Jiyong Park
5cc5d52bd7
Remove ndk_platform backend. Use the ndk backend.
...
The ndk_platform backend will soon be deprecated because the ndk backend
can serve the same purpose. This is to eliminate the confusion about
having two variants (ndk and ndk_platform) for the same ndk backend.
Bug: 161456198
Test: m
Change-Id: Icc9af3798ac89742fa56b1cb37d8116d99b4a9c2
2021-08-06 19:58:01 +09:00
Siqi Lin
57d81aa6c1
sepolicy: gs101: allow dumpstate to access AoC stats
...
Add AP wakeups from AoC DRAM exceptions to bugreports.
Bug: 186456919
Change-Id: I31df82addf1b5024b8e33c6284e5da1f473ac5d9
2021-08-05 10:47:13 -07:00
Alice Yang
0d7ab6ea8b
Add sepolicy to allow camera HAL to read display backlight
...
Add sepolicy to allow camera HAL to read display backlight to use in
gabc algorithm.
Bug: 187917645
Test: build pass, go/p21-camera-test-checklist
Change-Id: I628ee2dedd48dd1360d0818137ba9139ae194029
2021-08-03 16:31:12 +00:00
Charles Chiu
58d42bdc11
Merge "Allow init to set Camera properties." into sc-dev am: 50ebe02d44
am: 07bc84365c
am: 3f17f724b1
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15427051
Change-Id: Id084c8c03d8e964e16063a2b5cbef69b3b205e14
2021-08-03 06:33:46 +00:00
Charles Chiu
07bc84365c
Merge "Allow init to set Camera properties." into sc-dev am: 50ebe02d44
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15427051
Change-Id: I28b126af98f58399256b3c2dd38b4762d642f781
2021-08-03 06:10:21 +00:00
Charles Chiu
718a856e26
Allow init to set Camera properties.
...
Test: Camera CTS
Bug: 194656156
Change-Id: I2f8f89a02984bfb9fea96df7b0a1d4150c9fdd8d
2021-08-02 23:21:14 +08:00
Mark Chang
f7fa1fa877
Merge "[DO NOT MERGE] sepolicy: Add "dontaudit" for twoshay dac_override." into sc-dev
2021-07-31 00:01:26 +00:00
TreeHugger Robot
7c10788c29
Merge "Add vendor SELinux denial to allowlist" into sc-dev am: 4720a91c52
am: c2ebcd6fb7
am: 724603de4e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15422669
Change-Id: Id4e79c476f19a1ff3bcf143b1df66268b221605b
2021-07-30 13:49:46 +00:00
TreeHugger Robot
724603de4e
Merge "Add vendor SELinux denial to allowlist" into sc-dev am: 4720a91c52
am: c2ebcd6fb7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15422669
Change-Id: Ibeef9a999e6742a5ee3c0ff2f1280f0b6139a102
2021-07-30 13:35:14 +00:00
TreeHugger Robot
23b7621849
Merge "Add vendor SELinux denial to allowlist" into sc-dev am: 4720a91c52
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15422669
Change-Id: Id95206a386275893599d7be18c15e48274f4a140
2021-07-30 13:25:13 +00:00
Mark Chang
a1aab562ca
[DO NOT MERGE] sepolicy: Add "dontaudit" for twoshay dac_override.
...
Bug: 193224954
Test: build pass and boot to home
Signed-off-by: Mark Chang <changmark@google.com>
Change-Id: I5c330564cc026e113c5d33d5d093dbcdb3ede5e4
2021-07-30 01:49:59 +00:00
Jaineel Mehta
0474bcf10e
Add vendor SELinux denial to allowlist
...
