Evolution-X-Tensor/device_google_gs201
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1122 commits 1 branch 0 tags 63 MiB
Commit graph

1122 commits

This branch
This branch
All branches
Author SHA1 Message Date
Ziyi Cui
1f90d9e929 gs201-sepolicy:dumpstate: allow dumpstate access sysfs_vendor_metrics am: 521334a366 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20475259

Change-Id: Ibf21ea0b6647865f38d04930ff1ccf6dc5377b29
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-12-01 06:59:41 +00:00
Ziyi Cui
8d2a5bdcf7 [ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to temp-residency-metrics am: 2d4a9c02fc 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20431038

Change-Id: I68342b66f1c1588f0b924531a9a23f8cce47c922
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-12-01 06:59:37 +00:00
Ziyi Cui
30e01ffb8c [ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to perf-metrics 
enable pixelstats access to sysfs path, define sysfs_perfmetrics

Bug: 227809911
Bug: 232541623
Test: Verified the existence of atom and correctness of resume latency, irq stats
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: If1b95148b59a6816c6795921018dfae68d80550b
 2022-12-01 06:31:22 +00:00
Ziyi Cui
521334a366 gs201-sepolicy:dumpstate: allow dumpstate access sysfs_vendor_metrics 
Test: "adb bugreport" includes metrics capture.

Bug: 246799997
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: I1c2f4aaf1cd875a37497ca8beacb555d39eeb51e
 2022-12-01 06:27:22 +00:00
Ziyi Cui
2d4a9c02fc [ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to temp-residency-metrics 
enable pixelstats access to sysfs path
Bug: 246799997
Test: Verified the existence of atom and correctness of atom stats
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: I4a731d40a586e01c484cf95c57fb16a03f5e6ceb
 2022-12-01 06:27:22 +00:00
Android Build Coastguard Worker
73adfe41cf Snap for 9354090 from 24cfe388c5 to tm-qpr2-release 
Change-Id: Id47d8082dcc6e0f6464bb0138d8887328bbbea8f
 2022-12-01 00:03:22 +00:00
Wasb Liu
c7f12f5aa9 hal_health_default: updated sepolicy am: 24cfe388c5 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20476525

Change-Id: I31449984e30724ba883a04c16b179641f6d92cbc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-30 09:59:32 +00:00
Wasb Liu
24cfe388c5 hal_health_default: updated sepolicy 
allow android.hardware.health service to access persist_battery_file

11-14 13:53:39.242   872   872 W android.hardwar: type=1400 audit(0.0:17): avc: denied { search } for name="battery" dev="sda1" ino=84 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=dir permissive=0

Bug: 258535661
Test: check for no avc denied on persist_battery_file
Change-Id: I7564b03339e17f9eea4aa5a8feda31bcfdd6100c
Signed-off-by: Wasb Liu <wasbliu@google.com>
 2022-11-30 09:44:34 +00:00
Stephen Crane
9fb7618e6b Allow Trusty storageproxy property am: 5cd114d3a0 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20545996

Change-Id: I76672b0e56c352e1991811bcaddac660fe05d0b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-30 01:15:18 +00:00
Nicolas Geoffray
b84e18b8ae Merge "Allow ssr_detector_app writes to system_app_data_file." am: 073de4fba6 am: 0590da44cf 
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2319817

Change-Id: I5c11172d6fb7b167500633ebba07c48281cd5296
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-29 10:11:54 +00:00
Nicolas Geoffray
0590da44cf Merge "Allow ssr_detector_app writes to system_app_data_file." am: 073de4fba6 
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2319817

Change-Id: I0e29c8a6435b71ff567d03572606cbcba3f76c1b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-29 09:43:15 +00:00
Nicolas Geoffray
073de4fba6 Merge "Allow ssr_detector_app writes to system_app_data_file." 2022-11-29 09:00:12 +00:00
Sandeep Dhavale
537b43c395 Add fastboot sepolicy changes to allow wiping of device am: 89f5fff668 am: 6f2812426a 
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2316638

Change-Id: I129d2a7ab2effbcb93b15a21b539da1e11b8861f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-28 23:36:23 +00:00
Sandeep Dhavale
6f2812426a Add fastboot sepolicy changes to allow wiping of device am: 89f5fff668 
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2316638

Change-Id: Ib362d72f41b9955e46350e45250c077c703a0734
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-28 23:09:09 +00:00
Stephen Crane
5cd114d3a0 Allow Trusty storageproxy property 
Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready
when the data filesystems are ready for use, and allows vendor init to
query and wait on this property.

