Ziyi Cui
30e01ffb8c
[ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to perf-metrics
...
enable pixelstats access to sysfs path, define sysfs_perfmetrics
Bug: 227809911
Bug: 232541623
Test: Verified the existence of atom and correctness of resume latency, irq stats
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: If1b95148b59a6816c6795921018dfae68d80550b
2022-12-01 06:31:22 +00:00
Ziyi Cui
521334a366
gs201-sepolicy:dumpstate: allow dumpstate access sysfs_vendor_metrics
...
Test: "adb bugreport" includes metrics capture.
Bug: 246799997
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: I1c2f4aaf1cd875a37497ca8beacb555d39eeb51e
2022-12-01 06:27:22 +00:00
Ziyi Cui
2d4a9c02fc
[ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to temp-residency-metrics
...
enable pixelstats access to sysfs path
Bug: 246799997
Test: Verified the existence of atom and correctness of atom stats
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: I4a731d40a586e01c484cf95c57fb16a03f5e6ceb
2022-12-01 06:27:22 +00:00
Android Build Coastguard Worker
73adfe41cf
Snap for 9354090 from 24cfe388c5
to tm-qpr2-release
...
Change-Id: Id47d8082dcc6e0f6464bb0138d8887328bbbea8f
2022-12-01 00:03:22 +00:00
Wasb Liu
ee7f6c6720
hal_health_default: updated sepolicy am: 24cfe388c5
am: c7f12f5aa9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20476525
Change-Id: I827033e75db2418f38caf198234f50d0278100ad
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 10:31:38 +00:00
Wasb Liu
c7f12f5aa9
hal_health_default: updated sepolicy am: 24cfe388c5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20476525
Change-Id: I31449984e30724ba883a04c16b179641f6d92cbc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 09:59:32 +00:00
Wasb Liu
24cfe388c5
hal_health_default: updated sepolicy
...
allow android.hardware.health service to access persist_battery_file
11-14 13:53:39.242 872 872 W android.hardwar: type=1400 audit(0.0:17): avc: denied { search } for name="battery" dev="sda1" ino=84 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=dir permissive=0
Bug: 258535661
Test: check for no avc denied on persist_battery_file
Change-Id: I7564b03339e17f9eea4aa5a8feda31bcfdd6100c
Signed-off-by: Wasb Liu <wasbliu@google.com>
2022-11-30 09:44:34 +00:00
Stephen Crane
5cfe9e57ec
[automerger skipped] Allow Trusty storageproxy property am: 5cd114d3a0
am: 9fb7618e6b
-s ours
...
am skip reason: Merged-In I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d with SHA-1 c03e9b58db
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20545996
Change-Id: I8cb00ac916563913fb61b4a3160ac0d9746a272d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 01:43:15 +00:00
Stephen Crane
9fb7618e6b
Allow Trusty storageproxy property am: 5cd114d3a0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20545996
Change-Id: I76672b0e56c352e1991811bcaddac660fe05d0b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 01:15:18 +00:00
Vaibhav Devmurari
2295e34d68
Add SePolicy for system_server accessing sysfs for USB devices
...
Add SePolicy to allow Android input manager accessing sysfs nodes
for external USB devices
To support input device lights manager feature in frameworks, provide
sysfs node access to system server process.
DD: go/pk_backlight_control (For keyboard backlight control for external
keyboards)
Similar changes: ag/20092266
Kernel provides a standardized LED interface to expose LED controls
over sysfs: https://docs.kernel.org/leds/leds-class.html
The feature will be provided for devices with kernel sysfs class led
support and vendor kernel driver for input controllers that do have
lights. The kernel sysfs class led support is a kernel config option
(LEDS_CLASS), and an input device driver will create the sysfs class
node interface.
By giving system_server the access to these sysfs nodes, the feature
will work on devices with the kernel option and kernel input/hid driver
support. We do use CTS tests to enforce the kernel options and the
input device drivers.
What's already supported?
- We already support access to UHID sysfs node which used for all
bluetooth based external peripherals
What's included in this CL?
