;cmn-Hans-CN;ko-KR;ru-RU;vi-VN</item>
<item>device_personalization_services/Captions__disable_prod=false</item>
<!-- <item>device_personalization_services/Captions__enable=false</item> -->
<item>device_personalization_services/Captions__enable_activation_boost=true</item>
<item>device_personalization_services/Captions__enable_adaptive_box_width=true</item>
<item>device_personalization_services/Captions__enable_augmented_modality=true</item>
<item>device_personalization_services/Captions__enable_augmented_modality_input=true</item>
<item>device_personalization_services/Captions__enable_augmented_modality_language_detection=true</item>
<item>device_personalization_services/Captions__enable_augmented_music=true</item>
<!-- <item>device_personalization_services/Captions__enable_clearcut_logging=true</item> -->
<item>device_personalization_services/Captions__enable_drag_and_double_tap_to_resize=true</item>
<item>device_personalization_services/Captions__enable_ec_integration=false</item>
<item>device_personalization_services/Captions__enable_language_detection=true</item>
<item>device_personalization_services/Captions__enable_one_caption_experiment=false</item>
<item>device_personalization_services/Captions__enable_punctuations=true</item>
<item>device_personalization_services/Captions__enable_setting_page=false</item>
<item>device_personalization_services/Captions__enable_survey=false</item>
<item>device_personalization_services/Captions__enable_text_transform=true</item>
<item>device_personalization_services/Captions__enable_westworld_logging=false</item>
<item>device_personalization_services/Captions__enable_zero_day=false</item>
<item>device_personalization_services/Captions__manifest_url_template=https://storage.googleapis.com/captions/%{NAMESPACE}_%{VERSION}_manifest.json</item>
<item>device_personalization_services/Captions__model_version_v1=20190613</item>
<item>device_personalization_services/Captions__model_version_v1_2=20200112</item>
<item>device_personalization_services/Captions__new_model_version=20210623</item>
<item>device_personalization_services/Captions__new_model_version_advanced=20221227</item>
<item>device_personalization_services/Captions__speech_threshold=0.2</item>
<item>device_personalization_services/Captions__support_lang_id_disabled_after_dismissals=true</item>
<item>device_personalization_services/Captions__supported_languages=en-US;fr-FR;it-IT;de-DE;ja-JP;es-ES;cmn-Hant-TW;hi-IN;pt-BR;tr-TR;pl-PL;cmn-Hans-CN;ko-KR;ru-RU;vi-VN</item>
<item>device_personalization_services/Captions__supported_languages_beta_quality=ja-JP;pt-BR;tr-TR;pl-PL;cmn-Hans-CN;ko-KR;ru-RU;vi-VN</item>
<item>device_personalization_services/Captions__surface_sound_events=true</item>
<item>device_personalization_services/Captions__text_transform_augmented_input=true</item>
<item>device_personalization_services/Captions__visibility_playing_duration_millis=5000</item>
<item>device_personalization_services/Captions__visibility_stopped_duration_millis=1500</item>
<!-- Now Playing (Pixel 2017) -->
<item>device_personalization_services/NowPlaying__ambient_music_apk_music_detector_min_score=0.45</item>
<item>device_personalization_services/NowPlaying__ambient_music_download_album_art_via_astrea=false</item>
<item>device_personalization_services/NowPlaying__ambient_music_enable_resource_download_logging=false</item>
<item>device_personalization_services/NowPlaying__ambient_music_enhanced_metadata_shards_manifest=4003:https://storage.googleapis.com/music-iq-db/updatable_db_v4/20241015-000033/manifest.json</item>
<item>device_personalization_services/NowPlaying__ambient_music_get_model_state_cooldown_seconds_cloud_search=9</item>
<item>device_personalization_services/NowPlaying__ambient_music_index_manifest_17_09_02=3105:https://storage.googleapis.com/music-iq-db/updatable_db_v3/20241013-030037/manifest.json</item>
<item>device_personalization_services/NowPlaying__ambient_music_matcher_match_threshold_17_09_02=1.0E-6</item>
<item>device_personalization_services/NowPlaying__ambient_music_on_demand_enabled=true</item>
<item>device_personalization_services/NowPlaying__ambient_music_on_demand_music_confidence=0.48</item>
<item>device_personalization_services/NowPlaying__ambient_music_on_demand_search_use_new_opt_in_flow=false</item>
<item>device_personalization_services/NowPlaying__ambient_music_show_album_art=false</item>
<item>device_personalization_services/NowPlaying__ambient_music_support_dsp_model_tflite_p6=true</item>
<item>device_personalization_services/NowPlaying__ambient_music_use_enhanced_matches_database=false</item>
<item>device_personalization_services/NowPlaying__ambient_music_use_metadata_shards_database=false</item>
<item>device_personalization_services/NowPlaying__ambient_music_use_yt_domain_fife_urls=false</item>
<item>device_personalization_services/NowPlaying__cloud_api_allowed=true</item>
<item>device_personalization_services/NowPlaying__create_shortcut_on_np_enabled=false</item>
<item>device_personalization_services/NowPlaying__default_music_player_setting=false</item>
<item>device_personalization_services/NowPlaying__dsp_model_checksum_enabled=false</item>
<!-- <item>device_personalization_services/NowPlaying__enable_usage_fa=true</item> -->
<item>device_personalization_services/NowPlaying__favorites_enabled=true</item>
<item>device_personalization_services/NowPlaying__feature_users_count_enabled=true</item>
<!-- <item>device_personalization_services/NowPlaying__federated_analytics_allowed=true</item> -->
<item>device_personalization_services/NowPlaying__handle_ambient_music_results_with_history=true</item>
<item>device_personalization_services/NowPlaying__min_training_interval_millis=86400000</item>
<item>device_personalization_services/NowPlaying__nnfp_v3_model_enabled=true</item>
<item>device_personalization_services/NowPlaying__on_demand_enable_eager_prompt=false</item>
