Commit graph

1875 commits

Author SHA1 Message Date
Nicolas Geoffray
2f94cdf9f1 Merge "Allow ssr_detector_app writes to system_app_data_file." am: 073de4fba6 am: 0590da44cf am: b84e18b8ae
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2319817

Change-Id: Ibca1f8b4e6d1e74896cdbcea324225d67dcc60b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 10:46:56 +00:00
Nicolas Geoffray
b84e18b8ae Merge "Allow ssr_detector_app writes to system_app_data_file." am: 073de4fba6 am: 0590da44cf
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2319817

Change-Id: I5c11172d6fb7b167500633ebba07c48281cd5296
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 10:11:54 +00:00
Nicolas Geoffray
0590da44cf Merge "Allow ssr_detector_app writes to system_app_data_file." am: 073de4fba6
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2319817

Change-Id: I0e29c8a6435b71ff567d03572606cbcba3f76c1b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 09:43:15 +00:00
Nicolas Geoffray
073de4fba6 Merge "Allow ssr_detector_app writes to system_app_data_file." 2022-11-29 09:00:12 +00:00
Adam Shih
304509819e move touch dump to gs-common
Bug: 256521567
Test: adb bugreport
Change-Id: I198c227508606baf434de456f80477ce6bebcede
2022-11-29 04:47:15 +00:00
Ziyi Cui
8586ba78c2 gs201-sepolicy:move perf_metrics genf_contexts from gs201 to gs-common
Bug: 227809911
Bug: 232541623
Test: test adb bugreport
Change-Id: I83fc6c8b1adffe9a58e1a3389036461db49efe77
Signed-off-by: Ziyi Cui <ziyic@google.com>
2022-11-29 01:02:45 +00:00
Sandeep Dhavale
6d7bc9aed7 Add fastboot sepolicy changes to allow wiping of device am: 89f5fff668 am: 6f2812426a am: 537b43c395
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2316638

Change-Id: I4254bd608d9a942bf0e3643ca802ec4565dccc22
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 00:08:44 +00:00
Sandeep Dhavale
537b43c395 Add fastboot sepolicy changes to allow wiping of device am: 89f5fff668 am: 6f2812426a
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2316638

Change-Id: I129d2a7ab2effbcb93b15a21b539da1e11b8861f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-28 23:36:23 +00:00
Sandeep Dhavale
6f2812426a Add fastboot sepolicy changes to allow wiping of device am: 89f5fff668
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2316638

Change-Id: Ib362d72f41b9955e46350e45250c077c703a0734
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-28 23:09:09 +00:00
Stephen Crane
5cd114d3a0 Allow Trusty storageproxy property
Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready
when the data filesystems are ready for use, and allows vendor init to
query and wait on this property.

Test: build, flash, test app loading
Bug: 258018785
Change-Id: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
Merged-In: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
2022-11-28 19:48:56 +00:00
Sandeep Dhavale
89f5fff668 Add fastboot sepolicy changes to allow wiping of device
With new AIDL fastboot service, wiping permissions need to be added
for hal_fastboot_default.

Bug: 260140380
Test: fastboot -w

Change-Id: I08e98461d0697d7539e14435acdacc3cc64eab3d
Signed-off-by: Sandeep Dhavale <dhavale@google.com>
2022-11-28 17:53:51 +00:00
Nicolas Geoffray
4293206c86 Allow ssr_detector_app writes to system_app_data_file.
Bug: 260557058
Test: m
Change-Id: Ibd028690a9d8661be8769d1b8f0c4e3a1f0fe985
2022-11-28 17:27:46 +00:00
Cheng Chang
5b3d90132a gps: nstandby path depend on platform
Bug: 259353063
Test: no avc denied about nstandby
Change-Id: Ibf72cfd37837d2a9024b82118cd045a2724c9179
2022-11-24 06:54:13 +00:00
Ziyi Cui
2e98f5f763 gs201-sepolicy: pixelstats:remove type definition to perf-metrics
move type definition to gs-common

