Commit graph

2706 commits

Author SHA1 Message Date
Todd Poynor
4b68ad6e8d sepolicy: edgetpu: add debugfs contexts
Add vendor_edgetpu_debugfs contexts for dumpstate dump_tpu.sh access.

Bug: 349699101
Test: adb bugreport, check dumpstate_board.txt
Flag: NONE dumpstate support bundled with device
Change-Id: I42b7eb2391c42323c7da0b544402e9a08b9d56f3
Signed-off-by: Todd Poynor <toddpoynor@google.com>
2024-12-20 01:27:48 +00:00
Richard Chang
e67bff18e9 Merge "sepolicy: update init.te for zram device" into main 2024-12-16 17:34:47 -08:00
Minche Li
a12a209a03 Merge "Updates TTS voice packs in gs-common 202412" into main 2024-12-16 02:34:58 -08:00
Richard Chang
cf29787f8d sepolicy: update init.te for zram device
Sync patch from zuma: ag/21578379, but move to gs-common.

Avc denied log:
avc:  denied  { write } for  comm="init" name="zram0" dev="tmpfs" ino=1306 scontext=u:r:init:s0 tcontext=u:object_r:ram_device:s0 tclass=blk_file permissive=1

Verify on PBuilds:
https://android-build.corp.google.com/abtd/run/L32800030008398424/

Bug: 370643878
Test: Boot and check avc denied logs
Flag: EXEMPT sepolicy
Change-Id: I90ea0b248835fa51fe07cfa23e5f819fd8422c08
2024-12-16 01:32:02 -08:00
Xiaofan Jiang
da6c722022 Merge "modem_uart: add modem uart log to bugreport" into main 2024-12-14 00:08:31 -08:00
Xin Li
aa687b7c4c [automerger skipped] Merge 24Q4 into AOSP main am: b61a4f4345 -s ours am: 261899fc1b -s ours
am skip reason: Merged-In I96f429ec3284114868ad220ea308a6920930c065 with SHA-1 421324351c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs-common/+/29954999

Change-Id: I461895b52139d919f3bdc7b4475e117e110cb816
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-13 21:45:19 -08:00
Xin Li
261899fc1b [automerger skipped] Merge 24Q4 into AOSP main am: b61a4f4345 -s ours
am skip reason: Merged-In I96f429ec3284114868ad220ea308a6920930c065 with SHA-1 421324351c is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs-common/+/3413779

Change-Id: Ia0e940e4a7404c36f40cfb677226e1fe508951c6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-13 18:51:51 -08:00
Xin Li
b61a4f4345 Merge 24Q4 into AOSP main
Bug: 370570306
Merged-In: I96f429ec3284114868ad220ea308a6920930c065
Change-Id: I8967334343407bc9eab73bb0ade0b939e3aa7873
2024-12-13 11:15:09 -08:00
Kieran Cyphus
d2295d66e6 Merge "pms: Create mk file in gs-common" into main 2024-12-13 00:41:27 -08:00
kierancyphus
9a52810bab pms: Create mk file in gs-common
Bug: 382192979

Test: ran abtd test with both git_main and git_main-without-vendor
Flag: EXEMPT Cannot flag mk file changes
Change-Id: Ic7fc13ad191abb1147f35d8d4bd1fd02dc56e772
2024-12-13 10:27:37 +08:00
mincheli
ae9ffbc0b3 Updates TTS voice packs in gs-common 202412
ag/30871748 updates GoogleTTS.
So preloaded TTS voice packs should be also updated.

And see doc, Preload Google Text-to-Speech (TTS) Voice Packs:
The voice packs are dowloanded follow the steps.

