Commit graph

2829 commits

Author SHA1 Message Date
Android Build Coastguard Worker
fb8021ba67 Snap for 13025264 from 3f842350d7 to mainline-tzdata6-release
Change-Id: Iea561daccd5edf37d16abe72bd7312abfbdeaad2
2025-02-06 14:21:03 -08:00
Treehugger Robot
3f842350d7 Merge "Fix comment" into main 2025-02-06 09:19:33 -08:00
Charlie Lin
be9f4c732e Merge "Add astd sepolicy to gs-common for P26 factory builds" into main 2025-02-05 20:28:46 -08:00
Jaegeuk Kim
9409c3382e Fix comment
Bug: 378120929
Flag: build.RELEASE_PIXEL_VENDOR_INTELLIGENCE_AID
Change-Id: I20b1fb2eb21d0db63c69d9eb30e89b0a824540f8
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
2025-02-05 20:13:18 -08:00
Martin Yan
8e57e75903 Merge "Adjust the version set in manifest xml and matrix xml" into main 2025-02-05 19:40:06 -08:00
Martin Yan
6e31d8db91 Adjust the version set in manifest xml and matrix xml
Bug: 361443653
Test: m and build pass
Flag: EXEMPT, this feature is related to CS which is controlled
      by com.android.bluetooth.flags.channel_sounding_in_stack
Change-Id: I2f2f46cfd15ce0104a6309c8032f7f4ef5ba267a
2025-02-05 09:00:52 +00:00
Treehugger Robot
340cf2f377 Merge "display: add drm_atomic_state to debug-build bugreport" into main 2025-02-04 08:05:49 -08:00
Treehugger Robot
7196fcdb48 Merge changes Ia03cddd6,I8e174e37,I159f5bcf into main
* changes:
  Allow write for restorecon
  Dump F2FS disk_map and UFS phy version
  Fix UFS err_stats
2025-02-03 08:58:52 -08:00
Charlie Lin
7f468a902f Add astd sepolicy to gs-common for P26 factory builds
Bug: 391090956
Bug: 393999182
Flag: EXEMPT bugFix
Test: Compile successful.
Change-Id: Idfcbf96a52326b613684b680676f5213136f2326
2025-02-03 11:13:52 +00:00
Dinesh Yadav
25b66183cf Allow tachyon service to make binder calls to gca
This permission is needed for tachyon service to call callbacks shared by clients of gxp/edgetpu device for tensor G5. As tachyon is present in pixel 6 where google_camera_app is not defined, I need to assign it here.

AVC Error seen when tachyon tries accessing GCA:
01-22 11:40:03.212  6987  6987 W com.google.edge: type=1400 audit(0.0:17): avc:  denied  { call } for  scontext=u:r:edgetpu_tachyon_server:s0 tcontext=u:r:google_camera_app:s0:c145,c256,c512,c768 tclass=binder permissive=0
01-23 07:12:26.424  4166  4166 W com.google.edge: type=1400 audit(0.0:254): avc:  denied  { call } for  scontext=u:r:edgetpu_tachyon_server:s0 tcontext=u:r:debug_camera_app:s0:c67,c257,c512,c768 tclass=binder permissive=0

Bug:391537620
Flag: EXEMPT updates device sepolicy only
Change-Id: I9dd78bd941b0de9057606409fd18632cc76f56b0
2025-02-02 20:02:52 -08:00
Taylor Nelms
7cbab2dea5 display: add drm_atomic_state to debug-build bugreport
AVC Error Log Justification:
[  157.933663] type=1400 audit(1738255720.900:459): avc:  denied  { read } for  comm="dump_pixel_disp" name="state" dev="debugfs" ino=105961 scontext=u:r:dump_pixel_display:s0 tcontext=u:object_r:debugfs:s0 tclass=file permissive=0

