jonerlin
cb3f59b89e
bthal: allow bthal to access bluetooth kernel driver logbuffer_btlpm
...
and logbuffer_btuart device node
* add sepolicy rules to let bthal can access bluetooth kernel device
nodes dev/logbuffer_btlpm and dev/logbuffer_tty16 in engineer
or user debug build
Bug: 177794127
Test: Manually
Change-Id: I5253719df82ca7ef8e64cbd3f2b0ff6d3f088edc
2021-05-12 13:27:40 +08:00
JJ Lee
298eb28dd0
audio: set ro.audio.offload_wakelock to false
...
Set ro.audio.offload_wakelock to false to release the wakelock in
AudioFlinger so that the CPU is allowed to sleep to save power during
oflload playback.
Bug: 178789331
Test: build pass
Change-Id: I9cc3fe6db17060c7de2b2df8a49befdbe2aecf29
Signed-off-by: JJ Lee <leejj@google.com>
2021-05-12 05:13:33 +00:00
Wei Wang
6883250a44
Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev am: 53ae55618a
am: c515c8345d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14509955
Change-Id: I7f52c6c8fe5f6eac81410f10c4db73f13eaf46dc
2021-05-12 04:49:43 +00:00
Wei Wang
c515c8345d
Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev am: 53ae55618a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14509955
Change-Id: I9a79e69ca43827358937aebcab730471715acb4c
2021-05-12 04:28:06 +00:00
Wei Wang
1e378dbfa3
Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev am: 53ae55618a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14509955
Change-Id: Ib6ade70fbfd568b17f9ca1ff49b8dc0c78590bb0
2021-05-12 04:26:57 +00:00
Wei Wang
edf3463646
Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev am: 53ae55618a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14509955
Change-Id: I680bd82ec4b05f197db3f520e0416fa12204d1e2
2021-05-12 04:26:40 +00:00
Thierry Strudel
03f4884884
com.qorvo.uwb: signed with dedicated key and running as android.uid.uwb uid
...
Test:
05-11 21:05:48.077 786 786 I qorvo.uwb.main: UWB HAL start
05-11 21:05:48.078 412 412 I servicemanager: Found hardware.qorvo.uwb.IUwb/default in device VINTF manifest.
05-11 21:05:50.960 1639 1639 W PackageSettings: Missing permission state for package: com.qorvo.uwbtestapp.system
05-11 21:05:53.530 1639 1639 V StorageManagerService: Package com.qorvo.uwb does not have legacy storage
05-11 21:05:53.548 1639 1639 V StorageManagerService: Package com.qorvo.uwbtestapp.system does not have legacy storage
05-11 21:05:56.571 1639 1902 I am_proc_start: [0,3055,1083,com.qorvo.uwb,added application,com.qorvo.uwb]
05-11 21:05:56.571 1639 1902 I ActivityManager: Start proc 3055:com.qorvo.uwb/1083 for added application com.qorvo.uwb
05-11 21:05:56.653 1639 2264 I am_proc_bound: [0,3055,com.qorvo.uwb]
05-11 21:05:56.709 3055 3055 I TetheringManager: registerTetheringEventCallback:com.qorvo.uwb
05-11 21:05:56.710 3055 3055 V GraphicsEnvironment: ANGLE Developer option for 'com.qorvo.uwb' set to: 'default'
05-11 21:06:05.045 1639 1900 I am_pss : [3055,1083,com.qorvo.uwb,5719040,4239360,0,88702976,2,0,6]
05-11 21:06:07.233 1639 1981 I am_compact: [3055,com.qorvo.uwb,all,84816,39052,44628,0,-816,0,-816,816,26,0,0,-800,0,1921532,-768]
05-11 21:06:38.442 786 786 I qorvo.Uwb: open
05-11 21:06:38.443 786 786 I qorvo.uwb.McpsUtils: ListHardware
05-11 21:06:38.443 786 786 I qorvo.uwb.NlSocket: SendAndAwaitResponse
05-11 21:06:38.443 786 786 I qorvo.uwb.NlSocket: SendAndAwaitResponse: Read message
05-11 21:06:38.443 786 786 I qorvo.uwb.IeeeUtils: ListDevices
05-11 21:06:38.443 786 786 I qorvo.uwb.NlSocket: SendAndAwaitResponse
05-11 21:06:38.443 786 786 I qorvo.uwb.NlSocket: SendAndAwaitResponse: Read message
05-11 21:06:38.443 786 786 I qorvo.uwb.UwbIface: Load calibration on wpan0, hw index: 0
05-11 21:06:38.445 786 786 I qorvo.uwb.NlSocket: SendAndAwaitResponse
05-11 21:06:38.445 786 786 I qorvo.uwb.NlSocket: SendAndAwaitResponse: Read message
05-11 21:06:38.445 786 786 I qorvo.uwb.UwbIface: Load properties on wpan0, hw index: 0
05-11 21:06:38.446 786 786 I qorvo.Uwb: getIface
05-11 21:06:38.449 786 786 I qorvo.uwb.UwbIface: firaController
05-11 21:06:38.449 786 786 I qorvo.Uwb: listHardwareIndex
05-11 21:06:38.449 786 786 I qorvo.uwb.McpsUtils: ListHardware
05-11 21:06:38.449 786 786 I qorvo.uwb.NlSocket: SendAndAwaitResponse
05-11 21:06:38.450 786 786 I qorvo.uwb.NlSocket: SendAndAwaitResponse: Read message
05-11 21:06:38.450 786 786 I qorvo.Uwb: getIface
05-11 21:06:38.450 786 786 I qorvo.uwb.UwbIface: cccController
Bug: 187766150
Signed-off-by: Thierry Strudel <tstrudel@google.com>
Change-Id: Ie667a666a445e907aa99542f1c52046522b5dd02
2021-05-12 04:07:58 +00:00
Taeju Park
1d0e8106f3
Grant vendor_sched sysfs nodes access
...
