2998 Commits
udc ... vic

Author SHA1 Message Date
4156521654 zuma: Initialize for Evolution X 10.x
Signed-off-by: AnierinB <anierin@evolution-x.org>
2025-05-12 03:51:46 +00:00
Bruno Martins
0761e205fc zuma: Migrate Lineage Health to soong_config_set
Change-Id: I2eff39e83b9673aa2989d05de65c646241ba61da
2025-05-06 09:54:34 +03:00
Oliver Scott
e260079088 Implement charge limit mode
Change-Id: I61d317756ae1b985a47c23c9611396428a39045b
2025-03-31 11:58:46 +00:00
Michael Bestas
8f531bba37 zuma: Include Pixel experiments
Change-Id: I6de3de0362d9b2b0e22666b7da0b3fc85c4b4fac
2025-03-09 12:21:42 +02:00
Michael Bestas
96ab4760bf Merge tag 'android-15.0.0_r20' into staging/lineage-22.2_merge-android-15.0.0_r20
Android 15.0.0 Release 20 (BP1A.250305.019)

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ8eo8AAKCRDorT+BmrEO
# eLroAJ94pkmmmE74kzjaEMl/1OJ/gyAKoACeMGsnkHJ+xV6knev75ebZMPJcJjY=
# =NHri
# -----END PGP SIGNATURE-----
# gpg: Signature made Wed Mar  5 03:29:20 2025 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [ultimate]

# By Nina Chen (10) and others
# Via Android Build Coastguard Worker (24) and others
* tag 'android-15.0.0_r20': (23 commits)
  Update SELinux error
  modem_svc: move shared_modem_platform related sepolicy to gs-common
  Allow tachyon service to make binder calls to GCA
  Update SELinux error
  Update SELinux error
  Update SELinux error
  Add udc sysfs to udc_sysfs fs context
  Revert "modem_svc: move shared_modem_platform related sepolicy t..."
  modem_svc: move shared_modem_platform related sepolicy to gs-common
  Update SELinux error
  Update SELinux error
  Update SELinux error
  Revert^3 "Add udc sysfs to udc_sysfs fs context"
  Revert "Update SELinux error"
  modem_svc: use shared_modem_platform to replace all modem_svc_sit
  Update SELinux error
  Update SELinux error
  Allow systemui_app to set 'debug.tracing.desktop_mode_visible_tasks' system property
  Remove duplicate service entries
  Update SELinux error
  ...

 Conflicts:
	sepolicy/zuma-sepolicy.mk

Change-Id: Ic1b521b7975aacbf44e5fe4246620f6f3e34f984
2025-03-09 11:04:28 +02:00
Michael Bestas
092c467795 Merge tag 'android-15.0.0_r20' into staging/lineage-22.2_merge-android-15.0.0_r20
Android 15.0.0 Release 20 (BP1A.250305.019)

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ8eo8AAKCRDorT+BmrEO
# eOC/AJ9s4rsd7FpAUpk4eS+rr5lZO5hc2wCghd5mHveRLTQibMeSOE3h/lksBoQ=
# =JOoB
# -----END PGP SIGNATURE-----
# gpg: Signature made Wed Mar  5 03:29:20 2025 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [ultimate]

# By Herbert Xue (3) and others
# Via Android Build Coastguard Worker (39) and others
* tag 'android-15.0.0_r20': (48 commits)
  16KB: zuma: Do not filter out goodix_brl_touch.ko for 16KB mode
  audio: fix headtracking permission for spatializer offload playback
  dump_power: add battery caretaker dump into bugreport
  [Pixel VPN] Apply reviewed default permissions
  modem_svc: use modem_svc_sit version sepolicy
  Add sched qos support
  update health HAL dependency
  Change TARGET_RECOVERY_UI_LIB to use fully qualified names in zuma
  Fix kasan logic
  Clean up unnecessary data_connection_5g_plus overlay
  16kb: zuma: Filter out unnecessary modules from 16k mode
  init: zuma: move sched rate limit to late init
  Change TARGET_RECOVERY_UI_LIB to use fully qualified names in zuma
  Add hardware/google/graphics/zuma/libhwc2.1 to PRODUCT_SOONG_NAMESPACES
  Allow metadata to be formatted as ext4
  Enable usb state update via udc sysfs
  Add soong config use_google_qns in zuma
  Set soong config variables for libExynosC2H263Dec and libExynosC2H263Enc
  Set soong config variable "board_use_dec_sw_csc" for libExynosVideoCodec
  dump_power: zuma: correct dump path
  ...

Change-Id: I180526527317e61996b32ddc334cf7c8bb32c36f
2025-03-09 11:03:46 +02:00
Android Build Coastguard Worker
3d8c05dc7e Merge cherrypicks of ['googleplex-android-review.googlesource.com/31218491'] into 25Q1-release.
Change-Id: I122db862d2b5f2a9f68974b18dc40babb6697840
2025-01-22 15:41:50 -08:00
Vilas Bhat
650bdd046c 16KB: zuma: Do not filter out goodix_brl_touch.ko for 16KB mode
Filtering out this module broke touchscreen functionality for Pixel 8
devices in 16 KB mode.

Bug: 388515914
Flag: EXEMPT bugfix
Test: Boot to 16KB mode using 16KB dev option and verify touchscreen
      functionality.
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:2b06657f62b42f81a914b59c331d017f919181fa)
Merged-In: I8ba72c8eabb5522873025cf9d80aa03a53fb8cfb
Change-Id: I8ba72c8eabb5522873025cf9d80aa03a53fb8cfb
2025-01-22 15:22:47 -08:00
Android Build Coastguard Worker
9b0364103a Merge cherrypicks of ['googleplex-android-review.googlesource.com/31237992'] into 25Q1-release.
Change-Id: I17e77492d59bcf704cff82fc7f476b61dccc52b5
2025-01-13 11:52:03 -08:00
Carter Hsu
0824da9d67 audio: fix headtracking permission for spatializer offload playback
Bug: 381405995
Test: manual

Flag: EXEMPT bugfix

Signed-off-by: Carter Hsu <carterhsu@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:26cc2347cd28ea8bf3527cfa30f86bd3b73b2805)
Merged-In: I08d52b7f4988e9cdeb38f1d0fbbbf1baa54268ed
Change-Id: I08d52b7f4988e9cdeb38f1d0fbbbf1baa54268ed
2025-01-13 11:43:31 -08:00
Android Build Coastguard Worker
14d45488d7 Merge cherrypicks of ['googleplex-android-review.googlesource.com/31032625'] into 25Q1-release.
Change-Id: Iba13b87e5e23552abaaecc952307cf657c3d8b03
2025-01-09 11:37:57 -08:00
Jack Wu
413efc2497 dump_power: add battery caretaker dump into bugreport
logging for AACR(+H), AAFV, AACT, AACC and AACP Version

Bug: 384737509
Test: adb bugreport
Flag: EXEMPT bugfix
Signed-off-by: Jack Wu <wjack@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:0c88c7620ae837df1078e29e48b467e7d1274072)
Merged-In: I9d36e6fcb25ee9f12b4fd2962207b1f4b592c2b3
Change-Id: I9d36e6fcb25ee9f12b4fd2962207b1f4b592c2b3
2025-01-09 11:35:27 -08:00
LuK1337
b95446a8d6 zuma: overlay: Provide tethering configuration
Matches PixelTetheringOverlay2021.

Change-Id: I90ef9cd9c89b1bfacf5680cb1e42bb61ad275393
2024-12-28 00:35:42 +02:00
Android Build Coastguard Worker
8f500f49e4 Merge cherrypicks of ['googleplex-android-review.googlesource.com/30744913'] into 25Q1-release.
Change-Id: Ifddaff1db2258b9777bbb78d6875b10e89c5ddfb
2024-12-20 14:12:59 -08:00
Daniel Lowe
a192558eb5 [Pixel VPN] Apply reviewed default permissions
Pregrantting below permissions:
READ_PHONE_STATE

Flag: EXEMPT add permission pregranted in b/337725984
Bug: 373686360
Test: presubmit, manual install on test device.
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:a0b5342effe86fdfa65d76a2881dd46da9f19e82)
Merged-In: If6c3dfb1a29451d7b11a3ff10ec18b4c412056ed
Change-Id: If6c3dfb1a29451d7b11a3ff10ec18b4c412056ed
2024-12-20 14:09:49 -08:00
Michael Bestas
d06bae7ee7 zuma: Update linker.config from AP4A.241205.013
These libraries are used in camera HAL APEX.

Change-Id: I40a7ff722ae55a4ca9fd77f97a2b5e73af1898e2
2024-12-11 04:15:24 +02:00
Michael Bestas
d97db5601b Merge tag 'android-15.0.0_r6' into staging/lineage-22.0_merge-android-15.0.0_r6
Android 15.0.0 Release 6 (AP4A.241205.013)

# -----BEGIN PGP SIGNATURE-----
#
# iFwEABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ1IssQAKCRDorT+BmrEO
# eMmQAJj8v6hZUtdtQwD+swBc8Ai58HICAJ9XVGRsPwZXj4SxZGaw88jxJvza7A==
# =Sdzw
# -----END PGP SIGNATURE-----
# gpg: Signature made Fri Dec  6 00:44:01 2024 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [marginal]
# gpg: initial-contribution@android.com: Verified 2483 signatures in the past
#      3 years.  Encrypted 4 messages in the past 2 years.
# gpg: WARNING: This key is not certified with sufficiently trusted signatures!
# gpg:          It is not certain that the signature belongs to the owner.
# Primary key fingerprint: 4340 D135 70EF 945E 8381  0964 E8AD 3F81 9AB1 0E78

# By Daniel Chapin (3) and others
# Via Android Build Coastguard Worker (30) and others
* tag 'android-15.0.0_r6': (32 commits)
  Make android.framework.stats-v2-ndk app reachable
  Update SELinux error
  Change vendor_fingerprint_prop to vendor_restricted_prop
  Update SELinux error
  storage: move storage related device type to common folder
  Update SELinux error
  Revert^2 "Add udc sysfs to udc_sysfs fs context"
  Label sysfs node power_mode as sysfs_display.
  Revert^2 "zuma: update modem_svc sepolicy for UMI"
  Revert "zuma: update modem_svc sepolicy for UMI"
  Update SELinux error
  zuma: update modem_svc sepolicy for UMI
  Revert "trusty: storageproxy: add fs_ready_rw property context"
  DisplayPort Stats: add sysfs access permission on Zuma devices
  Revert "trusty: storageproxy: add fs_ready_rw property context"
  Revert "trusty: storageproxy: add fs_ready_rw property context"
  Correct the path of tcpm-source-psy device
  add hal_graphics_composer to access thermal temperature
  Revert "Add udc sysfs to udc_sysfs fs context"
  Add udc sysfs to udc_sysfs fs context
  ...

Change-Id: I0f827d7ab63b0cea6e3dfd3c3d28b03f53673a1e
2024-12-11 03:49:13 +02:00
Michael Bestas
164cd2f026 Merge tag 'android-15.0.0_r6' into staging/lineage-22.0_merge-android-15.0.0_r6
Android 15.0.0 Release 6 (AP4A.241205.013)

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ1IssQAKCRDorT+BmrEO
# eGMPAJ0QCkI3LO8goenx8IVscY5slyvypwCfZPPsAYYuAObV7/M/d1gUi/BEM6k=
# =igbk
# -----END PGP SIGNATURE-----
# gpg: Signature made Fri Dec  6 00:44:01 2024 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [marginal]
# gpg: initial-contribution@android.com: Verified 2483 signatures in the past
#      3 years.  Encrypted 4 messages in the past 2 years.
# gpg: WARNING: This key is not certified with sufficiently trusted signatures!
# gpg:          It is not certain that the signature belongs to the owner.
# Primary key fingerprint: 4340 D135 70EF 945E 8381  0964 E8AD 3F81 9AB1 0E78

# By Herbert Xue (6) and others
# Via Android Build Coastguard Worker (48) and others
* tag 'android-15.0.0_r6': (72 commits)
  Set auto prefer idle task name
  Delete TARGET_CPU_VARIANT_RUNTIME.
  Add input event profile to mitigate input latency of input threads
  zuma: avoid vector<const T>
  16kb: Filter out zram.ko for dev options
  Support 16KB data reset
  Deprecate preloaded_nanoapps.json
  Revert "Disable incremental boot_otas"
  Add persist to CopyEfsTest
  Fix CopyEfsTest for symlinks
  Delete PRODUCT_FULL_TREBLE_OVERRIDE.
  Delete PRODUCT_FULL_TREBLE_OVERRIDE.
  Switch from the BFQ to the mq-deadline I/O scheduler
  extended_log: update directory permissions for zuma
  Revert "Add soong config use_google_qns in device/google/zuma/de..."
  Control the "init_dpm.sh" to be built in zuma devices
  Add soong config use_google_qns in device/google/zuma/device.mk
  Control GoogleDialer built from zuma/proprietary/GoogleDialer
  Restore preferred_idle_mask to the default setting
  audio: set util_clamp_min for s/w spatializer to avoid glitches
  ...

Change-Id: Ib335f5799d9c86adc8f9e9c9d1764814f00dc5ca
2024-12-11 03:48:59 +02:00
Android Build Coastguard Worker
d5c536a064 Snap for 12770256 from 2e5674bd21 to 25Q1-release
Change-Id: Ie91e6537c66b2d2445d88dccbd3320ed51be9acd
2024-12-10 00:33:40 +00:00
Android Build Coastguard Worker
bb3e2fd1c0 Snap for 12770256 from 0651bb2055 to 25Q1-release
Change-Id: Ic648c49f4bd9f2e3ad8ac8d52bb7ba5204c0871c
2024-12-10 00:33:39 +00:00
Eileen Lai
0651bb2055 Merge "modem_svc: use modem_svc_sit version sepolicy" into main 2024-12-09 15:09:37 +00:00
Eileen Lai
2e5674bd21 Merge "modem_svc: move shared_modem_platform related sepolicy to gs-common" into main 2024-12-09 15:09:36 +00:00
Nina Chen
b81b3428d8 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 383013471
Flag: EXEMPT sepolicy
Change-Id: Ia8c27c5031bb14d77f581b4569a8d39a5613244f
2024-12-09 03:32:09 +00:00
Eileen Lai
4b9ca7c0a7 modem_svc: move shared_modem_platform related sepolicy to gs-common
Bug: 372400955

Change-Id: I3570cf0e90ceebc1ac6d19850e53df6c721b0020
Flag: NONE local testing only
2024-12-08 04:44:23 +00:00
Android Build Coastguard Worker
e6c5403be7 Snap for 12765415 from 5cd7ab9f96 to 25Q1-release
Change-Id: I383a642376e3b00c863c418de1d82782d6e69ed1
2024-12-07 23:06:13 +00:00
Eileen Lai
b6c6a96ce1 modem_svc: use modem_svc_sit version sepolicy
For solving sepolicy conflicts for different AP version, modem_svc_sit will support devices from gs101 to zuma_pro.

Bug: 372400955

Change-Id: Icef24314461008651230779358b253429c277b76
Flag: NONE local testing only
2024-12-07 17:06:11 +00:00
Daniel Zheng
5cd7ab9f96 Merge "update health HAL dependency" into main 2024-12-07 06:50:56 +00:00
Android Build Coastguard Worker
0fe5296007 Snap for 12763142 from 6e4418cacd to 25Q1-release
Change-Id: I93f1a5648c7425eff3b6fdbd27401c9b49a9ec9a
2024-12-07 02:05:49 +00:00
Android Build Coastguard Worker
5a42a2dc11 Snap for 12763142 from f2f02c5df6 to 25Q1-release
Change-Id: Id2a60f78a1ed593cb6bdb09f6e97e0eafc4c077a
2024-12-07 02:05:48 +00:00
Dinesh Yadav
6e4418cacd Merge "Allow tachyon service to make binder calls to GCA" into main 2024-12-06 16:20:42 +00:00
Rick Yiu
f2f02c5df6 Merge "Add sched qos support" into main 2024-12-06 08:20:09 +00:00
Dinesh Yadav
1b7a5a0078 Allow tachyon service to make binder calls to GCA
This permission is needed for tachyon service to call callbacks.

AVC Error seen when tachyon tries accessing GCA:
12-02 11:40:03.212  6987  6987 W com.google.edge: type=1400 audit(0.0:17): avc:  denied  { call } for  scontext=u:r:edgetpu_tachyon_server:s0 tcontext=u:r:google_camera_app:s0:c145,c256,c512,c768 tclass=binder permissive=0
12-03 07:12:26.424  4166  4166 W com.google.edge: type=1400 audit(0.0:254): avc:  denied  { call } for  scontext=u:r:edgetpu_tachyon_server:s0 tcontext=u:r:debug_camera_app:s0:c67,c257,c512,c768 tclass=binder permissive=0

Bug: 381787911
Flag: EXEMPT updates device sepolicy only
Change-Id: I5544fbc11cea0d98dfdeffd9d2871fc037d87c61
2024-12-06 04:13:42 +00:00
Rick Yiu
9cc872da8f Add sched qos support
Add task profiles and set permissions.

Bug: 355612114
Flag: NONE init rc file does not support flag
Test: build pass
Change-Id: I4b285a95b5a9d3934a5b95ba57424a89a98f9b2a
2024-12-06 02:08:57 +00:00
Nelson Li
c9e16ea272 [automerger skipped] Change TARGET_RECOVERY_UI_LIB to use fully qualified names in zuma am: 2620d19ec0 am: c89be9a29c -s ours
am skip reason: Merged-In I2912cbc905ff0ee716c293021c29061e3b6d3dca with SHA-1 d1cf23e6f7 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3391984

Change-Id: I48b292a241f1ee1b8531850190b174f6b9b8dea5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-06 01:46:49 +00:00
Nelson Li
c89be9a29c Change TARGET_RECOVERY_UI_LIB to use fully qualified names in zuma am: 2620d19ec0
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3391984

Change-Id: Ibf09f5a3214be084579feed71414fff0e6fb0f5b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-06 01:35:49 +00:00
Android Build Coastguard Worker
d32502fc89 Snap for 12755599 from 9f0f02d33e to 25Q1-release
Change-Id: I2fc6c59f454635b424c71c7fcd38a237a8fe3e09
2024-12-06 00:04:25 +00:00
Android Build Coastguard Worker
32d4d59f81 Snap for 12755599 from 188ed581cd to 25Q1-release
Change-Id: I21321831564d66be4b3eeec2e38e8979770b8684
2024-12-06 00:04:24 +00:00
Daniel Zheng
f130ff4e49 update health HAL dependency
Bug: 381926253
Test: th
Change-Id: I1938e9f53a1ceec8f351cca10c97285a4b9588ed
2024-12-05 14:50:09 -08:00
Nina Chen
9f0f02d33e Update SELinux error
Remove b/376602341, b/314054292 and b/367943515 as they are closed

Flag: EXEMPT sepolicy
Test: SELinuxUncheckedDenialBootTest
Bug: 382362125
Change-Id: I7911102a96cdb602fecf8dae5f87c41448b7e6ba
2024-12-05 12:53:03 +08:00
Nelson Li
2620d19ec0 Change TARGET_RECOVERY_UI_LIB to use fully qualified names in zuma
Since the TARGET_RECOVERY_UI_LIB for each device is not exactly the
same, and most of the modules in it contain `soong_namespace{}` to
avoid conflicts between different devices, after converting
`librecovery_ui_ext` from Android.mk to Android.bp, it needs to be
changed to a `fully qualified name` in order to correctly use the
corresponding module.

Flag: EXEMPT refactor

Bug: 339143524
Test: m -j librecovery_ui_ext
Merged-In: I2912cbc905ff0ee716c293021c29061e3b6d3dca
Change-Id: I2912cbc905ff0ee716c293021c29061e3b6d3dca
2024-12-05 03:33:40 +00:00
Treehugger Robot
188ed581cd Merge "Change TARGET_RECOVERY_UI_LIB to use fully qualified names in zuma" into main 2024-12-05 02:39:17 +00:00
Android Build Coastguard Worker
421c286e6d Snap for 12748980 from 18df6c5e6f to 25Q1-release
Change-Id: I0c5f8708cf387f5df55d3e3b87a4d9e5a3207a1c
2024-12-05 00:04:48 +00:00
Android Build Coastguard Worker
2db10c5813 Snap for 12748980 from 443c13a172 to 25Q1-release
Change-Id: I2affef0445fc11e7f0f92dde7c3fd690a06bdb73
2024-12-05 00:04:47 +00:00
Juan Yescas
443c13a172 Merge "16kb: zuma: Filter out unnecessary modules from 16k mode" into main 2024-12-04 04:49:34 +00:00
Roy Luo
18df6c5e6f Merge "Add udc sysfs to udc_sysfs fs context" into main 2024-12-04 03:31:01 +00:00
Roy Luo
2a8046a033 Merge "Enable usb state update via udc sysfs" into main 2024-12-04 03:31:01 +00:00
Chaohui Wang
feb420904b Merge "Clean up unnecessary data_connection_5g_plus overlay" into main 2024-12-04 01:21:44 +00:00
Android Build Coastguard Worker
81fcc1c7ad Snap for 12742097 from 7fd5197191 to 25Q1-release
Change-Id: I665ee40d1612bb9f6d3cbe87272c7b615aa9ff13
2024-12-04 00:04:54 +00:00
Nick Kralevich
7463e548bf Fix kasan logic
The command line "kasan=off" should be unconditionally set when we're
compiling for a normal (non-_fullmte) build. The current logic
sets "kasan=off" for a normal ENG build only, which is insufficent.

Test: _fullmte userdebug/eng: "sanitizer-status mte" shows MTE enabled.
Test: _fullmte userdebug/eng: "kasan=off" IS NOT present in /proc/cmdline
Test: !_fullmte userdebug: "sanitizer-status mte" shows MTE disabled.
Test: !_fullmte eng: "sanitizer-status mte" shows MTE enabled
Test: !_fullmte userdebug/eng: "kasan=off" IS present in /proc/cmdline
Change-Id: Idd61747156daa135e919ce71fd63bfab1f4d9239
Bug: 381940217
Flag: EXEMPT bugfix
2024-12-03 10:33:59 -08:00
Xin Li
7fd5197191 [automerger skipped] Merge ab/AP4A.241205.013 into aosp-main-future am: e589918368 -s ours
am skip reason: Merged-In I38afa16f8f85e6aea31ddd5367c2e2d4a3249ced with SHA-1 a6c71987d5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/30626095

Change-Id: I49afe6d3367ef8da752021f4e6cf39a44d89de07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 18:22:10 +00:00
Chaohui Wang
e9866ccdbf Clean up unnecessary data_connection_5g_plus overlay
This string is not device specific, and already set at,
frameworks/base/packages/SettingsLib/res/values-mcc311-mnc480/strings.xml
frameworks/base/packages/SettingsLib/res/values-mcc310-mnc004/strings.xml

Bug: 377907543
Flag: EXEMPT clean up
Test: m
Change-Id: I3bd290c8839ac510a0b11c70a7aaa55d58591964
2024-12-03 17:30:34 +08:00
Juan Yescas
a8a6c8ff28 16kb: zuma: Filter out unnecessary modules from 16k mode
The 16k mode does not use these modules.

Bug: 378293897
Bug: 379704287 
Change-Id: I237fd9cf7ca2f7972fafa08a3df65c0472e1ef03
Test: Built husky-trunk_staging target and tested
      4kb and 16kb mode.
Flag: EXEMPT bugfix
2024-12-03 04:41:56 +00:00
Android Build Coastguard Worker
fd25d1d998 Snap for 12727401 from 9f5ced1134 to 25Q1-release
Change-Id: I3bd6f4de4603b7ed55cee5e4a3b8f28ccd97ee36
2024-11-29 00:04:30 +00:00
Android Build Coastguard Worker
842a7b6fa7 Snap for 12727401 from 4bc8926b8f to 25Q1-release
Change-Id: I9fceb835be450156a409cb6e4dd8a7ac3fc0201d
2024-11-29 00:04:29 +00:00
Nina Chen
9f5ced1134 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 381326735
Flag: EXEMPT sepolicy
Change-Id: I8381703d4a44d7bce9ead55437e269684f0d5530
2024-11-28 02:59:26 +00:00
Treehugger Robot
4bc8926b8f Merge "Add hardware/google/graphics/zuma/libhwc2.1 to PRODUCT_SOONG_NAMESPACES" into main 2024-11-28 02:07:55 +00:00
Android Build Coastguard Worker
4ca1a7e3b0 Snap for 12722466 from 730daed470 to 25Q1-release
Change-Id: I5f841272bad2593e9eb52b52eb0ab88b92243a8c
2024-11-28 00:04:29 +00:00
Xin Li
e589918368 Merge ab/AP4A.241205.013 into aosp-main-future
Bug: 370570306
Merged-In: I38afa16f8f85e6aea31ddd5367c2e2d4a3249ced
Change-Id: Ie5037f28c6b829fc7915f48fb9e787865a0e9a11
2024-11-27 12:53:10 -08:00
Jenhao Chen
730daed470 Merge "init: zuma: move sched rate limit to late init" into main 2024-11-27 14:58:17 +00:00
Will Song
ff7717d54c init: zuma: move sched rate limit to late init
Since pixel performance has a shared configuration,
we need to move override values into late init.

Bug: 381100494
Test: Boot
Flag: EXEMPT bug fix
Change-Id: I20d38e481d43d1068a6faebec298446929812ffb
2024-11-27 02:46:28 -08:00
Nelson Li
d1cf23e6f7 Change TARGET_RECOVERY_UI_LIB to use fully qualified names in zuma
Since the TARGET_RECOVERY_UI_LIB for each device is not exactly the
same, and most of the modules in it contain `soong_namespace{}` to
avoid conflicts between different devices, after converting
`librecovery_ui_ext` from Android.mk to Android.bp, it needs to be
changed to a `fully qualified name` in order to correctly use the
corresponding module.

Flag: EXEMPT refactor

Bug: 339143524
Test: m -j librecovery_ui_ext
Change-Id: I2912cbc905ff0ee716c293021c29061e3b6d3dca
2024-11-27 06:27:58 +00:00
Treehugger Robot
d2151ffde1 Merge "Add soong config use_google_qns in zuma" into main 2024-11-27 02:04:32 +00:00
Android Build Coastguard Worker
39d4ed3421 Snap for 12710726 from b7ab33d829 to 25Q1-release
Change-Id: I71ceaa3f9070a402255f21b27fe5e19fea5ddfa2
2024-11-26 02:04:43 +00:00
Android Build Coastguard Worker
d1c34a432e Snap for 12710726 from fbfb744edd to 25Q1-release
Change-Id: Ifc9281c9ca7b269b8f20bdb972c271f11a603ced
2024-11-26 02:04:42 +00:00
Kelvin Zhang
fbfb744edd Merge "Allow metadata to be formatted as ext4" into main 2024-11-25 18:39:33 +00:00
Nina Chen
b7ab33d829 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 380756119
Flag: EXEMPT NDK
Change-Id: I252d772efcdc0b27467c6de41c685fb903e5a62d
2024-11-25 02:49:21 +00:00
Bill Yang
1f92d2a96e Add hardware/google/graphics/zuma/libhwc2.1 to PRODUCT_SOONG_NAMESPACES
For zumapro it shares the same libacryl_plugins in zuma but for
libexynosdisplay it still has different version between zuma and
zumapro. In ag/30508311 it already split
hardware/google/graphics/zuma/libhwc2.1 to it's own soong_namespace
which need to add it to product config for zuma.

Bug: 357500180
Test: lunch aosp_husky-trunk_staging-userdebug; \
      m libexynosdisplay
Flag: EXEMPT refactor
Change-Id: I8adc95085067456aa2a29822e89f9777ece241f3
2024-11-23 23:52:52 +00:00
Kelvin Zhang
2908e979a6 Allow metadata to be formatted as ext4
This does not convert /metadata to ext4, the default is still f2fs.
EXT4 would only be used if we are on 16KB mode

Flag: EXEMPT bugfix
Bug: 379759696

Change-Id: I91c114f476b6894361523a5bc8b66930df9f49a5
2024-11-22 18:10:52 +00:00
Roy Luo
3c17e28269 Add udc sysfs to udc_sysfs fs context
Meeded for system server to monitor usb gadget state.
Grant hal_usb_impl read access as it's needed by UsbDataSessionMonitor.
Starting at board level api 202504 due to its dependency on aosp/3337514

10956 10956 W android.hardwar: type=1400 audit(0.0:327): avc:  denied  { read } for  name="state" dev="sysfs" ino=84394 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:sysfs_udc:s0 tclass=file permissive=0

Bug: 339241080
Test: tested on Shiba
Flag: android.hardware.usb.flags.enable_udc_sysfs_usb_state_update
Change-Id: Ied2d669df74a2f71771e672e27327b60e7687168
2024-11-22 02:07:21 +00:00
Android Build Coastguard Worker
03c1247ea8 Snap for 12695596 from fcfaec8bea to 25Q1-release
Change-Id: I11413d61abe9c82b42114b9bc526deb69da19641
2024-11-22 00:04:23 +00:00
Roy Luo
74ccf54701 Enable usb state update via udc sysfs
Bug: 339241080
Test: tested on Shiba
Flag: android.hardware.usb.flags.enable_udc_sysfs_usb_state_update
Change-Id: I1e741ab5e857dd706346967773eb0e17550eaaba
2024-11-21 22:37:56 +00:00
Liana Kazanova (xWF)
fcfaec8bea Merge "Revert "modem_svc: move shared_modem_platform related sepolicy t..."" into main 2024-11-21 20:16:06 +00:00
Liana Kazanova (xWF)
9880272db8 Revert "modem_svc: move shared_modem_platform related sepolicy t..."
Revert submission 30519089-move_modem_sepolicy

Reason for revert: DroidMonitor: Potential culprit for http://b/380274930 - verifying through ABTD before revert submission. This is part of the standard investigation process, and does not mean your CL will be reverted.

Reverted changes: /q/submissionid:30519089-move_modem_sepolicy

Change-Id: I7fc88068835f662d1f1827488089f5898e88ff9d
2024-11-21 17:54:05 +00:00
Eileen Lai
e1b7b090e5 Merge "modem_svc: move shared_modem_platform related sepolicy to gs-common" into main 2024-11-21 17:03:11 +00:00
Eileen Lai
41e0d7662d modem_svc: move shared_modem_platform related sepolicy to gs-common
Bug: 372400955


Flag: NONE local testing only
Change-Id: I5502d8aeae7ca11b301bb8183201cf8294c811f9
2024-11-21 08:25:08 +00:00
Android Build Coastguard Worker
91b28245cf Snap for 12680993 from 2047505a62 to 25Q1-release
Change-Id: Iec170f4ef556b2f935a0b226edbf1ac99dd1f202
2024-11-20 00:05:24 +00:00
kellyhung
43c6cf5ada Add soong config use_google_qns in zuma
Bug: 360757079
Test: Presubmits
Flag: EXEMPT bugfix
Change-Id: Ic3dcfbbeb62f5c152f0d43c9182e98a5b2bc74f0
2024-11-19 10:01:29 +00:00
Herbert Xue
d827c45f63 Set soong config variables for libExynosC2H263Dec and libExynosC2H263Enc
Flag: EXEMPT bugfix
Bug: 375111251
Test: m libExynosC2H263Dec libExynosC2H263Enc
Change-Id: I7926d494df871bda7e7572a4743b4b04343e8b7e
2024-11-19 15:14:46 +08:00
Android Build Coastguard Worker
df1a756db0 Snap for 12673321 from 80c32be9f1 to 25Q1-release
Change-Id: I02ef0cfa727287e2caa415a95a10a308199062dd
2024-11-19 00:08:25 +00:00
Android Build Coastguard Worker
bc9d87e623 Snap for 12664851 from 5515229d16 to 25Q1-release
Change-Id: Id14c9e91514ef3673d16c3cf130867c7c8f0c6b4
2024-11-16 02:05:07 +00:00
Nina Chen
80c32be9f1 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 379245855
Bug: 379246064
Bug: 379245771
Bug: 379245754
Change-Id: I2b8b5c74f406d59e5ac17280e365dd6733100719
2024-11-15 18:29:14 +08:00
Nina Chen
5515229d16 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 379207041
Bug: 379207101
Flag: EXEMPT NDK
Change-Id: Icf0da01e2bcf1f57d9048ac601a94d04db00e754
2024-11-15 06:54:19 +00:00
Android Build Coastguard Worker
e7ae95cc53 Snap for 12658558 from e547b08ebd to 25Q1-release
Change-Id: I57559c5e7d98810f06868b3e853c1027f8c1ba09
2024-11-15 00:04:35 +00:00
Android Build Coastguard Worker
b82beda257 Snap for 12658558 from 977c5514f0 to 25Q1-release
Change-Id: I6f71f9a16aa2d88e257c2bfa1152a4889c72b053
2024-11-15 00:04:34 +00:00
Herbert Xue
2047505a62 Set soong config variable "board_use_dec_sw_csc" for libExynosVideoCodec
Flag: EXEMPT bugfix
Bug: 375522783
Test: m libExynosVideoCodec
Change-Id: Ida44710eb53376d12f3e26b8bf55b26ade49cd07
2024-11-14 12:35:47 +08:00
Xin Li
977c5514f0 [automerger skipped] Merge 24Q4 (ab/12406339) into aosp-main-future am: d3c951fe56 -s ours
am skip reason: Merged-In I3977722564241817575d94b2d2023eac6939ce1c with SHA-1 f42925e978 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/30284975

Change-Id: Icd021cbd1b5384ff22e2913d053fb96006fbd4bb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-11-14 02:02:58 +00:00
Xin Li
e547b08ebd [automerger skipped] Merge 24Q4 (ab/12406339) into aosp-main-future am: cf6b23c473 -s ours
am skip reason: Merged-In I1c2fb12e09ffe8083d6b14b0ee5aa957e031ddf3 with SHA-1 f03cc7ce1c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/30283793

Change-Id: I064b667d35ba392523f55d4a00ef31ffa462cad9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-11-14 00:31:46 +00:00
Android Build Coastguard Worker
4d4742dff6 Snap for 12651823 from 1512f42354 to 25Q1-release
Change-Id: Ibcdcaf7066678037b94fa0fa705408a73f938079
2024-11-14 00:04:17 +00:00
Spade Lee
1512f42354 Merge "dump_power: zuma: correct dump path" into main 2024-11-13 17:00:10 +00:00
Spade Lee
bc4963632b dump_power: zuma: correct dump path
- add pca9468 logbuffer
- move fg registers dump from debugfs to sysfs
- remove dual fg path
- remove max77779fg path
- remove maxfg history path
- remove unused ln8411 path

Bug: 377895720
Flag: EXEMPT bugfix
Change-Id: I6aab8119e029ccc45f5da827a119249b07aed8dd
Signed-off-by: Spade Lee <spadelee@google.com>
2024-11-12 16:49:30 +00:00
Android Build Coastguard Worker
0e0c9211b5 Snap for 12630846 from 6f8fb2f094 to 25Q1-release
Change-Id: Ia4173091541b314367ca4c7a71b807ff552548da
2024-11-09 02:04:47 +00:00
Treehugger Robot
6f8fb2f094 Merge "Move video_codec soong config variables into board config" into main 2024-11-08 03:29:59 +00:00
Android Build Coastguard Worker
60daa343ba Snap for 12623742 from 1172ae7a1b to 25Q1-release
Change-Id: I9db1c1f4b22cb6ee1929133f7870c9feb2833799
2024-11-08 00:04:36 +00:00
Michael Bestas
6bfcb2c45c Merge tag 'android-15.0.0_r4' into staging/lineage-22.0_merge-android-15.0.0_r4
Android 15.0.0 release 4

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZyveQgAKCRDorT+BmrEO
# eJM2AJ9qMKzVt1NzhtprBRWqM3A11xgkyACfcOmtzhEb5maHBfy6HN4RrZV298A=
# =A3nx
# -----END PGP SIGNATURE-----
# gpg: Signature made Wed Nov  6 23:23:14 2024 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [marginal]
# gpg: initial-contribution@android.com: Verified 2340 signatures in the past
#      3 years.  Encrypted 4 messages in the past 2 years.
# gpg: WARNING: This key is not certified with sufficiently trusted signatures!
# gpg:          It is not certain that the signature belongs to the owner.
# Primary key fingerprint: 4340 D135 70EF 945E 8381  0964 E8AD 3F81 9AB1 0E78

# By gilliu
# Via Android Build Coastguard Worker
* tag 'android-15.0.0_r4':
  add hal_graphics_composer to access thermal temperature

Change-Id: I7d332857715494aa6a38a96ed26258d2853fb44a
2024-11-07 14:59:07 +02:00
Allen Jiang
1172ae7a1b Merge "bcl: fix ocp_gpu_lvl in init.zuma.rc" into main 2024-11-06 22:53:09 +00:00
Xin Li
cf6b23c473 Merge 24Q4 (ab/12406339) into aosp-main-future
Bug: 370570306
Merged-In: I1c2fb12e09ffe8083d6b14b0ee5aa957e031ddf3
Change-Id: Ic9f5cbcae1fdd40d57ca6d958adeb4b355339f68
2024-11-06 11:19:03 -08:00
Xin Li
d3c951fe56 Merge 24Q4 (ab/12406339) into aosp-main-future
Bug: 370570306
Merged-In: I3977722564241817575d94b2d2023eac6939ce1c
Change-Id: Ifdc2acba1138fd79b5f26ffc07e7024149440872
2024-11-06 11:05:05 -08:00
Herbert Xue
ca66ae1b2a Move video_codec soong config variables into board config
Flag: EXEMPT bugfix
Bug: 370663515
Test: m libExynosC2OSAL
Change-Id: I76847c362ab1b257b90c610c84b00221c2a4ce84
2024-11-06 11:10:40 +08:00
Allen Jiang
cc52939a8a bcl: fix ocp_gpu_lvl in init.zuma.rc
Bug: 377376692
Flag: EXEMPT bugfix
Test: Manually
Change-Id: I9fcf505572cced516628bdaf34bfde23fa950b8c
Signed-off-by: Allen Jiang <alljiang@google.com>
2024-11-05 00:15:16 +00:00
Android Build Coastguard Worker
103b384570 Snap for 12594757 from 6f1672a387 to 25Q1-release
Change-Id: I884052a347711cfdbdc3f2485bb249948fe7d3d4
2024-11-02 01:04:33 +00:00
Android Build Coastguard Worker
56d32791cd Snap for 12594757 from 8873769456 to 25Q1-release
Change-Id: Ie6b443fbddacdc5503422f740b54879ad2101777
2024-11-02 01:04:32 +00:00
Nina Chen
6f1672a387 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 376602341
Flag: EXEMPT NDK
Change-Id: I6b3a9d802022ace579de13dc03e1738ee31f7b6f
2024-11-01 08:13:03 +00:00
Android Build Coastguard Worker
02fa56dd31 Snap for 12587146 from 841ad6da33 to 25Q1-release
Change-Id: Ia46a9b350cec61dc1a2d3d2d5abbfb4680d9131a
2024-10-31 23:03:52 +00:00
Android Build Coastguard Worker
e3c848329d Snap for 12587146 from 820c3750ac to 25Q1-release
Change-Id: I924ffd579330cc7b179adb47415ad7389fefc048
2024-10-31 23:03:51 +00:00
Daniel Rosenberg
8873769456 Reland "Add detailed error log to efs test"
Corrected order of Assert Equals, and moved awk parsing into the
java code. executeShellV2Command does not handle single quoted awk
strings well.

Flag: TEST_ONLY
Bug: 376164007
Test: atest CopyEfsTest
Change-Id: Idea19467ec2f08b1365a2389a1dd3b1db8d429e4
2024-10-31 14:04:49 -07:00
Daniel Rosenberg
820c3750ac Merge "Revert "Add detailed error log to efs test"" into main 2024-10-31 01:40:53 +00:00
Android Build Coastguard Worker
a1d583d1b9 Snap for 12580585 from 0ca2ed53c5 to 25Q1-release
Change-Id: I45d916da1fa4ee048640f18c1867e3cda004c6f3
2024-10-30 23:04:34 +00:00
Daniel Rosenberg
42abd953a8 Revert "Add detailed error log to efs test"
This reverts commit b7cc955763.

Reason for revert: Breaks CopyEfsTest

Change-Id: I2522ceeda3f4e77c1102c50a6c0110aca814a4d8
Bug: 376164007
2024-10-30 22:01:11 +00:00
Roy Luo
841ad6da33 Merge "Revert^3 "Add udc sysfs to udc_sysfs fs context"" into main 2024-10-30 18:51:30 +00:00
Roy Luo
ad7fee2f13 Merge "Revert^3 "Enable usb state update via udc sysfs"" into main 2024-10-30 18:51:30 +00:00
Priyanka Advani (xWF)
0ca2ed53c5 Revert "Add IGoodixFingerprintDaemon aidl interface"
Revert submission 30066446-goodix-ext-service-aidl

Reason for revert: Droidmonitor created revert due to b/376465180. Will be verifying through ABTD before submission.

Reverted changes: /q/submissionid:30066446-goodix-ext-service-aidl

Change-Id: I25cf72f9acbfcce57182aeb8f95a5711af9899b4
2024-10-30 16:32:55 +00:00
chenkris
082fc23cbd Add IGoodixFingerprintDaemon aidl interface
Flag: EXEMPT NDK
Bug: 370671685
Test: authenticate fingerprint.
Change-Id: I3612ab313a2b9d330da3d39f09073f3ff9eebcd6
2024-10-30 02:52:05 +00:00
Android Build Coastguard Worker
5cfa68eb04 Snap for 12573674 from af7eb3fa7f to 25Q1-release
Change-Id: I6de666c807856dada7c075b3d250044c59817977
2024-10-29 23:05:10 +00:00
Bill Yang
38baf92a28 Set BOARD_LIBACRYL_G2D_HDR_PLUGIN for soong
Set the full module path of libacryl_hdr_plugin and the include dir for
lobacryl conversion to soong. It will take effect after aosp/3286932 and
aosp/3287183 merged.

Bug: 370414334
Test: lunch aosp_shiba-trunk_staging-userdebug ; m libacryl_hdr_plugin libacryl
Change-Id: I253ce1254450385e83ecaa75acbee5e70df3a930
2024-10-30 00:47:32 +02:00
Roy Luo
d0bdf1d61b Revert^3 "Enable usb state update via udc sysfs"
13756199db

Bug: 339241080
Change-Id: Id040eb4fd0ff7f70a9f7872f383fbc37fc0742ea
2024-10-29 21:36:21 +00:00
Roy Luo
139f5304a3 Revert^3 "Add udc sysfs to udc_sysfs fs context"
371f678632

Bug: 339241080
Change-Id: Ia1355fca00339bce7ba5554680b62509558c2b4f
2024-10-29 21:36:05 +00:00
Bill Yang
af7eb3fa7f Set BOARD_LIBACRYL_G2D_HDR_PLUGIN for soong am: 32b6825bf1 am: eb26e6bf3b
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3288011

Change-Id: Id1d4dfb8a5b28ce88a7f0c1b392b0c9356f11bc9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-10-29 03:12:00 +00:00
Bill Yang
eb26e6bf3b Set BOARD_LIBACRYL_G2D_HDR_PLUGIN for soong am: 32b6825bf1
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3288011

Change-Id: Idb52ede4f32cffeecd805f3c8690779e74bdf96c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-10-29 02:50:15 +00:00
Android Build Coastguard Worker
f489229784 Snap for 12565212 from 5d474b0c3d to 25Q1-release
Change-Id: Ia7ca24b9e739dbb08f9b4068425873de1a5ba994
2024-10-28 23:04:47 +00:00
Nick Kralevich
d37a6e5050 Merge "Enable MTE in -eng builds on zuma devices." into main 2024-10-28 17:52:11 +00:00
Jeff Chang
5d474b0c3d Merge "Update display dim configuration" into main 2024-10-28 15:45:09 +00:00
Nick Kralevich
2676f4bf00 Enable MTE in -eng builds on zuma devices.
MTE is a low overhead tool which enables detection of memory
safety bugs in interactive workloads. See
https://source.android.com/docs/security/test/memory-safety/arm-mte
for background and information.

This change enables MTE by default on -eng builds on zuma
builds.

Co-authored-by: Evgenii Stepanov <eugenis@google.com>
Test: Device boots and no MTE crashes
Test: sanitizer-status mte
Bug: 316398899
Change-Id: Iff5ab9d7031d8b97bf762d85f6760a092631e121
2024-10-25 15:45:21 -07:00
Bill Yang
32b6825bf1 Set BOARD_LIBACRYL_G2D_HDR_PLUGIN for soong
Set the full module path of libacryl_hdr_plugin and the include dir for
lobacryl conversion to soong. It will take effect after aosp/3286932 and
aosp/3287183 merged.

Bug: 370414334
Test: lunch aosp_shiba-trunk_staging-userdebug ; m libacryl_hdr_plugin libacryl
Change-Id: I253ce1254450385e83ecaa75acbee5e70df3a930
2024-10-25 03:37:18 +00:00
Android Build Coastguard Worker
46c283a53e Snap for 12551711 from bb0ccb1c08 to 25Q1-release
Change-Id: I8bc2bd21a78fcd95b656770eac4d75f45443ebeb
2024-10-24 23:04:29 +00:00
Richard Chang
bb0ccb1c08 Merge "zuma: MCP: Set the vendor customized max cached processes to 1024." into main 2024-10-24 00:50:20 +00:00
Kelvin Zhang
b7cc955763 Add detailed error log to efs test
Flag: TEST_ONLY
Bug: 374502267
Test: th
Change-Id: I15fea97417331b34a4e5ae9861d169b29ef932a9
2024-10-23 14:14:35 -07:00
Richard Chang
03b2a5a84f zuma: MCP: Set the vendor customized max cached processes to 1024.
Bug: 374891496
Change-Id: I00f8758197836dedc94755ce60e6f97b2de1190a
Test: adb shell dumpsys activity | grep CUR_MAX_CACHED_PROCESSES
Flag: EXEMPT config XML change
2024-10-23 04:11:20 +00:00
Android Build Coastguard Worker
cd39311d12 Snap for 12537680 from c730cbb2ba to 25Q1-release
Change-Id: I52d2e388b9b4a4a87f667d4928f6d932b63b2953
2024-10-22 23:04:53 +00:00
Jeff Chang
4170eb8b55 Update display dim configuration
Revert the configuration from I79939290b6a355cf for benchmark
regression.

Flag: EXEMPT bug fix
Bug: 357187828
Test: presubmit
Change-Id: I214689dd98248cbe460ea84ac8f5affde3b8ad20
2024-10-22 09:06:58 +00:00
Robin Peng
c730cbb2ba [automerger skipped] 16k: Ignore 16k kernel settings if 16kb folder doesn't exist am: 9e1bb10e89 am: edd87c421e -s ours
am skip reason: Merged-In I2f6c1f3365f624502366b883dbcd1066ed166cdb with SHA-1 8cd5a64cd7 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3313596

Change-Id: I1b21593ad06460ec23201fe6a8a782061649294c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-10-22 04:06:16 +00:00
Vilas Bhat
cf9990784c [automerger skipped] 16k: Move logic from device/google/shusky/BoardConfig-shusky-common.mk to zuma/BoardConfig-16k-common.mk am: fbedb6f26f am: 399ba7d977 -s ours
am skip reason: Merged-In Ibd060eae8f4e97ae8ff800f765e2310c984e5796 with SHA-1 354b984c0d is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3313595

Change-Id: Ic0b905682b77dbd0eafe3bb2d15b21e0e6a74752
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-10-22 04:06:13 +00:00
Juan Yescas
d90423cf24 [automerger skipped] 16kb: Use TARGET_BOOTS_16K to select the efs config files am: e192e6f56e am: bf8283c053 -s ours
am skip reason: Merged-In I1e0bea52de09fe3c9ee2f52b0803882456943833 with SHA-1 bf9f082f67 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3312654

Change-Id: I57cdaca2cfcf165bc19e4cca72b37567f6b63039
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-10-22 04:06:10 +00:00
Juan Yescas
520360dfe6 [automerger skipped] 16kb: Use PRODUCT_BOOTS_16K to select the proper rc file and fstab am: 0420e6dfff am: c03be2441d -s ours
am skip reason: Merged-In I4dba20518925a176f1e1e66596e2bb1e8ade7c26 with SHA-1 98f2222e27 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3312653

Change-Id: I3c24c5efd189d3b7b499719137e40fbfeaacf85b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-10-22 04:06:06 +00:00
Robin Peng
edd87c421e 16k: Ignore 16k kernel settings if 16kb folder doesn't exist am: 9e1bb10e89
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3313596

Change-Id: Ib075b276396597229c654a1c55bd5bcfa7d2d3d0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-10-22 03:44:29 +00:00
Vilas Bhat
399ba7d977 16k: Move logic from device/google/shusky/BoardConfig-shusky-common.mk to zuma/BoardConfig-16k-common.mk am: fbedb6f26f
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3313595

Change-Id: I9b1ea72ed2253ed68608e2a64b98a5705fd7df4c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-10-22 03:44:26 +00:00
Juan Yescas
bf8283c053 16kb: Use TARGET_BOOTS_16K to select the efs config files am: e192e6f56e
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3312654

Change-Id: I476a3217cc8f10d3786eb21fa45c3b3aa8dc80ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-10-22 03:44:23 +00:00
Juan Yescas
c03be2441d 16kb: Use PRODUCT_BOOTS_16K to select the proper rc file and fstab am: 0420e6dfff
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3312653

Change-Id: I9f5abbdd5f6432e0430d300fe120526e99b6200b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-10-22 03:44:15 +00:00
Ethan Chen
8699f5f0e3 Disable userdebug diagnostics
* We can't make use of most of the debug features on userdebug builds.

Change-Id: I31df2090b31243b742c4e82dc08cd8491dada54f
2024-10-20 06:12:21 +03:00
basamaryan
b7086dc544 zuma: Drop unnecessary BOARD_USERDATAIMAGE_FILE_SYSTEM_TYPE flag
Change-Id: Ibb96c529ac64239d7bb919e46f5a625a6deebf98
2024-10-20 06:12:21 +03:00
Michael Bestas
10b09f1a12 zuma: overlay: Enable battery cycle count
Change-Id: I92bc8363e1c9e2ad54c29a0a30dce992e25f697d
2024-10-20 06:12:21 +03:00
Scott Warner
f2e10b642f Add lineage.dependencies
Change-Id: I5337e8d48f3a468362c936de9a545ddec46446d0
2024-10-20 06:12:21 +03:00
Michael Bestas
a98ea968ac zuma: Inherit common partition reserved sizes
Change-Id: I444ce2fcd37cdfa58d83a7e872dc547fb05a2a89
2024-10-20 06:12:21 +03:00
Rashed Abdel-Tawab
3c3fbf4f00 zuma: Build a disabled vbmeta image
Co-authored-by: Nolen Johnson <johnsonnolen@gmail.com>
Change-Id: Ie8f1e0929b037b35b5e45c2e31be9253fa0bb097
2024-10-20 06:12:20 +03:00
Neel Chauhan
54afad7544 Revert "Enable compressed snapshots/VABc."
Virtual AB compression prevents GApps from being installed to
zuma devices.

This reverts commit 2bfa6d3ba01856d99c6ffdb64627c6e9391c4a41.

Change-Id: I119b8e042e4cdeec27a19ab5dd4f0666cc115ae1
2024-10-20 06:12:20 +03:00
Michael Bestas
09b49ecdcf zuma: sepolicy: Don't label SystemUI as systemui_app
While this might be useful on Pixel stock ROM, this serves no purpose
anywhere else. In fact, it makes it more fragile, as we'd need to track
platform SystemUI related SELinux changes ourselves.

Change-Id: I205df902649fd712a89f21f51099e088c5bdef2e
2024-10-20 06:12:20 +03:00
Michael Bestas
45c8c75d83 Label additional UWB service
Change-Id: Ia938529497a5b274354366e6d8c8579184be491c
2024-10-20 06:12:20 +03:00
Michael Bestas
e99ff8f6aa Label vendor.dolby.media.c2@1.0-service
Change-Id: I89fb4c149aed94cf2f7c3d34f7fde5877175b1e2
2024-10-20 06:12:20 +03:00
Michael Bestas
74fd7f5340 Include missing vendor sepolicy
Change-Id: Id35fb4b22e2ee8dfafdfb8ae601ab823435d2b94
2024-10-20 06:12:20 +03:00
Chirayu Desai
1813c18ef8 Allow radio access to IOemSlsiRadioExternal
Change-Id: Ib5d57b199b3e8288cd3de0c12898f0c1d679be4a
2024-10-20 06:12:20 +03:00
Danny Lin
2d094a50a4 Update seapp certificates to match stock presigned apps
Certificates extracted from stock vendor_mac_permissions.xml using
adevtool: https://github.com/kdrag0n/adevtool

Change-Id: Iaf59f1548905d16fe7ad231c039ba43941c15710
2024-10-20 06:12:20 +03:00
Michael Bestas
a45a739bba Unset PRODUCT_BROKEN_VERIFY_USES_LIBRARIES
Change-Id: I6f61d58e2dd419cb11f2aeb4f0faf54145c6a5ce
2024-10-20 06:12:20 +03:00
ReallySnow
7ff103b28c zuma: Add AiAi allowlist
* In Android 12, Android System Intelligence (com.google.android.as) uses
  some of the Private Compute Service (com.google.android.as.oss) services.
  The absence of these Allowlists will cause Android System Intelligence
  to fail to connect to the network and cause collapse.
* We don't need to extract google.xml to fix it, just extract the AiAi part

Change-Id: I446ae5d243cff134901094f82c90a0bbf3bb4381
2024-10-20 06:12:20 +03:00
Danny Lin
f16e622872 overlay: Import AiAi configs
Extracted from stock shiba AP3A.241005.015

Co-authored-by: Alessandro Astone <ales.astone@gmail.com>
Co-authored-by: Michael Bestas <mkbestas@lineageos.org>
Change-Id: I78bd7d04cbd0b35f6a8c01df3a8c1013d99bbf42
2024-10-20 06:12:04 +03:00
razorloves
a4ad3b854b overlay: Hide user facing crash dialog for EUICC app
The GoogleParts app disables the EUICC app when there's no GMS, but it
doesn't happen quick enough. The crash dialog pops up a few times right
after initial boot up. There's no need to alarm the user, so hide it.

Change-Id: Ia06b336b30a8886bae522c6e8a76a1ca15da5edd
2024-10-20 06:04:55 +03:00
Peter Cai
7339c72526 zuma: Disable Euicc when GMS and GSF are not installed
* This avoids EuiccGoogle / GoogleCarrierServices crashing, taking the
  whole telephony stack with them when no GMS or GSF is installed.
* Compared to change 274251, this approach is no-op when GAPPS add-on is
  flashed before the first boot, and thus should not cause issues with
  eSIM when GAPPS is flashed.
* With microG, this also works after installing the microG GMS & GSF
  packages and rebooting, although manual activation of the eSIM is
  needed via Settings - Network.
* The only downside is that users will still see one or two crashes
  during the first boot because our application only starts after the
  device is booted.

Change-Id: I4a11c93e855978abbf8d84fdbe4ffc8b2aedc27c
2024-10-20 06:04:55 +03:00
Michael Bestas
31ab22b7e6 Include missing ConnectivityThermalPowerManager sepolicy
Change-Id: I1e0f05159a6797251ed85360966aa45246005bbd
2024-10-20 06:04:55 +03:00
Danny Lin
e3999833b4 overlay: Allow ConnectivityThermalPowerManager to request thermal mitigation
ConnectivityThermalPowerManager mainly exists to manage thermal
mitigation.

Change-Id: I7d1ad7cb45a24697e444ac1f85ccfb507cb1ce49
2024-10-20 06:04:55 +03:00
Danny Lin
027e440e48 overlay: Configure ConnectivityThermalPowerManager
Extracted from stock shiba AP3A.241005.015

Change-Id: I71ad5adf9bf64bb1e30354446220d5769a9d44ca
2024-10-20 06:04:06 +03:00
Android Build Coastguard Worker
22f6d72875 Snap for 12517605 from d46376319b to 25Q1-release
Change-Id: Ic9ed9c907eab90b688f688545b0dfb3bf1750851
2024-10-18 01:04:13 +00:00
Robin Peng
9e1bb10e89 16k: Ignore 16k kernel settings if 16kb folder doesn't exist
to avoid build breakage with test kernel prebuilts (e.g. ag/28525733)
that doesn't have 16kb artifacts in it.

Bug: 370842132
Bug: 349877551
Flag: EXEMPT bugfix
Change-Id: I2f6c1f3365f624502366b883dbcd1066ed166cdb
Merged-In: I2f6c1f3365f624502366b883dbcd1066ed166cdb
2024-10-17 23:28:59 +00:00
Vilas Bhat
fbedb6f26f 16k: Move logic from device/google/shusky/BoardConfig-shusky-common.mk to zuma/BoardConfig-16k-common.mk
The makefile logic in device/google/shusky/BoardConfig-shusky-common.mk
is identical to the logic required for akita. Hence, this logic is
moved to device/google/zuma/BoardConfig-16k-common.mk to avoid
duplicating the file for akita.

Bug: 370842132
Bug: 349877551
Test: Built and booted up `aosp_shiba` and and `aosp_shiba-pgagnostic` targets
Flag: EXEMPT bugfix
Change-Id: Ibd060eae8f4e97ae8ff800f765e2310c984e5796
Merged-In: Ibd060eae8f4e97ae8ff800f765e2310c984e5796
2024-10-17 23:28:48 +00:00
Juan Yescas
e192e6f56e 16kb: Use TARGET_BOOTS_16K to select the efs config files
Test: Build and test pgagnostic targets
Bug: 370842132
Bug: 350529323
Bug: 346868433
Flag: EXEMPT bugfix
Change-Id: I1e0bea52de09fe3c9ee2f52b0803882456943833
Merged-In: I1e0bea52de09fe3c9ee2f52b0803882456943833
2024-10-17 23:28:34 +00:00
Juan Yescas
0420e6dfff 16kb: Use PRODUCT_BOOTS_16K to select the proper rc file and fstab
The build flag PRODUCT_BOOTS_16K will be used to select
the proper efs rc file and fstab:

- When PRODUCT_BOOTS_16K := true, 16k rc files and fstab will be used.
- When PRODUCT_BOOTS_16K := false, 4k rc files and fstab will be used.

Bug: 370842132
Bug: 346868433
Test: Built and booted up `aosp_shiba` and and `aosp_shiba-pgagnostic` targets
Flag: EXEMPT bugfix
Change-Id: I4dba20518925a176f1e1e66596e2bb1e8ade7c26
Merged-In: I4dba20518925a176f1e1e66596e2bb1e8ade7c26
2024-10-17 23:28:10 +00:00
Thiébaud Weksteen
d46376319b Merge "Remove duplicate service entries" into main 2024-10-17 02:59:51 +00:00
Android Build Coastguard Worker
35b61d361a Merge cherrypicks of ['googleplex-android-review.googlesource.com/29773030'] into 24Q4-release.
Change-Id: I9d54790eb1b73b75eed71eafc51831159fd03f8e
2024-10-17 00:33:05 +00:00
Rick Yiu
1a173d6997 Set auto prefer idle task name
Set InputDispatche and InputReader prefer idle explicitly, which is a
workaround and should be removed after they become ADPF.

Bug: 366146314
Flag: NONE init rc file change does not support flags
Test: tasks set as expected
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:a6c71987d597d0d575b62f6a65807c1bcd08ee87)
Merged-In: I38afa16f8f85e6aea31ddd5367c2e2d4a3249ced
Change-Id: I38afa16f8f85e6aea31ddd5367c2e2d4a3249ced
2024-10-17 00:28:18 +00:00
Android Build Coastguard Worker
a250d0f9a5 Snap for 12508860 from d3a5c9f8d8 to 25Q1-release
Change-Id: Ib658fab491af1e1271f56af69f767e098a8cd369
2024-10-16 23:04:11 +00:00
Android Build Coastguard Worker
1c9a25d61e Snap for 12508860 from 3b75642fc2 to 25Q1-release
Change-Id: Ib17470f4cf27acf6b3d156b0097de91f3d9ea641
2024-10-16 23:04:10 +00:00
Treehugger Robot
d3a5c9f8d8 Merge "Revert "Update SELinux error"" into main 2024-10-16 11:04:36 +00:00
Robert Luo
3b75642fc2 Merge "[Pixel RR] Apply reviewed default permissions" into main 2024-10-16 08:42:35 +00:00
Android Build Coastguard Worker
61ba0b3b8b Snap for 12502765 from 41b461c238 to 25Q1-release
Change-Id: Id42d9cb16a89253b6509d294180915b557be6ea2
2024-10-15 23:04:54 +00:00
Treehugger Robot
41b461c238 Merge "Fix LE Audio sysprops typos in makefiles" into main 2024-10-15 16:56:06 +00:00
Krzysztof Kosiński
bf1d975910 Revert "Update SELinux error"
This reverts commit a6eb3139fe.

Reason for revert: Caused by b/372273614, relevant CL was reverted

Fix: 372348756
Change-Id: I1ca54668c33b80d5139526f6ecf8dd65864787e4
2024-10-15 06:31:33 +00:00
Android Build Coastguard Worker
8ff6641fa6 Snap for 12496712 from bc3e73c6b5 to 25Q1-release
Change-Id: Ia76a0ab6a0ad815afaf6c388e7113bcc61a86845
2024-10-14 23:04:28 +00:00
Android Build Coastguard Worker
08999fde05 Snap for 12496712 from c07e594a12 to 25Q1-release
Change-Id: I111e4dbe933c1c7e2040ea11a0b45ea6ef2bb601
2024-10-14 23:04:27 +00:00
Eileen Lai
bc3e73c6b5 Merge "modem_svc: use shared_modem_platform to replace all modem_svc_sit" into main 2024-10-14 07:27:51 +00:00
Eileen Lai
c07e594a12 Merge "modem_svc: use shared_modem_platform to replace all modem_svc_sit" into main 2024-10-14 07:27:51 +00:00
Android Build Coastguard Worker
3166aff890 Snap for 12488717 from a6c71987d5 to 25Q1-release
Change-Id: Ifd29e724a8ddc6bae01b2aac8c5ef0baabb15aed
2024-10-12 01:04:50 +00:00
Robert Luo
d2b83392a7 [Pixel RR] Apply reviewed default permissions
Pregrantting below permission(s):
CALL_PHONE

Flag: EXEMPT add pregranted permission in b/371912006
Bug: 336203918
Test: presubmit
Change-Id: I96d2fd462172e2e176e5c8e0d4add7e98c36bb84
2024-10-11 17:59:59 +08:00
Andrew Cheng
9106927757 Fix LE Audio sysprops typos in makefiles
Makefile contain the following sysprops

bluetooth.profile.bap.unicast.server.enabled
bluetooth.profile.tbs.server.enabled
bluetooth.profile.vc.server.enabled

However, CS indicates the above sysprops aren't defined anywhere
nor read anywhere? Given how the following LE Audio sysprops are
missing from the makefile, and the similarities in naming, we
suspect there was a typo?

bluetooth.profile.bap.unicast.client.enabled
bluetooth.profile.ccp.server.enabled
bluetooth.profile.vcp.controller.enabled

Bug: 372711861
Test: builds
Flag: EXEMPT bugfix
Change-Id: I3b1be96531ffa6639647e0240dfc0f07ad1843a3
2024-10-10 14:11:43 -07:00
Rick Yiu
a6c71987d5 Set auto prefer idle task name
Set InputDispatche and InputReader prefer idle explicitly, which is a
workaround and should be removed after they become ADPF.

Bug: 366146314
Flag: NONE init rc file change does not support flags
Test: tasks set as expected
Change-Id: I38afa16f8f85e6aea31ddd5367c2e2d4a3249ced
2024-10-10 08:47:15 +00:00
Android Build Coastguard Worker
f7901c01ee Snap for 12477291 from a6eb3139fe to 25Q1-release
Change-Id: I11587a75d56d2f2895b401aea34897e2d05979bd
2024-10-09 21:04:00 +00:00
Android Build Coastguard Worker
c0410c3725 Snap for 12477291 from 23cee311f9 to 25Q1-release
Change-Id: I16202fbc4e8cfc1f4fd0f8c9e88facddb6f3aaf4
2024-10-09 21:03:59 +00:00
Eileen Lai
c2660d9ba4 modem_svc: use shared_modem_platform to replace all modem_svc_sit
Bug: 368257019

Flag: NONE local testing only
Change-Id: I9a9ff83d2bf3cf55b4c8806d808efde03ca2de70
2024-10-09 08:34:45 +00:00
Kuen-Han Tsai
23cee311f9 Usb: Add status check to prevent NPE
This patch prevents a Null Pointer Exception in
queryMoistureDetectionStatus() when getPortStatusHelper() fails to open
the /sys/class/typec file. The failure results in an empty
currentPortStatus vector, causing the NPE when accessing its first
element.

Bug: 361097811
Flag: EXEMPT bugfix
Test: NPE does not occur when getPortStatusHelper() fails
Change-Id: I2cbe70d3b00cb2cf8c28a28d91a18fbf7c326ea7
Signed-off-by: Kuen-Han Tsai <khtsai@google.com>
2024-10-09 15:59:20 +08:00
Nina Chen
a6eb3139fe Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 372348756
Bug: 372348383
Bug: 372348502
Flag: EXEMPT NDK
Change-Id: I126496a25529a73293430c9a1e7009e82b161331
2024-10-09 03:24:11 +00:00
Android Build Coastguard Worker
da93b469aa Snap for 12470893 from d898a7a787 to 25Q1-release
Change-Id: Ia444c06a47f8094f8f48f0aa1a090e400c5efba2
2024-10-08 23:04:37 +00:00
Android Build Coastguard Worker
09cdb30474 Snap for 12470893 from c730474f5e to 25Q1-release
Change-Id: I54abc3a5a52a6554012bcd6ab73852f084314484
2024-10-08 23:04:37 +00:00
Nina Chen
d898a7a787 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 372121912
Test: scanBugreport
Bug: 359428180
Test: scanAvcDeniedLogRightAfterReboot
Bug: 359428180
Flag: EXEMPT NDK
Change-Id: I88cf70ace59b6ca4cf66a4b0ffaf3bc8220f932b
2024-10-08 03:31:04 +00:00
Madhav Iyengar
c730474f5e Merge "[chre-hal-xport] Give permissions for new xport" into main 2024-10-07 21:45:41 +00:00
Madhav Iyengar
1df1b01bdd [chre-hal-xport] Give permissions for new xport
Bug: 369883034
Flag: android.chre.flags.refactor_hal_xport_agnostic
Change-Id: Ibea491792b6539820bc833f4662d84eb68e113ea
2024-10-07 21:45:14 +00:00
Danny Lin
8976e6eb3d overlay: Enable Adaptive Connectivity setting
This feature is provided by the ConnectivityThermalPowerManager app that
we extract as a proprietary blob, so we can expose it.

Change-Id: I407e9e2235531fbca0b2c0e48b68105b1e77ad1f
2024-10-07 14:35:47 +03:00
Michael Bestas
83fe2e51a6 overlay: Set default screen brightness
Extracted from stock.

Change-Id: I8a5e2c8717c145e66aaa0e926ceefc7e117b04c2
2024-10-07 14:35:06 +03:00
razorloves
170f4b4190 overlay: Set auto brightness mode on by default
* Stock sets this on by default, mirror that behavior.

Change-Id: I5cb8e3db27849ebd90459a6d70e053158c05bcc9
2024-10-07 14:34:59 +03:00
razorloves
04d1ac798d Set OPA property to enable google assistant
Change-Id: I741171219d64a28d56531f063f95f3f6f6cf81e6
2024-10-07 14:34:43 +03:00
razorloves
d157210edf overlay: Use CarrierSettings app instead of CarrierConfig
The CarrierSettings app enables/disables carrier apps based on sim
inserted, so use it instead of CarrierConfig.

Change-Id: I163dd615e9d8268c5f94a28ae234a30f74c7e83b
2024-10-07 14:34:19 +03:00
Michael Bestas
a4c909cf33 Build Lineage Health HAL
Change-Id: I70cc903a03ac9fa3303bb8fa039c9de4806449bf
2024-10-07 14:33:59 +03:00
Alessandro Astone
4af6dc5566 Build pixel touch HAL
Change-Id: I45cff81e1159613094440dd7b2b73b53519c9de6
2024-10-07 14:33:38 +03:00
Michael Bestas
8b5e3dbb57 Disable modem logging on userdebug builds
Change-Id: Ib8ebf5926ed0bcdcbb06d5b9de3a7e3409b5779c
2024-10-07 14:30:42 +03:00
Michael Bestas
ddf641562d Add lib_aion_buffer.so to vendor linker config
This lets com.google.pixel.camera.hal.apex access it.

Change-Id: Ic01ce043eeecbc3bcc71c04f49a7c348e2b10886
2024-10-07 14:30:31 +03:00
LuK1337
0c470b4e65 Add liboemcrypto.so to vendor linker config
This lets com.google.android.widevine.apex access it.

Change-Id: I4e9654fe6317b722f5fbf43b92abb367c18640ce
2024-10-07 14:30:27 +03:00
Nolen Johnson
303f5f65cb Set camera extension package to Google package
Change-Id: I519ebf8a1e2a9d06561471206c91c01b352ebd47
2024-10-07 14:29:56 +03:00
LuK1337
82aa2fe368 overlay: Add reboot to fastbootd
Change-Id: I733b4d29129f85b92222e292af46602310b9f29f
2024-10-07 14:29:21 +03:00
Jesse Chan
1f92ef3c24 overlay: Enable option for full screen aspect ratio
Change-Id: I2a1b2acc5ed97ccb6795dc371c2b3ac9cb4f9d03
2024-10-07 14:28:46 +03:00
Danny Baumann
e9ef933bb5 overlay: Enable call recording
Change-Id: I1b4478b330b13cf5d0fe1ed0d40f43e4b3825f33
2024-10-07 14:24:56 +03:00
Michael Bestas
ce1740ee88 overlay: Remove quick_qs_{offset,total}_height overlays
Commit 49895bb361e74ffe92a3c0b76f988c8e4697b5c1 in device/google/gs101
failed to remove these overlays. Since this tree was created from
device/google/gs101, this results in the following issue on pantah:
* Pull down status bar
* Try to adjust brightness, network settings open instead

This is caused by the 171px offset that causes the status bar
to overlap the brightness slider.

Test: Reliably adjust brightness, confirm with "Show layout bounds"
      from developer settings.
Change-Id: I1b97a28c257cb5b0faba830f29e9058d2dbe50fa
2024-10-07 14:24:32 +03:00
Michael Bestas
47a31a778d overlay: Set config_nightDisplayColorTemperatureCoefficients
Extracted from stock.

Change-Id: I5d69d01204b0dd86a7205eb3b16e02f97a7f3db2
2024-10-07 14:24:25 +03:00
Danny Lin
5177b92654 overlay: Enable USB and skin temperature warnings
Extracted from stock.

Change-Id: I951f60579a4b7fa2dcc270b5acd433ad1ecb083c
2024-10-07 14:24:03 +03:00
Dan Pasanen
e33a347e59 overlay: enable config_vibrateOnIconAnimation
* need those sexy vibes

Change-Id: If5671135879f6f4069d0ed881b41b0a243890349
2024-10-07 14:23:55 +03:00
Danny Lin
5d1e250c2d overlay: Settings: Enable multiple vibration strength levels
All production zuma devices have CS40L2x haptic driver ICs that support
multiple intensities, so expose the Off/Low/Medium/High vibration
strength options like stock.

Co-authored-by: Michael Bestas <mkbestas@gmail.com>
Change-Id: I72645b5bd5772e182592a630df86f9b6166b4923
2024-10-07 14:23:10 +03:00
Danny Lin
74584d51fa overlay: Don't pin camera app in memory
The default camera app can be *huge* in some cases, e.g. when the app in
question is Google Camera. The system will only pin up to the first 80
MiB of the APK file, as well as the first 80 MiB of its odex. There are
several problems with this:

  - We could easily end up with 160 MiB of camera app files pinned,
    which is a tall order with the 6 GiB of usable RAM that we have
  - The data that gets pinned may not even be the most critical data for
    launching the camera

Let's disable pinning of the camera app to save RAM.

Change-Id: I745e39b6ff212dfaf9213517d2a2be8ff7384e24
2024-10-07 14:22:52 +03:00
Bruno Martins
f5c7e6ba5c overlay: Pin standard SystemUI instead of Google's
Change-Id: If96bb13d6cc2c2156d8df111a1037247c96c6e0f
2024-10-07 14:22:44 +03:00
Chirayu Desai
2bab0af328 Build EuiccSupportPixelOverlay
Change-Id: I46db4122b89798457338f6751982865571529ba6
2024-10-07 14:22:34 +03:00
Chirayu Desai
93e2662428 Add device manifest for radio & keymint
Change-Id: Ib6c4b28d33fb64cb05c715d86a96a829a498beac
2024-10-07 14:16:23 +03:00
Chirayu Desai
03c1dac51c Build vbmeta_vendor
Change-Id: I74c028a2e5ade8830526e95f8ec90b1a1da35afb
2024-10-07 14:16:18 +03:00
Chirayu Desai
242d6f22ca Build vendor
Change-Id: I08dff42223ae54386a5ed050b51aa4a39e08bdb6
2024-10-07 14:16:14 +03:00
Chirayu Desai
99ecae283d Build vendor_dlkm
Change-Id: Ic2a0e4cdfdcc448a73bef41e0d2140e9d0aefcf0
2024-10-07 14:16:09 +03:00
mydongistiny
89d5d4172d Use Google's wifi_ext service
* Use vendor.google.wifi_ext@1.0-service
  that is in the vendor partition instead
  of the AOSP WiFi service.

Change-Id: Ia0fff6ffc532cc6b5e41f8ac242d00e64627cee8
2024-10-07 14:15:56 +03:00
Chirayu Desai
720d936cc6 Add initial Lineage common makefiles
Change-Id: I8136e9f0df40ca3bf96dbfd2453275481178cdaa
2024-10-07 14:14:59 +03:00
Herbert Xue
af939d7802 Remove unused device/google/zuma/Android.mk
There is no other Android.mk under subdirectory of device/google/zuma.

Bug: 347619275
Test: NA
Change-Id: I7a5e9afb1ccb75ed66e947a3fa1e0bda2c2223b6
2024-10-07 14:14:10 +03:00
Michael Bestas
62371207c2 zuma: Update sepolicy path
Change-Id: Ie2d420cd25e1a8b65977504ed987df57b525dc5f
2024-10-07 14:13:13 +03:00
Michael Bestas
90f03e1f0b Add .gitupstream
Change-Id: I79747ef989659c069386a6ed34a59bba2e8ea860
2024-10-07 14:10:48 +03:00
Michael Bestas
1f12b7b750 Add 'sepolicy/' from tag 'android-15.0.0_r1'
git-subtree-dir: sepolicy
git-subtree-mainline: 5ac4bfe691
git-subtree-split: 8c9dd0dbcd
Change-Id: If7ab7a231c42edd022de4786d0e0d92c6e77eef0
2024-10-07 14:08:35 +03:00
Eileen Lai
115208a81c modem_svc: use shared_modem_platform to replace all modem_svc_sit
Bug: 368257019

Flag: NONE local testing only
Change-Id: I3d4007714e48cdabe010b4d740fe472024966270
2024-10-07 08:28:30 +00:00
Android Build Coastguard Worker
2c92e6a760 Snap for 12458821 from ce7cdaa39f to 25Q1-release
Change-Id: I0903a95cb863a30c91f150d91f8cb45153802a27
2024-10-05 01:04:28 +00:00
Ben Murdoch
ce7cdaa39f Allow systemui_app to set 'debug.tracing.desktop_mode_visible_tasks' system property
See also: Iad8dc7a66765856ee7affb707f2dba6c1bbfbf49

Bug: 363893429
Flag: EXEMPT, SEPolicy
Test: Verified on device.
Change-Id: I4916370be55d4d5fd5c53ac5418b8a2bd99e9b37
2024-10-03 15:01:54 +00:00
Android Build Coastguard Worker
13dccaa7b5 Snap for 12445464 from 72b12b913c to 25Q1-release
Change-Id: I8806eb0b5615e10991b34a247aa2e58ae067f0e0
2024-10-02 23:04:43 +00:00
Jimmy Shiu
72b12b913c Merge "[task_profiles]Add MaxPerformance and PreferIdle to InputPolicy profile." into main 2024-10-02 03:13:56 +00:00
Jimmy Shiu
0911e1e72c [task_profiles]Add MaxPerformance and PreferIdle to InputPolicy profile.
Flag: com.android.input.flags.enable_input_policy_profile
Bug: 369574417
Change-Id: Iab14bf54c75911fcb48b316f66bc0293d5faf76c
2024-10-01 11:41:45 +00:00
Thiébaud Weksteen
f688a56d8e Remove duplicate service entries
These entries are defined in the platform policy.

Flag: EXEMPT bugfix
Bug: 367832910
Test: TH
Change-Id: I34e04111d74d0b7b4d9e3e4e359feb1b92b40593
2024-10-01 14:48:00 +10:00
Android Build Coastguard Worker
86d5bedb50 Snap for 12433810 from 42cb622a74 to 25Q1-release
Change-Id: Ib0f0f3a47c62bf34d3212068d89b8fad010d064e
2024-09-30 23:04:33 +00:00
Shikha Panwar
42cb622a74 Zuma: Enable Secretkeeper on aosp targets am: 72946bd429 am: bb3fb6aa85
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3287155

Change-Id: I81a6e406ccf40cf13b65d7c57b88c24fe2101a72
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-30 16:08:26 +00:00
Shikha Panwar
bb3fb6aa85 Zuma: Enable Secretkeeper on aosp targets am: 72946bd429
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3287155

Change-Id: I7e161f139f098fb1f2d15569eb93484139cd67a4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-30 15:42:59 +00:00
Shikha Panwar
72946bd429 Zuma: Enable Secretkeeper on aosp targets
These are used for testing, enable Secretkeeper on these devices.

Test: get_build_var SECRETKEEPER_ENABLED
Bug: 341708664
Change-Id: I0fd0e3d5a16cab352c79228e89f9d2fdd6f886b7
2024-09-30 12:13:56 +00:00
Android Build Coastguard Worker
74369d515c Snap for 12426030 from e9f1e61a35 to 25Q1-release
Change-Id: I2d91c55659e00cbc76d899dd561d31add3944174
2024-09-28 01:04:25 +00:00
Android Build Coastguard Worker
0cfafcb4ff Snap for 12420652 from bab0ee8b25 to 25Q1-release
Change-Id: Ia4caa9cea338dddaecbad6ecea1f021575b3708f
2024-09-26 23:03:43 +00:00
Android Build Coastguard Worker
d6e1445f90 Snap for 12420652 from ce26f3aab9 to 25Q1-release
Change-Id: I345d2baf27990039b8e97da0c8e22d34a001a222
2024-09-26 23:03:42 +00:00
Zhengyuan Cui
e9f1e61a35 Merge "Change any use case of folder name apis to tachyon_apis to avoid api review" into main 2024-09-26 21:00:59 +00:00
Baltazar Ortiz
8921faa915 Merge "dumpstate: Use generic dc_mains for all parallel chargers" into main 2024-09-26 20:14:40 +00:00
Treehugger Robot
bab0ee8b25 Merge "Fix error in systemui when toggling airplane mode" into main 2024-09-26 16:11:38 +00:00
Wesley Lee
ce26f3aab9 Merge "use 80x80 as the minimal resolution" into main 2024-09-26 01:40:26 +00:00
Baltazar Ortiz
7a32e9dcdd dumpstate: Use generic dc_mains for all parallel chargers
Bug: 360866957
Test: adb bugreport
Flag: EXEMPT bugfix
Change-Id: I00e7a60bfcefb6d68879d0a301cd126134e8b3a1
Signed-off-by: Baltazar Ortiz <baltazarortiz@google.com>
2024-09-25 23:24:12 +00:00
Android Build Coastguard Worker
d2c73ac75f Snap for 12415101 from c6822be533 to 25Q1-release
Change-Id: I7dfd7ced08ddf1610edfbb92617b7876d29ce76b
2024-09-25 23:04:19 +00:00
Yi Shiou (Les) Lee
22b71710a1 Merge "wifi: Upgrade vendor hal version" into main 2024-09-25 21:33:48 +00:00
Wilson Sung
c6822be533 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 369540836
Test: scanBugreport
Bug: 369540673
Bug: 359428180
Test: scanAvcDeniedLogRightAfterReboot
Bug: 359428180
Flag: EXEMPT NDK
Change-Id: I096e8d513a393d70fc70edf658dcdf7650072c9a
2024-09-25 12:46:23 +00:00
Wilson Sung
e40a281856 Fix error in systemui when toggling airplane mode
avc:  denied  { read } for  name="u:object_r:radio_cdma_ecm_prop:s0" dev="tmpfs" ino=321 scontext=u:r:systemui_app:s0:c3,c257,c512,c768 tcontext=u:object_r:radio_cdma_ecm_prop:s0 tclass=file

Bug: 197722115
Bug: 359381748
Test: make selinux_policy
Flag: EXEMPT bugfix
Change-Id: I96d17e562ac1cc0e0e0597ce332e94be95652026
2024-09-25 08:40:47 +00:00
Nina Chen
e6639e9e9f Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 369475700
Test: scanBugreport
Bug: 369475363
Bug: 359428180
Test: scanAvcDeniedLogRightAfterReboot
Bug: 369475225
Bug: 359428180
Flag: EXEMPT NDK
Change-Id: I154c0c347aa62a5eb262c2a8174ad3b3f2ba03aa
2024-09-25 06:30:51 +00:00
Android Build Coastguard Worker
2784c2ffed Snap for 12410317 from cd06811f33 to 25Q1-release
Change-Id: I67943033a77ec6c790dfc385563320d579ff5cfd
2024-09-24 23:03:51 +00:00
Zhengyuan Cui
a53df11883 Change any use case of folder name apis to tachyon_apis to avoid api review
Bug: 364390678

Change-Id: Icc42a31cf00f09e1c86f147376c276c9a657822f
Flag: EXEMPT refactor
2024-09-24 21:52:28 +00:00
Treehugger Robot
cd06811f33 Merge "Update sepolicy for nfc antenna selftest values" into main 2024-09-24 07:34:38 +00:00
Android Build Coastguard Worker
0a154fe6fa Snap for 12404440 from f03cc7ce1c to 24Q4-release
Change-Id: I93033348990a1497376704a3716c77a0fb97d418
2024-09-23 23:03:43 +00:00
Android Build Coastguard Worker
96bda820a1 Snap for 12399304 from 438d6d7c70 to 25Q1-release
Change-Id: Ibb9a72802d81097aca815c183bae390a18f27f0a
2024-09-21 23:03:00 +00:00
Android Build Coastguard Worker
df44ec5501 Snap for 12399304 from 57a8d79710 to 25Q1-release
Change-Id: Icd25356a916bbe6e45f652ff3a5e6622570b708e
2024-09-21 23:02:57 +00:00
Tej Singh
f03cc7ce1c Make android.framework.stats-v2-ndk app reachable
For libedgetpu

Test: TH
Bug: 354763040
Flag: EXEMPT bugfix
Change-Id: I1c2fb12e09ffe8083d6b14b0ee5aa957e031ddf3
2024-09-20 21:39:59 -07:00
Android Build Coastguard Worker
d991c351d8 Snap for 12397640 from 57a8d79710 to 24Q4-release
Change-Id: If5342a2d21e125e1093d48c2dc316b6d74847b43
2024-09-21 01:03:12 +00:00
Wesley Lee
5e2b322b5b use 80x80 as the minimal resolution
Bug: 367425615

Flag: EXEMPT bugfix

Change-Id: I19f87ebf6dae28369612e26db064bd2709f68094
Signed-off-by: Wesley Lee <szuweilee@google.com>
2024-09-20 16:32:53 -07:00
Krzysztof Kosiński
57a8d79710 Delete TARGET_CPU_VARIANT_RUNTIME. am: 48f1c2182c am: 7cd5c7d047
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3274367

Change-Id: I8c5b866a0114073ce6a4252cd265dce8f3b1cb82
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-20 20:48:38 +00:00
Krzysztof Kosiński
7cd5c7d047 Delete TARGET_CPU_VARIANT_RUNTIME. am: 48f1c2182c
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3274367

Change-Id: Ieb3853b09bfbc56d955a88fc4c78b3fb0ff5f3e4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-20 20:33:17 +00:00
Krzysztof Kosiński
48f1c2182c Delete TARGET_CPU_VARIANT_RUNTIME.
This variable only does something when it differs from
TARGET_CPU_VARIANT. Setting it to the same values doesn't do
anything.

Bug: 368635026
Test: presubmit
Change-Id: I1e16c5b9244eca4d69909bb1caefebfc17e54a70
2024-09-20 19:19:37 +00:00
Android Build Coastguard Worker
a114cdfa9a Merge cherrypicks of ['googleplex-android-review.googlesource.com/28544368'] into 24Q3-release.
Change-Id: Ibf362c531e5bd47f4be1f20efe74f414f72d60fc
2024-09-20 18:41:22 +00:00
gilliu
22c17673b0 add hal_graphics_composer to access thermal temperature
type=1400 audit(0.0:77): avc:  denied  { search } for  name="thermal"
dev="tmpfs" ino=1618 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:thermal_link_device:s0 tclass=dir permissive=0

type=1400 audit(0.0:74): avc:  denied  { search } for  name="thermal"
dev="sysfs" ino=21594 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:sysfs_thermal:s0 tclass=dir permissive=0

type=1400 audit(0.0:74): avc:  denied  { read } for  name="temp"
dev="sysfs" ino=73536 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=0

type=1400 audit(0.0:74): avc:  denied  { getattr } for
path="/sys/devices/virtual/thermal/thermal_zone12/temp" dev="sysfs"
ino=73537 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=0

Bug: 343141590
Test: check no avc pattern on logcat from test image
Flag: NONE add permission
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:1dde3ea2ff33bdf253fbbfb609ec21eaccffeaf4)
Cherry-pick temp_rr_regamma to 24Q3
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:c0fa5fcc6da5545982c8293c644aa1adccbc270f)
Merged-In: I87fce47644b07342d756e7594685eea0dded1926
Change-Id: I87fce47644b07342d756e7594685eea0dded1926
2024-09-20 18:35:27 +00:00
Android Build Coastguard Worker
fbcec90b66 Snap for 12391343 from f42925e978 to 24Q4-release
Change-Id: Ic28357cfffa3286f1c41a1c41bffbe998d8dd700
2024-09-19 23:03:07 +00:00
Android Build Coastguard Worker
9473391c4f Snap for 12385180 from 438d6d7c70 to 24Q4-release
Change-Id: If3e7295ccd6c8593e38a3b0752569cf1d6343dea
2024-09-18 23:03:15 +00:00
Jerry Chang
f42925e978 Add input event profile to mitigate input latency of input threads
Bug: 347122505
Test: check the priority and latency of input thread in Perffeto
Flag: NONE early device setting updates
Change-Id: I3977722564241817575d94b2d2023eac6939ce1c
2024-09-18 12:06:53 +00:00
Nina Chen
438d6d7c70 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 367943515
Test: scanBugreport
Bug: 359428180
Test: scanAvcDeniedLogRightAfterReboot
Bug: 359428180
Flag: EXEMPT NDK
Change-Id: I06481594dae66cb89f8b3ac8be6d254760771f61
2024-09-18 11:56:11 +00:00
Android Build Coastguard Worker
5f235a3cd4 Snap for 12373988 from 6afb3f9858 to 24Q4-release
Change-Id: Ie5996b138804ca32b105b38ac65c0b829b0a9fa2
2024-09-16 23:03:05 +00:00
Ryan Prichard
6afb3f9858 zuma: avoid vector<const T> am: 4ed3c2fb25 am: 6556da1b96
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3264354

Change-Id: Ia70eb3e1e0be69674ecf56f8f846570d3b65b5f4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-16 20:13:39 +00:00
Ryan Prichard
6556da1b96 zuma: avoid vector<const T> am: 4ed3c2fb25
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3264354

Change-Id: Ie2eba8ae7c5010573e70e780e1c957f046e7d6ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-16 19:53:10 +00:00
Prochin Wang
9ba73f1d79 Change vendor_fingerprint_prop to vendor_restricted_prop
This is to allow the fingerprint HAL to access the property.

Bug: 366105474
Flag: build.RELEASE_PIXEL_BOOST_DATALAYER_PSA_ENABLED
Test: mm
Change-Id: I021c004ca0153d2995fae6b3d6208d6cd6c799ef
2024-09-16 01:45:31 +00:00
Android Build Coastguard Worker
a3dbc662f0 Snap for 12370120 from 4bb5ee3796 to 25Q1-release
Change-Id: I88bba3f83d25d18ca8ae8872d80d6fc681b89821
2024-09-14 23:02:31 +00:00
Android Build Coastguard Worker
0b95feea38 Snap for 12370120 from c46756b74a to 25Q1-release
Change-Id: I0ec8941a0f91e75cfd4d64340eb9fe6aab7d01c3
2024-09-14 23:02:30 +00:00
Android Build Coastguard Worker
6b7f4d2b8e Snap for 12369952 from 4bb5ee3796 to 24Q4-release
Change-Id: I8977183ce148e33e23f96e2bcde3c899a998a296
2024-09-14 22:37:51 +00:00
Android Build Coastguard Worker
7db473226c Snap for 12368321 from c46756b74a to 24Q4-release
Change-Id: I9178d97eb1d5011f76a12170a02fb0a040edbb7e
2024-09-14 01:03:13 +00:00
Ryan Prichard
4ed3c2fb25 zuma: avoid vector<const T>
std::vector<const T> uses std::allocator<const T>, which is an
undocumented libc++ extension to the C++ standard library. The extension
was removed in llvm.org/PR96319. Use an ordinary non-const T instead.

Bug: http://b/349681543
Test: m android.hardware.power.stats-impl.zuma
Flag: EXEMPT, refactor to fix build failure
Change-Id: I47d0b3a441ab4ec8dd2ad8e794ae84f184d0d40f
2024-09-13 09:25:49 -07:00
Nina Chen
4bb5ee3796 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 366116488
Test: scanBugreport
Bug: 359428180
Bug: 364446415
Test: scanAvcDeniedLogRightAfterReboot
Bug: 359428180
Flag: EXEMPT NDK
Change-Id: I0c808f3c6aa441c0bfad23e0d8d2f0b987d09ed7
2024-09-13 06:45:09 +00:00
Android Build Coastguard Worker
a256642e8c Snap for 12361654 from 7b5da7c4d5 to 24Q4-release
Change-Id: If037a0c12c150e370a9575be4c7e6564a7636fad
2024-09-12 23:02:53 +00:00
Pawan Wagh
c46756b74a 16kb: Filter out zram.ko for dev options
Test: atest Enable16KbTest
Flag: EXEMPT bugfix
Bug: 363412208
Change-Id: Ib1e135889186eeccb21448e16660701967c92c5c
2024-09-12 20:23:14 +00:00
Nattharat Jariyanuntanaet
1492b4913a Update sepolicy for nfc antenna selftest values
Allow persist.vendor.nfc.antenna. to be vendor public values for NFC
companion app to access from userdebug or eng builds

avc:  denied  { read } for  name="u:object_r:vendor_nfc_antenna_prop:s0" dev="tmpfs" ino=414 scontext=u:r:untrusted_app:s0:c79,c257,c512,c768 tcontext=u:object_r:vendor_nfc_antenna_prop:s0 tclass=file permissive=0 app=com.google.android.apps.internal.nfcassistancetool

Bug: 361050657
Test: m selinux_policy
Flag: NONE add permission
Change-Id: I47c54642dbc801dfcaee8330e75a29d11030337c
2024-09-12 20:17:39 +00:00
Android Build Coastguard Worker
d8426dbe90 Snap for 12354992 from f18a5cb789 to 24Q4-release
Change-Id: I70d3fe05a103c443d82ce4ccc6ab7c14fc5ae8c4
2024-09-11 23:02:54 +00:00
Kelvin Zhang
7b5da7c4d5 Merge "Support 16KB data reset" into main 2024-09-11 22:31:02 +00:00
Chia-Chi Teng
f18a5cb789 Merge "Deprecate preloaded_nanoapps.json" into main 2024-09-11 18:41:22 +00:00
Android Build Coastguard Worker
d7fbb34f66 Snap for 12348750 from 54f83f2d07 to 24Q4-release
Change-Id: I798f4a0fd86b38da7ae433f968f157931ec13cf9
2024-09-10 23:03:50 +00:00
Kelvin Zhang
2dbe6e6fd2 Support 16KB data reset
We didn't add the formattable flag to ext4 fstab entry because init
only uses the first entry for re-formatting, but now init can choose
the right fs type base on page size, we can add the formattable flag.
Now data resets in 16KB mode would go back to ext4.

Test: th
Bug: 356202847
Change-Id: Ieb01c2592b3bb8e3342b2b6178ee73c0fb8a4288
2024-09-10 21:01:30 +00:00
David Li
54f83f2d07 Merge "audio: set util_clamp_min for s/w spatializer to avoid glitches" into main 2024-09-10 07:14:08 +00:00
Chia-Chi Teng
f52ee80ff6 Deprecate preloaded_nanoapps.json
Flag: EXEMPT resource only update
Bug: 350102369
Test: on device and presubmit
Change-Id: I5b5c3fe3a37199f3a55cb6e0e31f0ce141bc0dda
2024-09-10 01:56:29 +00:00
Android Build Coastguard Worker
5e300be87f Snap for 12342105 from e32a7f759b to 24Q4-release
Change-Id: I9665ed25d464aaf90f0e137618c3a2aaef5cbef7
2024-09-09 23:03:34 +00:00
Pawan Wagh
847ea2b1b0 Merge "Revert "Disable incremental boot_otas"" into main 2024-09-09 22:47:41 +00:00
Pawan Wagh
dd3eec8677 Revert "Disable incremental boot_otas"
This reverts commit 8bb0da99a9.

Reason for revert: Incremental ota support is now available: b/339658378
Fixes disk size regression issue now that OTA signing issues are resolved.

Change-Id: Id897a60473e6ea99522d9ab372511e7c2ebdd757
2024-09-09 21:37:42 +00:00
Steven Moreland
175979b0ca Add persist to CopyEfsTest
Change-Id: I8e12b0ac5e529e15697f35b88ac8b43c798fedd1
Test: atest CopyEfsTest
Flag: TEST_ONLY
Bug: 352567354
2024-09-09 20:50:56 +00:00
Daniel Rosenberg
069a8098b3 Fix CopyEfsTest for symlinks
Use the -L flag to preserve symlinks.
Fixed various flags to ensure we handle symlinks right,
and adjusted the awk string to handle difference in how dates are
represented.

Test: atest CopyEfsTest
Flag: TEST_ONLY
Bug: 352567354
Change-Id: I686c16fc1d771bf00bdc7465beb29a91eaef9e46
2024-09-09 20:50:40 +00:00
Treehugger Robot
e32a7f759b [automerger skipped] Merge "Delete PRODUCT_FULL_TREBLE_OVERRIDE." into main am: 8c1ec1b9e0 am: 3e64c07a4b -s ours
am skip reason: Merged-In I181937f9e49d4b9e1088fc92df7681d1a39e3d26 with SHA-1 c8436d8183 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3254799

Change-Id: I90a90a60fa55277d8b8f5061f33e8cbc7d015d4a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-09 19:09:43 +00:00
Treehugger Robot
3e64c07a4b Merge "Delete PRODUCT_FULL_TREBLE_OVERRIDE." into main am: 8c1ec1b9e0
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3254799

Change-Id: If245fe61ad9ab7012b25681d1d37fc6cbb4219f5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-09 19:01:27 +00:00
Treehugger Robot
8c1ec1b9e0 Merge "Delete PRODUCT_FULL_TREBLE_OVERRIDE." into main 2024-09-09 18:55:05 +00:00
Treehugger Robot
ffa9cd13fe Merge "Delete PRODUCT_FULL_TREBLE_OVERRIDE." into main 2024-09-09 17:51:17 +00:00
Krzysztof Kosiński
54ceb87f8e Delete PRODUCT_FULL_TREBLE_OVERRIDE.
This variable doesn't do anything for devices launching with
API level 26 or later, and the initial zuma devices (Pixel 8)
launched with API level 34.

Bug: 307369186
Test: presubmit
Flag: EXEMPT trivial build cleanup
Change-Id: I181937f9e49d4b9e1088fc92df7681d1a39e3d26
Merged-In: I181937f9e49d4b9e1088fc92df7681d1a39e3d26
2024-09-09 17:05:00 +00:00
Krzysztof Kosiński
c8436d8183 Delete PRODUCT_FULL_TREBLE_OVERRIDE.
This variable doesn't do anything for devices launching with
API level 26 or later, and the initial zuma devices (Pixel 8)
launched with API level 34.

Bug: 307369186
Test: presubmit
Flag: EXEMPT trivial build cleanup
Change-Id: I181937f9e49d4b9e1088fc92df7681d1a39e3d26
2024-09-09 17:03:22 +00:00
Android Build Coastguard Worker
9dcf5a3ddc Snap for 12337407 from 5b80168d54 to 25Q1-release
Change-Id: I0882cc8a938df7083460477fae953baf09a5d1b5
2024-09-07 23:05:45 +00:00
Android Build Coastguard Worker
557b92116e Snap for 12337407 from 8fd1accc1e to 25Q1-release
Change-Id: Ic83802ce28d627d3b1e43f5a7be97d7896c850be
2024-09-07 23:05:42 +00:00
Android Build Coastguard Worker
2e706c20d9 Snap for 12337246 from 5b80168d54 to 24Q4-release
Change-Id: Id8be2e2151e5c3fc73709fa92bfb198599c1758b
2024-09-07 21:03:03 +00:00
Android Build Coastguard Worker
eb71245c16 Snap for 12337246 from 8fd1accc1e to 24Q4-release
Change-Id: I419ba6690d110cbf3c1112c80c2b8607fbad645b
2024-09-07 21:03:01 +00:00
Xin Li
8fd1accc1e [automerger skipped] Merge 24Q3 to AOSP main am: 7e18ab81e1 -s ours am: d8ea5d3412 -s ours
am skip reason: Merged-In I4b2a0a61ebaff5d85a4daac445d81ae3d21aa9c3 with SHA-1 2d0a254101 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3258122

Change-Id: I8bf59b12c6f440cb32f7df35d151ef2eb77155ea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-07 03:49:31 +00:00
Xin Li
5b80168d54 [automerger skipped] Merge 24Q3 to AOSP main am: 39d96988e3 -s ours am: d1f03df8fc -s ours
am skip reason: Merged-In I9181b2344f2448b9debe1522528545ce90de8768 with SHA-1 fb98394c54 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3258561

Change-Id: I411d96644364dcb9efdea5c1fe708b9651f8c12d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-07 03:29:31 +00:00
Xin Li
d8ea5d3412 [automerger skipped] Merge 24Q3 to AOSP main am: 7e18ab81e1 -s ours
am skip reason: Merged-In I4b2a0a61ebaff5d85a4daac445d81ae3d21aa9c3 with SHA-1 2d0a254101 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3258122

Change-Id: I22de6d889530896c87c8be5e914e80acb5223765
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-07 02:53:34 +00:00
Xin Li
d1f03df8fc [automerger skipped] Merge 24Q3 to AOSP main am: 39d96988e3 -s ours
am skip reason: Merged-In I9181b2344f2448b9debe1522528545ce90de8768 with SHA-1 fb98394c54 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3258561

Change-Id: Iedc2cb039f534e4d1e7b873bec0f4f4d41fb4ab6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-09-07 02:51:35 +00:00
Xin Li
7e18ab81e1 Merge 24Q3 to AOSP main
Bug: 357762254
Merged-In: I4b2a0a61ebaff5d85a4daac445d81ae3d21aa9c3
Change-Id: I56e1840b7862737c84f36c73296253726437d1ca
2024-09-05 17:02:39 -07:00
Xin Li
39d96988e3 Merge 24Q3 to AOSP main
Bug: 357762254
Merged-In: I9181b2344f2448b9debe1522528545ce90de8768
Change-Id: Ic5351ce6b46a46820c6d73d4f924c6b92d30b06d
2024-09-05 17:02:39 -07:00
Android Build Coastguard Worker
10ea56e689 Snap for 12327203 from cb4745e9e8 to 24Q4-release
Change-Id: I9a584af2644302c8555704aa8326187f7c2445b9
2024-09-05 23:02:54 +00:00
Ocean Chen
cb4745e9e8 Merge "Switch from the BFQ to the mq-deadline I/O scheduler" into main 2024-09-05 06:37:40 +00:00
Ocean Chen
87bf601c9c Switch from the BFQ to the mq-deadline I/O scheduler
The mq-deadline I/O scheduler is more stable than BFQ. Additionally, the
boot time is shorter with the mq-deadline I/O scheduler. It only changes the scheduler on new kernel.

Bug: 186902601
Test: forrest build

Change-Id: I51605b32afb4340d416fe4923570bb3f4af24ab8
Signed-off-by: Ocean Chen <oceanchen@google.com>
2024-09-05 12:39:25 +08:00
Carmen Yip
9079afec14 Merge "extended_log: update directory permissions for zuma" into main 2024-09-05 04:02:12 +00:00
Les Lee
7512629d19 wifi: Upgrade vendor hal version
Bug: 362355566
Flag: EXEMPT HAL interface change
Test: Build
Change-Id: Idfc752d4f8186b710d6ae33ed29daf22157601cc
2024-09-05 03:48:47 +00:00
carmenyip
5c93636708 extended_log: update directory permissions for zuma
Bug: 336638376

Test: $ cd data/vendor/radio
$ ls -la
Flag: NONE changing directory permissions only

Change-Id: I89d003f286868fa2a593aa627e8d89a721395d79
2024-09-05 02:59:13 +00:00
Android Build Coastguard Worker
d7f913bfc7 Snap for 12319997 from a73414799e to 24Q4-release
Change-Id: I07172b9ae176c7f16f32ac78bfd87d63f44cbeda
2024-09-04 23:03:30 +00:00
Android Build Coastguard Worker
e1cb0e023e Snap for 12319997 from 9e6992ba0b to 24Q4-release
Change-Id: I16a2849157a9beb82ae19f95aaf8c31078dfa9f0
2024-09-04 23:03:29 +00:00
Charlie Yang
9e6992ba0b Merge "Revert "Add soong config use_google_qns in device/google/zuma/de..."" into main 2024-09-04 13:05:41 +00:00
Charlie Yang
20b924373f Revert "Add soong config use_google_qns in device/google/zuma/de..."
Revert submission 28947244-grilservice

Reason for revert: b/363911795

Reverted changes: /q/submissionid:28947244-grilservice

Change-Id: Iec8b16c4322a6e1a245c4bca22802ab29fe042a5
2024-09-04 11:02:53 +00:00
Treehugger Robot
d2e551958d Merge "Control the "init_dpm.sh" to be built in zuma devices" into main 2024-09-04 06:54:42 +00:00
Randall Huang
a73414799e storage: move storage related device type to common folder
Bug: 364225000
Test: forrest build
Change-Id: I60597a3ad6f674b93267f41b3a27fdee6e923e59
Signed-off-by: Randall Huang <huangrandall@google.com>
2024-09-04 10:44:21 +08:00
Herbert Xue
6aabc9bd28 Control the "init_dpm.sh" to be built in zuma devices
Flag: EXEMPT bugfix
Bug: 360757643
Test: lunch husky-trunk_staging-eng && m init_dpm.sh
Change-Id: Ie9822ca65d875c120bc38707aee54353aac5a8b5
2024-09-03 10:25:54 +08:00
Android Build Coastguard Worker
4f396416ed Snap for 12309590 from 8297fee02b to 24Q4-release
Change-Id: If58ee653816b60f1378c48e32c8a959c0a2b6e9d
2024-09-02 23:02:52 +00:00
Android Build Coastguard Worker
01eb70db58 Snap for 12309590 from 094d5d6d51 to 24Q4-release
Change-Id: Ibba56eb0df906ad10da59ebf0c730b3492bfe5f4
2024-09-02 23:02:51 +00:00
Attis Chen
8297fee02b Merge "Label sysfs node power_mode as sysfs_display." into main 2024-09-02 04:54:18 +00:00
Treehugger Robot
094d5d6d51 Merge "Control GoogleDialer built from zuma/proprietary/GoogleDialer" into main 2024-09-02 03:12:37 +00:00
Android Build Coastguard Worker
4b93cb5c4b Snap for 12304452 from e9d6cf25c8 to 24Q4-release
Change-Id: I413b4bb70b0bf4336f5f2779c20e0dbdb5c7816f
2024-08-31 01:03:04 +00:00
Treehugger Robot
e9d6cf25c8 Merge "Add soong config use_google_qns in device/google/zuma/device.mk" into main 2024-08-30 07:22:56 +00:00
kellyhung
75edad5f45 Add soong config use_google_qns in device/google/zuma/device.mk
Bug: 360757079
Test: lunch r11-trunk_staging-userdebug; m grilservice
Flag: EXEMPT bugfix
Change-Id: Id783f65e12bc93d7db308d15b8440e6ea5007906
2024-08-30 06:39:05 +00:00
Herbert Xue
7d3cb7808c Control GoogleDialer built from zuma/proprietary/GoogleDialer
For PDK build, the "vendor/unbundled_google" path doesn't exist.
"GoogleDialer" will be built from vendor/google_devices/zuma/proprietary/GoogleDialer.

Flag: EXEMPT bugfix
Bug: 358012156
Test: export USES_GOOGLE_DIALER_CARRIER_SETTINGS=true; m GoogleDialer
Change-Id: If2aab058f23cebc5a25862c69deda508f5f9c37e
2024-08-30 10:11:17 +08:00
Treehugger Robot
26ed4214b8 Merge "Delete mapper4 manifest" into main 2024-08-30 01:30:01 +00:00
Rick Yiu
e739e3b254 Restore preferred_idle_mask to the default setting
The preferred_idle_mask is changed during boot time, but it does not
restore to the default setitng as in powerhint, so some node may keep
the wrong value when framework restarts.

Bug: 248621289
Test: build pass
Flag: NONE init rc file change does not support flags
Change-Id: I892b99b79ff2dd9c02cc874026b43b06bded6f59
2024-08-30 00:07:18 +00:00
David Li
fd92ecb65c audio: set util_clamp_min for s/w spatializer to avoid glitches
- power measurement result is on b/262803152#comment5

Bug: 355912013
Test: spatial audio
Flag: EXEMPT bugfix
Change-Id: I324288f219b2fecbc0ae4f3ce3c11ea6e93f4b2e
2024-08-29 11:06:25 +00:00
Ankit Goyal
507675bc2c Delete mapper4 manifest
Bug: 362183626
Flag: EXEMPT manifest update
Test: Boot to home on shiba
Change-Id: Ibb66f97523545a2228c443aa8a08d1d853ed0ccd
2024-08-28 22:56:25 -07:00
Android Build Coastguard Worker
5d7b560e4d Snap for 12283639 from 879130bc35 to 24Q4-release
Change-Id: Icb860dac2402bab9fe8cade6c576ca1b3d6c827b
2024-08-27 23:03:28 +00:00
Android Build Coastguard Worker
2639243982 Snap for 12278291 from 432980a323 to 24Q4-release
Change-Id: Ie0a73e274c9e2ac52e19bdacf3cc79a056a6e298
2024-08-26 23:02:51 +00:00
Elliott Hughes
879130bc35 The "messaging" package is being removed. am: bc6bb134b9 am: d19b0c3942
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3241223

Change-Id: Id831f9ba819b6478b2b9f02e36a15a2f7165207d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-08-26 21:13:01 +00:00
Elliott Hughes
d19b0c3942 The "messaging" package is being removed. am: bc6bb134b9
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3241223

Change-Id: I28aaa9dcc65b92db914834d4f2d835d420c7533a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-08-26 20:48:25 +00:00
Elliott Hughes
bc6bb134b9 The "messaging" package is being removed.
Change-Id: Ib952aa3798af0cd39f745991064433700b178e14
2024-08-26 16:06:18 +00:00
Android Build Coastguard Worker
a9dcebffaf Snap for 12272146 from 5ba25e00d7 to 24Q4-release
Change-Id: Ib04552bca1c01de0206687672d7a62eb406e779b
2024-08-24 01:02:49 +00:00
Sam Ou
5ba25e00d7 Merge changes from topic "kernel5_revision" into main
* changes:
  bcl: correct ocp threshold
  bcl: support thismeal binary
2024-08-23 10:58:35 +00:00
Wilson Sung
432980a323 Update SELinux error
Test: scanBugreport
Bug: 361725982
Bug: 359428180
Test: scanAvcDeniedLogRightAfterReboot
Bug: 359428180
Flag: EXEMPT bugFix
Change-Id: I7e3ce34fdc02932250bcbd71e0a8864cfffaadff
2024-08-23 09:46:52 +00:00
Android Build Coastguard Worker
75b9e64c7b Snap for 12265118 from 371f678632 to 24Q4-release
Change-Id: I9331891359938c3c6658e63cdb7af82363acf750
2024-08-22 23:03:25 +00:00
Android Build Coastguard Worker
886c31bc0f Snap for 12265118 from 5b1ae0048d to 24Q4-release
Change-Id: I6fd6868ef993205d05ef908188cc824042c26715
2024-08-22 23:03:24 +00:00
Roy Luo
5b1ae0048d Merge "Revert^2 "Enable usb state update via udc sysfs"" into main 2024-08-21 22:19:16 +00:00
Roy Luo
371f678632 Revert^2 "Add udc sysfs to udc_sysfs fs context"
This reverts commit 66ba3214b8.

Reason for revert: fix breakage in next build with build-time flag in
selinux policy.

Fixed the following audit logs:
[  285.983545] type=1400 audit(1724270284.724:31): avc:  denied  { read } for  comm="android.hardwar" name="state" dev="sysfs" ino=85740 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:sysfs_udc:s0 tclass=file permissive=0

Bug: 339241080
Test: tested on Shiba trunk_staging and next builds
Flag: build.RELEASE_USB_UDC_SYSFS_SELINUX_POLICY_ENABLED
Change-Id: Ie4979f408a5bca0bb9b9762048ab716ddeeb4d2f
2024-08-21 22:15:22 +00:00
attis
5bf0b2bd07 Label sysfs node power_mode as sysfs_display.
Label power_mode to sysfs_panel to let it be allowed in dumpstate.

avc log:
08-20 20:24:11.292  9339  9339 W dump_display: type=1400 audit(0.0:2372): avc:  denied  { read } for  name="power_mode" dev="sysfs" ino=85501 scontext=u:r:dump_display:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Test: ls -Z, adb bugreport.
Flag: EXEMPT bugfix
Bug: 358505990
Change-Id: I7b6051de3e8f1b2813c681a176266fe3c7518991
Signed-off-by: attis <attis@google.com>
2024-08-21 17:08:49 +08:00
Android Build Coastguard Worker
3bec1a8590 Snap for 12253386 from a9271c85ed to 24Q4-release
Change-Id: I76765c8619adcf0b6fb2a910543cbe949eb54aec
2024-08-20 23:03:01 +00:00
Android Build Coastguard Worker
56bc4aeee0 Snap for 12247339 from 22ca32df91 to 24Q4-release
Change-Id: I1f8758463034bd05d8359495823f9ef558e02c57
2024-08-19 23:03:16 +00:00
Daniel Rosenberg
a9271c85ed Add -L to copy_efs_files_to_data.sh
This flag preserves symlinks on the copied images.
With support for this flag, we no longer need to fix up symlinks after
the fact.

Bug: 352567354
Test: atest EfsCopyEfsTest
Flag: EXEMPT bug fix
Change-Id: If26e38856672f6a4b6c55b7921b3aa6268ca9964
2024-08-19 14:38:37 -07:00
Wilson Sung
22ca32df91 Merge "Update SELinux error" into main 2024-08-19 06:14:28 +00:00
Android Build Coastguard Worker
f98c602ae0 Snap for 12241618 from 390674b749 to 24Q4-release
Change-Id: I25ea415a6f1de8f83f614521b15bee7aaa4c06e5
2024-08-17 01:03:09 +00:00
Android Build Coastguard Worker
10f34ede56 Snap for 12241618 from afb0dfa68a to 24Q4-release
Change-Id: I3eb1761dd0db77754ce5102a532c27329373ee03
2024-08-17 01:03:08 +00:00
Treehugger Robot
afb0dfa68a Merge "persist.sys.hdcp_checking: make default drm-only" into main 2024-08-16 15:39:06 +00:00
Ji Soo Shin
8995732118 persist.sys.hdcp_checking: make default drm-only
In case of always, we always enable hdcp regardless of drm status.

Bug: 359951297
Flag: EXEMPT bugfix
Change-Id: I04b5174be296d93a9f898929706785d50116d7a7
Signed-off-by: Ji Soo Shin <jisshin@google.com>
2024-08-16 11:17:46 +00:00
Android Build Coastguard Worker
7640337af6 Snap for 12235414 from dac2c5438b to 24Q4-release
Change-Id: I9c7699f942226e7a46b1e81c52a7a34c340b49f5
2024-08-15 23:03:03 +00:00
Xiaofan Jiang
390674b749 Merge "Revert^2 "zuma: update modem_svc sepolicy for UMI"" into main 2024-08-15 20:44:27 +00:00
Xiaofan Jiang
515a102ac8 Revert^2 "zuma: update modem_svc sepolicy for UMI"
c653101290

Change-Id: Ib1d18e33b87f03ee52bcbdff129c6d56b8a63a61
2024-08-15 19:25:35 +00:00
Priyanka Advani (xWF)
61ddb69d2c Merge "Revert "zuma: update modem_svc sepolicy for UMI"" into main 2024-08-15 18:30:35 +00:00
Priyanka Advani (xWF)
c653101290 Revert "zuma: update modem_svc sepolicy for UMI"
Revert submission 28762313

Reason for revert: Droidmonitor created revert due to b/360059249.

Reverted changes: /q/submissionid:28762313

Change-Id: I88cd8603351f5c5e1a546872f4f3aa1cae75dcd5
2024-08-15 16:14:57 +00:00
Wilson Sung
e24c2a8265 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 360060606
Test: scanBugreport
Bug: 360060992
Bug: 359428180
Test: scanAvcDeniedLogRightAfterReboot
Bug: 360060606
Bug: 359428180
Flag: EXEMPT bugFix
Change-Id: I3dfb16fdb309f01f543c826b155fc774b76faade
2024-08-15 09:25:35 +00:00
Xiaofan Jiang
dac2c5438b Merge "zuma: update modem_svc sepolicy for UMI" into main 2024-08-15 04:01:13 +00:00
Xiaofan Jiang
08b3cf20a7 zuma: update modem_svc sepolicy for UMI
Bug: 357139752

Flag: EXEMPT sepolicy

[   68.189198] type=1400 audit(1722986580.568:59): avc:  denied  { unlink } for  comm="binder:892_2" name="modem_svc_socket" dev="dm-52" ino=20239 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=sock_file permissive=1
[   68.189448] type=1400 audit(1722986580.568:60): avc:  denied  { create } for  comm="binder:892_2" name="modem_svc_socket" scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=sock_file permissive=1

Change-Id: I7cccb22ef31e88eebae664dcd937553c7ed9428f
2024-08-15 03:53:07 +00:00
Android Build Coastguard Worker
26ab3b716e Snap for 12229688 from 3725da4142 to 24Q4-release
Change-Id: I7a69b67905e33125687f730fabd5132dcb63dc57
2024-08-14 23:03:10 +00:00
samou
9da8594109 bcl: correct ocp threshold
Flag: EXEMPT refactor
Bug: 349935208
Change-Id: I2922ca198d6a47f613ecc2c9902256112457fe31
Signed-off-by: samou <samou@google.com>
2024-08-14 12:30:34 +00:00
samou
07a17f736e bcl: support thismeal binary
Test: ./dump_power
Flag: EXEMPT refactor
Bug: 349935208
Change-Id: I74f565133d39ece19b29a036d7b236a754b422d3
Signed-off-by: samou <samou@google.com>
2024-08-14 12:30:13 +00:00
Android Build Coastguard Worker
f994a94939 Snap for 12224018 from 0a827a5572 to 24Q4-release
Change-Id: I44096a0b37459e920672fb71625fe03f05014833
2024-08-13 23:03:40 +00:00
Herbert Xue
3725da4142 Control the modules built from vendor/google_devices/zuma/prebuilts/gpu
For PDK build, the "vendor/arm" path doesn't exist. The modules will be
built from vendor/google_devices/zuma/prebuilts/gpu.

Flag: EXEMPT bugfix
Bug: 357770476
Test: 1. lunch akita-trunk_staging-eng
      2. m libGLES_mali vulkan.mali libOpenCL libgpudataproducer
Change-Id: I97631ffdc98b77b747f0abbc7e376d8fbe2a576d
2024-08-13 12:11:51 +08:00
Android Build Coastguard Worker
a0d6b55502 Snap for 12217053 from e06a2b30e2 to 24Q4-release
Change-Id: I544cecf3a179d701b139b048ea725d2e962086e1
2024-08-12 23:07:43 +00:00
Xin Li
0a827a5572 [automerger skipped] Merge "Merge 24Q3 (ab/AP3A.240905.001) to aosp-main-future" into aosp-main-future am: ac39e0aa98 -s ours
am skip reason: Merged-In I4b2a0a61ebaff5d85a4daac445d81ae3d21aa9c3 with SHA-1 73a68dd6d3 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/28718326

Change-Id: Iafcd808a44a8c523e7794511199b3beac15986df
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-08-12 21:03:20 +00:00
Xin Li
443cb51973 [automerger skipped] Merge 24Q3 (ab/AP3A.240905.001) to aosp-main-future am: 868dc34238 -s ours
am skip reason: Merged-In I4b2a0a61ebaff5d85a4daac445d81ae3d21aa9c3 with SHA-1 73a68dd6d3 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/28718326

Change-Id: I699825561908f5438031d19aae47b00e62359e85
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-08-12 21:01:32 +00:00
Xin Li
ac39e0aa98 Merge "Merge 24Q3 (ab/AP3A.240905.001) to aosp-main-future" into aosp-main-future 2024-08-12 17:14:31 +00:00
Spade Lee
e06a2b30e2 dump_power: zuma: add FG dump registers path
Bug: 355756379
Test: adb bugreport verify ok
Flag: EXEMPT bugfix
Change-Id: I653a2d0bebe340a16917c30fa2c883f250456aa3
Signed-off-by: Spade Lee <spadelee@google.com>
2024-08-12 14:01:50 +00:00
Sam Ou
7b194e244f Merge "Remove BCL from thermal" into main 2024-08-12 12:32:36 +00:00
Android Build Coastguard Worker
07bbd31be0 Snap for 12210778 from 891557370f to 24Q4-release
Change-Id: I7aecc8f80cc8ca1f68ecf9f71648d7390ff083e4
2024-08-10 01:07:41 +00:00
Cyan_Hsieh
891557370f Add FSTAB_OWNERS and update OWNERS to include Android.bp am: 4c5e386a84 am: a385f17c95
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3211864

Change-Id: Iea1eccfe42e54be1a2b1392f586b64519e8d1cb3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-08-09 11:07:34 +00:00
Cyan_Hsieh
a385f17c95 Add FSTAB_OWNERS and update OWNERS to include Android.bp am: 4c5e386a84
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3211864

Change-Id: Ie8d81638daa40c9bf4201fbb441e64d487ccc5ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-08-09 10:49:02 +00:00
Cyan_Hsieh
4c5e386a84 Add FSTAB_OWNERS and update OWNERS to include Android.bp
Flag: EXEMPT only changing OWNERS
Bug: 357036384
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:4c28299c722226798388ceeade9859f05c6d33a1)
Merged-In: I473ff74c06daabcd635eb464766f04725a2c2fbd
Change-Id: I473ff74c06daabcd635eb464766f04725a2c2fbd
2024-08-09 08:34:33 +00:00
Treehugger Robot
482b053892 Merge "Control the build path of mali_csffw.bin" into main 2024-08-09 04:36:51 +00:00
Roy Luo
13756199db Revert^2 "Enable usb state update via udc sysfs"
This reverts commit 70087f4c9e.

Reason for revert: fix breakage in next build with build-time flag in
selinux policy.

Bug: 339241080
Test: tested on Shiba trunk_staging and next builds
Flag: android.hardware.usb.flags.enable_udc_sysfs_usb_state_update
Change-Id: Ifb7764be792494810388858b8672ac7793ed0d42
2024-08-09 00:54:51 +00:00
Xin Li
868dc34238 Merge 24Q3 (ab/AP3A.240905.001) to aosp-main-future
Bug: 347831320
Merged-In: I4b2a0a61ebaff5d85a4daac445d81ae3d21aa9c3
Change-Id: I25d1a1793cc9eb7df743d1e6e9bc84e5f75fbd7d
2024-08-08 11:16:10 -07:00
Herbert Xue
5126f46c8a Control the build path of mali_csffw.bin
Flag: EXEMPT bugfix
Bug: 357770476
Test: 1. lunch akita-trunk_staging-eng
      2. m csffw_image_prebuilt__firmware_prebuilt_ttux_mali_csffw.bin
Change-Id: I80d2820f24dadf09ada1e090e9588bd8a0e7c453
2024-08-08 17:53:39 +08:00
Android Build Coastguard Worker
d74aa63101 Snap for 12199973 from 03c1b56797 to 24Q4-release
Change-Id: I22eb870f0d5e48c135036ee3613782967e3a542a
2024-08-08 01:03:01 +00:00
Treehugger Robot
03c1b56797 Merge "dumpstate: Modify dumpTcpc path and content" into main 2024-08-07 03:21:40 +00:00
Android Build Coastguard Worker
5ab1d0bce5 Snap for 12190349 from f303b8b036 to 24Q4-release
Change-Id: Id6a13de0fa8d3b6efbdcb3cca8bcf42552597c45
2024-08-06 23:03:23 +00:00
Qais Yousef
f303b8b036 Merge "Revert "init.zuma.rc: Disable teo util awareness completely"" into main 2024-08-06 08:11:20 +00:00
samou
dd57f0973d Remove BCL from thermal
Flag: EXEMPT tuning changes
Bug: 349935208
Change-Id: Ib14b34e8185bdbb71c84a4de4ac104282af71d3c
Signed-off-by: samou <samou@google.com>
2024-08-06 02:53:02 +00:00
Treehugger Robot
185213c210 Merge "DisplayPort: add DisplayPort Max Resolution and FEC/DSC stats paths for zuma devices" into main 2024-08-06 00:16:50 +00:00
Qais Yousef
5c12ee2039 Revert "init.zuma.rc: Disable teo util awareness completely"
Revert submission 28549770-disable-teo-util-threshold

Reason for revert: Causes increase in Late Present frames

Reverted changes: /q/submissionid:28549770-disable-teo-util-threshold

Bug: 356992601
Bug: 356967550
Signed-off-by: Qais Yousef <qyousef@google.com>
Change-Id: I0aaca9b1369ffeb08a06e987001a336577223650
2024-08-05 14:56:44 +00:00
Kyle Tso
48b994ba16 dumpstate: Modify dumpTcpc path and content
Ported from I248fb250b94cbd4078e7f3c44da83f62002b53fb with some
modifications.

Bug: 357537483
Test: checked the content in dumpstate
Flag: EXEMPT bugfix
Change-Id: I06ce369b90d8ba0ff2ee31723890001c37db9227
Signed-off-by: Kyle Tso <kyletso@google.com>
2024-08-05 11:06:51 +00:00
Android Build Coastguard Worker
e015f4a575 Snap for 12177962 from 6ea466f90b to 24Q4-release
Change-Id: Ia351312139501ba3a9f2b5300d6d1a814e0be1e1
2024-08-03 03:02:51 +00:00
Treehugger Robot
6ea466f90b Merge "16k: Ignore 16k kernel settings if 16kb folder doesn't exist" into main 2024-08-02 10:29:35 +00:00
Robin Peng
8cd5a64cd7 16k: Ignore 16k kernel settings if 16kb folder doesn't exist
to avoid build breakage with test kernel prebuilts (e.g. ag/28525733)
that doesn't have 16kb artifacts in it.

Bug: 349877551
Flag: EXEMPT bugfix
Change-Id: I2f6c1f3365f624502366b883dbcd1066ed166cdb
2024-08-02 09:15:09 +00:00
Treehugger Robot
486667cee8 Merge "Upgrade IDisplay to V13" into main 2024-08-02 08:08:40 +00:00
Chris Lu
22eeae1c3a Upgrade IDisplay to V13
Bug: 315496839
Flag: EXEMPT bugfix
Test: build pass
Change-Id: I960990b161b82e497d5e1f3b891d6cde09384d87
2024-08-02 04:32:11 +00:00
Android Build Coastguard Worker
db860248c6 Snap for 12173239 from 4c5aff1313 to 24Q4-release
Change-Id: I24c7081668fceb5c3f42f84316d786b644c9207a
2024-08-02 01:08:05 +00:00
Treehugger Robot
4c5aff1313 Merge "Update display dim configuration" into main 2024-08-01 12:10:16 +00:00
Android Build Coastguard Worker
a40d604516 Snap for 12164422 from 26f76a3da4 to 24Q4-release
Change-Id: I65e0a703741816efa601d5b02ac26f662f46b172
2024-07-31 23:02:59 +00:00
Qais Yousef
26f76a3da4 init.zuma.rc: Disable teo util awareness completely
Bug: 355085234
Flag: EXEMPT boot time init script configuration
Signed-off-by: Qais Yousef <qyousef@google.com>
Change-Id: Id5e92a6bc7d949b89f657364ca392287430255b5
2024-07-31 12:29:43 +00:00
Android Build Coastguard Worker
e759cdb178 Snap for 12158986 from e18057e16e to 24Q4-release
Change-Id: I3df660d3ce6bbf20691bed98144e393b23a138f1
2024-07-30 23:03:30 +00:00
Qais Yousef
e18057e16e BoardConfig-common.mk: Enable Lazy RCU
Bug: 340860065
Flag: EXEMPT this is a boot time parameter
Signed-off-by: Qais Yousef <qyousef@google.com>
Change-Id: I1d45f155db9537ff176c50d36bf9c4ccb00317a5
2024-07-30 18:04:30 +00:00
Android Build Coastguard Worker
64677f7038 Snap for 12153359 from cab53ff9d9 to 24Q4-release
Change-Id: I18ed3e1064c7e3a2741b8c8071a598d6ce69f711
2024-07-29 23:03:10 +00:00
Gil Liu
cab53ff9d9 Merge "add hal_graphics_composer to access thermal temperature" into main 2024-07-29 06:10:29 +00:00
Android Build Coastguard Worker
4a78288f7f Snap for 12147630 from 6dd8b82b22 to 24Q4-release
Change-Id: I2ee51ccb6954cc1fca5121768e19cbc34ee6f9d3
2024-07-27 01:03:19 +00:00
Android Build Coastguard Worker
e4ba1d4353 Snap for 12147630 from f175d9d506 to 24Q4-release
Change-Id: Idc16bf461c6d06e7bd6967a3884f8a7c7dcfa8be
2024-07-27 01:03:17 +00:00
Treehugger Robot
f175d9d506 Merge "Add soong config variable for PowerAnomalySitril" into main 2024-07-26 02:57:19 +00:00
Treehugger Robot
6dd8b82b22 Merge "Correct the path of tcpm-source-psy device" into main 2024-07-26 02:04:31 +00:00
Mike Wang
a689f70d3c Merge "Add the selinux policy to allow the gril get/set vendor log properties." into main 2024-07-26 01:15:34 +00:00
Android Build Coastguard Worker
22fd0a6d9a Snap for 12140224 from faaaf11fd9 to 24Q4-release
Change-Id: I0d318b7091e69b50508f3a4589128ec098dc28d8
2024-07-25 23:03:03 +00:00
Manali Bhutiyani
faaaf11fd9 Merge "DisplayPort Stats: add sysfs access permission on Zuma devices" into main 2024-07-25 15:46:01 +00:00
Android Build Coastguard Worker
b6e27c63f4 Merge cherrypicks of ['googleplex-android-review.googlesource.com/28469518'] into 24Q4-release.
Change-Id: Ia6954ff1f9f485c2787e92eb132c28c85d259ab0
2024-07-25 00:33:45 +00:00
Daniel Chapin
1a430facff Revert "trusty: storageproxy: add fs_ready_rw property context"
Revert submission 28318041-rw_storage

Reason for revert: Droidfood blocking bug b/355163562

Reverted changes: /q/submissionid:28318041-rw_storage
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:6d6f71b74a93ed80f72cbb70ceaf89676251e3a2)
Merged-In: I0fa3edda88677966d42576d76616b837a4bbe70b
Change-Id: I0fa3edda88677966d42576d76616b837a4bbe70b
2024-07-25 00:32:37 +00:00
Carlos Rodriguez
6e54536670 DisplayPort Stats: add sysfs access permission on Zuma devices
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:48): avc:  denied  { read } for  name="fec_dsc_supported" dev="sysfs" ino=71618 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:49): avc:  denied  { read } for  name="fec_dsc_not_supported" dev="sysfs" ino=71619 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:50): avc:  denied  { read } for  name="max_res_other" dev="sysfs" ino=71617 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:51): avc:  denied  { read } for  name="max_res_1366_768" dev="sysfs" ino=71607 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:52): avc:  denied  { read } for  name="max_res_1440_900" dev="sysfs" ino=71608 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:53): avc:  denied  { read } for  name="max_res_1600_900" dev="sysfs" ino=71609 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:54): avc:  denied  { read } for  name="max_res_1920_1080" dev="sysfs" ino=71610 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:55): avc:  denied  { read } for  name="max_res_2560_1080" dev="sysfs" ino=71611 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
07-24 18:17:43.428 W/pixelstats-vend( 7494): type=1400 audit(0.0:56): avc:  denied  { read } for  name="max_res_2560_1440" dev="sysfs" ino=71612 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
.....

