Commit graph

1550 commits

Author SHA1 Message Date
Alex Hong
e44e432672 Move the type definition of properties from product to vendor
These properties cannot be resolved after product sepolicy is replaced.
  vendor_persist_config_default_prop
  vendor_rild_prop

Test: The device can boot to home after replacing with GSI
Bug: 191236468
Change-Id: Ib797601a44306987e5a85897c7b6cd7827ad91b2
2021-06-24 02:01:20 +00:00
Minchan Kim
650cf48406 Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev 2021-06-24 01:45:11 +00:00
Thierry Strudel
9608f4b83b Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd am: c45b4c7c51
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438

Change-Id: I0e3717a41c0b72e61dde822f1997ab80c61d776b
2021-06-24 01:13:03 +00:00
Thierry Strudel
6a940b5459 Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd am: b491ce3a18
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438

Change-Id: Id7f0e5a4b4ab5d083b021e8b91568acdd2d6eea7
2021-06-24 01:08:54 +00:00
Thierry Strudel
c45b4c7c51 Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438

Change-Id: Ia0ff6c0dceb663346fd48b6970e5a6035437eff0
2021-06-24 00:56:12 +00:00
Thierry Strudel
b491ce3a18 Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438

Change-Id: Ib43a3b2c888f48c70c6a71e117a8de04662f923a
2021-06-24 00:54:58 +00:00
Thierry Strudel
e99c749cbd Merge "Add support for non-su hal_uwb" into sc-dev 2021-06-24 00:45:49 +00:00
Minchan Kim
7f9abeee45 sepolicy: gs101: allow dump cma statistics
Provide necessary sepolicy for bugreport dump to access cma metric
information under /sys/kernel/pixel_stat/*

Test: Run "adb bugreport <zip>" and verify it contains the output
      from dumpstate_board.txt
Bug: 191904985
Signed-off-by: Minchan Kim <minchan@google.com>
Change-Id: Iaa92006eeb5158a0962652427d1af061fe1cf03d
2021-06-23 14:15:46 -07:00
TreeHugger Robot
d1473d3ec6 Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf am: 99b2f78bde
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299

Change-Id: I0ec95809d1b25539217739f18f22f42f4863ba05
2021-06-23 11:49:13 +00:00
TreeHugger Robot
101bb0fa5f Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf am: b596f9dbd5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299

Change-Id: I06174f5bf937c42263cfe807dad3edaae7b0b6fd
2021-06-23 11:48:54 +00:00
TreeHugger Robot
b596f9dbd5 Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299

Change-Id: Id800243025f0eb916789582f6c9925924e94e4ec
2021-06-23 11:33:09 +00:00
TreeHugger Robot
99b2f78bde Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299

Change-Id: I9ca9b992d8f0c428bd36e437d8fc018f395ff8a0
2021-06-23 11:32:03 +00:00
TreeHugger Robot
c431abb5bf Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev 2021-06-23 11:20:51 +00:00
Denny cy Lee
1777ff558f Pixelstat: battery history access premission am: 0b21a2d44a am: 632e7b95ab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520

Change-Id: Ibb82df26953257cbf0575e81d67c22ec72cedd8f
2021-06-23 08:58:21 +00:00
Denny cy Lee
4ac1899651 Pixelstat: battery history access premission am: 0b21a2d44a am: 7185538f79
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520

Change-Id: Id1ce31235e04afd6571cca48c3aa9a9cc1cc4a5e
2021-06-23 08:57:50 +00:00
Sungwoo choi
5aaa0f6044 gs101-sepolicy: add oemrilservice_app.te
Seperate oemrilservice_app.te from vendor_telephony_app.te.
  - target process: com.samsung.slsi.telephony.oemril
  - selabel: oemrilservice_app
  - allow to find app_api_service
  - allow to find radio_service
  - allow to find vendor HAL
  - a binder communication with rild

Bug: 191830874
Test: Manual

Signed-off-by: Sungwoo choi <sungwoo48.choi@samsung.com>
Change-Id: I5e31b4a16f0b4d25bf4889da0150084937354808
2021-06-23 16:51:57 +08:00
Denny cy Lee
7185538f79 Pixelstat: battery history access premission am: 0b21a2d44a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520

Change-Id: Ida0cfc72b0bfcfc0943f012edc093f8d1d936679
2021-06-23 08:33:25 +00:00
Denny cy Lee
632e7b95ab Pixelstat: battery history access premission am: 0b21a2d44a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520