Bug: 182509410
Signed-off-by: Taeju Park <taeju@google.com>
Change-Id: I68bf0c6e4f7b53a871a3393cb317bf6c79ace5e3
2021-05-11 21:03:30 -07:00
Wei Wang
53ae55618a
Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev
2021-05-12 03:56:58 +00:00
Wei Wang
73b65a0f8b
Revert "Grant vendor_sched sysfs nodes access"
...
This reverts commit 638778c654
.
Reason for revert: b/187884708
Bug: 187884708
Change-Id: I60e80246345ca3e827d7b4749f25e2d5c4dddf9d
2021-05-12 03:56:42 +00:00
Krzysztof Kosiński
6fc108994b
Update Lyric configuration for gs101. am: 9cdfcfb356
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/14506303
Change-Id: Ic23f5dc4f4dba6320c3d2f90353f68235418f343
2021-05-12 02:44:00 +00:00
TreeHugger Robot
8966b0738f
Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev am: 004c299011
am: 223f9da106
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14485438
Change-Id: Id7fa2e92ca7ec7ef0cf92bca58d54bcd3bd3428f
2021-05-12 02:43:53 +00:00
Krzysztof Kosiński
3da54c3bc2
Update Lyric configuration for gs101.
...
Bug: 185262804
Test: build and camera preview on oriole
Change-Id: I5f705fde829b5d9d581b6f1306ecccfd6fd01cd1
2021-05-12 02:21:59 +00:00
TreeHugger Robot
223f9da106
Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev am: 004c299011
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14485438
Change-Id: Ib9d1708d8e53619827b81850d6e5e97729754825
2021-05-12 02:16:15 +00:00
TreeHugger Robot
0c07533adc
Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev am: 004c299011
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14485438
Change-Id: Ia25ada37e66cdb62f56b3e97b6a43d53fee711a8
2021-05-12 02:14:29 +00:00
TreeHugger Robot
a4e1f1a4fb
Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev am: 004c299011
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14485438
Change-Id: If42fcd5d12b79c15b9bb69a602a8c36007939a10
2021-05-12 02:14:08 +00:00
Kris Chen
00e1b9a704
Add sepolicy for the UDFPS antispoof property
...
Fixes the following avc denial:
/system/bin/init: type=1107 audit(0.0:4): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=fingerprint.disable.fake pid=364 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:default_prop:s0 tclass=property_service permissive=0'
android.hardwar: type=1400 audit(0.0:7): avc: denied { read } for name="u:object_r:vendor_fingerprint_fake_prop:s0" dev="tmpfs" ino=307 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:vendor_fingerprint_fake_prop:s0 tclass=file permissive=0
Bug: 187394838
Bug: 187562932
Test: Antispoof is disabled by default.
Test: Use the following adb command to manully turn on antispoof.
"setprop persist.vendor.fingerprint.disable.fake.override 0"
Change-Id: I90d6ea70d5e0e1a125efb902f1fd61ff4b51baa2
2021-05-12 09:48:48 +08:00
Jason Lee
08b1039b32
Cap VideoEncoderCap maxFrameRate to 30 am: d10c070c77
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/14494379
Change-Id: I5578c544248495d781e776583f02beeab2c38d66
2021-05-12 01:39:14 +00:00
Carter Hsu
efc1f0a169
audio: add bluenote module am: 8bd37f2c01
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/14227311
Change-Id: I2c0e858d2e5b712a24dec8d1765ec137faa3c63a
2021-05-12 01:38:48 +00:00
Jason Lee
07bf326a61
Cap VideoEncoderCap maxFrameRate to 30
...
