George Lee
2c91c54d7b
bcl: Add brownout boot reason sepolicy am: b72e47e1b0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20152240
Change-Id: Ieefdd8f7a446e51854835ae3bcfd0607f86ae49f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-13 18:31:54 +00:00
George Lee
b72e47e1b0
bcl: Add brownout boot reason sepolicy
...
Lastmeal.txt may be generated from after device rebooted from IRQ
triggering. By applying limit on the time when it generates,
lastmeal.txt will not be generated after device rebooted.
Bug: 246817058
Test: Confirm lastmeal.txt generation
Signed-off-by: George Lee <geolee@google.com>
Change-Id: I02515fc452dbfa5c8a40041cbb8731664dace62e
2022-10-12 19:59:58 -07:00
Android Build Coastguard Worker
7b008d7600
Snap for 9158784 from 2260099ad3
to tm-qpr2-release
...
Change-Id: I502857d5aaad0c4e16310ec005ce0a7aebaf0062
2022-10-10 23:06:58 +00:00
George Lee
52ff289b2c
bcl: Add mitigation ready device sepolicy am: 2260099ad3
am: ae51ebfd98
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20123277
Change-Id: I6b937ab9105b79c2ed1f5d1a10c04ca878d57865
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-10 20:48:21 +00:00
George Lee
ae51ebfd98
bcl: Add mitigation ready device sepolicy am: 2260099ad3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20123277
Change-Id: I5b1cd5209a52bacd524e2489bef2af866a258f4f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-10-10 20:15:58 +00:00
George Lee
2260099ad3
bcl: Add mitigation ready device sepolicy
...
Instead of relying on vendor.thermal.link_ready property to gate write
to BCL's SYSFS node, adding mitigation ready SYSFS so that writes to
BCL's SYSFS node would not cause NULL pointer dereference.
Bug: 249130916
Test: Confirm property vendor.brownout.mitigation.ready is set
Signed-off-by: George Lee <geolee@google.com>
Change-Id: I1b21a1c745e7e17f78e9d4c001032dd2c46673cf
2022-10-10 19:49:34 +00:00
Adam Shih
b47db82964
move modem dump to gs-common
...
Bug: 250475732
Test: adb bugreport
Change-Id: I8f7f1538b5e236a2c6e0ff5a1d9224c539ef9836
2022-10-07 09:31:29 +08:00
Adam Shih
455201b20d
move soc dump to gs-common
...
Bug: 248428203
Test: adb bugreport
Change-Id: I225029624d4bd254dee3997b80ff322bacd07b23
2022-10-05 02:14:13 +00:00
Adam Shih
d03b6f3be2
move ramdump relate dumpstate to gs-common
...
Bug: 248428203
Test: adb bugreport
Change-Id: I40d9aff0e8069acc5d5ecbd0a596a850315e0b22
2022-10-04 04:59:49 +00:00
Android Build Coastguard Worker
3974ce2694
Snap for 9133013 from bdf3d6abcc
to tm-qpr2-release
...
Change-Id: I26b4cd4c1ececa5cee237123386a0c2b49a088d2
2022-10-03 23:06:42 +00:00
Adam Shih
8902c457d7
move trusty device to gs-common
...
Bug: 244504232
Test: adb bugreport
Change-Id: If0df8122e5655b659ac001d42b9a6cf28a59a627
2022-10-03 09:21:03 +08:00
Vova Sharaienko
c87f573dec
[automerger skipped] hal_health_default: updated sepolicy am: bdf3d6abcc
am: ac2e9dd662
-s ours
...
am skip reason: Merged-In I71013c0b17ee5e526387efa0afb823f97775e572 with SHA-1 87bc6d189d
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20041334
Change-Id: I2eedec23df2f9e52ba9c470104d705bdfe4ac3cf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-30 17:50:02 +00:00
Vova Sharaienko
ac2e9dd662
hal_health_default: updated sepolicy am: bdf3d6abcc
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20041334
Change-Id: I83ea07dbbc51fe7729172ff7e688795df312c25d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-30 17:17:27 +00:00
Vova Sharaienko
bdf3d6abcc
hal_health_default: updated sepolicy
...
