Commit graph

2937 commits

Author SHA1 Message Date
Kyle Tso
7347d18b73 Add logbuffer_pogo_transfer file_contexts
Bug: 232556226
Signed-off-by: Kyle Tso <kyletso@google.com>
Change-Id: I1037d39f4187807e6aa9753339fae29e3bc89359
Merged-In: I1037d39f4187807e6aa9753339fae29e3bc89359
2022-05-21 15:25:58 +00:00
Joner Lin
41026aeae6 Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e am: 9955721f73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: I513959f3ff0e5d1bcb81257538281e2b40f473af
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 12:54:05 +00:00
Joner Lin
9955721f73 Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev am: 5a222bc64e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18349808

Change-Id: If769c5b2f24bbb04f842c65e1e71bf21e86c4078
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-20 12:20:46 +00:00
Joner Lin
5a222bc64e Merge "Grant policy for BluetoothHal Extionsion feature" into tm-dev 2022-05-20 05:06:32 +00:00
jonerlin
9f214e0453 Grant policy for BluetoothHal Extionsion feature
Bug: 228943442
Test: Manually
Change-Id: I00b37c1f74ca9b904df2319d2c58d34228e9678b
2022-05-19 09:59:56 +08:00
George Chang
d479f730b0 Update nfc from hidl to aidl service
Bug: 216290344
Test: atest NfcNciInstrumentationTests
Test: atest VtsAidlHalNfcTargetTest
Merged-In: I288474f691670655516728fe0e164a3e5689875c
Change-Id: I288474f691670655516728fe0e164a3e5689875c
2022-05-17 04:14:57 +00:00
TreeHugger Robot
a48761315f Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f am: ed1ec96363
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: I294f324c4c26521cb7d8553e6127281826c30a1d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 10:39:44 +00:00
TreeHugger Robot
ed1ec96363 Merge "Allow mediacodec to access vendor_data_file" into tm-dev am: c0d38cbc9f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18186340

Change-Id: Iffeee5071854c1f2af2cad5c7a5783421980b153
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-13 09:49:23 +00:00
TreeHugger Robot
c0d38cbc9f Merge "Allow mediacodec to access vendor_data_file" into tm-dev 2022-05-13 09:24:01 +00:00
Lily Lin
ca85474dbe Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468 am: 5389123249
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: I619b1afeebbe51d58ba0b60fbe3dc2ac3733bc23
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:25:08 +00:00
Will McVicker
3dbfde7852 genfs_contexts: fix more i2c raw paths am: 9cbc9eceec am: 6c256f9fee
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: I4e9c3bf9cbe7e3d5d34fa0bda3d4260cc40cc479
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 02:25:02 +00:00
Lily Lin
5389123249 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev am: e910a12468
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17988448

Change-Id: Ib4dd93e176fe6bf1ead64e4ed55999d4afa2fd59
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 01:58:06 +00:00
Will McVicker
6c256f9fee genfs_contexts: fix more i2c raw paths am: 9cbc9eceec
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18192191

Change-Id: Ia370a2ce14f323d16f3e34a8e4d0ef9ff9fd12d8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-11 01:57:53 +00:00
Lily Lin
e910a12468 Merge "Add selinux permissions to r/w sysfs st33spi_state" into tm-dev 2022-05-11 01:22:36 +00:00
Jerry Huang
a5e9b426eb Allow mediacodec to access vendor_data_file
For dumping output buffer of HDR to SDR fliter.

This patch fixes the following denial:

05-06 15:26:54.248  1046   856   856 W HwBinder:856_4: type=1400 audit(0.0:174404): avc: denied { getattr } for name="/" dev="dmabuf" ino=1 scontext=u:r:mediacodec:s0 tcontext=u:object_r:unlabeled:s0 tclass=filesystem permissive=0

Bug: 229360116
Change-Id: I41acb29407a7ddb27279a834e27c5ee515efe666
2022-05-10 09:22:12 +00:00
Lily Lin
59f29edf92 Add selinux permissions to r/w sysfs st33spi_state
Bug: 228655141
Test: Confirm can read/write st33spi_state
Change-Id: I65299414d6268580dc532170759459147378418b
2022-05-10 16:32:45 +08:00
Richard Hsu
7284f35989 Merge "[SELinux] Allow NNAPI HAL to log traces to perfetto under userdebug builds" into tm-d1-dev am: 4f5bb2c0aa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18214742

Change-Id: I15d01edffa53fe35c8b81698b1a9b6ffb69f688a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-09 18:49:57 +00:00
Richard Hsu
4f5bb2c0aa Merge "[SELinux] Allow NNAPI HAL to log traces to perfetto under userdebug builds" into tm-d1-dev 2022-05-09 17:55:47 +00:00
Richard Hsu
5675757d41 [SELinux] Allow NNAPI HAL to log traces to perfetto under userdebug builds
Allows DarwiNN NNAPI HAL to log traces to perfetto only under userdebug builds. This is similar to the camera HAL fix in ag/17080874

Error message:
TracingMuxer: type=1400 audit(0.0:486): avc: denied { write } for name="traced_producer" dev="tmpfs" ino=1116 scontext=u:r:hal_neuralnetworks_darwinn:s0

This rule is common for EdgeTPU in both WHI and PRO.

