Commit graph

11223 commits

Author SHA1 Message Date
Adam Shih
1db99c759f allow vendor_init to set logpersist
Bug: 184093803
Test: boot with the permission error gone
03-31 11:11:19.447     1     1 E init    : Do not have permissions to
set ...

Change-Id: Idc4023b2fa1b04ae4a4b95a2e105700e89e9dffa
2021-03-31 11:34:12 +08:00
Erik Cheng
90ed4cc72e Merge "Grant permission for more camera device nodes" into sc-dev 2021-03-31 03:09:15 +00:00
Tai Kuo
c2cad5a155 dumpstate: check the correct bus force active command path am: 4c46bf699f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/14031646

Change-Id: I9d75afbe0b4bf9bbf45ffb94eb204bfbd54b5143
2021-03-31 03:02:54 +00:00
Tai Kuo
4c46bf699f dumpstate: check the correct bus force active command path
Bug: 183557468
Bug: 181833046
Bug: 182976988
Test: adb shell "lshal debug \
 android.hardware.dumpstate@1.0::IDumpstateDevice/default touch"
Signed-off-by: Tai Kuo <taikuo@google.com>
Change-Id: I447a267451f80ff0e5cdca321e08a2f8119e51ca
2021-03-31 02:20:54 +00:00
Maurice Lam
af24bc97cc Merge "Fix cuttlefish test fail due to sepolicy of Wirecutter" into sc-dev am: 6bc7204b64
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14039290

Change-Id: I9972e90b95ae9f74321f20a5ba18dcf9700958ab
2021-03-31 01:37:50 +00:00
Maurice Lam
6bc7204b64 Merge "Fix cuttlefish test fail due to sepolicy of Wirecutter" into sc-dev 2021-03-31 01:20:12 +00:00
TreeHugger Robot
5268d84b5d Merge "Allow mediacodec to access the vstream-secure DMA-BUF heap" into sc-dev am: a548cd7773
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14035947

Change-Id: Ibf371ed6a35555a222bc18c7121d93699730873a
2021-03-31 01:16:32 +00:00
Xu Han
d0a3644eaa Merge "Allow camera HAL access radioext service" into sc-dev am: f34ff90b48
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14025054

Change-Id: Ia978600ea310f05df3d4e3099e87f734ac59ab24
2021-03-31 01:16:18 +00:00
Eddie Tashjian
44799a27ba Add sepolicy for CBRS setup app.
Bug: 182519609
Test: Test CBRS setup
Change-Id: I3ee27dd80eb0484c9cf2c6be0c63aee996383f7f
2021-03-30 18:06:14 -07:00
TreeHugger Robot
a548cd7773 Merge "Allow mediacodec to access the vstream-secure DMA-BUF heap" into sc-dev 2021-03-31 01:05:14 +00:00
Xu Han
f34ff90b48 Merge "Allow camera HAL access radioext service" into sc-dev 2021-03-31 00:45:11 +00:00
Adam Shih
98d890424d update error on ROM
Bug: 184091381
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ia37d49cf2e347a22181058987b0edf8f93457c53
2021-03-31 08:32:56 +08:00
Anthony Han
ff6a71ae98 Enable Gralloc 4 am: ab130cecb4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13839150

Change-Id: Ia9c07973c306002e7e93420ed00254a779aeb689
2021-03-31 00:15:39 +00:00
Anthony Han
ab130cecb4 Enable Gralloc 4
Bug: 143246001
Test: build and flash, verify
1. Setup screen animation looks correct,
2. Camera app works including taking a photo and video,
3. Video playback works e.g. Youtube and Exoplayer,
4. CtsNativeHardwareTestCases,
5. VtsHalGraphicsMapperV4_0TargetTest.
Change-Id: Idc8abdf3fbc66afda6a4a706878ced48ba882c7f
2021-03-31 00:03:02 +00:00
Vova Sharaienko
535a8756eb Stats: removed extra dependencies after transition to AIDL version am: 2bd569d2fa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/14038492

