Evolution-X-Tensor/device_google_gs101
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
3861 commits 1 branch 0 tags 494 MiB
Commit graph

1434 commits

Author SHA1 Message Date
timmyli
ecd597b98a Add aoc_device access to P21 devices. Camera hal 
Since we plan to apply rls refactor to P21 devices
as well. Add access to camera_hal to aoc_device for
these devices.

Bug: 253493159
Test: Compiles
Change-Id: I43728c723e0cfc7cdde5377260af6075d4672e7b
 2022-10-14 01:55:04 +00:00
Adam Shih
2933a7f105 upgrade dumpstate from hidl to aidl 
Bug: 240530709
Test: adb bugreport
Change-Id: If5f81174f7881100bff21462ff4aef9ff62357d4
 2022-10-12 15:25:17 +08:00
Adam Shih
f15d1599ef remove redundant permission that has moved to gs-common 
Bug: 248426917
Test: adb bugreport
Change-Id: I2b1f26164e9590dadd6eae4c14cb65a1c34197fa
 2022-10-12 11:31:57 +08:00
TreeHugger Robot
a65d9c6e58 Merge "move trusty dump from gs101 to gs-common" 2022-10-11 01:41:33 +00:00
Adam Shih
cba306cc3b move modem dump to gs-common 
Bug: 250475732
Test: adb bugreport
Change-Id: I07bc213a6136d5803316062c3fddd55fc557c4b2
 2022-10-05 10:45:33 +08:00
Adam Shih
7c74638f0c Merge "move soc dump to gs-common" 2022-10-05 02:14:15 +00:00
Vaibhav Devmurari
a254fcef0c Merge "Add SePolicy for system_server accessing sysfs for USB devices" 2022-10-04 09:22:34 +00:00
Adam Shih
0508a69dbd move soc dump to gs-common 
Bug: 248428203
Test: adb bugreport
Change-Id: I09c8279685626125ab1c5a6b73d1143de7ae2f1d
 2022-10-04 12:56:28 +08:00
Adam Shih
6d2d8a9914 move trusty dump from gs101 to gs-common 
Bug: 244504232
Test: adb bugreport
Change-Id: I7a93c9ef7d07e92f0fd508c016a264c26a4e0b1e
 2022-10-04 09:06:15 +08:00
Vaibhav Devmurari
ac878d3f62 Add SePolicy for system_server accessing sysfs for USB devices 
Add SePolicy to allow Android input manager accessing sysfs nodes
for external USB devices

To support input device lights manager feature in frameworks, provide
sysfs node access to system server process.
DD: go/pk_backlight_control (For keyboard backlight control for external
keyboards)

Kernel provides a standardized LED interface to expose LED controls
over sysfs: https://docs.kernel.org/leds/leds-class.html
The feature will be provided for devices with kernel sysfs class led
support and vendor kernel driver for input controllers that do have
lights. The kernel sysfs class led support is a kernel config option
(LEDS_CLASS), and an input device driver will create the sysfs class
node interface.
By giving system_server the access to these sysfs nodes, the feature
will work on devices with the kernel option and kernel input/hid driver
support. We do use CTS tests to enforce the kernel options and the
input device drivers.

What's already supported?
- We already support access to UHID sysfs node which used for all
bluetooth based external peripherals

What's included in this CL?
- Adding support to access sysfs nodes for USB based external devices

Test: manual
Bug: 245506418
Change-Id: Ieb55614ed651b85f0e6752a17d02f4d370fd1e6f
 2022-10-03 14:52:52 +00:00
Adam Shih
d0af280f50 move ramdump relate dumpstate to gs-common 
Bug: 248428203
Test: adb bugreport
Change-Id: I16898410318dd8f396c68cd9096a4eb49358b784
 2022-09-30 15:10:45 +08:00
Adam Shih
a190e33522 move UFS dump to gs-common 
Bug: 248143736
Test: adb bugreport
Change-Id: I3446ab420a0e8a0104dcc63c1cfd4c1a04060cdd
 2022-09-28 13:20:33 +08:00
Adam Shih
3cd9384799 dump f2fs in gs-common 
Bug: 248143736
Test: adb bugreport
Change-Id: I902030f7960b2247e9b8e913e78d447741423efb
 2022-09-27 17:03:38 +08:00
Jinting Lin
03f471518a Merge "Allows modem_svc to read the logging related properties" into tm-qpr-dev am: d255ed1576 am: 230b907ae1 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19967636

