Adam Shih
99bfde4f38
Merge "modularize dmd" into sc-dev
2021-06-25 01:12:50 +00:00
TreeHugger Robot
3d20aa5c46
Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev am: 655f5cfd8f
am: 1edfd8cfe6
am: 738837c130
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072290
Change-Id: I4cdf3d1543586a4488228461b6195c2e6796c26e
2021-06-24 10:57:24 +00:00
TreeHugger Robot
1edfd8cfe6
Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev am: 655f5cfd8f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072290
Change-Id: Icea3ba9901b7a05239a34a64852e0196c31003b8
2021-06-24 10:20:51 +00:00
TreeHugger Robot
655f5cfd8f
Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev
2021-06-24 10:02:11 +00:00
Adam Shih
39c6f1987c
Merge "modularize pktrouter" into sc-dev am: 9b0b96b907
am: 1f58e76864
am: 85bdce6ef7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048206
Change-Id: I20ec2da8e14c933dd69ca1d0dafe592b34b3c3d4
2021-06-24 08:12:05 +00:00
Adam Shih
1f58e76864
Merge "modularize pktrouter" into sc-dev am: 9b0b96b907
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048206
Change-Id: Ibd259d8b20c59e5e950125fbbae3bb14853d4348
2021-06-24 07:41:01 +00:00
Adam Shih
9b0b96b907
Merge "modularize pktrouter" into sc-dev
2021-06-24 07:24:45 +00:00
Ilya Matyukhin
2460cdcc9f
raviole: transition SystemUI to use HWC for LHBM
...
This change removes direct access to the LHBM sysfs node from SystemUI,
but allows SystemUI to make binder calls to the hardware composer (HWC),
which can be used to enable or disable LHBM.
Bug: 191132545
Bug: 190563896
Bug: 184768835
Test: no avc denials
Change-Id: I5417377ff096e869ad772e4fd2fb23f8c1fd4f1e
2021-06-23 23:38:27 -07:00
Adam Shih
8b326703e1
modularize dmd
...
Bug: 190331463
Test: build ROM and make sure dmd is launched
Change-Id: If1e51b6bc100e870a15a40f5e0d93a75fe68bac3
2021-06-24 14:17:29 +08:00
Alex Hong
eae86c1df5
Merge "Move the type definition of properties from product to vendor" into sc-dev am: d912300853
am: 485004935f
am: c9ffe52783
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15080406
Change-Id: If637118deb2722a6990eb6d07d1b97681a4b04f3
2021-06-24 02:53:13 +00:00
Minchan Kim
32f9ba3b8e
Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev am: 650cf48406
am: d8c003c9e1
am: ef8058e2e2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15081303
Change-Id: Id45cda9645d83e6ad7c1bde4c3c3c36768389066
2021-06-24 02:53:05 +00:00
Alex Hong
485004935f
Merge "Move the type definition of properties from product to vendor" into sc-dev am: d912300853
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15080406
Change-Id: I08cf166cc9658f3bf72884ec1a492a9e7afdcd09
2021-06-24 02:19:02 +00:00
Minchan Kim
d8c003c9e1
Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev am: 650cf48406
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15081303
Change-Id: I8dd50fa4c57b82b6e887d5bd4df8f9035bb68bd6
2021-06-24 02:18:49 +00:00
Alex Hong
d912300853
Merge "Move the type definition of properties from product to vendor" into sc-dev
2021-06-24 02:15:36 +00:00
Alex Hong
e44e432672
Move the type definition of properties from product to vendor
...
These properties cannot be resolved after product sepolicy is replaced.
vendor_persist_config_default_prop
vendor_rild_prop
Test: The device can boot to home after replacing with GSI
Bug: 191236468
Change-Id: Ib797601a44306987e5a85897c7b6cd7827ad91b2
2021-06-24 02:01:20 +00:00
Minchan Kim
650cf48406
Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev
2021-06-24 01:45:11 +00:00
Thierry Strudel
55f1569d32
Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd
am: b491ce3a18
am: 6a940b5459
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438
Change-Id: Ib53dbc81f22f73f0af0039e8ecce36fc76b45d9f
2021-06-24 01:31:59 +00:00
Thierry Strudel
6a940b5459
Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd
am: b491ce3a18
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438
Change-Id: Id7f0e5a4b4ab5d083b021e8b91568acdd2d6eea7
2021-06-24 01:08:54 +00:00
Thierry Strudel
c45b4c7c51
Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438
Change-Id: Ia0ff6c0dceb663346fd48b6970e5a6035437eff0
2021-06-24 00:56:12 +00:00
Thierry Strudel
e99c749cbd
Merge "Add support for non-su hal_uwb" into sc-dev
2021-06-24 00:45:49 +00:00
Minchan Kim
7f9abeee45
sepolicy: gs101: allow dump cma statistics
...