Test: build, flash, test app loading
Bug: 258018785
Change-Id: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
Merged-In: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
 2022-11-28 19:48:56 +00:00
Sandeep Dhavale
89f5fff668 Add fastboot sepolicy changes to allow wiping of device 
With new AIDL fastboot service, wiping permissions need to be added
for hal_fastboot_default.

Bug: 260140380
Test: fastboot -w

Change-Id: I08e98461d0697d7539e14435acdacc3cc64eab3d
Signed-off-by: Sandeep Dhavale <dhavale@google.com>
 2022-11-28 17:53:51 +00:00
Nicolas Geoffray
4293206c86 Allow ssr_detector_app writes to system_app_data_file. 
Bug: 260557058
Test: m
Change-Id: Ibd028690a9d8661be8769d1b8f0c4e3a1f0fe985
 2022-11-28 17:27:46 +00:00
Android Build Coastguard Worker
6d747832d4 Snap for 9325773 from a2e6c51431 to tm-qpr2-release 
Change-Id: Id78c1384afcaba07108b288832af644549ae5ed7
 2022-11-24 00:04:01 +00:00
Steve Pfetsch
f85b2edd47 gs201-sepolicy: provide permission for TouchInspector app [DO NOT MERGE] am: a2e6c51431 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20521667

Change-Id: I60d8fcd79b4620a20b6c06d27a7286cd585676ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-23 20:59:08 +00:00
Steve Pfetsch
a2e6c51431 gs201-sepolicy: provide permission for TouchInspector app [DO NOT MERGE] 
Resolve these access violations:
avc: denied { write } for name="driver_test" dev="proc" ino=4026535572
scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:proc_touch:s0
tclass=file permissive=1 app=com.google.touch.touchinspector
avc: denied { open } for path="/proc/fts/driver_test" dev="proc"
ino=4026535572 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector
avc: denied { getattr } for path="/proc/fts/driver_test" dev="proc"
ino=4026535572 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector
avc: denied { read } for name="driver_test" dev="proc" ino=4026535572
scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:proc_touch:s0
tclass=file permissive=1 app=com.google.touch.touchinspector

avc: denied { open } for path="/proc/fts_ext/driver_test" dev="proc"
ino=4026535574 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector
avc: denied { getattr } for path="/proc/fts_ext/driver_test" dev="proc"
ino=4026535574 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector

Bug: 182118395
Signed-off-by: Steve Pfetsch <spfetsch@google.com>
Change-Id: Ia3bd2323b77134b8e47d858f36756780dec98c19
 2022-11-22 23:48:19 +00:00
Android Build Coastguard Worker
600f28c3f3 [coastguard skipped] Merge sparse cherrypicks from sparse-9293603-L15900000957431128 into tm-qpr2-release. 
Change-Id: I3df1268e623a75d523d461655228eb6c170a7355
 2022-11-18 19:06:30 +00:00
Android Build Coastguard Worker
e4b0d83bbf Merge cherrypicks of [20468124] into sparse-9293603-L15900000957431128. 
Change-Id: I47486945d527102e8df6e6ffdf45bfd0620b61bb
 2022-11-18 19:01:40 +00:00
George Lee
71560f7402 gs201-sepolicy: Add BrownoutDetection app [DO NOT MERGE] 
This app files bugreport for user-debug build with reboot reason = ocp
or uvlo.  Removed the dependency on BetterBug.

Bug: 237287659
Test: Ensure bugreport is generated under user-debug build with reboot
reason = ocp or uvlo.
Signed-off-by: George Lee <geolee@google.com>
Change-Id: Ib8fceb62e66e9d561a6597687ea3cbe5ac9a832d
(cherry picked from commit d59612c409)
Merged-In: Ib8fceb62e66e9d561a6597687ea3cbe5ac9a832d
 2022-11-18 19:01:31 +00:00
Android Build Coastguard Worker
2110e8f7dc Snap for 9301146 from d59612c409 to tm-qpr2-release 
Change-Id: I4ecf9d49686fb11f23d96ceaa9ab78c824ed376a
 2022-11-17 00:07:02 +00:00
George Lee
0aa587a6e8 gs201-sepolicy: Add BrownoutDetection app [DO NOT MERGE] am: d59612c409 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20468124

Change-Id: I453ce49a6e5794baba7a84b0ecc691ec8884b07f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-16 18:34:54 +00:00
George Lee
d59612c409 gs201-sepolicy: Add BrownoutDetection app [DO NOT MERGE] 
This app files bugreport for user-debug build with reboot reason = ocp
or uvlo.  Removed the dependency on BetterBug.

