Evolution-X-Tensor/device_google_gs201
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2474 commits 1 branch 0 tags 63 MiB
Commit graph

2474 commits

This branch
This branch
All branches
Author SHA1 Message Date
Rubin Xu
d9b51a61ce Revert "Remove persist.bootanim.color property definitions" 
Revert submission 26301396-bootanim_prop

Reason for revert: DroidMonitor-triggered revert due to breakage https://android-build.corp.google.com/quarterdeck/?branch=git_main&target=sdk_goog3_x86_64-trunk_staging-userdebug&lkgb=11487950&lkbb=11488141&fkbb=11488141

Bug: 326521604

Reverted changes: /q/submissionid:26301396-bootanim_prop

Change-Id: Ia393a62bd05546f19e326cce013a009ad77c5d52
 2024-02-23 12:25:04 +00:00
Thiébaud Weksteen
4baa59a176 Remove persist.bootanim.color property definitions 
These now belong to the platform policy.

Bug: 321088135
Test: build
Change-Id: I9d92456d7e790398a79a941738e3290975f7b659
 2024-02-23 02:59:53 +00:00
Will McVicker
9be1081f00 Update tcpm i2c sepolicy with new device name 
The new name fixes uninformative kernel wakelock names.

Bug: 315190967
Bug: 323447554
Change-Id: I88ecec344fd1eb84c5ca12a6bd3fad38cc40295b
 2024-02-22 17:54:36 +00:00
Lei Ju
967204e373 [gs201] Use common settings for Contexthub HAL 
The change also labeled files under /data/vendor/chre/ to grant
required access.

Test: compilation
Bug: 248615564
Change-Id: Ia96b7a592523e7b5e64acb8cb7ae4f0f1fc3a78b
 2024-02-18 11:43:27 -08:00
Jacky Liu
28c042f51a Update i2c device paths 
Update i2c device paths with static bus numbers.

Bug: 323447554
Test: Boot to home
Change-Id: I3d41e1819aa7df896322a0dca44449c1e871dff8
 2024-02-06 16:16:53 +00:00
Wilson Sung
51d66f9b58 Update SELinux error 
Test: scanBugreport
Bug: 323086890
Test: scanAvcDeniedLogRightAfterReboot
Bug: 323086703
Change-Id: Idfe9e28e668b0b268acbaa68ae23083972dd146f
 2024-01-31 02:58:24 +00:00
Xin Li
f3a672ab0c [automerger skipped] Merge Android 24Q1 Release (ab/11220357) am: 0395eebcad -s ours 
am skip reason: Merged-In I3381aaa1e08637c1cc8eb278bd775c81b32ed3bd with SHA-1 04bc1d210a is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/25973468

Change-Id: I737857f2de84411f52bf91c44c0b1b2527bf86ec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-01-31 02:03:14 +00:00
Darren Hsu
1f8b299ace sepolicy: allow hal_power_stats to read sysfs_display 
avc:  denied  { read } for  name="available_disp_stats"
dev="sysfs" ino=76162 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 317767775
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: I272f69f4c4720eb4800a8a13ef62e1ab34cbaedf
Signed-off-by: Darren Hsu <darrenhsu@google.com>
 2024-01-29 05:59:52 +00:00
Jack Wu
f32bd56cb0 dontaudit on dir search for vendor_charger_debugfs 
Bug: 307863370
Change-Id: I6da7b9426cdcc6152ff05ef7cd0cf18b718ab875
Signed-off-by: Jack Wu <wjack@google.com>
 2024-01-26 20:13:23 +08:00
Wilson Sung
bbb8e0618f Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 322036333
Test: scanBugreport
Bug: 322035303
Bug: 315104803
Test: scanAvcDeniedLogRightAfterReboot
Bug: 322036333
Bug: 315104803
Change-Id: Ide2a5f5d6636d0374e724de9991a71123396a85f
 2024-01-23 22:22:36 +00:00
Wilson Sung
f52acbf0cf Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 321731318
Test: scanBugreport
Bug: 315104803
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315104803
Change-Id: I5fc3c161edc102c2418145c69c1f94125d73783e
 2024-01-22 17:41:28 +00:00
Xin Li
0395eebcad Merge Android 24Q1 Release (ab/11220357) 
Bug: 319669529
Merged-In: I3381aaa1e08637c1cc8eb278bd775c81b32ed3bd
Change-Id: I75fb73fcb7f1adbcc511fec0e64c9fbd311e5e0c
 2024-01-17 22:12:36 -08:00
Wilson Sung
25835bcc61 Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 319403445
Test: scanBugreport
Bug: 319403445
Test: scanAvcDeniedLogRightAfterReboot
Bug: 319403445
Change-Id: I739ae803828538555a92989e71d85df5c77c0bd2
 2024-01-16 20:01:43 +00:00
Mahesh Kallelil
00d82676e9 Remove modem_svc selinux error from denials bug_map 
This property was removed and is not being used anymore. So
modem_svc will not need to read it.