Provide necessary sepolicy for bugreport dump to access cma metric
information under /sys/kernel/pixel_stat/*
Test: Run "adb bugreport <zip>" and verify it contains the output
from dumpstate_board.txt
Bug: 191904985
Signed-off-by: Minchan Kim <minchan@google.com>
Change-Id: Iaa92006eeb5158a0962652427d1af061fe1cf03d
2021-06-23 14:15:46 -07:00
TreeHugger Robot
573bf012b9
Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf
am: b596f9dbd5
am: 101bb0fa5f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299
Change-Id: I785680b9842e956f7b1f94144c103093f01743eb
2021-06-23 12:03:37 +00:00
TreeHugger Robot
b596f9dbd5
Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299
Change-Id: Id800243025f0eb916789582f6c9925924e94e4ec
2021-06-23 11:33:09 +00:00
TreeHugger Robot
c431abb5bf
Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev
2021-06-23 11:20:51 +00:00
Denny cy Lee
2c65b9eebb
Pixelstat: battery history access premission am: 0b21a2d44a
am: 7185538f79
am: 4ac1899651
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520
Change-Id: Ib960713a501ab7798b6b53322ef579a59fc3040e
2021-06-23 09:17:34 +00:00
Sungwoo choi
5aaa0f6044
gs101-sepolicy: add oemrilservice_app.te
...
Seperate oemrilservice_app.te from vendor_telephony_app.te.
- target process: com.samsung.slsi.telephony.oemril
- selabel: oemrilservice_app
- allow to find app_api_service
- allow to find radio_service
- allow to find vendor HAL
- a binder communication with rild
Bug: 191830874
Test: Manual
Signed-off-by: Sungwoo choi <sungwoo48.choi@samsung.com>
Change-Id: I5e31b4a16f0b4d25bf4889da0150084937354808
2021-06-23 16:51:57 +08:00
Denny cy Lee
7185538f79
Pixelstat: battery history access premission am: 0b21a2d44a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520
Change-Id: Ida0cfc72b0bfcfc0943f012edc093f8d1d936679
2021-06-23 08:33:25 +00:00
Kris Chen
a23d1bb37b
Allow fingerprint hal to read sysfs_chosen
...
Fixes the following avc denial:
android.hardwar: type=1400 audit(0.0:49): avc: denied { search } for name="chosen" dev="sysfs" ino=9575 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=dir permissive=1
android.hardwar: type=1400 audit(0.0:50): avc: denied { read } for name="platform" dev="sysfs" ino=9591 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=file permissive=1
android.hardwar: type=1400 audit(0.0:51): avc: denied { open } for path="/sys/firmware/devicetree/base/chosen/plat/platform" dev="sysfs" ino=9591 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=file permissive=1
Bug: 191832617
Test: Enroll and authenticate fingerprints.
Change-Id: I5c576cc210d9e85b1999655bdc27736183db8aed
2021-06-23 16:20:57 +08:00
Denny cy Lee
433aeb2d4d
Sepolicy: Pixel stats wireless charger sepolicy
...
Bug: 171853251
Bug: 188601686
Test: manually, do wirelees charge, check logcat
Change-Id: I4cbd7da038365ae92e34780131056da61b9a55dc
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-23 06:48:42 +00:00
Denny cy Lee
0b21a2d44a
Pixelstat: battery history access premission
...
Test: manually, relate seploicy not show; battery history log printed
05-24 13:29:19.637 2829 2829 D pixelstats_BatteryEEPROM:
checkAndReport: 0940 0a80 0500 0200 0200 0000
Bug: 189050725
Change-Id: I20567e168db43fe2168a9a30ac7a4b0cec65a665
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-23 13:50:32 +08:00
Adam Shih
045cad750c
modulize init.radio.sh am: d74e989739
am: 2812270759
am: 4d69f3c773
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203
Change-Id: Ie78548dc80eca0306ee767eaeaad1b46eba546a5
2021-06-23 05:38:15 +00:00
Adam Shih
a70819d2f0
modularize pktrouter
...
Bug: 190331212
Test: make sure pktrouter gets initialized
06-23 13:21:19.372 1 1 I init : Parsing file /vendor/etc/init/pktrouter.rc...
06-23 13:21:23.510 1 1 I init : processing action (vendor.pktrouter=1) from (/vendor/etc/init/pktrouter.rc:7)
06-23 13:21:23.510 1 1 I init : starting service 'pktrouter'...
Change-Id: Icc7ab88505aea47cfed5ffc5182d0625b7a7609d
2021-06-23 05:24:01 +00:00
Adam Shih
2812270759
modulize init.radio.sh am: d74e989739
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203
Change-Id: Ifae088c8915f6920de295286e6c34a9af17de8b3
2021-06-23 03:17:48 +00:00
SalmaxChang
a926055749
vendor_init/dumpstate: Grant to access logger prop
...
Bug: 176176656
Change-Id: I551ccfac57d983aab95aa23e1f350f78ee0a159f
2021-06-23 10:06:09 +08:00
Michael Ayoubi
cebbf14174
Add support for non-su hal_uwb
...
Bug: 187386527
Test: Boot and confirm HAL is up
Signed-off-by: Michael Ayoubi <mayoubi@google.com>
Change-Id: Ia9f3f90fba6981762fe375aa37c81f8474ad9c53
2021-06-23 01:26:25 +00:00
Adam Shih
d74e989739
modulize init.radio.sh
...
