Commit graph

1828 commits

Author SHA1 Message Date
George Lee
0aa587a6e8 gs201-sepolicy: Add BrownoutDetection app [DO NOT MERGE] am: d59612c409
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20468124

Change-Id: I453ce49a6e5794baba7a84b0ecc691ec8884b07f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-16 18:34:54 +00:00
George Lee
d59612c409 gs201-sepolicy: Add BrownoutDetection app [DO NOT MERGE]
This app files bugreport for user-debug build with reboot reason = ocp
or uvlo.  Removed the dependency on BetterBug.

Bug: 237287659
Test: Ensure bugreport is generated under user-debug build with reboot
reason = ocp or uvlo.
Signed-off-by: George Lee <geolee@google.com>
Change-Id: Ib8fceb62e66e9d561a6597687ea3cbe5ac9a832d
2022-11-16 18:20:57 +00:00
Adam Shih
60b73a5b28 remove raven touch path
Bug: 256521567
Test: device does not have the file
Change-Id: I1c0335536f7039724f7e6594fd3959610b56335e
2022-11-16 07:42:22 +00:00
Minchan Kim
07433db0bb dumpstate: allow dumpstate access pixel specific trace events am: 4baa8bea9c am: b16dcce743
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20414645

Change-Id: I78e48709d51616f071517138d97230b9a02e2351
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-14 19:52:49 +00:00
Minchan Kim
b16dcce743 dumpstate: allow dumpstate access pixel specific trace events am: 4baa8bea9c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20414645

Change-Id: Iee880e55f465d0a5e885778c3b5b055e43e98ba5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-14 19:20:40 +00:00
Minchan Kim
4baa8bea9c dumpstate: allow dumpstate access pixel specific trace events
At bugreport, it's useful to debug problems with having trace events.
Allow dumpstate access pixel trace event directory and files.

Test: "adb bugreport" includes trace event capture.
Bug: 238728493
Change-Id: Ia3fe7c149bfa0d0d192070ff28513384898af917
Signed-off-by: Minchan Kim <minchan@google.com>
2022-11-14 19:00:39 +00:00
Ziyi Cui
e43c8b3913 gs201-sepolicy: pixelstats: enable pixelstats access to perf-metrics
enable pixelstats access to sysfs path, define sysfs_perfmetrics

Bug: 227809911
Bug: 232541623
Test: Tested perf-metrics
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: If1b95148b59a6816c6795921018dfae68d80550b
2022-11-11 18:00:55 +00:00
Sandeep Dhavale
5d03dcc5cf Add sepolicy rules for fastboot AIDL service am: 25ea0f418a am: e1f3eb7802 am: 5eca847f64
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2293977

Change-Id: I322f88288feab1a217b60f2954c08b12176c66ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-10 20:41:59 +00:00
Sandeep Dhavale
5eca847f64 Add sepolicy rules for fastboot AIDL service am: 25ea0f418a am: e1f3eb7802
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2293977

Change-Id: I0277ceac1dffc7fda32db324b68d14de6074b0ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-10 19:24:35 +00:00
Sandeep Dhavale
e1f3eb7802 Add sepolicy rules for fastboot AIDL service am: 25ea0f418a
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2293977

Change-Id: I6b2c167429aa887acb2785b3bcbc7ef93852354d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-10 18:55:35 +00:00
Adam Shih
92e5ed6d55 move sensors dump to gs-common
Bug: 250475720
Test: adb bugreport
Change-Id: I09553d0facd7fdca13a8a3e4bdcb70be8265db25
2022-11-10 05:20:48 +00:00
Adam Shih
e8712e4c93 remove edgetpu folder
Bug: 258114806
Test: build pass with the setting still active
Change-Id: I9cdf2bbe318647e1f02f152661e57f8430a9a1cb
2022-11-10 03:19:25 +00:00
Rick Chen
e43ab3c52a Allow CHRE to use EPOLLWAKEUP
avc: denied { block_suspend } for comm="UsfTransport" capability=36 scontext=u:r:chre:s0 tcontext=u:r:chre:s0 tclass=capability2 permissive=0

