Commit graph

1416 commits

Author SHA1 Message Date
Adam Shih
ea632b0eb1 move sensors dump to gs-common
Bug: 250475720
Test: adb bugreport
Change-Id: I1cadc20635358c72c9571a2abaa7055efcc50adc
2022-11-10 15:02:08 +08:00
Adam Shih
18b9f37425 Merge "move edgetpu to gs-common" 2022-11-10 03:19:29 +00:00
Rick Chen
1fefc4e6de Allow CHRE to use EPOLLWAKEUP [DO NOT MERGE] am: bd36256bad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20407807

Change-Id: I8ced56e90a34167048d5e56153081c9ca2583aa9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-09 16:09:12 +00:00
Rick Chen
d140706db9 Allow CHRE to use EPOLLWAKEUP
avc: denied { block_suspend } for comm="UsfTransport" capability=36 scontext=u:r:chre:s0 tcontext=u:r:chre:s0 tclass=capability2 permissive=0

Bug: 238666865
Test: Check no chre avc denied.
Change-Id: Ifd2c37c58c548aec46a2c46891a1fc4d1f83f9be
Signed-off-by: Rick Chen <rickctchen@google.com>
2022-11-09 18:14:03 +08:00
Siarhei Vishniakou
c765567524 Allow InputProcessor HAL to read display resolution
Currently, there's no API to read the resolution from the system domain,
so the HAL has to read this from the sysprop provided by the display
code.

Allow the HAL to do so in this CL.

Bug: 244492960
Test: adb shell dmesg | grep input_processor
Change-Id: Ibdc3589234bbee8641e3c1f7a300b622803ca1a9
2022-11-09 03:45:55 +00:00
Rick Chen
bd36256bad Allow CHRE to use EPOLLWAKEUP [DO NOT MERGE]
avc: denied { block_suspend } for comm="UsfTransport" capability=36 scontext=u:r:chre:s0 tcontext=u:r:chre:s0 tclass=capability2 permissive=0

Bug: 238666865
Test: Check no chre avc denied.
Change-Id: Ifd2c37c58c548aec46a2c46891a1fc4d1f83f9be
Signed-off-by: Rick Chen <rickctchen@google.com>
2022-11-08 15:00:27 +00:00
joenchen
90aeb6e15c RRS: Apply the default config from persist prop
vendor_config plays as another role to control the display config during
the boot time. To change the default configuration of the user selected
mode, we use persist config to store the value.

Bug: 244492960
Test: Boot w/ and w/o user selected configs and check the resolution
Change-Id: Ic3eb4e1c8a2c5eed83d10799a1965dd7a6be58e1
2022-11-08 14:09:00 +00:00
Adam Shih
84b32a700f move edgetpu to gs-common
Bug: 258114806
Test: build pass
Change-Id: Ie576f6511dc60db59bc44567ff0a929506224203
2022-11-08 13:15:28 +08:00
Adam Shih
b00f9adf61 remove raven touch dump
Bug: 256521567
Test: adb bugreport
Change-Id: Idfa891c545994f457004b99be1ddda14f971142f
2022-11-08 10:05:37 +08:00
Jenny Ho
898da02fa5 Add permission for logbuffer_bd am: 632c5dba75 am: 393e0efb9b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20307975

Change-Id: I96e4d3891e64f670effd8ae227659b86f3867508
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-03 01:31:36 +00:00
Jenny Ho
393e0efb9b Add permission for logbuffer_bd am: 632c5dba75
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20307975

Change-Id: I148592298e9f5a15406bd95418b228385e412ae7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-03 00:59:41 +00:00
Gabriel Biren
4f3094adbb Merge "Update gs101 sepolicy to allow the wifi_ext AIDL service." am: 1010b1cceb am: 41505f9991 am: 21cd48363a
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2262723

Change-Id: I7a74552266c7e6ece0bc1554c9a578e09d6e9450
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-31 22:13:33 +00:00
Gabriel Biren
21cd48363a Merge "Update gs101 sepolicy to allow the wifi_ext AIDL service." am: 1010b1cceb am: 41505f9991
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2262723

Change-Id: I6e5f2649b6b2679d6e9883c61009f3907414cee6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-31 21:39:48 +00:00
Gabriel Biren
41505f9991 Merge "Update gs101 sepolicy to allow the wifi_ext AIDL service." am: 1010b1cceb
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2262723

Change-Id: Ie2801e8af27484ca08826b4ab93b0f462f45d2d2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-31 21:10:53 +00:00
Jenny Ho
632c5dba75 Add permission for logbuffer_bd
Bug: 242679204
Change-Id: I134bf8611441274e8438fa06b5ca6c186efb331a
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2022-10-28 22:22:24 +08:00
Adam Shih
630a5af43b Merge "move brcm gps solution to gs-common" 2022-10-28 05:33:40 +00:00
Adam Shih
07a5f33a8d move brcm gps solution to gs-common
Bug: 254758553
Test: google map can locate on pixel
Change-Id: Iaf954f3af043dc5080b0be473ed8b78b1c6d0e22
2022-10-27 09:37:46 +08:00
Lucas Wei
121d50927c Merge "sepolicy: fix odpm avc denials" into tm-qpr-dev am: 4a487ac890
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20067818

