Commit graph

98 commits

Author SHA1 Message Date
Adam Shih
a787a30f8d review trusty domains
Bug: 198723116
Test: boot to home with trusty domains started
Change-Id: If5c6c0a75b6ad0eb032f637fd51ab2e4cea1e389
2021-10-08 10:48:04 +08:00
Adam Shih
34693feadc review mediacodec
Bug: 196916111
Test: boot with google and samsung mediacodec running
Change-Id: I7aaee5def774c8b7c19699f4da9b0b51f4869be9
2021-10-06 00:47:41 +00:00
Adam Shih
791aeae701 review ramdump_app
Bug: 196916111
Test: boot to home
Change-Id: I756f9022a7c20392dd8d07d2be7c972395176629
2021-10-06 00:47:41 +00:00
Adam Shih
1d0b6d22bc remove uwb app
uwb app does not exist on ROM 7793030
Bug: 196916111
Test: boot to home

Change-Id: I37d02e98589c7b3e894defa04de709ae0d904f09
2021-10-06 00:47:41 +00:00
Adam Shih
9c8da5b91c remove uwb
No uwb hal were found on ROM 7793030
Bug: 196916111
Test: Boot to home

Change-Id: I89ce68505c13b8de080d7aec5fc594fd2ada11c6
2021-10-06 00:47:41 +00:00
Kris Chen
fc82a2b242 fingerprint: Fix SELinux error
Fix the following SELinux error:
E init    : Could not start service 'vendor.fps_hal' as part of class 'late_start': File /vendor/bin/hw/android.hardware.biometrics.fingerprint@2.1-service.goodix(labeled "u:object_r:vendor_file:s0") has incorrect label or no domain transition from u:r:init:s0 to another SELinux domain defined.

Bug: 201500671
Test: build and run on DUT.
Change-Id: I85bd89edfaa6aaca003a5be21f4a045ce5944ab9
2021-10-05 03:44:27 +00:00
Adam Shih
16c10d6a33 review init-insmod-sh
Bug: 196916111
Test: boot to home
Change-Id: I085ff319e08c65cfc3d51fb480259fa137f8e3f3
2021-10-05 01:42:16 +00:00
Adam Shih
cccebb9eaf remove bugreport related sepolicy
Bug: 196916111
Test: adb bugreport
Change-Id: If52a43baed4022ffb3ecb248067eb1f4712c5feb
2021-10-05 01:42:16 +00:00
Adam Shih
798b72ad9c review hal_tetheroffload_default
Bug: 201599426
Test: boot to home with hal_tetheroffload_default started
Change-Id: I85491753dc7336eff285f61c71ad51840a13d7c3
2021-10-05 01:42:16 +00:00
Adam Shih
0a4f633d40 remove hal_wifi_ext
This is a shared module across qcom and google platform.
It is hard to tell whether it always behaves the same.
Bug: 201599426
Test: boot to home with hal_wifi_ext started

Change-Id: Ica8fa1168ecc07e3fed34bfad1c8d113e42bef22
2021-10-05 01:42:16 +00:00
Adam Shih
3f619c21ad centralize wifi_ext config
Bug: 201599426
Test: boot with wifi_ext started
Change-Id: I100363628bed970628cd3312a73f6d39bca533ef
2021-10-05 01:38:45 +00:00
Adam Shih
618ea304d4 review tcpdump_logger
Bug: 201599426
Test: boot with tcpdump_logger started
Change-Id: I023f48ea45b8d5a2180c91577241e9d9410469a4
2021-09-30 14:40:10 +08:00
Adam Shih
5ec277bf7c review hal_wifi
Bug: 201599426
Test: boot to home
Change-Id: I05538169275a7e8dc7638e075114440abda8c11b
2021-09-30 11:13:35 +08:00
Adam Shih
82cdc92c84 review hal_usb
Bug: 201599187
Test: boot with hal_usb_impl started
Change-Id: I77875c6911f6582454d666a57ed59cc1e386885b
2021-09-30 11:00:43 +08:00
Adam Shih
7ac4d6ae8c review hal_power_stats_default
Bug: 201230944
Test: make sure all file contexts took effect
Change-Id: Ifefb09f69b722747ccbb1c8cfbd423b27204e4e4
2021-09-28 14:42:35 +08:00
Adam Shih
fb11c9aaa0 restore rlsservice
01-01 20:00:12.304   425   425 E SELinux : avc:  denied  { add } for pid=704 uid=1000 name=rlsservice scontext=u:r:rlsservice:s0 tcontext=u:object_r:default_android_vndservice:s0 tclass=service_manager permissive=1
01-01 20:00:11.374     1     1 I SELinux : Context u:object_r:rlsservice_exec:s0 is not valid (left unmapped).
rlsservice uses apex, that's why it cannot be found in vendor.img
Bug: 196916111
Test: boot with rlsservice started

