Commit graph

153 commits

Author SHA1 Message Date
Roshan Pius
34c5b9b239 gs-sepolicy(uwb): Changes for new UCI stack
1. Rename uwb vendor app.
2. Rename uwb vendor HAL binary name & service name.
3. Allow vendor HAL to host the AOSP UWB HAL service.
4. Allow NFC HAL to access uwb calibration files.

Bug: 186585880
Test: Manual Tests
Change-Id: I2c7c2466f42317d643634e24b1efb1855e673d09
2022-03-06 18:15:16 -08:00
Robert Shih
cb04f5981f whitechapel: sepolicy for Widevine AIDL HAL
Bug: 219538389
Test: atest GtsMediaTestCases
Change-Id: I431554dcbef014f8235f048ee062a218a2131f9c
2022-02-20 12:35:22 -08:00
Ankit Goyal
ec2a9fb8fc Rename vulkan library to be platform agnostic
Bug: 174232579
Test: Boots to home
Change-Id: I39d633e79896d7196ca7011dd7e017950248e2d8
2022-01-26 20:36:29 -08:00
Badhri Jagan Sridharan
51735ba3ab android.hardware.usb.IUsb AIDL migration
android.hardware.usb.IUsb is migrated to AIDL and runs in
its own process. android.hardware.usb.gadget.IUsbGadget
is now published in its own exclusive process
(android.hardware.usb.gadget-service). Creating
file_context and moving the selinux linux rules
for IUsbGadget implementation.

Bug: 200993386
Change-Id: Ia8c24610244856490c8271433710afb57d3da157
2022-01-21 17:07:56 -08:00
Cyan_Hsieh
0b5b4a9692 Add pvmfw to custom_ab_block_device
Bug: 211070100
Change-Id: Icd8f6d1837b8124bd8cd7b3d59d43b755455bae6
2021-12-20 10:10:46 +08:00
Adam Shih
5c28519e40 move bluetooth related types to bluetooth
Bug: 202790744
Test: boot with bluetooth hal started
Change-Id: I615d4b13262af2bc2c044914e595a7c2085999d2
2021-10-18 11:43:15 +08:00
Adam Shih
17881f3a38 reorganize pixelstats_vendor
Bug: 202462997
Test: boot with pixelstats_vendor started
Change-Id: I8582ac4e83720768ee7992d41bdac0798da892d9
2021-10-08 11:06:49 +08:00
Philip Quinn
ac931238bf Merge "Move twoshay definitions to hardware/google/pixel-sepolicy/input." 2021-09-30 17:23:42 +00:00
George Chang
8f3fb5c47f Update SecureElement Sepolicy
Add rules for sysfs_st33spi
Separate hal_secure_element_st54spi and st33spi form default

Bug: 193417907
Test: VtsHalSecureElementV1_2TargetTest,
      VtsHalSecureElementV1_1TargetTest,
      VtsHalSecureElementV1_0TargetTest,
      CtsOmapiTestCases
Change-Id: I444af2e38fc120d173445bce48b7e4d381201a91
2021-09-30 17:41:32 +08:00
Philip Quinn
d5ac0ac3ce Move twoshay definitions to hardware/google/pixel-sepolicy/input.
Bug: 187654303
Test: twoshay works on R4, B3, P7
Change-Id: I2cada463fcbfd3b52230430b12b091a655e2abbb
2021-09-28 20:11:33 +00:00
Erik Staats
c57b0bdb55 Allow the sensor HAL to access raw HID devices. am: d60ebc5327 am: 35b6d77e0c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15847652

Change-Id: I9bb49fa27647423d27a4d8cb5444412b5220930c
2021-09-27 19:06:50 +00:00
Erik Staats
35b6d77e0c Allow the sensor HAL to access raw HID devices. am: d60ebc5327
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15847652