Change-Id: Ifc7951728bc578a8c472a217a74e72c82ed846cd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-24 09:53:50 +00:00
Lucas Wei
4a487ac890 Merge "sepolicy: fix odpm avc denials" into tm-qpr-dev 2022-10-24 09:07:24 +00:00
Sam Ou
0127869bfd sepolicy: fix odpm avc denials
add wakeup permissions for odpm driver
since we update acc_data based on alarmtimer

Bug: 250813284
Change-Id: Id7f70d02475a03e53a206dde3b8efa584cacef85
Merged-In: Id7f70d02475a03e53a206dde3b8efa584cacef85
Signed-off-by: Sam Ou <samou@google.com>
Signed-off-by: Lucas Wei <lucaswei@google.com>
2022-10-24 05:03:01 +00:00
Sam Ou
768196f828 sepolicy: fix odpm avc denials
add wakeup permissions for odpm driver
since we update acc_data based on alarmtimer

Bug: 250813284
Change-Id: Id7f70d02475a03e53a206dde3b8efa584cacef85
Signed-off-by: Sam Ou <samou@google.com>
2022-10-24 10:45:55 +08:00
Gabriel Biren
24160a4bcb Update gs101 sepolicy to allow the wifi_ext AIDL service.
Bug: 205044134
Test: Start wifi on an Oriole device using both the
      HIDL and AIDL versions of wifi_ext.
Change-Id: I45cbc86e4d4feb2aa99641175108dd9745c1715e
2022-10-20 16:54:19 +00:00
Adam Shih
72aa5a98fc move aoc settings to gs-common
Bug: 248426917
Test: boot with aoc launched
Change-Id: I891767f10dfac7528b76e27fd2756b77ed46e45c
2022-10-20 11:41:19 +08:00
Chungjui Fan
26158c7a57 sepolicy: gs101: allow fastbootd to access gsc device node am: 8d802db37a am: 8753d9d07c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20210023

Change-Id: Ieb81c7c41cac31967c49da87cd7ab33b814e7ecd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-19 13:18:21 +00:00
Chungjui Fan
8753d9d07c sepolicy: gs101: allow fastbootd to access gsc device node am: 8d802db37a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20210023

Change-Id: Ic59f5c3967ba09506234161c7a0058b40642851e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-19 12:31:55 +00:00
Chungjui Fan
8d802db37a sepolicy: gs101: allow fastbootd to access gsc device node
avc:  denied  { getattr } for  pid=469 comm="fastbootd"
path="/dev/gsc0" dev="tmpfs" ino=470 scontext=u:r:fastbootd:s0
tcontext=u:object_r:citadel_device:s0
tclass=chr_file permissive=0

Bug: 248301125

Change-Id: Ic1aec8874636437b9b8d795b46fae72fa8533302
Signed-off-by: Chungjui Fan <chungjuifan@google.com>
2022-10-17 12:26:10 +00:00
TreeHugger Robot
688b2b08f3 Merge "sepolicy: ignore and fix avc denial" 2022-10-17 04:51:55 +00:00
Chungkai Mei
4dc474a7b3 sepolicy: ignore and fix avc denial
ignore and fix avc denial

Bug: 228181404
Test: boot without avc denial
Signed-off-by: Chungkai Mei <chungkai@google.com>
Change-Id: I83640aae46bd1823c4e4dcf15f00e64fa7a87aef
2022-10-17 02:15:45 +00:00
Timmy Li
fe1c8108c5 Merge "Add aoc_device access to P21 devices. Camera hal" 2022-10-14 17:22:48 +00:00
Krzysztof Kosiński
20e9a691cf Use generic wildcard for vendor libprotobuf. am: 2118dfb684 am: f9f745da33 am: a110b52215
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2255496

Change-Id: I5e1311cd4ca7ed0cc1f436a9ccb3a5b6c7d9da0a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-14 16:54:29 +00:00
Krzysztof Kosiński
f9f745da33 Use generic wildcard for vendor libprotobuf. am: 2118dfb684
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2255496

Change-Id: I3788ebba42c38f754c183eb518e2d3a9ad31bba7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-14 15:51:58 +00:00
Krzysztof Kosiński
2118dfb684 Use generic wildcard for vendor libprotobuf.
The suffix changes on each upgrade and the newest release uses
a two-part version number instead of a three-part one. Use a regex
that will match any suffix.

Bug: 203713560
Test: presubmit, log check
Change-Id: I27d7bd10e469b794226fe0c77b02c57d876729b1
2022-10-14 14:06:56 +00:00
timmyli
ecd597b98a Add aoc_device access to P21 devices. Camera hal
Since we plan to apply rls refactor to P21 devices
as well. Add access to camera_hal to aoc_device for
these devices.