Change-Id: I8e052d75473f9431bbaeafb74d0e4043b02a1b51
2021-09-28 14:23:36 +08:00
Adam Shih
758dd9c309 review hal_power_default related contexts
Bug: 201230944
Test: make sure all contexts setting take effect
Change-Id: I1e3be99700560583153e70efdd21de5356b97c74
2021-09-28 13:54:03 +08:00
Adam Shih
cc911a8963 remove obsolete setting
Bug: 196916111
Test: boot to home
Change-Id: I7488b9d0789a002457891e0287d394ca281e945d
2021-09-28 13:19:35 +08:00
Adam Shih
8c532b1a65 remove un-reviewable sepolicy
Bug: 196916111
Test: boot to home
Change-Id: Idac79eece3a2e36eca8ad1b1e0ffc8d771f445d3
2021-09-28 08:04:57 +08:00
Adam Shih
ad68e7dc96 remove hal_health_default
It will be easier to review it through boot test
Bug: 201230944
Test: boot to home

Change-Id: I5008c4054ce04f062a8ca01a1e2bfd4cfe8daf70
2021-09-28 08:04:38 +08:00
Adam Shih
962e580a3c review hal_wlc
Bug: 201230944
Test: boot with hal_wlc started
Change-Id: I81d5ff7ed4745fb6d760f59c6acc50cc1732c95e
2021-09-28 08:03:15 +08:00
Adam Shih
53641894eb use gs101 neuralnetwork armnn
Bug: 196916111
Test: boot with armnn started
Change-Id: I50b1968034c60f922e679205e68841d63aadf5ae
2021-09-27 23:54:37 +00:00
Arthur Ishiguro
81ab5aceb9 Add Context Hub AIDL to gs201 sepolicy
Bug: 194285834
Test: None
Change-Id: Ife9b43cad3b3c500f549e72b4deda1836f6d79a0
2021-09-23 21:05:19 +00:00
Adam Shih
76b0758e9e review hal_thermal_default
Bug: 196916111
Test: boot to home
Change-Id: I6e804abe5761dae7a2563fbb514da293e7988fce
2021-09-23 00:25:52 +00:00
Adam Shih
48a9994ea4 remove obsolete sepolicy setting
ROM 7726471 does not have wlcfwupdate
Bug: 196916111
Test: build pass

Change-Id: I390552aa75a0139be2e23074f781c5aba513b4d5
2021-09-23 00:25:52 +00:00
Adam Shih
87f3dd73e5 organize wifi_sniffer
Bug: 196916111
Test: boot with wifi_sniffer started

Change-Id: I9bd8c7d517a4c264758db52054033cde2d84bf95
2021-09-22 04:56:01 +00:00
Adam Shih
54e3056f4c review vendor_battery_profile_prop
The action came from PTS
Bug: 196916111
Test: boot to home

Change-Id: I950fb0fa3fd959d3c176d5fc960b57f905034d67
2021-09-22 10:21:27 +08:00
Adam Shih
889f58606b remove untraceable rules
Bug: 196916111
Test: boot to home
Change-Id: I50ac7a469f76a25adca0ef3e3a9751a0e8afbd2a
2021-09-22 10:14:45 +08:00
Adam Shih
3f1c23ad58 rewrite hbmsv app
This app has different sources for every device
Bug: 196916111
Test: boot to home

Change-Id: Iccbdc94eb68c03a5e7b5f1081e802b29c11cb5b0
2021-09-17 12:46:12 +08:00
Adam Shih
368ac5f679 review hal_nfc_default
Bug: 196916111
Test: boot to home with nfc hal started
Change-Id: Iee8c30777f83788ff703c8094c03182171d713c5
2021-09-17 11:06:51 +08:00
Adam Shih
9ffc6d62b8 remove hal_camera_default
The file does not exist on ROM 7736863
Bug: 196916111
Test: boot to home

