Commit graph

11403 commits

Author SHA1 Message Date
Jenny Ho
e8ecf4ded7 Merge "dumpstate: Update eeprom dump path" into sc-dev 2021-03-17 08:07:45 +00:00
Adam Shih
ebeae6abc3 label uwb service to prevent reset after unplugging USB
Bug: 182953824
Test: unplug USB under enforcing mode
Change-Id: Ib4bdf9b9339fc631d045bde57f78a46ce3ca8b6e
2021-03-17 15:25:27 +08:00
TreeHugger Robot
188c7e93fc Merge "sensors: Add sensor related rule to chre." into sc-dev am: b8ec327d5c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13885466

Change-Id: I9a4f8817963617f8e212d8ffdf36a17e5580d192
2021-03-17 07:00:57 +00:00
TreeHugger Robot
b8ec327d5c Merge "sensors: Add sensor related rule to chre." into sc-dev 2021-03-17 06:28:41 +00:00
Hridya Valsaraju
a570dc6991 Add a label for Pixel DMA-BUF heap tracepoints
These tracepoint are the DMA-BUF equivalents to the ION tracepoints.
They expose the size of the DMA-BUF, unique inode number of the DMA-BUF
and total size of all DMA-BUFs exported from the DMA-BUF heap framework.

Test: build
Bug: 182328989
Change-Id: I311b68275ebd668f73d0ccff0fcaa01d251250bc
2021-03-16 23:00:41 -07:00
Adam Shih
afb246e88a Merge changes I33cd99d5,I8417d4eb into sc-dev am: 63143cdf96
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13895426

Change-Id: I9fa4c9593bb10eae995d38922a41b0ddd917e5b8
2021-03-17 05:40:37 +00:00
Jenny Ho
2dc4d2d61f genfs_contexts: add sepolicy for dumping eeprom data
I auditd  : type=1400 audit(0.0:53): avc: denied { getattr } for comm="sh" path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I sh      : type=1400 audit(0.0:53): avc: denied { getattr } for path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I auditd  : type=1400 audit(0.0:57): avc: denied { getattr } for comm="ls" path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
I ls      : type=1400 audit(0.0:57): avc: denied { getattr } for path="/sys/devices/platform/10970000.hsi2c/i2c-5/5-0050/eeprom" dev="sysfs" ino=59692 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

Bug: 182531832
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: If189575c6db8b43b59c6009378ec724bd075c0d1
2021-03-17 13:07:55 +08:00
Adam Shih
63143cdf96 Merge changes I33cd99d5,I8417d4eb into sc-dev
* changes:
  label missing power sys nodes
  update error on ROM 7213588
2021-03-17 05:03:29 +00:00
LABIB MD RASHID
ca27f88d5f Merge "Sysfs node permission for modem" into sc-dev am: 9c47b4ff37
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13835862

Change-Id: Ie397687a62c857684b02ff02abedebb9345a015d
2021-03-17 03:45:15 +00:00
TreeHugger Robot
2d39854611 Merge "Add Sepolicy rule for connectivity monitor app" into sc-dev am: 0aef3b56c5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13880431

Change-Id: Ia4981828bf05e6b824ab071c0475579405693bb3
2021-03-17 03:44:56 +00:00
TreeHugger Robot
0aef3b56c5 Merge "Add Sepolicy rule for connectivity monitor app" into sc-dev 2021-03-17 03:12:31 +00:00
LABIB MD RASHID
9c47b4ff37 Merge "Sysfs node permission for modem" into sc-dev 2021-03-17 03:02:36 +00:00
Adam Shih
74052118a8 label missing power sys nodes
Bug: 182954169
Test: boot with no avc error found
Change-Id: I33cd99d5748dd9fc40301c460a050b6e969f30f4
2021-03-17 10:49:24 +08:00
Rick Chen
78047fa17b sensors: Add sensor related rule to chre.
[    8.417813] type=1400 audit(1615518074.988:4): avc: denied { write } for comm="sensors@2.0-ser" name="chre" dev="tmpfs" ino=908 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:chre_socket:s0 tclass=sock_file permissive=1
[    8.418075] type=1400 audit(1615518074.988:5): avc: denied { connectto } for comm="sensors@2.0-ser" path="/dev/socket/chre" scontext=u:r:hal_sensors_default:s0 tcontext=u:r:chre:s0 tclass=unix_stream_socket permissive=1
03-12 11:01:14.988   694   694 I sensors@2.0-ser: type=1400 audit(0.0:5): avc: denied { connectto } for path="/dev/socket/chre" scontext=u:r:hal_sensors_default:s0 tcontext=u:r:chre:s0 tclass=unix_stream_socket permissive=1

Also merge two sensor_hal related files into single file.