Bug: 227809911
Bug: 232541623
Test: Tested perf-metrics
Change-Id: I8120f682b12137dfea164912efa0fa0417cb5dd3
Signed-off-by: Ziyi Cui <ziyic@google.com>
2022-11-24 00:10:39 +00:00
Android Build Coastguard Worker
6d747832d4 Snap for 9325773 from a2e6c51431 to tm-qpr2-release
Change-Id: Id78c1384afcaba07108b288832af644549ae5ed7
2022-11-24 00:04:01 +00:00
Steve Pfetsch
65d7ed0931 [automerger skipped] gs201-sepolicy: provide permission for TouchInspector app [DO NOT MERGE] am: a2e6c51431 am: f85b2edd47 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20521667

Change-Id: Ib705d4a3620b640d3a8478dd34e272087a5eba99
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-23 21:34:37 +00:00
Steve Pfetsch
f85b2edd47 gs201-sepolicy: provide permission for TouchInspector app [DO NOT MERGE] am: a2e6c51431
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20521667

Change-Id: I60d8fcd79b4620a20b6c06d27a7286cd585676ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-23 20:59:08 +00:00
Stephen Crane
c03e9b58db Allow Trusty storageproxy property
Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready
when the data filesystems are ready for use, and allows vendor init to
query and wait on this property.

Test: build, flash, test app loading
Bug: 258018785
Change-Id: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
2022-11-23 18:45:55 +00:00
Adam Shih
2dc65d6b5c use gs-common thermal dump
Bug: 257880034
Test: adb bugreport
Change-Id: Ib5940bce520ca04ee6cb31f5268f0f86dedadf6e
2022-11-23 14:38:22 +08:00
Steve Pfetsch
a2e6c51431 gs201-sepolicy: provide permission for TouchInspector app [DO NOT MERGE]
Resolve these access violations:
avc: denied { write } for name="driver_test" dev="proc" ino=4026535572
scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:proc_touch:s0
tclass=file permissive=1 app=com.google.touch.touchinspector
avc: denied { open } for path="/proc/fts/driver_test" dev="proc"
ino=4026535572 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector
avc: denied { getattr } for path="/proc/fts/driver_test" dev="proc"
ino=4026535572 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector
avc: denied { read } for name="driver_test" dev="proc" ino=4026535572
scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:proc_touch:s0
tclass=file permissive=1 app=com.google.touch.touchinspector

avc: denied { open } for path="/proc/fts_ext/driver_test" dev="proc"
ino=4026535574 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector
avc: denied { getattr } for path="/proc/fts_ext/driver_test" dev="proc"
ino=4026535574 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector

Bug: 182118395
Signed-off-by: Steve Pfetsch <spfetsch@google.com>
Change-Id: Ia3bd2323b77134b8e47d858f36756780dec98c19
2022-11-22 23:48:19 +00:00
Android Build Coastguard Worker
600f28c3f3 [coastguard skipped] Merge sparse cherrypicks from sparse-9293603-L15900000957431128 into tm-qpr2-release.
Change-Id: I3df1268e623a75d523d461655228eb6c170a7355
2022-11-18 19:06:30 +00:00
Android Build Coastguard Worker
e4b0d83bbf Merge cherrypicks of [20468124] into sparse-9293603-L15900000957431128.
Change-Id: I47486945d527102e8df6e6ffdf45bfd0620b61bb
2022-11-18 19:01:40 +00:00
George Lee
71560f7402 gs201-sepolicy: Add BrownoutDetection app [DO NOT MERGE]
This app files bugreport for user-debug build with reboot reason = ocp
or uvlo.  Removed the dependency on BetterBug.

