jintinglin
936079ad1c
Allow modem app to read the battery info
...
Test: flash the forrest build, MDS can read the info file
Bug: 203478533
Change-Id: I9985dd2731a43445dd653e226fd2939ca355cda4
2021-10-19 03:22:46 +00:00
Max Kogan
f2d985cc54
Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-qpr1-dev am: 2a166c0eb5
am: 49a05309af
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15900366
Change-Id: I5cc1bababdf50d88df5e511285783d52dd68f4c2
2021-10-04 18:24:27 +00:00
Max Kogan
584abcc50c
Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-qpr1-dev am: 2a166c0eb5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15900366
Change-Id: I72aaf0f773f9fd640a56a1b684cfea012efeabb8
2021-10-04 18:15:20 +00:00
Max Kogan
49a05309af
Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-qpr1-dev am: 2a166c0eb5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15900366
Change-Id: I71ca6648ff0305c5142047c75eeda8e7d41cb2b6
2021-10-04 18:15:19 +00:00
Max Kogan
2a166c0eb5
Merge "sepolicy: gs101: allow dumpstate to access AoC stats" into sc-qpr1-dev
2021-10-04 18:04:01 +00:00
George Lee
e0b6a83d6f
Merge "power_hal: add bcl file permission" into sc-qpr1-dev am: 9d3965da4f
am: 6613966d5d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15905927
Change-Id: I26351c1346487603a89f80b612985481bfcf5b3b
2021-10-04 17:21:05 +00:00
George Lee
0ab239e045
Merge "power_hal: add bcl file permission" into sc-qpr1-dev am: 9d3965da4f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15905927
Change-Id: Idf99714202d32825ff0b04843e1688e42cf6635a
2021-10-04 17:11:49 +00:00
George Lee
6613966d5d
Merge "power_hal: add bcl file permission" into sc-qpr1-dev am: 9d3965da4f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15905927
Change-Id: Ic3e85e9bb8b4ac9139b6c9606edcc3522da818ee
2021-10-04 17:11:49 +00:00
George Lee
9d3965da4f
Merge "power_hal: add bcl file permission" into sc-qpr1-dev
2021-10-04 16:54:14 +00:00
Edwin Tung
2200881a2b
Merge "gps: add sepolicy to allow gps access pps gpio" into sc-qpr1-dev am: 6c249e4a9f
am: 14719fc742
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15897560
Change-Id: I1a32ed0832220518af95fdef054f7096ba718d8c
2021-09-30 14:36:37 +00:00
Edwin Tung
0a91edb9b7
Merge "gps: add sepolicy to allow gps access pps gpio" into sc-qpr1-dev am: 6c249e4a9f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15897560
Change-Id: If95d3e18d1da32b13246d0897d998935eb37c774
2021-09-30 14:26:41 +00:00
Edwin Tung
14719fc742
Merge "gps: add sepolicy to allow gps access pps gpio" into sc-qpr1-dev am: 6c249e4a9f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15897560
Change-Id: I327b8257a1c929c94a4adc02037488bdb547d642
2021-09-30 14:26:41 +00:00
Edwin Tung
6c249e4a9f
Merge "gps: add sepolicy to allow gps access pps gpio" into sc-qpr1-dev
2021-09-30 14:11:49 +00:00
Edwin Tung
4d6a7023e1
gps: add sepolicy to allow gps access pps gpio
...
Bug: 175086879
Test: no avc deny
Change-Id: I960940d7223c25732021ff4d92ae72255c044291
2021-09-30 12:41:17 +08:00
Erik Staats
35b6d77e0c
Allow the sensor HAL to access raw HID devices. am: d60ebc5327
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15847652
Change-Id: I31d13e1a04c7280706e52caea4f1c34a28b5d0e7
2021-09-27 18:45:23 +00:00
Erik Staats
d60ebc5327
Allow the sensor HAL to access raw HID devices.
...
Bug: 195964858
Test: Paired a Sony PS4 controller and verified that it's discovered by
the dynamic sensor HAL.
Test: See details in testing done comment in
https://googleplex-android-review.git.corp.google.com/15847652 .
