Enzo Liao
4104efb34f
Merge "Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common." into main
2024-04-11 02:03:26 +00:00
Enzo Liao
df85139d17
Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common.
...
New paths (ag/26620507):
RamdumpService: device/google/gs-common/ramdump_app
SSRestartDetector: device/google/gs-common/ssr_detector_app
Bug: 298102808
Design: go/sys-software-logging
Test: Manual
Change-Id: Id42c4de6c29d4a95f8a68a5732c4732edfb71da8
2024-04-08 19:21:13 +08:00
Treehugger Robot
2ab2661048
Merge "display: low-light blocking zone support" into 24D1-dev am: 0a3562a15c
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/26800869
Change-Id: Ic14a269756206f63e9978bc453d68163fef6d868
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-04 03:27:45 +00:00
Treehugger Robot
0a3562a15c
Merge "display: low-light blocking zone support" into 24D1-dev
2024-04-04 02:46:42 +00:00
Spade Lee
5a4b459eff
sepolicy: allow kernel to search vendor debugfs am: 0ac2d9f7bc
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/26738853
Change-Id: Ic8f63f4bbda165e07ea150a2f5a9cfc7211f5c07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-03 04:24:44 +00:00
cweichun
495b0120ea
display: low-light blocking zone support
...
Bug: 315876417
Test: verify the functionality works
Change-Id: Id8972d4c9057aa76f72dd32d47a5d07c0822645b
2024-04-02 15:25:43 +00:00
Spade Lee
0ac2d9f7bc
sepolicy: allow kernel to search vendor debugfs
...
audit: type=1400 audit(1710259012.824:4): avc: denied { search } for pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc: denied { search } for pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc: denied { search } for pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1
Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: I0e0c2fee4d508cc4e76714df0efbe5eca7ca5966
Signed-off-by: Spade Lee <spadelee@google.com>
2024-04-02 07:35:39 +00:00
Treehugger Robot
2a01ceedb9
Merge "display: low-light blocking zone support" into main
2024-04-02 04:21:29 +00:00
cweichun
e9c8f2af69
display: low-light blocking zone support
...
Bug: 315876417
Test: verify the functionality works
Change-Id: Id8972d4c9057aa76f72dd32d47a5d07c0822645b
2024-04-01 22:31:48 +00:00
Treehugger Robot
ff1c6fe2ba
Merge "usb: correct the xhci wakeup path" into main
2024-04-01 04:00:20 +00:00
Mike Wang
aa7749fb7b
Merge "Add the selinux policy for MDS to access modem_state file" into main
2024-03-29 15:16:19 +00:00
mikeyuewang
6546398c27
Add the selinux policy for MDS to access modem_state file
...
Add the selinux policy for MDS to access modem_state file
avc deny:
2024-03-25 16:05:58.244 9667-9667 DiagnosticServi com.google.mds I type=1400 audit(0.0:14): avc: denied { read } for name="modem_state" dev="sysfs" ino=76870 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds
2024-03-25 16:05:58.244 9667-9667 DiagnosticServi com.google.mds I type=1400 audit(0.0:15): avc: denied { open } for path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=76870 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds
2024-03-25 16:05:58.244 9667-9667 DiagnosticServi com.google.mds I type=1400 audit(0.0:16): avc: denied { getattr } for path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=76870 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds
Bug: 331202327
Change-Id: I5e0088d274bc4f45010a19631ecbaece7cc3cc42
2024-03-28 20:28:10 +00:00
Albert Wang
c24ead7ce9
usb: correct the xhci wakeup path
...
Error log:
Error opening kernel wakelock stats for: wakeup177 (...xhci-hcd-exynos.5.auto/usb1/1-1/wakeup/wakeup177): Permission denied
bug: 311087938
Test: boot to home and host mode works well
Change-Id: I8bdd38499dec3852ba33510f40e58cebd3a4560f
2024-03-27 10:26:45 +00:00
Megha Patil
c8c92bd593
Sepolicy for the new property to switch Modem Binary
...
Sepolicy Rules added for telephony.TnNtn.image_switch
BUG: b/298322438
Bug: 323087490
Test: Test Binding sequence of Service
Change-Id: Ie79aff94159d79a573ec92546a5d3e390b802b22
2024-03-26 08:44:51 +00:00
Hungyen Weng
e0e63c38d7
Merge "Allow modem_svc to access modem files and perfetto" into main
2024-03-22 23:52:52 +00:00
Spade Lee
dbc39c622b
Merge "pixelstats_vendor: add logbuffer_device r_file_perms" into main
2024-03-22 07:30:31 +00:00
Hungyen Weng
1db18cf4b3
Allow modem_svc to access modem files and perfetto
...