Flag: EXEMPT update preloaded files
Bug: 333626474
Test: build passed and manual test
Change-Id: I982df07d49c4be47e819ebe561d5d53212c40b32
2024-12-13 00:27:55 +00:00
Treehugger Robot
5a51adbdd3 Merge "allow power hal to access vendor_mm files" into main 2024-12-12 15:11:48 -08:00
Martin Liu
437d35e7cb allow power hal to access vendor_mm files
I auditd  : type=1400 audit(0.0:79): avc:  denied  { write } for  comm="NodeLooperThrea" name="vendor_mm" dev="sysfs" ino=56518 scontext=u:r:hal_power_default:s0 tcontext=u:object_r:sysfs_vendor_mm:s0 tclass=dir permissive=0

Bug: 357995885
Test: check avc error
Flag: EXEMPT adding avc rule
Change-Id: I1261aa14f2cd912ede51edc2e1a547d2e182ca46
Signed-off-by: Martin Liu <liumartin@google.com>
2024-12-12 13:38:20 +00:00
Xiaofan Jiang
e319e6c3e4 modem_uart: add modem uart log to bugreport
Bug: 353397822

Flag: NONE, config
Change-Id: I9668f70859796ca4475dfa0456a955ac3a7ada5d
2024-12-11 18:40:52 -08:00
Piotr Klasa
78f0d4c8e6 Move all vendor_sched parameters and permissions to init.pixel.perf.rc
Bug: 335874870
Test: Checked that permissions and values ​​for all affected files are correct (ls -l, cat)
Flag: EXEMPT not supported by this component yet

Change-Id: Ia6dedcb49534d6be9007addca0d8d1080f219315
2024-12-11 06:35:06 -08:00
Joe Tessler
737725ba27 Support IAudioExtension AIDL v4 and v5
We unfroze the v4 IAudioExtension AIDL API and modified it in
ag/30424231 and incremented the version to v5 in ag/30702418 to fix the
tests. This broke the -next builds, which expected the previously frozen
version (v4).

This change modifies the compatibility matrix to support both v4 and v5.
This fixes both the local tests and -next builds.

Bug: 378303588
Bug: 383213634
Test: atest vts_treble_vintf_vendor_test
Flag: vendor.google.whitechapel.audio.flags.enable_always_available_display
Change-Id: I467434ccb41ab71dc1b230e64dc09fc0959a8b8a
2024-12-10 04:15:21 +00:00
Joe Tessler
7ee457daf9 Merge "Update IAudioExtension AIDL to v5" into main 2024-12-10 02:56:27 +00:00
Dmitry Skiba
ae00670e9c Merge "Reapply "Add amm experiment."" into main 2024-12-09 23:57:53 +00:00
Dmitry Skiba
c0ac52ad63 Reapply "Add amm experiment."
See go/pixel-perf-amm-experiment for more info.

(This change is a reland of ag/30770395 after fixing issues that caused a revert.)

Bug: 365855872
Test: build/flash; set .Perf__amm_experiment=true, observe auto_migration_margins_enable value changing 1->0; set .Perf__amm_experiment="", observe the value changing 0->1
Flag: NONE controlled by Mendel instead
Change-Id: I833ea7cd104b95abf80f2286e91f96a102d8086a
Signed-off-by: Dmitry Skiba <dskiba@google.com>
2024-12-09 18:20:00 +00:00
Chintan Pandya
db9f7e0d38 Merge "Reduce the trace instance irq_gia_google's buffer size" into main 2024-12-09 17:24:41 +00:00
Treehugger Robot
fbe4a4f483 Merge "storage: add missing bug_map" into main 2024-12-09 17:05:38 +00:00
Eileen Lai
37bd9aa71e Merge changes from topic "move_shared_modem_platform_sepolicy" into main
* changes:
  modem_svc: add modem_svc_sit to solve sepolicy conflicts arising from different device versions
  modem_svc: move shared_modem_platform related sepolicy to gs-common
2024-12-09 15:09:36 +00:00
Satish Yalla
b09df07b37 Merge "Revert "Add amm experiment."" into main 2024-12-09 07:25:12 +00:00
Satish Yalla
92b52953a3 Revert "Add amm experiment."
This reverts commit 842b86dcc1.

Reason for revert: DroidMonitor created revert due to b/382821677. Will be verified through ABTD for standard investigation.