Change-Id: I31d13e1a04c7280706e52caea4f1c34a28b5d0e7
2021-09-27 18:45:23 +00:00
Erik Staats
d60ebc5327 Allow the sensor HAL to access raw HID devices.
Bug: 195964858
Test: Paired a Sony PS4 controller and verified that it's discovered by
 the dynamic sensor HAL.
Test: See details in testing done comment in
 https://googleplex-android-review.git.corp.google.com/15847652 .
Change-Id: Ic0bdd711d066a9793eba305102e9a850e3973856
2021-09-27 18:34:30 +00:00
Arthur Ishiguro
2bc80fd0e7 Add Context Hub AIDL to gs101 sepolicy
Bug: 194285834
Test: None
Change-Id: I8f9ef02c51d3f06bbfa94e9ce006cd2a0ee59c73
2021-09-23 08:16:01 -07:00
TreeHugger Robot
3b65e6f197 Merge "Split bluetooth sepolicy file to avoid conflict" 2021-09-17 08:46:42 +00:00
Patty
9795c12e8f Split bluetooth sepolicy file to avoid conflict
- Move bluetooth related config to bluetooth folder

Bug: 196308076
Test: make; boot with service btlinux started
Change-Id: I8d40697f20a916fc154f0b60851abecd1deadc0d
2021-09-15 10:50:39 +08:00
Jonglin Lee
af3a79ed68 Merge "Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."" 2021-09-10 21:31:23 +00:00
Jonglin Lee
7254de258a Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."
Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."

Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."

Revert "Move twoshay definitions to hardware/google/pixel-sepoli..."

Revert "Move sepolicy for _touchflow targets."

Revert submission 15676823-reflector-sepolicy

Reason for revert: breaking several builds in git_master-without-vendor
Reverted Changes:
Ifecfc81f0:Move twoshay definitions to hardware/google/pixel-...
Idfd81131c:Move twoshay definitions to hardware/google/pixel-...
Id2b0e1db3:Move twoshay definitions to hardware/google/pixel-...
I43ac6337f:Move twoshay definitions to hardware/google/pixel-...
If95e6e788:Move twoshay definitions to hardware/google/pixel-...
I07ab95780:Move sepolicy for _touchflow targets.
I01f378b51:Move sepolicy for _touchflow targets.

Bug: 199548147
Change-Id: I84f106c24bd47fd171788301415c0eabafe9254f
2021-09-10 21:23:57 +00:00
Philip Quinn
5c58949ac6 Merge "Move twoshay definitions to hardware/google/pixel-sepolicy/input." 2021-09-10 17:15:05 +00:00
Philip Quinn
d1dd6bac2a Move twoshay definitions to hardware/google/pixel-sepolicy/input.
Bug: 187654303
Test: twoshay works on r4
Change-Id: Id2b0e1db3e1cb9ddf579ea7ed74493464d13fc84
2021-09-08 13:22:24 -07:00
Adam Shih
82db60c2d4 remove obsolete devices
Bug: 196916111
Test: No file on the path
Change-Id: If8e54bd161bc955424b40023d94f15bf6b82cc8f
2021-09-08 13:15:44 +08:00
Jenny Ho
7d27682911 sepolicy: add rule for new debug file node am: 17e518038e am: ee73f40872
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15756806

Change-Id: Ie03501a815a501184142af5f8dd0e4aa1df97729
2021-09-07 14:33:01 +00:00
Jenny Ho
ee73f40872 sepolicy: add rule for new debug file node am: 17e518038e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15756806

Change-Id: Ie913098b9b31e3c042abe13672fddc726cf4aef0
2021-09-07 14:21:17 +00:00
Jenny Ho
17e518038e sepolicy: add rule for new debug file node
W dumpstate@1.1-s: type=1400 audit(0.0:7): avc: denied { read } for name="logbuffer_maxfg_monitor" dev="tmpfs" ino=500 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0

Bug: 196755019
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: I0ddf68d5e15fe8d77d8d61287f65621c14024f46
2021-09-06 06:21:34 +00:00
Roshan Pius
9c96111094 gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor
Since we are now creating an AOSP HAL for uwb. Rename qorvo's internal
HAL to hal_uwb_vendor to avoid conflicts with the AOSP HAL sepolicy
rules.