Change-Id: I8c5f44af025177d9c6063ae3c8b174118a100e3d
2021-06-23 08:32:29 +00:00
Kris Chen
a23d1bb37b Allow fingerprint hal to read sysfs_chosen
Fixes the following avc denial:
android.hardwar: type=1400 audit(0.0:49): avc: denied { search } for name="chosen" dev="sysfs" ino=9575 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=dir permissive=1
android.hardwar: type=1400 audit(0.0:50): avc: denied { read } for name="platform" dev="sysfs" ino=9591 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=file permissive=1
android.hardwar: type=1400 audit(0.0:51): avc: denied { open } for path="/sys/firmware/devicetree/base/chosen/plat/platform" dev="sysfs" ino=9591 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=file permissive=1

Bug: 191832617
Test: Enroll and authenticate fingerprints.
Change-Id: I5c576cc210d9e85b1999655bdc27736183db8aed
2021-06-23 16:20:57 +08:00
Denny cy Lee
433aeb2d4d Sepolicy: Pixel stats wireless charger sepolicy
Bug: 171853251
Bug: 188601686
Test: manually, do wirelees charge, check logcat
Change-Id: I4cbd7da038365ae92e34780131056da61b9a55dc
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-23 06:48:42 +00:00
Denny cy Lee
0b21a2d44a Pixelstat: battery history access premission
Test: manually, relate seploicy not show; battery history log printed
      05-24 13:29:19.637  2829  2829 D pixelstats_BatteryEEPROM:
      checkAndReport: 0940 0a80 0500 0200 0200 0000
Bug: 189050725
Change-Id: I20567e168db43fe2168a9a30ac7a4b0cec65a665
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-23 13:50:32 +08:00
Adam Shih
a70819d2f0 modularize pktrouter
Bug: 190331212
Test: make sure pktrouter gets initialized
06-23 13:21:19.372  1 1 I init : Parsing file /vendor/etc/init/pktrouter.rc...
06-23 13:21:23.510     1     1 I init    : processing action (vendor.pktrouter=1) from (/vendor/etc/init/pktrouter.rc:7)
06-23 13:21:23.510     1     1 I init    : starting service 'pktrouter'...
Change-Id: Icc7ab88505aea47cfed5ffc5182d0625b7a7609d
2021-06-23 05:24:01 +00:00
Adam Shih
9b7b36093f modulize init.radio.sh am: d74e989739 am: af082207ce
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203

Change-Id: I0e41b10f40aeed53c2c4a15d27e4a04fb0c9478a
2021-06-23 03:36:08 +00:00
Adam Shih
4d69f3c773 modulize init.radio.sh am: d74e989739 am: 2812270759
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203

Change-Id: Icb720abe930291037a1b3da65a52d8b94e6e8b69
2021-06-23 03:30:58 +00:00
Adam Shih
2812270759 modulize init.radio.sh am: d74e989739
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203

Change-Id: Ifae088c8915f6920de295286e6c34a9af17de8b3
2021-06-23 03:17:48 +00:00
Adam Shih
af082207ce modulize init.radio.sh am: d74e989739
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203

Change-Id: I9fd2463183e0b630daca6503b1655fd3bd88227f
2021-06-23 03:16:54 +00:00
SalmaxChang
a926055749 vendor_init/dumpstate: Grant to access logger prop
Bug: 176176656
Change-Id: I551ccfac57d983aab95aa23e1f350f78ee0a159f
2021-06-23 10:06:09 +08:00
Michael Ayoubi
cebbf14174 Add support for non-su hal_uwb
Bug: 187386527
Test: Boot and confirm HAL is up
Signed-off-by: Michael Ayoubi <mayoubi@google.com>
Change-Id: Ia9f3f90fba6981762fe375aa37c81f8474ad9c53
2021-06-23 01:26:25 +00:00
Adam Shih
d74e989739 modulize init.radio.sh
Bug: 190331600
Test: build ROM and make sure the file is there and functional.
Change-Id: Icb3e0e590ae315d53eb5251fd5e74d6aacab1fe2
2021-06-23 01:07:26 +00:00
TreeHugger Robot
2719d2f8ae Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca am: 7ad9e45515
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575

Change-Id: Ide59cfb052e501d809cb9a263297c5c6dd999ea2
2021-06-22 12:45:15 +00:00
TreeHugger Robot
e5febaf579 Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca am: 7559eac0df
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575

Change-Id: I13e1fa6cdd1c266ae3f60fbd4569b0e39f82bcf4
2021-06-22 12:41:20 +00:00
TreeHugger Robot
7ad9e45515 Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575

Change-Id: I1922239b616469f421d75ac35a392d65d2521cc4
2021-06-22 12:30:09 +00:00
TreeHugger Robot
7559eac0df Merge "Allow camera hal to access devfreq query" into sc-dev am: e2ef28efca
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14980575

