Commit graph

2867 commits

Author SHA1 Message Date
TreeHugger Robot
bbe95c3a79 Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d am: 82a83b366a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: Ia31705514741c26b3ab34ecc21edb45e57ef89c2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 08:46:04 +00:00
Ray Chi
d924169220 Allow hal_usb_gadget_impl to access proc_irq am: 7ac349e932 am: b5c3f6e0ba
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17313628

Change-Id: I96ba2776bb32556b1a3f01cf83cc3d0da63ea7fe
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 08:46:02 +00:00
TreeHugger Robot
82a83b366a Merge changes from topic "gs101-move-dwc3-irq" into tm-dev am: 36f7fe941d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18164764

Change-Id: Ie610b6f31e218dece80fb0dc52b66050382d4e26
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 07:27:14 +00:00
Ray Chi
b5c3f6e0ba Allow hal_usb_gadget_impl to access proc_irq am: 7ac349e932
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17313628

Change-Id: I12709e8375ab34a1ed08ae48ce2db522d98f188c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 07:27:12 +00:00
TreeHugger Robot
36f7fe941d Merge changes from topic "gs101-move-dwc3-irq" into tm-dev
* changes:
  Revert "add sepolicy for set_usb_irq.sh"
  Allow hal_usb_gadget_impl to access proc_irq
2022-05-05 07:08:20 +00:00
Yichi Chen
43d6af291c Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c am: b2c0884cd9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I0c12bd8decf007033f42c492d149d6afb0a1244f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 02:44:17 +00:00
Yichi Chen
b2c0884cd9 Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev am: 650209645c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17823364

Change-Id: I3053433540b747906ef69eed537d9eb600923a2a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-05 02:19:25 +00:00
Yichi Chen
650209645c Merge "Allow hal_fingerprint_default to access hal_pixel_display_service" into tm-dev 2022-05-05 02:03:49 +00:00
William McVicker
d5094282b6 Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e am: 18cb713b62
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: Ie615dcd13480e7cc91195c8726ebbc13e2225342
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 17:12:51 +00:00
William McVicker
18cb713b62 Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev am: e6250cd86e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18123741

Change-Id: I8abb96731bc5d3b3f95168607dcfe8932d3f3727
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-04 16:39:32 +00:00
William McVicker
e6250cd86e Merge "genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes" into tm-dev 2022-05-04 16:10:16 +00:00
Ray Chi
503fa09010 Revert "add sepolicy for set_usb_irq.sh"
This reverts commit 714075eba7.

Bug: 224699556
Test: build pass
Change-Id: Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af
Merged-In: Ie275e48ee87c4e9f5c83b7802c3f3baa12ad30af
(cherry picked from commit bf9ec40ab7)
2022-05-04 11:45:26 +00:00
Ray Chi
7ac349e932 Allow hal_usb_gadget_impl to access proc_irq
Bug: 224699556
Test: build pass
Change-Id: Id9a9adbdc921629b6e89d0850dd8acaf76b1a891
Merged-In: Id9a9adbdc921629b6e89d0850dd8acaf76b1a891
(cherry picked from commit 455c3c165348fa9ea65c65b004d4dda1426d04be)
2022-05-04 11:45:08 +00:00
Asad Ali
8974ed37c4 Merge "Allow chre to communicate with fwk_stats_service." into tm-qpr-dev 2022-05-03 21:00:47 +00:00
Jenny Ho
7c382afd48 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6 am: d1b13f7695
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: I916b100095fe62e2383c14e5ddf4b3bcb9dc390e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 14:06:10 +00:00
Jenny Ho
d1b13f7695 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev am: 9b27bbdab6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17944214

Change-Id: I58800e42bead3292e710f361e43829b221c4ee67
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-05-03 13:31:51 +00:00
Jenny Ho
9b27bbdab6 Merge "sepolicy: allow access debugfs charger register dump" into tm-dev 2022-05-03 10:39:21 +00:00
Will McVicker
12b3700a38 genfs_contexts: add raw i2c-s2mpg10mfd and i2c-s2mpg11mfd nodes
This adds the [067]-001f and [178]-002f raw i2c numberings to the
sepolicy for the P21-mainline driver which doesn't use the i2c vendor
hook to rename these numberings. This is required for the thermal hal to
work.

