Evolution-X-Tensor/device_google_gs101
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
628 commits 1 branch 0 tags 494 MiB
Commit graph

628 commits

This branch
This branch
All branches
Author SHA1 Message Date
Manish Varma
a5a368cdfc genfs_contexts: fix path for st21nfc i2c devices am: 705ecbe0ab am: 4aa4640559 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538367

Change-Id: I16d24056befe5c7af7d1cc3c650755736ccda9b0
 2021-05-14 03:24:29 +00:00
Manish Varma
03657f8e3a genfs_contexts: fix path for s2mpg1X i2c devices am: fd2a6b9a74 am: a592b23a80 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538366

Change-Id: Id4aea52b7d4e327f9a7d44ef52c7b548ffc4bcd3
 2021-05-14 03:24:28 +00:00
Manish Varma
459bdb2a40 genfs_contexts: fix path for cs40l25a i2c devices am: 194fef8b5a am: 67d28bdf03 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538365

Change-Id: Id4e533c9c71b23a65cd7af0d3cd602263503bc45
 2021-05-14 03:24:28 +00:00
Manish Varma
db3f825375 genfs_contexts: fix path for max77759tcpc i2c devices am: 3868f8aa88 am: aaee225e77 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538364

Change-Id: I021fbcd94e6085cfb1928fd116852933ff347d89
 2021-05-14 03:24:27 +00:00
Manish Varma
529d215c31 genfs_contexts: fix path for p9412 i2c devices am: b08c98c2b4 am: 9ba9e2a783 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14535947

Change-Id: Ib96389e2291833fbf89892992a39a5d642585398
 2021-05-14 03:24:26 +00:00
Manish Varma
4aa4640559 genfs_contexts: fix path for st21nfc i2c devices am: 705ecbe0ab 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538367

Change-Id: I189d9d114c580d0cbb00611c0ad2239439ddf1c5
 2021-05-14 03:02:53 +00:00
Manish Varma
a592b23a80 genfs_contexts: fix path for s2mpg1X i2c devices am: fd2a6b9a74 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538366

Change-Id: I872b4ba0c56e5ec30b5e43f3ac0ba029c265d08a
 2021-05-14 03:02:52 +00:00
Manish Varma
67d28bdf03 genfs_contexts: fix path for cs40l25a i2c devices am: 194fef8b5a 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538365

Change-Id: I99768e7485ed5b6c9e5d79dcebbf75c8ded2c5c2
 2021-05-14 03:02:51 +00:00
Manish Varma
aaee225e77 genfs_contexts: fix path for max77759tcpc i2c devices am: 3868f8aa88 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14538364

Change-Id: I144505ad7a6ff6a4b481c0a0aa5de75439195edf
 2021-05-14 03:02:50 +00:00
Manish Varma
9ba9e2a783 genfs_contexts: fix path for p9412 i2c devices am: b08c98c2b4 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14535947

Change-Id: Iae81f3b32532152f8c8ff4d004887252ad3de889
 2021-05-14 03:02:49 +00:00
Manish Varma
705ecbe0ab genfs_contexts: fix path for st21nfc i2c devices 
Due to recent changes which modifies the device name for i2c devices,
st21nfc device names are now changed from ?-0008 to "i2c-st21nfc"

Bug: 188078957
Test: Verified haptic works and no avc denials when running following command:
$ dmesg | grep avc | grep sysfs
Signed-off-by: Manish Varma <varmam@google.com>
Change-Id: I17464d2d01fb64447dd8828eb8f91e38717fac4c
 2021-05-13 17:43:26 -07:00
Manish Varma
fd2a6b9a74 genfs_contexts: fix path for s2mpg1X i2c devices 
Due to recent changes which modifies the device name for i2c devices,
s2mpg1xmfd device names are now changed from ?-00?f to "i2c-s2mpg10mfd" or
"i2c-s2mpg11mfd"

