TreeHugger Robot
2a61dddc6f
Merge "Fix selinux error for vendor_init" into sc-dev am: 57ec723c5e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13880426
Change-Id: I66406cd526eaebca4ce94ab9dd3f9594e3e1c5ae
2021-03-18 01:18:38 +00:00
TreeHugger Robot
57ec723c5e
Merge "Fix selinux error for vendor_init" into sc-dev
2021-03-18 00:49:15 +00:00
iayara
adeaaead76
Add "libedgetpu_darwinn2.so" library duplicate to be used for external
...
launch.
This change is intended to keep naming consistency with previous
Darwinn external launch. In the future, all "libedgetpu_darwinn2.so"
instances should be replaced by "libedgetpu_util.so".
Bug: 182303547
Change-Id: I99e83f5f2e317b195b2061c781cb23544e547c55
2021-03-17 23:47:07 +00:00
Hridya Valsaraju
fed91e74ba
Merge "Add a label for Pixel DMA-BUF heap tracepoints" into sc-dev am: 2f772dd166
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13896546
Change-Id: Idfe3aa3b34bb8b6b8eb8f348b940327656a96c2f
2021-03-17 22:44:05 +00:00
Hridya Valsaraju
2f772dd166
Merge "Add a label for Pixel DMA-BUF heap tracepoints" into sc-dev
2021-03-17 21:58:55 +00:00
Yu-Chi Cheng
bcb92ac0c9
Merge "Allowed Camera hal to access EdgeTPU service for on-device compilation." into sc-dev am: a802ac3b05
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13889939
Change-Id: Iff962bcb9446a4a48123dc0ff435ffd56a115079
2021-03-17 21:10:37 +00:00
Yu-Chi Cheng
a802ac3b05
Merge "Allowed Camera hal to access EdgeTPU service for on-device compilation." into sc-dev
2021-03-17 20:37:44 +00:00
Yu-Chi Cheng
86aa156202
Allowed Camera hal to access EdgeTPU service for on-device compilation.
...
Camera hal DarwiNN pipelines are switching to use the on-device
compilation, which achieves by talking to the EdgeTPU service.
This change added the required selinux policies to allow accessing
the service, as well as allowing file descriptors to be shared
between them for passing the compilation info around.
Bug: 182423730
Bug: 182706078
Test: verified on Oriole running camera.
Change-Id: I5d3bc84fd54d4618f505f37d9773894261061d7f
2021-03-17 08:18:55 -07:00
Aaron Tsai
8bc49a1306
Remove unused rmnet and data properties for fixing avc denial error am: 815ce12ad5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13815494
Change-Id: I5b2540a72e499f7f44f40acd3f82fb8f9975af38
2021-03-17 11:47:52 +00:00
TreeHugger Robot
9d5d0f9915
Merge "init.gs101.rc: add chmod 0771 to camera calibration folder" into sc-dev am: aa58caf942
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13862479
Change-Id: Ie23fb494242030dd01e1a96e7fdf990c3c434989
2021-03-17 10:31:04 +00:00
Aaron Tsai
815ce12ad5
Remove unused rmnet and data properties for fixing avc denial error
...
Bug: 181924792
Test: verified with the forrest ROM and error log gone
Change-Id: Ia8eae9e2c347d79d3c37a894a1919e8f443630f7
2021-03-17 10:18:28 +00:00
Aaron Tsai
185dbee4eb
Fix selinux error for vendor_init
...
03-12 18:15:16.240 root 1 1 I /system/bin/init: type=1107 audit(0.0:19): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.sys.modem_reset pid=354 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_sys_default_prop:s0 tclass=property_service permissive=1'
Bug: 182715587
Test: verified with the forrest ROM and error log gone
Change-Id: Icfea06220c491d414f6bdbf04ceda4c46299fb29
2021-03-17 10:14:31 +00:00
TreeHugger Robot
aa58caf942
Merge "init.gs101.rc: add chmod 0771 to camera calibration folder" into sc-dev
2021-03-17 10:10:52 +00:00
TreeHugger Robot
afdfc82734
Merge "label uwb service to prevent reset after unplugging USB" into sc-dev am: 64c726720b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13895430
Change-Id: I7d50b4777a52b307272c8b9ab68f2eeb279ebb4d
2021-03-17 08:36:35 +00:00
Jenny Ho
d6162d5505
Merge "init.gs101.rc: set system ownership for eeprom" into sc-dev am: 60dca5dc0a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13839232
Change-Id: I2a0cff60572b26312b54bcaa9a70d2ec49d75cdc
2021-03-17 08:36:16 +00:00
Jenny Ho
673ba29390
Merge "genfs_contexts: add sepolicy for dumping eeprom data" into sc-dev am: 208d1aed01
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13895428
Change-Id: I39b601de53ad1b2ccfec2274194b9dfcb8f1dbf1
2021-03-17 08:36:13 +00:00
Jenny Ho
9348b94a5a
Merge "dumpstate: Update eeprom dump path" into sc-dev am: e8ecf4ded7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13839231
Change-Id: I7e38d95142be45796d716b3fa38617a3398da902
2021-03-17 08:36:13 +00:00
TreeHugger Robot
64c726720b
Merge "label uwb service to prevent reset after unplugging USB" into sc-dev
2021-03-17 08:35:08 +00:00
Jenny Ho
60dca5dc0a
Merge "init.gs101.rc: set system ownership for eeprom" into sc-dev
2021-03-17 08:07:45 +00:00
Jenny Ho
208d1aed01
Merge "genfs_contexts: add sepolicy for dumping eeprom data" into sc-dev
2021-03-17 08:07:45 +00:00
Jenny Ho
e8ecf4ded7
Merge "dumpstate: Update eeprom dump path" into sc-dev
2021-03-17 08:07:45 +00:00
Adam Shih
ebeae6abc3
label uwb service to prevent reset after unplugging USB
...