Bug: 316816342
Change-Id: I9fe6002e34f7dd5fea0371d41d417c778c3d0905
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
 2024-01-12 06:43:47 +00:00
Ken Yang
f1c2498079 selinux: label wakeup for BMS I2C 0x36, 0x69 
Bug: 319035561
Change-Id: I45a80157d2a1d12a27a748aed31bb0ae5b08e7b5
Signed-off-by: Ken Yang <yangken@google.com>
 2024-01-10 06:12:19 +00:00
wenchangliu
997782c603 gs201: move mediacodec_samsung sepolicy to gs-common 
remove mediacodec_samsung sepolicy in legacy path since we will include it from gs-common.

Bug: 318793681
Test: build pass, camera record, youtube
Change-Id: I08a9ce89155324b0ac749bde4a9d205585a57320
Signed-off-by: wenchangliu <wenchangliu@google.com>
 2024-01-09 14:49:56 +00:00
timtmlin
8c955289ca Remove obsolete entries 
Bug: 315720727
Bug: 315721328
Test: make
Change-Id: I176dd469a78d8c6c80bdfc72f377951955ffd543
 2023-12-27 15:42:02 +08:00
Wilson Sung
8751aabb8a Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 317734397
Test: scanBugreport
Bug: 317734683
Bug: 315104803
Test: scanAvcDeniedLogRightAfterReboot
Bug: 317734963
Bug: 315104803
Change-Id: If88b24f947ed750b9e6ca8d83c1762e09b9cfebb
 2023-12-26 03:43:31 +00:00
Chi Zhang
c45f36f10e Allow GRIL to get power stats. 
SELinux : avc:  denied  { find } for pid=3147 uid=10219 name=android.hardware.power.stats.IPowerStats/default scontext=u:r:grilservice_app:s0:c219,c256,c512,c768 tcontext=u:object_r:hal_power_stats_service:s0 tclass=service_manager permissive=1

Bug: 286187143
Test: build and boot
Change-Id: I4588708267fc0f582c767a93e5a422a6e40b6369
 2023-12-19 12:21:45 -08:00
Wilson Sung
c131634ccf Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 316816342
Test: scanBugreport
Bug: 316817103
Bug: 315104803
Test: scanAvcDeniedLogRightAfterReboot
Bug: 316816342
Bug: 315104803
Change-Id: I4806c007ce70fab72a3754afbf3cf218dfc4b4fc
 2023-12-18 03:26:48 +00:00
Jenny Ho
04bc1d210a sepolicy: add read wlc sysfs permission 
12-12 18:33:17.960000  1000   906   906 I auditd  : type=1400 audit(0.0:10): avc:  denied  { read } for  comm="android.hardwar" name="type" dev="sysfs" ino=75851 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs_wlc:s0 tclass=file permissive=0

