Evolution-X-Tensor/device_google_gs101
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
407 commits 1 branch 0 tags 494 MiB
Commit graph

407 commits

This branch
This branch
All branches
Author SHA1 Message Date
TreeHugger Robot
f1af2d0f15 Merge "Mark GS101 camera HAL as using Binder." into sc-dev am: 16730f3087 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14285352

Change-Id: I9c8c5a7fe388caf3cf01702df3445e7d7468ed1c
 2021-04-23 01:19:27 +00:00
TreeHugger Robot
16730f3087 Merge "Mark GS101 camera HAL as using Binder." into sc-dev 2021-04-23 00:52:20 +00:00
TreeHugger Robot
3cb81978f7 Merge "Allow access to NFC power stats" into sc-dev am: 0f87f26134 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14268788

Change-Id: I1a1ef7a01f7859ff8e945498315c683951114424
 2021-04-23 00:01:48 +00:00
TreeHugger Robot
0f87f26134 Merge "Allow access to NFC power stats" into sc-dev 2021-04-22 23:38:44 +00:00
TreeHugger Robot
3b2fb2e196 Merge "gs101-sepolicy: Allow platform_app to call uwb" into sc-dev am: 9573fc21a0 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14133747

Change-Id: I8d59dd14289027636f1fb6eded5c774766b0eebb
 2021-04-22 22:42:13 +00:00
TreeHugger Robot
9573fc21a0 Merge "gs101-sepolicy: Allow platform_app to call uwb" into sc-dev 2021-04-22 22:12:28 +00:00
Krzysztof Kosiński
de973d797a Mark GS101 camera HAL as using Binder. 
The service implements a public API, so it will communicate over
Binder in both the framework domain and the vendor domain.

Bug: 186067463
Test: boot on oriole & check logs
Change-Id: If5bee474f79b7d14f65351580544c0dcb701d604
 2021-04-22 13:50:42 -07:00
Michael Ayoubi
3abc895e64 Merge "gs101: Remove kernel.te after UWB fixes" into sc-dev am: 134a3882cc 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14275478

Change-Id: I3be08d9692d8d5c9e28100efa700b5c1d1b25ce6
 2021-04-22 15:35:43 +00:00
Michael Ayoubi
134a3882cc Merge "gs101: Remove kernel.te after UWB fixes" into sc-dev 2021-04-22 15:11:23 +00:00
sukiliu
009867dc37 Update avc error on ROM 7302474 am: 89e016d436 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14276161

Change-Id: Ia3568364f0f03f90e5b8b96d4316025e6358708b
 2021-04-22 07:24:00 +00:00
Michael Ayoubi
d17f3bad0f gs101: Remove kernel.te after UWB fixes 
tracking_denials/kernel.te is no longer needed after fixes from b/182954062.

Bug: 171943668
Test: Add dw3000 module back into build
      Compile and test image on Raven
      Confirm no avc denial logs are seen and that the dw3000 driver
      loads successfully.
Signed-off-by: Michael Ayoubi <mayoubi@google.com>
Change-Id: I9a8510ed3852c053319a3395871728048a57ecb5
 2021-04-22 05:38:21 +00:00
sukiliu
89e016d436 Update avc error on ROM 7302474 
avc: denied { call } for scontext=u:r:servicemanager:s0 tcontext=u:r:hal_camera_default:s0 tclass=binder permissive=0

Bug: 186067463
Test: PTS SELinuxTest
Change-Id: I2792875a195fa3ca75d6fa57537f81e7dbeb5bac
 2021-04-22 11:21:10 +08:00
Benjamin Schwartz
5293925c65 Allow access to NFC power stats 
Bug: 184722506
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Ie4b5a6823aacf5e5a84760b1d4872fbb4cc2826d
 2021-04-21 11:30:55 -07:00
Wei Wang
239eb17582 Merge "thermal: add sepolicy rule to access ODPM sysfs" into sc-dev am: aa3d3a3adb 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14182158

Change-Id: If3f0e8a183ef0dc5da3d20f0b35415c89862dcfd
 2021-04-21 16:14:34 +00:00
Wei Wang
aa3d3a3adb Merge "thermal: add sepolicy rule to access ODPM sysfs" into sc-dev 2021-04-21 15:44:40 +00:00
TreeHugger Robot
fb465ba7f5 Merge "fingerprint: fps hal can connect Stats service" into sc-dev am: 11871825f3 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14211588