Change-Id: I40e64665c33869b93857798055ee1d8145a507aa
2021-09-16 14:13:30 +08:00
Adam Shih
18db3d30dd remove rlsservice
The file does not exist
Bug: 196916111
Test: boot to home

Change-Id: I1bd4b13be5912c2620fbfae2913f01543a09915f
2021-09-16 14:07:40 +08:00
Adam Shih
d57c9cd1fc review graphics related sepolicy
Bug: 196916111
Test: boot to home
Change-Id: I43a875fb69e4237009b0515d8db6ebac8e2982b5
2021-09-16 14:07:31 +08:00
Adam Shih
01d2b96516 restart dauntless sepolicy
Bug: 199685763
Test: build ROM with relevant modules labeled correctly
Change-Id: I9d01ad1dea9da059cb91142adadd3f55f50cf9ca
2021-09-16 04:45:52 +00:00
Adam Shih
256795caa7 review SSR app
Bug: 198532074
Test: boot with SSR app labeled
Change-Id: I7fd0765ffdcc5632be1c91a28de25c6e1e531e26
2021-09-14 04:00:15 +00:00
Adam Shih
349700cece remove twoshay
It does not eexist on raven claw on Build ID 7726471
Bug: 196916111
Test: boot to home

Change-Id: Ie358657de3f4dfd6704288798dc2a198f25ae419
2021-09-13 14:59:36 +08:00
Adam Shih
2a422d7159 remove fingerprint policy
Bug: 196916111
Test: boot ot home with fingerprint hal started
Change-Id: I24a81eb5bae26120e66e7d77f9672566bb1f049b
2021-09-13 14:59:36 +08:00
Adam Shih
953c43b31a remove untraceable rules
Bug: 196916111
Test: boot to home
01-01 12:00:13.140   903   903 I Binder:903_1: type=1400 audit(0.0:9): avc: denied { quotaget } for scontext=u:r:installd:s0 tcontext=u:object_r:modem_img_file:s0 tclass=filesystem permissive=1

