Commit graph

2474 commits

Author SHA1 Message Date
Alex Hong
4443c79bbb Remove the sepolicy for tetheroffload service
Test: m checkvintf
      run vts -m VtsHalTetheroffloadControlV1_0TargetTest
Bug: 207076973
Bug: 214494717
Change-Id: I5ecec46512ff4e1ae6c52147cfa0179e5fc93420
Merged-In: I5ecec46512ff4e1ae6c52147cfa0179e5fc93420
2022-02-24 04:03:32 +00:00
Jinting Lin
4859443fe4 [automerger skipped] Adds mnt file and batt info permissions for modem app am: e6af74a6c4 -s ours
am skip reason: Merged-In Icd02d4f8757719afed020c27a90812921d5f37ec with SHA-1 2c914cd02c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16984429

Change-Id: I104197e4346c57a6bd8ea7acc0245c025841c42f
2022-02-24 04:03:03 +00:00
Krzysztof Kosiński
62f0ad72b9 Camera: re-add TEE access. am: 3884738538 am: 084defd392
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16980638

Change-Id: Idbc0156037e4583d366664547d79d03ada12c3b1
2022-02-24 03:06:26 +00:00
Joseph Jang
5523e01f2c identity: Add sepolicy permission for hal_identity_citadel to find hal_remotelyprovisionedcomponent_service am: 5fb066e143
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16984428

Change-Id: I7e43e5ece9d6f552a69905ceeb271a6e0d319a5e
2022-02-24 02:52:40 +00:00
Joseph Jang
5fb066e143 identity: Add sepolicy permission for hal_identity_citadel to find hal_remotelyprovisionedcomponent_service
log:
SELinux : avc:  denied  { find } for pid=885 uid=9999
name=android.hardware.security.keymint.IRemotelyProvisionedComponent/strongbox
scontext=u:r:hal_identity_citadel:s0
tcontext=u:object_r:hal_remotelyprovisionedcomponent_service:s0
tclass=service_manager permissive=0

Bug: 218613398
Change-Id: I124ea5898609a3f68bee13b6db931878252d4081
2022-02-24 02:20:37 +00:00
Jinting Lin
0022390c95 [automerger skipped] Adds logging related properties for logger app am: 7ba8b12bb8 -s ours
am skip reason: Merged-In I3917ce13f51a5ccb3304eb2db860f4da8424438b with SHA-1 e65363450c is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16983456

Change-Id: Ife58cc0ac85ee0154c335950c161ae5008cfaa65
2022-02-24 02:08:25 +00:00
Krzysztof Kosiński
5eae12b451 Camera: re-add TEE access. am: 3884738538
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16980638

Change-Id: Idfdd081b47c1a747f11352a8b2beaa0bdc6ba2df
2022-02-24 01:56:26 +00:00
Adam Shih
a7bd615bd6 [automerger skipped] avoid pixellogger from crashing am: b158d7b088 am: 79481cc1b3 -s ours
am skip reason: skipped by user adamshih

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16983453

Change-Id: Id3fe0b0c2910f9555e6ca50476276b522e34b428
2022-02-24 01:46:20 +00:00
Jack Yu
769645d0c1 uwb: permissions for factory uwb calibration file am: 97a25bf259
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16986452

Change-Id: Ie1aba2e1a2bb3c9d79caa04f454df271a531a9b0
2022-02-24 01:34:13 +00:00
Darren Hsu
7306a159f7 Allow hal_power_stats to read UWB sysfs nodes am: 8f90cf5408
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16986443

Change-Id: If507662ac99de839314da9d03df7f3b7eb44bafb
2022-02-24 01:33:49 +00:00
Jinting Lin
b9b03f61f8 Adds mnt file and batt info permissions for modem app am: e6af74a6c4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16984429

Change-Id: Ie7d2cfab67eaf4ec2477f4dbaccc056b42b9df3a
2022-02-24 01:32:56 +00:00
Jack Yu
97a25bf259 uwb: permissions for factory uwb calibration file
Allow nfc hal accessing /data/vendor/uwb.