Bug: 393355365
Test: `adb bugreport`, check for "DRM State" entry
Flag: EXEMPT bugfix
Change-Id: Ibbf3fe022863644ecc137ab28d3a2409e701e104
Signed-off-by: Taylor Nelms <tknelms@google.com>
2025-01-30 11:50:13 -05:00
Qais Yousef
5201b55858 init.pixel-perf.rc: Setup default rampup multiplier and util_est
Bug: 335874870
Flag: EXEMPT not supported for init.rc files
Signed-off-by: Qais Yousef <qyousef@google.com>
Change-Id: I41f1235e8c6f1ec57af3962c2a6cbc9707444917
2025-01-28 17:45:04 +00:00
Piotr Klasa
5262751145 Merge "move common init perf settings to gs_common" into main 2025-01-28 03:12:07 -08:00
Jaegeuk Kim
b1072785ba Allow write for restorecon
[ 8345.125689] type=1400 audit(1737841652.160:245): avc:  denied  { write } for  comm="kworker/u16:2" path="/dev/block/sda34" dev="tmpfs" ino=1060 scontext=u:r:kernel:s0 tcontext=u:object_r:userdata_exp_block_device:s0 tclass=blk_file permissive=0

Bug: 361093433
Flag: EXEMPT bugfix
Change-Id: Ia03cddd6eebe9b8875bdbd1a8eb3a67f51269032
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
2025-01-25 16:27:47 -08:00
Jaegeuk Kim
7bd70d06d7 Dump F2FS disk_map and UFS phy version
[   91.358748] type=1400 audit(1737771651.492:274): avc:  denied  { search } for  comm="dump_storage" name="f2fs" dev="proc" ino=4026532053 scontext=u:r:dump_storage:s0 tcontext=u:object_r:proc_f2fs:s0 tclass=dir permissive=0
[   49.564560] type=1400 audit(1737778106.496:153): avc:  denied  { read } for  comm="dump_storage" name="f2fs" dev="proc" ino=4026532053 scontext=u:r:dump_storage:s0 tcontext=u:object_r:proc_f2fs:s0 tclass=dir permissive=0
[   91.358930] type=1400 audit(1737771651.492:275): avc:  denied  { read } for  comm="dump_storage" name="phy_version" dev="sysfs" ino=109125 scontext=u:r:dump_storage:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
[   91.359249] type=1400 audit(1737771651.492:276): avc:  denied  { read } for  comm="dump_storage" name="phy_release_date" dev="sysfs" ino=109126 scontext=u:r:dump_storage:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 392193452
Flag: EXEMPT bugfix
Change-Id: I8e174e378064a94681f74a88ee13b4461527076a
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
2025-01-24 20:28:24 -08:00
Jaegeuk Kim
6151bff500 Fix UFS err_stats
Bug: 392193452
Change-Id: I159f5bcfb8de1b33f46ba860b4436d1dfc6907f2
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
2025-01-24 20:21:06 -08:00
Treehugger Robot
861f6bcf77 Merge "Revert "Set up access control rule for aocxd"" into main 2025-01-24 02:32:27 -08:00
Jaegeuk Kim
f329ce7a91 Fix selinux permission denials
[    9.280675] type=1400 audit(1737659534.344:11): avc:  denied  { mounton } for  comm="init" path="/data/vendor/intelligence" dev="dm-59" ino=490 scontext=u:r:init:s0 tcontext=u:object_r:intelligence_data_file:s0 tclass=dir permissive=0

Bug: 391452461
Flag: EXEMPT bugfix
Change-Id: I355c61bd2c5bb5af6d463cf84a3fc80093b16550
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
2025-01-23 17:15:16 -08:00
Piotr Klasa
924237f464 move common init perf settings to gs_common
compared to ag/31352563 I did not transfer the settings for "write /sys/devices/system/cpu/cpuidle/current_governor teo", which caused the problem

Test: Verified if all values ​​of transferred settings are as they should be after rebooting the device, and and checked that there are no new selinux errors for hal_power_default, verified all metrics that caused power regression in the previous commit on abtd

Bug: 335874870

Flag: EXEMPT not supported by this component yet
Change-Id: If340ce8e8d3f3493045077470f8aa5560f9b313e
2025-01-23 03:35:46 -08:00
Zheng Pan
728e059b69 Revert "Set up access control rule for aocxd"
Revert submission 31133794-aocx_sepolicy