<item>device_personalization_services/NowPlaying__on_demand_fingerprinter_being_setup_warning=true</item>
<item>device_personalization_services/NowPlaying__on_demand_hide_if_fingerprinter_install_not_confirmed=true</item>
<item>device_personalization_services/NowPlaying__on_demand_min_supported_aga_version=12.35.17</item>
<item>device_personalization_services/NowPlaying__on_demand_retry_fingerprinter_install=true</item>
<item>device_personalization_services/NowPlaying__shortcut_direct_create_enabled=false</item>
<item>device_personalization_services/NowPlaying__youtube_export_enabled=true</item>
<!-- Adaptive Sound (Pixel 2020) -->
<item>device_personalization_services/AdaptiveAudio__enable_adaptive_audio=true</item>
<item>device_personalization_services/AdaptiveAudio__show_promo_notification=false</item>
<item>device_personalization_services/AdaptiveAudio__use_silence_detector_state_bug_fix=true</item>
<!-- Screen attention (Pixel 2019) -->
<item>device_personalization_services/Attention__accel_sensor_enabled=false</item>
<item>device_personalization_services/Attention__accel_sensor_threshold_mss=0.2</item>
<item>device_personalization_services/Attention__enabled=true</item>
<item>device_personalization_services/Attention__margin_horizontal_px=1000</item>
<item>device_personalization_services/Attention__margin_vertical_px=1000</item>
<item>device_personalization_services/Attention__proximity_sensor_enabled=false</item>
<!-- Translation -->
<item>device_personalization_services/Translate__app_blocklist=com.google.android.talk</item>
<item>device_personalization_services/Translate__blue_chip_translate_enabled=true</item>
<item>device_personalization_services/Translate__characterset_lang_detection_enabled=true</item>
<item>device_personalization_services/Translate__chat_translate_languages=de,en,es,fr,it,ja,hi,zh,ru,pl,pt,ko,th,tr,nl,zh_Hant,sv,da,vi,ar,fa,no,bn,fil</item>
<item>device_personalization_services/Translate__copy_to_translate_enabled=true</item>
<item>device_personalization_services/Translate__differentiate_simplified_and_traditional_chinese=true</item>
<item>device_personalization_services/Translate__disable_translate_without_system_animation=false</item>
<item>device_personalization_services/Translate__enable_chronicle_migration=true</item>
<item>device_personalization_services/Translate__enable_default_langid_model=true</item>
<item>device_personalization_services/Translate__enable_dictionary_langid_detection=true</item>
<item>device_personalization_services/Translate__enable_opmv4_service=true</item>
<item>device_personalization_services/Translate__enable_settings_backup_restore=false</item>
<item>device_personalization_services/Translate__enable_setup_wizard_dialog_v2=false</item>
<item>device_personalization_services/Translate__enable_spa_setting=false</item>
<item>device_personalization_services/Translate__enable_translate_kit_api_migration=false</item>
<item>device_personalization_services/Translate__interpreter_source_languages=de,en,ja,es,fr,it</item>
<item>device_personalization_services/Translate__interpreter_target_languages=de,en,ja,es,fr,it</item>
<item>device_personalization_services/Translate__replace_auto_translate_copied_text_enabled=true</item>
<item>device_personalization_services/Translate__text_to_text_language_list=vi,ja,fa,ro,nl,mr,mt,ar,ms,it,eo,is,et,es,iw,zh,uk,af,id,ur,mk,cy,hi,el,be,pt,lt,hr,lv,hu,ht,te,de,bg,th,bn,tl,pl,tr,kn,sv,gl,ko,sw,cs,da,ta,gu,ka,sl,ca,sk,ga,sq,no,fi,ru,fr,en,zh_Hant,fil</item>
<item>device_personalization_services/Translate__translation_service_enabled=true</item>
<item>device_personalization_services/Translate__translator_expiration_enabled=true</item>
<item>device_personalization_services/Translate__use_translate_kit_streaming_api=true</item>
<!-- Recents text selection (for Pixel Launcher users) -->
<item>device_personalization_services/Overview__enable_barcode_detection=false</item>
<item>device_personalization_services/Overview__enable_image_search=false</item>
<item>device_personalization_services/Overview__enable_image_selection=true</item>
<item>device_personalization_services/Overview__enable_japanese_ocr=true</item>
<item>device_personalization_services/Overview__enable_lens_r_overview_long_press=true</item>
<item>device_personalization_services/Overview__enable_lens_r_overview_select_mode=true</item>
<item>device_personalization_services/Overview__enable_lens_r_overview_translate_action=false</item>
<item>device_personalization_services/Overview__enable_overview=true</item>
<item>device_personalization_services/Overview__enable_pir_clearcut_logging=true</item>
<item>device_personalization_services/Overview__enable_pir_westworld_logging=true</item>
<item>device_personalization_services/Overview__enable_proactive_hints=false</item>
<item>device_personalization_services/Overview__enable_superpacks_pir_protocol=true</item>
<item>device_personalization_services/Overview__min_lens_agsa_app_version=301084649</item>
<!-- Disable federated learning -->
<item>device_personalization_services/OverviewFederatedAnalytics__enable_fa=false</item>
<item>device_personalization_services/OverviewFederatedAnalytics__enable_min_training_interval=false</item>
<item>device_personalization_services/OverviewFederatedAnalytics__enable_non_synthetic_logs=false</item>
<!-- Disable unused AiAi features -->
<item>device_personalization_services/Autofill__enable=false</item>
<item>device_personalization_services/Autofill__enable_fa=false</item>
<item>device_personalization_services/Fedex__enable_fedex=false</item>
<item>device_personalization_services/Logging__enable_aiai_clearcut_logging=false</item>
<item>device_personalization_services/NotificationAssistant__enable_service=false</item>
<item>device_personalization_services/VisualCortex__enable=false</item>
</string-array>
</resources>