Change-Id: I2e6a0cf2f7558c40e68030649d1c663db5bcd3db
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-09-22 16:12:50 +00:00
Jinting Lin
230b907ae1 Merge "Allows modem_svc to read the logging related properties" into tm-qpr-dev am: d255ed1576 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19967636

Change-Id: Ic7a7ec1e03af32e88989f32452c2c255e1419a36
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-09-22 15:35:53 +00:00
Jinting Lin
d255ed1576 Merge "Allows modem_svc to read the logging related properties" into tm-qpr-dev 2022-09-22 14:30:32 +00:00
Eden Su
c3c4aa626b Merge changes from topic "gs101_network_access" into tm-qpr-dev 
* changes:
  Sepolicy: add permission to allow create, connect udp socket
  sepolicy: gs101: allowed permissions required for network access
 2022-09-20 00:34:18 +00:00
jintinglin
9a4545eafa Allows modem_svc to read the logging related properties 
avc: denied { read } for comm="modem_svc_sit" name="u:object_r:vendor_logger_prop:s0" dev="tmpfs" ino=347 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_logger_prop:s0 tclass=file permissive=0

Bug: 243039758
Change-Id: I80a6971a2c3e09320e780d1eff24e040cd8b3541
 2022-09-19 05:31:09 +00:00
Hana Kim
060b562310 Sepolicy: add permission to allow create, connect udp socket 
Bug: 226412527
Test: The tester verified IMS didn't crash and no avc denied log
Signed-off-by: Hana Kim <hanaa.kim@samsung.com>
Change-Id: Id9ba79ba87010326c53b6aec408e5cdb291122a6
Merged-In: Id9ba79ba87010326c53b6aec408e5cdb291122a6
 2022-09-19 04:58:00 +00:00
Jinhee Kim
ea1f7edaae sepolicy: gs101: allowed permissions required for network access am: 653e53d11d am: 9ca55393c9 am: a62f7495fb am: 11149a00ca am: fd941e1c1a 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2214621

Change-Id: I32eb6c697ec317f6ca40a0b82544a7a9116ac154
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-09-16 12:46:04 +00:00
Hana Kim
89c07daec3 Sepolicy: add permission to allow create, connect udp socket am: 09e0e1b280 am: 6c17e1e6f5 am: 19e9846ba8 am: 6b1cbfe260 am: a29b3c8ca1 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2200444

Change-Id: I2544779da7c13c7b1a8383b8c786bb2c39716a98
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-09-16 12:46:02 +00:00
Jinhee Kim
fd941e1c1a sepolicy: gs101: allowed permissions required for network access am: 653e53d11d am: 9ca55393c9 am: a62f7495fb am: 11149a00ca 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2214621

Change-Id: Iee88f3f9d98f1b1f1568613b81542560e42ee25d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-09-16 12:18:57 +00:00
Hana Kim
a29b3c8ca1 Sepolicy: add permission to allow create, connect udp socket am: 09e0e1b280 am: 6c17e1e6f5 am: 19e9846ba8 am: 6b1cbfe260 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2200444

Change-Id: I50d573cc65874987be884d83b72f4aaaa71c8818
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-09-16 12:18:56 +00:00
Jinhee Kim
11149a00ca sepolicy: gs101: allowed permissions required for network access am: 653e53d11d am: 9ca55393c9 am: a62f7495fb 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2214621

Change-Id: I1da45f9173b7812ab45d8b503af446689a2e7fe4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-09-16 11:49:03 +00:00
Hana Kim
6b1cbfe260 Sepolicy: add permission to allow create, connect udp socket am: 09e0e1b280 am: 6c17e1e6f5 am: 19e9846ba8 
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2200444

Change-Id: I9074a2aaab6ef1916fc3fa9a0c1f3e5e3fe610a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-09-16 11:49:01 +00:00
Jinhee Kim
908a8fcf14 sepolicy: gs101: allowed permissions required for network access 
avc: denied { write } for comm="Thread-102" name="dnsproxyd" dev="tmpfs" ino=1022 scontext=u:r:vendor_ims_app:s0:c251,c256,c512,c768 tcontext=u:object_r:dnsproxyd_socket:s0 tclass=sock_file permissive=0 app=com.shannon.imsservice
avc: denied { node_bind } for comm="Thread-102" src=50174 scontext=u:r:vendor_ims_app:s0:c251,c256,c512,c768 tcontext=u:object_r:node:s0 tclass=udp_socket permissive=0 app=com.shannon.imsservice