Bug: 237287659
Test: Ensure bugreport is generated under user-debug build with reboot
reason = ocp or uvlo.
Signed-off-by: George Lee <geolee@google.com>
Change-Id: Ib8fceb62e66e9d561a6597687ea3cbe5ac9a832d
 2022-11-16 18:20:57 +00:00
Android Build Coastguard Worker
f15ca4355e Snap for 9290907 from 4baa8bea9c to tm-qpr2-release 
Change-Id: Ia21ce6e83871b55b7b76dd41a5f16ce026be054d
 2022-11-15 00:07:08 +00:00
Minchan Kim
b16dcce743 dumpstate: allow dumpstate access pixel specific trace events am: 4baa8bea9c 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20414645

Change-Id: Iee880e55f465d0a5e885778c3b5b055e43e98ba5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-14 19:20:40 +00:00
Minchan Kim
4baa8bea9c dumpstate: allow dumpstate access pixel specific trace events 
At bugreport, it's useful to debug problems with having trace events.
Allow dumpstate access pixel trace event directory and files.

Test: "adb bugreport" includes trace event capture.
Bug: 238728493
Change-Id: Ia3fe7c149bfa0d0d192070ff28513384898af917
Signed-off-by: Minchan Kim <minchan@google.com>
 2022-11-14 19:00:39 +00:00
Sandeep Dhavale
5eca847f64 Add sepolicy rules for fastboot AIDL service am: 25ea0f418a am: e1f3eb7802 
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2293977

Change-Id: I0277ceac1dffc7fda32db324b68d14de6074b0ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-10 19:24:35 +00:00
Sandeep Dhavale
e1f3eb7802 Add sepolicy rules for fastboot AIDL service am: 25ea0f418a 
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2293977

Change-Id: I6b2c167429aa887acb2785b3bcbc7ef93852354d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-10 18:55:35 +00:00
Android Build Coastguard Worker
0d427ac3b1 Snap for 9274385 from 8140a50845 to tm-qpr2-release 
Change-Id: Iec078bca1f8102417f083146ed44d23db050c5de
 2022-11-10 00:03:22 +00:00
Rick Chen
be24daebb8 Allow CHRE to use EPOLLWAKEUP [DO NOT MERGE] am: 8140a50845 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20412548

Change-Id: I58f30ccee5a329ca8e523ab141a8c26b53eefed8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-09 16:09:12 +00:00
Rick Chen
8140a50845 Allow CHRE to use EPOLLWAKEUP [DO NOT MERGE] 
avc: denied { block_suspend } for comm="UsfTransport" capability=36 scontext=u:r:chre:s0 tcontext=u:r:chre:s0 tclass=capability2 permissive=0

Bug: 238666865
Test: Check no chre avc denied.
Change-Id: Ie936055550c6221beae394c264d664c1e76f946b
Signed-off-by: Rick Chen <rickctchen@google.com>
 2022-11-09 15:06:39 +00:00
Sandeep Dhavale
25ea0f418a Add sepolicy rules for fastboot AIDL service 
Bug: 205760652
Test: Build & Flash

Change-Id: I02fe5ca6c0276fd08cf5127b7d8b7313374f0cfe
Signed-off-by: Sandeep Dhavale <dhavale@google.com>
 2022-11-09 00:36:48 +00:00
Android Build Coastguard Worker
66c428c052 Snap for 9268991 from 8427e1db8d to tm-qpr2-release 
Change-Id: I1bfd71266bb5ea93d4d224d6e36cbf7e647404be
 2022-11-09 00:03:20 +00:00
George Lee
62ad032605 betterbug: Fixed sepolicy related to File [DO NOT MERGE] am: 8427e1db8d 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20408115

Change-Id: I9f393278644f6f8075514c9ed0183e49dc23a30c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-08 15:37:55 +00:00
George Lee
8427e1db8d betterbug: Fixed sepolicy related to File [DO NOT MERGE] 
Added File Attachment sepolicy for betterbug