Bug: 188078957
Test: Verified no avc denials when running following command:
$ dmesg | grep avc | grep sysfs

Signed-off-by: Manish Varma <varmam@google.com>
Change-Id: I2c58773613071147336b4f338e4c4034ce90e9bd
 2021-05-13 17:42:08 -07:00
Manish Varma
194fef8b5a genfs_contexts: fix path for cs40l25a i2c devices 
Due to recent changes which modifies the device name for i2c devices,
cs40l25a device names are now changed from ?-0043 to "i2c-cs40l25a"

Bug: 188078957
Test: Verified haptic works and no avc denials when running following command:
$ dmesg | grep avc | grep sysfs

Signed-off-by: Manish Varma <varmam@google.com>
Change-Id: I47c423661d788c467d4cd1602fbc145bd715c67a
 2021-05-13 17:37:32 -07:00
Manish Varma
3868f8aa88 genfs_contexts: fix path for max77759tcpc i2c devices 
Due to recent changes which modifies the device name for i2c devices,
max77759tcpc device names are now changed from ?-0025 to "i2c-max77759tcpc"

Bug: 188078957
Test: Verified charging works and no avc denials when running
$ dmesg | grep avc | grep sysfs

Signed-off-by: Manish Varma <varmam@google.com>
Change-Id: Ic1f6d018ce74348b4faa937720b50c7924bf9b7a
 2021-05-13 17:36:59 -07:00
Manish Varma
b08c98c2b4 genfs_contexts: fix path for p9412 i2c devices 
Due to recent changes which modifies the device name for i2c devices,
p9412 device names are now changed from ?-003c to "i2c-p9412"

Bug: 188078957
Test: Verified wlc works and no avc denials when running following command:
$ dmesg | grep avc | grep sysfs

Signed-off-by: Manish Varma <varmam@google.com>
Change-Id: Id0af1122f7182a866ab28c5317db139d8083a45d
 2021-05-13 17:36:24 -07:00
TreeHugger Robot
c833549d8c Merge changes from topic "186500818-set1" into sc-dev am: 775771b811 am: a019f35a3b 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14490413

Change-Id: I808af635b42fe65f761f845c4fdc02650e498cb5
 2021-05-13 08:02:38 +00:00
TreeHugger Robot
a019f35a3b Merge changes from topic "186500818-set1" into sc-dev am: 775771b811 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14490413

Change-Id: I51cc2dd5c356ea0dd1653a8fc3769e360683e002
 2021-05-13 07:41:56 +00:00
TreeHugger Robot
775771b811 Merge changes from topic "186500818-set1" into sc-dev 
* changes:
  Let debugfs be accessed only for non-user builds
  Label debugfs files correctly
 2021-05-13 07:07:13 +00:00
Vineeta Srivastava
5e7734b411 Merge "Add sepolicy for the UDFPS antispoof property" into sc-dev am: 14a07e230a am: 4d42a986f8 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467424

Change-Id: Ia6d1856f2936d25405cec14da6f6d38f84e77248
 2021-05-12 22:43:29 +00:00
TreeHugger Robot
292337148c Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: d4f9ef4303 am: 1fbb91ef97 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14512449

Change-Id: I530ba8b8ffc0c0c49c3f18bcab0eae4726ba77ff
 2021-05-12 22:42:35 +00:00
Vineeta Srivastava
4d42a986f8 Merge "Add sepolicy for the UDFPS antispoof property" into sc-dev am: 14a07e230a 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14467424

Change-Id: Ib9a1b9ecff6942671528b782229ea60605437ea5
 2021-05-12 22:21:10 +00:00
Vineeta Srivastava
14a07e230a Merge "Add sepolicy for the UDFPS antispoof property" into sc-dev 2021-05-12 21:45:44 +00:00
TreeHugger Robot
1fbb91ef97 Merge "Grant vendor_sched sysfs nodes access" into sc-dev am: d4f9ef4303 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14512449

