Commit graph

1087 commits

Author SHA1 Message Date
Alan
afafafd8a4 Add permissions to connect radioext to twoshay.
Connection through grilantennatuningservice binder call.

Test: manual
Bug: 258970389
Change-Id: I419b40042cce363428f72fa723adf89bcf269ef4
2023-03-27 17:07:16 +08:00
Automerger Merge Worker
b6e575bbb2 Merge "Merge "comply with VTS requirements" into udc-dev am: c83e5be8d9 am: 08404c1181" 2023-03-27 06:52:04 +00:00
TreeHugger Robot
12221017f0 Merge "comply with VTS requirements" into udc-dev am: c83e5be8d9 am: 08404c1181
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22286084

Change-Id: I52343e61f01578236df06e1c0efba1546fbd1429
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 06:51:57 +00:00
TreeHugger Robot
495346b174 Merge "comply with VTS requirements" into udc-dev am: c83e5be8d9 am: 84aab225cf
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22286084

Change-Id: I9cb36c4f9964f2faed355e43c82c136e3672d6fa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 06:51:51 +00:00
TreeHugger Robot
84aab225cf Merge "comply with VTS requirements" into udc-dev am: c83e5be8d9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22286084

Change-Id: I0b9cf28cdfb549e2c3571e144f73f59d0004bc02
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 06:27:52 +00:00
TreeHugger Robot
08404c1181 Merge "comply with VTS requirements" into udc-dev am: c83e5be8d9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22286084

Change-Id: I989d12b888248ed584e108ab54b46023aa89d7a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 06:27:15 +00:00
TreeHugger Robot
c83e5be8d9 Merge "comply with VTS requirements" into udc-dev 2023-03-27 06:05:51 +00:00
Gina Ko
7a32ef8f12 Merge "Allow systemui to find cameraserver_service" into udc-d1-dev am: 5821d671f3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22270826

Change-Id: Id6c48fa93ffdf03e50925cec717fe971e6b63cb6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 05:57:43 +00:00
Gina Ko
5821d671f3 Merge "Allow systemui to find cameraserver_service" into udc-d1-dev 2023-03-27 05:32:14 +00:00
Neo Yu
69b786f1a1 Merge "Remove the bug of hal_radioext_default because the fix is merged." into udc-d1-dev am: e9aabf7e9e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22286082

Change-Id: I66001f37eb2bf0626f14fc3b92beb34ac77f6d00
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 04:46:22 +00:00
Neo Yu
e9aabf7e9e Merge "Remove the bug of hal_radioext_default because the fix is merged." into udc-d1-dev 2023-03-27 04:17:02 +00:00
Adam Shih
e124d5aea9 comply with VTS requirements
Bug: 275036679
Bug: 275034315
Test:
atest VtsHalDumpstateTargetTest:PerInstanceAndMode/DumpstateAidlPerModeTest#TestOk/0_android_hardware_dumpstate_IDumpstateDevice_default_FULL
atest VtsHalDumpstateTargetTest:PerInstance/DumpstateAidlGeneralTest#TestInvalidModeArgument_Negative/0_android_hardware_dumpstate_IDumpstateDevice_default

Change-Id: I1c89d7662351ffae5409c3f81b4360579fdc00ae
2023-03-27 12:07:24 +08:00
Wilson Sung
c705e81227 Merge "Move OTA context out of legacy folder" to master
Bug: 275143841
Test: OTA
Change-Id: I4774b7c48c075afc1b02d8c34fded212cd0efffb
2023-03-27 11:46:05 +08:00
Wilson Sung
6acea9d647 Move OTA context out of legacy folder
Bug: 275143841
Test: OTA
Change-Id: I4774b7c48c075afc1b02d8c34fded212cd0efffb
2023-03-27 11:44:51 +08:00
Dinesh Yadav
81ad90854c Merge "Add certificate & label for GCA-ENG & GCA-Next" into udc-d1-dev am: 4a01ae23ad
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22246482

Change-Id: Iee99f93a8a15d9f723d849f22565ce30ac552885
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:34:15 +00:00
Automerger Merge Worker
7f35172103 Merge "Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f am: bd22079636" 2023-03-27 03:33:59 +00:00
Neo Yu
d870375a14 Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f am: bd22079636
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22222570