Bug: 220167093
Test: build pass
Merged-In: I33093231577b71c24d5bf6f980c7021cc546fa98
Change-Id: I33093231577b71c24d5bf6f980c7021cc546fa98
2022-02-24 01:02:52 +00:00
Darren Hsu
8f90cf5408 Allow hal_power_stats to read UWB sysfs nodes
Bug: 219369324
Test: Dump power stats and see no avc denials
Change-Id: Ib1ac15867f51069bef3f68e91bf65b842b7c0734
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-02-24 01:02:11 +00:00
Jinting Lin
43dd982131 Adds logging related properties for logger app am: 7ba8b12bb8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16983456

Change-Id: I4de5106dddc7252b298fd12496afae00f2464ca3
2022-02-23 17:29:05 +00:00
Krzysztof Kosiński
084defd392 Camera: re-add TEE access. am: 3884738538
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16980638

Change-Id: I6f455d8b6bb2d558ce9fbf5a1aaea66674fc43be
2022-02-23 17:24:31 +00:00
Adam Shih
79481cc1b3 avoid pixellogger from crashing am: b158d7b088
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16983453

Change-Id: I15f04a00b6e2ac537bf565423f3b190b1869e3ab
2022-02-23 17:18:06 +00:00
Jinting Lin
e6af74a6c4 Adds mnt file and batt info permissions for modem app
Bug: 220076340
Merged-In: Icd02d4f8757719afed020c27a90812921d5f37ec
Change-Id: Icd02d4f8757719afed020c27a90812921d5f37ec
(cherry picked from commit 2c914cd02c)
2022-02-23 05:55:57 +00:00
Jinting Lin
7ba8b12bb8 Adds logging related properties for logger app
Bug: 220073302
Merged-In: I3917ce13f51a5ccb3304eb2db860f4da8424438b
Change-Id: I3917ce13f51a5ccb3304eb2db860f4da8424438b
(cherry picked from commit e65363450c)
2022-02-23 03:16:00 +00:00
Krzysztof Kosiński
3884738538 Camera: re-add TEE access.
Face auth is being investigated for Android T, so this access
is still needed. It was initially omitted from ag/16719985 because
it did not launch in Android S.

Bug: 220886644
Test: build for P10
Change-Id: I61ecc685397fcab6f356e98abfc88e8cb34254f4
2022-02-23 02:51:40 +00:00
Adam Shih
b158d7b088 avoid pixellogger from crashing
Bug: 220935985
Test: pixellogger stays alive for 2 minutes
Change-Id: I9f70f1a936731332ada3abfa945e60f8aff58279
2022-02-23 09:58:37 +08:00
Robb Glasser
340ceb1bfb Fix sensors_hal selinux denials. am: 727d070b13 am: b273426e98
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16945897

Change-Id: I2dd11ffcf9de7efd0f58fd809dca79c92687846f
2022-02-22 20:39:55 +00:00
Robb Glasser
b273426e98 Fix sensors_hal selinux denials. am: 727d070b13
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16945897

Change-Id: Ic2597d188b9f5b4fd8d779d22ec8bc57ab02d16a
2022-02-22 19:46:30 +00:00
Robb Glasser
727d070b13 Fix sensors_hal selinux denials.
Bug: 214473093
Bug: 218930975
Bug: 210067282
Test: com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: Ifd865efd0544f246d1c188f3edce9f05f27313d2
2022-02-22 19:25:50 +00:00
Krzysztof Kosiński
9257cd2a09 Camera: add setsched capability. am: 7997d6a8a0 am: 5975dd89c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16943772

Change-Id: I18ad1039c0bd0d91d42d6acb27f6e1da412f7c6b
2022-02-22 10:26:21 +00:00
Ted Lin
5b6a5292c3 hal_health_default: Fix avc denials
12-02 11:15:45.224   756   756 I health@2.1-serv: type=1400 audit(0.0:2270): avc: denied { search } for name="thermal" dev="tmpfs" ino=1028 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:thermal_link_device:s0 tclass=dir permissive=1
12-02 11:15:45.224   756   756 I health@2.1-serv: type=1400 audit(0.0:2271): avc: denied { search } for name="thermal" dev="sysfs" ino=16790 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=dir permissive=1
12-02 11:15:45.224   756   756 I health@2.1-serv: type=1400 audit(0.0:2273): avc: denied { open } for path="/sys/devices/virtual/thermal/thermal_zone13/mode" dev="sysfs" ino=17285 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=1
12-02 11:15:45.224   756   756 I health@2.1-serv: type=1400 audit(0.0:2272): avc: denied { write } for name="mode" dev="sysfs" ino=17285 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=1