Bug: 238666865
Test: Check no chre avc denied.
Change-Id: Ie936055550c6221beae394c264d664c1e76f946b
Signed-off-by: Rick Chen <rickctchen@google.com>
2022-11-10 01:16:43 +00:00
Rick Chen
765aa8ec3a [automerger skipped] Allow CHRE to use EPOLLWAKEUP [DO NOT MERGE] am: 8140a50845 am: be24daebb8 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20412548

Change-Id: I77d96dfca2940796bee44f8b07c66621afbf2e02
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-09 16:39:34 +00:00
Rick Chen
be24daebb8 Allow CHRE to use EPOLLWAKEUP [DO NOT MERGE] am: 8140a50845
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20412548

Change-Id: I58f30ccee5a329ca8e523ab141a8c26b53eefed8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-09 16:09:12 +00:00
Rick Chen
8140a50845 Allow CHRE to use EPOLLWAKEUP [DO NOT MERGE]
avc: denied { block_suspend } for comm="UsfTransport" capability=36 scontext=u:r:chre:s0 tcontext=u:r:chre:s0 tclass=capability2 permissive=0

Bug: 238666865
Test: Check no chre avc denied.
Change-Id: Ie936055550c6221beae394c264d664c1e76f946b
Signed-off-by: Rick Chen <rickctchen@google.com>
2022-11-09 15:06:39 +00:00
Sandeep Dhavale
25ea0f418a Add sepolicy rules for fastboot AIDL service
Bug: 205760652
Test: Build & Flash

Change-Id: I02fe5ca6c0276fd08cf5127b7d8b7313374f0cfe
Signed-off-by: Sandeep Dhavale <dhavale@google.com>
2022-11-09 00:36:48 +00:00
George Lee
d21c509931 [automerger skipped] betterbug: Fixed sepolicy related to File [DO NOT MERGE] am: 8427e1db8d am: 62ad032605 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20408115

Change-Id: I74f102d1a28ca56849c8fc4ccf36fdea757be4d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-08 16:27:33 +00:00
George Lee
62ad032605 betterbug: Fixed sepolicy related to File [DO NOT MERGE] am: 8427e1db8d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20408115

Change-Id: I9f393278644f6f8075514c9ed0183e49dc23a30c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-08 15:37:55 +00:00
George Lee
8427e1db8d betterbug: Fixed sepolicy related to File [DO NOT MERGE]
Added File Attachment sepolicy for betterbug

Bug: 237287659
Test: Attach files from local directory and confirm it can be attached.
Signed-off-by: George Lee <geolee@google.com>
Change-Id: Ie2ee163794a4b955915a1b62b12d5aa625931034
2022-11-08 15:11:18 +00:00
Roger Fang
c7ff18f562 [automerger skipped] [DO NOT MERGE] sepolicy: add permission for CCA rate of pixelstats-vend am: 35112bba62 am: 2cbcb987d0 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20349111

Change-Id: Iedd8728ec712d40f90abad7bbdd6283cd03fbec4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-08 11:03:14 +00:00
Roger Fang
2cbcb987d0 [DO NOT MERGE] sepolicy: add permission for CCA rate of pixelstats-vend am: 35112bba62
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20349111

Change-Id: Iec3b93d49714f78853a9b389a508e17673c2e764
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-08 10:17:32 +00:00
Roger Fang
35112bba62 [DO NOT MERGE] sepolicy: add permission for CCA rate of pixelstats-vend
pixelstats-vend: type=1400 audit(0.0:7): avc: denied { read } for name="cca_rate_read_once" dev="sysfs" ino=100809 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 249225148
Test: Manually test passed

Change-Id: I802b79417cd9ce23386bb62eccb151610bfb8ac1
Signed-off-by: Roger Fang <rogerfang@google.com>
2022-11-08 09:53:37 +00:00
George Lee
e601e2bc0f [automerger skipped] betterbug: Fixed sepolicy related to mediaserver [DO NOT MERGE] am: 40be3818e1 am: 0cdf1cfe9b -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20395514

Change-Id: I2d586a8c819bca4b0ad2841b08539ab0f1485bc0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-07 05:23:13 +00:00
George Lee
0cdf1cfe9b betterbug: Fixed sepolicy related to mediaserver [DO NOT MERGE] am: 40be3818e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20395514

