Evolution-X-Tensor/device_google_gs101
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
3468 commits 1 branch 0 tags 494 MiB
Commit graph

3468 commits

This branch
This branch
All branches
Author SHA1 Message Date
Maurice Lam
6bc7204b64 Merge "Fix cuttlefish test fail due to sepolicy of Wirecutter" into sc-dev 2021-03-31 01:20:12 +00:00
TreeHugger Robot
5268d84b5d Merge "Allow mediacodec to access the vstream-secure DMA-BUF heap" into sc-dev am: a548cd7773 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14035947

Change-Id: Ibf371ed6a35555a222bc18c7121d93699730873a
 2021-03-31 01:16:32 +00:00
Xu Han
d0a3644eaa Merge "Allow camera HAL access radioext service" into sc-dev am: f34ff90b48 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14025054

Change-Id: Ia978600ea310f05df3d4e3099e87f734ac59ab24
 2021-03-31 01:16:18 +00:00
Eddie Tashjian
44799a27ba Add sepolicy for CBRS setup app. 
Bug: 182519609
Test: Test CBRS setup
Change-Id: I3ee27dd80eb0484c9cf2c6be0c63aee996383f7f
 2021-03-30 18:06:14 -07:00
TreeHugger Robot
a548cd7773 Merge "Allow mediacodec to access the vstream-secure DMA-BUF heap" into sc-dev 2021-03-31 01:05:14 +00:00
Xu Han
f34ff90b48 Merge "Allow camera HAL access radioext service" into sc-dev 2021-03-31 00:45:11 +00:00
Adam Shih
98d890424d update error on ROM 
Bug: 184091381
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ia37d49cf2e347a22181058987b0edf8f93457c53
 2021-03-31 08:32:56 +08:00
Eddie Tashjian
fd3a304ec2 Merge "Allow radioext to access bluetooth coex hal." into sc-dev am: a5879bec5b 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14020221

Change-Id: I76dbea4d35a134a2f32aeea963717f2620a864ac
 2021-03-30 23:29:48 +00:00
Eddie Tashjian
a5879bec5b Merge "Allow radioext to access bluetooth coex hal." into sc-dev 2021-03-30 23:03:24 +00:00
Maurice Lam
880dd70064 Fix cuttlefish test fail due to sepolicy of Wirecutter 
Need to grant gpu_device dir search permission to be able to render UI
on cuttlefish.

Fixes: 183995046
Test: atest WirecutterTests
Change-Id: I122e541188ce659381769339e3f9e6b720441a92
 2021-03-30 22:18:45 +00:00
TreeHugger Robot
3bc4072b14 Merge "sepolicy: allow hwservice to see armnn nnhal." into sc-dev am: 8250408148 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14020212

Change-Id: I930d8db6e73fc5e3d1172ddb063c4f7aeed94c1c
 2021-03-30 21:43:53 +00:00
TreeHugger Robot
8250408148 Merge "sepolicy: allow hwservice to see armnn nnhal." into sc-dev 2021-03-30 21:16:27 +00:00
Kevin DuBois
4f5d60403d sepolicy: allow hwservice to see armnn nnhal. 
Allows hwservice to see armnn nnhal.

Fixes: 183917925
Test: build, check for absence of error msg in logcat.
Test: run_nnapi_tests for darwinn
Test: CtsNNAPITestCases64 --hal_service_instance=android.hardware.neuralnetworks@1.3::IDevice/google-edgetpu --gtest_filter="TestGenerated*"
Change-Id: I9778e92d6f15e9aa74774c6a8d143969951046eb
 2021-03-30 19:58:52 +00:00
Hridya Valsaraju
ef8172c028 Allow mediacodec to access the vstream-secure DMA-BUF heap 
This patch fixes the following denial:

avc: denied { read } for comm="HwBinder:727_3" name="vstream-secure"
dev="tmpfs" ino=693 scontext=u:r:mediacodec:s0
tcontext=u:object_r:dmabuf_system_secure_heap_device:s0 tclass=chr_file
permissive=0

Bug: 183681871
Test: build
Change-Id: I018a8d42afe2bb58416b47864b8ffd53de9292cb
 2021-03-30 12:41:17 -07:00
Oleg Matcovschi
5debfd67eb Merge "gs101-sepolicy: add sscoredump" into sc-dev am: 20c4be9a06 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14035188

Change-Id: I9d5ee813005d868290310a6fba85930b40064db3
 2021-03-30 18:26:15 +00:00
Xu Han
6932235e89 Allow camera HAL access radioext service 
Camera needs to query radioext for preferred MIPI clock rate.