Change-Id: Ia05fd64513f6ae93fcb6cf418573bad49ae5ae2c
2021-03-30 23:48:02 +00:00
Eddie Tashjian
fd3a304ec2 Merge "Allow radioext to access bluetooth coex hal." into sc-dev am: a5879bec5b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14020221

Change-Id: I76dbea4d35a134a2f32aeea963717f2620a864ac
2021-03-30 23:29:48 +00:00
Vova Sharaienko
2bd569d2fa Stats: removed extra dependencies after transition to AIDL version
Bug: 182352837
Bug: 178523659
Test: build, falsh & boot, showmap for pixelstats-vendor
Change-Id: I2eeaff18fb2bcd7d55f5bc0207169c9f38424023
2021-03-30 23:15:32 +00:00
Eddie Tashjian
a5879bec5b Merge "Allow radioext to access bluetooth coex hal." into sc-dev 2021-03-30 23:03:24 +00:00
Maurice Lam
880dd70064 Fix cuttlefish test fail due to sepolicy of Wirecutter
Need to grant gpu_device dir search permission to be able to render UI
on cuttlefish.

Fixes: 183995046
Test: atest WirecutterTests
Change-Id: I122e541188ce659381769339e3f9e6b720441a92
2021-03-30 22:18:45 +00:00
TreeHugger Robot
3bc4072b14 Merge "sepolicy: allow hwservice to see armnn nnhal." into sc-dev am: 8250408148
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14020212

Change-Id: I930d8db6e73fc5e3d1172ddb063c4f7aeed94c1c
2021-03-30 21:43:53 +00:00
TreeHugger Robot
8250408148 Merge "sepolicy: allow hwservice to see armnn nnhal." into sc-dev 2021-03-30 21:16:27 +00:00
Kevin DuBois
4f5d60403d sepolicy: allow hwservice to see armnn nnhal.
Allows hwservice to see armnn nnhal.

Fixes: 183917925
Test: build, check for absence of error msg in logcat.
Test: run_nnapi_tests for darwinn
Test: CtsNNAPITestCases64 --hal_service_instance=android.hardware.neuralnetworks@1.3::IDevice/google-edgetpu --gtest_filter="TestGenerated*"
Change-Id: I9778e92d6f15e9aa74774c6a8d143969951046eb
2021-03-30 19:58:52 +00:00
Hridya Valsaraju
ef8172c028 Allow mediacodec to access the vstream-secure DMA-BUF heap
This patch fixes the following denial:

avc: denied { read } for comm="HwBinder:727_3" name="vstream-secure"
dev="tmpfs" ino=693 scontext=u:r:mediacodec:s0
tcontext=u:object_r:dmabuf_system_secure_heap_device:s0 tclass=chr_file
permissive=0

Bug: 183681871
Test: build
Change-Id: I018a8d42afe2bb58416b47864b8ffd53de9292cb
2021-03-30 12:41:17 -07:00
Oleg Matcovschi
5debfd67eb Merge "gs101-sepolicy: add sscoredump" into sc-dev am: 20c4be9a06
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14035188

Change-Id: I9d5ee813005d868290310a6fba85930b40064db3
2021-03-30 18:26:15 +00:00
Xu Han
6932235e89 Allow camera HAL access radioext service
Camera needs to query radioext for preferred MIPI clock rate.

Bug: 178038924
Test: camera CTS
Change-Id: Id1dbe8a12d07b5ccfb4fc7db69dda7ce78a163a7
2021-03-30 11:15:44 -07:00
Oleg Matcovschi
20c4be9a06 Merge "gs101-sepolicy: add sscoredump" into sc-dev 2021-03-30 18:02:18 +00:00
Kai Shi
2dbd20f628 Remove Wifi link layer radio stats aggregation enable flag am: 1349e3e73b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/14024798

Change-Id: I1c9edf032e46816aa932a284e45018927c3d0679
2021-03-30 17:08:34 +00:00
Kai Shi
1349e3e73b Remove Wifi link layer radio stats aggregation enable flag
Remove the overriding since the aggregation of Wifi link layer radio stats from all radios is enabled by default.