Bug: 237287659
Test: Ensure bugreport is generated under user-debug build with reboot
reason = ocp or uvlo.
Signed-off-by: George Lee <geolee@google.com>
Change-Id: Ib8fceb62e66e9d561a6597687ea3cbe5ac9a832d
(cherry picked from commit d59612c409)
Merged-In: Ib8fceb62e66e9d561a6597687ea3cbe5ac9a832d
2022-11-18 19:01:31 +00:00
Adam Shih
80f2221562 move focaltech sepolicy to gs-common
Bug: 256521567
Test: adb bugreport
Change-Id: If58b8df0b89dc4d20240af46502a94eebe81f66f
2022-11-18 13:27:11 +08:00
Adam Shih
4952bdc68c move syna settings to gs-common
Bug: 256521567
Test: adb bugreport
Change-Id: Idbec89a1a2c8bac63850ad4915a40500d067d49e
2022-11-17 10:33:25 +08:00
Android Build Coastguard Worker
2110e8f7dc Snap for 9301146 from d59612c409 to tm-qpr2-release
Change-Id: I4ecf9d49686fb11f23d96ceaa9ab78c824ed376a
2022-11-17 00:07:02 +00:00
George Lee
49fc98da5c [automerger skipped] gs201-sepolicy: Add BrownoutDetection app [DO NOT MERGE] am: d59612c409 am: 0aa587a6e8 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20468124

Change-Id: I6c0a57179d13d57b8503b049204f3b3414e8efa5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-16 19:53:13 +00:00
George Lee
0aa587a6e8 gs201-sepolicy: Add BrownoutDetection app [DO NOT MERGE] am: d59612c409
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20468124

Change-Id: I453ce49a6e5794baba7a84b0ecc691ec8884b07f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-16 18:34:54 +00:00
George Lee
d59612c409 gs201-sepolicy: Add BrownoutDetection app [DO NOT MERGE]
This app files bugreport for user-debug build with reboot reason = ocp
or uvlo.  Removed the dependency on BetterBug.

Bug: 237287659
Test: Ensure bugreport is generated under user-debug build with reboot
reason = ocp or uvlo.
Signed-off-by: George Lee <geolee@google.com>
Change-Id: Ib8fceb62e66e9d561a6597687ea3cbe5ac9a832d
2022-11-16 18:20:57 +00:00
Adam Shih
60b73a5b28 remove raven touch path
Bug: 256521567
Test: device does not have the file
Change-Id: I1c0335536f7039724f7e6594fd3959610b56335e
2022-11-16 07:42:22 +00:00
Android Build Coastguard Worker
f15ca4355e Snap for 9290907 from 4baa8bea9c to tm-qpr2-release
Change-Id: Ia21ce6e83871b55b7b76dd41a5f16ce026be054d
2022-11-15 00:07:08 +00:00
Minchan Kim
07433db0bb dumpstate: allow dumpstate access pixel specific trace events am: 4baa8bea9c am: b16dcce743
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20414645

Change-Id: I78e48709d51616f071517138d97230b9a02e2351
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-14 19:52:49 +00:00
Minchan Kim
b16dcce743 dumpstate: allow dumpstate access pixel specific trace events am: 4baa8bea9c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20414645

Change-Id: Iee880e55f465d0a5e885778c3b5b055e43e98ba5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-14 19:20:40 +00:00
Minchan Kim
4baa8bea9c dumpstate: allow dumpstate access pixel specific trace events
At bugreport, it's useful to debug problems with having trace events.
Allow dumpstate access pixel trace event directory and files.

Test: "adb bugreport" includes trace event capture.
Bug: 238728493
Change-Id: Ia3fe7c149bfa0d0d192070ff28513384898af917
Signed-off-by: Minchan Kim <minchan@google.com>
2022-11-14 19:00:39 +00:00
Ziyi Cui
e43c8b3913 gs201-sepolicy: pixelstats: enable pixelstats access to perf-metrics
enable pixelstats access to sysfs path, define sysfs_perfmetrics

Bug: 227809911
Bug: 232541623
Test: Tested perf-metrics
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: If1b95148b59a6816c6795921018dfae68d80550b
2022-11-11 18:00:55 +00:00
Sandeep Dhavale
5d03dcc5cf Add sepolicy rules for fastboot AIDL service am: 25ea0f418a am: e1f3eb7802 am: 5eca847f64
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2293977

Change-Id: I322f88288feab1a217b60f2954c08b12176c66ca
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-10 20:41:59 +00:00
Sandeep Dhavale
5eca847f64 Add sepolicy rules for fastboot AIDL service am: 25ea0f418a am: e1f3eb7802
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2293977

Change-Id: I0277ceac1dffc7fda32db324b68d14de6074b0ae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-10 19:24:35 +00:00
Sandeep Dhavale
e1f3eb7802 Add sepolicy rules for fastboot AIDL service am: 25ea0f418a
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2293977

