Commit graph

11403 commits

Author SHA1 Message Date
Roger Fang
9de2688cd4 sepolicy: gs101: add IAudioMetricExt settings
E init    : Could not start service 'audiometricext' as part of class 'hal': File /vendor/bin/hw/vendor.google.audiometricext@1.0-service-vendor(labeled "u:object_r:vendor_file:s0")

vendor.google.a: type=1400 audit(0.0:3): avc: denied { read } for name="u:object_r:hwservicemanager_prop:s0" dev="tmpfs" ino=188 scontext=u:r:hal_audiometricext_default:s0 tcontext=u:object_r:hwservicemanager_prop:s0 tclass=file permissive=1

E SELinux : avc:  denied  { find } for interface=vendor.google.audiometricext::IAudioMetricExt sid=u:r:hal_audiometricext_default:s0 pid=819 scontext=u:r:hal_audiometricext_default:s0 tcontext=u:object_r:default_android_hwservice:s0 tclass=hwservice_manager permissive=1

E SELinux : avc:  denied  { add } for interface=android.hidl.base::IBase sid=u:r:hal_audiometricext_default:s0 pid=795 scontext=u:r:hal_audiometricext_default:s0 tcontext=u:object_r:hidl_base_hwservice:s0 tclass=hwservice_manager permissive=1

Bug: 180627405
Test: manually test passed
Signed-off-by: Roger Fang <rogerfang@google.com>
Change-Id: I91d76eb0ad5850e75ad865304d83f3025b981915
2021-05-18 05:06:58 +00:00
Gary Jian
b9e4f7a759 Add permission to access audiometricext hal for grilservice_app
Bug: 182526894
Test: Manual
Change-Id: I3ca85be7e5ab244e2dea2c6f7768f59c07b44525
2021-05-18 02:18:56 +00:00
Jenny Ho
90217296e8 device-common: set testing_battery_profile default 2
set 2 to prevent limit battery level in unexpected testing situation

Bug: 180511460
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: I9f0e66cf92b26c6946af162003378dcf0fd749f9
2021-05-18 09:00:06 +08:00
TreeHugger Robot
3075216794 Merge "genfs_contexts: Specify correct GPU clock hint node" into sc-dev am: ac53196839
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14599591

Change-Id: Ifc1411973f3dcb258d3673e05d8d519e9132cd64
2021-05-18 00:54:21 +00:00
TreeHugger Robot
843c90e0ae Merge "Grant dumpstate hal read permission of camera hal dump files" into sc-dev am: 09a98d233d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14604511

Change-Id: I96a4843b04f81194053e1c552757b76bb6f0a134
2021-05-18 00:53:51 +00:00
TreeHugger Robot
ac53196839 Merge "genfs_contexts: Specify correct GPU clock hint node" into sc-dev 2021-05-18 00:50:53 +00:00
Sidath Senanayake
3f13d8aa5e powerhint: Use 'hint' node for GPU
This changes PowerHAL to use a sysfs node created
specifically for use by PowerHAL when influencing
GPU clocks.

Bug: 188404581
Bug: 188034128
Signed-off-by: Sidath Senanayake <sidaths@google.com>
Change-Id: Icf120454ff908776c8717826689a0528aebf2f64
2021-05-18 00:50:53 +00:00
TreeHugger Robot
09a98d233d Merge "Grant dumpstate hal read permission of camera hal dump files" into sc-dev 2021-05-18 00:42:12 +00:00
Zhijun He
8a52881a41 dumpstate: add camera hal graph state dump
Only dump the latest dump files so that bugreport
size won't be increased by too much.

Test: build and capture bugreport
Bug: 178737594
Change-Id: I699ee76997c9107dad13419688f3c6c04551313b
2021-05-18 00:42:11 +00:00
Tim Murray
c1db6b7386 gs101: preopt SystemUI
SystemUI should always be speed-preopted on these devices.

Test: flashed, SysUI is preopted
Bug: 188465988
Change-Id: I990ce9d7d8c08b8e80fe4ca0b73c9eb339f065f3
2021-05-18 00:40:15 +00:00
Long Ling
736b673c95 display: update vendor color file
Update boosted color data

Bug: 187301816
Change-Id: Iec740f3e933dc564f39fb78605fd5c3b428b167c
2021-05-18 00:03:56 +00:00
Yu-Chi Cheng
e8ee41f9af Renamed edgetpu_service to edgetpu_app_service.
edgetpu_service was splitted into two in previous change:
edgetpu_service and edgetpu_vendor_service, where the new
vendor service for vendor clients, and the old service keeps
serving app clients.

This change updated the SELinux policy to rename the edgetpu_service
into edgetpu_app_service to make the purpose clearer.

