Nicolas Geoffray
48acf9683f
Allow ssr_detector_app to create files of type system_app_data_file.
...
Bug: 260557058
Test: m
Change-Id: I0ff85b542a84ed7d5e5ffd1010ca1a9f7f86c8f1
2022-12-05 13:58:36 +00:00
Wasb Liu
e249f90504
hal_health_default: updated sepolicy am: daeff5e18c
am: 88e9fb512d
am: 271a845885
am: d90c1c4c22
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20610808
Change-Id: Ibaebb883793aea87c8601788966a81d60954b4a4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 06:08:54 +00:00
Wasb Liu
d90c1c4c22
hal_health_default: updated sepolicy am: daeff5e18c
am: 88e9fb512d
am: 271a845885
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20610808
Change-Id: Ifca6b7ec1ade7be5d28d619c18af27d537699eda
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 05:34:08 +00:00
Wasb Liu
271a845885
hal_health_default: updated sepolicy am: daeff5e18c
am: 88e9fb512d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20610808
Change-Id: I4f4cc732f46d00a7c18dc1fb691436aa826e441a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 04:56:13 +00:00
Wasb Liu
7be52a8882
hal_health_default: updated sepolicy am: daeff5e18c
am: 9683d75e8a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20610808
Change-Id: I55805563a70ebb51959289d060e5c1211084c852
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 04:55:23 +00:00
Wasb Liu
88e9fb512d
hal_health_default: updated sepolicy am: daeff5e18c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20610808
Change-Id: Idb7b4ffa9a74638247fc9bbaa4f697c9945e4c2e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 03:51:20 +00:00
Wasb Liu
9683d75e8a
hal_health_default: updated sepolicy am: daeff5e18c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20610808
Change-Id: Id1eae33d36b60e3d4eadd84938cb0abf0228542a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-05 03:50:56 +00:00
Android Build Coastguard Worker
f3c943685a
Snap for 9364794 from 0237351f52
to tm-qpr2-release
...
Change-Id: I8f8ce64b50abcb979c2cb84392519bca060edc7f
2022-12-03 02:03:18 +00:00
George Lee
48f55e7049
[automerger skipped] Battery Mitigation: Use Brownout Reason - sepolicy am: 0237351f52
am: cd346126ec
-s ours
...
am skip reason: Merged-In Ia03da290f5cb90ebbc7616d46e90064e346a402c with SHA-1 5744eb89fc
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20614653
Change-Id: If96c552e07d509dd77b7cdebeb8f253d4a9b50bc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-02 07:38:50 +00:00
George Lee
cd346126ec
Battery Mitigation: Use Brownout Reason - sepolicy am: 0237351f52
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20614653
Change-Id: I0bd44a43a191724cb3a882e87ae988545e207154
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-02 07:05:12 +00:00
George Lee
0237351f52
Battery Mitigation: Use Brownout Reason - sepolicy
...
Brownout Reason replaces startup_bugreport_requested. Battery
Mitigation needs to be updated.
Bug: 237287659
Test: Ensure lastmeal.txt is properly generated.
Merged-In: Ia03da290f5cb90ebbc7616d46e90064e346a402c
Change-Id: Ic123d704e37aa6d1dcd7377c291b537069ede829
Signed-off-by: George Lee <geolee@google.com>
2022-12-02 05:13:57 +00:00
Wasb Liu
daeff5e18c
hal_health_default: updated sepolicy
...
allow android.hardware.health service to access persist_battery_file
11-14 13:53:39.242 872 872 W android.hardwar: type=1400 audit(0.0:17): avc: denied { search } for name="battery" dev="sda1" ino=84 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=dir permissive=0
Bug: 258535661
Bug: 260878511
Test: check for no avc denied on persist_battery_file
Change-Id: I7564b03339e17f9eea4aa5a8feda31bcfdd6100c
Signed-off-by: Wasb Liu <wasbliu@google.com>
Signed-off-by: Ken Tsou <kentsou@google.com>
(cherry picked from commit 24cfe388c5
)
2022-12-02 02:01:24 +00:00
Android Build Coastguard Worker
ef183ee898
Snap for 9358956 from 30e01ffb8c
to tm-qpr2-release
...