Bug: 195308730
Test: Compiles
Change-Id: Ief48eacde68b062b2199b20c0c1bb3af23795240
Merged-In: Ief48eacde68b062b2199b20c0c1bb3af23795240
2021-08-26 20:02:20 +00:00
Victor Liu
29aa981623 uwb: permissions for factory uwb calibration file
add permission to:
copy factory uwb calib files from persist to /data/vendor/uwb
convert copied file to proper format for uwb stack to consume

Bug: 195659525
Signed-off-by: Victor Liu <victorliu@google.com>
Change-Id: I3e5282477fd391b483e03242ce0b806bd447dc54
Merged-In: I3e5282477fd391b483e03242ce0b806bd447dc54
2021-08-25 19:14:10 +00:00
Victor Liu
8383d9e13f uwb: permissions for factory uwb calibration file
add permission to:
copy factory uwb calib files from persist to /data/vendor/uwb
convert copied file to proper format for uwb stack to consume

Bug: 195659525
Signed-off-by: Victor Liu <victorliu@google.com>
Change-Id: I3e5282477fd391b483e03242ce0b806bd447dc54
2021-08-25 19:12:44 +00:00
Roshan Pius
515c17c4e3 gs101-sepolicy: Rename hal_uwb -> hal_uwb_vendor
Since we are now creating an AOSP HAL for uwb. Rename qorvo's internal
HAL to hal_uwb_vendor to avoid conflicts with the AOSP HAL sepolicy
rules.

Bug: 195308730
Test: Compiles
Change-Id: Ief48eacde68b062b2199b20c0c1bb3af23795240
2021-08-23 09:03:06 -07:00
horngchuang
e212167642 sepolicy: gs101: Grant permission for more camera device nodes
Bug: 193103432
Test: aosp camera
Change-Id: Ic921200f05092c217d9c3d859ed33b5dc8e5b44b
2021-08-16 08:40:25 +00:00
Jiyong Park
5cc5d52bd7 Remove ndk_platform backend. Use the ndk backend.
The ndk_platform backend will soon be deprecated because the ndk backend
can serve the same purpose. This is to eliminate the confusion about
having two variants (ndk and ndk_platform) for the same ndk backend.

Bug: 161456198
Test: m

Change-Id: Icc9af3798ac89742fa56b1cb37d8116d99b4a9c2
2021-08-06 19:58:01 +09:00
Ankit Goyal
0f9820830c Add SE policies for memtrack HAL
Bug: 191966412
Test: adb shell dumpsys meminfo
Change-Id: Ia7ec64840d2bb7c3ae0d61304e109d2ceb9e5f78
2021-07-24 02:18:36 +08:00
Petri Gynther
d12714ccc0 Add vbmeta_vendor_[ab] to file_contexts
Bug: 181909612
Test: build + install + boot to home
Change-Id: Ibb7bd8e5a61d86de1b51a3780a5bfa8cf4caf59b
2021-07-20 23:41:31 -07:00
TreeHugger Robot
f8b8e0cb53 Merge "Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot" into sc-dev 2021-07-19 20:54:38 +00:00
Andrew LeCain
ff13d1adee Merge "sepolicy allow fingerprint hal to read mfg_data" into sc-dev 2021-07-19 17:46:18 +00:00
Stephane Lee
022b61751e Add cpm/pca9468 logbuffer directories so that bugreports can take a snapshot
Test: adb bugreport; check "dumpstate_board.txt"
Bug: 193894298
Change-Id: I222405ab6d78bd4367a91cc0f13b8d8a0f1ca578
2021-07-16 16:27:42 -07:00
Alex Hong
ea6934fda9 Merge "sepolicy: gs101: support tetheroffload hal version 1.y" into sc-dev 2021-07-16 06:28:32 +00:00
Namkyu Kim
4055c31faf sepolicy: gs101: support tetheroffload hal version 1.y
Support both 1.0 and 1.1.