Change-Id: Ib82e2caabcaea504cb673e1323795c728bbf3ead
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:33:56 +00:00
Neo Yu
879b137a93 Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f am: 70749d1b96
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22222570

Change-Id: I5d6c405caddfb607f0ab094c82e6344b1579c042
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:33:53 +00:00
Dinesh Yadav
4a01ae23ad Merge "Add certificate & label for GCA-ENG & GCA-Next" into udc-d1-dev 2023-03-27 03:13:24 +00:00
Neo Yu
58ff635b67 Remove the bug of hal_radioext_default because the fix is merged.
Bug: 274374768
Test: verify by test rom
Change-Id: Ia9665e5223997cf498f9320dfd0b1dbdacaae0b2
2023-03-27 11:08:25 +08:00
Neo Yu
bd22079636 Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22222570

Change-Id: I0fb5f8c60d68f9b33af85531c2865db2a20c1c93
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:07:44 +00:00
Neo Yu
70749d1b96 Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev am: 5b1689534f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22222570

Change-Id: I2d2a07056322f6971050e9299e17201b95773eaf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-27 03:07:31 +00:00
Neo Yu
5b1689534f Merge "sepolicy: allow hal_radioext_default binder call with servicemanager" into udc-dev 2023-03-27 02:36:56 +00:00
Gina Ko
ce85639700 Allow systemui to find cameraserver_service
avc:  denied  { find } for pid=2435 uid=10235 name=media.camera
scontext=u:r:systemui_app:s0:c235,c256,c512,c768
tcontext=u:object_r:cameraserver_service:s0 tclass=service_manager permissive=0

Bug: 272628174
Bug: 269964574
Bug: 274734888
Test: Manual. Able to turn on/off flashlight from QS.
Change-Id: Icedf70b06bd06eb5b819a00c9157b4f475e9a126
2023-03-25 00:18:23 -07:00
feiyuchen
f0dc7907b0 Allow camera HAL to access edgetpu_app_service
Today the EdgeTpu metrics logging library (used by EdgeTpu library used by camera HAL) has a dependency on edgetpu_app_service, in order to call its UserIsAuthorized API to know whether to log the metrics (We don't want to log metrics for 3P apps), see b/275016466.

This is not ideal, because strictly speaking, camera HAL doesn't need such dependency.

Still, this is fine and there is no security risk, because today even untrusted apps can call edgetpu_app_service: http://cs/android-internal/device/google/gs-common/edgetpu/sepolicy/untrusted_app_all.te;l=2;rcl=f4b62d12c171d4e294d8251e34197ab555c40673

Bug: 266084950
Test: Just mm
Change-Id: I6c0e4411370e4b300b9ceb3ad804688d873371cd
2023-03-24 17:01:49 +00:00
Dinesh Yadav
84aa699ac8 Add certificate & label for GCA-ENG & GCA-Next
This commit makes following changes:
- Add selinux policies for GCA-Eng & GCA-Next to access GXP device &
edgetpu services.
- Refactor code to push policies for Google Camera app from
legacy/whitechapel_pro/* to vendor/*

Tested:
- flashed both GCA-Eng & GCA-Next apps and observed no crashes due to gxp or edgetpu.
- scontext changed from "untrusted_app_32" to "debug_camera_app" in both cases.