Bug: 242231557
Test: The tester verified IMS didn't crash and no avc denied log
Change-Id: Icc3762cef7f9766d845f1e1a56af1315fc97163b
Signed-off-by: Jinhee Kim <jinhee.k@samsung.com>
Signed-off-by: Kukjin Kim <kgene.kim@samsung.com>
Merged-In: Icc3762cef7f9766d845f1e1a56af1315fc97163b
 2022-09-16 08:51:52 +00:00
Estefany Torres
0ea1dac214 Merge "Add rules for letting logger app send the command to ril" into tm-qpr-dev am: 0ec93ed8cd am: 899574b2d8 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19912324

Change-Id: Idd3a937c7da2388a32f59f265705bcc84c54bf8b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-09-15 15:03:57 +00:00
Estefany Torres
899574b2d8 Merge "Add rules for letting logger app send the command to ril" into tm-qpr-dev am: 0ec93ed8cd 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19912324

Change-Id: I14947b4a9dc41ffdb9afef580597ee0d4798443f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-09-15 14:35:07 +00:00
Estefany Torres
0ec93ed8cd Merge "Add rules for letting logger app send the command to ril" into tm-qpr-dev 2022-09-15 14:09:07 +00:00
TreeHugger Robot
3aaefbe1fc Merge "aoc: add audio property for pixellogger update control" into tm-qpr-dev am: 75f908a8ed am: a106f636f8 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19533964

Change-Id: I86804c96c940ced146e25a411560fe7ac06e5e77
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-09-14 02:54:01 +00:00
TreeHugger Robot
a106f636f8 Merge "aoc: add audio property for pixellogger update control" into tm-qpr-dev am: 75f908a8ed 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19533964

Change-Id: I347bbb35b216896a87b3b2edc96af57d6dadfe80
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-09-14 02:23:57 +00:00
TreeHugger Robot
75f908a8ed Merge "aoc: add audio property for pixellogger update control" into tm-qpr-dev 2022-09-14 01:48:40 +00:00
Jinhee Kim
653e53d11d sepolicy: gs101: allowed permissions required for network access 
avc: denied { write } for comm="Thread-102" name="dnsproxyd" dev="tmpfs" ino=1022 scontext=u:r:vendor_ims_app:s0:c251,c256,c512,c768 tcontext=u:object_r:dnsproxyd_socket:s0 tclass=sock_file permissive=0 app=com.shannon.imsservice
avc: denied { node_bind } for comm="Thread-102" src=50174 scontext=u:r:vendor_ims_app:s0:c251,c256,c512,c768 tcontext=u:object_r:node:s0 tclass=udp_socket permissive=0 app=com.shannon.imsservice

Bug: 242231557
Test: Build
Change-Id: Icc3762cef7f9766d845f1e1a56af1315fc97163b
Signed-off-by: Jinhee Kim <jinhee.k@samsung.com>
Signed-off-by: Kukjin Kim <kgene.kim@samsung.com>
 2022-09-12 15:18:32 +08:00
Hana Kim
09e0e1b280 Sepolicy: add permission to allow create, connect udp socket 
Bug: 226412527
Test: Build
Signed-off-by: Hana Kim <hanaa.kim@samsung.com>
Change-Id: Id9ba79ba87010326c53b6aec408e5cdb291122a6
 2022-09-12 15:17:44 +08:00
Estefany Torres
7b5ed95fdd Add rules for letting logger app send the command to ril 
08-31 23:40:57.354   458   458 E SELinux : avc:  denied  { find } for interface=vendor.samsung_slsi.telephony.hardware.radioExternal::IOemSlsiRadioExternal sid=u:r:logger_app:s0:c252,c256,c512,c768 pid=2901 scontext=u:r:logger_app:s0:c252,c256,c512,c768 tcontext=u:object_r:hal_exynos_rild_hwservice:s0 tclass=hwservice_manager permissive=0
09-01 00:08:19.600  2881  2881 W oid.pixellogger: type=1400 audit(0.0:10): avc: denied { call } for scontext=u:r:logger_app:s0:c252,c256,c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=0 app=com.android.pixellogger

Bug: 241412942
Test: tested in C10 with pixel logger change
Change-Id: Idcd693790d654d0a9b7aba46a41764d65867a61c
 2022-09-09 17:35:19 +00:00
JJ Lee
8c36ac66d8 sepolicy: add nodes for aoc memory votes stats am: f07279785d am: 479f2286d7 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19739216