View File

@@ -0,0 +1,27 @@
<?xml version="1.0" encoding="utf-8"?>
<!-- Copyright 2021, The LineageOS Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<!-- Phone app resources that may need to be customized
for different hardware or product builds. -->
<resources>
<!-- The package name for the platform carrier config app, bundled with system image. -->
<string name="platform_carrier_config_package" translatable="false">com.google.android.carrier</string>
<!-- The package names which can request thermal mitigation. -->
<string-array name="thermal_mitigation_allowlisted_packages" translatable="false">
<item>com.google.android.connectivitythermalpowermanager</item>
</string-array>
</resources>

View File

@@ -103,11 +103,6 @@
<dimen name="status_bar_height_default">28dp</dimen>
<dimen name="status_bar_height_portrait">28dp</dimen>
<!-- Height of area above QQS where battery/time go (equal to status bar height if > 48dp) -->
<dimen name="quick_qs_offset_height">171px</dimen>
<!-- Total height of QQS (quick_qs_offset_height + 128dp) -->
<dimen name="quick_qs_total_height">177dp</dimen>
<!-- Shutdown if the battery temperature exceeds (this value * 0.1) Celsius. -->
<integer name="config_shutdownBatteryTemperature">600</integer>
@@ -231,14 +226,11 @@
<item>"/system/framework/framework.jar"</item>
<item>"/system/framework/services.jar"</item>
<item>"/system/bin/surfaceflinger"</item>
<item>"/system_ext/priv-app/SystemUIGoogle/SystemUIGoogle.apk"</item>
<item>"/system_ext/priv-app/SystemUI/SystemUI.apk"</item>
</string-array>
<!-- Should the pinner service pin the Camera application? -->
<bool name="config_pinnerCameraApp">true</bool>
<!-- Should the pinner service pin the Home application? -->
<bool name="config_pinnerHomeApp">true</bool>
<!-- Bytes that the PinnerService will pin for Home app -->
<integer name="config_pinnerHomePinBytes">6291456</integer>
<!-- Bytes that the PinnerService will pin for WebView -->
<integer name="config_pinnerWebviewPinBytes">20971520</integer>
@@ -272,6 +264,9 @@
<!-- Enable Zram writeback feature to allow unused pages in zram be written to flash. -->
<bool name="config_zramWriteback">true</bool>
<!-- the number of the max cached processes in the system. -->
<integer name="config_customizedMaxCachedProcesses">1024</integer>
<!-- List of system components which are allowed to receive ServiceState entries in an
un-sanitized form, even if the location toggle is off. This is intended ONLY for system
components, such as the telephony stack, which require access to the full ServiceState for

View File

@@ -1,22 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
/**
* Copyright (c) 2020, The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
-->
<resources xmlns:xliff="urn:oasis:names:tc:xliff:document:1.2">
<!-- Content description of the data connection type 5G UW. [CHAR LIMIT=NONE] -->
<string name="data_connection_5g_plus" translatable="false">5G UW</string>
</resources>

23
parts/Android.bp Normal file
View File

@@ -0,0 +1,23 @@
//
// Copyright (C) 2021 The LineageOS Project
//
// SPDX-License-Identifier: Apache-2.0
//
android_app {
name: "GoogleParts",
srcs: ["src/**/*.java"],
certificate: "platform",
platform_apis: true,
privileged: true,
system_ext_specific: true,
static_libs: [
"org.lineageos.settings.resources",
],
optimize: {
proguard_flags_files: ["proguard.flags"],
},
}

