Commit graph

1256 commits

Author SHA1 Message Date
TreeHugger Robot
21bc76645d Merge "Hardwareinfo: battery info porting" into sc-dev am: a63fbd68d4 am: 8d6a3d96a2 am: f82eb61a93
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608134

Change-Id: I6465a0df92f93a1ee0533ff95eac5fc87fd45302
2021-06-28 16:56:31 +00:00
TreeHugger Robot
f82eb61a93 Merge "Hardwareinfo: battery info porting" into sc-dev am: a63fbd68d4 am: 8d6a3d96a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608134

Change-Id: Ic169a8455fef3e8d9b9b9bf21e08e9f8660ceb07
2021-06-28 16:47:13 +00:00
TreeHugger Robot
4a6403f455 Merge "Hardwareinfo: battery info porting" into sc-dev am: a63fbd68d4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14608134

Change-Id: I90ebe00451a871473545576b52fdcbbfff008793
2021-06-28 16:34:14 +00:00
TreeHugger Robot
a63fbd68d4 Merge "Hardwareinfo: battery info porting" into sc-dev 2021-06-28 16:20:12 +00:00
Gazi Yamin Iqbal
4ea317bb6a gs101-sepolicy: allow rlsservice to read display status files
major changes:
        1. This change is to allow rlsservice to read the status of
        display status file. Similar method was employed in previous
        pixels.
Bug: 191122203
Test: p21 camera test checklist

Change-Id: I09483881294fd6dde46d4d0b7283311a2d20c404
2021-06-28 22:15:08 +08:00
TreeHugger Robot
8a3ed5c061 Merge "gs101-sepolicy: add oemrilservice_app.te" into sc-dev am: 407d0cf58d am: 3863954bf4 am: 8d82d42f94
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072301

Change-Id: I09eccef75ecab74c01b78c3b43cea8f0daa562ca
2021-06-27 02:24:06 +00:00
TreeHugger Robot
3863954bf4 Merge "gs101-sepolicy: add oemrilservice_app.te" into sc-dev am: 407d0cf58d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072301

Change-Id: Icf8b698caf10af881a2a90a745f3e77d80666e94
2021-06-27 01:57:50 +00:00
TreeHugger Robot
407d0cf58d Merge "gs101-sepolicy: add oemrilservice_app.te" into sc-dev 2021-06-27 01:47:21 +00:00
Jeffrey Carlyle
9ac870aa22 allow recovery and fastboot to access secure elment
This is to enable clearing of secure element during a master reset.

Bug: 182508814
Test: master reset on device with keys; verified no keys after reset
Signed-off-by: Jeffrey Carlyle <jcarlyle@google.com>
Change-Id: I15c7fbd7f2c4fb34dcad0ae4f5cee3238f526fa5
2021-06-25 17:54:29 -07:00
Ilya Matyukhin
00b7e7d8b9 Merge "raviole: transition SystemUI to use HWC for LHBM" into sc-dev am: f9828a9944 am: 09792c098f am: 4c3bbb63d0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15085906

Change-Id: I9989b8fcec6b6c3d064e630a68121975a917ee56
2021-06-25 02:21:56 +00:00
Adam Shih
d8f6d7acef Merge "modularize dmd" into sc-dev am: 99bfde4f38 am: c418ff2db2 am: 8463b00d4b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072291

Change-Id: I481a22c4d9712fbb2b6446f216732e225355de7f
2021-06-25 02:21:44 +00:00
Ilya Matyukhin
09792c098f Merge "raviole: transition SystemUI to use HWC for LHBM" into sc-dev am: f9828a9944
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15085906

Change-Id: If83496c47ac3e6450756a5dfc2342884a17e378d
2021-06-25 01:27:58 +00:00
Adam Shih
c418ff2db2 Merge "modularize dmd" into sc-dev am: 99bfde4f38
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072291

Change-Id: Idcd79ae7e96c304194279145cff7af20877cc30a
2021-06-25 01:27:41 +00:00
Ilya Matyukhin
f9828a9944 Merge "raviole: transition SystemUI to use HWC for LHBM" into sc-dev 2021-06-25 01:12:52 +00:00
Adam Shih
99bfde4f38 Merge "modularize dmd" into sc-dev 2021-06-25 01:12:50 +00:00
TreeHugger Robot
3d20aa5c46 Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev am: 655f5cfd8f am: 1edfd8cfe6 am: 738837c130
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072290

Change-Id: I4cdf3d1543586a4488228461b6195c2e6796c26e
2021-06-24 10:57:24 +00:00
TreeHugger Robot
1edfd8cfe6 Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev am: 655f5cfd8f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072290

Change-Id: Icea3ba9901b7a05239a34a64852e0196c31003b8
2021-06-24 10:20:51 +00:00
TreeHugger Robot
655f5cfd8f Merge "vendor_init/dumpstate: Grant to access logger prop" into sc-dev 2021-06-24 10:02:11 +00:00
Adam Shih
39c6f1987c Merge "modularize pktrouter" into sc-dev am: 9b0b96b907 am: 1f58e76864 am: 85bdce6ef7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048206