Bug: 343602691
Bug: 317486088

Flag: EXEMPT bugfix
Test: Built and flashed, errors are gone.

Change-Id: I49d177d2a997698b05f27bd4c448847ed3110e59
2024-07-24 23:49:52 +00:00
Android Build Coastguard Worker
efcc1ddac6 Snap for 12135134 from b188015fba to 24Q4-release
Change-Id: I8adb8ec692e7496b94ce0eada70713523847d962
2024-07-24 23:03:11 +00:00
Daniel Chapin
cfbbd040df Merge "Revert "trusty: storageproxy: add fs_ready_rw property context"" into main 2024-07-24 21:48:57 +00:00
Android Build Coastguard Worker
b421a28e2d Merge cherrypicks of ['googleplex-android-review.googlesource.com/28469518'] into 24Q4-release.
Change-Id: I7cbb2e6b41faee7d65fb7038c83c606108580695
2024-07-24 21:02:24 +00:00
Daniel Chapin
7ae91b1650 Revert "trusty: storageproxy: add fs_ready_rw property context"
Revert submission 28318041-rw_storage

Reason for revert: Droidfood blocking bug b/355163562

Reverted changes: /q/submissionid:28318041-rw_storage
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:6d6f71b74a93ed80f72cbb70ceaf89676251e3a2)
Merged-In: I0fa3edda88677966d42576d76616b837a4bbe70b
Change-Id: I0fa3edda88677966d42576d76616b837a4bbe70b
2024-07-24 21:01:27 +00:00
Daniel Chapin
6d6f71b74a Revert "trusty: storageproxy: add fs_ready_rw property context"
Revert submission 28318041-rw_storage

Reason for revert: Droidfood blocking bug b/355163562

Reverted changes: /q/submissionid:28318041-rw_storage

Change-Id: I0fa3edda88677966d42576d76616b837a4bbe70b
2024-07-24 20:17:33 +00:00
Kyle Tso
4358dc4f7e Correct the path of tcpm-source-psy device
Bug: 353804370
Flag: EXEMPT bugfix
Change-Id: I059a652d13ffdf186fb36edb11ef4c1dc6ac8648
Signed-off-by: Kyle Tso <kyletso@google.com>
2024-07-24 02:13:54 +00:00
Carlos Rodriguez
7e6d2aa325 DisplayPort: add DisplayPort Max Resolution and FEC/DSC stats paths for zuma devices
Bug: 343602691
Flag: EXEMPT bugfix
Test: Built Android

Change-Id: Ia0882aa8a3750e4f3bf96c3f94f843b18356f046
2024-07-24 01:24:43 +00:00
Android Build Coastguard Worker
3abed13498 Snap for 12129055 from b188015fba to 24Q4-release
Change-Id: I6c2dc68512451287ee97dc448ac36bc095d3c6a9
2024-07-23 23:03:20 +00:00
Mike McTernan
b188015fba Merge "trusty: storageproxy: add fs_ready_rw property context" into main 2024-07-23 10:02:28 +00:00
gilliu
1dde3ea2ff add hal_graphics_composer to access thermal temperature
type=1400 audit(0.0:77): avc:  denied  { search } for  name="thermal"
dev="tmpfs" ino=1618 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:thermal_link_device:s0 tclass=dir permissive=0

type=1400 audit(0.0:74): avc:  denied  { search } for  name="thermal"
dev="sysfs" ino=21594 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:sysfs_thermal:s0 tclass=dir permissive=0

type=1400 audit(0.0:74): avc:  denied  { read } for  name="temp"
dev="sysfs" ino=73536 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=0

type=1400 audit(0.0:74): avc:  denied  { getattr } for
path="/sys/devices/virtual/thermal/thermal_zone12/temp" dev="sysfs"
ino=73537 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=0

Bug: 343141590
Test: check no avc pattern on logcat from test image
Flag: NONE add permission
Change-Id: I87fce47644b07342d756e7594685eea0dded1926
2024-07-23 09:05:16 +00:00
Android Build Coastguard Worker
f692e379f4 Snap for 12116631 from 66ba3214b8 to 24Q4-release
Change-Id: I14053f84c47b37fdfa9ab6e7c5cf2b2caed74f9e
2024-07-20 01:03:05 +00:00
Android Build Coastguard Worker
d5265169f3 Snap for 12116631 from 480be09cc2 to 24Q4-release
Change-Id: I15647a39b02620d196b162019767efd550103742
2024-07-20 01:03:04 +00:00
Robert Luo
480be09cc2 Merge "[Pixel RR] Apply reviewed default permissions" into main 2024-07-19 06:25:05 +00:00
Robert Luo
77b55efb0f [Pixel RR] Apply reviewed default permissions
Pregrantting below permissions:
READ_CONTACTS
WRITE_CONTACTS
READ_CALL_LOG

Flag: EXEMPT add pregranted permission in b/337725984, b/337802920
Bug: 337725984, 337802920
Test: presubmit
Change-Id: Ie9d3558991557dff92f38cf37b0c7b43d822afb5
2024-07-19 10:00:20 +08:00
Roy Luo
f305e5a559 Merge "Revert "Enable usb state update via udc sysfs"" into main 2024-07-19 01:38:10 +00:00
Roy Luo
66ba3214b8 Revert "Add udc sysfs to udc_sysfs fs context"
Revert submission 27445245-339241080

Reason for revert: break husky-next-user (linux) build 12111903

Reverted changes: /q/submissionid:27445245-339241080
Bug: 339241080
Change-Id: If558e5bef47a0e617e4b4997f0ad9c8154b43ee9
2024-07-19 01:16:47 +00:00
Roy Luo
70087f4c9e Revert "Enable usb state update via udc sysfs"
Revert submission 27445245-339241080

Reason for revert: break husky-next-user (linux) build 12111903

Reverted changes: /q/submissionid:27445245-339241080
Bug: 339241080
Change-Id: I95e08c1959b64551a1c15963c13d7c4cdb7bce46
2024-07-19 01:16:43 +00:00
Roy Luo
5304df00c1 Merge "Enable usb state update via udc sysfs" into main 2024-07-19 00:43:39 +00:00
Android Build Coastguard Worker
af4e4ba84d Snap for 12110738 from 7c7ec16cad to 24Q4-release
Change-Id: I59adebc8d27108abef2e5d7bde3fb5fd28607666
2024-07-18 23:03:04 +00:00
Android Build Coastguard Worker
1f2e25a764 Snap for 12110738 from 8248828f30 to 24Q4-release
Change-Id: I24afc216153eefaa2bfb8e5a4eb623a73ea5e4cf
2024-07-18 23:03:03 +00:00
Roy Luo
eb5a3cd47a Add udc sysfs to udc_sysfs fs context
This is needed for system server to monitor usb gadget state.
Grant hal_usb_impl read access as it's needed by UsbDataSessionMonitor.

Bug: 339241080
Test: tested on Shiba
Flag: android.hardware.usb.flags.enable_udc_sysfs_usb_state_update
Change-Id: Iab3c20569cb22d7524ca303f6cb3eaf40aa2161d
2024-07-18 22:56:15 +00:00
Vishvam Mazumdar
8248828f30 Merge "Defaultly enable cpu idle histogram stats collection for dumpstate." into main 2024-07-18 18:47:17 +00:00
Sergey Volk
7c7ec16cad [automerger skipped] Add sepolicy for DisplayPort wakeup node am: fb98394c54 -s ours
am skip reason: Merged-In I9181b2344f2448b9debe1522528545ce90de8768 with SHA-1 77518a2614 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/28360816

Change-Id: I2bda43ad3b6983cae7aa2e7dd4dfb836ebee226c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-18 13:08:49 +00:00
Jerry Huang
8715f4e919 Merge "zuma: video: change to use c2 "default" AIDL service" into main 2024-07-18 07:08:55 +00:00
Treehugger Robot
0c13c9f6db Merge "Disable incremental boot_otas" into main 2024-07-18 06:19:41 +00:00
Pawan Wagh
8bb0da99a9 Disable incremental boot_otas
Boot otas for 16kb developer option are failing on builds signed with release keys are failing due verification issues. Turning off the incremental otas

Test: atest Enable16KbTest
Bug: 339658378
Change-Id: Idfc3efc796b599de66ddc52cbee37ca3d74d11b6
2024-07-18 04:56:33 +00:00
Mike Wang
ef8937f64c Add the selinux policy to allow the gril get/set vendor log properties.
avc logs:
2024-07-17 06:00:41.024 8674-8674 binder:8674_1 com.google.android.grilservice W type=1400 audit(0.0:96): avc: denied { read } for name="u:object_r:vendor_logger_prop:s0" dev="tmpfs" ino=416 scontext=u:r:grilservice_app:s0:c238,c256,c512,c768 tcontext=u:object_r:vendor_logger_prop:s0 tclass=file permissive=0 app=com.google.android.grilservice
2024-07-17 06:00:41.024 8674-8674 binder:8674_1 com.google.android.grilservice W type=1400 audit(0.0:97): avc: denied { read } for name="u:object_r:vendor_modem_prop:s0" dev="tmpfs" ino=418 scontext=u:r:grilservice_app:s0:c238,c256,c512,c768 tcontext=u:object_r:vendor_modem_prop:s0 tclass=file permissive=0 app=com.google.android.grilservice
2024-07-17 06:00:49.592 8674-8674 binder:8674_1 com.google.android.grilservice W type=1400 audit(0.0:99): avc: denied { write } for name="property_service" dev="tmpfs" ino=861 scontext=u:r:grilservice_app:s0:c238,c256,c512,c768 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0 app=com.google.android.grilservice

2024-07-17 16:46:54.748 1-1 /system/bin/init init I type=1107 audit(0.0:103): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=persist.vendor.verbose_logging_enabled pid=2152 uid=10238 gid=10238 scontext=u:r:grilservice_app:s0:c238,c256,c512,c768 tcontext=u:object_r:vendor_logger_prop:s0 tclass=property_service permissive=1'
2024-07-17 16:49:33.256 1-1 /system/bin/init init I type=1107 audit(0.0:116): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=persist.vendor.modem.extensive_logging_enabled pid=2152 uid=10238 gid=10238 scontext=u:r:grilservice_app:s0:c238,c256,c512,c768 tcontext=u:object_r:vendor_modem_prop:s0 tclass=property_service permissive=1'


Bug: 293947661
Change-Id: Iec1cc221a543543da28416a5bc7d7ddacde959c5
2024-07-17 20:23:43 +00:00
Steven Moreland
c97e120d74 copy_efs_files_to_data.sh: handle symlinks
Temporary fix, until dump.f2fs is fixed to handle these as well.

Bug: 352567354
Change-Id: I3fd1815cfca6438a61a26f8afaada77b771e871c
Flag: BUGFIX
Test: husky:/ # getconf PAGE_SIZE
      16384
      husky:/ # ls -l /mnt/vendor/persist/ss/
      total 3044
      lrwxrwxrwx 1 system system      55 2024-07-17 15:12 0 ->
            /dev/block/platform/13200000.ufs/by-name/trusty_persist
      -rwxrwxrwx 1 system system      55 2024-07-17 15:12 0_backup
      -rw-r-x--- 1 system system 3106816 2024-07-17 15:12 nsp
2024-07-17 19:25:08 +00:00
Sergey Volk
fb98394c54 Add sepolicy for DisplayPort wakeup node
Bug: 348125717
Test: ls -Z /sys/devices/platform/110f0000.drmdp/wakeup
Flag: NONE (follow up fix for merged non-flagged CL pa/2839256)
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:77518a261471f7884e5b7c8ca73442df5c11e48e)
Merged-In: I9181b2344f2448b9debe1522528545ce90de8768
Change-Id: I9181b2344f2448b9debe1522528545ce90de8768
2024-07-17 14:37:46 +00:00
Android Build Coastguard Worker
9d27496828 Snap for 12091711 from 489a6e7843 to 24Q4-release
Change-Id: Iccf6e2bf04cde5f35499ded65c2a0119a2602047
2024-07-15 23:03:01 +00:00
Mike McTernan
49c9c8c3d7 trusty: storageproxy: add fs_ready_rw property context
Flag: EXEMPT bug fix
Bug: 350362101
Test: ABTD
Change-Id: I397a89ceb5a6a832043abb3792b0101ad89c97a7
2024-07-15 10:13:47 +01:00
Herbert Xue
f4be9acaab Add soong config variable for PowerAnomalySitril
Set the variable is true when USE_LASSEN_OEMHOOK is true and
BOARD_WITHOUT_RADIO is not true.

Flag: EXEMPT bugfix
Bug: 325857852
Test: lunch akita-trunk_staging-userdebug && m ConnectivityMonitor
Change-Id: I44df84ade1c8394a562b523264d5f3f08cb5b5b3
2024-07-15 16:06:25 +08:00
Android Build Coastguard Worker
6294518ec7 Snap for 12085179 from 7334ac44b3 to 24Q4-release
Change-Id: If4e82c0a8e00bf79f594134d65dac4775abd64f0
2024-07-13 01:03:11 +00:00
Aaron Tsai
489a6e7843 Add permission for setting gril property
05-22 18:20:50.608   914   914 I auditd  : type=1400 audit(0.0:97): avc:  denied  { write } for  comm="radioext@1.0-se" name="property_service" dev="tmpfs" ino=849 scontext=u:r:hal_radioext_default:s0 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0

Bug: 343012301
Bug: 203824024
Test: manual test
Flag: EXEMPT bugfix
Change-Id: Ic08a1e1c6a0db29e329f121c813bebadbee5a5e9
2024-07-12 03:17:06 +00:00
Liana Kazanova
7334ac44b3 [automerger skipped] Revert "Delete sepolicy for legacy VR services." am: 6b8e432e3e am: 8bb7844138 -s ours
am skip reason: Merged-In I79bc66b80c36df398fe872f4e99b86e9a828479c with SHA-1 09d569ecde is already in history. Merged-In was found from reverted change.

Reverted change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3163729

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3168500

Change-Id: I154da94bae3e3abd483c0f586820589937b424af
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-11 23:32:22 +00:00
Liana Kazanova
8bb7844138 Revert "Delete sepolicy for legacy VR services." am: 6b8e432e3e
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3168500

Change-Id: I8a7841bfc2b850111a3688b18fb11eb260fd4a40
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-11 23:06:02 +00:00
Android Build Coastguard Worker
19c6dc65d0 Snap for 12078078 from 2bbbc8b955 to 24Q4-release
Change-Id: Ibe65dba0742f1dfd8c019bb17993c4c026cfae98
2024-07-11 23:03:18 +00:00
Android Build Coastguard Worker
ff78b99dc6 Snap for 12078078 from b75cadc54b to 24Q4-release
Change-Id: I56750704028f5acf78c1c9a55d4f7e8061306d4d
2024-07-11 23:03:17 +00:00
Liana Kazanova
6b8e432e3e Revert "Delete sepolicy for legacy VR services."
This reverts commit 8a81e8bf61.

Reason for revert: Droidmonitor created revert due to b/352465601. Will be verifying through ABTD before submission

Change-Id: I7543fe9078e88300d12c8a09867bdd1ecf5c8005
2024-07-11 20:56:43 +00:00
PODISHETTY KUMAR
2bbbc8b955 Merge "Revert "Delete sepolicy for legacy VR services."" into main 2024-07-11 14:50:32 +00:00
PODISHETTY KUMAR
62fd727327 Revert "Delete sepolicy for legacy VR services."
This reverts commit 09d569ecde.

Reason for revert: <Droidmonitor created revert due to b/352465601. Will be verifying through ABTD before submission.>

Change-Id: Ia71e697e180b569480be9f029d9e729f42d5f855
2024-07-11 14:43:27 +00:00
Joerg Wagner
b75cadc54b Merge "Increase the max core index for protected TLS allocations to 4" into main 2024-07-11 12:07:57 +00:00
Jörg Wagner
86d54846b6 Increase the max core index for protected TLS allocations to 4
Pixel has removed unnecessary allocation padding, and we now pass
dEQP with a maximum physical core index setting of 4, which allows
the driver to utilize 2 GPU cores (1001b) in the extreme tests.

Bug: 221255664
Test: HK3 atest CtsDeqpTestCases -- --module-arg 'CtsDeqpTestCases:include-filter:dEQP-VK.protected_memory.*'
Flag: EXEMPT bugfix
Change-Id: I96a38a6070968100ce3adf01da7235a807bf31ab
2024-07-11 09:30:22 +00:00
Krzysztof Kosiński
2b44cfa2c1 [automerger skipped] Delete sepolicy for legacy VR services. am: 8a81e8bf61 am: e7a890e411 -s ours
am skip reason: Merged-In I79bc66b80c36df398fe872f4e99b86e9a828479c with SHA-1 09d569ecde is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3163729

Change-Id: I3aef53b57d614687bd9e20985541a2256018cdd3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-11 08:58:24 +00:00
Krzysztof Kosiński
e7a890e411 Delete sepolicy for legacy VR services. am: 8a81e8bf61
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3163729

Change-Id: I42d710d82d1e43c88df080460be760c59ba50d4f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-11 08:24:38 +00:00
Krzysztof Kosiński
8a81e8bf61 Delete sepolicy for legacy VR services.
None of the zuma devices include these services.

Bug: 234559097
Test: presubmit
Flag: EXEMPT dead code removal
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:09d569ecdeaba2951e005a713ec82bded4be234e)
Merged-In: I79bc66b80c36df398fe872f4e99b86e9a828479c
Change-Id: I79bc66b80c36df398fe872f4e99b86e9a828479c
2024-07-11 07:25:53 +00:00
Krzysztof Kosiński
edca08572b Merge "Delete PDX sockets for legacy VR services." into main 2024-07-11 04:41:55 +00:00
Treehugger Robot
d49d60035c Merge "Delete sepolicy for legacy VR services." into main 2024-07-11 03:56:40 +00:00
Android Build Coastguard Worker
4c7f8cb4e7 Snap for 12072601 from c802ed6d63 to 24Q4-release
Change-Id: I0016c43206394890d901c9eda006c4fee91892a3
2024-07-11 01:03:39 +00:00
Android Build Coastguard Worker
9972c6b711 Snap for 12072601 from 8f5e900a88 to 24Q4-release
Change-Id: I5f6b9d4367a6b9d94337984bb48a0a144581983c
2024-07-11 01:03:38 +00:00
Krzysztof Kosiński
09d569ecde Delete sepolicy for legacy VR services.
None of the zuma devices include these services.

Bug: 234559097
Test: presubmit
Flag: EXEMPT dead code removal
Change-Id: I79bc66b80c36df398fe872f4e99b86e9a828479c
2024-07-10 22:19:13 +00:00
Krzysztof Kosiński
ca3e5096da Delete PDX sockets for legacy VR services.
Remove irrelevant copy and paste content. None of the zuma
devices ever included these services and these sockets are
not doing anything.

Bug: 234559097
Test: presubmit
Flag: EXEMPT dead code removal
Change-Id: I8664262708b89016227d7df076e7c8d70a53de07
2024-07-10 22:13:23 +00:00
Vishvam Mazumdar
8f5e900a88 Merge "Add CPU Idle Histogram Stats to dumpstate board file." into main 2024-07-10 21:41:10 +00:00
Vishvam Mazumdar
c802ed6d63 Merge "Add SELinux policy to allow CPU Idle Histogram Stats in dumpstate." into main 2024-07-10 21:41:10 +00:00
Vishvam Mazumdar
5a0aedaec9 Add CPU Idle Histogram Stats to dumpstate board file.
This change is to allow the CPU Idle Histogram Stats to be dumped in
bugreports so that there is more insight into the idle behavior of
devices in the field.

Test: Build/Flash
Test: adb bugreport
Bug: 344908619
Flag: EXEMPT bugfix
Change-Id: I9c31b4fbaf8adb35df27f4d19a7bf87ac33b05d3
Signed-off-by: Vishvam Mazumdar <vmazumdar@google.com>
2024-07-10 21:40:07 +00:00
Vishvam Mazumdar
1dac9a1726 Add SELinux policy to allow CPU Idle Histogram Stats in dumpstate.
This change is to allow the CPU Idle Histogram Stats to be dumped in
bugreports so that there is more insight into the idle behavior of
devices in the field.

Test: build/flash
Test: adb bugreport
Bug: 344908619
Flag: EXEMPT bugfix
Change-Id: Ic1096564423a009a0180d7f771da8184688c1842
Signed-off-by: Vishvam Mazumdar <vmazumdar@google.com>
2024-07-10 21:39:07 +00:00
Vishvam Mazumdar
569092bc54 Defaultly enable cpu idle histogram stats collection for dumpstate.
This change is to allow the CPU Idle Histogram Stats to be dumped in
bugreports so that there is more insight into the idle behavior of
devices in the field.

Test: Build/Flash
Test: Collect histogram log
Bug: 344908619
Flag: EXEMPT bugfix
Change-Id: Ib6e4772737a8c1f22ac8ba31c40099baeab43853
Signed-off-by: Vishvam Mazumdar <vmazumdar@google.com>
2024-07-10 21:38:00 +00:00
Roy Luo
b386375b3c [automerger skipped] Use absolute path for udc device am: 0c18eacf8f am: b7c25ccbc3 -s ours
am skip reason: Merged-In Iad74cae0d6ad6887d79d705dc8478f1b44532503 with SHA-1 12f2e55257 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3164638

Change-Id: Id46e979b5ca60952cadf16b596ed5227325339a4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-10 20:12:41 +00:00
Roy Luo
b7c25ccbc3 Use absolute path for udc device am: 0c18eacf8f
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3164638

Change-Id: Ib83ba7a01082822e5eac2d9a311f8ad06b65a19f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-10 19:46:12 +00:00
Roy Luo
0c18eacf8f Use absolute path for udc device
Avoid search in /sys/class/udc directory

Bug: 339241080
Test: tested on Shiba
Flag: EXEMPT bugfix
Change-Id: Iad74cae0d6ad6887d79d705dc8478f1b44532503
Merged-In: Iad74cae0d6ad6887d79d705dc8478f1b44532503
2024-07-10 18:11:50 +00:00
Wesley Lee
b9defeca54 Merge "enable Zuma AV1 HDR editing" into main 2024-07-10 16:05:58 +00:00
Qais Yousef
a4caac8bdf Merge "init.zuma.rc: Apply sched tuning to improve sched latencies" into main 2024-07-10 11:49:55 +00:00
Android Build Coastguard Worker
5ac4bfe691 Merge cherrypicks of ['googleplex-android-review.googlesource.com/27906354', 'googleplex-android-review.googlesource.com/27956012'] into 24Q3-release.
Change-Id: Ifa6c5d849423bf2cf03ad8a3bddb1a0a3ded8a87
2024-07-10 05:23:53 +00:00
Kelvin Zhang
2d0a254101 Mount persist partition in early-init
The graphics hal might need to access /persist early in the boot
process. So mount persist early for 4K devices.

Test: boot 4K device
Bug: 338504890
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:73a68dd6d3794ed8a4e791f2c86c4e55a61ea2aa)
Merged-In: I4b2a0a61ebaff5d85a4daac445d81ae3d21aa9c3
Change-Id: I4b2a0a61ebaff5d85a4daac445d81ae3d21aa9c3
2024-07-10 05:10:21 +00:00
Kelvin Zhang
9d0f747603 Only copy efs files to /data if device is 16K page size
Test: Boot device, test dev options
Bug: 341216848
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:763984677a0630a2100b150c057c3d128a8f6c3d)
Merged-In: I0bf328b8ff90e125dcbca5261fb8dd4e0ad458d8
Change-Id: I0bf328b8ff90e125dcbca5261fb8dd4e0ad458d8
2024-07-10 05:10:05 +00:00
Android Build Coastguard Worker
47cc7287e7 Snap for 12065372 from 846652c1b9 to 24Q4-release
Change-Id: Ia43fa3cdd2051d71b760dc9732aa04fd15632d39
2024-07-09 23:08:22 +00:00
Juan Yescas
846652c1b9 Merge "16k: Move logic from device/google/shusky/BoardConfig-shusky-common.mk to zuma/BoardConfig-16k-common.mk" into main 2024-07-09 19:12:23 +00:00
Qais Yousef
a39d3b0832 init.zuma.rc: Apply sched tuning to improve sched latencies
Bug: 340860065
Flag: NONE not supported for init.rc scripts
Signed-off-by: Qais Yousef <qyousef@google.com>
Change-Id: Iac58746eba35820bab69ef742a1078b93e9bbad8
2024-07-09 14:04:00 +00:00
Jeremy Kemp
29e4c4c53a Merge "Add Mali OpenCL ICD to PRODUCT_PACKAGES" into main 2024-07-09 10:51:44 +00:00
Roy Luo
9601e0f266 Merge "Use absolute path for udc device" into main 2024-07-09 03:03:37 +00:00
Vilas Bhat
354b984c0d 16k: Move logic from device/google/shusky/BoardConfig-shusky-common.mk to zuma/BoardConfig-16k-common.mk
The makefile logic in device/google/shusky/BoardConfig-shusky-common.mk
is identical to the logic required for akita. Hence, this logic is
moved to device/google/zuma/BoardConfig-16k-common.mk to avoid
duplicating the file for akita.

Bug: 349877551
Test: $ lunch shiba-trunk_staging-userdebug
      $ get_build_var TARGET_KERNEL_DIR_16K
      device/google/shusky-kernels/5.15/trunk-12022168/16kb
      $ get_build_var BOARD_KERNEL_PATH_16K
      device/google/shusky-kernels/5.15/trunk-12022168/16kb/Image.lz4
      $ get_build_var BOARD_16K_OTA_USE_INCREMENTAL
      true
      $ get_build_var BOARD_16K_OTA_MOVE_VENDOR
      true
Flag: EXEMPT bugfix
Change-Id: Ibd060eae8f4e97ae8ff800f765e2310c984e5796
2024-07-09 00:15:38 +00:00
Dmitry Skiba
4caa08f2cc Reland "Restrict kcompactd thread to middle/little cores."
This reverts commit 721a8358c6.

Reason for revert: 24Q3 has been cut, relanding the original commit ef68e9b578.

Change-Id: I7882ebafd66d126df9ccbe2124617fbf4ed73eb5
Bug: 347272991
2024-07-08 23:30:54 +00:00
Android Build Coastguard Worker
84a074ca3b Snap for 12058995 from 1744a12bc4 to 24Q4-release
Change-Id: I2198d5a2e5a8c669dada13f7cd6181e1ad2b7268
2024-07-08 23:08:35 +00:00
Daniel Rosenberg
3f3e5d37cf Merge "Run fsck in CopyEfsTest" into main 2024-07-08 20:50:13 +00:00
Daniel Rosenberg
044dead5b6 Run fsck in CopyEfsTest
We're copying from a live r/w image, so the picture we get may be a bit
distorted. Running fsck over the image first should help with
reliability, but f2fs does some fixes on mount as well, so we mount and
unmount the image before running dump.f2fs.

Change-Id: Ibb15388c55b6f909a1d1b849f9760f248644d9e9
Signed-off-by: Daniel Rosenberg <drosen@google.com>
Bug: 349120101
Test: atest CopyEfsTest
Flag: TEST_ONLY
2024-07-08 20:49:57 +00:00
Jeremy Kemp
f1eb38d169 Add Mali OpenCL ICD to PRODUCT_PACKAGES
Bug: 324057328
Test: clpeak
Change-Id: I4ca9b0d9854d6b94e128d40eba0910a1303a0a96
2024-07-08 17:10:56 +01:00
Treehugger Robot
1744a12bc4 Merge "APC/TUI: remove support for APC" into main 2024-07-08 15:34:38 +00:00
Shikha Panwar
21f55b92ea Zuma: Disable Secretkeeper HAL for aosp build am: 91d8fcccea am: 696ed20840
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3161976

Change-Id: Iba7300b26e100b1ac5e26a0d44c93e1a064e8e0f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-08 13:38:54 +00:00
Shikha Panwar
696ed20840 Zuma: Disable Secretkeeper HAL for aosp build am: 91d8fcccea
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3161976

Change-Id: I335c38558c0ea53476e5d077ccb249086aff1161
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-08 13:21:34 +00:00
Shikha Panwar
91d8fcccea Zuma: Disable Secretkeeper HAL for aosp build
The AOSP builds do not have a compatible BL for Secretkeeper (24Q3+).
This leads the crashing of HAL since the backing trusty is not updated
with the TA.

Test: lunch aosp & non-aosp targets -> get_build_var SECRETKEEPER_ENABLED
Bug: 350482613
Change-Id: I49d30914bc7a4b2b752a6d9eb7db0e7959638d98
2024-07-08 10:26:16 +00:00
Mike McTernan
84d0877511 APC/TUI: remove support for APC
Flag: EXEMPT build file change
Bug: 351151445
Test: m && test on device
Change-Id: I927fd5063cd12b94d63fff3057ae54cee75e908d
2024-07-04 14:55:39 +00:00
Android Build Coastguard Worker
9b9156dd6c Snap for 12048319 from ea95f2b4a4 to 24Q4-release
Change-Id: I5cfb3c384cc97616f1affc3ddd85a2c9acdd34f4
2024-07-03 23:03:40 +00:00
Android Build Coastguard Worker
7eabd98af6 Snap for 12048319 from bf9f082f67 to 24Q4-release
Change-Id: I65bc18d29c6510d9eb6466b6461564ada93451ec
2024-07-03 23:03:39 +00:00
Juan Yescas
bf9f082f67 16kb: Use TARGET_BOOTS_16K to select the efs config files
Test: Build and test pgagnostic targets
Bug: 350529323
Bug: 346868433
Flag: EXEMPT bugfix
Change-Id: I1e0bea52de09fe3c9ee2f52b0803882456943833
2024-07-03 03:00:32 +00:00
Wilson Sung
ea95f2b4a4 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 350832030
Bug: 350832258
Change-Id: Idd45bcee641af96f442ec2cd4443a3964d73f429
2024-07-03 02:05:06 +00:00
Android Build Coastguard Worker
78eb115a94 Snap for 12042346 from bb51950bad to 24Q4-release
Change-Id: I87496aebd9a9ea014264a2c63dd469ce1f6fc46f
2024-07-02 23:04:22 +00:00
liangjlee
bb51950bad zuma: Include power/power.mk am: 94babd7bcc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/28060256

Change-Id: I0d8850ec9ce7e2519f87c1455429a0e139d1568c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-07-02 09:36:37 +00:00
Android Build Coastguard Worker
528d9e8512 Snap for 12032182 from a44d754cfa to 24Q4-release
Change-Id: I8b4d55680e18482cf3246db8314bbc7a51abe906
2024-06-29 03:03:33 +00:00
Android Build Coastguard Worker
07dde346f1 Snap for 12032182 from 2fa3c6b55d to 24Q4-release
Change-Id: I42b3215834e5d4a00705e849244742af700d928f
2024-06-29 03:03:32 +00:00
Treehugger Robot
2fa3c6b55d Merge "16kb: Use PRODUCT_BOOTS_16K to select the proper rc file and fstab" into main 2024-06-28 23:29:29 +00:00
Android Build Coastguard Worker
4b4d45dee1 Merge cherrypicks of ['googleplex-android-review.googlesource.com/28051077'] into 24Q3-release.
Change-Id: Iae0bff35c67755063410c2758d47c13229fc864a
2024-06-28 23:16:37 +00:00
liangjlee
3e96ca1dcf zuma: Include power/power.mk
Bug: 331612600
Flag: EXEMPT (bug 337358613)
Signed-off-by: liangjlee <liangjlee@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:48c79683bcac4b697cfa08949dfa4c4c7daed683)
Merged-In: I370cd115855b43d890dd488de65572593b238efb
Change-Id: I370cd115855b43d890dd488de65572593b238efb
2024-06-28 23:08:36 +00:00
Juan Yescas
98f2222e27 16kb: Use PRODUCT_BOOTS_16K to select the proper rc file and fstab
The build flag PRODUCT_BOOTS_16K will be used to select
the proper efs rc file and fstab:

- When PRODUCT_BOOTS_16K := true, 16k rc files and fstab will be used.
- When PRODUCT_BOOTS_16K := false, 4k rc files and fstab will be used.

Bug: 346868433
Test: Built Pixel 8 targets
      $ source build/envsetup.sh
      $ lunch husky_pgagnostic-trunk_staging-userdebug
      $ get_build_var DEVICE_PAGE_AGNOSTIC
      $ get_build_var TARGET_KERNEL_DIR
      device/google/shusky-kernels/6.1/trunk-12010727/16kb
      $ get_build_var TARGET_BOARD_KERNEL_HEADERS
      device/google/shusky-kernels/6.1/trunk-12010727/kernel-headers
      $ get_build_var PRODUCT_BOOTS_16K
      true
      $ get_build_var TARGET_RW_FILE_SYSTEM_TYPE
      ext4
      $ get_build_var TARGET_USERDATAIMAGE_FILE_SYSTEM_TYPE
      ext4
Flag: EXEMPT bugfix
Change-Id: I4dba20518925a176f1e1e66596e2bb1e8ade7c26
2024-06-28 18:50:20 +00:00
Treehugger Robot
a44d754cfa Merge "Give bthal permission to read AoC version." into main 2024-06-28 05:50:59 +00:00
Madhav Iyengar
00484704f8 Give bthal permission to read AoC version.
Bug: 349661931
Flag: com.android.bluetooth.hal.flags.pixel_bt_aoc_offload_efw_xport
Test: Allows bthal to choose between USF and EFW transports to
communicate with AoC based on version.

Change-Id: I3edbcafd4ee5d0c875618c1a1c1b89e1bbd4d1ec
2024-06-28 01:15:50 +00:00
Sergey Volk
e406b07a85 Merge "Add sepolicy for DisplayPort wakeup node" into main 2024-06-28 00:30:01 +00:00
Android Build Coastguard Worker
5ae5ce3bb7 Snap for 12025384 from 48c79683bc to 24Q4-release
Change-Id: If5430ff8135e97903252053e3d4526eeb05f4e5b
2024-06-27 23:03:36 +00:00
liangjlee
94babd7bcc zuma: Include power/power.mk
Bug: 331612600
Flag: EXEMPT (bug 337358613)
Change-Id: I370cd115855b43d890dd488de65572593b238efb
Signed-off-by: liangjlee <liangjlee@google.com>
2024-06-27 02:27:19 +00:00
Roy Luo
12f2e55257 Use absolute path for udc device
Avoid search in /sys/class/udc directory

Bug: 339241080
Test: tested on Shiba
Flag: EXEMPT bugfix
Change-Id: Iad74cae0d6ad6887d79d705dc8478f1b44532503
2024-06-26 22:59:30 +00:00
Sergey Volk
77518a2614 Add sepolicy for DisplayPort wakeup node
Bug: 348125717
Test: ls -Z /sys/devices/platform/110f0000.drmdp/wakeup
Flag: NONE (follow up fix for merged non-flagged CL pa/2839256)
Change-Id: I9181b2344f2448b9debe1522528545ce90de8768
2024-06-26 20:53:57 +00:00
liangjlee
48c79683bc zuma: Include power/power.mk
Bug: 331612600
Flag: EXEMPT (bug 337358613)
Change-Id: I370cd115855b43d890dd488de65572593b238efb
Signed-off-by: liangjlee <liangjlee@google.com>
2024-06-27 02:16:51 +08:00
Roy Luo
92d50a76d3 Enable usb state update via udc sysfs
Bug: 339241080
Test: tested on Shiba
Flag: android.hardware.usb.flags.enable_udc_sysfs_usb_state_update
Change-Id: I203e06e4416c5811ded7b7aaccbe7680693f2080
2024-06-25 23:46:10 +00:00
Android Build Coastguard Worker
753f41a586 Snap for 12014005 from c42244bfb6 to 24Q4-release
Change-Id: I986362f4c3ab83e5abcd69dccd45367157214f06
2024-06-25 23:03:51 +00:00
Juan Yescas
c42244bfb6 Merge "Change CopyEfsTest to test contents" into main 2024-06-25 16:37:46 +00:00
Julien Desprez
dca09aa056 Tag CopyEfsTest as device-pixel-tests
This will allow to run the tests out of the pixel tests set rather than the super large device-tests set. Which will save build resources.

Flag: TEST_ONLY
Change-Id: I7d902662dff05dfdc88808c5647793ff5bde6107
Test: presubmit
Bug: 342232954
2024-06-25 14:55:06 +00:00
Daniel Rosenberg
3319a13fee Change CopyEfsTest to test contents
4k mode devices no longer set up redirection, so the old test would fail
now. Instead, this tests that the contents of the copied partitions will
match. Since the partitions are mounted and could change, we work off of
a copy.

Change-Id: Ia98517bb4ede9cb3416132e815da9b87728423a6
Signed-off-by: Daniel Rosenberg <drosen@google.com>
Flag: TEST_ONLY
Bug: 347744178
Test: atest CopyEfsTest
2024-06-24 17:20:54 -07:00
Android Build Coastguard Worker
c27fc764e8 Snap for 12007880 from 48ca1bcab6 to 24Q4-release
Change-Id: Ie7626a87637d0466d28b0bd08e7823842706a6a7
2024-06-24 23:03:45 +00:00
Kelvin Zhang
48ca1bcab6 Merge "Mount persist partition in early-init" into main 2024-06-24 17:47:29 +00:00
Android Build Coastguard Worker
cc147f0569 Snap for 12002618 from cb368db9b8 to 24Q4-release
Change-Id: I75f45220c8d7fa571992a21e2885b83fd1e12123
2024-06-22 01:03:32 +00:00
YiKai Peng
cb368db9b8 Merge "zuma: wlc: add authstart permission" into main 2024-06-21 04:05:42 +00:00
Kelvin Zhang
73a68dd6d3 Mount persist partition in early-init
The graphics hal might need to access /persist early in the boot
process. So mount persist early for 4K devices.

Test: boot 4K device
Bug: 338504890
Change-Id: I4b2a0a61ebaff5d85a4daac445d81ae3d21aa9c3
2024-06-20 21:04:40 -07:00
Android Build Coastguard Worker
2bd2cf975e Snap for 11996894 from 6794f8de27 to 24Q4-release
Change-Id: I80e6beb229ca79e51427039b9cb34fc040762acb
2024-06-20 23:03:50 +00:00
Android Build Coastguard Worker
4004d9bdf6 Snap for 11996894 from 23c385e7da to 24Q4-release
Change-Id: I9e30ac9b749ed813fb4ad4e5409b76fb97f96f5e
2024-06-20 23:03:49 +00:00
Xin Li
23c385e7da [automerger skipped] Merge 24Q3 (ab/11976889) to aosp-main-future am: 80cfd703d6 -s ours
am skip reason: Merged-In I38eef1dff949c4275bf0b355582238678a6894a7 with SHA-1 120974a4b1 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/27908527

Change-Id: I7c7aba2e51fdcb33140f33d5e648a238e5b2988a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-20 21:16:39 +00:00
Xin Li
6794f8de27 [automerger skipped] Merge 24Q3 (ab/11976889) to aosp-main-future am: 1398498663 -s ours
am skip reason: Merged-In Ief591d28aaea4223f05917d29bc896edec065613 with SHA-1 5ff76196c8 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/27908528

Change-Id: I9417fe46a2e10ad3d4231520cd43976e442835fa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-20 19:56:58 +00:00
Kelvin Zhang
763984677a Only copy efs files to /data if device is 16K page size
Test: Boot device, test dev options
Bug: 341216848

Change-Id: I0bf328b8ff90e125dcbca5261fb8dd4e0ad458d8
2024-06-20 11:13:41 -07:00
YiKai Peng
579a541f26 zuma: wlc: add authstart permission
Bug: 348272247
Test: Build/Flash
Flag: EXEMPT bugfix
Change-Id: I881dd032c7dbcc8bca55c1346e02d21b1f2c0145
Signed-off-by: YiKai Peng <kenpeng@google.com>
2024-06-20 06:29:49 +00:00
Android Build Coastguard Worker
cfed47ef14 Snap for 11987757 from 528ffcec22 to 24Q4-release
Change-Id: Ia5f4e1c3d84d55c56f9cd7fcd712c352d9edf141
2024-06-18 23:03:40 +00:00
Android Build Coastguard Worker
24acfc9849 Snap for 11987757 from 2720a57023 to 24Q4-release
Change-Id: Idd8f384d8f3f4903c81dad6ccec793b7ab597028
2024-06-18 23:03:39 +00:00
Xin Li
1398498663 Merge 24Q3 (ab/11976889) to aosp-main-future
Bug: 347831320
Merged-In: Ief591d28aaea4223f05917d29bc896edec065613
Change-Id: I67f7818f77210af410f58ed070b0443af4dbcf56
2024-06-18 14:13:25 -07:00
Xin Li
80cfd703d6 Merge 24Q3 (ab/11976889) to aosp-main-future
Bug: 347831320
Merged-In: I38eef1dff949c4275bf0b355582238678a6894a7
Change-Id: I46d9c1d5e2e949cdb9e262921d2f1f4d220d7cba
2024-06-18 14:13:24 -07:00
Treehugger Robot
2720a57023 Merge "Remove unused device/google/zuma/Android.mk" into main am: 60384da8cb am: ba186ad62c
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3135713

Change-Id: I729eac86f45d142a7e07cbbb9166ef8eb2e3e39a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-18 10:02:14 +00:00
Treehugger Robot
ba186ad62c Merge "Remove unused device/google/zuma/Android.mk" into main am: 60384da8cb
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3135713

Change-Id: Ic86a2eaaf957d7f9a52cafb7ba11c440ca1f280b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-18 09:27:42 +00:00
Treehugger Robot
60384da8cb Merge "Remove unused device/google/zuma/Android.mk" into main 2024-06-18 09:09:15 +00:00
Xin Li
528ffcec22 [automerger skipped] Merge Android 14 QPR3 to AOSP main am: 9af99be0b2 -s ours am: 00177acdd0 -s ours
am skip reason: Merged-In I61f611a2fcb900fcb4bb035c2abfbb19a840fddb with SHA-1 42aa8de219 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3131996

Change-Id: I8702f8ff010a643436cbab8689384bf2e3833c86
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-18 05:56:06 +00:00
Xin Li
54f9d0f7b0 Merge Android 14 QPR3 to AOSP main am: c3387ab656 am: 1aade33ca5
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3132134

Change-Id: Id0a170bed1efab623f82bba624849ef71356a29a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-18 05:55:36 +00:00
Android Build Coastguard Worker
2c3f33edf0 Snap for 11981331 from 7969077e3b to 24Q4-release
Change-Id: I0b7920b8d94ee646e9ad8c8371ae3fb2f43a0523
2024-06-17 23:04:27 +00:00
Android Build Coastguard Worker
c7a783220e Snap for 11981331 from 735afdceb3 to 24Q4-release
Change-Id: I1819d1a8632a7fa9719a9b2020e94edca78abec3
2024-06-17 23:04:26 +00:00
Xin Li
00177acdd0 [automerger skipped] Merge Android 14 QPR3 to AOSP main am: 9af99be0b2 -s ours
am skip reason: Merged-In I61f611a2fcb900fcb4bb035c2abfbb19a840fddb with SHA-1 42aa8de219 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/3131996

Change-Id: Ica9df917ccf440e316760fae33ed9beff3f7bf27
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-17 20:42:11 +00:00
Xin Li
1aade33ca5 Merge Android 14 QPR3 to AOSP main am: c3387ab656
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3132134

Change-Id: Ib7a8ed951ffe015060bb9ba2f69171fad85243b8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-17 20:41:21 +00:00
Treehugger Robot
735afdceb3 Merge "Remove CopyEfsTest from test mapping" into main 2024-06-17 19:02:12 +00:00
Kelvin Zhang
cf0619c40d Remove CopyEfsTest from test mapping
treehugger does not have any test suite setup for zuma target,
and CopyEfsTest should only be run on zuma targets. So remove
from test mapping to unbreak tests.

Test: th
Bug: 347396961
Change-Id: I079d24cae4808d3370c3821412640f7fef1d0cc7
2024-06-17 11:13:53 -07:00
Jerry Huang
fe63fa4236 zuma: video: change to use c2 "default" AIDL service
Bug: 322920559
Change-Id: Ia2e6cac052bc0ee417e179f61804eada9ae87bf5
2024-06-17 08:05:37 +00:00
Herbert Xue
2c8e3651e4 Remove unused device/google/zuma/Android.mk
There is no other Android.mk under subdirectory of device/google/zuma.

Bug: 347619275
Test: NA
Change-Id: I7a5e9afb1ccb75ed66e947a3fa1e0bda2c2223b6
2024-06-17 13:48:03 +08:00
Android Build Coastguard Worker
1a0e33236c Snap for 11975806 from d17f068362 to 24Q3-release
Change-Id: Ic3830a2992458b6bbfd8c8fefe3cd0ba1037d53f
2024-06-15 21:03:25 +00:00
Android Build Coastguard Worker
5cc832e4e7 Snap for 11973804 from d17fdff5f8 to 24Q3-release
Change-Id: I8b384c229281b36e39d2361148e093d81c48593f
2024-06-15 01:03:32 +00:00
Treehugger Robot
d17f068362 Merge "Add test for copy_efs_files_to_data script" into main 2024-06-14 21:37:11 +00:00
Kelvin Zhang
120974a4b1 Add test for copy_efs_files_to_data script
Test: atest CopyEfsTest
Bug: 346551655
Change-Id: I38eef1dff949c4275bf0b355582238678a6894a7
2024-06-14 13:12:19 -07:00
Android Build Coastguard Worker
0562582075 Snap for 11967491 from a9b7137ea9 to 24Q3-release
Change-Id: I033bb919c5dc1fb879e77b5e03b01b819c5f111c
2024-06-13 23:03:29 +00:00
Xin Li
9af99be0b2 Merge Android 14 QPR3 to AOSP main
Bug: 346855327
Merged-In: I61f611a2fcb900fcb4bb035c2abfbb19a840fddb
Change-Id: I01a531331e180880cca379ac6f4b6199f2bebd5e
2024-06-13 10:49:16 -07:00
Xin Li
c3387ab656 Merge Android 14 QPR3 to AOSP main
Bug: 346855327
Merged-In:
Change-Id: I6e2d2db806623c6e6676d852eb62af6b426e9438
2024-06-13 10:49:16 -07:00
Kyle Tso
d17fdff5f8 usb: Log for retry on role switch
Add a log for the retry. Also define the sleep time in the header file.

Bug: 341996696
Change-Id: Ib3cc0c6ad576e7cda26b7f50cdc61d52e6349c78
Signed-off-by: Kyle Tso <kyletso@google.com>
2024-06-13 16:54:37 +08:00
Joey Poomarin Phloyphisut
a9b7137ea9 Merge "pixelstats: add speaker_version sysfs for VendorSpeakerStatsReported" into main 2024-06-13 05:53:30 +00:00
Kyle Tso
9500db736e Merge "usb: Add retry on role switch" into main 2024-06-13 03:32:21 +00:00
Treehugger Robot
866d218686 Merge "Enable copy efs files support on pgagnotic target" into main 2024-06-13 02:46:40 +00:00
Android Build Coastguard Worker
8c9dd0dbcd Snap for 11959661 from 7969077e3b to 24Q3-release
Change-Id: I01c3e835b1a3e15068320f89aa7ec3d0460ff794
2024-06-12 23:03:51 +00:00
Android Build Coastguard Worker
a134922ea9 Snap for 11959661 from 6432f05383 to 24Q3-release
Change-Id: Ib639adf8cb2c09216c824e26ffa0f6589c5d1975
2024-06-12 23:03:50 +00:00
Salmax Chang
6432f05383 Merge "Restore permission of efs/efs_backup/modem_userdata after mount" into main 2024-06-12 10:25:58 +00:00
Kyle Tso
ef5856a447 usb: Add retry on role switch
Bug: 341996696
Change-Id: I8caa65288af1588d24fea4aa6c5768d45d69bbd5
Signed-off-by: Kyle Tso <kyletso@google.com>
2024-06-12 09:16:17 +00:00
Cheng Chang
7969077e3b gps: Move hal_gnss_pixel declaration to device folder am: 5ff76196c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/27576137

Change-Id: Ic16f628926a47350f0e0caf7293e1cfa4521a7fe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-12 07:27:17 +00:00
KRIS CHEN
654485385c Merge "zuma: build fingerprint dump" into main 2024-06-12 04:39:32 +00:00
Treehugger Robot
4e845d9517 Merge "Update IDisplay to V12" into main 2024-06-12 03:20:59 +00:00
Kelvin Zhang
d45d697ded Enable copy efs files support on pgagnotic target
pgagnotic targets might boot into 16KB directly(w/o dev options),
in which case it would need copy efs files support to be enabled.

Test: boot device with dev option disabled, check efs
Bug: 346275905
Change-Id: If18bfa0b0646da8008c6d92bec094b236273cbfc
2024-06-11 16:25:52 -07:00
Kelvin Zhang
d3ce2b9873 Restore permission of efs/efs_backup/modem_userdata after mount
Test: Boot device, erase EFS, check selinux labels
Bug: 345803836
Change-Id: Ia511731e001d74409b40b087432e3535ca5cfc8f
2024-06-11 09:13:27 -07:00
Cheng Chang
5ff76196c8 gps: Move hal_gnss_pixel declaration to device folder
Bug: 343280252
Test: b/343280252 compile and abtd test
Change-Id: Ief591d28aaea4223f05917d29bc896edec065613
2024-06-11 06:23:21 +00:00
Poomarin Phloyphisut
f3a1a067f1 pixelstats: add speaker_version sysfs for VendorSpeakerStatsReported
Bug: 326342880
Test: Local Test
Change-Id: Ib8c93e9297a7afb61005fb523fd664be0a00b459
2024-06-11 05:49:20 +00:00
chenkris
48e1f2418a zuma: build fingerprint dump
Bug: 346450599
Test: adb bugreport
Change-Id: I83f64cb3aa46007dd41674309a811d5f4c5a52a4
2024-06-11 02:51:37 +00:00
Android Build Coastguard Worker
83d4a1011f Snap for 11944020 from 4ade1a2615 to 24Q3-release
Change-Id: I0b2c2c5aac0a992b845ae8d011eeca6f01b49d86
2024-06-08 01:03:57 +00:00
Dennis Shen
4ade1a2615 Merge "switch over to use new storage read api instead of server_configurable_flags, this new read api lib will be needed for new codegened aconfig flag lib." into main 2024-06-07 14:16:53 +00:00
Dennis Shen
1b3d66a9fb switch over to use new storage read api instead of
server_configurable_flags, this new read api lib will be needed for new
codegened aconfig flag lib.

Bug: 321077378
Test m and avd

Change-Id: I99307a4ad8f133232cfd8b47058f936445cb7cce
2024-06-07 13:07:42 +00:00
Android Build Coastguard Worker
69a598cb70 Snap for 11938003 from 7b5d247687 to 24Q3-release
Change-Id: I916ed10111bd857712360dda6ea2e6b398e31351
2024-06-06 23:03:31 +00:00
Xin Li
4dfbd6fc86 [automerger skipped] Merge "Merge 2024-06 Release (ab/AP2A.240605.024) to aosp-main-future" into aosp-main-future am: 646c59ec64 -s ours
am skip reason: Merged-In I7582ba278abcb30cebe041f775efe45633a58bad with SHA-1 82bb1a5112 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/27555815

Change-Id: I6987b6972a4afa8958e54879bfcaaad2362946e4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-06 21:37:33 +00:00
Xin Li
b8afbb8234 [automerger skipped] Merge 2024-06 Release (ab/AP2A.240605.024) to aosp-main-future am: afc3cc5de2 -s ours
am skip reason: Merged-In I7582ba278abcb30cebe041f775efe45633a58bad with SHA-1 82bb1a5112 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/27555815

Change-Id: I82ad8f2cbd2af63d183af86c30924e70b0a54f38
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-06 21:36:12 +00:00
Xin Li
646c59ec64 Merge "Merge 2024-06 Release (ab/AP2A.240605.024) to aosp-main-future" into aosp-main-future 2024-06-06 20:54:41 +00:00
Utku Utkan
7b5d247687 Merge "Remove ACCESS_FINE_LOCATION permission pregrant for PCS on Zuma" into main 2024-06-06 17:37:00 +00:00
Jim Tang
4afe14cec9 Make SUPPORT_MULTI_SIM recognizable in bp am: 1f43d128df am: df858c9c6b
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3115579

Change-Id: Ie33600690bfe61b8e867a9cda62361e7e13ece0b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-06 08:35:35 +00:00
Jim Tang
df858c9c6b Make SUPPORT_MULTI_SIM recognizable in bp am: 1f43d128df
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3115579

Change-Id: I738f8061af6233116654c1a3f0af121b90308e89
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-06 08:16:01 +00:00
Jim Tang
1f43d128df Make SUPPORT_MULTI_SIM recognizable in bp
This commit establishes a soong config variable `sim_count` for
easier converting Android.mk to Android.bp when dealing with multiple
SIMs.

Bug: 343823190
Test: presubmit
Change-Id: I93d355e30771868f1c4664eebbce579e1e37cdcb
2024-06-06 15:02:16 +08:00
Android Build Coastguard Worker
f82350775f Snap for 11931036 from 667f2a4670 to 24Q3-release
Change-Id: Ic2fcc14b412ecc37c4af6ebece36aac9be32843f
2024-06-05 23:08:22 +00:00
Android Build Coastguard Worker
bbdbad2c7c Snap for 11931036 from ba06b04b9e to 24Q3-release
Change-Id: I3a3af357084ffda402d0fc075c206826c853c70d
2024-06-05 23:08:21 +00:00
Wesley Lee
cda0de8c3b enable Zuma AV1 HDR editing
Bug: 345301797

Change-Id: I06ceeaadd67e5c3bf5118ab33217b2fcfb554b2b
Signed-off-by: Wesley Lee <szuweilee@google.com>
2024-06-05 15:43:20 -07:00
Xin Li
afc3cc5de2 Merge 2024-06 Release (ab/AP2A.240605.024) to aosp-main-future
Bug: 343100748
Merged-In: I7582ba278abcb30cebe041f775efe45633a58bad
Change-Id: I687291c5b9c17cb27f13fde59370d91ced06ee09
2024-06-05 14:12:12 -07:00
Kelvin Zhang
ba06b04b9e Merge "Use dump.f2fs to extract files from efs partitions" into main 2024-06-05 16:05:21 +00:00
Utku Utkan
e2155d5cc4 Remove ACCESS_FINE_LOCATION permission pregrant for PCS on Zuma
FLAG: EXEMPT Cleanup of obsolete permission pregrant

Bug: 345021501
Test: m && flashall
Change-Id: Ia59acea79baadb45083adc76f52d62a0fb184762
2024-06-05 05:00:19 +00:00
Kelvin Zhang
667f2a4670 Allow copy_efs_files_to_data to read efs block devices
Previously, we rely on mount points to copy files out of
efs partitions. Switch over to dump.f2fs to read directly
from block device without mounting. This allows us to copy
files out of efs partition in both 4K and 16K mode.

Test: Boot ext4 device with dev option enabled
Bug: 340965747
Change-Id: Ie3108319cfdb5d922a18863de7431c3cfcc4cf16
2024-06-04 16:49:42 -07:00
Kelvin Zhang
e3ed1eabdf Use dump.f2fs to extract files from efs partitions
Previously, we rely on mount points to copy files out of
efs partitions. Switch over to dump.f2fs to read directly
from block device without mounting. This allows us to copy
files out of efs partition in both 4K and 16K mode.

Test: Boot dev option enabled ext4 device
Bug: 340965747
Change-Id: I9d3f3d5200adc31f13298488b5be068b0fe7c7f4
2024-06-04 10:02:36 -07:00
Android Build Coastguard Worker
fafd41772c Snap for 11914274 from e0129184f3 to 24Q3-release
Change-Id: I53a69c86f29b71f2bd2fddd5acd8e03a9b9b5fa3
2024-06-01 01:03:32 +00:00
Android Build Coastguard Worker
380a00046a Snap for 11915075 from 79e1531622 to 24Q4-release
Change-Id: I33710600a44bc9372a6e2d8f33e0e21a4d797728
2024-06-01 01:03:23 +00:00
Android Build Coastguard Worker
492a60f283 Snap for 11915075 from e0129184f3 to 24Q4-release
Change-Id: I311430e4a163db4abad5b113cb13a799022bc828
2024-06-01 01:03:22 +00:00
Treehugger Robot
e0129184f3 Merge "Add BT offload AOC services for Zuma" into main 2024-05-31 08:45:20 +00:00
Treehugger Robot
db78dab97e Merge "Only copy EFS files if /data is on ext4" into main 2024-05-30 23:52:34 +00:00
Kelvin Zhang
5978809ae7 Only copy EFS files if /data is on ext4
This reduces the amount of computation needed on critical
boot path for F2FS devices. Boot time is expected to improve
with this patch.

Bug: 341216848
Test: boot device with ext4 and f2fs
Change-Id: I7311a22a7bf9773d3909656d98cc578a43cb9477
2024-05-30 16:08:24 -07:00
Android Build Coastguard Worker
2a661c558a Snap for 11908474 from 79e1531622 to 24Q3-release
Change-Id: I38da6fde5b6332366a927e30ed83a61081cf3cb6
2024-05-30 23:03:35 +00:00
Android Build Coastguard Worker
1d78a43cab Snap for 11908474 from 905072c846 to 24Q3-release
Change-Id: I4c873a28044659fee8f8fa11653116f16676a813
2024-05-30 23:03:34 +00:00
Dmitry Skiba
905072c846 Merge "Revert "Restrict kcompactd thread to middle/little cores."" into main 2024-05-30 18:50:17 +00:00
Madhav Iyengar
5cdbd02063 Add BT offload AOC services for Zuma
Bug: 342415506
Test: Works with other CLs in topic.

Change-Id: Iadf8bc7baedf0b798de673735a6925f60b992646
2024-05-30 18:11:31 +00:00
Dmitry Skiba
721a8358c6 Revert "Restrict kcompactd thread to middle/little cores."
This reverts commit ef68e9b578.

Reason for revert: avoid 24Q3 (will reland later)

Bug: 340872453
Change-Id: Ia217c0e0f03035267a5b53e3dadaffc4e8febfd3
2024-05-30 16:38:22 +00:00
Zining Jiang
a45c09e380 Merge "[Scone] add BLUETOOTH_CONNECT to SCONE default permission" into main 2024-05-30 08:58:55 +00:00
jiangzining
ed630d88aa [Scone] add BLUETOOTH_CONNECT to SCONE default permission
MBA Approval: b/330640278
Bug: b/343608940
Test: Build and Flash

Change-Id: I93c68928990985244993b0d66edcfc4e05a669be
2024-05-30 15:20:22 +08:00
Android Build Coastguard Worker
e3a178da81 Snap for 11902131 from 090928722e to 24Q3-release
Change-Id: Ic24673ab0c63239952bf61b92e634b8b7fdb9cce
2024-05-29 23:03:42 +00:00
Dmitry Skiba
5e26ee65f8 Merge "Restrict kcompactd thread to middle/little cores." into main 2024-05-29 22:54:36 +00:00
Cyan_Hsieh
0f8c1340d4 Switch makefile owners to MK_OWNERS am: 86e9f51a58 am: 750d77c19f
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3106782

Change-Id: Idf76a53bdeca73ccd83c968548784a8d9dc19153
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-29 22:00:00 +00:00
Xin Li
edd718893b [automerger skipped] Merge Android 24Q2 Release (ab/11526283) to aosp-main-future am: dd443fbb75 -s ours
am skip reason: Merged-In Ifd5f1b609c0bf5fa98677f9880bfa29496add95d with SHA-1 45b0145f0c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/27270053

Change-Id: I3ff1268af0f6cf0a7a236b8151770d6e7a3670a8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-29 20:48:24 +00:00
Xin Li
79e1531622 [automerger skipped] Merge Android 24Q2 Release (ab/11526283) to aosp-main-future am: 42aa8de219 -s ours
am skip reason: Merged-In I56143303453cce01d812997ed4a06d815f2a6859 with SHA-1 97a16aff57 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/27273322

Change-Id: Ib48cb1570130e89e98ce755f22b4b222be981e69
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-29 19:46:13 +00:00
Cyan_Hsieh
750d77c19f Switch makefile owners to MK_OWNERS am: 86e9f51a58
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3106782

Change-Id: If1a015f6f3bba24c4f5e2fa3b8f2f610d57a7903
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-29 14:29:14 +00:00
Cyan_Hsieh
86e9f51a58 Switch makefile owners to MK_OWNERS
Bug: 278167548
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:621df82f7af10ff85fa290af75c729f734cb2938)
Merged-In: I7c3083ad4d881334c6f8f78d89b6a31fcd46c42e
Change-Id: I7c3083ad4d881334c6f8f78d89b6a31fcd46c42e
2024-05-29 10:00:58 +00:00
chenkris
090928722e Add sepolicy for fingerprint HAL to check NSP file
Fix the following avc denials:
avc:  denied  { search } for  name="copied" dev="dm-58" ino=428
scontext=u:r:hal_fingerprint_default:s0
tcontext=u:object_r:modem_efs_image_file:s0 tclass=dir

avc:  denied  { search } for  name="persist" dev="dm-58" ino=443
scontext=u:r:hal_fingerprint_default:s0
tcontext=u:object_r:persist_file:s0 tclass=dir

avc:  denied  { search } for  name="ss" dev="dm-58" ino=445
scontext=u:r:hal_fingerprint_default:s0
tcontext=u:object_r:persist_ss_file:s0 tclass=dir

avc:  denied  { read } for  name="nsp" dev="dm-58" ino=15500
scontext=u:r:hal_fingerprint_default:s0
tcontext=u:object_r:persist_ss_file:s0 tclass=file

avc:  denied  { open } for  path="/data/vendor/copied/persist/ss/nsp"
dev="dm-58" ino=15500
scontext=u:r:hal_fingerprint_default:s0
tcontext=u:object_r:persist_ss_file:s0 tclass=file

Bug: 335525798
Test: Use UDFPS repair tool to update calibration files
Change-Id: Ic233a07ced8fd828c0e4b4ae1cffa93763a83b42
2024-05-29 04:39:37 +00:00
Dmitry Skiba
ef68e9b578 Restrict kcompactd thread to middle/little cores.
Bug: 340872453
Test: Confirmed kcompactd affinity with taskset -p
Change-Id: I1cc92927dfc22d878819010aa2e9f01b5a3b8851
Signed-off-by: Dmitry Skiba <dskiba@google.com>
2024-05-28 23:50:44 +00:00
Leo Chen
7c30487eff Update IDisplay to V12
Test: trigger test build
Bug: 309897479
Change-Id: I5f6fb353f1096d600ddbe3a985bd30caf1df97b6
Signed-off-by: Leo Chen <yinchiuan@google.com>
2024-05-23 06:42:16 +00:00
Android Build Coastguard Worker
804c39b6fc Snap for 11859356 from ba614b35b9 to 24Q3-release
Change-Id: Ifa43f35c8f6cf58642f140f1e7ffb2557a0cb641
2024-05-18 03:03:23 +00:00
Sungtak Lee
ba614b35b9 Merge "Remove codec2 hidl fragments" into main 2024-05-17 06:25:28 +00:00
Android Build Coastguard Worker
3271f0670d Snap for 11853201 from 80cb09b4c4 to 24Q3-release
Change-Id: I08bec837c6023583099ae9f028ba742cb0a43833
2024-05-17 01:03:18 +00:00
Sungtak Lee
629eabc6c5 Remove codec2 hidl fragments
Bug: 321808716
Change-Id: Iaf80f2c61cb3d9f1b1761e33ecf92ccc27ad3423
2024-05-16 21:31:54 +00:00
Jerry Huang
80cb09b4c4 Merge "zuma: update performance point based on AP3A.240513.001" into main 2024-05-16 06:34:42 +00:00
Android Build Coastguard Worker
5ddd7b5615 Snap for 11847214 from cdc4acc647 to 24Q3-release
Change-Id: I92a3c51fda5a9033640caa6fdfecd5577b58a8f9
2024-05-16 01:03:55 +00:00
Android Build Coastguard Worker
0145d37546 Snap for 11847214 from ab17b46c51 to 24Q3-release
Change-Id: Id969f480868fbd9f08ead7b3f9d94798ca9dfa0b
2024-05-16 01:03:54 +00:00
Kelvin Zhang
ab17b46c51 Merge "Allow devices to pick ext4 as default fs at build time" into main 2024-05-15 06:08:46 +00:00
Wilson Sung
cdc4acc647 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 340722729
Change-Id: I8f11ea5848724f18765cca2dda91a7d916b82f72
2024-05-15 03:50:08 +00:00
Treehugger Robot
1f3594dafe Merge "Split zuma fstab into two files" into main 2024-05-14 23:05:08 +00:00
Android Build Coastguard Worker
95a907c784 Snap for 11840485 from b15e00e8f5 to 24Q3-release
Change-Id: Iea27b67ac59b9aafefc8ac6951eb4e971c7d7249
2024-05-14 23:03:43 +00:00
Kelvin Zhang
5a679bbf76 Allow devices to pick ext4 as default fs at build time
Products using 16KB kernel may wish to boot into 16KB mode
directly. To do this, these targets would need to use ext4
as their default fs type for /data and /metadata . Add
a build time flag which would install ext4 fstabs.

Test: th
Bug: 339337171
Change-Id: I53de1599bbff583b45ca2bf6d3e3efb83957913e
2024-05-14 15:42:14 -07:00
Kelvin Zhang
c542bcfd03 Split zuma fstab into two files
Common fstab entries(everything but /metadata and /data) are
moved to a separate fstab file.
This allows us to create an ext4 variant of the same fstab later.

Test: device boots
Bug: 339337171
Change-Id: I3129551c98b14473c776f2cf3dee1b81fc0c84b3
2024-05-14 10:03:27 -07:00
Jerry Huang
f6025c54da zuma: update performance point based on AP3A.240513.001
Bug: 335350051
Test: CtsMediaDecoderTestCases android.media.decoder.cts.VideoDecoderPerfTest
Change-Id: I54a234ec6f3b1ed59087aacb0e2855477492584e
2024-05-14 09:25:51 +00:00
Joerg Wagner
b15e00e8f5 Merge "Use 2024-03-01 deqp levels for GLES and Vulkan" into main 2024-05-14 08:55:11 +00:00
Treehugger Robot
fe169c6406 Merge "Set default pin amount for home app" into main 2024-05-13 22:59:01 +00:00
Edgar Arriaga
f8a1670819 Set default pin amount for home app
Bug: 288900050
Test: dumpsys pinner
Flag: EXEMPT refactor

Change-Id: I86a1bd0a82513e8b45247b6fc12d4cd7a552d7db
2024-05-13 19:55:06 +00:00
Android Build Coastguard Worker
7d3783cafd Snap for 11828632 from 213da03c2b to 24Q3-release
Change-Id: Ic9661412ad8dd5fd52d5bee81a4ccc61244e2fc0
2024-05-11 01:03:49 +00:00
Pawan Wagh
213da03c2b Use lzo-rle for 16kb page kernel
Test: Checked zram compression with 4KB and 16KB kernel
======== Using 4KB kernel================
$ adb shell getconf PAGE_SIZE
4096
$ adb shell cat  /sys/block/zram0/comp_algorithm
[lz77eh] zstd deflate lz4 lzo-rle lzo
======== Using 16KB kernel================
$ adb root
restarting adbd as root
$ adb shell cat  /sys/block/zram0/comp_algorithm
lz77eh zstd deflate lz4 [lzo-rle] lzo
$ adb shell getconf PAGE_SIZE
16384

Bug: 316158358
Change-Id: I068cf4f9ab9a1fdc36f141a1de6f4ea293db9d6f
2024-05-10 01:13:39 +00:00
Android Build Coastguard Worker
3cf66743b8 Snap for 11822896 from 0455a656b7 to 24Q3-release
Change-Id: I0fde4ac1f034c84f2816e6a93e1b2fb149bdbeeb
2024-05-09 23:08:20 +00:00
Android Build Coastguard Worker
76b26c58c0 Snap for 11822896 from 0f9fe30938 to 24Q3-release
Change-Id: I70540a24dca25195966a4087120cfb70075cebbf
2024-05-09 23:08:20 +00:00
Shiyong Li
0f9fe30938 Merge "Add sepolicy for power_state node" into 24D1-dev am: eaa2a2ee8c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/27056931

Change-Id: Ib3a211c40b3ce8fbade8ceb2c72b99ef2277191c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-09 05:21:44 +00:00
Shiyong Li
0455a656b7 Merge "Add sepolicy for power_state node" into 24D1-dev am: 7107af6af0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/27057168

Change-Id: Iebbdf2275b4d0460ac58100db1ab1b865ed63d04
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-09 05:21:38 +00:00
Shiyong Li
eaa2a2ee8c Merge "Add sepolicy for power_state node" into 24D1-dev 2024-05-09 05:16:16 +00:00
Shiyong Li
7107af6af0 Merge "Add sepolicy for power_state node" into 24D1-dev 2024-05-09 05:16:16 +00:00
Android Build Coastguard Worker
484aa51f46 Snap for 11816316 from 3cbe2de42c to 24Q3-release
Change-Id: Ie8473a1799c576146469fb16e1b69fee74368d13
2024-05-08 23:03:38 +00:00
Android Build Coastguard Worker
e6a84d76eb Snap for 11816316 from b41d97bc37 to 24Q3-release
Change-Id: I175dae19ad4c205f92add3c661c769eac9029607
2024-05-08 23:03:38 +00:00
Jörg Wagner
76717decdc Use 2024-03-01 deqp levels for GLES and Vulkan
Bug: 327589279
Change-Id: If76465a473a582a7c5f2502872876b3a682eacc0
2024-05-08 18:46:13 +00:00
Treehugger Robot
fbf479dae5 Merge changes from topic "revert-27206172-revert-26822004-SXUPLCUANW-MLEHIGOHIM" into main
* changes:
  Reland: Copy persist partition files to /data on boot
  Reland: Copy files on EFS partition to /data on boot
2024-05-08 16:13:27 +00:00
Treehugger Robot
bc68fdd684 Merge "Reland: Add necessary sepolicy for convert_modem_to_ext4" into main 2024-05-08 16:13:27 +00:00
Treehugger Robot
b41d97bc37 Merge "Update IDisplay to V11-V12" into main 2024-05-08 10:02:13 +00:00
Leo Chen
388bdee3f5 Update IDisplay to V11-V12
V12 is not frozen yet. We should still allow V11 for `next` build.

Test: trigger test build
Bug: 309897479
Bug: 303162192
Change-Id: I14582a51cde66698013b275ec1d668f858ad7cba
Signed-off-by: Leo Chen <yinchiuan@google.com>
2024-05-08 08:48:46 +00:00
KRIS CHEN
3cbe2de42c Merge "Allow fingerprint to access the folder /data/vendor/fingerprint" into main 2024-05-08 08:46:30 +00:00
chenkris
4035d467ad Allow fingerprint to access the folder /data/vendor/fingerprint
Fix the following avc denial:
android.hardwar: type=1400 audit(0.0:20): avc:  denied  { write } for  name="fingerprint" dev="dm-56" ino=36703 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:vendor_data_file:s0 tclass=dir permissive=0

Bug: 267766859
Test: Tested fingerprint under enforcing mode
Change-Id: Iadd058432b7db8c20a949aeda1df5f8309663004
2024-05-08 06:48:41 +00:00
Kelvin Zhang
4bc3f5a338 Reland: Copy persist partition files to /data on boot
Since /persisit was previously mounted during eraly-init stage,
this CL delays the /persist mount to post-fs-data stage.
Actions which depends on the /persist partition are also moved.

Bug: 319335586
Change-Id: I6bcc775f16331905c6896f3a2ec5bbea9e20744f
2024-05-07 21:31:13 -07:00
Kelvin Zhang
b08f8dbf23 Reland: Copy files on EFS partition to /data on boot
During boot, this CL adds the following sequence of actions:

1. mount original efs partitions(most likely f2fs) on /mnt/vendor/efs
2. copy files in /mnt/vendor/efs to /data/vendor/copied/efs.img
3. fsync all the files in /data/vendor/copied/efs.img
4. rename /data/vendor/copied/efs.img to /data/vendor/copied/efs
5. bind-mount /data/vendor/copied/efs to /mnt/vendor/efs
6. repeat 1-5 for efs_backup and modem_userdata

The original EFS partitions are mounted and only used for file
copying, no destructive action done on original efs partitions.

Test: reformat /data as ext4, boot the device
Bug: 319335586
Change-Id: Ide78be316778acfc5c582c4a7b78853796cf4c1e
2024-05-07 21:31:13 -07:00
Android Build Coastguard Worker
285014e29f Snap for 11811809 from 7c7e028271 to 24Q3-release
Change-Id: Ibab44877c605889491073f4547e5ccd70ded8270
2024-05-07 23:03:59 +00:00
Android Build Coastguard Worker
fe3d51e4fe Snap for 11811809 from 4053a85fe7 to 24Q3-release
Change-Id: Icab9527fb8247df2b17ebe1b4697d5e98934fc66
2024-05-07 23:03:58 +00:00
Kelvin Zhang
be41aa688e Reland: Add necessary sepolicy for convert_modem_to_ext4
The original CL was reverted because it references
enable_16k_pages_prop, which is only available on board API level >
202504.

This reland removes enable_16k_pages_prop usage, and worked around it by
reading PRODUCT_16K_DEVELOPER_OPTION at build time.

Test: reformat data as ext4, reboot
Bug: 293313353
Change-Id: Ibd8f57d1ef4fd2b0fd8b4170153d57fe9a9cefc2
2024-05-07 13:24:15 -07:00
Pechetty Sravani
7c7e028271 Merge "Revert "Add necessary sepolicy for convert_modem_to_ext4"" into main 2024-05-07 13:08:44 +00:00
Pechetty Sravani
2bf59857da Revert "Add necessary sepolicy for convert_modem_to_ext4"
Revert submission 26822004

Reason for revert: <Potential culprit for b/339099720- verifying through ABTD before revert submission. This is part of the standard investigation process, and does not mean your CL will be reverted.>

Reverted changes: /q/submissionid:26822004

Change-Id: I90e3bf5ecbdf6c058c56293cfba59c628ccc7aba
2024-05-07 08:50:45 +00:00
Pechetty Sravani
4053a85fe7 Revert "Copy files on EFS partition to /data on boot"
Revert submission 26822004

Reason for revert: Potential culprit for b/339099720- verifying through ABTD before revert submission. This is part of the standard investigation process, and does not mean your CL will be reverted.

Reverted changes: /q/submissionid:26822004

Change-Id: Ie9598a3b3b56c8ce26f475079798c44314696f44
2024-05-07 07:19:37 +00:00
Pechetty Sravani
327973016e Revert "Copy persist partition files to /data on boot"
Revert submission 26822004

Reason for revert: Potential culprit for b/339099720- verifying through ABTD before revert submission. This is part of the standard investigation process, and does not mean your CL will be reverted.

Reverted changes: /q/submissionid:26822004

Change-Id: I744fccbf1aacd817ca1a0c6f4a121393307c8797
2024-05-07 07:19:37 +00:00
Treehugger Robot
20f1383abd Merge "Add necessary sepolicy for convert_modem_to_ext4" into main 2024-05-06 23:19:28 +00:00
Android Build Coastguard Worker
84c5f5e3b5 Snap for 11806096 from 76caf6b954 to 24Q3-release
Change-Id: Ibfcb4a23bbb9d2fe1a0c6512ec65ef2c95ef360e
2024-05-06 23:03:44 +00:00
Kelvin Zhang
62b3d171c7 Copy persist partition files to /data on boot
Since /persisit was previously mounted during eraly-init stage,
this CL delays the /persist mount to post-fs-data stage.
Actions which depends on the /persist partition are also moved.

Bug: 319335586
Change-Id: I0e70f672b9a5f4b05b95dd30b0a74bb8f91f399a
2024-05-06 15:27:46 -07:00
Kelvin Zhang
7251274bee Copy files on EFS partition to /data on boot
During boot, this CL adds the following sequence of actions:

1. mount original efs partitions(most likely f2fs) on /mnt/vendor/efs
2. copy files in /mnt/vendor/efs to /data/vendor/copied/efs.img
3. fsync all the files in /data/vendor/copied/efs.img
4. rename /data/vendor/copied/efs.img to /data/vendor/copied/efs
5. bind-mount /data/vendor/copied/efs to /mnt/vendor/efs
6. repeat 1-5 for efs_backup and modem_userdata

The original EFS partitions are mounted and only used for file
copying, no destructive action done on original efs partitions.

Test: reformat /data as ext4, boot the device
Bug: 319335586
Change-Id: I4c4024b4cad18199226f5644f98254b2230574d6
2024-05-06 15:27:46 -07:00
Xin Li
42aa8de219 Merge Android 24Q2 Release (ab/11526283) to aosp-main-future
Bug: 337098550
Merged-In: I56143303453cce01d812997ed4a06d815f2a6859
Change-Id: I61f611a2fcb900fcb4bb035c2abfbb19a840fddb
2024-05-06 12:09:17 -07:00
Xin Li
dd443fbb75 Merge Android 24Q2 Release (ab/11526283) to aosp-main-future
Bug: 337098550
Merged-In: Ifd5f1b609c0bf5fa98677f9880bfa29496add95d
Change-Id: I15da0840ac7291b41519ae4ae82b09b3c6b5148f
2024-05-06 12:09:17 -07:00
Kelvin Zhang
39eccba58f Support booting on ext4 for zuma devices
When a user opts into 16K developer option, we would need to convert the
/data and /metadata partition into ext4. Add necessary fstab entries for
ext4 so that zuma devices can boot on ext4.

This CL does not automatically switch existing devices to ext4, the
newly added fstab entries are intentionally marked as "non-formattable",
so that we don't accidentally format a wiped device as ext4. This CL
merely allows the device to boot if the /data partition is already
formatted as ext4.

Test: adb shell cmd recovery wipe ext4 , make sure device boots
Bug: 293313353
Change-Id: I3a2a2e9d09cdea884f58b509a06c6829938dc369
2024-05-06 09:05:09 -07:00
Android Build Coastguard Worker
eae37991ed Snap for 11800966 from 736faaf9d3 to 24Q3-release
Change-Id: I7452f786627ecefc4827afc6859c57aae7bf9edb
2024-05-04 01:03:49 +00:00
Jaegeuk Kim
76caf6b954 Adjust the fstab option for ZUFS
Bug: 336319772
Change-Id: Ic3088e693d4dd9f784215da27a5c4b6c47759ef2
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
2024-05-03 09:58:17 -07:00
Spade Lee
736faaf9d3 pixelstats: zuma: add all logbuffer paths am: 17b87611d9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/27101371

Change-Id: I05911df01e73efd658b4a45f325ff2254ddc1e6b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-03 05:24:16 +00:00
Android Build Coastguard Worker
6e0d641ac1 Snap for 11778614 from 104dda15e3 to 24Q3-release
Change-Id: I836b6b4b0b97dc18c148576405a56f93ba434a2a
2024-04-29 23:03:36 +00:00
Treehugger Robot
104dda15e3 Merge "Update USES_LASSEN_MODEM soong config settings for aosp projects." into main am: fca2c9d122 am: 646464efa7
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3037358

Change-Id: I2520734af8b8bacbd30d07064f6bc71f2b8cd020
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-29 09:59:33 +00:00
Treehugger Robot
646464efa7 Merge "Update USES_LASSEN_MODEM soong config settings for aosp projects." into main am: fca2c9d122
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3037358

Change-Id: I34b248f1d76b8b90079f775a9c6c76bf3265fea5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-29 09:42:17 +00:00
Treehugger Robot
fca2c9d122 Merge "Update USES_LASSEN_MODEM soong config settings for aosp projects." into main 2024-04-29 09:25:56 +00:00
Herbert Xue
34b4efdcc8 Update USES_LASSEN_MODEM soong config settings for aosp projects.
Add the flag "use_lassen_modem" for bp to do the same checking like
"USES_LASSEN_MODEM" in mk.

Bug: 330654744
Test: 1. lunch aosp_cheetah-trunk_staging-userdebug
      2. m RilConfigService
Change-Id: I4ef0fe469e98fa6315896bbe8c422f741e207664
2024-04-29 16:26:24 +08:00
Qian-Hao Huang
52494655a6 zuma: Change the path of prebuilt fips140.ko
Placing the fips140.ko at the same level as other kernel modules makes
it easier for automation tools to handle all of them.

Bug: 331791671
Change-Id: Id6d978afbd18f98f2a07d418c405699885c05bf0
Signed-off-by: Qian-Hao Huang <qhhuang@google.com>
2024-04-29 06:49:55 +00:00
Spade Lee
17b87611d9 pixelstats: zuma: add all logbuffer paths
Bug: 335934710
Change-Id: I79f65bc1069402a721bf75f97d6973c066a002a9
Signed-off-by: Spade Lee <spadelee@google.com>
2024-04-29 01:39:04 +00:00
Android Build Coastguard Worker
bf1b178808 Snap for 11766482 from 2247b84115 to 24Q3-release
Change-Id: Iaf95c2df7159aac26fbfb251c75fb9d784e4ded5
2024-04-25 23:03:42 +00:00
Android Build Coastguard Worker
995e522871 Snap for 11766482 from b823c7afcb to 24Q3-release
Change-Id: If406253dc3fa4d0a811f713211b673faa24862e0
2024-04-25 23:03:41 +00:00
Enzo Liao
b823c7afcb [automerger skipped] Merge "Apply common SELinux policies related to ramdumps and coredumps to zuma." into 24D1-dev am: b149c66beb -s ours
am skip reason: Merged-In I9f0d29ef69dc88cb8e876e37aac09ed7331c79b7 with SHA-1 f8c54e9912 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/27046269

Change-Id: Ifa42ada09fb3d458c02ab9e9f4e3e582b9bc2969
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-25 08:31:23 +00:00
Enzo Liao
2247b84115 [automerger skipped] Merge "Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common." into 24D1-dev am: c3c5b0fb90 -s ours
am skip reason: Merged-In Id42c4de6c29d4a95f8a68a5732c4732edfb71da8 with SHA-1 df85139d17 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/27046738

Change-Id: I74a2603921e024818214cdd40206f83cadcb6b40
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-25 08:31:17 +00:00
Enzo Liao
1f246cdd5a [automerger skipped] Apply common SELinux policies related to ramdumps and coredumps to zuma. am: 54d3a9babc -s ours
am skip reason: Merged-In I9f0d29ef69dc88cb8e876e37aac09ed7331c79b7 with SHA-1 f8c54e9912 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/27046269

Change-Id: I19412558e18de4d9c4ea4db61abefb24250ab092
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-25 08:31:15 +00:00
Enzo Liao
146d62c821 [automerger skipped] Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common. am: 7c420c0703 -s ours
am skip reason: Merged-In Id42c4de6c29d4a95f8a68a5732c4732edfb71da8 with SHA-1 df85139d17 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/27046738

Change-Id: Ic8c15dba652af326c8860b4de81f42ea204c93b0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-25 08:31:13 +00:00
Enzo Liao
b149c66beb Merge "Apply common SELinux policies related to ramdumps and coredumps to zuma." into 24D1-dev 2024-04-25 08:22:07 +00:00
Enzo Liao
c3c5b0fb90 Merge "Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common." into 24D1-dev 2024-04-25 08:22:06 +00:00
Spade Lee
6efbf8b937 [automerger skipped] pixelstats: zuma: add history validation path am: e5daed552d -s ours
am skip reason: Merged-In Ia134e6b6b8dc0c9db35bcf36bed700b67466f353 with SHA-1 a4b4967c03 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/27095803

Change-Id: I9dd62a738903955b528b09043c52f6c4d6375b26
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-25 08:20:31 +00:00
Spade Lee
9d059a073d [automerger skipped] pixelstats_vendor: add logbuffer_device r_file_perms am: 52df1a478b -s ours
am skip reason: Merged-In Ieca53f3092355c72784d4216c138cbb7cc9c7fa4 with SHA-1 3f707d13c2 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/27094861

Change-Id: I27d28e4e8b14f71a16aba5f7de9b8874d205e708
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-25 08:20:29 +00:00
Chungro Lee
40688b57ec [automerger skipped] pixelstats: move learning/model load path to sysfs am: b9d89f2a98 -s ours
am skip reason: Merged-In I91039ce3a8ee4630a76113ef7ae6be3bc6908f64 with SHA-1 c0f9207cf5 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/27095802

Change-Id: I467d0bf7a406567daacc4331ad5ff246e3142279
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-25 08:20:29 +00:00
Spade Lee
52df1a478b pixelstats_vendor: add logbuffer_device r_file_perms
avc: denied { read } for name="logbuffer_maxfg_monitor" dev="tmpfs" ino=1034 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=0

Bug: 329174074
Test: no denied log, and able to read logbuffer in pixelstats_vendor
Signed-off-by: Spade Lee <spadelee@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:3f707d13c29300fab31a1ba6a8657771ba4946a8)
Merged-In: Ieca53f3092355c72784d4216c138cbb7cc9c7fa4
Change-Id: Ieca53f3092355c72784d4216c138cbb7cc9c7fa4
2024-04-25 06:11:20 +00:00
Spade Lee
e5daed552d pixelstats: zuma: add history validation path
Bug: 329174074
Signed-off-by: Spade Lee <spadelee@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:a4b4967c038aad263bc75f9248a7850355af62a1)
Merged-In: Ia134e6b6b8dc0c9db35bcf36bed700b67466f353
Change-Id: Ia134e6b6b8dc0c9db35bcf36bed700b67466f353
2024-04-25 06:11:11 +00:00
Chungro Lee
b9d89f2a98 pixelstats: move learning/model load path to sysfs
Reporting learning(relaxation) and model loading once a day
 * learning and model loading path moved from uevent to
   sysfs collector.

Bug: 329124192
Signed-off-by: Chungro Lee <chungro@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:c0f9207cf5ad3b04ac4c64c844ab85c4a6803aab)
Merged-In: I91039ce3a8ee4630a76113ef7ae6be3bc6908f64
Change-Id: I91039ce3a8ee4630a76113ef7ae6be3bc6908f64
2024-04-25 06:11:02 +00:00
Kevin Ying
a78ae51ef1 Add sepolicy for power_state node
Bug: 329703995
Test: manual - used camera
Change-Id: I1f156fe7f10210b933f360fef771cb37ff3cbedb
Signed-off-by: Kevin Ying <kevinying@google.com>
2024-04-24 19:10:19 +00:00
Android Build Coastguard Worker
5030b5c5eb Snap for 11753769 from c1341de4c3 to 24Q3-release
Change-Id: I6c311ef3f98c6606be02e00a72754bfb027ecfbf
2024-04-23 23:03:53 +00:00
Android Build Coastguard Worker
7cd10f70c5 Snap for 11753769 from 6e58e58324 to 24Q3-release
Change-Id: I7b5e449ddd14b5ab65e353ecbfba9cadc53c7141
2024-04-23 23:03:52 +00:00
Sungtak Lee
6e58e58324 Merge "Reapply "Enable AIDL media.c2"" into main 2024-04-23 19:58:23 +00:00
Sungtak Lee
bfc4292c11 Reapply "Enable AIDL media.c2"
This reverts commit 4f00775b4e.

Bug: 321808716
Change-Id: I5f0b50b5e55924ea7c25f3bcfeabc0a4d5b32ffa
2024-04-23 08:50:23 +00:00
Kevin Ying
52be8e937c Add sepolicy for power_state node
Bug: 329703995
Test: manual - use camera
Change-Id: If9f14980e15a3b936bf2117f066e734ee122d72d
Signed-off-by: Kevin Ying <kevinying@google.com>
2024-04-22 22:20:42 +00:00
Kelvin Zhang
276b386b6f Add necessary sepolicy for convert_modem_to_ext4
Test: reformat data as ext4, reboot
Bug: 293313353
Change-Id: Iede84b1827166f1581d80077fe1c4d93d01a815b
2024-04-22 10:14:13 -07:00
Kelvin Zhang
c1341de4c3 Add necessary sepolicy for ro.vendor.persist.status
This prop will be set to "mounted" after /mnt/vendor/persist mounts.
Need this prop to synchronize different actions in init.rc script.

Test: th
Bug: 319335586
Change-Id: I9e8bd5e875956393d610b7def6be713565543d05
2024-04-22 10:14:12 -07:00
Enzo Liao
7c420c0703 Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common.
New paths (ag/26620507):
  RamdumpService: device/google/gs-common/ramdump_app
  SSRestartDetector: device/google/gs-common/ssr_detector_app

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:df85139d173644b7ec44cb7151845026872a1648)
Merged-In: Id42c4de6c29d4a95f8a68a5732c4732edfb71da8
Change-Id: Id42c4de6c29d4a95f8a68a5732c4732edfb71da8
2024-04-22 03:02:53 +00:00
Enzo Liao
54d3a9babc Apply common SELinux policies related to ramdumps and coredumps to zuma.
Refer: ag/26620507

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:f8c54e99126678b4147885dbcddf7f0a25f1f3a3)
Merged-In: I9f0d29ef69dc88cb8e876e37aac09ed7331c79b7
Change-Id: I9f0d29ef69dc88cb8e876e37aac09ed7331c79b7
2024-04-22 03:02:41 +00:00
Kelvin Zhang
bb210c9c43 Move EFS/persist mount to a separate fstab
Next CLs in this stack will make changes to persist/efs mount process
This CL will first move relevant code to a separate file for easier
review.

To support booting under 16K page size, we need to copy files on
persist partition(F2FS, which does not support 16K page size)
to data partition(which will would be EXT4 for dev option enabled
devices).

Bug: 319335586
Change-Id: I2750eb8b53431037cecc972448799409345f5ca3
2024-04-19 20:22:56 -07:00
Android Build Coastguard Worker
3777402d69 Snap for 11740859 from e028d802db to 24Q3-release
Change-Id: I9c405e3dd289cfc6e83fd57f9cd532a4ef9ff29b
2024-04-20 01:03:18 +00:00
Android Build Coastguard Worker
76e980e515 Snap for 11740859 from 831f38051d to 24Q3-release
Change-Id: Ic08ca931ec86076a5873edd06758aa21beec7459
2024-04-20 01:03:17 +00:00
Priyanka Advani
831f38051d Merge "Revert "Enable AIDL media.c2"" into main 2024-04-19 21:40:43 +00:00
Priyanka Advani
4f00775b4e Revert "Enable AIDL media.c2"
Revert submission 26384060-c2aidl-pixel-enable

Reason for revert: Culprit for b/335892284. Will be verifying through ABTD for confirmation and before submitting the revert.

Reverted changes: /q/submissionid:26384060-c2aidl-pixel-enable

Change-Id: I7b331a48f64b89a19fcedeeae783fe8fc83c22c2
2024-04-19 20:44:19 +00:00
Treehugger Robot
deb2358c5b Merge "Enable AIDL media.c2" into main 2024-04-19 19:09:52 +00:00
Android Build Coastguard Worker
2a14a3a1ee Snap for 11733120 from 76bcb83719 to 24Q3-release
Change-Id: I6841e403508a10493b01313148c18ea3df1fdaaa
2024-04-18 23:03:16 +00:00
Martin Liu
2c344ad3fa move common MM settings to gs common folder
Bug: 332916849
Bug: 309409009
Test: boot
Change-Id: If5515f107b4fb2490d83c2d48c78727bd6f2e51f
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-18 03:49:46 +00:00
Martin Liu
e028d802db move common MM policy to gs common folder
Bug: 332916849
Bug: 309409009
Test: boot
Change-Id: I05803943752f7b021c9d4f97b475b493f6ceadcb
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-18 01:59:46 +00:00
Android Build Coastguard Worker
f773dea246 Snap for 11728787 from 7ba8751e39 to 24Q3-release
Change-Id: Icd30fba115ab9bd9210434bbce5fec831667d580
2024-04-17 23:04:46 +00:00
Shashwat Razdan
76bcb83719 Merge "Revert "Adding android.software.contextualsearch to zuma devices."" into main 2024-04-17 22:44:18 +00:00
Hongyang Jiao
7ba8751e39 Add betterbug.mk to zuma am: 0725eeb711
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/26988195

Change-Id: Id9f23929eeabae57d7c88786388405cad46a3e98
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-17 18:10:56 +00:00
Hongyang Jiao
c14d0d9f3d Merge "Revert "Add betterbug mk to zuma"" into 24D1-dev am: d83bf30cf8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/26631135

Change-Id: I7552511fe6da836a99d40d786d9397ce060ff2ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-17 18:08:41 +00:00
Android Build Coastguard Worker
e30c178598 Snap for 11722130 from d4f04d19cc to 24Q3-release
Change-Id: Id93a911c4a36da3823ab3fe9d05fb64f32681228
2024-04-16 23:03:38 +00:00
Android Build Coastguard Worker
bb667d5fe9 Snap for 11722130 from 93b48f5934 to 24Q3-release
Change-Id: I09bda9ba5e541c840b4eb7b397d99b52a9bef0c8
2024-04-16 23:03:38 +00:00
Hongyang Jiao
0725eeb711 Add betterbug.mk to zuma
Test: manual test
Bug: 322543833
Change-Id: Ibd314393d11b2552b79a7f73cd7ed888e08934b2
2024-04-16 22:57:07 +00:00
Hongyang Jiao
d83bf30cf8 Merge "Revert "Add betterbug mk to zuma"" into 24D1-dev 2024-04-16 22:47:42 +00:00
Android Build Coastguard Worker
010b4d30ba Snap for 11717025 from 99c5c3dc9e to 24Q3-release
Change-Id: Ia28d393a0e96cc5f683a750de017678e3a5ee613
2024-04-15 23:04:08 +00:00
Krzysztof Kosiński
d4f04d19cc Remove rlsservice sepolicy. am: 41c22587a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/26948256

Change-Id: I60d0c43786dc869f9d69ce7c95e2199652efda3a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-15 21:58:31 +00:00
Brian Egizi
93b48f5934 [manual merge] Update health AIDL HAL to V3
Change-Id: I276d38e4085707eaf56e72d848f6906d1f35d2d1
2024-04-15 20:52:16 +00:00
David Lin
bdf13ab632 Merge "Update health AIDL HAL to V3" into 24D1-dev 2024-04-15 10:05:53 +00:00
Kadi Narmamatov
99c5c3dc9e Merge "rsfd: add get_prop for cbd property" into main 2024-04-15 07:36:23 +00:00
Android Build Coastguard Worker
03e8d4cec1 Snap for 11710546 from 32ce8f9878 to 24Q3-release
Change-Id: I6f1ceb11bb6061c3baecc7653ea47488c564eca1
2024-04-13 01:03:44 +00:00
Android Build Coastguard Worker
7f04d5f6ec Snap for 11710546 from 18b05dee0e to 24Q3-release
Change-Id: Ic16b06b46ab63de1e633d41bb06a47337fd13fe8
2024-04-13 01:03:43 +00:00
Krzysztof Kosiński
41c22587a2 Remove rlsservice sepolicy.
rlsservice is not included on zuma and later, only gs101/gs201.
Relevant code search link:
https://source.corp.google.com/h/googleplex-android/platform/superproject/main/+/main:vendor/google/services/LyricCameraHAL/src/apex/Android.bp;l=26;drc=e4b49a6d945df6d5210c35251de8046b162d799d

Bug: 278627483
Test: presubmit
Change-Id: I15398ddeea8c0a10920c987e55789ba4a8322774
2024-04-12 22:03:22 +00:00
Treehugger Robot
18b05dee0e Merge "Disable proactive compaction" into main 2024-04-12 15:03:00 +00:00
Treehugger Robot
32ce8f9878 Merge "allow vendor init to access compaction_proactiveness" into main 2024-04-12 15:03:00 +00:00
David Lin
5fdc059a2f [automerger skipped] Merge "Update health AIDL HAL to V3" into 24D1-dev am: ab17ee2548 -s ours
am skip reason: Merged-In I7582ba278abcb30cebe041f775efe45633a58bad with SHA-1 40f89b2d46 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/26744569

Change-Id: I50e8d53be6e5c869b50eb6e31493b3a4ce36785a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-12 05:27:35 +00:00
Jack Wu
a06bf9cb25 [automerger skipped] Update health AIDL HAL to V3 am: c59a55ffc8 -s ours
am skip reason: Merged-In I7582ba278abcb30cebe041f775efe45633a58bad with SHA-1 40f89b2d46 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/26744569

Change-Id: Ib776182bbe6868745bca2a4a66b9480bca2df3ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-12 05:27:29 +00:00
David Lin
ab17ee2548 Merge "Update health AIDL HAL to V3" into 24D1-dev 2024-04-12 05:08:32 +00:00
Jack Wu
c59a55ffc8 Update health AIDL HAL to V3
Bug:<b/328327545>
Test: TH
Test: vts-tradefed run vts -m vts_treble_vintf_vendor_test
Signed-off-by: Jack Wu <wjack@google.com>
(cherry picked from https://android-review.googlesource.com/q/commit:40f89b2d464071389d395f39928ef0e6d99bf2fb)
Merged-In: I7582ba278abcb30cebe041f775efe45633a58bad
Change-Id: I7582ba278abcb30cebe041f775efe45633a58bad
24D1-dev is based on 24Q2-release. Therefore, we merged this CL to 24D1-dev.
2024-04-12 05:08:15 +00:00
Android Build Coastguard Worker
69508f7e60 Snap for 11704135 from 4104efb34f to 24Q3-release
Change-Id: I0cbb8ce7b17dc084e4ac1143b50303e876b949aa
2024-04-11 23:03:30 +00:00
Android Build Coastguard Worker
2d635d6485 Snap for 11704135 from f8a4bd6ce1 to 24Q3-release
Change-Id: Ib0a179e89389eee1a86b1f9bad9c6ed3185e7df4
2024-04-11 23:03:28 +00:00
Treehugger Robot
c462243219 Merge "Zuma: disable compression on apex" into main 2024-04-11 21:58:15 +00:00
Jaegeuk Kim
6f61b2f689 Zuma: disable compression on apex
Compression on apex disables direct IO for loopback, which introduces
double buffering and longer latency.

Bug: 298717358
Change-Id: I3b1de10f17931bec7769947bad62a22637a8a528
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
2024-04-11 21:57:05 +00:00
Enzo Liao
f8a4bd6ce1 Merge "Apply common SELinux policies related to ramdumps and coredumps to zuma." into main 2024-04-11 02:03:27 +00:00
Enzo Liao
4104efb34f Merge "Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common." into main 2024-04-11 02:03:26 +00:00
Martin Liu
625450137c Disable proactive compaction
From field data, sometimes kcompactd is
pretty activated and can impact critical
CUJs. Disable it first to mitigate the
impact.

Bug: 332916849
Test: boot
Change-Id: I87cdcf184afb5fe10e873162b94bd3bf54b1acbd
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-11 00:14:29 +00:00
Martin Liu
fb44539d8d allow vendor init to access compaction_proactiveness
Bug: 332916849
Test: boot
Change-Id: If1930fe0f174f2794296ded69d29420f2e59f6c2
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-10 23:34:49 +00:00
Android Build Coastguard Worker
55a014e1c8 Snap for 11697857 from 13c3ad1dc2 to 24Q3-release
Change-Id: Ifcf7e77c68aefc39e2ea285a50691068ddec66f7
2024-04-10 23:03:28 +00:00
Wen Chang Liu
13c3ad1dc2 Merge "update odd resolution support in vpx and av1 codecs" into main 2024-04-10 11:20:37 +00:00
kadirpili
22844d59ca rsfd: add get_prop for cbd property
Bug: 323086582

Test: flash ROM and check for rfsd sepolicy logs

Change-Id: I6f8c555614386fda784b4532a4b004d5fe857bc6
2024-04-10 05:52:54 +00:00
Enzo Liao
df85139d17 Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common.
New paths (ag/26620507):
  RamdumpService: device/google/gs-common/ramdump_app
  SSRestartDetector: device/google/gs-common/ssr_detector_app

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
Change-Id: Id42c4de6c29d4a95f8a68a5732c4732edfb71da8
2024-04-08 19:21:13 +08:00
Daniel Chapin
e47d4c3767 Revert "Add betterbug mk to zuma"
Revert submission 26348985-bb-sepolicy-poc

Reason for revert: Droidfood blocking bug: b/327991669

Bug: 327991669

Reverted changes: /q/submissionid:26348985-bb-sepolicy-poc
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:fe980182cc8f21d7af154271d58aff971f72132c)
Merged-In: I83de6f389e4ce5113afd751871e0e10e67fb0b4f
Change-Id: I83de6f389e4ce5113afd751871e0e10e67fb0b4f
24D1-dev is based on 24Q2-release. Therefore, we merged this CL to 24D1-dev.
2024-04-08 06:20:23 +00:00
Android Build Coastguard Worker
9bcf8ff08e Snap for 11679388 from 7c575c770f to 24Q3-release
Change-Id: Id59a18cdded903e06e7b7273c2dcaa8e1a33a029
2024-04-06 01:03:17 +00:00
Dinesh Yadav
7c575c770f Merge "TPU Rio Tachyon Migration" into main 2024-04-05 04:03:45 +00:00
Android Build Coastguard Worker
213249b4df Snap for 11672362 from 2ab2661048 to 24Q3-release
Change-Id: I033a159e359ca80b23a52ece65ec9fa7c1e6258d
2024-04-04 23:03:26 +00:00
Dinesh Yadav
0a091afcbc TPU Rio Tachyon Migration
This change includes tachyon targets for edgetpu in the final image

TESTED:
Create a private build with this change and verified that the tachyon targets were present after flashing on a local device.

Bug: 307591410
Change-Id: Id531f0941d043319771e2b10fd3cb6c93c9a7a24
2024-04-04 12:44:15 +00:00
Treehugger Robot
2ab2661048 Merge "display: low-light blocking zone support" into 24D1-dev am: 0a3562a15c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/26800869

Change-Id: Ic14a269756206f63e9978bc453d68163fef6d868
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-04 03:27:45 +00:00
Treehugger Robot
0a3562a15c Merge "display: low-light blocking zone support" into 24D1-dev 2024-04-04 02:46:42 +00:00
Android Build Coastguard Worker
5553e06b93 Snap for 11666018 from 5a4b459eff to 24Q3-release
Change-Id: I9f57423da8b81b2049801f410032397ef503a4d1
2024-04-03 23:03:20 +00:00
Android Build Coastguard Worker
b0a2ed6547 Snap for 11666018 from 90fc27fe79 to 24Q3-release
Change-Id: I8641d8c210bcedad3ef2b4b5a4f05a578853d919
2024-04-03 23:03:19 +00:00
Enzo Liao
f8c54e9912 Apply common SELinux policies related to ramdumps and coredumps to zuma.
Refer: ag/26620507

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
Change-Id: I9f0d29ef69dc88cb8e876e37aac09ed7331c79b7
2024-04-03 16:02:30 +08:00
Spade Lee
5a4b459eff sepolicy: allow kernel to search vendor debugfs am: 0ac2d9f7bc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/26738853

Change-Id: Ic8f63f4bbda165e07ea150a2f5a9cfc7211f5c07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-03 04:24:44 +00:00
Android Build Coastguard Worker
6e92ddab6a Snap for 11661060 from 2a01ceedb9 to 24Q3-release
Change-Id: Ieef0d9ba68a3471db0829d6ca548a0abe69e590f
2024-04-02 23:03:33 +00:00
Ziyi Yang
90fc27fe79 Merge "Adding post notification to gca default permissions" into main 2024-04-02 19:54:46 +00:00
cweichun
495b0120ea display: low-light blocking zone support
Bug: 315876417
Test: verify the functionality works
Change-Id: Id8972d4c9057aa76f72dd32d47a5d07c0822645b
2024-04-02 15:25:43 +00:00
Spade Lee
0ac2d9f7bc sepolicy: allow kernel to search vendor debugfs
audit: type=1400 audit(1710259012.824:4): avc:  denied  { search } for  pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc:  denied  { search } for  pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc:  denied  { search } for  pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1

Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: I0e0c2fee4d508cc4e76714df0efbe5eca7ca5966
Signed-off-by: Spade Lee <spadelee@google.com>
2024-04-02 07:35:39 +00:00
Treehugger Robot
2a01ceedb9 Merge "display: low-light blocking zone support" into main 2024-04-02 04:21:29 +00:00
Android Build Coastguard Worker
8064c063c9 Snap for 11654651 from ff1c6fe2ba to 24Q3-release
Change-Id: Ie2da9cda33623a83848c1234e62415f1b391309d
2024-04-01 23:03:12 +00:00
cweichun
e9c8f2af69 display: low-light blocking zone support
Bug: 315876417
Test: verify the functionality works
Change-Id: Id8972d4c9057aa76f72dd32d47a5d07c0822645b
2024-04-01 22:31:48 +00:00
wenchangliu
da4eb5e611 update odd resolution support in vpx and av1 codecs
[VSR-4.2.004.001] MUST support the smallest width/height alignment allowed
by the video standard. For AVC/HEVC/VCC, this requires 2x2 pixel alignment
for YUV 4:2:0 profiles, and 2x1 pixel alignment for YUV 4:2:2 profiles.
For VP8/VP9/AV1, this requires 1x1 pixel alignment for any profiles.
Note: This is usually stored as the crop rectangle in the bitstream.

Bug: 329378524
Test: CtsMediaV2TestCases
Change-Id: I0e84a342bf1093c74c712d2c811b37eca9c7908c
2024-04-01 04:18:51 +00:00
Treehugger Robot
ff1c6fe2ba Merge "usb: correct the xhci wakeup path" into main 2024-04-01 04:00:20 +00:00
Android Build Coastguard Worker
e7ac1387f9 Snap for 11650815 from 2c21455b27 to 24Q3-release
Change-Id: Ia7fafe083f1d6296a9f00fc39b3f6fc1bd6883fe
2024-03-30 21:03:43 +00:00
Android Build Coastguard Worker
0ffe19499b Snap for 11648291 from aa7749fb7b to 24Q3-release
Change-Id: Ib0121aee0bcba057aef29481f2a72b8e173ab47c
2024-03-30 01:03:31 +00:00
Android Build Coastguard Worker
46140e09b9 Snap for 11648291 from 29b78ff858 to 24Q3-release
Change-Id: Idc77c56237c3f353d34f8f68fa64b01d00f17f4b
2024-03-30 01:03:30 +00:00
Treehugger Robot
2c21455b27 Merge "usb: handle displayport debounce timer empty reads" into main 2024-03-30 00:41:50 +00:00
Ziyi Yang
6531ad3c81 Adding post notification to gca default permissions
Bug: 331677590
Test: Build and flash. Permission was pregranted to gca.
Change-Id: Id358ad4ad34b700409e157345a43a93729009af5
2024-03-30 00:10:05 +00:00
Mike Wang
aa7749fb7b Merge "Add the selinux policy for MDS to access modem_state file" into main 2024-03-29 15:16:19 +00:00
Android Build Coastguard Worker
c6e447ea3a Snap for 11641371 from 1b6df46381 to 24Q3-release
Change-Id: I69803fd614ac7d46816aca0d3f12dc275f9bce0e
2024-03-28 23:03:16 +00:00
Chris Lu
29b78ff858 zuma: upgrade IDisplay to V11 am: 3a14c951a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/26482877

Change-Id: Ic3c7f4af6f69eabaf4e0d501bece99613e173d46
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-28 21:37:16 +00:00
mikeyuewang
6546398c27 Add the selinux policy for MDS to access modem_state file
Add the selinux policy for MDS to access modem_state file

avc deny:
2024-03-25 16:05:58.244  9667-9667  DiagnosticServi         com.google.mds                       I  type=1400 audit(0.0:14): avc:  denied  { read } for  name="modem_state" dev="sysfs" ino=76870 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds
2024-03-25 16:05:58.244  9667-9667  DiagnosticServi         com.google.mds                       I  type=1400 audit(0.0:15): avc:  denied  { open } for  path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=76870 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds
2024-03-25 16:05:58.244  9667-9667  DiagnosticServi         com.google.mds                       I  type=1400 audit(0.0:16): avc:  denied  { getattr } for  path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=76870 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds

Bug: 331202327

Change-Id: I5e0088d274bc4f45010a19631ecbaece7cc3cc42
2024-03-28 20:28:10 +00:00
Shashwat Razdan
5032fc7cb5 Revert "Adding android.software.contextualsearch to zuma devices."
Revert submission 26467635-feature_cs

Reason for revert: b/329350496 - Introducing new config with `android.*` namespace is not allowed in 24Q2.

Reverted changes: /q/submissionid:26467635-feature_cs

Change-Id: Icee16ce2f1d8b4971f9db615b862ba36588a9f65
2024-03-28 18:59:22 +00:00
Jack Wu
82bb1a5112 Update health AIDL HAL to V3
Bug: 328327545
Test: TH
Test: vts-tradefed run vts -m vts_treble_vintf_vendor_test
Signed-off-by: Jack Wu <wjack@google.com>
(cherry picked from https://android-review.googlesource.com/q/commit:40f89b2d464071389d395f39928ef0e6d99bf2fb)
Merged-In: I7582ba278abcb30cebe041f775efe45633a58bad
Change-Id: I7582ba278abcb30cebe041f775efe45633a58bad
24D1-dev is based on 24Q2-release. Therefore, we merged this CL to 24D1-dev.
2024-03-28 07:26:43 +00:00
Treehugger Robot
1b6df46381 Merge "Update SOONG_NAMESPACES to include power-anomaly-sitril folder" into main 2024-03-28 04:59:30 +00:00
Android Build Coastguard Worker
145974cf0e Snap for 11635697 from c8c92bd593 to 24Q3-release
Change-Id: I5594e3d074394fcb78574fed16191b1aeb403cbf
2024-03-27 23:03:41 +00:00
Albert Wang
c24ead7ce9 usb: correct the xhci wakeup path
Error log:
Error opening kernel wakelock stats for: wakeup177 (...xhci-hcd-exynos.5.auto/usb1/1-1/wakeup/wakeup177): Permission denied

bug: 311087938
Test: boot to home and host mode works well
Change-Id: I8bdd38499dec3852ba33510f40e58cebd3a4560f
2024-03-27 10:26:45 +00:00
Android Build Coastguard Worker
93e292bba3 Snap for 11629448 from 336cc78bd9 to 24Q3-release
Change-Id: Ib67f14d788e7daddfb348a9c9aed64b4ce3427fa
2024-03-27 01:04:37 +00:00
Megha Patil
c8c92bd593 Sepolicy for the new property to switch Modem Binary
Sepolicy Rules added for telephony.TnNtn.image_switch

BUG: b/298322438
Bug: 323087490

Test: Test Binding sequence of Service
Change-Id: Ie79aff94159d79a573ec92546a5d3e390b802b22
2024-03-26 08:44:51 +00:00
Vilas Bhat
336cc78bd9 Merge "16k: zuma: Remove PRODUCT_MAX_PAGE_SIZE_SUPPORTED, set to 16384 by default" into main am: 9f46e1bc8a am: 19eefd7be5
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3009017

Change-Id: I18dcbc4200bbded295cbf3084a6c2c54d3a49a69
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-26 00:58:45 +00:00
Vilas Bhat
19eefd7be5 Merge "16k: zuma: Remove PRODUCT_MAX_PAGE_SIZE_SUPPORTED, set to 16384 by default" into main am: 9f46e1bc8a
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3009017

Change-Id: I62eeed1a5d24504c67c9b11a8e07c4874a4c95f1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-26 00:32:26 +00:00
Vilas Bhat
9f46e1bc8a Merge "16k: zuma: Remove PRODUCT_MAX_PAGE_SIZE_SUPPORTED, set to 16384 by default" into main 2024-03-26 00:11:12 +00:00
Vilas Bhat
2c6de7bc7a 16k: zuma: Remove PRODUCT_MAX_PAGE_SIZE_SUPPORTED, set to 16384 by default
b/300367402 has been resolved and PRODUCT_MAX_PAGE_SIZE_SUPPORTED
override is not needed anymore as the default value is set to 16384.

Bug: 310232825
Bug: 300367402
Change-Id: I0a319a2ede0897bcde97214c70ebf099062bac0d
2024-03-26 00:06:22 +00:00
Herbert Xue
f655891870 Update SOONG_NAMESPACES to include power-anomaly-sitril folder
Bug: 326175117
Test: lunch husky-trunk_staging-userdebug && m PowerAnomalySitril
Change-Id: Icdaf363a37c29d9bc7b07b3ee552440fa723f80d
2024-03-25 16:11:14 +08:00
Android Build Coastguard Worker
6b04b83dfa Snap for 11617975 from e0e63c38d7 to 24Q3-release
Change-Id: I8ca8225ca1d57ca765379053aa6a9fd888814af3
2024-03-23 01:03:05 +00:00
Android Build Coastguard Worker
672de8fd30 Snap for 11617975 from 4f08475886 to 24Q3-release
Change-Id: I6d2397b900639a9852289f5a4b2531574bd61c96
2024-03-23 01:03:04 +00:00
Hungyen Weng
e0e63c38d7 Merge "Allow modem_svc to access modem files and perfetto" into main 2024-03-22 23:52:52 +00:00
Jack Wu
4f08475886 Update health AIDL HAL to V3 am: 40f89b2d46 am: b3ae3a6b85
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3009648

Change-Id: Ibfa39e6ef8eff1cf6e967226a8677b026e97aafd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-22 17:59:05 +00:00
Jack Wu
b3ae3a6b85 Update health AIDL HAL to V3 am: 40f89b2d46
Original change: https://android-review.googlesource.com/c/device/google/zuma/+/3009648

Change-Id: Ia38afc00d2ea7b36cdb40c6500ac6ce7becb6800
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-22 17:43:36 +00:00
Jack Wu
40f89b2d46 Update health AIDL HAL to V3
Bug: 328327545
Test: TH
Test: vts-tradefed run vts -m vts_treble_vintf_vendor_test
Change-Id: I7582ba278abcb30cebe041f775efe45633a58bad
Signed-off-by: Jack Wu <wjack@google.com>
2024-03-22 21:38:07 +08:00
Spade Lee
dbc39c622b Merge "pixelstats_vendor: add logbuffer_device r_file_perms" into main 2024-03-22 07:30:31 +00:00
Spade Lee
ea61856798 Merge "pixelstats: zuma: add history validation path" into main 2024-03-22 07:30:31 +00:00
Hungyen Weng
1db18cf4b3 Allow modem_svc to access modem files and perfetto
Bug: 330730987

Test: Confirmed that modem_svc is able to access token db files in modem partition
Test: Confiemed that modem_svc can send traces to perfetto

Change-Id: Ic8b724e0e8d72f5ead83e75ab85471bcbdaf8749
2024-03-22 00:29:41 +00:00
Wesley Lee
2aff27d3e4 Merge "Adjust 720P and below performance point" into main 2024-03-21 23:18:15 +00:00
Android Build Coastguard Worker
fb74d71c36 Snap for 11610847 from 920bae7e33 to 24Q3-release
Change-Id: I75f5034f369d7c9f8c3939fa6554ba202cf97590
2024-03-21 23:03:13 +00:00
Android Build Coastguard Worker
d5d9ed7547 Snap for 11610847 from e723942c69 to 24Q3-release
Change-Id: Ifdaa2160dbadd311dba111fe8d13859f656612f7
2024-03-21 23:03:13 +00:00
Wesley Lee
b80719b25f Adjust 720P and below performance point
Bug: 325950790

Change-Id: I3038b4056819e55fff9171f809ff66d6ada969ab
Signed-off-by: Wesley Lee <szuweilee@google.com>
2024-03-21 10:15:50 -07:00
Oleg Blinnikov
920bae7e33 Merge "persist.sys.hdcp_checking property added" into main 2024-03-21 12:21:30 +00:00
Oleg Blinnikov
e723942c69 Merge "persist.sys.hdcp_checking controls max hdcp" into main 2024-03-21 12:21:30 +00:00
Chris Lu
3a14c951a2 zuma: upgrade IDisplay to V11
Bug: 307787644
Test: build pass
Change-Id: I538f57a0d67f9e8d248e8a1d46e4be46889f0d42
2024-03-21 07:30:11 +00:00
Spade Lee
6ad6fb5edb sepolicy: allow kernel to search vendor debugfs
audit: type=1400 audit(1710259012.824:4): avc:  denied  { search } for  pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc:  denied  { search } for  pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc:  denied  { search } for  pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1

Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: I0e0c2fee4d508cc4e76714df0efbe5eca7ca5966
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-20 18:16:41 +00:00
Oleg Blinnikov
3248117d06 persist.sys.hdcp_checking controls max hdcp
Change-Id: Ibe2554019449b6f958fc6e0168ae0deccc9f589d
Bug: 321344894
Test: set persist.sys.hdcp_checking, check the file is updated
2024-03-20 11:10:41 +00:00
Android Build Coastguard Worker
80a8bb82bb Snap for 11597038 from 45dbae1b7a to 24Q3-release
Change-Id: I57b35dcbf82e3c703b7c7312bc6282319a964607
2024-03-19 23:03:37 +00:00
RD Babiera
523717b768 usb: handle displayport debounce timer empty reads
If the device is unplugged then plugged before
mDisplayPortDebounceTimer triggers, then the new
displayPortPollWork could process the trigger
in the intial epoll handling loop. Because the
timer can be rearmed, the timerfd read results
in -EAGAIN because no data is ready, but stale
data was ready to begin with.

Disarm the debounce timer when displayPortPollWork
closes to prevent new work threads from reading
timer when not ready. Also log debounce read
errors as a warning and not an error.

Test: manual test on device
Bug: 328553922
(cherry-picked from 94c9c1ac86f398c22ddc446f17bd7ab3fddb675c)
Change-Id: Icf3dbe929eb9f0520941a4efe3dcea79a71d46c3
Signed-off-by: RD Babiera <rdbabiera@google.com>
2024-03-19 18:35:19 +00:00
Oleg Blinnikov
57d222ff5f persist.sys.hdcp_checking property added
Change-Id: I518db2909d2356a42421a626288365bb7458cc9c
Bug: 321344894
Test: modify property, see that max_ver file modified
2024-03-19 16:06:51 +00:00
Shashwat Razdan
45dbae1b7a [automerger skipped] Adding android.software.contextualsearch to zuma devices. am: df92ac07bd -s ours
am skip reason: Merged-In I4ee1ecd9e292d6e1807ba1f77851e53380db0a07 with SHA-1 3ceb5170ce is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma/+/26574570

Change-Id: I564a51efb5e1dfa0e3bd84876dc500c0b9c21659
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-19 08:29:05 +00:00
Treehugger Robot
7a6899664e Merge "zuma: Set max supported page size to 65536" into main 2024-03-19 02:09:56 +00:00
Android Build Coastguard Worker
b1bed8612e Snap for 11591048 from 110a712be9 to 24Q3-release
Change-Id: I5b3e60bca391d8a161a94856872b3d2885960a79
2024-03-18 23:03:33 +00:00
Wilson Sung
110a712be9 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 330081782
Change-Id: I43805cda5b66b30999578b7a842fda6fe296003d
2024-03-18 03:23:52 +00:00
Spade Lee
3f707d13c2 pixelstats_vendor: add logbuffer_device r_file_perms
avc: denied { read } for name="logbuffer_maxfg_monitor" dev="tmpfs" ino=1034 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=0

Bug: 329174074
Test: no denied log, and able to read logbuffer in pixelstats_vendor
Change-Id: Ieca53f3092355c72784d4216c138cbb7cc9c7fa4
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-14 03:31:14 +00:00
Shashwat Razdan
df92ac07bd Adding android.software.contextualsearch to zuma devices.
Bug: 326143814
Test: Built and tested on device
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:3ceb5170ce03587387eaf794a4ee5d0c68540664)
Merged-In: I4ee1ecd9e292d6e1807ba1f77851e53380db0a07
Change-Id: I4ee1ecd9e292d6e1807ba1f77851e53380db0a07
CP feature CLs to 24d1-dev
2024-03-13 23:58:37 +00:00
Android Build Coastguard Worker
5d09d2e375 Snap for 11571437 from 593127ec47 to 24Q3-release
Change-Id: I47d115855221d0fec9c0f5c55536779a507392ba
2024-03-13 23:03:16 +00:00
Hongyang Jiao
593127ec47 Merge "Add betterbug.mk to zuma" into main 2024-03-13 04:30:07 +00:00
Spade Lee
a4b4967c03 pixelstats: zuma: add history validation path
Bug: 329174074
Change-Id: Ia134e6b6b8dc0c9db35bcf36bed700b67466f353
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-13 02:00:22 +00:00
Chungro Lee
c0f9207cf5 pixelstats: move learning/model load path to sysfs
Reporting learning(relaxation) and model loading once a day
 * learning and model loading path moved from uevent to
   sysfs collector.

Bug: 329124192
Change-Id: I91039ce3a8ee4630a76113ef7ae6be3bc6908f64
Signed-off-by: Chungro Lee <chungro@google.com>
2024-03-13 01:29:18 +00:00
Android Build Coastguard Worker
4150a19d37 Snap for 11565217 from c2eee26906 to 24Q3-release
Change-Id: I043d03a92a80678c14f006c22eae50ed36507300
2024-03-12 23:03:34 +00:00
Thiébaud Weksteen
c2eee26906 [automerger skipped] Remove persist.bootanim.color property definitions am: ac4d47214b am: 7767f1bb0c -s ours
am skip reason: Merged-In Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e with SHA-1 f75e76f913 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2995438

Change-Id: Iedd2a37983afb9a0d9d397e565160261b59ae65b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 06:40:17 +00:00
Thiébaud Weksteen
7767f1bb0c Remove persist.bootanim.color property definitions am: ac4d47214b
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2995438

Change-Id: I19b71f0efb55352fa9e0f651b9bb639946fcd850
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 05:57:12 +00:00
Android Build Coastguard Worker
43c66ec0d2 Snap for 11551442 from ebf753dab2 to 24Q3-release
Change-Id: Ibbd2efbeabbdc99eb34cee0010b444febdaba7f5
2024-03-09 02:03:32 +00:00
John Chang
ebf753dab2 display: change vrr.enabled to xrr.version am: 28e6526f84
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/26502093

Change-Id: Ia643b13f2e001d1c9d6c6bdd60e8a2221dfafc95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-08 11:17:09 +00:00
Thiébaud Weksteen
ac4d47214b Remove persist.bootanim.color property definitions
These now belong to the platform policy.

Bug: 321088135
Test: build
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:f75e76f91370231072cf8bb11621a9dfc12d4f08)
Merged-In: Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e
Change-Id: Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e
2024-03-08 01:38:44 +00:00
Shiyong Li
1a6dfa6e0d Merge "display: change vrr.enabled to xrr.version" into main 2024-03-08 01:28:49 +00:00
Android Build Coastguard Worker
efb24dfa4d Snap for 11545716 from 9ecaa34575 to 24Q3-release
Change-Id: If8264b69645123144236dfbc1104b3708b1866d9
2024-03-08 00:03:10 +00:00
Android Build Coastguard Worker
2b5f4cc3be Snap for 11545716 from 329687e7b5 to 24Q3-release
Change-Id: I9390e25fe92de507a16135fd7a36b0228ea5e6ef
2024-03-08 00:03:09 +00:00
John Chang
28e6526f84 display: change vrr.enabled to xrr.version
Bug: 328001545
Test: Test MRR Version 2 is properly configured
Change-Id: Ide6493d77a6047023f20fbd9c5723a36033e3691
2024-03-07 22:19:51 +00:00
Yabin Cui
3694b1a7f1 Add SOC specific ETE sysfs paths
Also remove deprecated ETE sysfs paths.

Bug: 321061072
Test: run profcollectd on device
Change-Id: If56e9c4c51dc0e5f3f36e8c80671d67e910510c9
2024-03-07 19:53:47 +00:00
Xin Li
9ecaa34575 [automerger skipped] Merge Android 14 QPR2 to AOSP main am: c05d3b75cc -s ours am: 5d9dcfb7b9 -s ours
am skip reason: Merged-In I44d74dbe5baa23c7b90c7a6703dee5e856801942 with SHA-1 a05a0cb116 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2990820

Change-Id: I7a88a2a2ff5e0a90bb104e3ba1f03b6884a2196b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 10:46:51 +00:00
Xin Li
329687e7b5 [automerger skipped] Merge Android 14 QPR2 to AOSP main am: 9410b32a49 -s ours am: 51173b9d7a -s ours
am skip reason: Merged-In I32eb36d69c485eaab1d138a6271e08660bfe39b0 with SHA-1 b3d1357a39 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma/+/2990636

Change-Id: I3bef0bebcd271340ccedbd7e5db1ae2b9bd9bfa2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 10:46:30 +00:00
Xin Li
5d9dcfb7b9 [automerger skipped] Merge Android 14 QPR2 to AOSP main am: c05d3b75cc -s ours
am skip reason: Merged-In I44d74dbe5baa23c7b90c7a6703dee5e856801942 with SHA-1 a05a0cb116 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2990820

Change-Id: I36a9af16819ae09fbd7085313759076c1a5905e5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 09:55:27 +00:00
Xin Li
51173b9d7a [automerger skipped] Merge Android 14 QPR2 to AOSP main am: 9410b32a49 -s ours
am skip reason: Merged-In I32eb36d69c485eaab1d138a6271e08660bfe39b0 with SHA-1 b3d1357a39 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma/+/2990636

Change-Id: If32942ee0ddb855af378568ac6ea8be6982155fe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 09:55:05 +00:00
Android Build Coastguard Worker
3d1fb4197f Snap for 11540345 from 791a68939f to 24Q3-release
Change-Id: I49e09f7b237f717c2b34c7df546c4950aff91334
2024-03-07 01:52:56 +00:00
Xin Li
9410b32a49 Merge Android 14 QPR2 to AOSP main
Bug: 319669529
Merged-In: I32eb36d69c485eaab1d138a6271e08660bfe39b0
Change-Id: Ie1a388e0381897e4b0522ffad710449f9ad465e4
2024-03-06 09:29:51 -08:00
Xin Li
c05d3b75cc Merge Android 14 QPR2 to AOSP main
Bug: 319669529
Merged-In: I44d74dbe5baa23c7b90c7a6703dee5e856801942
Change-Id: Ia8b2507fd10774dd2889295a0ffab6bef0730c37
2024-03-06 09:29:51 -08:00
Shashwat Razdan
791a68939f Merge "Adding android.software.contextualsearch to zuma devices." into main 2024-03-06 16:33:04 +00:00
John Chang
7baab4b7e7 display: change vrr.enabled to xrr.version
Bug: 328001545
Test: Test MRR Version 2 is properly configured
Change-Id: Ide6493d77a6047023f20fbd9c5723a36033e3691
2024-03-06 16:13:39 +00:00
Shashwat Razdan
3ceb5170ce Adding android.software.contextualsearch to zuma devices.
Bug: 326143814
Test: Built and tested on device
Change-Id: I4ee1ecd9e292d6e1807ba1f77851e53380db0a07
2024-03-05 23:46:52 -08:00
Android Build Coastguard Worker
1150f8bcd0 Snap for 11533280 from 10dcc53e99 to 24Q3-release
Change-Id: Ibdeaf0eb5a812727441f90d59f992ab1fa2670bb
2024-03-06 00:03:15 +00:00
Android Build Coastguard Worker
dfe9f3e3a8 Snap for 11533280 from 738d2aa5db to 24Q3-release
Change-Id: I080c2da96a6f735caaadc54c1387f7c60eb8537c
2024-03-06 00:03:14 +00:00
Hongyang Jiao
590a555cb9 Add betterbug.mk to zuma
Test: manual test
Bug: 322543833
Change-Id: Ibd314393d11b2552b79a7f73cd7ed888e08934b2
2024-03-05 23:30:04 +00:00
Bart Sears
738d2aa5db Merge "Revert "Add betterbug mk to zuma"" into main 2024-03-05 20:38:11 +00:00
Daniel Chapin
fe980182cc Revert "Add betterbug mk to zuma"
Revert submission 26348985-bb-sepolicy-poc

Reason for revert: Droidfood blocking bug: b/327991669

Bug: b/327991669

Reverted changes: /q/submissionid:26348985-bb-sepolicy-poc

Change-Id: I83de6f389e4ce5113afd751871e0e10e67fb0b4f
2024-03-05 20:37:25 +00:00
Treehugger Robot
10dcc53e99 Merge "Add AIDL media.c2 into service_contexts" into main 2024-03-05 06:17:02 +00:00
Treehugger Robot
3cfbf4bec2 Merge "Add media.c2 aidl fragments" into main 2024-03-05 06:17:02 +00:00
Mark Chang
f1794b994b Merge "Add sepolicy include to zuma." into main 2024-03-05 05:31:47 +00:00
Treehugger Robot
1793e986cc Merge "Move Gralloc packages to gs-common" into main 2024-03-04 22:13:55 +00:00
Android Build Coastguard Worker
c41b83d6bf Snap for 11520864 from ad60710ab1 to 24Q3-release
Change-Id: I931f5f67abef4f3910ce4e82bc454e8b72ec9785
2024-03-02 02:03:41 +00:00
Juan Yescas
eb1c1ce936 zuma: Set max supported page size to 65536
Set the max page size on zuma devices to 65536.