48
parts/AndroidManifest.xml Normal file
View File

@@ -0,0 +1,48 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
Copyright (C) 2021 The LineageOS Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
package="org.lineageos.settings"
android:versionCode="1"
android:versionName="1.0"
android:sharedUserId="android.uid.system">
<queries>
<package android:name="com.google.android.gms" />
<package android:name="com.google.android.gsf" />
<package android:name="com.google.android.euicc" />
<package android:name="com.google.euiccpixel" />
</queries>
<uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />
<uses-sdk
android:minSdkVersion="30"
android:targetSdkVersion="30"/>
<application
android:label="@string/device_settings_app_name"
android:persistent="true">
<receiver android:name=".BootCompletedReceiver">
<intent-filter>
<action android:name="android.intent.action.BOOT_COMPLETED" />
<category android:name="android.intent.category.DEFAULT" />
</intent-filter>
</receiver>
</application>
</manifest>

3
parts/proguard.flags Normal file
View File

@@ -0,0 +1,3 @@
-keep class org.lineageos.settings.* {
*;
}

View File

@@ -0,0 +1,32 @@
/*
* Copyright (C) 2021 The LineageOS Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.lineageos.settings;
import android.content.BroadcastReceiver;
import android.content.Context;
import android.content.Intent;
import android.util.Log;
public class BootCompletedReceiver extends BroadcastReceiver {
private static final String TAG = "GoogleParts";
@Override
public void onReceive(final Context context, Intent intent) {
Log.d(TAG, "Received boot completed intent");
EuiccDisabler.enableOrDisableEuicc(context);
}
}

View File

@@ -0,0 +1,71 @@
/*
* Copyright (C) 2021 The LineageOS Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.lineageos.settings;
import android.content.Context;
import android.content.pm.PackageInfo;
import android.content.pm.PackageManager;
import android.util.Log;
class EuiccDisabler {
private static final String TAG = "GoogleParts";
private static final String[] EUICC_DEPENDENCIES = new String[]{
"com.google.android.gms",
"com.google.android.gsf"
};
private static final String[] EUICC_PACKAGES = new String[]{
"com.google.android.euicc",
"com.google.euiccpixel"
};
private static boolean isInstalledAndEnabled(PackageManager pm, String pkgName) {
try {
PackageInfo info = pm.getPackageInfo(pkgName, 0);
Log.d(TAG, "package " + pkgName + " installed, " +
"enabled = " + info.applicationInfo.enabled);
return info.applicationInfo.enabled;
} catch (PackageManager.NameNotFoundException e) {
Log.d(TAG, "package " + pkgName + " is not installed");
return false;
}
}
private static boolean shouldDisable(PackageManager pm) {
for (String dep : EUICC_DEPENDENCIES) {
if (!isInstalledAndEnabled(pm, dep)) {
// Disable if any of the dependencies are disabled
return true;
}
}
return false;
}
public static void enableOrDisableEuicc(Context context) {
PackageManager pm = context.getPackageManager();
boolean disable = shouldDisable(pm);
int flag = disable
? PackageManager.COMPONENT_ENABLED_STATE_DISABLED
: PackageManager.COMPONENT_ENABLED_STATE_ENABLED;
for (String pkg : EUICC_PACKAGES) {
try {
pm.setApplicationEnabledSetting(pkg, flag, 0);
} catch (IllegalArgumentException e) {
Log.d(TAG, "package " + pkg + " is not present");
}
}
}
}

View File

@@ -73,18 +73,21 @@ const struct SysfsCollector::SysfsPaths sysfs_paths = {
"/sys/class/power_supply/maxfg/gmsr",
"/sys/class/power_supply/maxfg_base/gmsr",
},
.FGModelLoadingPath = {
"/sys/class/power_supply/maxfg/m5_model_state"
},
.FGLogBufferPath = {
"/dev/logbuffer_maxfg_monitor",
"/dev/logbuffer_max77779fg_monitor",
"/dev/logbuffer_maxfg_base_monitor",
"/dev/logbuffer_maxfg_secondary_monitor"
}
};
const struct UeventListener::UeventPaths ueventPaths = {
.AudioUevent = "/devices/virtual/amcs/amcs",
.TypeCPartnerUevent = "PRODUCT_TYPE=",
.FGLearningPath = {
"/sys/class/power_supply/maxfg/fg_learning_events"
},
.FwUpdatePath = "",
.FGModelLoadingPath = {
"/sys/class/power_supply/maxfg/m5_model_state"
}
.FwUpdatePath = ""
};
int main() {

View File

@@ -24,7 +24,6 @@
#include <log/log.h>
#define KVM_DEVICE "/dev/kvm"
#define MISC_WRITER "/vendor/bin/misc_writer"
int main() {
@@ -33,22 +32,7 @@ int main() {
pid_t pid;
int ret, wstatus;
/* Check whether KVM device exists. */
ret = access(KVM_DEVICE, F_OK);
/* If KVM device exists, return SUCCESS to continue booting. */
if (ret == 0) {
exit(EXIT_SUCCESS);
}
if (ret != -ENOENT) {
ALOGW("Unexpected error from access(): %d", ret);
}
/*
* If KVM device does not exist, run misc_writer and return FAILURE
* to force a reboot.
*/
/* Run misc_writer and return FAILURE to force a reboot. */
pid = fork();
if (pid == -1) {
ALOGE("Could not fork: %d", errno);