Change-Id: I37ad3f8227c7836253c1734b3b848ae2832658f3
2022-12-02 00:03:25 +00:00
Ziyi Cui
5744eb89fc
[automerger skipped] [ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to perf-metrics am: 30e01ffb8c
am: 71d22f91d6
-s ours
...
am skip reason: subject contains skip directive
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20133843
Change-Id: Ia03da290f5cb90ebbc7616d46e90064e346a402c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 07:29:45 +00:00
Ziyi Cui
f56323c7fe
gs201-sepolicy:dumpstate: allow dumpstate access sysfs_vendor_metrics am: 521334a366
am: 1f90d9e929
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20475259
Change-Id: I6bb61b2a15b90adca5a54295889d91a81b770511
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 07:28:34 +00:00
Ziyi Cui
b82fe2bd4b
[automerger skipped] [ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to temp-residency-metrics am: 2d4a9c02fc
am: 8d2a5bdcf7
-s ours
...
am skip reason: subject contains skip directive
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20431038
Change-Id: Ic9c3a08c4b06f212c7461d67b77c2617d8e15b87
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 07:28:31 +00:00
Ziyi Cui
71d22f91d6
[ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to perf-metrics am: 30e01ffb8c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20133843
Change-Id: I4a4b1d228816a46749ce0d125d86c29c272e4a57
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 07:03:11 +00:00
Ziyi Cui
1f90d9e929
gs201-sepolicy:dumpstate: allow dumpstate access sysfs_vendor_metrics am: 521334a366
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20475259
Change-Id: Ibf21ea0b6647865f38d04930ff1ccf6dc5377b29
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 06:59:41 +00:00
Ziyi Cui
8d2a5bdcf7
[ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to temp-residency-metrics am: 2d4a9c02fc
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20431038
Change-Id: I68342b66f1c1588f0b924531a9a23f8cce47c922
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-12-01 06:59:37 +00:00
Ziyi Cui
30e01ffb8c
[ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to perf-metrics
...
enable pixelstats access to sysfs path, define sysfs_perfmetrics
Bug: 227809911
Bug: 232541623
Test: Verified the existence of atom and correctness of resume latency, irq stats
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: If1b95148b59a6816c6795921018dfae68d80550b
2022-12-01 06:31:22 +00:00
Ziyi Cui
521334a366
gs201-sepolicy:dumpstate: allow dumpstate access sysfs_vendor_metrics
...
Test: "adb bugreport" includes metrics capture.
Bug: 246799997
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: I1c2f4aaf1cd875a37497ca8beacb555d39eeb51e
2022-12-01 06:27:22 +00:00
Ziyi Cui
2d4a9c02fc
[ DO NOT MERGE ] gs201-sepolicy: pixelstats: enable pixelstats access to temp-residency-metrics
...
enable pixelstats access to sysfs path
Bug: 246799997
Test: Verified the existence of atom and correctness of atom stats
Signed-off-by: Ziyi Cui <ziyic@google.com>
Change-Id: I4a731d40a586e01c484cf95c57fb16a03f5e6ceb
2022-12-01 06:27:22 +00:00
Android Build Coastguard Worker
73adfe41cf
Snap for 9354090 from 24cfe388c5
to tm-qpr2-release
...
Change-Id: Id47d8082dcc6e0f6464bb0138d8887328bbbea8f
2022-12-01 00:03:22 +00:00
Wasb Liu
ee7f6c6720
hal_health_default: updated sepolicy am: 24cfe388c5
am: c7f12f5aa9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20476525
Change-Id: I827033e75db2418f38caf198234f50d0278100ad
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 10:31:38 +00:00
Wasb Liu
c7f12f5aa9
hal_health_default: updated sepolicy am: 24cfe388c5
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20476525
Change-Id: I31449984e30724ba883a04c16b179641f6d92cbc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 09:59:32 +00:00
Wasb Liu
24cfe388c5
hal_health_default: updated sepolicy
...
allow android.hardware.health service to access persist_battery_file
11-14 13:53:39.242 872 872 W android.hardwar: type=1400 audit(0.0:17): avc: denied { search } for name="battery" dev="sda1" ino=84 scontext=u:r:hal_health_default:s0 tcontext=u:object_r:persist_battery_file:s0 tclass=dir permissive=0
Bug: 258535661
Test: check for no avc denied on persist_battery_file
Change-Id: I7564b03339e17f9eea4aa5a8feda31bcfdd6100c
Signed-off-by: Wasb Liu <wasbliu@google.com>
2022-11-30 09:44:34 +00:00
Stephen Crane
5cfe9e57ec
[automerger skipped] Allow Trusty storageproxy property am: 5cd114d3a0
am: 9fb7618e6b
-s ours
...
am skip reason: Merged-In I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d with SHA-1 c03e9b58db
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20545996
Change-Id: I8cb00ac916563913fb61b4a3160ac0d9746a272d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 01:43:15 +00:00
Stephen Crane
9fb7618e6b
Allow Trusty storageproxy property am: 5cd114d3a0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20545996
Change-Id: I76672b0e56c352e1991811bcaddac660fe05d0b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-30 01:15:18 +00:00
Vaibhav Devmurari
2295e34d68
Add SePolicy for system_server accessing sysfs for USB devices
...