Bug: 178038924
Test: camera CTS
Change-Id: Id1dbe8a12d07b5ccfb4fc7db69dda7ce78a163a7
 2021-03-30 11:15:44 -07:00
Oleg Matcovschi
20c4be9a06 Merge "gs101-sepolicy: add sscoredump" into sc-dev 2021-03-30 18:02:18 +00:00
Ankit Goyal
04b05f86bc Merge "Fix SELinux denials for arm.graphics AIDL interface" into sc-dev am: 4097aa96ab 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14026225

Change-Id: I5d43362df8360be6f37bce92123df0c00795feb6
 2021-03-30 17:08:17 +00:00
Yu-Chi Cheng
755a1de452 Allowed EdgeTPU service and the EdgeTPU NNAPI hal to read /proc/version. 
Both services invoke InitGoogle in order to use google utilities (e.g.
file).  Since InitGoogle reads the kernel info from /proc/version,
this change added the corresponding selinux rules to allow that.

Bug: 183935416
Test: tested on Oriole.
Change-Id: Icb8f3a57e249774b5fad3284413661b04ff7dae6
 2021-03-30 10:07:43 -07:00
TreeHugger Robot
948fc1d359 Merge "vendor_init: allow set_prop for vendor_ro_config_default_prop" into sc-dev am: fd3d8c0467 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14025026

Change-Id: Ic26319bc3be5f80b249825f7b1f3abc0e04f63fe
 2021-03-30 17:00:17 +00:00
Ankit Goyal
4097aa96ab Merge "Fix SELinux denials for arm.graphics AIDL interface" into sc-dev 2021-03-30 16:27:55 +00:00
TreeHugger Robot
fd3d8c0467 Merge "vendor_init: allow set_prop for vendor_ro_config_default_prop" into sc-dev 2021-03-30 16:06:04 +00:00
Oleg Matcovschi
de30c53177 gs101-sepolicy: add sscoredump 
Bug: 183995288
Change-Id: I5363d0c45c183d809c03fe755835c1fc95a33159
 2021-03-30 15:31:10 +00:00
Ankit Goyal
b07d84f087 Fix SELinux denials for arm.graphics AIDL interface 
Denial example:
03-30 05:44:44.468   490   490 W RenderEngine: type=1400 audit(0.0:4): avc: denied { read } for name="arm.graphics-V1-ndk_platform.so" dev="dm-9" ino=1923 scontext=u:r:surfaceflinger:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0

Bug: 143246001
Test: Build and boot to home
Change-Id: Id7c2bd98aa634f852a21812fb2421a2e96ef7636
 2021-03-30 22:22:22 +08:00
Erik Cheng
5f6e263527 Grant permission for more camera device nodes 
Bug: 184004655
Test: aosp camera
Change-Id: I52fdb3f7f3d37537461c94b139e72add1a300bb2
 2021-03-30 17:34:38 +08:00
Yu-Chi Cheng
93bf9b613b Labelled EdgeTPU service libraries as SP-HAL. 
The EdgeTPU service libraries (libedgetpu_client.google.so and
com.google.edgetpu-V1-ndk.so) provide both the system_ext and
vendor variants.  Since these need to be linked by pre-built
applications from /product/, this change labelled them as
the same_process_hal_file in order to allow the applications
to link with the vendor variant.