Bug: 300367402
Test: readelf -Wl /system/bin/init
Change-Id: I4d3e45f5da1cfc50c639aea44d5670a936ca47a8
2024-02-29 13:11:48 -08:00
Android Build Coastguard Worker
7f480deeaa Snap for 11510413 from 18f3b37824 to 24Q3-release
Change-Id: I01a0c2ae4b96c7fc3a2b3f60a5293e142059a9ea
2024-02-29 00:03:53 +00:00
Mark Chang
47cbecc736 Add sepolicy include to zuma.
Bug: 325422902
Test: Manual, system booted without sepolicy denied error.

Change-Id: Ibbf4fd4f0eab82589915933d5c298839bc0c7f01
Signed-off-by: Mark Chang <changmark@google.com>
2024-02-28 13:37:07 +00:00
Android Build Coastguard Worker
805e2a1a96 Snap for 11504269 from 28a906e86a to 24Q3-release
Change-Id: Id8cd3f58fee06428f145c83bc8688924e604daad
2024-02-28 00:03:58 +00:00
Android Build Coastguard Worker
07ad60d733 Snap for 11504269 from 48a81fa140 to 24Q3-release
Change-Id: I8a607192700e39afafb371ff285b2caded30bc2e
2024-02-28 00:03:55 +00:00
Sungtak Lee
84531ff361 Add AIDL media.c2 into service_contexts
Bug: 321808716
Change-Id: I7c79bc46112b8330c6d2a62db030ecc13d1cece4
2024-02-27 18:05:41 +00:00
Sungtak Lee
7847851d6c Enable AIDL media.c2
Bug: 321808716
Change-Id: I2c2d7d3d7539a65aa82125ab13f1498c6defdebf
2024-02-27 17:49:13 +00:00
Sungtak Lee
d19f4e8c95 Add media.c2 aidl fragments
Bug: 321808716
Change-Id: I0540df5a15d2186f511fac64de195f7656a78e3d
2024-02-27 17:28:23 +00:00
Treehugger Robot
48a81fa140 Merge "add dsim wakeup labels" into main 2024-02-27 13:14:49 +00:00
Thiébaud Weksteen
2674171daa Merge "Revert^2 "Remove persist.bootanim.color property definitions"" into main 2024-02-26 22:40:44 +00:00
Devika Krishnadas
1fa8bf5885 Move Gralloc packages to gs-common
Bug: 275906497
Test: Boot succeeds

Change-Id: I879a5ef8365abe018c501cdb0b06c9753e0e5902
Signed-off-by: Devika Krishnadas <kdevika@google.com>
2024-02-26 17:58:11 +00:00
Thiébaud Weksteen
97a16aff57 Revert^2 "Remove persist.bootanim.color property definitions"
7b238e3659

Change-Id: I56143303453cce01d812997ed4a06d815f2a6859
2024-02-25 23:59:26 +00:00
Android Build Coastguard Worker
3ca8e14773 Snap for 11494049 from 1433ffe9e2 to 24Q3-release
Change-Id: If335761049eb5e8b1dc6ba72abc01cc3cc598a9b
2024-02-24 22:03:15 +00:00
Android Build Coastguard Worker
26617f9caf Snap for 11492556 from 0d051585be to 24Q3-release
Change-Id: Iff2741d71b0224563939319cdb58417628422eac
2024-02-24 02:17:52 +00:00
Rubin Xu
0d051585be Merge "Revert "Remove persist.bootanim.color property definitions"" into main 2024-02-23 12:42:52 +00:00
Rubin Xu
7b238e3659 Revert "Remove persist.bootanim.color property definitions"
Revert submission 26301396-bootanim_prop

Reason for revert: DroidMonitor-triggered revert due to breakage https://android-build.corp.google.com/quarterdeck/?branch=git_main&target=sdk_goog3_x86_64-trunk_staging-userdebug&lkgb=11487950&lkbb=11488141&fkbb=11488141

Bug: 326521604

Reverted changes: /q/submissionid:26301396-bootanim_prop

Change-Id: Icad6e80687cd7cd2085018bca226b5f38f25db25
2024-02-23 12:25:54 +00:00
Thiébaud Weksteen
de322545f2 Merge "Remove persist.bootanim.color property definitions" into main 2024-02-23 02:59:57 +00:00
Android Build Coastguard Worker
24744214c5 Snap for 11486189 from 1d8864cdee to 24Q3-release
Change-Id: I7b02a3744cf08637bd708c6b7c98e7ce1cbeb263
2024-02-23 00:03:54 +00:00
Android Build Coastguard Worker
19c02e62d4 Snap for 11479750 from 6f86f154f7 to 24Q3-release
Change-Id: Ia61749815d4a09b3a88f9cdc838ebe55650e1ed4
2024-02-22 00:04:05 +00:00
Thiébaud Weksteen
f75e76f913 Remove persist.bootanim.color property definitions
These now belong to the platform policy.

Bug: 321088135
Test: build
Change-Id: Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e
2024-02-21 13:47:43 +11:00
Peter Lin
161bbcd1e6 add dsim wakeup labels
Bug: 320693841
Bug: 321733124
test: ls sys/devices/platform/19440000.drmdsim/19440000.drmdsim.0/wakeup -Z
Change-Id: Ie99007455ef3879c8ee0aa1fa20801e4baf5e978
2024-02-17 08:11:13 +00:00
Will McVicker
1d8864cdee Update tcpm i2c sepolicy with new device name
The new names fix uninformative kernel wakelock names.

Bug: 315190967
Bug: 323447554
Change-Id: I5e0a4e13484c9886be398782e580313892987e2f
2024-02-16 15:15:55 -08:00
Android Build Coastguard Worker
b2c86e3bb1 Merge "Snap for 11455877 from 34c969d4c5 to 24Q3-release" into 24Q3-release 2024-02-16 01:30:13 +00:00
Android Build Coastguard Worker
16e7b8d668 Snap for 11455877 from 34c969d4c5 to 24Q3-release
Change-Id: Ib278e2936c98fef8aeae57de75e399740378557e
2024-02-16 00:24:24 +00:00
Android Build Coastguard Worker
a48b5cd4b5 Snap for 11455651 from 34c969d4c5 to 24Q3-release
Change-Id: Icc840847d41b903b9113ca7f99dc7e88e490ec1f
2024-02-16 00:15:17 +00:00
Android Build Coastguard Worker
f4a5076626 Snap for 11449429 from d2ec488c9d to 24Q3-release
Change-Id: I1f8d764b475672ef5c07894de64927be55fbce21
2024-02-15 00:03:43 +00:00
Android Build Coastguard Worker
3043906aed Snap for 11444718 from ce338d50ef to 24Q3-release
Change-Id: I8b02142fd0410d0933dd6880e47dabfd2a1cfbef
2024-02-14 00:04:17 +00:00
Android Build Coastguard Worker
02ec4c58b0 Snap for 11438798 from 57df3553b6 to 24Q3-release
Change-Id: Iacb41a00482e39e4fec16e50011c75fd2d6ec851
2024-02-13 00:04:26 +00:00
Android Build Coastguard Worker
2fe98e254c Snap for 11434705 from 15fda1a501 to 24Q3-release
Change-Id: I8756780b85b736dc79d31bc017561e8c8f085fca
2024-02-10 22:03:35 +00:00
Android Build Coastguard Worker
736b882b89 Snap for 11434705 from 437d99e265 to 24Q3-release
Change-Id: I28efc1fac15611447d9cca442a6eae737d75a290
2024-02-10 22:03:34 +00:00
Weizhung Ding
15fda1a501 Add HWC permission to access IStats AIDL
avc:  denied  { call } for  scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:r:system_server:s0 tclass=binder permissive=0

Bug: 266898132
Test: Build and check log
Change-Id: I7e5ec165df0d397250b09f5981c1f45aea27bd4c
2024-02-10 02:18:16 +00:00
Android Build Coastguard Worker
acc0894fea Snap for 11432142 from 4e66878b19 to 24Q3-release
Change-Id: I71284d4d75eb794e47cadfca872d5dbd047557cc
2024-02-10 02:03:52 +00:00
Android Build Coastguard Worker
5d9d38e13f Snap for 11432142 from 934294ce06 to 24Q3-release
Change-Id: I799c5abe3f463c674cecfad6b533210f40bd7b57
2024-02-10 02:03:51 +00:00
Treehugger Robot
4e66878b19 Merge "[displayport-stats] add sysfs access permission on Zuma devices." into main 2024-02-09 09:17:34 +00:00
Android Build Coastguard Worker
1985cb2eca Snap for 11426397 from 514452495e to 24Q3-release
Change-Id: I57dff6b514ee384765ff0f42e3d96bafa3f9a1af
2024-02-09 00:04:19 +00:00
Roy Luo
6c5b44f1bb hal_usb_impl: Grant read permission to usb overheat files
Carried over from WHI PRO setting.

Bug: 307583011
Test: no audit logs
Change-Id: I45bb396f2597a4a8c150ad2975ecfa427d44f2a9
2024-02-07 05:18:41 +00:00
Treehugger Robot
a1c60e8b9e Merge "Allow camera_app can access priv-app symlinks" into main 2024-02-06 09:32:27 +00:00
Wilson Sung
332714ffac Allow camera_app can access priv-app symlinks
Fix: 322417347
Test: make selinux_policy
Change-Id: I467667b3a824a2e8b93e47c61c28ed9015fd44c3
2024-02-06 08:36:39 +00:00
Hongbo Zeng
cfe12763f2 Allow con_monitor_app to read/write the folder /data/vendor/radio
Bug: 322266425
Test: after apply the patch, we can see the adum_log/adum_log_old files
      are included in dumpstate_board.bin successfully without denial

Change-Id: Ic488a84a1942fbc424b08aa0cbd4d526014152cd
2024-02-02 15:42:31 +00:00
Wilson Sung
fdc9af0d88 Update error on ROM 11396046
Bug: 323471016
Test: SELinuxUncheckedDenialBootTest
Change-Id: I79953f209f474b8d71e06e197795b0d55c3ffce3
2024-02-02 08:04:40 +00:00
Kyle Tso
98972beada Allow dump_power to read sysfs directories
dump_power needs to read the directories under /sys/class/power_supply.

Bug: 320613177
Bug: 322294676
Change-Id: I7bc55b90d67a1d05bb097955ed632d62535e0f40
Signed-off-by: Kyle Tso <kyletso@google.com>
2024-01-31 07:01:55 +00:00
Wilson Sung
bbd26c9cb8 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 323086582
Test: scanBugreport
Bug: 323087490
Test: scanAvcDeniedLogRightAfterReboot
Bug: 323087197
Change-Id: I99006484464f82125a63be9c26eb8d8051c57840
2024-01-31 02:58:43 +00:00
Xin Li
6235550122 [automerger skipped] Merge Android 24Q1 Release (ab/11220357) am: a05a0cb116 -s ours
am skip reason: Merged-In I4a01be73d76a577d8da07c36276349525c0fda68 with SHA-1 b3e48816fa is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25972529

Change-Id: I3c95d14460c6bf995223a283b8856ffcbc7f72e5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-31 02:03:39 +00:00
Kadi Narmamatov
0d82eda10f Merge "Revert "rfsd: add new property to sepolicy"" into main 2024-01-30 08:36:00 +00:00
Kadi Narmamatov
aef38ed6a7 Revert "rfsd: add new property to sepolicy"
Revert submission 25709311-rfsd-efs-erase

Reason for revert: we don't need it for this repo, only for pro

Reverted changes: /q/submissionid:25709311-rfsd-efs-erase

Bug: 315104803

Change-Id: I54e24ae99087b102c1a2f677ce4a7b2cad670992
2024-01-30 07:02:22 +00:00
Kieran Cyphus
4562b9e4e1 Merge "liboemservice_proxy: Update sepolicy to hal" into main 2024-01-29 05:58:46 +00:00
Daniel Chapin
6a6f65b5e5 Merge "Revert "Allow dump_power to read directories under "/sys/class/p..."" into main 2024-01-25 22:59:25 +00:00
Daniel Chapin
a5df4f07bf Revert "Allow dump_power to read directories under "/sys/class/p..."
Revert submission 25915320-320613177

Reason for revert: Droidfood blocking bug: 322294676

Reverted changes: /q/submissionid:25915320-320613177

Change-Id: I5545dcd73cdce5ae029444c313bf5dc3f642a5c0
2024-01-25 21:44:18 +00:00
kierancyphus
0cdeda46b2 liboemservice_proxy: Update sepolicy to hal
This was wrongly configured originally, and has instead been modified to
follow the advice from
https://source.android.com/docs/core/architecture/aidl/aidl-hals#sepolicy.

Test: atest vts_treble_vintf_vendor_test:DeviceManifest/SingleAidlTest
Bug: 321867236

Change-Id: I75df4696660b2c052324313785b244c263ebd75b
2024-01-25 17:51:51 +08:00
Angela Wu
b042c7713f [automerger skipped] Change the type of hw_jpg_device for selinux policy so that the GCA release flavor could access hw_jpg_device am: 3b30421350 -s ours
am skip reason: Merged-In If77a097b4ca823322ef41b13d6283390dac69d6c with SHA-1 0d32d1c172 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25983001

Change-Id: I5424ea5b92ff1b9bff957b86bfabf6dccb766f22
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-25 02:19:53 +00:00
Treehugger Robot
ab46db5fef Merge "Add capacity_headroom to gpu sysfs" into main 2024-01-24 23:30:45 +00:00
Sean Callanan
d7decd5eee Add capacity_headroom to gpu sysfs
This allows userspace (notably the power HAL) to apply a boost to GPU
frequency independent of previously measured load.

Bug: 290625326
Test: boot, run modified Power HAL
Change-Id: Ia71266ee751a36a960706ac8aacc7fdefdf8a0f0
2024-01-24 21:46:23 +00:00
Angela Wu
3b30421350 Change the type of hw_jpg_device for selinux policy so that the GCA release flavor could access hw_jpg_device
Bug: 320410642
Test:m
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:0d32d1c172c19186a7ac4fd3eb316a9b947d612d)
Merged-In: If77a097b4ca823322ef41b13d6283390dac69d6c
Change-Id: If77a097b4ca823322ef41b13d6283390dac69d6c
2024-01-24 09:47:42 +00:00
Weizhung Ding
3d156c0ad6 [displayport-stats] add sysfs access permission on Zuma devices.
Bug: 266898132
Test: Build
Change-Id: I4c5bd4729f837c843668c447abbbe4c34beb3fce
2024-01-24 08:28:40 +00:00
Wilson Sung
abb7616f3d Merge "Update Tracking Denial Bug Map" into main 2024-01-24 07:56:49 +00:00
Imo Richard Umoren
770a65f4a9 Update Tracking Denial Bug Map
Removes tracking denial for twoshay from bug map

Bug: b/315104941
Test: Manually tested on HK3 DVT
Change-Id: I6cd8f390e98fc98925ed807a2ff24a33c51c75cd
2024-01-22 18:32:09 +00:00
Kyle Tso
4e48a45727 Allow dump_power to read directories under "/sys/class/power_supply"
Bug: 320613177
Change-Id: I1a39ddb5fbbf4c62fa5b96e3562b34f2f2091c13
Signed-off-by: Kyle Tso <kyletso@google.com>
2024-01-22 08:52:59 +00:00
Xin Li
a05a0cb116 Merge Android 24Q1 Release (ab/11220357)
Bug: 319669529
Merged-In: I4a01be73d76a577d8da07c36276349525c0fda68
Change-Id: I44d74dbe5baa23c7b90c7a6703dee5e856801942
2024-01-17 22:13:21 -08:00
Wilson Sung
2d8e52e176 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 320693841
Change-Id: Ia3ffe885f02a8db86d6bd024d34135fd1ce30d7b
2024-01-17 17:42:53 +00:00
Angela Wu
740cebf8f0 Merge "Change the type of hw_jpg_device for selinux policy so that the GCA release flavor could access hw_jpg_device" into main 2024-01-17 00:32:01 +00:00
Wilson Sung
148d3558f8 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 319403445
Change-Id: I470afdd191741401c197ae32bfff18e9d8b90a96
2024-01-16 19:20:02 +00:00
Angela Wu
0d32d1c172 Change the type of hw_jpg_device for selinux policy so that the GCA release flavor could access hw_jpg_device
Bug: 320410642
Test:m

Change-Id: If77a097b4ca823322ef41b13d6283390dac69d6c
2024-01-16 08:51:05 +00:00
Jeff Chang
da7e85e6c0 Update display dim configuration
To extend battery life, modify the display dim configuration to enter
the dimming state more aggressively. The screen should dim at
minimum(20 seconds, timeout * 0.33) before the screen actually timing
out.
 Screen timeout (secs) | Dim duration before | Dim duration After
              15                    3                      4.95
              30                    6                      9.9
              60                    7                     19.8
             120                    7                     20
             300                    7                     20
             600                    7                     20
Bug: 315246849
Test: Build & Verify the dim duration with each setting.
Change-Id: I79939290b6a355cf41d43f54a653c533ea833d26
2024-01-16 00:32:48 +00:00
Treehugger Robot
feffef59dd Merge "Allow Powerstats service to access refresh rate residency node" into main 2024-01-15 01:24:29 +00:00
Midas Chien
d6e79769c1 Allow Powerstats service to access refresh rate residency node
Bug: 315424658
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: I86288b4f523b4463a46d710a6556fa6852d4bea0
2024-01-12 13:01:17 +00:00
Mahesh Kallelil
389a451f8f Merge "Remove modem_svc selinux error from denials bug_map" into main 2024-01-12 06:43:44 +00:00
Mahesh Kallelil
1d8bcd694b Remove modem_svc selinux error from denials bug_map
This property was removed and is not being used anymore. So
modem_svc will not need to read it.

Bug: 316816737
Change-Id: Iaee56d15ca69e91fe952eaa188d3aaec69edf5dc
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2024-01-11 09:48:44 -08:00
Inseob Kim
80e1b3708f Label dtbo_block_device with flag-guarding am: 0c15160cad am: f817f9b687 am: bd1ea77736
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2903809

Change-Id: I445a175dd8daabc19da05f9d08690955d836f21c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-11 04:07:09 +00:00
Inseob Kim
bd1ea77736 Label dtbo_block_device with flag-guarding am: 0c15160cad am: f817f9b687
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2903809

Change-Id: I88784ab20f5e4a4c97000784e426a446a769777c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-11 03:02:37 +00:00
Inseob Kim
f817f9b687 Label dtbo_block_device with flag-guarding am: 0c15160cad
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2903809

Change-Id: I0f245e7f165401304b99d07ef7c064d9d86f0a74
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-11 02:31:13 +00:00
Inseob Kim
64fd14fdd8 Revert "Label dtbo partition as dtbo_block_device" am: f05143f43c am: 478449e638 am: 93607ec24a
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2903808

Change-Id: I9b7a68fd405327f22a08b9ba8759a45ee51a8b35
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-10 10:55:30 +00:00
Inseob Kim
93607ec24a Revert "Label dtbo partition as dtbo_block_device" am: f05143f43c am: 478449e638
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2903808

Change-Id: Ib54efad23c80ce27e140270759cada42332dd77b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-10 10:24:49 +00:00
Inseob Kim
478449e638 Revert "Label dtbo partition as dtbo_block_device" am: f05143f43c
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2903808

Change-Id: If197a913485f18554bf650c37c85911afa00a804
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-10 09:54:32 +00:00
Inseob Kim
0c15160cad Label dtbo_block_device with flag-guarding
Bug: 319035582
Test: run device assignment demo
Change-Id: I813be88391c9ff79d94e504149963160f1d74b2c
2024-01-10 17:02:34 +09:00
Inseob Kim
f05143f43c Revert "Label dtbo partition as dtbo_block_device"
This reverts commit 3773ca269e.

Reason for revert: b/319035582

Bug: 319035582
Test: boot
Change-Id: I3c2a5b5bc871aa506396c12d6e1fa036858c1273
2024-01-10 17:02:14 +09:00
Ken Yang
137c2ebd5a selinux: label wakeup for BMS I2C 0x36, 0x69
Bug: 319035561
Change-Id: Ib57dba71691f70b75fbae23208125fa750b32dc1
Signed-off-by: Ken Yang <yangken@google.com>
2024-01-10 06:14:37 +00:00
Lei Ju
52beafc4c4 [zuma] Use common settings for Contexthub HAL
Test: compilation
Bug: 248615564
Change-Id: I6691b23af6e532584f4dee9618c264b20b8873c0
2024-01-07 20:10:59 -08:00
Aaron Tsai
8b02313642 Remove tracking for b/316991604.
- no need to fix, so just remove the tracking record

Bug: 316991604
Test: manual test
Change-Id: Ifa70774650d3beaed5abd57297a3372f8d33661e
2024-01-08 02:58:11 +00:00
Treehugger Robot
d8c8e6f873 Merge "face: remove tracking for 305600857" into main 2024-01-08 01:06:39 +00:00
Nicole Lee
a03af7a36c Allows modem_svc to read the logging related properties am: 93020c0564 am: 8749626448
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25806672

Change-Id: I7934a5ed2936e9f42ed022fa1853974cab5019a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-06 01:00:09 +00:00
Nicole Lee
8749626448 Allows modem_svc to read the logging related properties am: 93020c0564
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25806672

Change-Id: I0f55efc6a18dd8e863debeaf47e32c67fbfdd6c5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-06 00:29:58 +00:00
Nicole Lee
93020c0564 Allows modem_svc to read the logging related properties
avc:  denied  { read } for  comm="modem_svc_sit" name="u:object_r:vendor_logger_prop:s0" dev="tmpfs" ino=387 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_logger_prop:s0 tclass=file permissive=0

Bug: 316250607
Change-Id: If1942986a0804e24b13c021740f7df8f406e53c2
(cherry picked from commit 728e6baa64)
2024-01-05 04:40:14 +00:00
Ilya Matyukhin
0e9173dfa2 face: remove tracking for 305600857
The policy was fixed in:
Ia8e4599e7cd44c815e88a34ee7d9229a3391b598

Bug: 305600857
Test: adb logcat | grep "avc:"
Change-Id: I831acc083c118ca35d095d040aedcd9b85cfb3a5
2024-01-04 22:23:16 +00:00
Treehugger Robot
b808c32b7d Merge "Allows modem_svc to read the logging related properties" into main 2024-01-04 10:09:18 +00:00
Nicole Lee
728e6baa64 Allows modem_svc to read the logging related properties
avc:  denied  { read } for  comm="modem_svc_sit" name="u:object_r:vendor_logger_prop:s0" dev="tmpfs" ino=387 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_logger_prop:s0 tclass=file permissive=0

Bug: 316250607
Change-Id: If1942986a0804e24b13c021740f7df8f406e53c2
2024-01-02 08:50:36 +00:00
Kiyoung Kim
0d7dcca863 Remove SELinux error from b/313804706
Remove SELinux error from b/313804706 as the issue is solved now.

Bug: 313804706
Test: No selinux denial error from boot with husky-trunk_staging-userdebug build
Change-Id: I19c7fba663abac4d180b6a144f0aff5d108806f6
2024-01-02 04:30:16 +00:00
Jasmine Cha
839ddde474 audio: remove denials list for dcservice
Bug: 299553227
Test: boot to home with test build b/299553227#comment8

Change-Id: I9ee23a9aa753d891d233e337908c2091d63f3834
Signed-off-by: Jasmine Cha <chajasmine@google.com>
2023-12-28 05:10:34 +00:00
Lei Ju
5a4795ccd7 Merge "[zuma] Update chre sepolicy for socket connection" into main 2023-12-28 03:50:00 +00:00
Ján Sebechlebský
26b57fcdc6 Merge "Remove bug_map entry for dumpstate <-> virtual_camera" into main 2023-12-27 15:31:07 +00:00
Jan Sebechlebsky
76ea521186 Remove bug_map entry for dumpstate <-> virtual_camera
The denial was fixed in aosp/2852613.

Bug: 312894238
Test: N/A
Change-Id: I3121489729e23afa10904cb97f547e965e0c68f4
2023-12-27 14:04:36 +01:00
Lei Ju
8587126f45 [zuma] Update chre sepolicy for socket connection
With multiclient HAL, the socket server domain changes from chre to
hal_contexthub_default.

Bug: 248615564
Test: updated the sepolicies and observed that avc violation logs
      disappears.
Change-Id: I4b2d27b436c9d81bd0d0cdc5b3c1540884c37fec
2023-12-27 00:02:57 -08:00
timtmlin
404089ca94 Remove obsolete entries
Bug: 315720601
Bug: 315720874
Test: make
Change-Id: I538c76e009c6d29c9d2cac39778decc679446906
2023-12-27 15:23:58 +08:00
Wilson Sung
5b30dbfbb3 Allow SysUI to write protolog file
This is enabled on debuggable builds only, includes
- Grant mlstrustedsubject typeattribute to wm_trace_data_file
- Grant systemui_app the write access to
  wm_trace_data_file

Bug: 251513116
Fix: 288049075
Test: make sepolicy
Change-Id: Ifa5a5281c6e8c7ecedcd601fc8cc58c4be6bdc3b
2023-12-27 11:01:12 +08:00
Shiyong Li
569134db41 Merge "display: support primary display preferred mode property" into main 2023-12-22 19:54:46 +00:00
Chi Zhang
f965c0b222 Merge "Allow GRIL to get power stats." into main 2023-12-22 19:29:06 +00:00
Kadi Narmamatov
09c85a0567 Merge "rfsd: add new property to sepolicy" into main 2023-12-22 09:10:49 +00:00
Shiyong Li
d26ab660b8 display: support primary display preferred mode property
Bug: 315895938
Test: check default mode after factory reset
Change-Id: Ia5a4c12537d50faf54ed5ea82d24e52a623c34e3
Signed-off-by: Shiyong Li <shiyongli@google.com>
2023-12-21 20:12:45 +00:00
Wilson Sung
79ba49730b Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 317316633
Change-Id: I8c1b97d6c65ec06e0a13e1447538f7cebf21d962
2023-12-21 07:37:01 +00:00
kadirpili
5c28db1f6b rfsd: add new property to sepolicy
Bug: 307481296
Change-Id: Icd287f863fd6d309297ce984f4ce387fb5d3ae24
2023-12-20 07:27:32 +00:00
Chi Zhang
a2e8969139 Allow GRIL to get power stats.
SELinux : avc:  denied  { find } for pid=3147 uid=10219 name=android.hardware.power.stats.IPowerStats/default scontext=u:r:grilservice_app:s0:c219,c256,c512,c768 tcontext=u:object_r:hal_power_stats_service:s0 tclass=service_manager permissive=1

Bug: 286187143
Test: build and boot
Change-Id: I6df25e78ba8fa8efaa7f51aed8e981ac382dcd29
2023-12-19 12:22:08 -08:00
Wilson Sung
f8f64b668c Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 316991604
Change-Id: Ic90ace8d5b6ac787030f6fd26d96f41677fcca42
2023-12-19 06:27:10 +00:00
Wilson Sung
31c017f325 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 316816737
Bug: 316816642
Change-Id: Ie61999d23158c81e2acb4d23eb106cb6f61f9b88
2023-12-18 03:28:40 +00:00
Imo Richard Umoren
b3e48816fa Twoshay: Add SELinux Permissions for CHRE [Zuma]
Adds connection and write permissions for chre socket to SELinux policy.
Used for the Wallaby nanoapp.

Bug: b/315347346
Bug: b/314721681
Test: Manually tested on SB3 Proto 1.0
Change-Id: I4a01be73d76a577d8da07c36276349525c0fda68
2023-12-12 17:23:35 +00:00
Wilson Sung
259348f8f7 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 315720601
Test: scanBugreport
Bug: 315720874
Bug: 315104803
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315104803
Change-Id: If15ba27fec6c876984823f8bb214bb7db59f7fd2
2023-12-11 02:54:00 +00:00
Wilson Sung
2ecdf16781 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 315104235
Test: scanBugreport
Bug: 315104508
Bug: 315104235
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315104941
Bug: 315104235
Change-Id: Icb01366f95e6ca4001246215e487d702131b6947
2023-12-06 10:44:09 +00:00
David Drysdale
7beccb101a Merge "Add Secretkeeper HAL" into main 2023-12-06 10:21:03 +00:00
David Drysdale
98448f5628 Add Secretkeeper HAL
Test: VtsAidlAuthGraphSessionTest
Bug: 306364873
Change-Id: I57de11a4c08476979e9283914a552a90254ee3fb
2023-12-05 10:39:26 +00:00
Ray Chi
7e755bb143 Add eusb_repeater to vendor_usb_debugfs context
Bug: 305145476
Test: adb bugreport
Change-Id: I8fe6eebb43ed80de486d93882879512d0918acee
2023-12-05 16:38:16 +08:00
Jason Chiu
47c545c8b0 zuma: move sepolicy related to bootctrl hal to gs-common
Bug: 265063384
Change-Id: Ic99547173f6eade30bce2d60051163336b27ca3b
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-12-05 00:45:55 +08:00
Wilson Sung
7e977d05b5 Merge "Update SELinux error" into main 2023-12-04 02:33:03 +00:00
Daniel Norman
5f8ba1c0d3 Removes duplicate hidraw_device type definition. am: f219d38925 am: f2e746b644
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25533485

Change-Id: Id71f76f518ee2dd74cb7dc4ce0cfc3253853fb1b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-02 01:52:12 +00:00
Daniel Norman
f2e746b644 Removes duplicate hidraw_device type definition. am: f219d38925
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25533485

Change-Id: Ie0b6287cb50284c1ae6fc6ab40f89506efb71887
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-02 01:02:35 +00:00
Daniel Norman
f219d38925 Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Change-Id: Ic46a7327bb2dab89f424cde2682a40f2b28a04db
Test: ls -z /dev/hidraw0
(cherry picked from commit 8ff4604573)
2023-12-02 00:01:28 +00:00
Daniel Norman
979e64b5f2 [automerger skipped] Removes duplicate hidraw_device type definition. am: 2729e96ec8 -s ours
am skip reason: Merged-In Ic46a7327bb2dab89f424cde2682a40f2b28a04db with SHA-1 8ff4604573 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25531285

Change-Id: I1f0d61fa7d734e739070c1e23cda82d727d66944
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-12-01 23:27:20 +00:00
Daniel Norman
2729e96ec8 Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Test: ls -z /dev/hidraw0
Change-Id: Ic46a7327bb2dab89f424cde2682a40f2b28a04db
Merged-In: Ic46a7327bb2dab89f424cde2682a40f2b28a04db
(cherry picked from commit 8ff4604573)
2023-12-01 19:24:56 +00:00
Dario Freni
2584e99c58 Merge "Revert "zuma: move sepolicy related to bootctrl hal to gs-common"" into main 2023-12-01 13:00:07 +00:00
Sebastian Pickl
fbe923d20a Revert "zuma: move sepolicy related to bootctrl hal to gs-common"
Revert submission 25477883-gs-common_bootctrl-aidl

Reason for revert: breaking builds b/314240126

Bug: 314240126

Reverted changes: /q/submissionid:25477883-gs-common_bootctrl-aidl

Change-Id: I84dda0a7c98ed1d1f7958734761c9c1a0bd9d169
2023-12-01 11:30:45 +00:00
Treehugger Robot
421b5abf97 Merge "zuma: move sepolicy related to bootctrl hal to gs-common" into main 2023-12-01 03:57:28 +00:00
Treehugger Robot
124e7aa639 Merge "Suppress avc error log on debugfs's usb folder." into main 2023-11-30 23:26:22 +00:00
Luis Delgado De Mendoza
76972151b2 Merge "Add sepolicy entries for new BT channel" into main 2023-11-30 16:21:41 +00:00
Wilson Sung
14dda6e255 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 314054292
Test: scanBugreport
Bug: 313804706
Bug: 312894238
Change-Id: Ibf9517b585dcd8e06c62075d85dc55eb8ed7d18d
2023-11-30 07:14:04 +00:00
Khoa Hong
fb1c8b60bb Suppress avc error log on debugfs's usb folder.
The XHCI driver in kernel will write debugging information to DebugFS on
some USB host operations (for example: plugging in a USB headphone). We
are not using those information right now.

Bug: 311088739
Test: No error when plugging a USB headphone in.
Change-Id: I3a8e2290e97967c02453eadff440d8bbeefa31b1
2023-11-30 14:50:52 +08:00
Jason Chiu
23feade4db zuma: move sepolicy related to bootctrl hal to gs-common
Bug: 265063384
Change-Id: I230ca394c5d1b6e68dd8b4d51ea06568810eb4e0
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-11-27 17:45:29 +08:00
Treehugger Robot
9c8cb72283 Merge "allow vendor init to access percpu_pagelist_high_fraction" into main 2023-11-27 01:45:54 +00:00
Kyle Tso
9bd6f5ebd1 hal_usb_impl: Add get_prop for vendor_usb_config_prop am: 5775ea074a am: 2816dc3328
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25353179

Change-Id: I8745571157eb29f5809b338383c11aa64a1c67ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-23 14:58:34 +00:00
Kyle Tso
2816dc3328 hal_usb_impl: Add get_prop for vendor_usb_config_prop am: 5775ea074a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25353179

Change-Id: Ie03d8b8da3e6ca672906764bebfc29ef6d3cf97e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-23 14:25:25 +00:00
Kyle Tso
5775ea074a hal_usb_impl: Add get_prop for vendor_usb_config_prop
avc:  denied  { read } for  comm="android.hardwar" name="u:object_r:vendor_usb_config_prop:s0" dev="tmpfs" ino=391 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=file permissive=0

Bug: 310560098
Change-Id: I86588715cae2696dd0e045c5b75dde55e0f84c1e
Signed-off-by: Kyle Tso <kyletso@google.com>
2023-11-23 08:33:04 +00:00
Chia-Chi Teng
59af5f70be Merge "Revert^3 "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev am: edac582d40 am: 650409d4b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25400378

Change-Id: I2003f92080f61363c0549d36a2a95c0ddf651a6a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-23 08:11:42 +00:00
Chia-Chi Teng
650409d4b4 Merge "Revert^3 "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev am: edac582d40
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25400378

Change-Id: I92c8528073ca783dba8f9de5c51dde3616da47c9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-23 07:39:22 +00:00
Martin Liu
b25d110b38 allow vendor init to access percpu_pagelist_high_fraction
Bug: 309409009
Test: boot
Change-Id: I2a4b34e3318b5de8688fe25133d7839165a2566d
Signed-off-by: Martin Liu <liumartin@google.com>
2023-11-23 15:35:07 +08:00
Chia-Chi Teng
edac582d40 Merge "Revert^3 "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev 2023-11-23 07:07:04 +00:00
Randall Huang
60b467ac40 Move sg_device related policy
Bug: 312582937
Test: make selinux_policy
Change-Id: Ic6e1f6228764cd2ddc96d574a10838ca4bc05332
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-11-22 14:21:06 +08:00
Wilson Sung
039124e7a4 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 312590044
Change-Id: I24e5462f111f05d051d398487a5931d808cf3002
2023-11-22 03:15:40 +00:00
Bryan Lavrich
70a5a27331 Merge "aoc: add sysfs file entry" into main 2023-11-20 20:22:27 +00:00
Devika Krishnadas
9fcc03e099 Merge "Add Pixel Mapper as a sp-HAL" into main 2023-11-20 18:17:28 +00:00
Luis Delgado de Mendoza
e5f95d1fc7 Add sepolicy entries for new BT channel
Bug: 308452948
Test: Validated locally on husky.
Change-Id: I68bce4f12b086168bdcbe6193b07dd1c11097c2d
2023-11-17 20:03:39 -08:00
Kyle Tso
658c20d024 dontaudit on dir search for vendor_votable_debugfs
Bug: 305880925
Bug: 310539058
Change-Id: I5e13370fe5430f3dfbf73ccff787986fbe80f9ea
Signed-off-by: Kyle Tso <kyletso@google.com>
2023-11-17 05:21:48 +00:00
Kyle Tso
0c0ce3699a Merge "hal_usb_impl: Add get_prop for vendor_usb_config_prop" into main 2023-11-17 03:51:44 +00:00
Chia-Chi Teng
d240d1b4e2 Revert^3 "bluetooth: Allow triggering AOC reset from BT HAL"
eb2dcaedc8

Change-Id: Idb64a3e6d60747273159682102a5367b99fe6833
2023-11-16 22:37:36 +00:00
Devika Krishnadas
b5c8a252b2 Add Pixel Mapper as a sp-HAL
Bug: 267352318

Change-Id: I3068038eb51f1a78a2cd300a6b71d96a2647b641
Signed-off-by: Devika Krishnadas <kdevika@google.com>
2023-11-16 01:25:45 +00:00
Angela Wu
ca8e0baee7 [automerger skipped] Allows GCA to access the hw_jpeg /dev/video12. am: 77ce612093 -s ours am: 4746ff1aee -s ours
am skip reason: Merged-In I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6 with SHA-1 6216625ef8 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25321138

Change-Id: Ia2f1c97331008bae978881fb6e3708f93964332b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 09:56:28 +00:00
Angela Wu
4746ff1aee [automerger skipped] Allows GCA to access the hw_jpeg /dev/video12. am: 77ce612093 -s ours
am skip reason: Merged-In I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6 with SHA-1 6216625ef8 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25321138

Change-Id: Iad6a9cc9166ae916b05fc137d5c39ed315f01309
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 09:06:56 +00:00
Angela Wu
77ce612093 Allows GCA to access the hw_jpeg /dev/video12.
Bug: 309578078
Test: https://android-build.corp.google.com/builds/abtd/run/L41100030000291922

Merged-In: I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6
Change-Id: I5b1649ec393d2f998159299b0f4feddcde4da80f
2023-11-15 06:28:23 +00:00
Kyle Tso
8912975a8b hal_usb_impl: Add get_prop for vendor_usb_config_prop
avc:  denied  { read } for  comm="android.hardwar" name="u:object_r:vendor_usb_config_prop:s0" dev="tmpfs" ino=391 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=file permissive=0

Bug: 310560098
Change-Id: I86588715cae2696dd0e045c5b75dde55e0f84c1e
Signed-off-by: Kyle Tso <kyletso@google.com>
2023-11-14 02:15:14 +00:00
Daniel Norman
8ff4604573 Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Change-Id: Ic46a7327bb2dab89f424cde2682a40f2b28a04db
Test: ls -z /dev/hidraw0
2023-11-10 22:52:00 +00:00
Alex Iacobucci
ca145d66c3 aoc: add sysfs file entry
Test: on device
Bug: 309950738
Change-Id: Iddaf30fce0bfd88d275d577b71bedd826b7a3ee6
Signed-off-by: Alex Iacobucci <alexiacobucci@google.com>
2023-11-10 18:27:42 +00:00
Angela Wu
0774e72816 Allows GCA to access the hw_jpeg /dev/video12. am: 6216625ef8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25311860

Change-Id: I2d7bf8ff4ff6dc07bffc1aa43c966a4a6ccda05f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-10 03:19:12 +00:00
Angela Wu
6216625ef8 Allows GCA to access the hw_jpeg /dev/video12.
Bug: 309578078
Test: https://android-build.corp.google.com/builds/abtd/run/L93200030000133974
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:0dde58951666a96f788a8a75bf63cde34079d48a)
Merged-In: I5b1649ec393d2f998159299b0f4feddcde4da80f
Change-Id: I5b1649ec393d2f998159299b0f4feddcde4da80f
This change is essentially a re-submission of ag/25305073 to an upstream branch.

Change-Id: I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6
2023-11-09 10:09:31 +00:00
Mike Wang
d6f83eba29 Merge "Change the MDS to platform app in selinux ap context." into main 2023-11-08 07:05:09 +00:00
Angela Wu
2e724b4b7f Merge "Allows GCA to access the hw_jpeg /dev/video12." into main 2023-11-08 05:20:21 +00:00
Treehugger Robot
0418f329cf Merge "Allow HWC to access display refresh control" into main 2023-11-08 04:20:23 +00:00
Mike Wang
96bac14cb1 Change the MDS to platform app in selinux ap context.
The MDS will be signed with platform key and become a platform app. To
make the selinux rules for modem_diagnostic_app work, need to set it to
platform app in app context.

Bug: 287683516

Test: Tested with both dev key or platform key signed MDS apps and the selinux rules works.


Change-Id: I375f57537a81514d3a6230ca042a4407accd6c15
2023-11-08 04:01:26 +00:00
Angela Wu
73caf508ec Allows GCA to access the hw_jpeg /dev/video12.
Bug: 309578078
Change-Id: Ic243a8dc0d6b2decd0ac70d076a456296936e9af
Test: https://android-build.corp.google.com/builds/abtd/run/L93200030000133974
2023-11-08 03:36:48 +00:00
Treehugger Robot
d76fa68860 Merge "sensors: Move USF related sepolicy to gs-common." into main 2023-11-07 06:49:08 +00:00
Rick Chen
587903f7c4 sensors: Move USF related sepolicy to gs-common.
Bug: 305120274
Test: Compile pass. Flash the build to ZUMA devices and no sensor
      related avc denied log.
Change-Id: I6911992b59802b62ffd206fd53e678da65ef1363
Signed-off-by: Rick Chen <rickctchen@google.com>
2023-11-06 23:20:16 +08:00
Sam Ou
c3d0ba2da2 Merge changes from topic "thismeal_enhancement" into main
* changes:
  Allow dump_power to create thismeal.txt by executing battery_mitigation
  Update odpm scale value sepolicy
2023-11-06 10:36:49 +00:00
Chris Lu
c13e6b0d82 Allow HWC to access display refresh control
Bug: 295603692
Test: write the node successfully
Change-Id: Ie900a9de4c23201ddefd61456bb2b8a80ba1945a
2023-11-06 09:28:09 +00:00
Mike Wang
7d43b5edb6 Merge "Add selinux policy change to allow MDS access Samsung OemRil hal." into main 2023-11-06 02:30:55 +00:00
samou
90ef181121 Allow dump_power to create thismeal.txt by executing battery_mitigation
Bug: 293899466
Change-Id: I88d4e3bcf18e818e9ee53ed69e522c9678c6edff
Signed-off-by: samou <samou@google.com>
2023-11-03 09:59:05 +00:00
mikeyuewang
b066861a22 Add selinux policy change to allow MDS access Samsung OemRil hal.
Bug: 301641283

selinux log:
11-03 15:32:38.850  2643  2643 I auditd  : type=1400 audit(0.0:1616): avc:  denied  { call } for  comm="binder:2643_3" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.850  2643  2643 I binder:2643_3: type=1400 audit(0.0:1616): avc:  denied  { call } for  scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  2643  2643 I auditd  : type=1400 audit(0.0:1617): avc:  denied  { transfer } for  comm="binder:2643_3" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  2643  2643 I binder:2643_3: type=1400 audit(0.0:1617): avc:  denied  { transfer } for  scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  1095  1095 I auditd  : type=1400 audit(0.0:1618): avc:  denied  { call } for  comm="HwBinder:1095_1" scontext=u:r:rild:s0 tcontext=u:r:modem_diagnostic_app:s0:c512,c768 tclass=binder permissive=1
11-03 15:32:38.854  1095  1095 I HwBinder:1095_1: type=1400 audit(0.0:1618): avc:  denied  { call } for  scontext=u:r:rild:s0 tcontext=u:r:modem_diagnostic_app:s0:c512,c768 tclass=binder permissive=1


Change-Id: Ia71844db230302fd3120b28b3ade2e55443ec078
2023-11-03 07:42:38 +00:00
Chia-Chi Teng
244aed251d Revert^2 "bluetooth: Allow triggering AOC reset from BT HAL" am: eb2dcaedc8 am: 5c827dca3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25205134

Change-Id: Ief73384699e0dfba3d3b8a79545bb3a3ad27c4c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 19:03:04 +00:00
Chia-Chi Teng
5c827dca3a Revert^2 "bluetooth: Allow triggering AOC reset from BT HAL" am: eb2dcaedc8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25205134

Change-Id: I075a05a8ccf755700923c9de7106b57f7f876830
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 17:56:21 +00:00
samou
3f67ca9478 Update odpm scale value sepolicy
Bug: 290149543
Change-Id: I66108d908ffa5cc6853b1e8280a5568c92a2e66f
Signed-off-by: samou <samou@google.com>
2023-10-31 12:13:45 +00:00
Chia-Chi Teng
eb2dcaedc8 Revert^2 "bluetooth: Allow triggering AOC reset from BT HAL"
This reverts commit 0aa787efa8.

Reason for revert: Debug BT HCI timeout on UD2A build and P23 on main

Bug: 306646797
Test: presubmit PTS
Change-Id: Ia72ea9d0ba0209cce483d220b420933b243e05b3
2023-10-27 22:53:17 +00:00
Daniel Okazaki
11ea7dd6d6 dump_power: adding dwell defend logs sepolicy
Bug: 306108267
Test: build/flash
Test: adb bugreport
Change-Id: Idb0571b6a974b98649f9cc071d506a8be94966f5
Signed-off-by: Daniel Okazaki <dtokazaki@google.com>
2023-10-27 18:45:43 +00:00
Chris Lu
32d99c3e05 Set context for sysfs file panel_pwr_vreg
Bug: 296978805
Test: read panel_pwr_vreg by dumpstate
Change-Id: Idc4845cadb278ef6406003cb3e55bfbdba758b4b
2023-10-27 07:46:46 +00:00
Sam Ou
5d83d85ad2 Merge "Allow battery_motigation to access gpu cur_freq" into main 2023-10-27 02:33:00 +00:00
Jacky Liu
8d46bb7983 Update sepolicy for new static i2c bus numbers
Bug: 305242309
Test: Boot to home
Change-Id: Ic235f6c2a4d325103dcd03e0977c1a88e98a0605
2023-10-23 14:26:55 +08:00
samou
a534079494 Allow battery_motigation to access gpu cur_freq
Bug: 290149543
Change-Id: I3396573d67f9f0995e63cd1e559f968107695d8b
Signed-off-by: samou <samou@google.com>
2023-10-23 01:44:06 +00:00
Ken Yang
fcf7f847ae SELinux: fix wakeup selinux issue
Bug: 305600876
Change-Id: I21a8993291b05a991e32bb7c363b5e831f4d0db0
Signed-off-by: Ken Yang <yangken@google.com>
2023-10-20 09:48:03 +00:00
John Chang
d20bee68db Merge "display: properties of vrr settings" into main 2023-10-18 15:46:47 +00:00
Wilson Sung
d48c63c215 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 305600857
Change-Id: I4715b66f1b1c051c8d83cffefdf4f3de6e5971ef
2023-10-16 12:19:18 +08:00
Hiroshi Akiyama
ea65836d59 Merge "Update missing dump_power sepolicy" into main 2023-10-15 23:45:47 +00:00
Hiroshi Akiyama
400a9d2068 Update missing dump_power sepolicy
Bug: 304851502
Test: adb bugreport and check dumpstate_board.txt
Change-Id: I1aed85ec3c1106381a395867a6eb90c11a8a1f84
Signed-off-by: Hiroshi Akiyama <hiroshiakiyama@google.com>
2023-10-14 05:02:16 +00:00
jonerlin
5883c27036 allow hal_bluetooth_btlinux write sysfs file am: 127ca27edc am: a49aa2bdf1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24947936

Change-Id: I52e9eb48b5e73a6f388a3fb446d1e402bdca4468
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-13 03:14:04 +00:00
jonerlin
a49aa2bdf1 allow hal_bluetooth_btlinux write sysfs file am: 127ca27edc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24947936

Change-Id: I183c49c5209e811166a96d2a9e2819bd29373b7c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-13 02:56:21 +00:00
Treehugger Robot
9b0ab2c62c Merge "hal_sensors_default: Add permission to AOC reset sysfs node." into main 2023-10-13 02:43:10 +00:00
Rick Chen
c31ec37715 hal_sensors_default: Add permission to AOC reset sysfs node.
[21675.099727] type=1400 audit(1697127034.684:751): avc:  denied  { write } for  comm="binder:912_1" name="reset" dev="sysfs" ino=102250 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_aoc_reset:s0 tclass=file permissive=0

Bug: 304681766
Test: Modify sensor HAL to trigger SSR when init.
      No avc denied log when sensor HAL access AOC reset sysfs node.
Change-Id: Iede0fa94a627c5e0d3166bec05ef7041154d8efe
Signed-off-by: Rick Chen <rickctchen@google.com>
2023-10-13 02:41:28 +00:00
jonerlin
127ca27edc allow hal_bluetooth_btlinux write sysfs file
Bug: 294747612
Test: v2/pixel-pts/release/bootstress/1200counts/suspend-resume
Change-Id: I62147f0b32156ede2a4e18e5a2bcb77fc2c91831
2023-10-13 09:00:07 +08:00
Brian Duddie
48527a1e6f Merge "Revert "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev am: c387226619 am: d1ddce264c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24948148

Change-Id: Ic95a0ecc1722769c2ac9ac7711ae93ea85a16ce0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-12 23:20:21 +00:00
Brian Duddie
d1ddce264c Merge "Revert "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev am: c387226619
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24948148

Change-Id: I59fbb4f03909803a422ff9a9abd17cae32eb7014
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-12 22:48:59 +00:00
Brian Duddie
c387226619 Merge "Revert "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev 2023-10-12 22:25:50 +00:00
John Chang
33c5d3185c display: properties of vrr settings
Bug: 290843234
Test: verify getprop/setprop after reboot.
Change-Id: I7e69fba9d16cabf899bf0d1c4ba041f079e645c1
2023-10-10 21:37:17 +00:00
Matthew Sedam
b2592218d6 Merge "Allow CHRE to access the IStats service for the zuma target" into main 2023-10-09 18:18:57 +00:00
Chia-Chi Teng
0aa787efa8 Revert "bluetooth: Allow triggering AOC reset from BT HAL"
Revert submission 24871772-bt-aoc-coredump

Reason for revert: b/300076774 root cause identified as b/299038059

Reverted changes: /q/submissionid:24871772-bt-aoc-coredump

Bug: 299038059
Change-Id: Ibd021c6b983c2eb390c268cf89f30e2e8ee54d21
2023-10-06 22:04:57 +00:00
Roy Luo
56723a2036 Merge "Support metric upload in USB HAL" into main 2023-10-05 20:24:46 +00:00
Mike Wang
bb474d5e68 Merge "Grant the MDS access to the IPowerStats hal service." into udc-qpr-dev am: fd78823dfa am: 7eafbc0be0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24610375

Change-Id: Ic1bc4799d21df9a120946241f5bf278a1be6e12c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-05 17:13:10 +00:00
Mike Wang
7eafbc0be0 Merge "Grant the MDS access to the IPowerStats hal service." into udc-qpr-dev am: fd78823dfa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24610375

Change-Id: If95e8b46a87625618bce50a19690bf4773625e9a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-05 16:24:40 +00:00
Mike Wang
fd78823dfa Merge "Grant the MDS access to the IPowerStats hal service." into udc-qpr-dev 2023-10-05 15:55:47 +00:00
Roy Luo
aa5218c8a7 Support metric upload in USB HAL
Grant access to stats service.
Sample error logs: avc:  denied  { find } for pid=949 uid=1000
name=android.frameworks.stats.IStats/default
scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:fwk_stats_service:s0
tclass=service_manager permissive=0

Bug: 297224564
Test: no audit log in logcat after command execution
Change-Id: I4a80e11e63ec164dff73288e93aac851ffebb696
2023-10-04 20:02:39 +00:00
Matthew Sedam
ad0075acd6 Allow CHRE to access the IStats service for the zuma target
Bug: 298459533
Test: Use stats service from chre
Change-Id: Ie4c9a24d3cd331621136c7c21989685631d87519
2023-10-02 20:52:36 +00:00
Jing Wang
e853c1919d Revert "Add vendor_sjtag_lock_state_prop and init-check_ap_pd_au..."
Test: Revert submission 24754347-zuma-etm2dram

Reason for revert: b/302352974

Reverted changes: /q/submissionid:24754347-zuma-etm2dram

Bug: 302352974
Change-Id: I251c3a62c79722a9050bdbce85dc758fc4b6fda9
2023-09-29 01:25:27 +00:00
mikeyuewang
1ee598d5d2 Grant the MDS access to the IPowerStats hal service.
ref logs:
09-06 10:07:18.006   536   536 I auditd  : avc:  denied  { find } for pid=22543 uid=10225 name=android.hardware.power.stats.IPowerStats/default scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:hal_power_stats_service:s0 tclass=service_manager permissive=1
09-06 10:07:18.010 22543 22543 I auditd  : type=1400 audit(0.0:65): avc:  denied  { call } for  comm="pool-4-thread-1" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=1 app=com.google.mds

Test: Tested with MDS app and the MDS can get IPowerStats binder and
call the interface.

Bug: 297250368
Change-Id: I7b0eeabdafb49eb33d8016666f9c02f2616f898d
2023-09-28 15:22:00 +00:00
Brian Duddie
1af5314ec0 bluetooth: Allow triggering AOC reset from BT HAL am: 858f999657 am: 89d7732591
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24869257

Change-Id: I3381cfdfff17ca8c2f77fa5043775a5f80ea028e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-27 22:50:28 +00:00
Brian Duddie
89d7732591 bluetooth: Allow triggering AOC reset from BT HAL am: 858f999657
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24869257

Change-Id: I5bdeb95ad44c69d2b8cd04f12dc7cde49580084c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-27 21:45:56 +00:00
Brian Duddie
858f999657 bluetooth: Allow triggering AOC reset from BT HAL
Supports debugging and recovery from fatal errors that do not trigger
AOC SSR on their own.

Bug: 300076774
Test: trigger SSR from BT HAL
Change-Id: I795b2c1830625e2cf05a9aa63c6f7ef273b01a87
2023-09-27 00:08:19 +00:00
Sergey Volk
a1e0faee5b Allow HWC access to dp_hotplug_error_code in sysfs
When an error is detected, DisplayPort kernel driver writes hotplug error code into a sysfs file. Hardware composer reads the error code from sysfs and then needs to write 0 in there to reset the code.

Test: manual
Bug: 283461313
Change-Id: Ifadc2403d62b12b0661fd170fa6df36b6a199fc3
2023-09-21 02:56:08 +00:00
Treehugger Robot
56e8cb4aa3 Merge "Add vendor_sjtag_lock_state_prop and init-check_ap_pd_auth-sh" into main 2023-09-20 08:24:55 +00:00
John Chang
acb925a4fe Merge "display: properties of vrr settings" into main 2023-09-18 21:38:01 +00:00
Yixuan Wang
143311cda0 Merge "Add selinux policy for chre vendor data directory" into main 2023-09-18 17:35:11 +00:00
John Chang
85d45d6776 display: properties of vrr settings
Bug: 290843234
Test: verify getprop/setprop after reboot.
Change-Id: I1ff2b7069f0e6a5a9aef6ac2f6ac6d89b457dcc3
2023-09-18 14:19:11 +00:00
Wilson Sung
488d348114 Merge changes from topic "b299029620_cleanup" into main
* changes:
  Relocate common tracking denial entries
  Remove obsolete entries
2023-09-18 02:54:32 +00:00
yixuanwang
0a4d3c2f89 Add selinux policy for chre vendor data directory
Bug: 278114604
Test: on device test
Change-Id: I33d1e73a375c86602ce632665fe96c5876347c52
2023-09-16 02:51:45 +00:00
Yixuan Wang
eae42fd8f4 Merge changes from topic "am-1b65f256ed6d44cb931295968c81bde7" into udc-qpr-dev-plus-aosp am: 284bdc3fa5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: I7806e779a085c025de63d728eb0c52340db9612d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 20:07:37 +00:00
Yixuan Wang
43f05a7e41 [automerger skipped] Merge "Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..."" into udc-qpr-dev am: adf19fcc76 am: b02946bca9 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: I0a663d71d92d175823b7878aa37b6c032471cf58
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 20:07:34 +00:00
Yixuan Wang
ca2ba97013 [automerger skipped] Merge "Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..."" into udc-qpr-dev am: adf19fcc76 am: 0603f723f4 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: I6e7230b804267bea465fb976bfa906240db91b83
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 20:04:23 +00:00
Yixuan Wang
6100be27ef [automerger skipped] Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..." am: bd654f00d9 am: cb920d586f -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: I6df3d77eaa660e9474dfc76a0691b8222fd7fba0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 20:04:21 +00:00
Yixuan Wang
284bdc3fa5 Merge changes from topic "am-1b65f256ed6d44cb931295968c81bde7" into udc-qpr-dev-plus-aosp
* changes:
  Merge "Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..."" into udc-qpr-dev am: adf19fcc76
  Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..." am: bd654f00d9
2023-09-15 18:38:02 +00:00
Yixuan Wang
0603f723f4 Merge "Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..."" into udc-qpr-dev am: adf19fcc76
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: I307c73fcecb5e213ab186b4610a5be681262a680
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 18:14:42 +00:00
Yixuan Wang
cb920d586f Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..." am: bd654f00d9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: Iba1c14faaf0c1e423f914ca860f83d75d5496a54
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 18:14:40 +00:00
Desmond Huang
c62d6871b3 Relocate common tracking denial entries
Bug: 299029620
Change-Id: I587e53a54e6bf4e3ccaa572cb35c28b4a0bc1eed
2023-09-15 03:39:48 +00:00
Desmond Huang
6f2589ec74 Remove obsolete entries
Bug: 299029620
Change-Id: Ib4782148b3e1167fd0113e5ec3eced7348a0cac2
2023-09-15 03:37:16 +00:00
Yixuan Wang
b02946bca9 Merge "Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..."" into udc-qpr-dev am: adf19fcc76
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: Ifbc5098189471983e87ef6e607b0a50e82b985a3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 01:12:39 +00:00
Yixuan Wang
1c333dd6dc Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..." am: bd654f00d9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: Id83469911f8d0f9bd997f53aa49176dc6c083bd5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 01:12:33 +00:00
Yixuan Wang
adf19fcc76 Merge "Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..."" into udc-qpr-dev 2023-09-15 00:23:04 +00:00
Treehugger Robot
e3aa243bcf Merge "Add required sepolicy rule for Camera" into udc-qpr-dev am: 64c085cfab am: ed60a3086e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24418269

Change-Id: Id7f41df36e3fec35001a4188e4dd023c84f704f0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-14 04:14:40 +00:00
Treehugger Robot
ed60a3086e Merge "Add required sepolicy rule for Camera" into udc-qpr-dev am: 64c085cfab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24418269

Change-Id: I28d9a36decdc7e2646ee17450804fae715cbc4f8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-14 04:04:59 +00:00
Treehugger Robot
64c085cfab Merge "Add required sepolicy rule for Camera" into udc-qpr-dev 2023-09-14 03:20:33 +00:00
Woody Lin
9687d162bc Add vendor_sjtag_lock_state_prop and init-check_ap_pd_auth-sh
1. Add init-check_ap_pd_auth-sh for the vendor daemon script
   `/vendor/bin/init.check_ap_pd_auth.sh`.
2. Add policy for properties `ro.vendor.sjtag_{ap,gsa}_is_unlocked` for
   init, init-check_ap_pd_auth-sh and ssr_detector to access them.

SjtagService: type=1400 audit(0.0:1005): avc:  denied  { open } for  path="/dev/__properties__/u:object_r:vendor_default_prop:s0" dev="tmpfs" ino=379 scontext=u:r:ssr_detector_app:s0:c512,c768 tcontext=u:object_r:vendor_default_prop:s0 tclass=file permissive=1
SjtagService: type=1400 audit(0.0:1006): avc:  denied  { getattr } for  path="/dev/__properties__/u:object_r:vendor_default_prop:s0" dev="tmpfs" ino=379 scontext=u:r:ssr_detector_app:s0:c512,c768 tcontext=u:object_r:vendor_default_prop:s0 tclass=file permissive=1
SjtagService: type=1400 audit(0.0:1007): avc:  denied  { map } for  path="/dev/__properties__/u:object_r:vendor_default_prop:s0" dev="tmpfs" ino=379 scontext=u:r:ssr_detector_app:s0:c512,c768 tcontext=u:object_r:vendor_default_prop:s0 tclass=file permissive=1
SjtagService: type=1400 audit(0.0:1008): avc:  denied  { write } for  name="property_service" dev="tmpfs" ino=446 scontext=u:r:ssr_detector_app:s0:c512,c768 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=1
SjtagService: type=1400 audit(0.0:1009): avc:  denied  { connectto } for  path="/dev/socket/property_service" scontext=u:r:ssr_detector_app:s0:c512,c768 tcontext=u:r:init:s0 tclass=unix_stream_socket permissive=1

Bug: 299043634
Change-Id: I6b2abf69fca9b4765f2dfb7ed82e6546159e96e9
2023-09-14 10:48:08 +08:00
Tai Kuo
e45cb8ef52 Allow regmap debugfs for drivers probed by insmod am: 1a65e5d5e4 am: 8cf4f20ca3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24727593

Change-Id: Id56ae9157f1fb0278d9b70641818c6dcb1629b8d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-13 00:32:10 +00:00
Tai Kuo
8cf4f20ca3 Allow regmap debugfs for drivers probed by insmod am: 1a65e5d5e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24727593

Change-Id: Ia298dbfa2909cea74711f2f10b0bdca3c301a0a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-12 23:42:40 +00:00
Pointer Kung
be9c098a46 Add required sepolicy rule for Camera
Grant access for TNR max_freq to let libperfmgr can control it via powerhint.

Bug: 298595475
Test: adb shell cat cur_freq, GCA, CTS
Change-Id: Ibea9d8b60a41802ba7d685daa591471a9e8cbd91
2023-09-12 09:16:01 +00:00
Tai Kuo
1a65e5d5e4 Allow regmap debugfs for drivers probed by insmod
auditd  : type=1400 audit(0.0:731): avc:  denied  { search } for
comm="modprobe" name="regmap" dev="debugfs" ino=2057
scontext=u:r:insmod-sh:s0 tcontext=u:object_r:vendor_regmap_debugfs:s0
tclass=dir permissive=1 bug=b/274727542

vendor_kernel_boot and vendor_dlkm modules probe by insmod need this.
Move regmap debugfs from legacy/whitechapel_pro/ to vendor/.

Bug: 274727542
Bug: 289012421
Test: ls -d /sys/kernel/debug/regmap/*-0043
Change-Id: I2bd35a6bc942536505f62d4122f0de892f243802
2023-09-12 16:45:09 +08:00
Treehugger Robot
216f86b0c2 Merge "audio: move related sepolicy of audio to gs-common" into udc-qpr-dev am: 4bb847b815 am: 207188241d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24585767

Change-Id: Ia622fbf9e355e3e04e4dd732776d30657b02ff2d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-30 18:24:30 +00:00
Treehugger Robot
207188241d Merge "audio: move related sepolicy of audio to gs-common" into udc-qpr-dev am: 4bb847b815
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24585767

Change-Id: I9df8bae38a17b05df787654de85517064fb7aaec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-30 17:35:13 +00:00
Treehugger Robot
4bb847b815 Merge "audio: move related sepolicy of audio to gs-common" into udc-qpr-dev 2023-08-30 16:29:24 +00:00
Yixuan Wang
bd654f00d9 Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..."
Revert submission 24526613-revert-23834879-CHRE BT LOG-MHDBQNZAGV

Reason for revert: Fixed and tested with a followup cl

Reverted changes: /q/submissionid:24526613-revert-23834879-CHRE+BT+LOG-MHDBQNZAGV

Change-Id: I29866a91abfcfa380d772da447eb95344df43f8f
2023-08-29 19:17:32 +00:00
Safayat Ullah
6e969be173 [automerger skipped] display: add persist property to vendor_display_prop am: ea09b155f2 am: 2c7187af19 -s ours
am skip reason: Merged-In I2497960fbc76e56dd3a9c69d3fe274f0685744f8 with SHA-1 b27308445d is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24549050

Change-Id: Ifd6f9184a55de25ca13b0d4146181b2148371fc2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-29 14:24:57 +00:00
Safayat Ullah
2c7187af19 display: add persist property to vendor_display_prop am: ea09b155f2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24549050

Change-Id: If21c57942053863ff2157d88a4810a81b30a03f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-29 13:34:23 +00:00
Safayat Ullah
ea09b155f2 display: add persist property to vendor_display_prop
Bug: 290162920
Test: no avc denied log
Change-Id: I60747df56c6993251bc736994da828814bcdf607
Merged-In: I2497960fbc76e56dd3a9c69d3fe274f0685744f8
2023-08-29 09:06:57 +00:00
Jasmine Cha
8fb992eacb audio: move related sepolicy of audio to gs-common
Bug: 297482504
Test: build pass

Change-Id: I9444b9e63f32bf898c845e42edbf682798bce300
Signed-off-by: Jasmine Cha <chajasmine@google.com>
2023-08-29 16:45:47 +08:00
Safayat Ullah
b27308445d display: add persist property to vendor_display_prop
Bug: 290162920
Test: no avc denied log
Change-Id: I2497960fbc76e56dd3a9c69d3fe274f0685744f8
2023-08-29 08:01:45 +00:00
Kieran Cyphus
68fae0f171 Merge "DMD MDS: register proxy service and update MDS policy." into main 2023-08-28 01:42:43 +00:00
Sebastian Pickl
be13832180 Merge "Revert "[DO NOT MERGE] Add selinux policy for chre vendor data d..."" into udc-qpr-dev am: ae9ab242e8 am: 00b4a62dd1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24526611

Change-Id: I71963049de8eb6c01ba75d32faeae378ca4ac84c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-24 11:33:44 +00:00
Sebastian Pickl
b5491c6650 Revert "[DO NOT MERGE] Add selinux policy for chre vendor data d..." am: 84f1209636 am: 7ee5ae18de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24526611

Change-Id: If8ca0317f923da98e74ff8642b97f83894206b2f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-24 11:33:41 +00:00
Sebastian Pickl
00b4a62dd1 Merge "Revert "[DO NOT MERGE] Add selinux policy for chre vendor data d..."" into udc-qpr-dev am: ae9ab242e8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24526611

Change-Id: I79952f32ed00fface67437449575e7750959bca5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-24 10:51:25 +00:00
Sebastian Pickl
7ee5ae18de Revert "[DO NOT MERGE] Add selinux policy for chre vendor data d..." am: 84f1209636
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24526611

Change-Id: I3e4c175289017c75c26df4029421b61ad4efcfbe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-24 10:51:24 +00:00
Sebastian Pickl
ae9ab242e8 Merge "Revert "[DO NOT MERGE] Add selinux policy for chre vendor data d..."" into udc-qpr-dev 2023-08-24 10:06:57 +00:00
Sebastian Pickl
84f1209636 Revert "[DO NOT MERGE] Add selinux policy for chre vendor data d..."
Revert submission 23834879-CHRE BT LOG

Reason for revert: fixes broken test b/297255998 verified by go/abtd: https://android-build.googleplex.com/builds/abtd/run/L30000000962735539
Bug:297255998

Reverted changes: /q/submissionid:23834879-CHRE+BT+LOG

Change-Id: I56b800260303834ed76dedf354b5a32af00b3684
2023-08-24 09:47:19 +00:00
Yixuan Wang
cf9a0ff772 Merge "[DO NOT MERGE] Add selinux policy for chre vendor data directory" into udc-qpr-dev am: 0fcc802265 am: 4773f8519d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23834879

Change-Id: I70f328b984f29ef7bdc922bfb24352a963857da3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-23 20:01:35 +00:00
Yixuan Wang
890c3869c3 [DO NOT MERGE] Add selinux policy for chre vendor data directory am: 22d9b28316 am: 2058641a14
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23834879

Change-Id: If2a3d433f56159e7a4264f52b53288afc557df61
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-23 20:01:32 +00:00
Yixuan Wang
4773f8519d Merge "[DO NOT MERGE] Add selinux policy for chre vendor data directory" into udc-qpr-dev am: 0fcc802265
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23834879

Change-Id: I819f616efd223718dd98bb8e953d3b020a296e80
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-23 19:52:30 +00:00
Yixuan Wang
2058641a14 [DO NOT MERGE] Add selinux policy for chre vendor data directory am: 22d9b28316
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23834879

Change-Id: Id8058dbdf765871ba8e762ed10dd1af309642351
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-23 19:52:24 +00:00
Yixuan Wang
0fcc802265 Merge "[DO NOT MERGE] Add selinux policy for chre vendor data directory" into udc-qpr-dev 2023-08-23 19:29:45 +00:00
kierancyphus
9c6ec7fdd9 DMD MDS: register proxy service and update MDS policy.
MDS is a privileged app which get its permissions from `privapp-permissions-google-product.xml`, however, part of this work requires custom SEPolicy and so those permissions have been translated in SEPolicy.

This is a copy of 022dd13252865e131127da6596f5ada71fbf104f (ag/23056498) which can't be cherry picked because it was previously merged and reverted on main.

Test: Manually flash device
Bug: 270279779
Change-Id: If93515aa6b37bcbe8ec34241da1fa144d61e3d5d
2023-08-22 06:41:36 +00:00
Kris Chen
3f2bf29e1f Allow hal_power_default to access sysfs_scsi_devices_0000 am: c9d21c380f am: 7f3e2b9212 am: beed400798
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24458368

Change-Id: I73f79b88b8605c20e3c0eb71699b84f08d6a5b94
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-21 07:45:10 +00:00
Kris Chen
7e2cb4f5f6 Allow hal_power_default to access sysfs_scsi_devices_0000 am: c9d21c380f am: 4a49dbceac am: 12c2d23a4b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24458368

Change-Id: I64a4f98723a7d5425062c5144402d60af9a55661
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-21 07:44:46 +00:00
Kris Chen
beed400798 Allow hal_power_default to access sysfs_scsi_devices_0000 am: c9d21c380f am: 7f3e2b9212
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24458368

Change-Id: I61b5d78945f4606a1a8924c2ba9e1e4b887d5895
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-21 07:08:39 +00:00
Kris Chen
12c2d23a4b Allow hal_power_default to access sysfs_scsi_devices_0000 am: c9d21c380f am: 4a49dbceac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24458368

Change-Id: Ibcac24727053aac68e937156421b16b9ab892200
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-21 07:04:41 +00:00
Kris Chen
4a49dbceac Allow hal_power_default to access sysfs_scsi_devices_0000 am: c9d21c380f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24458368

Change-Id: I9f99fc149fc832a44d45d09b563ba8bc913a12d1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-21 06:39:06 +00:00
Kris Chen
7f3e2b9212 Allow hal_power_default to access sysfs_scsi_devices_0000 am: c9d21c380f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24458368

Change-Id: I6a6014a9efe1d543b559bc9142766d0765468339
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-21 06:33:12 +00:00
Nicole Lee
c21ab073a4 Add rules for letting logger app send the command to ril am: 3c5d001e7d am: 61d25d70ff
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24465106

Change-Id: I960f16e413999fa9e831a5535a39d7b4a62c899c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-21 03:16:18 +00:00
Nicole Lee
61d25d70ff Add rules for letting logger app send the command to ril am: 3c5d001e7d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24465106

Change-Id: Ie4811b143d31103f5efbdf941fbfdff4e6c1ac93
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-21 02:40:44 +00:00
Seungjae Yoo
0612fa8de5 [automerger skipped] Label dtbo partition as dtbo_block_device am: 8256e72c4a am: 34eb573ac9 -s ours
am skip reason: Merged-In Iccca8de440cad7e9cd12015e0271262a217c457b with SHA-1 3773ca269e is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24438745

Change-Id: I81162dcf5812bb778f3c5d476da929542ee26ab3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-18 10:05:39 +00:00
Seungjae Yoo
34eb573ac9 Label dtbo partition as dtbo_block_device am: 8256e72c4a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24438745

Change-Id: Ia4dc306e5e6fdb008c890b538804fba528319806
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-18 09:28:08 +00:00
Treehugger Robot
438b7da691 Merge "Revert "DMD MDS: register proxy service and update MDS policy."" into main 2023-08-18 08:55:00 +00:00
Nicole Lee
3c5d001e7d Add rules for letting logger app send the command to ril
avc:  denied  { find } for interface=vendor.samsung_slsi.telephony.hardware.radioExternal::IOemSlsiRadioExternal sid=u:r:logger_app:s0:c3,c257,c512,c768 pid=3217 scontext=u:r:logger_app:s0:c3,c257,c512,c768 tcontext=u:object_r:hal_exynos_rild_hwservice:s0 tclass=hwservice_manager permissive=0

Bug: 293351399
Test: Verify SetDebugTrace funciton on p23
Change-Id: I1e51954886a7ea8bf5d31213634d4df34619eb33
2023-08-18 07:59:11 +00:00
Hsin-Yi Chen
f4b5074d48 Revert "DMD MDS: register proxy service and update MDS policy."
This reverts commit 2f5496582d.

Bug: 296329753
Reason for revert: broken build

Change-Id: I9336cebf8d4947450f5d3e2f0ec4df839aca3574
2023-08-18 07:40:37 +00:00
Renato Grottesi
fa4f421d41 Merge "Cleanup unused ArmNN settings." into main 2023-08-18 04:31:47 +00:00
Seungjae Yoo
8256e72c4a Label dtbo partition as dtbo_block_device
Bug: 291191362
Test: m

Merged-In: Iccca8de440cad7e9cd12015e0271262a217c457b
Change-Id: Iccca8de440cad7e9cd12015e0271262a217c457b
2023-08-18 00:38:06 +00:00
Seungjae Yoo
7961d4ee51 Merge "Label dtbo partition as dtbo_block_device" into main 2023-08-17 22:32:36 +00:00
Kris Chen
c9d21c380f Allow hal_power_default to access sysfs_scsi_devices_0000
Fix the following avc denial:
avc:  denied  { write } for  name="clkgate_enable" dev="sysfs"
ino=69304 scontext=u:r:hal_power_default:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0

Bug: 290709897
Test: enroll fingerprint
Change-Id: Ib153087839d59e1839ceed4373a9be6f42e89619
2023-08-17 12:59:19 +00:00
Renato Grottesi
96f1f214a2 Cleanup unused ArmNN settings.
Test: pre-submit
Bug: 294463729
Change-Id: Ic417154724c4ddc06925ee2de1bd419dddfa1413
2023-08-17 09:03:35 +00:00
Kieran Cyphus
a294bcb262 Merge "DMD MDS: register proxy service and update MDS policy." into main 2023-08-17 02:30:26 +00:00
Ilya Matyukhin
ee710b08c1 Merge "zuma: Add sysfs_faceauth_gcma_heap type" into udc-qpr-dev am: 013ec5ce54 am: 41056381db
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24343631

Change-Id: I43c243eff3bfbf14828f29f13789b1a3eb9f38c8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-16 22:10:07 +00:00
Ilya Matyukhin
41056381db Merge "zuma: Add sysfs_faceauth_gcma_heap type" into udc-qpr-dev am: 013ec5ce54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24343631

Change-Id: Icd84167a866d6bf8cf7fa2c0661320882acfaf6b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-16 21:26:07 +00:00
Ilya Matyukhin
013ec5ce54 Merge "zuma: Add sysfs_faceauth_gcma_heap type" into udc-qpr-dev 2023-08-16 20:38:34 +00:00
Seungjae Yoo
3773ca269e Label dtbo partition as dtbo_block_device
Bug: 291191362
Test: m

Change-Id: Iccca8de440cad7e9cd12015e0271262a217c457b
2023-08-16 11:16:37 +09:00
Wilson Sung
33db592c7a Supress kernel avc log before SELinux initialized am: 746bd9ad3c am: eb6368402e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24393095

Change-Id: If9ce34cb0f0b44998215f20d1be88578f0e8f56b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-14 03:26:28 +00:00
Wilson Sung
eb6368402e Supress kernel avc log before SELinux initialized am: 746bd9ad3c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24393095

Change-Id: Ib00fc07da24ed16e6b77f39985724eea892a1e50
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-14 02:25:22 +00:00
kierancyphus
2f5496582d DMD MDS: register proxy service and update MDS policy.
MDS is a privileged app which get its permissions from `privapp-permissions-google-product.xml`, however, part of this work requires custom SEPolicy and so those permissions have been translated in SEPolicy.

Test: Manually flash device
Bug: 270279779
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:022dd13252865e131127da6596f5ada71fbf104f)
Merged-In: I47c1a1163a7d40089d36960ed11822505a7a0a7a
Change-Id: I47c1a1163a7d40089d36960ed11822505a7a0a7a
2023-08-14 02:10:34 +00:00
Ilya Matyukhin
33540f5a05 zuma: Add sysfs_faceauth_gcma_heap type
Bug: 288156745
Test: build
Change-Id: I937b37542d8ff5a9e9e0d4d9b53c8300820a1826
2023-08-11 05:37:59 +00:00
Wilson Sung
746bd9ad3c Supress kernel avc log before SELinux initialized
Fix: 295430975
Change-Id: I11fe6c6705f7c4f7b3730b8f4b40229b083c0a13
2023-08-11 12:40:55 +08:00
Roy Luo
41a2c13c6a Merge "Support monitoring USB sysfs attributes in USB HAL" into main 2023-08-10 04:33:29 +00:00
Inseob Kim
dc372f869b [automerger skipped] Move coredomain seapp contexts to system_ext am: ac8048a4f7 am: 5eb322b197 -s ours
am skip reason: Merged-In Ib8d191a6c07278b51eec88cd8142adf6c1a45668 with SHA-1 8f14aa12a1 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24354514

Change-Id: I530d41e884e7cbc058e74da48799835bfd2a8818
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-09 04:40:09 +00:00
Inseob Kim
5eb322b197 Move coredomain seapp contexts to system_ext am: ac8048a4f7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24354514

Change-Id: I94af7d6ba7a52b5747781bb763f05e5c05b65715
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-09 03:56:23 +00:00
Inseob Kim
ac8048a4f7 Move coredomain seapp contexts to system_ext
Coredomain apps shouldn't be labeled with vendor sepolicy, due to Treble
violation.

Bug: 280547417
Test: TH
Change-Id: Ib8d191a6c07278b51eec88cd8142adf6c1a45668
Merged-In: Ib8d191a6c07278b51eec88cd8142adf6c1a45668
2023-08-08 15:11:08 +00:00
Inseob Kim
8f14aa12a1 Move coredomain seapp contexts to system_ext
Coredomain apps shouldn't be labeled with vendor sepolicy, due to Treble
violation.

Bug: 280547417
Test: TH
Change-Id: Ib8d191a6c07278b51eec88cd8142adf6c1a45668
2023-08-08 21:05:21 +09:00
Roy Luo
8849e1a49a Support monitoring USB sysfs attributes in USB HAL
Grant access to USB sysfs attributes.

Bug: 285199434
Test: no audit log in logcat after command execution
Change-Id: Ia5f3333318b47f4e0a05140bd6b95e939197fde5
2023-08-07 19:49:09 +00:00
Wilson Sung
2d7bfbbf4d Supress kernel avc log before SELinux initialized am: 2d2ec40c1a am: e93cda1238
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24319337

Change-Id: Ib9a60e381cd91505dbfc33335674321a696c80af
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-07 04:41:48 +00:00
Wilson Sung
e93cda1238 Supress kernel avc log before SELinux initialized am: 2d2ec40c1a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24319337

Change-Id: I9df6960739466feb4e249141d16d0b2d2e3b7467
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-07 03:59:19 +00:00
Wilson Sung
2d2ec40c1a Supress kernel avc log before SELinux initialized
Fix: 281814849
Fix: 292059050
Change-Id: Ie83557668ded8ab17bf77e60ed21db33e9f4f580
2023-08-04 07:32:39 +00:00
Treehugger Robot
e207f9e4ff Merge "gps: maintain one solution" into udc-qpr-dev am: 61939d2308 am: 1b1abb7ac9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24259847

Change-Id: I5662ab33e381357fbe3ab1aaf91304624c503bb9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 05:56:23 +00:00
Treehugger Robot
1b1abb7ac9 Merge "gps: maintain one solution" into udc-qpr-dev am: 61939d2308
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24259847

Change-Id: Ie350939f0b0fb03dfc400e7ca89cf3b46214ecac
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-01 05:15:48 +00:00
Treehugger Robot
61939d2308 Merge "gps: maintain one solution" into udc-qpr-dev 2023-08-01 04:40:51 +00:00
Cheng Chang
cd3d87535f gps: maintain one solution
Bug: 288813677
Test: compile for different devices and check binary.
Test: verification test at b/288813677.
Change-Id: I7ee13ab2641aee0256d4ddb5ba27070b51dbc5e5
2023-07-31 02:26:40 +00:00
Treehugger Robot
04e1c629f9 Merge "Revert "Update SELinux error"" into udc-d1-dev am: 0f46a31902 am: 91cd7cbad8 am: e1153b6555
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24178926

Change-Id: I79639f3b6a0b8cf396959a29bcbbaba8669f3774
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 19:28:20 +00:00
Treehugger Robot
e1153b6555 Merge "Revert "Update SELinux error"" into udc-d1-dev am: 0f46a31902 am: 91cd7cbad8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24178926

Change-Id: If65e8446a432d2466a306da78ca40e04ece27efc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 18:17:35 +00:00
Treehugger Robot
91cd7cbad8 Merge "Revert "Update SELinux error"" into udc-d1-dev am: 0f46a31902
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24178926

Change-Id: I2aaa3eee203c5859a8f6cb57ee3612498f2d882e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 18:02:52 +00:00
Treehugger Robot
e30c4abfb6 Merge "Revert "Update SELinux error"" into udc-d1-dev am: 0f46a31902 am: 3377a38d65 am: 563532e1a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24178926

Change-Id: I6f714c86a79872576ea8552f8b14adaa6156f358
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 14:37:02 +00:00
Treehugger Robot
563532e1a2 Merge "Revert "Update SELinux error"" into udc-d1-dev am: 0f46a31902 am: 3377a38d65
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24178926

Change-Id: I87762ed51ab7acc8d9889e8565451badeba56610
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 10:32:14 +00:00
Treehugger Robot
3377a38d65 Merge "Revert "Update SELinux error"" into udc-d1-dev am: 0f46a31902
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24178926

Change-Id: I68f3638898f861784276508406773649d6d21c21
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-28 09:49:05 +00:00
Treehugger Robot
0f46a31902 Merge "Revert "Update SELinux error"" into udc-d1-dev 2023-07-28 00:06:22 +00:00
Jason Chiu
2db1e0046f Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488 am: 65ce874b81 am: 5eb65dec3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123

Change-Id: If43d7f85e36fa0b1187a33a07f9735c67c97f9bb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 13:35:33 +00:00
Jason Chiu
05e87e1087 remove rule for bootctrl hidl version 1.2 am: 54b0343059 am: 27e2aeafa7 am: b7f9178a76
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702

Change-Id: Ib79c46884070e3379f3ea51243a258a9e6796e38
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 13:35:31 +00:00
Jason Chiu
45253208c0 Add rule for bootctrl AIDL am: 17fa2e6fe5 am: 36dc08bf81 am: d88644ea2f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842

Change-Id: I4c825e5161fd9336429880ff00b91eaa5e2a392a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 13:35:28 +00:00
Jason Chiu
5eb65dec3a Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488 am: 65ce874b81
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123

Change-Id: I4f3d173599f6c719baba66dd8f2fdae854a00371
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 13:12:23 +00:00
Jason Chiu
b7f9178a76 remove rule for bootctrl hidl version 1.2 am: 54b0343059 am: 27e2aeafa7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702

Change-Id: Ic3e8ecf57f805fd32e6973dbfc708704002753bd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 13:12:19 +00:00
Jason Chiu
d88644ea2f Add rule for bootctrl AIDL am: 17fa2e6fe5 am: 36dc08bf81
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842

Change-Id: Iafe0815e93e1a7b8e00b729acff21253a40cf748
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 13:12:11 +00:00
Jason Chiu
65ce874b81 Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123

Change-Id: I72d2747b0751ff8b462e59abf974dc3a1a1a1aea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 12:28:20 +00:00
Jason Chiu
27e2aeafa7 remove rule for bootctrl hidl version 1.2 am: 54b0343059
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702

Change-Id: I43897ecaaae1ecbcb30479f510637e2680406c40
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 12:28:18 +00:00
Jason Chiu
36dc08bf81 Add rule for bootctrl AIDL am: 17fa2e6fe5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842

Change-Id: Ic0fa67cd73840070825f3cb197ad00656b4c296b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-27 12:28:16 +00:00
Jason Chiu
a31f1a6d5c Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488 am: 7aa9a5e3c0 am: fe9e70cbbb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123

Change-Id: I3c4125d31626e02e59523a5fd4c249a3311986b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-25 20:39:14 +00:00
Jason Chiu
67addf1851 remove rule for bootctrl hidl version 1.2 am: 54b0343059 am: b9e73326ee am: 8bceac530e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702

Change-Id: I9411d0f4e94a85fd3814cf3317b560016bcd9697
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-25 20:39:12 +00:00
Jason Chiu
bd9241df07 Add rule for bootctrl AIDL am: 17fa2e6fe5 am: cbb8fed21e am: 1882450326
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842

Change-Id: I5aa4575978be397e77eeaef2c9b09e7f393a7c02
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-25 20:39:10 +00:00
Jason Chiu
fe9e70cbbb Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488 am: 7aa9a5e3c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123

Change-Id: I8f36ce99361c4ce5d54b0ca52ff6f790de495457
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-25 19:41:50 +00:00
Jason Chiu
8bceac530e remove rule for bootctrl hidl version 1.2 am: 54b0343059 am: b9e73326ee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702

Change-Id: Ib1165fd100b06806f479b42785c1b68149cac6d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-25 19:41:48 +00:00
Jason Chiu
1882450326 Add rule for bootctrl AIDL am: 17fa2e6fe5 am: cbb8fed21e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842

Change-Id: If43e26b093fe9f77712a03e54506f86702be9485
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-25 19:41:45 +00:00
Yunju Lee
72f7cbe324 Revert "Update SELinux error"
This reverts commit 8f56fc9709.

Reason for revert: b/291237127 is fixed

Bug: 291237127
Change-Id: I58e2636fb2ef1113a4305152948e07ed8a27a7d9
2023-07-24 15:10:01 +00:00
Jason Chiu
7aa9a5e3c0 Add hal_bootctl_default read permission to rootfs in Recovery mode am: 90a1f80488
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24143123

Change-Id: I3bc9799d166ad41bbbb547884a9993a352b3f6c3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-21 02:59:19 +00:00
Jason Chiu
b9e73326ee remove rule for bootctrl hidl version 1.2 am: 54b0343059
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24146702

Change-Id: Ia4efc4cdc0cb92c62c4ddcb7b6f458c4149657a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-21 02:59:16 +00:00
Jason Chiu
cbb8fed21e Add rule for bootctrl AIDL am: 17fa2e6fe5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24141842

Change-Id: Idbac1303702c0845fd549564f28b20f2bf9f0a03
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-21 02:59:13 +00:00
Jason Chiu
3aa432be32 Merge "Add rule for bootctrl AIDL"
Bug: 282670401
Change-Id: I1b4c5e7ced0fe67bbbaca2b607e4ca7422e170e1
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 21:00:41 +08:00
Jason Chiu
90a1f80488 Add hal_bootctl_default read permission to rootfs in Recovery mode
Fix the following avc denial:
avc:  denied  { read } for  pid=485 comm="android.hardwar" name="bin" dev="rootfs" ino=9529 scontext=u:r:hal_bootctl_default:s0 tcontext=u:object_r:rootfs:s0 tclass=dir permissive=0

Bug: 282670401
Change-Id: I23ab086ba21d6ffea8b48b4208933c031effc4d4
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 12:56:47 +00:00
Jason Chiu
54b0343059 remove rule for bootctrl hidl version 1.2
Bug: 282670401
Change-Id: I25d169c335fb551cf1862fdf6e6540485a2b8016
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 12:56:38 +00:00
Jason Chiu
17fa2e6fe5 Add rule for bootctrl AIDL
Bug: 282670401
Change-Id: I1b4c5e7ced0fe67bbbaca2b607e4ca7422e170e1
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 20:53:04 +08:00
Utku Utkan
c2e654730b Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices" am: 62b083db4d am: 4f7d7213fe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24124264

Change-Id: Ie2bb0cfcf9613d1e12da3fea6887000c4761fb5b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 19:58:33 +00:00
Utku Utkan
4f7d7213fe Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices" am: 62b083db4d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24124264

Change-Id: Iafecf9b6bfcc9982ca7ad609c7d4242df71a745c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 18:49:46 +00:00
Utku Utkan
62b083db4d Revert^2 "Introduce CameraServices seinfo tag for PixelCameraServices"
Revert submission 24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL

Reason for revert: Relanding the original topic after copying the certificates under `device/google` for `without-vendor` branches

Reverted changes: /q/submissionid:24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL

Bug: 287069860
Test: m && flashall
Change-Id: Icc801ca310c0e512769ed84d185dd6149ae5f22b
2023-07-18 20:37:42 -07:00
Inseob Kim
ffec72585d Revert "Introduce CameraServices seinfo tag for PixelCameraServices" am: 1ef04d8dda am: ef514a009d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24122567

Change-Id: I11407eb1d65424f34d3ebe601a6c16e660dd8e4d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 03:33:46 +00:00
Inseob Kim
ef514a009d Revert "Introduce CameraServices seinfo tag for PixelCameraServices" am: 1ef04d8dda
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24122567

Change-Id: Icc8049a6eb58141c8ab7109f5810306492f2f3d5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-19 02:50:44 +00:00
Inseob Kim
1ef04d8dda Revert "Introduce CameraServices seinfo tag for PixelCameraServices"
Revert submission 24056607-pixel-camera-services-extensions-sepolicy

Reason for revert: build breakage on git_main-without-vendor

Reverted changes: /q/submissionid:24056607-pixel-camera-services-extensions-sepolicy

Change-Id: I42e68b982d521acb9b9a088d58ff521be25beb7e
2023-07-19 01:15:27 +00:00
Utku Utkan
ed8790420e Introduce CameraServices seinfo tag for PixelCameraServices am: c3cf1b7cf0 am: 5dfb9ad64d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24030833

Change-Id: I628cb17d6053851612608f82700e518a043c2884
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-18 22:35:36 +00:00
Utku Utkan
5dfb9ad64d Introduce CameraServices seinfo tag for PixelCameraServices am: c3cf1b7cf0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24030833

Change-Id: I3ba20fc4bca8798a1bb84ace89f6097ea268041b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-18 21:49:07 +00:00
Utku Utkan
c3cf1b7cf0 Introduce CameraServices seinfo tag for PixelCameraServices
Bug: 287069860
Test: m && flashall && check against 'avc: denied' errors
Change-Id: I843c7e0577d88a7e84cb939135fe89f5923ea294
2023-07-18 12:18:35 -07:00
Wilson Sung
2ef1135c13 Update SELinux error am: 8f56fc9709 am: 40759437ea am: eb7e1f003a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780

Change-Id: I9bdb387f12c8ffa74040ba77c55f072bcb552d17
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 10:45:43 +00:00
Wilson Sung
78b62791f3 Update SELinux error am: 8f56fc9709 am: 358275a825 am: 4e94cbac7c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780

Change-Id: Ia4fe3eb12d1882205e22a92281fd7cd583feb683
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 10:45:29 +00:00
Wilson Sung
eb7e1f003a Update SELinux error am: 8f56fc9709 am: 40759437ea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780

Change-Id: Ia16972d5a05cca4c250ccb6d2e10749556cd17c5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 10:08:50 +00:00
Wilson Sung
4e94cbac7c Update SELinux error am: 8f56fc9709 am: 358275a825
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780

Change-Id: If8899f2fa1458fd7b0d376b72ef50cdc14a7d993
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 10:00:58 +00:00
Wilson Sung
40759437ea Update SELinux error am: 8f56fc9709
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780

Change-Id: I0713b4a21b1df066a4c6ed72be62a50cd89050fc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 09:17:57 +00:00
Wilson Sung
358275a825 Update SELinux error am: 8f56fc9709
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24058780

Change-Id: I971f8532161a1e9e25fc3015a26bd497a9176be6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-17 09:15:38 +00:00
Wilson Sung
8f56fc9709 Update SELinux error
Test: scanBugreport
Bug: 291237127
Change-Id: Iacb47dce94f8ee2f71d382a9d0a22a6570345e2d
2023-07-17 13:50:09 +08:00
Krzysztof Kosiński
c34f5f375c Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c am: 8e0c6c3838 am: 3d97096517
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721

Change-Id: I37a0f3f2ad8d010daa6fb942621261b9d505a036
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-15 00:05:16 +00:00
Krzysztof Kosiński
a728716390 Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c am: b069918c11 am: def8ee2ded
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721

Change-Id: I53b503bc70e0bf78f62fbd532c96fcb1dddc88f2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 23:46:21 +00:00
Krzysztof Kosiński
3d97096517 Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c am: 8e0c6c3838
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721

Change-Id: Id7d5c1f05cf53c6417142ae2522f748ad16ff95b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 23:07:08 +00:00
Krzysztof Kosiński
def8ee2ded Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c am: b069918c11
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721

Change-Id: I4c54779e8cbb4c1dea697d02564fc1488ff80133
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 23:04:08 +00:00
Krzysztof Kosiński
8e0c6c3838 Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721

Change-Id: I364339a11ddaeec5dc2e71b3add58b20384a532a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 22:14:09 +00:00
Krzysztof Kosiński
b069918c11 Remove bug map entry for unknown property reads in camera HAL. am: 583baf021c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23935721

Change-Id: I3397af974f95726b175abcea36a44a02e304cb5d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 22:12:18 +00:00
Krzysztof Kosiński
583baf021c Remove bug map entry for unknown property reads in camera HAL.
Fixed by avoiding reading a property with the name "218".

Bug: 286508419
Test: check log for denials when running the camera on zuma device.
Change-Id: I3632868187d263ed787f5abf729c4e5c10a4f4c4
2023-07-14 07:12:51 +00:00
Dinesh Yadav
67b64c50b4 Merge "[Cleanup]: Move gxp sepolicies to gs-common for P23" into main 2023-07-14 04:00:25 +00:00
Treehugger Robot
69ae4e5963 Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242 am: 7eba1f29bc am: 0e9bd10bb6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602

Change-Id: Ibddd2cf980d5f4fc149dcb4aa3443477aed7b246
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 01:17:16 +00:00
Treehugger Robot
00cc329f1c Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242 am: a5187246a1 am: d079eb063f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602

Change-Id: I2c9fe5900fcdaa1fbbfa0bf0ee923cc68819c4b9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 01:16:08 +00:00
Badhri Jagan Sridharan
5cda2ff488 [automerger skipped] Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev am: 20eade41f0 am: 5958be5bd0 -s ours am: 0079a99873 -s ours
am skip reason: Merged-In I72711aea571dad5be7ff36ca7a7c59240aaa2226 with SHA-1 62e714d81c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23864376

Change-Id: I63b0cba5b0321d6dfada8c00022e7aa2a4032727
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 00:49:12 +00:00
Badhri Jagan Sridharan
3251bfa4aa [automerger skipped] Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev am: 20eade41f0 am: 3e1e0b9b68 am: cd3f2ab5c5 -s ours
am skip reason: Merged-In I72711aea571dad5be7ff36ca7a7c59240aaa2226 with SHA-1 4f16f36a78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23864376

Change-Id: Ic7028407b0e61dd6609d61032801cacb5cb3395f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 00:27:00 +00:00
Treehugger Robot
0e9bd10bb6 Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242 am: 7eba1f29bc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602

Change-Id: I6c96a540b0c2214c93f11856c12930bbecd4ec2b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 20:09:14 +00:00
Treehugger Robot
d079eb063f Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242 am: a5187246a1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602

Change-Id: I2f92a0f4c5a54e73ca000b0d57a72366034999e6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 19:09:55 +00:00
Badhri Jagan Sridharan
0079a99873 [automerger skipped] Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev am: 20eade41f0 am: 5958be5bd0 -s ours
am skip reason: Merged-In I72711aea571dad5be7ff36ca7a7c59240aaa2226 with SHA-1 62e714d81c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23864376

Change-Id: I5190546cac91a0859b9b24f321cf4f4d22beca20
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 19:09:35 +00:00
Treehugger Robot
a5187246a1 Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602

Change-Id: I5662604da8561e8e8729cd494ba35d1797339e82
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 19:02:40 +00:00
Treehugger Robot
7eba1f29bc Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602

Change-Id: I21783e724b86aa309cdd464420858f543f549e68
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 19:00:41 +00:00
Badhri Jagan Sridharan
cd3f2ab5c5 Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev am: 20eade41f0 am: 3e1e0b9b68
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23864376

Change-Id: Ia0fa536f5e6dfe951fab287f39bc938b67780818
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 18:16:09 +00:00
Treehugger Robot
8bcc8a1242 Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev 2023-07-13 17:47:48 +00:00
Badhri Jagan Sridharan
5958be5bd0 Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev am: 20eade41f0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23864376

Change-Id: I512b4db16ff18acc313dc0d0c94f78bf4743ddcc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 17:34:05 +00:00
Badhri Jagan Sridharan
3e1e0b9b68 Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev am: 20eade41f0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23864376

Change-Id: Ie727156612f14c298a032468ca8c4567d6341f58
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 17:31:26 +00:00
Badhri Jagan Sridharan
20eade41f0 Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev 2023-07-13 16:43:18 +00:00
Wilson Sung
7a4e047d6a Move systemui seapp_contexts to private am: 5c63d0ef54 am: 4c3281ff67 am: 9975c3e8f1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24018505

Change-Id: I13ca07d21731abae8854f5724421ac675d621878
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 08:28:07 +00:00
Wilson Sung
af1f68ca9f Move systemui seapp_contexts to private am: 5c63d0ef54 am: f33940a050 am: 2d80278b62
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24018505

Change-Id: Ib174e16bddbc0cb11bbabea6101b8072fa5ed1e3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 08:27:47 +00:00
Wilson Sung
9975c3e8f1 Move systemui seapp_contexts to private am: 5c63d0ef54 am: 4c3281ff67
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24018505

Change-Id: I509a29a79857e76a55310b683ae3e5278bfd2b71
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 07:51:03 +00:00
Wilson Sung
2d80278b62 Move systemui seapp_contexts to private am: 5c63d0ef54 am: f33940a050
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24018505

Change-Id: I843d0640c84539163a3dafb1b48847d735c2a6d0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 07:48:18 +00:00
Wilson Sung
4c3281ff67 Move systemui seapp_contexts to private am: 5c63d0ef54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24018505

Change-Id: I4ca08dc42bf7ce9ff292336d3863c2152afc5145
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 07:05:59 +00:00
Wilson Sung
f33940a050 Move systemui seapp_contexts to private am: 5c63d0ef54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24018505

Change-Id: Ibb9b6cb84e984021e632d14323d622b549e40179
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-12 07:03:26 +00:00
Hasan Awais
ab0cc41a0d uwb: add permission to read SELinux state am: 4640c96bb4 am: 484e16d61b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24007918

Change-Id: I00b3af162bc57f840ac55d8ff881fa55034bc238
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 18:10:26 +00:00
Hasan Awais
484e16d61b uwb: add permission to read SELinux state am: 4640c96bb4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24007918

Change-Id: Ie5b1758ea190103d6f7005246e3d2e37e6344fc7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-11 17:33:16 +00:00
Wilson Sung
5c63d0ef54 Move systemui seapp_contexts to private
Fix: 289480799
Bug: 288227521
Change-Id: Ifc4288125d454569a66151c3c61e000ffd3526ac
2023-07-11 15:24:10 +08:00
Hasan Awais
4640c96bb4 uwb: add permission to read SELinux state
Allows UWB HAL to read selinuxfs to determine the state
Used for controlling access to debugfs

Bug: 288049522
Test: local build pass
Change-Id: I1237d001d27999c796bbb28629847f5a5639cd3e
Signed-off-by: Hasan Awais <hasanawais@google.com>
2023-07-10 17:12:33 +00:00
Wilson Sung
e41a6fa986 Update SELinux error am: 83671d2646 am: 01714c600b am: e0c443771a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24002585

Change-Id: Ifdcc482bb684a9a6cecbb7c8d8fd9b54e111cf51
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-10 11:38:26 +00:00
Wilson Sung
fc7ef081c6 Update SELinux error am: 83671d2646 am: 1c8431e2b4 am: 5ca7dc1f44
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24002585

Change-Id: I072dd6136d581d465298559f081228fa5c348b12
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-10 11:38:06 +00:00
Wilson Sung
e0c443771a Update SELinux error am: 83671d2646 am: 01714c600b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24002585

Change-Id: Ib508bbbdf4dcaf39f96ee371cff499c041aa9f83
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-10 11:08:31 +00:00
Wilson Sung
5ca7dc1f44 Update SELinux error am: 83671d2646 am: 1c8431e2b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24002585

Change-Id: I8e6d9974c86df95b0b6a44343d1c59469c4b664a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-10 11:02:48 +00:00
Wilson Sung
01714c600b Update SELinux error am: 83671d2646
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24002585

Change-Id: I2bf029eace9344aa077b358085736df271264c5a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-10 10:23:10 +00:00
Wilson Sung
1c8431e2b4 Update SELinux error am: 83671d2646
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24002585

Change-Id: Ib45ed15b3233364f3f81f0e972c475c8eacfcc17
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-10 10:20:45 +00:00
Wilson Sung
83671d2646 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 289480799
Change-Id: I6c013d99b9b004b0a39d0b1861fa89da46bc846d
2023-07-10 14:21:22 +08:00
Dinesh Yadav
1278d8fc59 [Cleanup]: Move gxp sepolicies to gs-common for P23
These policies are moved to gs-common as part of ag/24002524

Bug: 288368306
Change-Id: Iaa15e497eafd54b1b702192a3c8f7fe0c908f8a1
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-07-10 05:13:16 +00:00
Yunju Lee
0a86789618 Add GPU power hint sysfs node to sepolicy for Zuma
Bug: 228076319
Bug: 278493002
Test: Perfetto trace inspection
Change-Id: I2f78c2e9175faa3f8af4b55e93e9b0f3d6bebdf2
2023-07-07 21:40:20 +00:00
Samuel Huang
21912887e8 Merge "Revert "Revert "Create telephony.ril.silent_reset system_ext pro..."" into udc-qpr-dev am: f65918769f am: c7ae549508
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23841767

Change-Id: I53bac0abab54f6850bb9f2047ea5ea36f9948e57
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-07 03:10:44 +00:00
Samuel Huang
c7ae549508 Merge "Revert "Revert "Create telephony.ril.silent_reset system_ext pro..."" into udc-qpr-dev am: f65918769f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23841767

Change-Id: I5ca51bbe84429d6db54699d15c64a2127cb2678a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-07 02:32:58 +00:00
Samuel Huang
f65918769f Merge "Revert "Revert "Create telephony.ril.silent_reset system_ext pro..."" into udc-qpr-dev 2023-07-07 01:45:24 +00:00
Treehugger Robot
a0cae277cb Merge "Update SELinux error" into udc-d1-dev am: 58c254fcaa am: 304b7da426 am: d04ae24b43
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23875908

Change-Id: I52a523821bee362417872b7cd60f16f56cfd6dd2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 17:41:21 +00:00
Treehugger Robot
bdf46d1f83 Merge "Update SELinux error" into udc-d1-dev am: 58c254fcaa am: fe8aefb6a5 am: 7be39ffb70
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23875908

Change-Id: Ib4ae654d871071e85a8949bc84bf630380820a56
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 17:40:51 +00:00
Treehugger Robot
d04ae24b43 Merge "Update SELinux error" into udc-d1-dev am: 58c254fcaa am: 304b7da426
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23875908

Change-Id: Icebf3a9172a6c8f3d2c226cf7aab2e2380bf261c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 17:01:40 +00:00
Treehugger Robot
7be39ffb70 Merge "Update SELinux error" into udc-d1-dev am: 58c254fcaa am: fe8aefb6a5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23875908

Change-Id: Ib31dd40b81d334cdbc9836ed788d2873bc7e0b22
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 16:55:12 +00:00
Treehugger Robot
304b7da426 Merge "Update SELinux error" into udc-d1-dev am: 58c254fcaa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23875908

Change-Id: Ic709ca1a390ba7aa81492fcc93ee34c1a2a4372f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 16:14:12 +00:00
Treehugger Robot
fe8aefb6a5 Merge "Update SELinux error" into udc-d1-dev am: 58c254fcaa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23875908

Change-Id: I00b23b4aa5953b1ec71b73c4a928d81af659d726
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 16:09:44 +00:00
Treehugger Robot
58c254fcaa Merge "Update SELinux error" into udc-d1-dev 2023-07-06 15:09:35 +00:00
Ruofei Ma
5ca0cabab9 Merge "Dec: SELinux policy change to allow uclamp.min set" into udc-d1-dev am: f3258b9e00 am: 99ff7c4007 am: a0d8301375
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23852417

Change-Id: Ia306a480812cbc1240ea979b42223401a102d6db
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 05:29:05 +00:00
Ruofei Ma
81c25a7a49 Merge "Revert "mediacodec_google: add hal_power"" into udc-d1-dev am: aa2084fe54 am: 4471c5e525 am: deabc971aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23850445

Change-Id: I126b579bd71bfdbd0140aa29c20b8301a9ce3feb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 05:28:57 +00:00
Ruofei Ma
8ccd2bdb48 Merge "Dec: SELinux policy change to allow uclamp.min set" into udc-d1-dev am: f3258b9e00 am: d853f05f4e am: 545d486384
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23852417

Change-Id: I86ae0f4173db0618b55fdebf02cea1e9e1aacc3e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 05:28:39 +00:00
Ruofei Ma
a5365042c2 Merge "Revert "mediacodec_google: add hal_power"" into udc-d1-dev am: aa2084fe54 am: 5358c08714 am: a87ac085c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23850445

Change-Id: I06f846290147757f90432f5cb414b87329c8c271
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 05:26:15 +00:00
Ruofei Ma
a0d8301375 Merge "Dec: SELinux policy change to allow uclamp.min set" into udc-d1-dev am: f3258b9e00 am: 99ff7c4007
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23852417

Change-Id: I0bd63164ba394bb54e309fb59b3062feae9792d0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 04:46:46 +00:00
Ruofei Ma
deabc971aa Merge "Revert "mediacodec_google: add hal_power"" into udc-d1-dev am: aa2084fe54 am: 4471c5e525
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23850445

Change-Id: Ie9d002961517ba1476d4fbc43301c79acab9b5b4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 04:44:05 +00:00
Ruofei Ma
545d486384 Merge "Dec: SELinux policy change to allow uclamp.min set" into udc-d1-dev am: f3258b9e00 am: d853f05f4e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23852417

Change-Id: I465659921f35ec199201b5d1284f2b0c6cc43d50
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 04:42:15 +00:00
Ruofei Ma
a87ac085c0 Merge "Revert "mediacodec_google: add hal_power"" into udc-d1-dev am: aa2084fe54 am: 5358c08714
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23850445

Change-Id: Ia939ab3855b0260c427d5d490e37f94a5ce35a27
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 04:40:28 +00:00
Ruofei Ma
99ff7c4007 Merge "Dec: SELinux policy change to allow uclamp.min set" into udc-d1-dev am: f3258b9e00
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23852417

Change-Id: I0976a47af9e3ccab16a391c9835885b88166ac95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 03:33:06 +00:00
Ruofei Ma
4471c5e525 Merge "Revert "mediacodec_google: add hal_power"" into udc-d1-dev am: aa2084fe54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23850445

Change-Id: I28bbba859b673990f752fed64098a8e56a9cb99a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 03:32:45 +00:00
Ruofei Ma
d853f05f4e Merge "Dec: SELinux policy change to allow uclamp.min set" into udc-d1-dev am: f3258b9e00
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23852417

Change-Id: I1794ae0ae12c8dda929e25f7d988a4a87a7428a0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 03:30:53 +00:00
Ruofei Ma
5358c08714 Merge "Revert "mediacodec_google: add hal_power"" into udc-d1-dev am: aa2084fe54
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23850445

Change-Id: Idb18a29b7bf6da51892eee82b3b6d4f9f9503659
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-06 03:30:23 +00:00
Ruofei Ma
f3258b9e00 Merge "Dec: SELinux policy change to allow uclamp.min set" into udc-d1-dev 2023-07-06 02:49:56 +00:00
Ruofei Ma
aa2084fe54 Merge "Revert "mediacodec_google: add hal_power"" into udc-d1-dev 2023-07-06 02:49:51 +00:00
Wilson Sung
7a77620145 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 289856761
Test: scanBugreport
Bug: 289856761
Test: scanAvcDeniedLogRightAfterReboot
Bug: 289856761
Change-Id: I4a3dcd037b1f63b8d06edab5a5ef4919ce75b8bc
2023-07-04 11:17:41 +08:00
Badhri Jagan Sridharan
62e714d81c Add USB wakeup sources sepolicy contexts
Bug: 289376260
Change-Id: I72711aea571dad5be7ff36ca7a7c59240aaa2226
Merged-In: I72711aea571dad5be7ff36ca7a7c59240aaa2226
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
2023-06-30 19:36:01 +00:00
Badhri Jagan Sridharan
4f16f36a78 Add USB wakeup sources sepolicy contexts
Bug: 289376260
Change-Id: I72711aea571dad5be7ff36ca7a7c59240aaa2226
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
2023-06-30 02:13:27 +00:00
Wilson Sung
4515515f60 Move sysUI contexts to system_ext am: 4862829753 am: bd6892b9d3 am: c798459b5e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23840925

Change-Id: Iff3c91cef02e228891324ab06d38ad9361c5d883
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-29 05:48:59 +00:00
Wilson Sung
5915cd099a Move sysUI contexts to system_ext am: 4862829753 am: b8ec9b7fc4 am: 0998a42154
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23840925

Change-Id: Ibc19fce60a0c362923f89ae8f9af65164ce16a82
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-29 05:48:49 +00:00
Wilson Sung
c798459b5e Move sysUI contexts to system_ext am: 4862829753 am: bd6892b9d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23840925

Change-Id: Idc9c918ec744d32b2362cef93b9e3c5a66085a85
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-29 05:05:15 +00:00
Wilson Sung
0998a42154 Move sysUI contexts to system_ext am: 4862829753 am: b8ec9b7fc4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23840925

Change-Id: I9963b7fa09e1f22ba868cd3abe3fcb090a46cc39
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-29 04:59:33 +00:00
Wilson Sung
bd6892b9d3 Move sysUI contexts to system_ext am: 4862829753
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23840925

Change-Id: Iae1889fe451b09d41160689c24d2888a1a4da796
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-29 04:17:50 +00:00
Wilson Sung
b8ec9b7fc4 Move sysUI contexts to system_ext am: 4862829753
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23840925

Change-Id: I375b899f1d97c6c994a2f2392d562814e4c3a0d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-29 04:15:43 +00:00
Ruofei Ma
4ee8ce9cd6 Dec: SELinux policy change to allow uclamp.min set
To get better performance for 4K60FPS HDR video, we need
to boost the cpu when the load is too heavy for Bigwave
decoder.

Bug: 274736629

Change-Id: I32d683084dd55354002d4fd4c266492df3839a35
Signed-off-by: Ruofei Ma <ruofeim@google.com>
2023-06-29 00:22:24 +00:00
Ruofei Ma
4bb2aa413d Revert "mediacodec_google: add hal_power"
This reverts commit 3346e879e6.

Reason for revert: This change is not needed since the performance boost implementation has changed

Change-Id: Icda43f23354e70503d3bb2efe0631a2d754a4920
2023-06-29 00:22:11 +00:00
Yixuan Wang
22d9b28316 [DO NOT MERGE] Add selinux policy for chre vendor data directory
Bug: 278114604
Test: on device test
Change-Id: I1ac96655571f811c116540aec3a1626d5cca1b16
(cherry picked from commit 7530c4bc13)
2023-06-28 17:16:15 +00:00
Samuel Huang
0166c5fe0a Revert "Revert "Create telephony.ril.silent_reset system_ext pro..."
Revert submission 23817868-revert-23736941-tpsr-ril-property-WQVGKEVBKX

Reason for revert: The root cause is missing property definition in gs101-sepolicy. This CL can be merged safely. Verified by abtd run: https://android-build.googleplex.com/builds/abtd/run/L48900000961646046

Reverted changes: /q/submissionid:23817868-revert-23736941-tpsr-ril-property-WQVGKEVBKX

Bug: 286476107
Change-Id: I6dde24447cb7caae0bf35d8b0342985e8c2f434a
2023-06-28 10:28:24 +00:00
Wilson Sung
4862829753 Move sysUI contexts to system_ext
Bug: 288227521
Change-Id: I3e5f2e76bf067f98b191b3b8ee6010c1abd95cb0
2023-06-28 14:10:06 +08:00
Sebastian Pickl
3bce98be6d Merge "Revert "Create telephony.ril.silent_reset system_ext property fo..."" into udc-qpr-dev am: 6f65e69366 am: 2e6a679fce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23817867

Change-Id: Id5f3601fef67ac0407c054dc234e9638e5f4608c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 12:03:39 +00:00
Sebastian Pickl
2e6a679fce Merge "Revert "Create telephony.ril.silent_reset system_ext property fo..."" into udc-qpr-dev am: 6f65e69366
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23817867

Change-Id: I6c900e08c22cf1355c4c70e944a7a58c7125b1d1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 11:16:33 +00:00
Sebastian Pickl
6f65e69366 Merge "Revert "Create telephony.ril.silent_reset system_ext property fo..."" into udc-qpr-dev 2023-06-27 10:37:16 +00:00
Sebastian Pickl
a14eb4e6b5 Revert "Create telephony.ril.silent_reset system_ext property fo..."
Revert submission 23736941-tpsr-ril-property

Reason for revert: culprit for b/289014054 verified by abtd run: https://android-build.googleplex.com/builds/abtd/run/L54800000961620143

Bug: 289014054

Reverted changes: /q/submissionid:23736941-tpsr-ril-property

Change-Id: I6bd6b1e890fa77140d2d0e33ce6ae8a8a03e16f6
2023-06-27 10:05:32 +00:00
Samuel Huang
c58d851674 Merge "Create telephony.ril.silent_reset system_ext property for RILD restart" into udc-qpr-dev am: 6a7b19e2dc am: 1fb389168d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23736941

Change-Id: Ia55ce09c87cebda5c821e5d65d115384b4e212f8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 03:55:53 +00:00
Samuel Huang
1fb389168d Merge "Create telephony.ril.silent_reset system_ext property for RILD restart" into udc-qpr-dev am: 6a7b19e2dc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23736941

Change-Id: Ia320c14b63008e66cea92d389df5085da17a7e24
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-27 03:07:55 +00:00
Samuel Huang
6a7b19e2dc Merge "Create telephony.ril.silent_reset system_ext property for RILD restart" into udc-qpr-dev 2023-06-27 02:21:20 +00:00
TreeHugger Robot
1959bbb904 Merge "Add kernel vendor_fw_file dir read permission" into udc-d1-dev am: 043ae16d5f am: cae8b7f115 am: 29a97a49aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23753755

Change-Id: I2cde8f773d192d149844e83a2a0e2f44f61d85af
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 13:12:33 +00:00
TreeHugger Robot
29a97a49aa Merge "Add kernel vendor_fw_file dir read permission" into udc-d1-dev am: 043ae16d5f am: cae8b7f115
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23753755

Change-Id: Ia045ac9ec33ac55cf3ac592851ee7107a1b983d3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 12:25:03 +00:00
TreeHugger Robot
95453db458 Merge "Add kernel vendor_fw_file dir read permission" into udc-d1-dev am: 043ae16d5f am: 62b8a1fed8 am: 4841655987
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23753755

Change-Id: Ib628b70bb7c0dd455e456be91714217479e7ed06
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 11:49:09 +00:00
Treehugger Robot
e074ae4af0 Merge "Supress kernel avc log before SELinux initialized" into udc-d1-dev am: d8b11ef832 am: e25310025c am: 172a152ab3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23753754

Change-Id: I2a4c05fa0da33eb5661f73cb145108ac9ec74c48
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 11:48:40 +00:00
Treehugger Robot
124d76da0e Merge "Supress kernel avc log before SELinux initialized" into udc-d1-dev am: d8b11ef832 am: 2a4fea9c9e am: bac6c337b1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23753754

Change-Id: I75815cc322f7cb7c0a3d1d07fede9c988569923f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 11:48:29 +00:00
TreeHugger Robot
cae8b7f115 Merge "Add kernel vendor_fw_file dir read permission" into udc-d1-dev am: 043ae16d5f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23753755

Change-Id: I1cee789da99f85b5ac1c5485d53e577448ea806d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 11:43:07 +00:00
TreeHugger Robot
4841655987 Merge "Add kernel vendor_fw_file dir read permission" into udc-d1-dev am: 043ae16d5f am: 62b8a1fed8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23753755

Change-Id: I2974aeeaf24cbf8041b5fb5823a4440677f612fd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 11:25:03 +00:00
Treehugger Robot
172a152ab3 Merge "Supress kernel avc log before SELinux initialized" into udc-d1-dev am: d8b11ef832 am: e25310025c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23753754

Change-Id: I720de5e928b94586e3297bbfa1c6a3464cb5c126
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 11:24:56 +00:00
TreeHugger Robot
62b8a1fed8 Merge "Add kernel vendor_fw_file dir read permission" into udc-d1-dev am: 043ae16d5f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23753755

Change-Id: I64ce27f29959da86f4a3effdc2700c9edd12c365
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 11:02:13 +00:00
Treehugger Robot
bac6c337b1 Merge "Supress kernel avc log before SELinux initialized" into udc-d1-dev am: d8b11ef832 am: 2a4fea9c9e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23753754

Change-Id: Id590901414e2cfd34eeecb7747cec3a122ca4134
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 10:57:38 +00:00
TreeHugger Robot
043ae16d5f Merge "Add kernel vendor_fw_file dir read permission" into udc-d1-dev 2023-06-21 10:47:39 +00:00
Treehugger Robot
22bdc11dbe Merge "Update SELinux error" into udc-d1-dev am: 81237d3843 am: 939f102259 am: 4e1e64c9db
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23736939

Change-Id: I1705ec8feb2e814797cbe616e9e1558c99dd08e3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 10:46:20 +00:00
Treehugger Robot
bb97e862be Merge "Update SELinux error" into udc-d1-dev am: 81237d3843 am: 47da87bda2 am: 795c49c0e7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23736939

Change-Id: I444780e9407d31484bc0ea8da61bea812b76412e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 10:40:30 +00:00
Treehugger Robot
e25310025c Merge "Supress kernel avc log before SELinux initialized" into udc-d1-dev am: d8b11ef832
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23753754

Change-Id: I7c9fa2e932b7547fee5aacf6a82177513f8d59ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 10:38:30 +00:00
Treehugger Robot
2a4fea9c9e Merge "Supress kernel avc log before SELinux initialized" into udc-d1-dev am: d8b11ef832
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23753754

Change-Id: I03fdab2f74f5caf3b63ad5e869e2a95f43e76635
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 10:34:22 +00:00
Treehugger Robot
d8b11ef832 Merge "Supress kernel avc log before SELinux initialized" into udc-d1-dev 2023-06-21 09:59:33 +00:00
Treehugger Robot
4e1e64c9db Merge "Update SELinux error" into udc-d1-dev am: 81237d3843 am: 939f102259
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23736939

Change-Id: I05619a4d33acadd7c9747fb239e5f2add3ed8d1c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 09:54:45 +00:00
Treehugger Robot
795c49c0e7 Merge "Update SELinux error" into udc-d1-dev am: 81237d3843 am: 47da87bda2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23736939

Change-Id: Ia29324e2f8e99e26385c0b853564c9bc216dea55
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 09:48:55 +00:00
Treehugger Robot
939f102259 Merge "Update SELinux error" into udc-d1-dev am: 81237d3843
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23736939

Change-Id: Ibbf26b42ca7ee968f3fa6d2d4f9122a328bf788b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 09:08:06 +00:00
Treehugger Robot
47da87bda2 Merge "Update SELinux error" into udc-d1-dev am: 81237d3843
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23736939

Change-Id: I019165c5000c529f4a4de90c20e880b3501c3fd1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 09:03:51 +00:00
Treehugger Robot
81237d3843 Merge "Update SELinux error" into udc-d1-dev 2023-06-21 08:02:49 +00:00
Wilson Sung
3657f78cb0 Add kernel vendor_fw_file dir read permission
Fix: 288049349
Change-Id: I76751deb04e5b6a4362917c76764cddc74d0f76d
2023-06-21 16:02:41 +08:00
Wilson Sung
0b77875c4a Supress kernel avc log before SELinux initialized
Bug: 288049349
Fix: 288049229
Change-Id: I5087a77e65ecdbaa868a7257342f5d99f424880a
2023-06-21 16:02:29 +08:00
Treehugger Robot
1697357be9 Merge "Remove unused trace_marker dontaudit" into udc-d1-dev am: 107d5bb0f9 am: 0227a650c2 am: bb331a604a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23736932

Change-Id: I665a34524efc37a533a531ba1ba402ecdd96b775
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 07:37:22 +00:00
Treehugger Robot
442860590b Merge "Remove unused trace_marker dontaudit" into udc-d1-dev am: 107d5bb0f9 am: c03753058f am: 00f84dd5ea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23736932

Change-Id: If096a4d70d492efc8717cb08b5d9e87f35a341b5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 06:35:25 +00:00
Samuel Huang
1f2933970f Create telephony.ril.silent_reset system_ext property for RILD restart
RILD listens for changes to this property. If the value changes to 1, RILD will restart itself and set this property back to 0.

The TelephonyGoogle app will set this property to 1 when it receives a request from the SCONE app. Since TelephonyGoogle runs in the com.android.phone process, we also need to give the radio domain permission to set the telephony.ril.silent_reset property.