Add SePolicy to allow Android input manager accessing sysfs nodes
for external USB devices
To support input device lights manager feature in frameworks, provide
sysfs node access to system server process.
DD: go/pk_backlight_control (For keyboard backlight control for external
keyboards)
Similar changes: ag/20092266
Kernel provides a standardized LED interface to expose LED controls
over sysfs: https://docs.kernel.org/leds/leds-class.html
The feature will be provided for devices with kernel sysfs class led
support and vendor kernel driver for input controllers that do have
lights. The kernel sysfs class led support is a kernel config option
(LEDS_CLASS), and an input device driver will create the sysfs class
node interface.
By giving system_server the access to these sysfs nodes, the feature
will work on devices with the kernel option and kernel input/hid driver
support. We do use CTS tests to enforce the kernel options and the
input device drivers.
What's already supported?
- We already support access to UHID sysfs node which used for all
bluetooth based external peripherals
What's included in this CL?
- Adding support to access sysfs nodes for USB based external devices
Test: manual
Bug: 245506418
Change-Id: I51c642ffe7293f793b7b6a131e8d2a37aea4a547
2022-11-29 11:46:44 +00:00
Nicolas Geoffray
2f94cdf9f1
Merge "Allow ssr_detector_app writes to system_app_data_file." am: 073de4fba6
am: 0590da44cf
am: b84e18b8ae
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2319817
Change-Id: Ibca1f8b4e6d1e74896cdbcea324225d67dcc60b7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 10:46:56 +00:00
Nicolas Geoffray
b84e18b8ae
Merge "Allow ssr_detector_app writes to system_app_data_file." am: 073de4fba6
am: 0590da44cf
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2319817
Change-Id: I5c11172d6fb7b167500633ebba07c48281cd5296
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 10:11:54 +00:00
Nicolas Geoffray
0590da44cf
Merge "Allow ssr_detector_app writes to system_app_data_file." am: 073de4fba6
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2319817
Change-Id: I0e29c8a6435b71ff567d03572606cbcba3f76c1b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 09:43:15 +00:00
Nicolas Geoffray
073de4fba6
Merge "Allow ssr_detector_app writes to system_app_data_file."
2022-11-29 09:00:12 +00:00
Adam Shih
304509819e
move touch dump to gs-common
...
Bug: 256521567
Test: adb bugreport
Change-Id: I198c227508606baf434de456f80477ce6bebcede
2022-11-29 04:47:15 +00:00
Ziyi Cui
8586ba78c2
gs201-sepolicy:move perf_metrics genf_contexts from gs201 to gs-common
...
Bug: 227809911
Bug: 232541623
Test: test adb bugreport
Change-Id: I83fc6c8b1adffe9a58e1a3389036461db49efe77
Signed-off-by: Ziyi Cui <ziyic@google.com>
2022-11-29 01:02:45 +00:00
Sandeep Dhavale
6d7bc9aed7
Add fastboot sepolicy changes to allow wiping of device am: 89f5fff668
am: 6f2812426a
am: 537b43c395
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2316638
Change-Id: I4254bd608d9a942bf0e3643ca802ec4565dccc22
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-29 00:08:44 +00:00
Sandeep Dhavale
537b43c395
Add fastboot sepolicy changes to allow wiping of device am: 89f5fff668
am: 6f2812426a
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2316638
Change-Id: I129d2a7ab2effbcb93b15a21b539da1e11b8861f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-28 23:36:23 +00:00
Sandeep Dhavale
6f2812426a
Add fastboot sepolicy changes to allow wiping of device am: 89f5fff668
...
Original change: https://android-review.googlesource.com/c/device/google/gs201-sepolicy/+/2316638
Change-Id: Ib362d72f41b9955e46350e45250c077c703a0734
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-28 23:09:09 +00:00
Stephen Crane
5cd114d3a0
Allow Trusty storageproxy property
...
Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready
when the data filesystems are ready for use, and allows vendor init to
query and wait on this property.
Test: build, flash, test app loading
Bug: 258018785
Change-Id: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
Merged-In: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
2022-11-28 19:48:56 +00:00
Sandeep Dhavale
89f5fff668
Add fastboot sepolicy changes to allow wiping of device
...
