Commit graph

26 commits

Author SHA1 Message Date
Michael Bestas
02b9cc144c
gs-common: Remove non-existent vendor includes
Change-Id: I1bc76430d30259984f4eb91907be61ef39646c27
2025-06-26 06:20:40 +03:00
Michael Bestas
22322941ea
gs-common: Remove userdebug/eng configuration
Change-Id: Ie1e8b6bbebdfac97f8bc382e41c70cc8a32caf07
2025-06-23 19:29:31 +03:00
Michael Bestas
4460098bc5 Android 15.0.0 Release 6 (AP4A.241205.013)
-----BEGIN PGP SIGNATURE-----
 
 iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ1IssQAKCRDorT+BmrEO
 eIS/AJ9ojetnDXDlslBpaDU7nNPVrNv+WgCeMKWKeHmJn6acS37FiZBS9+jvpec=
 =JvPS
 -----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQJLBAABCgA1FiEEHrBYPudH862glXQBzJUERRm+ZmkFAmdY7O4XHG1rYmVzdGFz
 QGxpbmVhZ2Vvcy5vcmcACgkQzJUERRm+ZmnGCw//XCwIcPsFqQSwygK76wo5ZsCO
 Mex6U5SdmtBecQ2VmIZKofe4/HIog9Wne3GFE6Xjj1bZHxtp/W4uURp6BQ8LuqA5
 zqhkzc/Ijz6W+8wJ7n4k+V+N33N9ZYrbxQdqmBbMzLO0kOv86vC0HbKHLLgvT5d4
 yYTe3TmGUMXTysky8+Y5YJoIHXqy847ohsOg7yzo9wtEzNZpDXLjDCfp4H8Gei8c
 RIw/g+P2WwXGEntlXMtt6lajLF5m2GOtGLL5S+IrtoskpISC6jOmnD+WDwG8VJRW
 dts4yqRtB47uz53sLE618zOXE/Tz3Akppq73bJ9I5dk3qHCx7NBVy5HLFE8O6rJL
 KVjMj88sMShd4wMbHEy+Sh0jVlcKXuxFJeU0MZ0bqoM5/MDDZXQvJDOOQK7noQHS
 RGnsXFwgZnLZEW375FJv4T8S19logSJqAYEkjSdrzU3oIUZqNgFHqQcGDLC8ukOc
 79PbK53RvmzyEedYonH7Zn/ImGwmJxlyVey5jFX+O1S9RsVD4AyrgT1dn3s0KniK
 1UiPi7sHBsL2yE4rp63UEysFZU9uj2gy3xf4PxBi97LV7mLUfE2YqsDwOrII82Ao
 xjyEKTxSMADdwHHI15yf52eNRCf3eBakL54TbZZJ184FZYeTGvOpvc5yCuiITqm9
 RauADk94HVdaaMJXyk4=
 =l74W
 -----END PGP SIGNATURE-----

Merge tag 'android-15.0.0_r6' into staging/lineage-22.0_merge-android-15.0.0_r6

Android 15.0.0 Release 6 (AP4A.241205.013)

# -----BEGIN PGP SIGNATURE-----
#
# iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCZ1IssQAKCRDorT+BmrEO
# eIS/AJ9ojetnDXDlslBpaDU7nNPVrNv+WgCeMKWKeHmJn6acS37FiZBS9+jvpec=
# =JvPS
# -----END PGP SIGNATURE-----
# gpg: Signature made Fri Dec  6 00:44:01 2024 EET
# gpg:                using DSA key 4340D13570EF945E83810964E8AD3F819AB10E78
# gpg: Good signature from "The Android Open Source Project <initial-contribution@android.com>" [marginal]
# gpg: initial-contribution@android.com: Verified 2483 signatures in the past
#      3 years.  Encrypted 4 messages in the past 2 years.
# gpg: WARNING: This key is not certified with sufficiently trusted signatures!
# gpg:          It is not certain that the signature belongs to the owner.
# Primary key fingerprint: 4340 D135 70EF 945E 8381  0964 E8AD 3F81 9AB1 0E78

