Commit graph

55 commits

Author SHA1 Message Date
Adam Shih
ee45cfea78 Move pixel dumpstate to gs-common
Bug: 240530709
Test: adb bugreport
Change-Id: I4c46a2495ea07b9e44f56c4c6be726621e0ebf65
Merged-In: I4c46a2495ea07b9e44f56c4c6be726621e0ebf65
2023-03-22 05:06:27 +00:00
Dai Li
f2200cdfa1 dma-heap: add dsp heap
Add dsp heap to zuma

Bug: 258813006
Change-Id: I953d1abb7cee15d041db1535df79c91cd25830f7
2023-03-08 20:43:53 +00:00
Adam Shih
7b84f2fc56 move camera dump to gs-common
Bug: 240530709
Test: adb bugreport
Create empty files starting with the following prefix
/data/vendor/camera/profiler/session-ended-
/data/vendor/camera/profiler/high-drop-rate-
/data/vendor/camera/profiler/watchdog-
/data/vendor/camera/profiler/camera-ended-
and do adb bugreport and make sure they end up in dumpstate_board.bin

Change-Id: I90e6d5142e7d512dafa6b8712d7fb252327359a5
2023-03-06 02:34:48 +00:00
Ernie Hsu
899ad9c1ab Merge "move mediacodec_samsung build config and sepolicy to gs-common" into udc-dev 2023-03-02 08:38:54 +00:00
Ernie Hsu
4d90089d25 move mediacodec_samsung build config and sepolicy to gs-common
Bug: 263444717
Test: build pass, camera record, youtube
Change-Id: I8fa4d79495b3971429b977a63aed811ef8d62ddb
2023-03-01 10:12:22 +00:00
Armelle Laine
d27961dc1b Define selinux properties for /dev/block/by-name/trusty_persist
Bug: 247013568
Test: - Verify that this change is a NOP for devices with TDP already
        created on top of the legacy f2fs partition /mnt/vendor/persist/ss
      - Verify that this change creates a valid symlink on a manually
        migrated block device
Change-Id: I226f365c6afbb5fa91ec1c9c1943f8dddac8183a
2023-02-27 22:42:08 +00:00
Ken Yang
58a6a1e772 WLC: cleanup the unused hal_wlc policies
Bug: 264489562
Bug: 262455719
Bug: 260366297
Bug: 260363384
Signed-off-by: Ken Yang <yangken@google.com>
(cherry picked from commit 6f9844d137)
Merged-In: I90b9e442082b8e03e76ce63aaee56e5882933449
Change-Id: I90b9e442082b8e03e76ce63aaee56e5882933449
2023-02-20 11:05:53 +00:00
Adam Shih
a438fce84f create cma dump
Bug: 240530709
Test: adb bugreport
Change-Id: I1a97098d73106a16c0be675a5d8f58183d5f9531
2023-02-15 12:41:31 +08:00
Adam Shih
4f442e5055 migrate power section to its own script
Bug: 240530709
Test: adb bugreport
Change-Id: Id7a761d61757efe55e8642553eccc84864b4a721
2023-02-08 15:40:18 +08:00
timmyli
d784c55c20 Add UW cornerfolk to file_contexts
Device needs access to cornerfolk. Evidence log in comments.

Bug: 267696227
Test: log check
Change-Id: If6bd49b76038673ad12fc6a1e7abd10b4cd3407e
2023-02-07 02:09:46 +00:00
Jenny Ho
4e6cfb143d Add permission for logbuffer_bd
Bug: 242679204
Change-Id: I7376f10dc183bac805c89d6905e70a7b92694471
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2023-02-05 14:06:06 +08:00
Cyan_Hsieh
79bd040d55 Add gcf partition to OTA domain
This allows the OTA mechanism to write to the bootloader slot to
perform the actual OTA

Bug: 263218204
Change-Id: Iec3f3aa73344f4e9a305bc3c1c3f2db7624aca93
2023-02-02 18:08:51 +08:00
TreeHugger Robot
1746a6cc59 Merge "Add rule for secure_element AIDL" 2023-01-27 02:00:45 +00:00
Grace Chen
c93ba80fc4 Add rule for secure_element AIDL
Add secureelement aidl

b/261565407

Change-Id: I79f35e8231d9eae81b90528269410c169bb1a035
2023-01-23 18:46:01 +00:00
Dinesh Yadav
b068bb3f64 Allow camera HAL and GCA to access GXP device.
The camera HAL and Google Camera App
need selinux permission to run workloads on Aurora DSP. This
change adds the selinux rules too allow these clients to
access the GXP device in order to execute workloads on DSP.

Bug: 264321380
Test: Verified that the camera HAL service and GCA app is able to access the GXP device.
Change-Id: I125650b4841b4cbdc50077a0d80b113b02699de8
2023-01-17 03:21:04 +00:00
Leo Liou
30f3c17252 zuma: add sepolicy for ufs_firmware_update process
Allow the script to access the specified partition and sysfs.