Reason for revert: http://b/391697603 build break

Reverted changes: /q/submissionid:31133794-aocx_sepolicy

Change-Id: I602d3ba880931a045146f216075f7baca513f0f3
2025-01-22 14:59:23 -08:00
Treehugger Robot
55c62e18d3 Merge "16KB: Move CopyEfsTest to device/google/gs-common" into main 2025-01-22 11:34:44 -08:00
Vilas Bhat
a61947b1c5 16KB: Move CopyEfsTest to device/google/gs-common
Additional changes
1. Android.bp lint/formatting error was resolved.
2. The regex pattern on line 78 in CopyEfsTest.java:
"line.split("(?<![\\\\])\s+")" was updated to
"line.split("(?<![\\\\])\\s+")" to resolve a presubmit error as \s is a
special character in Java.
(see https://errorprone.info/bugpattern/MisleadingEscapedSpace)

Bug: 390502355
Test: atest CopyEfsTest for Pixel 8 & 9 targets
Flag: EXEMPT bugfix
Change-Id: Iebcda9859666ff595b50b8105b7e841591ba3c67
2025-01-22 18:00:37 +00:00
Martin Yan
8d6007f19c Merge "Revert^2 "Add Bluetooth extension HAL - CCO"" into main 2025-01-21 05:30:12 -08:00
Jerry Pai
894727003b Revert^2 "Add Bluetooth extension HAL - CCO"
This reverts commit 3e78c36e5f.

Reason for revert: build break
ERROR: files are incompatible: The following instances are in the device manifest but not specified in framework compatibility matrix: 
    vendor.google.bluetooth_ext.IBluetoothCco/default (@1)

Bug: 361443653
Change-Id: I59f325ad1d8af5fca54cc9bb8a6208c5c8c20939
2025-01-21 01:57:41 -08:00
Piotr Klasa
79b5c54ba8 Merge "Revert "move common init perf settings to gs_common"" into main 2025-01-21 01:27:07 -08:00
Enzo Liao
763de77705 Merge "RamdumpService: Fix the SELinux errors from introducing Firebase Analytics." into main 2025-01-21 00:34:02 -08:00
Martin Yan
d95ffea63b Merge "Revert "Add Bluetooth extension HAL - CCO"" into main 2025-01-20 22:36:41 -08:00
Treehugger Robot
6a42934470 Merge "gs-common: wlc: add tx update permission for hal_googlebattery" into main 2025-01-20 22:28:33 -08:00
Yi-Yo Chiang
2e8de0999f insmod-sh: Allow writing to kmsg am: 51357e0322 am: cbb2324f5d
Original change: https://android-review.googlesource.com/c/device/google/gs-common/+/3444122

Change-Id: Ib9cf4f6ab7267143ff445eaf30f798e55c584cdb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-01-20 21:43:41 -08:00
Yi-Yo Chiang
cbb2324f5d insmod-sh: Allow writing to kmsg am: 51357e0322
Original change: https://android-review.googlesource.com/c/device/google/gs-common/+/3444122

Change-Id: Ifb648b6ba43d4bc57a8846f3ebb1aaf878787bd7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-01-20 21:19:12 -08:00
YiKai Peng
9b6b7e35b9 gs-common: wlc: add tx update permission for hal_googlebattery
Bug: 391056983
Test: trigger tx fwupdate
Flag: vendor.google.wireless_charger.service.flags.enable_service
Change-Id: I66e5fe88d43b8e33e3548d642f7ba89d63c96051
Signed-off-by: YiKai Peng <kenpeng@google.com>
2025-01-20 21:13:46 -08:00
Martin Yan
3e78c36e5f Revert "Add Bluetooth extension HAL - CCO"
This reverts commit b25c089c59.

Reason for revert: For now, adding Cco results in VTS failed, need to modify the version as well. We'll modify both this CL and aidl version in xml after we enable Cco.

Bug: 361443653
Change-Id: Ib4f84c749f626d3274eba4ad63ecca366715d128
2025-01-20 19:15:40 -08:00
Randall Huang
6cda4c1c19 storage: fix userdata_exp.ai partition selinux error
avc:  denied  { write } for  comm="init" name="sda34" dev="tmpfs" ino=1296 scontext=u:r:init:s0 tcontext=u:object_r:userdata_exp_block_device:s0 tclass=blk_file permissive=1