Bug: 286476107
Test: manual
Change-Id: I5ee72c7ab8e0bce75bbb23b676f515cabe40ed23
2023-06-21 06:34:55 +00:00
Wilson Sung
8818dd2de5 Update SELinux error
Test: scanBugreport
Bug: 288049050
Bug: 288049522
Bug: 288049561
Bug: 288049349
Bug: 288049075
Test: scanAvcDeniedLogRightAfterReboot
Bug: 288049229
Change-Id: I939cd8981e64eadb0fa047b09162a02056ec2abf
2023-06-21 06:04:23 +00:00
Treehugger Robot
bb331a604a Merge "Remove unused trace_marker dontaudit" into udc-d1-dev am: 107d5bb0f9 am: 0227a650c2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23736932

Change-Id: I1d1cd1f22ba22caa4dd1ccb0c0271751cb02a5dd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 05:46:38 +00:00
Treehugger Robot
00f84dd5ea Merge "Remove unused trace_marker dontaudit" into udc-d1-dev am: 107d5bb0f9 am: c03753058f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23736932

Change-Id: Ic95f6dca878f43fd19f22e7cf563dd1525bac114
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 05:40:41 +00:00
Treehugger Robot
0227a650c2 Merge "Remove unused trace_marker dontaudit" into udc-d1-dev am: 107d5bb0f9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23736932

Change-Id: Ic30c2463f2dcff66cf21f437583921247ca085d7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 05:02:16 +00:00
Treehugger Robot
c03753058f Merge "Remove unused trace_marker dontaudit" into udc-d1-dev am: 107d5bb0f9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23736932

Change-Id: Ib407f87305f84dda1edc1d440d03156ea7df90c2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-21 04:58:08 +00:00
Treehugger Robot
107d5bb0f9 Merge "Remove unused trace_marker dontaudit" into udc-d1-dev 2023-06-21 04:18:51 +00:00
Anthony Zhang
c435a7c0fc [automerger skipped] Merge "[DO NOT MERGE] Allow fingerprint to access persist property" into udc-d1-dev am: a594a23554 am: 2f78573928 am: 4db541297a -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23730231

Change-Id: Idde868be0d106299f6f0e6df4d302b6b5f8f20ea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 20:02:35 +00:00
Anthony Zhang
26d0764ba3 [automerger skipped] [DO NOT MERGE] Allow fingerprint to access persist property am: fb29e39ee1 am: b0c6280ba5 am: 82211212be -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23730231

Change-Id: Ic0cf5337945ed3299f3d3ac7b06da340496a5801
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 20:02:34 +00:00
Anthony Zhang
d6f42b3789 [automerger skipped] Merge "[DO NOT MERGE] Allow fingerprint to access persist property" into udc-d1-dev am: a594a23554 am: fbceb3b769 am: c15f35b510 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23730231

Change-Id: I119794ba66d6b223b83e9f3039c304874c1e19b9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 20:01:10 +00:00
Anthony Zhang
63bba8b88b [automerger skipped] [DO NOT MERGE] Allow fingerprint to access persist property am: fb29e39ee1 am: 6096b4605d am: bdda1f3563 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23730231

Change-Id: I3abb1d2a2adf7ef3f5d18a4016404b78939d0eb1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 20:01:09 +00:00
Anthony Zhang
4db541297a Merge "[DO NOT MERGE] Allow fingerprint to access persist property" into udc-d1-dev am: a594a23554 am: 2f78573928
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23730231

Change-Id: I8b662f7522b8945982aae5e963960913b8805394
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 19:02:06 +00:00
Anthony Zhang
82211212be [DO NOT MERGE] Allow fingerprint to access persist property am: fb29e39ee1 am: b0c6280ba5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23730231

Change-Id: I741bf5ff3e13ef4fe39c6f97c61765da9c22d4f1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 19:02:04 +00:00
Anthony Zhang
c15f35b510 Merge "[DO NOT MERGE] Allow fingerprint to access persist property" into udc-d1-dev am: a594a23554 am: fbceb3b769
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23730231

Change-Id: I976437c263aac7750f0663983c2a24175a9c953a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 18:54:33 +00:00
Anthony Zhang
bdda1f3563 [DO NOT MERGE] Allow fingerprint to access persist property am: fb29e39ee1 am: 6096b4605d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23730231

Change-Id: Ief35f2761e877322522b4879383bf9a8da2b1af3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 18:54:30 +00:00
Anthony Zhang
2f78573928 Merge "[DO NOT MERGE] Allow fingerprint to access persist property" into udc-d1-dev am: a594a23554
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23730231

Change-Id: I7db822716e72399a9038e1ab1501150e4db88760
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 18:12:45 +00:00
Anthony Zhang
b0c6280ba5 [DO NOT MERGE] Allow fingerprint to access persist property am: fb29e39ee1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23730231

Change-Id: I484b590b74da12bdf34de1bd84132a327d8387f7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 18:12:44 +00:00
Anthony Zhang
fbceb3b769 Merge "[DO NOT MERGE] Allow fingerprint to access persist property" into udc-d1-dev am: a594a23554
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23730231

Change-Id: Ic77f4c7fcc9ee54afdbc70880979f1a094c69828
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 18:10:20 +00:00
Anthony Zhang
6096b4605d [DO NOT MERGE] Allow fingerprint to access persist property am: fb29e39ee1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23730231

Change-Id: Ib229248e32c537641601e0d60bd223570e713883
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-20 18:10:18 +00:00
Anthony Zhang
a594a23554 Merge "[DO NOT MERGE] Allow fingerprint to access persist property" into udc-d1-dev 2023-06-20 17:31:31 +00:00
Wilson Sung
f82fc11c11 Remove unused trace_marker dontaudit
Fix: 260366195
Change-Id: I7ece6549a64740c878dc92ce4b011136eb313533
2023-06-20 14:34:01 +08:00
Wilson Sung
62f4c4cc13 Update SELinux error am: 0561b1bd1e am: 78f862e8ed am: 61bbf0e529
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23726793

Change-Id: I5cf6a73809f9994446d3bcf1358beb8a5cad76a8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 11:07:51 +00:00
Wilson Sung
f5d9e3c18a Remove obsolete bug_map and dontaudit am: 94fd2403a7 am: 324af7e2a0 am: 06f2d05799
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23657127

Change-Id: I1d9a306e2c303a46beba1d219cda8f57152fed27
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 11:07:49 +00:00
Wilson Sung
5dcd966c3f Update SELinux error am: 0561b1bd1e am: 23683d360c am: d1f81b978c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23726793

Change-Id: I97427924840bba4e5c316cd2a34f888e209fa044
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 11:07:38 +00:00
Wilson Sung
3a53a3d96b Remove obsolete bug_map and dontaudit am: 94fd2403a7 am: 385d8910b5 am: 8460688dfb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23657127

Change-Id: I67a5bc76946250e4e9ac04c097cd93cac12c07ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 11:07:35 +00:00
Wilson Sung
61bbf0e529 Update SELinux error am: 0561b1bd1e am: 78f862e8ed
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23726793

Change-Id: I9f7659967897083db3fd026525bb907bfa40491a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 10:23:04 +00:00
Wilson Sung
06f2d05799 Remove obsolete bug_map and dontaudit am: 94fd2403a7 am: 324af7e2a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23657127

Change-Id: I164a18ccdc77a6f0dd05f062578e522fafe8917b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 10:23:02 +00:00
Wilson Sung
d1f81b978c Update SELinux error am: 0561b1bd1e am: 23683d360c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23726793

Change-Id: I719680512ea1bb723dde78205330f054ea07769c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 10:17:15 +00:00
Wilson Sung
8460688dfb Remove obsolete bug_map and dontaudit am: 94fd2403a7 am: 385d8910b5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23657127

Change-Id: I818d1856cfe9f6cc731ebb94747ad42a606a80a7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 10:17:13 +00:00
Wilson Sung
78f862e8ed Update SELinux error am: 0561b1bd1e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23726793

Change-Id: Ibcef6ef61c7fe4fe864bd83179af5fa294f63808
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 09:39:19 +00:00
Wilson Sung
324af7e2a0 Remove obsolete bug_map and dontaudit am: 94fd2403a7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23657127

Change-Id: I6f72c9b5b16e23d3062a5b52e3e761984119a7eb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 09:39:14 +00:00
Wilson Sung
23683d360c Update SELinux error am: 0561b1bd1e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23726793

Change-Id: I4bafe9717f682cfb0a2da65de21b414edcbc62bb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 09:35:07 +00:00
Wilson Sung
385d8910b5 Remove obsolete bug_map and dontaudit am: 94fd2403a7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23657127

Change-Id: Ic6a1f3525323749ab01b9a8d4b634e17c0df58ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 09:35:05 +00:00
Wilson Sung
0561b1bd1e Update SELinux error
Test: scanBugreport
Bug: 287898138
Change-Id: I297e59df3774a32305d72706ee6a160f111dee7a
2023-06-19 06:45:37 +00:00
Wilson Sung
94fd2403a7 Remove obsolete bug_map and dontaudit
Fix: 287154997
Fix: 281815537
Fix: 279680264
Fix: 264600171
Fix: 264483456
Fix: 264600171
Fix: 264600171
Fix: 274374769
Fix: 274727372
Fix: 279680070
Fix: 280706610
Fix: 279680213
Fix: 272628762
Fix: 274374992
Fix: 283725554
Fix: 274374722
Fix: 272166737
Fix: 272166787
Fix: 264483532
Fix: 264483753
Fix: 264483754
Fix: 281815594
Fix: 269964574
Fix: 269964574
Fix: 280705998
Fix: 269964558
Fix: 264599934
Fix: 267714573
Fix: 268566481
Fix: 273143844
Fix: 275645636
Fix: 275646003
Fix: 267714573
Fix: 272166664
Fix: 267714573
Fix: 268566481
Fix: 273143844
Fix: 277155496
Fix: 267260619
Fix: 261933310
Fix: 262794429
Fix: 267261048
Change-Id: I1e6da1e43b1aaa398d496cd7b1f3b6267fd39e21
2023-06-19 06:45:30 +00:00
Treehugger Robot
8ad54c6672 Merge "sepolicy: allow hal_power_stats to read sysfs_edgetpu" into udc-d1-dev am: a3e9615016 am: af63d1adeb am: a6df16ff3d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23720970

Change-Id: I581d6455409a7a528e83271d10d419e3db8fe96e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 03:43:10 +00:00
Treehugger Robot
fb415c6804 Merge "sepolicy: allow hal_power_stats to read sysfs_edgetpu" into udc-d1-dev am: a3e9615016 am: 6c37bd03ee am: 70578d9eeb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23720970

Change-Id: I3f38d3558d5aba1ae98c5f4cc36891a853f617b6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 03:42:55 +00:00
Treehugger Robot
a6df16ff3d Merge "sepolicy: allow hal_power_stats to read sysfs_edgetpu" into udc-d1-dev am: a3e9615016 am: af63d1adeb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23720970

Change-Id: I51fbbb574a58e93487ccfb4289b44b99973784c8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 02:59:07 +00:00
Treehugger Robot
70578d9eeb Merge "sepolicy: allow hal_power_stats to read sysfs_edgetpu" into udc-d1-dev am: a3e9615016 am: 6c37bd03ee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23720970

Change-Id: I2646ed87072a5e6aebb41fee785b0281a45c3173
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 02:53:30 +00:00
Treehugger Robot
af63d1adeb Merge "sepolicy: allow hal_power_stats to read sysfs_edgetpu" into udc-d1-dev am: a3e9615016
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23720970

Change-Id: Ia4b379de76b03ce2e4fb66b42992806e7e40965f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 02:13:15 +00:00
Treehugger Robot
6c37bd03ee Merge "sepolicy: allow hal_power_stats to read sysfs_edgetpu" into udc-d1-dev am: a3e9615016
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23720970

Change-Id: I796a8fd929bf0d2d76d89d8edfb397b84acb989b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-19 02:09:07 +00:00
Treehugger Robot
a3e9615016 Merge "sepolicy: allow hal_power_stats to read sysfs_edgetpu" into udc-d1-dev 2023-06-19 01:35:28 +00:00
Treehugger Robot
4ec39b4108 Merge "Update SELinux error" into udc-d1-dev am: 344c7f46c1 am: 461409cecd am: 31a91022bd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23667878

Change-Id: I9c6538cda5a506b7cdceb35b1ef98e20575e3c25
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-17 08:32:15 +00:00
Treehugger Robot
b0ffbe7830 Merge "Update SELinux error" into udc-d1-dev am: 344c7f46c1 am: a8b6a0ffa6 am: 1658327140
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23667878

Change-Id: I2c6c1941a66eaa53be82e261557377dcc783ad90
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-17 08:32:05 +00:00
Treehugger Robot
31a91022bd Merge "Update SELinux error" into udc-d1-dev am: 344c7f46c1 am: 461409cecd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23667878

Change-Id: Ife4dac76505f121b8948f886a08a1f5df015b892
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-17 07:46:49 +00:00
Treehugger Robot
1658327140 Merge "Update SELinux error" into udc-d1-dev am: 344c7f46c1 am: a8b6a0ffa6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23667878

Change-Id: I23defbb8d24c34e1f4107f91ee44a3d621b138a3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-17 07:40:42 +00:00
Treehugger Robot
461409cecd Merge "Update SELinux error" into udc-d1-dev am: 344c7f46c1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23667878

Change-Id: I376e5acd176e648021dd03e1d5bd576469ea1f5c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-17 07:01:34 +00:00
Treehugger Robot
a8b6a0ffa6 Merge "Update SELinux error" into udc-d1-dev am: 344c7f46c1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23667878

Change-Id: I2f57c78df9524faa34ebc8c52b4a25a4847f2864
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-17 06:55:59 +00:00
Treehugger Robot
344c7f46c1 Merge "Update SELinux error" into udc-d1-dev 2023-06-17 06:10:56 +00:00
Anthony Zhang
fb29e39ee1 [DO NOT MERGE] Allow fingerprint to access persist property
For zuma devices.

Bug: 258901849
Test: Local test on enrollment/delete, version update
Change-Id: I2c10bde2940778e0a434c2a073eb5793efeea455
2023-06-16 09:37:10 -07:00
Darren Hsu
f4f3f57534 sepolicy: allow hal_power_stats to read sysfs_edgetpu
Bug: 253702169
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Ica2274f6e61cc35f7baf089ecc7b6c35f0914aeb
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-06-16 17:21:50 +08:00
Dinesh Yadav
307aca1d6b [automerger skipped] Add sepolicy for gxp_logging service to report metrics [RESTRICT AUTOMERGE] am: 100dd2387d am: 2bd05aeaad am: f2ea110859 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23468178

Change-Id: I08cfca2cf7b2f7bcc91e1881df457929500a795c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-15 06:30:16 +00:00
Dinesh Yadav
d396ec656c [automerger skipped] Add sepolicy for gxp_logging service to report metrics [RESTRICT AUTOMERGE] am: 100dd2387d am: a95fa016e1 am: 57575e4ee2 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23468178

Change-Id: I9191d9c88dbf6f62e7412c87ff39868d95775344
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-15 06:29:54 +00:00
Dinesh Yadav
f2ea110859 Add sepolicy for gxp_logging service to report metrics [RESTRICT AUTOMERGE] am: 100dd2387d am: 2bd05aeaad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23468178

Change-Id: Ic122fd605153609244a3ffbf36021386c83ee1b1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-15 04:43:14 +00:00
Dinesh Yadav
57575e4ee2 Add sepolicy for gxp_logging service to report metrics [RESTRICT AUTOMERGE] am: 100dd2387d am: a95fa016e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23468178

Change-Id: I76996f49845acb4a6739b2c0d781232ceb24b44d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-15 04:37:29 +00:00
Dinesh Yadav
2bd05aeaad Add sepolicy for gxp_logging service to report metrics [RESTRICT AUTOMERGE] am: 100dd2387d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23468178

Change-Id: I4bd79f57f2a063aef60e8dab049460636633ccea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-15 03:57:29 +00:00
Dinesh Yadav
a95fa016e1 Add sepolicy for gxp_logging service to report metrics [RESTRICT AUTOMERGE] am: 100dd2387d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23468178

Change-Id: Ic93c5c244e98865bfd567238fcc916ac04d9811d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-15 03:53:35 +00:00
Darren Hsu
3f20e683b1 sepolicy: lable NFC sysfs path for hal_power_stats am: 3c8fb109b8 am: 0893338352
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23667874

Change-Id: Ib6be476ccb2948ed30ce2b108c90b32c26b958f3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-14 12:34:15 +00:00
Darren Hsu
0893338352 sepolicy: lable NFC sysfs path for hal_power_stats am: 3c8fb109b8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23667874

Change-Id: Ief308c99d8f56d080aafb2b643cfc7ed0b92b1fa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-14 11:50:18 +00:00
Wilson Sung
5fb350f09f Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 286508419
Test: scanBugreport
Bug: 286508419
Test: scanAvcDeniedLogRightAfterReboot
Bug: 286508419
Change-Id: I1ba324133f5f4e14c5a7d43cfea25d98bda9faa9
2023-06-14 15:30:08 +08:00
Darren Hsu
3c8fb109b8 sepolicy: lable NFC sysfs path for hal_power_stats
Bug: 270498656
Test: capture a bugreport and ensure that there is
no avc denials for power stats
Change-Id: Ie765f6267ceacbc0b11426f4ee81ea0670195ddb
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-06-14 13:58:33 +08:00
Joerg Wagner
724a0cc7c5 Merge "Prepare for Mali r44p0 UMD update" into udc-qpr-dev am: d19ec7a5b6 am: 029fcb5e8a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23599640

Change-Id: Ib339b9efc10937378c5dc802fda8fb758372d90a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-13 07:35:27 +00:00
Joerg Wagner
029fcb5e8a Merge "Prepare for Mali r44p0 UMD update" into udc-qpr-dev am: d19ec7a5b6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23599640

Change-Id: I76600fc5e3c949e8ec780b666f1b955cd35f18f2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-13 06:51:27 +00:00
Joerg Wagner
d19ec7a5b6 Merge "Prepare for Mali r44p0 UMD update" into udc-qpr-dev 2023-06-13 06:03:15 +00:00
Dinesh Yadav
100dd2387d Add sepolicy for gxp_logging service to report metrics [RESTRICT AUTOMERGE]
gxp_logging service will periodically check the sysfs files exposed by
the gxp kernel driver and report stats to Suez framework.
These policies are needed to report the metrics.

Tested:
Found no violation with these policies on a P23 device

Bug: 278514198
Change-Id: I8c3e57dfe4e9a6caab425f2424d07e83f5e7b9c6
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-06-13 03:37:56 +00:00
Ruofei Ma
9d4141ec12 Merge "mediacodec_google: add hal_power" into udc-d1-dev am: abd1dee381 am: cac09c20ba am: 4e97198c56
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23618633

Change-Id: Ib97113a56844a62033be8650cec5d2d63170f7f4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 17:24:01 +00:00
Ruofei Ma
5d25af7ca0 Merge "mediacodec_google: add hal_power" into udc-d1-dev am: abd1dee381 am: a0f664f798 am: 46e587c075
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23618633

Change-Id: I245423cee724e5ddbcb3fdffc411ec6aa00b1e44
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 17:22:13 +00:00
Ruofei Ma
4e97198c56 Merge "mediacodec_google: add hal_power" into udc-d1-dev am: abd1dee381 am: cac09c20ba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23618633

Change-Id: I630b7889376612d003848f323b1bc3caba5678e2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 16:40:40 +00:00
Ruofei Ma
46e587c075 Merge "mediacodec_google: add hal_power" into udc-d1-dev am: abd1dee381 am: a0f664f798
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23618633

Change-Id: I98e4ef057003235ecb66c2cd9ed0837dbf001e6a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 16:37:58 +00:00
Ruofei Ma
cac09c20ba Merge "mediacodec_google: add hal_power" into udc-d1-dev am: abd1dee381
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23618633

Change-Id: Ib439b6d6464dcdaab8337ada3558780579363843
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 15:53:18 +00:00
Ruofei Ma
a0f664f798 Merge "mediacodec_google: add hal_power" into udc-d1-dev am: abd1dee381
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23618633

Change-Id: Icc85ce19bc59035553f2902a493cb7681ace2b6e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 15:50:45 +00:00
Ruofei Ma
abd1dee381 Merge "mediacodec_google: add hal_power" into udc-d1-dev 2023-06-12 15:17:42 +00:00
TreeHugger Robot
92c27120be Merge changes from topic "283841311" into udc-d1-dev am: 032d9942de am: 00ed1044ff am: b18d19409a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23629344

Change-Id: I8bcedee8227e08324b6104ac2341ed10ffb3cf38
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 08:43:04 +00:00
TreeHugger Robot
85a335c593 Merge changes from topic "283841311" into udc-d1-dev am: 032d9942de am: 0450d548a2 am: 62ad33134c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23629344

Change-Id: If4404f2bd3f7b5ebd675b85c3a9f6fd22f909aaa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 08:42:44 +00:00
TreeHugger Robot
b18d19409a Merge changes from topic "283841311" into udc-d1-dev am: 032d9942de am: 00ed1044ff
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23629344

Change-Id: I3e80089107c6fa2e72061b56c4c68e44427d796d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 08:01:33 +00:00
TreeHugger Robot
62ad33134c Merge changes from topic "283841311" into udc-d1-dev am: 032d9942de am: 0450d548a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23629344

Change-Id: Id066ca9d7b254964311413f4ae6f6d7cd555dbcd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 07:55:50 +00:00
TreeHugger Robot
00ed1044ff Merge changes from topic "283841311" into udc-d1-dev am: 032d9942de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23629344

Change-Id: Id39de7c6a03f11dd3d74e3ce9f9a0deca58873a3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 07:18:17 +00:00
TreeHugger Robot
0450d548a2 Merge changes from topic "283841311" into udc-d1-dev am: 032d9942de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23629344

Change-Id: I214bf272f8cd35697063ffd39501cd65a2fb9c3f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 07:14:00 +00:00
TreeHugger Robot
032d9942de Merge changes from topic "283841311" into udc-d1-dev
* changes:
  Allow systemui_app access statsmanager_service
  Move systemui_app to system_ext
2023-06-12 06:30:36 +00:00
Krzysztof Kosiński
84812b8565 Remove Google Camera access to GXP firmware. am: 35910a3e8b am: 9332337e8e am: 311f9e5d45
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23612126

Change-Id: If589b112b5393a8ec26e329c8e6a135bb8106e8d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 03:29:29 +00:00
Krzysztof Kosiński
523f2035e1 Remove Google Camera access to GXP firmware. am: 35910a3e8b am: e27ecde5d5 am: 3ac14e2c1a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23612126

Change-Id: I90a8198024412b9f410cff827150589c8076c5a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 03:29:04 +00:00
Krzysztof Kosiński
311f9e5d45 Remove Google Camera access to GXP firmware. am: 35910a3e8b am: 9332337e8e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23612126

Change-Id: I6b99371098f13305543471dedeed452cc9517181
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 02:46:33 +00:00
Krzysztof Kosiński
3ac14e2c1a Remove Google Camera access to GXP firmware. am: 35910a3e8b am: e27ecde5d5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23612126

Change-Id: I88fe02fc109ca320056e1d0e80bcaef359ab805e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 02:40:32 +00:00
Wilson Sung
5ac528406e Allow systemui_app access statsmanager_service
Bug: 283841311
Change-Id: Id3c2838179736b42070959b3dad7c2ecd5580f22
2023-06-12 10:26:46 +08:00
Wilson Sung
7b19701919 Move systemui_app to system_ext
Bug: 283841311
Bug: 264266705
Change-Id: I6c2f167cda9a52da4698f3732c9fdbb13674bea8
2023-06-12 10:26:31 +08:00
Krzysztof Kosiński
9332337e8e Remove Google Camera access to GXP firmware. am: 35910a3e8b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23612126

Change-Id: I5efdb04c8be5e6d3a01850ff747ca5c7b20992f8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 02:03:17 +00:00
Krzysztof Kosiński
e27ecde5d5 Remove Google Camera access to GXP firmware. am: 35910a3e8b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23612126

Change-Id: Ie4e1237fa5e8f18fb54bbe9733342d6cd4b83767
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-12 01:59:21 +00:00
Ruofei Ma
3346e879e6 mediacodec_google: add hal_power
Add mediacodec_google as a client to hal_power for it to
do power hint.

Bug: 274736629

Change-Id: Ib07001be6ae4aaeaebf2e97439b9af0766640dc9
Signed-off-by: Ruofei Ma <ruofeim@google.com>
2023-06-08 18:28:50 +00:00
Krzysztof Kosiński
35910a3e8b Remove Google Camera access to GXP firmware.
This was originally a workaround and is not needed on Zuma.

Bug: 264489778
Test: gca_smoke.py on zuma device
Change-Id: I35d168a2f832a430ec1b782b12fb642bcea4bfd1
2023-06-08 10:19:18 +00:00
Treehugger Robot
11ff0923ca Merge "Add sepolicies for gcma_camera heaps" into udc-d1-dev am: 8733772e74 am: 088b6c2879 am: 8ea5fd6f96
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22298464

Change-Id: I874f3e9767ff8842bc0c86e5c4c28d0bb7541abd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-08 09:16:57 +00:00
Treehugger Robot
ba91204313 Merge "Add sepolicies for gcma_camera heaps" into udc-d1-dev am: 8733772e74 am: 8d8f96f8d9 am: 10d6b74a4e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22298464

Change-Id: I23fd2b50990ef3fe0c5ecc54867897bb0a4d2c24
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-08 09:15:54 +00:00
Treehugger Robot
8ea5fd6f96 Merge "Add sepolicies for gcma_camera heaps" into udc-d1-dev am: 8733772e74 am: 088b6c2879
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22298464

Change-Id: I75f298097b2a880a482e2fff17ae3a328bc4a183
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-08 08:10:00 +00:00
Treehugger Robot
10d6b74a4e Merge "Add sepolicies for gcma_camera heaps" into udc-d1-dev am: 8733772e74 am: 8d8f96f8d9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22298464

Change-Id: Ib667a39b605ee78facd3098e14801d11e613633c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-08 08:04:24 +00:00
Treehugger Robot
088b6c2879 Merge "Add sepolicies for gcma_camera heaps" into udc-d1-dev am: 8733772e74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22298464

Change-Id: I0ee764a32b7d46acd14160228f32fe81b2708990
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-08 07:22:34 +00:00
Treehugger Robot
8d8f96f8d9 Merge "Add sepolicies for gcma_camera heaps" into udc-d1-dev am: 8733772e74
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22298464

Change-Id: Ieb5077bdd5fc38b9eed1283a31a80c4f7c0b93d0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-08 07:21:08 +00:00
Treehugger Robot
8733772e74 Merge "Add sepolicies for gcma_camera heaps" into udc-d1-dev 2023-06-08 06:25:44 +00:00
Jörg Wagner
ce42de2ebd Prepare for Mali r44p0 UMD update
Add selinux rule to allow new V2 interface file alongside of V1 used up to r43p0.
The V1 entry will be removed once the r44p0 UMD update completes.
This decouples small changes from large, potentially intrusive ones in
other repositories.

Bug: 284254900
Change-Id: Ia928f871d8ea1fdbfb963cecb8fc4a99947e443e
2023-06-07 10:19:17 +00:00
Wei Wang
78fed6095a Merge "SELinux: allow to access GPU dvfs period change" into udc-d1-dev am: 55020988a0 am: 4c051c0cc2 am: 599989a20d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22480582

Change-Id: If0bd4dac295c108b6a60e47fb7bdfac55d8aefcb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 00:20:26 +00:00
Wei Wang
f1c34d8891 Merge "SELinux: allow to access GPU dvfs period change" into udc-d1-dev am: 55020988a0 am: 75529f8437 am: 35e6fbb0fa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22480582

Change-Id: I925c4d4ae039a7cd73a4d90fbaf1a77ead2dbbeb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 00:20:04 +00:00
Wei Wang
599989a20d Merge "SELinux: allow to access GPU dvfs period change" into udc-d1-dev am: 55020988a0 am: 4c051c0cc2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22480582

Change-Id: Ia6d0fd65784eb3ceaffd163bd677698093bbee65
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 23:40:42 +00:00
Wei Wang
35e6fbb0fa Merge "SELinux: allow to access GPU dvfs period change" into udc-d1-dev am: 55020988a0 am: 75529f8437
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22480582

Change-Id: Idf8f3e69de57e455a34563ddeefb65e4bf506d9a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 23:38:03 +00:00
Wei Wang
4c051c0cc2 Merge "SELinux: allow to access GPU dvfs period change" into udc-d1-dev am: 55020988a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22480582

Change-Id: I2d294b36b2ce9a6eaf47963bc2387b083e1c2050
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 22:55:16 +00:00
Wei Wang
75529f8437 Merge "SELinux: allow to access GPU dvfs period change" into udc-d1-dev am: 55020988a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22480582

Change-Id: I5a14e15ddee07150b3489e9ab6502229d0508eea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 22:53:01 +00:00
Wei Wang
55020988a0 Merge "SELinux: allow to access GPU dvfs period change" into udc-d1-dev 2023-06-06 22:25:11 +00:00
Zixuan Lan
1fc4fc4f05 Merge "remove 280706211 from bug map" into udc-d1-dev am: bdee55bb57 am: 77bbb28eae am: 9951e85e00
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23575516

Change-Id: Ic515883ca305c24561f46858a2931cf9a68908a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 14:48:50 +00:00
Zixuan Lan
45b4bd669c Merge "remove 280706211 from bug map" into udc-d1-dev am: bdee55bb57 am: d98d82581c am: d24d531f30
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23575516

Change-Id: I7d3f03e563e48be95268c071255906acd74b57d3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 14:48:03 +00:00
Zixuan Lan
9951e85e00 Merge "remove 280706211 from bug map" into udc-d1-dev am: bdee55bb57 am: 77bbb28eae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23575516

Change-Id: Ie99500b6e75e1002888fe5d6f74fb016e28f68f6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 14:25:01 +00:00
Zixuan Lan
d24d531f30 Merge "remove 280706211 from bug map" into udc-d1-dev am: bdee55bb57 am: d98d82581c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23575516

Change-Id: I370df909aa0aded9fb9305dcc65938ea39651954
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 14:19:22 +00:00
Zixuan Lan
77bbb28eae Merge "remove 280706211 from bug map" into udc-d1-dev am: bdee55bb57
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23575516

Change-Id: Ie3c0aed656b9a9be90fca81894b989ce0fb226bd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 13:40:43 +00:00
Zixuan Lan
d98d82581c Merge "remove 280706211 from bug map" into udc-d1-dev am: bdee55bb57
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23575516

Change-Id: Ie5aa4533851dfe43e9826640be2123409f51c987
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 13:36:37 +00:00
Zixuan Lan
bdee55bb57 Merge "remove 280706211 from bug map" into udc-d1-dev 2023-06-06 13:02:17 +00:00
Allen Xu
8873375330 Add sepolicy for ConnectivityMonitor am: 78b62802e4 am: 4a13ad4cc2 am: 60612f7750
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23575448

Change-Id: Ibaa6ac58ec58ba42661be4c6be6c3dbd13df456e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 08:03:36 +00:00
Allen Xu
9236600765 Add sepolicy for ConnectivityMonitor am: 78b62802e4 am: ef2e13dcd1 am: 75821af430
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23575448

Change-Id: I9ee542ee1322c61ee88a93d2e2886441dad67658
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 08:03:08 +00:00
Allen Xu
60612f7750 Add sepolicy for ConnectivityMonitor am: 78b62802e4 am: 4a13ad4cc2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23575448

Change-Id: Ied5b3d19cc95af4db2853cf96a09446272d9702f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 07:21:34 +00:00
Allen Xu
75821af430 Add sepolicy for ConnectivityMonitor am: 78b62802e4 am: ef2e13dcd1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23575448

Change-Id: I63ffc60b44c59854cabb67db128cf56a3b813207
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 07:16:18 +00:00
Allen Xu
4a13ad4cc2 Add sepolicy for ConnectivityMonitor am: 78b62802e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23575448

Change-Id: Ie7c9013431ba535001797e30b984a1f57340ed08
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 06:37:54 +00:00
Allen Xu
ef2e13dcd1 Add sepolicy for ConnectivityMonitor am: 78b62802e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23575448

Change-Id: I02dc07acc680587081f8c19883984d95dc9f6602
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-06 06:33:49 +00:00
Allen Xu
78b62802e4 Add sepolicy for ConnectivityMonitor
Bug: 264489520
Test: v2/pixel-pts/base
Change-Id: I669a538fe3d0a03422638d7d19fc62a793246f6b
2023-06-06 02:01:38 +00:00
Zixuan Lan
76b53940a9 remove 280706211 from bug map
Bug: 280706211
Test: adb log
Change-Id: I167041363a27c294a3c8d2d2fb145ce751a34db7
2023-06-06 08:30:25 +08:00
Leo Hsieh
e2cd135f0a [automerger skipped] Merge "Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE]" into udc-d1-dev am: 72577756e2 am: 5ab934799d am: 4f6900614d -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23482807

Change-Id: I385ea5bbfd9b59e8c2426fa5b7bf34e1e30477ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 14:57:38 +00:00
leohsieh
651cd9a37e [automerger skipped] Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE] am: 458b60e5c9 am: f225931a7c am: 8a180eed8a -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23482807

Change-Id: I84756287b4e87d9661c30e97a57c89b21787bbb8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 14:57:37 +00:00
Leo Hsieh
7e538d7716 [automerger skipped] Merge "Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE]" into udc-d1-dev am: 72577756e2 am: d702116b8e am: b8fd73406f -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23482807

Change-Id: I0531857ec8f844ccfc147dde1de4002ad2e80e60
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 14:56:29 +00:00
leohsieh
4b50fd4abb [automerger skipped] Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE] am: 458b60e5c9 am: 70ba8a58fc am: 9de660b680 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23482807

Change-Id: I9813fcb4f7095b9cbab9fb6e3be14009492fd4a8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 14:56:27 +00:00
Leo Hsieh
4f6900614d Merge "Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE]" into udc-d1-dev am: 72577756e2 am: 5ab934799d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23482807

Change-Id: I1eb768e9069c1e52570546d9839511f72e7d37a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 14:15:04 +00:00
leohsieh
8a180eed8a Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE] am: 458b60e5c9 am: f225931a7c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23482807

Change-Id: I6332f95aba070960bd434da1dc18ea60778dc205
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 14:15:03 +00:00
Leo Hsieh
b8fd73406f Merge "Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE]" into udc-d1-dev am: 72577756e2 am: d702116b8e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23482807

Change-Id: I22ffff01ed00293d6890d383ef9f7ba110d66bdc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 14:09:25 +00:00
leohsieh
9de660b680 Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE] am: 458b60e5c9 am: 70ba8a58fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23482807

Change-Id: I4273f2744a4ad017f75defb46dd0547938bb86d5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 14:09:24 +00:00
Leo Hsieh
5ab934799d Merge "Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE]" into udc-d1-dev am: 72577756e2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23482807

Change-Id: Ie15f3a943605194780e76b2f6c5c76263fc6f519
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 13:29:03 +00:00
leohsieh
f225931a7c Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE] am: 458b60e5c9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23482807

Change-Id: If23a454731b5ce0045a27923066c42526322ce9d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 13:29:02 +00:00
Leo Hsieh
d702116b8e Merge "Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE]" into udc-d1-dev am: 72577756e2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23482807

Change-Id: I6f02745df01d808135acef08fc3f4f1a8de8f99d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 13:26:04 +00:00
leohsieh
70ba8a58fc Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE] am: 458b60e5c9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23482807

Change-Id: Ib549e910bb1c844153ff692edbc7d6608f9a0d6f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 13:26:02 +00:00
Leo Hsieh
72577756e2 Merge "Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE]" into udc-d1-dev 2023-06-01 12:40:24 +00:00
Mark su
a4a8590805 Add video12 as hw_jpg_device and enable it for debug_camera_app am: 51c91e5bdf am: 73334bf1d1 am: 1cb4ca1475
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23053881

Change-Id: Iaada4b327106f8b026312b415bccfb14d4bf4466
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 09:07:44 +00:00
Mark su
725f5b8df8 Add video12 as hw_jpg_device and enable it for debug_camera_app am: 51c91e5bdf am: cbc15223d5 am: 870eb2484d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23053881

Change-Id: If4516eb1c6fcf0dfd20c9d04a76092fb9300a7d6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 09:06:22 +00:00
Mark su
1cb4ca1475 Add video12 as hw_jpg_device and enable it for debug_camera_app am: 51c91e5bdf am: 73334bf1d1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23053881

Change-Id: I64cd3f840c3f0a3cfae946963be4e639e2a84957
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 08:21:24 +00:00
Mark su
870eb2484d Add video12 as hw_jpg_device and enable it for debug_camera_app am: 51c91e5bdf am: cbc15223d5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23053881

Change-Id: Ief1246df91cc21927417e398d4157be643c85787
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 08:15:37 +00:00
Mark su
73334bf1d1 Add video12 as hw_jpg_device and enable it for debug_camera_app am: 51c91e5bdf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23053881

Change-Id: I27031f93a5210145bcb50acbf8f4707c9459b113
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 07:34:54 +00:00
Mark su
cbc15223d5 Add video12 as hw_jpg_device and enable it for debug_camera_app am: 51c91e5bdf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23053881

Change-Id: I760c9c39cf1b99340a60ccb36261dff889ce97cd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-01 07:30:39 +00:00
TreeHugger Robot
44564ae24b Merge "Remove old secure_element HIDL permission" into udc-d1-dev am: 23440aa9df am: 3f157f2b26 am: 99eb44cdb5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23466920

Change-Id: I20237f97bf299a74404180400289b45faa5a68ad
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 07:58:16 +00:00
TreeHugger Robot
2df1fd9399 Merge "Remove old secure_element HIDL permission" into udc-d1-dev am: 23440aa9df am: ae82081798 am: 55c2250a35
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23466920

Change-Id: I0972ca583406d0dbfba0528515890bb1b0946097
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 07:57:20 +00:00
TreeHugger Robot
99eb44cdb5 Merge "Remove old secure_element HIDL permission" into udc-d1-dev am: 23440aa9df am: 3f157f2b26
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23466920

Change-Id: Icc1df44cc917a1df94be95201cf382caa893ab9a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 07:14:42 +00:00
TreeHugger Robot
55c2250a35 Merge "Remove old secure_element HIDL permission" into udc-d1-dev am: 23440aa9df am: ae82081798
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23466920

Change-Id: Ic08f03bf9a0b9026b8ca9ee354b40815e697efe7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 07:10:27 +00:00
TreeHugger Robot
3f157f2b26 Merge "Remove old secure_element HIDL permission" into udc-d1-dev am: 23440aa9df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23466920

Change-Id: I52c70ff896514058585b1d5ef6810331005758cd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 06:25:04 +00:00
TreeHugger Robot
ae82081798 Merge "Remove old secure_element HIDL permission" into udc-d1-dev am: 23440aa9df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23466920

Change-Id: Ice441b75eb029e6fe3940d3d9dd0d28eee5556b3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 06:23:08 +00:00
Mark su
51c91e5bdf Add video12 as hw_jpg_device and enable it for debug_camera_app
Test: 05-05 05:07:06.652  4616  4616 W FinishThread: type=1400 audit(0.0:24): avc:  denied  { read write } for  name="video12" dev="tmpfs" ino=646 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:video_device:s0 tclass=chr_file permissive=0 app=com.google.android.GoogleCameraEng
05-08 22:00:59.000  7323  7323 I FinishThread: type=1400 audit(0.0:36): avc:  denied  { read } for  name="lib_jpg_encoder.so"
 dev="dm-45" ino=25639 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera_data_file:s0 tcl
ass=file permissive=1 app=com.google.android.GoogleCameraEng

05-08 22:00:59.000  7323  7323 I FinishThread: type=1400 audit(0.0:37): avc:  denied  { open } for  path="/vendor/lib64/lib_j
pg_encoder.so" dev="dm-45" ino=25639 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera_da
ta_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng

05-08 22:46:00.260  4784  4784 I FinishThread: type=1400 audit(0.0:29): avc:  denied  { execute } for  path="/vendor/lib64/
libhwjpeg.so" dev="dm-50" ino=55596 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera_d
ata_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng

05-08 22:33:30.504  7436  7436 I FinishThread: type=1400 audit(0.0:36): avc:  denied  { getattr } for  path="/vendor/lib64/
lib_jpg_encoder.so" dev="dm-50" ino=53765 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_ca
mera_data_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng

05-08 22:33:30.504  7436  7436 I FinishThread: type=1400 audit(0.0:37): avc:  denied  { map } for  path="/vendor/lib64/lib_
jpg_encoder.so" dev="dm-50" ino=53765 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera
_data_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng

binder:7312_2: type=1400 audit(0.0:18): avc:  denied  { read write } for  name="video12" dev="tmpfs" ino=680 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hw_jpg_device:s0 tclass=chr_file permissive=1
05-08 22:28:37.692  7312  7312 I binder:7312_2: type=1400 audit(0.0:19): avc:  denied  { open } for  path="/dev/video12" dev="tmpfs" ino=680 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hw_jpg_device:s0 tclass=chr_file permissive=1

05-08 22:28:37.692  7312  7312 I binder:7312_2: type=1400 audit(0.0:20): avc:  denied  { ioctl } for  path="/dev/video12" dev="tmpfs" ino=680 ioctlcmd=0x5600 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hw_jpg_device:s0 tclass=chr_file permissive=1

05-08 22:28:37.700  7312  7312 I binder:7312_2: type=1400 audit(0.0:21): avc:  denied  { read } for  name="u:object_r:default_prop:s0" dev="tmpfs" ino=167 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=1

Bug: 267820687
Change-Id: I69f502d721f683d3532038d618f5fafc83f38b6b
2023-05-31 06:08:46 +00:00
TreeHugger Robot
23440aa9df Merge "Remove old secure_element HIDL permission" into udc-d1-dev 2023-05-31 05:27:32 +00:00
leohsieh
458b60e5c9 Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE]
Fix the following avc denial:
avc: denied { search } for name="17000000.aoc" dev="sysfs" ino=22035 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc:s0 tclass=dir permissive=0
avc: denied { write } for name="udfps_set_clock_source" dev="sysfs" ino=106891 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc_udfps:s0 tclass=file permissive=0
avc: denied { read } for name="udfps_get_disp_freq" dev="sysfs" ino=106893 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc_udfps:s0 tclass=file permissive=0

Bug: 267271482
Test: Verify fingerprint HAL process can read/write to the sysfs node.
Change-Id: I39a2e69b1c314d52944bb16ada61e7e6761561cf
2023-05-31 13:16:43 +08:00
Dinesh Yadav
a4a6eadf3c Merge "Add SEPolicy for gxp_metrics_logger.so logging to stats service" into udc-d1-dev am: 15f5afcfab am: d3f5a8b038 am: 1b5f5ec0e9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23265297

Change-Id: I9e7f26279502e21590e10a3e4726dd0b506379d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 04:58:16 +00:00
Dinesh Yadav
55064ee2f6 Merge "Add SEPolicy for gxp_metrics_logger.so logging to stats service" into udc-d1-dev am: 15f5afcfab am: 489a7de117 am: 87199f3e5a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23265297

Change-Id: I9db72caf2b829f6cd05b57267a12be49acdc6695
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 04:57:46 +00:00
Dinesh Yadav
1b5f5ec0e9 Merge "Add SEPolicy for gxp_metrics_logger.so logging to stats service" into udc-d1-dev am: 15f5afcfab am: d3f5a8b038
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23265297

Change-Id: I3e039d2ac1cf7493e2b110076cc272f9c7ba7dbc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 04:13:50 +00:00
Dinesh Yadav
87199f3e5a Merge "Add SEPolicy for gxp_metrics_logger.so logging to stats service" into udc-d1-dev am: 15f5afcfab am: 489a7de117
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23265297

Change-Id: If1e74bf230ecb4ab6a6da5f80de5b083eeeef2aa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 04:11:19 +00:00
Dinesh Yadav
d3f5a8b038 Merge "Add SEPolicy for gxp_metrics_logger.so logging to stats service" into udc-d1-dev am: 15f5afcfab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23265297

Change-Id: If50c2234c819bba039e421782381e5835c71ba02
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 03:20:24 +00:00
Dinesh Yadav
489a7de117 Merge "Add SEPolicy for gxp_metrics_logger.so logging to stats service" into udc-d1-dev am: 15f5afcfab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23265297

Change-Id: Iee24750f7f5471c2489375db47cf018799ea62b8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-31 03:18:05 +00:00
Hyungjun Park
6de0a33f0a Remove old secure_element HIDL permission
AIDL HAL is used in the new project and remove the old HIDL part.

Bug: 280530945
Test: VTS pass

Change-Id: Idd38fc59d7e89e2cafab5f4693d00abd6d4fb138
Signed-off-by: Hyungjun Park <hjun78.park@samsung.com>
2023-05-31 03:12:02 +00:00
Dinesh Yadav
15f5afcfab Merge "Add SEPolicy for gxp_metrics_logger.so logging to stats service" into udc-d1-dev 2023-05-31 02:22:42 +00:00
Yixuan Wang
8a16687b51 Merge "Add selinux policy for chre vendor data directory" 2023-05-31 01:24:48 +00:00
Yixuan Wang
7530c4bc13 Add selinux policy for chre vendor data directory
Bug: 278114604
Test: on device test
Change-Id: I1ac96655571f811c116540aec3a1626d5cca1b16
2023-05-30 21:16:26 +00:00
Chung-Kai (Michael) Mei
5efb72b8da Merge "sepolicy: ignore avc denial" into udc-d1-dev am: ca068bf60b am: cb1221098a am: 09ebeb1491
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23445936

Change-Id: I5d5d240bc3b61d7a043ec01d5833abca0ddd2738
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-29 08:16:52 +00:00
Chung-Kai (Michael) Mei
f782e8f4ac Merge "sepolicy: ignore avc denial" into udc-d1-dev am: ca068bf60b am: 3a43eaaad6 am: b6ccf1254e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23445936

Change-Id: I9e5c466f0694b56fb3b05441e03b4cd5086f1dde
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-29 08:16:44 +00:00
Chung-Kai (Michael) Mei
09ebeb1491 Merge "sepolicy: ignore avc denial" into udc-d1-dev am: ca068bf60b am: cb1221098a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23445936

Change-Id: I513810fa0fa9544c9fb7043542fc2c0e7bd3a204
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-29 07:32:32 +00:00
Chung-Kai (Michael) Mei
b6ccf1254e Merge "sepolicy: ignore avc denial" into udc-d1-dev am: ca068bf60b am: 3a43eaaad6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23445936

Change-Id: I5c0c4697a486ae4e44a116e3e572db26ae52c3bb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-29 07:27:05 +00:00
Chung-Kai (Michael) Mei
cb1221098a Merge "sepolicy: ignore avc denial" into udc-d1-dev am: ca068bf60b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23445936

Change-Id: Ie14b266747f7737678665d9d86d206a0ef2a5e37
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-29 06:24:10 +00:00
Chung-Kai (Michael) Mei
3a43eaaad6 Merge "sepolicy: ignore avc denial" into udc-d1-dev am: ca068bf60b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23445936

Change-Id: I5db4cd7aac7ebd2f34c1dae48914a5f97a9babff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-29 06:20:01 +00:00
Chung-Kai (Michael) Mei
ca068bf60b Merge "sepolicy: ignore avc denial" into udc-d1-dev 2023-05-29 05:47:43 +00:00
Chungkai Mei
e97101a6e8 sepolicy: ignore avc denial
ignore avc denial since it's debugfs

Bug: 271931921
Test: device-boot-health-check-extra test show passed https://android-build.googleplex.com/builds/abtd/run/L74000000960917226
Change-Id: I5f491f02c99776251cf3893de6224fb0f02cb320
Signed-off-by: Chungkai Mei <chungkai@google.com>
2023-05-29 03:11:41 +00:00
Donnie Pollitz
732153a23e Merge "Allow vendor_init to fix permissions of TEE data file" into udc-d1-dev am: 9fc92bdb28 am: 363d20bf36 am: 0127c50829
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23413076

Change-Id: Ie4e83b22e68d84afa5f8aab5104a4a91da77868e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 09:50:46 +00:00
Donnie Pollitz
260cf9cc56 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-d1-dev am: 9fc92bdb28 am: 5bf2864bf3 am: 5a45fb8698
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23413076

Change-Id: Ib6f835b90e03032e515046545c5ddc41e2674baa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 09:50:01 +00:00
Donnie Pollitz
0127c50829 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-d1-dev am: 9fc92bdb28 am: 363d20bf36
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23413076

Change-Id: I0fbe770e137ff58ba49fcd7b5852427ee2b5528e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 09:05:17 +00:00
Donnie Pollitz
5a45fb8698 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-d1-dev am: 9fc92bdb28 am: 5bf2864bf3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23413076

Change-Id: Iccf2d6a42718c71b1995123d3e2adee7dd30e50c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 09:02:20 +00:00
Donnie Pollitz
363d20bf36 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-d1-dev am: 9fc92bdb28
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23413076

Change-Id: Ic6dfeafbab9bd207716fc701137ce66746f4b1eb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 07:54:11 +00:00
Donnie Pollitz
5bf2864bf3 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-d1-dev am: 9fc92bdb28
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23413076

Change-Id: I16f8ebe09908fb8f648e903a2f052783f5eb4040
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-26 07:49:59 +00:00
Donnie Pollitz
9fc92bdb28 Merge "Allow vendor_init to fix permissions of TEE data file" into udc-d1-dev 2023-05-26 07:17:41 +00:00
Dinesh Yadav
e6d2f01a89 Add SEPolicy for gxp_metrics_logger.so logging to stats service
In order to access the gxp metrics library from the google camera
app (product partition), we need to create an SELinux exception for
the related shared library (in vendor) it uses.
This CL adds the same_process_hal_file tag to allow this exception.

Bug: 278516358
Change-Id: I42d41243d3ee47ebff4f766cd769b5387fd20852
2023-05-26 04:01:09 +00:00
TreeHugger Robot
c042544073 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-d1-dev am: df113325a5 am: af8727c24e am: 0e3ad3faa4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23078038

Change-Id: I15a2a443e7454d1b23db09fb74b0961e2aa54fca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 07:55:49 +00:00
TreeHugger Robot
030a33fc07 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-d1-dev am: df113325a5 am: 40efb336ad am: 20e76532f1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23078038

Change-Id: I792a37eadc3c5c54ebe6b847bcb878147bfd87a3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 07:55:02 +00:00
TreeHugger Robot
0e3ad3faa4 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-d1-dev am: df113325a5 am: af8727c24e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23078038

Change-Id: Ia254c97161114d155858954ceedeb8144838909d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 07:09:41 +00:00
TreeHugger Robot
20e76532f1 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-d1-dev am: df113325a5 am: 40efb336ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23078038

Change-Id: Id7a6b1154541d0431ae0b3925f9e51adf76ec51e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 07:05:39 +00:00
TreeHugger Robot
af8727c24e Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-d1-dev am: df113325a5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23078038

Change-Id: I6995431b91f4dd93a1311155df686d2ba39f111c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 06:22:31 +00:00
TreeHugger Robot
40efb336ad Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-d1-dev am: df113325a5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23078038

Change-Id: Ia4b73e0c54bf9972682b169ce5e79b42f3ed4596
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-25 06:18:56 +00:00
TreeHugger Robot
df113325a5 Merge "thermal: thermal_metrics: Update selinux to reset stats" into udc-d1-dev 2023-05-25 05:28:46 +00:00
Leo Hsieh
3443d6d373 Merge "Allow hal_fingerprint_default to access sysfs_aoc_udfps" 2023-05-25 00:58:34 +00:00
Donnie Pollitz
16440338de Allow vendor_init to fix permissions of TEE data file
Background:
* vendor_init needs to be able to possibly fix ownership of
  tee_data_file

Bug: 280325952
Test: Changed permissions and confirmed user transitions
Change-Id: I2363f9ff695209bbf7b6661c8e9eb3b376b84ace
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-05-24 16:45:28 +02:00
Jimmy Hu
9f3215a000 Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev am: 86cb19bb2f am: 72f862ed29 am: 1ccbc11db5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23341842

Change-Id: If64b3bea330a7782eeb81891e6e0af626a41e9a7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 09:35:23 +00:00
Jimmy Hu
a6b09ce04e Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev am: 86cb19bb2f am: 9279426af4 am: 41369192ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23341842

Change-Id: Ic4b1dd6c02cffaf4ec285e49e5ba6763c020b531
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 09:34:07 +00:00
Jimmy Hu
1ccbc11db5 Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev am: 86cb19bb2f am: 72f862ed29
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23341842

Change-Id: I71631507e3a3f316b2db3cb5b086870401fe196b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 08:52:08 +00:00
Jimmy Hu
41369192ab Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev am: 86cb19bb2f am: 9279426af4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23341842

Change-Id: Ieba000770bd6c6f9f419cb7dd3a56f24e91e3ed9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 08:49:56 +00:00
Jimmy Hu
72f862ed29 Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev am: 86cb19bb2f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23341842

Change-Id: I77dec3ec400e338a662d51a0f3832e561dbdf1d2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 08:29:49 +00:00
Jimmy Hu
9279426af4 Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev am: 86cb19bb2f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23341842

Change-Id: I6a938dee1103a1b2b445669a5258f7470729248c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 08:25:48 +00:00
Jimmy Hu
86cb19bb2f Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev 2023-05-24 08:14:01 +00:00
Jin Jeong
4c8783ce96 Merge "Revert "[Zuma] Fix SeLinux error"" into udc-d1-dev am: f77e90366d am: 01bc6a6edb am: 4b3bca8f40
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23167570

Change-Id: Ide86f25d726da8bf9b5108e4ceed42b05924c9f1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:13:37 +00:00
Jin Jeong
e19b6070d4 Merge "Revert "[Zuma] Fix SeLinux error"" into udc-d1-dev am: f77e90366d am: b4bac68874 am: 80af45ba72
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23167570

Change-Id: I6ac4bc6fad96365507a13b0d3bae1c3223d26b92
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 03:13:14 +00:00
Jin Jeong
4b3bca8f40 Merge "Revert "[Zuma] Fix SeLinux error"" into udc-d1-dev am: f77e90366d am: 01bc6a6edb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23167570

Change-Id: I7817766c5a9d97d73a88d041c782dd8becfd2a64
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:31:06 +00:00
Jin Jeong
80af45ba72 Merge "Revert "[Zuma] Fix SeLinux error"" into udc-d1-dev am: f77e90366d am: b4bac68874
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23167570

Change-Id: Id62f1ff7fb4f5a2623783711eb8e62064feb1f4c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 02:25:04 +00:00
Jin Jeong
01bc6a6edb Merge "Revert "[Zuma] Fix SeLinux error"" into udc-d1-dev am: f77e90366d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23167570

Change-Id: I5c731d28cba0a6073f8762c76f4b932f0befd80b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:45:51 +00:00
Jin Jeong
b4bac68874 Merge "Revert "[Zuma] Fix SeLinux error"" into udc-d1-dev am: f77e90366d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23167570

Change-Id: I88f2266fdc8cf1f50fb3bcc6391d8b7f55715f62
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 01:42:02 +00:00
Jin Jeong
f77e90366d Merge "Revert "[Zuma] Fix SeLinux error"" into udc-d1-dev 2023-05-24 01:07:12 +00:00
Wilson Sung
e889f684c3 Update SELinux error am: d73217d81f am: 951634d720 am: a9069e0cdd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23364725

Change-Id: I823b18f5b79dba1e7967bf4c17dc8be2e504b524
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-23 11:16:08 +00:00
Wilson Sung
47bf4ca0a7 Update SELinux error am: d73217d81f am: f2042a36ab am: e30a1056fb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23364725

Change-Id: If00e30067a45aaaf2abf1cf4ef5230baf3df8f35
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-23 11:13:54 +00:00
Wilson Sung
a9069e0cdd Update SELinux error am: d73217d81f am: 951634d720
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23364725

Change-Id: I68abd4e279371a06a34c97c2c928c41246540ebc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-23 10:30:29 +00:00
Wilson Sung
e30a1056fb Update SELinux error am: d73217d81f am: f2042a36ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23364725

Change-Id: Iceb3e0805bca71944ab115f29c58ada28d302bf1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-23 10:28:37 +00:00
Wilson Sung
951634d720 Update SELinux error am: d73217d81f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23364725

Change-Id: I0cc36602e12660f4bd186cbc4d98c6183f814ad0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-23 09:48:11 +00:00
Wilson Sung
f2042a36ab Update SELinux error am: d73217d81f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23364725

Change-Id: I022bd1a22194279f776490d8af53452d92f3ce09
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-23 09:44:10 +00:00
Wilson Sung
d73217d81f Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 283725554
Test: scanBugreport
Bug: 283725554
Bug: 283725302
Test: scanAvcDeniedLogRightAfterReboot
Bug: 283725554
Change-Id: Ie482a46311c1dc1153ef04889e82971a09361e49
2023-05-22 15:01:49 +08:00
Kenny Root
b552d02d0c [automerger skipped] Merge "Add GSA logs policy" into udc-d1-dev am: 107d3314a4 am: 751150f9bc -s ours am: 92ec73dc3a -s ours
am skip reason: Merged-In I8842c0bec972c4cfad15ca689f8e4ae7fa99e179 with SHA-1 7be3a71942 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23268925

Change-Id: I680e4d97e76ba6f967ea5f68498efe05e9f39953
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-22 06:35:10 +00:00
Kenny Root
db6226ed8b [automerger skipped] Merge "Add GSA logs policy" into udc-d1-dev am: 107d3314a4 am: b1e5122f5b am: 6dd4b9338b -s ours
am skip reason: Merged-In I8842c0bec972c4cfad15ca689f8e4ae7fa99e179 with SHA-1 076591d107 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23268925

Change-Id: I90400f827f867eb3b399640c59b9e0f10b595a63
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-22 06:34:19 +00:00
Kenny Root
92ec73dc3a [automerger skipped] Merge "Add GSA logs policy" into udc-d1-dev am: 107d3314a4 am: 751150f9bc -s ours
am skip reason: Merged-In I8842c0bec972c4cfad15ca689f8e4ae7fa99e179 with SHA-1 7be3a71942 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23268925

Change-Id: Iae62daf92725e624df0f4e788f19d490407d9ebb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-22 06:10:55 +00:00
Kenny Root
6dd4b9338b Merge "Add GSA logs policy" into udc-d1-dev am: 107d3314a4 am: b1e5122f5b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23268925

Change-Id: If7a772bfecae240d7229810b8fc22f9328578033
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-22 06:08:47 +00:00
Kenny Root
751150f9bc Merge "Add GSA logs policy" into udc-d1-dev am: 107d3314a4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23268925

Change-Id: Ic150e6aa8ca8eefbb0957871c176f5c0904d5d07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-22 05:42:14 +00:00
Kenny Root
b1e5122f5b Merge "Add GSA logs policy" into udc-d1-dev am: 107d3314a4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23268925

Change-Id: Ib9c3b04f95760982a04b3b545115cc13786985ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-22 05:39:41 +00:00
Kenny Root
107d3314a4 Merge "Add GSA logs policy" into udc-d1-dev 2023-05-22 05:14:11 +00:00
Lawrence Huang
78131df600 Merge "Add net_domain for GCA on zuma devices" into udc-d1-dev am: 7bf6643438 am: 9897966578 am: 41132e4495
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23338581

Change-Id: I71327a290563c05e5f1ab14837c70f103bbe0833
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 22:23:22 +00:00
Lawrence Huang
4e5655b819 Merge "Add net_domain for GCA on zuma devices" into udc-d1-dev am: 7bf6643438 am: da39d4174a am: 4a15a8d448
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23338581

Change-Id: Ic45f57e2793919c10eb28d2fbc638cadc95d5ba8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 22:21:49 +00:00
Lawrence Huang
41132e4495 Merge "Add net_domain for GCA on zuma devices" into udc-d1-dev am: 7bf6643438 am: 9897966578
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23338581

Change-Id: I559cabd18cc00c1ac5954b4c48575b5af5cb9460
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 21:37:44 +00:00
Lawrence Huang
4a15a8d448 Merge "Add net_domain for GCA on zuma devices" into udc-d1-dev am: 7bf6643438 am: da39d4174a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23338581

Change-Id: I6e967c863e136ae650860732bf332009a0e9d40b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 21:36:08 +00:00
Lawrence Huang
9897966578 Merge "Add net_domain for GCA on zuma devices" into udc-d1-dev am: 7bf6643438
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23338581

Change-Id: I4fcdf42bc673495deb3747a2ad7c7249787ca9fd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 20:50:04 +00:00
Lawrence Huang
da39d4174a Merge "Add net_domain for GCA on zuma devices" into udc-d1-dev am: 7bf6643438
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23338581

Change-Id: Ia4e68a5f2b74985a1c8e15e43418a81dc22cc798
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 20:48:09 +00:00
Lawrence Huang
7bf6643438 Merge "Add net_domain for GCA on zuma devices" into udc-d1-dev 2023-05-19 19:59:58 +00:00
Jimmy Hu
70e6dd395b Set sepolicy for shell script of disabling contaminant detection
(ported from Ib2e3cf498851c0c9e5e74aacc9bf391549c0ad1a)

Bug: 263916675
Bug: 264231895
Test: setprop vendor.usb.contaminantdisable true
Change-Id: Ia451a6abc4a3c872c002efa323d06e9179bd656b
Signed-off-by: Jimmy Hu <hhhuuu@google.com>
2023-05-19 09:54:23 +00:00
Treehugger Robot
3072c4a1ee Merge "Remove selinux error bug reference after fixing" into udc-d1-dev am: b295326a78 am: fe0408840c am: d4943987ec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23338576

Change-Id: I4345917671730fb66d27329d4bcc6f841b13e0a8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 05:23:33 +00:00
Treehugger Robot
b19db37cdc Merge "Remove selinux error bug reference after fixing" into udc-d1-dev am: b295326a78 am: 45b4e68788 am: d97787af6a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23338576

Change-Id: Ia5d287d7896d86c5b4747ff14f18570e6eca4b8f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 05:22:44 +00:00
Treehugger Robot
d4943987ec Merge "Remove selinux error bug reference after fixing" into udc-d1-dev am: b295326a78 am: fe0408840c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23338576

Change-Id: Icf6df94c61627741b777769dc460dcda78eaa6b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 04:44:48 +00:00
Treehugger Robot
d97787af6a Merge "Remove selinux error bug reference after fixing" into udc-d1-dev am: b295326a78 am: 45b4e68788
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23338576

Change-Id: I515451f0cd19165050226f9f2a5cdf301a04ecba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 04:40:50 +00:00
Prasanna Prapancham
49c0960467 add 8411 to logbuffer am: 9138d3d1de am: e8199c4239 am: 7337bd4da5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23302169

Change-Id: If68b3e42daab98522c80ae115b7c4830c27a3aa0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 04:00:42 +00:00
Prasanna Prapancham
56eea097d7 add 8411 to logbuffer am: 9138d3d1de am: a64fd32572 am: 0ed9e533c3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23302169

Change-Id: I2145136b9a5cd061caaf8e78a20d9721a8a9295a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 03:59:25 +00:00
Treehugger Robot
fe0408840c Merge "Remove selinux error bug reference after fixing" into udc-d1-dev am: b295326a78
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23338576

Change-Id: Ie4b290dcd5f481a9c8f43d49199af4adc4e9fbe7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 03:58:47 +00:00
Treehugger Robot
45b4e68788 Merge "Remove selinux error bug reference after fixing" into udc-d1-dev am: b295326a78
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23338576

Change-Id: I34dba1ef3b40020df96832e93b49ea8eb073e1fe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 03:56:27 +00:00
Prasanna Prapancham
7337bd4da5 add 8411 to logbuffer am: 9138d3d1de am: e8199c4239
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23302169

Change-Id: I81d07155c50892b77705f18af530a54e0824dd49
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 03:18:54 +00:00
Prasanna Prapancham
0ed9e533c3 add 8411 to logbuffer am: 9138d3d1de am: a64fd32572
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23302169

Change-Id: I16c398a087cf11b0c8060c2cfb3d96a5d8ebd370
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 03:16:59 +00:00
Treehugger Robot
b295326a78 Merge "Remove selinux error bug reference after fixing" into udc-d1-dev 2023-05-19 03:07:49 +00:00
Prasanna Prapancham
e8199c4239 add 8411 to logbuffer am: 9138d3d1de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23302169

Change-Id: If8cc54e939bd06c9aec5509962119b5107497734
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 02:31:39 +00:00
Prasanna Prapancham
a64fd32572 add 8411 to logbuffer am: 9138d3d1de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23302169

Change-Id: Ia3eb2c23e55ac4108fe44d285ba603a78f2f3f02
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-19 02:29:29 +00:00
Lawrence Huang
c64c508a51 Add net_domain for GCA on zuma devices
Bug: 277097939

Change-Id: Iadfc1be5f9e6830693aed9d9b619815c7d1f9caf
(cherry picked from commit e979543b99)
2023-05-19 01:53:03 +00:00
Grace Chen
e151f78f5a Remove selinux error bug reference after fixing
Bug: 264483151
Test: None, simple bug removal
Change-Id: Id93085566c772e6b434777955b62b1ccaba64ae2
2023-05-18 17:54:20 -07:00
Prasanna Prapancham
9138d3d1de add 8411 to logbuffer
Test: Flash local build and collect bugreport
Bug: 277799048
Change-Id: I877a91999a2f17df5ea90d3d2257b93bfd67e8e6
Signed-off-by: Prasanna Prapancham <prapancham@google.com>
(cherry picked from commit c1715483d1)
2023-05-17 22:52:57 +00:00
Xu Han
ccce301128 Merge "Add permission for nautilus devices" into udc-d1-dev am: 639d91fb93 am: bd597dc5a2 am: 5334397f8b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23279761

Change-Id: I5a014a6d73240c3945cb4698fbc7f211fa164510
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 19:27:28 +00:00
Xu Han
01b692295a Merge "Add permission for nautilus devices" into udc-d1-dev am: 639d91fb93 am: cb92b8fcdc am: 6c5f7b4982
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23279761

Change-Id: I0e08457034c3abb712d3abf9bd0eb2f75c3a526b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 19:02:42 +00:00
Xu Han
5334397f8b Merge "Add permission for nautilus devices" into udc-d1-dev am: 639d91fb93 am: bd597dc5a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23279761

Change-Id: I3d0da4aaea18f17f9fb678c50023f8ac61318ab3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 18:34:14 +00:00
Xu Han
6c5f7b4982 Merge "Add permission for nautilus devices" into udc-d1-dev am: 639d91fb93 am: cb92b8fcdc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23279761

Change-Id: I0d818942b44db361307b8078a9b4c95dee1d55a8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 18:28:33 +00:00
Kenny Root
7be3a71942 Add GSA logs policy
This adds a label to the sysfs files for GSA logs to allow dumpstate to
read them during a bugreport.

(cherry picked from commit 076591d107)

Bug: 271125313
Test: adb shell dumpstate
Change-Id: I8842c0bec972c4cfad15ca689f8e4ae7fa99e179
Merged-In: I8842c0bec972c4cfad15ca689f8e4ae7fa99e179
2023-05-17 17:36:35 +00:00
Xu Han
bd597dc5a2 Merge "Add permission for nautilus devices" into udc-d1-dev am: 639d91fb93
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23279761

Change-Id: I6cea27586f37856b3e31a181edfcdca6d958394b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 17:24:05 +00:00
Xu Han
cb92b8fcdc Merge "Add permission for nautilus devices" into udc-d1-dev am: 639d91fb93
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23279761

Change-Id: Ib51a391011a30f9c142bc9bd3bb15ea576c88bbb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 17:21:48 +00:00
Xu Han
639d91fb93 Merge "Add permission for nautilus devices" into udc-d1-dev 2023-05-17 16:48:55 +00:00
Luke Chang
5c1a96b260 [automerger skipped] Merge "sepolicy: label cpd cl2 & cl1 target_residency" into udc-d1-dev am: 3d16072afb am: 063595b096 -s ours am: b85699d605 -s ours
am skip reason: Merged-In I127ffc74aa68976de4aaa4a750b4043def4e2759 with SHA-1 73e88c0a83 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23270943

Change-Id: I60e2e2b9053b0fa1c765de0ea2b6bd2e150133e2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 12:50:33 +00:00
Luke Chang
cf711b8ccb [automerger skipped] Merge "sepolicy: label cpd cl2 & cl1 target_residency" into udc-d1-dev am: 3d16072afb am: de2132476f am: 44dd9f7afa -s ours
am skip reason: Merged-In I127ffc74aa68976de4aaa4a750b4043def4e2759 with SHA-1 b7f556c9cb is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23270943

Change-Id: Id03587e66956656c9a2a5c337ea9217fdb93eec1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 12:49:57 +00:00
Luke Chang
b85699d605 [automerger skipped] Merge "sepolicy: label cpd cl2 & cl1 target_residency" into udc-d1-dev am: 3d16072afb am: 063595b096 -s ours
am skip reason: Merged-In I127ffc74aa68976de4aaa4a750b4043def4e2759 with SHA-1 73e88c0a83 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23270943

Change-Id: Ic45336dc8c8abffb36cdef61773a23cfeaba7f2f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 12:07:55 +00:00
Luke Chang
44dd9f7afa Merge "sepolicy: label cpd cl2 & cl1 target_residency" into udc-d1-dev am: 3d16072afb am: de2132476f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23270943

Change-Id: If4ae5813e128ec9eca5988c20f19f59badde7c0c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 11:57:49 +00:00
Luke Chang
063595b096 Merge "sepolicy: label cpd cl2 & cl1 target_residency" into udc-d1-dev am: 3d16072afb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23270943

Change-Id: I6cf00241401db9725b1d285dd27abf5a3befd3b6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 11:04:00 +00:00
Luke Chang
de2132476f Merge "sepolicy: label cpd cl2 & cl1 target_residency" into udc-d1-dev am: 3d16072afb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23270943

Change-Id: I0809900155d08d626e730b338feee23516254ec3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 11:01:10 +00:00
Luke Chang
3d16072afb Merge "sepolicy: label cpd cl2 & cl1 target_residency" into udc-d1-dev 2023-05-17 10:09:06 +00:00
Xu Han
bdc91f6477 Add permission for nautilus devices
Bug: 283015605
Test: Build
Change-Id: I986a2798a4a5ca927a1a2aaea61edca9fa59b2c5
2023-05-17 03:59:43 +00:00
lukechang
73e88c0a83 sepolicy: label cpd cl2 & cl1 target_residency
Test: build and boot to home
Bug: 277390134

Merged-In: I127ffc74aa68976de4aaa4a750b4043def4e2759
Change-Id: I127ffc74aa68976de4aaa4a750b4043def4e2759
Signed-off-by: lukechang <lukechang@google.com>
2023-05-17 02:11:41 +00:00
TreeHugger Robot
3bf618f649 [automerger skipped] Merge "Add chre channel sepolicy entries" into udc-d1-dev am: 3203ccc21a -s ours am: 73a081d4f9 -s ours am: 812e9182be -s ours
am skip reason: Merged-In Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2 with SHA-1 f31c984cda is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22953495

Change-Id: I6bb4ef213ef8b815fdfecd9de944a71474934bd0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 02:07:20 +00:00
Luis Delgado de Mendoza Garcia
d8934c6762 [automerger skipped] Add chre channel sepolicy entries am: a3f0628f68 -s ours am: f653d739b9 -s ours am: 6ab893e07c -s ours
am skip reason: Merged-In Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2 with SHA-1 f31c984cda is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22953495

Change-Id: I57cd66f306cdb7e0dbb99851a5a786e605bb2801
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 02:07:19 +00:00
TreeHugger Robot
98636fec3a [automerger skipped] Merge "Add chre channel sepolicy entries" into udc-d1-dev am: 3203ccc21a am: 455a2dcd69 -s ours am: 5803c89182 -s ours
am skip reason: Merged-In Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2 with SHA-1 f31c984cda is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22953495

Change-Id: I6a9ff0d31848570e2fb0f42b6e2f9a8ee141b7c2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 02:05:37 +00:00
Luke Chang
c371a4da4a Merge "sepolicy: label cpd cl2 & cl1 target_residency" 2023-05-17 02:05:30 +00:00
TreeHugger Robot
812e9182be [automerger skipped] Merge "Add chre channel sepolicy entries" into udc-d1-dev am: 3203ccc21a -s ours am: 73a081d4f9 -s ours
am skip reason: Merged-In Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2 with SHA-1 f31c984cda is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22953495

Change-Id: Ice97dbac132fc93e115a08515c63b9d00029859b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 01:24:58 +00:00
Luis Delgado de Mendoza Garcia
6ab893e07c [automerger skipped] Add chre channel sepolicy entries am: a3f0628f68 -s ours am: f653d739b9 -s ours
am skip reason: Merged-In Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2 with SHA-1 f31c984cda is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22953495

Change-Id: Id326e142a07e5ff5f87e9b2aedec29a794a730ad
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 01:24:56 +00:00
TreeHugger Robot
5803c89182 [automerger skipped] Merge "Add chre channel sepolicy entries" into udc-d1-dev am: 3203ccc21a am: 455a2dcd69 -s ours
am skip reason: Merged-In Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2 with SHA-1 f31c984cda is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22953495

Change-Id: I98998758b61fa726a392a7291ca6e81523a17fb3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-17 01:22:50 +00:00
TreeHugger Robot
73a081d4f9 [automerger skipped] Merge "Add chre channel sepolicy entries" into udc-d1-dev am: 3203ccc21a -s ours
am skip reason: Merged-In Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2 with SHA-1 f31c984cda is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22953495

Change-Id: Idb9591eaa889cd20af58bb6b8eac814c2e00ecfa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-16 23:57:00 +00:00
Luis Delgado de Mendoza Garcia
f653d739b9 [automerger skipped] Add chre channel sepolicy entries am: a3f0628f68 -s ours
am skip reason: Merged-In Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2 with SHA-1 f31c984cda is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22953495

Change-Id: I6ecfbf8ce1f32a972e4bfdace29c1a71755d4e3a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-16 23:56:59 +00:00
TreeHugger Robot
455a2dcd69 Merge "Add chre channel sepolicy entries" into udc-d1-dev am: 3203ccc21a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22953495

Change-Id: Ib2d8972837eb6bbd894d2bc31c529c105375d2f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-16 23:54:49 +00:00
TreeHugger Robot
3203ccc21a Merge "Add chre channel sepolicy entries" into udc-d1-dev 2023-05-16 23:04:18 +00:00
Luis Delgado de Mendoza Garcia
a3f0628f68 Add chre channel sepolicy entries
Bug: 275143652
Fix: 275143652
Test: in-device verification.
Change-Id: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
Merged-In: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
2023-05-16 21:43:09 +00:00
lukechang
b7f556c9cb sepolicy: label cpd cl2 & cl1 target_residency
Test: build and boot to home
Bug: 277390134

Change-Id: I127ffc74aa68976de4aaa4a750b4043def4e2759
Signed-off-by: lukechang <lukechang@google.com>
2023-05-16 09:11:25 +00:00
Treehugger Robot
d225fd100e Merge "uwb: add permissions for factory uwb calib file" into udc-d1-dev am: 05abdf9f26 am: f2adc20b6d am: 5fc40842ce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980180

Change-Id: I3d68610c621737407b71c3cda094aa936dcb4351
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 18:44:24 +00:00
Treehugger Robot
8768ad1049 Merge "uwb: add permissions for factory uwb calib file" into udc-d1-dev am: 05abdf9f26 am: e1766dcd82 am: a521555ae0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980180

Change-Id: Ice663723abb01c161ba1f3431d92e12fbf20711a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 18:43:50 +00:00
Treehugger Robot
5fc40842ce Merge "uwb: add permissions for factory uwb calib file" into udc-d1-dev am: 05abdf9f26 am: f2adc20b6d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980180

Change-Id: I31e9390d4873715a12e503cb0759066433bfb109
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 18:00:45 +00:00
Treehugger Robot
a521555ae0 Merge "uwb: add permissions for factory uwb calib file" into udc-d1-dev am: 05abdf9f26 am: e1766dcd82
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980180

Change-Id: I9ddf2be0e89f66a08ef9b559f30706369df180cf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 17:57:47 +00:00
Treehugger Robot
f2adc20b6d Merge "uwb: add permissions for factory uwb calib file" into udc-d1-dev am: 05abdf9f26
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980180

Change-Id: Ie69f2adaf56ad5afe8e158df60cd064121e55d6a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 17:35:24 +00:00
Treehugger Robot
e1766dcd82 Merge "uwb: add permissions for factory uwb calib file" into udc-d1-dev am: 05abdf9f26
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980180

Change-Id: I8383f4ed2858abd05dceeef3fc7d7720e42a3031
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-15 17:33:21 +00:00
Treehugger Robot
05abdf9f26 Merge "uwb: add permissions for factory uwb calib file" into udc-d1-dev 2023-05-15 16:54:11 +00:00
Adam Shih
1efa9ed8b0 Merge "introduce a new sepolicy owner" 2023-05-15 02:07:02 +00:00
Jin Jeong
b3c701b9c4 Revert "[Zuma] Fix SeLinux error"
This reverts commit 709ad06c0e.

Reason for revert: b/279988311 we rename the vendor.modem property so we don't need to add the new rules

Change-Id: Ibe56941737506158ef963bba2ae00035c5c11069
2023-05-12 04:20:27 +00:00
Adam Shih
062f6c0a85 introduce a new sepolicy owner
Bug: 281631102
Test: N/A
Change-Id: I2885d990aefafacc00b12bac9c529c40e007585c
2023-05-12 02:27:18 +00:00
Wilson Sung
f983f9dd7e Remove fixed SELinux bug from bug_map am: 2e511cf418 am: 6be3026f0f am: 670f7f3fdc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23156963

Change-Id: Id002a3992f6d14b04201d3d2c5669eebf96b01e8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 20:02:46 +00:00
Wilson Sung
d8d8d5775e Remove fixed SELinux bug from bug_map am: 2e511cf418 am: f4258fafc6 am: ae683a9ba3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23156963

Change-Id: I6dbb1d372e0d5003f11c6475a912b5adabad0e9f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 20:01:15 +00:00
Luis Delgado de Mendoza Garcia
cdd88f31bf [automerger skipped] Add chre channel sepolicy entries am: f31c984cda am: 7dea662e4f -s ours
am skip reason: Merged-In Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2 with SHA-1 2a06b44cdc is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22954838

Change-Id: If8c970d6808636e417bc97a55e6a1ffcb42073b8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 19:59:02 +00:00
Wilson Sung
670f7f3fdc Remove fixed SELinux bug from bug_map am: 2e511cf418 am: 6be3026f0f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23156963

Change-Id: I0dfe1c04a96c9ef15627fb3cfae60112d4de1dc0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 19:10:49 +00:00
Wilson Sung
ae683a9ba3 Remove fixed SELinux bug from bug_map am: 2e511cf418 am: f4258fafc6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23156963

Change-Id: Ic90fbbb2ac7ab6b4f3a784848929b7c2cd84e64f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 18:47:14 +00:00
Luis Delgado de Mendoza Garcia
7dea662e4f Add chre channel sepolicy entries am: f31c984cda
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22954838

Change-Id: I52117acc2c9650437bd76f1ad938ba011989dbcd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 18:46:21 +00:00
Wilson Sung
f4258fafc6 Remove fixed SELinux bug from bug_map am: 2e511cf418
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23156963

Change-Id: I6b4d4a3b21cbf31fd0a4cc43c8a29943a72856e5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 18:41:30 +00:00
Wilson Sung
6be3026f0f Remove fixed SELinux bug from bug_map am: 2e511cf418
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23156963

Change-Id: I0d9db68056fd36b51302cf4906370e6d951ad573
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 18:39:11 +00:00
Luis Delgado de Mendoza Garcia
f31c984cda Add chre channel sepolicy entries
Bug: 241960170
Test: in-device verification.
Change-Id: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
Merged-In: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
2023-05-11 13:08:29 +00:00
Wilson Sung
334ab73f05 Update SELinux error am: 17a784cf97 am: 33104c2431 am: 682c60aeb2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23125888

Change-Id: Id0c563b0a28d917aded3260f8e33928328df4d9a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 08:12:58 +00:00
Wilson Sung
5f078d8913 Update SELinux error am: 17a784cf97 am: 806dfc977c am: ec7504042a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23125888

Change-Id: I49f6b24269620c95e4479a51fb5c39e7e584a363
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 07:58:19 +00:00
Wilson Sung
2e511cf418 Remove fixed SELinux bug from bug_map
Fix: 280706292
Bug: 280522410
Change-Id: I5b35759d2b89246e65683fbbc3ca877af04ef25b
2023-05-11 14:10:41 +08:00
Wilson Sung
682c60aeb2 Update SELinux error am: 17a784cf97 am: 33104c2431
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23125888

Change-Id: I10c33da1edd3a17f0e5302b5ac1e695b869b632f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 05:37:51 +00:00
Wilson Sung
ec7504042a Update SELinux error am: 17a784cf97 am: 806dfc977c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23125888

Change-Id: Ia4a0baa07f36cd034e2e183333e65cecc2c4058d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 05:34:57 +00:00
Wilson Sung
33104c2431 Update SELinux error am: 17a784cf97
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23125888

Change-Id: If4b5dbaeb803ae1f2c3f812ede89ad228a431b13
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 04:53:03 +00:00
Wilson Sung
806dfc977c Update SELinux error am: 17a784cf97
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23125888

Change-Id: I9c64aee39c85fc94bc05413970bd6367dc1e8684
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-11 04:48:55 +00:00
Wilson Sung
17a784cf97 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 281815594
Test: scanBugreport
Bug: 281815594
Bug: 281815537
Test: scanAvcDeniedLogRightAfterReboot
Bug: 281815594
Fix: 281645191
Change-Id: Ia1e72cdee3ca535eb978ad8becad94c9c4d8c2cd
2023-05-11 04:06:31 +00:00
Luis Delgado de Mendoza Garcia
2a06b44cdc Add chre channel sepolicy entries
Bug: 241960170
Test: in-device verification.
Change-Id: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
2023-05-10 17:35:01 +00:00
leohsieh
b7db7f8eae Allow hal_fingerprint_default to access sysfs_aoc_udfps
Fix the following avc denial:
avc: denied { search } for name="17000000.aoc" dev="sysfs" ino=22035 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc:s0 tclass=dir permissive=0
avc: denied { write } for name="udfps_set_clock_source" dev="sysfs" ino=106891 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc_udfps:s0 tclass=file permissive=0
avc: denied { read } for name="udfps_get_disp_freq" dev="sysfs" ino=106893 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc_udfps:s0 tclass=file permissive=0

Bug: 267271482
Test: Verify fingerprint HAL process can read/write to the sysfs node.
Change-Id: I39a2e69b1c314d52944bb16ada61e7e6761561cf
2023-05-10 14:50:56 +08:00
Zixuan Lan
d5119aa18f remove fixed selinux bug from bug map. am: 288623d4d4 am: 9d30bd990e am: e3d6e64d16
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23040174

Change-Id: I1b5b5485564c3817d53fc8769623a055f4dd0d08
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-10 03:01:44 +00:00
Zixuan Lan
82df0b05d1 remove fixed selinux bug from bug map. am: 288623d4d4 am: c7bf80dd24 am: 0559af9ad1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23040174

Change-Id: I7de6a69605beebb044bb11533b7efc71fef47803
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-10 03:01:36 +00:00
Zixuan Lan
e3d6e64d16 remove fixed selinux bug from bug map. am: 288623d4d4 am: 9d30bd990e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23040174

Change-Id: I3890e72bd2eef91679e59a38cfa6d8063107916e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-10 02:17:08 +00:00
Zixuan Lan
0559af9ad1 remove fixed selinux bug from bug map. am: 288623d4d4 am: c7bf80dd24
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23040174

Change-Id: I07c024f4300f6a242e0cafe955d643c3374bc53d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-10 02:14:20 +00:00
Zixuan Lan
9d30bd990e remove fixed selinux bug from bug map. am: 288623d4d4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23040174

Change-Id: I74266f9c72cba0b62382fc49b2ab9c9cb01e35a5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-10 01:30:53 +00:00
Zixuan Lan
c7bf80dd24 remove fixed selinux bug from bug map. am: 288623d4d4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23040174

Change-Id: I420a0e14dec2b62a81bd860950599f2e4bc08310
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-10 01:28:43 +00:00
Zixuan Lan
288623d4d4 remove fixed selinux bug from bug map.
TPU permission was fixed to avoid error in hal_camera_defaul.The corresponding bug for tracking should be removed from the bug map. Please see bug for more details.
Bug: 275001641
Test: logcat grep for selinux error

Change-Id: I3622a1877f94b41d03d1bcb1c16a404db4b3ea8d
2023-05-09 16:38:38 -07:00
Zheng Pan
e317e139bd Merge "Allow systemui to find adbd" into udc-d1-dev am: 705cc4abf8 am: 62ceeb7896 am: 501afe43c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23104216

Change-Id: I4bd80ceb328e42af63384138bc6724fe4a455817
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 23:03:49 +00:00
Zheng Pan
9ca108ac70 Merge "Allow systemui to find adbd" into udc-d1-dev am: 705cc4abf8 am: a98b8a881f am: 5dcb7abfa7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23104216

Change-Id: I6c1a04b234ac35b8723adae4fa697af8374206b2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 23:03:04 +00:00
Zheng Pan
501afe43c0 Merge "Allow systemui to find adbd" into udc-d1-dev am: 705cc4abf8 am: 62ceeb7896
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23104216

Change-Id: Icfbba75868dd10f09aa811f64c117761b39904c8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 22:29:55 +00:00
Zheng Pan
5dcb7abfa7 Merge "Allow systemui to find adbd" into udc-d1-dev am: 705cc4abf8 am: a98b8a881f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23104216

Change-Id: I2bc341d01dfced4d7c5c3c53ec1764bb305e38dd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 21:56:42 +00:00
Zheng Pan
62ceeb7896 Merge "Allow systemui to find adbd" into udc-d1-dev am: 705cc4abf8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23104216

Change-Id: I9b18f91f520d0537ed5a0aa73369bfb52eb2ac77
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 21:16:01 +00:00
Zheng Pan
a98b8a881f Merge "Allow systemui to find adbd" into udc-d1-dev am: 705cc4abf8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23104216

Change-Id: I0f37291b0dd6ca03020fff173603fcea1cb517a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 21:12:20 +00:00
Zheng Pan
705cc4abf8 Merge "Allow systemui to find adbd" into udc-d1-dev 2023-05-09 20:21:14 +00:00
Wilson Sung
c997682743 Merge "Update SELinux error" into udc-d1-dev am: e797557f08 am: 24dcac2665 am: 317fc7a431
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23015883

Change-Id: I996a56c25132eef594a8d4e620e2b7d2fd38a56a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 14:10:48 +00:00
Mahesh Kallelil
102a44272d Allow dump_modem to read logbuffer and wakeup events am: 1f885d0bcd am: e761ce1954 am: e6b59eccbd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22834646

Change-Id: I7b398d14de6182088f3914d740278094a7ce4f11
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 12:50:11 +00:00
Wilson Sung
0d48d895d0 Merge "Update SELinux error" into udc-d1-dev am: e797557f08 am: f4499ed385 am: 45ca50b7ef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23015883

Change-Id: I702d65ae52493262edb138077135cc10d2db5678
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 12:49:32 +00:00
Mahesh Kallelil
8e513c2155 Allow dump_modem to read logbuffer and wakeup events am: 1f885d0bcd am: 56184ab96e am: af236c3219
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22834646

Change-Id: I38d6bd8125af59ec6373d699e58d6a2461eedc5e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 12:42:59 +00:00
Treehugger Robot
02a2518daa Merge "Update SELinux error" into udc-d1-dev am: 254911d666 am: 5dbbb257fb am: b1c5395580
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23100096

Change-Id: Ic592f74443d1bc301cc641af3f640cbafa3a4367
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 12:42:49 +00:00
Wilson Sung
317fc7a431 Merge "Update SELinux error" into udc-d1-dev am: e797557f08 am: 24dcac2665
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23015883

Change-Id: If697af11c825c5db4c71a0533dc2518a677a5c8a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 11:12:34 +00:00
Mahesh Kallelil
e6b59eccbd Allow dump_modem to read logbuffer and wakeup events am: 1f885d0bcd am: e761ce1954
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22834646

Change-Id: I37a8d9f819f52d0bb902528a21a9323f2219785b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 11:12:14 +00:00
Luke Chang
be097e2d1f [automerger skipped] Merge "sepolicy: label cpd cl2 & cl1" into udc-d1-dev am: f86a07903b am: 590c58bc44 -s ours am: 0b82087f38 -s ours
am skip reason: Merged-In Iad525a9c556ee436afb8cbd29156b6b593329e83 with SHA-1 9d44de7ecf is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980665

Change-Id: Ia0cb0d11b57d8f21b3f2895f5db4a47cdc36f583
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 11:09:47 +00:00
Treehugger Robot
febc01991d Merge "Update SELinux error" into udc-d1-dev am: 254911d666 am: a23adf7f91 am: 6a2772ccbb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23100096

Change-Id: Ieeb5b5d1eda0b664ccf3848c2fc5e6ab6a576d3c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 10:53:58 +00:00
Wilson Sung
45ca50b7ef Merge "Update SELinux error" into udc-d1-dev am: e797557f08 am: f4499ed385
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23015883

Change-Id: Ief8aedafd856fa67c93189e80c536723a6b8a4d3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 10:46:46 +00:00
Mahesh Kallelil
af236c3219 Allow dump_modem to read logbuffer and wakeup events am: 1f885d0bcd am: 56184ab96e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22834646

Change-Id: Ie63f838555e7f05f553235da83e8a865efcd6de6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 10:46:25 +00:00
Luke Chang
c41a5d78e3 [automerger skipped] Merge "sepolicy: label cpd cl2 & cl1" into udc-d1-dev am: f86a07903b am: 43e7df4ae7 am: 62acff57a3 -s ours
am skip reason: Merged-In Iad525a9c556ee436afb8cbd29156b6b593329e83 with SHA-1 35f3c85c09 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980665

Change-Id: I53951bff0eab3967c606e9736c430922d54b3843
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 10:29:29 +00:00
Wilson Sung
f4499ed385 Merge "Update SELinux error" into udc-d1-dev am: e797557f08
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23015883

Change-Id: I8ff067a88f7754d007f26c0a273c2a91edbf0bf1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 10:29:22 +00:00
Mahesh Kallelil
56184ab96e Allow dump_modem to read logbuffer and wakeup events am: 1f885d0bcd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22834646

Change-Id: I2c96c9fce37659d5cd4ed5258bdb647c7b7b8981
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 10:28:59 +00:00
Wilson Sung
24dcac2665 Merge "Update SELinux error" into udc-d1-dev am: e797557f08
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23015883

Change-Id: Icb32af4694c3e430ae6b14dad5e296ff64553ee2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 10:27:05 +00:00
Mahesh Kallelil
e761ce1954 Allow dump_modem to read logbuffer and wakeup events am: 1f885d0bcd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22834646

Change-Id: Ifbed4af2a24798a5a96b4d9caddef51909b94e46
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 10:26:51 +00:00
Treehugger Robot
b1c5395580 Merge "Update SELinux error" into udc-d1-dev am: 254911d666 am: 5dbbb257fb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23100096

Change-Id: Ic212b2d6b0313777d63a42aadcef34a22f6cade0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 10:26:27 +00:00
Wilson Sung
e797557f08 Merge "Update SELinux error" into udc-d1-dev 2023-05-09 10:06:38 +00:00
Luke Chang
0b82087f38 [automerger skipped] Merge "sepolicy: label cpd cl2 & cl1" into udc-d1-dev am: f86a07903b am: 590c58bc44 -s ours
am skip reason: Merged-In Iad525a9c556ee436afb8cbd29156b6b593329e83 with SHA-1 9d44de7ecf is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980665

Change-Id: If34b098e76061823610134da947a921e5da746a9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 10:04:37 +00:00
Treehugger Robot
6a2772ccbb Merge "Update SELinux error" into udc-d1-dev am: 254911d666 am: a23adf7f91
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23100096

Change-Id: I9da027f7fbbe95770ff12426ba2117ab7ff3bf1a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 09:30:14 +00:00
Luke Chang
62acff57a3 Merge "sepolicy: label cpd cl2 & cl1" into udc-d1-dev am: f86a07903b am: 43e7df4ae7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980665

Change-Id: I59fb777b8ad2f3ec932afad979d656ed60c7bbaa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 09:29:06 +00:00
Treehugger Robot
5dbbb257fb Merge "Update SELinux error" into udc-d1-dev am: 254911d666
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23100096

Change-Id: I6ef7907e508e29b621c24b3b061edd1e019e453a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 08:59:18 +00:00
Luke Chang
590c58bc44 Merge "sepolicy: label cpd cl2 & cl1" into udc-d1-dev am: f86a07903b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980665

Change-Id: Ia1c127dc965d6b8997a0b265bdc46c298d40ccfd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 08:55:59 +00:00
Treehugger Robot
a23adf7f91 Merge "Update SELinux error" into udc-d1-dev am: 254911d666
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23100096

Change-Id: Ib60cf6b2f6472ebf514f70c3e2b8b1ee8653db64
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 08:28:47 +00:00
Luke Chang
43e7df4ae7 Merge "sepolicy: label cpd cl2 & cl1" into udc-d1-dev am: f86a07903b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22980665

Change-Id: I345486020372ee78c3309e7521564c285891da24
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 08:25:08 +00:00
Mahesh Kallelil
1f885d0bcd Allow dump_modem to read logbuffer and wakeup events
Updating sepolicy for dump_modem to read /dev/logbuffer_cpif. This is
required as part of bugreport.

Test: Tested bugreport on P23
Bug: 278501642
Change-Id: I102583e37ec2e3852fd901a75bbb06de9ac6f77c
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2023-05-09 00:20:07 -07:00
Jin Jeong
48e309e0b3 Merge "[Zuma] Fix SeLinux error" into udc-d1-dev am: e22788ae78 am: 62a999aff6 am: 7fc312e435
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22984822

Change-Id: I0fefc926217d9cdcbbb250bc0244306998386f24
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 07:19:03 +00:00
Treehugger Robot
254911d666 Merge "Update SELinux error" into udc-d1-dev 2023-05-09 07:15:25 +00:00
Luke Chang
f86a07903b Merge "sepolicy: label cpd cl2 & cl1" into udc-d1-dev 2023-05-09 06:09:33 +00:00
Wilson Sung
fd60d077ad Allow systemui to find adbd
Bug: 276415118
Fix: 272628396
Test: connect to adb with no avc error
Change-Id: I07496d663628f62ed975785d794854d1cdc77040
2023-05-09 05:22:16 +00:00
Luke Chang
ab998b462c Merge "sepolicy: label cpd cl2 & cl1" 2023-05-09 04:54:33 +00:00
Jin Jeong
7fc312e435 Merge "[Zuma] Fix SeLinux error" into udc-d1-dev am: e22788ae78 am: 62a999aff6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22984822

Change-Id: I14094b208ea594cf7771bf3a59ccb0f4ae7f7c10
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 02:37:33 +00:00
Jin Jeong
f4389a4333 Merge "[Zuma] Fix SeLinux error" into udc-d1-dev am: e22788ae78 am: 53cfab53be am: 077bfe327c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22984822

Change-Id: I1cdf145a6810a3754b7cbd3e2b44471366db1ebd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 02:23:13 +00:00
Wilson Sung
6ee8a855f9 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 280706211
Test: scanBugreport
Bug: 280706211
Bug: 280705998
Test: scanAvcDeniedLogRightAfterReboot
Bug: 280706211
Change-Id: I84d50fc4e4f05d0228bc3713cf1b216bf12a72cd
2023-05-09 10:07:46 +08:00
Jin Jeong
077bfe327c Merge "[Zuma] Fix SeLinux error" into udc-d1-dev am: e22788ae78 am: 53cfab53be
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22984822

Change-Id: I20d4b660fd5deec8bac58d00a0ef1fc24af6f53e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 01:05:55 +00:00
Hasan Awais
14b2c135bb uwb: add permissions for factory uwb calib file
needed for copying the factory calib file from persist to
/data/vendor/uwb, along with converting the file to a valid format
for uwb HAL

Bug: 274513871
Bug: 279820265
Test: local build passed
Change-Id: I4c4286cd5c200475cac3b9d58a81724d631c49e0
Signed-off-by: Hasan Awais <hasanawais@google.com>
2023-05-09 00:27:47 +00:00
Jin Jeong
62a999aff6 Merge "[Zuma] Fix SeLinux error" into udc-d1-dev am: e22788ae78
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22984822

Change-Id: I61a44b6ddbc189fd34e5146c2fb16af13e83d8db
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 00:18:53 +00:00
Jin Jeong
53cfab53be Merge "[Zuma] Fix SeLinux error" into udc-d1-dev am: e22788ae78
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22984822

Change-Id: I2ab1f4d0c0f18746c09ef7ce75535eacc96de1ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-09 00:16:00 +00:00
Jin Jeong
e22788ae78 Merge "[Zuma] Fix SeLinux error" into udc-d1-dev 2023-05-08 23:37:28 +00:00
Martin Liu
e4e930185a Add sepolicies for gcma_camera heaps
Bug: 275481134
Test: launch camera
Change-Id: I2efe897826d3c32bb85c815207865c0db557ea9f
Signed-off-by: Martin Liu <liumartin@google.com>
2023-05-08 23:54:55 +08:00
lukechang
35f3c85c09 sepolicy: label cpd cl2 & cl1
Test: build and boot to home
Bug: 277390134

Change-Id: Iad525a9c556ee436afb8cbd29156b6b593329e83
Signed-off-by: lukechang <lukechang@google.com>
2023-05-08 08:49:45 +00:00
lukechang
9d44de7ecf sepolicy: label cpd cl2 & cl1
Test: build and boot to home
Bug: 277390134

Merged-In: Iad525a9c556ee436afb8cbd29156b6b593329e83
Change-Id: Iad525a9c556ee436afb8cbd29156b6b593329e83
Signed-off-by: lukechang <lukechang@google.com>
2023-05-08 08:39:21 +00:00
sashwinbalaji
771b533133 thermal: thermal_metrics: Update selinux to reset stats
Bug: 193833982
Test: Local build and verify statsD logs
adb shell cmd stats print-logs && adb logcat -b all | grep -i 105045
Change-Id: I09afbea9386724f0abf6b9cab5838e89a060a5fd
2023-05-08 05:15:39 +00:00
TreeHugger Robot
8dd5670012 Merge "Add tele sensor sepolicy permission" into udc-d1-dev am: b417627fb8 am: 6b0dd58200 am: aa2b28601a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020018

Change-Id: I8668884aff86fe0b87c7e53349cba9a9e1b27f30
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-08 04:02:04 +00:00
TreeHugger Robot
99c3feb294 Merge "Add tele sensor sepolicy permission" into udc-d1-dev am: b417627fb8 am: 899d3062b6 am: ebb31ef6bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020018

Change-Id: I2c9c384487f02bf9d8a12db6121982a611a903f1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-08 04:00:55 +00:00
TreeHugger Robot
aa2b28601a Merge "Add tele sensor sepolicy permission" into udc-d1-dev am: b417627fb8 am: 6b0dd58200
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020018

Change-Id: Ic1c29f98787000eea36561f871a4069bc6013a6d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-08 03:19:25 +00:00
TreeHugger Robot
ebb31ef6bb Merge "Add tele sensor sepolicy permission" into udc-d1-dev am: b417627fb8 am: 899d3062b6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020018

Change-Id: I5686d799847f3c5968b14ff017ff10faaf22ef1e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-08 03:14:05 +00:00
TreeHugger Robot
6b0dd58200 Merge "Add tele sensor sepolicy permission" into udc-d1-dev am: b417627fb8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020018

Change-Id: I0d003c1421b2744d6064a62031abcc3889fab7b4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-08 02:36:17 +00:00
TreeHugger Robot
899d3062b6 Merge "Add tele sensor sepolicy permission" into udc-d1-dev am: b417627fb8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020018

Change-Id: I2b27f715f84d664965ce7dfef14d59cee4788b22
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-08 02:32:21 +00:00
TreeHugger Robot
b417627fb8 Merge "Add tele sensor sepolicy permission" into udc-d1-dev 2023-05-08 02:00:59 +00:00
Treehugger Robot
d294d6e5b0 Merge "Add sepolicy permission of new camera components" into udc-d1-dev am: 74e0e5fc37 am: 0c91639fd5 am: d305e261fb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982823

Change-Id: I777157a9280ca8262f35d37bd7794a4dc84e53b2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 07:58:01 +00:00
Ted Wang
6d13276776 Merge "Add sepolicy for aidl bt extension hal" into udc-d1-dev am: be9ee4c01d am: 08f24f30a6 am: cf944428b8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22344152

Change-Id: I57c9831d68438e70d91377ca335ba2ecae75d40f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 07:36:37 +00:00
Treehugger Robot
ab47a1ae3b Merge "Add sepolicy permission of new camera components" into udc-d1-dev am: 74e0e5fc37 am: ad2c33b44a am: 76ab0fefef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982823

Change-Id: Ia805db6bdaa4a25a8606473eb668ab9bcf029590
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 07:36:25 +00:00
Ted Wang
0a096b1aef Merge "Add sepolicy for aidl bt extension hal" into udc-d1-dev am: be9ee4c01d am: b1473d353f am: 15b8415e2b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22344152

Change-Id: I072ce6c114d1c4cb0ba0604a8faf2284c64b19ad
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 07:35:23 +00:00
TreeHugger Robot
d1fc4d5cad Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev am: 1db3ac365d am: 5000b9ffc9 am: 255fe1a87f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22589719

Change-Id: Ibb98318a4adc347d68652ea291d7ff67829ec212
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 07:35:05 +00:00
TreeHugger Robot
27d8b200d6 Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev am: 1db3ac365d am: 55ecf93b7d am: 5b6de1f086
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22589719

Change-Id: I70e686a83c79305cd21fe972748c72056e64c433
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 07:34:49 +00:00
Treehugger Robot
d305e261fb Merge "Add sepolicy permission of new camera components" into udc-d1-dev am: 74e0e5fc37 am: 0c91639fd5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982823

Change-Id: Icfb0bb463e969fef02d1778e221264cd5bb8bdd7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 07:09:02 +00:00
Ted Wang
cf944428b8 Merge "Add sepolicy for aidl bt extension hal" into udc-d1-dev am: be9ee4c01d am: 08f24f30a6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22344152

Change-Id: Ie557fc668df0ee100ca360400411608e245ee69e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 07:08:09 +00:00
Treehugger Robot
76ab0fefef Merge "Add sepolicy permission of new camera components" into udc-d1-dev am: 74e0e5fc37 am: ad2c33b44a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982823

Change-Id: Id90dea66dcd553edc0c05f5e3a698fc5e15fb243
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:54:10 +00:00
Ted Wang
15b8415e2b Merge "Add sepolicy for aidl bt extension hal" into udc-d1-dev am: be9ee4c01d am: b1473d353f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22344152

Change-Id: Iba691955123a22ecf7db8baa790b20541e89bd37
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:53:31 +00:00
TreeHugger Robot
255fe1a87f Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev am: 1db3ac365d am: 5000b9ffc9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22589719

Change-Id: I381454f3ef03a44685ca2d8b17e4b0fdd5cdbd6b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:52:15 +00:00
Treehugger Robot
0c91639fd5 Merge "Add sepolicy permission of new camera components" into udc-d1-dev am: 74e0e5fc37
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982823

Change-Id: Ic57a119ec1d8bd364567cb99ff603a703b1b6767
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:47:47 +00:00
Ted Wang
08f24f30a6 Merge "Add sepolicy for aidl bt extension hal" into udc-d1-dev am: be9ee4c01d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22344152

Change-Id: Ib6a3152e7cdaa68a880fe0e94c7a5ea633db24e1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:47:14 +00:00
TreeHugger Robot
5b6de1f086 Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev am: 1db3ac365d am: 55ecf93b7d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22589719

Change-Id: I4b90e024958ac7499abedcffdaec0c8136fd9fca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:46:52 +00:00
Treehugger Robot
ad2c33b44a Merge "Add sepolicy permission of new camera components" into udc-d1-dev am: 74e0e5fc37
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982823

Change-Id: I4d3d646c03432e7f75545fc64f717141d04fdefa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:31:22 +00:00
Ted Wang
b1473d353f Merge "Add sepolicy for aidl bt extension hal" into udc-d1-dev am: be9ee4c01d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22344152

Change-Id: I6904e8eb3197a52e2ea3cf0c6bbbed5676abe7cf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:30:32 +00:00
Treehugger Robot
74e0e5fc37 Merge "Add sepolicy permission of new camera components" into udc-d1-dev 2023-05-05 06:27:43 +00:00
Ted Wang
be9ee4c01d Merge "Add sepolicy for aidl bt extension hal" into udc-d1-dev 2023-05-05 06:19:10 +00:00
TreeHugger Robot
5000b9ffc9 Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev am: 1db3ac365d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22589719

Change-Id: Idcdfb170127ff401e98b3ddad03f7a36ecf16f73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:09:39 +00:00
TreeHugger Robot
55ecf93b7d Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev am: 1db3ac365d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22589719

Change-Id: I9c31d1f117be3993b6114a7b636095a9229050b0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 06:05:33 +00:00
TreeHugger Robot
1db3ac365d Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev 2023-05-05 05:35:55 +00:00
George Chang
e1cbf46acb Allow systemui_app to access Nfc service am: 178e94cb81 am: f1878d0214 am: a2ee31e9ac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020017

Change-Id: I651e56aa43c0785bf0ef92385d5c21be1005be0b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 02:43:55 +00:00
George Chang
e5b9b50686 Allow systemui_app to access Nfc service am: 178e94cb81 am: 74937b19bb am: 2613956e78
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020017

Change-Id: Iaf5cd6da5e75a67a9d01eb700438d3336ade7528
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 02:32:33 +00:00
George Chang
a2ee31e9ac Allow systemui_app to access Nfc service am: 178e94cb81 am: f1878d0214
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020017

Change-Id: Ic40e606dd9ec4d91e7cbcac38330c664b912b865
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 01:37:33 +00:00
George Chang
2613956e78 Allow systemui_app to access Nfc service am: 178e94cb81 am: 74937b19bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020017

Change-Id: I7e082ed9794b6a27439822214701a8bdf27d9088
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 01:28:08 +00:00
George Chang
f1878d0214 Allow systemui_app to access Nfc service am: 178e94cb81
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020017

Change-Id: Ic8ab756c17663c0b1aae72d85908f4bc80e4980d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 00:26:01 +00:00
George Chang
74937b19bb Allow systemui_app to access Nfc service am: 178e94cb81
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23020017

Change-Id: Ia2a718ce595dbb51c0a4b7fac05a8f5053547b8a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 00:18:59 +00:00
Manali Bhutiyani
cf161d6ce3 [display-stats] enable pixelstats access to display metrics on Zuma devices.
Bug: 259554507
Test: Build and boot on device
adb shell cmd stats print-stats | grep -i <atom-id>

Change-Id: Ifc47211063b98f727b3b0eb7f7ebd42e3c7bb99b
2023-05-04 20:56:24 +00:00
George Chang
178e94cb81 Allow systemui_app to access Nfc service
avc:  denied  { find } for pid=1867 uid=10249 name=nfc
scontext=u:r:systemui_app:s0:c249,c256,c512,c768
tcontext=u:object_r:nfc_service:s0 tclass=service_manager
permissive=0

Bug: 280531969
Test: manually check nfc signal after battery share on
Change-Id: I7c9092388d031e8714b8f3f4738db77776c66326
2023-05-04 09:52:14 +00:00
Kamal Shafi
e1464f8e53 Add tele sensor sepolicy permission
Bug: 280370254
Test: build pass
Change-Id: If76c157e272f40159bcd6aac08d4b3bc88991338
2023-05-04 09:18:55 +00:00
horngchuang
5e6e5b568b Add sepolicy permission of new camera components
Bug: 279885244
Bug: 280392819
Test: Build and test for sensor denials
Change-Id: Ib29b0287bc52f9c0fe6e3c18c272e6593507371b
2023-05-04 07:38:46 +00:00
Wilson Sung
e7a70d62b5 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 280706211
Bug: 280706292
Test: scanBugreport
Bug: 280706211
Bug: 280706610
Bug: 280705998
Test: scanAvcDeniedLogRightAfterReboot
Bug: 280706211
Change-Id: I67e0d2ec15b3ea057688644ba5c41c8fb5755128
2023-05-04 12:40:51 +08:00
Treehugger Robot
d72c289e0b Merge "Allow accessing dumpstate from hal_usb_impl" into udc-d1-dev am: b3c7fb06fa am: ac8c60c304 am: 7ad3d47236
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982957

Change-Id: I6f6c26fb61713553399179e964f049deeae2f1ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 18:01:03 +00:00
Treehugger Robot
4bf45f603f Merge "Allow accessing dumpstate from hal_usb_impl" into udc-d1-dev am: b3c7fb06fa am: fdb7364a3f am: 1264a719b2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982957

Change-Id: If0c30a3137e97a09df0b7cd9b8d64a4d8de6ceff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 18:00:22 +00:00
Treehugger Robot
7ad3d47236 Merge "Allow accessing dumpstate from hal_usb_impl" into udc-d1-dev am: b3c7fb06fa am: ac8c60c304
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982957

Change-Id: I6623db6db04055956236a97226b37f8c60048699
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 17:42:47 +00:00
Treehugger Robot
1264a719b2 Merge "Allow accessing dumpstate from hal_usb_impl" into udc-d1-dev am: b3c7fb06fa am: fdb7364a3f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982957

Change-Id: I4dda0a4a6255a32712d1a887f4f170424239d1f1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 17:15:36 +00:00
Treehugger Robot
ac8c60c304 Merge "Allow accessing dumpstate from hal_usb_impl" into udc-d1-dev am: b3c7fb06fa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982957

Change-Id: I1b6f1c07f85fd304cd1e59d20f0fc0079735c5f3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 16:15:25 +00:00
Treehugger Robot
fdb7364a3f Merge "Allow accessing dumpstate from hal_usb_impl" into udc-d1-dev am: b3c7fb06fa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22982957

Change-Id: Ia74b455412d430da3ea5a3509d087d9c82aea521
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 16:12:47 +00:00
Treehugger Robot
b3c7fb06fa Merge "Allow accessing dumpstate from hal_usb_impl" into udc-d1-dev 2023-05-03 15:42:14 +00:00
Jack Wu
4a56279734 sepolicy: allows pixelstat to access pca file nodes am: 8d45937a38 am: 1c8f85fa7e am: b34c2e957d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22987856

Change-Id: Id98597ee67281e69d4969e24f3a87d6400dd58a6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 15:33:56 +00:00
Jack Wu
06bd429e9e sepolicy: allows pixelstat to access pca file nodes am: 8d45937a38 am: 923f9f2f5e am: 4b33e0e2d2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22987856

Change-Id: I79ee04faddffa909f5529a81af5fdf68c3a2a879
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 15:33:44 +00:00
Jack Wu
b34c2e957d sepolicy: allows pixelstat to access pca file nodes am: 8d45937a38 am: 1c8f85fa7e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22987856

Change-Id: Ifba657a25364a02838ef4e240fa2d772d6d4c5a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 14:52:15 +00:00
Jack Wu
4b33e0e2d2 sepolicy: allows pixelstat to access pca file nodes am: 8d45937a38 am: 923f9f2f5e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22987856

Change-Id: If4f9cd3914808ee66777d0414b64b7602bc265ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 14:46:50 +00:00
Jack Wu
1c8f85fa7e sepolicy: allows pixelstat to access pca file nodes am: 8d45937a38
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22987856

Change-Id: I78d5270e1c0b8f029e83aabd3b65887ede450ce0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 14:09:59 +00:00
Jack Wu
923f9f2f5e sepolicy: allows pixelstat to access pca file nodes am: 8d45937a38
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22987856

Change-Id: I05c8ca4fcd1273a5636d9ccff229aff5ec0ae807
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 14:06:07 +00:00
Treehugger Robot
34e7665c6c Merge "Correct sepolicy permission for new UW cam EEPROM" into udc-d1-dev am: cdb62d5474 am: 0c354e937d am: e4f550ed1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22896105

Change-Id: I2145c39003ed83e7a7cd17405e74461ef7e353ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 10:28:12 +00:00
Treehugger Robot
03abfd7621 Merge "Correct sepolicy permission for new UW cam EEPROM" into udc-d1-dev am: cdb62d5474 am: a43377782f am: 8efc7938fe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22896105

Change-Id: Id34f927edf557c108df3e70acb5e8fe57ddae3d7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 10:27:45 +00:00
Treehugger Robot
e4f550ed1c Merge "Correct sepolicy permission for new UW cam EEPROM" into udc-d1-dev am: cdb62d5474 am: 0c354e937d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22896105

Change-Id: Id5834959bb8cde414e0b141e771eea4aab8eb03f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 09:38:04 +00:00
Treehugger Robot
8efc7938fe Merge "Correct sepolicy permission for new UW cam EEPROM" into udc-d1-dev am: cdb62d5474 am: a43377782f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22896105

Change-Id: Ibbc0a6ed8476e8a046cc420e23e48e2546a3a5f8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 09:35:58 +00:00
Jack Wu
8d45937a38 sepolicy: allows pixelstat to access pca file nodes
Bug: 262520811
Test: no Permission denied while accessing the file node
Change-Id: I0b50d85ea7002c9ee16f4c34b472b45def7f374e
Signed-off-by: Jack Wu <wjack@google.com>
2023-05-03 09:31:08 +00:00
Treehugger Robot
0c354e937d Merge "Correct sepolicy permission for new UW cam EEPROM" into udc-d1-dev am: cdb62d5474
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22896105

Change-Id: I64fa337c73cbb1759c7a1176a2590f18e154776e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 08:54:36 +00:00
Treehugger Robot
a43377782f Merge "Correct sepolicy permission for new UW cam EEPROM" into udc-d1-dev am: cdb62d5474
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22896105

Change-Id: Iad5319efdd82be6d1349fb7b4ec05b8bc17b500e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 08:54:01 +00:00
Treehugger Robot
cdb62d5474 Merge "Correct sepolicy permission for new UW cam EEPROM" into udc-d1-dev 2023-05-03 08:20:05 +00:00
Jinyoung Jeong
709ad06c0e [Zuma] Fix SeLinux error
Bug: 280522410
Test: no denial logs found for com.google.android.euicc b/280522410#comment3
Change-Id: I2837a71548cc8c8125b982313e2645ec8c913921
2023-05-03 07:44:44 +00:00
Horng Chuang
49e23f552f Merge "Add sepolicy permission for new svarog sensor" into udc-d1-dev am: 5a2189a5ae am: 9606b32ce9 am: ebcd1fecca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22668237

Change-Id: I7b71429ad812f6bd1f07928e66380ca631bff3a5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 05:49:22 +00:00
Horng Chuang
bf13c5b01c Merge "Add sepolicy permission for new svarog sensor" into udc-d1-dev am: 5a2189a5ae am: 0f17ef32db am: de56475f2b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22668237

Change-Id: Idc51f1cac6f6f8b441a90372de16d129c152c7ea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 05:48:17 +00:00
Horng Chuang
ebcd1fecca Merge "Add sepolicy permission for new svarog sensor" into udc-d1-dev am: 5a2189a5ae am: 9606b32ce9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22668237

Change-Id: I57482bc0eb887ecd2a6140485f1a3d03a5483f12
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 05:08:27 +00:00
Horng Chuang
de56475f2b Merge "Add sepolicy permission for new svarog sensor" into udc-d1-dev am: 5a2189a5ae am: 0f17ef32db
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22668237

Change-Id: I7f14a667567093f3e9e7ebd24ee1dedbd5a7bd25
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 05:04:11 +00:00
Horng Chuang
9606b32ce9 Merge "Add sepolicy permission for new svarog sensor" into udc-d1-dev am: 5a2189a5ae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22668237

Change-Id: Ia4563480915d19f6599399ce57597eb712187a16
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 04:25:39 +00:00
Horng Chuang
0f17ef32db Merge "Add sepolicy permission for new svarog sensor" into udc-d1-dev am: 5a2189a5ae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22668237

Change-Id: I83d5b0218b54bcac0a31a34971f7f5b9c39879ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 04:22:11 +00:00
Horng Chuang
5a2189a5ae Merge "Add sepolicy permission for new svarog sensor" into udc-d1-dev 2023-05-03 03:26:50 +00:00
Kyle Tso
649f19fc94 Allow accessing dumpstate from hal_usb_impl
Fix SELinux errors.

Bug: 267261163
Change-Id: I73a311d796eb520ede3849edc6384c965ec5c915
Signed-off-by: Kyle Tso <kyletso@google.com>
2023-05-03 11:23:52 +08:00
Tommy Kardach
b513278e45 Merge "Allow P23 Camera HAL to acquire wake locks" into udc-d1-dev am: 6bf3b733ac am: a7d4318ac1 am: 10521dfe0f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22915638

Change-Id: I33b7859141250dbc745a6b716984c9871997f85b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 00:11:29 +00:00
Tommy Kardach
b0b0a9080d Merge "Allow P23 Camera HAL to acquire wake locks" into udc-d1-dev am: 6bf3b733ac am: 1e317a26ad am: bf83401a50
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22915638

Change-Id: I14818b48d7d61617f236be906db75898fd192b52
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 00:11:11 +00:00
Tommy Kardach
10521dfe0f Merge "Allow P23 Camera HAL to acquire wake locks" into udc-d1-dev am: 6bf3b733ac am: a7d4318ac1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22915638

Change-Id: I78317225938c19725136299f757738fed6da02b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 23:32:22 +00:00
Tommy Kardach
bf83401a50 Merge "Allow P23 Camera HAL to acquire wake locks" into udc-d1-dev am: 6bf3b733ac am: 1e317a26ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22915638

Change-Id: I49341964a6bc10ab32b389e10c415d6d5be9d329
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 23:26:54 +00:00
Tommy Kardach
a7d4318ac1 Merge "Allow P23 Camera HAL to acquire wake locks" into udc-d1-dev am: 6bf3b733ac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22915638

Change-Id: I3a4788ae6efe73c132c5a8d2f6fcbeebb5c82eae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 22:48:37 +00:00
Tommy Kardach
1e317a26ad Merge "Allow P23 Camera HAL to acquire wake locks" into udc-d1-dev am: 6bf3b733ac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22915638

Change-Id: I2d66703cd4fe7ac51373bb704c441bf6282d561f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 22:45:42 +00:00
Tommy Kardach
6bf3b733ac Merge "Allow P23 Camera HAL to acquire wake locks" into udc-d1-dev 2023-05-02 22:23:36 +00:00
Tommy Kardach
659c17d428 Allow P23 Camera HAL to acquire wake locks
Bug: 279977277
Test: mm && flash/test
Change-Id: I6150ccf788d5074ab9e2d29c6866c8a477a3ef71
2023-05-02 17:25:51 +00:00
Dan Moore
ed888f3844 Merge "Allow sensor HAL access to thermal HAL" into udc-d1-dev am: 47eea99fb2 am: 8ba8dc5097 am: c251120fc2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22932758

Change-Id: Ibb5c853bf5e8980f7bea5000e147062d2a4785c7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 17:06:43 +00:00
Dan Moore
ce9357676d Merge "Allow sensor HAL access to thermal HAL" into udc-d1-dev am: 47eea99fb2 am: 57bea4ff01 am: b2af8c9026
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22932758

Change-Id: I4f63d020f599602fc01ee13647972315e358d463
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 17:05:44 +00:00
Dan Moore
c251120fc2 Merge "Allow sensor HAL access to thermal HAL" into udc-d1-dev am: 47eea99fb2 am: 8ba8dc5097
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22932758

Change-Id: Ic7476882fcbbd0043ff9b1a9b67cd032a87928ef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 16:25:35 +00:00
Dan Moore
b2af8c9026 Merge "Allow sensor HAL access to thermal HAL" into udc-d1-dev am: 47eea99fb2 am: 57bea4ff01
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22932758

Change-Id: I82d0defed48c93832d061542bbd248bff9025d95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 15:58:45 +00:00
Dan Moore
8ba8dc5097 Merge "Allow sensor HAL access to thermal HAL" into udc-d1-dev am: 47eea99fb2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22932758

Change-Id: I822ba6f4c418963fc92c4673337d47a29a81c07e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 15:41:10 +00:00
Dan Moore
57bea4ff01 Merge "Allow sensor HAL access to thermal HAL" into udc-d1-dev am: 47eea99fb2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22932758

Change-Id: I3f450687c9be51b9c1d9cb7cb691f6535e011004
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 15:36:56 +00:00
Dan Moore
47eea99fb2 Merge "Allow sensor HAL access to thermal HAL" into udc-d1-dev 2023-05-02 15:00:31 +00:00
Treehugger Robot
090b5bf423 Merge "Remove obsolete tracking entry" into udc-d1-dev am: 11ea9b76d6 am: 6b61366417 am: ce08ec5dde
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22880900

Change-Id: I3cf050155e95687a736938f1f8ffcda81ddb6fff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:58:15 +00:00
Treehugger Robot
b6eb5414de Merge "Enforce fastbootd" into udc-d1-dev am: 470eda92e4 am: 03f88f77fc am: 3998123e08
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22649706

Change-Id: Ib4db279f8ea2330ef48030bbd0c0bf60d136ab8f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:49:08 +00:00
Treehugger Robot
46ce2b9dde Merge "sepolicy: ignore avc denial" into udc-d1-dev am: 5c70865797 am: dc5aac4409 am: 09de29827f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22246611

Change-Id: I35f50cd6baf3817034ef0a23356f4e8c8d62c371
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:48:59 +00:00
Treehugger Robot
3d7010fa58 Merge "Remove obsolete tracking entry" into udc-d1-dev am: 11ea9b76d6 am: 8c3cc91d38 am: cad6bbdd01
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22880900

Change-Id: Iaad34aecc6b29f95dc4fd43333b8c9a05f4ffba1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:46:03 +00:00
Treehugger Robot
66f77bbb93 Merge "Enforce fastbootd" into udc-d1-dev am: 470eda92e4 am: bbfbf90c71 am: e2fea4a565
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22649706

Change-Id: I26df5d3c976f239975c96ba86c62aab9b8962519
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:45:49 +00:00
Treehugger Robot
6cb57dd371 Merge "sepolicy: ignore avc denial" into udc-d1-dev am: 5c70865797 am: 222413abe5 am: 28ba80bbfa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22246611

Change-Id: I4e8c905d653469e84fb2062c9ae74027566c96c8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:39:24 +00:00
Tom Huang
b3e504c77d Merge "Add hidraw device sepolicy for headtracking" into udc-d1-dev am: dd5df5791f am: a903ddebb1 am: 27de572652
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22874908

Change-Id: I84550bb12e25219599eb8fbb85ecdea1e4f205b9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 14:26:14 +00:00
Tom Huang
8fde4edfbf Merge "Add hidraw device sepolicy for headtracking" into udc-d1-dev am: dd5df5791f am: 5c0053c5ec am: 34dd9a81d9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22874908

Change-Id: Id094f59aa2876b5742ae239f0f546ca9cda868e4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 12:37:13 +00:00
Treehugger Robot
ce08ec5dde Merge "Remove obsolete tracking entry" into udc-d1-dev am: 11ea9b76d6 am: 6b61366417
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22880900

Change-Id: Ie96e5b88dd1230c8530ac7b3272b077d24df9a4c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 10:54:17 +00:00
Treehugger Robot
3998123e08 Merge "Enforce fastbootd" into udc-d1-dev am: 470eda92e4 am: 03f88f77fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22649706

Change-Id: Ia2106df0f80ac1a25bc3b9271f7b53495e0f53c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 10:54:06 +00:00
Treehugger Robot
09de29827f Merge "sepolicy: ignore avc denial" into udc-d1-dev am: 5c70865797 am: dc5aac4409
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22246611

Change-Id: If11c5d673b84ffb5d7f42ec3c8d7aeb8bc828dc6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 10:52:16 +00:00
Treehugger Robot
cad6bbdd01 Merge "Remove obsolete tracking entry" into udc-d1-dev am: 11ea9b76d6 am: 8c3cc91d38
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22880900

Change-Id: I01c1a901400acb7d22db8737ac663aff5490aa1d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 10:46:38 +00:00
Treehugger Robot
e2fea4a565 Merge "Enforce fastbootd" into udc-d1-dev am: 470eda92e4 am: bbfbf90c71
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22649706

Change-Id: Ic50fe5b40461df6fac51b5a0a97ec479792c7cfa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 10:38:32 +00:00
Treehugger Robot
28ba80bbfa Merge "sepolicy: ignore avc denial" into udc-d1-dev am: 5c70865797 am: 222413abe5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22246611

Change-Id: Icee56690788d7ef2b5c354bb0903e21d568e8f96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 10:34:32 +00:00
Tom Huang
27de572652 Merge "Add hidraw device sepolicy for headtracking" into udc-d1-dev am: dd5df5791f am: a903ddebb1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22874908

Change-Id: I9a920c193d1bfbf9c91221a6ea868208c4e88c66
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 10:33:00 +00:00
Tom Huang
34dd9a81d9 Merge "Add hidraw device sepolicy for headtracking" into udc-d1-dev am: dd5df5791f am: 5c0053c5ec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22874908

Change-Id: Ia744b032d92be1de1b00ca1787fa446bba8606c7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 10:29:49 +00:00
Treehugger Robot
6b61366417 Merge "Remove obsolete tracking entry" into udc-d1-dev am: 11ea9b76d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22880900

Change-Id: I73a0f09e483cb91805b3530ab513ee39529f4146
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 09:40:27 +00:00
Treehugger Robot
03f88f77fc Merge "Enforce fastbootd" into udc-d1-dev am: 470eda92e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22649706

Change-Id: Ib41b87547cb4610fa30cbb49a79bf72e9944b7e2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 09:34:22 +00:00
Treehugger Robot
dc5aac4409 Merge "sepolicy: ignore avc denial" into udc-d1-dev am: 5c70865797
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22246611

Change-Id: Ia489a4cd3d15e82f6d506bacedcadb514367eb14
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 09:07:40 +00:00
Tom Huang
5c0053c5ec Merge "Add hidraw device sepolicy for headtracking" into udc-d1-dev am: dd5df5791f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22874908

Change-Id: I4f083a33f9e8a5af927496df1189d1085f19e616
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 09:07:31 +00:00
Treehugger Robot
8c3cc91d38 Merge "Remove obsolete tracking entry" into udc-d1-dev am: 11ea9b76d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22880900

Change-Id: Iea5e3f6a0f41992b26dd08419d2721278954adb2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 08:34:44 +00:00
Treehugger Robot
bbfbf90c71 Merge "Enforce fastbootd" into udc-d1-dev am: 470eda92e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22649706

Change-Id: I9c4a6ef2c0721d66241e5e5425b1cf4e44d34a26
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 08:33:43 +00:00
Treehugger Robot
222413abe5 Merge "sepolicy: ignore avc denial" into udc-d1-dev am: 5c70865797
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22246611

Change-Id: I03cffa3b2f0ca4daef371d6316e06d9e3a9fce61
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 08:32:15 +00:00
Tom Huang
a903ddebb1 Merge "Add hidraw device sepolicy for headtracking" into udc-d1-dev am: dd5df5791f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22874908

Change-Id: If5e1ad9871cf5612f6ff1ef78079c3fb95fcaf46
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-02 08:32:02 +00:00
Treehugger Robot
11ea9b76d6 Merge "Remove obsolete tracking entry" into udc-d1-dev 2023-05-02 07:12:52 +00:00
Treehugger Robot
470eda92e4 Merge "Enforce fastbootd" into udc-d1-dev 2023-05-02 04:54:37 +00:00
Treehugger Robot
5c70865797 Merge "sepolicy: ignore avc denial" into udc-d1-dev 2023-05-02 04:36:22 +00:00
Tom Huang
dd5df5791f Merge "Add hidraw device sepolicy for headtracking" into udc-d1-dev 2023-05-02 04:07:15 +00:00
Wilson Sung
8080b95d06 Enforce fastbootd
Fix: 264489957
Test: flash and no related avc error
Change-Id: Ibf616a98e9341310e18db6dda27d86adbf24deac
2023-05-02 11:42:59 +08:00
horngchuang
a6d7203408 Add sepolicy permission for new svarog sensor
Bug: 278473644
Test: Build and test for sensor denials
Change-Id: I2816a2ada49d4369b975ac22693994cff5cd6aec
2023-05-01 15:34:33 +00:00
Krzysztof Kosiński
a89fbcc4aa Merge "Enforce sepolicy for Google Camera App." into udc-d1-dev am: 9f7dec1023 am: fc8dcdd504 am: e5d28c14af
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22908419

Change-Id: Ice868332c7434b81c2fccf6aa5d92a78ff6152d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-29 01:33:47 +00:00
Krzysztof Kosiński
1e74c58ae7 Merge "Enforce sepolicy for Google Camera App." into udc-d1-dev am: 9f7dec1023 am: bc2fb0e761 am: de77c8b0ac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22908419

Change-Id: I8bea0257ca6fbec1341283346e81c67748571fc3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-29 01:12:25 +00:00
Krzysztof Kosiński
e5d28c14af Merge "Enforce sepolicy for Google Camera App." into udc-d1-dev am: 9f7dec1023 am: fc8dcdd504
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22908419

Change-Id: I171cbff976edabed3891713dba286969db2da713
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-28 23:47:51 +00:00
Krzysztof Kosiński
de77c8b0ac Merge "Enforce sepolicy for Google Camera App." into udc-d1-dev am: 9f7dec1023 am: bc2fb0e761
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22908419

Change-Id: I4f8967f5656c83147282f036bd83e23eddccc363
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-28 23:42:25 +00:00
Krzysztof Kosiński
fc8dcdd504 Merge "Enforce sepolicy for Google Camera App." into udc-d1-dev am: 9f7dec1023
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22908419

Change-Id: I79336102f4c82c4971cddbaf5839becf9c8bc818
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-28 23:02:10 +00:00
Krzysztof Kosiński
bc2fb0e761 Merge "Enforce sepolicy for Google Camera App." into udc-d1-dev am: 9f7dec1023
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22908419

Change-Id: I871183bddb6cca48ce185235fcab8a8509959a48
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-28 23:00:27 +00:00
Krzysztof Kosiński
9f7dec1023 Merge "Enforce sepolicy for Google Camera App." into udc-d1-dev 2023-04-28 22:18:37 +00:00
Dan Moore
4a0259ff34 Allow sensor HAL access to thermal HAL
The FIR temperature sensor must report an estimate of window temperature
so that the BTS SaMD can determine if the boundary condition between the
sensor and window is within accuracy specification.

Test: logcat previously reported access denied to thermal HAL. Access is
now granted and the Twindow elements are accessible.

Bug: 276738070
Change-Id: I72846053840e36ba8d3d59df9ba580c6c416e867
2023-04-28 12:13:32 -04:00
martinwu
d038ba2c5d [TSV2] Add sepolicy for dumpstate to zip tcpdump into bugreport am: 09aaf3dfbc am: 149ac2a92e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22899260

Change-Id: I52c702454a0435c445b190138618b05e09d1704e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-28 08:09:08 +00:00
martinwu
149ac2a92e [TSV2] Add sepolicy for dumpstate to zip tcpdump into bugreport am: 09aaf3dfbc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22899260

Change-Id: I0a894186a7b618d703fb4aeefcac5e62d7e472f6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-28 07:16:37 +00:00
Ted Wang
8831352474 Add sepolicy for aidl bt extension hal
Bug: 274906319
Test: build pass and manual test
Change-Id: Id54796fec22e790a197255f2db4ba23b4a58212d
2023-04-28 04:48:33 +00:00
Kamal Shafi
47f407fa8d Correct sepolicy permission for new UW cam EEPROM
change imentet camera sensor EEPROM naming to its codename.

Bug: 279547216
Test: build pass
Change-Id: Ib831119318a0b4467f81f93c009a28831cebac25
2023-04-28 02:56:30 +00:00
Krzysztof Kosiński
5b2134d5c5 Enforce sepolicy for Google Camera App.
Added missing statement allowing GXP firmware access.

