Commit graph

2157 commits

Author SHA1 Message Date
cweichun
e9c8f2af69 display: low-light blocking zone support
Bug: 315876417
Test: verify the functionality works
Change-Id: Id8972d4c9057aa76f72dd32d47a5d07c0822645b
2024-04-01 22:31:48 +00:00
Megha Patil
c8c92bd593 Sepolicy for the new property to switch Modem Binary
Sepolicy Rules added for telephony.TnNtn.image_switch

BUG: b/298322438
Bug: 323087490

Test: Test Binding sequence of Service
Change-Id: Ie79aff94159d79a573ec92546a5d3e390b802b22
2024-03-26 08:44:51 +00:00
Hungyen Weng
e0e63c38d7 Merge "Allow modem_svc to access modem files and perfetto" into main 2024-03-22 23:52:52 +00:00
Spade Lee
dbc39c622b Merge "pixelstats_vendor: add logbuffer_device r_file_perms" into main 2024-03-22 07:30:31 +00:00
Hungyen Weng
1db18cf4b3 Allow modem_svc to access modem files and perfetto
Bug: 330730987

Test: Confirmed that modem_svc is able to access token db files in modem partition
Test: Confiemed that modem_svc can send traces to perfetto

Change-Id: Ic8b724e0e8d72f5ead83e75ab85471bcbdaf8749
2024-03-22 00:29:41 +00:00
Oleg Blinnikov
920bae7e33 Merge "persist.sys.hdcp_checking property added" into main 2024-03-21 12:21:30 +00:00
Spade Lee
6ad6fb5edb sepolicy: allow kernel to search vendor debugfs
audit: type=1400 audit(1710259012.824:4): avc:  denied  { search } for  pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc:  denied  { search } for  pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc:  denied  { search } for  pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1

Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: I0e0c2fee4d508cc4e76714df0efbe5eca7ca5966
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-20 18:16:41 +00:00
Oleg Blinnikov
57d222ff5f persist.sys.hdcp_checking property added
Change-Id: I518db2909d2356a42421a626288365bb7458cc9c
Bug: 321344894
Test: modify property, see that max_ver file modified
2024-03-19 16:06:51 +00:00
Wilson Sung
110a712be9 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 330081782
Change-Id: I43805cda5b66b30999578b7a842fda6fe296003d
2024-03-18 03:23:52 +00:00
Spade Lee
3f707d13c2 pixelstats_vendor: add logbuffer_device r_file_perms
avc: denied { read } for name="logbuffer_maxfg_monitor" dev="tmpfs" ino=1034 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=0

Bug: 329174074
Test: no denied log, and able to read logbuffer in pixelstats_vendor
Change-Id: Ieca53f3092355c72784d4216c138cbb7cc9c7fa4
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-14 03:31:14 +00:00
Thiébaud Weksteen
c2eee26906 [automerger skipped] Remove persist.bootanim.color property definitions am: ac4d47214b am: 7767f1bb0c -s ours
am skip reason: Merged-In Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e with SHA-1 f75e76f913 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2995438

Change-Id: Iedd2a37983afb9a0d9d397e565160261b59ae65b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 06:40:17 +00:00
Thiébaud Weksteen
7767f1bb0c Remove persist.bootanim.color property definitions am: ac4d47214b
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2995438

Change-Id: I19b71f0efb55352fa9e0f651b9bb639946fcd850
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 05:57:12 +00:00
John Chang
ebf753dab2 display: change vrr.enabled to xrr.version am: 28e6526f84
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/26502093

Change-Id: Ia643b13f2e001d1c9d6c6bdd60e8a2221dfafc95
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-08 11:17:09 +00:00
Thiébaud Weksteen
ac4d47214b Remove persist.bootanim.color property definitions
These now belong to the platform policy.

Bug: 321088135
Test: build
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:f75e76f91370231072cf8bb11621a9dfc12d4f08)
Merged-In: Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e
Change-Id: Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e
2024-03-08 01:38:44 +00:00
Shiyong Li
1a6dfa6e0d Merge "display: change vrr.enabled to xrr.version" into main 2024-03-08 01:28:49 +00:00
John Chang
28e6526f84 display: change vrr.enabled to xrr.version
Bug: 328001545
Test: Test MRR Version 2 is properly configured
Change-Id: Ide6493d77a6047023f20fbd9c5723a36033e3691
2024-03-07 22:19:51 +00:00
Yabin Cui
3694b1a7f1 Add SOC specific ETE sysfs paths
Also remove deprecated ETE sysfs paths.

