Commit graph

2173 commits

Author SHA1 Message Date
Kyle Tso
658c20d024 dontaudit on dir search for vendor_votable_debugfs
Bug: 305880925
Bug: 310539058
Change-Id: I5e13370fe5430f3dfbf73ccff787986fbe80f9ea
Signed-off-by: Kyle Tso <kyletso@google.com>
2023-11-17 05:21:48 +00:00
Kyle Tso
0c0ce3699a Merge "hal_usb_impl: Add get_prop for vendor_usb_config_prop" into main 2023-11-17 03:51:44 +00:00
Chia-Chi Teng
d240d1b4e2 Revert^3 "bluetooth: Allow triggering AOC reset from BT HAL"
eb2dcaedc8

Change-Id: Idb64a3e6d60747273159682102a5367b99fe6833
2023-11-16 22:37:36 +00:00
Devika Krishnadas
b5c8a252b2 Add Pixel Mapper as a sp-HAL
Bug: 267352318

Change-Id: I3068038eb51f1a78a2cd300a6b71d96a2647b641
Signed-off-by: Devika Krishnadas <kdevika@google.com>
2023-11-16 01:25:45 +00:00
Angela Wu
ca8e0baee7 [automerger skipped] Allows GCA to access the hw_jpeg /dev/video12. am: 77ce612093 -s ours am: 4746ff1aee -s ours
am skip reason: Merged-In I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6 with SHA-1 6216625ef8 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25321138

Change-Id: Ia2f1c97331008bae978881fb6e3708f93964332b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 09:56:28 +00:00
Angela Wu
4746ff1aee [automerger skipped] Allows GCA to access the hw_jpeg /dev/video12. am: 77ce612093 -s ours
am skip reason: Merged-In I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6 with SHA-1 6216625ef8 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25321138

Change-Id: Iad6a9cc9166ae916b05fc137d5c39ed315f01309
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 09:06:56 +00:00
Angela Wu
77ce612093 Allows GCA to access the hw_jpeg /dev/video12.
Bug: 309578078
Test: https://android-build.corp.google.com/builds/abtd/run/L41100030000291922

Merged-In: I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6
Change-Id: I5b1649ec393d2f998159299b0f4feddcde4da80f
2023-11-15 06:28:23 +00:00
Kyle Tso
8912975a8b hal_usb_impl: Add get_prop for vendor_usb_config_prop
avc:  denied  { read } for  comm="android.hardwar" name="u:object_r:vendor_usb_config_prop:s0" dev="tmpfs" ino=391 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=file permissive=0

Bug: 310560098
Change-Id: I86588715cae2696dd0e045c5b75dde55e0f84c1e
Signed-off-by: Kyle Tso <kyletso@google.com>
2023-11-14 02:15:14 +00:00
Daniel Norman
8ff4604573 Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Change-Id: Ic46a7327bb2dab89f424cde2682a40f2b28a04db
Test: ls -z /dev/hidraw0
2023-11-10 22:52:00 +00:00
Alex Iacobucci
ca145d66c3 aoc: add sysfs file entry
Test: on device
Bug: 309950738
Change-Id: Iddaf30fce0bfd88d275d577b71bedd826b7a3ee6
Signed-off-by: Alex Iacobucci <alexiacobucci@google.com>
2023-11-10 18:27:42 +00:00
Angela Wu
0774e72816 Allows GCA to access the hw_jpeg /dev/video12. am: 6216625ef8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25311860

Change-Id: I2d7bf8ff4ff6dc07bffc1aa43c966a4a6ccda05f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-10 03:19:12 +00:00
Angela Wu
6216625ef8 Allows GCA to access the hw_jpeg /dev/video12.
Bug: 309578078
Test: https://android-build.corp.google.com/builds/abtd/run/L93200030000133974
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:0dde58951666a96f788a8a75bf63cde34079d48a)
Merged-In: I5b1649ec393d2f998159299b0f4feddcde4da80f
Change-Id: I5b1649ec393d2f998159299b0f4feddcde4da80f
This change is essentially a re-submission of ag/25305073 to an upstream branch.

Change-Id: I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6
2023-11-09 10:09:31 +00:00
Mike Wang
d6f83eba29 Merge "Change the MDS to platform app in selinux ap context." into main 2023-11-08 07:05:09 +00:00
Angela Wu
2e724b4b7f Merge "Allows GCA to access the hw_jpeg /dev/video12." into main 2023-11-08 05:20:21 +00:00
Treehugger Robot
0418f329cf Merge "Allow HWC to access display refresh control" into main 2023-11-08 04:20:23 +00:00
Mike Wang
96bac14cb1 Change the MDS to platform app in selinux ap context.
The MDS will be signed with platform key and become a platform app. To
make the selinux rules for modem_diagnostic_app work, need to set it to
platform app in app context.

Bug: 287683516

Test: Tested with both dev key or platform key signed MDS apps and the selinux rules works.


