Commit graph

2173 commits

Author SHA1 Message Date
Kadi Narmamatov
99c5c3dc9e Merge "rsfd: add get_prop for cbd property" into main 2024-04-15 07:36:23 +00:00
Treehugger Robot
32ce8f9878 Merge "allow vendor init to access compaction_proactiveness" into main 2024-04-12 15:03:00 +00:00
Enzo Liao
4104efb34f Merge "Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common." into main 2024-04-11 02:03:26 +00:00
Martin Liu
fb44539d8d allow vendor init to access compaction_proactiveness
Bug: 332916849
Test: boot
Change-Id: If1930fe0f174f2794296ded69d29420f2e59f6c2
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-10 23:34:49 +00:00
kadirpili
22844d59ca rsfd: add get_prop for cbd property
Bug: 323086582

Test: flash ROM and check for rfsd sepolicy logs

Change-Id: I6f8c555614386fda784b4532a4b004d5fe857bc6
2024-04-10 05:52:54 +00:00
Enzo Liao
df85139d17 Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common.
New paths (ag/26620507):
  RamdumpService: device/google/gs-common/ramdump_app
  SSRestartDetector: device/google/gs-common/ssr_detector_app

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
Change-Id: Id42c4de6c29d4a95f8a68a5732c4732edfb71da8
2024-04-08 19:21:13 +08:00
Treehugger Robot
2ab2661048 Merge "display: low-light blocking zone support" into 24D1-dev am: 0a3562a15c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/26800869

Change-Id: Ic14a269756206f63e9978bc453d68163fef6d868
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-04 03:27:45 +00:00
Treehugger Robot
0a3562a15c Merge "display: low-light blocking zone support" into 24D1-dev 2024-04-04 02:46:42 +00:00
Spade Lee
5a4b459eff sepolicy: allow kernel to search vendor debugfs am: 0ac2d9f7bc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/26738853

Change-Id: Ic8f63f4bbda165e07ea150a2f5a9cfc7211f5c07
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-03 04:24:44 +00:00
cweichun
495b0120ea display: low-light blocking zone support
Bug: 315876417
Test: verify the functionality works
Change-Id: Id8972d4c9057aa76f72dd32d47a5d07c0822645b
2024-04-02 15:25:43 +00:00
Spade Lee
0ac2d9f7bc sepolicy: allow kernel to search vendor debugfs
audit: type=1400 audit(1710259012.824:4): avc:  denied  { search } for  pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc:  denied  { search } for  pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc:  denied  { search } for  pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1

Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: I0e0c2fee4d508cc4e76714df0efbe5eca7ca5966
Signed-off-by: Spade Lee <spadelee@google.com>
2024-04-02 07:35:39 +00:00
Treehugger Robot
2a01ceedb9 Merge "display: low-light blocking zone support" into main 2024-04-02 04:21:29 +00:00
cweichun
e9c8f2af69 display: low-light blocking zone support
Bug: 315876417
Test: verify the functionality works
Change-Id: Id8972d4c9057aa76f72dd32d47a5d07c0822645b
2024-04-01 22:31:48 +00:00
Treehugger Robot
ff1c6fe2ba Merge "usb: correct the xhci wakeup path" into main 2024-04-01 04:00:20 +00:00
Mike Wang
aa7749fb7b Merge "Add the selinux policy for MDS to access modem_state file" into main 2024-03-29 15:16:19 +00:00
mikeyuewang
6546398c27 Add the selinux policy for MDS to access modem_state file
Add the selinux policy for MDS to access modem_state file

avc deny:
2024-03-25 16:05:58.244  9667-9667  DiagnosticServi         com.google.mds                       I  type=1400 audit(0.0:14): avc:  denied  { read } for  name="modem_state" dev="sysfs" ino=76870 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds
2024-03-25 16:05:58.244  9667-9667  DiagnosticServi         com.google.mds                       I  type=1400 audit(0.0:15): avc:  denied  { open } for  path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=76870 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds
2024-03-25 16:05:58.244  9667-9667  DiagnosticServi         com.google.mds                       I  type=1400 audit(0.0:16): avc:  denied  { getattr } for  path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=76870 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds

Bug: 331202327

Change-Id: I5e0088d274bc4f45010a19631ecbaece7cc3cc42
2024-03-28 20:28:10 +00:00
Albert Wang
c24ead7ce9 usb: correct the xhci wakeup path
Error log:
Error opening kernel wakelock stats for: wakeup177 (...xhci-hcd-exynos.5.auto/usb1/1-1/wakeup/wakeup177): Permission denied

bug: 311087938
Test: boot to home and host mode works well
Change-Id: I8bdd38499dec3852ba33510f40e58cebd3a4560f
2024-03-27 10:26:45 +00:00
Megha Patil
c8c92bd593 Sepolicy for the new property to switch Modem Binary
Sepolicy Rules added for telephony.TnNtn.image_switch