# By Randall Huang (12) and others
# Via Android (Google) Code Review (58) and others
* tag 'android-15.0.0_r6': (91 commits)
  gsc: Change the criteria for building GSC targets
  sepolicy: remove irregular policy
  Revert^2 "Allow devices that use HIDL to find AIDL radio_ext_service"
  Revert "Allow devices that use HIDL to find AIDL radio_ext_service"
  gs-common: add rules for euiccpixel_app
  audio: allow set_prop for vendor_audio_prop_restricted
  Allow devices that use HIDL to find AIDL radio_ext_service
  Add sepolicy for NNAPI HAL to access hal_graphics_allocator_service, This is required for AHardwareBuffer allocation.
  storage: fix ota selinux error
  Storage: add sepolicy for recovery mode
  Add sepolicy for gcam app
  check_current_prebuilt: Symlink current prebuilt folder to android root
  shamp: Update shared_modem_platform HAL version to 3
  dumpstate: gsa: Add GSA logs to dumpstate
  storage: fix vendor_init avc denied
  storage: fix vold avc denied
  storage: fix adb bugreport and refactor the existing rules
  storage: fix PowerStats avc denied
  storage: move sepolicy to common folder
  shamp: Update shared_modem_platform HAL version to 2
  ...

 Conflicts:
	camera/lyric.mk
	storage/init.storage.rc

Change-Id: I5ed6cff3b54261c949ec6ba60b32820b264b4ec2
2024-12-11 03:37:46 +02:00
Tommy Chiu
1d50676e3f gsc: Change the criteria for building GSC targets
There can be a case where vendor directory exists but vendor/google_nos
does not.

Bug: 371059500
Test: manual
Flag: EXEMPT refactor
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:8af77ef94228bf37bd7be4d8db496f7084e0333d)
Merged-In: I96f429ec3284114868ad220ea308a6920930c065
Change-Id: I96f429ec3284114868ad220ea308a6920930c065
2024-10-18 21:15:19 +00:00
Michael Bestas
d26fdcfef2
Disable userdebug diagnostics
Change-Id: Icbdc3a61ab7b27f2aa0a6a07181b96edd9ee191a
2024-09-24 23:51:36 +03:00
Tommy Chiu
15ed5c639e Move PRODUCT_COPY_FILES from each board>device-vendor.mk here
We used to put the firmware copy logic in dedicated device-vendor.mk
files for each platform. This approach is difficult to maintain and
unnecessary since we always want to deploy the latest firmware.
Propose a better approach for handling firmware copy logic.

Flag: EXEMPT refactor
Bug: 359071523
Test: Build pass
Change-Id: I4169353b9f8f16b82eb0e4ebf2a884f46e1a5f8b
2024-08-30 04:28:47 +00:00
Tommy Chiu
aab9ec8424 mDL: Remove mDL HAL
Since the gsc firmware doens't support mDL since MAIN-00009, we'll need
to remove HAL accordingly to avoid inteface confusion.

Bug: 330415816
Test: PTE release test
Change-Id: Ie91817c926d77209c8ac1119dc74053cb0f6215a
2024-04-02 06:46:01 +00:00
Tommy Chiu
ddcf9b45e9 Add nugget_aidl_test_weaver to userdebug/eng builds
To minimize the steps required for device preparation.

Fixed: 320200171
Test: build pass
Change-Id: I271389b0c4a7fe453902db2e8971e881c72bca35
2024-02-05 07:56:19 +00:00
Kevin Zhang
2ec21f2264 allow bindercalls from citadeld to hal_weaver_citadel
For callbacks

Bug: 293355740
Test: Manually reboot citadel, verify callback goes through via logcat

Change-Id: Ic1bb451952170c984ecfad7fbe0fcfdbb2b05c0d
Signed-off-by: Kevin Zhang <zhakevin@google.com>
2023-09-06 22:51:53 +00:00
Bill Richardson
f1fcb6a099 Allow citadeld to set a property on firmware changes
This will allow services which need to be aware of Dauntless
firmware changes to be notified by an init script trigger on
that property.

Bug: 286433589
Test: manual

  Build an image with this change, confirm that `getprop
  vendor.nos.citadel.version` returns the current Dauntless
  firmware version string.

  Update the Dauntless firmware, confirm that the property value
  changes to match.