Bug:208721638
Test: adb bugreport
Change-Id: I4d9491862ff1bcc88f89b1478497ac569e3d1df1
Signed-off-by: Ted Lin <tedlin@google.com>
2022-02-22 09:11:43 +00:00
Krzysztof Kosiński
7fa1b979e3 Camera: add setsched capability. am: 7997d6a8a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16943772

Change-Id: I3cf5fac31683c37c05f427d8226e013f11e3f5a2
2022-02-22 08:51:22 +00:00
Adam Shih
f3a6247154 Let GPU reload am: b322df9960 am: 37c001e736
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16972944

Change-Id: I23b27fef19cd8bbfdd81c23f72562cc48ffc6ab9
2022-02-22 08:49:00 +00:00
Krzysztof Kosiński
5975dd89c8 Camera: add setsched capability. am: 7997d6a8a0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16943772

Change-Id: I0dd3ce7386c49db308618ceb5b75c04e1c58c5fe
2022-02-22 08:48:23 +00:00
Krzysztof Kosiński
7997d6a8a0 Camera: add setsched capability.
The camera HAL needs to increase the priority of some threads
to reduce frame drops.

Bug: 205072921
Test: Inspected logcat on P10
Change-Id: Ife5194c780a91f32d718f8db38e41f2f47fb929f
2022-02-22 08:12:57 +00:00
Adam Shih
37c001e736 Let GPU reload am: b322df9960
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16972944

Change-Id: I378151b91d62b5c0eca3f876a82a5d73886dbe18
2022-02-22 07:43:55 +00:00
Adam Shih
b322df9960 Let GPU reload
02-22 12:59:47.955    15    15 I mali 28000000.mali: reloading firmware
02-22 12:59:47.955    15    15 W mali 28000000.mali: loading /vendor/firmware/mali_csffw.bin failed with error -13
02-22 12:59:47.955    15    15 W mali 28000000.mali: Direct firmware load for mali_csffw.bin failed with error -2
02-22 12:59:47.955    15    15 E mali 28000000.mali: Failed to reload firmware image 'mali_csffw.bin'
02-22 12:59:47.920    15    15 W kworker/0:1: type=1400 audit(0.0:10): avc: denied { read } for name="mali_csffw.bin" dev="dm-4" ino=5689716 scontext=u:r:kernel:s0 tcontext=u:object_r:same_process_hal_file:s0 tclass=file permissive=0

Bug: 220801802
Test: device can resume after an hour of suspend.
Change-Id: Ib252d6b1ac50ba7578a2ebf8cd8745004c385378
2022-02-22 07:05:54 +00:00
neoyu
3cbca42df5 Fix SELinux errors for ims am: 9d12b77b67 am: faac353bfb
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962938

Change-Id: Icf4c3c27289c35edafa7f1d17d1a8ad52a62af73
2022-02-22 03:10:32 +00:00
neoyu
faac353bfb Fix SELinux errors for ims am: 9d12b77b67
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962938

Change-Id: I9cc01f3a6b6ef01dbe3e6356e124c55354510559
2022-02-22 02:27:58 +00:00
neoyu
9d12b77b67 Fix SELinux errors for ims
Sync different parts from P21 to P22

Bug: 220244357
Test: manual
Change-Id: Idf8e5e612b46370812be0907e75e9ae43f37ab7b
2022-02-22 01:43:29 +00:00
Jack Yu
62d5b40d35 uwb: permissions for factory uwb calibration file
Allow nfc hal accessing /data/vendor/uwb.

