Kris Chen
c9d21c380f
Allow hal_power_default to access sysfs_scsi_devices_0000
...
Fix the following avc denial:
avc: denied { write } for name="clkgate_enable" dev="sysfs"
ino=69304 scontext=u:r:hal_power_default:s0 tcontext=u:object_r:sysfs_scsi_devices_0000:s0 tclass=file permissive=0
Bug: 290709897
Test: enroll fingerprint
Change-Id: Ib153087839d59e1839ceed4373a9be6f42e89619
2023-08-17 12:59:19 +00:00
Treehugger Robot
0f46a31902
Merge "Revert "Update SELinux error"" into udc-d1-dev
2023-07-28 00:06:22 +00:00
Yunju Lee
72f7cbe324
Revert "Update SELinux error"
...
This reverts commit 8f56fc9709
.
Reason for revert: b/291237127 is fixed
Bug: 291237127
Change-Id: I58e2636fb2ef1113a4305152948e07ed8a27a7d9
2023-07-24 15:10:01 +00:00
Jason Chiu
90a1f80488
Add hal_bootctl_default read permission to rootfs in Recovery mode
...
Fix the following avc denial:
avc: denied { read } for pid=485 comm="android.hardwar" name="bin" dev="rootfs" ino=9529 scontext=u:r:hal_bootctl_default:s0 tcontext=u:object_r:rootfs:s0 tclass=dir permissive=0
Bug: 282670401
Change-Id: I23ab086ba21d6ffea8b48b4208933c031effc4d4
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 12:56:47 +00:00
Jason Chiu
54b0343059
remove rule for bootctrl hidl version 1.2
...
Bug: 282670401
Change-Id: I25d169c335fb551cf1862fdf6e6540485a2b8016
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 12:56:38 +00:00
Jason Chiu
17fa2e6fe5
Add rule for bootctrl AIDL
...
Bug: 282670401
Change-Id: I1b4c5e7ced0fe67bbbaca2b607e4ca7422e170e1
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 20:53:04 +08:00
Wilson Sung
8f56fc9709
Update SELinux error
...
Test: scanBugreport
Bug: 291237127
Change-Id: Iacb47dce94f8ee2f71d382a9d0a22a6570345e2d
2023-07-17 13:50:09 +08:00
Krzysztof Kosiński
583baf021c
Remove bug map entry for unknown property reads in camera HAL.
...
Fixed by avoiding reading a property with the name "218".
Bug: 286508419
Test: check log for denials when running the camera on zuma device.
Change-Id: I3632868187d263ed787f5abf729c4e5c10a4f4c4
2023-07-14 07:12:51 +00:00
Treehugger Robot
8bcc8a1242
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev
2023-07-13 17:47:48 +00:00
Badhri Jagan Sridharan
20eade41f0
Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev
2023-07-13 16:43:18 +00:00
Wilson Sung
5c63d0ef54
Move systemui seapp_contexts to private
...
Fix: 289480799
Bug: 288227521
Change-Id: Ifc4288125d454569a66151c3c61e000ffd3526ac
2023-07-11 15:24:10 +08:00
Wilson Sung
83671d2646
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 289480799
Change-Id: I6c013d99b9b004b0a39d0b1861fa89da46bc846d
2023-07-10 14:21:22 +08:00
Yunju Lee
0a86789618
Add GPU power hint sysfs node to sepolicy for Zuma
...
Bug: 228076319
Bug: 278493002
Test: Perfetto trace inspection
Change-Id: I2f78c2e9175faa3f8af4b55e93e9b0f3d6bebdf2
2023-07-07 21:40:20 +00:00
Treehugger Robot
58c254fcaa
Merge "Update SELinux error" into udc-d1-dev
2023-07-06 15:09:35 +00:00
Ruofei Ma
f3258b9e00
Merge "Dec: SELinux policy change to allow uclamp.min set" into udc-d1-dev
2023-07-06 02:49:56 +00:00
Ruofei Ma
aa2084fe54
Merge "Revert "mediacodec_google: add hal_power"" into udc-d1-dev
2023-07-06 02:49:51 +00:00
Wilson Sung
7a77620145
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 289856761
Test: scanBugreport
Bug: 289856761
Test: scanAvcDeniedLogRightAfterReboot
Bug: 289856761
Change-Id: I4a3dcd037b1f63b8d06edab5a5ef4919ce75b8bc
2023-07-04 11:17:41 +08:00
Badhri Jagan Sridharan
62e714d81c
Add USB wakeup sources sepolicy contexts
...