View File

@@ -2,5 +2,10 @@ service pkvm_enabler /vendor/bin/pkvm_enabler
reboot_on_failure reboot,pkvm-not-enabled
user root
on early-init
# Old bootloaders do not set the protected_vm sysprop when pkvm is disabled
on early-init && property:ro.boot.hypervisor.protected_vm.supported=
exec_start pkvm_enabler
# New bootloaders set the protected_vm sysprop to 0 when pkvm is disabled
on early-init && property:ro.boot.hypervisor.protected_vm.supported=0
exec_start pkvm_enabler

View File

@@ -369,18 +369,6 @@
"Type": "EndHint",
"Value": "DISABLE_TA_BOOST"
},
{
"PowerHint": "THERMAL_FLASH_LED_REDUCE_CRITICAL",
"Node": "LimitFlashCurrent",
"Duration": 0,
"Value": "100"
},
{
"PowerHint": "THERMAL_FLASH_LED_REDUCE_NONE",
"Node": "LimitFlashCurrent",
"Duration": 0,
"Value": "1500"
},
{
"PowerHint": "EXPENSIVE_RENDERING",
"Node": "PowerHALRenderingState",

View File

@@ -343,7 +343,7 @@ void addSoC(std::shared_ptr<PowerStats> p) {
}
void setEnergyMeter(std::shared_ptr<PowerStats> p) {
std::vector<const std::string> deviceNames { "s2mpg10-odpm", "s2mpg11-odpm" };
std::vector<std::string> deviceNames { "s2mpg10-odpm", "s2mpg11-odpm" };
p->setEnergyMeterDataProvider(std::make_unique<IioEnergyMeterDataProvider>(deviceNames, true));
}

View File

@@ -0,0 +1,9 @@
package {
default_applicable_licenses: ["Android-Apache-2.0"],
}
runtime_resource_overlay {
name: "TetheringOverlay",
sdk_version: "current",
product_specific: true
}

View File

@@ -0,0 +1,27 @@
<?xml version="1.0" encoding="utf-8"?>
<!-- Copyright (C) 2021 The Android Open Source Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<!-- Pixel specific tethering overlays -->
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
package="com.android.networkstack.tethering.overlay"
android:versionCode="1"
android:versionName="1.0">
<application android:hasCode="false" />
<overlay
android:targetPackage="com.android.networkstack.tethering"
android:targetName="TetheringConfig"
android:isStatic="true"
android:priority="0" />
</manifest>

View File

@@ -0,0 +1,46 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
/*
* Copyright (C) 2021 The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
-->
<resources>
<!-- List of regexpressions describing the interface (if any) that represent tetherable
USB interfaces. If the device doesn't want to support tethering over USB this should
be empty. An example would be "usb.*" -->
<string-array translatable="false" name="config_tether_usb_regexs">
<item>rndis\\d</item>
</string-array>
<!-- List of regexpressions describing the interface (if any) that represent tetherable
NCM interfaces. If the device doesn't want to support tethering over NCM this should
be empty. -->
<string-array translatable="false" name="config_tether_ncm_regexs">
<item>ncm\\d</item>
</string-array>
<!-- List of regexpressions describing the interface (if any) that represent tetherable
Wifi P2P interfaces. If the device doesn't want to support tethering over Wifi P2p this
should be empty. An example would be "p2p-p2p\\d-.*" -->
<string-array translatable="false" name="config_tether_wifi_p2p_regexs">
<item>p2p-p2p\\d-.*</item>
<item>p2p\\d</item>
<item>p2p-wlan\\d-.*</item>
</string-array>
<!-- Which USB function should be enabled when TETHERING_USB is requested. 0: RNDIS, 1: NCM.
-->
<integer translatable="false" name="config_tether_usb_functions">1</integer>
</resources>

View File

@@ -134,12 +134,6 @@
<!-- Indicate the driver doesn't support NL80211 Reg changed event -->
<bool translatable="false" name="config_wifiDriverSupportedNl80211RegChangedEvent">false</bool>
<!-- Indicate whether the verbose logging is always on -->
<!-- 0: verbose logging controlled by user
1: verbose logging on by default for userdebug
2: verbose logging on by default for all builds -->
<integer translatable="false" name="config_wifiVerboseLoggingAlwaysOnLevel">1</integer>
<!-- Enable aggregation of Wifi link layer radio stats from all radios -->
<bool translatable="false" name="config_wifiLinkLayerAllRadiosStatsAggregationEnabled">true</bool>
@@ -167,4 +161,12 @@
If equals to 0, it means there's no limit on the max number of channels to include per network.-->
<integer translatable="false" name="config_wifiInitialPartialScanMaxNewChannelsPerNetwork">3</integer>
<!-- Boolean indicating whether to disable firmware roaming when the device goes into idle mode.
true: firmware roaming will be disabled when the device goes into idle mode, and then
re-activated when the device exits idle mode.
false: firmware roaming will not be affected. -->
<bool translatable="false" name ="config_wifiDisableFirmwareRoamingInIdleMode">true</bool>
<!-- Boolean indicating whether to trigger bugreport for WiFi subsystem restart issue -->
<bool translatable="false" name ="config_wifi_subsystem_restart_bugreport_enabled">false</bool>
</resources>