Change-Id: Idff494bb1f32381d8a1db0dd137d5abe06f2a77e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-07 04:50:02 +00:00
George Lee
40be3818e1 betterbug: Fixed sepolicy related to mediaserver [DO NOT MERGE]
Added mediaserver sepolicy for betterbug

Bug: 237287659
Test: Run same video capture on Betterbug to confirm video can be
captured.
Signed-off-by: George Lee <geolee@google.com>
Change-Id: I5226bdbf9d4fccb991161bbe6ac4edf8fd3b15a7
2022-11-05 18:45:08 +00:00
Star Chang
3073884607 Add sepolicy for TWT to dumpstate am: f9552297fa am: f7f9aa1304
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20118653

Change-Id: I7227638b2e344130f8543c7f693efeddee12e086
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-04 02:57:02 +00:00
Star Chang
f7f9aa1304 Add sepolicy for TWT to dumpstate am: f9552297fa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20118653

Change-Id: I7bb658e06b8e95be2933ac4ae45bd2e0208a851e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-04 02:10:03 +00:00
Star Chang
f9552297fa Add sepolicy for TWT to dumpstate
Bug: 253348062
Test: dump bugreport ok
Signed-off-by: Star Chang <starchang@google.com>
Change-Id: I0958fef496302df3f5e6e188f15117de78988a62
2022-11-04 01:31:19 +00:00
Puma Hsu
d155bce16c Add xhci-hcd-exynos.6 wakeup path for suspend_control am: 9877742035 am: ea1be0c069
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20288288

Change-Id: I68e8119ea0a950aa83dded293bff318b37062547
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-02 15:42:08 +00:00
Puma Hsu
ea1be0c069 Add xhci-hcd-exynos.6 wakeup path for suspend_control am: 9877742035
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20288288

Change-Id: I2083d21b860b0c6179427cd9972eafe47f292db1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-02 15:09:41 +00:00
Puma Hsu
9877742035 Add xhci-hcd-exynos.6 wakeup path for suspend_control
Bug: 255270480
Test: verified with forrest test build
Change-Id: I5e2eed4d5e20361d86f6d6be8c92ca337e4ee004
Signed-off-by: Puma Hsu <pumahsu@google.com>
2022-11-02 07:39:53 +00:00
Amith Dsouza
74f21ee10e Fix untracked SELinux denials on boot am: be2e1b2ede am: 5653e43b44 am: 7fa80e3581
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2280310

Change-Id: I2ce5838152cf7eb66a1f37e7c7dab5a4d7e81c50
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-02 07:14:30 +00:00
Amith Dsouza
7fa80e3581 Fix untracked SELinux denials on boot am: be2e1b2ede am: 5653e43b44
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2280310

Change-Id: I6300bd318ffdfad334caa60b5e0ea286d0d503c7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-02 04:49:26 +00:00
Amith Dsouza
5653e43b44 Fix untracked SELinux denials on boot am: be2e1b2ede
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2280310

Change-Id: Ic521a8ea94ec22b17bf4a327c8244d0d04c269e5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-02 04:07:20 +00:00
George Lee
f03c6fb1d8 betterbug: Update selinux policy for betterbug
Update startup_bugreport_requested property to vendor_public for
betterbug to access.

Bug: 237287659
Test: Load Betterbug for accessing startup bugreport reason property
Signed-off-by: George Lee <geolee@google.com>
Change-Id: Idc07e3f4ce425c0167654743fbe1ad8b7ece5e15
(cherry picked from commit d1e0b924ae)
2022-11-02 02:47:37 +00:00
Amith Dsouza
be2e1b2ede Fix untracked SELinux denials on boot
Error:
avc:  denied  { find } for interface=vendor.samsung_slsi.telephony.hardware.radioExternal::IOemSlsiRadioExternal sid=u:r:platform_app:s0:c512,c768 pid=2641 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:hal_exynos_rild_hwservice:s0 tclass=hwservice_manager permissive=0

Bug: 254453654
Test: Flash device, rebuild driver blobs, check logs after boot

Change-Id: I43d524f781c1dda1d3d5291f661bc549fdbb99d6
2022-11-02 00:55:45 +00:00
Gabriel Biren
6202c44816 Update gs201 sepolicy to allow the wifi_ext AIDL service.
Changes should be similar to aosp/2262723.