Change-Id: I375f57537a81514d3a6230ca042a4407accd6c15
2023-11-08 04:01:26 +00:00
Angela Wu
73caf508ec Allows GCA to access the hw_jpeg /dev/video12.
Bug: 309578078
Change-Id: Ic243a8dc0d6b2decd0ac70d076a456296936e9af
Test: https://android-build.corp.google.com/builds/abtd/run/L93200030000133974
2023-11-08 03:36:48 +00:00
Treehugger Robot
d76fa68860 Merge "sensors: Move USF related sepolicy to gs-common." into main 2023-11-07 06:49:08 +00:00
Rick Chen
587903f7c4 sensors: Move USF related sepolicy to gs-common.
Bug: 305120274
Test: Compile pass. Flash the build to ZUMA devices and no sensor
      related avc denied log.
Change-Id: I6911992b59802b62ffd206fd53e678da65ef1363
Signed-off-by: Rick Chen <rickctchen@google.com>
2023-11-06 23:20:16 +08:00
Sam Ou
c3d0ba2da2 Merge changes from topic "thismeal_enhancement" into main
* changes:
  Allow dump_power to create thismeal.txt by executing battery_mitigation
  Update odpm scale value sepolicy
2023-11-06 10:36:49 +00:00
Chris Lu
c13e6b0d82 Allow HWC to access display refresh control
Bug: 295603692
Test: write the node successfully
Change-Id: Ie900a9de4c23201ddefd61456bb2b8a80ba1945a
2023-11-06 09:28:09 +00:00
Mike Wang
7d43b5edb6 Merge "Add selinux policy change to allow MDS access Samsung OemRil hal." into main 2023-11-06 02:30:55 +00:00
samou
90ef181121 Allow dump_power to create thismeal.txt by executing battery_mitigation
Bug: 293899466
Change-Id: I88d4e3bcf18e818e9ee53ed69e522c9678c6edff
Signed-off-by: samou <samou@google.com>
2023-11-03 09:59:05 +00:00
mikeyuewang
b066861a22 Add selinux policy change to allow MDS access Samsung OemRil hal.
Bug: 301641283

selinux log:
11-03 15:32:38.850  2643  2643 I auditd  : type=1400 audit(0.0:1616): avc:  denied  { call } for  comm="binder:2643_3" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.850  2643  2643 I binder:2643_3: type=1400 audit(0.0:1616): avc:  denied  { call } for  scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  2643  2643 I auditd  : type=1400 audit(0.0:1617): avc:  denied  { transfer } for  comm="binder:2643_3" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  2643  2643 I binder:2643_3: type=1400 audit(0.0:1617): avc:  denied  { transfer } for  scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  1095  1095 I auditd  : type=1400 audit(0.0:1618): avc:  denied  { call } for  comm="HwBinder:1095_1" scontext=u:r:rild:s0 tcontext=u:r:modem_diagnostic_app:s0:c512,c768 tclass=binder permissive=1
11-03 15:32:38.854  1095  1095 I HwBinder:1095_1: type=1400 audit(0.0:1618): avc:  denied  { call } for  scontext=u:r:rild:s0 tcontext=u:r:modem_diagnostic_app:s0:c512,c768 tclass=binder permissive=1


Change-Id: Ia71844db230302fd3120b28b3ade2e55443ec078
2023-11-03 07:42:38 +00:00
Chia-Chi Teng
244aed251d Revert^2 "bluetooth: Allow triggering AOC reset from BT HAL" am: eb2dcaedc8 am: 5c827dca3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25205134

Change-Id: Ief73384699e0dfba3d3b8a79545bb3a3ad27c4c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 19:03:04 +00:00
Chia-Chi Teng
5c827dca3a Revert^2 "bluetooth: Allow triggering AOC reset from BT HAL" am: eb2dcaedc8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25205134

Change-Id: I075a05a8ccf755700923c9de7106b57f7f876830
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 17:56:21 +00:00
samou
3f67ca9478 Update odpm scale value sepolicy
Bug: 290149543
Change-Id: I66108d908ffa5cc6853b1e8280a5568c92a2e66f
Signed-off-by: samou <samou@google.com>
2023-10-31 12:13:45 +00:00
Chia-Chi Teng
eb2dcaedc8 Revert^2 "bluetooth: Allow triggering AOC reset from BT HAL"
This reverts commit 0aa787efa8.