Fixes CTS without affecting GCA
Bug: 175830757
Test: GCA, CTS
Change-Id: I5c42e150a5fcc2e6a87b3daa6e1c8c787697168c
2021-05-12 01:33:30 +00:00
TreeHugger Robot
004c299011
Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev
2021-05-12 01:32:03 +00:00
Carter Hsu
2e4d1c7d17
audio: add bluenote module
...
Bug: 186801118
Test: build pass
Signed-off-by: Carter Hsu <carterhsu@google.com>
Change-Id: Icf676c4de46cd38594bb442fcb8dae29dc23e6dd
2021-05-12 01:09:43 +00:00
Hridya Valsaraju
70551d2bc9
Let debugfs be accessed only for non-user builds
...
Since production devices(with user builds) must not mount debugfs,
provide dumpstate HAL permission to access debugfs only in userdebug/eng
builds.
Also, delete dumpstate domain's access to
vendor_dmabuf_debugfs(/d/dma_buf/bufinfo) since dumpstate now obtains
the same information from /sys/kernel/dmabuf.
Test: build
Bug: 186500818
Change-Id: I17007d495fba6332bbf17dc7d030e5c6e4d5248b
2021-05-11 17:35:20 -07:00
Hridya Valsaraju
9e6528da08
Label debugfs files correctly
...
A few debugfs files are labelled as belonging to both debugfs_type and
sysfs_type. Hence, any client that is provided access to sysfs_type will
automatically be provided access to these files. This patch corrects the
labelling for these files to prevent this.
Test: build
Bug: 186500818
Change-Id: I364a73a960824cc9051610032179fd5caeca09de
2021-05-11 17:35:17 -07:00
Qinchen Gu
ab6df9cc18
Add SELinux policy for allowing dumping GSC info
...
Bug: 185939493
Test: adb bugreport. Look for GSC-related info.
Change-Id: I30dbb51781526d763205594283ca3b808f45d28f
2021-05-11 17:27:14 -07:00
Carl Tsai
376d3d7379
Revert "gs101: add trusty_metricsd" am: 98d8308f48
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/14494377
Change-Id: Ic5dfc9d5a78ccbff29da6e05517d3d126e35e8e0
2021-05-11 23:49:25 +00:00
Carl Tsai
900316d100
Revert "gs101: add trusty_metricsd"
...
Revert "Trusty metrics reporter service"
Revert submission 14469740-trusty_metrics
Reason for revert: buildbreakage for pdk
Reverted Changes:
Ifdefdd6cc:gs101: add trusty_metricsd
I641d7a5b7:Trusty metrics reporter service
Bug: b/187769789
Test: Pass
Change-Id: I5fc1ad6773795566ba8a3d87d58219660f469d4c
2021-05-11 23:23:06 +00:00
Long Ling
904be22755
display: rename adaptive color file name am: 3c788b3a7d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/14418873
Change-Id: I0213a99fddccb3161b0432f12dec11af1acf213e
2021-05-11 19:45:54 +00:00
Long Ling
b2e8b6e82d
display: rename adaptive color file name
...
Bug: 184096624
Test: reboot and verify boosted/adaptive color modes work
Change-Id: Iab15629568a91e1db7f866ca1fc70a44b40fe5aa
2021-05-11 18:54:35 +00:00
Wei Wang
82e3d3146f
Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: 3a2d20a1a2
am: a04548a17c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14462495
Change-Id: Ia8f8af31038a6fe8a872e1632c750a0e693a8f60
2021-05-11 18:10:48 +00:00
Wei Wang
a04548a17c
Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: 3a2d20a1a2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14462495
Change-Id: I957522e3cdb7c45401b50601e2a92cd617d3473a
2021-05-11 17:42:16 +00:00
Wei Wang
776b6040fa
Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: 3a2d20a1a2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14462495
Change-Id: Ib9103633531cc02bed37acfd53fa314d6d47394e
2021-05-11 17:41:51 +00:00
Wei Wang
e529fc3cfb
Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: 3a2d20a1a2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14462495
Change-Id: I7a96d0859bd09ebb961af6b18a7d5687aa01b391
2021-05-11 17:40:29 +00:00
Wei Wang
3a2d20a1a2
Merge "Grant vendor_sched sysfs nodes access" into sc-dev
2021-05-11 17:24:38 +00:00
sukiliu
7a1938e846
Update avc error on ROM 7349999 am: 99853e483b
am: d5d461cc4e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14500956
Change-Id: I3e39d50fcfcf238866363c2ea927286dddb3eb55
2021-05-11 11:34:06 +00:00
sukiliu
d5d461cc4e
Update avc error on ROM 7349999 am: 99853e483b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14500956
Change-Id: If71f414f52934e892475a040684dd91a2a75dfee
2021-05-11 11:04:31 +00:00
sukiliu
fd763f3ee9
Update avc error on ROM 7349999 am: 99853e483b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14500956
Change-Id: Icc17da37ec14a7834091bd1ace72dda52dbdf842
2021-05-11 11:02:46 +00:00
sukiliu
0d483277cf
Update avc error on ROM 7349999 am: 99853e483b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14500956
Change-Id: Ieaa2460666b2d154333bbed9833abcaee833477f
2021-05-11 11:02:14 +00:00
Midas Chien
873511167c
Allowed PowerHAL service access Display node
...
