Commit graph

2036 commits

Author SHA1 Message Date
Khoa Hong
fb1c8b60bb Suppress avc error log on debugfs's usb folder.
The XHCI driver in kernel will write debugging information to DebugFS on
some USB host operations (for example: plugging in a USB headphone). We
are not using those information right now.

Bug: 311088739
Test: No error when plugging a USB headphone in.
Change-Id: I3a8e2290e97967c02453eadff440d8bbeefa31b1
2023-11-30 14:50:52 +08:00
Treehugger Robot
9c8cb72283 Merge "allow vendor init to access percpu_pagelist_high_fraction" into main 2023-11-27 01:45:54 +00:00
Kyle Tso
9bd6f5ebd1 hal_usb_impl: Add get_prop for vendor_usb_config_prop am: 5775ea074a am: 2816dc3328
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25353179

Change-Id: I8745571157eb29f5809b338383c11aa64a1c67ba
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-23 14:58:34 +00:00
Kyle Tso
2816dc3328 hal_usb_impl: Add get_prop for vendor_usb_config_prop am: 5775ea074a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25353179

Change-Id: Ie03d8b8da3e6ca672906764bebfc29ef6d3cf97e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-23 14:25:25 +00:00
Kyle Tso
5775ea074a hal_usb_impl: Add get_prop for vendor_usb_config_prop
avc:  denied  { read } for  comm="android.hardwar" name="u:object_r:vendor_usb_config_prop:s0" dev="tmpfs" ino=391 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=file permissive=0

Bug: 310560098
Change-Id: I86588715cae2696dd0e045c5b75dde55e0f84c1e
Signed-off-by: Kyle Tso <kyletso@google.com>
2023-11-23 08:33:04 +00:00
Chia-Chi Teng
59af5f70be Merge "Revert^3 "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev am: edac582d40 am: 650409d4b4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25400378

Change-Id: I2003f92080f61363c0549d36a2a95c0ddf651a6a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-23 08:11:42 +00:00
Chia-Chi Teng
650409d4b4 Merge "Revert^3 "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev am: edac582d40
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25400378

Change-Id: I92c8528073ca783dba8f9de5c51dde3616da47c9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-23 07:39:22 +00:00
Martin Liu
b25d110b38 allow vendor init to access percpu_pagelist_high_fraction
Bug: 309409009
Test: boot
Change-Id: I2a4b34e3318b5de8688fe25133d7839165a2566d
Signed-off-by: Martin Liu <liumartin@google.com>
2023-11-23 15:35:07 +08:00
Chia-Chi Teng
edac582d40 Merge "Revert^3 "bluetooth: Allow triggering AOC reset from BT HAL"" into udc-qpr-dev 2023-11-23 07:07:04 +00:00
Randall Huang
60b467ac40 Move sg_device related policy
Bug: 312582937
Test: make selinux_policy
Change-Id: Ic6e1f6228764cd2ddc96d574a10838ca4bc05332
Signed-off-by: Randall Huang <huangrandall@google.com>
2023-11-22 14:21:06 +08:00
Wilson Sung
039124e7a4 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 312590044
Change-Id: I24e5462f111f05d051d398487a5931d808cf3002
2023-11-22 03:15:40 +00:00
Bryan Lavrich
70a5a27331 Merge "aoc: add sysfs file entry" into main 2023-11-20 20:22:27 +00:00
Devika Krishnadas
9fcc03e099 Merge "Add Pixel Mapper as a sp-HAL" into main 2023-11-20 18:17:28 +00:00
Kyle Tso
658c20d024 dontaudit on dir search for vendor_votable_debugfs
Bug: 305880925
Bug: 310539058
Change-Id: I5e13370fe5430f3dfbf73ccff787986fbe80f9ea
Signed-off-by: Kyle Tso <kyletso@google.com>
2023-11-17 05:21:48 +00:00
Kyle Tso
0c0ce3699a Merge "hal_usb_impl: Add get_prop for vendor_usb_config_prop" into main 2023-11-17 03:51:44 +00:00
Chia-Chi Teng
d240d1b4e2 Revert^3 "bluetooth: Allow triggering AOC reset from BT HAL"
eb2dcaedc8

Change-Id: Idb64a3e6d60747273159682102a5367b99fe6833
2023-11-16 22:37:36 +00:00
Devika Krishnadas
b5c8a252b2 Add Pixel Mapper as a sp-HAL
Bug: 267352318