Reason for revert: Debug BT HCI timeout on UD2A build and P23 on main

Bug: 306646797
Test: presubmit PTS
Change-Id: Ia72ea9d0ba0209cce483d220b420933b243e05b3
2023-10-27 22:53:17 +00:00
Daniel Okazaki
11ea7dd6d6 dump_power: adding dwell defend logs sepolicy
Bug: 306108267
Test: build/flash
Test: adb bugreport
Change-Id: Idb0571b6a974b98649f9cc071d506a8be94966f5
Signed-off-by: Daniel Okazaki <dtokazaki@google.com>
2023-10-27 18:45:43 +00:00
Chris Lu
32d99c3e05 Set context for sysfs file panel_pwr_vreg
Bug: 296978805
Test: read panel_pwr_vreg by dumpstate
Change-Id: Idc4845cadb278ef6406003cb3e55bfbdba758b4b
2023-10-27 07:46:46 +00:00
Sam Ou
5d83d85ad2 Merge "Allow battery_motigation to access gpu cur_freq" into main 2023-10-27 02:33:00 +00:00
Jacky Liu
8d46bb7983 Update sepolicy for new static i2c bus numbers
Bug: 305242309
Test: Boot to home
Change-Id: Ic235f6c2a4d325103dcd03e0977c1a88e98a0605
2023-10-23 14:26:55 +08:00
samou
a534079494 Allow battery_motigation to access gpu cur_freq
Bug: 290149543
Change-Id: I3396573d67f9f0995e63cd1e559f968107695d8b
Signed-off-by: samou <samou@google.com>
2023-10-23 01:44:06 +00:00
Ken Yang
fcf7f847ae SELinux: fix wakeup selinux issue
Bug: 305600876
Change-Id: I21a8993291b05a991e32bb7c363b5e831f4d0db0
Signed-off-by: Ken Yang <yangken@google.com>
2023-10-20 09:48:03 +00:00
John Chang
d20bee68db Merge "display: properties of vrr settings" into main 2023-10-18 15:46:47 +00:00
Wilson Sung
d48c63c215 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 305600857
Change-Id: I4715b66f1b1c051c8d83cffefdf4f3de6e5971ef
2023-10-16 12:19:18 +08:00
Hiroshi Akiyama
ea65836d59 Merge "Update missing dump_power sepolicy" into main 2023-10-15 23:45:47 +00:00
Hiroshi Akiyama
400a9d2068 Update missing dump_power sepolicy
Bug: 304851502
Test: adb bugreport and check dumpstate_board.txt
Change-Id: I1aed85ec3c1106381a395867a6eb90c11a8a1f84
Signed-off-by: Hiroshi Akiyama <hiroshiakiyama@google.com>
2023-10-14 05:02:16 +00:00
jonerlin
5883c27036 allow hal_bluetooth_btlinux write sysfs file am: 127ca27edc am: a49aa2bdf1
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24947936

Change-Id: I52e9eb48b5e73a6f388a3fb446d1e402bdca4468
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-13 03:14:04 +00:00
jonerlin
a49aa2bdf1 allow hal_bluetooth_btlinux write sysfs file am: 127ca27edc
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24947936

Change-Id: I183c49c5209e811166a96d2a9e2819bd29373b7c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-13 02:56:21 +00:00
Treehugger Robot
9b0ab2c62c Merge "hal_sensors_default: Add permission to AOC reset sysfs node." into main 2023-10-13 02:43:10 +00:00
Rick Chen
c31ec37715 hal_sensors_default: Add permission to AOC reset sysfs node.
[21675.099727] type=1400 audit(1697127034.684:751): avc:  denied  { write } for  comm="binder:912_1" name="reset" dev="sysfs" ino=102250 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_aoc_reset:s0 tclass=file permissive=0

Bug: 304681766
Test: Modify sensor HAL to trigger SSR when init.
      No avc denied log when sensor HAL access AOC reset sysfs node.
Change-Id: Iede0fa94a627c5e0d3166bec05ef7041154d8efe
Signed-off-by: Rick Chen <rickctchen@google.com>
2023-10-13 02:41:28 +00:00
jonerlin
127ca27edc allow hal_bluetooth_btlinux write sysfs file
Bug: 294747612
Test: v2/pixel-pts/release/bootstress/1200counts/suspend-resume
Change-Id: I62147f0b32156ede2a4e18e5a2bcb77fc2c91831
2023-10-13 09:00:07 +08:00
Brian Duddie
48527a1e6f Merge "Revert "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev am: c387226619 am: d1ddce264c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24948148

Change-Id: Ic95a0ecc1722769c2ac9ac7711ae93ea85a16ce0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-12 23:20:21 +00:00
Brian Duddie
d1ddce264c Merge "Revert "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev am: c387226619
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24948148

Change-Id: I59fbb4f03909803a422ff9a9abd17cae32eb7014
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-12 22:48:59 +00:00
Brian Duddie
c387226619 Merge "Revert "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev 2023-10-12 22:25:50 +00:00
John Chang
33c5d3185c display: properties of vrr settings
Bug: 290843234
Test: verify getprop/setprop after reboot.
Change-Id: I7e69fba9d16cabf899bf0d1c4ba041f079e645c1
2023-10-10 21:37:17 +00:00
Matthew Sedam
b2592218d6 Merge "Allow CHRE to access the IStats service for the zuma target" into main 2023-10-09 18:18:57 +00:00
Chia-Chi Teng
0aa787efa8 Revert "bluetooth: Allow triggering AOC reset from BT HAL"
Revert submission 24871772-bt-aoc-coredump

Reason for revert: b/300076774 root cause identified as b/299038059

Reverted changes: /q/submissionid:24871772-bt-aoc-coredump

Bug: 299038059
Change-Id: Ibd021c6b983c2eb390c268cf89f30e2e8ee54d21
2023-10-06 22:04:57 +00:00
Roy Luo
56723a2036 Merge "Support metric upload in USB HAL" into main 2023-10-05 20:24:46 +00:00