BUG: b/298322438
Bug: 323087490

Test: Test Binding sequence of Service
Change-Id: Ie79aff94159d79a573ec92546a5d3e390b802b22
2024-03-26 08:44:51 +00:00
Hungyen Weng
e0e63c38d7 Merge "Allow modem_svc to access modem files and perfetto" into main 2024-03-22 23:52:52 +00:00
Spade Lee
dbc39c622b Merge "pixelstats_vendor: add logbuffer_device r_file_perms" into main 2024-03-22 07:30:31 +00:00
Hungyen Weng
1db18cf4b3 Allow modem_svc to access modem files and perfetto
Bug: 330730987

Test: Confirmed that modem_svc is able to access token db files in modem partition
Test: Confiemed that modem_svc can send traces to perfetto

Change-Id: Ic8b724e0e8d72f5ead83e75ab85471bcbdaf8749
2024-03-22 00:29:41 +00:00
Oleg Blinnikov
920bae7e33 Merge "persist.sys.hdcp_checking property added" into main 2024-03-21 12:21:30 +00:00
Spade Lee
6ad6fb5edb sepolicy: allow kernel to search vendor debugfs
audit: type=1400 audit(1710259012.824:4): avc:  denied  { search } for  pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc:  denied  { search } for  pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc:  denied  { search } for  pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1

Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: I0e0c2fee4d508cc4e76714df0efbe5eca7ca5966
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-20 18:16:41 +00:00
Oleg Blinnikov
57d222ff5f persist.sys.hdcp_checking property added
Change-Id: I518db2909d2356a42421a626288365bb7458cc9c
Bug: 321344894
Test: modify property, see that max_ver file modified
2024-03-19 16:06:51 +00:00
Wilson Sung
110a712be9 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 330081782
Change-Id: I43805cda5b66b30999578b7a842fda6fe296003d
2024-03-18 03:23:52 +00:00
Spade Lee
3f707d13c2 pixelstats_vendor: add logbuffer_device r_file_perms
avc: denied { read } for name="logbuffer_maxfg_monitor" dev="tmpfs" ino=1034 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=0

Bug: 329174074
Test: no denied log, and able to read logbuffer in pixelstats_vendor
Change-Id: Ieca53f3092355c72784d4216c138cbb7cc9c7fa4
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-14 03:31:14 +00:00
Thiébaud Weksteen
c2eee26906 [automerger skipped] Remove persist.bootanim.color property definitions am: ac4d47214b am: 7767f1bb0c -s ours
am skip reason: Merged-In Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e with SHA-1 f75e76f913 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2995438

Change-Id: Iedd2a37983afb9a0d9d397e565160261b59ae65b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 06:40:17 +00:00
Thiébaud Weksteen
7767f1bb0c Remove persist.bootanim.color property definitions am: ac4d47214b
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2995438

Change-Id: I19b71f0efb55352fa9e0f651b9bb639946fcd850
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 05:57:12 +00:00
John Chang
ebf753dab2 display: change vrr.enabled to xrr.version am: 28e6526f84
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/26502093

Change-Id: Ia643b13f2e001d1c9d6c6bdd60e8a2221dfafc95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-08 11:17:09 +00:00
Thiébaud Weksteen
ac4d47214b Remove persist.bootanim.color property definitions
These now belong to the platform policy.

Bug: 321088135
Test: build
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:f75e76f91370231072cf8bb11621a9dfc12d4f08)
Merged-In: Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e
Change-Id: Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e
2024-03-08 01:38:44 +00:00
Shiyong Li
1a6dfa6e0d Merge "display: change vrr.enabled to xrr.version" into main 2024-03-08 01:28:49 +00:00
John Chang
28e6526f84 display: change vrr.enabled to xrr.version
Bug: 328001545
Test: Test MRR Version 2 is properly configured
Change-Id: Ide6493d77a6047023f20fbd9c5723a36033e3691
2024-03-07 22:19:51 +00:00
Yabin Cui
3694b1a7f1 Add SOC specific ETE sysfs paths
Also remove deprecated ETE sysfs paths.