Bug: 182523946
Test: make selinux_policy -j128 and push to device.
      No hal_sensors_default related avc deined log during boot.
Signed-off-by: Rick Chen <rickctchen@google.com>
Change-Id: I49ce71ba4703528fb2e26dd8956c4ed741337ffc
2021-03-17 10:34:14 +08:00
Benjamin Schwartz
595aa0723a powerstats: Add Ufs stats am: 10e6ca883f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13878906

Change-Id: Iccc60c6ef714a838f7a9e2715c20342e3c423391
2021-03-17 02:25:59 +00:00
Benjamin Schwartz
6beac59d8d Merge "Give power stats HAL permission to read ufs stats" into sc-dev am: fe980b935b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13881265

Change-Id: I21a2217c38a764545fc4a19b4b114eaee260efe3
2021-03-17 02:25:59 +00:00
TreeHugger Robot
120967467a Merge "allow df to collect partition info" into sc-dev am: 23017e956d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13856371

Change-Id: I53f473fa1d949eb035367b5bfa16022dd3098ebc
2021-03-17 02:25:39 +00:00
Adam Shih
7c0fd2a413 update error on ROM 7213588
Bug: 182954169
Bug: 182954060
Bug: 182954138
Bug: 182954062
Bug: 182953824
Bug: 182953825
Bug: 182954248
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I8417d4ebacefa691838e25131749b0e4fd152a2f
2021-03-17 10:15:02 +08:00
Benjamin Schwartz
fe980b935b Merge "Give power stats HAL permission to read ufs stats" into sc-dev 2021-03-17 02:09:54 +00:00
TreeHugger Robot
23017e956d Merge "allow df to collect partition info" into sc-dev 2021-03-17 01:52:43 +00:00
Benjamin Schwartz
d5ab86411f Fix sepolicies for hal_power_stats_default am: ed8fdc9997
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13877746

Change-Id: I01e5424a15c0a2771f0b958c2d29adf4d43d33a9
2021-03-16 20:54:07 +00:00
Benjamin Schwartz
10e6ca883f powerstats: Add Ufs stats
Bug: 140217385
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Ie60a8bbb5ac9290d9b707a1529bcc384c5e61626
2021-03-16 13:40:48 -07:00
Benjamin Schwartz
ed8fdc9997 Fix sepolicies for hal_power_stats_default
Bug: 182320246
Test: No more avc denied log messages for hal_power_stats_default
Change-Id: I1cd801bb4823e80bd5ea112fb0b7bdfaeabbdef5
2021-03-16 10:37:09 -07:00
Chris Fries
1d720653aa Merge "Revert "Decouple auto-suspend and interactive from display on/off"" into sc-dev am: 8536bb3952
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13885214

Change-Id: Ife1216be74f986f6712220a9ef5991a100f0a269
2021-03-16 17:16:47 +00:00
Chris Fries
8536bb3952 Merge "Revert "Decouple auto-suspend and interactive from display on/off"" into sc-dev 2021-03-16 16:41:03 +00:00
Ken Huang
fba970113a Revert "Decouple auto-suspend and interactive from display on/off"
This reverts commit 8069d3856d.

Reason for revert: black display in AoD
Bug: 182851537

Change-Id: Idc0ef7cf076b6060cc76c983bd512247f9e8a4c0
2021-03-16 16:29:55 +00:00
Charlie Chen
0cb31ae833 Merge "Revert "Switch back from DMABUF to ION/BLOB allocator"" into sc-dev am: 8b400f943c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13881381

Change-Id: Ifa4eda1e7745d020c48ba97c26c3fe1e5f8c79a0
2021-03-16 15:22:30 +00:00
Charlie Chen
8b400f943c Merge "Revert "Switch back from DMABUF to ION/BLOB allocator"" into sc-dev 2021-03-16 14:56:57 +00:00
TreeHugger Robot
411cd08e91 Merge "display: add sepolicy for hal_graphics_composer" into sc-dev am: 96d0c28dc4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13880429

Change-Id: I0f7c6b3d3c172fd4e2038f9bef7d6b7a0fa9436b
2021-03-16 12:38:49 +00:00
TreeHugger Robot
96d0c28dc4 Merge "display: add sepolicy for hal_graphics_composer" into sc-dev 2021-03-16 12:05:50 +00:00
TreeHugger Robot
c6fcf5f46a Merge "gs101: set touch_offload device file permission" into sc-dev am: a9eb36903b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13881374

Change-Id: Ieb8de61f59012d47eff7f2f5ef31ba88342be4c5
2021-03-16 11:06:31 +00:00
TreeHugger Robot
a9eb36903b Merge "gs101: set touch_offload device file permission" into sc-dev 2021-03-16 10:25:45 +00:00
Charlie Chen
935a1dd591 Revert "Switch back from DMABUF to ION/BLOB allocator"
This reverts commit f35c9cb038.
To enable DMABUF again.
Patch: https://android-review.googlesource.com/c/platform/system/memory/libdmabufheap/+/1634146/
fixed the error when using DMABUF

Bug: 153786620
Test: reboot O6 device and confirm the error does not show up again
Change-Id: Id378fe1fe8b9615f72138575cec8e5e1e20caec9
2021-03-16 16:28:15 +08:00
Wesley Wang
7b9ed95f9a Merge "Enable battery percentage config for O6/R4" into sc-dev am: 16fa1efb47
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13862482

Change-Id: I6db80a7891bbe6bf0618bcf8a7c95fc9441a8297
2021-03-16 08:05:14 +00:00
Hsiaoan Hsu
46fedc2148 Add Sepolicy rule for connectivity monitor app
sync sepolicy from previous projects.

