Commit graph

11223 commits

Author SHA1 Message Date
TreeHugger Robot
2a61dddc6f Merge "Fix selinux error for vendor_init" into sc-dev am: 57ec723c5e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13880426

Change-Id: I66406cd526eaebca4ce94ab9dd3f9594e3e1c5ae
2021-03-18 01:18:38 +00:00
TreeHugger Robot
57ec723c5e Merge "Fix selinux error for vendor_init" into sc-dev 2021-03-18 00:49:15 +00:00
iayara
adeaaead76 Add "libedgetpu_darwinn2.so" library duplicate to be used for external
launch.

This change is intended to keep naming consistency with previous
Darwinn external launch. In the future, all "libedgetpu_darwinn2.so"
instances should be replaced by "libedgetpu_util.so".

Bug: 182303547
Change-Id: I99e83f5f2e317b195b2061c781cb23544e547c55
2021-03-17 23:47:07 +00:00
Hridya Valsaraju
fed91e74ba Merge "Add a label for Pixel DMA-BUF heap tracepoints" into sc-dev am: 2f772dd166
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13896546

Change-Id: Idfe3aa3b34bb8b6b8eb8f348b940327656a96c2f
2021-03-17 22:44:05 +00:00
Hridya Valsaraju
2f772dd166 Merge "Add a label for Pixel DMA-BUF heap tracepoints" into sc-dev 2021-03-17 21:58:55 +00:00
Yu-Chi Cheng
bcb92ac0c9 Merge "Allowed Camera hal to access EdgeTPU service for on-device compilation." into sc-dev am: a802ac3b05
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13889939

Change-Id: Iff962bcb9446a4a48123dc0ff435ffd56a115079
2021-03-17 21:10:37 +00:00
Yu-Chi Cheng
a802ac3b05 Merge "Allowed Camera hal to access EdgeTPU service for on-device compilation." into sc-dev 2021-03-17 20:37:44 +00:00
Yu-Chi Cheng
86aa156202 Allowed Camera hal to access EdgeTPU service for on-device compilation.
Camera hal DarwiNN pipelines are switching to use the on-device
compilation, which achieves by talking to the EdgeTPU service.
This change added the required selinux policies to allow accessing
the service, as well as allowing file descriptors to be shared
between them for passing the compilation info around.

Bug: 182423730
Bug: 182706078
Test: verified on Oriole running camera.
Change-Id: I5d3bc84fd54d4618f505f37d9773894261061d7f
2021-03-17 08:18:55 -07:00
Aaron Tsai
8bc49a1306 Remove unused rmnet and data properties for fixing avc denial error am: 815ce12ad5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13815494

Change-Id: I5b2540a72e499f7f44f40acd3f82fb8f9975af38
2021-03-17 11:47:52 +00:00
TreeHugger Robot
9d5d0f9915 Merge "init.gs101.rc: add chmod 0771 to camera calibration folder" into sc-dev am: aa58caf942
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13862479

Change-Id: Ie23fb494242030dd01e1a96e7fdf990c3c434989
2021-03-17 10:31:04 +00:00
Aaron Tsai
815ce12ad5 Remove unused rmnet and data properties for fixing avc denial error
Bug: 181924792
Test: verified with the forrest ROM and error log gone

Change-Id: Ia8eae9e2c347d79d3c37a894a1919e8f443630f7
2021-03-17 10:18:28 +00:00
Aaron Tsai
185dbee4eb Fix selinux error for vendor_init
03-12 18:15:16.240  root     1     1 I /system/bin/init: type=1107 audit(0.0:19): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.sys.modem_reset pid=354 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_sys_default_prop:s0 tclass=property_service permissive=1'

Bug: 182715587
Test: verified with the forrest ROM and error log gone
Change-Id: Icfea06220c491d414f6bdbf04ceda4c46299fb29
2021-03-17 10:14:31 +00:00
TreeHugger Robot
aa58caf942 Merge "init.gs101.rc: add chmod 0771 to camera calibration folder" into sc-dev 2021-03-17 10:10:52 +00:00
TreeHugger Robot
afdfc82734 Merge "label uwb service to prevent reset after unplugging USB" into sc-dev am: 64c726720b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13895430

Change-Id: I7d50b4777a52b307272c8b9ab68f2eeb279ebb4d
2021-03-17 08:36:35 +00:00
Jenny Ho
d6162d5505 Merge "init.gs101.rc: set system ownership for eeprom" into sc-dev am: 60dca5dc0a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13839232

Change-Id: I2a0cff60572b26312b54bcaa9a70d2ec49d75cdc
2021-03-17 08:36:16 +00:00
Jenny Ho
673ba29390 Merge "genfs_contexts: add sepolicy for dumping eeprom data" into sc-dev am: 208d1aed01
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13895428