Bug: 264489778
Test: GCA smoke test in setenforce mode.
Change-Id: Ied2f675a2e11f7aebcf4e1e6ac49fc2e39dd2ecf
2023-04-27 19:53:25 +00:00
Taeju Park
2a5fed4ac2 SELinux: allow to access GPU dvfs period change
Bug: 258095095
Change-Id: I96a41371d70f32ed42de0597c74e87e192b6b55f
Signed-off-by: Taeju Park <taeju@google.com>
2023-04-27 19:46:17 +00:00
Chungkai Mei
fdd0ef451e sepolicy: ignore avc denial
ignore avc denial since it is debugfs

Bug: 271931921
Test: pass boot health check extra test https://android-build.googleplex.com/builds/abtd/run/L49300000960255489
Change-Id: Iceee4d347b5e90bce6d16054c6ee0c8091652a9b
Signed-off-by: Chungkai Mei <chungkai@google.com>
2023-04-27 14:24:40 +00:00
martinwu
09aaf3dfbc [TSV2] Add sepolicy for dumpstate to zip tcpdump into bugreport
Bug: 264490014
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: I45c894fa9378a7878bc853f7723162ebd6141115
2023-04-27 13:47:34 +00:00
Bruno BELANYI
5613f731d3 [automerger skipped] Merge "Add ArmNN config sysprops SELinux rules" into udc-d1-dev am: 83087bd818 am: 9c4ffd3dd2 -s ours
am skip reason: Merged-In I77b29468258520265e5f660452794aff068ca07d with SHA-1 aac79fd4d9 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22786211

Change-Id: I5b9727f38bb3f8462e7d0dc14df8568f1efdd3b8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 09:19:44 +00:00
Bruno BELANYI
9c4ffd3dd2 Merge "Add ArmNN config sysprops SELinux rules" into udc-d1-dev am: 83087bd818
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22786211

Change-Id: I08085e0fb372ded139063aeedb3b7dd38e1da2c1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 08:36:53 +00:00
Bruno BELANYI
83087bd818 Merge "Add ArmNN config sysprops SELinux rules" into udc-d1-dev 2023-04-27 08:06:48 +00:00
Carol Cheng
7d9bc8bb83 Merge "Revert "Add sepolicy for dumpstate to zip tcpdump into bugreport"" into udc-d1-dev am: bb1f0f25bb am: fd882830cc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22891380

Change-Id: I15c39c2c43ac4266dd0791132a89dd8dff03fadb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 07:54:54 +00:00
Carol Cheng
fd882830cc Merge "Revert "Add sepolicy for dumpstate to zip tcpdump into bugreport"" into udc-d1-dev am: bb1f0f25bb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22891380

Change-Id: Ie0a44ba0d36b95a842a28b47d5a62f78cf30f6e2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 07:11:50 +00:00
Carol Cheng
bb1f0f25bb Merge "Revert "Add sepolicy for dumpstate to zip tcpdump into bugreport"" into udc-d1-dev 2023-04-27 06:36:48 +00:00
Andrew Chant
4f15fe1b3c Merge "Use tof sensor codenames" into udc-d1-dev am: 6641141f91 am: ffa498bd79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22307463

Change-Id: Ia9f66a6de0435447964bbaca863318d44e0e889f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:41:14 +00:00
Treehugger Robot
4d1e793af4 Merge "Add sepolicy for dumpstate to zip tcpdump into bugreport" into udc-d1-dev am: fe27339606 am: 8a3c78df60
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22838381

Change-Id: Idec32d0bb3f3f2d738049eaedf24eca3f209b307
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:40:48 +00:00
Kamal Shafi
36cf79f233 Add sepolicy permission for new UW camera am: eb22b7d648 am: fedde4710a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22880541

Change-Id: I49afec0ddae190e345d286f2e267852a3698aef8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:38:58 +00:00
Martin Wu
4e2023c263 Revert "Add sepolicy for dumpstate to zip tcpdump into bugreport"
Revert submission 22814097-Fix-tcpdump-sepolicy

Reason for revert: build break

Reverted changes: /q/submissionid:22814097-Fix-tcpdump-sepolicy

Change-Id: I795de89a17c5ccee702fa3a59af03d48d89fbaf2
2023-04-27 02:21:00 +00:00
Andrew Chant
ffa498bd79 Merge "Use tof sensor codenames" into udc-d1-dev am: 6641141f91
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22307463

Change-Id: Ic8acdfb36ad3945c93bf336b91ef9cd2a69a8bd8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 02:20:37 +00:00
Andrew Chant
6641141f91 Merge "Use tof sensor codenames" into udc-d1-dev 2023-04-27 02:07:29 +00:00
Treehugger Robot
8a3c78df60 Merge "Add sepolicy for dumpstate to zip tcpdump into bugreport" into udc-d1-dev am: fe27339606
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22838381

Change-Id: I69f575b3857d391561c1f214833e28d3bee2eb30
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 01:56:24 +00:00
Kamal Shafi
fedde4710a Add sepolicy permission for new UW camera am: eb22b7d648
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22880541

Change-Id: Icf6c3862d91bd7312bc822772314c2816b16f596
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-27 01:55:40 +00:00
Treehugger Robot
fe27339606 Merge "Add sepolicy for dumpstate to zip tcpdump into bugreport" into udc-d1-dev 2023-04-27 01:43:58 +00:00
martinwu
da1f9ffa79 Add sepolicy for dumpstate to zip tcpdump into bugreport
Bug: 264490014
Test: 1. Enable tcpdump_logger always-on function
      2. Dump bugreport
      3. Pull dumpstate_board.bin and chagne it to zip
      4. Unzip dumpstate_board.zip and check if tcpdump files
         are there.
Change-Id: I04ca96860c78baf24afd7deecff7dd4d470d9539
2023-04-26 14:17:56 +00:00
Kamal Shafi
eb22b7d648 Add sepolicy permission for new UW camera
sepolicy including imentet camera sensor and gt24p64e EEPROM

Bug: 277988592
Bug: 279547216
Test: build pass
Change-Id: I01e2bc558eba7cf03c11818d9c806e6053808fd1
2023-04-26 11:32:33 +00:00
Wilson Sung
594771dd12 Update SELinux error am: 74494540d6 am: 3107cd8aa5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22873618

Change-Id: I1882d42b0eca2bb0fd198062f00db4e717faf4e0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 10:46:39 +00:00
Wilson Sung
3107cd8aa5 Update SELinux error am: 74494540d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22873618

Change-Id: I624f57e7815c7617e8956de1f5144c3e167637c1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 09:51:05 +00:00
kuanyuhuang
477d58d695 Add hidraw device sepolicy for headtracking
Test: make and incoming HID data from Pixel Buds Pro
Bug: 276163506
Change-Id: I10833e215962ad007ad32a0d713e9b37ae888fdb
2023-04-26 09:20:11 +00:00
Salmax Chang
5ddf0079c6 Remove obsolete tracking entry
Bug: 264489567
Bug: 261651131
Change-Id: Ibf1116ea7b393f3c1e6eec0794e492b5dc2fd1ad
2023-04-26 17:15:36 +08:00
Bruno BELANYI
61df5feff7 Add ArmNN config sysprops SELinux rules
Bug: 205202540
Bug: 264489188
Test: manual - reboot device and check the absence of AVC denials
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:aac79fd4d9bec6517b2932cfca1e1c84b7711cc8)
Merged-In: I77b29468258520265e5f660452794aff068ca07d
Change-Id: I77b29468258520265e5f660452794aff068ca07d
2023-04-26 08:12:29 +00:00
Wilson Sung
74494540d6 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 279680070
Test: scanBugreport
Bug: 279680070
Bug: 279680213
Bug: 279680264
Test: scanAvcDeniedLogRightAfterReboot
Bug: 279680070
Change-Id: I0a5aadfed90377aeee60a15aaab212c7709d091a
2023-04-26 15:10:44 +08:00
Treehugger Robot
76cbc04182 [automerger skipped] Merge "Remove 'hal_neuralnetworks_armnn' '/data' access exception" into udc-d1-dev am: 8ebffeef84 am: 74272bfe60 -s ours
am skip reason: Merged-In I7bf68036522553a2919076fc6243a577086ffb3a with SHA-1 deec8fec9d is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22786212

Change-Id: I87ce35d3098d0c9bdc52fc8b6db41d1a8b4295a4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:54:51 +00:00
Treehugger Robot
d3bc092059 [automerger skipped] Merge "Remove hal_power_default bug from bug_map" into udc-d1-dev am: 8f8f545307 am: 381f2fb49e -s ours
am skip reason: Merged-In I4ca6180ad286970d36ce204cd4c44e75962b26e0 with SHA-1 8051a8759a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22873619

Change-Id: I1c9fb11cbee8bc93980a90d15505d6ed8f63ce0e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:54:40 +00:00
Treehugger Robot
854774309b [automerger skipped] Merge "Remove old debug map entries." into udc-d1-dev am: 471a0c621a am: f69eaca047 -s ours
am skip reason: Merged-In Ie47107328f58dc4f1d4070e93c0cd09e88cee021 with SHA-1 af3702bffd is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22874902

Change-Id: I8be3c0783e0b0769000bb86896682a5cbb8f53df
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:54:10 +00:00
Joseph Jang
0ae77f1e35 Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-d1-dev am: 49269dd7dc am: b777b6c4f4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22787680

Change-Id: I40abdc7f4ac10caf84732c63845d863480fd4ecc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:52:59 +00:00
Treehugger Robot
74272bfe60 Merge "Remove 'hal_neuralnetworks_armnn' '/data' access exception" into udc-d1-dev am: 8ebffeef84
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22786212

Change-Id: If5fe6067ec2fcea498366aeb59feb5ab9f403e26
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:13:10 +00:00
Treehugger Robot
381f2fb49e Merge "Remove hal_power_default bug from bug_map" into udc-d1-dev am: 8f8f545307
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22873619

Change-Id: I592a54f761941a31cbbe69ba18e21bc2dc1f0a37
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:12:34 +00:00
Treehugger Robot
f69eaca047 Merge "Remove old debug map entries." into udc-d1-dev am: 471a0c621a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22874902

Change-Id: I9b1d926ebd6a33269d3c2cf754eebf638cab7aec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:11:59 +00:00
Joseph Jang
b777b6c4f4 Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-d1-dev am: 49269dd7dc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22787680

Change-Id: Iffe6499c41302c285d40c3d1fb9cd31aa5d5aa9d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 05:11:02 +00:00
Treehugger Robot
8ebffeef84 Merge "Remove 'hal_neuralnetworks_armnn' '/data' access exception" into udc-d1-dev 2023-04-26 05:07:41 +00:00
Treehugger Robot
8f8f545307 Merge "Remove hal_power_default bug from bug_map" into udc-d1-dev 2023-04-26 04:59:43 +00:00
Treehugger Robot
471a0c621a Merge "Remove old debug map entries." into udc-d1-dev 2023-04-26 04:59:25 +00:00
Joseph Jang
49269dd7dc Merge "Move recovery.te to device/google/gs-common/dauntless/sepolicy" into udc-d1-dev 2023-04-26 04:41:05 +00:00
Treehugger Robot
57eb37c05b Merge "Add sepolicy permission for new project" into udc-d1-dev am: dd9d69e132 am: b00e740e38
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22839998

Change-Id: Id3c71d2796366c78ced9b77cc1003c32c9fb65f4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 03:57:50 +00:00
Treehugger Robot
37dc3a4e96 [automerger skipped] Merge "Remove dontaudit since read early_wakeup completed" into udc-d1-dev am: e94c391ebb am: 175d165ded -s ours
am skip reason: Merged-In I6c058a1a85ada7e5d6eb1f8acafaac8231ae5329 with SHA-1 1d966a0db9 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22819356

Change-Id: I73aa286e861903150d9927c1da8f3c20ded5a56d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 03:55:32 +00:00
Treehugger Robot
500a72081b Merge "Allow InputProcessor HAL to read display resolution" into udc-d1-dev am: 0cdcdbf433 am: bb8e835b7d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22830940

Change-Id: Iba66d9912e014cc60dabd9d50885d2ef2be5cfaf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 03:49:27 +00:00
Bruno BELANYI
f9d70ef1b2 Remove 'hal_neuralnetworks_armnn' '/data' access exception
The mali driver has been configured not to look there anymore.

Fix: 205779871
Test: manual - reboot device and check the absence of AVC denials
Change-Id: I7bf68036522553a2919076fc6243a577086ffb3a
Merged-In: I7bf68036522553a2919076fc6243a577086ffb3a
(cherry picked from commit deec8fec9d)
2023-04-26 03:35:52 +00:00
Nicolas Geoffray
42b382da0c Remove old debug map entries.
Fix: 264483352
Change-Id: Ie47107328f58dc4f1d4070e93c0cd09e88cee021
Merged-In: Ie47107328f58dc4f1d4070e93c0cd09e88cee021
(cherry picked from commit af3702bffd)
2023-04-26 03:33:31 +00:00
Chungkai Mei
c01d4b7d9b Remove hal_power_default bug from bug_map
SELinux errors are fixed and hence removing from bug map

Bug: 273638876
Test: Build and boot on device
Change-Id: I4ca6180ad286970d36ce204cd4c44e75962b26e0
Merged-In: I4ca6180ad286970d36ce204cd4c44e75962b26e0
Signed-off-by: Chungkai Mei <chungkai@google.com>
(cherry picked from commit 8051a8759a)
2023-04-26 03:32:21 +00:00
Treehugger Robot
b00e740e38 Merge "Add sepolicy permission for new project" into udc-d1-dev am: dd9d69e132
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22839998

Change-Id: I3f8d423a56f4fa3c8305b0ecd6fc79715d716697
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 03:05:01 +00:00
Treehugger Robot
175d165ded Merge "Remove dontaudit since read early_wakeup completed" into udc-d1-dev am: e94c391ebb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22819356

Change-Id: Ia10e80313407c749bfd6018318878228d3786a99
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 03:04:45 +00:00
Treehugger Robot
bb8e835b7d Merge "Allow InputProcessor HAL to read display resolution" into udc-d1-dev am: 0cdcdbf433
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22830940

Change-Id: Ibda1fcc2bd040922d31e5bb9c24b2c2b7b84d8fa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 03:02:20 +00:00
Treehugger Robot
dd9d69e132 Merge "Add sepolicy permission for new project" into udc-d1-dev 2023-04-26 02:34:56 +00:00
Treehugger Robot
e94c391ebb Merge "Remove dontaudit since read early_wakeup completed" into udc-d1-dev 2023-04-26 02:25:01 +00:00
Treehugger Robot
0cdcdbf433 Merge "Allow InputProcessor HAL to read display resolution" into udc-d1-dev 2023-04-26 02:19:40 +00:00
Lawrence Huang
e979543b99 Add net_domain for GCA on zuma devices
Bug: 277097939

Change-Id: Iadfc1be5f9e6830693aed9d9b619815c7d1f9caf
2023-04-26 01:41:33 +00:00
TreeHugger Robot
0c8288d278 Merge "Add memtrack" into udc-d1-dev am: d1c31b785d am: e23db371db
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22780494

Change-Id: Ida509a8cc023577b896d3df8f60e15f61421cf13
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 00:37:20 +00:00
timmyli
3a79d36619 Allow camera hal to access aoc device am: c09931ad38 am: 783a1cf431
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22735036

Change-Id: I707edf37cdecaf85e95cf459a83d97fbc583edcb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-26 00:10:16 +00:00
TreeHugger Robot
e23db371db Merge "Add memtrack" into udc-d1-dev am: d1c31b785d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22780494

Change-Id: Ide9394cba29e3efa76453ae917a8446d638c9922
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-25 22:25:02 +00:00
TreeHugger Robot
d1c31b785d Merge "Add memtrack" into udc-d1-dev 2023-04-25 21:44:08 +00:00
timmyli
783a1cf431 Allow camera hal to access aoc device am: c09931ad38
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22735036

Change-Id: I4d2ea0de7bbb0867859fad4a0bd8715fa437cdd6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-25 19:32:37 +00:00
Prasanna Prapancham
43abed40a0 Merge "add 8411 to logbuffer" 2023-04-25 18:06:51 +00:00
horngchuang
4c3cd890be Add sepolicy permission for new project
Bug: 279542096
Test: Build and test for sensor denials
Change-Id: I3d6b7ce33e101bd9eeacefae128239af3512b67f
2023-04-25 08:09:29 +00:00
Andrew Chant
55ef8a9026 Allow InputProcessor HAL to read display resolution
Cherry-pick of Change I23285c21a82748c63fbe20988af42884b9261b66
from Siarhei Vishniakou <svv@google.com>:

Currently, there's no API to read the resolution from the system domain,
so the HAL has to read this from the sysprop provided by the display
code.

Allow the HAL to do so in this CL.

Bug: 236200710
Bug: 279510160
Change-Id: I449232d91533b6b9a40f2a6c4a91c511f5b38e3c
2023-04-24 16:59:04 -07:00
timmyli
c09931ad38 Allow camera hal to access aoc device
Camera team needs to talk to aoc device in order to use libusf.
It will do this instead of talking to rlsservice. Soon, we can
remove rlsservice from the se policy for camera hal.

Bug: 277959222
Test: manual test, logs provided in comments
Change-Id: I7453fd94891dcc0c1c587bccb3bb6cff80f46e8b
2023-04-24 20:05:57 +00:00
Chungkai Mei
97f5b3c87a Remove dontaudit since read early_wakeup completed
The display file node, early_wakeup, just for trigger the worker for
display and it doesn't have meaningful read function. But PowerHAL read
all nodes and try to dump their valuesi while triggering bugreport. As
the read operation has been completed, so we can remove the clause.

07-02 00:53:56.888   522   522 W android.hardwar: type=1400 audit(0.0:8): avc: denied { dac_read_search } for capability=2 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0
07-02 00:53:56.888   522   522 W android.hardwar: type=1400 audit(0.0:9): avc: denied { dac_override } for capability=1 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0

Bug: 267261305
Test: Boot to home
Change-Id: I6c058a1a85ada7e5d6eb1f8acafaac8231ae5329
Merged-In: I6c058a1a85ada7e5d6eb1f8acafaac8231ae5329
Signed-off-by: Chungkai Mei <chungkai@google.com>
(cherry picked from commit 55d41f1a3e89b1f4d2525d9925e3319ef59e2705)
(cherry picked from commit 1d966a0db9)
2023-04-24 17:21:53 +00:00
Chung-Kai (Michael) Mei
4a631e2fff Merge "Remove dontaudit since read early_wakeup completed" 2023-04-24 11:31:53 +00:00
Chungkai Mei
1d966a0db9 Remove dontaudit since read early_wakeup completed
The display file node, early_wakeup, just for trigger the worker for
display and it doesn't have meaningful read function. But PowerHAL read
all nodes and try to dump their valuesi while triggering bugreport. As
the read operation has been completed, so we can remove the clause.

07-02 00:53:56.888   522   522 W android.hardwar: type=1400 audit(0.0:8): avc: denied { dac_read_search } for capability=2 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0
07-02 00:53:56.888   522   522 W android.hardwar: type=1400 audit(0.0:9): avc: denied { dac_override } for capability=1 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0

Bug: 267261305
Test: Boot to home
Change-Id: I6c058a1a85ada7e5d6eb1f8acafaac8231ae5329
Signed-off-by: Chungkai Mei <chungkai@google.com>
(cherry picked from commit 55d41f1a3e89b1f4d2525d9925e3319ef59e2705)
2023-04-24 09:05:55 +00:00
Joseph Jang
6d754405ff Move recovery.te to device/google/gs-common/dauntless/sepolicy
Bug: 279381809
Change-Id: Icb4f899d76e1a5e1d6f6f2cee4c1c7f46105338c
2023-04-24 08:01:42 +00:00
Bruno BELANYI
d389b4a4f6 Remove 'hal_neuralnetworks_armnn' permissive rule
Not needed after fixing the various violations that were raised in the
past.

Bug: b/264489188
Test: manual - reboot device and check the absence of AVC denials
Change-Id: I9a5b5f916e3e188ea98646b23a43e5dec0cd8501
2023-04-21 14:09:58 +00:00
Bruno BELANYI
1e587e4afe Merge "Remove 'hal_neuralnetworks_armnn' '/data' access exception" 2023-04-21 08:13:01 +00:00
Ankit Goyal
5e4db7517c Add memtrack
Bug: 279108265
Test: dumpsys meminfo
Change-Id: Ib46c89811aa3aa1a5573076f9dc69e7222f56ea4
2023-04-20 23:18:56 -07:00
Treehugger Robot
e08f641871 Merge "Add Ims process label" into udc-d1-dev am: d90ebc1fdb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22779319

Change-Id: I52dc0e8d8de887bf66cb999e70603f8d28f274dc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 05:20:34 +00:00
Treehugger Robot
d90ebc1fdb Merge "Add Ims process label" into udc-d1-dev 2023-04-21 04:40:24 +00:00
Treehugger Robot
dcede81999 Merge changes from topic "260522202" into udc-d1-dev am: c84559a813
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22730572

Change-Id: Ibf95c8f590e37aa14370269a219ace06de9a8e82
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 04:17:54 +00:00
Treehugger Robot
c84559a813 Merge changes from topic "260522202" into udc-d1-dev
* changes:
  Remove untraceable rules
  Enforce installd
2023-04-21 03:45:54 +00:00
Treehugger Robot
e91e9f18e0 Merge "Remove hal_uwb_default bug from bug_map" into udc-d1-dev am: a8fe91bc3c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22736521

Change-Id: Ibf78ae7f2c2d499f2f7a1a538dee1bfd856bd87c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 03:42:59 +00:00
Treehugger Robot
e2411c21e5 Merge "zuma: Allow GRIL Service to access radio_vendor_data_file" into udc-d1-dev am: c3a5e6769c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22756016

Change-Id: I3380b64ba2698e35632dabfa74ca15c9e3d1f8ad
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 03:38:54 +00:00
Wilson Sung
e4e854fcd9 Add Ims process label
Bug: 260522282
Test: boot-to-home, no avc error
Change-Id: I8f3c7c64ecace4ca7ddd69275a093606a8492204
2023-04-21 03:38:17 +00:00
Treehugger Robot
a8fe91bc3c Merge "Remove hal_uwb_default bug from bug_map" into udc-d1-dev 2023-04-21 03:08:00 +00:00
Treehugger Robot
c3a5e6769c Merge "zuma: Allow GRIL Service to access radio_vendor_data_file" into udc-d1-dev 2023-04-21 02:43:46 +00:00
Treehugger Robot
b9844f4b7b Merge "ril: dump radio hal from user build." into udc-d1-dev am: 0f96c2225e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22756017

Change-Id: I6beb5198003d07bad5be793dd314b22e318c9ae8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-21 02:34:19 +00:00
Treehugger Robot
0f96c2225e Merge "ril: dump radio hal from user build." into udc-d1-dev 2023-04-21 01:49:54 +00:00
Ankit Goyal
33999737a0 Merge "Mark video secure devices as default dmabuf heaps" into udc-d1-dev am: 2f30e8ca85
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22743596

Change-Id: Iae3c3b2e55eb6dd245beb941d2a935d695a0939c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-20 17:44:04 +00:00
Prasanna Prapancham
c1715483d1 add 8411 to logbuffer
Test: Flash local build and collect bugreport
Bug: 277799048
Change-Id: I877a91999a2f17df5ea90d3d2257b93bfd67e8e6
Signed-off-by: Prasanna Prapancham <prapancham@google.com>
2023-04-20 17:43:30 +00:00
Chung-Kai (Michael) Mei
508f8b54a9 Merge "Remove hal_power_default bug from bug_map" 2023-04-20 17:25:23 +00:00
Ankit Goyal
2f30e8ca85 Merge "Mark video secure devices as default dmabuf heaps" into udc-d1-dev 2023-04-20 17:03:32 +00:00
Bruno BELANYI
deec8fec9d Remove 'hal_neuralnetworks_armnn' '/data' access exception
The mali driver has been configured not to look there anymore.

Bug: b/205779871
Test: manual - reboot device and check the absence of AVC denials
Change-Id: I7bf68036522553a2919076fc6243a577086ffb3a
2023-04-20 09:15:44 +00:00
Bruno BELANYI
2278f4d99c Merge changes from topic "armnn-sysprops"
* changes:
  Remove 'hal_neuralnetworks_armnn' sysprop exceptions
  Add ArmNN config sysprops SELinux rules
2023-04-20 08:14:04 +00:00
Chungkai Mei
8051a8759a Remove hal_power_default bug from bug_map
SELinux errors are fixed and hence removing from bug map

Bug: 273638876
Test: Build and boot on device
Change-Id: I4ca6180ad286970d36ce204cd4c44e75962b26e0
Signed-off-by: Chungkai Mei <chungkai@google.com>
2023-04-20 07:47:15 +00:00
Wilson Sung
6669da5b31 Merge "Enforce odrefresh" into udc-d1-dev am: 40c682640f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22699043

Change-Id: Ib318c133136aa341627fc39da98a78d104c15578
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-20 04:49:40 +00:00
Wilson Sung
40c682640f Merge "Enforce odrefresh" into udc-d1-dev 2023-04-20 04:06:05 +00:00
Tim Lin
54bb68984a ril: dump radio hal from user build.
Sync from ag/17155484

To get radio hal debug info on user build as we do on previous Pixels.

Bug: 278477468
Test: Trigger bugreport on USERDEBUG with dumpstate.unroot set
to true and check IRadio log

Change-Id: Ic9dd8357eb326d5c5f03b16408b7ba0a5e5f5818
(cherry picked from commit e08be6ab76327511002ebd343bda13a2fcc1434d)
2023-04-20 03:40:59 +00:00
kadirpili
92636953cf zuma: Allow GRIL Service to access radio_vendor_data_file
Bug: 274737512
Change-Id: I90c008172af7bd0d8b7bf2b214f422c4165f3769
(cherry picked from commit 5c31a6f55ac18dd941e50b455c38a37efa12354f)
2023-04-20 03:37:22 +00:00
Wilson Sung
0d1a725348 Merge changes from topic "260522282" into udc-d1-dev am: f4a5867e2a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22746525

Change-Id: I8e0630c0d343ad857d7f67d7a743ef41708ecbcf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-20 03:26:37 +00:00
Wilson Sung
f4a5867e2a Merge changes from topic "260522282" into udc-d1-dev
* changes:
  Revert^2 "Enforce priv_app"
  Label ims_remote_app and rcs_service_app
2023-04-20 02:46:06 +00:00
Treehugger Robot
6dba4fa8b3 Merge "Camera: Allow rw access to TEE devices" into udc-d1-dev am: b51385226b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22743594

Change-Id: I0529653e75ab3bbe0815a7b9eeef4f0a5db0849f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-19 21:12:32 +00:00
Treehugger Robot
b51385226b Merge "Camera: Allow rw access to TEE devices" into udc-d1-dev 2023-04-19 20:02:33 +00:00
Ankit Goyal
ded9266dd4 Mark video secure devices as default dmabuf heaps
Mali driver (and codec HAL as well) require direct access to video
secure dmabuf devices. Mali driver being an SP-HAL cannot explicitly
write blanket rules for all the scontext. So, we piggyback on
dmabuf_system_secure_heap_device to allow all scontext to be able to use
these device nodes.

This is just as secure as dmabuf_system_secure_heap_device in that case.
There is no additional security impact. An app can still use gralloc to
allocate buffers from these heaps and disallowing access to these heaps
to the intended users.

Fix: 278823239
Fix: 278513588
Fix: 275646321
Test: dEQP-VK.memory.allocation
Change-Id: I01a2730fc222efe94d4e48e7ee4c317aa65f0064
2023-04-19 19:48:38 +00:00
Edmond Chung
57d920f582 Camera: Allow rw access to TEE devices
This is to enable face authentication on P23 devices.

Bug: 278898746
Test: Build, face authentication
Change-Id: I75311770a9780e0d97a9240b589e4e4cd9e2dc56
2023-04-19 11:18:14 -07:00
Wilson Sung
dc75da30a1 Revert^2 "Enforce priv_app"
This reverts commit 61a95fc71a.

Fix: 260522282
Change-Id: I0d5dd994d3acacfee854ae27669358cfc2c249fc
2023-04-20 00:14:18 +08:00
Wilson Sung
ab9b7f7609 Label ims_remote_app and rcs_service_app
Bug: 260522282
Change-Id: I4bf27e30eda51794d2047da9ca17044632ec3786
2023-04-20 00:13:52 +08:00
Wilson Sung
5394ad595e Remove untraceable rules
avc: denied  { quotaget } for  comm="binder:1312_1" scontext=u:r:installd:s0 tcontext=u:object_r:modem_img_file:s0 tclass=filesystem permissive=0
Test: boot to home
Bug: 196916111
Bug: 264490035
Change-Id: Iec3dd7161bb788d81fe8034f3471ece0dfde7e0d
2023-04-19 23:53:54 +08:00
Bruno BELANYI
ee5198a28b Remove 'hal_neuralnetworks_armnn' sysprop exceptions
Bug: b/205202540
Test: manual - reboot device and check the absence of AVC denials
Change-Id: I8d85820cf4534b3e7d93eae6f16c750c49929c4a
2023-04-19 11:32:52 +00:00
Bruno BELANYI
aac79fd4d9 Add ArmNN config sysprops SELinux rules
Bug: b/205202540
Test: manual - reboot device and check the absence of AVC denials
Change-Id: I77b29468258520265e5f660452794aff068ca07d
2023-04-19 11:32:48 +00:00
Rex Lin
814652dc6d Remove hal_uwb_default bug from bug_map
SELinux errors are fixed and hence removing from bug map

Bug: 273639365
Test: Build and boot on device
Change-Id: I3a1ad3066840b507553b9365239673f6126b8ec6
Signed-off-by: Rex Lin <rexcylin@google.com>
2023-04-19 14:54:11 +08:00
Wilson Sung
7ebc1ab0d5 Enforce installd
Fix: 260522202
Fix: 264490035
Test: Boot-to-home, no avc error
Change-Id: I2ec5a2771c53dcc520a2ea229f093d354b5c80fd
2023-04-19 12:41:35 +08:00
Alan Chen
37bbafbe50 Merge "Remove dontaudit for hal_radioext_default to service_manager." into udc-d1-dev am: c1f8b7a872
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22694673

Change-Id: I884961bf28e23827172fc99f0a7801069339041d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-19 03:38:33 +00:00
Alan Chen
c1f8b7a872 Merge "Remove dontaudit for hal_radioext_default to service_manager." into udc-d1-dev 2023-04-19 03:04:57 +00:00
Treehugger Robot
800ccb62a9 Merge "Enforce sepolicy for camera HAL." into udc-d1-dev am: 16f461a2cf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22702266

Change-Id: Ie10e87182ba8bcce515b639c82addc5c8a5fada4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-18 23:43:23 +00:00
Treehugger Robot
16f461a2cf Merge "Enforce sepolicy for camera HAL." into udc-d1-dev 2023-04-18 23:18:00 +00:00
Dave Mankoff
73cb48bef6 Merge "Give SystemUI access to necessary selinux properties." into udc-d1-dev am: 633f19376e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22603639

Change-Id: I39974b746d4bddff960fcad6ff2ecb7047615360
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-18 18:30:03 +00:00
Jonglin Lee
2fb28513a0 Merge "Revert "Enforce priv_app"" into udc-d1-dev am: 8da235e022
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22714010

Change-Id: I4712310d5e88de3b4ebeef37c754f1995334c8e7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-18 18:25:09 +00:00
Dave Mankoff
633f19376e Merge "Give SystemUI access to necessary selinux properties." into udc-d1-dev 2023-04-18 17:50:42 +00:00
Jonglin Lee
8da235e022 Merge "Revert "Enforce priv_app"" into udc-d1-dev 2023-04-18 17:50:13 +00:00
Jonglin Lee
61a95fc71a Revert "Enforce priv_app"
This reverts commit af0ad04c3c.

Reason for revert: RescueParty crash due to com.shannon.rcsservice crash

Bug: 278735899
Change-Id: I5bf91b077c23c63de728657bd9adb5623b708d95
2023-04-18 17:41:27 +00:00
Alan Chen
63f54f0a3a Remove dontaudit for hal_radioext_default to service_manager.
The fix has been merged in the topic of ag/21956466 so this dontaudit line can be removed.

Test: manual
Bug: b/275646098

Change-Id: I95c25ffc926e48e589b7636beca1bef9583861d0
2023-04-18 17:47:09 +08:00
Krzysztof Kosiński
3f0d2fc09d Enforce sepolicy for camera HAL.
Bug: 264489778
Test: GCA smoke test on Zuma device
Change-Id: Icaa7c94ab264d496840d33d970e5a87123b31c36
2023-04-18 09:02:32 +00:00
Wilson Sung
c7104d20ea Enforce odrefresh
Bug: 254378739
Test: boot-to-home, no avc error
Change-Id: I2bd8af071a7296d77f9c1d85647124cdc9835709
2023-04-18 16:30:35 +08:00
Kah Xuan Lim
5307e11804 Merge "Modem ML: Grant access to modem ML data dir" into udc-d1-dev am: 6c2b1f2590
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22573645

Change-Id: Iad41f25a9f8850a7126342c53dac4caf18c3e5c1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-18 05:47:51 +00:00
Kah Xuan Lim
6c2b1f2590 Merge "Modem ML: Grant access to modem ML data dir" into udc-d1-dev 2023-04-18 05:15:21 +00:00
Treehugger Robot
8f087633f6 Merge "Enforce priv_app" into udc-d1-dev am: 4d7b687f9d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22639490

Change-Id: I16e602f40c31fb56b2eb536f024844af955a1a4e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 17:29:48 +00:00
Treehugger Robot
4d7b687f9d Merge "Enforce priv_app" into udc-d1-dev 2023-04-17 16:56:56 +00:00
Dave Mankoff
78b9dcdb69 Give SystemUI access to necessary selinux properties.
Other errors mentioned in the bugs are already absent.

Fixes: 269964574
Fixes: 272628396
Fixes: 272628174
Test: built and flash device. No selinux errors printed.
Change-Id: Ic285b1f5a2ce6973899011a7c6a596e807c3e933
2023-04-17 14:28:59 +00:00
Bruno BELANYI
33c0bf3aad Merge "Move ARM runtime option SELinux rules out of 'legacy/'" into udc-d1-dev am: ac239dd97d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22627129

Change-Id: Id46dee4c6dfc14fc86748fc88dc5ef96a0b0f708
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 11:27:59 +00:00
Bruno BELANYI
905a545184 Merge "Use restricted vendor property for ARM runtime options" into udc-d1-dev am: d217ae19cb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22627127

Change-Id: If670a7a869d2642c96d5f89b03dda2fce22f9519
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 11:27:20 +00:00
Jenny Ho
cddf77cdac Merge "sepolicy: fix charger_vendor permission denied" into udc-d1-dev am: 2e3228660e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22606969

Change-Id: Ifcf4b4a1f1654519eb756d658d0d1a14c5495e16
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 11:26:46 +00:00
Bruno BELANYI
ac239dd97d Merge "Move ARM runtime option SELinux rules out of 'legacy/'" into udc-d1-dev 2023-04-17 11:00:08 +00:00
Bruno BELANYI
d217ae19cb Merge "Use restricted vendor property for ARM runtime options" into udc-d1-dev 2023-04-17 10:59:23 +00:00
Jenny Ho
2e3228660e Merge "sepolicy: fix charger_vendor permission denied" into udc-d1-dev 2023-04-17 10:56:58 +00:00
Dinesh Yadav
56658f83ed Merge "Add se-policies for google_camera_app from pro" into udc-d1-dev am: 39b4b20545
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22414449

Change-Id: I1a7ccce3db7dee7e1b816af6a4703baa2f03ef3a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 09:05:27 +00:00
Dinesh Yadav
39b4b20545 Merge "Add se-policies for google_camera_app from pro" into udc-d1-dev 2023-04-17 08:32:26 +00:00
Jenny Ho
6f201db16a sepolicy: fix charger_vendor permission denied
type=1400 audit(1679973171.472:14): avc: denied { search } for comm="android.hardwar" name="vendor" dev="tmpfs" ino=2 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=0
type=1400 audit(1679973171.256:10): avc: denied { read } for comm="android.hardwar" name="stat" dev="sysfs" ino=67924 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0␍␊
type=1107 audit(1679973171.472:20): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.battery.defender.state pid=414 uid=1000 gid=1000 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=property_service permissive=0
type=1400 audit(1679973171.476:23): avc: denied { read } for comm="android.hardwar" name="u:object_r:vendor_battery_defender_prop:s0" dev="tmpfs" ino=356 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=file permissive=0
type=1400 audit(1679973171.472:21): avc: denied { write } for comm="android.hardwar" name="capacity" dev="sysfs" ino=74690 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=0
type=1400 audit(1679973171.476:32): avc: denied { read } for comm="android.hardwar" name="u:object_r:default_prop:s0" dev="tmpfs" ino=164 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0
type=1400 audit(1681358719.792:6): avc:  denied  { search } for  comm="android.hardwar" name="/" dev="sda1" ino=3 scontext=u:r:charger_vendor:s0 tcontext=u:object_r:persist_file:s0 tclass=dir permissive=0

Bug: 277898259
Change-Id: I055eaab6df7c4549cc3817aaec80b0f85ec3b475
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2023-04-17 07:24:32 +00:00
Treehugger Robot
e285b839db [automerger skipped] Merge "allow vendor_init to acces watermark_scale_factor" into udc-d1-dev am: cccb610bb4 -s ours
am skip reason: Merged-In Ib5fc92b4f21ca9b1ff6fdd3a32c97117cc12aac0 with SHA-1 2c2e198e61 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22624776

Change-Id: I1ece813be75b6e1efbd8232e337dd8ed83664f9a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 03:41:53 +00:00
Martin Liu
761f9a44b8 [automerger skipped] allow vendor_init to acces watermark_scale_factor am: fe24903d2c -s ours
am skip reason: Merged-In Ib5fc92b4f21ca9b1ff6fdd3a32c97117cc12aac0 with SHA-1 2c2e198e61 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22624776

Change-Id: I622045022a29ceddf91d3a1a26fd4133571ef8ee
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-17 03:41:51 +00:00
Treehugger Robot
cccb610bb4 Merge "allow vendor_init to acces watermark_scale_factor" into udc-d1-dev 2023-04-17 03:05:35 +00:00
Martin Liu
2c2e198e61 allow vendor_init to acces watermark_scale_factor
Bug: 278075546
Test: boot
Change-Id: Ib5fc92b4f21ca9b1ff6fdd3a32c97117cc12aac0
Signed-off-by: Martin Liu <liumartin@google.com>
2023-04-16 04:05:34 +00:00
Martin Liu
fe24903d2c allow vendor_init to acces watermark_scale_factor
Bug: 278075546
Test: boot
Change-Id: Ib5fc92b4f21ca9b1ff6fdd3a32c97117cc12aac0
Merged-in: Ib5fc92b4f21ca9b1ff6fdd3a32c97117cc12aac0
Signed-off-by: Martin Liu <liumartin@google.com>
2023-04-16 03:59:57 +00:00
Bruno BELANYI
cd905228d1 Move ARM runtime option SELinux rules out of 'legacy/'
Addressing some review feedback on ag/22381542 about this folder being
removed in the future.

Bug: b/272740524
Test: CtsDeqpTestCases (dEQP-VK.protected_memory.stack.stacksize_*)
Change-Id: I8506da9b80fe060cd5093acafd58594e4db3341b
2023-04-14 09:20:40 +00:00
Bruno BELANYI
1337c54005 Use restricted vendor property for ARM runtime options
They need to be read by everything that links with libmali, but we don't
expect anybody to actually write to them.

Bug: b/272740524
Test: CtsDeqpTestCases (dEQP-VK.protected_memory.stack.stacksize_*)
Change-Id: I7f6f021378467484544cc3dbbe71a8e9e037cf98
2023-04-14 08:33:48 +00:00
Treehugger Robot
224c260019 Merge "Enforce servicemanager" into udc-d1-dev am: 9ea22dde19
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22574729

Change-Id: If04b8697019e9388da37addb6f65f7d025a5becf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-14 04:35:17 +00:00
Dinesh Yadav
b8b2445251 Add se-policies for google_camera_app from pro
- Found selinux violations on google_camera_app for these services which are fixed after these changes are included.

Bug: 264490031
Change-Id: Ib6f4a8a548425b0b98ed9b69edff6c973b9cbe3e
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-04-14 03:59:03 +00:00
Treehugger Robot
9ea22dde19 Merge "Enforce servicemanager" into udc-d1-dev 2023-04-14 03:53:11 +00:00
TreeHugger Robot
065f1c5a75 Merge "Suppress bootanim behavior meant for Android Wear devices" into udc-d1-dev am: 89d4a4df13
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22098965

Change-Id: I041686fffcd34b58026080c4e6538adfaf8a3407
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-14 03:46:21 +00:00
Treehugger Robot
bb79528e37 Merge changes Ie20be0af,Id9a80c47 into udc-d1-dev am: 2ac0374b22
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22573649

Change-Id: Id5edbe1f2e6ef273387af77a257063a149150764
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-14 03:45:38 +00:00
Wilson Sung
af0ad04c3c Enforce priv_app
Fix: 260366281
Fix: 260522282
Fix: 260768358
Fix: 260922442
Fix: 263185432
Fix: 264490074
Fix: 268572216
Change-Id: I2efbb1971c09506a7b1e0e5e0e3d22eda91018c1
2023-04-14 03:34:46 +00:00
TreeHugger Robot
89d4a4df13 Merge "Suppress bootanim behavior meant for Android Wear devices" into udc-d1-dev 2023-04-14 03:19:53 +00:00
Treehugger Robot
2ac0374b22 Merge changes Ie20be0af,Id9a80c47 into udc-d1-dev
* changes:
  Enforce rebalance_interrupts_vendor
  Enforce hwservicemanager
2023-04-14 03:18:10 +00:00
Treehugger Robot
a04af8a730 Merge "Remove ofl_app selinux policy" into udc-d1-dev am: 224eebae32
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22601630

Change-Id: I64cac9c1b589c2f5be6ac74b9339d6ee5f8af42a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-14 02:55:52 +00:00
Treehugger Robot
224eebae32 Merge "Remove ofl_app selinux policy" into udc-d1-dev 2023-04-14 02:11:22 +00:00
Treehugger Robot
e3fcb41f40 Merge "Update rules for android.hardware.secure_element-service.thales" into udc-d1-dev am: fde5823b6f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22601631

Change-Id: Ie60f65e8ee6f88a0f4f03fdb10c3caadf7865504
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-14 01:54:41 +00:00
Treehugger Robot
fde5823b6f Merge "Update rules for android.hardware.secure_element-service.thales" into udc-d1-dev 2023-04-14 01:21:56 +00:00
Ankit Goyal
d9655a4999 Add sepolicy for framebuffer-secure heap am: 9576cfaca7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21990547

Change-Id: I39b3df563b40fabb4ae836ecb196ca4ec3a20509
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-13 22:32:19 +00:00
Ankit Goyal
9576cfaca7 Add sepolicy for framebuffer-secure heap
Bug: 245053092
Test: Secure video playback
Change-Id: I715ea5a4e9ee70ec2a022351b9e722a25bfb9f93
2023-04-13 13:47:11 -07:00
Sayanna Chandula
e94b921ca4 Merge "thermal: enable pixelstats access to thermal metrics" into udc-d1-dev am: 34ff37262f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22559579

Change-Id: I3fb332012004c2e91b8bcc858dcfbdc12e5c8679
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-13 20:43:22 +00:00
Sayanna Chandula
34ff37262f Merge "thermal: enable pixelstats access to thermal metrics" into udc-d1-dev 2023-04-13 20:26:31 +00:00
Yixuan Wang
98bffc0a44 Merge "Add hal_contexthub_default to zuma sepolicy; Remove dontaudit rules for chre" into udc-d1-dev am: 2c0e44805a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22613725

Change-Id: Ia79eb1e60a6fe53a2155874be0f83be644c1d9f6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-13 20:18:36 +00:00
Yixuan Wang
2c0e44805a Merge "Add hal_contexthub_default to zuma sepolicy; Remove dontaudit rules for chre" into udc-d1-dev 2023-04-13 19:38:38 +00:00
Joner Lin
44155e103e Merge "allow bthal to access vendor bluetooth folder" into udc-d1-dev am: edd47032af
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22271813

Change-Id: Ic8fa74d729ca69d7c051c19848b9a0113e23bac3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-13 14:26:11 +00:00
Joner Lin
edd47032af Merge "allow bthal to access vendor bluetooth folder" into udc-d1-dev 2023-04-13 13:57:32 +00:00
George
95d0a4b76f Update rules for android.hardware.secure_element-service.thales
A new domain hal_secure_element_st54spi_aidl for AIDL HAL

Bug: 261566299
Test: run cts -m CtsOmapiTestCases
Test: atest VtsAidlHalNfcTargetTest
Change-Id: Id76a3f3337e2ee72031b39975eb010178855f36f
2023-04-13 11:02:49 +00:00
Lily Lin
6f41705151 Remove ofl_app selinux policy
OFLAgent is deprecated in ag/22504130. This CL is to remove ofl_app
selinux policy.

Bug: 224611871
Test: adb bugreport
Change-Id: I2264d79b8fe4084c3acd65db8f5384bb08216c5f
(cherry picked from commit 0fed5cc2b6cae6aebb411a58319474798d2fb25a)
2023-04-13 10:49:13 +00:00
Yixuan Wang
1095231e38 Add hal_contexthub_default to zuma sepolicy; Remove dontaudit rules for
chre

[ 7.760870] type=1400 audit(1669944054.440:61): avc: denied { write } for comm="android.hardwar" name="chre" dev="tmpfs" ino=1099 scontext=u:r:hal_contexthub_default:s0 tcontext=u:object_r:chre_socket:s0 tclass=sock_file permissive=1
[ 12.519414] type=1400 audit(1669944059.196:138): avc: denied {connectto } for comm="android.hardwar" path="/dev/socket/chre"scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:chre:s0 tclass=unix_stream_socket permissive=1

Bug: 264489794
Bug: 261105224
Test: atest scanAvcDeniedLogRightAfterReboot
Change-Id: I7bf13913188deedc987f82e54626a18357ab84c5
2023-04-13 06:43:41 +00:00
Wilson Sung
3df3008917 Suppress bootanim behavior meant for Android Wear devices
Fix: 260522279
Test: boot-to-home and no bootanim avc error
Change-Id: I29d4168720887bc2f90d5f7ad20367887f9cae51
2023-04-13 00:00:38 +00:00
Minchan Kim
2155fd3711 move vendor_cma_debugfs into gs-common am: a382f85f96
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22573601

Change-Id: I52c5fb3fe3a1d89d26fa547dd25cd57806cbfdc9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 15:53:59 +00:00
Wilson Sung
5468e420e3 Enforce rebalance_interrupts_vendor
Fix: 264489565
Test: boot-to-home
Change-Id: Ie20be0afe1a95b8cb512b57019539eb52948a155
2023-04-12 22:58:13 +08:00
Wilson Sung
90f838f16f Enforce hwservicemanager
Test: boot-to-home and no avc error
Fix: 264489781
Change-Id: Id9a80c478a2eae8472023f3bbcc514f30f5bfbab
2023-04-12 22:32:46 +08:00
Wilson Sung
527f215d20 Enforce servicemanager
Fix: 263429985
Fix: 264489962
Test: boot-to-home, no avc error
Change-Id: Ib3b0916bdbd09638f5b7b34f2d214690eed314ab
2023-04-12 22:14:16 +08:00
Minchan Kim
a382f85f96 move vendor_cma_debugfs into gs-common
The CMA dump is common feature for pixel devices so move
it to gs-common.

Bug: 276901078
Test: dumpstate_board.txt on adb bugreport includes the info
Change-Id: I46be7899939da3ae7e9323a0d3ee92f4b3759acf
Signed-off-by: Minchan Kim <minchan@google.com>
(cherry picked from commit afb8d91c5dd0df836c6c8a53963b44e23005efb7)
2023-04-12 13:25:46 +00:00
Kah Xuan Lim
6e8c79e7db Modem ML: Grant access to modem ML data dir
Bug: 229801544
Change-Id: Ia2e9c5a48ad935a49f3b8a9c6bceae3f4f833b4e
2023-04-12 08:48:57 +00:00
Minchan Kim
11e5da54ef Merge "remove dump_cma" 2023-04-12 03:25:58 +00:00
Wilson Sung
bf1baa3448 Merge "Add recovery related policy" into udc-d1-dev am: 5bee37db26
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22574699

Change-Id: Iafa23558e51dbc2608ff3158cd7b1259253f25cf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 01:55:36 +00:00
Wilson Sung
5bee37db26 Merge "Add recovery related policy" into udc-d1-dev 2023-04-12 01:44:17 +00:00
Treehugger Robot
eefef62f70 Merge "Add btbcm wakelock node context" into udc-d1-dev am: bc7379022a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22572817

Change-Id: Ie49fcc84a41c924558050f7d4a283a915bc68b84
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-12 01:40:12 +00:00
Minchan Kim
1b4fae5ce3 remove dump_cma
We will introduce it into gs-common

Bug: 276901078
Change-Id: I56a0c67fb09563baacbabf738625bf748ab80378
Signed-off-by: Minchan Kim <minchan@google.com>
2023-04-12 01:22:08 +00:00
Treehugger Robot
bc7379022a Merge "Add btbcm wakelock node context" into udc-d1-dev 2023-04-12 00:32:46 +00:00
Wilson Sung
c2eedff70c Add recovery related policy
Fix: 275143841
Fix: 264490092
Test: adb sideload and no avc error
Change-Id: I52003c9417560a6c5dab815a6929681710f0b0a4
2023-04-12 03:46:54 +08:00
Wei Wang
87214b4c2c Merge "sepolicy: label bci and dsu max frequency" into udc-d1-dev am: 4cd8d2fef9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22497095

Change-Id: I27ceda44c1a2baeb2450c56cbfed0762b68274ab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-11 17:05:18 +00:00
jonerlin
940b51e1e4 allow bthal to access vendor bluetooth folder
Bug: 240636731
Test: enable vendor btsnoop property and check the vendor snoop log
Change-Id: Ib7c36e7398bdbe7abc2f3b2dba684f95a4ce90a8
2023-04-11 17:01:40 +00:00
Wei Wang
4cd8d2fef9 Merge "sepolicy: label bci and dsu max frequency" into udc-d1-dev 2023-04-11 16:14:29 +00:00
Wilson Sung
2e19e54fe5 Add btbcm wakelock node context
avc: denied { read } for name="wakeup178" dev="sysfs" ino=119871 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0

Bug: 277717252
Test: boot-to-home and no avc error
Change-Id: I82ed45ff6bf28c0cf2237098c54b6ead59c6c284
2023-04-11 11:02:26 +00:00
Treehugger Robot
fb28384538 Merge "remove obsolete entries" into udc-d1-dev am: 32ec77111d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22563759

Change-Id: I2754b08406869ae6843b5bec4bf2cbe256de9657
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-11 04:36:46 +00:00
Wilson Sung
9e250f4a12 Allow update_engine to change slot am: 79b4b329f0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22563758

Change-Id: I38ef79ff33c61540b5240e31a5b2309973c41185
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-11 04:36:20 +00:00
Treehugger Robot
32ec77111d Merge "remove obsolete entries" into udc-d1-dev 2023-04-11 04:23:40 +00:00
Adam Shih
e188582ba8 remove obsolete entries
Bug: 264483390
Bug: 272166771
Bug: 264482983
Bug: 264600086
Bug: 264482983
Bug: 273638940
Test: adb bugreport
Change-Id: Ia89c409a20e6a4514c57389f82c57d8c265f1e81
2023-04-11 11:23:17 +08:00
Wilson Sung
79b4b329f0 Allow update_engine to change slot
Bug: 275143841
Change-Id: Id9e19ae74a32521ab083eff87e4e3e583f881bbb
2023-04-11 11:03:12 +08:00
Ali K. Zadeh
1f56ec32b6 sepolicy: label bci and dsu max frequency
Bug: 274005880
Test: powerhint is able to change the bci/dsu max frequency
Change-Id: I8d59450878ba8e349d7f797cc74f0f1cc00c6187
2023-04-10 23:24:55 +00:00
Sayanna Chandula
0df51526da thermal: enable pixelstats access to thermal metrics
Allow pixelstats daemon to access thermal metric nodes

Bug: 277625975
Test: Build and boot on device. Check DFS stats

Change-Id: I50d71d12f4f9d3a1b83a606ba6a7159c46ebec14
Signed-off-by: Sayanna Chandula <sayanna@google.com>
2023-04-10 13:55:26 -07:00
Adam Shih
cfa00dfc88 enforce gmscore_app am: e5e6273048
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22548983

Change-Id: Ia16a967d75b19bbceaf83f7e7374fbabfab5ea12
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-10 04:55:17 +00:00
Adam Shih
e5e6273048 enforce gmscore_app
Bug: 259302023
Test: boot with no relevant errors
Change-Id: I61cb95224096dbc999bc3c8051a4e4c6ad700522
2023-04-10 11:13:21 +08:00
Treehugger Robot
59030392be Merge "Revert "Revert "Enforce system ui app""" into udc-d1-dev am: 8da223020e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22527495

Change-Id: I32179cccc22c4b6963c9f7df8b9645d42e44e624
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-07 10:27:07 +00:00
Treehugger Robot
8da223020e Merge "Revert "Revert "Enforce system ui app""" into udc-d1-dev 2023-04-07 10:04:20 +00:00
Gina Ko
bb27434f22 Revert "Revert "Enforce system ui app""
This reverts commit eeeae0265a.

Reason for revert: b/274366326 was fixed

Change-Id: I9d9c4f4dd831aa80109cc53790f6b6491133fb42
2023-04-07 08:46:00 +00:00
Wilson Sung
c5d73c373f update error on ROM 9900526 am: f2d0dbb66a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22525843

Change-Id: Ib30856b7e71a03fa949c1fd81cc9c6a051ac9073
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-07 08:26:17 +00:00
Wilson Sung
f2d0dbb66a update error on ROM 9900526
Bug: 277155496
Bug: 277300017
Bug: 277300125
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I2a2f230589695b0240abb26909c94fd4cf2420bf
2023-04-07 14:43:36 +08:00
Adam Shih
dea7ea0c6f comply with VTS requirements am: 22e1c0756a am: 7da5e7b6aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22344148

Change-Id: I019acfcc549b09660adf3b0fadd3fdb28bc57241
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 03:35:58 +00:00
Adam Shih
e3c88c1277 comply with VTS requirements am: 22e1c0756a am: 46fd63b761
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22344148

Change-Id: Ia94e551d31f068ed18f3e0bbc626eb544074e000
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 03:20:40 +00:00
Adam Shih
46fd63b761 comply with VTS requirements am: 22e1c0756a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22344148

Change-Id: I02d1e5a2af5bb6d3009d2b7687dff6080f56724f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 03:08:17 +00:00
Adam Shih
7da5e7b6aa comply with VTS requirements am: 22e1c0756a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22344148

Change-Id: I07f9f243f5157e406e34cdd97197e144f41197cb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 03:07:55 +00:00
Dinesh Yadav
0829947959 Merge "Allow google_camera_app to access edgetpu" into udc-d1-dev am: d9a75c1639
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22286148

Change-Id: I46aa0db686e57dfcf9daaf7d302ec6754c86d630
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 03:06:08 +00:00
Dinesh Yadav
d9a75c1639 Merge "Allow google_camera_app to access edgetpu" into udc-d1-dev 2023-04-06 02:34:35 +00:00
Sayanna Chandula
bfef2f5cea Remove hal_thermal_default bug from bug_map am: 387145ed85
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22465501

Change-Id: Ie87df886d0451eb8aa9b3110b67fabaa11b28a76
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-06 00:22:02 +00:00
Sayanna Chandula
387145ed85 Remove hal_thermal_default bug from bug_map
SELinux errors are fixed and hence removing from bug map

Bug: 272166987
Test: Build and boot on device

Change-Id: Ic0d314486a2ed6fbc1c4497b122827b17f5b9022
Signed-off-by: Sayanna Chandula <sayanna@google.com>
2023-04-05 22:26:40 +00:00
Dinesh Yadav
478b11708f Allow google_camera_app to access edgetpu
These permissions are needed by GCA-release & GCA-dogfood to access
edgetpu.

Bug: 264490031
Change-Id: Idd9dff906c86f9e83f1dc67698c23387e174d99c
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-04-04 06:11:47 +00:00
TreeHugger Robot
192019b3dc [automerger skipped] Merge "sepolicy: fix VTS failure for system suspend [RESTRICT AUTOMERGE]" into udc-d1-dev am: 8041addc24 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22323886

Change-Id: I31e5f993af8aa0f0447b39a9e307bc08a08dbfda
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-30 17:53:22 +00:00
Darren Hsu
150006a5c5 [automerger skipped] sepolicy: fix VTS failure for system suspend [RESTRICT AUTOMERGE] am: bc15f1c8ee -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22323886

Change-Id: I7204f00718465596b3dee251f93273e699510094
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-30 17:53:21 +00:00
TreeHugger Robot
b99f943900 Merge "Add logd selinux allow permissions" into udc-d1-dev am: 4bb2e02b1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22307864

Change-Id: I7f9a2c6d4af714625fb4d347c0988052d8f77852
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-30 17:17:02 +00:00
Adam Shih
22e1c0756a comply with VTS requirements
Bug: 275142299
Test:
atest VtsHalDumpstateTargetTest:PerInstanceAndMode/DumpstateAidlPerModeTest#TestOk/0_android_hardware_dumpstate_IDumpstateDevice_default_FULL
atest VtsHalDumpstateTargetTest:PerInstance/DumpstateAidlGeneralTest#TestInvalidModeArgument_Negative/0_android_hardware_dumpstate_IDumpstateDevice_default
Built pass on target-userdebug and aosp_target-userdebug

Change-Id: I6a114aa2aa92f7b06cfd5bbd1f73d34b5477b109
2023-03-30 13:28:43 +08:00
TreeHugger Robot
8041addc24 Merge "sepolicy: fix VTS failure for system suspend [RESTRICT AUTOMERGE]" into udc-d1-dev 2023-03-30 01:52:41 +00:00
TreeHugger Robot
4bb2e02b1c Merge "Add logd selinux allow permissions" into udc-d1-dev 2023-03-30 01:44:29 +00:00
TreeHugger Robot
522e64b511 [automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-d1-dev am: 6cbdc36e1b -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22294472

Change-Id: I0fbb14762fd3b91b8223e9f366c00a80a9c16c31
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 16:52:08 +00:00
Adam Shih
5429ced32b [automerger skipped] Move pixel dumpstate to gs-common am: 036fb44a5d -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22294472

Change-Id: I59b9dce74ac2dca22869bbe927f75fa4cdc705fb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 16:52:07 +00:00
TreeHugger Robot
6cbdc36e1b Merge "Move pixel dumpstate to gs-common" into udc-d1-dev 2023-03-29 16:06:45 +00:00
Darren Hsu
bc15f1c8ee sepolicy: fix VTS failure for system suspend [RESTRICT AUTOMERGE]
Bug: 275143652
Test: run vts -m SuspendSepolicyTests
Change-Id: I7cb5fdb18e7b16d98961bfed11da21496e8fa026
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-03-29 18:46:56 +08:00
Donnie Pollitz
885a790f2d Add logd selinux allow permissions
Bug: 261105354
Bug: 264489639
Test: Ran atest SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I377dbb3bbdecd6780c1bdfb3aab53ee3c754c163
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-03-29 09:24:47 +02:00
TreeHugger Robot
de4eba7c13 Merge "Update SELinux error" into udc-d1-dev am: 866b23080c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22328782

Change-Id: I03be4caa61b5a6f1d075cc3373df73ac1b58277b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 06:04:15 +00:00
TreeHugger Robot
866b23080c Merge "Update SELinux error" into udc-d1-dev 2023-03-29 05:35:51 +00:00
Wilson Sung
5227dfe6ab Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 275646098
Test: scanBugreport
Bug: 275646003
Test: scanAvcDeniedLogRightAfterReboot
Bug: 275645636
Change-Id: Iedd660e3937792d5ac58f384605300b39f6dfcb0
2023-03-29 12:17:48 +08:00
Adam Shih
f69b2e8ea2 Merge "Revert "comply with VTS requirements"" into udc-dev am: 97c56013be am: 4c696710f0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22328024

Change-Id: Ib367aa0cf7f745a9b1f7c186e7364402f3a6a109
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:39:30 +00:00
Adam Shih
6cd3c54b5c Merge "Revert "comply with VTS requirements"" into udc-dev am: 97c56013be am: b19966b929
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22328024

Change-Id: I3a4852f87c9e557f4b7275790c24013bf8412755
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:29:36 +00:00
TreeHugger Robot
b8afba5124 Merge "Keep name "dmabuf_system_secure_heap_device" for secure playback" into udc-d1-dev am: 83588e636f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22185170

Change-Id: I8ae4c6a6f1c4e63adddc3fcdea47143e0e5e22d7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:27:57 +00:00
Adam Shih
4c696710f0 Merge "Revert "comply with VTS requirements"" into udc-dev am: 97c56013be
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22328024

Change-Id: I203fbebe2e02e378bd452b7b7a49c33dbec8e079
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:12:09 +00:00
Adam Shih
b19966b929 Merge "Revert "comply with VTS requirements"" into udc-dev am: 97c56013be
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22328024

Change-Id: Ic5841fefdd7576548fff66fc340259814e542df9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 03:12:09 +00:00
TreeHugger Robot
83588e636f Merge "Keep name "dmabuf_system_secure_heap_device" for secure playback" into udc-d1-dev 2023-03-29 02:56:22 +00:00
Adam Shih
97c56013be Merge "Revert "comply with VTS requirements"" into udc-dev 2023-03-29 02:49:09 +00:00
Adam Shih
a0b5162488 Revert "comply with VTS requirements"
Revert submission 22302106-dumpstate aidl

Reason for revert: build failed on udc-d1-dev

Reverted changes: /q/submissionid:22302106-dumpstate+aidl

Change-Id: I6bd0ec81272827498ce36bee556fd89acc6b20ca
2023-03-29 02:45:20 +00:00
Adam Shih
23df08855d Merge "comply with VTS requirements" into udc-dev am: 7cb203f3c2 am: a6e1f1d73a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22306662

Change-Id: Ic81ea0708a327ca91a9015f23f00eeb29eb136e3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 01:11:07 +00:00
Adam Shih
08f6892075 Merge "comply with VTS requirements" into udc-dev am: 7cb203f3c2 am: 026cb8d935
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22306662

Change-Id: I83f6834fbb0e0ce6341b55c7d5be42612b2baa84
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 00:59:00 +00:00
TreeHugger Robot
a0beb1cf16 Merge "Allow bootctl to access trusty device" into udc-d1-dev am: 5d6157b523
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22307863

Change-Id: Icab0b0b06400d4b7c362813726b878d59a7d7f7c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 00:56:36 +00:00
Adam Shih
026cb8d935 Merge "comply with VTS requirements" into udc-dev am: 7cb203f3c2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22306662

Change-Id: I03432b1457e7b251ac5f5f9d7e10e3b4485260cf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 00:47:11 +00:00
Adam Shih
a6e1f1d73a Merge "comply with VTS requirements" into udc-dev am: 7cb203f3c2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22306662

Change-Id: Idca826f6b8dbe93be52c40f3898d24e763d30f07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-29 00:45:26 +00:00
TreeHugger Robot
5d6157b523 Merge "Allow bootctl to access trusty device" into udc-d1-dev 2023-03-29 00:00:55 +00:00
Adam Shih
7cb203f3c2 Merge "comply with VTS requirements" into udc-dev 2023-03-28 23:58:03 +00:00
Mingguang Xu
2adc8d37d1 Merge "Add permissions to connect radioext to twoshay." into udc-dev am: 57e322c17c am: 203dd313e7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21956466

Change-Id: I1033c49660ac5bec257a8d8865637689962ec493
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 23:42:42 +00:00
Mingguang Xu
afdff68774 Merge "Add permissions to connect radioext to twoshay." into udc-dev am: 57e322c17c am: e283627fac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21956466

Change-Id: Id3525c06cc58f816eee7797145fbb301c4208ac7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 23:34:30 +00:00
Mingguang Xu
e283627fac Merge "Add permissions to connect radioext to twoshay." into udc-dev am: 57e322c17c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21956466

Change-Id: Iac8bc11118a1c8f6f401f938039899f03bdeea95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 23:16:41 +00:00
Mingguang Xu
203dd313e7 Merge "Add permissions to connect radioext to twoshay." into udc-dev am: 57e322c17c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21956466

Change-Id: Ib70d523bc36e1a789b003374207094f2eaf722d5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 23:09:15 +00:00
Mingguang Xu
57e322c17c Merge "Add permissions to connect radioext to twoshay." into udc-dev 2023-03-28 23:03:46 +00:00
Feiyu Chen
65eaace67a Merge "Allow camera HAL to access edgetpu_app_service" into udc-dev am: 2d34b0b1f6 am: 719b7aae1f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22248613

Change-Id: I6a52cb8f2237f500eeee0d74cfd587f31e2a500a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 09:47:43 +00:00
Feiyu Chen
67f06b0a3d Merge "Allow camera HAL to access edgetpu_app_service" into udc-dev am: 2d34b0b1f6 am: 02cc06b4ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22248613

Change-Id: I7cd7a542c4d855dac45e34b698303e18847057f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 09:47:10 +00:00
Feiyu Chen
02cc06b4ab Merge "Allow camera HAL to access edgetpu_app_service" into udc-dev am: 2d34b0b1f6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22248613

Change-Id: Icf1b60bc90121ad358639abe52ea15b4b69bb652
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 09:19:09 +00:00
Feiyu Chen
719b7aae1f Merge "Allow camera HAL to access edgetpu_app_service" into udc-dev am: 2d34b0b1f6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22248613

Change-Id: Ia56751b481fd666dedec73f11ee2ee5ff7e4d088
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-28 09:18:37 +00:00
Feiyu Chen
2d34b0b1f6 Merge "Allow camera HAL to access edgetpu_app_service" into udc-dev 2023-03-28 08:43:23 +00:00
Donnie Pollitz
74e0bf60c2 Allow bootctl to access trusty device
Background:
* Boot Control needs to be able to blow AR fuses, which requires access
  to the OTP port on trusty.

Bug: 267714941
Test: AVC denial doesn't show up in log
Change-Id: I5635f2358b379ae0ffe882ca9ee162a455f554f0
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-03-28 09:58:16 +02:00
Jerry Huang
912984c964 Keep name "dmabuf_system_secure_heap_device" for secure playback
Fixes the following denials:

03-13 14:31:22.796 W CodecLooper: type=1400 audit(0.0:284): avc: denied { read } for name="vstream-secure" dev="tmpfs" ino=865 scontext=u:r:untrusted_app_29:s0:c49,c257,c512,c768 tcontext=u:object_r:video_secure_heap_device:s0 tclass=chr_file permissive=0 app=com.google.android.exoplayer2.demo

03-13 14:31:22.796 I auditd  : type=1400 audit(0.0:281): avc: denied { read } for comm="CodecLooper" name="vstream-secure" dev="tmpfs" ino=865 scontext=u:r:untrusted_app_29:s0:c49,c257,c512,c768 tcontext=u:object_r:video_secure_heap_device:s0 tclass=chr_file permissive=0 app=com.google.android.exoplayer2.demo

03-14 15:01:48.069  1429  1429 W CodecLooper: type=1400 audit(0.0:1469): avc: denied { read } for name="vstream-secure" dev="tmpfs" ino=807 scontext=u:r:untrusted_app_32:s0:c65,c257,c512,c768 tcontext=u:object_r:video_secure_heap_device:s0 tclass=chr_file permissive=0 app=com.disney.disneyplus

Bug: 268197530
Test: secure playback
Change-Id: I09a24fcf03f1f66b4c85d3b3949f33ad0d0f8dac
2023-03-28 15:04:43 +08:00
Boon Jun Soh
0a1cba518a Use tof sensor codenames
Bug: 272224875
Test: Camera CTS + PTS + unittests
Change-Id: Iedd90e285364b28add7298bae7662efbac31474c
2023-03-28 13:00:09 +08:00
Adam Shih
d4a7ff694a comply with VTS requirements
Bug: 275142299
Test:
atest VtsHalDumpstateTargetTest:PerInstanceAndMode/DumpstateAidlPerModeTest#TestOk/0_android_hardware_dumpstate_IDumpstateDevice_default_FULL
atest VtsHalDumpstateTargetTest:PerInstance/DumpstateAidlGeneralTest#TestInvalidModeArgument_Negative/0_android_hardware_dumpstate_IDumpstateDevice_default
Built pass on target-userdebug and aosp_target-userdebug

Change-Id: Ifd75afdf2365687eed9598f74dd4cf3241be2964
2023-03-28 03:28:55 +00:00
RD Babiera
43d5907677 Merge "Revert "comply with VTS requirements"" into udc-dev am: 3616de2c26 am: a82406ee28
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22298904

Change-Id: Ied2273b7d9bffe51d3b906d760aaa954180b3227
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 22:59:12 +00:00
RD Babiera
ed5d613e27 Merge "Revert "comply with VTS requirements"" into udc-dev am: 3616de2c26 am: 865ef1e805
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22298904

Change-Id: I35b47b485ac899b13a6ca98147cc7dd2c1beff12
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 22:57:36 +00:00
RD Babiera
a82406ee28 Merge "Revert "comply with VTS requirements"" into udc-dev am: 3616de2c26
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22298904

Change-Id: I49798505d571f538127fc5d2b9474cce3992421c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 22:31:37 +00:00
RD Babiera
865ef1e805 Merge "Revert "comply with VTS requirements"" into udc-dev am: 3616de2c26
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22298904

Change-Id: Iedb29f8ec241721e91135decf31ad53c01033766
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 22:31:05 +00:00
RD Babiera
3616de2c26 Merge "Revert "comply with VTS requirements"" into udc-dev 2023-03-27 21:52:39 +00:00
RD Babiera
8720ececf1 Revert "comply with VTS requirements"
Revert submission 22242215-dumpstate aidl

Reason for revert: DroidMonitor-triggered revert due to breakage https://android-build.googleplex.com/builds/quarterdeck?branch=git_udc-d1-dev&target=aosp_husky-userdebug&lkgb=9826121&lkbb=9829863&fkbb=9826130, bug b/275279368.

Reverted changes: /q/submissionid:22242215-dumpstate+aidl

Change-Id: Ida32309c468074a5671c30aa28cf801c1695d786
2023-03-27 20:58:33 +00:00
Adam Shih
036fb44a5d Move pixel dumpstate to gs-common
Bug: 240530709
Test: adb bugreport
Change-Id: I10f98673ea507f841d9d3f33d737c4e73c1b5b19
Merged-In: I4c46a2495ea07b9e44f56c4c6be726621e0ebf65
(cherry picked from commit 8538fd33da)
2023-03-27 17:57:22 +00:00
Wilson Sung
a25945ff17 Merge "Move OTA context out of legacy folder" into udc-d1-dev am: 98c7894070
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22242819

Change-Id: Ie1ea165a4183cb619dca8a669438beacfbde1009
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 14:47:06 +00:00
Wilson Sung
98c7894070 Merge "Move OTA context out of legacy folder" into udc-d1-dev 2023-03-27 14:27:28 +00:00
Wilson Sung
21226c4c24 Merge changes from topic "275143841"
* changes:
  Merge "Move OTA context out of legacy folder" to master
  Move OTA context out of legacy folder
2023-03-27 14:27:28 +00:00
Alan
afafafd8a4 Add permissions to connect radioext to twoshay.
Connection through grilantennatuningservice binder call.

Test: manual
Bug: 258970389
Change-Id: I419b40042cce363428f72fa723adf89bcf269ef4
2023-03-27 17:07:16 +08:00
Automerger Merge Worker
b6e575bbb2 Merge "Merge "comply with VTS requirements" into udc-dev am: c83e5be8d9 am: 08404c1181" 2023-03-27 06:52:04 +00:00
TreeHugger Robot
12221017f0 Merge "comply with VTS requirements" into udc-dev am: c83e5be8d9 am: 08404c1181
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22286084

Change-Id: I52343e61f01578236df06e1c0efba1546fbd1429
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 06:51:57 +00:00
TreeHugger Robot
495346b174 Merge "comply with VTS requirements" into udc-dev am: c83e5be8d9 am: 84aab225cf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22286084

Change-Id: I9cb36c4f9964f2faed355e43c82c136e3672d6fa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 06:51:51 +00:00
TreeHugger Robot
84aab225cf Merge "comply with VTS requirements" into udc-dev am: c83e5be8d9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22286084

Change-Id: I0b9cf28cdfb549e2c3571e144f73f59d0004bc02
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 06:27:52 +00:00
TreeHugger Robot
08404c1181 Merge "comply with VTS requirements" into udc-dev am: c83e5be8d9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22286084

Change-Id: I989d12b888248ed584e108ab54b46023aa89d7a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 06:27:15 +00:00
TreeHugger Robot
c83e5be8d9 Merge "comply with VTS requirements" into udc-dev 2023-03-27 06:05:51 +00:00
Gina Ko
7a32ef8f12 Merge "Allow systemui to find cameraserver_service" into udc-d1-dev am: 5821d671f3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22270826

Change-Id: Id6c48fa93ffdf03e50925cec717fe971e6b63cb6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 05:57:43 +00:00
Gina Ko
5821d671f3 Merge "Allow systemui to find cameraserver_service" into udc-d1-dev 2023-03-27 05:32:14 +00:00
Neo Yu
69b786f1a1 Merge "Remove the bug of hal_radioext_default because the fix is merged." into udc-d1-dev am: e9aabf7e9e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22286082

Change-Id: I66001f37eb2bf0626f14fc3b92beb34ac77f6d00
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 04:46:22 +00:00
Neo Yu
e9aabf7e9e Merge "Remove the bug of hal_radioext_default because the fix is merged." into udc-d1-dev 2023-03-27 04:17:02 +00:00
Adam Shih
e124d5aea9 comply with VTS requirements
Bug: 275036679
Bug: 275034315
Test:
atest VtsHalDumpstateTargetTest:PerInstanceAndMode/DumpstateAidlPerModeTest#TestOk/0_android_hardware_dumpstate_IDumpstateDevice_default_FULL
atest VtsHalDumpstateTargetTest:PerInstance/DumpstateAidlGeneralTest#TestInvalidModeArgument_Negative/0_android_hardware_dumpstate_IDumpstateDevice_default

Change-Id: I1c89d7662351ffae5409c3f81b4360579fdc00ae
2023-03-27 12:07:24 +08:00
Wilson Sung
c705e81227 Merge "Move OTA context out of legacy folder" to master
Bug: 275143841
Test: OTA
Change-Id: I4774b7c48c075afc1b02d8c34fded212cd0efffb
2023-03-27 11:46:05 +08:00
Wilson Sung
6acea9d647 Move OTA context out of legacy folder
Bug: 275143841
Test: OTA
Change-Id: I4774b7c48c075afc1b02d8c34fded212cd0efffb
2023-03-27 11:44:51 +08:00
Dinesh Yadav
81ad90854c Merge "Add certificate & label for GCA-ENG & GCA-Next" into udc-d1-dev am: 4a01ae23ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22246482

Change-Id: Iee99f93a8a15d9f723d849f22565ce30ac552885
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:34:15 +00:00
Automerger Merge Worker
7f35172103 Merge "Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f am: bd22079636" 2023-03-27 03:33:59 +00:00
Neo Yu
d870375a14 Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f am: bd22079636
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22222570

Change-Id: Ib82e2caabcaea504cb673e1323795c728bbf3ead
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:33:56 +00:00
Neo Yu
879b137a93 Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f am: 70749d1b96
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22222570

Change-Id: I5d6c405caddfb607f0ab094c82e6344b1579c042
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:33:53 +00:00
Dinesh Yadav
4a01ae23ad Merge "Add certificate & label for GCA-ENG & GCA-Next" into udc-d1-dev 2023-03-27 03:13:24 +00:00
Neo Yu
58ff635b67 Remove the bug of hal_radioext_default because the fix is merged.
Bug: 274374768
Test: verify by test rom
Change-Id: Ia9665e5223997cf498f9320dfd0b1dbdacaae0b2
2023-03-27 11:08:25 +08:00
Neo Yu
bd22079636 Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22222570

Change-Id: I0fb5f8c60d68f9b33af85531c2865db2a20c1c93
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:07:44 +00:00
Neo Yu
70749d1b96 Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22222570

Change-Id: I2d2a07056322f6971050e9299e17201b95773eaf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:07:31 +00:00
Neo Yu
5b1689534f Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev 2023-03-27 02:36:56 +00:00
Gina Ko
ce85639700 Allow systemui to find cameraserver_service
avc:  denied  { find } for pid=2435 uid=10235 name=media.camera
scontext=u:r:systemui_app:s0:c235,c256,c512,c768
tcontext=u:object_r:cameraserver_service:s0 tclass=service_manager permissive=0

Bug: 272628174
Bug: 269964574
Bug: 274734888
Test: Manual. Able to turn on/off flashlight from QS.
Change-Id: Icedf70b06bd06eb5b819a00c9157b4f475e9a126
2023-03-25 00:18:23 -07:00
feiyuchen
f0dc7907b0 Allow camera HAL to access edgetpu_app_service
Today the EdgeTpu metrics logging library (used by EdgeTpu library used by camera HAL) has a dependency on edgetpu_app_service, in order to call its UserIsAuthorized API to know whether to log the metrics (We don't want to log metrics for 3P apps), see b/275016466.

This is not ideal, because strictly speaking, camera HAL doesn't need such dependency.

Still, this is fine and there is no security risk, because today even untrusted apps can call edgetpu_app_service: http://cs/android-internal/device/google/gs-common/edgetpu/sepolicy/untrusted_app_all.te;l=2;rcl=f4b62d12c171d4e294d8251e34197ab555c40673

Bug: 266084950
Test: Just mm
Change-Id: I6c0e4411370e4b300b9ceb3ad804688d873371cd
2023-03-24 17:01:49 +00:00
Dinesh Yadav
84aa699ac8 Add certificate & label for GCA-ENG & GCA-Next
This commit makes following changes:
- Add selinux policies for GCA-Eng & GCA-Next to access GXP device &
edgetpu services.
- Refactor code to push policies for Google Camera app from
legacy/whitechapel_pro/* to vendor/*

Tested:
- flashed both GCA-Eng & GCA-Next apps and observed no crashes due to gxp or edgetpu.
- scontext changed from "untrusted_app_32" to "debug_camera_app" in both cases.

Bug: 264490031
Change-Id: I51f69168eebd6c7e54e512b7abde8dd6bbe7c443
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-03-24 12:56:53 +00:00
Nicolas Geoffray
af3702bffd Remove old debug map entries.
Bug: 264483352
Change-Id: Ie47107328f58dc4f1d4070e93c0cd09e88cee021
2023-03-24 08:16:00 +00:00
Automerger Merge Worker
c9f1b9e1eb Merge changes from topic "am-d3a7fa5895ee4cec8bfdf44b308cc221"
* changes:
  [automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1 -s ours am: d2ec06c722 -s ours
  [automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da -s ours am: 24656c3354 -s ours
2023-03-24 07:05:47 +00:00
Adam Shih
0253a82992 [automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1 -s ours am: d2ec06c722 -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: Ibe3213924821184c0aaea408646a9fddf24fec28
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 07:05:36 +00:00
Adam Shih
a21760aee5 [automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da -s ours am: 24656c3354 -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: Id56ab87ccba7c0554bcdf08f72d1989b3ba2204e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 07:05:35 +00:00
Adam Shih
6e634640d9 [automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1 -s ours am: ebc5ee8dab -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: I9ac1838eccd3d571ca85855884e9542353d8e484
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 07:05:29 +00:00
Adam Shih
8ba9109c37 [automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da -s ours am: 79ea18119e -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: If93f6a1a2ebba149bcb8f208a2d7bc84251876ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 07:05:27 +00:00
Adam Shih
ebc5ee8dab [automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1 -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: I6d02ee84161d92b4b2723cf6b08ccc76bc51ab81
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 06:23:08 +00:00
Adam Shih
79ea18119e [automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: Ia5202a87a85fa610fc08f0b9ec8be23592c98585
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 06:23:07 +00:00
Adam Shih
d2ec06c722 [automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1 -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: I0318c2e1d5b68b41634d5a51528c0322718325da
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 06:23:04 +00:00
Adam Shih
24656c3354 [automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: Iadaf733efce7927fe53d7228ccd8d088717cf45a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 06:23:03 +00:00
Adam Shih
2b921528f1 Merge "Move pixel dumpstate to gs-common" into udc-dev 2023-03-24 05:54:52 +00:00
TreeHugger Robot
36dba99911 Merge "Update SELinux error" into udc-d1-dev am: b5a5ffb5e7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236036

Change-Id: I9fefd92f37973c746ad518c6f5d74d993a310fec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 05:23:48 +00:00
Darren Hsu
fa57721d19 sepolicy: remove power stats from bug map am: 2965ba405c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236038

Change-Id: I4c17a46bc4749812b0a15f19e54c48edc42bd9c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 05:23:35 +00:00
TreeHugger Robot
b5a5ffb5e7 Merge "Update SELinux error" into udc-d1-dev 2023-03-24 05:07:42 +00:00
Darren Hsu
2965ba405c sepolicy: remove power stats from bug map
Bug: 272166847
Test: N/A
Change-Id: If920d18418f87f14a1826dbe061cef4632a9646f
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-03-24 11:43:42 +08:00
Wilson Sung
599f4f5382 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 275001641
Test: scanBugreport
Bug: 268566481
Test: scanAvcDeniedLogRightAfterReboot
Bug: 268566481
Change-Id: I5a7ea66483985b6ca99162666d155fef69d65360
2023-03-24 11:11:17 +08:00
Automerger Merge Worker
5333bed98e Merge "Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3 am: 4f15bf412d" 2023-03-24 03:09:25 +00:00
KRIS CHEN
30adddd3c0 Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3 am: 4f15bf412d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22178643

Change-Id: Ic65859abe754b1340d414fe471d74f959745e1ac
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 03:09:06 +00:00
KRIS CHEN
355457bf9d Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3 am: 24b32ddd4c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22178643

Change-Id: I0b1312780a03417859f9203ee8e1d34bca1ec2a4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 03:09:02 +00:00
Adam Shih
8538fd33da Move pixel dumpstate to gs-common
Bug: 240530709
Test: adb bugreport
Change-Id: I10f98673ea507f841d9d3f33d737c4e73c1b5b19
Merged-In: I4c46a2495ea07b9e44f56c4c6be726621e0ebf65
2023-03-24 02:55:51 +00:00
KRIS CHEN
24b32ddd4c Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22178643

Change-Id: I6fce057e9a6aef6d370bbf820818761fee8e615b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 02:41:38 +00:00
KRIS CHEN
4f15bf412d Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22178643

Change-Id: Ic8a12d3e5a4d79ef5edbe17fc340c54760cf8998
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 02:41:26 +00:00
KRIS CHEN
dba88b81d3 Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev 2023-03-24 02:06:37 +00:00
Darren Hsu
1e254e01b3 Merge "Revert "Enforce system ui app"" into udc-d1-dev am: 128550da69
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22225579

Change-Id: Ica4b4787254f02f8c7fa361b238197918d1b4404
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 01:30:58 +00:00
Darren Hsu
128550da69 Merge "Revert "Enforce system ui app"" into udc-d1-dev 2023-03-24 00:48:36 +00:00
Dave Mankoff
eeeae0265a Revert "Enforce system ui app"
This reverts commit ba953cdb9a.

Reason for revert: http://b/274366326#comment22. We can check this back in once we know what's going on.

Bug: 274366326
Bug: 264266705

Change-Id: I879cdec377e71af9142c82078bd3c022295c98c5
2023-03-23 19:44:22 +00:00
neoyu
44ee5a2fb2 sepolicy: allow hal_radioext_default binder call with servicemanager
avc: denied { call } for comm="binder:795_2" scontext=u:r:hal_radioext_default:s0 tcontext=u:r:servicemanager:s0 tclass=binder permissive=0

Bug: 274374768
Test: verify by test rom
Change-Id: I31cfbd234756fdc41663cec766f6b3bf23063bc7
2023-03-24 02:30:44 +08:00
TreeHugger Robot
8aa4f265eb [automerger skipped] Merge "Revert "Move pixel dumpstate to gs-common"" into udc-dev am: 3fae47e04b am: e12572cc98 -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 9844033c0a is already in history. Merged-In was found from reverted change.

Reverted change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22188471

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22215371

Change-Id: I90e20e3eb64f6fca00fd5818f923a9cc5fdf2a11
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 09:01:05 +00:00
Mark Chang
75f77b7bc6 Merge "Add IScreenProtectorDetectorService policy for systemui_app." into udc-d1-dev am: 3c027fdc6e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22197842

Change-Id: I084554e9af7107be6c13aace51cab06c4bf614b0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 09:00:24 +00:00
TreeHugger Robot
e646905a73 [automerger skipped] Merge "Revert "Move pixel dumpstate to gs-common"" into udc-dev am: 3fae47e04b am: 24536aa24c -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 9844033c0a is already in history. Merged-In was found from reverted change.

Reverted change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22188471

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22215371

Change-Id: I95db412852e139f1ddc4f3790d1ce65adcf87eab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 08:59:54 +00:00
Mark Chang
3c027fdc6e Merge "Add IScreenProtectorDetectorService policy for systemui_app." into udc-d1-dev 2023-03-23 08:30:24 +00:00
TreeHugger Robot
e12572cc98 Merge "Revert "Move pixel dumpstate to gs-common"" into udc-dev am: 3fae47e04b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22215371

Change-Id: Ie6930def51520969754a9f2235b02c8142b808aa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 08:08:01 +00:00
TreeHugger Robot
24536aa24c Merge "Revert "Move pixel dumpstate to gs-common"" into udc-dev am: 3fae47e04b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22215371

Change-Id: I3b6ed885d80985c85846b1ec6627c093ba94431f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 08:07:36 +00:00
TreeHugger Robot
48b6856587 Merge "sepolicy: label odpm paths for system suspend" into udc-d1-dev am: b76a3b6257
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22189946

Change-Id: I16131bd8b5cde5325378a6f22bca3042dd1fdf05
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 07:46:35 +00:00
Andy Hsu
88d801e092 Merge "Add SELinux policy to allow GCARelease and GCADogfood to access PowerHAL." into udc-d1-dev am: 93e86449e5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22215364

Change-Id: Ic14bcd44370d4dc064537b2ac888677985d5cf12
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 07:43:50 +00:00
TreeHugger Robot
3fae47e04b Merge "Revert "Move pixel dumpstate to gs-common"" into udc-dev 2023-03-23 07:24:01 +00:00
TreeHugger Robot
b76a3b6257 Merge "sepolicy: label odpm paths for system suspend" into udc-d1-dev 2023-03-23 07:19:55 +00:00
Andy Hsu
93e86449e5 Merge "Add SELinux policy to allow GCARelease and GCADogfood to access PowerHAL." into udc-d1-dev 2023-03-23 07:01:32 +00:00
Adam Shih
7a621bab25 [automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 0c17644417 am: cad969da74 -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22188471

Change-Id: I35b1da6dec44db016dc45bb659f5cff7e99dd935
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 06:48:47 +00:00
Andy Hsu
9c91ba1a2f Add SELinux policy to allow GCARelease and GCADogfood to access PowerHAL.
Note that this only adds permission to GCARelease and GCADogfood, while GCANext and GCAEng are still untrusted app on zuma now and after this change GCANext and GCAEng will still be denied.

Bug: 264490031

Test: Portrait processing in GCARelease didn't get denial message when accessing PowerHAL after this change  (https://cnsviewer-static.corp.google.com/cns/md-d/home/pixel-camera-data-readers/acat/hwandy/ag/22215364?user=pixel-camera-data-readers).

Change-Id: Ia4a4c2f24215b9da9db7985cf67112997df355fa
2023-03-23 06:41:13 +00:00
Adam Shih
095b07bfab [automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 0c17644417 am: ac0bb620df -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 9844033c0a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22188471

Change-Id: Id7f5cca3a18ffad1364468aab16c456cff2c2086
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 06:27:48 +00:00
Darren Hsu
8e028f0a03 sepolicy: label odpm paths for system suspend
Bug: 272166423
Test: run singleCommand pts -m PtsSELinuxTestCases
Change-Id: I0295cc09cd8eb46b19edcec0d74440e497440423
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-03-23 14:13:43 +08:00
Wilson Sung
3e68836e43 Revert "Move pixel dumpstate to gs-common"
Revert submission 22188471-dumpstate aidl

Reason for revert: Build break

Reverted changes: /q/submissionid:22188471-dumpstate+aidl
Bug: 274858145

Change-Id: I757111541257eecd4936572376fe42a4c866a1d6
2023-03-23 05:58:12 +00:00
Adam Shih
ac0bb620df Merge "Move pixel dumpstate to gs-common" into udc-dev am: 0c17644417
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22188471

Change-Id: I254abc02ecf38455c75258888fd3b9c948cbcee5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 05:53:01 +00:00
Adam Shih
cad969da74 Merge "Move pixel dumpstate to gs-common" into udc-dev am: 0c17644417
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22188471

Change-Id: I58ded180038a8aa507095d31a069547b7f02efea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 05:52:55 +00:00
Adam Shih
0c17644417 Merge "Move pixel dumpstate to gs-common" into udc-dev 2023-03-23 04:39:46 +00:00
TreeHugger Robot
9cd5fd2ec8 Merge "Enforce bootdevice_sysdev" into udc-d1-dev am: 0b1499354d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22185173

Change-Id: I0765dc38aa14480ba01e067290629b2be5d392a6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 04:19:31 +00:00
TreeHugger Robot
943e5e1ba8 Merge "Enforce systesm_app" into udc-d1-dev am: 75b82f7092
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22185176

Change-Id: I5792118ba1f994613c334c8ecd056c896598d116
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 04:17:55 +00:00
TreeHugger Robot
ee84f470bf Merge "Update SELinux error" into udc-d1-dev am: a8dfe1fd3c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22185174

Change-Id: I0d15f92b5a035915d37de6a750f53d3c5351af64
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 04:16:47 +00:00
Miranda Kephart
04ac3ce7f5 Fix screenshot shutter sound on P23 devices am: 8cc50336c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22200827

Change-Id: I1bc148a562bc22bdab4be3984f1394ecf0da364f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-23 04:13:55 +00:00
TreeHugger Robot
0b1499354d Merge "Enforce bootdevice_sysdev" into udc-d1-dev 2023-03-23 03:36:47 +00:00
TreeHugger Robot
75b82f7092 Merge "Enforce systesm_app" into udc-d1-dev 2023-03-23 03:32:48 +00:00
TreeHugger Robot
a8dfe1fd3c Merge "Update SELinux error" into udc-d1-dev 2023-03-23 03:27:12 +00:00
Adam Shih
4154c957c5 Merge "Move pixel dumpstate to gs-common" 2023-03-23 02:29:30 +00:00
Miranda Kephart
8cc50336c8 Fix screenshot shutter sound on P23 devices
SystemUI didn't have permission to access media server or the audio
server. Looks like both are required (and sufficient).

Bug: 273688513
Bug: 272628174
Fix: 273688513
Test: manual; take a screenshot with ringer on and verify it
makes a sound

Change-Id: Ibbe54db8cbf78ed199cb329804221709a2822242
2023-03-22 18:40:47 +00:00
Welly Hsu
7f8e10c54a Remove euiccpixel_app dontaudit from gmscore_app am: a133586e4e am: cccbbb12e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22188469

Change-Id: Ibf39c45ff3c91e32fa257587bf5f73708cce421e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-22 15:15:50 +00:00
Welly Hsu
a6c5340c93 Remove euiccpixel_app dontaudit from gmscore_app am: a133586e4e am: e0adad9eb0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22188469

Change-Id: I738eb4c90dbefcbe3fc78aba980b96206ee9ddb5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-22 15:15:22 +00:00
Welly Hsu
cccbbb12e4 Remove euiccpixel_app dontaudit from gmscore_app am: a133586e4e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22188469

Change-Id: If322b434699549b08e6a081207662a4ca4717e85
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-22 14:47:47 +00:00
Welly Hsu
e0adad9eb0 Remove euiccpixel_app dontaudit from gmscore_app am: a133586e4e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22188469

Change-Id: I48f0e1eb633c44a4c6445c6423d10e500be6f6c7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-22 14:41:23 +00:00
Mark Chang
9e2ce3d5c0 Add IScreenProtectorDetectorService policy for systemui_app.
Bug: 260302317
Test: system ui app successfully started.
Change-Id: Ibbeab03e738fbbd4103bb5bf4e9f6bbd2998cd29
Signed-off-by: Mark Chang <changmark@google.com>
2023-03-22 11:53:18 +00:00
Wilson Sung
6bf3029916 Enforce systesm_app
Fix: 260768379
Fix: 260922048
Fix: 264490076
Test: boot-to-home, no related avc error
Change-Id: If9ead09340f5d810ec549f4c83015f3301f1113c
2023-03-22 16:01:09 +08:00
Wilson Sung
a1739828f2 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 274727372
Bug: 274727542
Test: scanBugreport
Bug: 274727542
Bug: 268566481
Test: scanAvcDeniedLogRightAfterReboot
Bug: 274727542
Bug: 268566481
Change-Id: Ie846f2f7146e52c4e094d9fd7cfa1fa68e3e21df
2023-03-22 15:38:52 +08:00
Wilson Sung
503ae703df Enforce bootdevice_sysdev
Fix: 264489743
Test: boot-to-home and no avc errors
Change-Id: I14648c8d7b1b334c3d02971ffbf20b1f9b5a9354
2023-03-22 15:35:45 +08:00
TreeHugger Robot
ab7303cbfd Merge "[SELinux] remove uwb remaining tracking denials" into udc-d1-dev am: a112b65748
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22188470

Change-Id: Ie921139dc13515d60f00eec16150035c53d13596
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-22 06:14:17 +00:00
TreeHugger Robot
a112b65748 Merge "[SELinux] remove uwb remaining tracking denials" into udc-d1-dev 2023-03-22 05:30:57 +00:00
Welly Hsu
a133586e4e Remove euiccpixel_app dontaudit from gmscore_app
bug: 265383359
Change-Id: I6ee7d37187725408e0f443a40affe4c4e50dac91
2023-03-22 13:27:32 +08:00
Adam Shih
ee45cfea78 Move pixel dumpstate to gs-common
Bug: 240530709
Test: adb bugreport
Change-Id: I4c46a2495ea07b9e44f56c4c6be726621e0ebf65
Merged-In: I4c46a2495ea07b9e44f56c4c6be726621e0ebf65
2023-03-22 05:06:27 +00:00
Adam Shih
9844033c0a Move pixel dumpstate to gs-common
Bug: 240530709
Test: adb bugreport
Change-Id: I4c46a2495ea07b9e44f56c4c6be726621e0ebf65
2023-03-22 13:05:44 +08:00
TreeHugger Robot
7cd8b7fd2f Merge "change device type for /dev/stmvl53l1_ranging" into udc-d1-dev am: 03d439f0e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22167058

Change-Id: I40aab624c447d94be30d25ea2b256f289c576f7e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-22 03:09:42 +00:00
Rex Lin
e95656d6fc [SELinux] remove uwb remaining tracking denials
- hal_uwb_vendor_default
- uwb_vendor_app

Bug: 264489190
Bug: 264489787
Test: remove denials and no avc lob observed and ranging works
Change-Id: I5fd7f5b6bed8f819b2d5812c882ac596f1f1871b
Signed-off-by: Rex Lin <rexcylin@google.com>
2023-03-22 11:07:51 +08:00
TreeHugger Robot
03d439f0e1 Merge "change device type for /dev/stmvl53l1_ranging" into udc-d1-dev 2023-03-22 02:36:37 +00:00
Nicole Lee
fd92d51b74 Move logger_app dontaudit items out of tracking_denials am: aa4b374120 am: 0a273483f4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22173747

Change-Id: I9cf9c181a2365565495ffffe6271ab2f327de600
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-22 00:56:45 +00:00
Nicole Lee
838c8d7fca Move logger_app dontaudit items out of tracking_denials am: aa4b374120 am: f23893994b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22173747

Change-Id: I1ae9674d9d1b566cb8b2711f766aa3536bb5974f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-22 00:17:36 +00:00
Nicole Lee
f23893994b Move logger_app dontaudit items out of tracking_denials am: aa4b374120
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22173747

Change-Id: If3e54f3595eac5942175b29250ca6888471876ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-22 00:17:23 +00:00
Wilson Sung
0a18e71a97 Enforce untrusted_app am: e85dc12d69
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22184422

Change-Id: I7504170b28c2869fb8ce72ec544584ae7f9eb918
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-22 00:16:49 +00:00
Nicole Lee
0a273483f4 Move logger_app dontaudit items out of tracking_denials am: aa4b374120
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22173747

Change-Id: I768ae20c3bd1048692bf926b9ce65cb7f27ca4e0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-22 00:15:57 +00:00
Wilson Sung
e85dc12d69 Enforce untrusted_app
Fix: 264489681
Test: boot-to-home and no untrusted_app avc error
Change-Id: Ic7a0fac4893265b4abde55d0a65372419fc09392
2023-03-22 01:38:31 +08:00
Joerg Wagner
fcfd90a13e [automerger skipped] Merge "Update Mali DDK to r40 : Additional SELinux settings" into udc-d1-dev am: 6351914802 -s ours
am skip reason: Merged-In I785106b6d2d05e21bf60fcd6da3d716b32e1bc1d with SHA-1 6834d6f59f is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21750299

Change-Id: I3beea5355b52767877126c8804b93fe52a34a502
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 15:09:40 +00:00
Jörg Wagner
7dab59708f [automerger skipped] Update Mali DDK to r40 : Additional SELinux settings am: d8c6712f5b -s ours
am skip reason: Merged-In I785106b6d2d05e21bf60fcd6da3d716b32e1bc1d with SHA-1 6834d6f59f is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21750299

Change-Id: Ied37dcf7f91f68826bfa28807ef1886a03bc5086
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 15:09:39 +00:00
Joerg Wagner
6351914802 Merge "Update Mali DDK to r40 : Additional SELinux settings" into udc-d1-dev 2023-03-21 14:36:16 +00:00
Kris Chen
0ea531896c Allow fingerprint hal to read sysfs_leds
Fix the following avc denials:
avc: denied { search } for name="backlight" dev="sysfs" ino=79316
scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_leds:s0
tclass=dir permissive=1

avc: denied { read } for name="state" dev="sysfs" ino=79365
scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_leds:s0
tclass=file permissive=1

Bug: 271072126
Test: Authenticate fingerprint.
Change-Id: Ibefbcefc005ab2cec7c417f197fd134b154ed9a1
2023-03-21 12:18:59 +00:00
JimiChen
ee1df407be change device type for /dev/stmvl53l1_ranging
It was a rls_device. Move to lwis_device now.

Bug: 274552433
Test: launch GCA
Change-Id: Id920583cc06b09063de85b160c12a5c3a5468c11
2023-03-21 20:00:00 +08:00
Nicole Lee
aa4b374120 Move logger_app dontaudit items out of tracking_denials
Bug: 269383459
Test: Open Pixel Logger and check logs
Change-Id: Id5b89a7eeaa5b06539113d4c86c64d6022080949
2023-03-21 10:11:58 +00:00
TreeHugger Robot
d5ac6d9962 Merge "Allow regmap debugfs permission" into udc-d1-dev am: 504b4cc2eb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22133445

Change-Id: I483874eb28c4db9377ce3d7b616262d81d4e70ab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 08:27:11 +00:00
Donnie Pollitz
b21ac1be87 Merge "Removing audit for system_suspend tee" into udc-d1-dev am: 4ce51ebfba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22160088

Change-Id: Icf7daf3980b75f38676632d2dad62b7c4390c27c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 08:26:45 +00:00
TreeHugger Robot
504b4cc2eb Merge "Allow regmap debugfs permission" into udc-d1-dev 2023-03-21 08:00:49 +00:00
Donnie Pollitz
4ce51ebfba Merge "Removing audit for system_suspend tee" into udc-d1-dev 2023-03-21 07:55:13 +00:00
Robert Lee
78603ddb7e Allow regmap debugfs permission
auditd  : type=1400 audit(0.0:7): avc: denied { search } for comm="kworker/u18:1" name="regmap" dev="debugfs" ino=1049 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_regmap_debugfs:s0 tclass=dir permissive=0

Bug: 273891639
Test: builds
Change-Id: I9700d34e4d8a9d96d904fe5119a8bf4601bf8ea6
Signed-off-by: Robert Lee <lerobert@google.com>
2023-03-21 14:17:00 +08:00
TreeHugger Robot
2ecbb84226 Merge "Allow systemui find radio_service" into udc-d1-dev am: 7ca4d7ceb7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22161791

Change-Id: I281b02bfe57536093f3fd1821ad6b2d31e2a7ba0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 03:35:10 +00:00
TreeHugger Robot
7ca4d7ceb7 Merge "Allow systemui find radio_service" into udc-d1-dev 2023-03-21 03:19:59 +00:00
Chung-Kai (Michael) Mei
d39247b7cc [automerger skipped] Merge "genfs_contexts: fix path for i2c peripheral device [DO NOT MERGE]" into udc-d1-dev am: 4766cf456b -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22133469

Change-Id: Iccf548638503bd9883d5bfe3c83587b77caf2792
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 03:18:41 +00:00
Chungkai Mei
d3d6dc3c17 [automerger skipped] genfs_contexts: fix path for i2c peripheral device [DO NOT MERGE] am: 5bedd6391a -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22133469

Change-Id: I949c40074671b51f5cbc2f6806fce7dbca93a77a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 03:18:38 +00:00
Chung-Kai (Michael) Mei
4766cf456b Merge "genfs_contexts: fix path for i2c peripheral device [DO NOT MERGE]" into udc-d1-dev 2023-03-21 02:31:55 +00:00
Darren Hsu
ba74fadb54 dumpstate: Suppress avc denial for power stats am: 0198a5224a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22119720

Change-Id: Ic216d075f84190d5d2c66cd2c7e46efc65d40989
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-21 02:20:37 +00:00
Wilson Sung
aa45dde84e Allow systemui find radio_service
avc:  denied  { find } for pid=1810 uid=10231 name=phone scontext=u:r:systemui_app:s0:c231,c256,c512,c768 tcontext=u:object_r:radio_service:s0 tclass=service_manager permissive=0

Bug: 272628174
Bug: 272628396
Bug: 273674238
Test: boot-to-home and sim icon showed up
Change-Id: Ia7f84f53f131d868d356fd6d358188748c723757
2023-03-21 02:13:46 +00:00
Chungkai Mei
5bedd6391a genfs_contexts: fix path for i2c peripheral device [DO NOT MERGE]
correct path for i2c devices

Test: without avc denial when booting
Bug: 240641235
Change-Id: Iabb7bdac51c2877a9b254bb287361c58f16a353f
Signed-off-by: Chungkai Mei <chungkai@google.com>
2023-03-21 01:17:40 +00:00
Donnie Pollitz
8034369bdd Removing audit for system_suspend tee
Background:
* wakelock_use(tee) was added in previous CL: http://go/ag/21082565

Bug: 263305203
Test: Ran SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I6e8a6796ef5a7156b89ba89c74430f368727e2b8
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-03-20 11:26:10 +01:00
TreeHugger Robot
353d475c50 Merge "Update SELinux error" into udc-d1-dev am: d5ec3f993f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22155391

Change-Id: I9799ad1d8ffecc7d945b8c55455d3287191a7ef3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-20 07:15:41 +00:00
Darren Hsu
0198a5224a dumpstate: Suppress avc denial for power stats
Bug: 273639264
Test: presubmit test
Change-Id: I0b1d8b7516dc9bdfae6b8bca644b6ab52b971615
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-03-20 15:09:41 +08:00
TreeHugger Robot
d5ec3f993f Merge "Update SELinux error" into udc-d1-dev 2023-03-20 06:34:25 +00:00
TreeHugger Robot
120feae613 Merge "Remove insmod obsolete denials" into udc-d1-dev am: 155e0a8f36
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22155392

Change-Id: I6d427fc6d2fee9ff76ecb1f20e43bb87268022ee
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-20 06:01:36 +00:00
TreeHugger Robot
155e0a8f36 Merge "Remove insmod obsolete denials" into udc-d1-dev 2023-03-20 05:25:02 +00:00
Welly Hsu
3e9dfc011a Move euiccpixel_app dontaudit items out of tracking_denials am: 97b397fc5e am: 7884ddda0b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22133463

Change-Id: I7904d64315b40ac30fa087ceff97efeeb3840153
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-20 05:05:12 +00:00
Welly Hsu
7d03b1841e Move euiccpixel_app dontaudit items out of tracking_denials am: 97b397fc5e am: a8df97fe32
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22133463

Change-Id: I6992f0c4bb70f9e3044fa80f8aed487fcfc1ae89
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-20 05:03:13 +00:00
Welly Hsu
a8df97fe32 Move euiccpixel_app dontaudit items out of tracking_denials am: 97b397fc5e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22133463

Change-Id: I1e3fdf46b8d29354b2b231457edd9b2e90126474
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-20 04:30:27 +00:00
Welly Hsu
7884ddda0b Move euiccpixel_app dontaudit items out of tracking_denials am: 97b397fc5e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22133463

Change-Id: Ief757562cd3634388481d299e822229455476788
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-20 04:30:24 +00:00
Wilson Sung
f19431da02 Remove insmod obsolete denials
Fix: 260522378
Fix: 272166723
Change-Id: I70956498f66643d0abc2496d3bdcd140e7ab8f7e
2023-03-20 12:07:21 +08:00
Wilson Sung
2eed10acc4 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 274374768
Bug: 274374722
Test: scanBugreport
Bug: 274374769
Bug: 274374768
Bug: 274374992
Bug: 274374722
Bug: 268566481
Bug: 273639264
Test: scanAvcDeniedLogRightAfterReboot
Bug: 274374768
Bug: 274374722
Bug: 268566481
Change-Id: I4ebac8c48937557b8d8544ecfe4da3ac71ecf64e
2023-03-20 12:05:59 +08:00
Welly Hsu
97b397fc5e Move euiccpixel_app dontaudit items out of tracking_denials
bug: 265286368
bug: 269218505
Change-Id: I7dec7ad23ee48cf719d6e7442e60ddcc13c02a8f
2023-03-20 10:13:05 +08:00
TreeHugger Robot
164cd42a0d Merge "[SELinux] remove hal_uwb_default tracking denials" into udc-d1-dev am: 14c05d48e9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22101146

Change-Id: Ic21ef826ea07b4341a6f0a3cc984bbade54ec0cd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-20 02:08:46 +00:00
TreeHugger Robot
14c05d48e9 Merge "[SELinux] remove hal_uwb_default tracking denials" into udc-d1-dev 2023-03-20 01:41:49 +00:00
Mahesh Kallelil
4127a32c5f Merge "Update selinux-policy for ModemService." into udc-d1-dev am: 6636bd227b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22113396

Change-Id: Icab142ac5838ec1a7024125e695a207b464dcfc4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 23:12:13 +00:00
Mahesh Kallelil
6636bd227b Merge "Update selinux-policy for ModemService." into udc-d1-dev 2023-03-16 22:43:34 +00:00
Jayachandran C
6e45deae41 Merge "Allow radio to find and invoke Audio HAL for updating the network info during improved WiFi calling" into udc-dev am: 3cda1dd51b am: a7ec5ac379
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22067882

Change-Id: I3da5debafb7cfd31122b639cb234b0798eab595e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 21:23:44 +00:00
Jayachandran C
db9264e266 Merge "Allow radio to find and invoke Audio HAL for updating the network info during improved WiFi calling" into udc-dev am: 3cda1dd51b am: f99fed1f87
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22067882

Change-Id: Ia54b94c99a1124dcd782a79f30eacbb31beca35a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 21:17:16 +00:00
Jayachandran C
a7ec5ac379 Merge "Allow radio to find and invoke Audio HAL for updating the network info during improved WiFi calling" into udc-dev am: 3cda1dd51b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22067882

Change-Id: I676634d568c0de4a029dc4609ceda2c38f56fce9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 20:20:07 +00:00
Jayachandran C
f99fed1f87 Merge "Allow radio to find and invoke Audio HAL for updating the network info during improved WiFi calling" into udc-dev am: 3cda1dd51b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22067882

Change-Id: I6b1ef7b352b69b4988ac6a6d29f8918b5fb3ed84
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 20:19:53 +00:00
Jayachandran C
3cda1dd51b Merge "Allow radio to find and invoke Audio HAL for updating the network info during improved WiFi calling" into udc-dev 2023-03-16 19:51:49 +00:00
Donnie Pollitz
8ab28ee02f Merge "Remove hal_bootctl_default audits" into udc-d1-dev am: e8682690b2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21804341

Change-Id: I725ac9f6fe40d4997738dfead624d1cc24753225
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 12:27:16 +00:00
TreeHugger Robot
eccb7ad20b Merge "allow vendor init to set vendor_camera_prop" into udc-d1-dev am: 1605d7979d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22113945

Change-Id: Ibdab8601f0d98e2b11640b5434ff49c87953d05b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 12:26:53 +00:00
Donnie Pollitz
e8682690b2 Merge "Remove hal_bootctl_default audits" into udc-d1-dev 2023-03-16 12:03:04 +00:00
TreeHugger Robot
1605d7979d Merge "allow vendor init to set vendor_camera_prop" into udc-d1-dev 2023-03-16 11:57:14 +00:00
Rex Lin
a41dd62c1b [SELinux] remove hal_uwb_default tracking denials
Bug: 267260951
Bug: 264489750
Bug: 273639365
Test: http://ab/I19700010140844408
Change-Id: Ife918a080a4b0c716a46c78730965b5d7eb3f757
Signed-off-by: Rex Lin <rexcylin@google.com>
2023-03-16 14:51:12 +08:00
Mahesh Kallelil
df7ece2441 Update selinux-policy for ModemService.
Allowing the ModemService write access to the sysfs attribute
cp_temp which is used to update the thermal zones.

Test: Verified sysfs attribute security labels
Bug: 267485434
Change-Id: I8361e53f4e6aa82e6dc78e94af71ee26c06fb2f5
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2023-03-16 05:35:51 +00:00
Speth Chang
3add5fbcec allow vendor init to set vendor_camera_prop
03-16 10:29:21.324     1     1 W /system/bin/init:
type=1107 audit(0.0:5): uid=0 auid=4294967295 ses=4294967295
subj=u:r:init:s0 msg='avc: denied { set } for
property=vendor.camera.multicam.enable_p23_multicam pid=1
uid=0 gid=0 scontext=u:r:vendor_init:s0
tcontext=u:object_r:vendor_camera_prop:s0
tclass=property_service permissive=0' bug=b/267714573

Bug: 273854225
Test: check log, GCA
Change-Id: I1c5fdff3b9978c494be9f513e1770f26804ca132
2023-03-16 13:18:17 +08:00
Ken Yang
8c52169f18 Merge "SELinux: Remove charger_vendor.te" into udc-dev am: d9d0c0e471 am: 3ffebb1ce8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22099358

Change-Id: I6692234b169c305dd548e557fa3d67b4d17f5304
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 04:28:57 +00:00
Ken Yang
83b44caa1c Merge "SELinux: Remove charger_vendor.te" into udc-dev am: d9d0c0e471 am: 7c2b9b482e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22099358

Change-Id: I48a36edef89a45b5ac50d209b38784cdc381da77
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 04:08:38 +00:00
Ken Yang
7c2b9b482e Merge "SELinux: Remove charger_vendor.te" into udc-dev am: d9d0c0e471
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22099358

Change-Id: If63f0cc156d98db3ec2eb5ca4749a60e0b76a32c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 03:54:38 +00:00
Ken Yang
3ffebb1ce8 Merge "SELinux: Remove charger_vendor.te" into udc-dev am: d9d0c0e471
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22099358

Change-Id: Ibfc2d7bcfc8fb713f2f73f8f181e010bf706f3c1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 03:54:20 +00:00
Wilson Sung
f22692cf2f Merge "Remove obsolete denials" into udc-d1-dev am: 1efd7ed479
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22098963

Change-Id: I5ef264e899c434a9d6d39f70af1854cec7c1accc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 03:51:17 +00:00
Wilson Sung
1efd7ed479 Merge "Remove obsolete denials" into udc-d1-dev 2023-03-16 03:25:49 +00:00
Wilson Sung
7eaf780e42 Remove obsolete denials
Bug: 261933310
Test: take the bugreport and no incidentd avc error
Change-Id: I84274ed4c3b8c3d373a353f879cd7001b26c1703
2023-03-16 03:25:22 +00:00
TreeHugger Robot
18acd8cd02 Merge changes I7b641636,Iecbf6ff7 into udc-d1-dev am: 320064782b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22085771

Change-Id: I211dc0a0b0fcd8031d68d833b751cbad21eef8b1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 03:16:52 +00:00
Kris Chen
8f286ce919 enforce trusty_apploader am: b2f238ff01 am: 94dbd3352f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22096222

Change-Id: I2592d49f2fa61270225dccef2033c0528716986d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 03:16:43 +00:00
Kris Chen
0c4c497f9e enforce trusty_apploader am: b2f238ff01 am: b8419230f2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22096222

Change-Id: Icb5a11c030f0d9ca2b4edfd37c902618f5819f57
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 03:16:14 +00:00
Ken Yang
d9d0c0e471 Merge "SELinux: Remove charger_vendor.te" into udc-dev 2023-03-16 03:11:31 +00:00
TreeHugger Robot
320064782b Merge changes I7b641636,Iecbf6ff7 into udc-d1-dev
* changes:
  usb: remove bug number in bug_map
  usb: allow hal_usb_gadget_impl sysfs_batteryinfo permission
2023-03-16 03:07:04 +00:00
Kris Chen
b8419230f2 enforce trusty_apploader am: b2f238ff01
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22096222

Change-Id: I8f4e7f64b44b4c98a3ba8f75cd254f87548325da
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 02:41:47 +00:00
Kris Chen
94dbd3352f enforce trusty_apploader am: b2f238ff01
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22096222

Change-Id: I4661f365aac362da5c78070fd50d44c8198362c9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 02:41:42 +00:00
Neo Yu
7c362daebe Merge "remove tracking_denials for hal_radioext_default.te" into udc-dev am: ba6c42df00 am: c3675e5a3d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22096224

Change-Id: I41bad4281c4ad8b4c75e6dbcf863abd48baa026e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 02:07:47 +00:00
Tom Huang
f58b83f480 Merge "BT: remove tracking denials hal_bluetooth_btlinux" into udc-dev am: c200250bfb am: a926b7b0f0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22085790

Change-Id: I4dd5d95cc7b11824c4499d32386b19031ee1abc4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 02:07:18 +00:00
Kris Chen
b2f238ff01 enforce trusty_apploader
Bug: 264489569
Test: Boot
Change-Id: I75f73d76f535a5755a164725c606872561461487
2023-03-16 02:06:43 +00:00
TreeHugger Robot
ae3571ee44 Merge "Remove hal_cas_default dontaudit" into udc-d1-dev am: 793698a58d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22085769

Change-Id: I23841ed54392b89f3c1a1b17ce7d3d9e1c8d4fcd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 02:06:36 +00:00
TreeHugger Robot
e338ca0f98 Merge "Enforce vendor_init" into udc-d1-dev am: 8570030518
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22100402

Change-Id: Id6e5d06dd06328a1291de963469255ed64dc99f9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 02:05:55 +00:00
Neo Yu
541c29655d Merge "remove tracking_denials for hal_radioext_default.te" into udc-dev am: ba6c42df00 am: 2ffe76d869
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22096224

Change-Id: I840d8d3f11742cb5eafd77416ee268dbaf25c241
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 02:02:55 +00:00
Wilson Sung
4142cecd1a Enforce init am: c0c4ee3a9b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22098964

Change-Id: Ia79d840d91cd48928db76e7514bf62c850fa980b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 02:02:47 +00:00
Tom Huang
b21bb0e25f Merge "BT: remove tracking denials hal_bluetooth_btlinux" into udc-dev am: c200250bfb am: eada700f48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22085790

Change-Id: I03006441769b7712368cbe6fa2b1185c27c1c790
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 02:02:38 +00:00
Neo Yu
c3675e5a3d Merge "remove tracking_denials for hal_radioext_default.te" into udc-dev am: ba6c42df00
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22096224

Change-Id: Ib4ef07b70d69f11f1389da85176d10d791ef5929
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 01:26:55 +00:00
Neo Yu
2ffe76d869 Merge "remove tracking_denials for hal_radioext_default.te" into udc-dev am: ba6c42df00
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22096224

Change-Id: I571cd2c89363b29d579483b6300731f6aa0ca89a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 01:26:48 +00:00
Tom Huang
a926b7b0f0 Merge "BT: remove tracking denials hal_bluetooth_btlinux" into udc-dev am: c200250bfb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22085790

Change-Id: Id18125fdfeff9c271c7b0f9a67463b4da103367f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 01:26:39 +00:00
Tom Huang
eada700f48 Merge "BT: remove tracking denials hal_bluetooth_btlinux" into udc-dev am: c200250bfb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22085790

Change-Id: I522dad9cb4eb77983e5fb1783d43852950315b37
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-16 01:26:32 +00:00
Neo Yu
ba6c42df00 Merge "remove tracking_denials for hal_radioext_default.te" into udc-dev 2023-03-16 01:25:37 +00:00
Tom Huang
c200250bfb Merge "BT: remove tracking denials hal_bluetooth_btlinux" into udc-dev 2023-03-16 00:56:49 +00:00
TreeHugger Robot
793698a58d Merge "Remove hal_cas_default dontaudit" into udc-d1-dev 2023-03-16 00:55:54 +00:00
TreeHugger Robot
8570030518 Merge "Enforce vendor_init" into udc-d1-dev 2023-03-16 00:55:17 +00:00
Alice Sheng
c3288bb774 Merge "Add sepolicy for RA9530 nodes." 2023-03-15 17:57:24 +00:00
Wilson Sung
9781434612 Enforce vendor_init
Fix: 264490095
Test: boot-to-home
Change-Id: I612896a0da7e9e2fd60772cbbd4b439e4824d7bc
2023-03-16 00:23:53 +08:00
Wilson Sung
c0c4ee3a9b Enforce init
Fix: 264489678
Test: boot-to-home and no init avc error
Change-Id: I580f6d9af0874a1165c43a77008b43fab5d0091f
2023-03-16 00:06:35 +08:00
Ken Yang
8ff0eed309 SELinux: Remove charger_vendor.te
Bug: 264489675
Change-Id: I9ed521778291ea712ec4ef7f312ae890be3402e7
Signed-off-by: Ken Yang <yangken@google.com>
2023-03-15 15:34:23 +00:00
neoyu
4701e96275 remove tracking_denials for hal_radioext_default.te
The SELinux error has been fixed and this file could be removed.

Bug: 269813076
Test: build pass
Change-Id: I2dfcc00575a277ed7f020a9df8193a5f069d2ed9
2023-03-15 21:30:53 +08:00
Donnie Pollitz
bef163efd5 Remove hal_bootctl_default audits
* As of ToT, this denial is no longer occurring, removing don't audit.

Bug: 267843310
Test: Ran `adb shell dmesg | grep avc ; adb logcat -d | grep avc`

Change-Id: Id40709e436b9b21ad664148e25bed4eab1aff4ff
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-03-15 12:44:11 +00:00
Chien Kun Niu
8783417f2f usb: remove bug number in bug_map
Bug: 272166827
Test: Presubmit build Pass
Change-Id: I7b641636d52995dc9c098af6e7397702f0dcf4ab
2023-03-15 19:19:44 +08:00
Chien Kun Niu
28cc58257f usb: allow hal_usb_gadget_impl sysfs_batteryinfo permission
Allow hal_usb_gadget_imple sysfs_batteryinfo r_dir_perms and rw_file_perms

[    8.237410] [  T379] type=1400 audit(1678784127.396:4): avc: denied { search } for comm="HwBinder:762_1" name="power_supply" dev="sysfs" ino=73783 scontext=u:r:hal_usb_gadget_impl:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1
[    8.237556] [  T379] type=1400 audit(1678784127.396:5): avc: denied { read } for comm="HwBinder:762_1" name="usb_type" dev="sysfs" ino=73797 scontext=u:r:hal_usb_gadget_impl:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
[    8.237584] [  T379] type=1400 audit(1678784127.396:6): avc: denied { open } for comm="HwBinder:762_1" path="/sys/devices/platform/10cb0000.hsi2c/i2c-8/8-0025/power_supply/usb/usb_type" dev="sysfs" ino=73797 scontext=u:r:hal_usb_gadget_impl:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1
[    8.237603] [  T379] type=1400 audit(1678784127.396:7): avc: denied { getattr } for comm="HwBinder:762_1" path="/sys/devices/platform/10cb0000.hsi2c/i2c-8/8-0025/power_supply/usb/usb_type" dev="sysfs" ino=73797 scontext=u:r:hal_usb_gadget_impl:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1

Bug: 272166827
Test: Check avc denied log
Change-Id: Iecbf6ff712924b60ce186b75a76cf25f3b48e72d
2023-03-15 19:17:14 +08:00
Wilson Sung
8141ff4e3e Remove hal_cas_default dontaudit
Fix: 267260716
Test: take bugreport and no related avc error
Change-Id: If7a7b7f0395ef3a82d2f837ca2732e08f363e87c
2023-03-15 19:02:58 +08:00
Jayachandran C
8d1a560bf9 Allow radio to find and invoke Audio HAL for updating the network info during improved WiFi calling
This CL fixes the following denials
auditd  : avc:  denied  { find } for interface=vendor.google.whitechapel.audio.audioext::IAudioExt sid=u:r:radio:s0 pid=2676 scontext=u:r:radio:s0 tcontext=u:object_r:hal_audio_ext_hwservice:s0 tclass=hwservice_manager permissive=0
auditd  : type=1400 audit(0.0:2983): avc: denied { call } for comm="binder:2617_3" scontext=u:r:radio:s0 tcontext=u:r:hal_audio_default:s0 tclass=binder permissive=0

Bug: 267802258
Test: Live network testing and verified the AudioExt HAL message

Change-Id: Iffa2bcc9b8fa56c383cb765b7cbdf1ff667376c5
2023-03-15 08:22:09 +00:00
TreeHugger Robot
6b71ff0ee7 Merge "Enforce isolated_app and untrusted_app" into udc-d1-dev am: b6d212049b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22090887

Change-Id: I32ec107a0f0ca3baeff4306fb4977e55c615bf1c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 06:44:13 +00:00
TreeHugger Robot
b6d212049b Merge "Enforce isolated_app and untrusted_app" into udc-d1-dev 2023-03-15 06:03:04 +00:00
kuanyuhuang
605235f79c BT: remove tracking denials hal_bluetooth_btlinux
Local build with deleting tracking_denials/hal_bluetooth_btlinux.te
and adb shell getenforce ==> Enforcing.
Tested by BT funtions(playing music, share contacts, transfer file) and
no Bluetooth avc: denied logs.

Bug: 264489608
Test: local build
Change-Id: I1ba1868419d47b087ce96054a63a06b25484e0f5
2023-03-15 05:13:53 +00:00
Wilson Sung
863007e89d Update SELinux error am: 389ddb027e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22085787

Change-Id: I822ea9a885cb86293384fe631a3b6ed4367e4d23
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 05:12:42 +00:00
Wilson Sung
63a66ef59e Enforce isolated_app and untrusted_app
Fix: 264489642
Fix: 264972745
Fix: 267261265
Test: boot-to-home and no related avc error
Change-Id: I4770a076f6a5159db6ffea0661b52b449df9c55a
2023-03-15 12:24:43 +08:00
Wilson Sung
389ddb027e Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 273638876
Test: scanBugreport
Bug: 273639365
Bug: 273143844
Bug: 273639264
Bug: 273638940
Bug: 273638876
Test: scanAvcDeniedLogRightAfterReboot
Bug: 273638876
Bug: 268566481
Change-Id: I2229a7c7e29dad303f7ef60c8d7f770b6a77a044
2023-03-15 11:38:05 +08:00
TreeHugger Robot
e83033d9f1 Merge "sepolicy: label dsu and bci" into udc-d1-dev am: 35b10634bf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21981985

Change-Id: I0eb26b8dc03fdef37e8ff4e80d4024ce0485dfab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 03:15:50 +00:00
Quinn Yan
12f97aa2f6 Merge "Remove the tracking_denials for edgetpu project. Fix the wrong sysfs directory for edgetpu." into udc-dev am: fe4ffed5de am: e825edbf28
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22082013

Change-Id: Ifbe4b7d4486f14469060d1b3d0cf4f76988056aa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 03:13:52 +00:00
Dai Li
1a103b9a37 Merge "dma-heap: add dsp heap" into udc-dev am: b66e27f987 am: 518a025694
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21914488

Change-Id: Id357ed344f5d115745069a499a2b8a57d0151d21
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 03:09:00 +00:00
Quinn Yan
542f3553c7 Merge "Remove the tracking_denials for edgetpu project. Fix the wrong sysfs directory for edgetpu." into udc-dev am: fe4ffed5de am: b1ebacbd43
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22082013

Change-Id: I17f0e8c9a9d98a0b67a2c3dbdd4fa9c7be427626
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 03:02:33 +00:00
TreeHugger Robot
35b10634bf Merge "sepolicy: label dsu and bci" into udc-d1-dev 2023-03-15 02:28:38 +00:00
Quinn Yan
b1ebacbd43 Merge "Remove the tracking_denials for edgetpu project. Fix the wrong sysfs directory for edgetpu." into udc-dev am: fe4ffed5de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22082013

Change-Id: I22986f34b83c07bd53539b092d0388180a69afc5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 01:57:35 +00:00
Quinn Yan
e825edbf28 Merge "Remove the tracking_denials for edgetpu project. Fix the wrong sysfs directory for edgetpu." into udc-dev am: fe4ffed5de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22082013

Change-Id: I3a6e12bb4e7f9e81deb4b0cf9c1d59102370efef
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 01:42:42 +00:00
Quinn Yan
fe4ffed5de Merge "Remove the tracking_denials for edgetpu project. Fix the wrong sysfs directory for edgetpu." into udc-dev 2023-03-15 01:26:24 +00:00
Dai Li
518a025694 Merge "dma-heap: add dsp heap" into udc-dev am: b66e27f987
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21914488

Change-Id: I32b240372f25f8ae7546daa98acadd09b96562c2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 01:22:27 +00:00
Dai Li
878380aba8 Merge "dma-heap: add dsp heap" into udc-dev am: b66e27f987 am: 679670bfbc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21914488

Change-Id: Iaaea913a24b30a69160c62d0fb400c6a2a3a1eeb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 00:57:38 +00:00
Dai Li
679670bfbc Merge "dma-heap: add dsp heap" into udc-dev am: b66e27f987
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21914488

Change-Id: Ib3af1ba8af7afd636a1ef74765c82dac81d8ed8a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-15 00:18:38 +00:00
qinyiyan
1f30d7d1f9 Remove the tracking_denials for edgetpu project.
Fix the wrong sysfs directory for edgetpu.