1
sepolicy/.gitupstream Normal file
View File

@@ -0,0 +1 @@
https://android.googlesource.com/device/google/gs101-sepolicy

4
sepolicy/OWNERS Normal file
View File

@@ -0,0 +1,4 @@
include device/google/gs-common:/sepolicy/OWNERS
adamshih@google.com

View File

@@ -0,0 +1 @@
type tui_device, dev_type;

View File

@@ -0,0 +1,4 @@
/vendor/bin/securedpud\.slider u:object_r:securedpud_slider_exec:s0
/vendor/bin/hw/android\.hardware\.confirmationui-service\.trusty\.vendor u:object_r:hal_confirmationui_default_exec:s0
/dev/tui-driver u:object_r:tui_device:s0

View File

@@ -0,0 +1,13 @@
allow hal_confirmationui_default tee_device:chr_file rw_file_perms;
binder_call(hal_confirmationui_default, keystore)
vndbinder_use(hal_confirmationui_default)
binder_call(hal_confirmationui_default, citadeld)
allow hal_confirmationui_default citadeld_service:service_manager find;
allow hal_confirmationui_default input_device:chr_file rw_file_perms;
allow hal_confirmationui_default input_device:dir r_dir_perms;
allow hal_confirmationui_default dmabuf_system_heap_device:chr_file r_file_perms;
allow hal_confirmationui_default ion_device:chr_file r_file_perms;

View File

@@ -0,0 +1,11 @@
type securedpud_slider, domain;
type securedpud_slider_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(securedpud_slider)
wakelock_use(securedpud_slider)
allow securedpud_slider dmabuf_heap_device:chr_file r_file_perms;
allow securedpud_slider ion_device:chr_file r_file_perms;
allow securedpud_slider tee_device:chr_file rw_file_perms;
allow securedpud_slider tui_device:chr_file rw_file_perms;

View File

@@ -0,0 +1 @@
type persist_display_file, file_type, vendor_persist_type;

View File

@@ -0,0 +1 @@
/mnt/vendor/persist/display(/.*)? u:object_r:persist_display_file:s0

View File

@@ -0,0 +1,20 @@
genfscon sysfs /devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/backlight u:object_r:sysfs_leds:s0
genfscon sysfs /devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/panel_name u:object_r:sysfs_display:s0
genfscon sysfs /devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/serial_number u:object_r:sysfs_display:s0
genfscon sysfs /devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/refresh_rate u:object_r:sysfs_display:s0
genfscon sysfs /devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/power_state u:object_r:sysfs_display:s0
genfscon sysfs /firmware/devicetree/base/drmdsim@0x1C2C0000/panel@0/compatible u:object_r:sysfs_display:s0
genfscon sysfs /devices/platform/1c2d0000.drmdsim/1c2d0000.drmdsim.0/backlight u:object_r:sysfs_leds:s0
genfscon sysfs /devices/platform/1c2d0000.drmdsim/1c2d0000.drmdsim.0/panel_name u:object_r:sysfs_display:s0
genfscon sysfs /devices/platform/1c2d0000.drmdsim/1c2d0000.drmdsim.0/serial_number u:object_r:sysfs_display:s0
genfscon sysfs /devices/platform/1c2d0000.drmdsim/1c2d0000.drmdsim.0/refresh_rate u:object_r:sysfs_display:s0
genfscon sysfs /devices/platform/1c2d0000.drmdsim/1c2d0000.drmdsim.0/power_state u:object_r:sysfs_display:s0
genfscon sysfs /firmware/devicetree/base/drmdsim@0x1C2D0000/panel@0/compatible u:object_r:sysfs_display:s0
genfscon sysfs /module/drm/parameters/vblankoffdelay u:object_r:sysfs_display:s0
genfscon sysfs /devices/platform/1c300000.drmdecon/dqe0/atc u:object_r:sysfs_display:s0
genfscon sysfs /devices/platform/1c300000.drmdecon/early_wakeup u:object_r:sysfs_display:s0
genfscon sysfs /devices/platform/exynos-drm/tui_status u:object_r:sysfs_display:s0

View File

@@ -0,0 +1,46 @@
allow hal_graphics_composer_default video_device:chr_file rw_file_perms;
add_service(hal_graphics_composer_default, vendor_surfaceflinger_vndservice)
hal_client_domain(hal_graphics_composer_default, hal_graphics_allocator)
allow hal_graphics_composer_default self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
vndbinder_use(hal_graphics_composer_default)
userdebug_or_eng(`
allow hal_graphics_composer_default vendor_log_file:dir create_dir_perms;
# For HWC/libdisplaycolor to generate calibration file.
allow hal_graphics_composer_default persist_display_file:file create_file_perms;
allow hal_graphics_composer_default persist_display_file:dir rw_dir_perms;
')
# allow HWC/libdisplaycolor to read calibration data
allow hal_graphics_composer_default mnt_vendor_file:dir search;
allow hal_graphics_composer_default persist_file:dir search;
allow hal_graphics_composer_default persist_display_file:file r_file_perms;
allow hal_graphics_composer_default persist_display_file:dir search;
# allow HWC to r/w backlight
allow hal_graphics_composer_default sysfs_leds:dir r_dir_perms;
allow hal_graphics_composer_default sysfs_leds:file rw_file_perms;
# allow HWC to get vendor_persist_sys_default_prop
get_prop(hal_graphics_composer_default, vendor_persist_sys_default_prop)
# allow HWC to get/set vendor_display_prop
set_prop(hal_graphics_composer_default, vendor_display_prop)
# allow HWC to get device_config_surface_flinger_native_boot_prop for adpf flags
get_prop(hal_graphics_composer_default, device_config_surface_flinger_native_boot_prop)
# allow HWC to access vendor_displaycolor_service
add_service(hal_graphics_composer_default, vendor_displaycolor_service)
add_service(hal_graphics_composer_default, hal_pixel_display_service)
binder_use(hal_graphics_composer_default)
get_prop(hal_graphics_composer_default, boot_status_prop);
# allow HWC to access vendor log file
allow hal_graphics_composer_default vendor_log_file:file create_file_perms;
# allow HWC to output to dumpstate via pipe fd
allow hal_graphics_composer_default hal_dumpstate_default:fifo_file { append write };
allow hal_graphics_composer_default hal_dumpstate_default:fd use;