Bug: 253493159
Test: Compiles
Change-Id: I43728c723e0cfc7cdde5377260af6075d4672e7b
2022-10-14 01:55:04 +00:00
Adam Shih
2933a7f105 upgrade dumpstate from hidl to aidl
Bug: 240530709
Test: adb bugreport
Change-Id: If5f81174f7881100bff21462ff4aef9ff62357d4
2022-10-12 15:25:17 +08:00
Adam Shih
f15d1599ef remove redundant permission that has moved to gs-common
Bug: 248426917
Test: adb bugreport
Change-Id: I2b1f26164e9590dadd6eae4c14cb65a1c34197fa
2022-10-12 11:31:57 +08:00
TreeHugger Robot
a65d9c6e58 Merge "move trusty dump from gs101 to gs-common" 2022-10-11 01:41:33 +00:00
Adam Shih
cba306cc3b move modem dump to gs-common
Bug: 250475732
Test: adb bugreport
Change-Id: I07bc213a6136d5803316062c3fddd55fc557c4b2
2022-10-05 10:45:33 +08:00
Adam Shih
7c74638f0c Merge "move soc dump to gs-common" 2022-10-05 02:14:15 +00:00
Vaibhav Devmurari
a254fcef0c Merge "Add SePolicy for system_server accessing sysfs for USB devices" 2022-10-04 09:22:34 +00:00
Adam Shih
0508a69dbd move soc dump to gs-common
Bug: 248428203
Test: adb bugreport
Change-Id: I09c8279685626125ab1c5a6b73d1143de7ae2f1d
2022-10-04 12:56:28 +08:00
Adam Shih
6d2d8a9914 move trusty dump from gs101 to gs-common
Bug: 244504232
Test: adb bugreport
Change-Id: I7a93c9ef7d07e92f0fd508c016a264c26a4e0b1e
2022-10-04 09:06:15 +08:00
Vaibhav Devmurari
ac878d3f62 Add SePolicy for system_server accessing sysfs for USB devices
Add SePolicy to allow Android input manager accessing sysfs nodes
for external USB devices

To support input device lights manager feature in frameworks, provide
sysfs node access to system server process.
DD: go/pk_backlight_control (For keyboard backlight control for external
keyboards)

Kernel provides a standardized LED interface to expose LED controls
over sysfs: https://docs.kernel.org/leds/leds-class.html
The feature will be provided for devices with kernel sysfs class led
support and vendor kernel driver for input controllers that do have
lights. The kernel sysfs class led support is a kernel config option
(LEDS_CLASS), and an input device driver will create the sysfs class
node interface.
By giving system_server the access to these sysfs nodes, the feature
will work on devices with the kernel option and kernel input/hid driver
support. We do use CTS tests to enforce the kernel options and the
input device drivers.

What's already supported?
- We already support access to UHID sysfs node which used for all
bluetooth based external peripherals

What's included in this CL?
- Adding support to access sysfs nodes for USB based external devices

Test: manual
Bug: 245506418
Change-Id: Ieb55614ed651b85f0e6752a17d02f4d370fd1e6f
2022-10-03 14:52:52 +00:00
Adam Shih
d0af280f50 move ramdump relate dumpstate to gs-common
Bug: 248428203
Test: adb bugreport
Change-Id: I16898410318dd8f396c68cd9096a4eb49358b784
2022-09-30 15:10:45 +08:00
Adam Shih
a190e33522 move UFS dump to gs-common
Bug: 248143736
Test: adb bugreport
Change-Id: I3446ab420a0e8a0104dcc63c1cfd4c1a04060cdd
2022-09-28 13:20:33 +08:00
Adam Shih
3cd9384799 dump f2fs in gs-common
Bug: 248143736
Test: adb bugreport
Change-Id: I902030f7960b2247e9b8e913e78d447741423efb
2022-09-27 17:03:38 +08:00
Jinting Lin
03f471518a Merge "Allows modem_svc to read the logging related properties" into tm-qpr-dev am: d255ed1576 am: 230b907ae1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19967636

Change-Id: I2e6a0cf2f7558c40e68030649d1c663db5bcd3db
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-22 16:12:50 +00:00
Jinting Lin
230b907ae1 Merge "Allows modem_svc to read the logging related properties" into tm-qpr-dev am: d255ed1576
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/19967636

Change-Id: Ic7a7ec1e03af32e88989f32452c2c255e1419a36
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-22 15:35:53 +00:00
Jinting Lin
d255ed1576 Merge "Allows modem_svc to read the logging related properties" into tm-qpr-dev 2022-09-22 14:30:32 +00:00
Eden Su
c3c4aa626b Merge changes from topic "gs101_network_access" into tm-qpr-dev
* changes:
  Sepolicy: add permission to allow create, connect udp socket
  sepolicy: gs101: allowed permissions required for network access
2022-09-20 00:34:18 +00:00
jintinglin
9a4545eafa Allows modem_svc to read the logging related properties
avc: denied { read } for comm="modem_svc_sit" name="u:object_r:vendor_logger_prop:s0" dev="tmpfs" ino=347 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_logger_prop:s0 tclass=file permissive=0

Bug: 243039758
Change-Id: I80a6971a2c3e09320e780d1eff24e040cd8b3541
2022-09-19 05:31:09 +00:00