Bug: 361093433
Test: boot without issue
Change-Id: I0c74eb19172f39c44fc2ca61ba0bb8e38c808556
Signed-off-by: Randall Huang <huangrandall@google.com>
2025-01-21 08:58:19 +08:00
Piotr Klasa
d88ced0ff8 Revert "move common init perf settings to gs_common"
Revert submission 31215196-move_common_init_perf_settings_to_gscommon

Reason for revert: Power Regression

Reverted changes: /q/submissionid:31215196-move_common_init_perf_settings_to_gscommon
Bug: 390502171
Change-Id: I9b11900fd61e7f7abae52597aef41f5ab3c8ebd0
2025-01-20 07:00:49 -08:00
Kai Hsieh
5468ea3a18 Merge "Add SEPolicy allowing GIA to communicate with Suez service" into main 2025-01-20 02:32:35 -08:00
Yi-Yo Chiang
51357e0322 insmod-sh: Allow writing to kmsg
modprobe would log errors to /dev/kmsg, need to explicit allow this.

```
avc:  denied  { write } for  comm="modprobe" name="kmsg" dev="tmpfs" ino=5 scontext=u:r:insmod-sh:s0 tcontext=u:object_r:kmsg_device:s0 tclass=chr_file permissive=0
```

Bug: 388717752
Test: DeviceBootTest#SELinuxUncheckedDenialBootTest
Change-Id: I49a3e6a9f76f20151034cb00f772247b0e9c668e
2025-01-20 01:34:42 -08:00
Enzo Liao
dc83bcf6a5 RamdumpService: Fix the SELinux errors from introducing Firebase Analytics.
Fix the SELinux errors from introducing Firebase Analytics (ag/30936923):
01-16 10:44:12.432 W/ScionFrontendAp( 4336): type=1400 audit(0.0:17): avc:  denied  { read } for name="PrebuiltGmsCoreNext_DynamiteLoader.apk" dev="dm-59" ino=7119 scontext=u:r:ramdump_app:s0:c18,c257,c512,c768 tcontext=u:object_r:privapp_data_file:s0:c512,c768 tclass=lnk_file permissive=0 bug=b/385858590 app=com.android.ramdump
01-20 15:41:03.180 10754-10754 W/ScionFrontendAp: type=1400 audit(0.0:342): avc:  denied  { execute } for  path="/data/user_de/10/com.google.android.gms/app_chimera/m/00000067/oat/arm64/PrebuiltGmsCoreNext_DynamiteLoader.odex" dev="dm-54" ino=80602 scontext=u:r:ramdump_app:s0:c13,c257,c522,c768 tcontext=u:object_r:privapp_data_file:s0:c522,c768 tclass=file permissive=0

Bug: 386149375
Flag: EXEMPT bugfix
Change-Id: Ia10a5585ebc8f4e895d4dc6ecf0d8cd4dc727ac8
2025-01-20 17:03:50 +08:00
Bowen Lai
f23d87650d Merge "Set up access control rule for aocxd" into main 2025-01-19 19:15:30 -08:00
Hyungwoo Yang
3d542c3f96 Fix version mismatch in vintf manifest file
vintf manifest version doesn't match with acutal implementation.

Bug: 390520103
Test: atest vts_treble_vintf_vendor_test
Flag: EXEMPT vintf manifest version change

Change-Id: I25f77dcb6e2a344e44560ee9bcd408d650d7ae27
Signed-off-by: Hyungwoo Yang <hyungwooyang@google.com>
2025-01-19 22:21:10 +00:00
Vilas Bhat
fe6e700db0 Merge "Revert "Revert "16KB: Move copy_efs_file_to_data script to gs-co..."" into main 2025-01-17 11:04:09 -08:00
Ocean Chen
c8609b7e8b gs-common: add pixelstats-vendor package and sepolicy
This commit adds the `pixelstats-vendor` package to the build
`BOARD_SEPOLICY_DIRS` to include the corresponding sepolicy rules.