Bug: 321061072
Test: run profcollectd on device
Change-Id: If56e9c4c51dc0e5f3f36e8c80671d67e910510c9
2024-03-07 19:53:47 +00:00
Xin Li
9ecaa34575 [automerger skipped] Merge Android 14 QPR2 to AOSP main am: c05d3b75cc -s ours am: 5d9dcfb7b9 -s ours
am skip reason: Merged-In I44d74dbe5baa23c7b90c7a6703dee5e856801942 with SHA-1 a05a0cb116 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2990820

Change-Id: I7a88a2a2ff5e0a90bb104e3ba1f03b6884a2196b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 10:46:51 +00:00
Xin Li
5d9dcfb7b9 [automerger skipped] Merge Android 14 QPR2 to AOSP main am: c05d3b75cc -s ours
am skip reason: Merged-In I44d74dbe5baa23c7b90c7a6703dee5e856801942 with SHA-1 a05a0cb116 is already in history

Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2990820

Change-Id: I36a9af16819ae09fbd7085313759076c1a5905e5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-07 09:55:27 +00:00
Xin Li
c05d3b75cc Merge Android 14 QPR2 to AOSP main
Bug: 319669529
Merged-In: I44d74dbe5baa23c7b90c7a6703dee5e856801942
Change-Id: Ia8b2507fd10774dd2889295a0ffab6bef0730c37
2024-03-06 09:29:51 -08:00
John Chang
7baab4b7e7 display: change vrr.enabled to xrr.version
Bug: 328001545
Test: Test MRR Version 2 is properly configured
Change-Id: Ide6493d77a6047023f20fbd9c5723a36033e3691
2024-03-06 16:13:39 +00:00
Treehugger Robot
10dcc53e99 Merge "Add AIDL media.c2 into service_contexts" into main 2024-03-05 06:17:02 +00:00
Sungtak Lee
84531ff361 Add AIDL media.c2 into service_contexts
Bug: 321808716
Change-Id: I7c79bc46112b8330c6d2a62db030ecc13d1cece4
2024-02-27 18:05:41 +00:00
Treehugger Robot
48a81fa140 Merge "add dsim wakeup labels" into main 2024-02-27 13:14:49 +00:00
Thiébaud Weksteen
2674171daa Merge "Revert^2 "Remove persist.bootanim.color property definitions"" into main 2024-02-26 22:40:44 +00:00
Thiébaud Weksteen
97a16aff57 Revert^2 "Remove persist.bootanim.color property definitions"
7b238e3659

Change-Id: I56143303453cce01d812997ed4a06d815f2a6859
2024-02-25 23:59:26 +00:00
Rubin Xu
0d051585be Merge "Revert "Remove persist.bootanim.color property definitions"" into main 2024-02-23 12:42:52 +00:00
Rubin Xu
7b238e3659 Revert "Remove persist.bootanim.color property definitions"
Revert submission 26301396-bootanim_prop

Reason for revert: DroidMonitor-triggered revert due to breakage https://android-build.corp.google.com/quarterdeck/?branch=git_main&target=sdk_goog3_x86_64-trunk_staging-userdebug&lkgb=11487950&lkbb=11488141&fkbb=11488141

Bug: 326521604

Reverted changes: /q/submissionid:26301396-bootanim_prop

Change-Id: Icad6e80687cd7cd2085018bca226b5f38f25db25
2024-02-23 12:25:54 +00:00
Thiébaud Weksteen
de322545f2 Merge "Remove persist.bootanim.color property definitions" into main 2024-02-23 02:59:57 +00:00
Thiébaud Weksteen
f75e76f913 Remove persist.bootanim.color property definitions
These now belong to the platform policy.

Bug: 321088135
Test: build
Change-Id: Ie7fcd37eeb176334e36a86d6ad3d66f42c1b841e
2024-02-21 13:47:43 +11:00
Peter Lin
161bbcd1e6 add dsim wakeup labels
Bug: 320693841
Bug: 321733124
test: ls sys/devices/platform/19440000.drmdsim/19440000.drmdsim.0/wakeup -Z
Change-Id: Ie99007455ef3879c8ee0aa1fa20801e4baf5e978
2024-02-17 08:11:13 +00:00
Will McVicker
1d8864cdee Update tcpm i2c sepolicy with new device name
The new names fix uninformative kernel wakelock names.

Bug: 315190967
Bug: 323447554
Change-Id: I5e0a4e13484c9886be398782e580313892987e2f
2024-02-16 15:15:55 -08:00
Weizhung Ding
15fda1a501 Add HWC permission to access IStats AIDL
avc:  denied  { call } for  scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:r:system_server:s0 tclass=binder permissive=0

Bug: 266898132
Test: Build and check log
Change-Id: I7e5ec165df0d397250b09f5981c1f45aea27bd4c
2024-02-10 02:18:16 +00:00
Treehugger Robot
4e66878b19 Merge "[displayport-stats] add sysfs access permission on Zuma devices." into main 2024-02-09 09:17:34 +00:00
Roy Luo
6c5b44f1bb hal_usb_impl: Grant read permission to usb overheat files
Carried over from WHI PRO setting.