Bug: 184008444
Test: tested on local Oriole with GCA.
Change-Id: I8c510f51ccc1a76d14978962d72fd91f15bf7a90
 2021-03-29 23:22:33 -07:00
Krzysztof Kosiński
946ea5bebc Improve camera HAL SELinux policy. am: dffdeca76d 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13986903

Change-Id: Id5e9c98002a9be4293a1e5a381864c35abf3fc2f
 2021-03-30 05:36:52 +00:00
Krzysztof Kosiński
dffdeca76d Improve camera HAL SELinux policy. 
- Grant access to DMA system heap for Tuscany.
- Reorder statements for more logical grouping.
- Allow access to isolated tmpfs for google3 prebuilts.
- Remove fixed denials.

Bug: 181913550
Bug: 182705901
Test: Inspected logcat, no denials from hal_camera_default
Change-Id: I9bf1ce207c3bcae1b9f9ab0f0072bb7501201451
 2021-03-29 20:42:50 -07:00
Aaron Tsai
181f1d3cd0 vendor_init: allow set_prop for vendor_ro_config_default_prop 
03-29 15:18:56.425  root     1     1 E init    : Do not have permissions to set 'ro.vendor.config.build_carrier' to 'europen' in property file '/vendor/build.prop': SELinux permission check failed

Bug: 183919837
Test: verified with the forrest ROM and error log gone
Change-Id: I87cc05306f9c038df779040514a879fc2b8ab929
 2021-03-30 11:38:19 +08:00
John Tsai
d51c2f2533 Merge "Allowed Camera hal to create debug files" into sc-dev am: f06c0a9f38 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14016760

Change-Id: Ifff513d0434a7c17fd9e079b8a2ade7be4d34541
 2021-03-30 03:24:52 +00:00
John Tsai
f06c0a9f38 Merge "Allowed Camera hal to create debug files" into sc-dev 2021-03-30 02:51:28 +00:00
Oleg Matcovschi
ef2a28f9a9 Merge "vendor_init: allow set_prop for vendor_ssrdump_prop" into sc-dev am: 5a504a1708 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13999606

Change-Id: I0f61d009637a57ade59a591f31aa15008727ed5a
 2021-03-30 01:13:37 +00:00
Oleg Matcovschi
5a504a1708 Merge "vendor_init: allow set_prop for vendor_ssrdump_prop" into sc-dev 2021-03-30 00:39:12 +00:00
Oleg Matcovschi
a91ba31808 vendor_init: allow set_prop for vendor_ssrdump_prop 
Bug: 183686188
Change-Id: I6a22419909cd85c55bd1c7e500b06f0420d0ec86
Signed-off-by: Oleg Matcovschi <omatcovschi@google.com>
 2021-03-30 00:28:04 +00:00
Oleg Matcovschi
cf08b32308 Merge changes from topic "b180760068" into sc-dev am: 3872f8015f 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14017040

Change-Id: I9b89eea1dfd61d9789f396232d744d9db5da4ddf
 2021-03-29 22:50:27 +00:00
Oleg Matcovschi
994f5fc31e vendor: remove sscoredump policies am: 6862b8e239 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14006443

Change-Id: Icd0bba0cb154fc525d261f73c2f2ef24ef24bc79
 2021-03-29 22:50:25 +00:00
Oleg Matcovschi
3872f8015f Merge changes from topic "b180760068" into sc-dev 
* changes:
  genfs_contexts: add sscoredump per-subsystem policies
  vendor: remove sscoredump policies
 2021-03-29 22:05:23 +00:00
Eddie Tashjian
ffd2cf4eb7 Allow radioext to access bluetooth coex hal. 
Allow radio extension hal to forward coexistence message from modem to
bluetooth hal.