- Adding support to access sysfs nodes for USB based external devices
Test: manual
Bug: 245506418
Change-Id: I51c642ffe7293f793b7b6a131e8d2a37aea4a547
2022-11-29 11:46:44 +00:00
Nicolas Geoffray
2f94cdf9f1
Merge "Allow ssr_detector_app writes to system_app_data_file." am: 073de4fba6
am: 0590da44cf
am: b84e18b8ae
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2319817
Change-Id: Ibca1f8b4e6d1e74896cdbcea324225d67dcc60b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 10:46:56 +00:00
Nicolas Geoffray
b84e18b8ae
Merge "Allow ssr_detector_app writes to system_app_data_file." am: 073de4fba6
am: 0590da44cf
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2319817
Change-Id: I5c11172d6fb7b167500633ebba07c48281cd5296
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 10:11:54 +00:00
Nicolas Geoffray
0590da44cf
Merge "Allow ssr_detector_app writes to system_app_data_file." am: 073de4fba6
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2319817
Change-Id: I0e29c8a6435b71ff567d03572606cbcba3f76c1b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 09:43:15 +00:00
Nicolas Geoffray
073de4fba6
Merge "Allow ssr_detector_app writes to system_app_data_file."
2022-11-29 09:00:12 +00:00
Adam Shih
304509819e
move touch dump to gs-common
...
Bug: 256521567
Test: adb bugreport
Change-Id: I198c227508606baf434de456f80477ce6bebcede
2022-11-29 04:47:15 +00:00
Ziyi Cui
8586ba78c2
gs201-sepolicy:move perf_metrics genf_contexts from gs201 to gs-common
...
Bug: 227809911
Bug: 232541623
Test: test adb bugreport
Change-Id: I83fc6c8b1adffe9a58e1a3389036461db49efe77
Signed-off-by: Ziyi Cui <ziyic@google.com>
2022-11-29 01:02:45 +00:00
Sandeep Dhavale
6d7bc9aed7
Add fastboot sepolicy changes to allow wiping of device am: 89f5fff668
am: 6f2812426a
am: 537b43c395
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2316638
Change-Id: I4254bd608d9a942bf0e3643ca802ec4565dccc22
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 00:08:44 +00:00
Sandeep Dhavale
537b43c395
Add fastboot sepolicy changes to allow wiping of device am: 89f5fff668
am: 6f2812426a
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2316638
Change-Id: I129d2a7ab2effbcb93b15a21b539da1e11b8861f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-28 23:36:23 +00:00
Sandeep Dhavale
6f2812426a
Add fastboot sepolicy changes to allow wiping of device am: 89f5fff668
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2316638
Change-Id: Ib362d72f41b9955e46350e45250c077c703a0734
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-28 23:09:09 +00:00
Stephen Crane
5cd114d3a0
Allow Trusty storageproxy property
...
Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready
when the data filesystems are ready for use, and allows vendor init to
query and wait on this property.
Test: build, flash, test app loading
Bug: 258018785
Change-Id: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
Merged-In: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
2022-11-28 19:48:56 +00:00
Sandeep Dhavale
89f5fff668
Add fastboot sepolicy changes to allow wiping of device
...
With new AIDL fastboot service, wiping permissions need to be added
for hal_fastboot_default.
Bug: 260140380
Test: fastboot -w
Change-Id: I08e98461d0697d7539e14435acdacc3cc64eab3d
Signed-off-by: Sandeep Dhavale <dhavale@google.com>
2022-11-28 17:53:51 +00:00
Nicolas Geoffray
4293206c86
Allow ssr_detector_app writes to system_app_data_file.
...
Bug: 260557058
Test: m
Change-Id: Ibd028690a9d8661be8769d1b8f0c4e3a1f0fe985
2022-11-28 17:27:46 +00:00
Cheng Chang
5b3d90132a
gps: nstandby path depend on platform
...
Bug: 259353063
Test: no avc denied about nstandby
Change-Id: Ibf72cfd37837d2a9024b82118cd045a2724c9179
2022-11-24 06:54:13 +00:00
Ziyi Cui
2e98f5f763
gs201-sepolicy: pixelstats:remove type definition to perf-metrics
...
move type definition to gs-common
Bug: 227809911
Bug: 232541623
Test: Tested perf-metrics
Change-Id: I8120f682b12137dfea164912efa0fa0417cb5dd3
Signed-off-by: Ziyi Cui <ziyic@google.com>
2022-11-24 00:10:39 +00:00
Android Build Coastguard Worker
6d747832d4
Snap for 9325773 from a2e6c51431
to tm-qpr2-release
...
