Adam Shih
3c494301c8
Move display dump to gs-common
...
Bug: 269212897
Test: adb bugreport
Change-Id: I8d2d0413987629bd3774034a5f99f5b7feb4b3ba
2023-03-07 12:35:16 +08:00
Adam Shih
8c4ca7b5a4
remove same_process_hal access from gxp firmware
...
Bug: 246218258
Test: boot with no relevant SELinux errors
Change-Id: I52c82ff4c70cb16057cf719059f63c3f9c381c46
2023-02-16 00:02:13 +00:00
Treehugger Robot
45583701ab
Merge "Map AIDL Gatekeeper to same policy as HIDL version" am: 643a4aa018
am: d67d52eb4f
am: 68c7241129
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2424367
Change-Id: Ic65e69e5095b5fadf7ebae056785b81d72144139
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-14 20:44:30 +00:00
Treehugger Robot
68c7241129
Merge "Map AIDL Gatekeeper to same policy as HIDL version" am: 643a4aa018
am: d67d52eb4f
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2424367
Change-Id: Ibf36bb7559b4a2a91dd6ce063db28828b80b90a5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-14 19:41:21 +00:00
Treehugger Robot
d67d52eb4f
Merge "Map AIDL Gatekeeper to same policy as HIDL version" am: 643a4aa018
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2424367
Change-Id: If7561935299aa965f69919dbac04fcf807bf7c7a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-14 18:56:36 +00:00
Adam Shih
333b450ee7
move tablet settings to gs-common
...
Bug: 240530709
Test: adb bugreport
Change-Id: I2bac842aaab1737b2fcecd232e82d49f00439607
2023-02-14 04:28:30 +00:00
Subrahmanyaman
b05ec9c753
Map AIDL Gatekeeper to same policy as HIDL version
...
Bug: 268342724
Test: VtsHalGatekeeperTargetTest
Change-Id: Ic2849f8f00aea80e707a85334364f8ecfe7a64e3
2023-02-08 18:36:45 +00:00
Sajid Dalvi
e80669242c
logbuffer: Add pcie driver support am: eb745cabd1
am: cf7bb88b7a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/21077111
Change-Id: I81cac496ef80ab9f41f6648e8a43fa277ec72d46
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-03 06:11:57 +00:00
Sajid Dalvi
cf7bb88b7a
logbuffer: Add pcie driver support am: eb745cabd1
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/21077111
Change-Id: I36a37418005f271ac2325ccf5b395086befdea5a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-02-03 05:41:29 +00:00
Sajid Dalvi
eb745cabd1
logbuffer: Add pcie driver support
...
Add logbuffer support to pcie driver to reduce dmesg spam.
Bug: 267495494
Change-Id: Id62006860e161730880aba61ea9974e006884e3e
Signed-off-by: Sajid Dalvi <sdalvi@google.com>
2023-02-02 21:31:31 +00:00
David Drysdale
1b4f3771ee
Map Rust KeyMint to same SELinux policy as C++
...
Allow the Rust and C++ implementations of the KeyMint HAL service to be
toggled easily, by mapping them to the same SELinux policy.
Bug: 197891150
Bug: 225036046
Test: VtsAidlKeyMintTargetTest with local changes, TreeHugger
Change-Id: I37f8016240097381410903f0f326dc16fc24db1e
2023-01-05 06:22:31 +00:00
Jenny Ho
5f6baf4bbd
Add sepolicy rule to allow dump battery maxfg history am: f5a88c35a4
am: 0e90b55ed9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20729299
Change-Id: Id1efeae084e9ddb3eaf9b4de678bc39193dfc863
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-16 08:04:34 +00:00
Jenny Ho
0e90b55ed9
Add sepolicy rule to allow dump battery maxfg history am: f5a88c35a4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20729299
Change-Id: I983b69e606a1e257380abcfaefacfcbd4aea651d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-16 07:26:40 +00:00
Jenny Ho
f5a88c35a4
Add sepolicy rule to allow dump battery maxfg history
...
android.hardwar: type=1400 audit(0.0:7): avc: denied { getattr } for path="/dev/maxfg_history" dev="tmpfs" ino=580 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0 bug=b/240632721
Bug: 254164096
Change-Id: I64ff95ba8db62a8f831d012b4cdf4e6ec973f086
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2022-12-15 03:03:01 +00:00
Adam Shih
92e5ed6d55
move sensors dump to gs-common
...