Change-Id: Iedca46d44602399a84822bc636c8b54ed025f045
 2021-05-12 18:49:09 +00:00
TreeHugger Robot
d4f9ef4303 Merge "Grant vendor_sched sysfs nodes access" into sc-dev 2021-05-12 18:28:51 +00:00
TreeHugger Robot
6432a7bc7a Merge "Add SELinux policy for allowing dumping GSC info" into sc-dev am: 1f594ec562 am: e723f80ba9 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14491675

Change-Id: I08ae3cbad6204c0b25415d1eea95f4a1af30d33c
 2021-05-12 10:41:16 +00:00
TreeHugger Robot
8a1ed47bba Merge "correctly label networking gadgets" into sc-dev am: 7fd939fdd7 am: b3ae9a8c03 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14495070

Change-Id: I32c987673a819fea3bd13ecb9527b8fd15552fbf
 2021-05-12 10:41:11 +00:00
TreeHugger Robot
e723f80ba9 Merge "Add SELinux policy for allowing dumping GSC info" into sc-dev am: 1f594ec562 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14491675

Change-Id: I2be4e332d0f1b79f9e744203127b48da25cd1554
 2021-05-12 10:26:57 +00:00
TreeHugger Robot
0c4611ecb0 Merge "bthal: allow bthal to access bluetooth kernel driver logbuffer_btlpm and logbuffer_btuart device node" into sc-dev am: 9b8e2b7ba8 am: e7fe59fb13 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14009545

Change-Id: I428409b43fbac1c0c6d4613b5be5d9e8c60f7e93
 2021-05-12 10:02:42 +00:00
TreeHugger Robot
1f594ec562 Merge "Add SELinux policy for allowing dumping GSC info" into sc-dev 2021-05-12 10:02:28 +00:00
TreeHugger Robot
b3ae9a8c03 Merge "correctly label networking gadgets" into sc-dev am: 7fd939fdd7 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14495070

Change-Id: I27d3d5a87b676167ffc00af83099c8547c4e3810
 2021-05-12 07:43:07 +00:00
TreeHugger Robot
7fd939fdd7 Merge "correctly label networking gadgets" into sc-dev 2021-05-12 07:38:42 +00:00
TreeHugger Robot
e7fe59fb13 Merge "bthal: allow bthal to access bluetooth kernel driver logbuffer_btlpm and logbuffer_btuart device node" into sc-dev am: 9b8e2b7ba8 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14009545

Change-Id: I2c7c39f279ec96eaa6138859ca3982bc85a21f6b
 2021-05-12 07:35:16 +00:00
TreeHugger Robot
9b8e2b7ba8 Merge "bthal: allow bthal to access bluetooth kernel driver logbuffer_btlpm and logbuffer_btuart device node" into sc-dev 2021-05-12 07:06:45 +00:00
TreeHugger Robot
7a4d420378 Merge "com.qorvo.uwb: signed with dedicated key and running as android.uid.uwb uid" into sc-dev am: e2a0158fdf am: 6d2c152bcf 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506301

Change-Id: Ie31251dcf3d49a4844c13b223452caac39f93681
 2021-05-12 07:02:52 +00:00
TreeHugger Robot
6d2c152bcf Merge "com.qorvo.uwb: signed with dedicated key and running as android.uid.uwb uid" into sc-dev am: e2a0158fdf 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14506301

Change-Id: Id1e7ebe45d7abab203646ed038cd74d194fd2014
 2021-05-12 06:41:43 +00:00
TreeHugger Robot
e2a0158fdf Merge "com.qorvo.uwb: signed with dedicated key and running as android.uid.uwb uid" into sc-dev 2021-05-12 06:22:21 +00:00
jonerlin
cb3f59b89e bthal: allow bthal to access bluetooth kernel driver logbuffer_btlpm 
and logbuffer_btuart device node

* add sepolicy rules to let bthal can access bluetooth kernel device
  nodes dev/logbuffer_btlpm and dev/logbuffer_tty16 in engineer
  or user debug build