Change-Id: Icdd11f323d212c2e10a42108afbd91674dce7a3c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-09-08 06:00:10 +00:00
JJ Lee
479f2286d7 sepolicy: add nodes for aoc memory votes stats am: f07279785d 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19739216

Change-Id: I795b972da3d42e7394fbd954f041934370fbd77a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-09-08 05:16:23 +00:00
TreeHugger Robot
ae2feed036 Merge "Add SE policies for HWC logs" 2022-09-07 12:28:32 +00:00
JJ Lee
f07279785d sepolicy: add nodes for aoc memory votes stats 
Bug: 223674292
Test: build pass, not blocking bugreport
Change-Id: I4732c8b3271f553edc423ac115eb8a6afaebff37
Signed-off-by: JJ Lee <leejj@google.com>
 2022-09-07 11:45:18 +00:00
Adam Shih
c08f9cf882 move insert module script sepolicy to gs-common 
Bug: 243763292
Test: boot to home with no relevant SELinux error
Change-Id: I52fe6631b3ec806a5624375457874d9248927b00
 2022-09-06 10:40:01 +08:00
Adam Shih
5742be1014 move insmod script to gs-common 
Bug: 243763292
Test: boot to home
Change-Id: If676806d806adcd7f1fcecc1199255788e8858ef
 2022-09-05 12:21:43 +08:00
Timmy Li
e6e9e34d22 Merge "Change SElinux so Aswang can be accessed" 2022-09-01 20:37:25 +00:00
Adam Shih
f55fb71bf0 Merge "Move dauntless settings to gs-common" 2022-08-31 23:49:37 +00:00
Roger Fang
d5e2902e91 sepolicy: add permission for AMS rate of pixelstats-vend am: a8eab1aaaf am: 5321008d5c 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19711052

Change-Id: If5dad118d1a1c845a84d3b53baff485c58cce03c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-08-30 05:45:30 +00:00
Roger Fang
5321008d5c sepolicy: add permission for AMS rate of pixelstats-vend am: a8eab1aaaf 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19711052

Change-Id: I61f3cfbb14f0f34bf0af2eaba1922b9aed4b7948
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-08-30 05:15:55 +00:00
Roger Fang
a8eab1aaaf sepolicy: add permission for AMS rate of pixelstats-vend 
I pixelstats-vend: type=1400 audit(0.0:1025): avc: denied { read } for name="ams_rate_read_once" dev="sysfs" ino=79714 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I pixelstats-vend: type=1400 audit(0.0:1026): avc: denied { open } for path="/sys/devices/platform/audiometrics/ams_rate_read_once" dev="sysfs" ino=79714 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
pixelstats-vend: type=1400 audit(0.0:1027): avc: denied { getattr } for path="/sys/devices/platform/audiometrics/ams_rate_read_once" dev="sysfs" ino=79714 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

Bug: 239508478
Test: Manually test passed

Signed-off-by: Roger Fang <rogerfang@google.com>
Change-Id: I5c47003bed664f2cd9b6fe3630a6445aca27d10d
 2022-08-30 04:36:41 +00:00
Adam Shih
a5cbf912ce Move dauntless settings to gs-common 
Bug: 242479757
Test: build pass on all Gchip devices
Change-Id: I9751e59b751f867d4cf734ffe7497a2e22c0c6f9
 2022-08-30 12:29:54 +08:00
Robb Glasser
94f9358eed Give permissions to save usf stats and dump them in bugreports. am: 4b4afb2eea am: 6ce1ff96e4 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19672464

Change-Id: Idbd78e19d1b642d3cfc306ad69ded4515a14985d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-08-25 04:06:32 +00:00
Robb Glasser
6ce1ff96e4 Give permissions to save usf stats and dump them in bugreports. am: 4b4afb2eea 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19672464

Change-Id: Iacf95664f2ba6bf126b82e2e2d73bddcddb70422
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-08-25 03:38:27 +00:00
Robb Glasser
4b4afb2eea Give permissions to save usf stats and dump them in bugreports. 
Creating a mechanism to save some USF stat history to device and pipe it
to bugreports. Granting permissions so that this can work.

Bug: 242320914
Test: Stats save and are visible in a bugreport.
Change-Id: Ia1973800ed053f54da043d306e11c0a7b10132a7
 2022-08-24 22:39:16 +00:00