Change-Id: I20ec2da8e14c933dd69ca1d0dafe592b34b3c3d4
2021-06-24 08:12:05 +00:00
Adam Shih
1f58e76864 Merge "modularize pktrouter" into sc-dev am: 9b0b96b907
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048206

Change-Id: Ibd259d8b20c59e5e950125fbbae3bb14853d4348
2021-06-24 07:41:01 +00:00
Adam Shih
9b0b96b907 Merge "modularize pktrouter" into sc-dev 2021-06-24 07:24:45 +00:00
Ilya Matyukhin
2460cdcc9f raviole: transition SystemUI to use HWC for LHBM
This change removes direct access to the LHBM sysfs node from SystemUI,
but allows SystemUI to make binder calls to the hardware composer (HWC),
which can be used to enable or disable LHBM.

Bug: 191132545
Bug: 190563896
Bug: 184768835
Test: no avc denials
Change-Id: I5417377ff096e869ad772e4fd2fb23f8c1fd4f1e
2021-06-23 23:38:27 -07:00
Adam Shih
8b326703e1 modularize dmd
Bug: 190331463
Test: build ROM and make sure dmd is launched
Change-Id: If1e51b6bc100e870a15a40f5e0d93a75fe68bac3
2021-06-24 14:17:29 +08:00
Alex Hong
eae86c1df5 Merge "Move the type definition of properties from product to vendor" into sc-dev am: d912300853 am: 485004935f am: c9ffe52783
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15080406

Change-Id: If637118deb2722a6990eb6d07d1b97681a4b04f3
2021-06-24 02:53:13 +00:00
Minchan Kim
32f9ba3b8e Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev am: 650cf48406 am: d8c003c9e1 am: ef8058e2e2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15081303

Change-Id: Id45cda9645d83e6ad7c1bde4c3c3c36768389066
2021-06-24 02:53:05 +00:00
Alex Hong
485004935f Merge "Move the type definition of properties from product to vendor" into sc-dev am: d912300853
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15080406

Change-Id: I08cf166cc9658f3bf72884ec1a492a9e7afdcd09
2021-06-24 02:19:02 +00:00
Minchan Kim
d8c003c9e1 Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev am: 650cf48406
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15081303

Change-Id: I8dd50fa4c57b82b6e887d5bd4df8f9035bb68bd6
2021-06-24 02:18:49 +00:00
Alex Hong
d912300853 Merge "Move the type definition of properties from product to vendor" into sc-dev 2021-06-24 02:15:36 +00:00
Alex Hong
e44e432672 Move the type definition of properties from product to vendor
These properties cannot be resolved after product sepolicy is replaced.
  vendor_persist_config_default_prop
  vendor_rild_prop

Test: The device can boot to home after replacing with GSI
Bug: 191236468
Change-Id: Ib797601a44306987e5a85897c7b6cd7827ad91b2
2021-06-24 02:01:20 +00:00
Minchan Kim
650cf48406 Merge "sepolicy: gs101: allow dump cma statistics" into sc-dev 2021-06-24 01:45:11 +00:00
Thierry Strudel
55f1569d32 Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd am: b491ce3a18 am: 6a940b5459
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438

Change-Id: Ib53dbc81f22f73f0af0039e8ecce36fc76b45d9f
2021-06-24 01:31:59 +00:00
Thierry Strudel
6a940b5459 Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd am: b491ce3a18
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438

Change-Id: Id7f0e5a4b4ab5d083b021e8b91568acdd2d6eea7
2021-06-24 01:08:54 +00:00
Thierry Strudel
c45b4c7c51 Merge "Add support for non-su hal_uwb" into sc-dev am: e99c749cbd
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14928438

Change-Id: Ia0ff6c0dceb663346fd48b6970e5a6035437eff0
2021-06-24 00:56:12 +00:00
Thierry Strudel
e99c749cbd Merge "Add support for non-su hal_uwb" into sc-dev 2021-06-24 00:45:49 +00:00
Minchan Kim
7f9abeee45 sepolicy: gs101: allow dump cma statistics
Provide necessary sepolicy for bugreport dump to access cma metric
information under /sys/kernel/pixel_stat/*

Test: Run "adb bugreport <zip>" and verify it contains the output
      from dumpstate_board.txt
Bug: 191904985
Signed-off-by: Minchan Kim <minchan@google.com>
Change-Id: Iaa92006eeb5158a0962652427d1af061fe1cf03d
2021-06-23 14:15:46 -07:00
TreeHugger Robot
573bf012b9 Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf am: b596f9dbd5 am: 101bb0fa5f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299

Change-Id: I785680b9842e956f7b1f94144c103093f01743eb
2021-06-23 12:03:37 +00:00
TreeHugger Robot
b596f9dbd5 Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev am: c431abb5bf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15072299