With new AIDL fastboot service, wiping permissions need to be added
for hal_fastboot_default.
Bug: 260140380
Test: fastboot -w
Change-Id: I08e98461d0697d7539e14435acdacc3cc64eab3d
Signed-off-by: Sandeep Dhavale <dhavale@google.com>
2022-11-28 17:53:51 +00:00
Nicolas Geoffray
4293206c86
Allow ssr_detector_app writes to system_app_data_file.
...
Bug: 260557058
Test: m
Change-Id: Ibd028690a9d8661be8769d1b8f0c4e3a1f0fe985
2022-11-28 17:27:46 +00:00
Cheng Chang
5b3d90132a
gps: nstandby path depend on platform
...
Bug: 259353063
Test: no avc denied about nstandby
Change-Id: Ibf72cfd37837d2a9024b82118cd045a2724c9179
2022-11-24 06:54:13 +00:00
Ziyi Cui
2e98f5f763
gs201-sepolicy: pixelstats:remove type definition to perf-metrics
...
move type definition to gs-common
Bug: 227809911
Bug: 232541623
Test: Tested perf-metrics
Change-Id: I8120f682b12137dfea164912efa0fa0417cb5dd3
Signed-off-by: Ziyi Cui <ziyic@google.com>
2022-11-24 00:10:39 +00:00
Android Build Coastguard Worker
6d747832d4
Snap for 9325773 from a2e6c51431
to tm-qpr2-release
...
Change-Id: Id78c1384afcaba07108b288832af644549ae5ed7
2022-11-24 00:04:01 +00:00
Steve Pfetsch
65d7ed0931
[automerger skipped] gs201-sepolicy: provide permission for TouchInspector app [DO NOT MERGE] am: a2e6c51431
am: f85b2edd47
-s ours
...
am skip reason: subject contains skip directive
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20521667
Change-Id: Ib705d4a3620b640d3a8478dd34e272087a5eba99
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-23 21:34:37 +00:00
Steve Pfetsch
f85b2edd47
gs201-sepolicy: provide permission for TouchInspector app [DO NOT MERGE] am: a2e6c51431
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/20521667
Change-Id: I60d8fcd79b4620a20b6c06d27a7286cd585676ce
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2022-11-23 20:59:08 +00:00
Stephen Crane
c03e9b58db
Allow Trusty storageproxy property
...
Allows the Trusty storageproxyd to set ro.vendor.trusty.storage.fs_ready
when the data filesystems are ready for use, and allows vendor init to
query and wait on this property.
Test: build, flash, test app loading
Bug: 258018785
Change-Id: I0b4f80371385bf0ddb0c44e81b1893bb80c7a63d
2022-11-23 18:45:55 +00:00
Adam Shih
2dc65d6b5c
use gs-common thermal dump
...
Bug: 257880034
Test: adb bugreport
Change-Id: Ib5940bce520ca04ee6cb31f5268f0f86dedadf6e
2022-11-23 14:38:22 +08:00
Steve Pfetsch
a2e6c51431
gs201-sepolicy: provide permission for TouchInspector app [DO NOT MERGE]
...
Resolve these access violations:
avc: denied { write } for name="driver_test" dev="proc" ino=4026535572
scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:proc_touch:s0
tclass=file permissive=1 app=com.google.touch.touchinspector
avc: denied { open } for path="/proc/fts/driver_test" dev="proc"
ino=4026535572 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector
avc: denied { getattr } for path="/proc/fts/driver_test" dev="proc"
ino=4026535572 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector
avc: denied { read } for name="driver_test" dev="proc" ino=4026535572
scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:proc_touch:s0
tclass=file permissive=1 app=com.google.touch.touchinspector
avc: denied { open } for path="/proc/fts_ext/driver_test" dev="proc"
ino=4026535574 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector
avc: denied { getattr } for path="/proc/fts_ext/driver_test" dev="proc"
ino=4026535574 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector
Bug: 182118395
Signed-off-by: Steve Pfetsch <spfetsch@google.com>
Change-Id: Ia3bd2323b77134b8e47d858f36756780dec98c19
2022-11-22 23:48:19 +00:00
Android Build Coastguard Worker
600f28c3f3
[coastguard skipped] Merge sparse cherrypicks from sparse-9293603-L15900000957431128 into tm-qpr2-release.
...
Change-Id: I3df1268e623a75d523d461655228eb6c170a7355
2022-11-18 19:06:30 +00:00