Bug: 250475720
Test: adb bugreport
Change-Id: I09553d0facd7fdca13a8a3e4bdcb70be8265db25
2022-11-10 05:20:48 +00:00
Adam Shih
e8712e4c93
remove edgetpu folder
...
Bug: 258114806
Test: build pass with the setting still active
Change-Id: I9cdf2bbe318647e1f02f152661e57f8430a9a1cb
2022-11-10 03:19:25 +00:00
Jenny Ho
4797944212
Add permission for logbuffer_bd am: 441a3ad3ef
am: fbec30a349
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20089144
Change-Id: I2f14b602e52674565fcb1a80f64da1ef2c100285
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-01 21:24:29 +00:00
Jenny Ho
fbec30a349
Add permission for logbuffer_bd am: 441a3ad3ef
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20089144
Change-Id: I627644e45a2c28d6af8dd6e9493de8577bbcaee8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-01 06:08:54 +00:00
Jenny Ho
441a3ad3ef
Add permission for logbuffer_bd
...
Bug: 242679204
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: Ie5c9829ee1a4980689c933273a273f1f4ac612b6
2022-11-01 05:34:18 +00:00
George Lee
13fbaff253
bcl: Add Mitigation Logger - Del gs201-sepolicy
...
Mitigation Logger logs battery related information for 1 second when it
is triggered by under voltage or over current interrupts. Information
collected is to help debug system brownout.
Bug: 228383769
Test: Boot and Test
Change-Id: Ia13f6b16dd35803873f20514c21a95ed8dd20a55
Signed-off-by: George Lee <geolee@google.com>
2022-10-31 14:17:55 +00:00
Krzysztof Kosiński
b84bba204b
Use generic wildcard for vendor libprotobuf. am: 36df3f715f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20190509
Change-Id: I2921fea6a332de2feca478b2365fe6dc29a9658a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-14 17:25:19 +00:00
Krzysztof Kosiński
36df3f715f
Use generic wildcard for vendor libprotobuf.
...
The suffix changes on each upgrade and the newest release uses
a two-part version number instead of a three-part one. Use a regex
that will match any suffix.
Bug: 203713560
Test: presubmit, log check
Change-Id: I7a3357d11c162a9bc24196bb232f58be9ba062ec
2022-10-14 17:18:38 +00:00
Adam Shih
8902c457d7
move trusty device to gs-common
...
Bug: 244504232
Test: adb bugreport
Change-Id: If0df8122e5655b659ac001d42b9a6cf28a59a627
2022-10-03 09:21:03 +08:00
Kyle Tso
c18eea71d7
Set sepolicy for shell script of disabling contaminant detection
...
(ported from Ib2e3cf498851c0c9e5e74aacc9bf391549c0ad1a)
Bug: 244658328
Signed-off-by: Kyle Tso <kyletso@google.com>
Change-Id: Idbfa55d4c7091ce2861600ff3881fcc7217ec662
Merged-In: Idbfa55d4c7091ce2861600ff3881fcc7217ec662
2022-09-29 13:33:28 +00:00
Kyle Tso
9bb5e3e05b
Set sepolicy for shell script of disabling contaminant detection
...
(ported from Ib2e3cf498851c0c9e5e74aacc9bf391549c0ad1a)
Bug: 244658328
Signed-off-by: Kyle Tso <kyletso@google.com>
Change-Id: Idbfa55d4c7091ce2861600ff3881fcc7217ec662
2022-09-29 03:10:51 +00:00
Chungjui Fan
5ea1982643
Add sepolicy of dumping LED file in dumpstate am: aa55cb6f2e
am: 9a70ccc6d6
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19893210
Change-Id: I5d13a2d75fd6bdc939a101b0178922a36d87f38a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-14 04:03:34 +00:00
Chungjui Fan
aa55cb6f2e
Add sepolicy of dumping LED file in dumpstate
...