Bug: 306534100
Change-Id: I3381aaa1e08637c1cc8eb278bd775c81b32ed3bd
Signed-off-by: Jenny Ho <hsiufangho@google.com>
 2023-12-13 07:31:13 +00:00
Xin Li
ea3f55a026 [automerger skipped] Merge Android 14 QPR1 am: 5f9cc46c75 -s ours am: 7af1b9d304 -s ours am: e8cb7392ba -s ours 
am skip reason: Merged-In I8ee515e5ae5498296342d1f432ba9fa5716f221d with SHA-1 3dbfb9e35f is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2866361

Change-Id: I2dfdcd71b09693fc3e9f6de7f3c376b94ee43846
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-12-11 22:57:29 +00:00
Xin Li
e8cb7392ba [automerger skipped] Merge Android 14 QPR1 am: 5f9cc46c75 -s ours am: 7af1b9d304 -s ours 
am skip reason: Merged-In I8ee515e5ae5498296342d1f432ba9fa5716f221d with SHA-1 3dbfb9e35f is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2866361

Change-Id: If5980ad15bebe1ae2b83e8ea8971044658c1cbd8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-12-11 22:02:16 +00:00
Xin Li
7af1b9d304 [automerger skipped] Merge Android 14 QPR1 am: 5f9cc46c75 -s ours 
am skip reason: Merged-In I8ee515e5ae5498296342d1f432ba9fa5716f221d with SHA-1 3dbfb9e35f is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2866361

Change-Id: Iee7d406102b238debd416fed74724025a032c946
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-12-11 21:16:27 +00:00
Boon Jun Soh
a4fa4427bc Fix rlsservice sepolicy 
Allows bugreport generation

Bug: 315255760
Bug: 309379465
Test: abd bugreport & ensure lack of rls avc denied logs
Change-Id: Ic390d6ddd6bac78e5979c78bc6d02262f08b3468
 2023-12-11 07:30:24 +00:00
Wilson Sung
c118ee96ab Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 315720727
Test: scanBugreport
Bug: 315721328
Bug: 315104479
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315104479
Bug: 315720727
Change-Id: I936dba39a2d2cfbd6c2924aed7c1e2f8b9e00fb2
 2023-12-11 02:54:55 +00:00
Xin Li
5f9cc46c75 Merge Android 14 QPR1 
Merged-In: I8ee515e5ae5498296342d1f432ba9fa5716f221d
Bug: 315507370
Change-Id: Ifae34bf7561f1fd8f5997b3690ac0d9e5a0c3335
 2023-12-08 13:13:24 -08:00
Wilson Sung
bf2cd60aaa Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 315104803
Test: scanBugreport
Bug: 315104594
Bug: 315104803
Test: scanAvcDeniedLogRightAfterReboot
Bug: 315104803
Change-Id: Iad6a4ea7a3a58c161359a87a6083a015665d5b14
 2023-12-06 10:43:28 +00:00
David Drysdale
eca39285c5 Add Secretkeeper HAL 
Test: VtsAidlAuthGraphSessionTest
Bug: 306364873
Change-Id: I84d4098960d6445da1eb7e58e25a015cd591d6b3
 2023-12-06 10:21:00 +00:00
Jason Chiu
e2d9795558 gs201: move sepolicy related to bootctrl hal to gs-common 
Bug: 265063384
Change-Id: I30a71900c2a305b05ae6e17d658df32d95097d14
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
 2023-12-05 01:21:53 +08:00
Daniel Norman
505ad2718a [automerger skipped] Removes duplicate hidraw_device type definition. am: da3e268e93 am: bd29602190 -s ours am: 5d4faaf6e3 -s ours 
am skip reason: Merged-In Ia2f817ce99548c30f39a5164c8f6ec323db66155 with SHA-1 da3e268e93 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2855385