Bug: 289376260
Change-Id: I72711aea571dad5be7ff36ca7a7c59240aaa2226
Merged-In: I72711aea571dad5be7ff36ca7a7c59240aaa2226
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
2023-06-30 19:36:01 +00:00
Ruofei Ma
4ee8ce9cd6
Dec: SELinux policy change to allow uclamp.min set
...
To get better performance for 4K60FPS HDR video, we need
to boost the cpu when the load is too heavy for Bigwave
decoder.
Bug: 274736629
Change-Id: I32d683084dd55354002d4fd4c266492df3839a35
Signed-off-by: Ruofei Ma <ruofeim@google.com>
2023-06-29 00:22:24 +00:00
Ruofei Ma
4bb2aa413d
Revert "mediacodec_google: add hal_power"
...
This reverts commit 3346e879e6
.
Reason for revert: This change is not needed since the performance boost implementation has changed
Change-Id: Icda43f23354e70503d3bb2efe0631a2d754a4920
2023-06-29 00:22:11 +00:00
Wilson Sung
4862829753
Move sysUI contexts to system_ext
...
Bug: 288227521
Change-Id: I3e5f2e76bf067f98b191b3b8ee6010c1abd95cb0
2023-06-28 14:10:06 +08:00
TreeHugger Robot
043ae16d5f
Merge "Add kernel vendor_fw_file dir read permission" into udc-d1-dev
2023-06-21 10:47:39 +00:00
Treehugger Robot
d8b11ef832
Merge "Supress kernel avc log before SELinux initialized" into udc-d1-dev
2023-06-21 09:59:33 +00:00
Treehugger Robot
81237d3843
Merge "Update SELinux error" into udc-d1-dev
2023-06-21 08:02:49 +00:00
Wilson Sung
3657f78cb0
Add kernel vendor_fw_file dir read permission
...
Fix: 288049349
Change-Id: I76751deb04e5b6a4362917c76764cddc74d0f76d
2023-06-21 16:02:41 +08:00
Wilson Sung
0b77875c4a
Supress kernel avc log before SELinux initialized
...
Bug: 288049349
Fix: 288049229
Change-Id: I5087a77e65ecdbaa868a7257342f5d99f424880a
2023-06-21 16:02:29 +08:00
Wilson Sung
8818dd2de5
Update SELinux error
...
Test: scanBugreport
Bug: 288049050
Bug: 288049522
Bug: 288049561
Bug: 288049349
Bug: 288049075
Test: scanAvcDeniedLogRightAfterReboot
Bug: 288049229
Change-Id: I939cd8981e64eadb0fa047b09162a02056ec2abf
2023-06-21 06:04:23 +00:00
Treehugger Robot
107d5bb0f9
Merge "Remove unused trace_marker dontaudit" into udc-d1-dev
2023-06-21 04:18:51 +00:00
Anthony Zhang
a594a23554
Merge "[DO NOT MERGE] Allow fingerprint to access persist property" into udc-d1-dev
2023-06-20 17:31:31 +00:00
Wilson Sung
f82fc11c11
Remove unused trace_marker dontaudit
...
Fix: 260366195
Change-Id: I7ece6549a64740c878dc92ce4b011136eb313533
2023-06-20 14:34:01 +08:00
Wilson Sung
0561b1bd1e
Update SELinux error
...
Test: scanBugreport
Bug: 287898138
Change-Id: I297e59df3774a32305d72706ee6a160f111dee7a
2023-06-19 06:45:37 +00:00
Wilson Sung
94fd2403a7
Remove obsolete bug_map and dontaudit
...
Fix: 287154997
Fix: 281815537
Fix: 279680264
Fix: 264600171
Fix: 264483456
Fix: 264600171
Fix: 264600171
Fix: 274374769
Fix: 274727372
Fix: 279680070
Fix: 280706610
Fix: 279680213
Fix: 272628762
Fix: 274374992
Fix: 283725554
Fix: 274374722
Fix: 272166737
Fix: 272166787
Fix: 264483532
Fix: 264483753
Fix: 264483754
Fix: 281815594
Fix: 269964574
Fix: 269964574
Fix: 280705998
Fix: 269964558
Fix: 264599934
Fix: 267714573
Fix: 268566481
Fix: 273143844
Fix: 275645636
Fix: 275646003
Fix: 267714573
Fix: 272166664
Fix: 267714573
Fix: 268566481
Fix: 273143844
Fix: 277155496
Fix: 267260619
Fix: 261933310
Fix: 262794429
Fix: 267261048
Change-Id: I1e6da1e43b1aaa398d496cd7b1f3b6267fd39e21
2023-06-19 06:45:30 +00:00
Treehugger Robot
a3e9615016
Merge "sepolicy: allow hal_power_stats to read sysfs_edgetpu" into udc-d1-dev
2023-06-19 01:35:28 +00:00
Treehugger Robot
344c7f46c1
Merge "Update SELinux error" into udc-d1-dev
2023-06-17 06:10:56 +00:00
Anthony Zhang
fb29e39ee1
[DO NOT MERGE] Allow fingerprint to access persist property
...
