Commit graph

2292 commits

Author SHA1 Message Date
Jacky Liu
8d46bb7983 Update sepolicy for new static i2c bus numbers
Bug: 305242309
Test: Boot to home
Change-Id: Ic235f6c2a4d325103dcd03e0977c1a88e98a0605
2023-10-23 14:26:55 +08:00
samou
a534079494 Allow battery_motigation to access gpu cur_freq
Bug: 290149543
Change-Id: I3396573d67f9f0995e63cd1e559f968107695d8b
Signed-off-by: samou <samou@google.com>
2023-10-23 01:44:06 +00:00
Ken Yang
fcf7f847ae SELinux: fix wakeup selinux issue
Bug: 305600876
Change-Id: I21a8993291b05a991e32bb7c363b5e831f4d0db0
Signed-off-by: Ken Yang <yangken@google.com>
2023-10-20 09:48:03 +00:00
John Chang
d20bee68db Merge "display: properties of vrr settings" into main 2023-10-18 15:46:47 +00:00
Wilson Sung
d48c63c215 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 305600857
Change-Id: I4715b66f1b1c051c8d83cffefdf4f3de6e5971ef
2023-10-16 12:19:18 +08:00
Hiroshi Akiyama
ea65836d59 Merge "Update missing dump_power sepolicy" into main 2023-10-15 23:45:47 +00:00
Hiroshi Akiyama
400a9d2068 Update missing dump_power sepolicy
Bug: 304851502
Test: adb bugreport and check dumpstate_board.txt
Change-Id: I1aed85ec3c1106381a395867a6eb90c11a8a1f84
Signed-off-by: Hiroshi Akiyama <hiroshiakiyama@google.com>
2023-10-14 05:02:16 +00:00
jonerlin
5883c27036 allow hal_bluetooth_btlinux write sysfs file am: 127ca27edc am: a49aa2bdf1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24947936

Change-Id: I52e9eb48b5e73a6f388a3fb446d1e402bdca4468
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-13 03:14:04 +00:00
jonerlin
a49aa2bdf1 allow hal_bluetooth_btlinux write sysfs file am: 127ca27edc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24947936

Change-Id: I183c49c5209e811166a96d2a9e2819bd29373b7c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-13 02:56:21 +00:00
Treehugger Robot
9b0ab2c62c Merge "hal_sensors_default: Add permission to AOC reset sysfs node." into main 2023-10-13 02:43:10 +00:00
Rick Chen
c31ec37715 hal_sensors_default: Add permission to AOC reset sysfs node.
[21675.099727] type=1400 audit(1697127034.684:751): avc:  denied  { write } for  comm="binder:912_1" name="reset" dev="sysfs" ino=102250 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_aoc_reset:s0 tclass=file permissive=0

Bug: 304681766
Test: Modify sensor HAL to trigger SSR when init.
      No avc denied log when sensor HAL access AOC reset sysfs node.
Change-Id: Iede0fa94a627c5e0d3166bec05ef7041154d8efe
Signed-off-by: Rick Chen <rickctchen@google.com>
2023-10-13 02:41:28 +00:00
jonerlin
127ca27edc allow hal_bluetooth_btlinux write sysfs file
Bug: 294747612
Test: v2/pixel-pts/release/bootstress/1200counts/suspend-resume
Change-Id: I62147f0b32156ede2a4e18e5a2bcb77fc2c91831
2023-10-13 09:00:07 +08:00
Brian Duddie
48527a1e6f Merge "Revert "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev am: c387226619 am: d1ddce264c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24948148

Change-Id: Ic95a0ecc1722769c2ac9ac7711ae93ea85a16ce0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-12 23:20:21 +00:00
Brian Duddie
d1ddce264c Merge "Revert "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev am: c387226619
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24948148

Change-Id: I59fbb4f03909803a422ff9a9abd17cae32eb7014
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-12 22:48:59 +00:00
Brian Duddie
c387226619 Merge "Revert "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev 2023-10-12 22:25:50 +00:00
John Chang
33c5d3185c display: properties of vrr settings
Bug: 290843234
Test: verify getprop/setprop after reboot.
Change-Id: I7e69fba9d16cabf899bf0d1c4ba041f079e645c1
2023-10-10 21:37:17 +00:00
Matthew Sedam
b2592218d6 Merge "Allow CHRE to access the IStats service for the zuma target" into main 2023-10-09 18:18:57 +00:00
Chia-Chi Teng
0aa787efa8 Revert "bluetooth: Allow triggering AOC reset from BT HAL"
Revert submission 24871772-bt-aoc-coredump