Bug: 188463446
Test: Oriole + GCA
Change-Id: I3a133319edc84fc02ef211934d0542575580da14
2021-05-17 15:38:24 -07:00
Zhijun He
a8ceb3a751 Grant dumpstate hal read permission of camera hal dump files
Test: Build and capture bugreport
Bug: 178737594
Change-Id: Iae9792a75dec574ff9fe0d246a7c166221565b16
2021-05-17 14:23:46 -07:00
Minchan Kim
2d7105504c sepolicy: gs101: allow duump page_pinner am: 304a32c17e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14472545

Change-Id: Ibae22fcdcc54e799d249da2049877764ff81f79f
2021-05-17 18:49:05 +00:00
Minchan Kim
c9f14081cd gs101: enable page_pinner
Enable Page Pinner.

Bug: 187552095
Test: adb bugreport <zip> and confirmed it contains page_pinner
      information at dumpstate_board.txt
Signed-off-by: Minchan Kim <minchan@google.com>
Change-Id: I509c5a825a798d8f1851cb65c5dd28dbddf11d33
2021-05-17 18:22:16 +00:00
Minchan Kim
637041f47e init.gs101.rc: dump page_pinner information into bugreport
Dump page_pinner information into dumpstate_board.txt.
It helps to find vulnerable place of CMA failure.

Page pinned ts 13 us count 0
PFN 10292273 Block 10051 type CMA Flags 0x8000000000080024(uptodate|active|swapbacked)
 try_grab_page+0x168/0x17c
 follow_page_pte+0x2e4/0x4c8
 follow_pmd_mask+0x180/0x498
 __get_user_pages+0x1a0/0x42c
 __get_user_pages_remote+0xa4/0x28c
 get_user_pages_remote+0x20/0x48
 copy_strings+0x188/0x2ac
 do_execveat_common+0x278/0x300
 __arm64_sys_execve+0x44/0x5c
 el0_svc_common+0xa4/0x180
 do_el0_svc+0x28/0x88
 el0_svc+0x14/0x24
 el0_sync_handler+0x88/0xec
 el0_sync+0x19c/0x1c0

Page pinned ts 2 us count 0
PFN 10436170 Block 10191 type CMA Flags 0x8000000000080026(referenced|uptodate|active|swapbacked)
 try_grab_page+0x168/0x17c
 follow_page_pte+0x2e4/0x4c8
 follow_pmd_mask+0x180/0x498
 __get_user_pages+0x1a0/0x42c
 __get_user_pages_remote+0xa4/0x28c
 get_user_pages_remote+0x20/0x48
 copy_strings+0x188/0x2ac
 do_execveat_common+0x290/0x300
 __arm64_sys_execve+0x44/0x5c
 el0_svc_common+0xa4/0x180
 do_el0_svc+0x28/0x88
 el0_svc+0x14/0x24
 el0_sync_handler+0x88/0xec
 el0_sync+0x19c/0x1c0

Bug: 187552095
Test: adb bugreport <zip> and confirmed it contains page_pinner
      information.

Signed-off-by: Minchan Kim <minchan@google.com>
Change-Id: I59bd41ad9e06cab0348ce85059f73d0796632868
2021-05-17 18:22:16 +00:00
Midas Chien
4c188d1214 Revert "gs101: display: update 90hz denylist"
This reverts commit 2b88831a1d.

Reason for revert: move to vendor

Bug: 159903227
Bug: 182471327
Test: adb shell dumpsys window refresh
Change-Id: Iea49d0be0338faba1a98bdf184e2f674340602c1
2021-05-17 17:31:42 +00:00
TreeHugger Robot
cf875452ff Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: d4f9ef4303 am: 1fbb91ef97 am: 292337148c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14512449

Change-Id: I550e0ba737fe9c66aa6e9eb906d4a49f6d501f64
2021-05-17 17:02:21 +00:00
TreeHugger Robot
832ffb5dc7 Merge "Add SELinux policy for allowing dumping GSC info" into sc-dev am: 1f594ec562 am: e723f80ba9 am: 6432a7bc7a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14491675

Change-Id: Ie16aea227c99d56ed832c48de1b1565bf82c4830
2021-05-17 17:02:02 +00:00
TreeHugger Robot
f7019f3647 Merge "correctly label networking gadgets" into sc-dev am: 7fd939fdd7 am: b3ae9a8c03 am: 8a1ed47bba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14495070

Change-Id: I86101c58b829c283d05e3b7ff3225e331d74e856
2021-05-17 17:01:48 +00:00
TreeHugger Robot
ae5a7ec6ed Merge "bthal: allow bthal to access bluetooth kernel driver logbuffer_btlpm and logbuffer_btuart device node" into sc-dev am: 9b8e2b7ba8 am: e7fe59fb13 am: 0c4611ecb0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14009545