For zuma devices.
Bug: 258901849
Test: Local test on enrollment/delete, version update
Change-Id: I2c10bde2940778e0a434c2a073eb5793efeea455
2023-06-16 09:37:10 -07:00
Darren Hsu
f4f3f57534
sepolicy: allow hal_power_stats to read sysfs_edgetpu
...
Bug: 253702169
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: Ica2274f6e61cc35f7baf089ecc7b6c35f0914aeb
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-06-16 17:21:50 +08:00
Wilson Sung
5fb350f09f
Update SELinux error
...
Test: SELinuxUncheckedDenialBootTest
Bug: 286508419
Test: scanBugreport
Bug: 286508419
Test: scanAvcDeniedLogRightAfterReboot
Bug: 286508419
Change-Id: I1ba324133f5f4e14c5a7d43cfea25d98bda9faa9
2023-06-14 15:30:08 +08:00
Dinesh Yadav
100dd2387d
Add sepolicy for gxp_logging service to report metrics [RESTRICT AUTOMERGE]
...
gxp_logging service will periodically check the sysfs files exposed by
the gxp kernel driver and report stats to Suez framework.
These policies are needed to report the metrics.
Tested:
Found no violation with these policies on a P23 device
Bug: 278514198
Change-Id: I8c3e57dfe4e9a6caab425f2424d07e83f5e7b9c6
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-06-13 03:37:56 +00:00
Ruofei Ma
abd1dee381
Merge "mediacodec_google: add hal_power" into udc-d1-dev
2023-06-12 15:17:42 +00:00
TreeHugger Robot
032d9942de
Merge changes from topic "283841311" into udc-d1-dev
...
* changes:
Allow systemui_app access statsmanager_service
Move systemui_app to system_ext
2023-06-12 06:30:36 +00:00
Wilson Sung
5ac528406e
Allow systemui_app access statsmanager_service
...
Bug: 283841311
Change-Id: Id3c2838179736b42070959b3dad7c2ecd5580f22
2023-06-12 10:26:46 +08:00
Wilson Sung
7b19701919
Move systemui_app to system_ext
...
Bug: 283841311
Bug: 264266705
Change-Id: I6c2f167cda9a52da4698f3732c9fdbb13674bea8
2023-06-12 10:26:31 +08:00
Ruofei Ma
3346e879e6
mediacodec_google: add hal_power
...
Add mediacodec_google as a client to hal_power for it to
do power hint.
Bug: 274736629
Change-Id: Ib07001be6ae4aaeaebf2e97439b9af0766640dc9
Signed-off-by: Ruofei Ma <ruofeim@google.com>
2023-06-08 18:28:50 +00:00
Krzysztof Kosiński
35910a3e8b
Remove Google Camera access to GXP firmware.
...
This was originally a workaround and is not needed on Zuma.
Bug: 264489778
Test: gca_smoke.py on zuma device
Change-Id: I35d168a2f832a430ec1b782b12fb642bcea4bfd1
2023-06-08 10:19:18 +00:00
Treehugger Robot
8733772e74
Merge "Add sepolicies for gcma_camera heaps" into udc-d1-dev
2023-06-08 06:25:44 +00:00
Wei Wang
55020988a0
Merge "SELinux: allow to access GPU dvfs period change" into udc-d1-dev
2023-06-06 22:25:11 +00:00
Zixuan Lan
bdee55bb57
Merge "remove 280706211 from bug map" into udc-d1-dev
2023-06-06 13:02:17 +00:00
Allen Xu
78b62802e4
Add sepolicy for ConnectivityMonitor
...
Bug: 264489520
Test: v2/pixel-pts/base
Change-Id: I669a538fe3d0a03422638d7d19fc62a793246f6b
2023-06-06 02:01:38 +00:00
Zixuan Lan
76b53940a9
remove 280706211 from bug map
...
Bug: 280706211
Test: adb log
Change-Id: I167041363a27c294a3c8d2d2fb145ce751a34db7
2023-06-06 08:30:25 +08:00
Leo Hsieh
72577756e2
Merge "Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE]" into udc-d1-dev
2023-06-01 12:40:24 +00:00