Change-Id: Ic0bdd711d066a9793eba305102e9a850e3973856
2021-09-27 18:34:30 +00:00
Jenny Ho
948eeb2de5
sepolicy: add rule for new debug file node am: c8651e514c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15773285
Change-Id: I459d1f82f9680d87a2533568259cd54c11233d5f
2021-09-27 15:57:26 +00:00
Erik Staats
cb725e413b
Allow the sensor HAL to access dynamic sensor properties. am: e42a4ed3be
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15905607
Change-Id: I4d16e83741afa94aec87bdf19d412d8d7e53f91a
2021-09-24 17:46:31 +00:00
George Lee
2a4bce5b31
power_hal: add bcl file permission
...
Bug: 201002339
Test: Local test and ensure proper ratio written via PowerHAL
Signed-off-by: George Lee <geolee@google.com>
Change-Id: Ib0a3a5401312403ce870b9c4a4ca971f05c253e4
2021-09-24 16:10:53 +00:00
Erik Staats
e42a4ed3be
Allow the sensor HAL to access dynamic sensor properties.
...
Bug: 195964858
Test: Verified dynamic sensor manager is present in sensor list and that
no SELinux violations occur on sc-v2-dev and master.
Test: See details in testing done comment in
https://googleplex-android-review.git.corp.google.com/15905607 .
Change-Id: I2f1c05ec0d840f6ebae1e5356f668b3f9431fd25
2021-09-24 05:53:35 -07:00
Max Kogan
b92bc5f51c
sepolicy: gs101: allow dumpstate to access AoC stats
...
Add AoC DRAM votes to bugreports.
Bug: 198203507
Change-Id: I77addf15709fceb70514d552b9fa8553cb129a7c
2021-09-23 17:52:51 -07:00
Jenny Ho
c8651e514c
sepolicy: add rule for new debug file node
...
W dumpstate@1.1-s: type=1400 audit(0.0:7): avc: denied { read } for name="logbuffer_maxfg_monitor" dev="tmpfs" ino=500 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0
Bug: 196755019
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Merged-In: I0ddf68d5e15fe8d77d8d61287f65621c14024f46
Change-Id: I0ddf68d5e15fe8d77d8d61287f65621c14024f46
2021-09-23 23:29:29 +00:00
Erik Staats
f66955e015
Revert "Allow the sensor HAL to access dynamic sensor properties." am: aef1a206a7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15886140
Change-Id: I8fa160db43cbe237c73cb103e6e212e1aa0df7a0
2021-09-22 18:11:29 +00:00
Erik Staats
aef1a206a7
Revert "Allow the sensor HAL to access dynamic sensor properties."
...
Revert "dynamic_sensor: Add sensor manager init to sub-HAL 2.1."
Revert submission 15874906-bug_195964858.2
Reason for revert: b/200815351
Reverted Changes:
I76a60f7fb:Allow the sensor HAL to access dynamic sensor prop...
I5d587dc46:dynamic_sensor: Add sensor manager init to sub-HAL...
Change-Id: Ib29649b058ec6f329958e1dfcba0c2e35ea79306
2021-09-22 17:53:58 +00:00
Erik Staats
9cadbdc347
Allow the sensor HAL to access dynamic sensor properties. am: fba4a09331
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15874927
Change-Id: I9022c4d8e270af3a0d369692a6996dd046c732c4
2021-09-22 12:40:34 +00:00
Erik Staats
fba4a09331
Allow the sensor HAL to access dynamic sensor properties.
...
Bug: 195964858
Test: Verified dynamic sensor manager is present in sensor list and that
no SELinux violations occur.
Test: See details in testing done comment in
https://googleplex-android-review.git.corp.google.com/15874927 .
Change-Id: I76a60f7fbd113059156ccaea2c4f98580cb0836a
2021-09-20 16:53:16 -07:00
Michael Ayoubi
cb6a843980
Allow euiccpixel_app to get dck_prop
...
