samou
3f67ca9478
Update odpm scale value sepolicy
...
Bug: 290149543
Change-Id: I66108d908ffa5cc6853b1e8280a5568c92a2e66f
Signed-off-by: samou <samou@google.com>
2023-10-31 12:13:45 +00:00
Chris Lu
32d99c3e05
Set context for sysfs file panel_pwr_vreg
...
Bug: 296978805
Test: read panel_pwr_vreg by dumpstate
Change-Id: Idc4845cadb278ef6406003cb3e55bfbdba758b4b
2023-10-27 07:46:46 +00:00
Sam Ou
5d83d85ad2
Merge "Allow battery_motigation to access gpu cur_freq" into main
2023-10-27 02:33:00 +00:00
Jacky Liu
8d46bb7983
Update sepolicy for new static i2c bus numbers
...
Bug: 305242309
Test: Boot to home
Change-Id: Ic235f6c2a4d325103dcd03e0977c1a88e98a0605
2023-10-23 14:26:55 +08:00
samou
a534079494
Allow battery_motigation to access gpu cur_freq
...
Bug: 290149543
Change-Id: I3396573d67f9f0995e63cd1e559f968107695d8b
Signed-off-by: samou <samou@google.com>
2023-10-23 01:44:06 +00:00
Ken Yang
fcf7f847ae
SELinux: fix wakeup selinux issue
...
Bug: 305600876
Change-Id: I21a8993291b05a991e32bb7c363b5e831f4d0db0
Signed-off-by: Ken Yang <yangken@google.com>
2023-10-20 09:48:03 +00:00
Hiroshi Akiyama
ea65836d59
Merge "Update missing dump_power sepolicy" into main
2023-10-15 23:45:47 +00:00
Hiroshi Akiyama
400a9d2068
Update missing dump_power sepolicy
...
Bug: 304851502
Test: adb bugreport and check dumpstate_board.txt
Change-Id: I1aed85ec3c1106381a395867a6eb90c11a8a1f84
Signed-off-by: Hiroshi Akiyama <hiroshiakiyama@google.com>
2023-10-14 05:02:16 +00:00
jonerlin
5883c27036
allow hal_bluetooth_btlinux write sysfs file am: 127ca27edc
am: a49aa2bdf1
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24947936
Change-Id: I52e9eb48b5e73a6f388a3fb446d1e402bdca4468
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-13 03:14:04 +00:00
jonerlin
127ca27edc
allow hal_bluetooth_btlinux write sysfs file
...
Bug: 294747612
Test: v2/pixel-pts/release/bootstress/1200counts/suspend-resume
Change-Id: I62147f0b32156ede2a4e18e5a2bcb77fc2c91831
2023-10-13 09:00:07 +08:00
Sergey Volk
a1e0faee5b
Allow HWC access to dp_hotplug_error_code in sysfs
...
When an error is detected, DisplayPort kernel driver writes hotplug error code into a sysfs file. Hardware composer reads the error code from sysfs and then needs to write 0 in there to reset the code.
Test: manual
Bug: 283461313
Change-Id: Ifadc2403d62b12b0661fd170fa6df36b6a199fc3
2023-09-21 02:56:08 +00:00
Tai Kuo
e45cb8ef52
Allow regmap debugfs for drivers probed by insmod am: 1a65e5d5e4
am: 8cf4f20ca3
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24727593
Change-Id: Id56ae9157f1fb0278d9b70641818c6dcb1629b8d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-09-13 00:32:10 +00:00
Tai Kuo
1a65e5d5e4
Allow regmap debugfs for drivers probed by insmod
...
auditd : type=1400 audit(0.0:731): avc: denied { search } for
comm="modprobe" name="regmap" dev="debugfs" ino=2057
scontext=u:r:insmod-sh:s0 tcontext=u:object_r:vendor_regmap_debugfs:s0
tclass=dir permissive=1 bug=b/274727542
vendor_kernel_boot and vendor_dlkm modules probe by insmod need this.
Move regmap debugfs from legacy/whitechapel_pro/ to vendor/.