Bug: 183991297
Test: manual test
Change-Id: I9c0f657a4c3bd6242722e751ab0f7c0b0734dd8e
2021-03-30 17:08:17 +00:00
Ankit Goyal
04b05f86bc Merge "Fix SELinux denials for arm.graphics AIDL interface" into sc-dev am: 4097aa96ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14026225

Change-Id: I5d43362df8360be6f37bce92123df0c00795feb6
2021-03-30 17:08:17 +00:00
Yu-Chi Cheng
755a1de452 Allowed EdgeTPU service and the EdgeTPU NNAPI hal to read /proc/version.
Both services invoke InitGoogle in order to use google utilities (e.g.
file).  Since InitGoogle reads the kernel info from /proc/version,
this change added the corresponding selinux rules to allow that.

Bug: 183935416
Test: tested on Oriole.
Change-Id: Icb8f3a57e249774b5fad3284413661b04ff7dae6
2021-03-30 10:07:43 -07:00
Adlai Holler
26cc4da6ac Enable skia reduceOpsTaskSplitting am: 0b9827eceb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/14035732

Change-Id: If3727dc16f9b20cc894e1031e5dccffea397a027
2021-03-30 17:00:49 +00:00
TreeHugger Robot
948fc1d359 Merge "vendor_init: allow set_prop for vendor_ro_config_default_prop" into sc-dev am: fd3d8c0467
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14025026

Change-Id: Ic26319bc3be5f80b249825f7b1f3abc0e04f63fe
2021-03-30 17:00:17 +00:00
Ankit Goyal
4097aa96ab Merge "Fix SELinux denials for arm.graphics AIDL interface" into sc-dev 2021-03-30 16:27:55 +00:00
TreeHugger Robot
fd3d8c0467 Merge "vendor_init: allow set_prop for vendor_ro_config_default_prop" into sc-dev 2021-03-30 16:06:04 +00:00
Oleg Matcovschi
de30c53177 gs101-sepolicy: add sscoredump
Bug: 183995288
Change-Id: I5363d0c45c183d809c03fe755835c1fc95a33159
2021-03-30 15:31:10 +00:00
Adlai Holler
0b9827eceb Enable skia reduceOpsTaskSplitting
Bug: 183612348
Change-Id: I77a82021335ce535ad5199edd6f0ec2bbcda1ff8
2021-03-30 15:25:44 +00:00
Ankit Goyal
b07d84f087 Fix SELinux denials for arm.graphics AIDL interface
Denial example:
03-30 05:44:44.468   490   490 W RenderEngine: type=1400 audit(0.0:4): avc: denied { read } for name="arm.graphics-V1-ndk_platform.so" dev="dm-9" ino=1923 scontext=u:r:surfaceflinger:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0

Bug: 143246001
Test: Build and boot to home
Change-Id: Id7c2bd98aa634f852a21812fb2421a2e96ef7636
2021-03-30 22:22:22 +08:00
tangrobin
4f5f437a0f Enable EXPENSIVE_RENDERING power hint am: ea12333375
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13872265

Change-Id: I373c3b78e4b8455117959af69b47b51cff159a2e
2021-03-30 10:02:21 +00:00
Erik Cheng
5f6e263527 Grant permission for more camera device nodes
Bug: 184004655
Test: aosp camera
Change-Id: I52fdb3f7f3d37537461c94b139e72add1a300bb2
2021-03-30 17:34:38 +08:00
tangrobin
ea12333375 Enable EXPENSIVE_RENDERING power hint
GPU takes long time (>8ms) when app launch animation and some pip case.
When doing animation, GPU needs to handle some heavy tasks like color
conversion, app rounded corner. Enable the expensive rendering hint to
raise the gpu frequency to avoid frame drop due to long gpu completion.