Change-Id: I719477aa9af015d4939c978a01dbbafac5569c4c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-12-01 19:29:26 +00:00
Daniel Norman
5d4faaf6e3 [automerger skipped] Removes duplicate hidraw_device type definition. am: da3e268e93 am: bd29602190 -s ours 
am skip reason: Merged-In Ia2f817ce99548c30f39a5164c8f6ec323db66155 with SHA-1 da3e268e93 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2855385

Change-Id: I7df8e98a28dbd73224a9ea246e704d077043018e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-12-01 19:24:43 +00:00
Daniel Norman
839207f924 [automerger skipped] Removes duplicate hidraw_device type definition. am: da3e268e93 am: 3dbfb9e35f am: 15b83914ec -s ours 
am skip reason: Merged-In Ia2f817ce99548c30f39a5164c8f6ec323db66155 with SHA-1 b204558a73 is already in history

Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2855385

Change-Id: I2ff31ebd9a9938a13c752d86c11e840a97420e0d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-12-01 19:23:58 +00:00
Daniel Norman
bd29602190 Removes duplicate hidraw_device type definition. am: da3e268e93 
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2855385

Change-Id: Ibde6e0c05689f4849c37564e310859d82af26c69
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-12-01 18:51:10 +00:00
Daniel Norman
15b83914ec Removes duplicate hidraw_device type definition. am: da3e268e93 am: 3dbfb9e35f 
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2855385

Change-Id: I5a54857df8d56e73b69d2f14eb39c7c58eb58fa8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-12-01 18:48:23 +00:00
Daniel Norman
3dbfb9e35f Removes duplicate hidraw_device type definition. am: da3e268e93 
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2855385

Change-Id: I8ee515e5ae5498296342d1f432ba9fa5716f221d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2023-12-01 18:45:34 +00:00
Daniel Norman
da3e268e93 Removes duplicate hidraw_device type definition. 
This type is now defined by the platform.

Bug: 303522222
Test: ls -z /dev/hidraw0
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:b204558a731d6a6a79b701dc8d7c017f59e9af93)
Merged-In: Ia2f817ce99548c30f39a5164c8f6ec323db66155
Change-Id: Ia2f817ce99548c30f39a5164c8f6ec323db66155
 2023-11-30 23:27:56 +00:00
Khoa Hong
a2847d4475 Suppress avc error log on debugfs's usb folder. 
The XHCI driver in kernel will write debugging information to DebugFS on
some USB host operations (for example: plugging in a USB headphone). We
are not using those information right now.

Bug: 305880925
Bug: 311088739
Test: No error when plugging a USB headphone in.
Change-Id: I3b53a3924a1fb3f2a37b0d8a1ae9df037cbc1dd2
 2023-11-30 14:59:09 +08:00
Randall Huang
2bd12254f4 Move sg_device related policy 
Bug: 312582937
Test: make selinux_policy
Change-Id: I18617643e66d6d2fe5ff19e440dea204206b3035
Signed-off-by: Randall Huang <huangrandall@google.com>
 2023-11-22 14:16:38 +08:00
Alex Iacobucci
8f30df1dcf aoc: add sysfs file entry 
Test: on device
Bug: 309950738
Change-Id: Ie5437a02b3a4f69d05ecb274169b4bd328315a22
Signed-off-by: Alex Iacobucci <alexiacobucci@google.com>
 2023-11-20 20:22:25 +00:00
Devika Krishnadas
3b40f18e29 Add Pixel Mapper as a sp-HAL 
Bug: 267352318

Change-Id: I460f379d8d6904f5bda3f67a7158c0ac6f2e7b5f
Signed-off-by: Devika Krishnadas <kdevika@google.com>
 2023-11-20 18:17:26 +00:00
Kyle Tso
7411947a02 dontaudit on dir search for vendor_votable_debugfs 
Bug: 305880925
Bug: 309379994
Change-Id: I7317bdb4ec80eb73a57cbb924d3132579e0b4f98
Signed-off-by: Kyle Tso <kyletso@google.com>
 2023-11-17 05:22:09 +00:00
Daniel Norman
b204558a73 Removes duplicate hidraw_device type definition. 
This type is now defined by the platform.