Bug: 330730987
Test: Confirmed that modem_svc is able to access token db files in modem partition
Test: Confiemed that modem_svc can send traces to perfetto
Change-Id: Ic8b724e0e8d72f5ead83e75ab85471bcbdaf8749
2024-03-22 00:29:41 +00:00
Oleg Blinnikov
920bae7e33
Merge "persist.sys.hdcp_checking property added" into main
2024-03-21 12:21:30 +00:00
Spade Lee
6ad6fb5edb
sepolicy: allow kernel to search vendor debugfs
...
audit: type=1400 audit(1710259012.824:4): avc: denied { search } for pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc: denied { search } for pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc: denied { search } for pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1
Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: I0e0c2fee4d508cc4e76714df0efbe5eca7ca5966
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-20 18:16:41 +00:00
Oleg Blinnikov
57d222ff5f
persist.sys.hdcp_checking property added
...
Change-Id: I518db2909d2356a42421a626288365bb7458cc9c
Bug: 321344894
Test: modify property, see that max_ver file modified
2024-03-19 16:06:51 +00:00
Wilson Sung
110a712be9
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 330081782
Change-Id: I43805cda5b66b30999578b7a842fda6fe296003d
2024-03-18 03:23:52 +00:00
Spade Lee
3f707d13c2
pixelstats_vendor: add logbuffer_device r_file_perms
...
avc: denied { read } for name="logbuffer_maxfg_monitor" dev="tmpfs" ino=1034 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=0
Bug: 329174074
Test: no denied log, and able to read logbuffer in pixelstats_vendor
Change-Id: Ieca53f3092355c72784d4216c138cbb7cc9c7fa4
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-14 03:31:14 +00:00
Thiébaud Weksteen
c2eee26906
[automerger skipped] Remove persist.bootanim.color property definitions am: ac4d47214b
am: 7767f1bb0c
-s ours
...
am skip reason: Merged-In Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e with SHA-1 f75e76f913
is already in history
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2995438
Change-Id: Iedd2a37983afb9a0d9d397e565160261b59ae65b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 06:40:17 +00:00
Thiébaud Weksteen
7767f1bb0c
Remove persist.bootanim.color property definitions am: ac4d47214b
...
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2995438
Change-Id: I19b71f0efb55352fa9e0f651b9bb639946fcd850
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 05:57:12 +00:00
John Chang
ebf753dab2
display: change vrr.enabled to xrr.version am: 28e6526f84
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/26502093
Change-Id: Ia643b13f2e001d1c9d6c6bdd60e8a2221dfafc95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-08 11:17:09 +00:00
Thiébaud Weksteen
ac4d47214b
Remove persist.bootanim.color property definitions
...
These now belong to the platform policy.
Bug: 321088135
Test: build
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:f75e76f91370231072cf8bb11621a9dfc12d4f08 )
Merged-In: Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e
Change-Id: Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e
2024-03-08 01:38:44 +00:00
Shiyong Li
1a6dfa6e0d
Merge "display: change vrr.enabled to xrr.version" into main
2024-03-08 01:28:49 +00:00
John Chang
28e6526f84
display: change vrr.enabled to xrr.version
...
Bug: 328001545
Test: Test MRR Version 2 is properly configured
Change-Id: Ide6493d77a6047023f20fbd9c5723a36033e3691
2024-03-07 22:19:51 +00:00
Yabin Cui
3694b1a7f1
Add SOC specific ETE sysfs paths
...
Also remove deprecated ETE sysfs paths.
Bug: 321061072
Test: run profcollectd on device
Change-Id: If56e9c4c51dc0e5f3f36e8c80671d67e910510c9
2024-03-07 19:53:47 +00:00
Xin Li
9ecaa34575
[automerger skipped] Merge Android 14 QPR2 to AOSP main am: c05d3b75cc
-s ours am: 5d9dcfb7b9
-s ours
...
am skip reason: Merged-In I44d74dbe5baa23c7b90c7a6703dee5e856801942 with SHA-1 a05a0cb116
is already in history
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2990820
Change-Id: I7a88a2a2ff5e0a90bb104e3ba1f03b6884a2196b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 10:46:51 +00:00
Xin Li
5d9dcfb7b9
[automerger skipped] Merge Android 14 QPR2 to AOSP main am: c05d3b75cc
-s ours
...
am skip reason: Merged-In I44d74dbe5baa23c7b90c7a6703dee5e856801942 with SHA-1 a05a0cb116
is already in history
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2990820
Change-Id: I36a9af16819ae09fbd7085313759076c1a5905e5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 09:55:27 +00:00
Xin Li
c05d3b75cc
Merge Android 14 QPR2 to AOSP main
...
Bug: 319669529
Merged-In: I44d74dbe5baa23c7b90c7a6703dee5e856801942
Change-Id: Ia8b2507fd10774dd2889295a0ffab6bef0730c37
2024-03-06 09:29:51 -08:00
John Chang
7baab4b7e7
display: change vrr.enabled to xrr.version
...