Bug: 231155356
Signed-off-by: Will McVicker <willmcvicker@google.com>
Change-Id: I8e4bbbd0768e63e708f46eb42bddb5fc28b29caa
2022-05-02 10:12:15 -07:00
Asad Ali
7bfcc6f4e5 Allow chre to communicate with fwk_stats_service.
Bug: 230788686
Test: Logged atoms using CHRE + log atom extension.
Change-Id: I0683a224d61cdc8c927360ebad3de115ed431e1a
(cherry picked from commit c6ea8d1656)
2022-04-29 17:00:27 +00:00
Kris Chen
c6eea8a657 Allow hal_fingerprint_default to access hal_pixel_display_service
Fix the following avc denial:
avc: denied  { find } for pid=1158 uid=1000 name=com.google.hardware.pixel.display.IDisplay/default scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:hal_pixel_display_service:s0 tclass=service_manager permissive=0
avc: denied { call } for scontext=u:r:hal_fingerprint_default:s0 tcontext=u:r:hal_graphics_composer_default:s0 tclass=binder permissive=0

Bug: 229716695
Bug: 224573604
Test: build and test fingerprint on device.
Change-Id: Id24e65213221048d6dfdeae6ed2bcb7b762a0f75
2022-04-28 03:08:47 +00:00
Wei Wang
b9f0680283 allow udfps hal to access trusty am: 615f85c22d am: b94efeaff0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I45576b46edad47a0614534f0a503a99036936e55
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 02:09:40 +00:00
Wei Wang
b94efeaff0 allow udfps hal to access trusty am: 615f85c22d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17982120

Change-Id: I021692200c0bc229f23d573685f1ca75c4fb0ca1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-28 01:15:56 +00:00
Wei Wang
615f85c22d allow udfps hal to access trusty
Bug: 229350721
Bug: 230492593
Test: UDFPS with stress
Signed-off-by: Wei Wang <wvw@google.com>
Change-Id: Ib1abe0e0318689528a6658f3597f1c11ad9fa1c3
2022-04-27 20:20:43 +00:00
Jenny Ho
15036785cf sepolicy: allow access debugfs charger register dump
[  438.549652] type=1400 audit(1651035282.616:8): avc: denied { read } for comm="dumpstate@1.1-s" name="registers" dev="debugfs" ino=31549 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:debugfs:s0 tclass=file permissive=0
[  438.550252] type=1400 audit(1651035282.616:9): avc: denied { read } for comm="dumpstate@1.1-s" name="registers" dev="debugfs" ino=31532 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:debugfs:s0 tclass=file permissive=0

Bug: 230360103
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: I102a159ca23a65d99a52cac3d011f5ce535a37e7
2022-04-27 10:09:48 +00:00
Wei Wang
0335b3f6bc Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a am: dff2ecee1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: I414ecceb80c9d85270e4657bf83c6ed9e23b50b7
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 17:38:41 +00:00
Wei Wang
dff2ecee1c Merge "Grant trusty to power hal" into tm-dev am: 5e9a38799a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17927853

Change-Id: I93b6b6da30c68efc6df038a4ba9d30e037abd8bd
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-26 17:09:57 +00:00
Wei Wang
5e9a38799a Merge "Grant trusty to power hal" into tm-dev 2022-04-26 16:47:14 +00:00
Edmond Chung
ac4e2bd183 Camera: add setsched capability. am: 2715a08a73 am: 0ddf256588
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: I10e45832daefc30d2607c5017e581db4db364c9f
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 09:02:04 +00:00
Edmond Chung
0ddf256588 Camera: add setsched capability. am: 2715a08a73
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17928357

Change-Id: I226c2636c54592127c8786e1e7a8e58e182159db
Ignore-AOSP-First: this is an automerge
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-25 08:30:22 +00:00
Edmond Chung
2715a08a73 Camera: add setsched capability.
The camera HAL needs to configure schedule policies for
performance optimizations.

Bug: 228632527
Test: GCA, adb logcat
Change-Id: Ifbf433c026549ca774a9521704d0b0b75c9e9f23
2022-04-24 23:08:42 +00:00
Wei Wang
1291c3cec9 Grant trusty to power hal
Bug: 229350721
Test: UDFPS with stress
Signed-off-by: Wei Wang <wvw@google.com>
Change-Id: Ia88d6cff1d21940e22ae5122dbfcf52de27ad700
2022-04-24 04:30:03 +00:00
chungkai
e8a9ad3f0e sepolicy: Remove tracking denials files and fix avc problems am: 11770d9dfe am: b32938a781
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17874685

Change-Id: Ieb5b0ec3539ac9c1b40221bc1ff8e552e874dc19
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 09:10:22 +00:00
chungkai
b32938a781 sepolicy: Remove tracking denials files and fix avc problems am: 11770d9dfe
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17874685

Change-Id: I235258b04149250eddee697483cb33ccdbd915ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 07:47:48 +00:00
chungkai
11770d9dfe sepolicy: Remove tracking denials files and fix avc problems
04-19 10:53:57.364 W binder:575_2: type=1400 audit(0.0:17):
avc: denied { read } for name="wakeup11" dev="sysfs" ino=59892
scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir
permissive=0