Change-Id: I6b2c167429aa887acb2785b3bcbc7ef93852354d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-10 18:55:35 +00:00
Adam Shih
92e5ed6d55 move sensors dump to gs-common
Bug: 250475720
Test: adb bugreport
Change-Id: I09553d0facd7fdca13a8a3e4bdcb70be8265db25
2022-11-10 05:20:48 +00:00
Adam Shih
e8712e4c93 remove edgetpu folder
Bug: 258114806
Test: build pass with the setting still active
Change-Id: I9cdf2bbe318647e1f02f152661e57f8430a9a1cb
2022-11-10 03:19:25 +00:00
Rick Chen
e43ab3c52a Allow CHRE to use EPOLLWAKEUP
avc: denied { block_suspend } for comm="UsfTransport" capability=36 scontext=u:r:chre:s0 tcontext=u:r:chre:s0 tclass=capability2 permissive=0

Bug: 238666865
Test: Check no chre avc denied.
Change-Id: Ie936055550c6221beae394c264d664c1e76f946b
Signed-off-by: Rick Chen <rickctchen@google.com>
2022-11-10 01:16:43 +00:00
Android Build Coastguard Worker
0d427ac3b1 Snap for 9274385 from 8140a50845 to tm-qpr2-release
Change-Id: Iec078bca1f8102417f083146ed44d23db050c5de
2022-11-10 00:03:22 +00:00
Rick Chen
765aa8ec3a [automerger skipped] Allow CHRE to use EPOLLWAKEUP [DO NOT MERGE] am: 8140a50845 am: be24daebb8 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20412548

Change-Id: I77d96dfca2940796bee44f8b07c66621afbf2e02
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-09 16:39:34 +00:00
Rick Chen
be24daebb8 Allow CHRE to use EPOLLWAKEUP [DO NOT MERGE] am: 8140a50845
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20412548

Change-Id: I58f30ccee5a329ca8e523ab141a8c26b53eefed8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-09 16:09:12 +00:00
Rick Chen
8140a50845 Allow CHRE to use EPOLLWAKEUP [DO NOT MERGE]
avc: denied { block_suspend } for comm="UsfTransport" capability=36 scontext=u:r:chre:s0 tcontext=u:r:chre:s0 tclass=capability2 permissive=0

Bug: 238666865
Test: Check no chre avc denied.
Change-Id: Ie936055550c6221beae394c264d664c1e76f946b
Signed-off-by: Rick Chen <rickctchen@google.com>
2022-11-09 15:06:39 +00:00
Sandeep Dhavale
25ea0f418a Add sepolicy rules for fastboot AIDL service
Bug: 205760652
Test: Build & Flash

Change-Id: I02fe5ca6c0276fd08cf5127b7d8b7313374f0cfe
Signed-off-by: Sandeep Dhavale <dhavale@google.com>
2022-11-09 00:36:48 +00:00
Android Build Coastguard Worker
66c428c052 Snap for 9268991 from 8427e1db8d to tm-qpr2-release
Change-Id: I1bfd71266bb5ea93d4d224d6e36cbf7e647404be
2022-11-09 00:03:20 +00:00
George Lee
d21c509931 [automerger skipped] betterbug: Fixed sepolicy related to File [DO NOT MERGE] am: 8427e1db8d am: 62ad032605 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20408115

Change-Id: I74f102d1a28ca56849c8fc4ccf36fdea757be4d4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-08 16:27:33 +00:00
George Lee
62ad032605 betterbug: Fixed sepolicy related to File [DO NOT MERGE] am: 8427e1db8d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20408115

Change-Id: I9f393278644f6f8075514c9ed0183e49dc23a30c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-08 15:37:55 +00:00
George Lee
8427e1db8d betterbug: Fixed sepolicy related to File [DO NOT MERGE]
Added File Attachment sepolicy for betterbug

Bug: 237287659
Test: Attach files from local directory and confirm it can be attached.
Signed-off-by: George Lee <geolee@google.com>
Change-Id: Ie2ee163794a4b955915a1b62b12d5aa625931034
2022-11-08 15:11:18 +00:00