Bug: 242300919
Change-Id: I14b0af18244c4a71fd7908fdb35e2e86354e02e0
2022-09-14 02:59:20 +00:00
Adam Shih
9c9ae24f64
remove global access to firmware mali
...
Bug: 220801802
Test: device can resume
Change-Id: Idf0fd84c2efa37c94e30c3f682a09e6546f50235
2022-09-12 12:58:29 +08:00
Adam Shih
8064010f8a
use gs-common insert module script
...
Bug: 243763292
Test: boot to home
Change-Id: I6f0c1a020ea2962f03df6794a6011a31d2244b1a
2022-09-06 12:41:01 +08:00
Robb Glasser
e95cf1f141
Give permissions to save usf stats and dump them in bugreports. am: feba667c23
am: 272b649cee
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19672405
Change-Id: I00c4c33c0ac37eb5f6b7a488066a2d49ad6cc59a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-25 04:06:33 +00:00
Robb Glasser
feba667c23
Give permissions to save usf stats and dump them in bugreports.
...
Creating a mechanism to save some USF stat history to device and pipe it
to bugreports. Granting permissions so that this can work.
Bug: 242320914
Test: Stats save and are visible in a bugreport.
Change-Id: Ie08fce80e79bd564ea58dab66ce8f0d9892d7020
2022-08-25 02:47:58 +00:00
Konstantin Vyshetsky
59d1913296
convert_to_ext4.sh: add sepolicy am: 07af2808d5
am: a8e3ff791c
am: d01c7c938b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19391424
Change-Id: I6c033c710a67e93fa0271a2800dc24efa3ee847d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 18:57:22 +00:00
Konstantin Vyshetsky
a8e3ff791c
convert_to_ext4.sh: add sepolicy am: 07af2808d5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19391424
Change-Id: Id303addc42a444642f827605404dca79044efd37
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-08-01 18:17:27 +00:00
Konstantin Vyshetsky
07af2808d5
convert_to_ext4.sh: add sepolicy
...
Add entries for convert_to_ext4.sh executable.
Bug: 239632964
Signed-off-by: Konstantin Vyshetsky <vkon@google.com>
Change-Id: I0d89aa88dab0ae5a4cf3d7b2e4423d1761868bea
2022-08-01 18:00:49 +00:00
Wiwit Rifa'i
d889102a8f
Add SE policies for HWC logs
...
Bug: 230361290
Test: adb bugreport
Test: adb shell vndservice call Exynos.HWCService 11 i32 0 i32 308 i32 1
Change-Id: I12e6c1b4527829699211dae379f1e44da069b974
2022-07-26 08:25:42 +00:00
Kyle Tso
c2ed52536e
Add logbuffer file_contexts
...
Bug: 237082721
Signed-off-by: Kyle Tso <kyletso@google.com>
Change-Id: Ieaf04f7381db1febe5a3899a727b6a49726bf10b
2022-07-09 07:22:55 +00:00
xiaofanj
da328e0a0f
modem_svc_sit: create oem test iodev
...
- Create radio_test_device for oem_test iodev.
- Grant modem_svc_sit to access radio_test_device.
Bug: 231380480
Signed-off-by: Xiaofan Jiang <xiaofanj@google.com>
Change-Id: Id06deedadf04c70b57e405a05533ed85764bdd1d
Merged-In: Id06deedadf04c70b57e405a05533ed85764bdd1d
2022-06-28 03:16:08 +00:00
George Chang
851a643c9e
Update nfc from hidl to aidl service
...
Bug: 216290344
Test: atest NfcNciInstrumentationTests
Test: atest VtsAidlHalNfcTargetTest
Merged-In: If1f57af334033f9bd7174c052767715c9916700f
Change-Id: If1f57af334033f9bd7174c052767715c9916700f
2022-06-01 06:19:26 +00:00
Ankit Goyal
5be857af43
Add SE policies for memtrack HAL
...
Bug: 220360577
Test: adb shell dumpsys meminfo
Change-Id: I4dfc0c016ccf980b4f7dabd2fb70d2466b69b5cc
2022-05-31 23:25:27 +00:00
George Lee
bc2cf5c153
bcl: Add Mitigation Logger - sepolicy
...