Change-Id: Id2a75c967637114d741fae404416cb7dbd17ce23
 2021-04-21 10:04:14 +00:00
TreeHugger Robot
11871825f3 Merge "fingerprint: fps hal can connect Stats service" into sc-dev 2021-04-21 09:46:56 +00:00
eddielan
97b2c469fa fingerprint: fps hal can connect Stats service 
04-16 23:23:42.746   402   402 E
SELinux : avc:  denied  { find } for pid=4314 uid=1000
name=android.frameworks.stats.IStats/default
scontext=u:r:hal_fingerprint_default:s0
tcontext=u:object_r:fwk_stats_service:s0
tclass=service_manager permissive=0

Bug: 183486186
Test: Build Pass
Change-Id: Ie685db6ffd27bb2ad7936f55b70c3e2e5189b0ed
 2021-04-21 09:45:52 +00:00
Aaron Tsai
028bdd6369 Update tracking error for Silent Logging tool am: 90ead0f9cb 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207370

Change-Id: I3d89c02fc66ec0f3acf700047734be9c835bc20c
 2021-04-21 08:41:40 +00:00
Aaron Tsai
90ead0f9cb Update tracking error for Silent Logging tool 
04-06 20:16:59.772  1000  5754  5754 W RenderThread: type=1400 audit(0.0:17): avc: denied { write } for name="code_cache" dev="dm-7" ino=4477 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0
[   65.233590] type=1400 audit(1618796326.840:4): avc: denied { getattr } for comm="y.silentlogging" path="/data/user/0/com.samsung.slsi.telephony.silentlogging" dev="dm-11" ino=6338 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0
[   65.280798] type=1400 audit(1618796326.888:6): avc: denied { search } for comm="y.silentlogging" name="com.samsung.slsi.telephony.silentlogging" dev="dm-11" ino=6338 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0

04-06 21:07:23.576  7458  7458 I auditd  : type=1400 audit(0.0:64): avc: denied { create } for comm="RenderThread" name="com.android.skia.shaders_cache" scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0:c232,c259,c512,c768 tclass=file permissive=0
04-13 14:14:38.572  1000  8875  8875 I SharedPreferenc: type=1400 audit(0.0:524): avc: denied { read } for name="SHARED_PREF.xml" dev="dm-7" ino=16734 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0:c232,c259,c512,c768 tclass=file permissive=1
04-13 14:14:38.572  1000  8875  8875 I SharedPreferenc: type=1400 audit(0.0:525): avc: denied { read } for name="com.samsung.slsi.telephony.silentlogging_preferences.xml" dev="dm-7" ino=17227 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0:c232,c259,c512,c768 tclass=file permissive=1
04-13 14:14:38.572  1000  8875  8875 I SharedPreferenc: type=1400 audit(0.0:526): avc: denied { getattr } for path="/data/user/0/com.samsung.slsi.telephony.silentlogging/shared_prefs/com.samsung.slsi.telephony.silentlogging_preferences.xml" dev="dm-7" ino=17227 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0:c232,c259,c512,c768 tclass=file permissive=1
04-13 14:14:38.572  1000  8875  8875 I SharedPreferenc: type=1400 audit(0.0:527): avc: denied { getattr } for path="/data/user/0/com.samsung.slsi.telephony.silentlogging/shared_prefs/SHARED_PREF.xml" dev="dm-7" ino=16734 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:system_app_data_file:s0:c232,c259,c512,c768 tclass=file permissive=1

04-06 12:02:03.460  1000  9117  9117 W si.sysdebugmode: type=1400 audit(0.0:35): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=139 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0
04-06 12:02:03.465  1000  9117  9117 W libc    : Access denied finding property "persist.input.velocitytracker.strategy"

04-13 15:01:12.636  1000  8718  8718 W y.silentlogging: type=1400 audit(0.0:60): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=131 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0
04-13 15:01:12.638  1000  8718  8718 W libc    : Access denied finding property "ro.input.resampling"

04-13 15:01:12.724  1000  8718  8718 W y.silentlogging: type=1400 audit(0.0:61): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=131 scontext=u:r:vendor_telephony_app:s0:c232,c259,c512,c768 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0
04-13 15:01:12.726  1000  8718  8718 W libc    : Access denied finding property "viewroot.profile_rendering"


Bug: 184921478
Test: manual
Change-Id: Ia842b3dcfd8ec2ad30acc065f9caceafdc0458cd
 2021-04-21 06:59:01 +00:00
Yu-Chi Cheng
f63eb384e8 Merge "Allowed EdgeTPU service to generate Perfetto trace." into sc-dev am: e08f769244 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14170537