Change-Id: I5b0d026155c2acb0d117aad7249592fc3fa72d61
2024-12-09 02:15:16 +00:00
Treehugger Robot
81762fe218 Merge "Add amm experiment." into main 2024-12-07 07:52:05 +00:00
Wei Wang
b848040c01 Merge "Add Proc Vendor Sched Sepolicy Fix" into main 2024-12-07 06:21:53 +00:00
Chintan Pandya
f94206fea7 Reduce the trace instance irq_gia_google's buffer size
Bug: 382283364
Test: Verified that trace buffer size reduced.
Flag: EXEMPT, init rc change to reduce trace buffer size
Change-Id: I8bf50ac8fa3cff263592b3eca1a6b72a20b2b129
Signed-off-by: Chintan Pandya <chintanpandya@google.com>
2024-12-06 23:10:45 +00:00
Chintan Pandya
68a7a49504 Merge "Remove code that just re-enables IRQ and GIA events" into main 2024-12-06 23:10:12 +00:00
Chintan Pandya
2d6b42c487 Remove code that just re-enables IRQ and GIA events
These events are already enabled from kernel.

Bug: 378928822
Test: Verified that trace functionality works as expected.
Flag: EXEMPT, just a clean up in init rc
Change-Id: I9e50e3d86e914b0db8633a1ae7287875b4df9838
Signed-off-by: Chintan Pandya <chintanpandya@google.com>
2024-12-06 23:08:30 +00:00
Dmitry Skiba
842b86dcc1 Add amm experiment.
See go/pixel-perf-amm-experiment for more info.

Bug: 365855872
Test: build/flash; set .Perf__amm_experiment=true, observe auto_migration_margins_enable value changing 1->0; set .Perf__amm_experiment="", observe the value changing 0->1
Flag: NONE controlled by Mendel instead
Change-Id: I02b98e3601a0564929acb73250e2e943664bc80a
Signed-off-by: Dmitry Skiba <dskiba@google.com>
2024-12-06 22:15:49 +00:00
Jaegeuk Kim
9e1cdbc471 storage: add missing bug_map
The warning is WAI, so make a correct report.

[   11.777638] [  T374] type=1400 audit(1733512828.220:561): avc:  denied  { open } for  comm="getprop" path="/dev/__properties__/u:object_r:vendor_intelligence_prop:s0" dev="tmpfs" ino=436 scontext=u:r:shell:s0 tcontext=u:object_r:vendor_intelligence_prop:s0 tclass=file permissive=1

w/

[   10.560345] [  T376] type=1400 audit(1733515761.004:342): avc:  denied  { open } for  comm="getprop" path="/dev/__properties__/u:object_r:vendor_intelligence_prop:s0" dev="tmpfs" ino=436 scontext=u:r:shell:s0 tcontext=u:object_r:vendor_intelligence_prop:s0 tclass=file permissive=1 bug=b/378120929

Bug: 378120929
Flag: EXEMPT bugfix
Change-Id: Ia158d71c43e6006ee86a227b5a083bc27230ef71
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
2024-12-06 12:16:14 -08:00
Dmitry Skiba
d5909db27f Add apf experiment.
See go/pixel-perf-apf-experiment for more info.

Bug: 365855872
Test: build/flash, set .Perf__apf_experiment=true and observe vendor.powerhal.apf_enabled=false, .apf_disabled=true
Flag: NONE controlled by Mendel instead
Change-Id: Iee32c4b160d5013fbbd893765d3df54c1befa458
Signed-off-by: Dmitry Skiba <dskiba@google.com>
2024-12-06 17:59:11 +00:00
Eileen Lai
8112ee64cc modem_svc: add modem_svc_sit to solve sepolicy conflicts arising from different device versions
Add modem_svc_sit to gs-common. modem_svc_sit will support devices from gs101 to zuma_pro. The shared_modem_platform will be updated to support devices after zumapro (not include).