Change-Id: If7435e9c62811ef3c9757f22f06018c32a8d3597
Test: None
Bug: 194281028
2021-07-29 21:23:34 +00:00
TreeHugger Robot
275b077a0f
Merge "gs101: Allow camera hal to create file in persist camera folder" into sc-dev am: 750888bc5b
am: 8ab71529ce
am: 163e32e837
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15354010
Change-Id: I0a97cbf5d5bc5a0b5ce7a9345128c9c2d7f60de3
2021-07-29 09:43:22 +00:00
TreeHugger Robot
8ab71529ce
Merge "gs101: Allow camera hal to create file in persist camera folder" into sc-dev am: 750888bc5b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15354010
Change-Id: Ia321b3fa069583efadda94caab9b72a484f5631b
2021-07-29 09:14:51 +00:00
TreeHugger Robot
750888bc5b
Merge "gs101: Allow camera hal to create file in persist camera folder" into sc-dev
2021-07-29 08:40:36 +00:00
Michael Eastwood
4dda9eab2c
Merge "Allow hal_dumpstate_default to access vendor_camera_debug_prop" into sc-dev am: 9bfbb3c0d4
am: 8cda72b001
am: 9afedc311d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15406130
Change-Id: Id038cd7b8e907f7c07cc18d872ede3d14da98485
2021-07-28 22:19:57 +00:00
Michael Eastwood
8cda72b001
Merge "Allow hal_dumpstate_default to access vendor_camera_debug_prop" into sc-dev am: 9bfbb3c0d4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15406130
Change-Id: Ida4fbd33da5d2ded18be388f989e27936b3bd955
2021-07-28 21:55:14 +00:00
Michael Eastwood
9bfbb3c0d4
Merge "Allow hal_dumpstate_default to access vendor_camera_debug_prop" into sc-dev
2021-07-28 21:36:38 +00:00
Michael Eastwood
30bd5e8ed6
Allow hal_dumpstate_default to access vendor_camera_debug_prop
...
Bug: 193365129
Test: atest com.google.android.selinux.pts.SELinuxTest#scanBugreport
Change-Id: I43e389d46e8116844bb9ca4259e5ea28e86c50f4
2021-07-27 17:22:47 -07:00
TreeHugger Robot
a96235b57b
Merge "Add AoC wakeup stats to dump state" into sc-dev am: fead41d573
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15393321
Change-Id: Ia4cb5725b748fcccd901a28ca2e3dbb354c3e44e
2021-07-27 19:44:07 +00:00
TreeHugger Robot
fead41d573
Merge "Add AoC wakeup stats to dump state" into sc-dev
2021-07-27 19:23:06 +00:00
Jack Wu
7a9774e4a9
sepolicy: gs101: allows pixelstat to access pca file nodes am: d6c1a50bba
am: 2c79c75768
am: c5964bf33a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15360184
Change-Id: Ic3e0e44452cd042a6015fff5ba9f5f4071de6de9
2021-07-27 03:01:35 +00:00
Jack Wu
2c79c75768
sepolicy: gs101: allows pixelstat to access pca file nodes am: d6c1a50bba
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15360184
Change-Id: Ic3efb76715139aa335995b95e7756f23b5de226c
2021-07-27 02:29:16 +00:00
Max Kogan
5374497df5
Add AoC wakeup stats to dump state
...
Need add support for wakeup stats to track AoC to AP messages
resulting in frequent wake-ups.
Bug: 192668026
Change-Id: I073406cc101e114135c863b0e0b86357e93c0415
2021-07-26 22:45:16 +00:00
Jack Wu
d6c1a50bba
sepolicy: gs101: allows pixelstat to access pca file nodes
...