Bug: 303522222
Change-Id: Ia2f817ce99548c30f39a5164c8f6ec323db66155
Test: ls -z /dev/hidraw0
 2023-11-10 22:52:26 +00:00
Mike Wang
551b83f7c5 Change the MDS to platform app in selinux ap context. 
The MDS will be signed with platform key and become a platform app. To
make the selinux rules for modem_diagnostic_app work, need to set it to
platform app in app context.

Bug: 287683516

Test: Tested with both dev key or platform key signed MDS apps and the selinux rules works.
Change-Id: Ia0dacafc5e096c101e115b7356d8490391cb6bbd
 2023-11-08 05:23:35 +00:00
Rick Chen
e22b188d9d sensors: Move USF related sepolicy to gs-common. 
Bug: 305120274
Test: Compile pass. Flash the build to WHI_PRO devices and no sensor
      related avc denied log.
Change-Id: I48d959d439565e9c31ce83812bf29b6d8025c35b
Signed-off-by: Rick Chen <rickctchen@google.com>
 2023-11-07 06:49:05 +00:00
Wilson Sung
d50939ab22 Update SELinux error 
Test: scanBugreport
Bug: 309379465
Bug: 309379994
Test: scanAvcDeniedLogRightAfterReboot
Bug: 309379994
Change-Id: I45a01648f4c412b99e3fdcb70008e21c5d99fef3
 2023-11-06 08:01:29 +00:00
Mike Wang
ac39f865e1 Add selinux policy change to allow MDS access Samsung OemRil hal. 
Bug: 301641283

selinux log:
11-03 15:32:38.850  2643  2643 I auditd  : type=1400 audit(0.0:1616): avc:  denied  { call } for  comm="binder:2643_3" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.850  2643  2643 I binder:2643_3: type=1400 audit(0.0:1616): avc:  denied  { call } for  scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  2643  2643 I auditd  : type=1400 audit(0.0:1617): avc:  denied  { transfer } for  comm="binder:2643_3" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  2643  2643 I binder:2643_3: type=1400 audit(0.0:1617): avc:  denied  { transfer } for  scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  1095  1095 I auditd  : type=1400 audit(0.0:1618): avc:  denied  { call } for  comm="HwBinder:1095_1" scontext=u:r:rild:s0 tcontext=u:r:modem_diagnostic_app:s0:c512,c768 tclass=binder permissive=1
11-03 15:32:38.854  1095  1095 I HwBinder:1095_1: type=1400 audit(0.0:1618): avc:  denied  { call } for  scontext=u:r:rild:s0 tcontext=u:r:modem_diagnostic_app:s0:c512,c768 tclass=binder permissive=1

Change-Id: I62986e4bb0a4ed04616f8f3a8521f01934e63d74
 2023-11-06 02:30:52 +00:00
JimiChen
4f1d96210d Update SELinux policies for rlsservice 
1. Move rls_service context from vndservice_contexts to
   service_contexts.
2. Allow binder calls from rlsservice to servicemanager
3. Change rls_service type from vndservice_manager_type to
   service_manager_type.

Bug: 301520085
Test: GCA
Change-Id: Ief845b5691487f48d570c531de1ea99945087e42
 2023-11-03 03:33:52 +00:00
George Lee
435e0aafa8 pixelstats: Add Brownout Detection sepolicy 
Bug: 307392882
Test: Confirm lastmeal data upload
Change-Id: I9f7386c6c813c2790dcba1c79ce80531b6819b65
Signed-off-by: George Lee <geolee@google.com>
 2023-10-31 04:10:23 +00:00
Wilson Sung
037d5cccf3 Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 307863370
Change-Id: I6efdf65cee3cb3c13fbf091659a7afaf01222d55
 2023-10-30 03:37:45 +00:00