Bug: 182715920
Test: build pass. connetivity monitor service running successfully.
Change-Id: Id5606b5db74fbf672ac41549862a83557734ac57
2021-03-16 15:48:53 +08:00
Wesley Wang
16fa1efb47 Merge "Enable battery percentage config for O6/R4" into sc-dev 2021-03-16 07:34:10 +00:00
Tai Kuo
b6b9bdaa0f gs101: set touch_offload device file permission
Bug: 173331163
Bug: 174189640
Bug: 174191163
Test: twoshay_touchflow + heatmap reflector APK works.
Signed-off-by: Tai Kuo <taikuo@google.com>
Change-Id: I02c3cf9fd4cd946e603f5cc5f614fa744660d0bc
2021-03-16 14:45:18 +08:00
raylinhsu
031fe80418 display: add sepolicy for hal_graphics_composer
Allow HWC to access vendor_log_file and also allow hwc to access
power hal

Bug: 181712799
Test: pts -m PtsSELinuxTest -t
com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot

Change-Id: I403a528f651b9ee5755d11525f2a33c39628ecee
2021-03-16 13:50:48 +08:00
SalmaxChang
81104c001c MDS: Fix avc errors am: b70e0bebdd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13816042

Change-Id: I7438c1c4654e8053e0315623c42475e656737a11
2021-03-16 04:26:46 +00:00
SalmaxChang
b70e0bebdd MDS: Fix avc errors
avc: denied { search } for name="vendor" dev="tmpfs" ino=2 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=1 app=com.google.mds
avc: denied { search } for name="vendor" dev="tmpfs" ino=2 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=1 app=com.google.mds
avc: denied { search } for comm=4173796E635461736B202332 name="radio" dev="dm-9" ino=242 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=dir permissive=1 app=com.google.mds
avc: denied { call } for comm=4173796E635461736B202331 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:r:dmd:s0 tclass=binder permissive=1 app=com.google.mds
avc: denied { write } for name="property_service" dev="tmpfs" ino=316 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=1 app=com.google.mds
avc: denied { read } for name="u:object_r:vendor_modem_prop:s0" dev="tmpfs" ino=289 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:vendor_modem_prop:s0 tclass=file permissive=1 app=com.google.mds
avc: denied { search } for comm=4173796E635461736B202331 name="chosen" dev="sysfs" ino=9330 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs_chosen:s0 tclass=dir permissive=1 app=com.google.mds

Bug: 181185131
Bug: 179110848

Change-Id: I1ac00b68e2db44cc86f6b5c70001cda78264ff6e
2021-03-16 02:27:54 +00:00
Adam Shih
df5b767adf Merge "label power.stats-vendor properly" into sc-dev am: dd7f31a99f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13856370

Change-Id: I301a946f6fbfeab735b81fb92e37a657ede3e9a6
2021-03-16 01:50:01 +00:00
Adam Shih
dd7f31a99f Merge "label power.stats-vendor properly" into sc-dev 2021-03-16 01:16:20 +00:00
Adam Shih
142e40a2e0 Merge "Allow bluetooth hal to get boot status" into sc-dev am: 3887fc2628
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13856369

Change-Id: I7c25de614a2e2625f2cfc8fd8a3df8a5d74f877d
2021-03-16 00:57:19 +00:00
Benjamin Schwartz
a1f92cdd90 Give power stats HAL permission to read ufs stats
Bug: 140217385
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Ib3fa9440982bc5846053e9ddf56d3ed178599c0c
2021-03-15 17:37:29 -07:00
Adam Shih
3887fc2628 Merge "Allow bluetooth hal to get boot status" into sc-dev 2021-03-16 00:35:59 +00:00
Tianjie Xu
40df210367 Merge "Include the Pixel common board configuration" into sc-dev am: ad661aed61
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13855694

Change-Id: I6ebf6aa26fe45eff43b20e23423a4bf655fb95cb
2021-03-15 19:02:52 +00:00
Daniel Mentz
2b09a4d4e1 Merge "Add vendor_dlkm partition (2nd attempt)" into sc-dev am: b494fcea4d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13849595

Change-Id: I2e45b52b92e3c27fe190f3d2c929d1f952cad0e0
2021-03-15 19:01:42 +00:00
Tianjie Xu
ad661aed61 Merge "Include the Pixel common board configuration" into sc-dev 2021-03-15 18:46:12 +00:00
Daniel Mentz
b494fcea4d Merge "Add vendor_dlkm partition (2nd attempt)" into sc-dev 2021-03-15 18:34:41 +00:00
Pat Tjin
8a89070e98 Merge "Adjust BOARD_GOOGLE_DYNAMIC_PARTITIONS_SIZE to 8527020032" into sc-dev am: da98e3c78f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101/+/13849599

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: Ic14a2d060f9c6b5e9026cf705ebf4c4096ecfe6b
2021-03-15 17:24:39 +00:00