Change-Id: I45ce87070ce2b6c9fff2c8119db50445b0e576b3
Signed-off-by: Bill Richardson <wfrichar@google.com>
2023-06-08 20:11:39 -05:00
Tommy Chiu
98761efacc vndservicemanager: allow binder_call to hal_keymint_citadel
original log: [    2.048586] type=1400 audit(1683652072.956:4):
avc:  denied  { call } for  comm="vndservicemanag" scontext=u:r:vndservicemanager:s0
      tcontext=u:r:hal_keymint_citadel:s0 tclass=binder permissive=0

Fix: 281814811
Change-Id: I905e2927af1377fed34d6f47254fb68d22fcac77
2023-05-12 04:40:32 +00:00
Joseph Jang
6c4c5cdf26 Move recovery.te to device/google/gs-common/dauntless/sepolicy
Bug: 279381809
Change-Id: I1b5b802bccbcd7e649f58af2c8393ecfca66e6e4
2023-04-24 09:10:10 +00:00
Joseph Jang
852cfb4fb7 Remove the libnos dependency if build without vendor
Bug: 277188968
Change-Id: I4f6aa64d30a58aebb3fca246d0705e7f540bebb8
2023-04-06 11:37:23 +00:00
ChengYou Ho
74dc039db5 Remove weaver/oemlock/authsecret HIDL services
they're replaced by AIDL services

Bug: 176858088
Bug: 182976659
Change-Id: Ibc355cc02182b51e6f68feb251b59c7399aba727
2022-12-20 18:12:37 +00:00
Chengyou Ho
1bfa9e6a2f Merge changes from topic "240932137"
* changes:
  Add oemlock aidl service sepolicy
  gsc.mk: install oemlock aidl service
2022-09-21 13:52:14 +00:00
Chengyou Ho
94f9ddc10e Merge changes from topic "b/246952216"
* changes:
  Add weaver AIDL service sepolicy
  gsc.mk: install weaver AIDL service
2022-09-21 13:51:48 +00:00
Adam Shih
f3105ca062 add missing dumpstate permission
Bug: 247097496
Test: adb bugreport
Change-Id: Icccfe2c4610ae3a9e77d1ad2c17d828e2e860f1b
2022-09-19 10:52:52 +08:00
ChengYou Ho
141c01ba0c Add oemlock aidl service sepolicy
1. avc:  denied  { find } for pid=889 uid=1064 name=android.hardware.citadel.ICitadeld scontext=u:r:hal_oemlock_citadel:s0 tcontext=u:object_r:citadeld_service:s0 tclass=service_manager permissive=1
2. avc: denied { read } for name="vndbinder" dev="binder" ino=6 scontext=u:r:hal_oemlock_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
3. avc: denied { write } for name="vndbinder" dev="binder" ino=6 scontext=u:r:hal_oemlock_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
4. avc: denied { open } for path="/dev/binderfs/vndbinder" dev="binder" ino=6 scontext=u:r:hal_oemlock_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
5. avc: denied { ioctl } for path="/dev/binderfs/vndbinder" dev="binder" ino=6 ioctlcmd=0x6209 scontext=u:r:hal_oemlock_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
6. avc: denied { call } for scontext=u:r:hal_oemlock_citadel:s0 tcontext=u:r:vndservicemanager:s0 tclass=binder permissive=1