07-23 14:24:45.512 1000 3001 3001 I pixelstats-vend: type=1400 audit(0.0:10): avc: denied { open } for path="/sys/devices/platform/10d50000.hsi2c/i2c-5/5-0057/chg_stats" dev="sysfs" ino=72245 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
07-23 14:24:45.512 1000 3001 3001 I pixelstats-vend: type=1400 audit(0.0:11): avc: denied { getattr } for path="/sys/devices/platform/10d50000.hsi2c/i2c-5/5-0057/chg_stats" dev="sysfs" ino=72245 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
07-23 14:24:57.536 1000 3001 3001 I pixelstats-vend: type=1400 audit(0.0:12): avc: denied { read } for name="chg_stats" dev="sysfs" ino=72245 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
07-23 14:24:57.536 1000 3001 3001 I pixelstats-vend: type=1400 audit(0.0:13): avc: denied { open } for path="/sys/devices/platform/10d50000.hsi2c/i2c-5/5-0057/chg_stats" dev="sysfs" ino=72245 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
07-23 14:24:57.536 1000 3001 3001 I pixelstats-vend: type=1400 audit(0.0:14): avc: denied { getattr } for path="/sys/devices/platform/10d50000.hsi2c/i2c-5/5-0057/chg_stats" dev="sysfs" ino=72245 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
07-23 14:24:57.536 1000 3001 3001 I pixelstats-vend: type=1400 audit(0.0:15): avc: denied { write } for name="chg_stats" dev="sysfs" ino=72245 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
Bug: 194386750
Test: manually test, no avc: denied
Signed-off-by: Jack Wu <wjack@google.com>
Change-Id: I1a16edb5bb7820f62b3ce598aa50eba2d9455927
2021-07-24 06:42:39 +00:00
TreeHugger Robot
fd0b83ae69
Merge "Add SE policies for memtrack HAL" into sc-dev am: b3225f0f6c
am: cd16e38ab2
am: 10d4b623ec
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283133
Change-Id: I02645c5c2c66f0e2141ec3969c559816cb6f7602
2021-07-23 22:00:46 +00:00
TreeHugger Robot
cd16e38ab2
Merge "Add SE policies for memtrack HAL" into sc-dev am: b3225f0f6c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283133
Change-Id: I552351e0eac65c20d795b1682852896943f948c8
2021-07-23 21:24:50 +00:00
TreeHugger Robot
b3225f0f6c
Merge "Add SE policies for memtrack HAL" into sc-dev
2021-07-23 20:52:52 +00:00
Ankit Goyal
0f9820830c
Add SE policies for memtrack HAL
...
Bug: 191966412
Test: adb shell dumpsys meminfo
Change-Id: Ia7ec64840d2bb7c3ae0d61304e109d2ceb9e5f78
2021-07-24 02:18:36 +08:00
Badhri Jagan Sridharan
0dc4da3547
Merge "Update Usb hal permissions to allow pushing overheat suez events" into sc-dev am: 49804d8d6f
am: 31b15ff2bb
am: f83fca5b70
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283349
Change-Id: I0c93e6058984873ea8d7ce101e6d65e48f1c9fba
2021-07-22 21:27:08 +00:00
Badhri Jagan Sridharan
31b15ff2bb
Merge "Update Usb hal permissions to allow pushing overheat suez events" into sc-dev am: 49804d8d6f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15283349
Change-Id: I6fc802f74aaf7e1f7a7b8574ed5ace1886b9623c
2021-07-22 20:52:11 +00:00
Badhri Jagan Sridharan
49804d8d6f
Merge "Update Usb hal permissions to allow pushing overheat suez events" into sc-dev
2021-07-22 20:31:13 +00:00
George Lee
608435c1bd
Merge "pixelstats: add bcl directory permission" into sc-dev am: 79a15eed2a
am: ef556f7fee
am: 674a509d5d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145257
Change-Id: I7d8ee55ea2669772f59525e4a68e4249b54a1ed2
2021-07-22 17:58:01 +00:00
George Lee
ef556f7fee
Merge "pixelstats: add bcl directory permission" into sc-dev am: 79a15eed2a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15145257
Change-Id: I4d0c92d3074ef8e3112b6dade853b6b53dbb3cfe
2021-07-22 17:26:15 +00:00
George Lee
79a15eed2a
Merge "pixelstats: add bcl directory permission" into sc-dev
2021-07-22 17:03:33 +00:00
Gary Jian
ea49c9e584
Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev am: 9b5a97d65e
am: 11d8a4eb7e
am: de4bd33a04
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15327671
Change-Id: I74af3911fc3ba07bb7b65ee35aefb54fc94264d0
2021-07-22 09:04:38 +00:00
Gary Jian
11d8a4eb7e
Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev am: 9b5a97d65e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15327671
Change-Id: I8e2e152f7ca71a0e5aa462093ebc10604d408814
2021-07-22 08:27:53 +00:00
Gary Jian
9b5a97d65e
Merge "Allow to set vendor_rild_prop for oemrilservice_app" into sc-dev
2021-07-22 08:16:42 +00:00
chened
561ce13d59
gs101: Allow camera hal to create file in persist camera folder
...