Bug: 224464892
Test: full build and test ffu flow
Change-Id: I27f0d4d97f15a7c108e6ae1b8c12fda2c69c303a
Signed-off-by: Leo Liou <leoliou@google.com>
2023-01-13 08:19:27 +08:00
Hasini Gunasinghe
ab3f430aae Merge "[Port ag/20645453] Map Rust KeyMint to same SELinux policy as C++" 2023-01-10 19:52:48 +00:00
Hasini Gunasinghe
76c4f20434 [Port ag/20645453] Map Rust KeyMint to same SELinux policy as C++
Allow the Rust and C++ implementations of the KeyMint HAL service to be
toggled easily, by mapping them to the same SELinux policy.

Bug: 197891150
Bug: 225036046
Test: VtsAidlKeyMintTargetTest
Change-Id: Ic43985f32aaabb2560ef0b02573a1e587e24fc6a
2023-01-10 01:19:17 +00:00
Ankit Goyal
344fb91207 Allow dmabuf heap access to graphics allocator
There is no change in dmabuf heaps from pro, so these use the exact same
SEpolicy rules

Fix: 264489636
Test: Boots to home (with SELinux enforced)
Test: VtsHalGraphicsMapperV4_0TargetTest
Change-Id: I58ec8d9558fa76b805c0882cbbb20bfd08aead13
2023-01-09 16:16:28 -08:00
Adam Shih
92f2edf487 label GPU as same_process_hal
Bug: 261933250
Bug: 261933249
Bug: 261933226
Bug: 261933097
Bug: 261933428
Bug: 261933227
Bug: 260768740
Bug: 260922185
Test: boot to home under enforcing mode
Change-Id: Ied95ce0c1f851785e0848f7af788969f27e45101
2023-01-04 12:10:27 +08:00
Wasb Liu
cefb0a621f hal_health_default: updated sepolicy
Add necessary sepolicy.

Bug: 260366438
Bug: 261933135
Bug: 262178574
Bug: 262794970
Test: no avc denied for hal_health_default
Change-Id: I47043f64931c191063a0b3d5807ef814fa8b787f
Signed-off-by: Wasb Liu <wasbliu@google.com>
2022-12-29 09:47:23 +00:00
Darren Hsu
3ea4ff4944 sepolicy: Allow hal_power_stats to access required sysfs
Bug: 260366519
Bug: 260768935
Bug: 260922184
Bug: 261105152
Bug: 261363958
Bug: 261519183
Bug: 261651283
Bug: 261783107
Test: Captured bugreport and make sure there is no any avc denails
Test: related to hal_power_stats
Change-Id: Ic214dc1d8ea920b1bb8f700cd8b75918af3ab046
Signed-off-by: Darren Hsu <darrenhsu@google.com>
2022-12-29 14:33:17 +08:00
Kris Chen
4963317cad zuma: fingerprint: fix SELinux denails
Bug: 261105164
Test: boot with no relevant error on p23 device
Change-Id: I8d897693685591a042c5febfeca0121375749b8e
2022-12-23 17:43:50 +08:00
timmyli
8d061f7ebc Add hal_camera_default se linux file for zuma
Add hal_camera_default.te for zuma. Move referenced contexts and
settings to new zuma-sepolicy folders. Add hal_camera_default type declaration
to file.te

Bug: 261651093, 260366029, 263185135
Test: Build and test for hal_camera_default denials
Change-Id: Id0246f9ca8fd399853894e9e41548976ab44ccd0
2022-12-22 21:41:11 +00:00
Adam Shih
169b9143fb restart domains
Bug: 254378739
Test: boot to home
Change-Id: I7d077b7c5edfb3bee07a05fda05e5076e515c7bf
2022-12-20 08:50:43 +08:00
Adam Shih
be72019a1c restart domains
Bug: 254378739
Test: boot to home
Change-Id: I6faa55132d52896c5138eb4dcff2bde3557dcf90
2022-12-19 11:01:25 +08:00
Adam Shih
419fa5774c create an empty dump file for wlan
Bug: 261784587
Test: adb bugreport
Change-Id: I6a0e65e4624348f5f34cb618150a6978996dcdc9
2022-12-14 13:33:33 +08:00
Adam Shih
4b9a4886f1 restart domains
Bug: 254378739
Test: boot to home
Change-Id: Ie67dbbdad041d84cddbabf62e98b0a8f2b1eadf2
2022-12-14 09:19:54 +08:00
Adam Shih
126d6a4771 restart domains
Bug: 254378739
Test: boot to home
Change-Id: Ib6b0d9415b286fc7025df009a3bf7f1105ae4860
2022-12-13 13:38:35 +08:00
Lopy Cheng
7b281b63f2 hal_graphics_composer_default: add sepolicy for display
Fix avc denied issues.