Bug: 190331600
Test: build ROM and make sure the file is there and functional.
Change-Id: Icb3e0e590ae315d53eb5251fd5e74d6aacab1fe2
2021-06-23 01:07:26 +00:00
TreeHugger Robot
cd0d9bc391
Merge "Fix denial when flashing vendor_boot in fastbootd."
2021-06-22 18:49:01 +00:00
TreeHugger Robot
e5febaf579
Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca
am: 7559eac0df
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575
Change-Id: I13e1fa6cdd1c266ae3f60fbd4569b0e39f82bcf4
2021-06-22 12:41:20 +00:00
TreeHugger Robot
7ad9e45515
Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575
Change-Id: I1922239b616469f421d75ac35a392d65d2521cc4
2021-06-22 12:30:09 +00:00
TreeHugger Robot
e2ef28efca
Merge "Allow camera hal to access devfreq query" into sc-dev
2021-06-22 12:06:16 +00:00
Speth Chang
419019a71a
Allow camera hal to access devfreq query
...
Bug: 190687351
Test: p21 checklist
Change-Id: Id0cb74b483882a6ede93cadc475a7be334ecf20d
2021-06-22 10:19:49 +00:00
Alex Hong
fd43ace221
Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028
Change-Id: I79ce5df849956b3b000ff6241ef0c20dd0a32f7c
2021-06-22 03:20:34 +00:00
Alex Hong
1f17829dc2
Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev
2021-06-22 03:01:07 +00:00
Srinivas Patibandla
0d3d449ced
Update time sync seinfo to not use platform signature am: 51c891fa7b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432
Change-Id: I1ae881f223b3e014b74af2495255ef18c0e30ffc
2021-06-21 19:54:51 +00:00
Alex Hong
c598db170c
Move the genfs_contexts of sched nodes from vendor to product
...
For sched nodes, "proc_vendor_sched" and "sysfs_vendor_sched",
their type definition is in product sepolicy,
while genfs_contexts is in vendor sepolicy.
In this case, genfs_contexts cannot be resolved after product sepolicy
is replaced by Dynamic System Update.
Need to keep the type definition and genfs_contexts in the same partition.
Now move genfs_contexts because the type definition has to be in product for now
since other private domains are accessing these sched nodes.
Test: $ make selinux_policy
The device can boot to home after replacing with GSI.
Bug: 191236468
Change-Id: I02ea78b04dfcade4ceb426ff6ebf498daa81ac32
2021-06-21 14:55:08 +00:00
Srinivas Patibandla
51c891fa7b
Update time sync seinfo to not use platform signature
...
Bug: b/190695230
Change-Id: I2dbee2e624c8794b3aa9ff85d8985a15ee159a0f
2021-06-21 14:47:28 +00:00
Jack Wu
4266de165e
sepolicy: gs101: allows pixelstat to access wlc file nodes am: 2794370557
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14732233
Change-Id: I1568bee94e97333056a76bddf174a8dd75926e5a
2021-06-19 02:58:13 +00:00
Jack Wu
2794370557
sepolicy: gs101: allows pixelstat to access wlc file nodes
...
05-31 11:14:57.280 1000 3126 3126 W pixelstats-vend: type=1400 audit(0.0:162): avc: denied { search } for name="i2c-p9412" dev="sysfs" ino=60862 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=0
05-31 11:14:57.280 1000 3126 3126 W pixelstats-vend: type=1400 audit(0.0:163): avc: denied { search } for name="i2c-p9412" dev="sysfs" ino=60862 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=dir permissive=0
05-31 13:12:23.940 1000 2838 2838 W pixelstats-vend: type=1400 audit(0.0:182): avc: denied { read } for name="charge_stats" dev="sysfs" ino=73276 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
05-31 15:02:02.215 1000 13169 13169 W pixelstats-vend: type=1400 audit(0.0:166): avc: denied { write } for name="charge_stats" dev="sysfs" ino=73483 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
05-31 15:02:02.215 1000 13169 13169 W pixelstats-vend: type=1400 audit(0.0:167): avc: denied { write } for name="charge_stats" dev="sysfs" ino=73483 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0
Bug: 176195960
Test: manually test, no avc: denied
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I0af03dd8099e246c5f94e8e8530d7b2bcf50ff95
2021-06-18 13:50:59 +00:00
Krzysztof Kosiński
e154e0957c
Merge changes I18cbcf1b,I28a27741 into sc-dev am: c18265aaaa
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15020911
Change-Id: Ibdc7bbd8f3943e08f3202e15f8a6eff51dd65d7b
2021-06-18 08:05:55 +00:00
Krzysztof Kosiński
c18265aaaa
Merge changes I18cbcf1b,I28a27741 into sc-dev
...
* changes:
Allow camera HAL to set vendor.camera properties
Allow rlsservice/camera HAL to read /apex/apex-info-list.xml
2021-06-18 07:46:33 +00:00