Bug: 372400955

Flag: NONE local testing only
Change-Id: I0bcc9baf69045327e6fcca92ab8003e303db2649
2024-12-06 12:49:05 +00:00
Treehugger Robot
c38d34d5e2 Merge "Add Intelligence rc" into main 2024-12-06 10:23:48 +00:00
Eileen Lai
2833eecc49 modem_svc: move shared_modem_platform related sepolicy to gs-common
Bug: 372400955

Change-Id: I8b08e5b7789a5b2bf027deed0afc97f87ca25f3f
Flag: NONE local testing only
2024-12-06 10:15:18 +00:00
Jaegeuk Kim
3bcf1e5891 Add Intelligence rc
By persist.vendor.intelligence,

 # on  -> mount(ok)    -> on
 # off -> write_zeroes -> remove -> rm(ok) -> disable
 # on  -> mount(fail)  -> remove -> rm(ok) -> disable

For SEpolicy,

type=1400 audit(1731445557.444:32): avc:  denied  { read } for  comm="kworker/u16:3" path="/dev/block/sda33" dev="tmpfs" ino=1050 scontext=u:r:kernel:s0 tcontext=u:object_r:userdata_exp_block_device:s0 tclass=blk_file permissive=1

type=1400 audit(1731445557.476:33): avc:  denied  { execute_no_trans } for  comm="storage_intelli" path="/vendor/bin/toolbox" dev="dm-11" ino=368 scontext=u:r:storage_intelligence:s0 tcontext=u:object_r:vendor_toolbox_exec:s0 tclass=file permissive=1

type=1400 audit(1731448933.292:16): avc:  denied  { search } for  comm="dd" name="block" dev="tmpfs" ino=12 scontext=u:r:storage_intelligence:s0 tcontext=u:object_r:block_device:s0 tclass=dir permissive=1

type=1400 audit(1731461590.844:16): avc:  denied  { write } for  comm="dd" name="sda33" dev="tmpfs" ino=1052 scontext=u:r:storage_intelligence:s0 tcontext=u:object_r:userdata_exp_block_device:s0 tclass=blk_file permissive=1
type=1400 audit(1731461590.844:17): avc:  denied  { open } for  comm="dd" path="/dev/block/sda33" dev="tmpfs" ino=1052 scontext=u:r:storage_intelligence:s0 tcontext=u:object_r:userdata_exp_block_device:s0 tclass=blk_file permissive=1

Bug: 378120929
Flag: build.RELEASE_PIXEL_VENDOR_INTELLIGENCE_AID
Change-Id: If9d2f067e29b6c574d3b827ea509fec92c6d8028
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
2024-12-05 19:31:26 -08:00
Treehugger Robot
2021b27dcc Merge "Always include camera calibration tools in debug builds." into main 2024-12-05 23:13:29 +00:00
Krzysztof Kosiński
f7eae2a946 Always include camera calibration tools in debug builds.
These statements will be ignored if the packages are
unavailable, such as in the PDK build.

Bug: 380373922
Test: presubmit, check that tools exist in husky-userdebug
Flag: EXEMPT debug-only tool
Change-Id: Id3a524a6adaf1f719a23eb91ebad161ce0551af4
2024-12-05 20:11:21 +00:00
Dmitry Skiba
4250b91047 Add kswapd experiment.
See go/pixel-perf-25q1-experiments for the info.

Bug: 365855872
Test: build/flash, set .Perf__experiments_delay_seconds=0, set .Perf__kswapd_experiment=true, observe /sys/kernel/vendor_mm/kswapd_cpu_affinity changes
Flag: NONE controlled by Mendel instead
Change-Id: Id63690f0dcd38de92e4c2fde5b0ab814ed3d9db1
Signed-off-by: Dmitry Skiba <dskiba@google.com>
2024-12-05 17:59:34 +00:00
Dmitry Skiba
d530f11290 Merge "Add recovery support for perf experiments." into main 2024-12-05 17:35:19 +00:00
Piotr Klasa
2c41fdac32 Add Proc Vendor Sched Sepolicy Fix
Bug: 361092565