Bug: 231838536

Test: tested on PRO before and after the change, and the traces now shows up.

Example: https://ui.perfetto.dev/#!/?s=ab911b3972bc16a1a831e148a7446c09757a08426bbe3c3b16d31a728b1d923
https://screenshot.googleplex.com/3roWETkTFyiDjW9

Change-Id: I8d4a57e262087aa4ec6670a487d7b06d2f2cde69
2022-05-07 22:28:22 -07:00
Will McVicker
9cbc9eceec genfs_contexts: fix more i2c raw paths
These were added in commit 8a19d8be9c ("genfs_contexts: fix path for
i2c peripheral devices") to address missing i2c paths when kernel
modules are loaded in parallel. The raw i2c paths were not added in that
commit. So add them here in order to fix a vibrator crash for
P21-mainline due to not having the named i2c paths.

Bug: 231637004
Fixes: 8a19d8be9c ("genfs_contexts: fix path for i2c peripheral devices")
Change-Id: I02dfff504704f761c99c328b39595789c2cbeef5
2022-05-05 16:04:31 -07:00
TreeHugger Robot
bbe95c3a79 Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d am: 82a83b366a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: Ia31705514741c26b3ab34ecc21edb45e57ef89c2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 08:46:04 +00:00
Ray Chi
d924169220 Allow hal_usb_gadget_impl to access proc_irq am: 7ac349e932 am: b5c3f6e0ba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17313628

Change-Id: I96ba2776bb32556b1a3f01cf83cc3d0da63ea7fe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 08:46:02 +00:00
TreeHugger Robot
82a83b366a Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: Ie610b6f31e218dece80fb0dc52b66050382d4e26
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 07:27:14 +00:00
Ray Chi
b5c3f6e0ba Allow hal_usb_gadget_impl to access proc_irq am: 7ac349e932
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17313628

Change-Id: I12709e8375ab34a1ed08ae48ce2db522d98f188c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 07:27:12 +00:00
TreeHugger Robot
36f7fe941d Merge changes from topic "gs101-move-dwc3-irq" into tm-dev
* changes:
  Revert "add sepolicy for set_usb_irq.sh"
  Allow hal_usb_gadget_impl to access proc_irq
2022-05-05 07:08:20 +00:00
Yichi Chen
43d6af291c Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c am: b2c0884cd9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I0c12bd8decf007033f42c492d149d6afb0a1244f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 02:44:17 +00:00
Yichi Chen
b2c0884cd9 Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I3053433540b747906ef69eed537d9eb600923a2a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 02:19:25 +00:00
Yichi Chen
650209645c Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev 2022-05-05 02:03:49 +00:00
William McVicker
d5094282b6 Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e am: 18cb713b62
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: Ie615dcd13480e7cc91195c8726ebbc13e2225342
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 17:12:51 +00:00
William McVicker
18cb713b62 Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: I8abb96731bc5d3b3f95168607dcfe8932d3f3727
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 16:39:32 +00:00
William McVicker
e6250cd86e Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev 2022-05-04 16:10:16 +00:00
Ray Chi
503fa09010 Revert "add sepolicy for set_usb_irq.sh"
This reverts commit 714075eba7.

Bug: 224699556
Test: build pass
Change-Id: Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af
Merged-In: Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af
(cherry picked from commit bf9ec40ab7)
2022-05-04 11:45:26 +00:00
Ray Chi
7ac349e932 Allow hal_usb_gadget_impl to access proc_irq
Bug: 224699556
Test: build pass
Change-Id: Id9a9adbdc921629b6e89d0850dd8acaf76b1a891
Merged-In: Id9a9adbdc921629b6e89d0850dd8acaf76b1a891
(cherry picked from commit 455c3c165348fa9ea65c65b004d4dda1426d04be)
2022-05-04 11:45:08 +00:00
Asad Ali
8974ed37c4 Merge "Allow chre to communicate with fwk_stats_service." into tm-qpr-dev 2022-05-03 21:00:47 +00:00
Jenny Ho
7c382afd48 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6 am: d1b13f7695
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: I916b100095fe62e2383c14e5ddf4b3bcb9dc390e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 14:06:10 +00:00
Jenny Ho
d1b13f7695 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: I58800e42bead3292e710f361e43829b221c4ee67
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 13:31:51 +00:00
Jenny Ho
9b27bbdab6 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev 2022-05-03 10:39:21 +00:00
Will McVicker
12b3700a38 genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes
This adds the [067]-001f and [178]-002f raw i2c numberings to the
sepolicy for the P21-mainline driver which doesn't use the i2c vendor
hook to rename these numberings. This is required for the thermal hal to
work.