Reason for revert: b/300076774 root cause identified as b/299038059

Reverted changes: /q/submissionid:24871772-bt-aoc-coredump

Bug: 299038059
Change-Id: Ibd021c6b983c2eb390c268cf89f30e2e8ee54d21
2023-10-06 22:04:57 +00:00
Roy Luo
56723a2036 Merge "Support metric upload in USB HAL" into main 2023-10-05 20:24:46 +00:00
Mike Wang
bb474d5e68 Merge "Grant the MDS access to the IPowerStats hal service." into udc-qpr-dev am: fd78823dfa am: 7eafbc0be0
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24610375

Change-Id: Ic1bc4799d21df9a120946241f5bf278a1be6e12c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-05 17:13:10 +00:00
Mike Wang
7eafbc0be0 Merge "Grant the MDS access to the IPowerStats hal service." into udc-qpr-dev am: fd78823dfa
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24610375

Change-Id: If95e8b46a87625618bce50a19690bf4773625e9a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-05 16:24:40 +00:00
Mike Wang
fd78823dfa Merge "Grant the MDS access to the IPowerStats hal service." into udc-qpr-dev 2023-10-05 15:55:47 +00:00
Roy Luo
aa5218c8a7 Support metric upload in USB HAL
Grant access to stats service.
Sample error logs: avc:  denied  { find } for pid=949 uid=1000
name=android.frameworks.stats.IStats/default
scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:fwk_stats_service:s0
tclass=service_manager permissive=0

Bug: 297224564
Test: no audit log in logcat after command execution
Change-Id: I4a80e11e63ec164dff73288e93aac851ffebb696
2023-10-04 20:02:39 +00:00
Matthew Sedam
ad0075acd6 Allow CHRE to access the IStats service for the zuma target
Bug: 298459533
Test: Use stats service from chre
Change-Id: Ie4c9a24d3cd331621136c7c21989685631d87519
2023-10-02 20:52:36 +00:00
Jing Wang
e853c1919d Revert "Add vendor_sjtag_lock_state_prop and init-check_ap_pd_au..."
Test: Revert submission 24754347-zuma-etm2dram

Reason for revert: b/302352974

Reverted changes: /q/submissionid:24754347-zuma-etm2dram

Bug: 302352974
Change-Id: I251c3a62c79722a9050bdbce85dc758fc4b6fda9
2023-09-29 01:25:27 +00:00
mikeyuewang
1ee598d5d2 Grant the MDS access to the IPowerStats hal service.
ref logs:
09-06 10:07:18.006   536   536 I auditd  : avc:  denied  { find } for pid=22543 uid=10225 name=android.hardware.power.stats.IPowerStats/default scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:hal_power_stats_service:s0 tclass=service_manager permissive=1
09-06 10:07:18.010 22543 22543 I auditd  : type=1400 audit(0.0:65): avc:  denied  { call } for  comm="pool-4-thread-1" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=1 app=com.google.mds

Test: Tested with MDS app and the MDS can get IPowerStats binder and
call the interface.

Bug: 297250368
Change-Id: I7b0eeabdafb49eb33d8016666f9c02f2616f898d
2023-09-28 15:22:00 +00:00
Brian Duddie
1af5314ec0 bluetooth: Allow triggering AOC reset from BT HAL am: 858f999657 am: 89d7732591
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24869257

Change-Id: I3381cfdfff17ca8c2f77fa5043775a5f80ea028e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-27 22:50:28 +00:00
Brian Duddie
89d7732591 bluetooth: Allow triggering AOC reset from BT HAL am: 858f999657
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24869257

Change-Id: I5bdeb95ad44c69d2b8cd04f12dc7cde49580084c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-27 21:45:56 +00:00
Brian Duddie
858f999657 bluetooth: Allow triggering AOC reset from BT HAL
Supports debugging and recovery from fatal errors that do not trigger
AOC SSR on their own.

Bug: 300076774
Test: trigger SSR from BT HAL
Change-Id: I795b2c1830625e2cf05a9aa63c6f7ef273b01a87
2023-09-27 00:08:19 +00:00
Sergey Volk
a1e0faee5b Allow HWC access to dp_hotplug_error_code in sysfs
When an error is detected, DisplayPort kernel driver writes hotplug error code into a sysfs file. Hardware composer reads the error code from sysfs and then needs to write 0 in there to reset the code.