Bug: 164411401
Test: boot
Change-Id: Idcc1338bc66a7479aed9efd4d1ebc82efd1b7c4d
2021-05-11 10:23:58 +00:00
sukiliu
99853e483b
Update avc error on ROM 7349999
...
avc: denied { call } for scontext=u:r:dumpstate:s0 tcontext=u:r:twoshay:s0 tclass=binder permissive=0
Bug: 187795940
Test: PtsSELinuxTestCases
Change-Id: Ib85ee1d52915b292295b21df8df48c18761c088e
2021-05-11 17:24:08 +08:00
Peter Csaszar
d39d9e517f
pixel-selinux: add SJTAG policies am: bc525e1a49
am: 6ff24d2a06
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14489636
Change-Id: Icab05e0fb309a6eaa0befd3d3960e84569957005
2021-05-11 07:47:11 +00:00
Maciej Żenczykowski
60e0a18e2a
correctly label networking gadgets
...
This is to pass system/netd/tests/netd_test.cpp:
TEST(NetdSELinuxTest, CheckProperMTULabels) {
// Since we expect the egrep regexp to filter everything out,
// we thus expect no matches and thus a return code of 1
ASSERT_EQ(W_EXITCODE(1, 0), system("ls -Z /sys/class/net/*/mtu | egrep -q -v "
"'^u:object_r:sysfs_net:s0 /sys/class/net/'"));
}
Test: atest, TreeHugger, manual observation of labeling
Bug: 185962988
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Ib4f8aa6cc2e0f5a5bd432bcfe473e550f5c68132
2021-05-11 07:40:38 +00:00
Peter Csaszar
6ff24d2a06
pixel-selinux: add SJTAG policies am: bc525e1a49
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14489636
Change-Id: I19e3462634d1e299ca6bfb8e8e01bd3e689bd903
2021-05-11 07:24:12 +00:00
Peter Csaszar
c8e24207eb
pixel-selinux: add SJTAG policies am: bc525e1a49
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14489636
Change-Id: I007fd343a1cea81e73989bd3aa097341fe0e8d6c
2021-05-11 07:21:52 +00:00
Peter Csaszar
6a9f52b022
pixel-selinux: add SJTAG policies am: bc525e1a49
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14489636
Change-Id: I15f0713b466b5717e66cea151ac618eb0dfc21e1
2021-05-11 07:19:46 +00:00
Taeju Park
638778c654
Grant vendor_sched sysfs nodes access
...
Bug: 182509410
Signed-off-by: Taeju Park <taeju@google.com>
Change-Id: I53a879e904bef3c5b13127404f4f5c422abd46b4
2021-05-11 04:27:23 +00:00
Jia-yi Chen
616f6b2ccd
Revert "Update power hint for camera workload" am: 5ac313e4fd
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/14491471
Change-Id: Ia490ea0f87818969e2768fe4a9fbaf0b39d61517
2021-05-11 02:40:38 +00:00
Jia-yi Chen
a6889fd404
Revert "Update power hint for camera workload"
...
This reverts commit 637fc9e8d727121276cf8dea2976ac52f8da8d15.
Reason for revert: Camera EBUF overflow observed after launching GCA.
Bug: 187760882
Change-Id: I2357d943f4b4d96ffa7a156671ac7c790640a5ed
2021-05-11 02:22:56 +00:00
Peter Csaszar
bc525e1a49
pixel-selinux: add SJTAG policies
...
These are the SELinux policies for the DebugFS files of the SJTAG
kernel interface.
Bug: 184768605
Signed-off-by: Peter Csaszar <pcsaszar@google.com>
Change-Id: I36996d6fd5fe09adb7a36be573cf57f15ea35756
2021-05-10 17:58:04 -07:00
Wei Wang
ff1bb37173
Merge "Add policy for memlat governor needs create/delete perf events" into sc-dev am: 551505ae05
am: 8181bbaaac
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14486216
Change-Id: I616fa1b699d2b2fee93496cf06b24786f7e4e74b
2021-05-11 00:34:34 +00:00