Test: No avc denails seen with the selinx=enforcing
Bug: 264489387,264489676
Change-Id: I5d4d249a0b906e3e5d765ed8830fd915db8aa66e
2023-03-14 17:01:19 -07:00
Dai Li
b66e27f987 Merge "dma-heap: add dsp heap" into udc-dev 2023-03-14 23:31:53 +00:00
TreeHugger Robot
163c2ece35 Merge "Enforce pixel_stats" into udc-d1-dev am: 15a45ce32f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21989811

Change-Id: Ic9d353fb5e10ff41a3a6d1bdebb88ff6618b7748
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 07:45:19 +00:00
Wilson Sung
9cbc46ceb0 Update SELinux error am: a37fd0cd9d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21974566

Change-Id: I56079dd1e972f03fad83ab85a325b631fd897633
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 07:44:38 +00:00
TreeHugger Robot
15a45ce32f Merge "Enforce pixel_stats" into udc-d1-dev 2023-03-14 07:18:22 +00:00
Wilson Sung
9a5bb820a7 Merge "Enforce system ui app" into udc-d1-dev am: 9f8b8971db
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21982250

Change-Id: I42e84eabf5b33302f1233668a048ac984c42810c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 06:14:12 +00:00
Wilson Sung
a37fd0cd9d Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 272628396
Test: scanBugreport
Bug: 272628762
Test: scanAvcDeniedLogRightAfterReboot
Bug: 272628396
Bug: 267714573
Change-Id: Ice1b62f4092a00af2f9112efa84859465fa5061d
2023-03-14 13:46:46 +08:00
Wilson Sung
9f8b8971db Merge "Enforce system ui app" into udc-d1-dev 2023-03-14 05:44:27 +00:00
Wilson Sung
95eea9a04b Enforce pixel_stats
Fix: 264483357
Fix: 264483319
Fix: 264483568
Fix: 264489783
Test: boot-to-home and no pixel_stats avc error
Change-Id: I0b68fa3853c65056d7da78a436a3d38888af8f19
2023-03-14 13:40:49 +08:00
TreeHugger Robot
07073bad72 Merge "label systemui sub apps" into udc-dev am: 27c8c4c1e0 am: abf3c1a7db
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21988006

Change-Id: I837bbee567e305a649f2cd71c2b69a7b8d3b241e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 05:26:07 +00:00
TreeHugger Robot
a828092dcc Merge "label systemui sub apps" into udc-dev am: 27c8c4c1e0 am: d5554312e8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21988006

Change-Id: I8edf39c4bec2c95ad532d074066303e80935086f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 05:24:35 +00:00
Enzo Liao
bd1c609093 Merge "SSRestarDetector: modify the SELinux policy to allow access files owned by system for Zuma." into udc-dev am: 6eb86755a6 am: ab46c1cab0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21947242

Change-Id: Ib13ebc9aea6c3cd85abfe3ff6c21bada30d507a6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 05:22:39 +00:00
Enzo Liao
49817f7cd4 Merge "SSRestarDetector: modify the SELinux policy to allow access files owned by system for Zuma." into udc-dev am: 6eb86755a6 am: 40dce15c10
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21947242

Change-Id: Ia834d46eacf58109f82a3a5013a5fd8e9147f18b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 05:20:44 +00:00
TreeHugger Robot
abf3c1a7db Merge "label systemui sub apps" into udc-dev am: 27c8c4c1e0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21988006

Change-Id: Ib5ccad7396fa6bb59228ce1e8da1389736e59131
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 04:48:34 +00:00
Enzo Liao
ab46c1cab0 Merge "SSRestarDetector: modify the SELinux policy to allow access files owned by system for Zuma." into udc-dev am: 6eb86755a6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21947242

Change-Id: Id296bffea97617defd8547a28e65ca72795521f2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 04:48:14 +00:00
TreeHugger Robot
d5554312e8 Merge "label systemui sub apps" into udc-dev am: 27c8c4c1e0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21988006

Change-Id: I61bb2409787130b12d75e539f369bb73a5690ea6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 04:48:12 +00:00
Enzo Liao
40dce15c10 Merge "SSRestarDetector: modify the SELinux policy to allow access files owned by system for Zuma." into udc-dev am: 6eb86755a6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21947242

Change-Id: Ia65c61152f4631dc9ffeb6675d05dbc562781a40
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 04:47:21 +00:00
TreeHugger Robot
27c8c4c1e0 Merge "label systemui sub apps" into udc-dev 2023-03-14 04:29:20 +00:00
Sayanna Chandula
eabd922aeb Merge "thermal: remove tracking denials for hal_thermal" into udc-d1-dev am: 8f8acbb026
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21995148

Change-Id: I267c9dc9ff4678eeb620bb9879b7236e435e6bc5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 04:26:25 +00:00
Enzo Liao
6eb86755a6 Merge "SSRestarDetector: modify the SELinux policy to allow access files owned by system for Zuma." into udc-dev 2023-03-14 04:04:41 +00:00
Sayanna Chandula
8f8acbb026 Merge "thermal: remove tracking denials for hal_thermal" into udc-d1-dev 2023-03-14 03:51:09 +00:00
Kyle Lin
ed9bcae5ba sepolicy: label dsu and bci
Bug: 272750446
Bug: 269809407
Bug: 258100337
Test: build and boot
Change-Id: Ica7902851c307fcf71d3ad09befdff6bdcc7a72c
2023-03-14 11:48:23 +08:00
Adam Shih
4e5621a2e5 label systemui sub apps
Bug: 270518075
Test: screenshot > press sharing button
Change-Id: I10c59809afc3e897775e7cfccde9e2432bb78163
2023-03-14 11:07:12 +08:00
TreeHugger Robot
45e658f6e1 Merge "enforce hal_dumpstate_default" into udc-dev am: 3906f53197 am: 0a1bd7a594
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21982724

Change-Id: I6acfb21b2a77b9a2a9b95006871bb30c55806bec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 03:01:32 +00:00
TreeHugger Robot
2895c98fd0 Merge "Enforce hal_sensors_default" into udc-d1-dev am: fcffe3c099
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21982248

Change-Id: I594e096021dd01fec7e7f07a0b54f7e6beadf167
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 02:57:39 +00:00
TreeHugger Robot
7aa7b8a466 Merge "enforce hal_dumpstate_default" into udc-dev am: 3906f53197 am: 25c992012f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21982724

Change-Id: Ie6369d6b97ce496991ee23a615555594260c8f86
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 02:35:42 +00:00
Sayanna Chandula
d610423377 thermal: remove tracking denials for hal_thermal
Bug: 264490033
Test: Test thermal service after flashing the build

Change-Id: Ifb0fa5272a89527d8cba4a2292737f3af941f95a
Signed-off-by: Sayanna Chandula <sayanna@google.com>
2023-03-14 02:27:37 +00:00
TreeHugger Robot
fcffe3c099 Merge "Enforce hal_sensors_default" into udc-d1-dev 2023-03-14 02:25:33 +00:00
TreeHugger Robot
549c1624dc Merge "Enforce chre" into udc-d1-dev am: c86e5b15e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21982247

Change-Id: Ia05df45c5d8750474bce28e816f3a8286396271f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 02:15:59 +00:00
TreeHugger Robot
0a1bd7a594 Merge "enforce hal_dumpstate_default" into udc-dev am: 3906f53197
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21982724

Change-Id: Ifcb7fcbc7daa8bff5480f2a8524c0663208208fa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 01:57:05 +00:00
TreeHugger Robot
25c992012f Merge "enforce hal_dumpstate_default" into udc-dev am: 3906f53197
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21982724

Change-Id: I3249dd6a9df32bfa09f83f11e76755ae9d74873c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-14 01:55:34 +00:00
TreeHugger Robot
3906f53197 Merge "enforce hal_dumpstate_default" into udc-dev 2023-03-14 01:10:42 +00:00
TreeHugger Robot
c86e5b15e4 Merge "Enforce chre" into udc-d1-dev 2023-03-14 01:09:29 +00:00
Ziyi Cui
6cf71e83ce Merge "zuma-sepolicy: pixelstats: enable pixelstats access to perf-metrics" into udc-d1-dev am: 1682d9c973
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21979898

Change-Id: I840dbb857e44a312e10a9c6204e8b65270809ed1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 18:30:53 +00:00
Ziyi Cui
1682d9c973 Merge "zuma-sepolicy: pixelstats: enable pixelstats access to perf-metrics" into udc-d1-dev 2023-03-13 17:44:01 +00:00
Adam Shih
5b10e525cd enforce dumpstate am: ea9c12efb3 am: 5aba3f2375
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21982725

Change-Id: Ic940d1c3ebfd699f42c59a0023ae109b4fcea69b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 08:33:41 +00:00
Adam Shih
036ea5d621 enforce dumpstate am: ea9c12efb3 am: 7356735963
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21982725

Change-Id: I6e3ff25ad09a9c15c214f4bfb6474833469eb5fb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 08:32:53 +00:00
Wilson Sung
1371c7c6a9 Enforce chre
Fix: 264489633
Change-Id: Ib4c7a217dce35f1d923a3ba5c012b11508b19c5b
2023-03-13 08:10:57 +00:00
Adam Shih
7356735963 enforce dumpstate am: ea9c12efb3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21982725

Change-Id: I6853bb4cd85f1651e32e15e01f1c4abc9384b505
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 08:00:07 +00:00
Adam Shih
5aba3f2375 enforce dumpstate am: ea9c12efb3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21982725

Change-Id: I05fda6e5ea279f2500bfed93250416e002de8f07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 07:59:47 +00:00
Wilson Sung
ba953cdb9a Enforce system ui app
Bug: 264266705
Change-Id: Ice811ba94f065a56db47b390847b4f15798a50f5
2023-03-13 14:56:42 +08:00
Wilson Sung
ffeed9d629 Enforce hal_sensors_default
Bug: 264489637
Change-Id: I6f0384a0bf4ae5c3ac6d1ebe5b865ea43b86c3c2
2023-03-13 14:54:20 +08:00
TreeHugger Robot
30ea475538 Merge "[SELinux] Fix hal_uwb_default dev access errors" into udc-d1-dev am: eecb5380e3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21981863

Change-Id: I8cc34c5a70f8304e81defa9dff34de6a271c7852
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 06:29:11 +00:00
Adam Shih
ea9c12efb3 enforce dumpstate
Bug: 264489270
Test: adb bugreport
Change-Id: Idb3c29ff306b825dba9422dca5f1ec1a1d65d8f4
2023-03-13 06:26:34 +00:00
TreeHugger Robot
eecb5380e3 Merge "[SELinux] Fix hal_uwb_default dev access errors" into udc-d1-dev 2023-03-13 06:17:37 +00:00
TreeHugger Robot
7c794805b7 Merge "enforce incidentd" into udc-dev am: 5488c59d9a am: 468d72e588
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21981862

Change-Id: Ib5691b6de676ff2cb35b8c6f48927342f5725caa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 06:13:25 +00:00
Jasmine Cha
903312bfef audio: move set property in vendor_init to gs-common am: 684d922d59 am: e91c3cff4c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21974564

Change-Id: I63f05902af2d88d439326136beafd51d77d4e4b3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 06:12:50 +00:00
TreeHugger Robot
7c2bce5823 Merge "enforce incidentd" into udc-dev am: 5488c59d9a am: 908501be50
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21981862

Change-Id: Ic5fd2ef5bff18f7b8c749309461bcc1a8d0fbe17
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 06:12:18 +00:00
Jasmine Cha
df03bc9034 audio: move set property in vendor_init to gs-common am: 684d922d59 am: 777ee2e945
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21974564

Change-Id: I30cbbba5405c2efeb193173cfece67e9b280000c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 06:11:52 +00:00
Adam Shih
46d5345bc9 enforce hal_dumpstate_default
Bug: 266035810
Test: adb bugreport
Change-Id: Iec0d9b7d5d9327dd7ca96ab7f4c1a26c3fde6a3e
2023-03-13 14:10:45 +08:00
TreeHugger Robot
908501be50 Merge "enforce incidentd" into udc-dev am: 5488c59d9a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21981862

Change-Id: Ic5339c6d2f2948e8c60f314a3fde1c39a67134e8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 05:56:31 +00:00
TreeHugger Robot
468d72e588 Merge "enforce incidentd" into udc-dev am: 5488c59d9a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21981862

Change-Id: I8ce8e3f3ae9b4aaf4f6ffe71c8f3fd3d65eb679e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 05:56:27 +00:00
TreeHugger Robot
5488c59d9a Merge "enforce incidentd" into udc-dev 2023-03-13 05:40:12 +00:00
Jasmine Cha
e91c3cff4c audio: move set property in vendor_init to gs-common am: 684d922d59
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21974564

Change-Id: Ia7ba15f5d0f80b8b8ec30d4ffe8ae998668a3df6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 05:38:15 +00:00
Jasmine Cha
777ee2e945 audio: move set property in vendor_init to gs-common am: 684d922d59
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21974564

Change-Id: I7df21f6988b4a2546eb3099b9b60c7828666e3b6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 05:38:09 +00:00
Rex Lin
e7616e3934 [SELinux] Fix hal_uwb_default dev access errors
Allow hal_uwb_default to access /dev/uci

Bug: 263048994
Test: http://ab/I86600010139623509
Change-Id: I6324044822f74d1f0d14cc9c6d057dce0dfcc9ee
Signed-off-by: Rex Lin <rexcylin@google.com>
2023-03-13 05:16:30 +00:00
Wilson Sung
4bdc1c25c6 Merge changes I9868bdfd,I1085decf into udc-d1-dev am: 6b9e3f74b6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21947244

Change-Id: I96b2f88eabdc5ad1666ece7e8ae1e802579e95a4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-13 05:00:45 +00:00
Wilson Sung
6b9e3f74b6 Merge changes I9868bdfd,I1085decf into udc-d1-dev
* changes:
  Enforce insmod-sh
  Allow insmod-sh lockdown in userdebug
2023-03-13 04:26:34 +00:00
Adam Shih
bbbc3e3926 enforce incidentd
Bug: 264490034
Bug: 259302023
Test: adb bugreport
Change-Id: Ie77eded2b6bdd5bd993e500cf8d8d481e5fe7a57
2023-03-13 11:52:29 +08:00
Jasmine Cha
684d922d59 audio: move set property in vendor_init to gs-common
Bug: 259161622
Test: build pass

Change-Id: I4232a7e33c75c2dc7475e0888da7019d59de52d1
Signed-off-by: Jasmine Cha <chajasmine@google.com>
2023-03-13 10:53:58 +08:00
Ziyi Cui
3e6ba1f4e3 zuma-sepolicy: pixelstats: enable pixelstats access to perf-metrics
enable pixelstats access to sysfs path
Bug: 246799997
Test: Verified the existence of atom and correctness of atom stats
Change-Id: I874f7ff06b91b028cd6bbffd682429763c264d9f
Signed-off-by: Ziyi Cui <ziyic@google.com>
2023-03-12 23:02:24 +00:00
Jeremy DeHaan
df48ca07fd Merge "Allow HWC to access panel model" into udc-dev am: 3a29cc604b am: 83126173b7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21776404

Change-Id: I3f06b70a593af904e0c31fed7f33c412d3a50b14
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 20:06:24 +00:00
Jeremy DeHaan
09e286f1ca Merge "Allow HWC to access panel model" into udc-dev am: 3a29cc604b am: dbe0ec8114
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21776404

Change-Id: Iff8da61c479f876d643a06bee39eeeae3b9c640b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 19:13:19 +00:00
Jeremy DeHaan
dbe0ec8114 Merge "Allow HWC to access panel model" into udc-dev am: 3a29cc604b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21776404

Change-Id: I11fcf68d1418505e99c243bb1657d6e818c1e0bd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 18:18:39 +00:00
Jeremy DeHaan
83126173b7 Merge "Allow HWC to access panel model" into udc-dev am: 3a29cc604b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21776404

Change-Id: I4c16dc7e470a1f07fafd29996502bdba66dd88ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 18:18:27 +00:00
Jeremy DeHaan
3a29cc604b Merge "Allow HWC to access panel model" into udc-dev 2023-03-10 17:48:34 +00:00
Wilson Sung
0d8ede8308 Enforce insmod-sh
Fix: 264490091
Test: Boot-to-home without insmod-sh avc error
Change-Id: I9868bdfd8fad7ac37c8d1104fb1fab10a7e8f79a
2023-03-10 16:25:24 +08:00
Wilson Sung
eae6bfb835 Allow insmod-sh lockdown in userdebug
Bug: 272166723
Change-Id: I1085decf2a00597992a95996b1a2875be08ba1f1
2023-03-10 16:23:39 +08:00
Enzo Liao
3f905ee1d0 SSRestarDetector: modify the SELinux policy to allow access files owned by system for Zuma.
It needs to access a file pushed by hosts of test suites (details: http://go/pd-client-for-lab#heading=h.wtp07hbqvwgx)

Bug: 234359369
Design: http://go/pd-client-for-lab
Test: manual (http://b/271555983#comment3)
Change-Id: Id97d9c2d07197478ab8d6fcd1e9370dc794ff7d1
2023-03-10 15:37:15 +08:00
Wilson Sung
8705c515e3 Update SELinux error am: 028c3dd417
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21947619

Change-Id: I1a741000b3429a26d8622328ab1c147dde9aac98
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 04:34:32 +00:00
Enzo Liao
f88e9fc5bd Merge "SSRestarDetector: modify the SELinux policy to allow access files owned by system for Zuma." 2023-03-10 03:07:31 +00:00
Wilson Sung
028c3dd417 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 272628174
Change-Id: Ief58f990c70fc7a9a6fa1f18ce22c1c5847acaf9
2023-03-10 10:56:44 +08:00
Jasmine Cha
dbc882f47e Merge "audio: move sepolicy about audio to gs-common" into udc-dev am: 6431ec8cfa am: cf7b251dc2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21912482

Change-Id: I03e24554dd063ec68265c6f8113bd1bc060515b8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 02:39:26 +00:00
Jasmine Cha
c65b325672 Merge "audio: move sepolicy about audio to gs-common" into udc-dev am: 6431ec8cfa am: 3e639ffa42
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21912482

Change-Id: I63b941f03a068e510c76efa040f7886748480340
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 02:22:29 +00:00
Jasmine Cha
3e639ffa42 Merge "audio: move sepolicy about audio to gs-common" into udc-dev am: 6431ec8cfa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21912482

Change-Id: Ic05e1165722a12b41d51f4339ed817383412219f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 02:19:45 +00:00
Jasmine Cha
cf7b251dc2 Merge "audio: move sepolicy about audio to gs-common" into udc-dev am: 6431ec8cfa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21912482

Change-Id: I28ac6516a9fb56d4e431f6160ccf44dfef6baa1d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 02:18:12 +00:00
Jasmine Cha
6431ec8cfa Merge "audio: move sepolicy about audio to gs-common" into udc-dev 2023-03-10 02:06:05 +00:00
Wilson Sung
ed2ae24f2e Add insmod-sh policy am: aa90037844
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21932219

Change-Id: I018f0ed4c0054d672d4af432381fea76d5a28975
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-10 00:54:44 +00:00
Alice Sheng
726291157f Add sepolicy for RA9530 nodes.
Bug: 270440233
Test: No selinux denials related to wireless
Change-Id: I790052270a20c3324c7b9a9f674dc48a7d003c6f
2023-03-09 14:34:13 -08:00
Wilson Sung
aa90037844 Add insmod-sh policy
Fix: 260366066
Change-Id: I0874c1f476b47a9ad3cee344986404958c96fd25
2023-03-10 02:04:36 +08:00
Darren Hsu
df453ea221 Merge "sepolicy: label more paths for sysfs_odpm" into udc-dev am: 3867f2f21f am: 055b52e584
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21912561

Change-Id: I759cc445f88549e2cc006314c73e91afed09d68e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 08:29:06 +00:00
Darren Hsu
080b747bcd Merge "sepolicy: label more paths for sysfs_odpm" into udc-dev am: 3867f2f21f am: 2caf9aa778
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21912561

Change-Id: I6c058342009fbeed632fbc03a519ce7fa77bcc43
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 08:26:58 +00:00
Darren Hsu
055b52e584 Merge "sepolicy: label more paths for sysfs_odpm" into udc-dev am: 3867f2f21f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21912561

Change-Id: I2e1cde774f763e3f30b0e50484824483d5319c08
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 07:54:54 +00:00
Darren Hsu
2caf9aa778 Merge "sepolicy: label more paths for sysfs_odpm" into udc-dev am: 3867f2f21f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21912561

Change-Id: Icebd907a6ea7f3e42799ee168fcc87b781d63e15
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 07:54:34 +00:00
Wilson Sung
e7a7783e9b Merge "Add system_ui required policy" into udc-d1-dev am: 2492786d15
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21912560

Change-Id: I0c121dc88f19bde54ef2380c9523613d9403ceda
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 07:31:36 +00:00
Darren Hsu
3867f2f21f Merge "sepolicy: label more paths for sysfs_odpm" into udc-dev 2023-03-09 07:20:30 +00:00
Wilson Sung
2492786d15 Merge "Add system_ui required policy" into udc-d1-dev 2023-03-09 07:05:32 +00:00
Wilson Sung
8c535e410a Add system_ui required policy
Bug: 264266705
Bug: 268572197
Bug: 269813282
Change-Id: I8d782a5879dd531c29328517f67245913808ae93
2023-03-09 12:57:39 +08:00
KRIS CHEN
3d408c2b96 Merge "Allow fingerprint hal to access display hibernation node" into udc-dev am: 92c67c8422 am: f9fe08e2a5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21896646

Change-Id: I16cf8697d5117fb70fbda22b92ff3f605b56ff01
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 04:52:35 +00:00
KRIS CHEN
88da4d5f3e Merge "Allow fingerprint hal to access display hibernation node" into udc-dev am: 92c67c8422 am: 4309d80318
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21896646

Change-Id: I2f633d4cc5d4792b8689e46a488d767c0e07532a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 04:51:37 +00:00
KRIS CHEN
f9fe08e2a5 Merge "Allow fingerprint hal to access display hibernation node" into udc-dev am: 92c67c8422
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21896646

Change-Id: I51f3c085ba4861bffdc25f4849f53e73ccd91e66
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 04:21:31 +00:00
KRIS CHEN
4309d80318 Merge "Allow fingerprint hal to access display hibernation node" into udc-dev am: 92c67c8422
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21896646

Change-Id: I232a8e1d378731c0a42d42b9450fee002efd15bb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-09 04:21:05 +00:00
KRIS CHEN
92c67c8422 Merge "Allow fingerprint hal to access display hibernation node" into udc-dev 2023-03-09 03:53:46 +00:00
Jasmine Cha
d4de162a4f audio: move sepolicy about audio to gs-common
Bug: 259161622
Test: build pass and check with audio ext hidl/aidl

Change-Id: I5f537f18b33c84f30dae349880f8d00a22883b0b
Signed-off-by: Jasmine Cha <chajasmine@google.com>
2023-03-09 10:09:29 +08:00
Darren Hsu
f3e948a640 sepolicy: label more paths for sysfs_odpm
Bug: 272164439
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Iec1be5189d21ff6b2bdfe5056b526f01dc2b35e4
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-03-09 08:35:42 +08:00
Dai Li
f2200cdfa1 dma-heap: add dsp heap
Add dsp heap to zuma

Bug: 258813006
Change-Id: I953d1abb7cee15d041db1535df79c91cd25830f7
2023-03-08 20:43:53 +00:00
Kris Chen
cc2458e456 Allow fingerprint hal to access display hibernation node
Fix the following avc denial:
avc: denied { write } for name="hibernation" dev="sysfs" ino=75339
scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs:s0
tclass=file permissive=0

Bug: 256947811
Bug: 251239489
Bug: 267271482
Test: Perform udfps osc compensation.
Change-Id: I2cfb1353770734a19e7fcf1a10eb2fc7bf84a4f5
2023-03-08 09:10:24 +00:00
Chih Wei Chang
3cbd870026 Merge "Revert "Add system_ui required policy"" into udc-d1-dev am: 455363e7c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21896643

Change-Id: Ia30af03db81c0f30dce86968791945b1ed523267
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-08 08:57:52 +00:00
Chih Wei Chang
455363e7c0 Merge "Revert "Add system_ui required policy"" into udc-d1-dev 2023-03-08 08:17:46 +00:00
Chih Wei Chang
9966805569 Revert "Add system_ui required policy"
This reverts commit 5488482211.

Bug: 272204013

Reason for revert: DroidMonitor-triggered revert due to breakage https://android-build.googleplex.com/builds/quarterdeck?branch=git_udc-d1-dev&target=aosp_shiba-userdebug&lkgb=9707521&lkbb=9708227&fkbb=9708227, bug 272204013

Change-Id: Ia2d74374325d594d9dbd1e5ba8b1510f8d432e4d
2023-03-08 08:11:30 +00:00
Wilson Sung
3e6b9d6153 Merge "Add system_ui required policy" into udc-d1-dev am: ee80374f9d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21853742

Change-Id: I07b3321df4a2efe88485513d7538cd19500f3744
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-08 07:15:57 +00:00
Wilson Sung
ee80374f9d Merge "Add system_ui required policy" into udc-d1-dev 2023-03-08 06:40:42 +00:00
Yang Qi
c0f85a7634 [automerger skipped] Add CccDkTimeSyncService for Digital Key Support for Zuma am: d8c17a3814 am: c8d64fb72f -s ours
am skip reason: Merged-In I0195bfe5f8eed70556891ddfeae81c486373ddbb with SHA-1 d8c17a3814 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21809919

Change-Id: I0d54a2a58de6fdac1e80f23d7107bc8a5224bd75
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-08 06:21:06 +00:00
Yang Qi
fbd745125e [automerger skipped] Add CccDkTimeSyncService for Digital Key Support for Zuma am: d8c17a3814 am: 74f6e30f4d -s ours
am skip reason: Merged-In I0195bfe5f8eed70556891ddfeae81c486373ddbb with SHA-1 a6c8402aa9 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21809919

Change-Id: I5a41e6ff02562fefc5d9ccc26029ce38f148336d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-08 06:20:14 +00:00
Yang Qi
74f6e30f4d Add CccDkTimeSyncService for Digital Key Support for Zuma am: d8c17a3814
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21809919

Change-Id: I9ff02f6617948c0b4bd659279e6158dc79a69793
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-08 05:50:25 +00:00
Yang Qi
c8d64fb72f Add CccDkTimeSyncService for Digital Key Support for Zuma am: d8c17a3814
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21809919

Change-Id: I456973e22f9297a3d39805703f7fcb52be2f791e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-08 05:50:25 +00:00
Wilson Sung
f03c56a086 Update SELinux error am: a5be4a940e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21853751

Change-Id: Ie1ee4bf683cb17306268608f9ba9371894d7b032
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-08 05:09:55 +00:00
Wilson Sung
a5be4a940e Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 272166423
Bug: 272166664
Bug: 272166847
Bug: 272166722
Bug: 272166827
Bug: 272166723
Test: scanBugreport
Bug: 272166423
Bug: 267714573
Bug: 272166771
Bug: 272166847
Bug: 272166722
Bug: 272166827
Bug: 272166723
Bug: 272166737
Test: scanAvcDeniedLogRightAfterReboot
Bug: 272166723
Bug: 272166787
Bug: 272166423
Bug: 267714573
Bug: 272166847
Bug: 272166987
Bug: 272166827
Change-Id: If02d479d3606b63bd43bb94c93b2108c4fafe96d
2023-03-08 11:19:02 +08:00
Wilson Sung
5488482211 Add system_ui required policy
Bug: 264266705
Bug: 268572197
Bug: 269813282
Change-Id: I6457f4a675d32578188c01ae581442300ac56a5b
2023-03-08 10:58:39 +08:00
Yang Qi
5c390da06d Merge "Add CccDkTimeSyncService for Digital Key Support for Zuma" 2023-03-07 19:16:08 +00:00
Shashank Sharma
fc691db8ea Remove firmware as same_process_hal_file am: 3d765451c5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21811774

Change-Id: I6ee5fe565f3f65203ea5f2c887b80240f975063d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-07 17:12:23 +00:00
Shashank Sharma
3d765451c5 Remove firmware as same_process_hal_file
Bug: 260522245
Bug: 262794429

Change-Id: I7d49ee7c76fbf2cdf87a2a7de4a406c356f50444
2023-03-07 05:01:16 +00:00
Yang Qi
d8c17a3814 Add CccDkTimeSyncService for Digital Key Support for Zuma
Test: Build and Run
Bug: 270511447
Merged-In: I0195bfe5f8eed70556891ddfeae81c486373ddbb
Change-Id: I0195bfe5f8eed70556891ddfeae81c486373ddbb
2023-03-07 02:52:34 +00:00
Adam Shih
e0b47b4a7b Merge "move camera dump to gs-common" into udc-dev am: 5dd0fffa9a am: d1bce36c49
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21784301

Change-Id: Ic0ba7e6d0349c18f005daf4cfd9d5a0bf7c853a8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-07 00:40:19 +00:00
Adam Shih
a5a9f978f7 Merge "move camera dump to gs-common" into udc-dev am: 5dd0fffa9a am: 8507994334
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21784301

Change-Id: Ib647273dc6ccefd134c5c9c53c2259274de30d4c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-07 00:39:47 +00:00
Adam Shih
d1bce36c49 Merge "move camera dump to gs-common" into udc-dev am: 5dd0fffa9a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21784301

Change-Id: I40cce627880f57be080685502693c0d73dc53cac
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-07 00:04:42 +00:00
Adam Shih
8507994334 Merge "move camera dump to gs-common" into udc-dev am: 5dd0fffa9a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21784301

Change-Id: Ica2271c905170be9c1a2809630708c81ef42e240
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-07 00:03:59 +00:00
Adam Shih
c3332b65f1 Move common display dump to gs-common am: 51bd259bbf am: 8e2e4dc222
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21644566

Change-Id: I2e67be5adb6409f786fb82a3ba65136b8fa620a0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-06 23:47:57 +00:00
Adam Shih
952b486aaf Move common display dump to gs-common am: 51bd259bbf am: ba72e77586
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21644566

Change-Id: I2288201c1655cee48eb4b47c0022eafe56d8c9e2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-06 23:45:44 +00:00
Adam Shih
5dd0fffa9a Merge "move camera dump to gs-common" into udc-dev 2023-03-06 23:29:45 +00:00
Adam Shih
8e2e4dc222 Move common display dump to gs-common am: 51bd259bbf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21644566

Change-Id: I31f0efd65637b205164c9ee767f23cd24893cd09
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-06 23:11:09 +00:00
Adam Shih
ba72e77586 Move common display dump to gs-common am: 51bd259bbf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21644566

Change-Id: I3d8ae6e5579e9006f1a9663e0f9213668dc5420b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-06 23:09:17 +00:00
Yang Qi
a6c8402aa9 Add CccDkTimeSyncService for Digital Key Support for Zuma
Test: Build and Run
Bug: 270511447
Change-Id: I0195bfe5f8eed70556891ddfeae81c486373ddbb
2023-03-06 22:49:15 +00:00
Adam Shih
51bd259bbf Move common display dump to gs-common
Bug: 269212897
Test: adb bugreport
Change-Id: I71ad4e2e08ba19c36dc633732ce39e8086a94d6e
2023-03-06 06:33:53 +00:00
Adam Shih
7b84f2fc56 move camera dump to gs-common
Bug: 240530709
Test: adb bugreport
Create empty files starting with the following prefix
/data/vendor/camera/profiler/session-ended-
/data/vendor/camera/profiler/high-drop-rate-
/data/vendor/camera/profiler/watchdog-
/data/vendor/camera/profiler/camera-ended-
and do adb bugreport and make sure they end up in dumpstate_board.bin

Change-Id: I90e6d5142e7d512dafa6b8712d7fb252327359a5
2023-03-06 02:34:48 +00:00
TreeHugger Robot
7997f45f97 Merge "logger_app: allow logger_app to access vendor_usb_config_prop" into udc-d1-dev am: 26e0b7b7fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21741739

Change-Id: I3db10152eecc6182413db03bbfdb68b7af4efc46
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-06 02:29:28 +00:00
TreeHugger Robot
26e0b7b7fc Merge "logger_app: allow logger_app to access vendor_usb_config_prop" into udc-d1-dev 2023-03-06 01:49:33 +00:00
TreeHugger Robot
0edfa6a943 Merge "Allow hal_thermal_default to read iio/odpm sysfs nodes" into udc-dev am: 4eab0326df am: 8e2035cc18
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21552481

Change-Id: I22b1ecf13a7b668603508e3ea23fa6ceb2c47306
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-04 06:38:38 +00:00
Jeremy DeHaan
f33a422c17 Allow HWC to access panel model
Bug: 217472351
Change-Id: I2831eb402d15ceb0962325ce827a1ca3cca00109
Signed-off-by: Jeremy DeHaan <jdehaan@google.com>
2023-03-03 13:48:53 -08:00
TreeHugger Robot
f344cb000a Merge "Allow hal_thermal_default to read iio/odpm sysfs nodes" into udc-dev am: 4eab0326df am: 7790b93e01
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21552481

Change-Id: I9c2fd984191deb9421cef4b96ddbaa807f1cf4eb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-03 19:47:23 +00:00
TreeHugger Robot
8e2035cc18 Merge "Allow hal_thermal_default to read iio/odpm sysfs nodes" into udc-dev am: 4eab0326df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21552481

Change-Id: I9f39b65bc479a4fc0541404062330137a9fcb63c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-03 19:22:05 +00:00
TreeHugger Robot
7790b93e01 Merge "Allow hal_thermal_default to read iio/odpm sysfs nodes" into udc-dev am: 4eab0326df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21552481

Change-Id: Ia5de4f3db98e744b2ba8cbe63165bdef3e22628c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-03 18:41:00 +00:00
Donnie Pollitz
1829701bc8 sepolicy: Fix hal_confirmationui_default avc denials am: e31ad0b306 am: 105d3b4aa2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21504841

Change-Id: I45b899e18c746b897a3cfa168a5736bcac076c24
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-03 18:06:35 +00:00
Donnie Pollitz
c24ebe57c1 sepolicy: Fix hal_confirmationui_default avc denials am: e31ad0b306 am: 8958b2e84b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21504841

Change-Id: If4f7afa3407b7a124ee55d95ac5a3e774a9842a7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-03 17:53:42 +00:00
Dinesh Yadav
ea868cc5bf Merge "Make gxp_device an mlstrustedobject" into udc-d1-dev am: 85829f2265
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21701040

Change-Id: I28e061683cfd0bed9cd17ebf907cd3d45429bf84
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-03 17:32:58 +00:00
Donnie Pollitz
8958b2e84b sepolicy: Fix hal_confirmationui_default avc denials am: e31ad0b306
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21504841

Change-Id: I55b973823df7b0ad935ab38c0c22c63c0c1674cd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-03 17:27:10 +00:00
Donnie Pollitz
105d3b4aa2 sepolicy: Fix hal_confirmationui_default avc denials am: e31ad0b306
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21504841

Change-Id: Ida4600755a38935ec2506a0c245a1f0e5d0556a3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-03 17:04:52 +00:00
Jörg Wagner
d8c6712f5b Update Mali DDK to r40 : Additional SELinux settings
Expose DDK's dynamic configuration options through the Android Sysprop
interface, following recommendations from Arm's Android Integration
Manual.

Bug: 261718474

(cherry picked from commit 6834d6f59f)
Merged-In: I785106b6d2d05e21bf60fcd6da3d716b32e1bc1d
Change-Id: I0469e2f24abe7a9458305d5752ae655cf4f42547
2023-03-03 15:23:39 +00:00
Nicole Lee
bc1beba926 logger_app: allow logger_app to access vendor_usb_config_prop
avc: denied { read } for comm="oid.pixellogger" name="u:object_r:vendor_usb_config_prop:s0" dev="tmpfs" ino=397 scontext=u:r:logger_app:s0:c13,c257,c512,c768 tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=file permissive=0 app=com.android.pixellogger

Bug:270579027
Test: Enable debug port by Pixel Logger
Change-Id: I0274a25142d671b03966e56a2ffd9926683e4991
2023-03-03 12:55:29 +00:00
TreeHugger Robot
4eab0326df Merge "Allow hal_thermal_default to read iio/odpm sysfs nodes" into udc-dev 2023-03-03 12:01:40 +00:00
Dinesh Yadav
85829f2265 Merge "Make gxp_device an mlstrustedobject" into udc-d1-dev 2023-03-03 03:12:15 +00:00
Dinesh Yadav
01c5409eb8 Make gxp_device an mlstrustedobject
This is needed as google_camera_app needs write access to gxp.

Test: Tested with private build "P51261040" with Tot google3 gca-dogfood app & found no selinux violations.

Bug: 264139000
Change-Id: Ic1a262cc40578ebd2305efe851e54cf857bd02c1
2023-03-02 15:41:37 +00:00
Nicolas Geoffray
fc21747ab4 Merge "Allow ssr_detector_app directory/file creation in system_app_data_file." 2023-03-02 15:39:10 +00:00
Nicolas Geoffray
311722d720 Allow ssr_detector_app directory/file creation in system_app_data_file.
Bug: 260557058
Bug: 264483352
Test: m
Change-Id: Ia9a2b1fbf14ae018580ab0abe515dd180610bad4
2023-03-02 14:10:36 +00:00
Ernie Hsu
f13709f4c2 Merge "move mediacodec_samsung build config and sepolicy to gs-common" into udc-dev am: 899ad9c1ab am: d46fdc0b46
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21553180

Change-Id: I946d41a8fd932db6f44eeb1fc5b6092db67e6b66
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-02 10:11:38 +00:00
Ernie Hsu
11bbec30bc Merge "move mediacodec_samsung build config and sepolicy to gs-common" into udc-dev am: 899ad9c1ab am: fbbc198801
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21553180

Change-Id: I5e45ca88e24d8b4b67dd65326cece156cf38905d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-02 10:10:31 +00:00
Ernie Hsu
d46fdc0b46 Merge "move mediacodec_samsung build config and sepolicy to gs-common" into udc-dev am: 899ad9c1ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21553180

Change-Id: I00c2445ce1210da89bb8d60a8e151f43ef389473
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-02 09:19:42 +00:00
Ernie Hsu
fbbc198801 Merge "move mediacodec_samsung build config and sepolicy to gs-common" into udc-dev am: 899ad9c1ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21553180

Change-Id: I90171c56ccbb152a1cf7fbca77bb1d56311bebaa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-02 09:19:35 +00:00
Donnie Pollitz
e31ad0b306 sepolicy: Fix hal_confirmationui_default avc denials
* Allow for dumpstate

Bug: 261933368
Bug: 264489634
Test: Ran com.google.android.selinux.pts.SELinuxTest#scanBugreport
Change-Id: Id70d2a920172e649e4497f4ea1a4ecad33963edc
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-03-02 09:08:16 +00:00
Ernie Hsu
899ad9c1ab Merge "move mediacodec_samsung build config and sepolicy to gs-common" into udc-dev 2023-03-02 08:38:54 +00:00
Hiroshi Akiyama
3e2845abf7 [automerger skipped] Update sepolicy for BCL IRQ durations to dumpstate am: c0587fbf36 -s ours
am skip reason: Merged-In Icd524bd32ed41c3de72f0e1b13428d76e871d203 with SHA-1 a13ce6baf4 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21695208

Change-Id: If74ec57479b0702d5f6e16c761cdb5d1c1ca22ea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-02 07:46:43 +00:00
Hiroshi Akiyama
c0587fbf36 Update sepolicy for BCL IRQ durations to dumpstate
Bug: 269752322
Test: adb bugreport
Change-Id: Icd524bd32ed41c3de72f0e1b13428d76e871d203
Signed-off-by: Hiroshi Akiyama <hiroshiakiyama@google.com>
Merged-In: Icd524bd32ed41c3de72f0e1b13428d76e871d203
2023-03-02 06:03:23 +00:00
Wilson Sung
ca89cde996 Add sensor boot-to-home required policy am: d0105abe01 am: 8fa2055112
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21552482

Change-Id: I9ed4cf02461f03cb42462b5dce3bbab20a2f18c5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-02 05:07:53 +00:00
Wilson Sung
27f0beff37 Add sensor boot-to-home required policy am: d0105abe01 am: 819a8ad315
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21552482

Change-Id: I8b050d6e9eeedb653acf0bd1995479acd0b9a964
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-02 05:06:39 +00:00
Wilson Sung
819a8ad315 Add sensor boot-to-home required policy am: d0105abe01
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21552482

Change-Id: Ia81ba6db8dd706968fc627379a7ca1ec0273af79
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-02 04:30:49 +00:00
Wilson Sung
8fa2055112 Add sensor boot-to-home required policy am: d0105abe01
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21552482

Change-Id: I95c23468276681b97969e2fe6376e914aed2fe1f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-02 04:30:49 +00:00
Hiroshi Akiyama
b45a7465cf Merge "Update sepolicy for BCL IRQ durations to dumpstate" 2023-03-02 04:21:56 +00:00
Hiroshi Akiyama
a13ce6baf4 Update sepolicy for BCL IRQ durations to dumpstate
Bug: 269752322
Test: adb bugreport
Change-Id: Icd524bd32ed41c3de72f0e1b13428d76e871d203
Signed-off-by: Hiroshi Akiyama <hiroshiakiyama@google.com>
2023-03-02 03:04:08 +00:00
Wilson Sung
4e36ecc334 Merge "Add sensor boot-to-home required policy" to master
Test: boot-to-home
Fix: 261105336
Change-Id: I2a12d4cf87b00d8dc117ced7062a97016d75275c
2023-03-02 10:42:55 +08:00
Wilson Sung
d0105abe01 Add sensor boot-to-home required policy
Test: boot-to-home
Fix: 261105336
Change-Id: I772ff7a294cc5d2448361c164d4e671a41c92c8d
2023-03-02 02:39:15 +00:00
Wilson Sung
fc8f4f8f24 Allow hal_thermal_default to read iio/odpm sysfs nodes
Bug: 260366399
Bug: 261651187
Bug: 264204525
Change-Id: I7358b7740f6c30bd7b05e29e931a4c11226c6253
2023-03-01 16:21:33 +00:00
Ernie Hsu
4d90089d25 move mediacodec_samsung build config and sepolicy to gs-common
Bug: 263444717
Test: build pass, camera record, youtube
Change-Id: I8fa4d79495b3971429b977a63aed811ef8d62ddb
2023-03-01 10:12:22 +00:00
Kenny Root
0f36fcebb2 Merge "Add GSA logs policy" 2023-03-01 05:51:40 +00:00
Richard Chang
68ed00878b Merge "sepolicy: update init.te for zram device" into udc-dev am: 3c52a9ab3b am: 2f31611036
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21578379

Change-Id: If5dcd916cd78b538f5d5e9a68f8a76fdd03e5175
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-01 05:16:38 +00:00
Richard Chang
fb7193c798 Merge "sepolicy: update init.te for zram device" into udc-dev am: 3c52a9ab3b am: 92ec39e932
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21578379

Change-Id: Icf93e34b300bfd10e00afd6e58317b07a246290c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-01 05:15:53 +00:00
Armelle Laine
ab3b587970 Merge "Define selinux properties for /dev/block/by-name/trusty_persist" into udc-dev am: d38c507ef6 am: 0da9e2ff96
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21617065

Change-Id: I3054c7f5b73b57c4d5ce1b28afe410730ceec71f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-01 05:15:31 +00:00
Armelle Laine
2c30225d68 Merge "Define selinux properties for /dev/block/by-name/trusty_persist" into udc-dev am: d38c507ef6 am: 39a9021703
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21617065

Change-Id: Ifd00df6d99b890a24a73d50dab3b9b42c740c856
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-01 05:15:14 +00:00
Richard Chang
92ec39e932 Merge "sepolicy: update init.te for zram device" into udc-dev am: 3c52a9ab3b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21578379

Change-Id: I066aaa3efd492aea906ac778be9ff8c3e696850d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-01 04:40:53 +00:00
Richard Chang
2f31611036 Merge "sepolicy: update init.te for zram device" into udc-dev am: 3c52a9ab3b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21578379

Change-Id: I128719b2f9e1af2a649913faabcca8dc3e94e749
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-01 04:40:50 +00:00
Armelle Laine
39a9021703 Merge "Define selinux properties for /dev/block/by-name/trusty_persist" into udc-dev am: d38c507ef6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21617065

Change-Id: I7774f4fba285cd3a8b65c9c78245da5ee39d9c61
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-01 04:40:29 +00:00
Armelle Laine
0da9e2ff96 Merge "Define selinux properties for /dev/block/by-name/trusty_persist" into udc-dev am: d38c507ef6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21617065

Change-Id: I66c16c9377b4af6c924adfee4b983acff7993e0e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-01 04:39:44 +00:00
Richard Chang
3c52a9ab3b Merge "sepolicy: update init.te for zram device" into udc-dev 2023-03-01 04:28:58 +00:00
Armelle Laine
d38c507ef6 Merge "Define selinux properties for /dev/block/by-name/trusty_persist" into udc-dev 2023-03-01 03:41:09 +00:00
Kenny Root
076591d107 Add GSA logs policy
This adds a label to the sysfs files for GSA logs to allow dumpstate to
read them during a bugreport.

Bug: 271125313
Test: adb shell dumpstate
Change-Id: I8842c0bec972c4cfad15ca689f8e4ae7fa99e179
2023-02-28 18:33:23 -08:00
Richard Chang
ee8c7c2df2 sepolicy: update init.te for zram device
Bug: 269221861
Bug: 270633329
Test: Boot
Change-Id: I050e9a72006dcd0b71ba1232e38e5f96bce4c967
2023-03-01 02:04:24 +00:00
TreeHugger Robot
63f78e7b2e Merge "Update bug_map" into udc-dev am: 627e6c1648 am: 312d50fd92
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21649588

Change-Id: I1ea8df25e7cdd1a0e9283b01c51693caefb82893
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-01 01:54:20 +00:00
TreeHugger Robot
9986e1ef13 Merge "Update bug_map" into udc-dev am: 627e6c1648 am: 81390587ae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21649588

Change-Id: Iafb1c4276f8d1aa8a9e01090b44f76de8aade0db
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-01 01:50:18 +00:00
TreeHugger Robot
81390587ae Merge "Update bug_map" into udc-dev am: 627e6c1648
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21649588

Change-Id: I6c9b8ad61f3ebc5cfab067016b0029b111bc4625
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-01 00:54:48 +00:00
TreeHugger Robot
312d50fd92 Merge "Update bug_map" into udc-dev am: 627e6c1648
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21649588

Change-Id: Ie65327b364ad73df29b337d2de4ad8df51fbfb08
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-01 00:54:30 +00:00
TreeHugger Robot
627e6c1648 Merge "Update bug_map" into udc-dev 2023-02-28 23:56:31 +00:00
Jonglin Lee
3c0dd54d80 Add perfmon policies am: 167eba3ad9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21649593

Change-Id: Ibb15e72ed9d9bd5abbf5659bc3b7e925ec88d029
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-28 21:47:09 +00:00
Jonglin Lee
167eba3ad9 Add perfmon policies
Add perfmon policies to fix hotplug issues.

Bug: 271024526
Bug: 271007431
Change-Id: I974bd99224b983454c6af47f4a08a4fe20699834
Signed-off-by: Jonglin Lee <jonglin@google.com>
2023-02-28 10:19:26 -08:00
Xu Han
fe5bb58212 Update bug_map
Bug: 264483024
Test: Build.
Change-Id: I9a1574b5997d9ac5d26100254c7e20b81930df50
2023-02-28 09:34:58 -08:00
Cody Heiner
46a2c2df5e Allow twoshay → systemui_app binder call for zuma devices (2) am: dc0b4fc9e9 am: 2d46df5e9a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21591811

Change-Id: Iad3100b2d8e84db8e3a42db04205cc0cc7dd9fc4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-27 23:21:23 +00:00
Cody Heiner
09693b450a Allow twoshay → systemui_app binder call for zuma devices (2) am: dc0b4fc9e9 am: 609c49485d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21591811

Change-Id: Ice0eb43e04ded0cf95309f5a9e4353413cbbdbb7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-27 23:21:06 +00:00
Cody Heiner
2d46df5e9a Allow twoshay → systemui_app binder call for zuma devices (2) am: dc0b4fc9e9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21591811

Change-Id: I520655872e8d74b3cadc9f89f795173f5d3874e2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-27 22:49:53 +00:00
Cody Heiner
609c49485d Allow twoshay → systemui_app binder call for zuma devices (2) am: dc0b4fc9e9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21591811

Change-Id: I04b8ce8cb19be7c8634c78fb7e73e308eba9081d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-27 22:46:45 +00:00
Armelle Laine
d27961dc1b Define selinux properties for /dev/block/by-name/trusty_persist
Bug: 247013568
Test: - Verify that this change is a NOP for devices with TDP already
        created on top of the legacy f2fs partition /mnt/vendor/persist/ss
      - Verify that this change creates a valid symlink on a manually
        migrated block device
Change-Id: I226f365c6afbb5fa91ec1c9c1943f8dddac8183a
2023-02-27 22:42:08 +00:00
Armelle Laine
1731179cf1 Merge "Define selinux properties for /dev/block/by-name/trusty_persist" 2023-02-27 20:07:35 +00:00
Cody Heiner
dc0b4fc9e9 Allow twoshay → systemui_app binder call for zuma devices (2)
Splitting system_app (b/264266705) caused the avc denial below,
causing b/269981541. This change allows the denied binder call
and fixes the bug.

Denial message:
avc: denied { call } for scontext=u:r:twoshay:s0 tcontext=u:r:systemui_app:s0:c230,c256,c512,c768 tclass=binder permissive=0

Note: this is a re-submit of ag/21529713, after sorting out the
SEPolicy issues described in b/270444888.

Test: flash P23 and Bluejay devices with this change plus ag/21591673,
  run `adb shell device_config put twoshay_native test_flag_name test_flag_value`,
  → TouchContextService.java logs corresponding property changed message.

Bug: 270444888

Change-Id: I40d70cf19930eb334ba3250d58a0cbc39b50764b
2023-02-24 18:19:09 -08:00
Wilson Sung
f69013330b Add SSR property access and remove obsolete denials am: 546b787a40 am: d5f419a6d4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21552480

Change-Id: Iae1162526f5642964bd0f881306a2e767b7d0706
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-24 12:53:22 +00:00
Wilson Sung
d5f419a6d4 Add SSR property access and remove obsolete denials am: 546b787a40
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21552480

Change-Id: I4f6a1cfab59730efc3002351d7c66313651657e2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-24 12:20:23 +00:00
Wilson Sung
b264162687 Merge "Add SSR property access and remove obsolete denials"
Bug: 268572164
Change-Id: I4285b0558dd2ff3bb8d4f54dfa1690828f65129a
2023-02-24 18:42:48 +08:00
Wilson Sung
546b787a40 Add SSR property access and remove obsolete denials
Bug: 268572164
Change-Id: I5756510b2eb2696aade93dd6b15a111f5dca58ef
2023-02-24 10:33:45 +00:00
Amy Hsu
c80e8b8a07 Merge "Revise sepolicy because of refactor HbmSvManager" into udc-dev am: ae4c77ebda am: 0089c57d7d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503754

Change-Id: I26f9fba860b8e8c4ac3f789b2e706b756597baa0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-24 09:33:09 +00:00
Amy Hsu
64432e87a4 Merge "Revise sepolicy because of refactor HbmSvManager" into udc-dev am: ae4c77ebda
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503754

Change-Id: Ia8f236afbb9e940d0cb28662d03719671f2b2c31
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-24 08:59:54 +00:00
Amy Hsu
0089c57d7d Merge "Revise sepolicy because of refactor HbmSvManager" into udc-dev am: ae4c77ebda
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503754

Change-Id: I39e6bc8af10f8a5025168ec84ef41cf0aabb22dc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-24 08:59:26 +00:00
Amy Hsu
ae4c77ebda Merge "Revise sepolicy because of refactor HbmSvManager" into udc-dev 2023-02-24 08:14:49 +00:00
Suki Liu
3f5195c678 Merge "Update SELinux error" into udc-dev am: e476047167 am: e0d1b24d12
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21571001

Change-Id: I37da08eb4c399eae6e44e9be684e1c97bb6d4e16
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-24 06:41:16 +00:00
Adam Shih
57a6a7f897 Merge "Move HWC dump to gs-common" into udc-dev am: 9675dc064a am: fcf2a4aa78
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21533829

Change-Id: Idec0beb597167cbc8c35c7442e8f4c3b6896f6c5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-24 06:35:53 +00:00
Suki Liu
e0d1b24d12 Merge "Update SELinux error" into udc-dev am: e476047167
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21571001

Change-Id: I7624d1a1234dccbc7cc741878879e8a2ff8828ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-24 06:15:39 +00:00
Adam Shih
fcf2a4aa78 Merge "Move HWC dump to gs-common" into udc-dev am: 9675dc064a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21533829

Change-Id: Iebdf3ee606db9a0d74d3d2b631e7dc21984b054b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-24 05:41:10 +00:00
Suki Liu
41b9c8d4ce Merge "Update SELinux error" into udc-dev am: e476047167
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21571001

Change-Id: I33b65ed85d563132a531b27a757df04ca2f58137
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-24 05:40:50 +00:00
Suki Liu
e476047167 Merge "Update SELinux error" into udc-dev 2023-02-24 04:59:32 +00:00
Adam Shih
965fa5a7dc Merge "Move HWC dump to gs-common" into udc-dev am: 9675dc064a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21533829

Change-Id: I04fc66b217b2cf30d035b50f60aef655ccd02dcf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-24 04:05:26 +00:00
Adam Shih
9675dc064a Merge "Move HWC dump to gs-common" into udc-dev 2023-02-24 03:17:38 +00:00
Amy Hsu
c186dbd6db Revise sepolicy because of refactor HbmSvManager
1. Set sepolicy correctly, make it the same as gs201.
2. Rename hbmsvmanager to pixeldisplayservice due to refactor.
3. Add arm_mali_platform_service for pixeldisplayservcice

Bug: 241498235
Bug: 262794939
Bug: 263185136
Bug: 264489797
Test: Verify LBE and shadow compensation functions.
      Make sure there is no avc denied.
Change-Id: I2a4bb5d6b863edc00b789fd6df8d46f90164d9f2
2023-02-24 02:06:35 +00:00
sukiliu
362a8ac82c Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 270633329
Change-Id: Ia7af3ec3ee9c8b80e22a8eb55fd61d58b6c73980
2023-02-24 09:59:58 +08:00
TreeHugger Robot
53a1a9dbf7 Merge "Partially revert commit e70b98af09fad85f66736f6d2313b97e8b2db1e1." into udc-dev am: 3d1d5e0b15 am: d716668597
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21546042

Change-Id: I8aedd5804fbdab372225c26cedbb812c4de5582d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 18:10:48 +00:00
TreeHugger Robot
d716668597 Merge "Partially revert commit e70b98af09fad85f66736f6d2313b97e8b2db1e1." into udc-dev am: 3d1d5e0b15
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21546042

Change-Id: Iff0271baa6f339ab24cb81d3d928fa71cfe14640
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 16:45:01 +00:00
TreeHugger Robot
a0af1bfb89 Merge "Partially revert commit e70b98af09fad85f66736f6d2313b97e8b2db1e1." into udc-dev am: 3d1d5e0b15
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21546042

Change-Id: I18305418bd4ff9003d3e8d85adc314d298ace405
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 16:44:45 +00:00
TreeHugger Robot
3d1d5e0b15 Merge "Partially revert commit e70b98af09fad85f66736f6d2313b97e8b2db1e1." into udc-dev 2023-02-23 16:13:11 +00:00
Jörg Wagner
aa24e4e805 Merge "Update Mali DDK to r40 : Additional SELinux settings" 2023-02-23 13:18:05 +00:00
Richard Chang
d9d12a2df5 Merge "sepolicy: clean up tracking_denials for zram" into udc-dev am: d207b85ab3 am: d90c71c987
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21549121

Change-Id: If407d7034030e13fc19b381cb2f39c81417a2874
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 09:04:14 +00:00
Richard Chang
f27096658d Merge "sepolicy: clean up tracking_denials for zram" into udc-dev am: d207b85ab3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21549121

Change-Id: I7e57e4e321919521a1461f3011e028dc2e965143
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 08:31:06 +00:00
Richard Chang
d90c71c987 Merge "sepolicy: clean up tracking_denials for zram" into udc-dev am: d207b85ab3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21549121

Change-Id: Ifb6a1d623d7c42d7a69a24ae7f8dc815cf0d2630
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 08:28:32 +00:00
Richard Chang
d207b85ab3 Merge "sepolicy: clean up tracking_denials for zram" into udc-dev 2023-02-23 07:37:28 +00:00
Wilson Sung
e8e8037ecd Add chre policy am: fb2e376d26 am: a4ccb38798
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21533834

Change-Id: I936fba49e515417b3b74a5bdd44d006b65f300dd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 06:03:37 +00:00
Wilson Sung
f6813e983b Remove camera dontaudit am: 6f141a6526 am: 640d478d5a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503759

Change-Id: I15e25c6faac9aaca4d1028367cc9740ddbf786b8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 06:03:35 +00:00
Ian Kasprzak
1b1fe4d3cc Partially revert commit e70b98af09.
Remove twoshay references, with commit 9019c55645
reverted it references a non-existent file.

Bug: b/270434708
Test: Verified with go/abtd build

Reason for revert: b/270434708 - Breaks git_udc-d1-dev-plus-aosp-without-vendor builds.

Change-Id: I5705d214218107226ae3dd4959406f3ec05afa90
2023-02-23 05:45:07 +00:00
Wilson Sung
a4ccb38798 Add chre policy am: fb2e376d26
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21533834

Change-Id: Iff4cde7901e7d05627e7f9f7c0d27fc457bba4dc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 05:14:46 +00:00
Wilson Sung
640d478d5a Remove camera dontaudit am: 6f141a6526
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503759

Change-Id: I29c37dc676b4754cc1ce9f4c2620e52d278c36a4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 05:14:45 +00:00
Wilson Sung
540f2a5803 Add chre policy am: fb2e376d26
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21533834

Change-Id: Ief4f5dbb715527d079a7a5b75dd97ca552d957b4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 05:09:58 +00:00
Wilson Sung
d6127ccff7 Remove camera dontaudit am: 6f141a6526
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503759

Change-Id: I821bf958fcfb873e4ed4b413038a9cb456160602
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 05:09:56 +00:00
Richard Chang
e6f6cca02a sepolicy: clean up tracking_denials for zram
The zram SELinux errors didn't exist in recent build
(9633105, 9642683).
Remove the record in tracking_denials/init.te.

Bug: 269221861
Test: Check log
Change-Id: I4057aaf960aef885d4d894ae5dc51f93e71afd83
2023-02-23 03:57:57 +00:00
Wilson Sung
fb2e376d26 Add chre policy
Bug: 260522435
Bug: 261105224
Test: boot-to-home
Change-Id: Icd8f1ad497357bbbcb9e34509c736f3976ff0ac7
2023-02-23 11:05:15 +08:00
Wilson Sung
6f141a6526 Remove camera dontaudit
Bug: 267843409
Bug: 268226491
Change-Id: Idce5518072fc266b45c2fbc5269915b19ceb19e8
2023-02-23 11:04:47 +08:00
Ian Kasprzak
5bb246f13c Merge "Revert "Allow twoshay → systemui_app binder call for zuma devices"" into udc-dev am: e3af6770ab am: 271f7404bc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21540614

Change-Id: I4d2749018bb251c764fa37e7d56088dea9164dc9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 01:47:16 +00:00
Ian Kasprzak
271f7404bc Merge "Revert "Allow twoshay → systemui_app binder call for zuma devices"" into udc-dev am: e3af6770ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21540614

Change-Id: Icd890d614ecec5e1b5688735fcbb8e0a49e6599f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 00:57:14 +00:00
Ian Kasprzak
ef751422ca Merge "Revert "Allow twoshay → systemui_app binder call for zuma devices"" into udc-dev am: e3af6770ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21540614

Change-Id: I42ebdcee19667f1cce20aa704792ba5e45957dcd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-23 00:53:50 +00:00
Ian Kasprzak
e3af6770ab Merge "Revert "Allow twoshay → systemui_app binder call for zuma devices"" into udc-dev 2023-02-22 22:28:43 +00:00
Ian Kasprzak
cbf2b3fdb2 Revert "Allow twoshay → systemui_app binder call for zuma devices"
This reverts commit 9019c55645.

Reason for revert: b/270434708 - Breaks git_udc-d1-dev-plus-aosp-without-vendor builds.

Change-Id: Iab5bf42754760dedbe26dd684c373ba9ec3af70b
2023-02-22 22:28:33 +00:00
Wilson Sung
11f7df1638 Merge "Add hal_bootctl_default write permission to devinfo_block_device" into udc-dev am: 2dc224c7b9 am: b41fd56de0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21532246

Change-Id: Ia5f365e32eab587d4121fc7b6a05b7913f721991
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 06:33:16 +00:00
Wilson Sung
8f6a517f41 Merge "Remove touch_context_service to avoid compile error" into udc-dev am: dfd3296451 am: 0e5858d50e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21532245

Change-Id: I15971b1ec0fd8ddf4a74284a0ad2c6959914ce10
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 06:31:20 +00:00
Adam Shih
90d9b97221 Move HWC dump to gs-common
Bug: 269212897
Test: adb bugreport
Change-Id: I616f0af4d9ba466d62d87e7fc912c8c3201f7f65
2023-02-22 13:55:50 +08:00
Wilson Sung
b41fd56de0 Merge "Add hal_bootctl_default write permission to devinfo_block_device" into udc-dev am: 2dc224c7b9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21532246

Change-Id: I82eda4ee49a78b35b91c0ad8f3e81e2b525c73dc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 05:23:46 +00:00
Wilson Sung
0e5858d50e Merge "Remove touch_context_service to avoid compile error" into udc-dev am: dfd3296451
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21532245

Change-Id: I1de205b76e27cab0040e1054568a4020562e1a57
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 05:22:30 +00:00
Wilson Sung
e148d76c21 Merge "Add hal_bootctl_default write permission to devinfo_block_device" into udc-dev am: 2dc224c7b9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21532246

Change-Id: Ia9f0aaa2adb046417417119b6517d3af854d760c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 05:20:07 +00:00
Wilson Sung
54928d8c4e Merge "Remove touch_context_service to avoid compile error" into udc-dev am: dfd3296451
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21532245

Change-Id: Ifa8f7f79c4c9c1e741913367d7128983008fd693
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 05:18:00 +00:00
Cody Heiner
7229048556 Allow twoshay → systemui_app binder call for zuma devices am: 9019c55645 am: baf09b5ab9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21529713

Change-Id: Id247eb47d54b270e994d7316685303e59d77fbc8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 05:14:01 +00:00
Wilson Sung
2dc224c7b9 Merge "Add hal_bootctl_default write permission to devinfo_block_device" into udc-dev 2023-02-22 04:49:33 +00:00
Wilson Sung
dfd3296451 Merge "Remove touch_context_service to avoid compile error" into udc-dev 2023-02-22 04:32:18 +00:00
Armelle Laine
75ec1c9470 Define selinux properties for /dev/block/by-name/trusty_persist
Bug: 247013568
Test: - Verify that this change is a NOP for devices with TDP already
        created on top of the legacy f2fs partition /mnt/vendor/persist/ss
      - Verify that this change creates a valid symlink on a manually
        migrated block device
Change-Id: I226f365c6afbb5fa91ec1c9c1943f8dddac8183a
2023-02-22 04:28:08 +00:00
Cody Heiner
e4c5aedc21 Allow twoshay → systemui_app binder call for zuma devices am: 9019c55645
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21529713

Change-Id: I100420439bdb38eac30b6fdb11b1aa668b687227
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 04:04:01 +00:00
Cody Heiner
baf09b5ab9 Allow twoshay → systemui_app binder call for zuma devices am: 9019c55645
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21529713

Change-Id: Id48b48c9e374dab6bf58b50bde30ea9f2387a56e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 04:04:00 +00:00
Wilson Sung
ca241fa76c Add hal_bootctl_default write permission to devinfo_block_device
Bug: 270236357
Change-Id: I40219dbd726ddebb277e592353bd9f0b249dd01f
2023-02-22 11:23:32 +08:00
Wilson Sung
328cbaaa41 Remove touch_context_service to avoid compile error
Bug: 270157082
Change-Id: I1d5d573ddb1d7323e7c66386928074fd06cfc484
2023-02-22 11:16:15 +08:00
Wilson Sung
e6485106b6 Add hal_bootctl related policy am: bab5b72f86 am: 393e31b676
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508207

Change-Id: I3a060c0fe0d6d4a2e2b516e443b792ce54c186d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 01:36:44 +00:00
Wilson Sung
bfab4be3c4 Enforce kernel domain am: da09093d88 am: 06d8b16f05
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503757

Change-Id: I0012c8c383b097d56cecc624f82cacdfe5deb877
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 01:36:43 +00:00
Wilson Sung
9a8e9b5918 Temporary allow kernel access same_process_hal am: 9457e5260e am: 45c7bbe3cd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503756

Change-Id: Ie3d5523b61c829f6ac1c6b895bf83668ff651830
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 01:36:41 +00:00
Wilson Sung
6c52227cd4 Remove vendor_fw_file related dontaudit am: 86931fb2ea am: fa379e036e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503752

Change-Id: I178aa114c7f7cd901798eaaca661c7c31100542a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-22 01:27:02 +00:00
Cody Heiner
9019c55645 Allow twoshay → systemui_app binder call for zuma devices
Splitting system_app (b/264266705) caused the avc denial below,
causing b/269981541. This change allows the denied binder call
and fixes the bug.

Denial message:
avc: denied { call } for scontext=u:r:twoshay:s0 tcontext=u:r:systemui_app:s0:c230,c256,c512,c768 tclass=binder permissive=0

Test: flash P23 device with ag/21526491 along with this change
  → twoshay runs normally.

Fixes: 269981541
Change-Id: Ib3cf6f44b6288ed5c7c773e2ad670d2fd0aeee96
2023-02-21 23:58:05 +00:00
Wilson Sung
0e7828c0a5 Add hal_bootctl related policy am: bab5b72f86
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508207

Change-Id: Ibcb404bff2c8d72121d4aa8e9d1ee13932d4b471
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 23:06:50 +00:00
Wilson Sung
722ee868e6 Enforce kernel domain am: da09093d88
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503757

Change-Id: I311c9b36ff69366af3d90e9c4ee6cc64768de951
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 23:06:48 +00:00
Wilson Sung
0747bf2abc Temporary allow kernel access same_process_hal am: 9457e5260e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503756

Change-Id: I6f8eac71b9743b82e7cae48a53675b9db4080f01
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 23:06:47 +00:00
Wilson Sung
393e31b676 Add hal_bootctl related policy am: bab5b72f86
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508207

Change-Id: Ic3ea1d971850ee209d9cfc61ba448ff62bbde5f5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 23:04:44 +00:00
Wilson Sung
06d8b16f05 Enforce kernel domain am: da09093d88
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503757

Change-Id: I1afd59c7608813cf9d3b0a24cf1425bab3a12695
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 23:04:43 +00:00
Wilson Sung
45c7bbe3cd Temporary allow kernel access same_process_hal am: 9457e5260e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503756

Change-Id: I75ddf39c43d69ea538d4a267145512ca710b22f8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 23:04:42 +00:00
Wilson Sung
f5b16f4093 Remove vendor_fw_file related dontaudit am: 86931fb2ea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503752

Change-Id: I88027931977acd7f0d6df4e5c6a43f427fd54ef6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 23:01:45 +00:00
Wilson Sung
fa379e036e Remove vendor_fw_file related dontaudit am: 86931fb2ea
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21503752

Change-Id: I7a2f5722366ee38887ecdd5d5a43db0bfd8ccd26
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 23:00:36 +00:00
Wilson Sung
bab5b72f86 Add hal_bootctl related policy
Bug: 260522436
Bug: 264489609
Bug: 264483787
Change-Id: Iaa22899bb21ff41c1fa259830e5f49623ff8429b
2023-02-21 19:59:04 +08:00
Wilson Sung
da09093d88 Enforce kernel domain
Bug: 264490052
Test: boot-to-home
Change-Id: I383b689b5c26c08d66307b677e36b28f2ab6f7dd
2023-02-21 19:29:15 +08:00
Wilson Sung
9457e5260e Temporary allow kernel access same_process_hal
Add the access to unblock user build boot-to-home

Bug: 260522245
Change-Id: I98f77b2de4961120be9c6073afc18e12e2637e81
2023-02-21 19:28:25 +08:00
Wilson Sung
86931fb2ea Remove vendor_fw_file related dontaudit
Bug: 262794429
Bug: 261933155
Change-Id: I62b4037835a462b46b82df4059cdebf679c295b2
2023-02-21 15:00:58 +08:00
leochuang
407036361c Update SELinux error am: 6747816919 am: 62d244482e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21504315

Change-Id: Ie93d259107be8337eae48d9e97ea0af5138679d3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 05:44:53 +00:00
leochuang
62d244482e Update SELinux error am: 6747816919
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21504315

Change-Id: I7c2a39a18128af2c47bef09340738028fea686cc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 04:32:47 +00:00
leochuang
f1eebd6ddf Update SELinux error am: 6747816919
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21504315

Change-Id: I3374070e0d2b6c30addfd6f8e33f44be0fbbcb64
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 04:30:51 +00:00
leochuang
6747816919 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 269964558
Bug: 267714573
Bug: 269964574
Bug: 269812912
Change-Id: I61a274c01c6921b9b7e3df8814cf83f43bba342a
2023-02-21 02:16:40 +00:00
Wilson Sung
5b57683191 [automerger skipped] Revert "Revert "Update error on ROM 9624328"" am: e70b98af09 am: 19d86dcfc0 -s ours
am skip reason: Merged-In I25b0f417af3e741719f959aed79e7e330687e117 with SHA-1 e70b98af09 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508208

Change-Id: I24ac53854687eca475273299e30dd1628c35609d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 00:21:15 +00:00
Ken Yang
76dbfec0be [automerger skipped] WLC: cleanup the unused hal_wlc policies am: 58a6a1e772 am: 024703040d -s ours
am skip reason: Merged-In I90b9e442082b8e03e76ce63aaee56e5882933449 with SHA-1 58a6a1e772 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508214

Change-Id: I8599f729c13302272f2e255261b09a7ba03620ab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 00:20:50 +00:00
Ken Yang
d07cc77fe5 [automerger skipped] WLC: cleanup WLC trakcing_denials am: 670b22c2c7 am: c43be3da60 -s ours
am skip reason: Merged-In I2b3fda7b1b84ff4407eee4017df351f9f1d3bb51 with SHA-1 670b22c2c7 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508213

Change-Id: Ie7e75c3f4ec4fae2986b5cc9ee6b1f7fcdedd50a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 00:20:49 +00:00
Kah Xuan Lim
218fd53e24 [automerger skipped] modem_svc_sit: grant modem property access am: 4e270f1615 am: c7adfd1151 -s ours
am skip reason: Merged-In Id5e66d94eb14c6979d3b93d54fd73634444cdea1 with SHA-1 4e270f1615 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508212

Change-Id: I22ef0f4a48a327abd4428f15c7dd1618b1ced577
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 00:20:38 +00:00
Wilson Sung
10d51509d6 [automerger skipped] allow bootctl to read devinfo am: 931ea0d342 am: 3bf76884bb -s ours
am skip reason: Merged-In I41d2763ffe40d7465a11cc86612fed9f92905eff with SHA-1 931ea0d342 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508211

Change-Id: Ic1852041e0d578db96cf48c0e5e0a108a5ac1a3a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 00:20:11 +00:00
Wilson Sung
c0f75d7921 [automerger skipped] Remove proc_vendor_sched obsolete denials am: 676c7a674c am: d952aae49a -s ours
am skip reason: Merged-In I308df50eefe611a0a87afc9a21387465487cc6ea with SHA-1 676c7a674c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508210

Change-Id: I888010b9169a85259c48cfc8cefe5a8c9ad96547
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 00:20:09 +00:00
Nicole Lee
7ee114dd54 [automerger skipped] logger_app: don't audit default_prop and fix errors am: 7706be6c71 am: cf40697979 -s ours
am skip reason: Merged-In I8999372d243286586eb53602e167fa111d39a00f with SHA-1 7706be6c71 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508209

Change-Id: I0e43c6f77ce597138d47fad193dc14d2d29da7cb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-21 00:20:08 +00:00
Wilson Sung
19d86dcfc0 Revert "Revert "Update error on ROM 9624328"" am: e70b98af09
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508208

Change-Id: I99c6e1a5473691fbca41957b934b270f8493e2cf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 23:12:59 +00:00
Ken Yang
024703040d WLC: cleanup the unused hal_wlc policies am: 58a6a1e772
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508214

Change-Id: I8aafb32f9a5c0bcd8f74e382a2f893fa71433b7d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 23:12:41 +00:00
Ken Yang
c43be3da60 WLC: cleanup WLC trakcing_denials am: 670b22c2c7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508213

Change-Id: Iff19425d747d5c03e4e10ae284523ef659b29200
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 23:12:35 +00:00
Kah Xuan Lim
c7adfd1151 modem_svc_sit: grant modem property access am: 4e270f1615
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508212

Change-Id: Iad92808f73b22345e16d7ca602e57d25f01d42a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 23:11:57 +00:00
Wilson Sung
3bf76884bb allow bootctl to read devinfo am: 931ea0d342
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508211

Change-Id: Iba6993ef61237c11fa1a1c2eb493e339f32f16f7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 23:11:00 +00:00
Wilson Sung
d952aae49a Remove proc_vendor_sched obsolete denials am: 676c7a674c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508210

Change-Id: Ib6e4ec093a81dd47ce32d3a110cd525fd9a5afb9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 23:10:58 +00:00
Nicole Lee
cf40697979 logger_app: don't audit default_prop and fix errors am: 7706be6c71
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508209

Change-Id: I10e07e96719038edaa420519e4e705cff9e9da49
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 23:10:55 +00:00
Wilson Sung
7ebe356b25 [automerger skipped] Revert "Revert "Update error on ROM 9624328"" am: e70b98af09 -s ours
am skip reason: Merged-In I25b0f417af3e741719f959aed79e7e330687e117 with SHA-1 47570e0ed6 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508208

Change-Id: I648005a9da414a45147f1b96a1b9713c6ac7701a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 23:09:44 +00:00
Ken Yang
09c84f9c05 [automerger skipped] WLC: cleanup the unused hal_wlc policies am: 58a6a1e772 -s ours
am skip reason: Merged-In I90b9e442082b8e03e76ce63aaee56e5882933449 with SHA-1 6f9844d137 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508214

Change-Id: If4a61aec985ac1afae878b8c55b6d7f4b0fce2d3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 23:09:33 +00:00
Ken Yang
b916e536c6 [automerger skipped] WLC: cleanup WLC trakcing_denials am: 670b22c2c7 -s ours
am skip reason: Merged-In I2b3fda7b1b84ff4407eee4017df351f9f1d3bb51 with SHA-1 da69d2a494 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508213

Change-Id: Ia10406b389c96373271971825f431283aaead828
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 23:09:32 +00:00
Kah Xuan Lim
ac962b6c02 [automerger skipped] modem_svc_sit: grant modem property access am: 4e270f1615 -s ours
am skip reason: Merged-In Id5e66d94eb14c6979d3b93d54fd73634444cdea1 with SHA-1 77ce224141 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508212

Change-Id: Ide9a301546fbe8123e79635bcb9948975ed1fb53
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 23:09:07 +00:00
Wilson Sung
c58e5f5b99 [automerger skipped] allow bootctl to read devinfo am: 931ea0d342 -s ours
am skip reason: Merged-In I41d2763ffe40d7465a11cc86612fed9f92905eff with SHA-1 967da5da4f is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508211

Change-Id: I214b208e67770556f95b68b4831ba9257a3334f8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 23:08:21 +00:00
Wilson Sung
794fc587fb [automerger skipped] Remove proc_vendor_sched obsolete denials am: 676c7a674c -s ours
am skip reason: Merged-In I308df50eefe611a0a87afc9a21387465487cc6ea with SHA-1 6545bc156a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508210

Change-Id: I9651a19016960762493b45e73ae36fb87c4e10a6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 23:08:19 +00:00
Nicole Lee
eed60fbd0b [automerger skipped] logger_app: don't audit default_prop and fix errors am: 7706be6c71 -s ours
am skip reason: Merged-In I8999372d243286586eb53602e167fa111d39a00f with SHA-1 ef1d13d86d is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21508209

Change-Id: I2225951e84dbc4e43035a9c9835ae266df103e6b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 23:08:17 +00:00
Wilson Sung
e70b98af09 Revert "Revert "Update error on ROM 9624328""
This reverts commit d8572861e3.

Remove hal_googlebattery related denied

Bug: 269813282
Bug: 269813059
Bug: 268566481
Bug: 269812912
Merged-In: I25b0f417af3e741719f959aed79e7e330687e117
Change-Id: I25b0f417af3e741719f959aed79e7e330687e117
2023-02-20 11:06:17 +00:00
Ken Yang
58a6a1e772 WLC: cleanup the unused hal_wlc policies
Bug: 264489562
Bug: 262455719
Bug: 260366297
Bug: 260363384
Signed-off-by: Ken Yang <yangken@google.com>
(cherry picked from commit 6f9844d137)
Merged-In: I90b9e442082b8e03e76ce63aaee56e5882933449
Change-Id: I90b9e442082b8e03e76ce63aaee56e5882933449
2023-02-20 11:05:53 +00:00
Ken Yang
670b22c2c7 WLC: cleanup WLC trakcing_denials
Bug: 268566583
Signed-off-by: Ken Yang <yangken@google.com>
(cherry picked from commit da69d2a494)
Merged-In: I2b3fda7b1b84ff4407eee4017df351f9f1d3bb51
Change-Id: I2b3fda7b1b84ff4407eee4017df351f9f1d3bb51
2023-02-20 11:05:25 +00:00
Kah Xuan Lim
4e270f1615 modem_svc_sit: grant modem property access
Log message gotten before adding the policy:
avc: denied { connectto } for comm="modem_svc_sit" path="/dev/socket/property_service" scontext=u:r:modem_svc_sit:s0 tcontext=u:r:init:s0 tclass=unix_stream_socket permissive=1

Bug: 247669574
(cherry picked from commit 77ce224141)
Merged-In: Id5e66d94eb14c6979d3b93d54fd73634444cdea1
Change-Id: Id5e66d94eb14c6979d3b93d54fd73634444cdea1
2023-02-20 11:04:11 +00:00
Wilson Sung
931ea0d342 allow bootctl to read devinfo
Bug: 260522436
(cherry picked from commit 967da5da4f)
Merged-In: I41d2763ffe40d7465a11cc86612fed9f92905eff
Change-Id: I41d2763ffe40d7465a11cc86612fed9f92905eff
2023-02-20 11:02:28 +00:00
Wilson Sung
676c7a674c Remove proc_vendor_sched obsolete denials
Bug: 264490054
(cherry picked from commit 6545bc156a)
Change-Id: I308df50eefe611a0a87afc9a21387465487cc6ea
Merged-In: I308df50eefe611a0a87afc9a21387465487cc6ea
2023-02-20 11:01:42 +00:00
Nicole Lee
7706be6c71 logger_app: don't audit default_prop and fix errors
avc: denied { read } for comm="oid.pixellogger" name="u:object_r:default_prop:s0" dev="tmpfs" ino=153 scontext=u:r:logger_app:s0:c8,c257,c512,c768 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0 app=com.android.pixellogger
avc: denied { search } for name="ssrdump" dev="dm-44" ino=377 scontext=u:r:logger_app:s0:c8,c257,c512,c768 tcontext=u:object_r:sscoredump_vendor_data_crashinfo_file:s0 tclass=dir permissive=0 app=com.android.pixellogger
avc: denied { search } for name="coredump" dev="dm-44" ino=378 scontext=u:r:logger_app:s0:c8,c257,c512,c768 tcontext=u:object_r:sscoredump_vendor_data_coredump_file:s0 tclass=dir permissive=0 app=com.android.pixellogger

Bug: 264489961
Bug: 269383459
Test: Make sure no avc denied for logger_app when using Pixel Logger
(cherry picked from commit ef1d13d86d)
Change-Id: I8999372d243286586eb53602e167fa111d39a00f
Merged-In: I8999372d243286586eb53602e167fa111d39a00f
2023-02-20 11:00:59 +00:00
TreeHugger Robot
9adfa9a961 Merge "Revert "Revert "Update error on ROM 9624328""" 2023-02-20 08:00:15 +00:00
Sean.JS Tsai
6f7bde4d0e Merge "Revert "Update error on ROM 9624328"" into udc-dev am: 8838f4e286 am: f0e29936a5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21502536

Change-Id: Ie75b3d535e6dbe6d5dbad91fa69df58e61c25b27
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 07:55:14 +00:00
Wilson Sung
47570e0ed6 Revert "Revert "Update error on ROM 9624328""
This reverts commit d8572861e3.

Remove hal_googlebattery related denied

Bug: 269813282
Bug: 269813059
Bug: 268566481
Bug: 269812912
Change-Id: I25b0f417af3e741719f959aed79e7e330687e117
2023-02-20 15:07:14 +08:00
Sean.JS Tsai
f0e29936a5 Merge "Revert "Update error on ROM 9624328"" into udc-dev am: 8838f4e286
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21502536

Change-Id: I564275400b71dd3f2859b4a4cf7b4bcce56e0969
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 06:46:09 +00:00
Sean.JS Tsai
5c6a9053e5 Merge "Revert "Update error on ROM 9624328"" into udc-dev am: 8838f4e286
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21502536

Change-Id: I6be9c22256297c1417b6f9f4c361ba1e818b540f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 06:44:47 +00:00
Sean.JS Tsai
8838f4e286 Merge "Revert "Update error on ROM 9624328"" into udc-dev 2023-02-20 05:59:29 +00:00
TreeHugger Robot
0d91c28418 Merge "Update error on ROM 9624328" into udc-dev am: ea203448fd am: f5aeedf6fc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21482714

Change-Id: Ia337af931a821f03c8c72f491113eea8e7bf043f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 05:23:43 +00:00
Sean.JS Tsai
d8572861e3 Revert "Update error on ROM 9624328"
This reverts commit cf747f40d6.

Reason for revert: <b/269976373>

Change-Id: I1bee9c1da2571ab753c2193491ebc71b288b66b2
2023-02-20 04:29:33 +00:00
Ken Yang
dd3eaa4dce Merge "WLC: cleanup the unused hal_wlc policies" 2023-02-20 04:21:11 +00:00
Ken Yang
91045cea32 Merge "WLC: cleanup WLC trakcing_denials" 2023-02-20 04:20:59 +00:00
TreeHugger Robot
f5aeedf6fc Merge "Update error on ROM 9624328" into udc-dev am: ea203448fd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21482714

Change-Id: I4c579890ef5ee1c6427b3b699223d3d9cea138be
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 04:16:13 +00:00
TreeHugger Robot
864bf07d5c Merge "Update error on ROM 9624328" into udc-dev am: ea203448fd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21482714

Change-Id: If0e5d0b805f5cf467d0ec8c66310919df9acd088
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-20 04:13:24 +00:00
TreeHugger Robot
ea203448fd Merge "Update error on ROM 9624328" into udc-dev 2023-02-20 03:28:27 +00:00
sukiliu
cf747f40d6 Update error on ROM 9624328
Bug: 269813282
Bug: 269813059
Bug: 268566481
Bug: 269812912
Test: SELinuxUncheckedDenialBootTest
Change-Id: Id8cbfb7c55f2acdc3102b20cdbd2702b594992ba
2023-02-20 10:28:33 +08:00
Ken Yang
6f9844d137 WLC: cleanup the unused hal_wlc policies
Bug: 264489562
Bug: 262455719
Bug: 260366297
Bug: 260363384
Change-Id: I90b9e442082b8e03e76ce63aaee56e5882933449
Signed-off-by: Ken Yang <yangken@google.com>
2023-02-20 00:58:13 +00:00
Ken Yang
da69d2a494 WLC: cleanup WLC trakcing_denials
Bug: 268566583
Change-Id: I2b3fda7b1b84ff4407eee4017df351f9f1d3bb51
Signed-off-by: Ken Yang <yangken@google.com>
2023-02-20 00:42:35 +00:00
TreeHugger Robot
d19076e7ff Merge "hal_health_default: allow to access persist.vendor.shutdown.*" into udc-dev am: c012a8a10a am: dfd3d8e7c5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21475626

Change-Id: I7beb6ec7071cba88880bf0f1c8ce17ec0a54fb0b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 16:01:39 +00:00
TreeHugger Robot
dfd3d8e7c5 Merge "hal_health_default: allow to access persist.vendor.shutdown.*" into udc-dev am: c012a8a10a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21475626

Change-Id: Ice2cb63d7abc67b3185532be682db8841d018c1a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 14:51:17 +00:00
TreeHugger Robot
213f91ad98 Merge "hal_health_default: allow to access persist.vendor.shutdown.*" into udc-dev am: c012a8a10a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21475626

Change-Id: I897ae56dfb2a8fb577cc1ca3340a9feecab8c15b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 14:49:15 +00:00
TreeHugger Robot
c012a8a10a Merge "hal_health_default: allow to access persist.vendor.shutdown.*" into udc-dev 2023-02-18 13:46:15 +00:00
Kuen-Han Tsai
f939579c6e SEPolicy: remove tracking denials for hal_usb am: d0ac5bffa3 am: e4af4e0824
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21486210

Change-Id: I3d48ca424b1490004894b0809d6b9c03f3a17532
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 06:04:38 +00:00
Kuen-Han Tsai
e4af4e0824 SEPolicy: remove tracking denials for hal_usb am: d0ac5bffa3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21486210

Change-Id: I639171077e99d6e17698e7a1905712ab7d4446a6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 04:54:12 +00:00
Kuen-Han Tsai
f0173dff8a SEPolicy: remove tracking denials for hal_usb am: d0ac5bffa3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21486210

Change-Id: I949f460625696b1de5b5a89caeef9b59869b9e1d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 04:48:21 +00:00
neoyu
9ae44843ad Fix avc denied for hal_radioext_default am: c0da946f48 am: 4ff3dbefcd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21475628

Change-Id: Ia082d38a7ea7079fd0f7d2cd86b3d7c3d847d10d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 03:27:40 +00:00
Kuen-Han Tsai
d0ac5bffa3 SEPolicy: remove tracking denials for hal_usb
Remove tracking denials since there is no avc denials related to hal_usb
found in the bug report.

Bug: 264483531
Bug: 264483531
Bug: 264482981
Bug: 264600052
Bug: 264482981
Bug: 264600052
Bug: 261651112
Test: Capture bugreport and check any denials related to hal_usb
Change-Id: I535c94c1112fc51f80b80c99562b43afee32ddd6
2023-02-18 02:41:51 +00:00
neoyu
4ff3dbefcd Fix avc denied for hal_radioext_default am: c0da946f48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21475628

Change-Id: I1cbdf50e1f0dc138076cf70b8229885f60482c60
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 02:23:12 +00:00
neoyu
e4e8a1df0f Fix avc denied for hal_radioext_default am: c0da946f48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/21475628

Change-Id: Id91591d00b8ba8a606dfc9938d82a89fb861756a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-18 02:21:37 +00:00
neoyu
c0da946f48 Fix avc denied for hal_radioext_default
avc: denied { call } for comm="HwBinder:782_1" scontext=u:r:hal_radioext_default:s0 tcontext=u:r:hal_bluetooth_btlinux:s0 tclass=binder permissive=0

Bug: 269684065
Test: manual
Change-Id: I5ebf280feafabf4688718197c79bd6c4cac6e8fe
2023-02-17 08:39:47 +00:00
Ken Tsou
10e84d8327 hal_health_default: allow to access persist.vendor.shutdown.*
msg='avc: denied { set } for property=persist.vendor.shutdown.voltage_avg pid=908 uid=1000 gid=1000 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:vendor_default_prop:s0 tclass=property_service permissive=0'

Bug: 266181615
Change-Id: Ia87610f0363bbfbe4fe446244b44818c273841f4
Signed-off-by: Ken Tsou <kentsou@google.com>
2023-02-17 07:00:37 +00:00
Kah Xuan Lim
77ce224141 modem_svc_sit: grant modem property access
Log message gotten before adding the policy:
avc: denied { connectto } for comm="modem_svc_sit" path="/dev/socket/property_service" scontext=u:r:modem_svc_sit:s0 tcontext=u:r:init:s0 tclass=unix_stream_socket permissive=1

Bug: 247669574
Change-Id: Id5e66d94eb14c6979d3b93d54fd73634444cdea1
2023-02-17 06:24:53 +00:00
Wilson Sung
967da5da4f allow bootctl to read devinfo
Bug: 260522436
Change-Id: I41d2763ffe40d7465a11cc86612fed9f92905eff
2023-02-17 03:06:49 +00:00
Wilson Sung
6545bc156a Remove proc_vendor_sched obsolete denials
Bug: 264490054
Change-Id: I308df50eefe611a0a87afc9a21387465487cc6ea
2023-02-17 03:06:26 +00:00
Nicole Lee
ef1d13d86d logger_app: don't audit default_prop and fix errors
avc: denied { read } for comm="oid.pixellogger" name="u:object_r:default_prop:s0" dev="tmpfs" ino=153 scontext=u:r:logger_app:s0:c8,c257,c512,c768 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0 app=com.android.pixellogger
avc: denied { search } for name="ssrdump" dev="dm-44" ino=377 scontext=u:r:logger_app:s0:c8,c257,c512,c768 tcontext=u:object_r:sscoredump_vendor_data_crashinfo_file:s0 tclass=dir permissive=0 app=com.android.pixellogger
avc: denied { search } for name="coredump" dev="dm-44" ino=378 scontext=u:r:logger_app:s0:c8,c257,c512,c768 tcontext=u:object_r:sscoredump_vendor_data_coredump_file:s0 tclass=dir permissive=0 app=com.android.pixellogger

Bug: 264489961
Bug: 269383459
Test: Make sure no avc denied for logger_app when using Pixel Logger
Change-Id: I8999372d243286586eb53602e167fa111d39a00f
2023-02-16 10:59:51 +00:00
Wilson Sung
3432cc6b0b Enforce system_server and remove obsolete denials
Bug: 261519050
Bug: 262455682
Bug: 264489786
Test: boot to home and avc gone
Change-Id: I0a51e029a85af0a77faebfdcfe0b4dc26b71cca6
2023-02-16 05:35:19 +00:00
Wilson Sung
c43a6186bf Add app_domain to con_monitor_app
Bug: 261782930
Bug: 264490077
Test: boot to home and avc gone
Change-Id: I86a0793c93549172ee60397b9735ddcfe0d20bac
2023-02-16 13:00:39 +08:00
TreeHugger Robot
061a2d7f82 Merge "Remove shell related denied" 2023-02-16 04:01:25 +00:00
Jayachandran C
b85f29bb54 Merge "Revert "Add selinux rules for platform_apps to access vendor_ims_app udp socket for read/write of RTP packets."" 2023-02-16 02:59:18 +00:00
Jayachandran C
75fc4f2051 Merge "Allow radio to access IMS stack's socket for sending/receiving RTP packets and aoc_device for codec encoding/decoding" 2023-02-16 02:59:18 +00:00
Wilson Sung
ae2403dca7 Remove shell related denied
Bug: 260366321
Bug: 264489784
Change-Id: I21c5011358862ea911a3240aa0ff650d503514e9
2023-02-16 02:21:56 +00:00
Neo Yu
a5eb63a4ca Merge "Fix avc denied for hal_radioext_default" 2023-02-16 00:34:33 +00:00
Jayachandran C
f54ab444ac Allow radio to access IMS stack's socket for sending/receiving RTP packets and aoc_device for codec encoding/decoding
This fixes the follow denials

Vendor ImsStack denials
================
type=1400 audit(0.0:9): avc: denied { read write } for comm="pool-28-thread-" path="socket:[109431]" dev="sockfs" ino=109431 scontext=u:r:radio:s0 tcontext=u:r:vendor_ims_app:s0:c7,c257,c512,c768 tclass=udp_socket permissive=0 app=com.shannon.imsservice

AOC denials
===========
type=1400 audit(0.0:11): avc: denied { write } for name="acd-audio_rtp_tx" dev="tmpfs" ino=1185 scontext=u:r:radio:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0
type=1400 audit(0.0:12): avc: denied { read } for name="acd-audio_rtp_rx" dev="tmpfs" ino=1186 scontext=u:r:radio:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0

Bug: 259178236
Test: Manually verified on the device with AOC

Change-Id: I000c0c72d8a37ab5680caddd499977db66939bfa
2023-02-15 22:20:56 +00:00
Jayachandran C
8a51382598 Revert "Add selinux rules for platform_apps to access vendor_ims_app udp socket for read/write of RTP packets."
This reverts commit ebe77e31f4.

Reason for revert: Re-worked as part of ag/21259162
Bug: 259178236

Change-Id: I0494e71339c335b2efc2f23d4087f19184cfd1b5
2023-02-15 21:31:26 +00:00
Jörg Wagner
6834d6f59f Update Mali DDK to r40 : Additional SELinux settings
Expose DDK's dynamic configuration options through the Android Sysprop
interface, following recommendations from Arm's Android Integration
Manual.

Bug: 261718474
Change-Id: I785106b6d2d05e21bf60fcd6da3d716b32e1bc1d
2023-02-15 14:19:50 +00:00
neoyu
8a9b4fde21 Fix avc denied for hal_radioext_default
avc:  denied  { find } for interface=hardware.google.bluetooth.bt_channel_avoidance::IBTChannelAvoidance sid=u:r:hal_radioext_default:s0 pid=792 scontext=u:r:hal_radioext_default:s0 tcontext=u:object_r:hal_bluetooth_coexistence_hwservice:s0 tclass=hwservice_manager permissive=0

Bug: 269048898
Bug: 269045233
Test: manual
Change-Id: Ie5c926a8c22859d1ca2655b1bd91f36201f48285
2023-02-15 17:58:39 +08:00
Wilson Sung
4ea1dcff3a Fix zram avc denied
Bug: 260522041
Bug: 264490055
Test: boot to home and avc errors gone
Change-Id: I37532bb66c8f00f4307187e12bdab811c007b614
2023-02-15 08:23:49 +00:00
TreeHugger Robot
386ec7e920 Merge "Remove logger_app in bug_map" 2023-02-15 07:05:52 +00:00
Adam Shih
650b20d27f Merge "create cma dump" 2023-02-15 06:28:52 +00:00
Welly Hsu
5a441a9ca3 Merge "Remove unnecessary dontaudit for context euiccpixel_app" 2023-02-15 05:27:41 +00:00
Wilson Sung
83151d7383 Merge "Enforce bootanim and platform_app" 2023-02-15 05:19:59 +00:00
Adam Shih
c80283456e Merge "move devfreq dump to gs-common" 2023-02-15 04:54:22 +00:00
Adam Shih
a438fce84f create cma dump
Bug: 240530709
Test: adb bugreport
Change-Id: I1a97098d73106a16c0be675a5d8f58183d5f9531
2023-02-15 12:41:31 +08:00
Adam Shih
efa506d012 move devfreq dump to gs-common
Bug: 240530709
Test: adb bugreport
Change-Id: Ica18fa60ed1da44eb587ffe59370e87b393e69fb
2023-02-15 11:11:44 +08:00
Wilson Sung
c1a0ef2fe6 Enforce bootanim and platform_app
Bug: 264489606
Bug: 264490036
Change-Id: I16ed01bbb93ae2b5d5d6609ffd1f2bc0e3dc39ca
2023-02-15 10:36:08 +08:00
Shashank Sharma
7cd2e4b765 Merge "arm_mali_platform_service: register gpu selinux service" 2023-02-15 02:11:19 +00:00
Welly Hsu
0b3bc92066 Remove unnecessary dontaudit for context euiccpixel_app
bug: 260522203
bug: 260922442
bug: 262455954
bug: 260522040
bug: 260768358
bug: 261933311

Test:
1. m atest && atest-dev com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
2. eSIM OS version check & OS upgrade successfully without avc error

Change-Id: I6e0771a5794a42af5e187e35881e6de06e01fff0
2023-02-15 02:08:27 +00:00
George Chang
378fc6f5cf Merge "Remove dontaudit for secure_element" 2023-02-15 00:33:49 +00:00
Shashank Sharma
7cbda60f3e arm_mali_platform_service: register gpu selinux service
Fix avc denied issues.

Bug: 261105374
Bug: 260768402
Bug: 260922162
Bug: 261105092
Bug: 264483754
Test: No AVC denied logs after reboot.
Change-Id: I6448b3e0df9b5deeb953498fa623810eadb3ff67
2023-02-14 23:34:14 +00:00
TreeHugger Robot
996a7ad4ff Merge "storage: remove init tracking_denials rule" 2023-02-14 22:51:57 +00:00
TreeHugger Robot
bf60294e77 Merge "Map AIDL Gatekeeper to same policy as HIDL version" 2023-02-14 18:55:51 +00:00
Enzo Liao
4df0d58596 SSRestarDetector: modify the SELinux policy to allow access files owned by system for Zuma.
It needs to access a file pushed by hosts of test suites (details: http://go/pd-client-for-lab#heading=h.wtp07hbqvwgx)

Bug: 234359369
Design: http://go/pd-client-for-lab
Test: Manual
Change-Id: Ib82aec1b6eeacbf1b1595009f68827cb9b5c22ba
2023-02-14 22:08:30 +08:00
Dinesh Yadav
dec248fa9a Merge "Remove b/264321380 from bug map" 2023-02-14 11:33:11 +00:00
Nicole Lee
95bf6d4b20 Remove logger_app in bug_map
Bug: 264600084
Bug: 264600053
Change-Id: I5aa4dc83806c001e2cd3808cb998c39e4e3bd524
2023-02-14 09:29:29 +00:00
Randall Huang
eafa9d0fbe Merge "storage: remove dumpstate tracking_denial rule" 2023-02-14 08:35:13 +00:00
TreeHugger Robot
dd28add0e4 Merge "Revert "Revert "update error on ROM 9588633""" 2023-02-14 08:06:21 +00:00
Ken Yang
a99d9c1150 Merge "Remove hal_vibrator_default in bug_map" 2023-02-14 08:02:14 +00:00
Randall Huang
f6600b7f72 storage: remove init tracking_denials rule
Bug: 262794360
Test: boot to home
Change-Id: Iaea58cc0a1a572a651f7cb01d9b4ba19ff515269
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-02-14 15:51:57 +08:00
Adam Shih
ce1a20ee01 Merge "Move memory dump to gs-common" 2023-02-14 07:22:11 +00:00
Randall Huang
da5df9cd20 storage: remove dumpstate tracking_denial rule
Bug: 261933169
Test: no scsi avc denial when generating bugreport
Change-Id: Iecf98c248a2ad28d05095b7c91b8695dd92486be
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-02-14 07:13:54 +00:00
Wilson Sung
cc76d0f05b Revert "Revert "update error on ROM 9588633""
This reverts commit 9290d7c45b.
Add hal_googlebattery related denied to bug_map

Bug: 268566583
Bug: 268572197
Bug: 268572164
Change-Id: Iabfcfb28f69c118707fb64c34e2882ea0a49a776
2023-02-14 15:05:12 +08:00
Ken Yang
8893d42439 Remove hal_vibrator_default in bug_map
Remove hal_vibrator_default in bug_map due to my incorrect rebase

Bug: 264483356
Change-Id: I25310ad9f6d2c16d90f20969cbfc792f34584c93
Signed-off-by: Ken Yang <yangken@google.com>
2023-02-14 06:56:52 +00:00
Dinesh Yadav
1dbaa50d8c Remove b/264321380 from bug map
This bug was created to track the selinux violations caused when
camera hal tried to access gxp. This has been resolved by ag/21003929

Bug: 264321380
Change-Id: I33458cb7a1a657aba8be62362b62be52d881420f
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-02-14 05:49:34 +00:00
TreeHugger Robot
439199228b Merge "Storage: remove hal_health_storage tracking denials rules" 2023-02-14 04:14:24 +00:00
Randall Huang
ccd8416356 Merge changes from topic "264483567"
* changes:
  storage: fix idle-maint avc denials.
  storage: remove vold tracking_denials rules
2023-02-14 03:07:06 +00:00
Randall Huang
938e0732dd storage: fix idle-maint avc denials.
Bug: 264483567
Test: run idle-maint run
Change-Id: If4e67ce574de8be2709ebdf9ed2d09ad952ac206
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-02-14 09:29:59 +08:00
Doug Zobel
b844ec7548 Merge "Move sysfs_pcie type definition to gs-common" 2023-02-13 16:15:21 +00:00
George
39733f8622 Remove dontaudit for secure_element
SELinuxUncheckedDenialBootTest
scanAvcDeniedLogRightAfterReboot
no avc denials for secure_element

Bug: 264490093
Bug: 262794969
Bug: 261651095
Bug: 260922187
Bug: 260768672
Test: manually check dumpsys secure_element
Test: run cts -m CtsOmapiTestCases
Test: m atest && atest-dev com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: Ic06f9d0bf61bc8f30e0f285403a99e2c73384418
2023-02-13 12:36:51 +00:00
Randall Huang
eb3e643acd Storage: remove hal_health_storage tracking denials rules
Bug: 264490032
Test: boot to home
Change-Id: I825b33ba513e135754a969a108d13096a326745a
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-02-13 17:14:36 +08:00
Ray Chi
cf818217df Fix avc denied for USB property
Bug: 268572164
Test: reboot device and no related logs
Change-Id: I473d0ee022e9a9edc076ef479e2343d11b9ef63d
2023-02-13 17:03:02 +08:00
Randall Huang
2c859d0485 storage: remove vold tracking_denials rules
Bug: 264483567
Test: boot to home
Change-Id: Iad702bf293ea374174034239c81ea3499c837cf0
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-02-13 16:58:39 +08:00
Ken Yang
c6bd3ad477 Merge "WLC: Add hal_wireless_charger policies for systemui" 2023-02-13 08:13:26 +00:00
Adam Shih
176bdd647d Move memory dump to gs-common
Bug: 240530709
Test: adb bugreport
Change-Id: Ie860adb97d7bcebf87cd4280e1d5601163d06074
2023-02-13 14:58:08 +08:00
George Chang
806fda64ba Merge "Update sepolicy for streset and stpreprocess" 2023-02-13 04:05:57 +00:00
Andrew Chant
f861570a64 Merge "Revert "update error on ROM 9588633"" 2023-02-11 01:33:03 +00:00
Andrew Chant
9290d7c45b Revert "update error on ROM 9588633"
This reverts commit 8c2f12f39d.

Reason for revert: Broke the zuma build
Bug: 268566583

device/google/zuma-sepolicy/tracking_denials/systemui_app.te:6:ERROR 'unknown type hal_googlebattery' at token ';' on line 100380:
dontaudit systemui_app hal_googlebattery:binder { call };
dontaudit systemui_app default_android_service:service_manager { find };
checkpolicy:  error(s) encountered while parsing configuration

Change-Id: I1286020227bdd73c14833489613237f82573d02f
2023-02-11 01:27:19 +00:00
Doug Zobel
bfd738a84d Move sysfs_pcie type definition to gs-common
SELinux type declaration 'sysfs_pcie' moved to gs-common
for the PCIe dumpstate script.

Test: adb logcat "pixelstats-vendor:D *:S"
Bug: 266561593
Change-Id: Ieae65d9d3f5dbf80f60c1787a384f1aa3adef77c
Signed-off-by: Doug Zobel <zobel@google.com>
2023-02-10 07:37:32 -06:00
George
baa51816de Update sepolicy for streset and stpreprocess
Allow hal_secure_element_st54spi to access nfc device
Allow hal_nfc_default to set se property
Allow vendor_init to set nfc/se property

Bug: 267838462
Test: manually trigger eSE reset without avc error
Change-Id: I0ad6a0432f4fb158186874b318b5832dddce47e6
2023-02-10 21:01:20 +08:00
Wilson Sung
e338667584 vendor_init: Add getattr to sg
Bug: 260522244
Change-Id: I9f447ecb635280048ca0d785f00b6c851a9dedf3
2023-02-10 18:35:47 +08:00
Wilson Sung
6cf7ce5cc0 Allow vendor_init chown gvotables
Bug: 267736435
Bug: 260366195
Change-Id: I0a27a7fb3719d57449fb3d7f4c4d746d09419a75
2023-02-10 18:34:51 +08:00
Wilson Sung
594dee4dc4 Allow vendor_init create link for bootdevice_sysdev
Bug: 263185566
Change-Id: I3a041c8dbd33c538d3971b793c64e4ea7c310190
2023-02-10 16:24:06 +08:00
Ken Yang
b2585e3a2e WLC: Add hal_wireless_charger policies for systemui
Bug: 268457480
Change-Id: Iadb44efc736cd6bb3c3dfe5283d5fd2a7ce3cf34
Signed-off-by: Ken Yang <yangken@google.com>
2023-02-10 04:40:44 +00:00
Wilson Sung
8c2f12f39d update error on ROM 9588633
Bug: 268566583
Bug: 268572197
Bug: 268572164
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I6eba194f27258a0c2acbcb739c3a69dfa7b77b56
2023-02-10 11:57:07 +08:00
Tom Huang
dfe1f3799b Merge "Add BT hal sepolicy for allowing accessing AoC device node" 2023-02-10 02:23:42 +00:00
Wilson Sung
3c27af4e58 Fix avc error from systemui
Bug: 264266705
Change-Id: Iabc41ea7901ea99646147b133b96dd0297fd376d
2023-02-10 02:40:36 +08:00
kuanyuhuang
3ce317ca5f Add BT hal sepolicy for allowing accessing AoC device node
Allow BT hal to access device and aoc_device.

Test: manual and check avc log
Bug: 265587172
Change-Id: I62e9fb3f0278af7e0365f88bb3723cb47a266b81
2023-02-09 09:34:10 +00:00
TreeHugger Robot
c7edca28e2 Merge changes Ia32c4b01,I4746bca6
* changes:
  Permissive systemui during bringup stage
  label SystemUI app
2023-02-09 07:05:46 +00:00
More Kuo
459ad4638f Merge "Bluetooth: remove dontaudit for hal_bluetooth_btlinux" 2023-02-09 04:38:39 +00:00
Welly Hsu
782f4c6e6b Merge "Update ofl_app selinux policy" 2023-02-09 03:47:53 +00:00
Wilson Sung
5af20ce7a5 Permissive systemui during bringup stage
Bug: 264266705
Change-Id: Ia32c4b016aad4f47c437e62069e55990297dad82
2023-02-09 11:44:09 +08:00
Wilson Sung
f88300dc69 label SystemUI app
Bug: 264266705
Bug: 262794428
Change-Id: I4746bca6291d57ee36c0565d15ee5320380e1bc0
2023-02-09 11:33:54 +08:00
Adam Shih
e4e0bd775f Merge "migrate power section to its own script" 2023-02-09 02:51:48 +00:00
TreeHugger Robot
f43519dad8 Merge "dontaudit kernel search allow debugfs" 2023-02-09 02:12:22 +00:00
Carter Hsu
f60b740692 Merge "audio: allow the default setting of the audio persistent property" 2023-02-09 01:58:16 +00:00
Carter Hsu
9d327a161a audio: allow the default setting of the audio persistent property
Bug: 267694116
Test: Verified on the test build
Change-Id: I0ee81de2744656b6637868953948804d4e71dc7c
Signed-off-by: Carter Hsu <carterhsu@google.com>
2023-02-09 08:39:42 +08:00
Karuna Ramkumar
f7449ca763 Merge "zuma: Allow HWC to access graphics allocator hal" 2023-02-08 19:05:58 +00:00
David Drysdale
b385a8a253 Map AIDL Gatekeeper to same policy as HIDL version
Bug: 268342724
Test: VtsHalGatekeeperTargetTest
Change-Id: I2857f6dabad71d13971829c89fa7055b50793ea7
2023-02-08 18:43:03 +00:00
Welly Hsu
b8e66572cc Update ofl_app selinux policy
bug: 264489564

test: Use ofl_app (OFLBasicAgent app) will not face avc error
Change-Id: I55061f6b067e054ec605cd6a196406e48c1271e6
2023-02-08 17:39:34 +08:00
TreeHugger Robot
f61bc3e16a Merge "WLC: Fix hal_wireless_charger sepolicies" 2023-02-08 09:16:22 +00:00
Ken Yang
c3048691a9 WLC: Fix hal_wireless_charger sepolicies
Bug: 264483390
Bug: 264483533
Bug: 264483152
Bug: 263429589
Change-Id: If06e0b0c429e78e71f7be2d6418ccab0ab115414
Signed-off-by: Ken Yang <yangken@google.com>
2023-02-08 08:14:36 +00:00
Adam Shih
4f442e5055 migrate power section to its own script
Bug: 240530709
Test: adb bugreport
Change-Id: Id7a761d61757efe55e8642553eccc84864b4a721
2023-02-08 15:40:18 +08:00
Wilson Sung
da49f90167 Allow vendor_init to set slog properties
Bug: 267843409
Change-Id: Ib98b7127bb4381ce5dfb5522b3652637a533f593
2023-02-08 15:32:26 +08:00
Wilson Sung
adfddd8d3b Allow vendor_init to set modem vendor_logger_prop
Bug: 267843409
Change-Id: I47d1e4aec04dfcf1223e4e4d828d7da5af243e9c
2023-02-08 15:31:54 +08:00
Wilson Sung
3c6fa1dfb5 Allow vendor_init to set vendor_logger_prop
Bug: 267843409
Change-Id: I99a52a5d0d24f604cf3f0872d4066e1de5256e2f
2023-02-08 15:31:36 +08:00
TreeHugger Robot
4550d66a63 Merge "Remove vibrator bug_map toward u:object_r:aac_drc_prop:s0" 2023-02-08 07:18:39 +00:00
TreeHugger Robot
35a2c3cd6d Merge "Remove hal_vibrator_default and vendor_init tracking_denials" 2023-02-08 07:08:27 +00:00
TreeHugger Robot
25d69cfbed Merge "Allow kernel to access firmware and zram" 2023-02-08 07:00:41 +00:00
More Kuo
565218ed0b Bluetooth: remove dontaudit for hal_bluetooth_btlinux
Bug: 261363679
Test: m atest && atest-dev com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I14429cc9e8cfd971ece59083022a03a9b6de0ede
2023-02-08 14:24:54 +08:00
Tai Kuo
9824759e4f Remove vibrator bug_map toward u:object_r:aac_drc_prop:s0
u:object_r:aac_drc_prop:s0 is harmless and does not affect vibrator HAL
dumpsys.

Bug: 264483356
Test: adb shell dumpsys android.hardware.vibrator.IVibrator/default
Change-Id: Id638d7074c1a83141b6db5b2ecea0148721ded88
2023-02-08 14:20:16 +08:00
Tai Kuo
cecd829f6f Remove hal_vibrator_default and vendor_init tracking_denials
Build P23 CS40l26 project from
hardware/google/pixel/vibrator/cs40l26/device.mk and use the sepolicy
from hardware/google/pixel-sepolicy/vibrator/cs40l26 and
hardware/google/pixel-sepolicy/vibrator/common.

Bug: 267843409
Fix: 260366169
Fix: 264490051
Test: HAL init properly
Test: dumpsys android.hardware.vibrator.IVibrator/default
Test: m atest && atest-dev \
  com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Test: m atest && atest-dev \
  com.google.android.selinux.pts.SELinuxTest#scanBugreport
Change-Id: I4448bbdb03b0a06080d5bccf2708c86c10d4fb26
2023-02-08 14:11:27 +08:00
TreeHugger Robot
d33ee1d1d3 Merge "Remove dontaudit vendor_init to set ssr properties" 2023-02-08 05:52:44 +00:00
TreeHugger Robot
c1888e24fc Merge "Allow vendor_init to modify proc_sched" 2023-02-08 05:26:30 +00:00
TreeHugger Robot
a2e09c9e25 Merge "vendor_init: Add getattr to modem_img" 2023-02-08 05:22:20 +00:00
Wilson Sung
ac3c24c4f2 dontaudit kernel search allow debugfs
Bug: 261650972
Change-Id: I39b0feb01c592c7beb30d7aa1610c39a75bb3481
2023-02-08 13:21:48 +08:00
TreeHugger Robot
bd9251a800 Merge "Allow vendor_init to modify read_ahead_kb" 2023-02-08 05:20:57 +00:00
TreeHugger Robot
728de48e51 Merge "Add extcon related contexts" 2023-02-08 05:16:56 +00:00
Wilson Sung
5f27d9f524 Merge "Remove usb obsolete denials" 2023-02-08 05:15:48 +00:00
Wilson Sung
65575203b2 Remove usb obsolete denials
Bug: 261651009
Change-Id: I59f376d504e82e39feef1d96bfe3ec636dcf6ca0
2023-02-08 05:15:20 +00:00
Wilson Sung
856d2c480e Allow kernel to access firmware and zram
Bug: 260522245
Change-Id: I964ac1e30e0181f4d6edc71f2e066b7bd515186b
2023-02-08 05:08:04 +00:00
TreeHugger Robot
9cce214473 Merge "Add required sepolicy rules for Camera function" 2023-02-08 05:00:08 +00:00
Wilson Sung
fd39573ce5 Remove dontaudit vendor_init to set ssr properties
Bug: 267843409
Change-Id: I74a222e90b3dd0e2dad91632b73fcad1211a7974
2023-02-08 12:44:56 +08:00
Wilson Sung
5dbc57e7ae Allow vendor_init to modify proc_sched
Bug: 263185566
Change-Id: I4a333ffd423e88af81e4c244cc7140ebd826a170
2023-02-08 12:28:31 +08:00
Wilson Sung
df495af425 vendor_init: Add getattr to modem_img
Bug: 63185566
Change-Id: I29fd72ba5e1482d629bc28edfd7782c6f24fe68f
2023-02-08 12:26:10 +08:00
Wilson Sung
926deec5d4 Allow vendor_init to modify read_ahead_kb
Bug: 264489786
Change-Id: I26d5682b3b056c8c8e00fc08581c96dcbaa27ef9
2023-02-08 04:07:22 +00:00
Wilson Sung
cb79685556 Add extcon related contexts
Bug: 260366030
Change-Id: I9b15741820ad284e50593b5467407b773ae15ec8
2023-02-08 12:06:31 +08:00
Karuna Ramkumar
15da9ccf58 zuma: Allow HWC to access graphics allocator hal
Bug: 268268619
Change-Id: Iac85dc60b5201ab85fbf74bf3af6722ac31c5b94
2023-02-07 20:06:30 -08:00
TreeHugger Robot
4e02d08f95 Merge "[SELinux] Fix hal_uwb_default dumpstate errors" 2023-02-08 01:43:53 +00:00
George Lee
0322b923b7 Remove tracking denial for system_boot_reason
Bug: 263525155
Test: Local boot
Change-Id: Iab1411871a66c60a604ee8b0fce0505a88973792
Signed-off-by: George Lee <geolee@google.com>
2023-02-07 17:07:19 +00:00
Wilson Sung
5f48d4f516 Add required sepolicy rules for Camera function
Bug: 263184920
Bug: 263305107
Change-Id: Idadf878564333a931b90da2415efe109e75e222a
2023-02-07 21:20:12 +08:00
Rex Lin
f1f25dc94f [SELinux] Fix hal_uwb_default dumpstate errors
Bug: 263048994
Test: http://ab/I62800010129138096
Change-Id: I4fc3dedb8e35e4d7520acded58d66f5206565afb
Signed-off-by: Rex Lin <rexcylin@google.com>
2023-02-07 08:17:54 +00:00
Ernie Hsu
0e1559162e Merge "Fix sepolicy for mediacodec_google and mediacodec_samsung" 2023-02-07 07:57:52 +00:00
TreeHugger Robot
9f95eb9cd1 Merge "Update error on ROM 9558720" 2023-02-07 06:06:39 +00:00
Ernie Hsu
f7adc840df Fix sepolicy for mediacodec_google and mediacodec_samsung
mediacodec_google and mediacodec_samsung could be audited

Test: atest-dev com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
      No fail associated with mediacodec_google and mediacodec_samsung
Bug: 262794938
Bug: 262794428
Bug: 262793919
Change-Id: I0ebac8c5c25ae89ecc8907f0f141f5ec1d8aaa0b
2023-02-07 05:48:58 +00:00
TreeHugger Robot
90730e60fd Merge "sepolicy: label required wakeup nodes for system suspend" 2023-02-07 04:20:28 +00:00
sukiliu
341afe161d Update error on ROM 9558720
Bug: 267843291
Bug: 267843408
Bug: 267843310
Bug: 267843409
Test: SELinuxUncheckedDenialBootTest
Change-Id: I4d8f448d9019232222f2e8385bb2f4b3cf5f5336
2023-02-07 11:29:45 +08:00
TreeHugger Robot
0d013cb30e Merge "Fix denials for radio service to access files under /data/venodr/radio" 2023-02-07 03:08:30 +00:00
Darren Hsu
1934546586 sepolicy: label required wakeup nodes for system suspend
Bug: 260366031
Bug: 264204215
Test: run singleCommand pts -m PtsSELinuxTestCases
Change-Id: Icf8c4669156a0017655981fda8619ce0a75dce4d
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-02-07 10:12:30 +08:00
Timmy Li
5533264ba9 Merge "Add UW cornerfolk to file_contexts" 2023-02-07 02:09:54 +00:00
timmyli
d784c55c20 Add UW cornerfolk to file_contexts
Device needs access to cornerfolk. Evidence log in comments.

Bug: 267696227
Test: log check
Change-Id: If6bd49b76038673ad12fc6a1e7abd10b4cd3407e
2023-02-07 02:09:46 +00:00
TreeHugger Robot
30036eeebc Merge "Remove dontaudit for nfc" 2023-02-07 02:08:28 +00:00
TreeHugger Robot
161099cfe2 Merge "Remove dontaudit for st54spi" 2023-02-07 02:08:21 +00:00
TreeHugger Robot
cdc2d14883 Merge "sepolicy: label ODPM device nodes for hal_power_stats" 2023-02-07 02:05:46 +00:00
Darren Hsu
9964fd2901 sepolicy: label ODPM device nodes for hal_power_stats
Bug: 268002261
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: I1dfd7760c4a958e0b31258a8379f3c68eb054f35
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-02-06 21:44:17 +08:00
Donnie Pollitz
1fd0c782b4 sepolicy: Fix trusty_metricsd avc denials
* Suez data collection missing

Bug: 264489526
Test: ran com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I667e35c68139a3368655cab4ea40acb529bb65ef
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-02-06 08:57:31 +00:00
Donnie Pollitz
1df4e2dde8 sepolicy: Fix trusty_apploader avc denials
* File permissions missing

Bug: 263305034
Test: ran com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot

Change-Id: I5d0a56a4c31c66610414341118c4089d2c11f3e9
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-02-06 08:57:22 +00:00
George
aa76e6db12 Remove dontaudit for st54spi
SELinuxUncheckedDenialBootTest
scanAvcDeniedLogRightAfterReboot
no avc denials for st54spi

Bug: 264489677
Test: manually check dumpsys secure_element
Test: m atest && atest-dev com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I587caa423d3e1d23d9666fb732c0cc350934538f
2023-02-06 07:27:12 +00:00
Jenny Ho
6f15645932 Merge "Add permission for logbuffer_bd" 2023-02-06 03:53:19 +00:00
Hongbo Zeng
a82ea96b40 Fix denials for radio service to access files under /data/venodr/radio
Bug: 263792405
Test: get PASS result with go/ril-config-service-test and the original
      denial logs in https://b/263792405#comment17 are gone
Change-Id: Id6d64bb3e159b083e1a1b4c8e728e992fb9b1502
2023-02-06 03:47:01 +00:00
Jenny Ho
4e6cfb143d Add permission for logbuffer_bd
Bug: 242679204
Change-Id: I7376f10dc183bac805c89d6905e70a7b92694471
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2023-02-05 14:06:06 +08:00
Jenny Ho
31f750da2b sepolicy: add sepolicy for disable.battery.defender
[    7.536208] type=1107 audit(1671575809.144:22): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.battery.defender.disable pid=381 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_battery_defender_prop:s0 tclass=property_service permissive=1'

Bug: 263305106
Change-Id: Ia7adfe7f128c6390128447b9363ecd3615694fb1
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2023-02-05 13:09:28 +08:00
Ken Yang
af9057e7fb WLC: Add required sysfs_wlc sepolicies
The sysfs_wlc is still required for certain services like
hal_health_default. Add these sepolicies to pass the tests.

Bug: 267171670
Change-Id: If2b5b007f4a24e91b2be83bb20676eb449b9415f
Signed-off-by: Ken Yang <yangken@google.com>
2023-02-05 01:00:01 +00:00
George
40b805af57 Remove dontaudit for nfc
SELinuxUncheckedDenialBootTest
scanAvcDeniedLogRightAfterReboot
no avc denials for nfc

Bug: 263185547
Bug: 264490053
Test: atest NfcNciInstrumentationTests
Test: atest NfcNciUnitTests
Test: m atest && atest-dev com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: Idc9eced1ae7248cf0883a5e42db2c5e55cb65c3b
2023-02-04 22:37:34 +08:00
Welly Hsu
a8526b30e0 Merge "Remove dontaudit in euiccpixel for SELinuxUncheckedDenialBootTest and scanAvcDeniedLogRightAfterReboot" 2023-02-04 05:55:56 +00:00
Joseph Jang
114b7b8f09 Merge "citadel: Remove citadel.te for sepolicy testing" 2023-02-03 02:08:12 +00:00
Cyan_Hsieh
79bd040d55 Add gcf partition to OTA domain
This allows the OTA mechanism to write to the bootloader slot to
perform the actual OTA

Bug: 263218204
Change-Id: Iec3f3aa73344f4e9a305bc3c1c3f2db7624aca93
2023-02-02 18:08:51 +08:00
TreeHugger Robot
075f213ece Merge "hal_graphics_composer_default: fix sepolicy denials" 2023-02-02 06:11:49 +00:00
TreeHugger Robot
e9d7a18f5d Merge "selinux: fix mitigation_vendor_file access" 2023-02-02 04:40:09 +00:00
Nicole Lee
7c21f689ea Merge "logger_app: allow logger_app to access vendor_slog_file" 2023-02-02 04:11:39 +00:00
Nicole Lee
704656a367 Merge "logger_app: allow logger_app to access vendor_rild_prop" 2023-02-02 04:11:28 +00:00
Nicole Lee
34f87b6396 Merge "logger_app: allow logger_app to access sysfs_sscoredump_level and vendor_ramdump_prop" 2023-02-02 04:11:18 +00:00
Nicole Lee
5bdbf4194b Merge "logger_app: allow logger_app to access logd_prop" 2023-02-02 04:11:03 +00:00
Nicole Lee
20dedc5cc6 Merge "logger_app: allow logger_app to access logpersistd_logging_prop" 2023-02-02 04:10:50 +00:00
TreeHugger Robot
de674e9f3b Merge "logger_app: allow logger_app to access vendor_audio_prop" 2023-02-02 04:09:35 +00:00
Nicole Lee
140780f8a4 Merge "logger_app: allow logger_app to access vendor_wifi_sniffer_prop" 2023-02-02 03:06:45 +00:00
Nicole Lee
3d78ff1a51 Merge "logger_app: allow logger_app to access vendor_tcpdump_log_prop" 2023-02-02 03:06:33 +00:00
Nicole Lee
1c8be3059d Merge "logger_app: allow access vendor_gps_file, vendor_gps_prop, vendor_logger_prop" 2023-02-02 03:06:23 +00:00
Nicole Lee
227fa788cc Merge "logger_app: allow logger_app access vendor_modem_prop" 2023-02-02 03:06:14 +00:00
Nicole Lee
89a469803c Merge "logger_app: allow logger_app to access vendor_ssrdump_prop" 2023-02-02 03:06:05 +00:00
Nicole Lee
3a825a5184 Merge "logger_app: allow logger_app to access radio files" 2023-02-02 03:05:50 +00:00
George Lee
574ebbacf8 selinux: fix mitigation_vendor_file access
Bug: 266118091
Test: Local test to confirm error doesn't show up
Change-Id: Ie9e55230211f20efc7bba448bfc335799d0e1d56
Signed-off-by: George Lee <geolee@google.com>
2023-02-01 17:55:12 +00:00
Doug Zobel
b0394ebf56 Merge "Add sepolicy for PCIe link statistics" 2023-02-01 15:04:04 +00:00
Safayat Ullah
7ce9680b98 hal_graphics_composer_default: fix sepolicy denials
Bug: 263184738
Bug: 264489746
Test: There is no AVC denied log after reboot
Change-Id: I3c5bbc55f0a676d8906ec061e3c999995d02dd3f
2023-02-01 14:34:36 +00:00
Doug Zobel
7ea927f332 Add sepolicy for PCIe link statistics
PCIe link statistics collected by dumpstate and pixelstats.

Test: adb logcat "pixelstats-vendor:D *:S"
Bug: 266689144
Change-Id: I9b7eef9a9e14c1be9e9e9feb3c608f7067e6fade
Signed-off-by: Doug Zobel <zobel@google.com>
2023-02-01 07:23:15 -06:00
Donnie Pollitz
eea50ca2bc Merge "sepolicy: Fix tee avc denials" 2023-02-01 09:46:16 +00:00
Welly Hsu
74b12d8455 Remove dontaudit in euiccpixel for SELinuxUncheckedDenialBootTest and scanAvcDeniedLogRightAfterReboot
Issue: after introducing selinux rules in b/265286368
the dontaudit rules can be removed

bug: 260522413
bug: 262451641
bug: 261651113
bug: 260922186
bug: 261516808
bug: 260769064
bug: 265384119
bug: 264489745

Test: confirm SELinuxUncheckedDenialBootTest and
scanAvcDeniedLogRightAfterReboot tests can pass and no avc denials for euiccpixel

Change-Id: I07ae97d47bbb14c15da92611160b6a2a6af22a60
2023-02-01 16:34:17 +08:00
Long Ling
9f67cbb03b Merge "Set context for sysfs file refresh_rate" 2023-02-01 02:37:48 +00:00
Nicole Lee
9c413c12e7 logger_app: allow logger_app to access vendor_slog_file
Bug: 264489961
Test: Confirm no selinux denial for vendor_slog_file
Change-Id: Idc5386336a196f39703f6d33e3a7a8491e860ea0
2023-01-31 16:38:48 +00:00
Nicole Lee
98e068e135 logger_app: allow logger_app to access vendor_rild_prop
Bug: 264489961
Test: Confirm no selinux denial for vendor_rild_prop
Change-Id: I07bb59cba17f11a6cfdaf40e92f6cd663d8ad903
2023-01-31 16:38:39 +00:00
Nicole Lee
e396b80465 logger_app: allow logger_app to access sysfs_sscoredump_level and vendor_ramdump_prop
Bug: 264489961
Test: Confirm no selinux denial for sysfs_sscoredump_level and vendor_ramdump_prop
Change-Id: I6c7e87d15505dd9cd80f571ab67925b7ec722ef6
2023-01-31 16:38:31 +00:00
Nicole Lee
cbb6754e58 logger_app: allow logger_app to access logd_prop
Bug: 264489961
Test: Confirm no selinux denial for logd_prop
Change-Id: I6db7b19dd9cf864768ba2442d39d9fcde16a71fe
2023-01-31 16:38:23 +00:00
Nicole Lee
bed125ec04 logger_app: allow logger_app to access logpersistd_logging_prop
Bug: 264489961
Test: Confirm no selinux denial for logpersistd_logging_prop
Change-Id: Ia8836e058bb3e471d388f9055252e6c3c42227ac
2023-01-31 16:38:14 +00:00
Nicole Lee
998e7618b9 logger_app: allow logger_app to access vendor_audio_prop
Bug: 264489961
Test: Confirm no selinux denial for vendor_audio_prop
Change-Id: I02b53cf4d39adf1bc69004502a21b130c925d6bc
2023-01-31 16:38:05 +00:00
Nicole Lee
64a8ed9b7b logger_app: allow logger_app to access vendor_wifi_sniffer_prop
Bug: 264489961
Test: Confirm no selinux denial for vendor_wifi_sniffer_prop
Change-Id: Id6a5afed299c3ac869897015629d190640f40d8f
2023-01-31 16:37:54 +00:00
Nicole Lee
eb05f7d02f logger_app: allow logger_app to access vendor_tcpdump_log_prop
Bug: 264489961
Test: Confirm no selinux denial for vendor_tcpdump_log_prop
Change-Id: I2c4e7e0d395f570f93a26dd0328982487426ac84
2023-01-31 16:36:24 +00:00
Nicole Lee
cddb6ad619 logger_app: allow access vendor_gps_file, vendor_gps_prop, vendor_logger_prop
Bug: 261519049
Bug: 261783031
Bug: 261933367

Test: Confirm no selinux denial for these 3 tcontexts
Change-Id: I6f919e193693f7521778321f677214ea9f3b4d84
2023-01-31 16:32:41 +00:00
Nicole Lee
b713236048 logger_app: allow logger_app access vendor_modem_prop
Bug: 260522268
Bug: 264600053

Test: Confirm no selinux denial for tcontext vendor_modem_prop
Change-Id: Ic4ed0cdd7fa33c1dd4c812528b26b4a19cf6537b
2023-01-31 16:32:32 +00:00
Nicole Lee
e6975cb6e5 logger_app: allow logger_app to access vendor_ssrdump_prop
Bug: 260366439

Test: Confirm no selinux denial for tcontext vendor_ssrdump_prop
Change-Id: I74009bdd3d8b0fa691a2d0132655dc08fcd50977
2023-01-31 16:32:24 +00:00
Nicole Lee
30e96b25ce logger_app: allow logger_app to access radio files
Bug: 260366439
Bug: 260522268
Bug: 260769144
Bug: 261519049
Bug: 264600084

Test: Confirm no selinux denial for tcontext radio_vendor_data_file
Change-Id: I2a917d78e685aad5608e64f4d076cc50cdb064cc
2023-01-31 16:32:16 +00:00
sukiliu
383189e5f2 Update error on ROM 9541712
Bug: 267260951
Bug: 267261048
Bug: 267260619
Bug: 267260716
Bug: 267261305
Bug: 267261163
Bug: 267260675
Bug: 267261265
Bug: 267260717
Test: scanBugreport
Change-Id: I293fe1bc19f5f2d8f320d4e9feea051fc623ef8d
2023-01-31 14:18:11 +08:00
Joseph Jang
245e4205d1 citadel: Remove citadel.te for sepolicy testing
Test: VtsHalWeaverTargetTest
      VtsAidlSharedSecretTargetTest
      VtsHalIdentityTargetTest
      VtsHalRemotelyProvisionedComponentTargetTest
      VtsAidlKeyMintTargetTest
Bug: 264489777
Change-Id: I787aef6a0a924706ba2afccefff770408bb78294
2023-01-31 05:21:49 +00:00
Long Ling
ab6c98702b Set context for sysfs file refresh_rate
Bug: 263821118
Change-Id: Id8865c4499b6af103a7acd1fbbe6da0724cb83b3
2023-01-26 18:51:53 -08:00
TreeHugger Robot
1746a6cc59 Merge "Add rule for secure_element AIDL" 2023-01-27 02:00:45 +00:00
Donnie Pollitz
34fe057526 sepolicy: Fix tee avc denials
tee policies were missing

Bug: 263304957
Bug: 263429986
Bug: 264489524
Test: boot and scanAvcDeniedLogRightAfterReboot passed

Change-Id: Ia3191496be005dbbbe331a14f7d45adace34b3fc
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-01-24 15:22:57 +01:00
Grace Chen
82ae431064 Merge "Fix selinux denials on hal_secure_element_uicc" 2023-01-24 02:10:51 +00:00
Grace Chen
e881d9d401 Fix selinux denials on hal_secure_element_uicc
Bug: 264489780
Test: Confirm no more selinux denials
Change-Id: Ib159acaf8701d0ac7e3325addd7baca6a41f0cee
2023-01-23 15:36:04 -08:00
Grace Chen
c93ba80fc4 Add rule for secure_element AIDL
Add secureelement aidl

b/261565407

Change-Id: I79f35e8231d9eae81b90528269410c169bb1a035
2023-01-23 18:46:01 +00:00
Dinesh Yadav
3de9d17052 Merge "Allow camera HAL and GCA to access GXP device." 2023-01-18 07:33:32 +00:00
TreeHugger Robot
30fe55378d Merge "Fix avc denied and remove tracking_denials for hal_usb_gadget_impl" 2023-01-17 06:07:41 +00:00
Ernie Hsu
87aa440b72 Merge "Remove tracking_denials for media related module" 2023-01-17 05:51:00 +00:00
Chung-Kai (Michael) Mei
ee6c28322a Merge "sepolicy: fix avc denial" 2023-01-17 04:53:35 +00:00
Chungkai Mei
cc0f6a604d sepolicy: fix avc denial
fix avc denial

Test: boot passed and no avc log after boot
Bug: 264483355
Change-Id: Idd9ef9ca7c988141bffd2d9d7e561efe8066cba4
Signed-off-by: Chungkai Mei <chungkai@google.com>
2023-01-17 04:53:13 +00:00
Ray Chi
6baa4fa226 Fix avc denied and remove tracking_denials for hal_usb_gadget_impl
Bug: 264946043
Test: no avc denied for hal_usb_gadget_impl
Change-Id: Ib52e6d089a0e3e73c619f35849af0aed478c1f65
2023-01-17 04:37:49 +00:00
Ernie Hsu
c2a4092ee6 Remove tracking_denials for media related module
All bugs in modified te files were already fixed

Bug: 264490072
Bug: 264489679
Bug: 264490012
Bug: 264489523
Test: test video recording/playback under enforcing mode
Change-Id: Iac7dc597f58dcc5f7bd936ddb607aa7158467a34
2023-01-17 03:45:37 +00:00
Dinesh Yadav
b068bb3f64 Allow camera HAL and GCA to access GXP device.
The camera HAL and Google Camera App
need selinux permission to run workloads on Aurora DSP. This
change adds the selinux rules too allow these clients to
access the GXP device in order to execute workloads on DSP.