Bug: 205044134
Test: m + Pre-submit tests
Change-Id: Ia1c784953225cb48b5320d8f1f5346a3cace005b
2022-11-01 23:19:51 +00:00
pointerkung
9b2ff35965 Add required sepolicy rule for Camera am: 0810814b49 am: 4d803ef7d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20137924

Change-Id: I2f733ea78ece93ae7d0aa5c62e0d7c49e80db5b6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-01 21:24:40 +00:00
Jenny Ho
4797944212 Add permission for logbuffer_bd am: 441a3ad3ef am: fbec30a349
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20089144

Change-Id: I2f14b602e52674565fcb1a80f64da1ef2c100285
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-01 21:24:29 +00:00
George Lee
69d0a6e78f [conflict] betterbug: Update selinux policy for betterbug am: d1e0b924ae am: 0511a5b342
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20276308

Bug: 256639156
Change-Id: Id42a5dc034bfe4ce5ad3606ba30423ba9775b125
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-01 17:00:22 +00:00
pointerkung
4d803ef7d6 Add required sepolicy rule for Camera am: 0810814b49
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20137924

Change-Id: I520c8b5c9321a87009f430bc673eb84fb9e3a9bf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-01 12:18:53 +00:00
pointerkung
0810814b49 Add required sepolicy rule for Camera
Grant access for TNR max_freq to let libperfmgr can control it via powerhint.

Bug: 243729855
Test: Build pass, GCA, Control TNR max_freq via powerhint
Change-Id: I8f8faa360d9908afe3fe0de3c322a2be356b86c8
2022-11-01 11:33:43 +00:00
Jenny Ho
fbec30a349 Add permission for logbuffer_bd am: 441a3ad3ef
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20089144

Change-Id: I627644e45a2c28d6af8dd6e9493de8577bbcaee8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-01 06:08:54 +00:00
Jenny Ho
441a3ad3ef Add permission for logbuffer_bd
Bug: 242679204
Signed-off-by: Jenny Ho <hsiufangho@google.com>
Change-Id: Ie5c9829ee1a4980689c933273a273f1f4ac612b6
2022-11-01 05:34:18 +00:00
George Lee
0511a5b342 betterbug: Update selinux policy for betterbug am: d1e0b924ae
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20276308

Change-Id: I2445a6fda2fdca67b38040ea5dac95d30136b070
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-31 17:08:15 +00:00
George Lee
d1e0b924ae betterbug: Update selinux policy for betterbug
Update startup_bugreport_requested property to vendor_public for
betterbug to access.

Bug: 237287659
Test: Load Betterbug for accessing startup bugreport reason property
Signed-off-by: George Lee <geolee@google.com>
Change-Id: Idc07e3f4ce425c0167654743fbe1ad8b7ece5e15
2022-10-31 16:30:39 +00:00
George Lee
13fbaff253 bcl: Add Mitigation Logger - Del gs201-sepolicy
Mitigation Logger logs battery related information for 1 second when it
is triggered by under voltage or over current interrupts.  Information
collected is to help debug system brownout.

Bug: 228383769
Test: Boot and Test
Change-Id: Ia13f6b16dd35803873f20514c21a95ed8dd20a55
Signed-off-by: George Lee <geolee@google.com>
2022-10-31 14:17:55 +00:00
Jack Wu
7e6dc0eabb ignore shell access on wlc
Bug: 238260741
Test: boot
Change-Id: I5f1d321df2daa2ec785e2ad1ac2e02478568b688
Signed-off-by: Jack Wu <wjack@google.com>
2022-10-29 05:44:27 +00:00
eddielan
b26281d43b fingerprint: Allow fingerprint to access thermal hal am: ba0eb551e9 am: 234029f1cf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19694493

Change-Id: Iac775cc47444b835800065fe01877ba14f59d602
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-28 17:22:48 +00:00