Bug: 186539538
Test: run vts -m VtsHalTetheroffloadControlV1_0TargetTest
      run vts -m VtsHalTetheroffloadControlV1_1TargetTest

Signed-off-by: Namkyu Kim <namkyu78.kim@samsung.com>
Change-Id: I76a26dcd22e1c8985d470a39b9aeae618f459d00
2021-07-16 04:05:21 +00:00
Stephane Lee
ea6996bc52 Merge "odpm: Rename the odpm_config sepolicies to be more consistent" into sc-dev 2021-07-16 01:55:33 +00:00
Andrew LeCain
d8d8580281 sepolicy allow fingerprint hal to read mfg_data
declares new device context for mfg_data_block_device
give fp HAL permission to read/write/open
give fp HAL permission to search block_device dir

Bug: 189135413
Test: sideload calibration in enforcing mode.
Change-Id: I19e0cd13fc452b42c3f35772c4bafd433dbcc8b1
2021-07-15 10:58:53 -07:00
Darren Hsu
3050ed8ed9 Set sepolicy for shell script of disabling contaminant detection
The avc denials are listed in b/192208389#comment10.

Bug: 192208389
Test: Manually tested
Change-Id: Ib2e3cf498851c0c9e5e74aacc9bf391549c0ad1a
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2021-07-15 11:11:11 +08:00
Stephane Lee
c7342a7824 odpm: Rename the odpm_config sepolicies to be more consistent
Test: Ensure that there are no sepolicy errors on odpm_config
Bug: 192674986
Change-Id: I3043a544511c8c3051e1bd10e9f6b668b251cf5f
2021-07-14 16:11:51 -07:00
Maciej Żenczykowski
714075eba7 add sepolicy for set_usb_irq.sh
Bug: 185092876
Test: TreeHugger, booted on oriole, enabled/disabled tethering
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I7361a4390197e04b27eaf153a696e3f800f79b55
2021-07-07 16:22:33 +00:00
Adam Shih
99bfde4f38 Merge "modularize dmd" into sc-dev 2021-06-25 01:12:50 +00:00
Adam Shih
9b0b96b907 Merge "modularize pktrouter" into sc-dev 2021-06-24 07:24:45 +00:00
Adam Shih
8b326703e1 modularize dmd
Bug: 190331463
Test: build ROM and make sure dmd is launched
Change-Id: If1e51b6bc100e870a15a40f5e0d93a75fe68bac3
2021-06-24 14:17:29 +08:00
Denny cy Lee
0b21a2d44a Pixelstat: battery history access premission
Test: manually, relate seploicy not show; battery history log printed
      05-24 13:29:19.637  2829  2829 D pixelstats_BatteryEEPROM:
      checkAndReport: 0940 0a80 0500 0200 0200 0000
Bug: 189050725
Change-Id: I20567e168db43fe2168a9a30ac7a4b0cec65a665
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-23 13:50:32 +08:00
Adam Shih
a70819d2f0 modularize pktrouter
Bug: 190331212
Test: make sure pktrouter gets initialized
06-23 13:21:19.372  1 1 I init : Parsing file /vendor/etc/init/pktrouter.rc...
06-23 13:21:23.510     1     1 I init    : processing action (vendor.pktrouter=1) from (/vendor/etc/init/pktrouter.rc:7)
06-23 13:21:23.510     1     1 I init    : starting service 'pktrouter'...
Change-Id: Icc7ab88505aea47cfed5ffc5182d0625b7a7609d
2021-06-23 05:24:01 +00:00
Adam Shih
d74e989739 modulize init.radio.sh
Bug: 190331600
Test: build ROM and make sure the file is there and functional.
Change-Id: Icb3e0e590ae315d53eb5251fd5e74d6aacab1fe2
2021-06-23 01:07:26 +00:00
Adam Shih
d77bc5a970 organize confirmationui settings
Bug: 190331547
Bug: 190331370
Test: build ROM and make sure file and sepolicy is still there
Change-Id: I4cabf9280ab5e21038bcb72615799b7ed0fb1670
2021-06-18 12:56:05 +08:00
Badhri Jagan Sridharan
eb3881dbe7 Add file context for /dev/logbuffer_tcpm
/dev/logbuffer_tcpm gets accessed by dumpstate while bugreport
generation.

Bug: 189792358
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
Change-Id: Ica0f3557ad9c41844f8411b0bdf68d66fbba00e5
2021-06-17 16:11:28 -07:00