Bug: 274727542
Bug: 289012421
Test: ls -d /sys/kernel/debug/regmap/*-0043
Change-Id: I2bd35a6bc942536505f62d4122f0de892f243802
2023-09-12 16:45:09 +08:00
Ilya Matyukhin
ee710b08c1
Merge "zuma: Add sysfs_faceauth_gcma_heap type" into udc-qpr-dev am: 013ec5ce54
am: 41056381db
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24343631
Change-Id: I43c243eff3bfbf14828f29f13789b1a3eb9f38c8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-08-16 22:10:07 +00:00
Ilya Matyukhin
33540f5a05
zuma: Add sysfs_faceauth_gcma_heap type
...
Bug: 288156745
Test: build
Change-Id: I937b37542d8ff5a9e9e0d4d9b53c8300820a1826
2023-08-11 05:37:59 +00:00
Dinesh Yadav
67b64c50b4
Merge "[Cleanup]: Move gxp sepolicies to gs-common for P23" into main
2023-07-14 04:00:25 +00:00
Treehugger Robot
00cc329f1c
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242
am: a5187246a1
am: d079eb063f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602
Change-Id: I2c9fe5900fcdaa1fbbfa0bf0ee923cc68819c4b9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-14 01:16:08 +00:00
Treehugger Robot
a5187246a1
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev am: 8bcc8a1242
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23643602
Change-Id: I5662604da8561e8e8729cd494ba35d1797339e82
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 19:02:40 +00:00
Treehugger Robot
8bcc8a1242
Merge "Add GPU power hint sysfs node to sepolicy for Zuma" into udc-d1-dev
2023-07-13 17:47:48 +00:00
Badhri Jagan Sridharan
5958be5bd0
Merge "Add USB wakeup sources sepolicy contexts" into udc-d1-dev am: 20eade41f0
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23864376
Change-Id: I512b4db16ff18acc313dc0d0c94f78bf4743ddcc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-07-13 17:34:05 +00:00
Dinesh Yadav
1278d8fc59
[Cleanup]: Move gxp sepolicies to gs-common for P23
...
These policies are moved to gs-common as part of ag/24002524
Bug: 288368306
Change-Id: Iaa15e497eafd54b1b702192a3c8f7fe0c908f8a1
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-07-10 05:13:16 +00:00
Yunju Lee
0a86789618
Add GPU power hint sysfs node to sepolicy for Zuma
...
Bug: 228076319
Bug: 278493002
Test: Perfetto trace inspection
Change-Id: I2f78c2e9175faa3f8af4b55e93e9b0f3d6bebdf2
2023-07-07 21:40:20 +00:00
Badhri Jagan Sridharan
62e714d81c
Add USB wakeup sources sepolicy contexts
...
Bug: 289376260
Change-Id: I72711aea571dad5be7ff36ca7a7c59240aaa2226
Merged-In: I72711aea571dad5be7ff36ca7a7c59240aaa2226
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
2023-06-30 19:36:01 +00:00
Badhri Jagan Sridharan
4f16f36a78
Add USB wakeup sources sepolicy contexts
...
Bug: 289376260
Change-Id: I72711aea571dad5be7ff36ca7a7c59240aaa2226
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
2023-06-30 02:13:27 +00:00
Dinesh Yadav
2bd05aeaad
Add sepolicy for gxp_logging service to report metrics [RESTRICT AUTOMERGE] am: 100dd2387d
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23468178
Change-Id: I4bd79f57f2a063aef60e8dab049460636633ccea
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-15 03:57:29 +00:00
Darren Hsu
3f20e683b1
sepolicy: lable NFC sysfs path for hal_power_stats am: 3c8fb109b8
am: 0893338352
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23667874
Change-Id: Ib6be476ccb2948ed30ce2b108c90b32c26b958f3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-14 12:34:15 +00:00
Darren Hsu
3c8fb109b8
sepolicy: lable NFC sysfs path for hal_power_stats
...