Bug: 231155356
Signed-off-by: Will McVicker <willmcvicker@google.com>
Change-Id: I8e4bbbd0768e63e708f46eb42bddb5fc28b29caa
2022-05-02 10:12:15 -07:00
Asad Ali
7bfcc6f4e5 Allow chre to communicate with fwk_stats_service.
Bug: 230788686
Test: Logged atoms using CHRE + log atom extension.
Change-Id: I0683a224d61cdc8c927360ebad3de115ed431e1a
(cherry picked from commit c6ea8d1656)
2022-04-29 17:00:27 +00:00
Kris Chen
c6eea8a657 Allow hal_fingerprint_default to access hal_pixel_display_service
Fix the following avc denial:
avc: denied  { find } for pid=1158 uid=1000 name=com.google.hardware.pixel.display.IDisplay/default scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:hal_pixel_display_service:s0 tclass=service_manager permissive=0
avc: denied { call } for scontext=u:r:hal_fingerprint_default:s0 tcontext=u:r:hal_graphics_composer_default:s0 tclass=binder permissive=0

Bug: 229716695
Bug: 224573604
Test: build and test fingerprint on device.
Change-Id: Id24e65213221048d6dfdeae6ed2bcb7b762a0f75
2022-04-28 03:08:47 +00:00
Wei Wang
b9f0680283 allow udfps hal to access trusty am: 615f85c22d am: b94efeaff0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I45576b46edad47a0614534f0a503a99036936e55
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 02:09:40 +00:00
Wei Wang
b94efeaff0 allow udfps hal to access trusty am: 615f85c22d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I021692200c0bc229f23d573685f1ca75c4fb0ca1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 01:15:56 +00:00
Wei Wang
615f85c22d allow udfps hal to access trusty
Bug: 229350721
Bug: 230492593
Test: UDFPS with stress
Signed-off-by: Wei Wang <wvw@google.com>
Change-Id: Ib1abe0e0318689528a6658f3597f1c11ad9fa1c3
2022-04-27 20:20:43 +00:00
Jenny Ho
15036785cf sepolicy: allow access debugfs charger register dump
[  438.549652] type=1400 audit(1651035282.616:8): avc: denied { read } for comm="dumpstate@1.1-s" name="registers" dev="debugfs" ino=31549 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:debugfs:s0 tclass=file permissive=0
[  438.550252] type=1400 audit(1651035282.616:9): avc: denied { read } for comm="dumpstate@1.1-s" name="registers" dev="debugfs" ino=31532 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:debugfs:s0 tclass=file permissive=0

Bug: 230360103
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: I102a159ca23a65d99a52cac3d011f5ce535a37e7
2022-04-27 10:09:48 +00:00
Wei Wang
0335b3f6bc Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a am: dff2ecee1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: I414ecceb80c9d85270e4657bf83c6ed9e23b50b7
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 17:38:41 +00:00
Wei Wang
dff2ecee1c Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: I93b6b6da30c68efc6df038a4ba9d30e037abd8bd
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 17:09:57 +00:00
Wei Wang
5e9a38799a Merge "Grant trusty to power hal" into tm-dev 2022-04-26 16:47:14 +00:00
Edmond Chung
ac4e2bd183 Camera: add setsched capability. am: 2715a08a73 am: 0ddf256588
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: I10e45832daefc30d2607c5017e581db4db364c9f
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 09:02:04 +00:00
Edmond Chung
0ddf256588 Camera: add setsched capability. am: 2715a08a73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: I226c2636c54592127c8786e1e7a8e58e182159db
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 08:30:22 +00:00
Edmond Chung
2715a08a73 Camera: add setsched capability.
The camera HAL needs to configure schedule policies for
performance optimizations.

Bug: 228632527
Test: GCA, adb logcat
Change-Id: Ifbf433c026549ca774a9521704d0b0b75c9e9f23
2022-04-24 23:08:42 +00:00