Bug: 179007786
Test: 1. Open Chrome/Chrome with pip from homescreen
         Swipe vertically to go back to home screen
         Measure the gpu completion time and "FrameMissed" count from systrace result
      2. 4K60fps HDR Video playback and measure the DoU Power impact
Change-Id: I37f92018e5fd5a925189431db39409f11079b778
2021-03-30 09:08:29 +00:00
Yu-Chi Cheng
93bf9b613b Labelled EdgeTPU service libraries as SP-HAL.
The EdgeTPU service libraries (libedgetpu_client.google.so and
com.google.edgetpu-V1-ndk.so) provide both the system_ext and
vendor variants.  Since these need to be linked by pre-built
applications from /product/, this change labelled them as
the same_process_hal_file in order to allow the applications
to link with the vendor variant.

Bug: 184008444
Test: tested on local Oriole with GCA.
Change-Id: I8c510f51ccc1a76d14978962d72fd91f15bf7a90
2021-03-29 23:22:33 -07:00
Krzysztof Kosiński
946ea5bebc Improve camera HAL SELinux policy. am: dffdeca76d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13986903

Change-Id: Id5e9c98002a9be4293a1e5a381864c35abf3fc2f
2021-03-30 05:36:52 +00:00
Krzysztof Kosiński
dffdeca76d Improve camera HAL SELinux policy.
- Grant access to DMA system heap for Tuscany.
- Reorder statements for more logical grouping.
- Allow access to isolated tmpfs for google3 prebuilts.
- Remove fixed denials.

Bug: 181913550
Bug: 182705901
Test: Inspected logcat, no denials from hal_camera_default
Change-Id: I9bf1ce207c3bcae1b9f9ab0f0072bb7501201451
2021-03-29 20:42:50 -07:00
Aaron Tsai
181f1d3cd0 vendor_init: allow set_prop for vendor_ro_config_default_prop
03-29 15:18:56.425  root     1     1 E init    : Do not have permissions to set 'ro.vendor.config.build_carrier' to 'europen' in property file '/vendor/build.prop': SELinux permission check failed

Bug: 183919837
Test: verified with the forrest ROM and error log gone
Change-Id: I87cc05306f9c038df779040514a879fc2b8ab929
2021-03-30 11:38:19 +08:00
John Tsai
d51c2f2533 Merge "Allowed Camera hal to create debug files" into sc-dev am: f06c0a9f38
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14016760

Change-Id: Ifff513d0434a7c17fd9e079b8a2ade7be4d34541
2021-03-30 03:24:52 +00:00
John Tsai
f06c0a9f38 Merge "Allowed Camera hal to create debug files" into sc-dev 2021-03-30 02:51:28 +00:00
Oleg Matcovschi
ef2a28f9a9 Merge "vendor_init: allow set_prop for vendor_ssrdump_prop" into sc-dev am: 5a504a1708
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13999606

Change-Id: I0f61d009637a57ade59a591f31aa15008727ed5a
2021-03-30 01:13:37 +00:00
Oleg Matcovschi
5a504a1708 Merge "vendor_init: allow set_prop for vendor_ssrdump_prop" into sc-dev 2021-03-30 00:39:12 +00:00
Oleg Matcovschi
a91ba31808 vendor_init: allow set_prop for vendor_ssrdump_prop
Bug: 183686188
Change-Id: I6a22419909cd85c55bd1c7e500b06f0420d0ec86
Signed-off-by: Oleg Matcovschi <omatcovschi@google.com>
2021-03-30 00:28:04 +00:00
Minchan Kim
0671da598d BoardConfig: enable cma_sysfs am: 3623b5745f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/14019190

Change-Id: I2b080b28d0bea73e12c9a54169318df1d9d7835d
2021-03-29 23:11:48 +00:00