Change-Id: Id78c1384afcaba07108b288832af644549ae5ed7
2022-11-24 00:04:01 +00:00
Steve Pfetsch
65d7ed0931
[automerger skipped] gs201-sepolicy: provide permission for TouchInspector app [DO NOT MERGE] am: a2e6c51431
am: f85b2edd47
-s ours
...
am skip reason: subject contains skip directive
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20521667
Change-Id: Ib705d4a3620b640d3a8478dd34e272087a5eba99
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-23 21:34:37 +00:00
Steve Pfetsch
f85b2edd47
gs201-sepolicy: provide permission for TouchInspector app [DO NOT MERGE] am: a2e6c51431
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20521667
Change-Id: I60d8fcd79b4620a20b6c06d27a7286cd585676ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-23 20:59:08 +00:00
Stephen Crane
c03e9b58db
Allow Trusty storageproxy property
...
Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready
when the data filesystems are ready for use, and allows vendor init to
query and wait on this property.
Test: build, flash, test app loading
Bug: 258018785
Change-Id: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
2022-11-23 18:45:55 +00:00
Adam Shih
2dc65d6b5c
use gs-common thermal dump
...
Bug: 257880034
Test: adb bugreport
Change-Id: Ib5940bce520ca04ee6cb31f5268f0f86dedadf6e
2022-11-23 14:38:22 +08:00
Steve Pfetsch
a2e6c51431
gs201-sepolicy: provide permission for TouchInspector app [DO NOT MERGE]
...
Resolve these access violations:
avc: denied { write } for name="driver_test" dev="proc" ino=4026535572
scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:proc_touch:s0
tclass=file permissive=1 app=com.google.touch.touchinspector
avc: denied { open } for path="/proc/fts/driver_test" dev="proc"
ino=4026535572 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector
avc: denied { getattr } for path="/proc/fts/driver_test" dev="proc"
ino=4026535572 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector
avc: denied { read } for name="driver_test" dev="proc" ino=4026535572
scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:proc_touch:s0
tclass=file permissive=1 app=com.google.touch.touchinspector
avc: denied { open } for path="/proc/fts_ext/driver_test" dev="proc"
ino=4026535574 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector
avc: denied { getattr } for path="/proc/fts_ext/driver_test" dev="proc"
ino=4026535574 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector
Bug: 182118395
Signed-off-by: Steve Pfetsch <spfetsch@google.com>
Change-Id: Ia3bd2323b77134b8e47d858f36756780dec98c19
2022-11-22 23:48:19 +00:00
Android Build Coastguard Worker
600f28c3f3
[coastguard skipped] Merge sparse cherrypicks from sparse-9293603-L15900000957431128 into tm-qpr2-release.
...
Change-Id: I3df1268e623a75d523d461655228eb6c170a7355
2022-11-18 19:06:30 +00:00
Android Build Coastguard Worker
e4b0d83bbf
Merge cherrypicks of [20468124] into sparse-9293603-L15900000957431128.
...
Change-Id: I47486945d527102e8df6e6ffdf45bfd0620b61bb
2022-11-18 19:01:40 +00:00
George Lee
71560f7402
gs201-sepolicy: Add BrownoutDetection app [DO NOT MERGE]
...
This app files bugreport for user-debug build with reboot reason = ocp
or uvlo. Removed the dependency on BetterBug.
Bug: 237287659
Test: Ensure bugreport is generated under user-debug build with reboot
reason = ocp or uvlo.
Signed-off-by: George Lee <geolee@google.com>
Change-Id: Ib8fceb62e66e9d561a6597687ea3cbe5ac9a832d
(cherry picked from commit d59612c409
)
Merged-In: Ib8fceb62e66e9d561a6597687ea3cbe5ac9a832d
2022-11-18 19:01:31 +00:00
Adam Shih
80f2221562
move focaltech sepolicy to gs-common
...
Bug: 256521567
Test: adb bugreport
Change-Id: If58b8df0b89dc4d20240af46502a94eebe81f66f
2022-11-18 13:27:11 +08:00
Adam Shih
4952bdc68c
move syna settings to gs-common
...
Bug: 256521567
Test: adb bugreport
Change-Id: Idbec89a1a2c8bac63850ad4915a40500d067d49e
2022-11-17 10:33:25 +08:00
Android Build Coastguard Worker
2110e8f7dc
Snap for 9301146 from d59612c409
to tm-qpr2-release
...