Bug: 307583011
Test: no audit logs
Change-Id: I45bb396f2597a4a8c150ad2975ecfa427d44f2a9
2024-02-07 05:18:41 +00:00
Treehugger Robot
a1c60e8b9e Merge "Allow camera_app can access priv-app symlinks" into main 2024-02-06 09:32:27 +00:00
Wilson Sung
332714ffac Allow camera_app can access priv-app symlinks
Fix: 322417347
Test: make selinux_policy
Change-Id: I467667b3a824a2e8b93e47c61c28ed9015fd44c3
2024-02-06 08:36:39 +00:00
Hongbo Zeng
cfe12763f2 Allow con_monitor_app to read/write the folder /data/vendor/radio
Bug: 322266425
Test: after apply the patch, we can see the adum_log/adum_log_old files
      are included in dumpstate_board.bin successfully without denial

Change-Id: Ic488a84a1942fbc424b08aa0cbd4d526014152cd
2024-02-02 15:42:31 +00:00
Wilson Sung
fdc9af0d88 Update error on ROM 11396046
Bug: 323471016
Test: SELinuxUncheckedDenialBootTest
Change-Id: I79953f209f474b8d71e06e197795b0d55c3ffce3
2024-02-02 08:04:40 +00:00
Kyle Tso
98972beada Allow dump_power to read sysfs directories
dump_power needs to read the directories under /sys/class/power_supply.

Bug: 320613177
Bug: 322294676
Change-Id: I7bc55b90d67a1d05bb097955ed632d62535e0f40
Signed-off-by: Kyle Tso <kyletso@google.com>
2024-01-31 07:01:55 +00:00
Wilson Sung
bbd26c9cb8 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 323086582
Test: scanBugreport
Bug: 323087490
Test: scanAvcDeniedLogRightAfterReboot
Bug: 323087197
Change-Id: I99006484464f82125a63be9c26eb8d8051c57840
2024-01-31 02:58:43 +00:00
Xin Li
6235550122 [automerger skipped] Merge Android 24Q1 Release (ab/11220357) am: a05a0cb116 -s ours
am skip reason: Merged-In I4a01be73d76a577d8da07c36276349525c0fda68 with SHA-1 b3e48816fa is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25972529

Change-Id: I3c95d14460c6bf995223a283b8856ffcbc7f72e5
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-31 02:03:39 +00:00
Kadi Narmamatov
0d82eda10f Merge "Revert "rfsd: add new property to sepolicy"" into main 2024-01-30 08:36:00 +00:00
Kadi Narmamatov
aef38ed6a7 Revert "rfsd: add new property to sepolicy"
Revert submission 25709311-rfsd-efs-erase

Reason for revert: we don't need it for this repo, only for pro

Reverted changes: /q/submissionid:25709311-rfsd-efs-erase

Bug: 315104803

Change-Id: I54e24ae99087b102c1a2f677ce4a7b2cad670992
2024-01-30 07:02:22 +00:00
Kieran Cyphus
4562b9e4e1 Merge "liboemservice_proxy: Update sepolicy to hal" into main 2024-01-29 05:58:46 +00:00
Daniel Chapin
6a6f65b5e5 Merge "Revert "Allow dump_power to read directories under "/sys/class/p..."" into main 2024-01-25 22:59:25 +00:00
Daniel Chapin
a5df4f07bf Revert "Allow dump_power to read directories under "/sys/class/p..."
Revert submission 25915320-320613177

Reason for revert: Droidfood blocking bug: 322294676

Reverted changes: /q/submissionid:25915320-320613177

Change-Id: I5545dcd73cdce5ae029444c313bf5dc3f642a5c0
2024-01-25 21:44:18 +00:00
kierancyphus
0cdeda46b2 liboemservice_proxy: Update sepolicy to hal
This was wrongly configured originally, and has instead been modified to
follow the advice from
https://source.android.com/docs/core/architecture/aidl/aidl-hals#sepolicy.

Test: atest vts_treble_vintf_vendor_test:DeviceManifest/SingleAidlTest
Bug: 321867236

Change-Id: I75df4696660b2c052324313785b244c263ebd75b
2024-01-25 17:51:51 +08:00
Angela Wu
b042c7713f [automerger skipped] Change the type of hw_jpg_device for selinux policy so that the GCA release flavor could access hw_jpg_device am: 3b30421350 -s ours
am skip reason: Merged-In If77a097b4ca823322ef41b13d6283390dac69d6c with SHA-1 0d32d1c172 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25983001

Change-Id: I5424ea5b92ff1b9bff957b86bfabf6dccb766f22
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-01-25 02:19:53 +00:00
Treehugger Robot
ab46db5fef Merge "Add capacity_headroom to gpu sysfs" into main 2024-01-24 23:30:45 +00:00