View File

@@ -0,0 +1,41 @@
# ConnectivityThermalPowerManager
BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/connectivity_thermal_power_manager
# twoshay
BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/input
# google_battery service
BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/googlebattery
# sepolicy that are shared among devices using whitechapel
BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs101/sepolicy/whitechapel/vendor/google
# unresolved SELinux error log with bug tracking
BOARD_SEPOLICY_DIRS += device/google/gs101/sepolicy/tracking_denials
PRODUCT_PRIVATE_SEPOLICY_DIRS += device/google/gs101/sepolicy/private
# Display
BOARD_SEPOLICY_DIRS += device/google/gs101/sepolicy/display/common
BOARD_SEPOLICY_DIRS += device/google/gs101/sepolicy/display/gs101
# system_ext
SYSTEM_EXT_PUBLIC_SEPOLICY_DIRS += device/google/gs101/sepolicy/system_ext/public
SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += device/google/gs101/sepolicy/system_ext/private
#
# Pixel-wide
#
# PowerStats HAL
BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/powerstats
# Public
PRODUCT_PUBLIC_SEPOLICY_DIRS += device/google/gs101/sepolicy/public
# pKVM
ifeq ($(TARGET_PKVM_ENABLED),true)
BOARD_SEPOLICY_DIRS += device/google/gs101/sepolicy/pkvm
endif
# Health HAL
BOARD_SEPOLICY_DIRS += device/google/gs101/sepolicy/health

View File

@@ -0,0 +1 @@
/vendor/bin/hw/android\.hardware\.health-service\.gs101 u:object_r:hal_health_default_exec:s0

View File

@@ -0,0 +1,29 @@
type dmd, domain;
type dmd_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(dmd)
# Grant to access serial device for external logging tool
allow dmd serial_device:chr_file rw_file_perms;
# Grant to access radio device
allow dmd radio_device:chr_file rw_file_perms;
# Grant to access slog dir/file
allow dmd vendor_slog_file:dir create_dir_perms;
allow dmd vendor_slog_file:file create_file_perms;
# Grant to access tcp socket
allow dmd node:tcp_socket node_bind;
allow dmd self:tcp_socket { create_socket_perms_no_ioctl listen accept bind };
# Grant to access log related properties
set_prop(dmd, vendor_diag_prop)
set_prop(dmd, vendor_slog_prop)
set_prop(dmd, vendor_modem_prop)
get_prop(dmd, vendor_persist_config_default_prop)
# Grant to access hwservice manager
get_prop(dmd, hwservicemanager_prop)
binder_call(dmd, hwservicemanager)

View File

@@ -0,0 +1 @@
type vendor_slog_file, file_type, data_file_type, mlstrustedobject;

View File

@@ -0,0 +1,2 @@
/data/vendor/slog(/.*)? u:object_r:vendor_slog_file:s0
/vendor/bin/dmd u:object_r:dmd_exec:s0

View File

@@ -0,0 +1,3 @@
vendor_internal_prop(vendor_diag_prop)
vendor_internal_prop(vendor_slog_prop)
vendor_internal_prop(vendor_modem_prop)

View File

@@ -0,0 +1,14 @@
# for dmd
persist.vendor.sys.dm. u:object_r:vendor_diag_prop:s0
persist.vendor.sys.diag. u:object_r:vendor_diag_prop:s0
vendor.sys.dmd. u:object_r:vendor_diag_prop:s0
vendor.sys.diag. u:object_r:vendor_diag_prop:s0
# for modem
persist.vendor.modem. u:object_r:vendor_modem_prop:s0
vendor.modem. u:object_r:vendor_modem_prop:s0
vendor.sys.modem. u:object_r:vendor_modem_prop:s0
ro.vendor.sys.modem. u:object_r:vendor_modem_prop:s0
vendor.sys.exynos.modempath u:object_r:vendor_modem_prop:s0
persist.vendor.sys.modem. u:object_r:vendor_modem_prop:s0