This allows the android.hardware.health service to access
AIDL Stats service
Bug: 237639591
Bug: 249827340
Test: Build, flash, boot & and logcat | grep "avc"
Change-Id: I71013c0b17ee5e526387efa0afb823f97775e572
(cherry picked from commit 87bc6d189d
)
Merged-In: I71013c0b17ee5e526387efa0afb823f97775e572
2022-09-30 16:43:46 +00:00
Kyle Tso
a71da6c26c
[automerger skipped] Set sepolicy for shell script of disabling contaminant detection am: c18eea71d7
am: e9137ca867
-s ours
...
am skip reason: Merged-In Idbfa55d4c7091ce2861600ff3881fcc7217ec662 with SHA-1 9bb5e3e05b
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20064568
Change-Id: I70ccac11eb822437f879cbbe852b5a4e67632bbf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-30 09:50:46 +00:00
Kyle Tso
e9137ca867
Set sepolicy for shell script of disabling contaminant detection am: c18eea71d7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20064568
Change-Id: I910ec6dd06d432adb2de2f28cb49a663416b9b4b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-30 09:04:31 +00:00
Kyle Tso
c18eea71d7
Set sepolicy for shell script of disabling contaminant detection
...
(ported from Ib2e3cf498851c0c9e5e74aacc9bf391549c0ad1a)
Bug: 244658328
Signed-off-by: Kyle Tso <kyletso@google.com>
Change-Id: Idbfa55d4c7091ce2861600ff3881fcc7217ec662
Merged-In: Idbfa55d4c7091ce2861600ff3881fcc7217ec662
2022-09-29 13:33:28 +00:00
Kyle Tso
9bb5e3e05b
Set sepolicy for shell script of disabling contaminant detection
...
(ported from Ib2e3cf498851c0c9e5e74aacc9bf391549c0ad1a)
Bug: 244658328
Signed-off-by: Kyle Tso <kyletso@google.com>
Change-Id: Idbfa55d4c7091ce2861600ff3881fcc7217ec662
2022-09-29 03:10:51 +00:00
Adam Shih
df53edb110
move UFS dump to gs-common
...
Bug: 248143736
Test: adb bugreport
Change-Id: I06374e41f2e4c4695780d7f1f2ff12d27f77351f
2022-09-28 13:27:03 +08:00
Adam Shih
6580ccce50
dump f2fs in gs-common
...
Bug: 248143736
Test: adb bugreport
Change-Id: Id3b62464fb80cb6178e5b8fc4a53c8c3dfe1b27e
2022-09-27 03:06:43 +00:00
Sayanna Chandula
d4440cb19e
thermal: enable pixelstats access to thermal metrics am: cbb62de10c
am: 560dbcff4b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19706085
Change-Id: I444fb2e8e93683ac9db6bba1a85f95dbab8bd4b2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-23 20:48:29 +00:00
Sayanna Chandula
560dbcff4b
thermal: enable pixelstats access to thermal metrics am: cbb62de10c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19706085
Change-Id: I9c3b9a0a241dd0584bbcf8eb8ad1176526052d84
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-23 20:17:52 +00:00
Sayanna Chandula
cbb62de10c
thermal: enable pixelstats access to thermal metrics
...
Allow pixelstats daemon to access thermal metric nodes
Bug: 228247740
Test: Build and boot on device. Check thermal stats
Change-Id: Iada717b92782bc9c085928462b2e06d2db136cab
Signed-off-by: Sayanna Chandula <sayanna@google.com>
2022-09-23 19:48:41 +00:00
timmyli
7054110441
Allow camera_hal to access always on compute device
...
As a part of RLSRefactor efforst, we need to access libusf
from within camera_hal.