Bug: 264490031
Change-Id: I51f69168eebd6c7e54e512b7abde8dd6bbe7c443
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-03-24 12:56:53 +00:00
Nicolas Geoffray
af3702bffd Remove old debug map entries.
Bug: 264483352
Change-Id: Ie47107328f58dc4f1d4070e93c0cd09e88cee021
2023-03-24 08:16:00 +00:00
Automerger Merge Worker
c9f1b9e1eb Merge changes from topic "am-d3a7fa5895ee4cec8bfdf44b308cc221"
* changes:
  [automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1 -s ours am: d2ec06c722 -s ours
  [automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da -s ours am: 24656c3354 -s ours
2023-03-24 07:05:47 +00:00
Adam Shih
0253a82992 [automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1 -s ours am: d2ec06c722 -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: Ibe3213924821184c0aaea408646a9fddf24fec28
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 07:05:36 +00:00
Adam Shih
a21760aee5 [automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da -s ours am: 24656c3354 -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: Id56ab87ccba7c0554bcdf08f72d1989b3ba2204e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 07:05:35 +00:00
Adam Shih
6e634640d9 [automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1 -s ours am: ebc5ee8dab -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: I9ac1838eccd3d571ca85855884e9542353d8e484
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 07:05:29 +00:00
Adam Shih
8ba9109c37 [automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da -s ours am: 79ea18119e -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: If93f6a1a2ebba149bcb8f208a2d7bc84251876ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 07:05:27 +00:00
Adam Shih
ebc5ee8dab [automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1 -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: I6d02ee84161d92b4b2723cf6b08ccc76bc51ab81
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 06:23:08 +00:00
Adam Shih
79ea18119e [automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: Ia5202a87a85fa610fc08f0b9ec8be23592c98585
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 06:23:07 +00:00
Adam Shih
d2ec06c722 [automerger skipped] Merge "Move pixel dumpstate to gs-common" into udc-dev am: 2b921528f1 -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: I0318c2e1d5b68b41634d5a51528c0322718325da
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 06:23:04 +00:00
Adam Shih
24656c3354 [automerger skipped] Move pixel dumpstate to gs-common am: 8538fd33da -s ours
am skip reason: Merged-In I4c46a2495ea07b9e44f56c4c6be726621e0ebf65 with SHA-1 ee45cfea78 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236029

Change-Id: Iadaf733efce7927fe53d7228ccd8d088717cf45a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 06:23:03 +00:00
Adam Shih
2b921528f1 Merge "Move pixel dumpstate to gs-common" into udc-dev 2023-03-24 05:54:52 +00:00
TreeHugger Robot
36dba99911 Merge "Update SELinux error" into udc-d1-dev am: b5a5ffb5e7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236036

Change-Id: I9fefd92f37973c746ad518c6f5d74d993a310fec
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 05:23:48 +00:00
Darren Hsu
fa57721d19 sepolicy: remove power stats from bug map am: 2965ba405c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22236038

Change-Id: I4c17a46bc4749812b0a15f19e54c48edc42bd9c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 05:23:35 +00:00
TreeHugger Robot
b5a5ffb5e7 Merge "Update SELinux error" into udc-d1-dev 2023-03-24 05:07:42 +00:00
Darren Hsu
2965ba405c sepolicy: remove power stats from bug map
Bug: 272166847
Test: N/A
Change-Id: If920d18418f87f14a1826dbe061cef4632a9646f
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2023-03-24 11:43:42 +08:00
Wilson Sung
599f4f5382 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 275001641
Test: scanBugreport
Bug: 268566481
Test: scanAvcDeniedLogRightAfterReboot
Bug: 268566481
Change-Id: I5a7ea66483985b6ca99162666d155fef69d65360
2023-03-24 11:11:17 +08:00
Automerger Merge Worker
5333bed98e Merge "Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3 am: 4f15bf412d" 2023-03-24 03:09:25 +00:00
KRIS CHEN
30adddd3c0 Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3 am: 4f15bf412d
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22178643

Change-Id: Ic65859abe754b1340d414fe471d74f959745e1ac
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 03:09:06 +00:00
KRIS CHEN
355457bf9d Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3 am: 24b32ddd4c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22178643

Change-Id: I0b1312780a03417859f9203ee8e1d34bca1ec2a4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 03:09:02 +00:00
Adam Shih
8538fd33da Move pixel dumpstate to gs-common
Bug: 240530709
Test: adb bugreport
Change-Id: I10f98673ea507f841d9d3f33d737c4e73c1b5b19
Merged-In: I4c46a2495ea07b9e44f56c4c6be726621e0ebf65
2023-03-24 02:55:51 +00:00
KRIS CHEN
24b32ddd4c Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22178643

Change-Id: I6fce057e9a6aef6d370bbf820818761fee8e615b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 02:41:38 +00:00
KRIS CHEN
4f15bf412d Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev am: dba88b81d3
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22178643

Change-Id: Ic8a12d3e5a4d79ef5edbe17fc340c54760cf8998
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 02:41:26 +00:00
KRIS CHEN
dba88b81d3 Merge "Allow fingerprint hal to read sysfs_leds" into udc-dev 2023-03-24 02:06:37 +00:00
Darren Hsu
1e254e01b3 Merge "Revert "Enforce system ui app"" into udc-d1-dev am: 128550da69
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22225579

Change-Id: Ica4b4787254f02f8c7fa361b238197918d1b4404
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-03-24 01:30:58 +00:00