Bug: 182953824
Test: unplug USB under enforcing mode
Change-Id: Ib4bdf9b9339fc631d045bde57f78a46ce3ca8b6e
2021-03-17 15:25:27 +08:00
TreeHugger Robot
188c7e93fc
Merge "sensors: Add sensor related rule to chre." into sc-dev am: b8ec327d5c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13885466
Change-Id: I9a4f8817963617f8e212d8ffdf36a17e5580d192
2021-03-17 07:00:57 +00:00
TreeHugger Robot
b8ec327d5c
Merge "sensors: Add sensor related rule to chre." into sc-dev
2021-03-17 06:28:41 +00:00
Hridya Valsaraju
a570dc6991
Add a label for Pixel DMA-BUF heap tracepoints
...
These tracepoint are the DMA-BUF equivalents to the ION tracepoints.
They expose the size of the DMA-BUF, unique inode number of the DMA-BUF
and total size of all DMA-BUFs exported from the DMA-BUF heap framework.
Test: build
Bug: 182328989
Change-Id: I311b68275ebd668f73d0ccff0fcaa01d251250bc
2021-03-16 23:00:41 -07:00
Adam Shih
afb246e88a
Merge changes I33cd99d5,I8417d4eb into sc-dev am: 63143cdf96
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13895426
Change-Id: I9fa4c9593bb10eae995d38922a41b0ddd917e5b8
2021-03-17 05:40:37 +00:00
Jenny Ho
2dc4d2d61f
genfs_contexts: add sepolicy for dumping eeprom data
...
I auditd : type=1400 audit(0.0:53): avc: denied { getattr } for comm="sh" path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I sh : type=1400 audit(0.0:53): avc: denied { getattr } for path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I auditd : type=1400 audit(0.0:57): avc: denied { getattr } for comm="ls" path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I ls : type=1400 audit(0.0:57): avc: denied { getattr } for path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
Bug: 182531832
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: If189575c6db8b43b59c6009378ec724bd075c0d1
2021-03-17 13:07:55 +08:00
Adam Shih
63143cdf96
Merge changes I33cd99d5,I8417d4eb into sc-dev
...
* changes:
label missing power sys nodes
update error on ROM 7213588
2021-03-17 05:03:29 +00:00
LABIB MD RASHID
ca27f88d5f
Merge "Sysfs node permission for modem" into sc-dev am: 9c47b4ff37
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13835862
Change-Id: Ie397687a62c857684b02ff02abedebb9345a015d
2021-03-17 03:45:15 +00:00
TreeHugger Robot
2d39854611
Merge "Add Sepolicy rule for connectivity monitor app" into sc-dev am: 0aef3b56c5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13880431
Change-Id: Ia4981828bf05e6b824ab071c0475579405693bb3
2021-03-17 03:44:56 +00:00
TreeHugger Robot
0aef3b56c5
Merge "Add Sepolicy rule for connectivity monitor app" into sc-dev
2021-03-17 03:12:31 +00:00
LABIB MD RASHID
9c47b4ff37
Merge "Sysfs node permission for modem" into sc-dev
2021-03-17 03:02:36 +00:00
Adam Shih
74052118a8
label missing power sys nodes
...
Bug: 182954169
Test: boot with no avc error found
Change-Id: I33cd99d5748dd9fc40301c460a050b6e969f30f4
2021-03-17 10:49:24 +08:00
Rick Chen
78047fa17b
sensors: Add sensor related rule to chre.
...