Bug: 270498656
Test: capture a bugreport and ensure that there is
no avc denials for power stats
Change-Id: Ie765f6267ceacbc0b11426f4ee81ea0670195ddb
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-06-14 13:58:33 +08:00
Dinesh Yadav
100dd2387d
Add sepolicy for gxp_logging service to report metrics [RESTRICT AUTOMERGE]
...
gxp_logging service will periodically check the sysfs files exposed by
the gxp kernel driver and report stats to Suez framework.
These policies are needed to report the metrics.
Tested:
Found no violation with these policies on a P23 device
Bug: 278514198
Change-Id: I8c3e57dfe4e9a6caab425f2424d07e83f5e7b9c6
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-06-13 03:37:56 +00:00
Wei Wang
f1c34d8891
Merge "SELinux: allow to access GPU dvfs period change" into udc-d1-dev am: 55020988a0
am: 75529f8437
am: 35e6fbb0fa
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22480582
Change-Id: I925c4d4ae039a7cd73a4d90fbaf1a77ead2dbbeb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-06-07 00:20:04 +00:00
Wei Wang
55020988a0
Merge "SELinux: allow to access GPU dvfs period change" into udc-d1-dev
2023-06-06 22:25:11 +00:00
leohsieh
458b60e5c9
Allow hal_fingerprint_default to access sysfs_aoc_udfps [DO NOT MERGE]
...
Fix the following avc denial:
avc: denied { search } for name="17000000.aoc" dev="sysfs" ino=22035 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc:s0 tclass=dir permissive=0
avc: denied { write } for name="udfps_set_clock_source" dev="sysfs" ino=106891 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc_udfps:s0 tclass=file permissive=0
avc: denied { read } for name="udfps_get_disp_freq" dev="sysfs" ino=106893 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc_udfps:s0 tclass=file permissive=0
Bug: 267271482
Test: Verify fingerprint HAL process can read/write to the sysfs node.
Change-Id: I39a2e69b1c314d52944bb16ada61e7e6761561cf
2023-05-31 13:16:43 +08:00
Leo Hsieh
3443d6d373
Merge "Allow hal_fingerprint_default to access sysfs_aoc_udfps"
2023-05-25 00:58:34 +00:00
Jimmy Hu
a6b09ce04e
Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev am: 86cb19bb2f
am: 9279426af4
am: 41369192ab
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23341842
Change-Id: Ic4b1dd6c02cffaf4ec285e49e5ba6763c020b531
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-24 09:34:07 +00:00
Jimmy Hu
86cb19bb2f
Merge "Set sepolicy for shell script of disabling contaminant detection" into udc-d1-dev
2023-05-24 08:14:01 +00:00
Kenny Root
107d3314a4
Merge "Add GSA logs policy" into udc-d1-dev
2023-05-22 05:14:11 +00:00
Jimmy Hu
70e6dd395b
Set sepolicy for shell script of disabling contaminant detection
...
(ported from Ib2e3cf498851c0c9e5e74aacc9bf391549c0ad1a)
Bug: 263916675
Bug: 264231895
Test: setprop vendor.usb.contaminantdisable true
Change-Id: Ia451a6abc4a3c872c002efa323d06e9179bd656b
Signed-off-by: Jimmy Hu <hhhuuu@google.com>
2023-05-19 09:54:23 +00:00
Kenny Root
7be3a71942
Add GSA logs policy
...
This adds a label to the sysfs files for GSA logs to allow dumpstate to
read them during a bugreport.
(cherry picked from commit 076591d107
)
Bug: 271125313
Test: adb shell dumpstate
Change-Id: I8842c0bec972c4cfad15ca689f8e4ae7fa99e179
Merged-In: I8842c0bec972c4cfad15ca689f8e4ae7fa99e179
2023-05-17 17:36:35 +00:00
Luke Chang
3d16072afb
Merge "sepolicy: label cpd cl2 & cl1 target_residency" into udc-d1-dev
2023-05-17 10:09:06 +00:00
lukechang
73e88c0a83
sepolicy: label cpd cl2 & cl1 target_residency
...