Test: m atest && atest-dev com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Test: adb shell dmesg | grep proc_vendor_sched ; adb logcat -d | grep proc_vendor_sched

Evidences

12-02 19:31:34.952   279   279 W init    : type=1400 audit(0.0:7): avc:  denied  { associate } for  name="uclamp_min" scontext=u:object_r:proc_vendor_sched:s0 tcontext=u:object_r:proc:s0 tclass=filesystem permissive=0
12-02 19:31:34.956   279   279 W init    : type=1400 audit(0.0:8): avc:  denied  { associate } for  name="prefer_idle" scontext=u:object_r:proc_vendor_sched:s0 tcontext=u:object_r:proc:s0 tclass=filesystem permissive=0
12-02 19:31:34.956   279   279 W init    : type=1400 audit(0.0:9): avc:  denied  { associate } for  name="uclamp_min" scontext=u:object_r:proc_vendor_sched:s0 tcontext=u:object_r:proc:s0 tclass=filesystem permissive=0
12-02 19:31:34.956   279   279 W init    : type=1400 audit(0.0:10): avc:  denied  { associate } for  name="prefer_idle" scontext=u:object_r:proc_vendor_sched:s0 tcontext=u:object_r:proc:s0 tclass=filesystem permissive=0
12-02 19:31:34.956   279   279 W init    : type=1400 audit(0.0:11): avc:  denied  { associate } for  name="uclamp_min" scontext=u:object_r:proc_vendor_sched:s0 tcontext=u:object_r:proc:s0 tclass=filesystem permissive=0
12-02 19:31:34.956   279   279 W init    : type=1400 audit(0.0:12): avc:  denied  { associate } for  name="prefer_idle" scontext=u:object_r:proc_vendor_sched:s0 tcontext=u:object_r:proc:s0 tclass=filesystem permissive=0
12-02 19:31:34.960   279   279 W init    : type=1400 audit(0.0:13): avc:  denied  { associate } for  name="prefer_idle" scontext=u:object_r:proc_vendor_sched:s0 tcontext=u:object_r:proc:s0 tclass=filesystem permissive=0
12-02 19:31:34.960   279   279 W init    : type=1400 audit(0.0:14): avc:  denied  { associate } for  name="uclamp_min" scontext=u:object_r:proc_vendor_sched:s0 tcontext=u:object_r:proc:s0 tclass=filesystem permissive=0
12-02 19:31:34.960   279   279 W init    : type=1400 audit(0.0:15): avc:  denied  { associate } for  name="prefer_idle" scontext=u:object_r:proc_vendor_sched:s0 tcontext=u:object_r:proc:s0 tclass=filesystem permissive=0
12-02 19:31:34.960   279   279 W init    : type=1400 audit(0.0:16): avc:  denied  { associate } for  name="uclamp_min" scontext=u:object_r:proc_vendor_sched:s0 tcontext=u:object_r:proc:s0 tclass=filesystem permissive=0

Flag: EXEMPT bugfix
Change-Id: Iad58e23abc1a7e27c3f5f4130e50d7e4aa0b6cf8
2024-12-05 12:05:19 +01:00
Dmitry Skiba
afc6c28401 Add recovery support for perf experiments.
This change establishes a place for perf experiments and adds a
script to delay experiments for recovery purposes. For more info
see go/pixel-perf-experiment-whatif.

Bug: 365855872
Test: build/flash, set .Perf__experiments_delay_seconds=10, verify that vendor.perf.allow_experiments=1 after 10 seconds
Flag: NONE controlled by Mendel instead
Change-Id: I78db482542066d5d5646d8c303dbe88054cfe66d
Signed-off-by: Dmitry Skiba <dskiba@google.com>
2024-12-05 09:07:27 +00:00
Dinesh Yadav
42fd113c8b Merge "Revert "Allow tachyon service to make binder calls to GCA"" into main 2024-12-05 08:11:09 +00:00
Dinesh Yadav
6711886008 Revert "Allow tachyon service to make binder calls to GCA"
This reverts commit 97f50223aa.