Bug: 177794127
Test: Manually
Change-Id: I5253719df82ca7ef8e64cbd3f2b0ff6d3f088edc
 2021-05-12 13:27:40 +08:00
Wei Wang
6883250a44 Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev am: 53ae55618a am: c515c8345d 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14509955

Change-Id: I7f52c6c8fe5f6eac81410f10c4db73f13eaf46dc
 2021-05-12 04:49:43 +00:00
Wei Wang
c515c8345d Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev am: 53ae55618a 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14509955

Change-Id: I9a79e69ca43827358937aebcab730471715acb4c
 2021-05-12 04:28:06 +00:00
Thierry Strudel
03f4884884 com.qorvo.uwb: signed with dedicated key and running as android.uid.uwb uid 
Test:
05-11 21:05:48.077   786   786 I qorvo.uwb.main: UWB HAL start
05-11 21:05:48.078   412   412 I servicemanager: Found hardware.qorvo.uwb.IUwb/default in device VINTF manifest.
05-11 21:05:50.960  1639  1639 W PackageSettings: Missing permission state for package: com.qorvo.uwbtestapp.system
05-11 21:05:53.530  1639  1639 V StorageManagerService: Package com.qorvo.uwb does not have legacy storage
05-11 21:05:53.548  1639  1639 V StorageManagerService: Package com.qorvo.uwbtestapp.system does not have legacy storage
05-11 21:05:56.571  1639  1902 I am_proc_start: [0,3055,1083,com.qorvo.uwb,added application,com.qorvo.uwb]
05-11 21:05:56.571  1639  1902 I ActivityManager: Start proc 3055:com.qorvo.uwb/1083 for added application com.qorvo.uwb
05-11 21:05:56.653  1639  2264 I am_proc_bound: [0,3055,com.qorvo.uwb]
05-11 21:05:56.709  3055  3055 I TetheringManager: registerTetheringEventCallback:com.qorvo.uwb
05-11 21:05:56.710  3055  3055 V GraphicsEnvironment: ANGLE Developer option for 'com.qorvo.uwb' set to: 'default'
05-11 21:06:05.045  1639  1900 I am_pss  : [3055,1083,com.qorvo.uwb,5719040,4239360,0,88702976,2,0,6]
05-11 21:06:07.233  1639  1981 I am_compact: [3055,com.qorvo.uwb,all,84816,39052,44628,0,-816,0,-816,816,26,0,0,-800,0,1921532,-768]
05-11 21:06:38.442   786   786 I qorvo.Uwb: open
05-11 21:06:38.443   786   786 I qorvo.uwb.McpsUtils: ListHardware
05-11 21:06:38.443   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse
05-11 21:06:38.443   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse: Read message
05-11 21:06:38.443   786   786 I qorvo.uwb.IeeeUtils: ListDevices
05-11 21:06:38.443   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse
05-11 21:06:38.443   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse: Read message
05-11 21:06:38.443   786   786 I qorvo.uwb.UwbIface: Load calibration on wpan0, hw index: 0
05-11 21:06:38.445   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse
05-11 21:06:38.445   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse: Read message
05-11 21:06:38.445   786   786 I qorvo.uwb.UwbIface: Load properties on wpan0, hw index: 0
05-11 21:06:38.446   786   786 I qorvo.Uwb: getIface
05-11 21:06:38.449   786   786 I qorvo.uwb.UwbIface: firaController
05-11 21:06:38.449   786   786 I qorvo.Uwb: listHardwareIndex
05-11 21:06:38.449   786   786 I qorvo.uwb.McpsUtils: ListHardware
05-11 21:06:38.449   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse
05-11 21:06:38.450   786   786 I qorvo.uwb.NlSocket: SendAndAwaitResponse: Read message
05-11 21:06:38.450   786   786 I qorvo.Uwb: getIface
05-11 21:06:38.450   786   786 I qorvo.uwb.UwbIface: cccController