Test: build pass, no cts regression
Bug: 189844464
Change-Id: If150a94f184424f21c509a44001192e36b6ee24a
2021-07-22 07:11:05 +00:00
Petri Gynther
e96d91bed6
Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0
am: adee4062ad
am: 61f76249ec
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573
Change-Id: I5d7ca462d2be586e5058444ae79c384cd452b3a0
2021-07-22 00:55:51 +00:00
Petri Gynther
adee4062ad
Add vbmeta_vendor_[ab] to file_contexts am: d12714ccc0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15276573
Change-Id: Ie5f417c81373d599403646c90ddeda78b84c0b7a
2021-07-21 23:50:44 +00:00
Badhri Jagan Sridharan
1ebd84703b
Update Usb hal permissions to allow pushing overheat suez events
...
Usb hal now pushes the Usb port overheat event through statsd.
Usb hal also accesses usbc-throttling stats to gather info.
Bug: 193615568
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
Change-Id: I4918458bc7a8a25d7655b66d1fe40eafc7ccb070
2021-07-21 14:38:55 -07:00
Sungwoo choi
b47cdf282a
Allow to set vendor_rild_prop for oemrilservice_app
...
Bug: 193367138
Test: make sure no denied logs in oemrilservice_app when access the
radio property
Signed-off-by: Sungwoo choi <sungwoo48.choi@samsung.com>
Change-Id: I9014002476df7b4e650f7a5a2f153e4eca47d23d
2021-07-21 08:01:44 +00:00
Petri Gynther
d12714ccc0
Add vbmeta_vendor_[ab] to file_contexts
...
Bug: 181909612
Test: build + install + boot to home
Change-Id: Ibb7bd8e5a61d86de1b51a3780a5bfa8cf4caf59b
2021-07-20 23:41:31 -07:00
TreeHugger Robot
14fdf8b899
Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b
am: 0c411447d7
am: 090c2fb351
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265
Change-Id: Ia3cf294164bea8d150a763baa2ecd831f65acf26
2021-07-20 13:41:09 +00:00
Alex Hong
4daa5b0914
Allow suspend_control to access the AOC wakeup node am: f0589d11df
am: 5cc647e87d
am: 10892fb570
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275
Change-Id: I60bc7ac257b46bd9d30e9176afb401b415d1e6c8
2021-07-20 13:41:04 +00:00
TreeHugger Robot
0c411447d7
Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev am: b3cc71258b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15302265
Change-Id: Ie50b322dca7fc0292a200a721870c6679456c5b5
2021-07-20 13:13:02 +00:00
Alex Hong
5cc647e87d
Allow suspend_control to access the AOC wakeup node am: f0589d11df
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15334275
Change-Id: Ibfbe41ba694a27408dbd3ff6bdb5632d55a9a05e
2021-07-20 13:12:56 +00:00
TreeHugger Robot
b3cc71258b
Merge "ims: allow finding mediametrics_service for vendor_ims_app" into sc-dev
2021-07-20 13:00:25 +00:00
Sungjun Park
0612b5aa85
ims: allow finding mediametrics_service for vendor_ims_app
...
For generate dtmf tone, ImsService find mediametrics_service.
So, added the seplicy rule for finding mediametrics_service.
<Related log>
07-14 15:37:21.391 411 411 E SELinux : avc: denied { find } for
pid=2263 uid=10217 name=media.metrics scontext=u:r:vendor_ims_app:s0:
c217,c256,c512,c768 tcontext=u:object_r:mediametrics_service:s0 tclass
=service_manager permissive=0
Bug: 192543653
Signed-off-by: Sungjun Park <sj19385.park@samsung.com>
Change-Id: Ia0f6610ecc454533d9584367694228245afe46e4
2021-07-20 09:35:23 +00:00