Bug: 321061072
Test: run profcollectd on device
Change-Id: If56e9c4c51dc0e5f3f36e8c80671d67e910510c9
2024-03-07 19:53:47 +00:00
Xin Li
9ecaa34575 [automerger skipped] Merge Android 14 QPR2 to AOSP main am: c05d3b75cc -s ours am: 5d9dcfb7b9 -s ours
am skip reason: Merged-In I44d74dbe5baa23c7b90c7a6703dee5e856801942 with SHA-1 a05a0cb116 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2990820

Change-Id: I7a88a2a2ff5e0a90bb104e3ba1f03b6884a2196b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 10:46:51 +00:00
Xin Li
5d9dcfb7b9 [automerger skipped] Merge Android 14 QPR2 to AOSP main am: c05d3b75cc -s ours
am skip reason: Merged-In I44d74dbe5baa23c7b90c7a6703dee5e856801942 with SHA-1 a05a0cb116 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2990820

Change-Id: I36a9af16819ae09fbd7085313759076c1a5905e5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 09:55:27 +00:00
Xin Li
c05d3b75cc Merge Android 14 QPR2 to AOSP main
Bug: 319669529
Merged-In: I44d74dbe5baa23c7b90c7a6703dee5e856801942
Change-Id: Ia8b2507fd10774dd2889295a0ffab6bef0730c37
2024-03-06 09:29:51 -08:00
John Chang
7baab4b7e7 display: change vrr.enabled to xrr.version
Bug: 328001545
Test: Test MRR Version 2 is properly configured
Change-Id: Ide6493d77a6047023f20fbd9c5723a36033e3691
2024-03-06 16:13:39 +00:00
Treehugger Robot
10dcc53e99 Merge "Add AIDL media.c2 into service_contexts" into main 2024-03-05 06:17:02 +00:00
Sungtak Lee
84531ff361 Add AIDL media.c2 into service_contexts
Bug: 321808716
Change-Id: I7c79bc46112b8330c6d2a62db030ecc13d1cece4
2024-02-27 18:05:41 +00:00
Treehugger Robot
48a81fa140 Merge "add dsim wakeup labels" into main 2024-02-27 13:14:49 +00:00
Thiébaud Weksteen
2674171daa Merge "Revert^2 "Remove persist.bootanim.color property definitions"" into main 2024-02-26 22:40:44 +00:00
Thiébaud Weksteen
97a16aff57 Revert^2 "Remove persist.bootanim.color property definitions"
7b238e3659

Change-Id: I56143303453cce01d812997ed4a06d815f2a6859
2024-02-25 23:59:26 +00:00
Rubin Xu
0d051585be Merge "Revert "Remove persist.bootanim.color property definitions"" into main 2024-02-23 12:42:52 +00:00
Rubin Xu
7b238e3659 Revert "Remove persist.bootanim.color property definitions"
Revert submission 26301396-bootanim_prop

Reason for revert: DroidMonitor-triggered revert due to breakage https://android-build.corp.google.com/quarterdeck/?branch=git_main&target=sdk_goog3_x86_64-trunk_staging-userdebug&lkgb=11487950&lkbb=11488141&fkbb=11488141

Bug: 326521604

Reverted changes: /q/submissionid:26301396-bootanim_prop

Change-Id: Icad6e80687cd7cd2085018bca226b5f38f25db25
2024-02-23 12:25:54 +00:00
Thiébaud Weksteen
de322545f2 Merge "Remove persist.bootanim.color property definitions" into main 2024-02-23 02:59:57 +00:00
Thiébaud Weksteen
f75e76f913 Remove persist.bootanim.color property definitions
These now belong to the platform policy.

Bug: 321088135
Test: build
Change-Id: Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e
2024-02-21 13:47:43 +11:00
Peter Lin
161bbcd1e6 add dsim wakeup labels
Bug: 320693841
Bug: 321733124
test: ls sys/devices/platform/19440000.drmdsim/19440000.drmdsim.0/wakeup -Z
Change-Id: Ie99007455ef3879c8ee0aa1fa20801e4baf5e978
2024-02-17 08:11:13 +00:00
Will McVicker
1d8864cdee Update tcpm i2c sepolicy with new device name
The new names fix uninformative kernel wakelock names.

Bug: 315190967
Bug: 323447554
Change-Id: I5e0a4e13484c9886be398782e580313892987e2f
2024-02-16 15:15:55 -08:00
Weizhung Ding
15fda1a501 Add HWC permission to access IStats AIDL
avc:  denied  { call } for  scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:r:system_server:s0 tclass=binder permissive=0

Bug: 266898132
Test: Build and check log
Change-Id: I7e5ec165df0d397250b09f5981c1f45aea27bd4c
2024-02-10 02:18:16 +00:00
Treehugger Robot
4e66878b19 Merge "[displayport-stats] add sysfs access permission on Zuma devices." into main 2024-02-09 09:17:34 +00:00