Bug: 189881206
Bug: 183606657
Test: Build and confirm EuiccSupportPixel can get
ro.gms.dck.eligible_wcc
Change-Id: I59873d33f21632347183d749c9bbf25c6e6ba2cd
2021-09-09 15:44:25 +00:00
Jenny Ho
ee73f40872
sepolicy: add rule for new debug file node am: 17e518038e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15756806
Change-Id: Ie913098b9b31e3c042abe13672fddc726cf4aef0
2021-09-07 14:21:17 +00:00
Jenny Ho
17e518038e
sepolicy: add rule for new debug file node
...
W dumpstate@1.1-s: type=1400 audit(0.0:7): avc: denied { read } for name="logbuffer_maxfg_monitor" dev="tmpfs" ino=500 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0
Bug: 196755019
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: I0ddf68d5e15fe8d77d8d61287f65621c14024f46
2021-09-06 06:21:34 +00:00
Roshan Pius
9c96111094
gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor
...
Since we are now creating an AOSP HAL for uwb. Rename qorvo's internal
HAL to hal_uwb_vendor to avoid conflicts with the AOSP HAL sepolicy
rules.
Bug: 195308730
Test: Compiles
Change-Id: Ief48eacde68b062b2199b20c0c1bb3af23795240
Merged-In: Ief48eacde68b062b2199b20c0c1bb3af23795240
2021-08-26 20:02:20 +00:00
Roshan Pius
a3f040d2ac
gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor
...
Since we are now creating an AOSP HAL for uwb. Rename qorvo's internal
HAL to hal_uwb_vendor to avoid conflicts with the AOSP HAL sepolicy
rules.
Bug: 195308730
Test: Compiles
Change-Id: Ief48eacde68b062b2199b20c0c1bb3af23795240
Merged-In: Ief48eacde68b062b2199b20c0c1bb3af23795240
2021-08-26 01:07:43 +00:00
Victor Liu
e877511429
uwb: permissions for factory uwb calibration file am: 29aa981623
am: 5dfabe8acf
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315
Change-Id: I35c0484a84695969e5f1f3e7cf2e8c7c06b4df3e
2021-08-25 23:41:44 +00:00
Victor Liu
7a06a7a434
uwb: permissions for factory uwb calibration file am: 29aa981623
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315
Change-Id: I9755128c2a7a1039cb3b1c5a2e3913a0965540d9
2021-08-25 23:29:50 +00:00
Victor Liu
29aa981623
uwb: permissions for factory uwb calibration file
...
add permission to:
copy factory uwb calib files from persist to /data/vendor/uwb
convert copied file to proper format for uwb stack to consume
Bug: 195659525
Signed-off-by: Victor Liu <victorliu@google.com>
Change-Id: I3e5282477fd391b483e03242ce0b806bd447dc54
Merged-In: I3e5282477fd391b483e03242ce0b806bd447dc54
2021-08-25 19:14:10 +00:00
Roshan Pius
04fbca104c
gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor
...
Since we are now creating an AOSP HAL for uwb. Rename qorvo's internal
HAL to hal_uwb_vendor to avoid conflicts with the AOSP HAL sepolicy
rules.
Bug: 195308730
Test: Compiles
Change-Id: Ief48eacde68b062b2199b20c0c1bb3af23795240
Merged-In: Ief48eacde68b062b2199b20c0c1bb3af23795240
2021-08-25 17:32:53 +00:00
David Chen
462d4b1bcd
resolve merge conflicts of c0922582bc
to sc-v2-dev
...
Bug: 197164878
Change-Id: Ibc7ea7ffe9c30912c8e12d081a6b110f8e73f29f
Merged-In: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
2021-08-19 02:25:56 +00:00
David Chen
28cd716faa
resolve merge conflicts of 945de94222
to sc-v2-dev-plus-aosp
...
Bug: 197166084
Change-Id: I4b8b2d99db133be4c96853f072e3b10dbac39b92
Merged-In: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
2021-08-19 02:25:12 +00:00
davidycchen
c0922582bc
Allow twoshay to access fwk_stats_service and system_server
...
avc: denied { find } for pid=813 uid=0
name=android.frameworks.stats.IStats/default scontext=u:r:twoshay:s0
tcontext=u:object_r:fwk_stats_service:s0 tclass=service_manager
avc: denied { call } for scontext=u:r:twoshay:s0
tcontext=u:r:system_server:s0 tclass=binder
Bug: 179334953
Test: Make selinux_policy and push related files to the device.