Change-Id: Iaa8806ecaae37a4097ac122a34b41d8949e2fd3a
2021-05-17 17:00:43 +00:00
Minchan Kim
304a32c17e sepolicy: gs101: allow duump page_pinner
Provide necessary sepolicy for dumpreport to access page_pinner
information in /sys/kernel/debug/page_pinner/{longterm_pinner,
alloc_contig_failed}

Bug: 187552095
Test: Run "adb bugreport <zip>" and verify it contains the output
      from page_pinner.
Signed-off-by: Minchan Kim <minchan@google.com>
Change-Id: I2abc48f2a156718fd4bed3b51bdd285c6bf9f175
2021-05-17 09:18:50 -07:00
TreeHugger Robot
9164ea0848 Merge "com.qorvo.uwb: signed with dedicated key and running as android.uid.uwb uid" into sc-dev am: e2a0158fdf am: 6d2c152bcf am: 7a4d420378
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506301

Change-Id: Ie10fdf67607a0cdf76e9b6877f296a1370a978ba
2021-05-17 15:45:06 +00:00
Wei Wang
f89b58e4ac Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev am: 53ae55618a am: c515c8345d am: 6883250a44
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14509955

Change-Id: Ib553fe84ec690d58c491e017ae3ca1e385bb2d70
2021-05-17 15:05:41 +00:00
TreeHugger Robot
74b9e1e145 Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev am: 004c299011 am: 223f9da106 am: 8966b0738f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14485438

Change-Id: I8d91d3c920f066cb7ed12e247e29e6d30e438c31
2021-05-17 14:51:52 +00:00
Sidath Senanayake
828114d410 genfs_contexts: Specify correct GPU clock hint node
Bug: 188404581
Bug: 188034128
Signed-off-by: Sidath Senanayake <sidaths@google.com>
Change-Id: Id69f5cf8c95081fea7784520838a3f85aa58589c
2021-05-17 15:44:19 +01:00
Wei Wang
cb3efaa340 Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: 3a2d20a1a2 am: a04548a17c am: 82e3d3146f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14462495

Change-Id: Id16c3fd3cd5370c86c9ffbeedc4ff5141960f097
2021-05-17 14:28:15 +00:00
sukiliu
8ed18dc446 Update avc error on ROM 7349999 am: 99853e483b am: d5d461cc4e am: 7a1938e846
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14500956

Change-Id: I8db5256fde25bf063f6407e48c9234232df5785a
2021-05-17 14:06:04 +00:00
Peter Csaszar
c1f4edead1 pixel-selinux: add SJTAG policies am: bc525e1a49 am: 6ff24d2a06 am: d39d9e517f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14489636

Change-Id: I30814d03394d87a1009618b709d7bc0a26cf0018
2021-05-17 12:05:19 +00:00
Wei Wang
d348574869 Merge "Add policy for memlat governor needs create/delete perf events" into sc-dev am: 551505ae05 am: 8181bbaaac am: ff1bb37173
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14486216

Change-Id: I9b0844c573b6742b6a9b2b44bf9ed0b5048eecfb
2021-05-17 07:08:20 +00:00
Jia-yi Chen
14fe4108f0 Merge "Add high_capacity_start_cpu to u:object_r:sysfs_vendor_sched:s0" into sc-dev am: 06a0792bf1 am: 1912dc976e am: 344b354f8b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14460156

Change-Id: I710d900d9b1ac49bf038abc6aa2d46bae943a9d7
2021-05-17 07:08:11 +00:00
JJ Lee
66d7ed975d Merge "sepolicy: gs101: allow audio hal to use wakelock" into sc-dev am: df02b6ef77 am: 51c75a291e am: 2a2ce4a0ae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14452416

Change-Id: I9455603978406f34f41be37124ae0ef340321dc7
2021-05-17 07:07:28 +00:00
TreeHugger Robot
b3d62141dc Merge "vibrator: Remove temporary method" into sc-dev am: ec3144742f am: e853b4335e am: df80f0be9f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467421

Change-Id: I4cc152563263416ae2601e16303e3d0e81c51c65
2021-05-17 07:07:08 +00:00
TreeHugger Robot
f909b51e46 Merge changes Ic697ffe8,Idcf38e09 into sc-dev am: a2d2ebd508 am: 41d657e591 am: eb15c49e77
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456725

Change-Id: Ib2667e9dbe8bc98e9651fafeba9aa143740a59a7
2021-05-17 07:07:03 +00:00
TreeHugger Robot
e248e30edb Merge "Allow radioext to communicate with bt hal" into sc-dev am: c03c055812 am: 93008dc81a am: 73f7604819
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14456718

Change-Id: Ie375c0b56617064e9a55763659a4f238f5b42802
2021-05-17 07:06:58 +00:00
TreeHugger Robot
d31171629a Merge "iwlan: update sepolicy for qualifiednetworksservice" into sc-dev am: 296f8ddc5d am: cb8de215f8 am: 73e866b8c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14440528