Bug: 264321380
Test: Verified that the camera HAL service and GCA app is able to access the GXP device.
Change-Id: I125650b4841b4cbdc50077a0d80b113b02699de8
2023-01-17 03:21:04 +00:00
TreeHugger Robot
ef4c754dc4 Merge "Fix avc denied and remove tracking_denials for hal_usb_impl" 2023-01-16 09:55:32 +00:00
Dinesh Yadav
1ac5ca8485 Merge "Add SEPolicy settings for android logging/tracing service for GXP" 2023-01-16 08:05:51 +00:00
Ray Chi
0801e5e421 Fix avc denied and remove tracking_denials for hal_usb_impl
Fix avc denial for hal_usb_impl.

Bug: 263048760
Test: no avc denied for hal_usb_impl
Change-Id: Iaeea9d1f99f715c0f856a3a9f9fcd2e8d371f3d3
2023-01-16 15:40:48 +08:00
Chungkai Mei
171bfb004b sepolicy: fix avc denial
fix avc denial

Test: bott passed and no avc log after boot
Bug: 260769063
Bug: 261105028
Bug: 260366126
Bug: 261650934
Bug: 262178497
Bug: 262315567
Bug: 262633072
Change-Id: I926d535fe6871726b5cd0602e436f6b5a3a9e736
Signed-off-by: Chungkai Mei <chungkai@google.com>
2023-01-16 02:55:37 +00:00
sukiliu
3b97d74811 Update error on ROM 9492984
Bug: 265587172
Test: SELinuxUncheckedDenialBootTest
Change-Id: I69402149121da5bbb0f2f89ca59c3ca458945d50
2023-01-16 09:36:14 +08:00
Ken Yang
c4d610a86b Merge "WLC: Cleanup the sysfs_wlc policies" 2023-01-13 14:41:32 +00:00
TreeHugger Robot
71b801e2b7 Merge "Update error on ROM 9486762" 2023-01-13 09:14:49 +00:00
Welly Hsu
1f350465ce Merge "Fix euiccpixel_app SELinux error for eSIM firmware upgrade" 2023-01-13 07:46:40 +00:00
sukiliu
305330ef84 Update error on ROM 9486762
Bug: 265384119
Bug: 265383359
Bug: 265383532
Test: SELinuxUncheckedDenialBootTest
Change-Id: I78bf39772c8f2a6b5c403ed5b113a34ff7d9dab0
2023-01-13 15:33:02 +08:00
Leo Liou
af6131d348 Merge "zuma: add sepolicy for ufs_firmware_update process" 2023-01-13 03:21:07 +00:00
Leo Liou
30f3c17252 zuma: add sepolicy for ufs_firmware_update process
Allow the script to access the specified partition and sysfs.

Bug: 224464892
Test: full build and test ffu flow
Change-Id: I27f0d4d97f15a7c108e6ae1b8c12fda2c69c303a
Signed-off-by: Leo Liou <leoliou@google.com>
2023-01-13 08:19:27 +08:00
Jaegeuk Kim
0cf7210eb1 Allow mkfs/fsck for vendor partitons
Change-Id: I425c56edf9b12f1b86994f58100ecc9a8e1b58b2
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
2023-01-12 09:42:16 -08:00
Welly Hsu
48ef4308be Fix euiccpixel_app SELinux error for eSIM firmware upgrade
bug: 265286368

Test: generate test build and confirm no avc error happens
Change-Id: I2f457157d92cb48dfe328ba1520c3e598bd6d6b6
2023-01-13 01:17:19 +08:00
Suki Liu
8b58ce3b69 Merge "Update error on ROM 9481402" 2023-01-12 11:41:23 +00:00
TreeHugger Robot
7544c3c104 Merge "Wifi: Add sepolicy files for wifi_sniffer service" 2023-01-12 05:55:41 +00:00
kensun
fb69c41387 Wifi: Add sepolicy files for wifi_sniffer service
Bug: 237465412
Test: Manual Test
Change-Id: I558b7f401c8d0da0f7f5b376165b42e1073a7900
2023-01-12 05:47:03 +00:00
sukiliu
26aa4fa6e2 Update error on ROM 9481402
Bug: 265220235
Test: SELinuxUncheckedDenialBootTest
Change-Id: I784b50120a7f4dd3c9ee8c0837f0ddfd8210da2a
2023-01-12 10:47:54 +08:00
Xu Han
e8f6804674 Merge "Fix permission regarding camera HAL, raidoExt and rlsservice" 2023-01-11 23:06:17 +00:00
Dinesh Yadav
7056027e71 Add SEPolicy settings for android logging/tracing service for GXP
Test:
Checked that no "avc" violations were caused by gxp_logging after selinux has been enforced.

Bug: 264489388
Change-Id: I967b7b6d57c70804bed5c4ae94ff7b62ece23de3
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-01-11 13:54:47 +00:00
Hasini Gunasinghe
ab3f430aae Merge "[Port ag/20645453] Map Rust KeyMint to same SELinux policy as C++" 2023-01-10 19:52:48 +00:00
Ken Yang
2dda40afef WLC: Cleanup the sysfs_wlc policies
The sepolicy must be self-contained without including wirelss_charger to
avoid build break in AOSP

Bug: 263830018
Change-Id: Iff235b0c006474b59af853a19d01ba57c3dfe451
Signed-off-by: Ken Yang <yangken@google.com>
2023-01-10 16:03:22 +00:00
sukiliu
fdb950e96d Update error on ROM 9471410
Bug: 264600171
Bug: 264972626
Bug: 264972745
Bug: 264972759
Test: scanBugreport
Change-Id: Ibe3bd94ce6c9c62bb6b2733cc025d0ccd9c478c5
2023-01-10 16:12:05 +08:00
TreeHugger Robot
029f002a34 Merge "Allow dmabuf heap access to graphics allocator" 2023-01-10 01:52:35 +00:00
Hasini Gunasinghe
76c4f20434 [Port ag/20645453] Map Rust KeyMint to same SELinux policy as C++
Allow the Rust and C++ implementations of the KeyMint HAL service to be
toggled easily, by mapping them to the same SELinux policy.

Bug: 197891150
Bug: 225036046
Test: VtsAidlKeyMintTargetTest
Change-Id: Ic43985f32aaabb2560ef0b02573a1e587e24fc6a
2023-01-10 01:19:17 +00:00
Ankit Goyal
344fb91207 Allow dmabuf heap access to graphics allocator
There is no change in dmabuf heaps from pro, so these use the exact same
SEpolicy rules

Fix: 264489636
Test: Boots to home (with SELinux enforced)
Test: VtsHalGraphicsMapperV4_0TargetTest
Change-Id: I58ec8d9558fa76b805c0882cbbb20bfd08aead13
2023-01-09 16:16:28 -08:00
George Lee
394b28b7b1 selinux: Enable lpf_power for sys_odpm
Bug: 264929465
Test: Confirm selinux error no longer exist
Change-Id: Ibd7bfccac0d942507f3f1a9e2bf667ed1a54a9e6
Signed-off-by: George Lee <geolee@google.com>
2023-01-09 14:54:57 -08:00
Suki Liu
67584383ca Merge "Update error on ROM 9467820" 2023-01-09 13:01:06 +00:00
Miller Liang
89bdcc93cc Merge "audio:fix AAudio API access denial" 2023-01-09 12:36:34 +00:00
millerliang
8889eb6496 audio:fix AAudio API access denial
This commit adds the sepolicy file for AAudio API

I auditd  : type=1400 audit(0.0:113):
avc: denied { map } for comm="binder:900_7" path="/dev/snd/pcmC0D0p"
dev="tmpfs" ino=1191 scontext=u:r:audioserver:s0
tcontext=u:object_r:audio_device:s0 tclass=chr_file permissive=1

Bug: 264484544
Test: test_steal_exclusive -c0
Test: Check no avc_deny on audioserver
Change-Id: I9efde74c74722b1b32c1d800a4cbceea8a850bfa
2023-01-09 14:55:32 +08:00
sukiliu
acd718f65a Update error on ROM 9467820
Bug: 264831112
Test: SELinuxUncheckedDenialBootTest
Change-Id: I3f3ca17d3620cf3b1c6c21fc996143be25622b48
2023-01-09 14:55:19 +08:00
Cheng Chang
67ff25f88c Merge "allow system_server binder call gpsd" 2023-01-09 06:04:41 +00:00
Neo Yu
c13eb657f9 Merge "Remove rild.te because all issues about rild are fixed." 2023-01-09 03:57:40 +00:00
KRIS CHEN
3d15476ae0 Merge "Remove tracking_denials/hal_fingerprint_default.te" 2023-01-09 03:20:16 +00:00
Kris Chen
9be7a3368a Remove tracking_denials/hal_fingerprint_default.te
Bug: 264489559
Test: test fingerprint under enforcing mode
Change-Id: Ifd8637cba54264a1906e444b25d735c81f7037f0
2023-01-09 03:19:57 +00:00
Cheng Chang
e83f8dcee8 allow system_server binder call gpsd
01-05 17:56:17.416 hidl_ssvc_poll: type=1400 audit(0.0:467): avc: denied { call } for scontext=u:r:system_server:s0 tcontext=u:r:gpsd:s0 tclass=binder permissive=1

Bug: 264508279
Test: flash test build and check avc denied logs are goned
Change-Id: I6f3f27de7466cb594c192cd8339009ca6633ec6d
2023-01-09 03:19:43 +00:00
neoyu
f2ed76a124 Remove rild.te because all issues about rild are fixed.
Bug: 264490075
Test: build pass
Change-Id: I37e6caedb9903faa1f1f974d596753223fde0f5f
2023-01-09 10:54:14 +08:00
Aaron Tsai
6d11fe20d0 Merge "Fix avc denied for rild" 2023-01-09 02:21:17 +00:00
TreeHugger Robot
09ba144bc6 Merge "sepolicy: remove tracking denials for hal_power_stats" 2023-01-09 01:58:14 +00:00
Aaron Tsai
93dd7a2935 Fix avc denied for rild
original log: [  158.669951] type=1400 audit(1671200951.308:888): avc: denied { write } for comm="dumpstate" path="pipe:[227853]" dev="pipefs" ino=227853 scontext=u:r:rild:s0 tcontext=u:r:dumpstate:s0 tclass=fifo_file permissive=1
original log: [  174.593792] type=1400 audit(1671063328.232:1003): avc: denied { use } for comm="dumpstate" path="pipe:[235312]" dev="pipefs" ino=235312 scontext=u:r:rild:s0 tcontext=u:r:dumpstate:s0 tclass=fd permissive=1

Bug: 263049190
Bug: 262633094
Test: manual test and check log
Change-Id: I56b26c8dc820e00ef659844cceff45edded4d677
2023-01-07 14:05:10 +00:00
TreeHugger Robot
f4841acd83 Merge "Wifi: Add sepolicy files for hal_wifi_ext service" 2023-01-07 07:38:08 +00:00
Darren Hsu
8eed3af1eb sepolicy: remove tracking denials for hal_power_stats
Bug: 264489189
Test: Captured bugreport and make sure there is no any avc denails
Test: related to hal_power_stats
Change-Id: Id83022ebaca5a507873bee57363a54baf4a27310
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-01-07 15:04:35 +08:00
Randall Huang
a3c890ba1e Merge "sepolicy: remove vold tracking_denials." 2023-01-07 03:07:09 +00:00
Xu Han
b8ab0fed91 Fix permission regarding camera HAL, raidoExt and rlsservice
Bug: 264483024
Bug: 264489641
Bug: 263185565
Test: selinux log
Change-Id: Ieb174aef18c218efdcb357245c7d5ac4953a949c
2023-01-06 11:56:55 -08:00
Xu Han
ffdcbabbab Merge "Allow camera HAL to call radioExt HAL for desense" 2023-01-06 17:31:02 +00:00
Suki Liu
8f3cb77d1c Merge "Update error on ROM 9460470" 2023-01-06 08:31:23 +00:00
kensun
0f5b5efdd1 Wifi: Add sepolicy files for hal_wifi_ext service
This commit adds the sepolicy related files for hal_wifi_ext service.

[   27.714476] type=1400 audit(1670979557.360:29): avc: denied { call } for comm="binder:942_1" scontext=u:r:hal_wifi_ext:s0 tcontext=u:r:grilservice_app:s0:c215,c256,c512,c768 tclass=binder permissive=1
12-14 08:59:17.360   942   942 I binder:942_1: type=1400 audit(0.0:29): avc: denied { call } for scontext=u:r:hal_wifi_ext:s0 tcontext=u:r:grilservice_app:s0:c215,c256,c512,c768 tclass=binder permissive=1

Bug: 262455388
Test: Check no avc_deny on hal_wifi_ext
Change-Id: Ibc48225845b0cd10bbe88527449016daa9ef9eff
2023-01-06 08:06:57 +00:00
Randall Huang
55133b1c0c sepolicy: remove vold tracking_denials.
Move platform-specific vold rule to common folder.

Bug: 264483567
Bug: 264483569
Bug: 264489799
Test: run atest
Change-Id: Idad799d9f536ca18a0c3b5e7eb9d0bc182015e64
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-01-06 14:04:21 +08:00
sukiliu
18257ad81e Update error on ROM 9460470
Bug: 264483456
Bug: 264483024
Bug: 264600083
Bug: 264483531
Bug: 264606212
Bug: 264600084
Bug: 264483754
Test: SELinuxUncheckedDenialBootTest
Change-Id: I4a281b360783032132179fd9f9b314d0a65d233a
2023-01-06 10:46:28 +08:00
Adam Shih
9fbe949e7c Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 264483456
Bug: 264483024
Bug: 264600083
Bug: 264483531
Bug: 264600052
Bug: 264600084
Bug: 264483754
Test: scanBugreport
Bug: 264600171
Bug: 264600086
Bug: 264600053
Bug: 264599934
Change-Id: Idd111c69fbcebadf941f2a7cb6e0af7c8e24711d
2023-01-06 09:32:22 +08:00
Xu Han
525acba924 Allow camera HAL to call radioExt HAL for desense
Bug: 264204392
Test: selinux log
Change-Id: Iee7f45a649444cc6c95b8094f001645e85eb83ba
2023-01-05 18:54:59 +00:00
Adam Shih
16452851f3 dispatch domains to owner via bugs
Bug: 264484544
Bug: 264489606
Bug: 264489743
Bug: 264489675
Bug: 264489633
Bug: 264489777
Bug: 264489520
Bug: 264489270
Bug: 264489387
Bug: 264489745
Bug: 264489957
Bug: 264489521
Bug: 264490031
Bug: 264489388
Bug: 264489608
Bug: 264489609
Bug: 264489778
Bug: 264489634
Bug: 264489794
Bug: 264489795
Bug: 264489559
Bug: 264489636
Bug: 264489746
Bug: 264490032
Bug: 264489188
Bug: 264489676
Bug: 264489779
Bug: 264489189
Bug: 264489677
Bug: 264489780
Bug: 264489637
Bug: 264490033
Bug: 264489390
Bug: 264489561
Bug: 264489750
Bug: 264489190
Bug: 264490051
Bug: 264489958
Bug: 264489610
Bug: 264489562
Bug: 264489797
Bug: 264489781
Bug: 264490034
Bug: 264489678
Bug: 264490091
Bug: 264490035
Bug: 264490011
Bug: 264490052
Bug: 264489639
Bug: 264489961
Bug: 264490072
Bug: 264490012
Bug: 264489523
Bug: 264489679
Bug: 264490053
Bug: 264489564
Bug: 264489783
Bug: 264490036
Bug: 264490074
Bug: 264490054
Bug: 264489565
Bug: 264490092
Bug: 264490075
Bug: 264489641
Bug: 264490093
Bug: 264489962
Bug: 264489784
Bug: 264489567
Bug: 264490076
Bug: 264489786
Bug: 264490014
Bug: 264489524
Bug: 264490055
Bug: 264489569
Bug: 264489526
Bug: 264489642
Bug: 264489681
Bug: 264489963
Bug: 264489787
Bug: 264490095
Bug: 264489799
Bug: 264490077
Test: boot to home in enforcing mode
Change-Id: I784ee1653800119308c22c85652764a99ca076e4
2023-01-05 13:15:51 +08:00
Adam Shih
c858342332 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 264483752
Bug: 264483024
Bug: 264483531
Bug: 264483532
Bug: 264483567
Bug: 264483670
Bug: 264483151
Bug: 264483152
Bug: 264483352
Bug: 264483568
Bug: 264483753
Bug: 264482981
Bug: 264483754
Bug: 264483456
Bug: 264483787
Test: scanBugreport
Bug: 264483390
Bug: 264482983
Bug: 264483355
Bug: 264483356
Bug: 264483533
Bug: 264483319
Bug: 264483569
Test: scanAvcDeniedLogRightAfterReboot
Bug: 264321380
Bug: 264483357
Change-Id: I39f2a98bbbc8e416b86dd06cc99984acbab97baa
2023-01-05 11:04:42 +08:00
TreeHugger Robot
10a6384587 Merge "label GPU as same_process_hal" 2023-01-04 06:21:24 +00:00
TreeHugger Robot
e9a315b81a Merge "set necessary domains to permissive" 2023-01-04 05:06:08 +00:00
Adam Shih
92f2edf487 label GPU as same_process_hal
Bug: 261933250
Bug: 261933249
Bug: 261933226
Bug: 261933097
Bug: 261933428
Bug: 261933227
Bug: 260768740
Bug: 260922185
Test: boot to home under enforcing mode
Change-Id: Ied95ce0c1f851785e0848f7af788969f27e45101
2023-01-04 12:10:27 +08:00
Adam Shih
97748d82a9 set necessary domains to permissive
Bug: 254378739
Test: enforce and boot to home
Change-Id: I1dc8f400971e0926dbb2c5c0ac6f0ef99250e067
2023-01-04 11:57:28 +08:00
Adam Shih
00b1421a56 Update error on ROM 9451592
Bug: 264321380
Test: scanAvcDeniedLogRightAfterReboot
Change-Id: Ibdf5acaa5898a728aac202902a1577d05f7d1f25
2023-01-04 10:23:28 +08:00
TreeHugger Robot
bd992ad2b4 Merge "Sepolicy: Pixelstats: Battery history sepolicy" 2023-01-04 02:19:54 +00:00
TreeHugger Robot
af402f7187 Merge "Update error on ROM 9449178" 2023-01-03 03:06:21 +00:00
TreeHugger Robot
9bb06f3d46 Merge "modem_svc_sit: Grant permission to read vendor_fw_file" 2023-01-03 02:50:17 +00:00
Adam Shih
ef8da88fdc Update error on ROM 9449178
Bug: 264204392
Bug: 264204525
Bug: 264204023
Bug: 264204215
Test: scanAvcDeniedLogRightAfterReboot
Change-Id: Ice60ef7f25f549a990e3c6f006ed528b0b0beedf
2023-01-03 10:03:13 +08:00
Wasb Liu
cefb0a621f hal_health_default: updated sepolicy
Add necessary sepolicy.

Bug: 260366438
Bug: 261933135
Bug: 262178574
Bug: 262794970
Test: no avc denied for hal_health_default
Change-Id: I47043f64931c191063a0b3d5807ef814fa8b787f
Signed-off-by: Wasb Liu <wasbliu@google.com>
2022-12-29 09:47:23 +00:00
Darren Hsu
3ea4ff4944 sepolicy: Allow hal_power_stats to access required sysfs
Bug: 260366519
Bug: 260768935
Bug: 260922184
Bug: 261105152
Bug: 261363958
Bug: 261519183
Bug: 261651283
Bug: 261783107
Test: Captured bugreport and make sure there is no any avc denails
Test: related to hal_power_stats
Change-Id: Ic214dc1d8ea920b1bb8f700cd8b75918af3ab046
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-12-29 14:33:17 +08:00
Kris Chen
4963317cad zuma: fingerprint: fix SELinux denails
Bug: 261105164
Test: boot with no relevant error on p23 device
Change-Id: I8d897693685591a042c5febfeca0121375749b8e
2022-12-23 17:43:50 +08:00
Kadyr Narmamatov
3fc1ab6583 modem_svc_sit: Grant permission to read vendor_fw_file
Bug: 260371849
Change-Id: Ia1bb3483c0d1dfcc1fc34b625f8b0eddf099cafb
2022-12-23 04:11:01 +00:00
Timmy Li
a6fd3e2122 Merge "Add hal_camera_default se linux file for zuma" 2022-12-23 03:47:09 +00:00
TreeHugger Robot
42fb73dfeb Merge "Move the sepolicy setting of als_table to the new file." 2022-12-23 02:25:58 +00:00
Adam Shih
d045e5ac5e Update error on ROM 9431928
Bug: 263525155
Test: scanAvcDeniedLogRightAfterReboot
Change-Id: Ie309aafff8d3772f19c28e3d3b049b642bd2c221
2022-12-23 08:19:30 +08:00
Chia-Ching Yu
0dfdbed76e Move the sepolicy setting of als_table to the new file.
Bug: 261111968
Test: There is no als_table avc denied log after reboot.

Change-Id: I41f9472e6a17dd7fce021d916e3e626a81fe79cf
2022-12-23 07:05:57 +08:00
timmyli
8d061f7ebc Add hal_camera_default se linux file for zuma
Add hal_camera_default.te for zuma. Move referenced contexts and
settings to new zuma-sepolicy folders. Add hal_camera_default type declaration
to file.te

Bug: 261651093, 260366029, 263185135
Test: Build and test for hal_camera_default denials
Change-Id: Id0246f9ca8fd399853894e9e41548976ab44ccd0
2022-12-22 21:41:11 +00:00
Dennycy
79210088c5 Sepolicy: Pixelstats: Battery history sepolicy
avc: denied { read } for comm="pixelstats-vend" name="battery_history"
dev="tmpfs" ino=845 scontext=u:r:pixelstats_vendor:s0 tcontext=u
:object_r:battery_history_device:s0 tclass=chr_file permissive=1

Bug: 260366322
Test: No more battery_history sepolicy found
Change-Id: Ic5d351ed0e42d08b24b5fd0af2d9ebd155086bc9
Signed-off-by: Dennycy <dennycylee@google.com>
2022-12-22 09:21:56 +00:00
Ernie Hsu
0faf3d2c7b Merge "mediacodec_samsung: add sepolicy for mfc codec" 2022-12-22 05:25:29 +00:00
Ernie Hsu
bb7586ac03 mediacodec_samsung: add sepolicy for mfc codec
Add necessary sepolicy. Log and reason are added in review comment
move sysfs out from legacy setting

Bug: 262633502
Bug: 263049105
Bug: 262794577
Bug: 262794578
Bug: 262794634
Test: video playback
      SELinuxTest#scanBugreport
      SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I240f3fc4672a0d3133699f76a808573e172d23f2
2022-12-22 03:46:04 +00:00
Adam Shih
b3894c8262 Update error on ROM 9428849
Bug: 263429589
Bug: 263429985
Bug: 263429986
Test: scanAvcDeniedLogRightAfterReboot
Change-Id: I7387105916c4cb8ca9c6a6ab0e6d58f6c8d24d0b
2022-12-22 10:02:41 +08:00
Kah Xuan Lim
77becc2a8f Merge "Modem ML: create selinux rules" 2022-12-21 10:04:58 +00:00
Chung-Kai (Michael) Mei
839546d2e3 Merge "Revert "Fix avc denials for powerhal"" 2022-12-21 08:39:31 +00:00
Chung-Kai (Michael) Mei
21426ea726 Revert "Fix avc denials for powerhal"
This reverts commit 92e550d83f.

Reason for revert: here's duplicated setting

Change-Id: I4188deee0010c5dd10501fd9b36ae3876c412322
2022-12-21 08:37:50 +00:00
Ken Yang
de0b57a913 Merge "WLC: Remove sysfs_wlc sepolicy" 2022-12-21 08:36:15 +00:00
TreeHugger Robot
aed7870cb2 Merge "Fix avc denials for powerhal" 2022-12-21 07:20:07 +00:00
TreeHugger Robot
e9868935cf Merge "mediacodec_google: updated sepolicy" 2022-12-21 04:58:31 +00:00
Chungkai Mei
92e550d83f Fix avc denials for powerhal
Test: bott passed and no avc log after boot
Bug: 260769063
Bug: 261105028
Bug: 260366126
Bug: 261650934
Bug: 262178497
Bug: 262315567
Bug: 262633072
Change-Id: I84e5cdaeb8016bd3f5506a242ee8e3a58052ab07
Signed-off-by: Chungkai Mei <chungkai@google.com>
2022-12-21 02:46:39 +00:00
TreeHugger Robot
f22f38b970 Merge "Update error on ROM 9423786" 2022-12-21 02:40:11 +00:00
Taylor Nelms
9f72e56d46 Merge "Modify permissions to allow dumpstate process to access decon_counters node" 2022-12-21 01:41:40 +00:00
Adam Shih
f0d101b3e7 Update error on ROM 9423786
Bug: 263304957
Bug: 263305034
Bug: 263305106
Bug: 263305225
Bug: 263305107
Bug: 263305203
Test: scanAvcDeniedLogRightAfterReboot
Change-Id: Iea85cf823b04f73d58ffab84f4b06dce39e80fc9
2022-12-21 08:44:19 +08:00
Kah Xuan Lim
6ea5e4634a Modem ML: create selinux rules
Bug: 262338662
Change-Id: I899a03a36b542bbf6b9e4b936f279f2d6b4a4c7b
2022-12-20 08:39:35 +00:00
Sateshk Kumar Chinnappan
293813afed Merge "Add selinux rules for platform_apps to access vendor_ims_app udp socket for read/write of RTP packets." 2022-12-20 04:01:42 +00:00
Ruofei Ma
fd79c76365 mediacodec_google: updated sepolicy
Add necessary sepolicy.

Bug: 262633230
Test: no avc denied for mediacodec_google

Change-Id: I0b2a8a12d9d9a6484cf899fabdf213b8c9a279e9
Signed-off-by: Ruofei Ma <ruofeim@google.com>
2022-12-19 19:37:52 -08:00
TreeHugger Robot
2b5846fc4a Merge "restart domains" 2022-12-20 03:28:07 +00:00
Adam Shih
169b9143fb restart domains
Bug: 254378739
Test: boot to home
Change-Id: I7d077b7c5edfb3bee07a05fda05e5076e515c7bf
2022-12-20 08:50:43 +08:00
Adam Shih
2682fc7fc4 update error on ROM 9420981
Bug: 263185135
Bug: 263184738
Bug: 263185136
Bug: 263185161
Bug: 263185431
Bug: 263185547
Bug: 263185432
Bug: 263185565
Bug: 263184920
Bug: 263185566
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ia305204ccda294f7ad38edb669c85907485e4db3
2022-12-20 08:38:41 +08:00
Sateshk Kumar Chinnappan
ebe77e31f4 Add selinux rules for platform_apps to access vendor_ims_app udp socket for read/write of RTP packets.
This addresses the following SE policy denial
11-11 20:51:49.388000  2167  2167 I auditd  : type=1400 audit(0.0:11): avc: denied { read write } for comm="nnon.imsservice" path="socket:[111836]" dev="sockfs" ino=111836 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:r:vendor_ims_app:s0:c228,c256,c512,c768 tclass=udp_socket permissive=0 app=com.shannon.imsservice

Bug: 262320328
Test: Manual
Change-Id: I450f1faebd6c6a67e9f904c880360e75bad3cb40
2022-12-19 19:26:14 +00:00
Ken Yang
0656a4f24d WLC: Remove sysfs_wlc sepolicy
Bug: 237600973
Change-Id: If0416877447c9f588d69f498f6219297392f4e55
Signed-off-by: Ken Yang <yangken@google.com>
2022-12-19 06:17:39 +00:00
Adam Shih
be72019a1c restart domains
Bug: 254378739
Test: boot to home
Change-Id: I6faa55132d52896c5138eb4dcff2bde3557dcf90
2022-12-19 11:01:25 +08:00
Adam Shih
56d34babe5 Update error on ROM 9412813
Bug: 263049190
Bug: 263048776
Bug: 263048760
Bug: 263048994
Bug: 263049105
Test: scanBugreport
Change-Id: Iae0d5926b61b901ef92a6658ba72ff6e81133ed5
2022-12-19 10:11:42 +08:00
Taylor Nelms
e7f915c920 Modify permissions to allow dumpstate process to access decon_counters node
Bug: 240346564
Test: Build for P23 device with "user" build, check bugreport for decon_counters content
Change-Id: Iac569b53880f903aa6496cb24bdadc6e38975171
Signed-off-by: Taylor Nelms <tknelms@google.com>
2022-12-16 16:50:49 +00:00
Adam Shih
81112ab63a Update error on ROM 9409984
Bug: 262794634
Bug: 262793919
Bug: 262794428
Bug: 262794938
Bug: 262794359
Bug: 262794939
Bug: 262793920
Bug: 262794577
Bug: 262794578
Bug: 262794969
Bug: 262794970
Bug: 262794360
Bug: 262794429
Test: scanAvcDeniedLogRightAfterReboot
Change-Id: Iaa3d4e54ccee70f48a322df6d229d3cae1ba1df6
2022-12-16 09:41:47 +08:00
TreeHugger Robot
3406af9012 Merge "Add BrownoutDetected Events - zuma sepolicy" 2022-12-15 05:29:35 +00:00
TreeHugger Robot
1c85fa9544 Merge "Update error on ROM 9406001" 2022-12-15 04:15:56 +00:00
Adam Shih
dc479f78a5 Merge "restart domains" 2022-12-15 03:15:49 +00:00
Adam Shih
f877ad1b19 Update error on ROM 9406001
Bug: 262633248
Bug: 262633072
Bug: 262633230
Bug: 262633502
Bug: 262633094
Test: scanBugreport
Change-Id: I74904ba4ae79264bb1623bb16d9f5f8369a39b9f
2022-12-15 09:38:07 +08:00
Adam Shih
419fa5774c create an empty dump file for wlan
Bug: 261784587
Test: adb bugreport
Change-Id: I6a0e65e4624348f5f34cb618150a6978996dcdc9
2022-12-14 13:33:33 +08:00
Adam Shih
ce44423468 restart domains
Bug: 254378739
Test: boot to home
Change-Id: I427f1647d5a0a95e750fd59419575cdb7553111e
2022-12-14 11:27:03 +08:00
TreeHugger Robot
6b40c66a4a Merge changes Ie67dbbda,Ib07c7a0e
* changes:
  restart domains
  update error on ROM 9401969
2022-12-14 03:06:08 +00:00
Adam Shih
4b9a4886f1 restart domains
Bug: 254378739
Test: boot to home
Change-Id: Ie67dbbdad041d84cddbabf62e98b0a8f2b1eadf2
2022-12-14 09:19:54 +08:00
Adam Shih
6e9a08deab update error on ROM 9401969
Bug: 262455571
Bug: 262451641
Bug: 262455755
Bug: 262455388
Bug: 262455719
Bug: 262455954
Bug: 262455682
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ib07c7a0ea36c75871a527dfba4e2841675e34e6f
2022-12-14 09:12:20 +08:00
TreeHugger Robot
5b081814bd Merge "restart domains" 2022-12-13 07:15:58 +00:00
Adam Shih
126d6a4771 restart domains
Bug: 254378739
Test: boot to home
Change-Id: Ib6b0d9415b286fc7025df009a3bf7f1105ae4860
2022-12-13 13:38:35 +08:00
George Lee
b17a5fc383 Add BrownoutDetected Events - zuma sepolicy
Brownout Detection is detected during the boot sequence.  If the
previous shutdown resulted in a reboot reason that has *ocp* or *uvlo*
in it, the shutdown was due to brownout.  Mitigation Logger should have
logged the device state during the brownout.  This event metric is to
surface the logged data.

Bug: 250009365
Test: Confirm triggering of events
Ignore-AOSP-First: to detect brownout.
Change-Id: I54e354372935e339f685fc8f5541a0568053ae08
Signed-off-by: George Lee <geolee@google.com>
2022-12-12 21:20:58 -08:00
TreeHugger Robot
1c9b746ee7 Merge "Update error on ROM 9394459" 2022-12-13 03:38:59 +00:00
Adam Shih
87d1f92ee9 Update error on ROM 9394459
Bug: 262315567
Test: scanBugreport
Change-Id: I0474a4ad026300836e533f795db5030ff1f44e59
2022-12-13 02:00:20 +00:00
Lopy Cheng
7b281b63f2 hal_graphics_composer_default: add sepolicy for display
Fix avc denied issues.

Bug: 260769163
Bug: 261105029
Bug: 261933075
Bug: 261933169
Bug: 262178623
Test:
There is no AVC denied log after reboot

Change-Id: I291877a0f70f25a43f49a96a2b280be925bb98c5
2022-12-12 16:12:18 +08:00
Adam Shih
a0e1ac65e8 Update error on ROM 9393090
Bug: 262178702
Bug: 262178623
Bug: 262178574
Bug: 262178575
Bug: 262178497
Bug: 261933250
Test: scanBugreport
Change-Id: I71e6f3bada4824135725d4861d779e60c3c95706
2022-12-12 04:25:16 +00:00
TreeHugger Robot
4ba1e2ea9a Merge "Update error on ROM 9385014" 2022-12-10 04:06:07 +00:00
Adam Shih
714677d599 Update error on ROM 9385014
Bug: 261933169
Bug: 261933097
Bug: 261933428
Bug: 261933367
Bug: 261933249
Bug: 261933075
Bug: 261933155
Bug: 261933368
Bug: 261933226
Bug: 261933135
Bug: 261933310
Bug: 261933250
Bug: 261933227
Bug: 261933171
Bug: 261933311
Bug: 261933251
Test: scanBugreport
Change-Id: I8331a8595358a6ca09813306015137a11ed71d38
2022-12-09 12:07:31 +08:00
George Chang
b5887a9853 Update permissions for st54spi and st33spi
Remove st33spi and update st54spi rules

Bug: 261519145
Bug: 261519169
Test: m atest && atest-dev com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I37736275204ad7bea98ce225121e71545260187c
2022-12-08 15:08:17 +00:00
Adam Shih
1774ec056b restart domain
Bug: 254378739
Test: boot to home
Change-Id: I776bf6fa66605a4c3a888f2362b79fa1e0ec122a
2022-12-08 09:55:57 +08:00
Adam Shih
43a2adc630 update error on ROM 9381955
Bug: 261783158
Bug: 261783107
Bug: 261783031
Bug: 261782930
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ia70ad5b6d7d67f244ffab1874ff255659251da0b
2022-12-08 09:45:04 +08:00
Cyan Hsieh
fe97b2df7a Revert "restart domain"
This reverts commit be714f6fa3.

Reason for revert: build breakage

Change-Id: I02a16de23cd657bc0cc9494b03f840d0060ac9d1
2022-12-07 04:41:58 +00:00
Adam Shih
be714f6fa3 restart domain
Bug: 254378739
Test: boot to home
Change-Id: I63a3e22ccbee16dd3f186e76fa698d2e7454c057
2022-12-07 09:48:15 +08:00
Adam Shih
226ad03850 update error on ROM 9377107
Bug: 261651113
Bug: 261651093
Bug: 261650934
Bug: 261651283
Bug: 261651325
Bug: 261651187
Bug: 261651110
Bug: 261651326
Bug: 261651112
Bug: 261650972
Bug: 261651095
Bug: 261651131
Bug: 261651009
Bug: 261650953
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I560c6fe5901fda018ff3f640d04954d245635db4
2022-12-07 09:35:16 +08:00
TreeHugger Robot
8ddedfa7fa Merge "restart domains" 2022-12-06 08:35:59 +00:00
Jenny Ho
a74ca48b0e Merge "add permission for dump logbuffer" 2022-12-06 07:31:50 +00:00
Jenny Ho
ed45434f01 add permission for dump logbuffer
Bug: 260756283
Change-Id: If4d885cc53bbb2a4796d638c5f23fbf17a494436
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2022-12-06 10:50:21 +08:00
Adam Shih
21f4111616 restart domains
Bug: 254378739
Test: boot to home
Change-Id: If7264f1a5cdaace0558dbeda986d9c899dd6ac08
2022-12-06 10:34:32 +08:00
Adam Shih
3a3a4e3111 update error on ROM 9372160
Bug: 261518779
Bug: 261516808
Bug: 261519183
Bug: 261519145
Bug: 261519049
Bug: 261519169
Bug: 261519050
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ib42e6f3cb730a8e8cd45cfe164b6dc9eb1e41940
2022-12-06 10:17:31 +08:00
TreeHugger Robot
7c94c8c83f Merge "restart deomains" 2022-12-05 06:02:58 +00:00
TreeHugger Robot
4437e6fdf4 Merge "update error on ROM 9367865" 2022-12-05 05:57:14 +00:00
Adam Shih
d6f91bdd8c restart deomains
Bug: 254378739
Test: boot to home
Change-Id: I0ba59f5781d50ac4e9d8f501792a74187eda864e
2022-12-05 12:33:05 +08:00
Adam Shih
cbdc1d8382 update error on ROM 9367865
Bug: 261364077
Bug: 261363679
Bug: 261363958
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I99b80c85ca12b9657b231475506044812eb415fc
2022-12-05 12:26:20 +08:00
Kenny Root
cc4dfa8c8b Add GSA BL1 partition to OTA domain
This allows the OTA mechanism to write to the bootloader slot to
perform the actual OTA

Test: reboot and check partition label with ls -lZ
Bug: 259190970
Change-Id: I5433adbacfc6e16e61aac2e797f03f63b0deb29f
Signed-off-by: Kenny Root <kroot@google.com>
2022-12-04 18:36:10 -08:00
Adam Shih
eedcbe920d fix missing declaration
Bug: 254378739
Test: build pass
Change-Id: Ifb823de88007108a158fe747d1ed1f42547c2120
2022-12-05 09:05:06 +08:00
Adam Shih
d4f59d3275 retire pixel-sepolicy
Bug: 254378739
Test: boot with power stats launched
Change-Id: I5fa1b4617000490de6cdf79699014e076a34d816
2022-12-02 10:19:13 +08:00
Adam Shih
6d88af1c59 update error on ROM 9359906
Bug: 261105374
Bug: 261105238
Bug: 261105224
Bug: 261105182
Bug: 261105164
Bug: 261105029
Bug: 261105028
Bug: 261105152
Bug: 261105336
Bug: 261105354
Bug: 261105092
Bug: 261105356
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I66bbcedd4a0566f27561017bc7dcdca81a5ab67a
2022-12-02 09:37:25 +08:00
George Chang
f40edb1ad5 Fix hal_nfc_default selinux denial
Allow hal_nfc_default to access vendor_nfc_prop

Bug: 260769165
Bug: 260921340
Test: m atest && atest-dev com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I53ff6262ac3210ee166df6d87c0fa587aa594b86
2022-12-01 05:58:50 +00:00
Adam Shih
b9a2444b1b update error on ROM
Bug: 260922186
Bug: 260921736
Bug: 260921579
Bug: 260921340
Bug: 260922184
Bug: 260922162
Bug: 260922442
Bug: 260922187
Bug: 260922048
Bug: 260922185
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I062c00075e09874ede185ab1f114aa1ade16991b
2022-12-01 08:47:12 +08:00
Adam Shih
f1bdfb4013 restart other domains
Bug: 254378739
Test: boot to home
Change-Id: Iddd16a969514e9e74f20793a1b7a02d328d6afbf
2022-11-30 07:59:05 +08:00
Adam Shih
f5fc404dca update error on ROM 9344284
Bug: 260769064
Bug: 260769163
Bug: 260768359
Bug: 260769165
Bug: 260769063
Bug: 260768935
Bug: 260769144
Bug: 260768402
Bug: 260768358
Bug: 260768672
Bug: 260768379
Bug: 260768740
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I2a4f4bffc251e43ed139b8e910a4195b141033f7
2022-11-30 07:57:53 +08:00
timmyli
46ec476bbc Fix rlsservice selinux denial
Allow rlsservice to access vendor_camera_prop

Bug: 260366344
Test: Compiles. Removing rlsservice.te and running specified unit test
does not reproduce bug.

Change-Id: I5b79c2c86ff3f35d1123e5e1b2a1a942f825af5e
2022-11-29 04:14:04 +00:00
Adam Shih
96d88b3f98 move touch settings to gs-common
Bug: 256521567
Test: adb bugreport
Change-Id: I881f27b45a412794cb2ea65147e2bf7b8cc708dd
2022-11-28 12:46:26 +08:00
Adam Shih
b718e7685c restart HALs
Bug: 254378739
Test: boot to home
Change-Id: Ib88e410c9b7011231a98f096e8cda8ba7332008d
2022-11-28 10:07:26 +08:00
Adam Shih
ec17f1a125 update error on ROM 9336524
Bug: 260522279
Bug: 260522435
Bug: 260522413
Bug: 260522434
Bug: 260522436
Bug: 260522378
Bug: 260522202
Bug: 260522245
Bug: 260522268
Bug: 260522282
Bug: 260522040
Bug: 260522041
Bug: 260522244
Bug: 260522203
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ib61f9c376c1351e1619621c79506396f6c291eed
2022-11-28 09:51:25 +08:00
Adam Shih
8282a5abd2 restart a number of domains
Bug: 254378739
Test: boot to home
Change-Id: I2390670d7d885d0e63fd6d1b4a1c9996ac3b6ee5
2022-11-25 14:03:00 +08:00
Adam Shih
d48baf4a6b update error on ROM 9321621
Bug: 260366279
Bug: 260365725
Bug: 260366029
Bug: 260366438
Bug: 260366177
Bug: 260366126
Bug: 260366519
Bug: 260366399
Bug: 260366065
Bug: 260366169
Bug: 260366297
Bug: 260366066
Bug: 260366439
Bug: 260366322
Bug: 260366281
Bug: 260366398
Bug: 260366278
Bug: 260366344
Bug: 260366321
Bug: 260363384
Bug: 260366030
Bug: 260366031
Bug: 260366195
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I2ef4a0dc4a2ff373151feb11e1d52e9931d7c0a2
2022-11-25 11:42:44 +08:00
Cheng Chang
3e8c0c0495 Merge "gps: nstandby path depend on platform" 2022-11-24 06:54:15 +00:00
Cheng Chang
426a96bf54 gps: nstandby path depend on platform
Bug: 259353063
Test: no avc denied about nstandby
Change-Id: I9713139d425be50a689130f735b37f04eb573107
2022-11-24 02:21:37 +00:00
Stephen Crane
d5f4298494 Merge "Allow Trusty storageproxy property" 2022-11-23 18:45:57 +00:00
Adam Shih
ed05e53cd7 remove permissions that are not relevant to boot
Bug: 254378739
Test: boot to home with no relevant error
Change-Id: Ie1bd477aeaf5fc38ce9d5160a7512cdfa17df9e3
2022-11-23 13:45:50 +08:00
Adam Shih
99c109ba73 suppress spamming log
Bug: 254378739
Test: Boot with less logs
Change-Id: Ibd6d6304c7b730a38c065718f5d9f0bdb86500ad
2022-11-23 11:07:06 +08:00
Adam Shih
efa62674d4 remove obsolete files
Bug: 254378739
Test: boot with no relevant error
Change-Id: I74d3c0f5fa898af75c7760aaba62e4e3a9857f83
2022-11-23 11:06:51 +08:00
Stephen Crane
c5ac946a7a Allow Trusty storageproxy property
Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready
when the data filesystems are ready for use, and allows vendor init to
query and wait on this property.

Test: build, flash, test app loading
Bug: 258018785
Change-Id: I5fe83524d74a6f5017011553c6d5ad0e3831751c
2022-11-22 23:27:44 +00:00
Adam Shih
cc516c150a review proc_vendor_sched
Bug: 254378739
Test: boot with no relevant error
Change-Id: If7d7334896f544c7d91b123513ebe437a35373ad
2022-11-21 15:05:49 +08:00
Adam Shih
fcdad37b1b restart hal_power_default
Bug: 254378739
Test: build pass
Change-Id: I86d598a437877ffd65d22b9fe73ffc16d31ea405
2022-11-21 14:39:18 +08:00
TreeHugger Robot
393e46397f Merge changes I31ee3a76,Ic5954b5d,Ibdcea873
* changes:
  review partition related operation
  review partitions
  review fsck and relevant partitions
2022-11-21 04:46:33 +00:00
Adam Shih
91f7e4c62e review partition related operation
Bug: 254378739
Test: boot with no relevant avc error
Change-Id: I31ee3a7654e759fb19d90fa9ec05d493660c3741
2022-11-21 11:17:10 +08:00
Adam Shih
8cc9ed0404 review partitions
Bug: 254378739
Test: boot with relevant files labled correctly
Change-Id: Ic5954b5de7976e1864dc77254b547d6c97f9e564
2022-11-21 10:31:06 +08:00
Adam Shih
c37b0484af review fsck and relevant partitions
Bug: 254378739
Test: boot with no relevant error
Change-Id: Ibdcea873e830c534101aaea0f12a1717748dcb48
2022-11-21 10:16:19 +08:00
Adam Shih
f1e1ee50c2 remove panther's touch setting
Bug: 256521567
Test: adb bugreport
Change-Id: Ia4019d1c3b7db0ae278cb0133c1530857eac364c
2022-11-18 13:39:07 +08:00
Adam Shih
381ae2dddb restart device dependent HALs
Bug: 254378739
Test: build pass
Change-Id: I06061867773dd20989923b3ce81b58a457f8a929
2022-11-18 11:19:34 +08:00
Adam Shih
926118c0bd remove logger_app to start over
Bug: 254378739
Test: build pass
Change-Id: Iec521b367fcdf48b38c81ee834f5805bd6e28bc8
2022-11-18 11:12:40 +08:00
Adam Shih
8003246da8 remove pixelstats_vendor
It has different implementation from gs201
Bug: 254378739
Test: build pass

Change-Id: I3aa23e902ecbb1004ebf2567c55c8a1ba910212c
2022-11-18 09:57:07 +08:00
TreeHugger Robot
aac354caf1 Merge "radio: Add new radio device" 2022-11-17 07:57:23 +00:00
Adam Shih
3e8c9ba007 Merge "use syna setting from gs-common" 2022-11-17 07:09:28 +00:00
Salmax Chang
f87c27197c radio: Add new radio device
Add "/dev/oem_test" into radio device label list.

Bug: 258744063
Change-Id: If5e7d555f4b0584f87956c9354ebf1d3efd9f73f
2022-11-17 14:37:02 +08:00
Adam Shih
ac48178051 Merge "review cat_engine_service_app" 2022-11-17 02:59:15 +00:00
Adam Shih
9d8a25a6d1 use syna setting from gs-common
Bug: 256521567
Test: adb bugreport
Change-Id: I4ef0a4d7cc8ee900394f3b68e48b4ff58891d1e2
2022-11-17 10:29:22 +08:00
TreeHugger Robot
55658a9f55 Merge "remove raven setting" 2022-11-16 07:42:25 +00:00
Adam Shih
1b9d3e9092 review cat_engine_service_app
Bug: 254378739
Test: build pass
Change-Id: I98710837319528a577af205b51de710baa742e1d
2022-11-16 14:15:33 +08:00
TreeHugger Robot
cebbeb21ac Merge "improve dumpstate performance to 72 seconds" 2022-11-16 05:26:48 +00:00
TreeHugger Robot
649a0e22b9 Merge changes I1317f3ec,I5c727517
* changes:
  remove obsolete code
  review radio
2022-11-16 04:37:05 +00:00
Adam Shih
5adddd397a improve dumpstate performance to 72 seconds
Bug: 259302023
Test: adb bugreport
Change-Id: I6e777e532ab09a54cec59fdb4f51c451db6f85de
2022-11-16 11:45:43 +08:00
Adam Shih
f60c6d57b0 remove obsolete code
The Hal is not on P23 device
Bug: 254378739
Test: build pass

Change-Id: I1317f3ece6454d89c9b88326aadc9cd50a56cb53
2022-11-16 10:33:09 +08:00
Adam Shih
76cecacbe3 review radio
Bug: 254378739
Test: boot to home
Change-Id: I5c7275170840cb58eb44373d2737bd7914514761
2022-11-16 10:24:25 +08:00
Adam Shih
433f95cd25 catch up gs201's setting
Bug: 254378739
Test: build pass
Change-Id: I12248518b5d30730f09bd5e7da2e47e1dd819889
2022-11-11 05:45:20 +00:00
Adam Shih
1445ec804c Merge "move sensors dump to gs-common" 2022-11-11 05:35:25 +00:00
Adam Shih
1d234c6bec move sensors dump to gs-common
Bug: 250475720
Test: adb bugreport
Change-Id: Iba58fed59d1c5a4f7767813c587d050efcf7a631
2022-11-11 11:54:23 +08:00
Adam Shih
d8e8b3899c review hal_radioext_default
Bug: 254378739
Test: boot with hal_radioext_default launched
Change-Id: Idd913e9418cc5ffbe0ade236639608c2bd313599
2022-11-10 14:29:03 +08:00
Adam Shih
90dff9f56d review init.radio.sh
Bug: 254378739
Test: boot with the script running
Change-Id: I76d58d9d15e5275a45a37292a1db2598e5e24e52
2022-11-10 11:46:42 +08:00
Adam Shih
9db49d02d4 review bipchmgr
Bug: 254378739
Test: boot with bipchmgr launched
Change-Id: I3d09a8dad088815c60aefc349e7a2d8b178e61fd
2022-11-10 11:44:00 +08:00
Adam Shih
d806a9ed5d review vcd
Bug: 254378739
Test: boot with vcd launched
Change-Id: I9e6fc1efab3f39c4d7f75490860acf901599a87a
2022-11-10 11:41:18 +08:00
Adam Shih
4e54746992 Merge "remove edgeTPU folder" 2022-11-10 03:19:29 +00:00
Rick Chen
59ef653909 Allow CHRE to use EPOLLWAKEUP
Bug: 238666865
Test: Compile pass.
Change-Id: I22f27fb03826d5298e866140dac91cec823e318b
Signed-off-by: Rick Chen <rickctchen@google.com>
2022-11-09 18:32:02 +08:00
Adam Shih
fc41e82939 remove edgeTPU folder
Bug: 258114806
Test: build pass
Change-Id: Ic9eb7f671ef3ede2da40e0ec40b0bb0646240924
2022-11-09 12:39:09 +08:00
Adam Shih
d55543c288 isolate samsung modem related sepolicy
Bug: 254378739
Test: boot with relevant binary launched
Change-Id: Ia18fce855bee17b93d97d1aa29a40d834a81fe09
2022-11-09 10:41:21 +08:00
Adam Shih
b604d839ed remove raven setting
Bug: 256521567
Test: device does not have the file
Change-Id: I64540c0eab12a71ab233a6d95883bd47c9265178
2022-11-08 10:32:33 +08:00
Adam Shih
a91e557579 review the rest of slsi apps
Bug: 254378739
Test: build pass
Change-Id: Icdea2a58f0b77cc78de7fd831aa7a54ddff2b0d3
2022-11-07 13:44:27 +08:00
Adam Shih
fb3623ca3d review vendor_engineermode_app
Bug: 254378739
Test: build pass
Change-Id: I6dcbe756227cd41280f1d1b83ff7e807680259e2
2022-11-07 13:20:52 +08:00
TreeHugger Robot
19126e2dda Merge "restart hal_health_default" 2022-11-07 03:26:11 +00:00
Adam Shih
5944db2199 restart hal_health_default
Bug: 254378739
Test: boot with the HAL started
Change-Id: I3143011c46e540424e340cbc36a818449395ec69
2022-11-07 02:19:16 +00:00
Adam Shih
4c8e49f158 review sced
Bug: 254378739
Test: build pass with sced correctly labeled
Change-Id: Ie59a048c5996d03d0641c824f6526618c260795e
2022-11-07 10:02:18 +08:00
Adam Shih
61f75374b8 review vendor_telephony_silentlogging_app
Bug: 254378739
Test: build pass
Change-Id: If8234278e2198fe42ae9a986631df8a04ce119f5
2022-11-07 10:02:18 +08:00
Adam Shih
33be9e501d review vendor_telephony_debug_app
Bug: 254378739
Test: build pass
Change-Id: I2b692fe3bfb6827ca65b79a6d5e0203df5e73af5
2022-11-04 12:36:51 +08:00
Adam Shih
e08ac87755 review vendor_silentlogging_remote_app
Bug: 254378739
Test: build pass
Change-Id: Ia56316249a7a00cff93447475b5ed5d88e4d9c11
2022-11-04 12:35:31 +08:00
Adam Shih
534a8634f7 review IMS apps
Bug: 254378739
Test:
Use command to check if the app is around:
$ adb shell ps -Z| grep shannon
u:r:vendor_qualifiednetworks_app:s0:c225,c256,c512,c768 u0_a225 2250 822 14569200 102584 do_epoll_wait 0 S com.shannon.qualifiednetworksservice
u:r:vendor_rcs_app:s0:c212,c256,c512,c768 u0_a212 2495 822 14627492 110156 do_epoll_wait   0 S com.shannon.rcsservice
u:r:vendor_ims_app:s0:c224,c256,c512,c768 u0_a224 2499 822 14886680 112228 do_epoll_wait   0 S com.shannon.imsservice

Change-Id: Ic68c05d3b4d60d921a85eb2de065f8e0d7c57f43
2022-11-04 09:53:30 +08:00
Adam Shih
faf456f4ab review vendor_qualifiednetworks_app
Bug: 254378739
Test:

$ adb shell ps -Z| grep shannon
u:r:vendor_qualifiednetworks_app:s0:c225,c256,c512,c768 u0_a225 2250 822 14569200 102584 do_epoll_wait 0 S com.shannon.qualifiednetworksservice

Change-Id: I83a20d9c461a071c0d46750b32fb787806c005f1
2022-11-04 09:46:59 +08:00
Adam Shih
f6a685f60a Merge changes I937d70c7,Ia3315daa
* changes:
  remove missing app
  review vendor_ims_app
2022-11-03 09:25:31 +00:00
Adam Shih
b5c15037e0 remove missing app
Bug: 254378739
Test: no such app after boot
adb shell ps -Z

Change-Id: I937d70c749bbbb118f233a56eed136c535b18e96
2022-11-03 13:16:23 +08:00
Adam Shih
6d17ee11a8 review vendor_ims_app
Bug: 254378739
Test: boot with ims app labeled
adb shell ps -Z

Change-Id: Ia3315daa3c49e73e05039d97386a981aa5d6859d
2022-11-03 13:14:27 +08:00
Adam Shih
8221a79c0b review grilservice_app
Bug: 254378739
Test:
$ adb shell ps -Z| grep gril
u:r:grilservice_app:s0:c202,c256,c512,c768 u0_a202 1995 829 14518964 91276 0               0 S com.google.android.grilservice

Change-Id: Ie1d22e30cb548b0d82275d9e76fc4810b9fbe289
2022-11-02 11:01:52 +08:00
Adam Shih
5e2579cc53 review oemrilservice_app
Bug: 254378739
Test: boot with the app labeled correctly
adb shell ps -Z| grep oem
u:r:oemrilservice_app:s0:c231,c256,c512,c768 u0_a231 2105 829 14654604 92840 0             0 S com.samsung.slsi.telephony.oemril

Change-Id: I22b839a9547646e811925abfc5ed3b122928123c
2022-11-02 10:57:00 +08:00
Adam Shih
62b41afb1e review rild
Bug: 254378739
Test: boot with rild launched
Change-Id: I90a800bb6b15732cc2fcfdafc5174f8c874b55ef
2022-11-02 10:53:58 +08:00
Gabriel Biren
7b9dd04005 Merge "Update zuma sepolicy to allow the wifi_ext AIDL service." 2022-11-01 23:19:52 +00:00
Adam Shih
b571e6349c remove duplicated gps setting
Bug: 254758553
Test: build pass
Change-Id: I21c08f138f066f4c3baa7fa0c37ed821e3d03363
2022-11-01 10:54:35 +08:00
George Lee
9e250fe85e Merge "bcl: Add Mitigation Logger - Del zuma-sepolicy" 2022-10-31 14:17:57 +00:00
Adam Shih
81a354fc88 move brcm gps solution to gs-common
Bug: 254758553
Test: google map can locate on pixel
Change-Id: I0ffbf5da277d71e04cd3aec1e8ef366b00309a83
2022-10-28 14:00:27 +08:00
George Lee
5a11307aac bcl: Add Mitigation Logger - Del zuma-sepolicy
Mitigation Logger logs battery related information for 1 second when it
is triggered by under voltage or over current interrupts.  Information
collected is to help debug system brownout.

Bug: 228383769
Test: Boot and Test
Change-Id: I83f1d8da286b53c0ae072db7ad1ce62900e5837d
Signed-off-by: George Lee <geolee@google.com>
2022-10-28 05:26:16 +00:00
Adam Shih
53ee1c09b9 review cbd
Bug: 254378739
Test: boot with cbd launched
Change-Id: I9c89c0fc3b40957bc60dd7854788d49e498fc0cd
2022-10-28 11:59:23 +08:00
Adam Shih
2f2b04a36e review modem_svc_sit
Bug: 254378739
Test: boot with modem_svc_sit running
Change-Id: Iee1a831f12ca5c2df54181f0807f1d284072cf7f
2022-10-28 11:12:56 +08:00
Adam Shih
92aa199be5 label all wakeup nodes
Bug: 254378739
Test: boot with no system_suspend error on sysfs
Change-Id: I03b663678f543967e70089e3513cfec9335a1a40
2022-10-27 14:12:09 +08:00
Adam Shih
1889b6d85f review modem_diagnostic_app
Bug: 254378739
Test: build pass
Change-Id: Ia2a07987a0e60e882074df1b8514139bdd6cd95c
2022-10-27 13:46:20 +08:00
TreeHugger Robot
6f44317b90 Merge changes I3402c89b,Ia0e63e7f,I28581c15
* changes:
  review dmd and modem_logging_control
  review cbrs_setup_app
  review ssr_detector_app
2022-10-27 02:32:55 +00:00
Gabriel Biren
9c7e1c9f63 Update zuma sepolicy to allow the wifi_ext AIDL service.
Changes should be similar to aosp/2262723.

Bug: 205044134
Test: m + Pre-submit tests
Change-Id: I458896f8e82be51dde466d7970a2f307d8f9c94d
2022-10-26 23:20:45 +00:00
Salmax Chang
3d7deb5028 cbd, rfsd: remove the super permissions
Remove the setuid, chown and setgid rules.

Bug: 255494528
Change-Id: I47d4295d2f95ec45d9566ce9badd345dc34c80ac
2022-10-25 17:14:45 +08:00
Adam Shih
f652d07d61 review dmd and modem_logging_control
Bug: 254378739
Test: boot with both of them launched
Change-Id: I3402c89be55bb8258d0ceb8475cef9fb913d2604
2022-10-24 14:30:52 +08:00
Adam Shih
0fb88a6e5c review cbrs_setup_app
Bug: 254378739
Test: boot with the app correctly labeled

Change-Id: Ia0e63e7fc1a6b68ad1a7012e65b063f08f05470d
2022-10-24 14:14:12 +08:00
Adam Shih
aff9f380d3 review ssr_detector_app
Bug: 254378739
Test: boot with ssr app correctly labeled
Change-Id: I28581c15cf0f7ecb01cbd11c747ad338b157e1c8
2022-10-24 14:12:27 +08:00
Adam Shih
cbbbe57599 review rfsd
Bug: 254378739
Test: boot with rfsd launched
Change-Id: I15446c8fb84de588ba09325414a1cbabbdaa9c58
2022-10-24 11:54:10 +08:00
Adam Shih
9c81dc8d56 isolate legacy sepolicy to start reviewing while letting others work
Bug: 254378739
Test: boot, camera, google map, play youtube
Change-Id: If8ee7c64c0f7534a7e918f36a0e785b0ee9cd11f
2022-10-24 11:40:47 +08:00
Adam Shih
522689438e remove obsolete entry
Bug: 254378739
Test: build pass
Change-Id: I53d82c4e3eb0b2b33b5bbb6448b787599611e0ae
2022-10-21 10:16:22 +08:00
Adam Shih
7c2d42f608 move aoc settings to gs-common
Bug: 248426917
Test: boot with aoc launched
Change-Id: Ifde50720cd8144bdc484b138d85bcf40575fe0ac
2022-10-20 11:25:09 +08:00
Adam Shih
2078e51ece Merge "remove reused code" 2022-10-19 11:22:26 +00:00
Adam Shih
db9cb6f731 remove reused code
Bug: 244504232
Test: adb bugreport
Change-Id: Ia310bbbb166c2b3f281153bb81c1240908529cc5
2022-10-19 14:55:17 +08:00
Krzysztof Kosiński
efcbb14f05 Use generic wildcard for vendor libprotobuf.
The suffix changes on each upgrade and the newest release uses
a two-part version number instead of a three-part one. Use a regex
that will match any suffix.

Bug: 203713560
Test: presubmit, log check
Change-Id: I12409ae179ec939a2c1f6e7342378abc4c27c207
2022-10-14 13:58:51 +00:00
timmyli
b4c703e375 Add main camera. Add hal_camera_default
hal_camera_default was missing from sepolicy.
Also add main camera to se policy.

Bug: 253469536, 253261569, 248108864
Test: Compiles, manual test to see no access denied logs
Change-Id: Ia68dd6d883413e5510b8ba79cff24204d70efb84
2022-10-13 20:11:26 +00:00
weichinweng
ef2333ceef Add acd-com.google.usf.non_wake_up file to AoC file context.
Bug: 195077076
Bug: 253178766
Test: ls -lZ dev/acd-com.google.usf.non_wake_up
Change-Id: I01e26cca3300eb284b22106367bc651ee3815581
2022-10-12 08:56:15 +00:00
Roger Fang
b6ee86eeed sepolicy: add permission for AMS rate of pixelstats-vend
pixelstats-vend: type=1400 audit(0.0:524): avc: denied { open } for
    path="/sys/devices/platform/audiometrics/ams_rate_read_once" dev="sysfs"
    ino=87602 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0
    tclass=file permissive=1
    pixelstats-vend: type=1400 audit(0.0:525): avc: denied { getattr }
    for path="/sys/devices/platform/audiometrics/ams_rate_read_once"
    dev="sysfs" ino=87602 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:
    sysfs:s0 tclass=file permissive=1

Bug: 245057559
Test: maually test passed.

Signed-off-by: Roger Fang <rogerfang@google.com>
Change-Id: I6cb477b3eecbb04fe1259f94e18e033cc152a671
2022-10-03 17:56:01 +08:00
Vova Sharaienko
cf1387dd92 Merge "hal_health_default: updated sepolicy" 2022-09-30 04:42:40 +00:00
Vova Sharaienko
f6826e0904 hal_health_default: updated sepolicy
This allows the android.hardware.health service to access
AIDL Stats service

Bug: 249827340
Test: Build, flash, boot & and logcat | grep "avc"
Change-Id: I45512225f11a0e3b06721f40e2355924188f703f
2022-09-29 23:34:29 +00:00
Denny cylee
c59e2b8aa0 sepolicy: add files to power_supply label
avc: denied { read } for name="resistance_id"
dev="sysfs" ino=57006 scontext=u:r:hardware_info_app:s0:c512,c768
tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
app=com.google.android.hardwareinfo

avc: denied { open } for
path="/sys/devices/platform/10cb0000.hsi2c/i2c-8/8-0036/power_supply/maxfg/resistance_id"
dev="sysfs" ino=57006 scontext=u:r:hardware_info_app:s0:c512,c768
tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
app=com.google.android.hardwareinfo

avc: denied { read } for name="serial_number"
dev="sysfs" ino=69725 scontext=u:r:hardware_info_app:s0:c512,c768
tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
app=com.google.android.hardwareinfo

Bug: 248391895
Test: check log

Signed-off-by: Denny cylee <dennycylee@google.com>
Change-Id: I1044cde13e11f85dbf57255edc462be1010f93e4
2022-09-28 08:11:01 +00:00
TreeHugger Robot
8bc677159f Merge "update display path" 2022-09-21 08:58:10 +00:00
JJ Lee
192b97cad9 dumpstate: corrected sysfs paths for aoc
Bug: 247448885
Test: build pass
Change-Id: I793f5964820ff4b945abf5dcd04216e7c60b18ca
Signed-off-by: JJ Lee <leejj@google.com>
2022-09-19 14:37:02 +00:00
JJ Lee
25a5093c9b sepolicy: add nodes for aoc memory votes stats
Bug: 247024476
Test: build pass, not blocking bugreport
Change-Id: Id4bba34927e730a62187b85d045e2872f57fdd04
Signed-off-by: JJ Lee <leejj@google.com>
2022-09-19 15:13:13 +08:00
Ted Lin
3b708f64fd Remove the tracking denials code.
Bug: 213817227
Test: Check the bugreport
Signed-off-by: Ted Lin <tedlin@google.com>
Change-Id: Iad27cc07585b12455c9bc3b1f01de61c0ce92e3e
2022-09-16 15:45:45 +08:00
Shiyong Li
2d80a80b22 update display path
Bug: 246809481
Signed-off-by: Shiyong Li <shiyongli@google.com>
Change-Id: I34a13a88abc4324ac0738948d4270e8a535cd918
2022-09-14 19:06:35 +00:00
Dinesh Yadav
ff460182ee Merge "Add SEPolicy for gxp_logging" 2022-09-13 05:04:27 +00:00
Dinesh Yadav
bab8aa16e8 Add SEPolicy for gxp_logging
This commit adds the SEPolicy for gxp_logging service

Bug: 245903377
Change-Id: I1b9bde7327b131c768ea8a91bc6bfb52f219044b
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2022-09-13 03:13:15 +00:00
Adam Shih
4c3622d25a Merge "use gs-common insert module script" 2022-09-12 05:40:56 +00:00
Jeffrey Carlyle
55c282ab71 Merge "dck: allow st54spi devivce to be accessed by recovery and fastbootd" 2022-09-08 21:58:56 +00:00
Adam Shih
0ddf6e577f use gs-common insert module script
Bug: 243763292
Test: boot to home
Change-Id: Idbac83716d0eaca0b9806db901aea68bffd32f4b
2022-09-08 09:57:29 +08:00
TreeHugger Robot
5a314cab17 Merge "Add SE policies for HWC logs" 2022-09-07 12:28:32 +00:00
Jeffrey Carlyle
48422cd1ff dck: allow st54spi devivce to be accessed by recovery and fastbootd
This is needed so that Digital Car Keys can be cleared from the ST54
during a user data wipe.

Bug: 203234558
Test: data wipe in Android recovery mode on raven
Test: data wipe in Android recovery mode on c10
Test: data wipe in user mode fastbootd mode on raven
Test: data wipe in user mode fastbootd mode on c10
Signed-off-by: Jeffrey Carlyle <jcarlyle@google.com>
Change-Id: I5e1e8248ba188a68dd3c97795958e74e233701b9
2022-09-01 22:49:44 -07:00
Adam Shih
d13d0aaf56 Move dauntless settings to gs-common
Bug: 242479757
Test: build pass on all Gchip devices
Change-Id: I4b6c011015f6b94b5329650eb82ec5b95bbe2040
2022-08-30 13:32:02 +08:00
Taehwan Kim
8d9dc3aa30 sepolicy: supports Codec2 HIDL 1.2
Bug: 238360304
Test: Build PASS
Signed-off-by: Taehwan Kim <t_h.kim@samsung.com>
Change-Id: Id02e834bc4c19b09fac6c71199e2b0d62ddb4fd6
2022-08-22 05:31:08 +00:00
Wiwit Rifa'i
dee1f2e57d Add SE policies for HWC logs
Bug: 230361290
Change-Id: Ibca7f791bc4950bb6c1e4fd7ed5cbe5a98b48a5e
2022-08-16 14:02:21 +08:00
TreeHugger Robot
d8b62a3663 Merge "fix avc error for fg_model/registers" 2022-08-06 02:30:14 +00:00
TreeHugger Robot
4ba5c9ddf4 Merge "sepolicy:allow tof driver to communicate with lwis" 2022-08-03 06:56:32 +00:00
TreeHugger Robot
1d57ee38c7 Merge "HwInfo: Move hardware info sepolicy to pixel common" 2022-08-03 02:57:30 +00:00
Bruce Po
de8bc09743 Allow aocd to access acd-offload nodes
For T6 3-ch hotword feature, aocd daemon will access two new file nodes
(b/235648212), which will be used for transmitting audio to/from AOC.

BUG: 240744178
Change-Id: I98500d03e88052824af91c81ddeb9ed20f616969
2022-07-30 00:24:30 +00:00
Denny cy Lee
e286313bbd HwInfo: Move hardware info sepolicy to pixel common
Bug: 215271971
Test: no sepolicy for hardware info
Change-Id: If1b556c07a9a908b1a3edd8a551ff80cbc290b18
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2022-07-29 02:56:01 +00:00
Tri Vo
82967d3579 Merge "tee: Remove tracking_denials/tee.te" 2022-07-27 17:24:21 +00:00
TreeHugger Robot
9be3188259 Merge "Remove vendor_service." 2022-07-27 11:12:43 +00:00
Jenny Ho
782f4952ff fix avc error for fg_model/registers
remove tracking with fix http://ag/19446314

Bug: 226271913
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: I745654dea17f87df0956f3a326d0c0346fd59ec6
2022-07-27 06:16:43 +00:00
Nick Chung
1b68580017 sepolicy:allow tof driver to communicate with lwis
Bug: 236828170
Test: build pass
Change-Id: I4300e025d987795e8fab3f0c1a3cb604e066b44c
2022-07-27 04:52:06 +00:00
Steven Moreland
5d26e2ecc1 Remove vendor_service.
We want to avoid associating types with where they can be used.

Bug: 237115222
Test: build
Change-Id: I6795d960aa2a3b3832be8e0f6a11cb0fc3337982
2022-07-27 00:01:46 +00:00
Tri Vo
6aa0b46766 tee: Remove tracking_denials/tee.te
Bug: 215649571
Bug: 205904330
Test: n/a
Change-Id: I8bdc6448420bb6a01093b315e99d420b4e5e040f
2022-07-26 13:26:00 -07:00
George Chang
e53e44b561 Update nfc from hidl to aidl service
Bug: 240125555
Test: build pass
Change-Id: Icfe2d117e0058d3dd8552defc27d5d20baaf9910
2022-07-26 06:39:49 +00:00
Cheng Chang
38e5c8d796 gps: change SEPolicy for sysfs node
Test: gps group has r/w permission
Bug: 238583504
Signed-off-by: Cheng Chang <chengcha@google.com>
Change-Id: I679999bdbb3cbcb0ffe9b49f4aa00d8714674da9
2022-07-20 06:51:48 +00:00
Robin Peng
dbd71b58f5 init-insmod-sh: fix avc error
avc: denied { set } for property=vendor.all.modules.ready pid=1238 uid=0 gid=0 scontext=u:r:init-insmod-sh:s0 tcontext=u:object_r:vendor_ready_prop:s0 tclass=property_service permissive=0

Bug: 238853979
Signed-off-by: Robin Peng <robinpeng@google.com>
Change-Id: I92aa94db50884ea6d499fad785ef49853d831f56
2022-07-18 04:55:14 +00:00
qinyiyan
7efce53e84 Fix build breakage. Remove debug_camera_app.te as it's not defined.
ERROR 'unknown type debug_camera_app' at token ';' on line 83026:
        allow debug_camera_app edgetpu_app_service:service_manager find;

bug: 238929529
Test: make selinux_policy -j128
Change-Id: Ia8a21d02bff5c2f0c62e333b6b800678a80a2c51
2022-07-13 17:18:37 -07:00
qinyiyan
b11f8d2103 Add edgetpu contexts and sepolicies.
bug: 236041918
Change-Id: Ie3d2833c3c297dad7304dca307778d2f6a155180
2022-07-12 15:24:20 -07:00
TreeHugger Robot
6de977c9ba Merge "HwInfo: remove -sepolicy/tracking_denials/hardware_info_app.te" 2022-07-06 01:24:09 +00:00
Ruofei Ma
f85ab24233 Merge "Add bigwave sepolicy" 2022-07-05 22:25:05 +00:00
Ruofei Ma
1afbff1320 Add bigwave sepolicy
Bug: 195687338

Change-Id: I8dae1b62b0516e173381893af3c90ae24b6b9b87
2022-07-05 22:24:35 +00:00
Denny cy Lee
d05407421d HwInfo: remove -sepolicy/tracking_denials/hardware_info_app.te
Bug: 208909060
Test: not avc log for hardware_info_app
Signed-off-by: Denny cy Lee <dennycylee@google.com>
Change-Id: I0678da7b9495e87130553fd967fc26015c3161e4
2022-07-04 03:18:06 +00:00
Hyunki00.koo
47c4e6c965 edgetpu/file_contexts
Signed-off-by: Hyunki00.koo <hyunki00.koo@samsung.com>
Change-Id: I6dfa880a0d4ceb80a54de24e3817b6c880fea7ba
2022-06-30 19:59:41 -07:00
Jaegeuk Kim
c36c283704 Update ufs path
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
Change-Id: I8ea66435e131c7718ea5d2740fa8165d452f68f9
2022-06-24 00:03:00 -07:00
Nucca Chen
7ad5cc4d73 Remove clatd tracking_denial
Bug: 210363983
Change-Id: I5ee6763d73a82cc4ffe21270544eb68810be626c
Test: boot with no relevant error log
2022-06-13 07:19:36 +00:00
Jaegeuk Kim
28cec159fb Allow sysfs_devices_block to f2fs-tools
The fsck.f2fs checks the sysfs entries of block devices to get disk
information. Note that, the block device entries are device-specific.

1. fsck.f2fs
avc: denied { search } for comm="fsck.f2fs" name="0:0:0:0" dev="sysfs" ino=59803 scontext=u:r:fsck:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=dir permissive=0
avc: denied { getattr } for comm="fsck.f2fs" path="/sys/devices/platform/14700000.ufs/host0/target0:0:0/0:0:0:0/block/sda/sda7/partition" dev="sysfs" ino=60672 scontext=u:r:fsck:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0

2. mkfs.f2fs
avc: denied { search } for comm="make_f2fs" name="0:0:0:0" dev="sysfs" ino=59803 scontext=u:r:e2fs:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=dir permissive=0
avc: denied { getattr } for comm="make_f2fs" path="/sys/devices/platform/14700000.ufs/host0/target0:0:0/0:0:0:0/block/sda/sda8/partition" dev="sysfs" ino=61046 scontext=u:r:e2fs:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0

Bug: 172377740
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
Change-Id: I409feec84565f965baa96b06a5b08bcfc1a8db02
2022-05-24 17:46:40 -07:00
Jason Macnak
d14bd06f34 Remove sysfs_gpu type definition
... as it has moved to system/sepolicy.

Bug: b/161819018
Test: presubmit
Change-Id: I107f92617bea56590b5af351341cc1c3b2844360
2022-04-19 18:03:57 +08:00
Aaron Ding
7b5994afd8 Create device Ripcurrent on Zuma platform
s/cloudripper/ripcurrent
s/gs201/zuma
s/pantah/ripcurrent

Bug: 229340586
Change-Id: If94759d6d555f3f9c8ee80331a31ef85082f03c7
Signed-off-by: Aaron Ding <aaronding@google.com>
2022-04-19 14:11:17 +08:00
Aaron Ding
e47b3d9991 Branch zuma from gs201
Branch zuma from gs201 sha1 63751751aa91275b083797278d638078b3a0bf7a

cp/pantah/ripcurrent
cp/gs201/zuma

Bug: 229340586
Change-Id: Ie692d8dbbf0fc4d3b376dc9fe3e930bd3955a88e
Signed-off-by: Aaron Ding <aaronding@google.com>
2022-04-19 14:10:58 +08:00
Bill Rassieur
e4a3061192 Initial empty repository 2022-03-15 09:21:45 -07:00
267 changed files with 5674 additions and 475 deletions

1
.gitupstream Normal file
View File

@@ -0,0 +1 @@
https://android.googlesource.com/device/google/zuma

View File

@@ -41,3 +41,14 @@ sh_binary {
vendor: true,
sub_dir: "hw",
}
// Filesystem: Copy efs/efs_backup/modem_userdata to /data partition
// so that they can be accessed under 16K mode. By default, these partitions
// are 4K F2FS , which can't be mounted under 16K mode.
// (b/293313353)
sh_binary {
name: "copy_efs_files_to_data",
src: "copy_efs_files_to_data.sh",
vendor: true,
}

View File

@@ -1,30 +0,0 @@
#
# Copyright (C) 2011 The Android Open-Source Project
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# WARNING: Everything listed here will be built on ALL platforms,
# including x86, the universal, and the SDK. Modules must be uniquely
# named (liblights.panda), and must build everywhere, or limit themselves
# to only building on ARM if they include assembly. Individual makefiles
# are responsible for having their own logic, for fine-grained control.
LOCAL_PATH := $(call my-dir)
# if some modules are built directly from this directory (not subdirectories),
# their rules should be written here.
ifeq ($(USES_DEVICE_GOOGLE_ZUMA),true)
include $(call first-makefiles-under,$(LOCAL_PATH))
endif

52
BoardConfig-16k-common.mk Normal file
View File

@@ -0,0 +1,52 @@
#
# Copyright (C) 2024 The Android Open-Source Project
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
ifneq ($(wildcard $(TARGET_KERNEL_DIR)/16kb/),)
ifeq ($(TARGET_BOOTS_16K),true)
# Configures the 16kb kernel directory.
TARGET_KERNEL_DIR := $(TARGET_KERNEL_DIR)/16kb
else ifeq ($(PRODUCT_16K_DEVELOPER_OPTION),true)
# Configures the 16kb kernel and modules for OTA updates.
TARGET_KERNEL_DIR_16K := $(TARGET_KERNEL_DIR)/16kb
BOARD_KERNEL_PATH_16K := $(TARGET_KERNEL_DIR_16K)/Image.lz4
BOARD_KERNEL_MODULES_16K += $(file < $(TARGET_KERNEL_DIR_16K)/vendor_kernel_boot.modules.load)
BOARD_KERNEL_MODULES_16K += $(file < $(TARGET_KERNEL_DIR_16K)/system_dlkm.modules.load)
BOARD_KERNEL_MODULES_16K += $(file < $(TARGET_KERNEL_DIR_16K)/vendor_dlkm.modules.load)
BOARD_KERNEL_MODULES_16K := $(foreach module,$(BOARD_KERNEL_MODULES_16K),$(TARGET_KERNEL_DIR_16K)/$(notdir $(module)))
BOARD_PREBUILT_DTBOIMAGE_16KB := $(TARGET_KERNEL_DIR_16K)/dtbo.img
# The 16kb mode does not use these modules.
BOARD_KERNEL_MODULES_16K := $(filter-out %/aoc_unit_test_dev.ko,$(BOARD_KERNEL_MODULES_16K))
BOARD_KERNEL_MODULES_16K := $(filter-out %/bcm_dbg.ko,$(BOARD_KERNEL_MODULES_16K))
BOARD_KERNEL_MODULES_16K := $(filter-out %/gnssif.ko,$(BOARD_KERNEL_MODULES_16K))
BOARD_KERNEL_MODULES_16K := $(filter-out %/gnss_spi.ko,$(BOARD_KERNEL_MODULES_16K))
BOARD_KERNEL_MODULES_16K := $(filter-out %/mali_kutf.ko,$(BOARD_KERNEL_MODULES_16K))
BOARD_KERNEL_MODULES_16K := $(filter-out %/mali_kutf_clk_rate_trace_test_portal.ko,$(BOARD_KERNEL_MODULES_16K))
BOARD_KERNEL_MODULES_16K := $(filter-out %/rt6160_regulator.ko,$(BOARD_KERNEL_MODULES_16K))
BOARD_KERNEL_MODULES_16K := $(filter-out %/sec_touch.ko,$(BOARD_KERNEL_MODULES_16K))
BOARD_KERNEL_MODULES_16K := $(filter-out %/sscoredump_sample_test.ko,$(BOARD_KERNEL_MODULES_16K))
BOARD_KERNEL_MODULES_16K := $(filter-out %/sscoredump_test.ko,$(BOARD_KERNEL_MODULES_16K))
BOARD_KERNEL_MODULES_16K := $(filter-out %/zram.ko,$(BOARD_KERNEL_MODULES_16K))
BOARD_KERNEL_MODULES_LOAD_16K := $(foreach module,$(BOARD_KERNEL_MODULES_16K),$(notdir $(module)))
BOARD_16K_OTA_USE_INCREMENTAL := true
BOARD_16K_OTA_MOVE_VENDOR := true
endif
endif

View File

@@ -16,8 +16,8 @@
include build/make/target/board/BoardConfigMainlineCommon.mk
include build/make/target/board/BoardConfigPixelCommon.mk
# Should be uncommented after fixing vndk-sp violation is fixed.
PRODUCT_FULL_TREBLE_OVERRIDE := true
# Include settings for 16k developer option, if enabled
include device/google/zuma/BoardConfig-16k-common.mk
# HACK : To fix up after bring up multimedia devices.
TARGET_SOC := zuma
@@ -30,18 +30,31 @@ TARGET_ARCH := arm64
TARGET_ARCH_VARIANT := armv8-2a
TARGET_CPU_ABI := arm64-v8a
TARGET_CPU_VARIANT := cortex-a55
TARGET_CPU_VARIANT_RUNTIME := cortex-a55
BOARD_KERNEL_CMDLINE += earlycon=exynos4210,0x10870000 console=ttySAC0,115200 androidboot.console=ttySAC0 printk.devkmsg=on
BOARD_KERNEL_CMDLINE += cma_sysfs.experimental=Y
BOARD_KERNEL_CMDLINE += cgroup_disable=memory
BOARD_KERNEL_CMDLINE += rcupdate.rcu_expedited=1 rcu_nocbs=all
BOARD_KERNEL_CMDLINE += rcupdate.rcu_expedited=1 rcu_nocbs=all rcutree.enable_rcu_lazy
BOARD_KERNEL_CMDLINE += swiotlb=1024
BOARD_KERNEL_CMDLINE += cgroup.memory=nokmem
BOARD_KERNEL_CMDLINE += sysctl.kernel.sched_pelt_multiplier=4
# Normal (non-_fullmte) builds should disable kasan
ifeq (,$(filter %_fullmte,$(TARGET_PRODUCT)))
BOARD_KERNEL_CMDLINE += kasan=off
endif
# Enable a limited subset of MTE for "normal" (non-_fullmte) eng builds.
# Don't touch any settings for _fullmte builds. They are set somewhere else.
ifeq (,$(filter %_fullmte,$(TARGET_PRODUCT)))
ifeq ($(TARGET_BUILD_VARIANT),eng)
BOARD_KERNEL_CMDLINE += bootloader.pixel.MTE_FORCE_ON
ifeq ($(filter memtag_heap,$(SANITIZE_TARGET)),)
SANITIZE_TARGET := $(strip $(SANITIZE_TARGET) memtag_heap)
endif
endif
endif
BOARD_BOOTCONFIG += androidboot.boot_devices=13200000.ufs
TARGET_NO_BOOTLOADER := true
@@ -65,7 +78,7 @@ TARGET_RECOVERY_FSTAB_GENRULE := gen_fstab.zuma-sw-encrypt
TARGET_RECOVERY_PIXEL_FORMAT := ABGR_8888
TARGET_RECOVERY_UI_MARGIN_HEIGHT := 165
TARGET_RECOVERY_UI_LIB := \
librecovery_ui_pixel \
//hardware/google/pixel/recovery:librecovery_ui_pixel \
libfstab
AB_OTA_UPDATER := true
@@ -174,7 +187,6 @@ BOARD_AVB_INIT_BOOT_ROLLBACK_INDEX_LOCATION := 4
TARGET_USERIMAGES_USE_EXT4 := true
TARGET_USERIMAGES_USE_F2FS := true
BOARD_USERDATAIMAGE_PARTITION_SIZE := 11796480000
BOARD_USERDATAIMAGE_FILE_SYSTEM_TYPE := f2fs
PRODUCT_FS_COMPRESSION := 1
BOARD_FLASH_BLOCK_SIZE := 4096
BOARD_MOUNT_SDCARD_RW := true
@@ -206,6 +218,17 @@ BOARD_USE_BLOB_ALLOCATOR := false
BOARD_SUPPORT_MFC_ENC_BT2020 := true
BOARD_SUPPORT_FLEXIBLE_P010 := true
BOARD_SUPPORT_MFC_VERSION := 1660
$(call soong_config_set,video_codec,target_soc_name,$(TARGET_SOC_NAME))
$(call soong_config_set_bool,video_codec,board_use_codec2_hidl_1_2,$(BOARD_USE_CODEC2_HIDL_1_2))
$(call soong_config_set_bool,video_codec,board_use_csc_filter,$(BOARD_USE_CSC_FILTER))
$(call soong_config_set_bool,video_codec,board_use_dec_sw_csc,$(BOARD_USE_DEC_SW_CSC))
$(call soong_config_set_bool,video_codec,board_use_enc_sw_csc,$(BOARD_USE_ENC_SW_CSC))
$(call soong_config_set_bool,video_codec,board_support_mfc_enc_rgb,$(BOARD_SUPPORT_MFC_ENC_RGB))
$(call soong_config_set_bool,video_codec,board_use_blob_allocator,$(BOARD_USE_BLOB_ALLOCATOR))
$(call soong_config_set_bool,video_codec,board_support_mfc_enc_bt2020,$(BOARD_SUPPORT_MFC_ENC_BT2020))
$(call soong_config_set_bool,video_codec,board_support_flexible_p010,$(BOARD_SUPPORT_FLEXIBLE_P010))
$(call soong_config_set_bool,video_codec,board_use_codec2_aidl,$(if $(BOARD_USE_CODEC2_AIDL),true,false))
$(call soong_config_set,video_codec,board_support_mfc_version,$(BOARD_SUPPORT_MFC_VERSION))
########################
BOARD_SUPER_PARTITION_SIZE := 8531214336
@@ -238,7 +261,7 @@ BOARD_USES_GENERIC_AUDIO := true
$(call soong_config_set,aoc_audio_func,ext_hidl,true)
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
$(call soong_config_set,aoc_audio_func,dump_usecase_data,true)
$(call soong_config_set,aoc_audio_func,hal_socket_control,true)
$(call soong_config_set,aoc_audio_func,record_tuning_keys,true)
@@ -278,6 +301,8 @@ BOARD_USES_EXYNOS_AFBC_FEATURE := true
BOARD_LIBACRYL_DEFAULT_COMPOSITOR := fimg2d_zuma
BOARD_LIBACRYL_G2D_HDR_PLUGIN := libacryl_hdr_plugin
$(call soong_config_set,acryl,libacryl_g2d_hdr_plugin,//hardware/google/graphics/zuma/libacryl_plugins:libacryl_hdr_plugin)
$(call soong_config_set,acryl,libacryl_c_include,hardware/google/graphics/$(TARGET_BOARD_PLATFORM)/libcap)
# HWCServices
BOARD_USES_HWC_SERVICES := true
@@ -391,11 +416,19 @@ KERNEL_MODULES := $(wildcard $(KERNEL_MODULE_DIR)/*.ko)
BOARD_SYSTEM_KERNEL_MODULES_BLOCKLIST_FILE := $(KERNEL_MODULE_DIR)/system_dlkm.modules.blocklist
BOARD_VENDOR_KERNEL_MODULES_BLOCKLIST_FILE := $(KERNEL_MODULE_DIR)/vendor_dlkm.modules.blocklist
BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES_LOAD := $(strip $(shell cat $(KERNEL_MODULE_DIR)/vendor_kernel_boot.modules.load))
ifndef BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES_LOAD
# Prebuilt kernel modules that are *not* listed in vendor_kernel_boot.modules.load
BOARD_PREBUILT_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES = fips140.ko
BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES_LOAD_EXTRA = $(foreach k,$(BOARD_PREBUILT_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES),$(if $(wildcard $(KERNEL_MODULE_DIR)/$(k)), $(k)))
# Kernel modules that are listed in vendor_kernel_boot.modules.load
BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES_LOAD_FILE := $(strip $(shell cat $(KERNEL_MODULE_DIR)/vendor_kernel_boot.modules.load))
ifndef BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES_LOAD_FILE
$(error vendor_kernel_boot.modules.load not found or empty)
endif
BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES := $(addprefix $(KERNEL_MODULE_DIR)/, $(notdir $(BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES_LOAD)))
BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES_LOAD := $(BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES_LOAD_EXTRA)
BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES_LOAD += $(BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES_LOAD_FILE)
BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES := $(addprefix $(KERNEL_MODULE_DIR)/, $(BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES_LOAD_EXTRA))
BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES += $(addprefix $(KERNEL_MODULE_DIR)/, $(notdir $(BOARD_VENDOR_KERNEL_RAMDISK_KERNEL_MODULES_LOAD_FILE)))
BOARD_VENDOR_KERNEL_MODULES_LOAD := $(strip $(shell cat $(KERNEL_MODULE_DIR)/vendor_dlkm.modules.load))
ifndef BOARD_VENDOR_KERNEL_MODULES_LOAD
@@ -412,7 +445,7 @@ BOARD_SYSTEM_KERNEL_MODULES := $(addprefix $(KERNEL_MODULE_DIR)/, $(notdir $(BOA
# Using BUILD_COPY_HEADERS
BUILD_BROKEN_USES_BUILD_COPY_HEADERS := true
include device/google/zuma-sepolicy/zuma-sepolicy.mk
include device/google/zuma/sepolicy/zuma-sepolicy.mk
# Battery options
BOARD_KERNEL_CMDLINE += at24.write_timeout=100
@@ -425,3 +458,6 @@ BOARD_PVMFWIMAGE_PARTITION_SIZE := 0x00100000
# pick up library for cleaning digital car keys on factory reset
-include vendor/google_devices/gs-common/proprietary/BoardConfigVendor.mk
include device/google/zuma/BoardConfigLineage.mk
include device/google/zuma/BoardConfigEvolution.mk

10
BoardConfigEvolution.mk Normal file
View File

@@ -0,0 +1,10 @@
#
# Copyright (C) 2024 The Evolution X Project
# SPDX-License-Identifier: Apache-2.0
#
BUILD_BROKEN_DUP_RULES := true
DISABLE_ARTIFACT_PATH_REQUIREMENTS := true
SPOOF_FIRST_API_LEVEL_32 := true

36
BoardConfigLineage.mk Normal file
View File

@@ -0,0 +1,36 @@
#
# SPDX-FileCopyrightText: 2021-2024 The LineageOS Project
# SPDX-FileCopyrightText: 2021-2024 The Calyx Institute
# SPDX-License-Identifier: Apache-2.0
#
# Manifests
DEVICE_FRAMEWORK_COMPATIBILITY_MATRIX_FILE += vendor/lineage/config/device_framework_matrix.xml
DEVICE_MANIFEST_FILE += \
device/google/zuma/android.hardware.security.rkp-service.citadel.xml \
device/google/zuma/manifest_radio_ds.xml
# Partitions
AB_OTA_PARTITIONS += \
vendor \
vendor_dlkm
BOARD_VENDORIMAGE_FILE_SYSTEM_TYPE := ext4
BOARD_VENDOR_DLKMIMAGE_FILE_SYSTEM_TYPE := ext4
TARGET_COPY_OUT_VENDOR_DLKM := vendor_dlkm
# Enable chain partition for vendor.
BOARD_AVB_VBMETA_VENDOR := vendor
BOARD_AVB_VBMETA_VENDOR_KEY_PATH := external/avb/test/data/testkey_rsa2048.pem
BOARD_AVB_VBMETA_VENDOR_ALGORITHM := SHA256_RSA2048
BOARD_AVB_VBMETA_VENDOR_ROLLBACK_INDEX := $(PLATFORM_SECURITY_PATCH_TIMESTAMP)
BOARD_AVB_VBMETA_VENDOR_ROLLBACK_INDEX_LOCATION := 3
AB_OTA_PARTITIONS += \
vbmeta_vendor
# Reserve space for gapps install
-include vendor/lineage/config/BoardConfigReservedSize.mk
# Verified Boot
BOARD_AVB_MAKE_VBMETA_IMAGE_ARGS += --flags 3

38
CopyEfsTest/Android.bp Normal file
View File

@@ -0,0 +1,38 @@
// Copyright (C) 2024 The Android Open Source Project
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package {
default_applicable_licenses: ["device_google_zuma_license"],
}
java_test_host {
name: "CopyEfsTest",
// Include all test java files
srcs: ["src/**/*.java"],
static_libs: [
"junit",
"platform-test-annotations",
"truth",
],
libs: [
"tradefed",
"compatibility-host-util",
"compatibility-tradefed",
],
test_suites: [
"device-tests",
"device-pixel-tests"
],
test_config: "AndroidTest.xml",
}

View File

@@ -0,0 +1,40 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
~ Copyright (C) 2024 The Android Open Source Project
~
~ Licensed under the Apache License, Version 2.0 (the "License");
~ you may not use this file except in compliance with the License.
~ You may obtain a copy of the License at
~
~ http://www.apache.org/licenses/LICENSE-2.0
~
~ Unless required by applicable law or agreed to in writing, software
~ distributed under the License is distributed on an "AS IS" BASIS,
~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
~ See the License for the specific language governing permissions and
~ limitations under the License.
-->
<configuration description="Runs 16K developer option test.">
<option name="test-suite-tag" value="apct"/>
<target_preparer class="com.android.tradefed.targetprep.RootTargetPreparer">
<option name="force-root" value="true" />
</target_preparer>
<test class="com.android.compatibility.common.tradefed.testtype.JarHostTest" >
<option name="jar" value="CopyEfsTest.jar" />
</test>
<target_preparer class="com.android.tradefed.targetprep.RunCommandTargetPreparer">
<!-- Unlock screen -->
<option name="run-command" value="input keyevent KEYCODE_WAKEUP" />
<!-- Dismiss keyguard, in case it's set as "Swipe to unlock" -->
<option name="run-command" value="wm dismiss-keyguard" />
<!-- Collapse notifications -->
<option name="run-command" value="cmd statusbar collapse" />
<!-- dismiss all system dialogs before launch test -->
<option name="run-command" value="am broadcast -a android.intent.action.CLOSE_SYSTEM_DIALOGS" />
</target_preparer>
</configuration>

View File

@@ -0,0 +1,130 @@
/*
* Copyright (C) 2024 The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package com.android.test;
import static org.junit.Assert.assertEquals;
import static org.junit.Assert.assertTrue;
import static org.junit.Assume.assumeTrue;
import org.junit.Before;
import org.junit.After;
import android.platform.test.annotations.AppModeFull;
import com.android.tradefed.device.DeviceNotAvailableException;
import com.android.tradefed.testtype.DeviceJUnit4ClassRunner;
import com.android.tradefed.testtype.junit4.BaseHostJUnit4Test;
import com.android.tradefed.testtype.junit4.DeviceTestRunOptions;
import com.android.tradefed.util.CommandResult;
import com.android.tradefed.util.RunUtil;
import org.junit.Test;
import org.junit.runner.RunWith;
import java.io.BufferedReader;
import java.io.StringReader;
@RunWith(DeviceJUnit4ClassRunner.class)
public class CopyEfsTest extends BaseHostJUnit4Test {
@Before
public void setUp() throws Exception {
getDevice().enableAdbRoot();
getDevice().executeShellCommand("rm -rf /data/local/tmp/efs_test");
getDevice().executeShellCommand("mkdir -p /data/local/tmp/efs_test/mnt");
getDevice().executeShellCommand("mkdir -p /data/local/tmp/efs_test/dump");
}
@Test
@AppModeFull
public void copyEfsTest() throws Exception {
assumeTrue(getDevice().executeShellCommand("getconf PAGESIZE").trim().equals("4096"));
testDumpF2FS("efs");
testDumpF2FS("efs_backup");
testDumpF2FS("modem_userdata");
testDumpF2FS("persist");
}
private CommandResult RunAndCheckAdbCmd(String cmd) throws DeviceNotAvailableException {
CommandResult r = getDevice().executeShellV2Command(cmd);
assertEquals("Failed to run " + cmd, Integer.valueOf(0), r.getExitCode());
return r;
}
// Remove timestamps because ls on device does not support --time-style.
// Format is [permissions] [links] [uid] [gid] [size] time [name/symlink]
// time may vary greatly in formatting
// symlinks will be of the form a -> b
// So we can check for -> in the second to last spot to determine what position the timestamp ends at
// Remove totals because on disk block usage may change depending on filesystem
private String removeTimestamps(String input) {
StringBuilder output = new StringBuilder();
for (String line : input.split("\n")) {
String[] tokens = line.split("(?<![\\\\])\s+");
if (tokens[0].equals("total"))
continue;
if (tokens.length < 3) {
output.append(line + "\n");
continue;
}
int name_offset = 1;
if (tokens[tokens.length - 2].equals("->"))
name_offset = 3;
for (int i=0; i<tokens.length; i++) {
if (i >= 5 && i < tokens.length - name_offset)
continue;
if (i != 0)
output.append(" ");
output.append(tokens[i]);
}
output.append("\n");
}
return output.toString();
}
private void testDumpF2FS(String name) throws Exception {
RunAndCheckAdbCmd(String.format("cp /dev/block/by-name/%s /data/local/tmp/efs_test/%s.img", name, name));
// The device was mounted r/w. To get a clean image, we run fsck, and then mount to allow mount time fixes to happen.
// We can then dump and mount read only to ensure the contents should be the same.
RunAndCheckAdbCmd(String.format("fsck.f2fs -f /data/local/tmp/efs_test/%s.img", name));
RunAndCheckAdbCmd(String.format("mount /data/local/tmp/efs_test/%s.img /data/local/tmp/efs_test/mnt", name));
RunAndCheckAdbCmd("umount /data/local/tmp/efs_test/mnt");
RunAndCheckAdbCmd(String.format("dump.f2fs -rfPLo /data/local/tmp/efs_test/dump /data/local/tmp/efs_test/%s.img", name));
RunAndCheckAdbCmd(String.format("mount -r /data/local/tmp/efs_test/%s.img /data/local/tmp/efs_test/mnt", name));
CommandResult r = RunAndCheckAdbCmd("diff -rq --no-dereference /data/local/tmp/efs_test/mnt /data/local/tmp/efs_test/dump");
assertEquals(r.getStdout(), "");
String ls_cmd = "cd /data/local/tmp/efs_test/%s;ls -AlnR .";
CommandResult mnt_ls = RunAndCheckAdbCmd(String.format(ls_cmd, "mnt"));
CommandResult dump_ls = RunAndCheckAdbCmd(String.format(ls_cmd, "dump"));
assertEquals(removeTimestamps(mnt_ls.getStdout()), removeTimestamps(dump_ls.getStdout()));
getDevice().executeShellCommand("umount /data/local/tmp/efs_test/mnt");
getDevice().executeShellCommand("rm -rf /data/local/tmp/efs_test/dump/*");
getDevice().executeShellCommand("rm /data/local/tmp/efs_test/" + name + ".img");
}
@After
public void tearDown() throws Exception {
getDevice().executeShellCommand("umount /data/local/tmp/efs_test/mnt");
getDevice().executeShellCommand("rm -rf /data/local/tmp/efs_test");
}
}

2
OWNERS
View File

@@ -1,2 +1,2 @@
# per-file for Pixel device makefiles, see go/pixel-device-mk-owner-checklist for details.
per-file *.mk=file:device/google/gs-common:main:/OWNERS
per-file *.mk,{**/,}Android.bp=file:device/google/gs-common:main:/MK_OWNERS

View File

@@ -0,0 +1,33 @@
<?xml version="1.0" encoding="utf-8"?>
<!-- Copyright (C) 2022 The LineageOS Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<config>
<!-- Specify the explicit set of other applications that AI services are allowed to
interact with, including the providers that back the implementation of the APIs
provided by the package. -->
<allow-association target="com.google.android.as" allowed="com.android.bluetooth" />
<allow-association target="com.google.android.as" allowed="com.android.bluetooth.services" />
<allow-association target="com.google.android.as" allowed="com.android.providers.contacts" />
<allow-association target="com.google.android.as" allowed="com.android.providers.media" />
<allow-association target="com.google.android.as" allowed="com.android.providers.telephony" />
<allow-association target="com.google.android.as" allowed="com.android.systemui" />
<!-- AI services can bind to its open-source network component. -->
<allow-association target="com.google.android.as" allowed="com.google.android.as.oss" />
<!-- AI services open-source network component can only bind back to the core package. -->
<allow-association target="com.google.android.as.oss" allowed="com.google.android.as" />
<!-- AI services open-source network component can bind to AI Core. -->
<allow-association target="com.google.android.as.oss" allowed="com.google.android.aicore" />
</config>

View File

@@ -0,0 +1,7 @@
<manifest version="1.0" type="device">
<hal format="aidl">
<name>android.hardware.security.keymint</name>
<version>3</version>
<fqname>IRemotelyProvisionedComponent/strongbox</fqname>
</hal>
</manifest>

View File

@@ -46,6 +46,3 @@ $(call inherit-product, $(SRC_TARGET_DIR)/product/telephony_vendor.mk)
# TODO: fix
# PRODUCT_RESTRICT_VENDOR_FILES := all
# b/189477034: Bypass build time check on uses_libs until vendor fixes all their apps
PRODUCT_BROKEN_VERIFY_USES_LIBRARIES := true

View File

@@ -14,16 +14,6 @@
* limitations under the License.
*/
// By default this device uses hardware-wrapped keys for storage encryption,
// which is intended to offer increased security over the traditional method
// (software keys). However, hardware-wrapped keys aren't compatible with
// FIPS-140 certification of the encryption hardware, and hence we have to
// disable the use of them in FIPS mode. This requires having two fstab files:
// one for the default mode, and one for FIPS mode selectable via
// androidboot.fstab_suffix on the kernel command line. These fstabs should be
// identical with the exception of the encryption settings, so to keep them in
// sync the rules below generate them from a template file.
package {
// See: http://go/android-license-faq
// A large-scale-change added 'default_applicable_licenses' to import
@@ -33,52 +23,7 @@ package {
default_applicable_licenses: ["device_google_zuma_license"],
}
genrule {
name: "gen_fstab.zuma-hw-encrypt",
srcs: ["fstab.zuma.in"],
out: ["fstab.zuma"],
cmd: "sed -e s/@fileencryption@/fileencryption=:aes-256-hctr2:inlinecrypt_optimized+wrappedkey_v0/" +
" -e s/@inlinecrypt@/inlinecrypt/ " +
" -e s/@metadata_encryption@/metadata_encryption=:wrappedkey_v0/ $(in) > $(out)",
}
genrule {
name: "gen_fstab.zuma-sw-encrypt",
srcs: ["fstab.zuma.in"],
out: ["fstab.zuma"],
cmd: "sed -e s/@fileencryption@/fileencryption=aes-256-xts:aes-256-hctr2/" +
" -e s/@inlinecrypt@// " +
" -e s/@metadata_encryption@/metadata_encryption=/ $(in) > $(out)",
}
genrule {
name: "gen_fstab.zuma-no-encrypt",
srcs: ["fstab.zuma.in"],
out: ["fstab.zuma"],
cmd: "sed -e s/@fileencryption@//" +
" -e s/@inlinecrypt@// " +
" -e s/@metadata_encryption@// $(in) > $(out)",
}
genrule {
name: "gen_fstab.zuma-fips",
srcs: ["fstab.zuma.in"],
out: ["fstab.zuma-fips"],
cmd: "sed -e s/@fileencryption@/fileencryption=aes-256-xts/" +
" -e s/@inlinecrypt@/inlinecrypt/ " +
" -e s/@metadata_encryption@/metadata_encryption=aes-256-xts/ $(in) > $(out)",
}
prebuilt_etc {
name: "fstab.zuma",
src: ":gen_fstab.zuma-hw-encrypt",
vendor: true,
vendor_ramdisk_available: true,
}
prebuilt_etc {
name: "fstab.zuma-fips",
src: ":gen_fstab.zuma-fips",
vendor: true,
vendor_ramdisk_available: true,
}
filegroup {
name: "fstab.zuma.common",
srcs: ["fstab.zuma.common"],
}

2
conf/OWNERS Normal file
View File

@@ -0,0 +1,2 @@
# per-file for Pixel fstab
per-file fstab.*=file:device/google/gs-common:main:/FSTAB_OWNERS

102
conf/ext4/Android.bp Normal file
View File

@@ -0,0 +1,102 @@
/*
* Copyright (C) 2021 The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
// By default this device uses hardware-wrapped keys for storage encryption,
// which is intended to offer increased security over the traditional method
// (software keys). However, hardware-wrapped keys aren't compatible with
// FIPS-140 certification of the encryption hardware, and hence we have to
// disable the use of them in FIPS mode. This requires having two fstab files:
// one for the default mode, and one for FIPS mode selectable via
// androidboot.fstab_suffix on the kernel command line. These fstabs should be
// identical with the exception of the encryption settings, so to keep them in
// sync the rules below generate them from a template file.
soong_namespace {
imports: [
"device/google/zuma",
],
}
package {
// See: http://go/android-license-faq
// A large-scale-change added 'default_applicable_licenses' to import
// all of the 'license_kinds' from "device_google_zuma_license"
// to get the below license kinds:
// SPDX-license-identifier-Apache-2.0
default_applicable_licenses: ["device_google_zuma_license"],
}
genrule {
name: "gen_fstab.zuma-hw-encrypt",
srcs: [
":fstab.zuma.common",
"fstab.zuma.ext4",
],
out: ["fstab.zuma"],
cmd: "sed -e s/@fileencryption@/fileencryption=:aes-256-hctr2:inlinecrypt_optimized+wrappedkey_v0/" +
" -e s/@inlinecrypt@/inlinecrypt/ " +
" -e s/@metadata_encryption@/metadata_encryption=:wrappedkey_v0/ $(in) > $(out)",
}
genrule {
name: "gen_fstab.zuma-sw-encrypt",
srcs: [
":fstab.zuma.common",
"fstab.zuma.ext4",
],
out: ["fstab.zuma"],
cmd: "sed -e s/@fileencryption@/fileencryption=aes-256-xts:aes-256-hctr2/" +
" -e s/@inlinecrypt@// " +
" -e s/@metadata_encryption@/metadata_encryption=/ $(in) > $(out)",
}
genrule {
name: "gen_fstab.zuma-no-encrypt",
srcs: [
":fstab.zuma.common",
"fstab.zuma.ext4",
],
out: ["fstab.zuma"],
cmd: "sed -e s/@fileencryption@//" +
" -e s/@inlinecrypt@// " +
" -e s/@metadata_encryption@// $(in) > $(out)",
}
genrule {
name: "gen_fstab.zuma-fips",
srcs: [
":fstab.zuma.common",
"fstab.zuma.ext4",
],
out: ["fstab.zuma-fips"],
cmd: "sed -e s/@fileencryption@/fileencryption=aes-256-xts/" +
" -e s/@inlinecrypt@/inlinecrypt/ " +
" -e s/@metadata_encryption@/metadata_encryption=aes-256-xts/ $(in) > $(out)",
}
prebuilt_etc {
name: "fstab.zuma",
src: ":gen_fstab.zuma-hw-encrypt",
vendor: true,
vendor_ramdisk_available: true,
}
prebuilt_etc {
name: "fstab.zuma-fips",
src: ":gen_fstab.zuma-fips",
vendor: true,
vendor_ramdisk_available: true,
}

10
conf/ext4/fstab.zuma.ext4 Normal file
View File

@@ -0,0 +1,10 @@
# Android fstab file.
#
# The filesystem that contains the filesystem checker binary (typically /system) cannot
# specify MF_CHECK, and must come before any filesystems that do specify MF_CHECK
#
#<src> <mnt_point> <type> <mnt_flags and options> <fs_mgr_flags>
/dev/block/platform/13200000.ufs/by-name/userdata /data ext4 noatime,nosuid,nodev,@inlinecrypt@ latemount,wait,check,quota,formattable,reservedsize=128M,readahead_size_kb=128,@fileencryption@,@metadata_encryption@,keydirectory=/metadata/vold/metadata_encryption
/dev/block/platform/13200000.ufs/by-name/userdata /data f2fs noatime,nosuid,nodev,discard,reserve_root=32768,resgid=1065,fsync_mode=nobarrier,compress_extension=apk,compress_extension=so,compress_extension=vdex,compress_extension=odex,@inlinecrypt@,atgc,checkpoint_merge,compress_cache latemount,wait,check,quota,sysfs_path=/dev/sys/block/bootdevice,checkpoint=fs,reservedsize=128M,fscompress,readahead_size_kb=128,@fileencryption@,@metadata_encryption@,keydirectory=/metadata/vold/metadata_encryption,device=zoned:/dev/block/by-name/zoned_device
/dev/block/platform/13200000.ufs/by-name/metadata /metadata ext4 noatime,nosuid,nodev,data=journal,commit=1 wait,check,formattable,first_stage_mount,metadata_csum
/dev/block/platform/13200000.ufs/by-name/metadata /metadata f2fs noatime,nosuid,nodev,sync wait,check,first_stage_mount

102
conf/f2fs/Android.bp Normal file
View File

@@ -0,0 +1,102 @@
/*
* Copyright (C) 2021 The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
// By default this device uses hardware-wrapped keys for storage encryption,
// which is intended to offer increased security over the traditional method
// (software keys). However, hardware-wrapped keys aren't compatible with
// FIPS-140 certification of the encryption hardware, and hence we have to
// disable the use of them in FIPS mode. This requires having two fstab files:
// one for the default mode, and one for FIPS mode selectable via
// androidboot.fstab_suffix on the kernel command line. These fstabs should be
// identical with the exception of the encryption settings, so to keep them in
// sync the rules below generate them from a template file.
soong_namespace {
imports: [
"device/google/zuma",
],
}
package {
// See: http://go/android-license-faq
// A large-scale-change added 'default_applicable_licenses' to import
// all of the 'license_kinds' from "device_google_zuma_license"
// to get the below license kinds:
// SPDX-license-identifier-Apache-2.0
default_applicable_licenses: ["device_google_zuma_license"],
}
genrule {
name: "gen_fstab.zuma-hw-encrypt",
srcs: [
":fstab.zuma.common",
"fstab.zuma.f2fs",
],
out: ["fstab.zuma"],
cmd: "sed -e s/@fileencryption@/fileencryption=:aes-256-hctr2:inlinecrypt_optimized+wrappedkey_v0/" +
" -e s/@inlinecrypt@/inlinecrypt/ " +
" -e s/@metadata_encryption@/metadata_encryption=:wrappedkey_v0/ $(in) > $(out)",
}
genrule {
name: "gen_fstab.zuma-sw-encrypt",
srcs: [
":fstab.zuma.common",
"fstab.zuma.f2fs",
],
out: ["fstab.zuma"],
cmd: "sed -e s/@fileencryption@/fileencryption=aes-256-xts:aes-256-hctr2/" +
" -e s/@inlinecrypt@// " +
" -e s/@metadata_encryption@/metadata_encryption=/ $(in) > $(out)",
}
genrule {
name: "gen_fstab.zuma-no-encrypt",
srcs: [
":fstab.zuma.common",
"fstab.zuma.f2fs",
],
out: ["fstab.zuma"],
cmd: "sed -e s/@fileencryption@//" +
" -e s/@inlinecrypt@// " +
" -e s/@metadata_encryption@// $(in) > $(out)",
}
genrule {
name: "gen_fstab.zuma-fips",
srcs: [
":fstab.zuma.common",
"fstab.zuma.f2fs",
],
out: ["fstab.zuma-fips"],
cmd: "sed -e s/@fileencryption@/fileencryption=aes-256-xts/" +
" -e s/@inlinecrypt@/inlinecrypt/ " +
" -e s/@metadata_encryption@/metadata_encryption=aes-256-xts/ $(in) > $(out)",
}
prebuilt_etc {
name: "fstab.zuma",
src: ":gen_fstab.zuma-hw-encrypt",
vendor: true,
vendor_ramdisk_available: true,
}
prebuilt_etc {
name: "fstab.zuma-fips",
src: ":gen_fstab.zuma-fips",
vendor: true,
vendor_ramdisk_available: true,
}

10
conf/f2fs/fstab.zuma.f2fs Normal file
View File

@@ -0,0 +1,10 @@
# Android fstab file.
#
# The filesystem that contains the filesystem checker binary (typically /system) cannot
# specify MF_CHECK, and must come before any filesystems that do specify MF_CHECK
#
#<src> <mnt_point> <type> <mnt_flags and options> <fs_mgr_flags>
/dev/block/platform/13200000.ufs/by-name/userdata /data f2fs noatime,nosuid,nodev,discard,reserve_root=32768,resgid=1065,fsync_mode=nobarrier,compress_extension=apk,compress_extension=so,compress_extension=vdex,compress_extension=odex,@inlinecrypt@,atgc,checkpoint_merge,compress_cache latemount,wait,check,quota,formattable,sysfs_path=/dev/sys/block/bootdevice,checkpoint=fs,reservedsize=128M,fscompress,readahead_size_kb=128,@fileencryption@,@metadata_encryption@,keydirectory=/metadata/vold/metadata_encryption,device=zoned:/dev/block/by-name/zoned_device
/dev/block/platform/13200000.ufs/by-name/userdata /data ext4 noatime,nosuid,nodev,@inlinecrypt@ latemount,wait,check,quota,formattable,reservedsize=128M,readahead_size_kb=128,@fileencryption@,@metadata_encryption@,keydirectory=/metadata/vold/metadata_encryption
/dev/block/platform/13200000.ufs/by-name/metadata /metadata f2fs noatime,nosuid,nodev,sync wait,check,formattable,first_stage_mount
/dev/block/platform/13200000.ufs/by-name/metadata /metadata ext4 noatime,nosuid,nodev,data=journal,commit=1 wait,check,formattable,first_stage_mount,metadata_csum

6
conf/fstab.efs Normal file
View File

@@ -0,0 +1,6 @@
# Android fstab file.
# <src> <mnt_point> <type> <mnt_flags and options> <fs_mgr_flags>
# Create the specific fstab file for efs partitions for flexibility
/dev/block/platform/13200000.ufs/by-name/efs /mnt/vendor/efs f2fs noatime,sync wait,check,formattable
/dev/block/platform/13200000.ufs/by-name/efs_backup /mnt/vendor/efs_backup f2fs noatime,sync wait,check,formattable
/dev/block/platform/13200000.ufs/by-name/modem_userdata /mnt/vendor/modem_userdata f2fs noatime,sync wait,check,formattable

10
conf/fstab.efs.from_data Normal file
View File

@@ -0,0 +1,10 @@
# Android fstab file.
# <src> <mnt_point> <type> <mnt_flags and options> <fs_mgr_flags>
# Create the specific fstab file for efs partitions for flexibility
/data/vendor/copied/efs /mnt/vendor/efs none bind latemount
/data/vendor/copied/efs_backup /mnt/vendor/efs_backup none bind latemount
/data/vendor/copied/modem_userdata /mnt/vendor/modem_userdata none bind latemount
/data/vendor/copied/persist /mnt/vendor/persist none bind latemount

View File

@@ -14,12 +14,7 @@ vendor /vendor
vendor_dlkm /vendor_dlkm ext4 noatime,ro wait,slotselect,avb=vbmeta,avb_keys=no_such_key,logical,first_stage_mount
/dev/block/platform/13200000.ufs/by-name/boot /boot emmc defaults slotselect,avb=boot,first_stage_mount
/dev/block/platform/13200000.ufs/by-name/init_boot /init_boot emmc defaults slotselect,avb=init_boot,first_stage_mount
/dev/block/platform/13200000.ufs/by-name/efs /mnt/vendor/efs f2fs noatime,sync wait,check,formattable
/dev/block/platform/13200000.ufs/by-name/efs_backup /mnt/vendor/efs_backup f2fs noatime,sync wait,check,formattable
/dev/block/platform/13200000.ufs/by-name/modem_userdata /mnt/vendor/modem_userdata f2fs noatime,sync wait,check,formattable
/dev/block/platform/13200000.ufs/by-name/misc /misc emmc defaults wait
/dev/block/platform/13200000.ufs/by-name/metadata /metadata f2fs noatime,nosuid,nodev,sync wait,check,formattable,first_stage_mount
#/dev/block/platform/13200000.ufs/by-name/pvmfw /pvmfw emmc defaults wait,slotselect,avb=pvmfw,first_stage_mount
/dev/block/platform/13200000.ufs/by-name/userdata /data f2fs noatime,nosuid,nodev,discard,reserve_root=32768,resgid=1065,fsync_mode=nobarrier,compress_extension=apk,compress_extension=apex,compress_extension=so,compress_extension=vdex,compress_extension=odex,@inlinecrypt@,atgc,checkpoint_merge,compress_cache latemount,wait,check,quota,formattable,sysfs_path=/dev/sys/block/bootdevice,checkpoint=fs,reservedsize=128M,fscompress,readahead_size_kb=128,@fileencryption@,@metadata_encryption@,keydirectory=/metadata/vold/metadata_encryption,zoned_device
/dev/block/platform/13200000.ufs/by-name/vbmeta /vbmeta emmc defaults slotselect,first_stage_mount
/devices/platform/11210000.usb* auto vfat defaults voldmanaged=usb:auto

24
conf/init.efs.16k.rc Normal file
View File

@@ -0,0 +1,24 @@
service copy_efs_files_to_data /vendor/bin/copy_efs_files_to_data
user root
group root radio system audio media graphics camera
stdio_to_kmsg
oneshot
disabled
on post-fs-data && property:ro.boot.hardware.cpu.pagesize=16384
mkdir /data/vendor/copied 0775 radio system
restorecon_recursive /data/vendor/copied
exec_start copy_efs_files_to_data
mount_all /vendor/etc/fstab.efs.from_data
restorecon_recursive /mnt/vendor/persist
restorecon_recursive /data/vendor/ss
setprop ro.vendor.persist.status mounted
on early-init && property:ro.boot.hardware.cpu.pagesize=4096
mount_all /vendor/etc/fstab.persist --early
setprop ro.vendor.persist.status mounted
on late-fs && property:ro.boot.hardware.cpu.pagesize=4096
mount_all /vendor/etc/fstab.efs --early

6
conf/init.efs.4k.rc Normal file
View File

@@ -0,0 +1,6 @@
on early-init
mount_all /vendor/etc/fstab.persist --early
setprop ro.vendor.persist.status mounted
on late-fs
mount_all /vendor/etc/fstab.efs --early

16
conf/init.eng.memtag.rc Normal file
View File

@@ -0,0 +1,16 @@
# MTE in -eng build: litle and mid cores in Sync mode
# Big core in Asymm mode to work around a performance issue (b/266613799)
on init
# Per-core mode overrides.
# Little Cores: sync
write /sys/devices/system/cpu/cpu0/mte_tcf_preferred sync
write /sys/devices/system/cpu/cpu1/mte_tcf_preferred sync
write /sys/devices/system/cpu/cpu2/mte_tcf_preferred sync
write /sys/devices/system/cpu/cpu3/mte_tcf_preferred sync
# Mid Cores: sync
write /sys/devices/system/cpu/cpu4/mte_tcf_preferred sync
write /sys/devices/system/cpu/cpu5/mte_tcf_preferred sync
write /sys/devices/system/cpu/cpu6/mte_tcf_preferred sync
write /sys/devices/system/cpu/cpu7/mte_tcf_preferred sync
# Big Core: asymm
write /sys/devices/system/cpu/cpu8/mte_tcf_preferred asymm

47
conf/init.persist.rc Normal file
View File

@@ -0,0 +1,47 @@
on property:ro.vendor.persist.status=mounted
# for modem related functions
restorecon_recursive /mnt/vendor/efs
chown radio system /mnt/vendor/efs
restorecon_recursive /mnt/vendor/efs_backup
chown radio system /mnt/vendor/efs_backup
restorecon_recursive /mnt/vendor/modem_userdata
chown radio system /mnt/vendor/modem_userdata
# for battery defender
mkdir /mnt/vendor/persist/battery 0700 system system
# Factory calibration files
chmod 0771 /mnt/vendor/persist/camera
chmod 0771 /mnt/vendor/persist/camera/OTP_calibration
chmod 0771 /mnt/vendor/persist/camera/pdaf_calibration_data
mkdir /mnt/vendor/persist/camera/rear 0771 system camera
chmod 0771 /mnt/vendor/persist/camera/rear
restorecon_recursive /mnt/vendor/persist
restorecon_recursive /mnt/vendor/persist/aoc
restorecon_recursive /mnt/vendor/persist/audio
restorecon_recursive /mnt/vendor/persist/sensors
restorecon_recursive /mnt/vendor/persist/battery
restorecon_recursive /mnt/vendor/persist/camera
restorecon_recursive /mnt/vendor/persist/modem
# Set up display-related directories and permissions
# Add restorecon_recursive command to make sure the restorecon label is persist_display_file.
restorecon_recursive /mnt/vendor/persist/display
mkdir /mnt/vendor/persist/data/sfs 0700 system system
mkdir /mnt/vendor/persist/data/tz 0700 system system
mkdir /mnt/vendor/persist/touch 0770 system system
on property:ro.fstype.data=* && property:ro.vendor.persist.status=mounted
# Proxy for Secure Storage
mkdir /data/vendor/rebootescrow 0770 hsm hsm
mkdir /data/vendor/ss 0770 root system
mkdir /mnt/vendor/persist/ss 0770 root system
restorecon_recursive /mnt/vendor/persist/ss
symlink /mnt/vendor/persist/ss /data/vendor/ss/persist
chown root system /data/vendor/ss/persist
chmod 0770 /data/vendor/ss/persist
symlink /dev/block/platform/13200000\.ufs/by-name/trusty_persist /data/vendor/ss/persist/0
chown system system /data/vendor/ss/persist/0
chown system system /data/vendor/ss/persist/nsp
restart storageproxyd

View File

@@ -3,7 +3,7 @@ on init
setprop sys.usb.controller "11210000.dwc3"
setprop sys.usb.configfs 1
on init && property:ro.debuggable=1 && property:ro.boot.mode=recovery
on init && property:ro.build.type=eng && property:ro.boot.mode=recovery
start recovery-console
service recovery-console /system/bin/sh