Change-Id: Id800243025f0eb916789582f6c9925924e94e4ec
2021-06-23 11:33:09 +00:00
TreeHugger Robot
c431abb5bf Merge "Allow fingerprint hal to read sysfs_chosen" into sc-dev 2021-06-23 11:20:51 +00:00
Denny cy Lee
2c65b9eebb Pixelstat: battery history access premission am: 0b21a2d44a am: 7185538f79 am: 4ac1899651
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520

Change-Id: Ib960713a501ab7798b6b53322ef579a59fc3040e
2021-06-23 09:17:34 +00:00
Sungwoo choi
5aaa0f6044 gs101-sepolicy: add oemrilservice_app.te
Seperate oemrilservice_app.te from vendor_telephony_app.te.
  - target process: com.samsung.slsi.telephony.oemril
  - selabel: oemrilservice_app
  - allow to find app_api_service
  - allow to find radio_service
  - allow to find vendor HAL
  - a binder communication with rild

Bug: 191830874
Test: Manual

Signed-off-by: Sungwoo choi <sungwoo48.choi@samsung.com>
Change-Id: I5e31b4a16f0b4d25bf4889da0150084937354808
2021-06-23 16:51:57 +08:00
Denny cy Lee
7185538f79 Pixelstat: battery history access premission am: 0b21a2d44a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14688520

Change-Id: Ida0cfc72b0bfcfc0943f012edc093f8d1d936679
2021-06-23 08:33:25 +00:00
Kris Chen
a23d1bb37b Allow fingerprint hal to read sysfs_chosen
Fixes the following avc denial:
android.hardwar: type=1400 audit(0.0:49): avc: denied { search } for name="chosen" dev="sysfs" ino=9575 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=dir permissive=1
android.hardwar: type=1400 audit(0.0:50): avc: denied { read } for name="platform" dev="sysfs" ino=9591 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=file permissive=1
android.hardwar: type=1400 audit(0.0:51): avc: denied { open } for path="/sys/firmware/devicetree/base/chosen/plat/platform" dev="sysfs" ino=9591 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_chosen:s0 tclass=file permissive=1

Bug: 191832617
Test: Enroll and authenticate fingerprints.
Change-Id: I5c576cc210d9e85b1999655bdc27736183db8aed
2021-06-23 16:20:57 +08:00
Denny cy Lee
433aeb2d4d Sepolicy: Pixel stats wireless charger sepolicy
Bug: 171853251
Bug: 188601686
Test: manually, do wirelees charge, check logcat
Change-Id: I4cbd7da038365ae92e34780131056da61b9a55dc
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-23 06:48:42 +00:00
Denny cy Lee
0b21a2d44a Pixelstat: battery history access premission
Test: manually, relate seploicy not show; battery history log printed
      05-24 13:29:19.637  2829  2829 D pixelstats_BatteryEEPROM:
      checkAndReport: 0940 0a80 0500 0200 0200 0000
Bug: 189050725
Change-Id: I20567e168db43fe2168a9a30ac7a4b0cec65a665
Signed-off-by: Denny cy Lee <dennycylee@google.com>
2021-06-23 13:50:32 +08:00
Adam Shih
045cad750c modulize init.radio.sh am: d74e989739 am: 2812270759 am: 4d69f3c773
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203

Change-Id: Ie78548dc80eca0306ee767eaeaad1b46eba546a5
2021-06-23 05:38:15 +00:00
Adam Shih
a70819d2f0 modularize pktrouter
Bug: 190331212
Test: make sure pktrouter gets initialized
06-23 13:21:19.372  1 1 I init : Parsing file /vendor/etc/init/pktrouter.rc...
06-23 13:21:23.510     1     1 I init    : processing action (vendor.pktrouter=1) from (/vendor/etc/init/pktrouter.rc:7)
06-23 13:21:23.510     1     1 I init    : starting service 'pktrouter'...
Change-Id: Icc7ab88505aea47cfed5ffc5182d0625b7a7609d
2021-06-23 05:24:01 +00:00
Adam Shih
2812270759 modulize init.radio.sh am: d74e989739
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15048203

Change-Id: Ifae088c8915f6920de295286e6c34a9af17de8b3
2021-06-23 03:17:48 +00:00
SalmaxChang
a926055749 vendor_init/dumpstate: Grant to access logger prop
Bug: 176176656
Change-Id: I551ccfac57d983aab95aa23e1f350f78ee0a159f
2021-06-23 10:06:09 +08:00
Michael Ayoubi
cebbf14174 Add support for non-su hal_uwb
Bug: 187386527
Test: Boot and confirm HAL is up
Signed-off-by: Michael Ayoubi <mayoubi@google.com>
Change-Id: Ia9f3f90fba6981762fe375aa37c81f8474ad9c53
2021-06-23 01:26:25 +00:00
Adam Shih
d74e989739 modulize init.radio.sh
Bug: 190331600
Test: build ROM and make sure the file is there and functional.
Change-Id: Icb3e0e590ae315d53eb5251fd5e74d6aacab1fe2
2021-06-23 01:07:26 +00:00