Bug: 240932137
Change-Id: I804d925e020f6adfe8cd0c34aedead366c99adc0
2022-09-18 20:54:20 +00:00
ChengYou Ho
abfb0bafa5 gsc.mk: install oemlock aidl service
Bug: 240932137
Test: VtsHalOemLockTargetTest
Change-Id: Ib46ddafc41f64858e4db099978b6ba89bfa119b9
2022-09-18 20:54:08 +00:00
ChengYou Ho
f31f736d36 Add weaver AIDL service sepolicy
avc: denied { call } for scontext=u:r:hal_weaver_citadel:s0 tcontext=u:r:citadeld:s0 tclass=binder permissive=1
avc:  denied  { find } for pid=3023 uid=1064 name=android.hardware.citadel.ICitadeld scontext=u:r:hal_weaver_citadel:s0 tcontext=u:object_r:citadeld_service:s0 tclass=service_manager permissive=1
avc: denied { read } for comm="android.hardwar" name="vndbinder" dev="binder" ino=6 scontext=u:r:hal_weaver_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { write } for comm="android.hardwar" name="vndbinder" dev="binder" ino=6 scontext=u:r:hal_weaver_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { open } for comm="android.hardwar" path="/dev/binderfs/vndbinder" dev="binder" ino=6 scontext=u:r:hal_weaver_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { ioctl } for comm="android.hardwar" path="/dev/binderfs/vndbinder" dev="binder" ino=6 ioctlcmd=0x6209 scontext=u:r:hal_weaver_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { map } for comm="android.hardwar" path="/dev/binderfs/vndbinder" dev="binder" ino=6 scontext=u:r:hal_weaver_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1


Bug: 246952216
Change-Id: Id77dc947327a0b9f963fd98bd0143a1b86f646dd
2022-09-18 20:24:10 +00:00
ChengYou Ho
df8d456507 gsc.mk: install weaver AIDL service
Bug: 246952216
Change-Id: I74531b175d3d88c17bf644800951ca4d61d11fd8
2022-09-16 20:35:56 +00:00
ChengYou Ho
182bdd6c08 Add authsecret aidl hal sepolicy
avc: denied { read } for comm="android.hardwar" name="vndbinder" dev="binder" ino=6 scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { write } for comm="android.hardwar" name="vndbinder" dev="binder" ino=6 scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { open } for comm="android.hardwar" path="/dev/binderfs/vndbinder" dev="binder" ino=6 scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { ioctl } for comm="android.hardwar" path="/dev/binderfs/vndbinder" dev="binder" ino=6 ioctlcmd=0x6209 scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
 avc: denied { map } for comm="android.hardwar" path="/dev/binderfs/vndbinder" dev="binder" ino=6 scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { call } for comm="android.hardwar" scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:r:vndservicemanager:s0 tclass=binder permissive=1
avc: denied { call } for comm="android.hardwar" scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:r:servicemanager:s0 tclass=binder permissive=1
avc: denied { transfer } for comm="android.hardwar" scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:r:servicemanager:s0 tclass=binder permissive=1
avc: denied { call } for comm="binder:1286_7" scontext=u:r:system_server:s0 tcontext=u:r:hal_authsecret_citadel:s0 tclass=binder permissive=1
avc: denied { ioctl } for comm="android.hardwar" path="/dev/binderfs/vndbinder" dev="binder" ino=6 ioctlcmd=0x6201 scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { call } for comm="android.hardwar" scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:r:citadeld:s0 tclass=binder permissive=1
avc:  denied  { find } for pid=3023 uid=1064 name=android.hardware.citadel.ICitadeld scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:object_r:citadeld_service:s0 tclass=service_manager permissive=0

Bug: 244746589
Change-Id: I8d950329e057a2f806817384e6b00baf6f26efee
2022-09-13 15:52:31 +00:00
ChengYou Ho
9699b144cd Authsecret: install AIDL service
Bug: 244746589
Change-Id: Ie7c57d8a16b1146225d84f510ce7817c4b81e772
2022-09-12 04:07:54 +08:00
Adam Shih
33aa7718bc Move dauntless settings to gs-common
Bug: 242479757
Test: build pass on all Gchip devices
Change-Id: Idfd52a88a420f04169b273a1ef575f10b92874c1
2022-08-31 10:32:55 +08:00
Bob Badour
03c4764838 [LSC] Add LOCAL_LICENSE_KINDS to device/google/gs-common
Added SPDX-license-identifier-Apache-2.0 to:
  dauntless/Android.bp

Bug: 68860345
Bug: 151177513
Bug: 151953481

Test: m all
Change-Id: I6e23c3e322c881318a63134560e41cdebb435056
2022-08-25 11:18:17 -07:00
Adam Shih
d7aa396078 modularize gsc dump
Bug: 242479757
Test: do bugreport that has the same content as before
Change-Id: I4098775fb4b3f40167920354b2c361d801b11594
2022-08-24 02:39:51 +00:00