Bug: 328001545
Test: Test MRR Version 2 is properly configured
Change-Id: Ide6493d77a6047023f20fbd9c5723a36033e3691
2024-03-06 16:13:39 +00:00
Treehugger Robot
10dcc53e99
Merge "Add AIDL media.c2 into service_contexts" into main
2024-03-05 06:17:02 +00:00
Sungtak Lee
84531ff361
Add AIDL media.c2 into service_contexts
...
Bug: 321808716
Change-Id: I7c79bc46112b8330c6d2a62db030ecc13d1cece4
2024-02-27 18:05:41 +00:00
Treehugger Robot
48a81fa140
Merge "add dsim wakeup labels" into main
2024-02-27 13:14:49 +00:00
Thiébaud Weksteen
2674171daa
Merge "Revert^2 "Remove persist.bootanim.color property definitions"" into main
2024-02-26 22:40:44 +00:00
Thiébaud Weksteen
97a16aff57
Revert^2 "Remove persist.bootanim.color property definitions"
...
7b238e3659
Change-Id: I56143303453cce01d812997ed4a06d815f2a6859
2024-02-25 23:59:26 +00:00
Rubin Xu
0d051585be
Merge "Revert "Remove persist.bootanim.color property definitions"" into main
2024-02-23 12:42:52 +00:00
Rubin Xu
7b238e3659
Revert "Remove persist.bootanim.color property definitions"
...
Revert submission 26301396-bootanim_prop
Reason for revert: DroidMonitor-triggered revert due to breakage https://android-build.corp.google.com/quarterdeck/?branch=git_main&target=sdk_goog3_x86_64-trunk_staging-userdebug&lkgb=11487950&lkbb=11488141&fkbb=11488141
Bug: 326521604
Reverted changes: /q/submissionid:26301396-bootanim_prop
Change-Id: Icad6e80687cd7cd2085018bca226b5f38f25db25
2024-02-23 12:25:54 +00:00
Thiébaud Weksteen
de322545f2
Merge "Remove persist.bootanim.color property definitions" into main
2024-02-23 02:59:57 +00:00
Thiébaud Weksteen
f75e76f913
Remove persist.bootanim.color property definitions
...
These now belong to the platform policy.
Bug: 321088135
Test: build
Change-Id: Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e
2024-02-21 13:47:43 +11:00
Peter Lin
161bbcd1e6
add dsim wakeup labels
...
Bug: 320693841
Bug: 321733124
test: ls sys/devices/platform/19440000.drmdsim/19440000.drmdsim.0/wakeup -Z
Change-Id: Ie99007455ef3879c8ee0aa1fa20801e4baf5e978
2024-02-17 08:11:13 +00:00
Will McVicker
1d8864cdee
Update tcpm i2c sepolicy with new device name
...
The new names fix uninformative kernel wakelock names.
Bug: 315190967
Bug: 323447554
Change-Id: I5e0a4e13484c9886be398782e580313892987e2f
2024-02-16 15:15:55 -08:00
Weizhung Ding
15fda1a501
Add HWC permission to access IStats AIDL
...
avc: denied { call } for scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:r:system_server:s0 tclass=binder permissive=0
Bug: 266898132
Test: Build and check log
Change-Id: I7e5ec165df0d397250b09f5981c1f45aea27bd4c
2024-02-10 02:18:16 +00:00
Treehugger Robot
4e66878b19
Merge "[displayport-stats] add sysfs access permission on Zuma devices." into main
2024-02-09 09:17:34 +00:00
Roy Luo
6c5b44f1bb
hal_usb_impl: Grant read permission to usb overheat files
...
Carried over from WHI PRO setting.
Bug: 307583011
Test: no audit logs
Change-Id: I45bb396f2597a4a8c150ad2975ecfa427d44f2a9
2024-02-07 05:18:41 +00:00
Treehugger Robot
a1c60e8b9e
Merge "Allow camera_app can access priv-app symlinks" into main
2024-02-06 09:32:27 +00:00
Wilson Sung
332714ffac
Allow camera_app can access priv-app symlinks
...
Fix: 322417347
Test: make selinux_policy
Change-Id: I467667b3a824a2e8b93e47c61c28ed9015fd44c3
2024-02-06 08:36:39 +00:00
Hongbo Zeng
cfe12763f2
Allow con_monitor_app to read/write the folder /data/vendor/radio
...
Bug: 322266425
Test: after apply the patch, we can see the adum_log/adum_log_old files
are included in dumpstate_board.bin successfully without denial
Change-Id: Ic488a84a1942fbc424b08aa0cbd4d526014152cd
2024-02-02 15:42:31 +00:00