Bug: 220167093
Test: build pass
Change-Id: I33093231577b71c24d5bf6f980c7021cc546fa98
2022-02-22 01:24:47 +00:00
Jinting Lin
2c914cd02c Adds mnt file and batt info permissions for modem app
Bug: 220076340
Change-Id: Icd02d4f8757719afed020c27a90812921d5f37ec
2022-02-22 01:16:41 +00:00
neoyu
1bdb2ced7c Fix SELinux errors for vendor_init am: 7a34798ea4 am: d889ee6353
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962933

Change-Id: I71911df1c95d7f1570d49eb50490039c7352c2d0
2022-02-21 12:02:00 +00:00
neoyu
d889ee6353 Fix SELinux errors for vendor_init am: 7a34798ea4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962933

Change-Id: I22d3af89dd84fab0330f1180b39a55157add6f33
2022-02-21 10:32:55 +00:00
neoyu
662c55b911 Fix SELinux errors for rild am: 26aa7c150e am: 05fbdcedc3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962925

Change-Id: I6b323d560fe4fc45c009dd3e32659b12d2d6ba41
2022-02-21 07:34:49 +00:00
Tai Kuo
528d78f539 Remove hal_vibrator_default avc tracking denials am: bc3924f61d am: 373795e6a5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16939010

Change-Id: Icb76e10d0fb5a72ab54b4d069cd3cdf71d6bc530
2022-02-21 07:33:50 +00:00
wenchangliu
8087834fce Allow hal_graphics_allocator to access vscaler_heap_device am: 84d53775e1 am: 44eba6830b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962930

Change-Id: Ia4cec67bee98b0921b5b8c6875a26d00a90c387d
2022-02-21 07:23:25 +00:00
wenchangliu
2638c815af Allow hal_graphics_allocator to access dmabuf_system_secure_heap_device am: ad0a033f97 am: 258318a4af
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962929

Change-Id: I1639ad7fa458d8174194973f547f12a9eb1c2492
2022-02-21 07:23:24 +00:00
neoyu
05fbdcedc3 Fix SELinux errors for rild am: 26aa7c150e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962925

Change-Id: I288eca3c6e1e92558775082bbeac8c371d549379
2022-02-21 07:01:27 +00:00
Tai Kuo
373795e6a5 Remove hal_vibrator_default avc tracking denials am: bc3924f61d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16939010

Change-Id: I6a962e36cee9d8f402e1386f3736219e9a15b8a7
2022-02-21 07:01:17 +00:00
wenchangliu
44eba6830b Allow hal_graphics_allocator to access vscaler_heap_device am: 84d53775e1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962930

Change-Id: I6524c426deb02574346c67e66e81c8caa226d731
2022-02-21 07:01:04 +00:00
wenchangliu
258318a4af Allow hal_graphics_allocator to access dmabuf_system_secure_heap_device am: ad0a033f97
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962929

Change-Id: Ic9b9d211039819015f0a432d6ec703d259cb5677
2022-02-21 07:01:04 +00:00
neoyu
7a34798ea4 Fix SELinux errors for vendor_init
avc: denied { set } for property=logd.logpersistd pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:logpersistd_logging_prop:s0 tclass=property_service permissive=0'
avc: denied { set } for property=logd.logpersistd.size pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:logpersistd_logging_prop:s0 tclass=property_service permissive=0'
avc: denied { set } for property=persist.vendor.ril.use.iccid_to_plmn pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=property_service permissive=0'
avc: denied { set } for property=persist.vendor.ril.emergencynumber.mode pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=property_service permissive=0'
avc: denied { set } for property=persist.vendor.ril.log_mask pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=property_service permissive=0'
avc: denied { set } for property=persist.vendor.ril.log.base_dir pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=property_service permissive=0'
avc: denied { set } for property=persist.vendor.ril.log.chunk_size pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=property_service permissive=0'

Bug: 220261262
Test: manual
Change-Id: Ieb6673234f913af25e275e61404098a0deccbed2
2022-02-21 14:58:29 +08:00
neoyu
dffd11e39f [automerger skipped] Fix SELinux errors for ims am: e909ddabea am: bf6cd933e7 -s ours
am skip reason: Merged-In I3e7f6781718c3967f7842b074b0ef91818508af2 with SHA-1 e909ddabea is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962927

Change-Id: If504e329add9e6a18766a60dcbbab83cc4a1b3ce
2022-02-21 06:50:47 +00:00
neoyu
0123c39413 Fix SELinux errors for rild am: 26aa7c150e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16962925

Change-Id: Ib2262bfdebeb032a401037aa1bfad9bf8159b74a
2022-02-21 06:42:31 +00:00
Tai Kuo
f65f586495 Remove hal_vibrator_default avc tracking denials am: bc3924f61d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/16939010

Change-Id: I09aab5de63058d127791e41a7fa2dcfe08e283a0
2022-02-21 06:42:00 +00:00