Bug: 248089742
Test: Compiles, Manual test that we can access aoc device
Change-Id: Ie79a2ee544067de69f402e2dd5ce6e55c200be13
2022-09-23 04:17:18 +00:00
jintinglin
047656d92e
Allows modem_svc to read the logging related properties am: 5acc68de3b
am: b49b1ca9a7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19981021
Change-Id: I90f08ab30819ba7b7a0085a0657c70b4351a616a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-22 16:12:41 +00:00
jintinglin
b49b1ca9a7
Allows modem_svc to read the logging related properties am: 5acc68de3b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19981021
Change-Id: I53be3006909eeb6fa4938ceecca1299c1905412c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-22 15:35:43 +00:00
jintinglin
5acc68de3b
Allows modem_svc to read the logging related properties
...
avc: denied { read } for comm="modem_svc_sit" name="u:object_r:vendor_logger_prop:s0" dev="tmpfs" ino=347 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_logger_prop:s0 tclass=file permissive=0
Bug: 243039758
Change-Id: Ib3031552faf03771f86e72e7dbd81c3610c518cc
2022-09-22 08:15:23 +00:00
Jinhee.k
9841567e5f
sepolicy: allowed permissions required for network access am: 37c32d672f
am: 324f9b569d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19968207
Change-Id: Ic2a4516c0e3e572c59dc80afdef13fdb3b311122
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-20 01:32:07 +00:00
Jinhee.k
324f9b569d
sepolicy: allowed permissions required for network access am: 37c32d672f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19968207
Change-Id: Idf4da54e99fa914f9297da048dec7816b0efd44d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-20 01:00:41 +00:00
Jinhee.k
37c32d672f
sepolicy: allowed permissions required for network access
...
: add permission to allow create, connect udp socket
Apply to add network access permissions
Bug: 242231557
Test: Verified no IMS exception and avc denied
Change-Id: I4a4bd1efb22b5538b1679aad8f543d00203e0b48
Signed-off-by: Jinhee.k <jinhee.k@samsung.com>
2022-09-19 01:41:34 +00:00
Vova Sharaienko
87bc6d189d
hal_health_default: updated sepolicy
...
This allows the android.hardware.health service to access
AIDL Stats service
Bug: 237639591
Test: Build, flash, boot & and logcat | grep "avc"
Change-Id: I71013c0b17ee5e526387efa0afb823f97775e572
2022-09-16 18:58:26 +00:00
Ted Lin
7c6154bdce
Remove the tracking denials code.
...
Bug: 213817227
Test: Check the bugreport
Signed-off-by: Ted Lin <tedlin@google.com>
Change-Id: I94a64f6ea05757b9c74657647ef7f0d14fa34c55
2022-09-16 14:00:24 +08:00
Sherry Luo
540b00f63e
Add network permissions for debug camera am: 9dd930e4c2
am: fabbfe62fa
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19914967
Change-Id: Ie566fd9c20a44368b054b09518f3b613d37eb054
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-15 19:53:10 +00:00
Sherry Luo
fabbfe62fa
Add network permissions for debug camera am: 9dd930e4c2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19914967
Change-Id: I73f2cf441f2e52e5246074693d65a3cb6a5da3bc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-15 18:48:22 +00:00
Sherry Luo
9dd930e4c2
Add network permissions for debug camera
...
Noticed that Estrella upload failing w/
java.lang.SecurityException: Permission denied (missing INTERNET
permission?)
Followed investigation in b/230434151. Verified that upload working once
this change is flashed.
Test: Flash build w/ local change
Test: Take a picture and upload using Estrella
Test: Verify that the upload succeeded
BUG=245995782
Change-Id: I505af355f25e9063927c946ee8af21de25758ef1
2022-09-15 18:16:58 +00:00
Estefany Torres
3bc8385800
Add rules for letting logger app send the command to ril am: 6cb9f4e623
am: 9b1caac1d7
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19913309
Change-Id: I190fbc128bd77c34af604ae1fd3a89f303a4b84b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-15 15:03:57 +00:00
Estefany Torres
9b1caac1d7
Add rules for letting logger app send the command to ril am: 6cb9f4e623
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19913309
Change-Id: Id2362cefd0aac3af1709d008bc1a102baeb16975
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-15 14:35:08 +00:00
Estefany Torres
6cb9f4e623
Add rules for letting logger app send the command to ril
...