Mitigation Logger logs battery related information for 1 second when it
is triggered by under voltage or over current interrupts. Information
collected is to help debug system brownout.
Bug: 228383769
Test: Boot and Test
Signed-off-by: George Lee <geolee@google.com>
Change-Id: I9ac873d03d57d9a6db8d9233f25c8fabdfc399a5
2022-05-26 21:39:25 -07:00
eddielan
36a6b23804
sepolicy: Add SW35 HIDL factory service into sepolicy
...
Bug: 231549391
Test: Build Pass
Change-Id: If5c1bc5ddf6a1fa753ac65b6b4c5983775f2f704
(cherry picked from commit aeb9bd0406
)
Merged-In: If5c1bc5ddf6a1fa753ac65b6b4c5983775f2f704
2022-05-27 01:29:31 +00:00
Dinesh Yadav
6513479fe8
Add SEPolicy for gxp_metrics_logger.so logging to stats service
...
In order to access the gxp metrics library from the google camera
app (product partition), we need to create an SELinux exception for
the related shared library (in vendor) it uses.
This CL adds the same_process_hal_file tag to allow this exception.
Bug: 177236353
Test: App can load the .so and creates a VLOG message after this change.
Before: No permission to access namespace.
After: GCA able to access the gxp_metrics_logger.so
Change-Id: I453b66b30eb51ebd22fda750d272cf35574301f6
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2022-05-20 17:05:23 +00:00
Dinesh Yadav
e40cd2ac42
Add SEPolicy settings for android logging/tracing service for GXP
...
This change also adds support for SEPolicy to access perfetto which was
missing in ag/17818623.
Bug: 217289052
Change-Id: Ic5599d0be783b65102b3b0ffef27e66f1f6904da
2022-05-19 03:31:32 +00:00
Quang Luong
a36285b0de
Revert "Add SEPolicy settings for android logging/tracing servic..."
...
Revert submission 17817048-gxp-firmware-log-trace-metrics-service
Reason for revert: breaks CTS tests: b/230031232
Reverted Changes:
I3c9574dca:Add SEPolicy settings for android logging/tracing ...
I6bced8246:Add Firmware Log/Trace service to GXP project outp...
Icfc0ca30f:Add gxp_logging_service as an android service
Change-Id: I4ae6a63b6e2b58a094f45771de87fc3799f99e67
2022-04-22 00:11:02 +00:00
Dinesh Yadav
5f4f4de205
Add SEPolicy settings for android logging/tracing service for GXP
...
Change-Id: I3c9574dca5e52356b77172c886ac8971584d3012
2022-04-21 06:22:37 +00:00
Alex Hong
09ef2e08c5
Update the SELinux context for dumpstate HAL service
...
Test: atest VtsHalDumpstateTargetTest pass
Bug: 223118410
Change-Id: Ie237579f974bab8bf8d35211367457be178a262b
2022-04-18 07:45:28 +00:00
Oleg Matcovschi
a79b98eb25
selinux: remove dpm_[ab] from custom_ab_block_device's
...
Signed-off-by: Oleg Matcovschi <omatcovschi@google.com>
Change-Id: I774065f331b1f2970b0fee5a41faa097fa88caf8
2022-04-15 19:08:17 +00:00
Stephane Lee
5ce2f99f38
ODPM: Add ODPM config file to be read by powerstats 2.0
...
Test: Ensure that there are no sepolicy errors when
/data/vendor/powerstats/odpm_config exists
Bug: 228112997
Change-Id: I094c29c4d1a82bccfabde7a5511f4aa833c2cd35
2022-04-08 02:49:40 +00:00
Ray Chi
3fdb24bdc1
Revert "add sepolicy for set_usb_irq.sh"
...
This reverts commit 6733f9667d
.
Bug: 225789036
Test: build pass
Change-Id: If43c8db71c737d509b1dfd098503f564a06bf046
2022-03-29 15:45:30 +08:00
Omer Osman
e5cc5f7937
Add hidraw device and Dynamic Sensor SE Linux policy
...
Test: Incoming HID data from Pixel Buds
Change-Id: I77489100e13d892fb7d3a7cee9734de044795dec
2022-03-27 23:26:29 +00:00