[ 8.417813] type=1400 audit(1615518074.988:4): avc: denied { write } for comm="sensors@2.0-ser" name="chre" dev="tmpfs" ino=908 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:chre_socket:s0 tclass=sock_file permissive=1
[ 8.418075] type=1400 audit(1615518074.988:5): avc: denied { connectto } for comm="sensors@2.0-ser" path="/dev/socket/chre" scontext=u:r:hal_sensors_default:s0 tcontext=u:r:chre:s0 tclass=unix_stream_socket permissive=1
03-12 11:01:14.988 694 694 I sensors@2.0-ser: type=1400 audit(0.0:5): avc: denied { connectto } for path="/dev/socket/chre" scontext=u:r:hal_sensors_default:s0 tcontext=u:r:chre:s0 tclass=unix_stream_socket permissive=1
Also merge two sensor_hal related files into single file.
Bug: 182523946
Test: make selinux_policy -j128 and push to device.
No hal_sensors_default related avc deined log during boot.
Signed-off-by: Rick Chen <rickctchen@google.com>
Change-Id: I49ce71ba4703528fb2e26dd8956c4ed741337ffc
2021-03-17 10:34:14 +08:00
Benjamin Schwartz
595aa0723a
powerstats: Add Ufs stats am: 10e6ca883f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13878906
Change-Id: Iccc60c6ef714a838f7a9e2715c20342e3c423391
2021-03-17 02:25:59 +00:00
Benjamin Schwartz
6beac59d8d
Merge "Give power stats HAL permission to read ufs stats" into sc-dev am: fe980b935b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13881265
Change-Id: I21a2217c38a764545fc4a19b4b114eaee260efe3
2021-03-17 02:25:59 +00:00
TreeHugger Robot
120967467a
Merge "allow df to collect partition info" into sc-dev am: 23017e956d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13856371
Change-Id: I53f473fa1d949eb035367b5bfa16022dd3098ebc
2021-03-17 02:25:39 +00:00
Adam Shih
7c0fd2a413
update error on ROM 7213588
...
Bug: 182954169
Bug: 182954060
Bug: 182954138
Bug: 182954062
Bug: 182953824
Bug: 182953825
Bug: 182954248
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I8417d4ebacefa691838e25131749b0e4fd152a2f
2021-03-17 10:15:02 +08:00
Benjamin Schwartz
fe980b935b
Merge "Give power stats HAL permission to read ufs stats" into sc-dev
2021-03-17 02:09:54 +00:00
TreeHugger Robot
23017e956d
Merge "allow df to collect partition info" into sc-dev
2021-03-17 01:52:43 +00:00
Benjamin Schwartz
d5ab86411f
Fix sepolicies for hal_power_stats_default am: ed8fdc9997
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13877746
Change-Id: I01e5424a15c0a2771f0b958c2d29adf4d43d33a9
2021-03-16 20:54:07 +00:00
Benjamin Schwartz
10e6ca883f
powerstats: Add Ufs stats
...
Bug: 140217385
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Ie60a8bbb5ac9290d9b707a1529bcc384c5e61626
2021-03-16 13:40:48 -07:00
Benjamin Schwartz
ed8fdc9997
Fix sepolicies for hal_power_stats_default
...
Bug: 182320246
Test: No more avc denied log messages for hal_power_stats_default
Change-Id: I1cd801bb4823e80bd5ea112fb0b7bdfaeabbdef5
2021-03-16 10:37:09 -07:00
Chris Fries
1d720653aa
Merge "Revert "Decouple auto-suspend and interactive from display on/off"" into sc-dev am: 8536bb3952
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13885214
Change-Id: Ife1216be74f986f6712220a9ef5991a100f0a269
2021-03-16 17:16:47 +00:00
Chris Fries
8536bb3952
Merge "Revert "Decouple auto-suspend and interactive from display on/off"" into sc-dev
2021-03-16 16:41:03 +00:00
Ken Huang
fba970113a
Revert "Decouple auto-suspend and interactive from display on/off"
...
This reverts commit 8069d3856d
.
Reason for revert: black display in AoD
Bug: 182851537
Change-Id: Idc0ef7cf076b6060cc76c983bd512247f9e8a4c0
2021-03-16 16:29:55 +00:00
Charlie Chen
0cb31ae833
Merge "Revert "Switch back from DMABUF to ION/BLOB allocator"" into sc-dev am: 8b400f943c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13881381
Change-Id: Ifa4eda1e7745d020c48ba97c26c3fe1e5f8c79a0
2021-03-16 15:22:30 +00:00
Charlie Chen
8b400f943c
Merge "Revert "Switch back from DMABUF to ION/BLOB allocator"" into sc-dev
2021-03-16 14:56:57 +00:00
TreeHugger Robot
411cd08e91
Merge "display: add sepolicy for hal_graphics_composer" into sc-dev am: 96d0c28dc4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13880429
Change-Id: I0f7c6b3d3c172fd4e2038f9bef7d6b7a0fa9436b
2021-03-16 12:38:49 +00:00
TreeHugger Robot
96d0c28dc4
Merge "display: add sepolicy for hal_graphics_composer" into sc-dev
2021-03-16 12:05:50 +00:00