Bug: 237287659
Test: Attach files from local directory and confirm it can be attached.
Signed-off-by: George Lee <geolee@google.com>
Change-Id: Ie2ee163794a4b955915a1b62b12d5aa625931034
 2022-11-08 15:11:18 +00:00
Roger Fang
2cbcb987d0 [DO NOT MERGE] sepolicy: add permission for CCA rate of pixelstats-vend am: 35112bba62 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20349111

Change-Id: Iec3b93d49714f78853a9b389a508e17673c2e764
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-08 10:17:32 +00:00
Roger Fang
35112bba62 [DO NOT MERGE] sepolicy: add permission for CCA rate of pixelstats-vend 
pixelstats-vend: type=1400 audit(0.0:7): avc: denied { read } for name="cca_rate_read_once" dev="sysfs" ino=100809 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 249225148
Test: Manually test passed

Change-Id: I802b79417cd9ce23386bb62eccb151610bfb8ac1
Signed-off-by: Roger Fang <rogerfang@google.com>
 2022-11-08 09:53:37 +00:00
Android Build Coastguard Worker
315e064377 Snap for 9264471 from 40be3818e1 to tm-qpr2-release 
Change-Id: If7219f91ab6bd5968bb61908b9c70e6bad1586cd
 2022-11-08 00:12:00 +00:00
George Lee
0cdf1cfe9b betterbug: Fixed sepolicy related to mediaserver [DO NOT MERGE] am: 40be3818e1 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20395514

Change-Id: Idff494bb1f32381d8a1db0dd137d5abe06f2a77e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-07 04:50:02 +00:00
Android Build Coastguard Worker
e5af3efc4d Merge cherrypicks of [20395514] into tm-qpr2-release. 
Change-Id: I14e2e328f9521e79502205acb74777ad4668aacc
 2022-11-07 03:33:34 +00:00
George Lee
a85164a440 betterbug: Fixed sepolicy related to mediaserver [DO NOT MERGE] 
Added mediaserver sepolicy for betterbug

Bug: 237287659
Test: Run same video capture on Betterbug to confirm video can be
captured.
Signed-off-by: George Lee <geolee@google.com>
Change-Id: I5226bdbf9d4fccb991161bbe6ac4edf8fd3b15a7
(cherry picked from commit 40be3818e1)
Merged-In: I5226bdbf9d4fccb991161bbe6ac4edf8fd3b15a7
 2022-11-07 03:33:32 +00:00
Android Build Coastguard Worker
29e1cd1b85 [coastguard skipped] Merge sparse cherrypicks from sparse-9258676-L67400000957223967 into tm-qpr2-release. 
Change-Id: Id392951cf8ff3b3bf2d43922494c6241cf2341c1
 2022-11-07 03:20:00 +00:00
Android Build Coastguard Worker
00acd4815a Merge cherrypicks of [20395514] into sparse-9258676-L67400000957223967. 
Change-Id: I5e69a83ba3bb9de15a4abb08d1b1aaf738edd691
 2022-11-07 03:15:41 +00:00
George Lee
293b13687f betterbug: Fixed sepolicy related to mediaserver [DO NOT MERGE] 
Added mediaserver sepolicy for betterbug

Bug: 237287659
Test: Run same video capture on Betterbug to confirm video can be
captured.
Signed-off-by: George Lee <geolee@google.com>
Change-Id: I5226bdbf9d4fccb991161bbe6ac4edf8fd3b15a7
(cherry picked from commit 40be3818e1)
Merged-In: I5226bdbf9d4fccb991161bbe6ac4edf8fd3b15a7
 2022-11-07 03:15:39 +00:00
George Lee
40be3818e1 betterbug: Fixed sepolicy related to mediaserver [DO NOT MERGE] 
Added mediaserver sepolicy for betterbug

Bug: 237287659
Test: Run same video capture on Betterbug to confirm video can be
captured.
Signed-off-by: George Lee <geolee@google.com>
Change-Id: I5226bdbf9d4fccb991161bbe6ac4edf8fd3b15a7
 2022-11-05 18:45:08 +00:00
Android Build Coastguard Worker
d09561718e Snap for 9257771 from f9552297fa to tm-qpr2-release 
Change-Id: If6565d08d8c3062edb53d2d60b25637f223e7cdc
 2022-11-05 01:03:03 +00:00
Star Chang
f7f9aa1304 Add sepolicy for TWT to dumpstate am: f9552297fa 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20118653

Change-Id: I7bb658e06b8e95be2933ac4ae45bd2e0208a851e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2022-11-04 02:10:03 +00:00