Test: build and boot to home
Bug: 277390134
Merged-In: I127ffc74aa68976de4aaa4a750b4043def4e2759
Change-Id: I127ffc74aa68976de4aaa4a750b4043def4e2759
Signed-off-by: lukechang <lukechang@google.com>
2023-05-17 02:11:41 +00:00
Luke Chang
c371a4da4a
Merge "sepolicy: label cpd cl2 & cl1 target_residency"
2023-05-17 02:05:30 +00:00
Luis Delgado de Mendoza Garcia
a3f0628f68
Add chre channel sepolicy entries
...
Bug: 275143652
Fix: 275143652
Test: in-device verification.
Change-Id: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
Merged-In: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
2023-05-16 21:43:09 +00:00
lukechang
b7f556c9cb
sepolicy: label cpd cl2 & cl1 target_residency
...
Test: build and boot to home
Bug: 277390134
Change-Id: I127ffc74aa68976de4aaa4a750b4043def4e2759
Signed-off-by: lukechang <lukechang@google.com>
2023-05-16 09:11:25 +00:00
Luis Delgado de Mendoza Garcia
2a06b44cdc
Add chre channel sepolicy entries
...
Bug: 241960170
Test: in-device verification.
Change-Id: Iba27ad45a38b491ebdfa0191f5af02aafa9f90e2
2023-05-10 17:35:01 +00:00
leohsieh
b7db7f8eae
Allow hal_fingerprint_default to access sysfs_aoc_udfps
...
Fix the following avc denial:
avc: denied { search } for name="17000000.aoc" dev="sysfs" ino=22035 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc:s0 tclass=dir permissive=0
avc: denied { write } for name="udfps_set_clock_source" dev="sysfs" ino=106891 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc_udfps:s0 tclass=file permissive=0
avc: denied { read } for name="udfps_get_disp_freq" dev="sysfs" ino=106893 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_aoc_udfps:s0 tclass=file permissive=0
Bug: 267271482
Test: Verify fingerprint HAL process can read/write to the sysfs node.
Change-Id: I39a2e69b1c314d52944bb16ada61e7e6761561cf
2023-05-10 14:50:56 +08:00
lukechang
35f3c85c09
sepolicy: label cpd cl2 & cl1
...
Test: build and boot to home
Bug: 277390134
Change-Id: Iad525a9c556ee436afb8cbd29156b6b593329e83
Signed-off-by: lukechang <lukechang@google.com>
2023-05-08 08:49:45 +00:00
lukechang
9d44de7ecf
sepolicy: label cpd cl2 & cl1
...
Test: build and boot to home
Bug: 277390134
Merged-In: Iad525a9c556ee436afb8cbd29156b6b593329e83
Change-Id: Iad525a9c556ee436afb8cbd29156b6b593329e83
Signed-off-by: lukechang <lukechang@google.com>
2023-05-08 08:39:21 +00:00
TreeHugger Robot
27d8b200d6
Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev am: 1db3ac365d
am: 55ecf93b7d
am: 5b6de1f086
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22589719
Change-Id: I70e686a83c79305cd21fe972748c72056e64c433
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-05 07:34:49 +00:00
TreeHugger Robot
1db3ac365d
Merge "[display-stats] enable pixelstats access to display metrics on Zuma devices." into udc-d1-dev
2023-05-05 05:35:55 +00:00
Manali Bhutiyani
cf161d6ce3
[display-stats] enable pixelstats access to display metrics on Zuma devices.
...
Bug: 259554507
Test: Build and boot on device
adb shell cmd stats print-stats | grep -i <atom-id>
Change-Id: Ifc47211063b98f727b3b0eb7f7ebd42e3c7bb99b
2023-05-04 20:56:24 +00:00
Jack Wu
06bd429e9e
sepolicy: allows pixelstat to access pca file nodes am: 8d45937a38
am: 923f9f2f5e
am: 4b33e0e2d2
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22987856
Change-Id: I79ee04faddffa909f5529a81af5fdf68c3a2a879
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-05-03 15:33:44 +00:00