Change-Id: I2123e576556454c539af6bd3c181082e297ee4cc
 2021-04-21 01:55:11 +00:00
Yu-Chi Cheng
e08f769244 Merge "Allowed EdgeTPU service to generate Perfetto trace." into sc-dev 2021-04-21 01:15:33 +00:00
Yu-Chi Cheng
f5bb17ab49 Allowed EdgeTPU service to generate Perfetto trace. 
Bug: 185238493
Test: tested on local Oriole
Change-Id: I2973ccedd05d5f6dd06c3044adeb983ffb4628aa
 2021-04-20 12:08:42 -07:00
Wenhao Wang
2c1249a5e6 Merge "Fix selinux for RPMB daemon" into sc-dev am: a16b1668be 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14242046

Change-Id: I2ad8925163f530bcbb87acfca16b6fe915d80e7d
 2021-04-20 17:56:21 +00:00
Wenhao Wang
a16b1668be Merge "Fix selinux for RPMB daemon" into sc-dev 2021-04-20 17:20:50 +00:00
TreeHugger Robot
e8db72539b Merge "sepolicy: add cs40l26 haptics modules" into sc-dev am: 77725ac5f8 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14236565

Change-Id: If36da822957ff0a725f849a81df8b355f36fad12
 2021-04-20 12:20:10 +00:00
TreeHugger Robot
77725ac5f8 Merge "sepolicy: add cs40l26 haptics modules" into sc-dev 2021-04-20 11:49:51 +00:00
Tai Kuo
0e9abb4ef2 sepolicy: add cs40l26 haptics modules 
Fix the following avc denial:
avc: denied { module_load } for comm="insmod" path="/vendor_dlkm/lib/modules/cl_dsp.ko" dev="overlay" ino=41 scontext=u:r:init-insmod-sh:s0 tcontext=u:object_r:vendor_file:s0 tclass=system permissive=1

Bug: 184610991
Test: Full built. Check if the avc denial was gone.
Signed-off-by: Tai Kuo <taikuo@google.com>
Change-Id: Ic41ea6a6add818bfdf95e71e20df77b9e06db6c1
 2021-04-20 11:43:03 +00:00
TreeHugger Robot
9a2b85d7b7 Merge "remove obsolete entry" into sc-dev am: a0fbe1508d 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14233638

Change-Id: Iacbbcc182c23ff8166eabeb3e9a6f6ac3e167b89
 2021-04-20 08:03:00 +00:00
TreeHugger Robot
a0fbe1508d Merge "remove obsolete entry" into sc-dev 2021-04-20 07:52:18 +00:00
Adam Shih
f8e2285581 suppress logs created by userdebug-only features am: a2f8a45c46 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14233635

Change-Id: If29bed5d475e1860cac8a114a86bef3418efb879
 2021-04-20 07:50:52 +00:00
Adam Shih
93b498ea78 remove obsolete entry 
Bug: 182531832
Test: do bugreport with no dumpstate related error
Change-Id: I3f19f82f37b11221f4816d958797336da23b14b4
 2021-04-20 14:42:55 +08:00
Adam Shih
a2f8a45c46 suppress logs created by userdebug-only features 
Bug: 185439604
Test: cts-tradefed run commandAndExit cts -m CtsSecurityHostTestCases
Change-Id: I8d993154e8e6c3205e1e83c6b81d4d9064dc3171
 2021-04-20 06:17:20 +00:00
Wenhao Wang
f5277482c1 Fix selinux for RPMB daemon 
Secure persistent storage has been moved to persist root.
The corresponding pathes on SELinux policy has to be updated.

Bug: 173971240
Bug: 173032298
Test: Trusty storage tests
Change-Id: I0e7756f3b4d5c6be705a87e1d7d80247df1ec4bb
 2021-04-20 13:01:23 +08:00
Wei Wang
0d9dfcc1f6 Merge "Grant Fabric node access for memory min frequency setting" into sc-dev am: 0ae24df58d 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14242545