08-31 23:40:57.354 458 458 E SELinux : avc: denied { find } for interface=vendor.samsung_slsi.telephony.hardware.radioExternal::IOemSlsiRadioExternal sid=u:r:logger_app:s0:c252,c256,c512,c768 pid=2901 scontext=u:r:logger_app:s0:c252,c256,c512,c768 tcontext=u:object_r:hal_exynos_rild_hwservice:s0 tclass=hwservice_manager permissive=0
09-01 00:08:19.600 2881 2881 W oid.pixellogger: type=1400 audit(0.0:10): avc: denied { call } for scontext=u:r:logger_app:s0:c252,c256,c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=0 app=com.android.pixellogger
Bug: 241412942
Test: tested on C10 with pixel logger change
Change-Id: I845eefc609be2b7fbc22c9b37d1eb2b3195e014f
2022-09-15 14:09:05 +00:00
Chungjui Fan
5ea1982643
Add sepolicy of dumping LED file in dumpstate am: aa55cb6f2e
am: 9a70ccc6d6
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19893210
Change-Id: I5d13a2d75fd6bdc939a101b0178922a36d87f38a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-14 04:03:34 +00:00
Chungjui Fan
9a70ccc6d6
Add sepolicy of dumping LED file in dumpstate am: aa55cb6f2e
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19893210
Change-Id: Idb5424850f53d62e971faa9a208eaaf9e8731942
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-14 03:34:32 +00:00
Chungjui Fan
aa55cb6f2e
Add sepolicy of dumping LED file in dumpstate
...
Bug: 242300919
Change-Id: I14b0af18244c4a71fd7908fdb35e2e86354e02e0
2022-09-14 02:59:20 +00:00
Adam Shih
9c9ae24f64
remove global access to firmware mali
...
Bug: 220801802
Test: device can resume
Change-Id: Idf0fd84c2efa37c94e30c3f682a09e6546f50235
2022-09-12 12:58:29 +08:00
Jeffrey Carlyle
b93bd33e4a
dck: allow st54spi devivce to be accessed by recovery and fastbootd am: a658683689
am: 686c24a38f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19754910
Change-Id: I3596188e79329c44a1ba1dd920b649b7f090915c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-08 23:06:50 +00:00
Jeffrey Carlyle
686c24a38f
dck: allow st54spi devivce to be accessed by recovery and fastbootd am: a658683689
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19754910
Change-Id: Ic69198e22d963c26f9994689d0818bcf6e45d80f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-08 22:35:51 +00:00
Jeffrey Carlyle
a658683689
dck: allow st54spi devivce to be accessed by recovery and fastbootd
...
This is needed so that Digital Car Keys can be cleared from the ST54
during a user data wipe.
Bug: 203234558
Test: data wipe in Android recovery mode on raven
Test: data wipe in Android recovery mode on c10
Test: data wipe in user mode fastbootd mode on raven
Test: data wipe in user mode fastbootd mode on c10
Signed-off-by: Jeffrey Carlyle <jcarlyle@google.com>
Change-Id: Icaa3d62aa6b3b88b8db6c1c11807907a06e51019
2022-09-08 21:58:52 +00:00
JJ Lee
fb1bc9baee
sepolicy: add nodes for aoc memory votes stats am: 4b3ae5b9bf
am: 749dbdb873
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19712556
Change-Id: I16ae2d0b127aadedfbfc7cda814487523e737e83
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-08 05:32:24 +00:00
JJ Lee
749dbdb873
sepolicy: add nodes for aoc memory votes stats am: 4b3ae5b9bf
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19712556
Change-Id: I3592111f07154b84c74de89c980679437bf71073
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-08 05:02:44 +00:00
JJ Lee
4b3ae5b9bf
sepolicy: add nodes for aoc memory votes stats
...
Bug: 223674292
Test: build pass, not blocking bugreport
Change-Id: Iae1c5dc42b3e6213d4399025cb91dc57822fd2cc
Signed-off-by: JJ Lee <leejj@google.com>
2022-09-08 04:45:32 +00:00
Jack Wu
81ed5058d8
remove selinux avc error am: c252f3ffa8
am: 980e37d3df
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19880471
Change-Id: Ie2e2563755ca25085cca72438b92743e43c53dc1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-08 03:16:34 +00:00
Jack Wu
980e37d3df
remove selinux avc error am: c252f3ffa8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19880471
Change-Id: Ib213543c3f2a3c155a1b296eea0d223dcefa4374
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-09-08 02:16:19 +00:00