Signed-off-by: davidycchen <davidycchen@google.com>
Change-Id: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
Merged-In: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
2021-08-18 09:47:01 +08:00
Bart Van Assche
07751567ad
Add the 'bdev_type' attribute to all block device types am: 37b5741301
am: 239bcceb78
am: ea25044059
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922
Change-Id: I5d46eab501e1ce290570a69dde5450813eff0bf0
2021-08-18 01:20:15 +00:00
Bart Van Assche
7513cd7ad6
Add the 'bdev_type' attribute to all block device types am: 37b5741301
am: 239bcceb78
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922
Change-Id: Iedf50eb9fc1c205eb584c4c53ad7de45c06b695d
2021-08-18 00:56:43 +00:00
Bart Van Assche
239bcceb78
Add the 'bdev_type' attribute to all block device types am: 37b5741301
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15517922
Change-Id: I19d709e960fe8ccf066bdbd20dc6817ee20e55d0
2021-08-18 00:34:10 +00:00
Bart Van Assche
37b5741301
Add the 'bdev_type' attribute to all block device types
...
The following patch introduces code that iterates over all block
devices:
https://android-review.googlesource.com/c/platform/system/core/+/1783847/9
The following patch grants 'init' and 'apexd' permission to iterate over
all block devices:
https://android-review.googlesource.com/c/platform/system/sepolicy/+/1783947
The above SELinux policy change requires to add the 'bdev_type'
attribute to all block devices. Hence this patch.
Bug: 194450129
Bug: 196982345
Test: Built Android images that include this change and verified that neither init nor apexd triggers any SELinux access denied errors.
Change-Id: I6ce1127f199c5b33812f15fe280d86594d7d7ebf
Signed-off-by: Bart Van Assche <bvanassche@google.com>
2021-08-17 15:23:23 -07:00
Edmond Chung
ff5c485ddc
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
am: d5f9036c8e
am: 9bde9324fe
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: I90884f92df1e42fa5b60ad47e914ed1460b40c04
2021-08-16 22:44:58 +00:00
Edmond Chung
36f756e44b
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
am: c45a1b5828
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: Id66f403466d50ea3beb4663cc137e551a92e16f3
2021-08-16 22:32:00 +00:00
Edmond Chung
9bde9324fe
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
am: d5f9036c8e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: Ib347e1a8fbee1822542adf48a03f92dbdac3a302
2021-08-16 22:31:40 +00:00
Edmond Chung
c45a1b5828
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev am: 7e581b9a7b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15584607
Change-Id: I97f8f143230d13f64b34ee11c7a46cfcc5f2f3f9
2021-08-16 22:17:00 +00:00
Edmond Chung
7e581b9a7b
Merge "gs101: Allow camera HAL to access interrupt handles" into sc-dev
2021-08-16 22:01:46 +00:00
Edmond Chung
6b30dbc54c
gs101: Allow camera HAL to access interrupt handles
...
This is to allow camera HAL to modify IRQ affinity for different use
cases.
Bug: 196058977
Test: Camera use cases
Change-Id: I498b0ac763b735d05299e1f4b09de14e131fd6e3
2021-08-16 10:52:27 -07:00
Rick Yiu
7b0fa572c3
gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
am: 7b8fe23d74
am: fa5d13d6e1
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061
Change-Id: Ia05c12145187f2500010827b6e28ce5b56039511
2021-08-16 14:25:57 +00:00
Rick Yiu
9c7ca5fdd3
gs101-sepolicy: Use untrusted_app_all for vendor_sched denials am: 2ef3daba50
am: 1f4c69a11d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15531061
Change-Id: I59e7baee2e2c5a80d53b5a6f5c8712a2b09a36d3
2021-08-16 14:11:45 +00:00