Change-Id: I5c962987a7801d10506f35488672fb48ac3833a3
 2021-04-20 02:54:36 +00:00
Wei Wang
0ae24df58d Merge "Grant Fabric node access for memory min frequency setting" into sc-dev 2021-04-20 02:14:18 +00:00
Taeju Park
3e824702f2 Grant Fabric node access for memory min frequency setting 
Bug: 170510392
Signed-off-by: Taeju Park <taeju@google.com>
Change-Id: Ia96c8d9e890251a4f82bf8c8bb042ae6ce57182b
 2021-04-20 00:46:32 +00:00
Salmax Chang
4769345944 Merge "dumpstate/incident: Fix avc errors" into sc-dev am: 854e4dfd60 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207379

Change-Id: I7b6bbf41ea0df757b32e74d47e96efc80831dce4
 2021-04-19 10:20:31 +00:00
Salmax Chang
854e4dfd60 Merge "dumpstate/incident: Fix avc errors" into sc-dev 2021-04-19 10:00:10 +00:00
SalmaxChang
1b17b0fbaa dumpstate/incident: Fix avc errors 
avc: denied { append } for path="/storage/emulated/0/Android/data/com.android.pixellogger/files/bugreport-oriole-MASTER-2021-04-19-14-57-22.zip" dev="dm-7" ino=35424 scontext=u:r:dumpstate:s0 tcontext=u:object_r:media_rw_data_file:s0:c28,c257,c512,c768 tclass=file
avc: denied { use } for path="/storage/emulated/0/Android/data/com.android.pixellogger/files/bugreport-oriole-MASTER-2021-04-19-14-57-22.zip" dev="dm-7" ino=35424 scontext=u:r:incident:s0 tcontext=u:r:logger_app:s0:c28,c257,c512,c768 tclass=fd
avc: denied { append } for path="/storage/emulated/0/Android/data/com.android.pixellogger/files/bugreport-oriole-MASTER-2021-04-19-16-30-05.zip" dev="dm-7" ino=12639 scontext=u:r:incident:s0 tcontext=u:object_r:media_rw_data_file:s0:c30,c257,c512,c768 tclass=file

Bug: 178744858
Change-Id: I07eb1f4abf6cb9b399c773854ca6f47fcd5e2f37
 2021-04-19 08:34:57 +00:00
TreeHugger Robot
c049172863 Merge "Add sepolicy rules when PowerAnomalyDataDetection service enabled" into sc-dev am: 8c30e63758 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207376

Change-Id: I623850de79cd6d44921f5ea79c8ab8d3ea56016f
 2021-04-19 06:20:23 +00:00
TreeHugger Robot
8a2e0ac237 Merge "remove obsolete domains" into sc-dev am: 07121f1245 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14230396

Change-Id: I1b821e90e2dfe6ad07440a14d15d41d4291d6143
 2021-04-19 06:20:01 +00:00
TreeHugger Robot
8c30e63758 Merge "Add sepolicy rules when PowerAnomalyDataDetection service enabled" into sc-dev 2021-04-19 06:03:11 +00:00
TreeHugger Robot
07121f1245 Merge "remove obsolete domains" into sc-dev 2021-04-19 05:56:38 +00:00
Rios Kao
546bc74b3e Merge "Allow ssr_detector to read aoc version property" into sc-dev am: 1b25799252 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14185472

Change-Id: I670b3c3cae62c0b7f0cd5acf26ab4c769f0905e5
 2021-04-19 04:35:23 +00:00
Rios Kao
1b25799252 Merge "Allow ssr_detector to read aoc version property" into sc-dev 2021-04-19 04:19:34 +00:00
Adam Shih
487b7ef4ef update error on ROM 7293525 am: 59a1c3f04a 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14230390

Change-Id: I4df5074d99314748940179af7678e61c5e03a33c
 2021-04-19 03:45:17 +00:00
Adam Shih
99988c4c5f remove obsolete domains 
Bug: 168013500
Test: Check that abox and rpmbd are not in ROM anywhere in oriole, raven user,
userdebug and factory ROM

Change-Id: Ie091a1036ba6c25a3c7f0ef0b8f69cc9fc4e306a
 2021-04-19 11:14:54 +08:00
Adam Shih
59a1c3f04a update error on ROM 7293525 
Bug: 185723618
Bug: 185723492
Bug: 185723694
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I5cc12384aca5dcc2658b914e5c7783f2e1e70b5d
 2021-04-19 09:52:55 +08:00
TreeHugger Robot
3e60566e85 Merge "sepolicy: fix fingerprint sepolicy" into sc-dev am: 96ed3bb51c 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14207375

Change-Id: Iaae8bfba152a1411ab33e66128fde5e2a8d26f5b
 2021-04-16 09:57:44 +00:00