Change-Id: I39b601de53ad1b2ccfec2274194b9dfcb8f1dbf1
2021-03-17 08:36:13 +00:00
Jenny Ho
9348b94a5a Merge "dumpstate: Update eeprom dump path" into sc-dev am: e8ecf4ded7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13839231

Change-Id: I7e38d95142be45796d716b3fa38617a3398da902
2021-03-17 08:36:13 +00:00
TreeHugger Robot
64c726720b Merge "label uwb service to prevent reset after unplugging USB" into sc-dev 2021-03-17 08:35:08 +00:00
Jenny Ho
60dca5dc0a Merge "init.gs101.rc: set system ownership for eeprom" into sc-dev 2021-03-17 08:07:45 +00:00
Jenny Ho
208d1aed01 Merge "genfs_contexts: add sepolicy for dumping eeprom data" into sc-dev 2021-03-17 08:07:45 +00:00
Jenny Ho
e8ecf4ded7 Merge "dumpstate: Update eeprom dump path" into sc-dev 2021-03-17 08:07:45 +00:00
Adam Shih
ebeae6abc3 label uwb service to prevent reset after unplugging USB
Bug: 182953824
Test: unplug USB under enforcing mode
Change-Id: Ib4bdf9b9339fc631d045bde57f78a46ce3ca8b6e
2021-03-17 15:25:27 +08:00
TreeHugger Robot
188c7e93fc Merge "sensors: Add sensor related rule to chre." into sc-dev am: b8ec327d5c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13885466

Change-Id: I9a4f8817963617f8e212d8ffdf36a17e5580d192
2021-03-17 07:00:57 +00:00
TreeHugger Robot
b8ec327d5c Merge "sensors: Add sensor related rule to chre." into sc-dev 2021-03-17 06:28:41 +00:00
Hridya Valsaraju
a570dc6991 Add a label for Pixel DMA-BUF heap tracepoints
These tracepoint are the DMA-BUF equivalents to the ION tracepoints.
They expose the size of the DMA-BUF, unique inode number of the DMA-BUF
and total size of all DMA-BUFs exported from the DMA-BUF heap framework.

Test: build
Bug: 182328989
Change-Id: I311b68275ebd668f73d0ccff0fcaa01d251250bc
2021-03-16 23:00:41 -07:00
Adam Shih
afb246e88a Merge changes I33cd99d5,I8417d4eb into sc-dev am: 63143cdf96
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13895426

Change-Id: I9fa4c9593bb10eae995d38922a41b0ddd917e5b8
2021-03-17 05:40:37 +00:00
Jenny Ho
2dc4d2d61f genfs_contexts: add sepolicy for dumping eeprom data
I auditd  : type=1400 audit(0.0:53): avc: denied { getattr } for comm="sh" path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I sh      : type=1400 audit(0.0:53): avc: denied { getattr } for path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I auditd  : type=1400 audit(0.0:57): avc: denied { getattr } for comm="ls" path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I ls      : type=1400 audit(0.0:57): avc: denied { getattr } for path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

Bug: 182531832
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: If189575c6db8b43b59c6009378ec724bd075c0d1
2021-03-17 13:07:55 +08:00
Adam Shih
63143cdf96 Merge changes I33cd99d5,I8417d4eb into sc-dev
* changes:
  label missing power sys nodes
  update error on ROM 7213588
2021-03-17 05:03:29 +00:00
LABIB MD RASHID
ca27f88d5f Merge "Sysfs node permission for modem" into sc-dev am: 9c47b4ff37
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13835862

Change-Id: Ie397687a62c857684b02ff02abedebb9345a015d
2021-03-17 03:45:15 +00:00
TreeHugger Robot
2d39854611 Merge "Add Sepolicy rule for connectivity monitor app" into sc-dev am: 0aef3b56c5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13880431

Change-Id: Ia4981828bf05e6b824ab071c0475579405693bb3
2021-03-17 03:44:56 +00:00
TreeHugger Robot
0aef3b56c5 Merge "Add Sepolicy rule for connectivity monitor app" into sc-dev 2021-03-17 03:12:31 +00:00
LABIB MD RASHID
9c47b4ff37 Merge "Sysfs node permission for modem" into sc-dev 2021-03-17 03:02:36 +00:00
Adam Shih
74052118a8 label missing power sys nodes
Bug: 182954169
Test: boot with no avc error found
Change-Id: I33cd99d5748dd9fc40301c460a050b6e969f30f4
2021-03-17 10:49:24 +08:00
Rick Chen
78047fa17b sensors: Add sensor related rule to chre.
[    8.417813] type=1400 audit(1615518074.988:4): avc: denied { write } for comm="sensors@2.0-ser" name="chre" dev="tmpfs" ino=908 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:chre_socket:s0 tclass=sock_file permissive=1
[    8.418075] type=1400 audit(1615518074.988:5): avc: denied { connectto } for comm="sensors@2.0-ser" path="/dev/socket/chre" scontext=u:r:hal_sensors_default:s0 tcontext=u:r:chre:s0 tclass=unix_stream_socket permissive=1
03-12 11:01:14.988   694   694 I sensors@2.0-ser: type=1400 audit(0.0:5): avc: denied { connectto } for path="/dev/socket/chre" scontext=u:r:hal_sensors_default:s0 tcontext=u:r:chre:s0 tclass=unix_stream_socket permissive=1

Also merge two sensor_hal related files into single file.