Test: manual
Bug: 283461313
Change-Id: Ifadc2403d62b12b0661fd170fa6df36b6a199fc3
2023-09-21 02:56:08 +00:00
Treehugger Robot
56e8cb4aa3 Merge "Add vendor_sjtag_lock_state_prop and init-check_ap_pd_auth-sh" into main 2023-09-20 08:24:55 +00:00
John Chang
acb925a4fe Merge "display: properties of vrr settings" into main 2023-09-18 21:38:01 +00:00
Yixuan Wang
143311cda0 Merge "Add selinux policy for chre vendor data directory" into main 2023-09-18 17:35:11 +00:00
John Chang
85d45d6776 display: properties of vrr settings
Bug: 290843234
Test: verify getprop/setprop after reboot.
Change-Id: I1ff2b7069f0e6a5a9aef6ac2f6ac6d89b457dcc3
2023-09-18 14:19:11 +00:00
Wilson Sung
488d348114 Merge changes from topic "b299029620_cleanup" into main
* changes:
  Relocate common tracking denial entries
  Remove obsolete entries
2023-09-18 02:54:32 +00:00
yixuanwang
0a4d3c2f89 Add selinux policy for chre vendor data directory
Bug: 278114604
Test: on device test
Change-Id: I33d1e73a375c86602ce632665fe96c5876347c52
2023-09-16 02:51:45 +00:00
Yixuan Wang
eae42fd8f4 Merge changes from topic "am-1b65f256ed6d44cb931295968c81bde7" into udc-qpr-dev-plus-aosp am: 284bdc3fa5
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: I7806e779a085c025de63d728eb0c52340db9612d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 20:07:37 +00:00
Yixuan Wang
43f05a7e41 [automerger skipped] Merge "Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..."" into udc-qpr-dev am: adf19fcc76 am: b02946bca9 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: I0a663d71d92d175823b7878aa37b6c032471cf58
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 20:07:34 +00:00
Yixuan Wang
ca2ba97013 [automerger skipped] Merge "Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..."" into udc-qpr-dev am: adf19fcc76 am: 0603f723f4 -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: I6e7230b804267bea465fb976bfa906240db91b83
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 20:04:23 +00:00
Yixuan Wang
6100be27ef [automerger skipped] Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..." am: bd654f00d9 am: cb920d586f -s ours
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: I6df3d77eaa660e9474dfc76a0691b8222fd7fba0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 20:04:21 +00:00
Yixuan Wang
284bdc3fa5 Merge changes from topic "am-1b65f256ed6d44cb931295968c81bde7" into udc-qpr-dev-plus-aosp
* changes:
  Merge "Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..."" into udc-qpr-dev am: adf19fcc76
  Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..." am: bd654f00d9
2023-09-15 18:38:02 +00:00
Yixuan Wang
0603f723f4 Merge "Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..."" into udc-qpr-dev am: adf19fcc76
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: I307c73fcecb5e213ab186b4610a5be681262a680
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 18:14:42 +00:00
Yixuan Wang
cb920d586f Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..." am: bd654f00d9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: Iba1c14faaf0c1e423f914ca860f83d75d5496a54
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 18:14:40 +00:00
Desmond Huang
c62d6871b3 Relocate common tracking denial entries
Bug: 299029620
Change-Id: I587e53a54e6bf4e3ccaa572cb35c28b4a0bc1eed
2023-09-15 03:39:48 +00:00
Desmond Huang
6f2589ec74 Remove obsolete entries
Bug: 299029620
Change-Id: Ib4782148b3e1167fd0113e5ec3eced7348a0cac2
2023-09-15 03:37:16 +00:00
Yixuan Wang
b02946bca9 Merge "Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..."" into udc-qpr-dev am: adf19fcc76
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: Ifbc5098189471983e87ef6e607b0a50e82b985a3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 01:12:39 +00:00
Yixuan Wang
1c333dd6dc Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..." am: bd654f00d9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24589942

Change-Id: Id83469911f8d0f9bd997f53aa49176dc6c083bd5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-15 01:12:33 +00:00
Yixuan Wang
adf19fcc76 Merge "Revert "Revert "[DO NOT MERGE] Add selinux policy for chre vendo..."" into udc-qpr-dev 2023-09-15 00:23:04 +00:00
Treehugger Robot
e3aa243bcf Merge "Add required sepolicy rule for Camera" into udc-qpr-dev am: 64c085cfab am: ed60a3086e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24418269

Change-Id: Id7f41df36e3fec35001a4188e4dd023c84f704f0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-14 04:14:40 +00:00
Treehugger Robot
ed60a3086e Merge "Add required sepolicy rule for Camera" into udc-qpr-dev am: 64c085cfab
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24418269

Change-Id: I28d9a36decdc7e2646ee17450804fae715cbc4f8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-14 04:04:59 +00:00