Change-Id: I7b561e1688c0da825498186427c798ce12f01f12
2021-05-17 07:06:51 +00:00
qinyiyan
8c575a737d Allows the edgetpu_logging service to write to the edgetpu sysfs. am: bfbf29c18c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14554224

Change-Id: Id78817a5c8d6fe6bbbeec7a300e057d8b22b73dd
2021-05-17 05:35:46 +00:00
Tri Vo
c9d3d82697 Merge "trusty: sepolicy for metrics reporter" into sc-dev am: f7bec8b3c6 am: f40a4f7416 am: b38ed0c788
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14286451

Change-Id: I325bf45753fd872d7fa3242acfcb8aa925ba5f96
2021-05-17 01:20:16 +00:00
Aaron Tsai
caefc1e4f0 Fix avc denied for shannon-ims am: 6a9a85cd07 am: 71aa99edff am: e4773d1db2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14410097

Change-Id: Id2f9da7949b464cd3844ff83aea27f243db2a68c
2021-05-17 01:20:09 +00:00
TreeHugger Robot
1475a1287a Merge "HardwareInfo: Add sepolicy for display" into sc-dev am: 6978eeaea4 am: 5bb2c8ab79 am: 647dcaf48d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13824666

Change-Id: I3b19e9fb32d884a9712c10f36094e805ed9bc928
2021-05-17 01:19:40 +00:00
TreeHugger Robot
4c84d700b2 Merge "wlc fwupdate implementation" into sc-dev am: 577f562727 am: 9fccfb01ce am: 51380a7089
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14063269

Change-Id: I6a70d0de2f8eb390908310dae1bd3a5ea250d200
2021-05-17 00:12:35 +00:00
SalmaxChang
354e935eb8 logger_app: Fix avc errors am: ab97657410 am: ebf55ff9f1 am: 12593ef488
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439439

Change-Id: I3c0ca482cfcd290838d610797db853310b386c39
2021-05-16 23:48:56 +00:00
Jack Wu
b00f1351a8 sepolicy: gs101: Fix hal_health_default avc denials am: 2c1ecf3a54 am: 388860a7ba am: 8afb8bee7b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14439451

Change-Id: I984d0bf8dba0ac3de6996984a35ca8d268ad7abe
2021-05-16 23:48:51 +00:00
Alex Hong
f47e5ae394 Merge "sepolicy: Update dumpstate HAL to V1.1" into sc-dev am: be17ec14cc am: a0e4da3cb4 am: ef86b642ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14424440

Change-Id: Ibf1518eddd12e55a0805d4812cfc4925ac606a31
2021-05-16 23:48:44 +00:00
TreeHugger Robot
7830ec50a1 Merge "add sepolicy for dump TRICKLE/TEMP/DWELL defend config" into sc-dev am: 6978cd7220 am: fed9fee663 am: 263452b0f9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14419455

Change-Id: I520d23d1a11c2791716b863dcd1b02a387fdd73b
2021-05-16 23:48:32 +00:00
qinyiyan
bb199be00c [SEPolicy] Allow EdgeTPU related service to log to stats service am: 9eeae92ade am: ac59670250 am: c28198ce01
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14431799

Change-Id: I60c1de7edc2c02bc04dd3ab965b6cd683ace6f89
2021-05-16 22:18:04 +00:00
Chris Kuiper
bf2cfb4d6e Merge "sepolicy: gs101: allow usf_reg_edit to run" into sc-dev am: d0d0304443 am: adb83f2a07 am: 5db8d9f987
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14415568

Change-Id: I6e2b296cf991cb37183883ffd93f23a3d43d9e47
2021-05-16 22:18:00 +00:00
Yu-Chi Cheng
6da18fabe1 Merge "Added the SELinux rule for the EdgeTPU vendor service." into sc-dev am: 7eef8643a3 am: b989b6c2d5 am: 99d5b083f8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14299125

Change-Id: I0e1e47b7f1d491a281fab391db67486c31cbc549
2021-05-16 22:17:52 +00:00
Daniel Mentz
73881b0b14 Merge "Remove /vendor/lib/modules from file_contexts" into sc-dev am: 48e3555770 am: dfd70f5140 am: 5aed8b6921
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14416770

Change-Id: I88ec35821e3da8a566ac02fd2e0f1c60de18fa37
2021-05-16 22:17:17 +00:00
Daniel Mentz
81c8ebed78 Merge "Revert "remove wildcard on kernel modules"" into sc-dev am: 1473b1d155 am: 3d63e648fa am: 23c0cba680
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14393364

Change-Id: I9df075882b52a99038f4b6bd52ac2dd15523d55b
2021-05-16 22:17:12 +00:00