Change-Id: I4ecf9d49686fb11f23d96ceaa9ab78c824ed376a
2022-11-17 00:07:02 +00:00
George Lee
49fc98da5c
[automerger skipped] gs201-sepolicy: Add BrownoutDetection app [DO NOT MERGE] am: d59612c409
am: 0aa587a6e8
-s ours
...
am skip reason: subject contains skip directive
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20468124
Change-Id: I6c0a57179d13d57b8503b049204f3b3414e8efa5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-16 19:53:13 +00:00
George Lee
0aa587a6e8
gs201-sepolicy: Add BrownoutDetection app [DO NOT MERGE] am: d59612c409
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20468124
Change-Id: I453ce49a6e5794baba7a84b0ecc691ec8884b07f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-16 18:34:54 +00:00
George Lee
d59612c409
gs201-sepolicy: Add BrownoutDetection app [DO NOT MERGE]
...
This app files bugreport for user-debug build with reboot reason = ocp
or uvlo. Removed the dependency on BetterBug.
Bug: 237287659
Test: Ensure bugreport is generated under user-debug build with reboot
reason = ocp or uvlo.
Signed-off-by: George Lee <geolee@google.com>
Change-Id: Ib8fceb62e66e9d561a6597687ea3cbe5ac9a832d
2022-11-16 18:20:57 +00:00
Adam Shih
60b73a5b28
remove raven touch path
...
Bug: 256521567
Test: device does not have the file
Change-Id: I1c0335536f7039724f7e6594fd3959610b56335e
2022-11-16 07:42:22 +00:00
Android Build Coastguard Worker
f15ca4355e
Snap for 9290907 from 4baa8bea9c
to tm-qpr2-release
...
Change-Id: Ia21ce6e83871b55b7b76dd41a5f16ce026be054d
2022-11-15 00:07:08 +00:00
Minchan Kim
07433db0bb
dumpstate: allow dumpstate access pixel specific trace events am: 4baa8bea9c
am: b16dcce743
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20414645
Change-Id: I78e48709d51616f071517138d97230b9a02e2351
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-14 19:52:49 +00:00
Minchan Kim
b16dcce743
dumpstate: allow dumpstate access pixel specific trace events am: 4baa8bea9c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20414645
Change-Id: Iee880e55f465d0a5e885778c3b5b055e43e98ba5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-14 19:20:40 +00:00
Minchan Kim
4baa8bea9c
dumpstate: allow dumpstate access pixel specific trace events
...
At bugreport, it's useful to debug problems with having trace events.
Allow dumpstate access pixel trace event directory and files.
Test: "adb bugreport" includes trace event capture.
Bug: 238728493
Change-Id: Ia3fe7c149bfa0d0d192070ff28513384898af917
Signed-off-by: Minchan Kim <minchan@google.com>
2022-11-14 19:00:39 +00:00
Ziyi Cui
e43c8b3913
gs201-sepolicy: pixelstats: enable pixelstats access to perf-metrics
...
enable pixelstats access to sysfs path, define sysfs_perfmetrics
Bug: 227809911
Bug: 232541623
Test: Tested perf-metrics
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: If1b95148b59a6816c6795921018dfae68d80550b
2022-11-11 18:00:55 +00:00
Sandeep Dhavale
5d03dcc5cf
Add sepolicy rules for fastboot AIDL service am: 25ea0f418a
am: e1f3eb7802
am: 5eca847f64
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2293977
Change-Id: I322f88288feab1a217b60f2954c08b12176c66ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-10 20:41:59 +00:00
Sandeep Dhavale
5eca847f64
Add sepolicy rules for fastboot AIDL service am: 25ea0f418a
am: e1f3eb7802
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2293977
Change-Id: I0277ceac1dffc7fda32db324b68d14de6074b0ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-10 19:24:35 +00:00
Sandeep Dhavale
e1f3eb7802
Add sepolicy rules for fastboot AIDL service am: 25ea0f418a
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2293977
Change-Id: I6b2c167429aa887acb2785b3bcbc7ef93852354d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-10 18:55:35 +00:00
Adam Shih
92e5ed6d55
move sensors dump to gs-common
...
Bug: 250475720
Test: adb bugreport
Change-Id: I09553d0facd7fdca13a8a3e4bdcb70be8265db25
2022-11-10 05:20:48 +00:00
Adam Shih
e8712e4c93
remove edgetpu folder
...
Bug: 258114806
Test: build pass with the setting still active
Change-Id: I9cdf2bbe318647e1f02f152661e57f8430a9a1cb
2022-11-10 03:19:25 +00:00