Reason for revert: This change breaks git_main-without-vendor  as google_camera_app & debug_camera_app are not supported in non-vendor builds.

Change-Id: I9bf47c59aa036caf66e2f3fe5d7b6ea0938e4442
2024-12-05 08:02:02 +00:00
Dinesh Yadav
9c65d0ceaa Merge "Allow tachyon service to make binder calls to GCA" into main 2024-12-05 06:02:06 +00:00
Joe Tessler
ae42297f0f Update IAudioExtension AIDL to v5
We unfroze the v4 IAudioExtension AIDL API and modified it in
ag/30424231, meaning we need to increment references AIDL version
elsewhere to take advantage of the new functionality (and to make tests
happy).

We will freeze the IAudioExtension AIDL API as v5 at a later date.

Bug: 378303588
Test: atest vts_treble_vintf_vendor_test
Flag: vendor.google.whitechapel.audio.flags.enable_always_available_display
Change-Id: I94434fcc2802c8759b59a0004aca1be603e7e88e
2024-12-05 04:27:25 +00:00
Bowen Lai
8a3ec83793 Merge "Rename aocx.IAoc to aocx.IAoc/default to support stable AIDL" into main 2024-12-05 03:05:46 +00:00
Xin Li
5f10a44aab [automerger skipped] Merge ab/AP4A.241205.013 into aosp-main-future am: c0a71b7d0e -s ours
am skip reason: Merged-In I96f429ec3284114868ad220ea308a6920930c065 with SHA-1 421324351c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs-common/+/30626201

Change-Id: I4eed38d9ea2b766b1e6312c4ac510fcb51ac4234
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-12-03 18:22:09 +00:00
Dinesh Yadav
97f50223aa Allow tachyon service to make binder calls to GCA
This permission is needed for tachyon service to call callbacks.

AVC Error seen when tachyon tries accessing GCA:
12-02 11:40:03.212  6987  6987 W com.google.edge: type=1400 audit(0.0:17): avc:  denied  { call } for  scontext=u:r:edgetpu_tachyon_server:s0 tcontext=u:r:google_camera_app:s0:c145,c256,c512,c768 tclass=binder permissive=0
12-03 07:12:26.424  4166  4166 W com.google.edge: type=1400 audit(0.0:254): avc:  denied  { call } for  scontext=u:r:edgetpu_tachyon_server:s0 tcontext=u:r:debug_camera_app:s0:c67,c257,c512,c768 tclass=binder permissive=0

Bug: 381787911
Flag: EXEMPT updates device sepolicy only
Change-Id: Id27ecd53e9ea7fbf273be098749cdaece55d00cb
2024-12-03 06:20:57 +00:00
Krzysztof Kosiński
5085275f71 Add libg3a logging initrc files.
These files are installed on the vendor partition regardless
of whether we use a prebuilt APEX or build it from source.

History links (Google internal only):
libg3a_gabc.rc: https://source.corp.google.com/h/googleplex-android/platform/superproject/main/+/main:vendor/google/camera/google_3a/libs_v4/gABC/libg3a_gabc.rc;drc=82654c90cc30d21948d0be24931edda10739caf0
libg3a_gaf.rc: https://source.corp.google.com/h/googleplex-android/platform/superproject/main/+/main:vendor/google/camera/google_3a/libs_v4/gAF/libg3a_gaf.rc;drc=1e01ef4606e8553866d803a30e4284485ff12741
libg3a_ghawb.rc: https://source.corp.google.com/h/googleplex-android/platform/superproject/main/+/main:vendor/google/camera/google_3a/libs_v4/gHAWB/libg3a_ghawb.rc;drc=82654c90cc30d21948d0be24931edda10739caf0

Bug: 380379803
Test: presubmit, check husky logs when prebuilt APEX is used
Flag: EXEMPT build system fix
Change-Id: I405c0e3ad78d63e3faee8723c2ba7ba7cf0dd6db
2024-12-02 20:42:13 +00:00