Bug: 374323691
Test: forrest build
Flag: EXEMPT refactor
Change-Id: If85375f9ad3a1cb7f6301f9ad4c94f14ac8dc54e
2025-01-16 23:32:01 -08:00
YiKai Peng
59befd3c7f Merge "gs-common: wlc: update compatibility matrix" into main 2025-01-16 17:51:31 -08:00
Vilas Bhat
0ec2cdae26 Revert "Revert "16KB: Move copy_efs_file_to_data script to gs-co..."
Revert submission 31345232-revert-31155502-move_copy_efs_script-IXYVMGOHBR

Reason for revert: Re-submitting with fix for breaking target

Reverted changes: /q/submissionid:31345232-revert-31155502-move_copy_efs_script-IXYVMGOHBR

Bug: 383151792
Flag: EXEMPT bugfix
Change-Id: I6ae4d5f26325e0cf732792483e056132226633e2
2025-01-16 17:09:09 -08:00
Priyanka Advani (xWF)
58410cd87d Merge "Revert "16KB: Move copy_efs_file_to_data script to gs-common"" into main 2025-01-16 16:59:51 -08:00
Priyanka Advani (xWF)
0594fa2887 Revert "16KB: Move copy_efs_file_to_data script to gs-common"
Revert submission 31155502-move_copy_efs_script

Reason for revert: Droidmonitor created revert due to b/390502519. Will be verifying through ABTD before submission.

Reverted changes: /q/submissionid:31155502-move_copy_efs_script

Change-Id: Iba1b7ffca817e2750481f44c86a38b083b795353
2025-01-16 16:50:41 -08:00
Vilas Bhat
dcadf3aed6 Merge "16KB: Move copy_efs_file_to_data script to gs-common" into main 2025-01-16 16:30:54 -08:00
Vilas Bhat
23425fbc54 16KB: Move copy_efs_file_to_data script to gs-common
There are 4 partitions that are flashed at the factory and use F2FS
fs with 4KB block size:

- /dev/block/by-name/efs
- /dev/block/by-name/efs_backup
- /dev/block/by-name/modem_userdata
- /dev/block/by-name/persist

These partitions can NOT be mounted by 16KB kernels because F2FS
expects BLOCK_SIZE == PAGE_SIZE.

In order for the files in these partitions to be accessible to 16KB
kernels, the dump.f2fs tool is used.

This change will perform these steps at boot time ONLY for 16KB mode.
For every partition (efs/efs_backup/modem_userdata/persist):

1. Use dump.f2fs to copy the content of the partition
   to /data/vendor/copied/<partition name>.img.
2. If the copy was succesfull, rename /data/vendor/copied/<partition
   name>.img to /data/vendor/copied/<partition name>
3. fsync the content of the directory /data/vendor/copied/<partition
   name>.

After the content of the partitions is in /data/vendor/copied,
bind-mount the partitions to the directory /mnt/vendor. See
conf/fstab.efs.from_data.

Note: This change ONLY applies to 16KB kernels. This change does not
modify the original partitions.

Test: Boot test and Enable16kbTest for Pixel 8 & Pixel 9 targets
      Fingerprint and Phone Calls work in 16KB mode
Bug: 383151792
Flag: EXEMPT bugfix
Change-Id: Ib67fd8678f8bd97bd50663657046c28137bd4435
2025-01-16 13:45:48 -08:00
YiKai Peng
ed91971d1a gs-common: wlc: update compatibility matrix
Bug: 375156879
Test: Manual
Flag: EXEMPT HAL interface change
Change-Id: I446505624af157d7e723b7ba0203d51b5529b8d1
Signed-off-by: YiKai Peng <kenpeng@google.com>
2025-01-16 03:07:38 -08:00
Piotr Klasa
cf818e3bc5 Merge "move common init perf settings to gs_common" into main 2025-01-16 01:38:35 -08:00
Bowen Lai
cb1a8297c3 Set up access control rule for aocxd
avc:
12-25 14:34:43.292  root  7005  7005 W binder:7005_1: type=1400 audit(0.0:23): avc:  denied  { call } for  scontext=u:r:aocxd:s0 tcontext=u:r:aocxdallowdomain:s0:c512,c768 tclass=binder permissive=0
11-27 14:56:33.645  1000   422   422 E SELinux : avc:  denied  { find } for pid=7360 uid=10267 name=aocx.IAocx/default scontext=u:r:aocxdallowdomain:s0:c512,c768 tcontext=u:object_r:aocx:s0 tclass=service_manager permissive=0

Test: make -j64
Bug: 385663354
Flag: EXEMPT bugfix
Change-Id: I7888e89710cfb671fb26180f8b2bc3152e1ced89
2025-01-15 23:39:08 -08:00