View File

@@ -0,0 +1 @@
/vendor/bin/vcd u:object_r:vcd_exec:s0

View File

@@ -0,0 +1,11 @@
type vcd, domain;
type vcd_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(vcd)
get_prop(vcd, vendor_rild_prop);
get_prop(vcd, vendor_persist_config_default_prop);
allow vcd serial_device:chr_file rw_file_perms;
allow vcd radio_device:chr_file rw_file_perms;
allow vcd self:tcp_socket { create_socket_perms_no_ioctl listen accept };
allow vcd node:tcp_socket node_bind;

View File

@@ -0,0 +1,5 @@
# Oriole only sepolicy
BOARD_SEPOLICY_DIRS += device/google/gs101/sepolicy/oriole
BOARD_VENDOR_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/vibrator/common
BOARD_VENDOR_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/vibrator/cs40l25

View File

@@ -0,0 +1,6 @@
# EuiccSupportPixel app
userdebug_or_eng(`
allow euiccpixel_app sysfs_touch:dir search;
')

View File

@@ -0,0 +1 @@
allow grilservice_app hal_bluetooth_coexistence_service:service_manager find;

View File

@@ -0,0 +1 @@
/vendor/bin/pkvm_enabler u:object_r:vendor_misc_writer_exec:s0

View File

@@ -0,0 +1,2 @@
# Allow pkvm_enabler to execute misc_writer.
allow vendor_misc_writer vendor_misc_writer_exec:file execute_no_trans;

View File

@@ -0,0 +1,3 @@
# b/177389198
dontaudit gmscore_app adbd_prop:file *;
dontaudit gmscore_app proc_vendor_sched:file write;

View File

@@ -0,0 +1,2 @@
# b/176868217
dontaudit hal_dumpstate adbd_prop:file *;

View File

@@ -0,0 +1,14 @@
# b/174961589
dontaudit incidentd adbd_config_prop:file open ;
dontaudit incidentd adbd_prop:file getattr ;
dontaudit incidentd adbd_prop:file open ;
dontaudit incidentd adbd_config_prop:file open ;
dontaudit incidentd adbd_config_prop:file getattr ;
dontaudit incidentd adbd_config_prop:file map ;
dontaudit incidentd adbd_prop:file open ;
dontaudit incidentd adbd_prop:file getattr ;
dontaudit incidentd adbd_prop:file map ;
dontaudit incidentd apexd_prop:file open ;
dontaudit incidentd adbd_config_prop:file getattr ;
dontaudit incidentd adbd_config_prop:file map ;
dontaudit incidentd adbd_prop:file map ;

View File

@@ -0,0 +1,7 @@
# b/177176997
dontaudit lpdumpd block_device:blk_file getattr ;
dontaudit lpdumpd block_device:blk_file getattr ;
dontaudit lpdumpd block_device:blk_file read ;
dontaudit lpdumpd block_device:blk_file getattr ;
dontaudit lpdumpd block_device:blk_file read ;
dontaudit lpdumpd block_device:blk_file read ;

View File

@@ -0,0 +1,3 @@
allow permissioncontroller_app proc_vendor_sched:dir r_dir_perms;
allow permissioncontroller_app proc_vendor_sched:file w_file_perms;

View File

@@ -0,0 +1,20 @@
# b/178433525
dontaudit priv_app adbd_prop:file { map };
dontaudit priv_app adbd_prop:file { getattr };
dontaudit priv_app adbd_prop:file { open };
dontaudit priv_app ab_update_gki_prop:file { map };
dontaudit priv_app ab_update_gki_prop:file { getattr };
dontaudit priv_app ab_update_gki_prop:file { open };
dontaudit priv_app aac_drc_prop:file { map };
dontaudit priv_app aac_drc_prop:file { getattr };
dontaudit priv_app aac_drc_prop:file { open };
dontaudit priv_app adbd_prop:file { map };
dontaudit priv_app aac_drc_prop:file { open };
dontaudit priv_app aac_drc_prop:file { getattr };
dontaudit priv_app aac_drc_prop:file { map };
dontaudit priv_app ab_update_gki_prop:file { open };
dontaudit priv_app ab_update_gki_prop:file { getattr };
dontaudit priv_app ab_update_gki_prop:file { map };
dontaudit priv_app adbd_prop:file { open };
dontaudit priv_app adbd_prop:file { getattr };
dontaudit priv_app proc_vendor_sched:file write;

View File

@@ -0,0 +1 @@
add_service(radio, uce_service)

View File

@@ -0,0 +1 @@
telephony.oem.oemrilhook u:object_r:radio_service:s0

View File

@@ -0,0 +1,2 @@
# b/177389321
dontaudit untrusted_app_25 adbd_prop:file *;

View File

@@ -0,0 +1,2 @@
# b/188114822
dontaudit wait_for_keymaster servicemanager:binder transfer;

View File

@@ -0,0 +1,5 @@
# Ravne only sepolicy
BOARD_SEPOLICY_DIRS += device/google/gs101/sepolicy/raven
BOARD_VENDOR_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/vibrator/common
BOARD_VENDOR_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/vibrator/cs40l25

View File

@@ -0,0 +1 @@
allow vendor_cccdktimesync_app hal_bluetooth_coexistence_service:service_manager find;

View File

@@ -0,0 +1,6 @@
# EuiccSupportPixel app
userdebug_or_eng(`
allow euiccpixel_app sysfs_touch:dir search;
')

Some files were not shown because too many files have changed in this diff Show More