Change-Id: Iec8f2495b13df6b035af0cf11f67cd1525bcf9ea
2021-09-13 14:59:16 +08:00
Adam Shih
0a091e5308 modulize drm modules
Bug: 199232842
Test: boot with drm modules started
Change-Id: Ic02f6c8498a4ac6cbda2b10b0e9647f733b54478
2021-09-08 13:49:49 +08:00
Adam Shih
ba469d27e4 remove obsolete devices
Bug: 196916111
Test: build pass
Change-Id: I3e0768802f4a49aad799e5053627f1f0328316f5
2021-09-08 13:04:43 +08:00
Adam Shih
cf1ea7aad5 review block devices
Bug: 196916111
Test: boot with those partition mounted with no avc error
Change-Id: I6248be92d19abf37f5b901aa6101436832813f42
2021-09-08 12:34:14 +08:00
Adam Shih
95cc78f004 review ofl_app
Bug: 198532074
Test: boot with ofl app labeled correctly
Change-Id: Ic00207c063e6c8771c2c6b077169ae1d25c77225
2021-09-08 12:17:23 +08:00
Adam Shih
89923acb04 review radio app
Bug: 198532074
Test: boot with app correctly labeled
Change-Id: Iba1f5c949052fafca8e629aba24484a7705f3f21
2021-09-08 11:27:34 +08:00
Adam Shih
948098bcd6 review hal_radioext_default
Bug: 198532074
Test: boot with hal_radioext_default started
Change-Id: I083fd55749f0d82cabe527e7fa611ad2633d0ecd
2021-09-08 10:54:34 +08:00
Adam Shih
aef3b66218 review con_monitor
bug: 198532074
Test: boot with the app labeled
Change-Id: I1d268c292603aabb25e5e626f442b39a7ad7b4e7
2021-09-06 11:31:36 +08:00
Adam Shih
2fc26d0a5e refactor ims app
Bug: 198532074
Test: boot with those apps labeled correctly
Change-Id: I15c559551b7af8a9688b4e489b6daeba032da308
2021-09-06 11:24:37 +08:00
Adam Shih
6f97e91778 review init.radio.sh
Bug: 198532074
Test: boot with init.radio.sh started
Change-Id: Ieb47925b319866cc648e4de9b34fc3153ba1717b
2021-09-06 10:59:10 +08:00
Adam Shih
98ebd6e7f1 review tee
Bug: 198723116
Test: boot with tee started
Change-Id: Ib50698834d16887fa00bdbbaf81801f1067909ba
2021-09-03 15:26:51 +08:00
Adam Shih
b05c0902ad refactor hal_secure_element
01-01 20:00:07.579   419   419 E SELinux : avc:  denied  { find } for interface=android.hardware.secure_element::ISecureElement sid=u:r:hal_secure_element_gto_ese2:s0 pid=748 scontext=u:r:hal_secure_element_gto_ese2:s0 tcontext=u:object_r:hal_secure_element_hwservice:s0 tclass=hwservice_manager permissive=1
01-01 20:00:07.595   419   419 E SELinux : avc:  denied  { add } for interface=android.hardware.secure_element::ISecureElement sid=u:r:hal_secure_element_gto_ese2:s0 pid=748 scontext=u:r:hal_secure_element_gto_ese2:s0 tcontext=u:object_r:hal_secure_element_hwservice:s0 tclass=hwservice_manager permissive=1
01-01 20:00:07.596   419   419 E SELinux : avc:  denied  { add } for interface=android.hidl.base::IBase sid=u:r:hal_secure_element_gto_ese2:s0 pid=748 scontext=u:r:hal_secure_element_gto_ese2:s0 tcontext=u:object_r:hidl_base_hwservice:s0 tclass=hwservice_manager permissive=1
01-01 20:00:07.597   419   419 E SELinux : avc:  denied  { find } for interface=android.hardware.secure_element::ISecureElement sid=u:r:hal_secure_element_gto:s0 pid=749 scontext=u:r:hal_secure_element_gto:s0 tcontext=u:object_r:hal_secure_element_hwservice:s0 tclass=hwservice_manager permissive=1
01-01 20:00:07.597   419   419 E SELinux : avc:  denied  { find } for interface=android.hardware.secure_element::ISecureElement sid=u:r:hal_secure_element_uicc:s0 pid=750 scontext=u:r:hal_secure_element_uicc:s0 tcontext=u:object_r:hal_secure_element_hwservice:s0 tclass=hwservice_manager permissive=1
01-01 20:00:07.599   419   419 E SELinux : avc:  denied  { add } for interface=android.hardware.secure_element::ISecureElement sid=u:r:hal_secure_element_uicc:s0 pid=750 scontext=u:r:hal_secure_element_uicc:s0 tcontext=u:object_r:hal_secure_element_hwservice:s0 tclass=hwservice_manager permissive=1
01-01 20:00:07.600   419   419 E SELinux : avc:  denied  { add } for interface=android.hidl.base::IBase sid=u:r:hal_secure_element_uicc:s0 pid=750 scontext=u:r:hal_secure_element_uicc:s0 tcontext=u:object_r:hidl_base_hwservice:s0 tclass=hwservice_manager permissive=1
01-01 20:00:07.601   419   419 E SELinux : avc:  denied  { add } for interface=android.hardware.secure_element::ISecureElement sid=u:r:hal_secure_element_gto:s0 pid=749 scontext=u:r:hal_secure_element_gto:s0 tcontext=u:object_r:hal_secure_element_hwservice:s0 tclass=hwservice_manager permissive=1
01-01 20:00:07.602   419   419 E SELinux : avc:  denied  { add } for interface=android.hidl.base::IBase sid=u:r:hal_secure_element_gto:s0 pid=749 scontext=u:r:hal_secure_element_gto:s0 tcontext=u:object_r:hidl_base_hwservice:s0 tclass=hwservice_manager permissive=1
09-03 10:51:44.574   419   419 E SELinux : avc:  denied  { find } for interface=vendor.samsung_slsi.telephony.hardware.radioExternal::IOemSlsiRadioExternal sid=u:r:hal_secure_element_uicc:s0 pid=750 scontext=u:r:hal_secure_element_uicc:s0 tcontext=u:object_r:hal_exynos_rild_hwservice:s0 tclass=hwservice_manager permissive=1
Bug: 198713948
Test: boot with secure_element started
Change-Id: Ie79b80f3c0fbe21c898e6a67384d98a2cc282f93

Change-Id: I14d9f01b6ef901fd87e8927d691ce96a9b174ed3
2021-09-03 15:26:38 +08:00
Adam Shih
18fb79d460 review rild
Bug: 198532074
Test: boot with rild started
Change-Id: Ic29d2cbbb9691f1386c024d1438fdd050ef14b8f
2021-09-03 15:25:10 +08:00