Bug: 260769163
Bug: 261105029
Bug: 261933075
Bug: 261933169
Bug: 262178623
Test:
There is no AVC denied log after reboot

Change-Id: I291877a0f70f25a43f49a96a2b280be925bb98c5
2022-12-12 16:12:18 +08:00
George Chang
b5887a9853 Update permissions for st54spi and st33spi
Remove st33spi and update st54spi rules

Bug: 261519145
Bug: 261519169
Test: m atest && atest-dev com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I37736275204ad7bea98ce225121e71545260187c
2022-12-08 15:08:17 +00:00
Adam Shih
1774ec056b restart domain
Bug: 254378739
Test: boot to home
Change-Id: I776bf6fa66605a4c3a888f2362b79fa1e0ec122a
2022-12-08 09:55:57 +08:00
Cyan Hsieh
fe97b2df7a Revert "restart domain"
This reverts commit be714f6fa3.

Reason for revert: build breakage

Change-Id: I02a16de23cd657bc0cc9494b03f840d0060ac9d1
2022-12-07 04:41:58 +00:00
Adam Shih
be714f6fa3 restart domain
Bug: 254378739
Test: boot to home
Change-Id: I63a3e22ccbee16dd3f186e76fa698d2e7454c057
2022-12-07 09:48:15 +08:00
TreeHugger Robot
8ddedfa7fa Merge "restart domains" 2022-12-06 08:35:59 +00:00
Jenny Ho
ed45434f01 add permission for dump logbuffer
Bug: 260756283
Change-Id: If4d885cc53bbb2a4796d638c5f23fbf17a494436
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2022-12-06 10:50:21 +08:00
Adam Shih
21f4111616 restart domains
Bug: 254378739
Test: boot to home
Change-Id: If7264f1a5cdaace0558dbeda986d9c899dd6ac08
2022-12-06 10:34:32 +08:00
TreeHugger Robot
7c94c8c83f Merge "restart deomains" 2022-12-05 06:02:58 +00:00
Adam Shih
d6f91bdd8c restart deomains
Bug: 254378739
Test: boot to home
Change-Id: I0ba59f5781d50ac4e9d8f501792a74187eda864e
2022-12-05 12:33:05 +08:00
Kenny Root
cc4dfa8c8b Add GSA BL1 partition to OTA domain
This allows the OTA mechanism to write to the bootloader slot to
perform the actual OTA

Test: reboot and check partition label with ls -lZ
Bug: 259190970
Change-Id: I5433adbacfc6e16e61aac2e797f03f63b0deb29f
Signed-off-by: Kenny Root <kroot@google.com>
2022-12-04 18:36:10 -08:00
Adam Shih
d4f59d3275 retire pixel-sepolicy
Bug: 254378739
Test: boot with power stats launched
Change-Id: I5fa1b4617000490de6cdf79699014e076a34d816
2022-12-02 10:19:13 +08:00
Adam Shih
f1bdfb4013 restart other domains
Bug: 254378739
Test: boot to home
Change-Id: Iddd16a969514e9e74f20793a1b7a02d328d6afbf
2022-11-30 07:59:05 +08:00
Adam Shih
8cc9ed0404 review partitions
Bug: 254378739
Test: boot with relevant files labled correctly
Change-Id: Ic5954b5de7976e1864dc77254b547d6c97f9e564
2022-11-21 10:31:06 +08:00
Adam Shih
c37b0484af review fsck and relevant partitions
Bug: 254378739
Test: boot with no relevant error
Change-Id: Ibdcea873e830c534101aaea0f12a1717748dcb48
2022-11-21 10:16:19 +08:00
Adam Shih
381ae2dddb restart device dependent HALs
Bug: 254378739
Test: build pass
Change-Id: I06061867773dd20989923b3ce81b58a457f8a929
2022-11-18 11:19:34 +08:00
Adam Shih
fc41e82939 remove edgeTPU folder
Bug: 258114806
Test: build pass
Change-Id: Ic9eb7f671ef3ede2da40e0ec40b0bb0646240924
2022-11-09 12:39:09 +08:00
Adam Shih
d55543c288 isolate samsung modem related sepolicy
Bug: 254378739
Test: boot with relevant binary launched
Change-Id: Ia18fce855bee17b93d97d1aa29a40d834a81fe09
2022-11-09 10:41:21 +08:00
TreeHugger Robot
19126e2dda Merge "restart hal_health_default" 2022-11-07 03:26:11 +00:00
Adam Shih
5944db2199 restart hal_health_default
Bug: 254378739
Test: boot with the HAL started
Change-Id: I3143011c46e540424e340cbc36a818449395ec69
2022-11-07 02:19:16 +00:00
Adam Shih
4c8e49f158 review sced
Bug: 254378739
Test: build pass with sced correctly labeled
Change-Id: Ie59a048c5996d03d0641c824f6526618c260795e
2022-11-07 10:02:18 +08:00