Change-Id: I053b84d7c183802f0e78511de11e18b60ad68709
2021-06-22 12:26:37 +00:00
TreeHugger Robot
e2ef28efca Merge "Allow camera hal to access devfreq query" into sc-dev 2021-06-22 12:06:16 +00:00
Speth Chang
419019a71a Allow camera hal to access devfreq query
Bug: 190687351
Test: p21 checklist
Change-Id: Id0cb74b483882a6ede93cadc475a7be334ecf20d
2021-06-22 10:19:49 +00:00
Alex Hong
902f2cf23c Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2 am: 710cc3863d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028

Change-Id: Ie84cb1af05a719443261aebd22fabd03368d580d
2021-06-22 03:38:06 +00:00
Alex Hong
a23e74f7d3 Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2 am: fd43ace221
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028

Change-Id: Ib4bd5ba999bbc150892b332b59fc0dc2368e706e
2021-06-22 03:37:52 +00:00
Alex Hong
fd43ace221 Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028

Change-Id: I79ce5df849956b3b000ff6241ef0c20dd0a32f7c
2021-06-22 03:20:34 +00:00
Alex Hong
710cc3863d Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev am: 1f17829dc2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15045028

Change-Id: I3f65c53287d4ba739d640e40a458e169c92b78f6
2021-06-22 03:19:49 +00:00
Alex Hong
1f17829dc2 Merge "Move the genfs_contexts of sched nodes from vendor to product" into sc-dev 2021-06-22 03:01:07 +00:00
Srinivas Patibandla
df7ad071fa Update time sync seinfo to not use platform signature am: 51c891fa7b am: 38b0a12272
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432

Change-Id: Ie351ebfccec59c70a5287ddb5e11004a7df7cc5d
2021-06-21 20:22:06 +00:00
Srinivas Patibandla
ea69d530a0 Update time sync seinfo to not use platform signature am: 51c891fa7b am: 0d3d449ced
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432

Change-Id: I5bed4668b0e413af4251fd73dc05908e194d68ed
2021-06-21 20:12:47 +00:00
Srinivas Patibandla
38b0a12272 Update time sync seinfo to not use platform signature am: 51c891fa7b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432

Change-Id: Ia0719062e6021fb25aa88183eec92740c1e0bf3d
2021-06-21 19:56:40 +00:00
Srinivas Patibandla
0d3d449ced Update time sync seinfo to not use platform signature am: 51c891fa7b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15014432

Change-Id: I1ae881f223b3e014b74af2495255ef18c0e30ffc
2021-06-21 19:54:51 +00:00
Alex Hong
c598db170c Move the genfs_contexts of sched nodes from vendor to product
For sched nodes, "proc_vendor_sched" and "sysfs_vendor_sched",
their type definition is in product sepolicy,
while genfs_contexts is in vendor sepolicy.
In this case, genfs_contexts cannot be resolved after product sepolicy
is replaced by Dynamic System Update.

Need to keep the type definition and genfs_contexts in the same partition.
Now move genfs_contexts because the type definition has to be in product for now
since other private domains are accessing these sched nodes.

Test: $ make selinux_policy
      The device can boot to home after replacing with GSI.
Bug: 191236468
Change-Id: I02ea78b04dfcade4ceb426ff6ebf498daa81ac32
2021-06-21 14:55:08 +00:00
Srinivas Patibandla
51c891fa7b Update time sync seinfo to not use platform signature
Bug: b/190695230
Change-Id: I2dbee2e624c8794b3aa9ff85d8985a15ee159a0f
2021-06-21 14:47:28 +00:00
Thiebaud Weksteen
bf58949ba3 Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev am: c4d98b5c11 am: 24b135a5ba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15018192

Change-Id: I869dcdb0a0419de8c7d61cfeff45676ca44e6c8a
2021-06-21 09:21:00 +00:00
Thiebaud Weksteen
344792d48a Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev am: c4d98b5c11 am: e6f8977370
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15018192

Change-Id: I7de56040c97e5bd6c8cc1d8099e94a567817a5d6
2021-06-21 09:20:33 +00:00
Thiebaud Weksteen
e6f8977370 Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev am: c4d98b5c11
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15018192

Change-Id: Ia6ed028f32448e2475784a8e9406092b7ea6572e
2021-06-21 08:56:38 +00:00
Thiebaud Weksteen
24b135a5ba Merge "Fix access permissions for sysfs_aoc_reset" into sc-dev am: c4d98b5c11
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15018192

Change-Id: Id422825604c3df974fbcd225c966742ceb1f6a7f
2021-06-21 08:55:44 +00:00