Bug: 182523946
Test: make selinux_policy -j128 and push to device.
      No hal_sensors_default related avc deined log during boot.
Signed-off-by: Rick Chen <rickctchen@google.com>
Change-Id: I49ce71ba4703528fb2e26dd8956c4ed741337ffc
2021-03-17 10:34:14 +08:00
Benjamin Schwartz
595aa0723a powerstats: Add Ufs stats am: 10e6ca883f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13878906

Change-Id: Iccc60c6ef714a838f7a9e2715c20342e3c423391
2021-03-17 02:25:59 +00:00
Benjamin Schwartz
6beac59d8d Merge "Give power stats HAL permission to read ufs stats" into sc-dev am: fe980b935b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13881265

Change-Id: I21a2217c38a764545fc4a19b4b114eaee260efe3
2021-03-17 02:25:59 +00:00
TreeHugger Robot
120967467a Merge "allow df to collect partition info" into sc-dev am: 23017e956d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13856371

Change-Id: I53f473fa1d949eb035367b5bfa16022dd3098ebc
2021-03-17 02:25:39 +00:00
Adam Shih
7c0fd2a413 update error on ROM 7213588
Bug: 182954169
Bug: 182954060
Bug: 182954138
Bug: 182954062
Bug: 182953824
Bug: 182953825
Bug: 182954248
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I8417d4ebacefa691838e25131749b0e4fd152a2f
2021-03-17 10:15:02 +08:00
Benjamin Schwartz
fe980b935b Merge "Give power stats HAL permission to read ufs stats" into sc-dev 2021-03-17 02:09:54 +00:00
TreeHugger Robot
23017e956d Merge "allow df to collect partition info" into sc-dev 2021-03-17 01:52:43 +00:00
Benjamin Schwartz
d5ab86411f Fix sepolicies for hal_power_stats_default am: ed8fdc9997
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13877746

Change-Id: I01e5424a15c0a2771f0b958c2d29adf4d43d33a9
2021-03-16 20:54:07 +00:00
Benjamin Schwartz
10e6ca883f powerstats: Add Ufs stats
Bug: 140217385
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Ie60a8bbb5ac9290d9b707a1529bcc384c5e61626
2021-03-16 13:40:48 -07:00
Benjamin Schwartz
ed8fdc9997 Fix sepolicies for hal_power_stats_default
Bug: 182320246
Test: No more avc denied log messages for hal_power_stats_default
Change-Id: I1cd801bb4823e80bd5ea112fb0b7bdfaeabbdef5
2021-03-16 10:37:09 -07:00
Chris Fries
1d720653aa Merge "Revert "Decouple auto-suspend and interactive from display on/off"" into sc-dev am: 8536bb3952
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13885214

Change-Id: Ife1216be74f986f6712220a9ef5991a100f0a269
2021-03-16 17:16:47 +00:00
Chris Fries
8536bb3952 Merge "Revert "Decouple auto-suspend and interactive from display on/off"" into sc-dev 2021-03-16 16:41:03 +00:00
Ken Huang
fba970113a Revert "Decouple auto-suspend and interactive from display on/off"
This reverts commit 8069d3856d.

Reason for revert: black display in AoD
Bug: 182851537

Change-Id: Idc0ef7cf076b6060cc76c983bd512247f9e8a4c0
2021-03-16 16:29:55 +00:00
Charlie Chen
0cb31ae833 Merge "Revert "Switch back from DMABUF to ION/BLOB allocator"" into sc-dev am: 8b400f943c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13881381

Change-Id: Ifa4eda1e7745d020c48ba97c26c3fe1e5f8c79a0
2021-03-16 15:22:30 +00:00
Charlie Chen
8b400f943c Merge "Revert "Switch back from DMABUF to ION/BLOB allocator"" into sc-dev 2021-03-16 14:56:57 +00:00
TreeHugger Robot
411cd08e91 Merge "display: add sepolicy for hal_graphics_composer" into sc-dev am: 96d0c28dc4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13880429

Change-Id: I0f7c6b3d3c172fd4e2038f9bef7d6b7a0fa9436b
2021-03-16 12:38:49 +00:00
TreeHugger Robot
96d0c28dc4 Merge "display: add sepolicy for hal_graphics_composer" into sc-dev 2021-03-16 12:05:50 +00:00