View File

@@ -1,9 +1,9 @@
import /vendor/etc/init/hw/init.zuma.storage.rc
import /vendor/etc/init/hw/init.zuma.usb.rc
import android.hardware.drm@1.2-service.widevine.rc
import init.exynos.sensorhub.rc
on early-init
mount_all /vendor/etc/fstab.persist --early
write /proc/sys/kernel/sched_pelt_multiplier 1
write /sys/kernel/mm/lru_gen/enabled n
@@ -16,10 +16,6 @@ on init
# Disable util-awareness for mids and bigs
write /proc/vendor_sched/teo_util_threshold "2 1024 1024"
# Boot time fs tuning
write /sys/block/sda/queue/scheduler bfq
write /sys/block/sda/queue/iosched/slice_idle 0
chown system system /proc/vendor_sched/groups/bg/set_task_group
chown system system /proc/vendor_sched/groups/cam/set_task_group
chown system system /proc/vendor_sched/groups/fg/set_task_group
@@ -48,6 +44,8 @@ on init
chown system system /proc/vendor_sched/prefer_idle_clear
chown system system /proc/vendor_sched/pmu_poll_enable
chown system system /proc/vendor_sched/pmu_poll_time
chown system system /proc/vendor_sched/uclamp_fork_reset_clear
chown system system /proc/vendor_sched/uclamp_fork_reset_set
chown system system /sys/devices/system/cpu/cpufreq/policy0/sched_pixel/lcpi_threshold
chown system system /sys/devices/system/cpu/cpufreq/policy0/sched_pixel/spc_threshold
chown system system /sys/devices/system/cpu/cpufreq/policy0/sched_pixel/limit_frequency
@@ -99,15 +97,90 @@ on init
chmod 0220 /proc/vendor_sched/prefer_idle_clear
chmod 0660 /proc/vendor_sched/pmu_poll_enable
chmod 0220 /proc/vendor_sched/pmu_poll_time
chmod 0220 /proc/vendor_sched/uclamp_fork_reset_clear
chmod 0220 /proc/vendor_sched/uclamp_fork_reset_set
start vendor.keymaster-4-0
# ZRAM setup
write /sys/block/zram0/comp_algorithm lz77eh
write /proc/sys/vm/page-cluster 0
# Change permission of sched qos nodes
chown system system /proc/vendor_sched/sched_qos/adpf_set
chown system system /proc/vendor_sched/sched_qos/adpf_clear
chown system system /proc/vendor_sched/sched_qos/auto_uclamp_max_set
chown system system /proc/vendor_sched/sched_qos/auto_uclamp_max_clear
chown system system /proc/vendor_sched/sched_qos/boost_prio_set
chown system system /proc/vendor_sched/sched_qos/boost_prio_clear
chown system system /proc/vendor_sched/sched_qos/preempt_wakeup_set
chown system system /proc/vendor_sched/sched_qos/preempt_wakeup_clear
chown system system /proc/vendor_sched/sched_qos/prefer_fit_set
chown system system /proc/vendor_sched/sched_qos/prefer_fit_clear
chown system system /proc/vendor_sched/sched_qos/prefer_high_cap_set
chown system system /proc/vendor_sched/sched_qos/prefer_high_cap_clear
chown system system /proc/vendor_sched/sched_qos/prefer_idle_set
chown system system /proc/vendor_sched/sched_qos/prefer_idle_clear
chown system system /proc/vendor_sched/sched_qos/rampup_multiplier_set
chown system system /proc/vendor_sched/sched_qos/rampup_multiplier_clear
# adjust PCP high level
write /proc/sys/vm/percpu_pagelist_high_fraction 430
chmod 0220 /proc/vendor_sched/sched_qos/adpf_set
chmod 0220 /proc/vendor_sched/sched_qos/adpf_clear
chmod 0220 /proc/vendor_sched/sched_qos/auto_uclamp_max_set
chmod 0220 /proc/vendor_sched/sched_qos/auto_uclamp_max_clear
chmod 0220 /proc/vendor_sched/sched_qos/boost_prio_set
chmod 0220 /proc/vendor_sched/sched_qos/boost_prio_clear
chmod 0220 /proc/vendor_sched/sched_qos/preempt_wakeup_set
chmod 0220 /proc/vendor_sched/sched_qos/preempt_wakeup_clear
chmod 0220 /proc/vendor_sched/sched_qos/prefer_fit_set
chmod 0220 /proc/vendor_sched/sched_qos/prefer_fit_clear
chmod 0220 /proc/vendor_sched/sched_qos/prefer_high_cap_set
chmod 0220 /proc/vendor_sched/sched_qos/prefer_high_cap_clear
chmod 0220 /proc/vendor_sched/sched_qos/prefer_idle_set
chmod 0220 /proc/vendor_sched/sched_qos/prefer_idle_clear
chmod 0220 /proc/vendor_sched/sched_qos/rampup_multiplier_set
chmod 0220 /proc/vendor_sched/sched_qos/rampup_multiplier_clear
# Enable sched_qos for some groups
write /proc/vendor_sched/groups/ta/qos_adpf_enable 1
write /proc/vendor_sched/groups/ta/qos_auto_uclamp_max_enable 1
write /proc/vendor_sched/groups/ta/qos_boost_prio_enable 1
write /proc/vendor_sched/groups/ta/qos_preempt_wakeup_enable 1
write /proc/vendor_sched/groups/ta/qos_prefer_fit_enable 1
write /proc/vendor_sched/groups/ta/qos_prefer_high_cap_enable 1
write /proc/vendor_sched/groups/ta/qos_prefer_idle_enable 1
write /proc/vendor_sched/groups/ta/qos_rampup_multiplier_enable 1
write /proc/vendor_sched/groups/fg/qos_adpf_enable 1
write /proc/vendor_sched/groups/fg/qos_auto_uclamp_max_enable 1
write /proc/vendor_sched/groups/fg/qos_boost_prio_enable 1
write /proc/vendor_sched/groups/fg/qos_preempt_wakeup_enable 1
write /proc/vendor_sched/groups/fg/qos_prefer_fit_enable 1
write /proc/vendor_sched/groups/fg/qos_prefer_high_cap_enable 1
write /proc/vendor_sched/groups/fg/qos_prefer_idle_enable 1
write /proc/vendor_sched/groups/fg/qos_rampup_multiplier_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_adpf_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_auto_uclamp_max_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_boost_prio_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_preempt_wakeup_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_prefer_fit_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_prefer_high_cap_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_prefer_idle_enable 1
write /proc/vendor_sched/groups/fg_wi/qos_rampup_multiplier_enable 1
write /proc/vendor_sched/groups/cam/qos_adpf_enable 1
write /proc/vendor_sched/groups/cam/qos_auto_uclamp_max_enable 1
write /proc/vendor_sched/groups/cam/qos_prefer_fit_enable 1
write /proc/vendor_sched/groups/cam/qos_prefer_high_cap_enable 1
write /proc/vendor_sched/groups/cam/qos_prefer_idle_enable 1
write /proc/vendor_sched/groups/cam/qos_rampup_multiplier_enable 1
write /proc/vendor_sched/groups/cam_power/qos_adpf_enable 1
write /proc/vendor_sched/groups/cam_power/qos_auto_uclamp_max_enable 1
write /proc/vendor_sched/groups/cam_power/qos_prefer_fit_enable 1
write /proc/vendor_sched/groups/cam_power/qos_prefer_high_cap_enable 1
write /proc/vendor_sched/groups/cam_power/qos_prefer_idle_enable 1
write /proc/vendor_sched/groups/cam_power/qos_rampup_multiplier_enable 1
write /proc/vendor_sched/groups/rt/qos_adpf_enable 1
write /proc/vendor_sched/groups/rt/qos_rampup_multiplier_enable 1
write /proc/vendor_sched/groups/sf/qos_adpf_enable 1
write /proc/vendor_sched/groups/sf/qos_rampup_multiplier_enable 1
# ZRAM setup
write /proc/sys/vm/page-cluster 0
# Some user code relies on ro.boot.hardware.revision
setprop ro.boot.hardware.revision ${ro.revision}
@@ -143,16 +216,6 @@ on init
write /sys/class/net/rmnet6/queues/rx-0/rps_cpus fe
write /sys/class/net/rmnet7/queues/rx-0/rps_cpus fe
# Create UDS structure for base VR services.
mkdir /dev/socket/pdx 0775 system system
mkdir /dev/socket/pdx/system 0775 system system
mkdir /dev/socket/pdx/system/buffer_hub 0775 system system
mkdir /dev/socket/pdx/system/performance 0775 system system
mkdir /dev/socket/pdx/system/vr 0775 system system
mkdir /dev/socket/pdx/system/vr/display 0775 system system
mkdir /dev/socket/pdx/system/vr/pose 0775 system system
mkdir /dev/socket/pdx/system/vr/sensors 0775 system system
# Boot time 183626384
write /proc/vendor_sched/groups/ta/uclamp_min 221
write /proc/vendor_sched/groups/ta/prefer_idle 1
@@ -164,14 +227,11 @@ on init
# governor setting
write /sys/devices/system/cpu/cpu0/cpufreq/scaling_governor sched_pixel
write /sys/devices/system/cpu/cpu0/cpufreq/sched_pixel/up_rate_limit_us 500
write /sys/devices/system/cpu/cpu0/cpufreq/sched_pixel/down_rate_limit_us 5000
write /sys/devices/system/cpu/cpu0/cpufreq/sched_pixel/down_rate_limit_scale_pow 2
write /sys/devices/system/cpu/cpu4/cpufreq/scaling_governor sched_pixel
write /sys/devices/system/cpu/cpu4/cpufreq/sched_pixel/up_rate_limit_us 500
write /sys/devices/system/cpu/cpu4/cpufreq/sched_pixel/down_rate_limit_us 20000
write /sys/devices/system/cpu/cpu8/cpufreq/scaling_governor sched_pixel
write /sys/devices/system/cpu/cpu8/cpufreq/sched_pixel/up_rate_limit_us 500
write /sys/devices/system/cpu/cpu8/cpufreq/sched_pixel/down_rate_limit_us 20000
# memlat cpuidle awareness setting
@@ -262,6 +322,7 @@ on init
chown system system /sys/class/power_supply/wireless/device/version
chown system system /sys/class/power_supply/wireless/device/features
chown system system /sys/class/power_supply/wireless/device/authtype
chown system system /sys/class/power_supply/wireless/device/authstart
# Adaptive charge
chown system system /sys/class/power_supply/battery/charge_deadline
@@ -365,6 +426,15 @@ on init
chown root system /sys/devices/platform/16490000.gsa-ns/log_main
chown root system /sys/devices/platform/16490000.gsa-ns/log_intermediate
# Enable CPU Idle histograms
write /sys/kernel/metrics/cpuidle_histogram/enable 1
on init && property:ro.boot.hardware.cpu.pagesize=4096
write /sys/block/zram0/comp_algorithm lz77eh
on init && property:ro.boot.hardware.cpu.pagesize=16384
write /sys/block/zram0/comp_algorithm lzo-rle
on post-fs
# Ensure device is ready and start storageproxyd
wait /dev/sg1
@@ -378,6 +448,11 @@ on late-fs
# Mount RW partitions which need run fsck
mount_all --late
on late-init
write /sys/devices/system/cpu/cpu0/cpufreq/sched_pixel/down_rate_limit_us 5000
write /sys/devices/system/cpu/cpu4/cpufreq/sched_pixel/down_rate_limit_us 20000
write /sys/devices/system/cpu/cpu8/cpufreq/sched_pixel/down_rate_limit_us 20000
on post-fs-data
# Modem temperature driver
chown radio system /sys/devices/platform/cp-tm1/cp_temp
@@ -399,7 +474,7 @@ on post-fs-data
mkdir /data/vendor/radio/logs/always-on 777 system radio
# Modem extended log folder
mkdir /data/vendor/radio/extended_logs 0770 radio system
mkdir /data/vendor/radio/extended_logs 0771 radio system
# Log Mask Library Mask storage paths
mkdir /data/vendor/radio/log_masks 777 system system
@@ -443,13 +518,6 @@ on post-fs-data
chown system system /dev/ispolin_ranging
chmod 0660 /dev/ispolin_ranging
# Factory calibration files
chmod 0771 /mnt/vendor/persist/camera
chmod 0771 /mnt/vendor/persist/camera/OTP_calibration
chmod 0771 /mnt/vendor/persist/camera/pdaf_calibration_data
mkdir /mnt/vendor/persist/camera/rear 0771 system camera
chmod 0771 /mnt/vendor/persist/camera/rear
# Audio dump and debug
mkdir /data/vendor/audio 0770 audio audio
@@ -543,9 +611,9 @@ on early-boot
chown system system /dev/logbuffer_usbpd
chown system system /dev/logbuffer_wireless
chown system system /dev/logbuffer_pca9468
chown system system /dev/logbuffer_dc_mains
chown system system /dev/logbuffer_cpm
chown system system /dev/logbuffer_wc68
chown system system /dev/logbuffer_ln8411
chown system system /dev/logbuffer_pcie0
chown system system /dev/logbuffer_pcie1
chown system system /dev/logbuffer_bd
@@ -611,34 +679,11 @@ on property:persist.vendor.radio.no_modem_board=1
on fs
mount_all --early
restorecon_recursive /mnt/vendor/efs
chown radio system /mnt/vendor/efs
restorecon_recursive /mnt/vendor/efs_backup
chown radio system /mnt/vendor/efs_backup
restorecon_recursive /mnt/vendor/modem_userdata
chown radio system /mnt/vendor/modem_userdata
# Mount modem partition
mount_all /vendor/etc/fstab.modem --early
restorecon_recursive /mnt/vendor/modem_img
# for battery defender
mkdir /mnt/vendor/persist/battery 0700 system system
restorecon_recursive /mnt/vendor/persist
restorecon_recursive /mnt/vendor/persist/aoc
restorecon_recursive /mnt/vendor/persist/audio
restorecon_recursive /mnt/vendor/persist/sensors
restorecon_recursive /mnt/vendor/persist/battery
restorecon_recursive /mnt/vendor/persist/camera
restorecon_recursive /mnt/vendor/persist/modem
# Set up display-related directories and permissions
# Add restorecon_recursive command to make sure the restorecon label is persist_display_file.
restorecon_recursive /mnt/vendor/persist/display
mkdir /mnt/vendor/persist/data/sfs 0700 system system
mkdir /mnt/vendor/persist/data/tz 0700 system system
mkdir /mnt/vendor/persist/touch 0770 system system
# Permissions for ION
chmod 0660 /sys/class/ion_cma/ion_video_ext/isolated
chown system system /sys/class/ion_cma/ion_video_ext/isolated
@@ -657,6 +702,7 @@ on fs
chown system system /sys/devices/platform/exynos-drm/primary-panel/panel_need_handle_idle_exit
chown system system /sys/devices/platform/exynos-drm/primary-panel/op_hz
chown system system /sys/devices/platform/exynos-drm/primary-panel/refresh_ctrl
chown system system /sys/devices/platform/exynos-drm/primary-panel/power_state
chown system system /sys/module/drm/parameters/vblankoffdelay
chown system system /sys/module/drm/parameters/debug
chown system system /sys/class/dqe0/atc/ambient_light
@@ -707,8 +753,8 @@ service abox /vendor/bin/main_abox 17c50000.abox
group audioserver
seclabel u:r:abox:s0
# on userdebug and eng builds, enable kgdb on the serial console
on property:ro.debuggable=1
# on eng builds, enable kgdb on the serial console
on property:ro.build.type=eng
write /sys/module/kgdboc/parameters/kgdboc ttyFIQ1
write /sys/module/fiq_debugger/parameters/kgdb_enable 1
@@ -762,6 +808,9 @@ on property:sys.boot_completed=1
# Set kswapd affinity
write /sys/kernel/vendor_mm/kswapd_cpu_affinity ff
# Set kcompactd affinity
write /sys/kernel/vendor_mm/kcompactd_cpu_affinity ff
# Adjust watermark level
write /proc/sys/vm/watermark_scale_factor 200
@@ -773,9 +822,9 @@ on property:sys.boot_completed=1
write /sys/devices/platform/17000010.devfreq_mif/devfreq/17000010.devfreq_mif/exynos_data/cancel_boot_freq 1
# Restore prefer idle
write /proc/vendor_sched/groups/ta/preferred_idle_mask_low 0x1ff
write /proc/vendor_sched/groups/ta/preferred_idle_mask_mid 0x1ff
write /proc/vendor_sched/groups/ta/preferred_idle_mask_high 0x1ff
write /proc/vendor_sched/groups/ta/preferred_idle_mask_low 0xff
write /proc/vendor_sched/groups/ta/preferred_idle_mask_mid 0xff
write /proc/vendor_sched/groups/ta/preferred_idle_mask_high 0xff
write /proc/vendor_sched/groups/fg/preferred_idle_mask_low 0x1ff
write /proc/vendor_sched/groups/fg/preferred_idle_mask_mid 0x1ff
write /proc/vendor_sched/groups/fg/preferred_idle_mask_high 0x1ff
@@ -792,6 +841,12 @@ on property:sys.boot_completed=1
write /dev/cpuset/camera-daemon/cpus 0-8
setprop vendor.powerhal.init 1
# Setup scheduler parameters
write /proc/vendor_sched/min_granularity_ns 1000000
write /proc/vendor_sched/latency_ns 8000000
write /proc/vendor_sched/max_load_balance_interval 1
write /proc/vendor_sched/enable_hrtick 1
# Setup final cpu.uclamp
write /proc/vendor_sched/groups/ta/uclamp_min 1
write /proc/vendor_sched/groups/fg/uclamp_min 0
@@ -882,6 +937,9 @@ on property:sys.boot_completed=1
# Enable SICD
write /sys/devices/system/cpu/cpupm/cpupm/sicd 1
# To be removed after InputDispatche and InputReader become ADPF
write /proc/vendor_sched/prefer_idle_task_name "InputDispatcher,InputReader"
on property:sys.boot_completed=1 && property:persist.sys.device_provisioned=1
write /sys/class/power_supply/battery/first_usage_date 0
@@ -937,20 +995,6 @@ service bugreport /system/bin/dumpstate -d -p -z
oneshot
keycodes 114 115 116
# Proxy for Secure Storage
on post-fs-data
mkdir /data/vendor/rebootescrow 0770 hsm hsm
mkdir /data/vendor/ss 0770 root system
mkdir /mnt/vendor/persist/ss 0770 root system
restorecon_recursive /mnt/vendor/persist/ss
symlink /mnt/vendor/persist/ss /data/vendor/ss/persist
chown root system /data/vendor/ss/persist
chmod 0770 /data/vendor/ss/persist
symlink /dev/block/platform/13200000\.ufs/by-name/trusty_persist /data/vendor/ss/persist/0
chown system system /data/vendor/ss/persist/0
chown system system /data/vendor/ss/persist/nsp
restart storageproxyd
service storageproxyd /vendor/bin/storageproxyd -d /dev/trusty-ipc-dev0 \
-r /dev/sg1 -p /data/vendor/ss -t ufs
@@ -1016,38 +1060,14 @@ on property:vendor.thermal.link_ready=1
write /sys/devices/virtual/pmic/mitigation/triggered_lvl/soft_ocp_cpu2_lvl 12000
write /sys/devices/virtual/pmic/mitigation/triggered_lvl/soft_ocp_gpu_lvl 9000
write /sys/devices/virtual/pmic/mitigation/triggered_lvl/soft_ocp_tpu_lvl 8500
write /sys/devices/virtual/pmic/mitigation/triggered_lvl/ocp_cpu2_lvl 12000
write /sys/devices/virtual/pmic/mitigation/triggered_lvl/ocp_gpu_lvl 9000
write /sys/devices/virtual/pmic/mitigation/triggered_lvl/ocp_tpu_lvl 12000
write /sys/devices/virtual/pmic/mitigation/clock_div/tpu_clk_div 0x1
write /sys/devices/virtual/pmic/mitigation/clock_div/gpu_clk_div 0x1
write /sys/devices/virtual/pmic/mitigation/clock_div/cpu2_clk_div 0x1
write /sys/devices/platform/cpupm/cpupm/cpd_cl1 1 #Enable power down
write /sys/devices/platform/cpupm/cpupm/cpd_cl2 1 #Enable power down
chown system system /dev/thermal/tz-by-name/soc/mode
chown system system /dev/thermal/tz-by-name/vdroop2/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/vdroop2/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/vdroop1/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/vdroop1/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/smpl_gm/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/smpl_gm/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/ocp_cpu1/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/ocp_cpu1/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/ocp_cpu2/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/ocp_cpu2/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/ocp_tpu/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/ocp_tpu/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/ocp_gpu/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/ocp_gpu/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/soft_ocp_cpu1/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/soft_ocp_cpu1/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/soft_ocp_cpu2/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/soft_ocp_cpu2/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/soft_ocp_tpu/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/soft_ocp_tpu/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/soft_ocp_gpu/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/soft_ocp_gpu/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/soc/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/soc/trip_point_0_hyst
chown system system /dev/thermal/tz-by-name/batoilo/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/batoilo/trip_point_0_hyst
# Thermal
chown system system /dev/thermal/tz-by-name/soc_therm/trip_point_0_temp
chown system system /dev/thermal/tz-by-name/soc_therm/trip_point_0_hyst

View File

@@ -423,3 +423,12 @@ on property:persist.vendor.usb.displayport.enabled=1
on property:persist.vendor.usb.displayport.enabled=0
write /sys/module/exynos_drm/parameters/dp_enabled 0
write /sys/class/typec/port0/port0.0/mode1/active "no"
on property:persist.sys.hdcp_checking=always
write /sys/module/exynos_hdcp2/parameters/max_ver 3
on property:persist.sys.hdcp_checking="drm-only"
write /sys/module/exynos_hdcp2/parameters/max_ver 2
on property:persist.sys.hdcp_checking=never
write /sys/module/exynos_hdcp2/parameters/max_ver 0

View File

@@ -97,6 +97,7 @@
/dev/acd-mel_processor 0660 system audio
/dev/amcs 0660 system audio
/dev/acd-audio_rtp_* 0660 system radio
/dev/acd-mc_headpos 0660 system audio
# Secure MEM driver
/dev/s5p-smem 0660 drm drmrpc
@@ -155,10 +156,20 @@
/dev/acd-com.google.chre 0660 system system
/dev/acd-com.google.chre.non_wake_up 0660 system system
# CHRE (EFW transport)
/dev/acd-chre_ctl 0660 system system
/dev/acd-chre_data_tx 0220 system system
/dev/acd-chre_data_rx 0440 system system
# BT
/dev/acd-com.google.bt 0660 system system
/dev/acd-com.google.bt.non_wake_up 0660 system system
# AoC Bluetooth Offload
/dev/acd-chre_bt_offload_ctl 0660 bluetooth bluetooth
/dev/acd-chre_bt_offload_data_tx 0220 bluetooth bluetooth
/dev/acd-chre_bt_offload_data_rx 0440 bluetooth bluetooth
# LWIS
/dev/lwis* 0660 system system
@@ -245,4 +256,4 @@
/sys/bus/aoc/devices/control udfps_get_disp_freq 0440 system system
# USB Alt Modes
/sys/devices/platform/10cb0000.hsi2c/i2c-*/*-0025/typec/port0/port0-partner/port0-partner.* mode1/active 0664 system system
/sys/devices/platform/10cb0000.hsi2c/i2c-*/*-0025/typec/port0/port0-partner/port0-partner.* mode1/active 0664 system system

40
copy_efs_files_to_data.sh Normal file
View File

@@ -0,0 +1,40 @@
#!/vendor/bin/sh
CHECKPOINT_DIR=/data/vendor/copied
export BIN_DIR=/vendor/bin
$BIN_DIR/mkdir -p $CHECKPOINT_DIR
function copy_files_to_data()
{
block_device=$1
partition_name=$(basename $1)
mount_point=$2
tmpdir=$CHECKPOINT_DIR/$partition_name.img
build_checkpoint=$CHECKPOINT_DIR/$partition_name
if [ ! -e $build_checkpoint ]; then
$BIN_DIR/rm -rf $tmpdir
$BIN_DIR/mkdir -p $tmpdir
$BIN_DIR/dump.f2fs -rfPLo $tmpdir $block_device
if [ $? -ne 0 ]; then
echo "Failed to $BIN_DIR/dump.f2fs -rfPLo $tmpdir $block_device"
return
fi
$BIN_DIR/mv $tmpdir $build_checkpoint
if [ $? -ne 0 ]; then
echo "mv $tmpdir $build_checkpoint"
return
fi
$BIN_DIR/fsync `dirname $build_checkpoint`
fi
echo "Successfully copied $mount_point to $build_checkpoint"
}
copy_files_to_data "/dev/block/by-name/efs" "/mnt/vendor/efs"
copy_files_to_data "/dev/block/by-name/efs_backup" "/mnt/vendor/efs_backup"
copy_files_to_data "/dev/block/by-name/modem_userdata" "/mnt/vendor/modem_userdata"
copy_files_to_data "/dev/block/by-name/persist" "/mnt/vendor/persist"
$BIN_DIR/fsync /data/vendor/copied

View File

@@ -51,11 +51,14 @@
<permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/>
</exception>
<exception package="com.google.android.GoogleCamera">
<permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
</exception>
<exception package="com.google.android.apps.camera.services">
<!-- Camera -->
<permission name="android.permission.CAMERA" fixed="false"/>
<!-- Camera Connectivity -->
<permission name="android.permission.ACCESS_FINE_LOCATION" fixed="false"/>
<permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
<permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/>
<permission name="android.permission.BLUETOOTH_SCAN" fixed="false"/>
@@ -75,6 +78,8 @@
<permission name="android.permission.ACTIVITY_RECOGNITION" fixed="false"/>
<!-- Notifications -->
<permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
<!-- Used by Bluetooth Module to collect bluetooth info -->
<permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/>
</exception>
<exception package="com.google.android.apps.setupwizard.searchselector">
@@ -162,5 +167,16 @@
<!-- Notifications -->
<permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
</exception>
<exception package="com.google.android.apps.pixel.relationships">
<permission name="android.permission.CALL_PHONE" fixed="false"/>
<permission name="android.permission.READ_CALL_LOG" fixed="false"/>
<permission name="android.permission.READ_CONTACTS" fixed="false"/>
<permission name="android.permission.WRITE_CONTACTS" fixed="false"/>
</exception>
<exception
package="com.google.android.apps.privacy.wildlife">
<permission name="android.permission.READ_PHONE_STATE" fixed="false"/>
</exception>
</exceptions>

View File

@@ -44,17 +44,15 @@ PRODUCT_PRODUCT_PROPERTIES += \
PRODUCT_PRODUCT_PROPERTIES += \
ro.thermal_warmreset = true
# Set the max page size to 4096 (b/300367402)
PRODUCT_MAX_PAGE_SIZE_SUPPORTED := 4096
# Trigger fsck on upgrade (305658663)
PRODUCT_PRODUCT_PROPERTIES += \
ro.preventative_fsck = 1
# Indicate that the bootloader supports the MTE developer option switch
# (MISC_MEMTAG_MODE_MEMTAG_ONCE), with the exception of _fullmte products that
# force enable MTE.
# (MISC_MEMTAG_MODE_MEMTAG_ONCE), with the exception of _fullmte products and
# eng products that force enable MTE
ifeq (,$(filter %_fullmte,$(TARGET_PRODUCT)))
ifeq (,$(filter eng,$(TARGET_BUILD_VARIANT)))
PRODUCT_PRODUCT_PROPERTIES += ro.arm64.memtag.bootctl_supported=1
# N.B. persist properties in product Makefiles aren't actually persisted to the data
# partition, so they will actually go away if we remove them here, or if the user
@@ -64,3 +62,11 @@ PRODUCT_PRODUCT_PROPERTIES += persist.arm64.memtag.app.com.google.android.blueto
PRODUCT_PRODUCT_PROPERTIES += persist.arm64.memtag.app.com.android.nfc=off
PRODUCT_PRODUCT_PROPERTIES += persist.arm64.memtag.system_server=off
endif
endif
ifeq (,$(filter %_fullmte,$(TARGET_PRODUCT)))
ifneq (,$(filter eng,$(TARGET_BUILD_VARIANT)))
PRODUCT_COPY_FILES += \
device/google/zuma/conf/init.eng.memtag.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/init.eng.memtag.rc
endif
endif

181
device.mk
View File

@@ -16,7 +16,7 @@
include device/google/gs-common/device.mk
include device/google/gs-common/gs_watchdogd/watchdog.mk
include device/google/gs-common/ramdump/ramdump.mk
include device/google/gs-common/ramdump_and_coredump/ramdump_and_coredump.mk
include device/google/gs-common/soc/soc.mk
include device/google/gs-common/modem/modem.mk
include device/google/gs-common/aoc/aoc.mk
@@ -26,6 +26,7 @@ include device/google/gs-common/storage/storage.mk
include device/google/gs-common/thermal/dump/thermal.mk
include device/google/gs-common/thermal/thermal_hal/device.mk
include device/google/gs-common/performance/perf.mk
include device/google/gs-common/power/power.mk
include device/google/gs-common/pixel_metrics/pixel_metrics.mk
include device/google/gs-common/soc/freq.mk
include device/google/gs-common/gps/dump/log.mk
@@ -42,6 +43,8 @@ include device/google/gs-common/sota_app/factoryota.mk
include device/google/gs-common/misc_writer/misc_writer.mk
include device/google/gs-common/gyotaku_app/gyotaku.mk
include device/google/gs-common/bootctrl/bootctrl_aidl.mk
include device/google/gs-common/betterbug/betterbug.mk
include device/google/gs-common/fingerprint/fingerprint.mk
include device/google/zuma/dumpstate/item.mk
@@ -72,14 +75,15 @@ PRODUCT_SOONG_NAMESPACES += \
hardware/google/gchips/gralloc4 \
hardware/google/graphics/common \
hardware/google/graphics/zuma \
hardware/google/graphics/zuma/libhwc2.1 \
hardware/google/interfaces \
hardware/google/pixel \
device/google/zuma \
device/google/zuma/powerstats \
vendor/google_devices/common/chre/host/hal \
vendor/google_devices/zuma/proprietary/debugpolicy \
vendor/google/whitechapel/tools \
vendor/google/interfaces \
vendor/google_devices/common/proprietary/confirmatioui_hal \
vendor/google_nos/host/android \
vendor/google_nos/test/system-test-harness \
vendor/google/camera
@@ -102,7 +106,7 @@ PRODUCT_DEFAULT_PROPERTY_OVERRIDES += \
PRODUCT_SOONG_NAMESPACES += \
vendor/samsung_slsi/telephony/$(BOARD_USES_SHARED_VENDOR_TELEPHONY)
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
#Set IKE logs to verbose for WFC
PRODUCT_PROPERTY_OVERRIDES += log.tag.IKE=VERBOSE
@@ -121,7 +125,7 @@ PRODUCT_PROPERTY_OVERRIDES += log.tag.ShannonQNS-HC=DEBUG
include device/google/zuma/modem/userdebug.mk
endif
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
# b/36703476: Set default log size to 1M
PRODUCT_PROPERTY_OVERRIDES += \
ro.logd.size=1M
@@ -183,7 +187,7 @@ PRODUCT_PRODUCT_PROPERTIES += \
bluetooth.profile.asha.central.enabled?=true \
bluetooth.profile.a2dp.source.enabled?=true \
bluetooth.profile.avrcp.target.enabled?=true \
bluetooth.profile.bap.unicast.server.enabled?=true \
bluetooth.profile.bap.unicast.client.enabled?=true \
bluetooth.profile.bas.client.enabled?=true \
bluetooth.profile.csip.set_coordinator.enabled?=true \
bluetooth.profile.gatt.enabled?=true \
@@ -198,8 +202,8 @@ PRODUCT_PRODUCT_PROPERTIES += \
bluetooth.profile.pan.panu.enabled?=true \
bluetooth.profile.pbap.server.enabled?=true \
bluetooth.profile.sap.server.enabled?=true \
bluetooth.profile.tbs.server.enabled?=true \
bluetooth.profile.vc.server.enabled?=true
bluetooth.profile.ccp.server.enabled?=true \
bluetooth.profile.vcp.controller.enabled?=true
# Carrier configuration default location
PRODUCT_PROPERTY_OVERRIDES += \
@@ -208,7 +212,7 @@ PRODUCT_PROPERTY_OVERRIDES += \
PRODUCT_PROPERTY_OVERRIDES += \
telephony.active_modems.max_count=2
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PROPERTY_OVERRIDES += \
persist.vendor.usb.displayport.enabled=1
else
@@ -216,14 +220,29 @@ PRODUCT_PROPERTY_OVERRIDES += \
persist.vendor.usb.displayport.enabled=1
endif
PRODUCT_PROPERTY_OVERRIDES += \
persist.sys.hdcp_checking=drm-only
USE_LASSEN_OEMHOOK := true
# The "power-anomaly-sitril" is added into PRODUCT_SOONG_NAMESPACES when
# $(USE_LASSEN_OEMHOOK) is true and $(BOARD_WITHOUT_RADIO) is not true.
ifneq ($(BOARD_WITHOUT_RADIO),true)
$(call soong_config_set,sitril,use_lassen_oemhook_with_radio,true)
PRODUCT_SOONG_NAMESPACES += vendor/google/tools/power-anomaly-sitril
endif
# Use for GRIL
USES_LASSEN_MODEM := true
$(call soong_config_set, vendor_ril_google_feature, use_lassen_modem, true)
ifneq ($(BOARD_WITHOUT_RADIO),true)
$(call soong_config_set_bool,grilservice,use_google_qns,true)
endif
ifeq ($(USES_GOOGLE_DIALER_CARRIER_SETTINGS),true)
USE_GOOGLE_DIALER := true
USE_GOOGLE_CARRIER_SETTINGS := true
# GoogleDialer in PDK build with "USES_GOOGLE_DIALER_CARRIER_SETTINGS=true"
PRODUCT_SOONG_NAMESPACES += vendor/google_devices/zuma/proprietary/GoogleDialer
endif
ifeq ($(USES_GOOGLE_PREBUILT_MODEM_SVC),true)
@@ -242,8 +261,15 @@ USE_SWIFTSHADER := false
# HWUI
TARGET_USES_VULKAN = true
# "vendor/arm" doesn't exist in PDK build
ifeq (,$(realpath $(TOPDIR)vendor/arm/mali/valhall/Android.bp))
PRODUCT_SOONG_NAMESPACES += \
vendor/google_devices/zuma/prebuilts/firmware/gpu \
vendor/google_devices/zuma/prebuilts/gpu
else
PRODUCT_SOONG_NAMESPACES += \
vendor/arm/mali/valhall
endif
$(call soong_config_set,pixel_mali,soc,$(TARGET_BOARD_PLATFORM))
$(call soong_config_set,arm_gralloc,soc,$(TARGET_BOARD_PLATFORM))
@@ -253,9 +279,18 @@ PRODUCT_PACKAGES += \
csffw_image_prebuilt__firmware_prebuilt_ttux_mali_csffw.bin \
libGLES_mali \
vulkan.mali \
libOpenCL \
libgpudataproducer
# Install the OpenCL ICD Loader
PRODUCT_SOONG_NAMESPACES += external/OpenCL-ICD-Loader
PRODUCT_PACKAGES += \
libOpenCL \
mali_icd__customer_pixel_opencl-icd_ARM.icd
ifeq ($(DEVICE_IS_64BIT_ONLY),false)
PRODUCT_PACKAGES += \
mali_icd__customer_pixel_opencl-icd_ARM32.icd
endif
ifeq ($(USE_SWIFTSHADER),true)
PRODUCT_PACKAGES += \
libEGL_angle \
@@ -273,11 +308,10 @@ PRODUCT_VENDOR_PROPERTIES += \
endif
# Mali Configuration Properties
# b/221255664 prevents setting PROTECTED_MAX_CORE_COUNT=2
PRODUCT_VENDOR_PROPERTIES += \
vendor.mali.platform.config=/vendor/etc/mali/platform.config \
vendor.mali.debug.config=/vendor/etc/mali/debug.config \
vendor.mali.base_protected_max_core_count=1 \
vendor.mali.base_protected_max_core_count=4 \
vendor.mali.base_protected_tls_max=67108864 \
vendor.mali.platform_agt_frequency_khz=24576
@@ -286,9 +320,8 @@ PRODUCT_COPY_FILES += \
frameworks/native/data/etc/android.hardware.vulkan.version-1_3.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.hardware.vulkan.version.xml \
frameworks/native/data/etc/android.hardware.vulkan.level-1.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.hardware.vulkan.level.xml \
frameworks/native/data/etc/android.hardware.vulkan.compute-0.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.hardware.vulkan.compute.xml \
frameworks/native/data/etc/android.software.contextualsearch.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.contextualsearch.xml \
frameworks/native/data/etc/android.software.vulkan.deqp.level-2023-03-01.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.vulkan.deqp.level.xml \
frameworks/native/data/etc/android.software.opengles.deqp.level-2023-03-01.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.opengles.deqp.level.xml
frameworks/native/data/etc/android.software.vulkan.deqp.level-2024-03-01.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.vulkan.deqp.level.xml \
frameworks/native/data/etc/android.software.opengles.deqp.level-2024-03-01.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.opengles.deqp.level.xml
#endif
@@ -311,6 +344,7 @@ PRODUCT_VENDOR_PROPERTIES += ro.surface_flinger.prime_shader_cache.ultrahdr=1
DEVICE_MANIFEST_FILE := \
device/google/zuma/manifest.xml
BOARD_USE_CODEC2_AIDL := V1
ifneq (,$(filter aosp_%,$(TARGET_PRODUCT)))
DEVICE_MANIFEST_FILE += \
device/google/zuma/manifest_media_aosp.xml
@@ -348,20 +382,49 @@ PRODUCT_COPY_FILES += \
device/google/zuma/conf/ueventd.zuma.rc:$(TARGET_COPY_OUT_VENDOR)/etc/ueventd.rc
PRODUCT_COPY_FILES += \
device/google/zuma/conf/init.zuma.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/hw/init.zuma.rc
device/google/zuma/conf/init.zuma.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/hw/init.zuma.rc \
device/google/zuma/conf/init.persist.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/init.persist.rc
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifeq (true,$(filter $(TARGET_BOOTS_16K) $(PRODUCT_16K_DEVELOPER_OPTION),true))
PRODUCT_COPY_FILES += \
device/google/zuma/conf/init.efs.16k.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/init.efs.rc \
device/google/$(TARGET_BOARD_PLATFORM)/conf/fstab.efs.from_data:$(TARGET_COPY_OUT_VENDOR)/etc/fstab.efs.from_data \
PRODUCT_PACKAGES += copy_efs_files_to_data
PRODUCT_PACKAGES += fsck.f2fs.vendor
else
PRODUCT_COPY_FILES += \
device/google/zuma/conf/init.efs.4k.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/init.efs.rc
endif
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_COPY_FILES += \
device/google/zuma/conf/init.debug.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/init.debug.rc
PRODUCT_COPY_FILES += \
device/google/zuma/conf/init.freq.userdebug.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/init.freq.userdebug.rc
endif
ifneq (,$(filter 5.%, $(TARGET_LINUX_KERNEL_VERSION)))
PRODUCT_COPY_FILES += \
device/google/zuma/storage/5.15/init.zuma.storage.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/hw/init.zuma.storage.rc
else
PRODUCT_COPY_FILES += \
device/google/zuma/storage/6.1/init.zuma.storage.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/hw/init.zuma.storage.rc
endif
# Recovery files
PRODUCT_COPY_FILES += \
device/google/zuma/conf/init.recovery.device.rc:$(TARGET_COPY_OUT_RECOVERY)/root/init.recovery.zuma.rc
# Fstab files
ifeq (ext4,$(TARGET_RW_FILE_SYSTEM_TYPE))
PRODUCT_SOONG_NAMESPACES += \
device/google/zuma/conf/ext4
else
PRODUCT_SOONG_NAMESPACES += \
device/google/zuma/conf/f2fs
endif
PRODUCT_PACKAGES += \
fstab.zuma \
fstab.zuma.vendor_ramdisk \
@@ -370,7 +433,9 @@ PRODUCT_PACKAGES += \
PRODUCT_COPY_FILES += \
device/google/$(TARGET_BOARD_PLATFORM)/conf/fstab.persist:$(TARGET_COPY_OUT_VENDOR)/etc/fstab.persist \
device/google/$(TARGET_BOARD_PLATFORM)/conf/fstab.modem:$(TARGET_COPY_OUT_VENDOR)/etc/fstab.modem
device/google/$(TARGET_BOARD_PLATFORM)/conf/fstab.modem:$(TARGET_COPY_OUT_VENDOR)/etc/fstab.modem \
device/google/$(TARGET_BOARD_PLATFORM)/conf/fstab.efs:$(TARGET_COPY_OUT_VENDOR)/etc/fstab.efs
# Shell scripts
PRODUCT_PACKAGES += \
@@ -386,12 +451,9 @@ PRODUCT_COPY_FILES += \
PRODUCT_HOST_PACKAGES += \
mkdtimg
PRODUCT_PACKAGES += \
messaging
# CHRE
## Tools
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PACKAGES += \
chre_power_test_client \
chre_test_client \
@@ -406,8 +468,6 @@ PRODUCT_COPY_FILES += \
## Enable the CHRE Daemon
CHRE_USF_DAEMON_ENABLED := false
CHRE_DEDICATED_TRANSPORT_CHANNEL_ENABLED := true
PRODUCT_PACKAGES += \
preloaded_nanoapps.json
# Filesystem management tools
PRODUCT_PACKAGES += \
@@ -420,7 +480,7 @@ PRODUCT_PACKAGES += \
checkpoint_gc
# Vendor verbose logging default property
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PROPERTY_OVERRIDES += \
persist.vendor.verbose_logging_enabled=true
else
@@ -442,7 +502,7 @@ PRODUCT_PROPERTY_OVERRIDES += \
persist.vendor.sys.modem.logging.enable=true
# Enable silent CP crash handling
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PROPERTY_OVERRIDES += \
persist.vendor.ril.crash_handling_mode=1
else
@@ -492,7 +552,7 @@ PRODUCT_COPY_FILES += \
frameworks/native/data/etc/android.software.midi.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.midi.xml
# default usb debug functions
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PROPERTY_OVERRIDES += \
persist.vendor.usb.usbradio.config=dm
endif
@@ -526,6 +586,9 @@ PRODUCT_PROPERTY_OVERRIDES += aaudio.mmap_policy=2
PRODUCT_PROPERTY_OVERRIDES += aaudio.mmap_exclusive_policy=2
PRODUCT_PROPERTY_OVERRIDES += aaudio.hw_burst_min_usec=2000
# Set util_clamp_min for s/w spatializer
PRODUCT_PROPERTY_OVERRIDES += audio.spatializer.effect.util_clamp_min=300
# Calliope firmware overwrite
#PRODUCT_COPY_FILES += \
device/google/zuma/firmware/calliope_dram.bin:$(TARGET_COPY_OUT_VENDOR)/firmware/calliope_dram.bin \
@@ -552,10 +615,6 @@ PRODUCT_PROPERTY_OVERRIDES += aaudio.hw_burst_min_usec=2000
PRODUCT_PACKAGES += \
com.android.future.usb.accessory
PRODUCT_PACKAGES += \
android.hardware.graphics.mapper@4.0-impl \
android.hardware.graphics.allocator-V1-service
PRODUCT_PACKAGES += \
android.hardware.memtrack-service.pixel \
libion_exynos \
@@ -588,7 +647,6 @@ $(call soong_config_set,google3a_config,soc,zuma)
# WiFi
PRODUCT_PACKAGES += \
android.hardware.wifi-service \
wificond \
libwpa_client
@@ -596,7 +654,7 @@ PRODUCT_PACKAGES += \
PRODUCT_PACKAGES += \
ConnectivityOverlay
PRODUCT_PACKAGES_DEBUG += \
PRODUCT_PACKAGES_ENG += \
f2fs_io \
check_f2fs \
f2fs.fibmap \
@@ -614,8 +672,7 @@ include device/google/gs-common/battery_mitigation/bcl.mk
# Enable project quotas and casefolding for emulated storage without sdcardfs
$(call inherit-product, $(SRC_TARGET_DIR)/product/emulated_storage.mk)
$(call inherit-product, $(SRC_TARGET_DIR)/product/virtual_ab_ota/android_t_baseline.mk)
PRODUCT_VIRTUAL_AB_COMPRESSION_METHOD := lz4
$(call inherit-product, $(SRC_TARGET_DIR)/product/virtual_ab_ota/launch_with_vendor_ramdisk.mk)
# Enforce generic ramdisk allow list
$(call inherit-product, $(SRC_TARGET_DIR)/product/generic_ramdisk.mk)
@@ -625,7 +682,7 @@ ifeq (,$(filter true, $(BOARD_WITHOUT_DTLS)))
include device/google/gs-common/dauntless/gsc.mk
endif
PRODUCT_PACKAGES_DEBUG += \
PRODUCT_PACKAGES_ENG += \
WvInstallKeybox
# Copy Camera HFD Setfiles
@@ -671,7 +728,7 @@ PRODUCT_PROPERTY_OVERRIDES += \
debug.slsi_platform=1 \
debug.hwc.winupdate=1
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PACKAGES += displaycolor_service
endif
@@ -747,7 +804,7 @@ PRODUCT_PACKAGES += wpa_supplicant.conf
WIFI_PRIV_CMD_UPDATE_MBO_CELL_STATUS := enabled
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PACKAGES += wpa_cli
PRODUCT_PACKAGES += hostapd_cli
endif
@@ -783,16 +840,25 @@ PRODUCT_COPY_FILES += \
device/google/zuma/media_codecs_performance_c2.xml:$(TARGET_COPY_OUT_VENDOR)/etc/media_codecs_performance_c2.xml \
PRODUCT_PROPERTY_OVERRIDES += \
debug.stagefright.c2-poolmask=458752 \
debug.c2.use_dmabufheaps=1 \
media.c2.dmabuf.padding=512 \
debug.stagefright.ccodec_delayed_params=1 \
ro.vendor.gpu.dataspace=1
ifneq ($(BOARD_USE_CODEC2_AIDL), )
PRODUCT_PROPERTY_OVERRIDES += \
debug.stagefright.c2-poolmask=1507328
else
PRODUCT_PROPERTY_OVERRIDES += \
debug.stagefright.c2-poolmask=458752
endif
# Create input surface on the framework side
PRODUCT_PROPERTY_OVERRIDES += \
debug.stagefright.c2inputsurface=-1 \
PRODUCT_PROPERTY_OVERRIDES += media.c2.hal.selection=aidl
# 2. OpenMAX IL
PRODUCT_COPY_FILES += \
device/google/zuma/media_codecs.xml:$(TARGET_COPY_OUT_VENDOR)/etc/media_codecs.xml \
@@ -826,14 +892,12 @@ $(call inherit-product, system/core/trusty/trusty-storage.mk)
$(call inherit-product, system/core/trusty/trusty-base.mk)
# Trusty unit test tool and code coverage tool
PRODUCT_PACKAGES_DEBUG += \
PRODUCT_PACKAGES_ENG += \
trusty-ut-ctrl \
tipc-test \
trusty_stats_test \
trusty-coverage-controller \
include device/google/gs101/confirmationui/confirmationui.mk
# Trusty Metrics Daemon
PRODUCT_SOONG_NAMESPACES += \
vendor/google/trusty/common
@@ -851,7 +915,7 @@ PRODUCT_PROPERTY_OVERRIDES += \
ro.frp.pst=/dev/block/by-name/frp
# System props to enable Bluetooth Quality Report (BQR) feature
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PRODUCT_PROPERTIES += \
persist.bluetooth.bqr.event_mask?=262174 \
persist.bluetooth.bqr.min_interval_ms=500
@@ -891,8 +955,8 @@ PRODUCT_PACKAGES += \
PRODUCT_PACKAGES += \
Iwlan
#Iwlan test app for userdebug/eng builds
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
#Iwlan test app for eng builds
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PACKAGES += \
IwlanTestApp
endif
@@ -919,7 +983,9 @@ PRODUCT_PACKAGES += ShannonRcs
# Exynos RIL and telephony
# Multi SIM(DSDS)
SIM_COUNT := 2
$(call soong_config_set,sim,sim_count,$(SIM_COUNT))
SUPPORT_MULTI_SIM := true
# Support NR
SUPPORT_NR := true
# Support 5G on both stacks
@@ -950,14 +1016,18 @@ PRODUCT_COPY_FILES += \
frameworks/native/data/etc/handheld_core_hardware.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/handheld_core_hardware.xml \
ifneq ($(BOARD_WITHOUT_RADIO),true)
# modem_svc_sit daemon
PRODUCT_PACKAGES += modem_svc_sit
# Use Lassen specifc Shared Modem Platform
SHARED_MODEM_PLATFORM_VENDOR := lassen
# Shared Modem Platform
include device/google/gs-common/modem/modem_svc_sit/shared_modem_platform.mk
# modem_ml_svc_sit daemon
PRODUCT_PACKAGES += modem_ml_svc_sit
# modem ML models configs
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_COPY_FILES += \
device/google/zuma/modem_ml/modem_ml_models_userdebug.conf:$(TARGET_COPY_OUT_VENDOR)/etc/modem_ml_models.conf
else
@@ -1006,7 +1076,7 @@ PRODUCT_PACKAGES += \
endif
# Vibrator Diag
PRODUCT_PACKAGES_DEBUG += \
PRODUCT_PACKAGES_ENG += \
diag-vibrator \
diag-vibrator-cs40l25a \
diag-vibrator-drv2624 \
@@ -1049,7 +1119,7 @@ PRODUCT_PACKAGES += vndservicemanager
PRODUCT_PACKAGES += vndservice
## TinyTools, debug tool and cs35l41 speaker calibration tool for Audio
ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
ifneq (,$(filter eng, $(TARGET_BUILD_VARIANT)))
PRODUCT_PACKAGES += \
tinyplay \
tinycap \
@@ -1090,7 +1160,9 @@ PRODUCT_SOONG_NAMESPACES += \
vendor/google_devices/zuma/proprietary/gchips/tpu/darwinn_logging_service \
vendor/google_devices/zuma/proprietary/gchips/tpu/nnapi_stable_aidl \
vendor/google_devices/zuma/proprietary/gchips/tpu/aidl \
vendor/google_devices/zuma/proprietary/gchips/tpu/hal
vendor/google_devices/zuma/proprietary/gchips/tpu/hal \
vendor/google_devices/zuma/proprietary/gchips/tpu/tachyon/tachyon_apis \
vendor/google_devices/zuma/proprietary/gchips/tpu/tachyon/service
# TPU firmware
PRODUCT_PACKAGES += edgetpu-rio.fw
@@ -1142,9 +1214,6 @@ else
BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/logger_app
endif
# sscoredump
include hardware/google/pixel/sscoredump/device.mk
# RadioExt Version
USES_RADIOEXT_V1_6 = true
@@ -1152,7 +1221,7 @@ USES_RADIOEXT_V1_6 = true
include hardware/google/pixel/wifi_ext/device.mk
# Battery Stats Viewer
PRODUCT_PACKAGES_DEBUG += BatteryStatsViewer
PRODUCT_PACKAGES_ENG += BatteryStatsViewer
# Install product specific framework compatibility matrix
# (TODO: b/169535506) This includes the FCM for system_ext and product partition.
@@ -1175,7 +1244,7 @@ PRODUCT_PROPERTY_OVERRIDES += \
include hardware/google/pixel/HardwareInfo/HardwareInfo.mk
# UFS: the script is used to select the corresponding firmware to run FFU.
PRODUCT_PACKAGES_DEBUG += ufs_firmware_update.sh
PRODUCT_PACKAGES_ENG += ufs_firmware_update.sh
# RIL extension service
ifeq (,$(filter aosp_% factory_%,$(TARGET_PRODUCT)))
@@ -1183,8 +1252,8 @@ include device/google/gs-common/pixel_ril/ril.mk
endif
# Touch service
include hardware/google/pixel/input/twoshay.mk
include device/google/gs-common/touch/twoshay/aidl_zuma.mk
include device/google/gs-common/touch/twoshay/twoshay.mk
# Allow longer timeout for incident report generation in bugreport
# Overriding in /product partition instead of /vendor intentionally,

View File

@@ -114,7 +114,7 @@
</hal>
<hal format="aidl" optional="true">
<name>com.google.hardware.pixel.display</name>
<version>10</version>
<version>13</version>
<interface>
<name>IDisplay</name>
<instance>default</instance>
@@ -153,7 +153,7 @@
</hal>
<hal format="aidl" optional="true">
<name>vendor.google.wifi_ext</name>
<version>2-3</version>
<version>2-4</version>
<interface>
<name>IWifiExt</name>
<instance>default</instance>

View File

@@ -24,6 +24,7 @@ cc_binary {
],
vendor: true,
relative_install_path: "dump",
init_rc: ["dump_power.rc"],
}
sh_binary {

View File

@@ -21,7 +21,9 @@
#include <stdio.h>
#include <stdlib.h>
#include <sys/sysinfo.h>
#include <sys/wait.h>
#include <time.h>
#include <unistd.h>
#include <vector>
#include <android-base/file.h>
@@ -198,39 +200,18 @@ void dumpMaxFg() {
const char *maxfg [][2] = {
{"Power supply property maxfg", "/sys/class/power_supply/maxfg/uevent"},
{"maxfg registers", "/sys/class/power_supply/maxfg/registers_dump"},
{"m5_state", "/sys/class/power_supply/maxfg/m5_model_state"},
{"maxfg logbuffer", "/dev/logbuffer_maxfg"},
{"maxfg_monitor logbuffer", "/dev/logbuffer_maxfg_monitor"},
};
const char *maxfgFlip [][2] = {
{"Power supply property maxfg_base", "/sys/class/power_supply/maxfg_base/uevent"},
{"Power supply property maxfg_flip", "/sys/class/power_supply/maxfg_flip/uevent"},
{"m5_state", "/sys/class/power_supply/maxfg_base/m5_model_state"},
{"maxfg_base", "/dev/logbuffer_maxfg_base"},
{"maxfg_flip", "/dev/logbuffer_maxfg_flip"},
{"maxfg_base", "/dev/logbuffer_maxfg_base_monitor"},
{"maxfg_flip", "/dev/logbuffer_maxfg_flip_monitor"},
};
const char *maxfgHistoryName = "Maxim FG History";
const char *maxfgHistoryDir = "/dev/maxfg_history";
std::string content;
if (isValidDir(maxfgLoc)) {
for (const auto &row : maxfg) {
dumpFileContent(row[0], row[1]);
}
} else {
for (const auto &row : maxfgFlip) {
dumpFileContent(row[0], row[1]);
}
}
if (isValidFile(maxfgHistoryDir)) {
dumpFileContent(maxfgHistoryName, maxfgHistoryDir);
}
}
@@ -260,55 +241,50 @@ void dumpLogBufferTcpm() {
}
void dumpTcpc() {
int ret;
const char* max77759TcpcHead = "TCPC";
const char* i2cSubDirMatch = "i2c-";
const char* directory = "/sys/devices/platform/10d60000.hsi2c/";
const char* max77759Tcpc [][2] {
{"registers:", "/i2c-max77759tcpc/registers"},
{"frs:", "/i2c-max77759tcpc/frs"},
{"auto_discharge:", "/i2c-max77759tcpc/auto_discharge"},
{"bcl2_enabled:", "/i2c-max77759tcpc/bcl2_enabled"},
{"cc_toggle_enable:", "/i2c-max77759tcpc/cc_toggle_enable"},
{"containment_detection:", "/i2c-max77759tcpc/containment_detection"},
{"containment_detection_status:", "/i2c-max77759tcpc/containment_detection_status"},
const char* max77759TcpcHead = "TCPC Device Attributes";
const char* directory = "/sys/class/typec/port0/device";
const char* max77759Tcpc [] {
"auto_discharge",
"bc12_enabled",
"cc_toggle_enable",
"contaminant_detection",
"contaminant_detection_status",
"frs",
"irq_hpd_count",
"non_compliant_reasons",
"sbu_pullup",
"update_sdp_enum_timeout",
"usb_limit_accessory_current",
"usb_limit_accessory_enable",
"usb_limit_sink_current",
"usb_limit_sink_enable",
"usb_limit_source_enable",
};
std::vector<std::string> files;
std::string content;
std::string tcpcRegistersPath(std::string(directory) + "/registers");
dumpFileContent("TCPC Registers", tcpcRegistersPath.c_str());
printTitle(max77759TcpcHead);
ret = getFilesInDir(directory, &files);
if (ret < 0) {
for (auto &tcpcVal : max77759Tcpc)
printf("%s\n", tcpcVal[0]);
return;
}
for (auto &file : files) {
for (auto &tcpcVal : max77759Tcpc) {
printf("%s ", tcpcVal[0]);
if (std::string::npos == std::string(file).find(i2cSubDirMatch)) {
continue;
}
std::string fileName = directory + file + "/" + std::string(tcpcVal[1]);
if (!android::base::ReadFileToString(fileName, &content)) {
continue;
}
printf("%s\n", content.c_str());
}
for (auto& tcpcVal : max77759Tcpc) {
std::string filename = std::string(directory) + "/" + std::string(tcpcVal);
printf("%s: ", tcpcVal);
android::base::ReadFileToString(filename, &content);
if (!content.empty() && (content.back() == '\n' || content.back() == '\r'))
content.pop_back();
printf("%s\n", content.c_str());
}
printf("\n");
}
void dumpPdEngine() {
const char* pdEngine [][2] {
{"PD Engine", "/dev/logbuffer_usbpd"},
{"PPS-google_cpm", "/dev/logbuffer_cpm"},
{"PPS-dc", "/dev/logbuffer_pca9468"},
{"Logbuffer TCPC", "/dev/logbuffer_usbpd"},
{"PPS-google_cpm logbuffer", "/dev/logbuffer_cpm"},
{"PPS-pca9468 logbuffer", "/dev/logbuffer_pca9468"},
{"PPS-dc_mains logbuffer", "/dev/logbuffer_dc_mains"},
};
for (const auto &row : pdEngine) {
@@ -334,15 +310,6 @@ void dumpWc68() {
}
}
void dumpLn8411() {
const char* ln8411Title = "LN8411";
const char* ln8411File = "/dev/logbuffer_ln8411";
if (isValidFile(ln8411File)) {
dumpFileContent(ln8411Title, ln8411File);
}
}
void dumpBatteryHealth() {
const char* batteryHealth [][2] {
{"Battery Health", "/sys/class/power_supply/battery/health_index_stats"},
@@ -362,7 +329,7 @@ void dumpBatteryHealth() {
}
void dumpBatteryDefend() {
const char* defendConfig [][4] {
const char* defendConfig [][3] {
{"TRICKLE-DEFEND Config",
"/sys/devices/platform/google,battery/power_supply/battery/", "bd_"},
{"DWELL-DEFEND Config", "/sys/devices/platform/google,charger/", "charge_s"},
@@ -407,6 +374,57 @@ void dumpBatteryDefend() {
}
}
void dumpBatteryCaretaker() {
const char* aacpConfig [][3] {
{"AACP Version",
"/sys/devices/platform/google,battery/power_supply/battery/", "aacp_"},
{"AACR Config",
"/sys/devices/platform/google,battery/power_supply/battery/", "aacr_"},
{"AAFV Config",
"/sys/devices/platform/google,battery/power_supply/battery/", "aafv_"},
{"AACT Config",
"/sys/devices/platform/google,battery/power_supply/battery/", "aact_"},
{"AACC",
"/sys/devices/platform/google,battery/power_supply/battery/", "aacc"},
};
std::vector<std::string> files;
struct dirent *entry;
std::string content;
std::string fileLocation;
for (auto &config : aacpConfig) {
DIR *dir = opendir(config[1]);
if (dir == NULL)
continue;
printTitle(config[0]);
while ((entry = readdir(dir)) != NULL) {
if (std::string(entry->d_name).find(config[2]) != std::string::npos &&
strncmp(config[2], entry->d_name, strlen(config[2])) == 0) {
files.push_back(entry->d_name);
}
}
closedir(dir);
sort(files.begin(), files.end());
for (auto &file : files) {
fileLocation = std::string(config[1]) + std::string(file);
if (!android::base::ReadFileToString(fileLocation, &content) || content.empty()) {
content = "\n";
}
printf("%s: %s", file.c_str(), content.c_str());
if (content.back() != '\n')
printf("\n");
}
files.clear();
}
}
void printValuesOfDirectory(const char *directory, std::string debugfs, const char *strMatch) {
std::vector<std::string> files;
auto info = directory;
@@ -481,7 +499,6 @@ void dumpChgUserDebug() {
const std::string debugfs = "/d/";
const char *maxFgDir = "/d/maxfg";
const char *maxFgStrMatch = "maxfg";
const char *maxFg77779StrMatch = "max77779fg";
const char *chgTblName = "Charging table dump";
const char *chgTblDir = "/d/google_battery/chg_raw_profile";
@@ -489,16 +506,6 @@ void dumpChgUserDebug() {
"fg_model",
"algo_ver",
"model_ok",
"registers",
"nv_registers",
};
const char *max77779FgInfo [] {
"fg_model",
"algo_ver",
"model_ok",
"registers",
"debug_registers",
};
if (isUserBuild())
@@ -510,10 +517,6 @@ void dumpChgUserDebug() {
for (auto & directory : maxFgInfo) {
printValuesOfDirectory(directory, debugfs, maxFgStrMatch);
}
} else {
for (auto & directory : max77779FgInfo) {
printValuesOfDirectory(directory, debugfs, maxFg77779StrMatch);
}
}
}
@@ -632,10 +635,27 @@ void dumpGvoteables() {
void dumpMitigation() {
const char *mitigationList [][2] {
{"LastmealCSV" , "/data/vendor/mitigation/lastmeal.csv"},
{"Lastmeal" , "/data/vendor/mitigation/lastmeal.txt"},
{"Thismeal" , "/data/vendor/mitigation/thismeal.txt"},
};
/* parsing thismeal.bin */
int status;
int pid = fork();
if (pid < 0) {
printf("Fork failed for parsing thismeal.bin.\n");
exit(EXIT_FAILURE);
} else if (pid == 0) {
execl("/vendor/bin/hw/battery_mitigation", "battery_mitigation", "-d", nullptr);
exit(EXIT_SUCCESS);
}
waitpid(pid, &status, 0);
if (WIFSIGNALED(status)) {
printf("Failed to parse thismeal.bin.(killed by: %d)\n", WTERMSIG(status));
}
for (auto &row : mitigationList) {
if (!isValidFile(row[1]))
printTitle(row[0]);
@@ -941,9 +961,21 @@ void dumpIrqDurationCounts() {
}
}
void dumpCpuIdleHistogramStats() {
const char* cpuIdleHistogramTitle = "CPU Idle Histogram";
const char* cpuIdleHistogramFile = "/sys/kernel/metrics/cpuidle_histogram/"
"cpuidle_histogram";
const char* cpuClusterHistogramTitle = "CPU Cluster Histogram";
const char* cpuClusterHistogramFile = "/sys/kernel/metrics/"
"cpuidle_histogram/cpucluster_histogram";
dumpFileContent(cpuIdleHistogramTitle, cpuIdleHistogramFile);
dumpFileContent(cpuClusterHistogramTitle, cpuClusterHistogramFile);
}
int main() {
dumpPowerStatsTimes();
dumpAcpmStats();
dumpCpuIdleHistogramStats();
dumpPowerSupplyStats();
dumpMaxFg();
dumpPowerSupplyDock();
@@ -952,9 +984,9 @@ int main() {
dumpPdEngine();
dumpEusbRepeater();
dumpWc68();
dumpLn8411();
dumpBatteryHealth();
dumpBatteryDefend();
dumpBatteryCaretaker();
dumpChg();
dumpChgUserDebug();
dumpBatteryEeprom();

3
dumpstate/dump_power.rc Normal file
View File

@@ -0,0 +1,3 @@
on init
# for parsing thismeal.bin
chown system system /vendor/bin/hw/battery_mitigation

View File

@@ -1,4 +1,4 @@
PRODUCT_PACKAGES += dump_wlan.sh \
dump_power
PRODUCT_PACKAGES_DEBUG += dump_gsa.sh
PRODUCT_PACKAGES_ENG += dump_gsa.sh

6
evolution.dependencies Normal file
View File

@@ -0,0 +1,6 @@
[
{
"repository": "device_google_gs101",
"target_path": "device/google/gs101"
}
]

11
evolution_common.mk Normal file
View File

@@ -0,0 +1,11 @@
#
# Copyright (C) 2024 The Evolution X Project
#
# SPDX-License-Identifier: Apache-2.0
#
# PixelParts
include packages/apps/PixelParts/device.mk
# UDFPS
TARGET_HAS_UDFPS += true

View File

@@ -1,7 +1,7 @@
<manifest version="1.0" type="device">
<hal format="aidl">
<name>android.hardware.health</name>
<version>3</version>
<version>4</version>
<fqname>IHealth/default</fqname>
</hal>
</manifest>

49
lineage_common.mk Normal file
View File

@@ -0,0 +1,49 @@
#
# SPDX-FileCopyrightText: 2021-2024 The LineageOS Project
# SPDX-FileCopyrightText: 2021-2024 The Calyx Institute
# SPDX-License-Identifier: Apache-2.0
#
# Overlays
DEVICE_PACKAGE_OVERLAYS += device/google/zuma/overlay-lineage
# AiAi Config
PRODUCT_COPY_FILES += \
device/google/zuma/allowlist_com.google.android.as.xml:$(TARGET_COPY_OUT_PRODUCT)/etc/sysconfig/allowlist_com.google.android.as.xml
# Camera
PRODUCT_PRODUCT_PROPERTIES += \
ro.vendor.camera.extensions.package=com.google.android.apps.camera.services \
ro.vendor.camera.extensions.service=com.google.android.apps.camera.services.extensions.service.PixelExtensions
# EUICC
PRODUCT_PACKAGES += \
EuiccSupportPixelOverlay
# Experiments
include device/google/gs-common/performance/experiments/experiments.mk
# Google Assistant
PRODUCT_PRODUCT_PROPERTIES += ro.opa.eligible_device=true
# Lineage Health
include hardware/google/pixel/lineage_health/device.mk
$(call soong_config_set,lineage_health,charging_control_supports_deadline,true)
$(call soong_config_set,lineage_health,charging_control_supports_limit,true)
$(call soong_config_set,lineage_health,charging_control_supports_toggle,false)
# Linker config
PRODUCT_VENDOR_LINKER_CONFIG_FRAGMENTS += \
device/google/zuma/linker.config.json
# Parts
PRODUCT_PACKAGES += \
GoogleParts
# Tethering
PRODUCT_PACKAGES += \
TetheringOverlay
# Touch
include hardware/google/pixel/touch/device.mk

10
linker.config.json Normal file
View File

@@ -0,0 +1,10 @@
{
"provideLibs": [
"liboemcrypto.so",
"lib_aion_buffer.so",
"libedgetpu_client.google.so",
"libedgetpu_tachyon.google.so",
"libedgetpu_util.so",
"libgxp.so"
]
}

View File

@@ -1,13 +1,4 @@
<manifest version="1.0" type="device" target-level="8">
<hal format="hidl">
<name>android.hardware.graphics.mapper</name>
<transport arch="32+64">passthrough</transport>
<version>4.0</version>
<interface>
<name>IMapper</name>
<instance>default</instance>
</interface>
</hal>
<hal format="aidl">
<name>android.hardware.boot</name>
<fqname>IBootControl/default</fqname>

View File

@@ -1,12 +1,13 @@
<manifest version="1.0" type="device">
<hal format="hidl">
<name>android.hardware.media.c2</name>
<transport>hwbinder</transport>
<version>1.2</version>
<interface>
<name>IComponentStore</name>
<instance>default</instance>
<instance>default1</instance>
</interface>
<!-- AIDL fragment -->
<hal format="aidl">
<name>android.hardware.media.c2</name>
<version>1</version>
<fqname>IComponentStore/default1</fqname>
</hal>
<hal format="aidl">
<name>android.hardware.media.c2</name>
<version>1</version>
<fqname>IComponentStore/default</fqname>
</hal>
</manifest>

View File

@@ -1,4 +1,5 @@
<manifest version="1.0" type="device">
<!-- HIDL fragment -->
<hal format="hidl">
<name>android.hardware.media.c2</name>
<transport>hwbinder</transport>
@@ -8,4 +9,10 @@
<instance>default</instance>
</interface>
</hal>
<!-- AIDL fragment -->
<hal format="aidl">
<name>android.hardware.media.c2</name>
<version>1</version>
<fqname>IComponentStore/default</fqname>
</hal>
</manifest>

58
manifest_radio_ds.xml Normal file
View File

@@ -0,0 +1,58 @@
<manifest version="1.0" type="device">
<hal format="aidl">
<name>android.hardware.radio.config</name>
<version>2</version>
<fqname>IRadioConfig/default</fqname>
</hal>
<hal format="aidl">
<name>android.hardware.radio.data</name>
<version>2</version>
<fqname>IRadioData/slot1</fqname>
<fqname>IRadioData/slot2</fqname>
</hal>
<hal format="aidl">
<name>android.hardware.radio.messaging</name>
<version>2</version>
<fqname>IRadioMessaging/slot1</fqname>
<fqname>IRadioMessaging/slot2</fqname>
</hal>
<hal format="aidl">
<name>android.hardware.radio.modem</name>
<version>2</version>
<fqname>IRadioModem/slot1</fqname>
<fqname>IRadioModem/slot2</fqname>
</hal>
<hal format="aidl">
<name>android.hardware.radio.network</name>
<version>2</version>
<fqname>IRadioNetwork/slot1</fqname>
<fqname>IRadioNetwork/slot2</fqname>
</hal>
<hal format="aidl">
<name>android.hardware.radio.sap</name>
<fqname>ISap/slot1</fqname>
<fqname>ISap/slot2</fqname>
</hal>
<hal format="aidl">
<name>android.hardware.radio.sim</name>
<version>2</version>
<fqname>IRadioSim/slot1</fqname>
<fqname>IRadioSim/slot2</fqname>
</hal>
<hal format="aidl">
<name>android.hardware.radio.voice</name>
<version>2</version>
<fqname>IRadioVoice/slot1</fqname>
<fqname>IRadioVoice/slot2</fqname>
</hal>
<hal format="aidl">
<name>android.hardware.secure_element</name>
<fqname>ISecureElement/SIM1</fqname>
<fqname>ISecureElement/SIM2</fqname>
</hal>
<hal format="hidl">
<name>vendor.samsung_slsi.telephony.hardware.radioExternal</name>
<transport>hwbinder</transport>
<fqname>@1.1::IOemSlsiRadioExternal/rilExternal</fqname>
</hal>
</manifest>

View File

@@ -108,7 +108,7 @@
</MediaCodec>
<MediaCodec name="c2.exynos.vp8.decoder" type="video/x-vnd.on2.vp8" >
<Limit name="size" min="32x32" max="3840x2160" />
<Limit name="alignment" value="2x2" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="16x16" />
<Limit name="block-count" range="1-32400" />
<Limit name="blocks-per-second" min="1" max="3888000" />
@@ -122,7 +122,7 @@
</MediaCodec>
<MediaCodec name="c2.exynos.vp9.decoder" type="video/x-vnd.on2.vp9" >
<Limit name="size" min="64x64" max="7680x4352" />
<Limit name="alignment" value="2x2" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="64x64" />
<Limit name="block-count" range="1-8160" />
<Limit name="blocks-per-second" min="1" max="3888000" />
@@ -137,7 +137,7 @@
</MediaCodec>
<MediaCodec name="c2.exynos.vp9.decoder.secure" type="video/x-vnd.on2.vp9" >
<Limit name="size" min="64x64" max="3840x2176" />
<Limit name="alignment" value="2x2" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="64x64" />
<Limit name="block-count" range="1-2040" />
<Limit name="blocks-per-second" min="1" max="3888000" />
@@ -222,7 +222,7 @@
</MediaCodec>
<MediaCodec name="c2.exynos.vp8.encoder" type="video/x-vnd.on2.vp8" >
<Limit name="size" min="32x32" max="3840x2160" />
<Limit name="alignment" value="2x2" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="16x16" />
<Limit name="block-count" range="1-32400" />
<Limit name="blocks-per-second" min="1" max="3888000" />
@@ -238,7 +238,7 @@
</MediaCodec>
<MediaCodec name="c2.exynos.vp9.encoder" type="video/x-vnd.on2.vp9" >
<Limit name="size" min="64x64" max="3840x2176" />
<Limit name="alignment" value="2x2" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="64x64" />
<Limit name="block-count" range="1-2040" />
<Limit name="blocks-per-second" min="1" max="243000" />

View File

@@ -19,7 +19,7 @@
<Decoders>
<MediaCodec name="c2.google.av1.decoder" type="video/av01">
<Limit name="size" min="96x96" max="3840x2160" />
<Limit name="alignment" value="2x2" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="16x16" />
<Limit name="block-count" range="36-32400" />
<Limit name="blocks-per-second" min="24" max="1944000" />
@@ -34,7 +34,7 @@
</MediaCodec>
<MediaCodec name="c2.google.av1.decoder.secure" type="video/av01">
<Limit name="size" min="96x96" max="3840x2160" />
<Limit name="alignment" value="2x2" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="16x16" />
<Limit name="block-count" range="36-32400" />
<Limit name="blocks-per-second" min="24" max="1944000" />
@@ -51,20 +51,21 @@
</Decoders>
<Encoders>
<MediaCodec name="c2.google.av1.encoder" type="video/av01">
<Limit name="size" min="64x64" max="3840x2176" />
<Limit name="alignment" value="2x2" />
<Limit name="size" min="80x80" max="3840x2176" />
<Limit name="alignment" value="1x1" />
<Limit name="block-size" value="64x64" />
<Limit name="block-count" range="1-2040" />
<Limit name="blocks-per-second" min="1" max="61200" />
<Limit name="block-count" range="4-2040" />
<Limit name="blocks-per-second" min="4" max="61200" />
<Limit name="bitrate" range="1-120000000" />
<Limit name="performance-point-1280x720" range="240" />
<Limit name="performance-point-1280x720" value="200" />
<Limit name="performance-point-1920x1080" value="180" />
<Limit name="performance-point-1920x1079" value="120" />
<Limit name="performance-point-3840x2160" range="60" />
<Limit name="performance-point-3840x2160" value="60" />
<Limit name="concurrent-instances" max="16" />
<Feature name="can-swap-width-height" value="1" />
<Feature name="vq-minimum-quality"/>
<Feature name="encoding-statistics"/>
<Feature name="hdr-editing" />
</MediaCodec>
</Encoders>
</MediaCodecs>

View File

@@ -115,24 +115,24 @@
</MediaCodec>
<MediaCodec name="c2.android.avc.decoder" type="video/avc" update="true">
<!-- measured 90%:342-360 med:343 N=2 -->
<Limit name="measured-frame-rate-320x240" range="342-351" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-320x240" range="291-512" /> <!-- v90%=1.0 -->
<!-- measured 90%:142-147 med:143 N=2 -->
<Limit name="measured-frame-rate-720x480" range="142-145" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-720x480" range="244-474" /> <!-- v90%=1.0 -->
<!-- measured 90%:54-56 med:55 N=2 -->
<Limit name="measured-frame-rate-1280x720" range="54-55" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-1280x720" range="110-209" /> <!-- v90%=1.0 -->
<!-- measured 90%:25-26 med:26 N=2 -->
<Limit name="measured-frame-rate-1920x1080" range="25-26" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-1920x1080" range="45-87" /> <!-- v90%=1.0 -->
</MediaCodec>
<MediaCodec name="c2.android.hevc.decoder" type="video/hevc" update="true">
<Limit name="measured-frame-rate-352x288" range="583-674" />
<Limit name="measured-frame-rate-352x288" range="291-512" />
<!-- measured 90%:196-207 med:196 N=2 -->
<Limit name="measured-frame-rate-640x360" range="196-201" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-640x360" range="244-474" /> <!-- v90%=1.0 -->
<!-- measured 90%:177-180 med:178 N=2 -->
<Limit name="measured-frame-rate-720x480" range="177-178" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-720x480" range="232-443" /> <!-- v90%=1.0 -->
<!-- measured 90%:81-82 med:82 N=2 -->
<Limit name="measured-frame-rate-1280x720" range="81-82" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-1280x720" range="171-325" /> <!-- v90%=1.0 -->
<!-- measured 90%:45-47 med:46 N=2 -->
<Limit name="measured-frame-rate-1920x1080" range="45-46" /> <!-- v90%=1.0 -->
<Limit name="measured-frame-rate-1920x1080" range="118-219" /> <!-- v90%=1.0 -->
</MediaCodec>
<MediaCodec name="c2.android.mpeg4.decoder" type="video/mp4v-es" update="true">
<Limit name="measured-frame-rate-176x144" range="1111-1176" />

View File

@@ -0,0 +1,64 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
/*
** Copyright 2021, The LineageOS Project
**
** Licensed under the Apache License, Version 2.0 (the "License");
** you may not use this file except in compliance with the License.
** You may obtain a copy of the License at
**
** http://www.apache.org/licenses/LICENSE-2.0
**
** Unless required by applicable law or agreed to in writing, software
** distributed under the License is distributed on an "AS IS" BASIS,
** WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
** See the License for the specific language governing permissions and
** limitations under the License.
*/
-->
<resources xmlns:xliff="urn:oasis:names:tc:xliff:document:1.2">
<string-array name="config_nightDisplayColorTemperatureCoefficients">
<!-- R a-coefficient --> <item>0.0</item>
<!-- R b-coefficient --> <item>0.0</item>
<!-- R y-intercept --> <item>1.0</item>
<!-- G a-coefficient --> <item>-0.000000014365268757</item>
<!-- G b-coefficient --> <item>0.000255092801250106</item>
<!-- G y-intercept --> <item>-0.064156942434907716</item>
<!-- B a-coefficient --> <item>-0.000000000910931179</item>
<!-- B b-coefficient --> <item>0.000207598323269139</item>
<!-- B y-intercept --> <item>-0.349361641294833436</item>
</string-array>
<!-- List of comma separated package names for which we the system will not show crash, ANR,
etc. dialogs. -->
<string translatable="false" name="config_appsNotReportingCrashes">com.google.android.euicc</string>
<!-- Flag indicating whether we should enable the adaptive sleep.-->
<bool name="config_adaptive_sleep_available">true</bool>
<!-- The component name for the default system attention service.
This service must be trusted, as it can be activated without explicit consent of the user.
See android.attention.AttentionManagerService.
-->
<string name="config_defaultAttentionService" translatable="false">com.google.android.as/com.google.android.apps.miphone.aiai.attention.service.AiAiAttentionService</string>
<!-- Live Captions -->
<string name="config_defaultSystemCaptionsManagerService">com.google.android.as/com.google.android.apps.miphone.aiai.captions.SystemCaptionsManagerService</string>
<!-- Recents text and image selection for Pixel Launcher (not supported by Launcher3) -->
<string name="config_defaultContentSuggestionsService" translatable="false">com.google.android.as/com.google.android.apps.miphone.aiai.app.AiAiContentSuggestionsService</string>
<!-- Launcher app suggestions -->
<string name="config_defaultAppPredictionService" translatable="false">com.google.android.as/com.google.android.apps.miphone.aiai.app.AiAiPredictionService</string>
<!-- Make AiAi the default role holder for System Intelligence -->
<string name="config_systemAmbientAudioIntelligence">com.google.android.as</string>
<string name="config_systemAudioIntelligence">com.google.android.as</string>
<string name="config_systemNotificationIntelligence">com.google.android.as</string>
<string name="config_systemTextIntelligence">com.google.android.as</string>
<string name="config_systemUiIntelligence">com.google.android.as</string>
<string name="config_systemVisualIntelligence">com.google.android.as</string>
</resources>

View File

@@ -1,7 +1,7 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
/**
* Copyright (c) 2020, The Android Open Source Project
* Copyright 2021, The LineageOS Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
@@ -16,7 +16,9 @@
* limitations under the License.
*/
-->
<resources xmlns:xliff="urn:oasis:names:tc:xliff:document:1.2">
<!-- Content description of the data connection type 5G UW. [CHAR LIMIT=NONE] -->
<string name="data_connection_5g_plus" translatable="false">5G UW</string>
<resources>
<!-- Default screen brightness, from 0 to 255. 102 is 40%. -->
<integer name="def_screen_brightness">82</integer>
<!-- Set the automatic brightness mode on by default -->
<bool name="def_screen_brightness_automatic_mode">true</bool>
</resources>

View File

@@ -0,0 +1,34 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
/*
** Copyright 2009, The Android Open Source Project
**
** Licensed under the Apache License, Version 2.0 (the "License");
** you may not use this file except in compliance with the License.
** You may obtain a copy of the License at
**
** http://www.apache.org/licenses/LICENSE-2.0
**
** Unless required by applicable law or agreed to in writing, software
** distributed under the License is distributed on an "AS IS" BASIS,
** WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
** See the License for the specific language governing permissions and
** limitations under the License.
*/
-->
<!-- These resources are around just to allow their values to be customized
for different hardware and product builds. -->
<resources>
<!-- Should we vibrate on an icon animation of the shelf. This should only be active if the
vibrator is capable of subtle vibrations -->
<bool name="config_vibrateOnIconAnimation">true</bool>
<!-- Whether to show a warning notification when device's skin temperature is high. -->
<integer name="config_showTemperatureWarning">1</integer>
<!-- Whether to show a alarm dialog when device's usb port is overheating. -->
<integer name="config_showUsbPortAlarm">1</integer>
</resources>

View File

@@ -0,0 +1,33 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
/*
** Copyright 2019, The LineageOS Project
**
** Licensed under the Apache License, Version 2.0 (the "License");
** you may not use this file except in compliance with the License.
** You may obtain a copy of the License at
**
** http://www.apache.org/licenses/LICENSE-2.0
**
** Unless required by applicable law or agreed to in writing, software
** distributed under the License is distributed on an "AS IS" BASIS,
** WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
** See the License for the specific language governing permissions and
** limitations under the License.
*/
-->
<resources xmlns:xliff="urn:oasis:names:tc:xliff:document:1.2">
<!-- Whether device has screen with higher aspect ratio -->
<bool name="config_haveHigherAspectRatioScreen">true</bool>
<!-- Defines the actions shown in advanced reboot submenu -->
<string-array name="config_restartActionsList">
<item>restart</item>
<item>restart_systemui</item>
<item>restart_recovery</item>
<item>restart_fastboot</item>
<item>restart_bootloader</item>
</string-array>
</resources>

View File

@@ -0,0 +1,20 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
Copyright (C) 2021 The LineageOS Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<resources>
<bool name="call_recording_enabled">true</bool>
<integer name="call_recording_audio_source">4</integer>
</resources>

View File

@@ -0,0 +1,39 @@
<?xml version="1.0" encoding="utf-8"?>
<!-- Copyright (C) 2007 The Android Open Source Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<resources xmlns:xliff="urn:oasis:names:tc:xliff:document:1.2">
<!-- The number of vibration intensity levels supported by the device.
Note that this should correspond to the ability to vary the vibration amplitude, with
enough dynamic range to have at least as many distinct intensity levels as defined here.
Supported values are 1, 2, 3. If '1', the settings app will use a toggle for the settings,
otherwise a slider. If '3', the settings app maps intensities directly to the levels
supported by the Vibrator HAL APIs. If '2', then the levels will be mapped to
VIBRATION_INTENSITY_LOW and VIBRATION_INTENSITY_HIGH, which gives the most range for
scaling vibrations. The medium intensity will be skipped.
The default intensity values are configured at
frameworks/base/core/res/res/values/config.xml's config_default[type]VibrationIntensity.
Make sure that each default intensity value is consistent with the supported levels set
here. If this settings supports only 2 levels, for example, then the default intensity
should be either LOW (1) or HIGH (3).
-->
<integer name="config_vibration_supported_intensity_levels">3</integer>
<!-- Whether to show the Preference for Adaptive connectivity -->
<bool name="config_show_adaptive_connectivity">true</bool>
</resources>

View File

@@ -0,0 +1,20 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
Copyright (C) 2020-2024 The LineageOS Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<resources>
<!-- Show battery cycle count -->
<bool name="config_show_battery_cycle_count" translatable="false">true</bool>
</resources>

View File

@@ -0,0 +1,167 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
Copyright (C) 2020 The Proton AOSP Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<resources>
<string-array name="configs_device">
<!-- ConnectivityThermalPowerManager 5G modem monitoring rules -->
<item>connectivity_thermal_power_manager/apply_action_time_seconds=10</item>
<item>connectivity_thermal_power_manager/atm_power_threshold_mw=800</item>
<item>connectivity_thermal_power_manager/cellular_thermal_adaptive_thermal_status_adaptive_action_list=</item>
<item>connectivity_thermal_power_manager/criteria_1_enabled=true</item>
<item>connectivity_thermal_power_manager/criteria_4_enabled=true</item>
<item>connectivity_thermal_power_manager/criteria_4_lte_pref_mode=3</item>
<item>connectivity_thermal_power_manager/wifi_disconnected_time_seconds=180</item>
<item>connectivity_thermal_power_manager/wifi_internet_driven_endc_product_carrier_id_set=shiba,husky,akita,komodo,tokay,caiman,comet@1,1989,2023,2576,2067,2071,2073,2577,2522,2075,2578,2083,2433,1949</item>
<!-- Live Caption (Pixel 2017 + OEM) -->
<item>device_personalization_services/Captions__allow_box_x_axis_movement=true</item>
<item>device_personalization_services/Captions__allow_use_public_speech_recognition=true</item>
<item>device_personalization_services/Captions__allow_voip_call_without_audio_recording=true</item>
<item>device_personalization_services/Captions__available_for_download=en-US;en-GB;en-CA;en-IE;en-AU;en-SG;en-IN;fr-FR;fr-CA;fr-BE;fr-CH;it-IT;it-CH;de-DE;de-AT;de-BE;de-CH;ja-JP;es-ES;es-US;cmn-Hant-TW;hi-IN;pt-BR;tr-TR;pl-PL;cmn-Hans-CN;ko-KR;ru-RU;vi-VN</item>
<item>device_personalization_services/Captions__disable_prod=false</item>
<!-- <item>device_personalization_services/Captions__enable=false</item> -->
<item>device_personalization_services/Captions__enable_activation_boost=true</item>
<item>device_personalization_services/Captions__enable_adaptive_box_width=true</item>
<item>device_personalization_services/Captions__enable_augmented_modality=true</item>
<item>device_personalization_services/Captions__enable_augmented_modality_input=true</item>
<item>device_personalization_services/Captions__enable_augmented_modality_language_detection=true</item>
<item>device_personalization_services/Captions__enable_augmented_music=true</item>
<!-- <item>device_personalization_services/Captions__enable_clearcut_logging=true</item> -->
<item>device_personalization_services/Captions__enable_drag_and_double_tap_to_resize=true</item>
<item>device_personalization_services/Captions__enable_ec_integration=false</item>
<item>device_personalization_services/Captions__enable_language_detection=true</item>
<item>device_personalization_services/Captions__enable_new_model_version_advanced_2023=true</item>
<item>device_personalization_services/Captions__enable_one_caption_experiment=false</item>
<item>device_personalization_services/Captions__enable_punctuations=true</item>
<item>device_personalization_services/Captions__enable_setting_page=false</item>
<item>device_personalization_services/Captions__enable_survey=false</item>
<item>device_personalization_services/Captions__enable_text_transform=true</item>
<item>device_personalization_services/Captions__enable_westworld_logging=false</item>
<item>device_personalization_services/Captions__enable_zero_day=false</item>
<item>device_personalization_services/Captions__manifest_url_template=https://storage.googleapis.com/captions/%{NAMESPACE}_%{VERSION}_manifest.json</item>
<item>device_personalization_services/Captions__model_version_v1=20190613</item>
<item>device_personalization_services/Captions__model_version_v1_2=20200112</item>
<item>device_personalization_services/Captions__new_model_version=20210623</item>
<item>device_personalization_services/Captions__new_model_version_advanced_2023=20230808</item>
<item>device_personalization_services/Captions__speech_threshold=0.2</item>
<item>device_personalization_services/Captions__support_lang_id_disabled_after_dismissals=true</item>
<item>device_personalization_services/Captions__supported_languages=en-US;fr-FR;it-IT;de-DE;ja-JP;es-ES;cmn-Hant-TW;hi-IN;pt-BR;tr-TR;pl-PL;cmn-Hans-CN;ko-KR;ru-RU;vi-VN</item>
<item>device_personalization_services/Captions__supported_languages_beta_quality=ja-JP;pt-BR;tr-TR;pl-PL;cmn-Hans-CN;ko-KR;ru-RU;vi-VN</item>
<item>device_personalization_services/Captions__surface_sound_events=true</item>
<item>device_personalization_services/Captions__text_transform_augmented_input=true</item>
<item>device_personalization_services/Captions__visibility_playing_duration_millis=5000</item>
<item>device_personalization_services/Captions__visibility_stopped_duration_millis=1500</item>
<!-- Now Playing (Pixel 2017) -->
<item>device_personalization_services/NowPlaying__ambient_music_apk_music_detector_min_score=0.45</item>
<item>device_personalization_services/NowPlaying__ambient_music_download_album_art_via_astrea=false</item>
<item>device_personalization_services/NowPlaying__ambient_music_enable_resource_download_logging=false</item>
<item>device_personalization_services/NowPlaying__ambient_music_enhanced_metadata_shards_manifest=4003:https://storage.googleapis.com/music-iq-db/updatable_db_v4/20241015-000033/manifest.json</item>
<item>device_personalization_services/NowPlaying__ambient_music_get_model_state_cooldown_seconds_cloud_search=9</item>
<item>device_personalization_services/NowPlaying__ambient_music_index_manifest_17_09_02=3105:https://storage.googleapis.com/music-iq-db/updatable_db_v3/20241013-030037/manifest.json</item>
<item>device_personalization_services/NowPlaying__ambient_music_matcher_match_threshold_17_09_02=1.0E-6</item>
<item>device_personalization_services/NowPlaying__ambient_music_on_demand_enabled=true</item>
<item>device_personalization_services/NowPlaying__ambient_music_on_demand_music_confidence=0.48</item>
<item>device_personalization_services/NowPlaying__ambient_music_on_demand_search_use_new_opt_in_flow=false</item>
<item>device_personalization_services/NowPlaying__ambient_music_show_album_art=false</item>
<item>device_personalization_services/NowPlaying__ambient_music_support_dsp_model_tflite_p6=true</item>
<item>device_personalization_services/NowPlaying__ambient_music_use_enhanced_matches_database=false</item>
<item>device_personalization_services/NowPlaying__ambient_music_use_metadata_shards_database=false</item>
<item>device_personalization_services/NowPlaying__ambient_music_use_yt_domain_fife_urls=false</item>
<item>device_personalization_services/NowPlaying__cloud_api_allowed=true</item>
<item>device_personalization_services/NowPlaying__create_shortcut_on_np_enabled=false</item>
<item>device_personalization_services/NowPlaying__default_music_player_setting=false</item>
<item>device_personalization_services/NowPlaying__dsp_model_checksum_enabled=true</item>
<!-- <item>device_personalization_services/NowPlaying__enable_usage_fa=true</item> -->
<item>device_personalization_services/NowPlaying__favorites_enabled=true</item>
<item>device_personalization_services/NowPlaying__feature_users_count_enabled=true</item>
<!-- <item>device_personalization_services/NowPlaying__federated_analytics_allowed=true</item> -->
<item>device_personalization_services/NowPlaying__handle_ambient_music_results_with_history=true</item>
<item>device_personalization_services/NowPlaying__min_training_interval_millis=86400000</item>
<item>device_personalization_services/NowPlaying__nnfp_v3_model_enabled=true</item>
<item>device_personalization_services/NowPlaying__on_demand_enable_eager_prompt=true</item>
<item>device_personalization_services/NowPlaying__on_demand_fingerprinter_being_setup_warning=true</item>
<item>device_personalization_services/NowPlaying__on_demand_hide_if_fingerprinter_install_not_confirmed=true</item>
<item>device_personalization_services/NowPlaying__on_demand_min_supported_aga_version=12.35.17</item>
<item>device_personalization_services/NowPlaying__on_demand_retry_fingerprinter_install=true</item>
<item>device_personalization_services/NowPlaying__shortcut_direct_create_enabled=false</item>
<item>device_personalization_services/NowPlaying__youtube_export_enabled=true</item>
<!-- Adaptive Sound (Pixel 2020) -->
<item>device_personalization_services/AdaptiveAudio__enable_adaptive_audio=true</item>
<item>device_personalization_services/AdaptiveAudio__show_promo_notification=false</item>
<item>device_personalization_services/AdaptiveAudio__use_silence_detector_state_bug_fix=true</item>
<!-- Screen attention (Pixel 2019) -->
<item>device_personalization_services/Attention__accel_sensor_enabled=false</item>
<item>device_personalization_services/Attention__accel_sensor_threshold_mss=0.2</item>
<item>device_personalization_services/Attention__enabled=true</item>
<item>device_personalization_services/Attention__margin_horizontal_px=1000</item>
<item>device_personalization_services/Attention__margin_vertical_px=1000</item>
<item>device_personalization_services/Attention__proximity_sensor_enabled=false</item>
<!-- Translation -->
<item>device_personalization_services/Translate__app_blocklist=com.google.android.talk</item>
<item>device_personalization_services/Translate__blue_chip_translate_enabled=true</item>
<item>device_personalization_services/Translate__characterset_lang_detection_enabled=true</item>
<item>device_personalization_services/Translate__chat_translate_languages=de,en,es,fr,it,ja,hi,zh,ru,pl,pt,ko,th,tr,nl,zh_Hant,sv,da,vi,ar,fa,no,bn,fil</item>
<item>device_personalization_services/Translate__copy_to_translate_enabled=true</item>
<item>device_personalization_services/Translate__differentiate_simplified_and_traditional_chinese=true</item>
<item>device_personalization_services/Translate__disable_translate_without_system_animation=false</item>
<item>device_personalization_services/Translate__enable_chronicle_migration=true</item>
<item>device_personalization_services/Translate__enable_default_langid_model=true</item>
<item>device_personalization_services/Translate__enable_dictionary_langid_detection=true</item>
<item>device_personalization_services/Translate__enable_opmv4_service=true</item>
<item>device_personalization_services/Translate__enable_settings_backup_restore=false</item>
<item>device_personalization_services/Translate__enable_setup_wizard_dialog_v2=false</item>
<item>device_personalization_services/Translate__enable_spa_setting=false</item>
<item>device_personalization_services/Translate__enable_translate_kit_api_migration=false</item>
<item>device_personalization_services/Translate__interpreter_source_languages=de,en,ja,es,fr,it</item>
<item>device_personalization_services/Translate__interpreter_target_languages=de,en,ja,es,fr,it</item>
<item>device_personalization_services/Translate__replace_auto_translate_copied_text_enabled=true</item>
<item>device_personalization_services/Translate__text_to_text_language_list=vi,ja,fa,ro,nl,mr,mt,ar,ms,it,eo,is,et,es,iw,zh,uk,af,id,ur,mk,cy,hi,el,be,pt,lt,hr,lv,hu,ht,te,de,bg,th,bn,tl,pl,tr,kn,sv,gl,ko,sw,cs,da,ta,gu,ka,sl,ca,sk,ga,sq,no,fi,ru,fr,en,zh_Hant,fil</item>
<item>device_personalization_services/Translate__translation_service_enabled=true</item>
<item>device_personalization_services/Translate__translator_expiration_enabled=true</item>
<item>device_personalization_services/Translate__use_translate_kit_streaming_api=true</item>
<!-- Recents text selection (for Pixel Launcher users) -->
<item>device_personalization_services/Overview__enable_barcode_detection=false</item>
<item>device_personalization_services/Overview__enable_image_search=false</item>
<item>device_personalization_services/Overview__enable_image_selection=true</item>
<item>device_personalization_services/Overview__enable_japanese_ocr=true</item>
<item>device_personalization_services/Overview__enable_lens_r_overview_long_press=true</item>
<item>device_personalization_services/Overview__enable_lens_r_overview_select_mode=true</item>
<item>device_personalization_services/Overview__enable_lens_r_overview_translate_action=false</item>
<item>device_personalization_services/Overview__enable_overview=true</item>
<item>device_personalization_services/Overview__enable_pir_clearcut_logging=true</item>
<item>device_personalization_services/Overview__enable_pir_westworld_logging=true</item>
<item>device_personalization_services/Overview__enable_proactive_hints=false</item>
<item>device_personalization_services/Overview__enable_superpacks_pir_protocol=true</item>
<item>device_personalization_services/Overview__min_lens_agsa_app_version=301084649</item>
<!-- Disable federated learning -->
<item>device_personalization_services/OverviewFederatedAnalytics__enable_fa=false</item>
<item>device_personalization_services/OverviewFederatedAnalytics__enable_min_training_interval=false</item>
<item>device_personalization_services/OverviewFederatedAnalytics__enable_non_synthetic_logs=false</item>
<!-- Disable unused AiAi features -->
<item>device_personalization_services/Autofill__enable=false</item>
<item>device_personalization_services/Autofill__enable_fa=false</item>
<item>device_personalization_services/Fedex__enable_fedex=false</item>
<item>device_personalization_services/Logging__enable_aiai_clearcut_logging=false</item>
<item>device_personalization_services/NotificationAssistant__enable_service=false</item>
<item>device_personalization_services/VisualCortex__enable=false</item>
</string-array>
</resources>

View File

@@ -0,0 +1,27 @@
<?xml version="1.0" encoding="utf-8"?>
<!-- Copyright 2021, The LineageOS Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<!-- Phone app resources that may need to be customized
for different hardware or product builds. -->
<resources>
<!-- The package name for the platform carrier config app, bundled with system image. -->
<string name="platform_carrier_config_package" translatable="false">com.google.android.carrier</string>
<!-- The package names which can request thermal mitigation. -->
<string-array name="thermal_mitigation_allowlisted_packages" translatable="false">
<item>com.google.android.connectivitythermalpowermanager</item>
</string-array>
</resources>

View File

@@ -74,6 +74,9 @@
<!-- If this is true, the screen will come on when you unplug usb/power/whatever. -->
<bool name="config_unplugTurnsOnScreen">true</bool>
<bool name="config_use_tiered_cached_adj">false</bool>
<!-- If device supports pickup/lift gesture -->
<bool name="config_dozePulsePickup">true</bool>
@@ -117,11 +120,6 @@
<!-- Height of the status bar -->
<dimen name="status_bar_height_portrait">28dp</dimen>
<!-- Height of area above QQS where battery/time go (equal to status bar height if > 48dp) -->
<dimen name="quick_qs_offset_height">171px</dimen>
<!-- Total height of QQS (quick_qs_offset_height + 128dp) -->
<dimen name="quick_qs_total_height">177dp</dimen>
<!-- Shutdown if the battery temperature exceeds (this value * 0.1) Celsius. -->
<integer name="config_shutdownBatteryTemperature">600</integer>
@@ -243,14 +241,11 @@
<item>"/system/framework/framework.jar"</item>
<item>"/system/framework/services.jar"</item>
<item>"/system/bin/surfaceflinger"</item>
<item>"/system_ext/priv-app/SystemUIGoogle/SystemUIGoogle.apk"</item>
<item>"/system_ext/priv-app/SystemUI/SystemUI.apk"</item>
</string-array>
<!-- Should the pinner service pin the Camera application? -->
<bool name="config_pinnerCameraApp">true</bool>
<!-- Should the pinner service pin the Home application? -->
<bool name="config_pinnerHomeApp">true</bool>
<!-- Bytes that the PinnerService will pin for Home app -->
<integer name="config_pinnerHomePinBytes">6291456</integer>
<!-- Bytes that the PinnerService will pin for WebView -->
<integer name="config_pinnerWebviewPinBytes">20971520</integer>
@@ -284,6 +279,9 @@
<!-- Enable Zram writeback feature to allow unused pages in zram be written to flash. -->
<bool name="config_zramWriteback">true</bool>
<!-- the number of the max cached processes in the system. -->
<integer name="config_customizedMaxCachedProcesses">1024</integer>
<!-- Boolean indicating if restoring network selection should be skipped -->
<!-- The restoring is handled by modem if it is true -->
<bool translatable="false" name="skip_restoring_network_selection">true</bool>
@@ -315,4 +313,7 @@
<!-- Pre-scale volume at volume step 3 for Absolute Volume -->
<fraction name="config_prescaleAbsoluteVolume_index3">100%</fraction>
<!-- Whether to enable usb state update via udc sysfs. -->
<bool name="config_enableUdcSysfsUsbStateUpdate">true</bool>
</resources>

View File

@@ -1,22 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
/**
* Copyright (c) 2020, The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
-->
<resources xmlns:xliff="urn:oasis:names:tc:xliff:document:1.2">
<!-- Content description of the data connection type 5G UW. [CHAR LIMIT=NONE] -->
<string name="data_connection_5g_plus" translatable="false">5G UW</string>
</resources>

23
parts/Android.bp Normal file
View File

@@ -0,0 +1,23 @@
//
// Copyright (C) 2021 The LineageOS Project
//
// SPDX-License-Identifier: Apache-2.0
//
android_app {
name: "GoogleParts",
srcs: ["src/**/*.java"],
certificate: "platform",
platform_apis: true,
privileged: true,
system_ext_specific: true,
static_libs: [
"org.lineageos.settings.resources",
],
optimize: {
proguard_flags_files: ["proguard.flags"],
},
}

48
parts/AndroidManifest.xml Normal file
View File

@@ -0,0 +1,48 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
Copyright (C) 2021 The LineageOS Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
package="org.lineageos.settings"
android:versionCode="1"
android:versionName="1.0"
android:sharedUserId="android.uid.system">
<queries>
<package android:name="com.google.android.gms" />
<package android:name="com.google.android.gsf" />
<package android:name="com.google.android.euicc" />
<package android:name="com.google.euiccpixel" />
</queries>
<uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />
<uses-sdk
android:minSdkVersion="30"
android:targetSdkVersion="30"/>
<application
android:label="@string/device_settings_app_name"
android:persistent="true">
<receiver android:name=".BootCompletedReceiver">
<intent-filter>
<action android:name="android.intent.action.BOOT_COMPLETED" />
<category android:name="android.intent.category.DEFAULT" />
</intent-filter>
</receiver>
</application>
</manifest>

3
parts/proguard.flags Normal file
View File

@@ -0,0 +1,3 @@
-keep class org.lineageos.settings.* {
*;
}

View File

@@ -0,0 +1,32 @@
/*
* Copyright (C) 2021 The LineageOS Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.lineageos.settings;
import android.content.BroadcastReceiver;
import android.content.Context;
import android.content.Intent;
import android.util.Log;
public class BootCompletedReceiver extends BroadcastReceiver {
private static final String TAG = "GoogleParts";
@Override
public void onReceive(final Context context, Intent intent) {
Log.d(TAG, "Received boot completed intent");
EuiccDisabler.enableOrDisableEuicc(context);
}
}

View File

@@ -0,0 +1,71 @@
/*
* Copyright (C) 2021 The LineageOS Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.lineageos.settings;
import android.content.Context;
import android.content.pm.PackageInfo;
import android.content.pm.PackageManager;
import android.util.Log;
class EuiccDisabler {
private static final String TAG = "GoogleParts";
private static final String[] EUICC_DEPENDENCIES = new String[]{
"com.google.android.gms",
"com.google.android.gsf"
};
private static final String[] EUICC_PACKAGES = new String[]{
"com.google.android.euicc",
"com.google.euiccpixel"
};
private static boolean isInstalledAndEnabled(PackageManager pm, String pkgName) {
try {
PackageInfo info = pm.getPackageInfo(pkgName, 0);
Log.d(TAG, "package " + pkgName + " installed, " +
"enabled = " + info.applicationInfo.enabled);
return info.applicationInfo.enabled;
} catch (PackageManager.NameNotFoundException e) {
Log.d(TAG, "package " + pkgName + " is not installed");
return false;
}
}
private static boolean shouldDisable(PackageManager pm) {
for (String dep : EUICC_DEPENDENCIES) {
if (!isInstalledAndEnabled(pm, dep)) {
// Disable if any of the dependencies are disabled
return true;
}
}
return false;
}
public static void enableOrDisableEuicc(Context context) {
PackageManager pm = context.getPackageManager();
boolean disable = shouldDisable(pm);
int flag = disable
? PackageManager.COMPONENT_ENABLED_STATE_DISABLED
: PackageManager.COMPONENT_ENABLED_STATE_ENABLED;
for (String pkg : EUICC_PACKAGES) {
try {
pm.setApplicationEnabledSetting(pkg, flag, 0);
} catch (IllegalArgumentException e) {
Log.d(TAG, "package " + pkg + " is not present");
}
}
}
}

View File

@@ -105,6 +105,16 @@ const struct SysfsCollector::SysfsPaths sysfs_paths = {
"/sys/class/power_supply/maxfg/gmsr",
"/sys/class/power_supply/maxfg_base/gmsr",
},
.FGModelLoadingPath = {
"/sys/class/power_supply/maxfg/m5_model_state",
"/sys/class/power_supply/maxfg_base/m5_model_state"
},
.FGLogBufferPath = {
"/dev/logbuffer_maxfg_monitor",
"/dev/logbuffer_max77779fg_monitor",
"/dev/logbuffer_maxfg_base_monitor",
"/dev/logbuffer_maxfg_secondary_monitor"
},
.DisplayPortStatsPaths = {
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/link_negotiation_failures",
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/edid_read_failures",
@@ -113,6 +123,23 @@ const struct SysfsCollector::SysfsPaths sysfs_paths = {
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/sink_count_invalid_failures",
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/link_unstable_failures",
},
.DisplayPortDSCStatsPaths = {
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/fec_dsc_supported",
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/fec_dsc_not_supported",
},
.DisplayPortMaxResolutionStatsPaths = {
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/max_res_other",
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/max_res_1366_768",
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/max_res_1440_900",
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/max_res_1600_900",
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/max_res_1920_1080",
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/max_res_2560_1080",
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/max_res_2560_1440",
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/max_res_3440_1440",
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/max_res_3840_2160",
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/max_res_5120_2880",
"/sys/devices/platform/exynos-drm/displayport/drm-displayport-stats/max_res_7680_4320",
},
.HDCPStatsPaths = {
"/sys/devices/platform/hdcp/hdcp2_success_count",
"/sys/devices/platform/hdcp/hdcp2_fallback_count",
@@ -120,21 +147,14 @@ const struct SysfsCollector::SysfsPaths sysfs_paths = {
"/sys/devices/platform/hdcp/hdcp1_success_count",
"/sys/devices/platform/hdcp/hdcp1_fail_count",
"/sys/devices/platform/hdcp/hdcp0_count",
}
},
.SpeakerVersionPath = "/sys/devices/platform/audiometrics/speaker_version"
};
const struct UeventListener::UeventPaths ueventPaths = {
.AudioUevent = "/devices/virtual/amcs/amcs",
.TypeCPartnerUevent = "PRODUCT_TYPE=",
.FGLearningPath = {
"/sys/class/power_supply/maxfg/fg_learning_events",
"/sys/class/power_supply/maxfg_base/fg_learning_events"
},
.FwUpdatePath = "",
.FGModelLoadingPath = {
"/sys/class/power_supply/maxfg/m5_model_state",
"/sys/class/power_supply/maxfg_base/m5_model_state"
}
.FwUpdatePath = ""
};
int main() {

View File

@@ -282,7 +282,7 @@ void addSoC(std::shared_ptr<PowerStats> p) {
}
void setEnergyMeter(std::shared_ptr<PowerStats> p) {
std::vector<const std::string> deviceNames { "s2mpg14-odpm", "s2mpg15-odpm" };
std::vector<std::string> deviceNames { "s2mpg14-odpm", "s2mpg15-odpm" };
p->setEnergyMeterDataProvider(std::make_unique<IioEnergyMeterDataProvider>(deviceNames, true));
}

View File

@@ -0,0 +1,9 @@
package {
default_applicable_licenses: ["Android-Apache-2.0"],
}
runtime_resource_overlay {
name: "TetheringOverlay",
sdk_version: "current",
product_specific: true
}

View File

@@ -0,0 +1,27 @@
<?xml version="1.0" encoding="utf-8"?>
<!-- Copyright (C) 2021 The Android Open Source Project
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<!-- Pixel specific tethering overlays -->
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
package="com.android.networkstack.tethering.overlay"
android:versionCode="1"
android:versionName="1.0">
<application android:hasCode="false" />
<overlay
android:targetPackage="com.android.networkstack.tethering"
android:targetName="TetheringConfig"
android:isStatic="true"
android:priority="0" />
</manifest>

View File

@@ -0,0 +1,46 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
/*
* Copyright (C) 2021 The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
-->
<resources>
<!-- List of regexpressions describing the interface (if any) that represent tetherable
USB interfaces. If the device doesn't want to support tethering over USB this should
be empty. An example would be "usb.*" -->
<string-array translatable="false" name="config_tether_usb_regexs">
<item>rndis\\d</item>
</string-array>
<!-- List of regexpressions describing the interface (if any) that represent tetherable
NCM interfaces. If the device doesn't want to support tethering over NCM this should
be empty. -->
<string-array translatable="false" name="config_tether_ncm_regexs">
<item>ncm\\d</item>
</string-array>
<!-- List of regexpressions describing the interface (if any) that represent tetherable
Wifi P2P interfaces. If the device doesn't want to support tethering over Wifi P2p this
should be empty. An example would be "p2p-p2p\\d-.*" -->
<string-array translatable="false" name="config_tether_wifi_p2p_regexs">
<item>p2p-p2p\\d-.*</item>
<item>p2p\\d</item>
<item>p2p-wlan\\d-.*</item>
</string-array>
<!-- Which USB function should be enabled when TETHERING_USB is requested. 0: RNDIS, 1: NCM.
-->
<integer translatable="false" name="config_tether_usb_functions">1</integer>
</resources>

1
sepolicy/.gitupstream Normal file
View File

@@ -0,0 +1 @@
https://android.googlesource.com/device/google/zuma-sepolicy

4
sepolicy/OWNERS Normal file
View File

@@ -0,0 +1,4 @@
include device/google/gs-common:/sepolicy/OWNERS
adamshih@google.com

View File

@@ -0,0 +1,2 @@
# Fingerprint (UDFPS) GHBM/LHBM toggle
persist.fingerprint.ghbm u:object_r:fingerprint_ghbm_prop:s0 exact bool

View File

@@ -0,0 +1,2 @@
# Fingerprint (UDFPS) GHBM/LHBM toggle
system_vendor_config_prop(fingerprint_ghbm_prop)

View File

@@ -0,0 +1 @@
attribute vendor_persist_type;

View File

@@ -0,0 +1,28 @@
-----BEGIN CERTIFICATE-----
MIIFxjCCA66gAwIBAgIURH+ESClecwsP2Et2gQ1RAHxabWcwDQYJKoZIhvcNAQELBQAwdDELMAkGA
1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDU1vdW50YWluIFZpZXcxFDASBg
NVBAoTC0dvb2dsZSBJbmMuMRAwDgYDVQQLEwdBbmRyb2lkMRAwDgYDVQQDEwdBbmRyb2lkMB4XDTE
5MDIyODE5MjIxNloXDTQ5MDIyODE5MjIxNlowdDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlm
b3JuaWExFjAUBgNVBAcTDU1vdW50YWluIFZpZXcxFDASBgNVBAoTC0dvb2dsZSBJbmMuMRAwDgYDV
QQLEwdBbmRyb2lkMRAwDgYDVQQDEwdBbmRyb2lkMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCg
KCAgEA5AVOe4SKiCOnR4DQ2V3sIo5LNpGtmdzZ54MnHIrsSX8n43xtCTpfQWDWnDZFCIHSmR8KAOQ
0BNxL8ajtr66gU6tFzD5Vlistwl9P9uUlYWgGaeyEoOUqtiN2HtsJDpcCLYKOz6oH2c5NeruDp5n/
Z49xpXXXLgoOTlsoS65tsTcWFrcSuuOE40UyFJ+Rwhh1EiXGPvT99gaXNnDq5WIsPNNe39jV7f01l
Zs/g5iUn4dVA/DxLMam/CQh7qQkh6qWkDL8koQ21N9xEZYTR8qvGvgz3Zd1yfT0P1HsgJaPXK5Fqb
2vLV1NP8KoYIlB2KqadCn+HJjIgH8UIbB+R8o6KuWCYzLb5vPs87HkXG5/Y+GB7HrCIC+6a8BJ4UU
yjUkg/HtBd7GlEixZKLtbcJ3erdfL7uigjCJEqAYDXr2Zes31898ePcl3YQO5/rHobB7f4w3iF/Tw
IAAyRRlOceoskCEa/vCbmb7I8HQIJthSNedWcBiKUneohCtfLT3qS0JUVZewiFRMOVD8mwcZFr4o/
UfVslEe8DpBp0WXs/83OeEJdtfRc861jdOJ7EIyfDmBX91iWgLCBgv6aXtMvP7CwgZV7y+C+Wbbsj
YTYSjsNVSA1uexVPozsSkIjxote0aAiu6+b8LAq9bq2c6Yc6MoldgBqlfcwvFzlKqlm966q6UCAwE
AAaNQME4wDAYDVR0TBAUwAwEB/zAdBgNVHQ4EFgQUuH5K2ov/9L++x+8UhrCDhNdJm6EwHwYDVR0j
BBgwFoAUuH5K2ov/9L++x+8UhrCDhNdJm6EwDQYJKoZIhvcNAQELBQADggIBAIV1Wx+iwchzxx+gg
bWlmJx+oPya2axvj8cgbLGujxI+nmtY2b7UvzazggubioxJJW7rzemLMDwfKPlfiZkIeQmBe2YJhH
iwIPaRAB2juZTfQARsEkd4qYvcIDui6PbbgitLWOh3lYNDcVe/c8+EwbJuNNSqjPwIZvj2lodTQNI
7uUy1ff5hytHsznObr/rh+MeJlKKY56JL6VEzsD694iVFxJ7f4FXK5Y0pjqYmGj1krcfMFoxHPAmj
57yf3VVzeGKx5re+5WIMe5K0RZB9IWxfvx1DsxXvzVeaHYW/c6VF7TVT/RUV+iLtst+1A1RJbeXDu
3uLHxPAC44WUb3FQOUKPRP2cIul70ifJSbvu+qLuyfgwltXyYIeQMSrUw4WK6NMNYaIPgEq1BX4rL
UlKxlH4xaNwT5ZCWLTRdWozYP5FFSMdQhhOb1Ki81wKmr1f9EkXoW9eGRZBj3tAg90k0qltel30eL
pW6gmnNg+la84nyaXfBF3vQAbaAuW5D3TAMWR/Wl6nHoPItdrXHkyMRvQkzx2ezKz61ZP3uDfEZvM
LXR0lle8s6pTZB3GLS4mY9LFQdDwPlc1xk8yEcdnUAZs+9U6zZF1+FKSgb3UNy81g2DHUMp0FCBXT
y+kLm0LQVYU91kLd+fTkmgkWl4xSyXeV5g3FFuiv9ahl7//vvCG
-----END CERTIFICATE-----

View File

@@ -0,0 +1,29 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

View File

@@ -0,0 +1,3 @@
type vendor_toe_device, dev_type;
type lwis_device, dev_type;
type rls_device, dev_type;

View File

@@ -0,0 +1,25 @@
# Data
type updated_wifi_firmware_data_file, file_type, data_file_type;
type vendor_misc_data_file, file_type, data_file_type;
type per_boot_file, file_type, data_file_type, core_data_file_type;
type powerstats_vendor_data_file, file_type, data_file_type;
# sysfs
type bootdevice_sysdev, dev_type;
type sysfs_wifi, sysfs_type, fs_type;
type sysfs_bcmdhd, sysfs_type, fs_type;
type sysfs_chargelevel, sysfs_type, fs_type;
type sysfs_camera, sysfs_type, fs_type;
# persist
type persist_ss_file, file_type, vendor_persist_type;
# Storage Health HAL
type proc_f2fs, proc_type, fs_type;
# Vendor tools
type vendor_dumpsys, vendor_file_type, file_type;
# USB-C throttling stats
type sysfs_usbc_throttling_stats, sysfs_type, fs_type;

View File

@@ -0,0 +1,45 @@
# Binaries
/vendor/bin/dumpsys u:object_r:vendor_dumpsys:s0
/vendor/bin/hw/android\.hardware\.gatekeeper-service\.trusty u:object_r:hal_gatekeeper_default_exec:s0
/vendor/bin/hw/android\.hardware\.gatekeeper@1\.0-service\.trusty u:object_r:hal_gatekeeper_default_exec:s0
/vendor/bin/hw/android\.hardware\.nfc-service\.st u:object_r:hal_nfc_default_exec:s0
# Vendor libraries
/vendor/lib(64)?/libdrm\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libion_google\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/arm\.graphics-V1-ndk\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libOpenCL-pixel\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libOpenCL\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/lib_aion_buffer\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libGralloc4Wrapper\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/pixel-power-ext-V1-ndk\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/android\.frameworks\.stats-V1-ndk\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/android\.frameworks\.stats-V2-ndk\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/vendor-pixelatoms-cpp\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libprotobuf-cpp-lite-(\d+\.){2,3}so u:object_r:same_process_hal_file:s0
# Graphics
/vendor/lib(64)?/hw/vulkan\.mali\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libgpudataproducer\.so u:object_r:same_process_hal_file:s0
# Devices
/dev/ttySAC0 u:object_r:tty_device:s0
/dev/bigwave u:object_r:video_device:s0
/dev/watchdog0 u:object_r:watchdog_device:s0
/dev/dri/card0 u:object_r:graphics_device:s0
/dev/fimg2d u:object_r:graphics_device:s0
/dev/g2d u:object_r:graphics_device:s0
/dev/dit2 u:object_r:vendor_toe_device:s0
/dev/sg1 u:object_r:sg_device:s0
/dev/st21nfc u:object_r:nfc_device:s0
/dev/sys/block/bootdevice(/.*)? u:object_r:bootdevice_sysdev:s0
/dev/socket/chre u:object_r:chre_socket:s0
# Data
/data/vendor/ss(/.*)? u:object_r:tee_data_file:s0
/data/nfc(/.*)? u:object_r:nfc_data_file:s0
/data/vendor/firmware/wifi(/.*)? u:object_r:updated_wifi_firmware_data_file:s0
/data/vendor/misc(/.*)? u:object_r:vendor_misc_data_file:s0
/data/per_boot(/.*)? u:object_r:per_boot_file:s0
/dev/battery_history u:object_r:battery_history_device:s0
/data/vendor/powerstats(/.*)? u:object_r:powerstats_vendor_data_file:s0

View File

@@ -0,0 +1,77 @@
genfscon sysfs /devices/soc0/machine u:object_r:sysfs_soc:s0
genfscon sysfs /devices/soc0/revision u:object_r:sysfs_soc:s0
# tracefs
genfscon tracefs /events/dmabuf_heap/dma_heap_stat u:object_r:debugfs_tracing:s0
# WiFi
genfscon sysfs /wifi u:object_r:sysfs_wifi:s0
# Broadcom
genfscon sysfs /module/bcmdhd4389 u:object_r:sysfs_bcmdhd:s0
# GPU
genfscon sysfs /devices/platform/28000000.mali/hint_min_freq u:object_r:sysfs_gpu:s0
genfscon sysfs /devices/platform/28000000.mali/power_policy u:object_r:sysfs_gpu:s0
# Fabric
genfscon sysfs /devices/platform/17000010.devfreq_mif/devfreq/17000010.devfreq_mif/min_freq u:object_r:sysfs_fabric:s0
genfscon sysfs /devices/platform/17000020.devfreq_int/devfreq/17000020.devfreq_int/min_freq u:object_r:sysfs_fabric:s0
genfscon sysfs /devices/platform/17000010.devfreq_mif/devfreq/17000010.devfreq_mif/interactive/target_load u:object_r:sysfs_fabric:s0
# sscoredump (per device)
genfscon sysfs /devices/platform/aoc/sscoredump/sscd_aoc/report_count u:object_r:sysfs_sscoredump_subsystem_report_count:s0
genfscon sysfs /devices/platform/bigocean/sscoredump/sscd_bigocean/report_count u:object_r:sysfs_sscoredump_subsystem_report_count:s0
genfscon sysfs /devices/platform/debugcore/sscoredump/sscd_debugcore/report_count u:object_r:sysfs_sscoredump_subsystem_report_count:s0
genfscon sysfs /devices/platform/mfc-core/sscoredump/sscd_mfc-core/report_count u:object_r:sysfs_sscoredump_subsystem_report_count:s0
genfscon sysfs /devices/platform/wlan/sscoredump/sscd_wlan/report_count u:object_r:sysfs_sscoredump_subsystem_report_count:s0
# Storage
genfscon proc /fs/f2fs u:object_r:proc_f2fs:s0
genfscon proc /sys/vm/swappiness u:object_r:proc_dirty:s0
# Haptics
genfscon sysfs /devices/platform/10970000.hsi2c/i2c-5/i2c-cs40l26a u:object_r:sysfs_vibrator:s0
genfscon sysfs /devices/platform/10970000.hsi2c/i2c-6/i2c-cs40l26a u:object_r:sysfs_vibrator:s0
genfscon sysfs /devices/platform/10970000.hsi2c/i2c-7/i2c-cs40l26a u:object_r:sysfs_vibrator:s0
genfscon sysfs /devices/platform/10970000.hsi2c/i2c-8/i2c-cs40l26a u:object_r:sysfs_vibrator:s0
# Thermal
genfscon sysfs /devices/platform/100a0000.LITTLE u:object_r:sysfs_thermal:s0
genfscon sysfs /devices/platform/100a0000.MID u:object_r:sysfs_thermal:s0
genfscon sysfs /devices/platform/100a0000.BIG u:object_r:sysfs_thermal:s0
genfscon sysfs /devices/platform/100a0000.ISP u:object_r:sysfs_thermal:s0
genfscon sysfs /devices/platform/100b0000.G3D u:object_r:sysfs_thermal:s0
genfscon sysfs /devices/platform/100b0000.TPU u:object_r:sysfs_thermal:s0
genfscon sysfs /devices/platform/100b0000.AUR u:object_r:sysfs_thermal:s0
genfscon sysfs /module/gs_thermal/parameters/tmu_reg_dump_state u:object_r:sysfs_thermal:s0
genfscon sysfs /module/gs_thermal/parameters/tmu_reg_dump_current_temp u:object_r:sysfs_thermal:s0
genfscon sysfs /module/gs_thermal/parameters/tmu_top_reg_dump_rise_thres u:object_r:sysfs_thermal:s0
genfscon sysfs /module/gs_thermal/parameters/tmu_top_reg_dump_fall_thres u:object_r:sysfs_thermal:s0
genfscon sysfs /module/gs_thermal/parameters/tmu_sub_reg_dump_rise_thres u:object_r:sysfs_thermal:s0
genfscon sysfs /module/gs_thermal/parameters/tmu_sub_reg_dump_fall_thres u:object_r:sysfs_thermal:s0
genfscon sysfs /thermal_zone14/mode u:object_r:sysfs_thermal:s0
# Camera
genfscon sysfs /devices/platform/17000030.devfreq_intcam/devfreq/17000030.devfreq_intcam/min_freq u:object_r:sysfs_camera:s0
genfscon sysfs /devices/platform/17000060.devfreq_tnr/devfreq/17000060.devfreq_tnr/max_freq u:object_r:sysfs_camera:s0
genfscon sysfs /devices/platform/17000060.devfreq_tnr/devfreq/17000060.devfreq_tnr/min_freq u:object_r:sysfs_camera:s0
# USB-C throttling stats
genfscon sysfs /devices/platform/google,usbc_port_cooling_dev/cleared_time u:object_r:sysfs_usbc_throttling_stats:s0
genfscon sysfs /devices/platform/google,usbc_port_cooling_dev/hysteresis_time u:object_r:sysfs_usbc_throttling_stats:s0
genfscon sysfs /devices/platform/google,usbc_port_cooling_dev/trip_time u:object_r:sysfs_usbc_throttling_stats:s0
# ARM ETE
genfscon sysfs /devices/platform/ete0 u:object_r:sysfs_devices_cs_etm:s0
genfscon sysfs /devices/platform/ete1 u:object_r:sysfs_devices_cs_etm:s0
genfscon sysfs /devices/platform/ete2 u:object_r:sysfs_devices_cs_etm:s0
genfscon sysfs /devices/platform/ete3 u:object_r:sysfs_devices_cs_etm:s0
genfscon sysfs /devices/platform/ete4 u:object_r:sysfs_devices_cs_etm:s0
genfscon sysfs /devices/platform/ete5 u:object_r:sysfs_devices_cs_etm:s0
genfscon sysfs /devices/platform/ete6 u:object_r:sysfs_devices_cs_etm:s0
genfscon sysfs /devices/platform/ete7 u:object_r:sysfs_devices_cs_etm:s0
genfscon sysfs /devices/platform/ete8 u:object_r:sysfs_devices_cs_etm:s0

View File

@@ -0,0 +1,2 @@
# allow InputProcessor HAL to read the display resolution system property
get_prop(hal_input_processor_default, vendor_display_prop)

View File

@@ -0,0 +1,5 @@
[@UWB]
ALL : device/google/zuma/sepolicy/legacy/whitechapel_pro/certs/com_qorvo_uwb.x509.pem
[@EUICCSUPPORTPIXEL]
ALL : device/google/zuma/sepolicy/legacy/whitechapel_pro/certs/EuiccSupportPixel.x509.pem

View File

@@ -0,0 +1,30 @@
<?xml version="1.0" encoding="utf-8"?>
<policy>
<!--
* A signature is a hex encoded X.509 certificate or a tag defined in
keys.conf and is required for each signer tag.
* A signer tag may contain a seinfo tag and multiple package stanzas.
* A default tag is allowed that can contain policy for all apps not signed with a
previously listed cert. It may not contain any inner package stanzas.
* Each signer/default/package tag is allowed to contain one seinfo tag. This tag
represents additional info that each app can use in setting a SELinux security
context on the eventual process.
* When a package is installed the following logic is used to determine what seinfo
value, if any, is assigned.
- All signatures used to sign the app are checked first.
- If a signer stanza has inner package stanzas, those stanza will be checked
to try and match the package name of the app. If the package name matches
then that seinfo tag is used. If no inner package matches then the outer
seinfo tag is assigned.
- The default tag is consulted last if needed.
-->
<!-- google apps key -->
<signer signature="@UWB" >
<seinfo value="uwb" />
</signer>
<signer signature="@EUICCSUPPORTPIXEL" >
<seinfo value="EuiccSupportPixel" />
</signer>
</policy>

View File

@@ -0,0 +1,17 @@
# Vendor
vendor_internal_prop(vendor_nfc_prop)
vendor_restricted_prop(vendor_nfc_antenna_prop)
vendor_internal_prop(vendor_secure_element_prop)
vendor_internal_prop(vendor_battery_profile_prop)
vendor_internal_prop(vendor_camera_prop)
vendor_internal_prop(vendor_camera_fatp_prop)
vendor_internal_prop(vendor_ro_sys_default_prop)
vendor_internal_prop(vendor_persist_sys_default_prop)
vendor_internal_prop(vendor_display_prop)
vendor_internal_prop(vendor_persist_prop)
# UWB calibration
system_vendor_config_prop(vendor_uwb_calibration_prop)
# Trusty storage FS ready
vendor_internal_prop(vendor_trusty_storage_prop)

View File

@@ -0,0 +1,23 @@
# test battery profile
persist.vendor.testing_battery_profile u:object_r:vendor_battery_profile_prop:s0
# NFC
persist.vendor.nfc. u:object_r:vendor_nfc_prop:s0
persist.vendor.nfc.antenna. u:object_r:vendor_nfc_antenna_prop:s0
# SecureElement
persist.vendor.se. u:object_r:vendor_secure_element_prop:s0
# for display
ro.vendor.hwc.drm.device u:object_r:vendor_display_prop:s0
persist.vendor.display. u:object_r:vendor_display_prop:s0
# vendor default
ro.vendor.sys. u:object_r:vendor_ro_sys_default_prop:s0
persist.vendor.sys. u:object_r:vendor_persist_sys_default_prop:s0
#uwb
ro.vendor.uwb.calibration. u:object_r:vendor_uwb_calibration_prop:s0 exact string
# Trusty
ro.vendor.trusty.storage.fs_ready u:object_r:vendor_trusty_storage_prop:s0

View File

@@ -0,0 +1 @@
type hal_uwb_vendor_service, service_manager_type, hal_service_type;

View File

@@ -0,0 +1 @@
hardware.qorvo.uwb.IUwbVendor/default u:object_r:hal_uwb_vendor_service:s0

View File

@@ -0,0 +1 @@
type rls_service, vndservice_manager_type;

View File

@@ -0,0 +1,18 @@
typeattribute debug_camera_app coredomain;
userdebug_or_eng(`
app_domain(debug_camera_app)
net_domain(debug_camera_app)
allow debug_camera_app app_api_service:service_manager find;
allow debug_camera_app audioserver_service:service_manager find;
allow debug_camera_app cameraserver_service:service_manager find;
allow debug_camera_app mediaextractor_service:service_manager find;
allow debug_camera_app mediametrics_service:service_manager find;
allow debug_camera_app mediaserver_service:service_manager find;
# Allows GCA_Eng & GCA-Next to access the PowerHAL.
hal_client_domain(debug_camera_app, hal_power)
# Follow priv-app symlinks. This is used for dynamite functionality.
allow debug_camera_app privapp_data_file:lnk_file r_file_perms;
')

View File

@@ -0,0 +1,19 @@
typeattribute google_camera_app coredomain;
app_domain(google_camera_app)
net_domain(google_camera_app)
allow google_camera_app app_api_service:service_manager find;
allow google_camera_app audioserver_service:service_manager find;
allow google_camera_app cameraserver_service:service_manager find;
allow google_camera_app mediaextractor_service:service_manager find;
allow google_camera_app mediametrics_service:service_manager find;
allow google_camera_app mediaserver_service:service_manager find;
# Allows GCA to access the PowerHAL.
hal_client_domain(google_camera_app, hal_power)
# Library code may try to access vendor properties, but should be denied
dontaudit google_camera_app vendor_default_prop:file { getattr map open };
# Follow priv-app symlinks. This is used for dynamite functionality.
allow google_camera_app privapp_data_file:lnk_file r_file_perms;

View File

@@ -0,0 +1,11 @@
# Google Camera
user=_app isPrivApp=true seinfo=google name=com.google.android.GoogleCamera domain=google_camera_app type=app_data_file levelFrom=all
# Google Camera Eng
user=_app seinfo=CameraEng name=com.google.android.GoogleCameraEng domain=debug_camera_app type=app_data_file levelFrom=all
# Also allow GoogleCameraNext, the fishfood version, the same access as GoogleCamera
user=_app seinfo=CameraFishfood name=com.google.android.apps.googlecamera.fishfood domain=google_camera_app type=app_data_file levelFrom=all
# Also label GoogleCameraNext, built with debug keys as debug_camera_app.
user=_app seinfo=CameraEng name=com.google.android.apps.googlecamera.fishfood domain=debug_camera_app type=app_data_file levelFrom=all

View File

@@ -0,0 +1,2 @@
# b/277300125
dontaudit vendor_init device_config_configuration_prop:property_service { set };

View File

@@ -0,0 +1 @@
type debug_camera_app, domain;

View File

@@ -0,0 +1 @@
type google_camera_app, domain;

View File

@@ -0,0 +1,9 @@
type bipchmgr, domain;
type bipchmgr_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(bipchmgr)
get_prop(bipchmgr, hwservicemanager_prop);
allow bipchmgr hal_exynos_rild_hwservice:hwservice_manager find;
hwbinder_use(bipchmgr)
binder_call(bipchmgr, rild)

View File

@@ -0,0 +1,8 @@
type cat_engine_service_app, domain;
userdebug_or_eng(`
app_domain(cat_engine_service_app)
get_prop(cat_engine_service_app, vendor_rild_prop)
allow cat_engine_service_app app_api_service:service_manager find;
allow cat_engine_service_app system_app_data_file:dir r_dir_perms;
')

Some files were not shown because too many files have changed in this diff Show More