Bug: 183978772
Test: Check selinux denials
Change-Id: Idc288ce2a1fdcf380301e2d7c10ea03af520e4d0
 2021-03-29 15:03:40 -07:00
Alex Hong
f8f1b8498c Merge "update error on ROM 7242124" into sc-dev am: 122849026f 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14018649

Change-Id: Id86ffa0c2c73356efa4412bc4809cffc91d6d4a7
 2021-03-29 17:19:51 +00:00
Oleg Matcovschi
005fafff5b genfs_contexts: add sscoredump per-subsystem policies 
Bug: 180760068
Signed-off-by: Oleg Matcovschi <omatcovschi@google.com>
Change-Id: I448dd8d5ea1e11eb774c62e129eb4c7896a5bd15
 2021-03-29 10:04:57 -07:00
Alex Hong
122849026f Merge "update error on ROM 7242124" into sc-dev 2021-03-29 16:37:47 +00:00
Alex Hong
68569d8fe3 update error on ROM 7242124 
Bug: 183935416
Bug: 183935302
Bug: 183935382
Bug: 183935443
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Iccdfc8a9eea3e8d52bebc89ca1eafcd2ec26e3c6
 2021-03-29 22:18:39 +08:00
Hsiaoan Hsu
3a4feeb1b9 Fix netutils_wrapper avc denied am: c9f580b083 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14011940

Change-Id: If6d570e2278ec3a4da2f308e5e2c5e1a780528c0
 2021-03-29 11:30:53 +00:00
JohnCH Tsai
522c283dee Allowed Camera hal to create debug files 
For steadiface and eis, they needs to create debug folders and files
under /data/vendor/camera.

Bug: 183708219
Test: GCA and check debug files
Change-Id: I5b87120702278199ac4f98cfa9114be47c760433
 2021-03-29 15:26:44 +08:00
Hsiaoan Hsu
c9f580b083 Fix netutils_wrapper avc denied 
avc denied log:
03-25 22:30:40.226  root 22962 22962 W iptables-wrappe: type=1400 audit(0.0:2269): avc: denied { read write } for path="/dev/umts_wfc1" dev="tmpfs" ino=748 scontext=u:r:netutils_wrapper:s0 tcontext=u:object_r:pktrouter_device:s0 tclass=chr_file permissive=0

03-25 22:30:40.226  root 22962 22962 W iptables-wrappe: type=1400 audit(0.0:2270): avc: denied { read write } for path="socket:[1017]" dev="sockfs" ino=1017 scontext=u:r:netutils_wrapper:s0 tcontext=u:r:pktrouter:s0 tclass=netlink_route_socket permissive=0

03-25 22:30:40.226  root 22962 22962 W iptables-wrappe: type=1400 audit(0.0:2274): avc: denied { read write } for path="socket:[655847]" dev="sockfs" ino=655847 scontext=u:r:netutils_wrapper:s0 tcontext=u:r:pktrouter:s0 tclass=udp_socket permissive=0

Bug: 183713618
Test: WFC/WFC handover

Change-Id: I363bf009c3b05ac2ceccb5580e786fcebf0f5631
 2021-03-29 05:22:41 +00:00
Oleg Matcovschi
6862b8e239 vendor: remove sscoredump policies 
Bug: 180760068
Signed-off-by: Oleg Matcovschi <omatcovschi@google.com>
Change-Id: Ib8d360b227286bdea7de00125ef2ed6ad7978e67
 2021-03-28 21:26:34 -07:00
TreeHugger Robot
a6b062f1e7 Merge "SELinux: Grant camera HAL TEE access" into sc-dev am: 6d56fb7391 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13997191

Change-Id: I4aaa68feccc12ff6ee9a335b26558663b5b00e48
 2021-03-26 06:39:36 +00:00
TreeHugger Robot
6d56fb7391 Merge "SELinux: Grant camera HAL TEE access" into sc-dev 2021-03-26 06:21:05 +00:00
Kevin DuBois
25b3b67b30 Merge "hal_neuralnetworks_armnn: allow GPU access" into sc-dev am: 978b3b4e9b 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13994637

Change-Id: I82f36fd0432c06f3575130f0d183f94e4039a176
 2021-03-25 22:36:09 +00:00
Kevin DuBois
978b3b4e9b Merge "hal_neuralnetworks_armnn: allow GPU access" into sc-dev 2021-03-25 22:01:42 +00:00