Bug: 187766150
Signed-off-by: Thierry Strudel <tstrudel@google.com>
Change-Id: Ie667a666a445e907aa99542f1c52046522b5dd02
 2021-05-12 04:07:58 +00:00
Taeju Park
1d0e8106f3 Grant vendor_sched sysfs nodes access 
Bug: 182509410
Signed-off-by: Taeju Park <taeju@google.com>
Change-Id: I68bf0c6e4f7b53a871a3393cb317bf6c79ace5e3
 2021-05-11 21:03:30 -07:00
Wei Wang
53ae55618a Merge "Revert "Grant vendor_sched sysfs nodes access"" into sc-dev 2021-05-12 03:56:58 +00:00
Wei Wang
73b65a0f8b Revert "Grant vendor_sched sysfs nodes access" 
This reverts commit 638778c654.

Reason for revert: b/187884708
Bug: 187884708
Change-Id: I60e80246345ca3e827d7b4749f25e2d5c4dddf9d
 2021-05-12 03:56:42 +00:00
TreeHugger Robot
8966b0738f Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev am: 004c299011 am: 223f9da106 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14485438

Change-Id: Id7fa2e92ca7ec7ef0cf92bca58d54bcd3bd3428f
 2021-05-12 02:43:53 +00:00
TreeHugger Robot
223f9da106 Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev am: 004c299011 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14485438

Change-Id: Ib9d1708d8e53619827b81850d6e5e97729754825
 2021-05-12 02:16:15 +00:00
Kris Chen
00e1b9a704 Add sepolicy for the UDFPS antispoof property 
Fixes the following avc denial:
/system/bin/init: type=1107 audit(0.0:4): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=fingerprint.disable.fake pid=364 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:default_prop:s0 tclass=property_service permissive=0'
android.hardwar: type=1400 audit(0.0:7): avc: denied { read } for name="u:object_r:vendor_fingerprint_fake_prop:s0" dev="tmpfs" ino=307 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:vendor_fingerprint_fake_prop:s0 tclass=file permissive=0

Bug: 187394838
Bug: 187562932
Test: Antispoof is disabled by default.
Test: Use the following adb command to manully turn on antispoof.
      "setprop persist.vendor.fingerprint.disable.fake.override 0"
Change-Id: I90d6ea70d5e0e1a125efb902f1fd61ff4b51baa2
 2021-05-12 09:48:48 +08:00
TreeHugger Robot
004c299011 Merge "Sniffer Logger: Add dontaudit getattr for sysfs_wifi" into sc-dev 2021-05-12 01:32:03 +00:00
Hridya Valsaraju
70551d2bc9 Let debugfs be accessed only for non-user builds 
Since production devices(with user builds) must not mount debugfs,
provide dumpstate HAL permission to access debugfs only in userdebug/eng
builds.

Also, delete dumpstate domain's access to
vendor_dmabuf_debugfs(/d/dma_buf/bufinfo) since dumpstate now obtains
the same information from /sys/kernel/dmabuf.

Test: build
Bug: 186500818
Change-Id: I17007d495fba6332bbf17dc7d030e5c6e4d5248b
 2021-05-11 17:35:20 -07:00
Hridya Valsaraju
9e6528da08 Label debugfs files correctly 
A few debugfs files are labelled as belonging to both debugfs_type and
sysfs_type. Hence, any client that is provided access to sysfs_type will
automatically be provided access to these files. This patch corrects the
labelling for these files to prevent this.

Test: build
Bug: 186500818
Change-Id: I364a73a960824cc9051610032179fd5caeca09de
 2021-05-11 17:35:17 -07:00
Qinchen Gu
ab6df9cc18 Add SELinux policy for allowing dumping GSC info 
Bug: 185939493
Test: adb bugreport. Look for GSC-related info.

Change-Id: I30dbb51781526d763205594283ca3b808f45d28f
 2021-05-11 17:27:14 -07:00