Bug: 229670628
Test: pass
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I6a83b77c4a4bb836e4014cf865cb720a360fd981
2022-04-21 07:24:21 +00:00
Alistair Delva
3b278ac414 [automerger skipped] Merge "Remove sysfs_gpu type definition" am: e48b455651 am: f482ea00d9 am: 4f17770b62 -s ours am: 0007374b65 -s ours am: 12d69967ca -s ours
am skip reason: Merged-In I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7 with SHA-1 f2be252260 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I5820d675ee839867e0fab611f90aa5a36df317af
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 05:47:15 +00:00
Alistair Delva
12d69967ca [automerger skipped] Merge "Remove sysfs_gpu type definition" am: e48b455651 am: f482ea00d9 am: 4f17770b62 -s ours am: 0007374b65 -s ours
am skip reason: Merged-In I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7 with SHA-1 f2be252260 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I61d5c134852af261576dd1fab6b126f5c02130bd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 05:29:03 +00:00
Alistair Delva
0007374b65 [automerger skipped] Merge "Remove sysfs_gpu type definition" am: e48b455651 am: f482ea00d9 am: 4f17770b62 -s ours
am skip reason: Merged-In I6fcafa87541ed0cbaf3ba74fa5ff4dbdebd533f7 with SHA-1 f2be252260 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I5e6e351d60353e593234ccb3732ee147c2e7d2d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 05:13:13 +00:00
Alistair Delva
4f17770b62 Merge "Remove sysfs_gpu type definition" am: e48b455651 am: f482ea00d9
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I0edd9718f21b1f31801a793a79dad5d3708b9c10
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 04:58:50 +00:00
Alistair Delva
f482ea00d9 Merge "Remove sysfs_gpu type definition" am: e48b455651
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/1999630

Change-Id: I144bf39a8eb4c8fda36cfbceb03e7813faf31f3a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-21 04:43:57 +00:00
Alistair Delva
e48b455651 Merge "Remove sysfs_gpu type definition" 2022-04-21 04:21:45 +00:00
Xin Li
bcc71e1164 [automerger skipped] Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047 am: 7a573b067c -s ours am: 104e2d21c2 -s ours am: 7111ceb7e8 -s ours am: a809ae5221 -s ours
am skip reason: Merged-In I7f65597f91db5a16d4f9de4f6bb018bd5b50a965 with SHA-1 e60773b926 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17805214

Change-Id: I8e61558b9a3bcc929cf1c10913dacce1affa8652
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 11:30:06 +00:00
Xin Li
a809ae5221 [automerger skipped] Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047 am: 7a573b067c -s ours am: 104e2d21c2 -s ours am: 7111ceb7e8 -s ours
am skip reason: Merged-In I7f65597f91db5a16d4f9de4f6bb018bd5b50a965 with SHA-1 e60773b926 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17805214

Change-Id: Id4134dfcb8163f03797be1a0f5e66ba92050b046
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 08:26:32 +00:00
Xin Li
7111ceb7e8 [automerger skipped] Empty merge of sc-v2-dev-plus-aosp-without-vendor@8433047 am: 7a573b067c -s ours am: 104e2d21c2 -s ours
am skip reason: Merged-In I7f65597f91db5a16d4f9de4f6bb018bd5b50a965 with SHA-1 e60773b926 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17805214

Change-Id: Icd2489bcc9f6e26fb8e76c0a774ca174e38fada5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 05:55:38 +00:00
Chung-Kai (Michael) Mei
cf561811f5 Merge "sepolicy: fix avc denials" into tm-dev am: 1875f214c6 am: cdff8c6efa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17800050

Change-Id: Ie7ab7863e93dcf7fcafe8bcbeb1edc83e7af519c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 03:29:29 +00:00
Chung-Kai (Michael) Mei
cdff8c6efa Merge "sepolicy: fix avc denials" into tm-dev am: 1875f214c6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17800050

Change-Id: I2636b915fe91b575d6e97764ad17fc5f4da2b473
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-20 03:03:09 +00:00
Chung-Kai (Michael) Mei
1875f214c6 Merge "sepolicy: fix avc denials" into tm-dev 2022-04-20 02:21:49 +00:00
Jason Macnak
71d943d339 Merge "Remove sysfs_gpu type definition" into tm-dev am: d02d83f5c0 am: d543a9d4a2
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17006942

Change-Id: I3c228da1d8e0e8da9678d7db2c08305ff4d997ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 16:48:38 +00:00
Jason Macnak
d543a9d4a2 Merge "Remove sysfs_gpu type definition" into tm-dev am: d02d83f5c0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17006942

Change-Id: I6286e9f75717521fd74f6f10a5d02440df9a9b02
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 16:25:30 +00:00
Jason Macnak
d02d83f5c0 Merge "Remove sysfs_gpu type definition" into tm-dev 2022-04-19 15:59:07 +00:00
TreeHugger Robot
50b939a7de Merge "Grant policy for EWP feature" into tm-dev am: dd5c94ef1c am: dd90e258f0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/17614595

Change-Id: Ia90595ec36bf4f3696eca1c71c2fe19b4e21ed73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-04-19 12:19:45 +00:00