Change-Id: I3068038eb51f1a78a2cd300a6b71d96a2647b641
Signed-off-by: Devika Krishnadas <kdevika@google.com>
2023-11-16 01:25:45 +00:00
Angela Wu
ca8e0baee7 [automerger skipped] Allows GCA to access the hw_jpeg /dev/video12. am: 77ce612093 -s ours am: 4746ff1aee -s ours
am skip reason: Merged-In I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6 with SHA-1 6216625ef8 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25321138

Change-Id: Ia2f1c97331008bae978881fb6e3708f93964332b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 09:56:28 +00:00
Angela Wu
4746ff1aee [automerger skipped] Allows GCA to access the hw_jpeg /dev/video12. am: 77ce612093 -s ours
am skip reason: Merged-In I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6 with SHA-1 6216625ef8 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25321138

Change-Id: Iad6a9cc9166ae916b05fc137d5c39ed315f01309
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-15 09:06:56 +00:00
Angela Wu
77ce612093 Allows GCA to access the hw_jpeg /dev/video12.
Bug: 309578078
Test: https://android-build.corp.google.com/builds/abtd/run/L41100030000291922

Merged-In: I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6
Change-Id: I5b1649ec393d2f998159299b0f4feddcde4da80f
2023-11-15 06:28:23 +00:00
Kyle Tso
8912975a8b hal_usb_impl: Add get_prop for vendor_usb_config_prop
avc:  denied  { read } for  comm="android.hardwar" name="u:object_r:vendor_usb_config_prop:s0" dev="tmpfs" ino=391 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:vendor_usb_config_prop:s0 tclass=file permissive=0

Bug: 310560098
Change-Id: I86588715cae2696dd0e045c5b75dde55e0f84c1e
Signed-off-by: Kyle Tso <kyletso@google.com>
2023-11-14 02:15:14 +00:00
Daniel Norman
8ff4604573 Removes duplicate hidraw_device type definition.
This type is now defined by the platform.

Bug: 303522222
Change-Id: Ic46a7327bb2dab89f424cde2682a40f2b28a04db
Test: ls -z /dev/hidraw0
2023-11-10 22:52:00 +00:00
Alex Iacobucci
ca145d66c3 aoc: add sysfs file entry
Test: on device
Bug: 309950738
Change-Id: Iddaf30fce0bfd88d275d577b71bedd826b7a3ee6
Signed-off-by: Alex Iacobucci <alexiacobucci@google.com>
2023-11-10 18:27:42 +00:00
Angela Wu
0774e72816 Allows GCA to access the hw_jpeg /dev/video12. am: 6216625ef8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25311860

Change-Id: I2d7bf8ff4ff6dc07bffc1aa43c966a4a6ccda05f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-11-10 03:19:12 +00:00
Angela Wu
6216625ef8 Allows GCA to access the hw_jpeg /dev/video12.
Bug: 309578078
Test: https://android-build.corp.google.com/builds/abtd/run/L93200030000133974
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:0dde58951666a96f788a8a75bf63cde34079d48a)
Merged-In: I5b1649ec393d2f998159299b0f4feddcde4da80f
Change-Id: I5b1649ec393d2f998159299b0f4feddcde4da80f
This change is essentially a re-submission of ag/25305073 to an upstream branch.

Change-Id: I97a96bddaaca9e95f0596cd4eff0d7e80d6023d6
2023-11-09 10:09:31 +00:00
Mike Wang
d6f83eba29 Merge "Change the MDS to platform app in selinux ap context." into main 2023-11-08 07:05:09 +00:00
Angela Wu
2e724b4b7f Merge "Allows GCA to access the hw_jpeg /dev/video12." into main 2023-11-08 05:20:21 +00:00
Treehugger Robot
0418f329cf Merge "Allow HWC to access display refresh control" into main 2023-11-08 04:20:23 +00:00
Mike Wang
96bac14cb1 Change the MDS to platform app in selinux ap context.
The MDS will be signed with platform key and become a platform app. To
make the selinux rules for modem_diagnostic_app work, need to set it to
platform app in app context.

Bug: 287683516

Test: Tested with both dev key or platform key signed MDS apps and the selinux rules works.


Change-Id: I375f57537a81514d3a6230ca042a4407accd6c15
2023-11-08 04:01:26 +00:00
Angela Wu
73caf508ec Allows GCA to access the hw_jpeg /dev/video12.
Bug: 309578078
Change-Id: Ic243a8dc0d6b2decd0ac70d076a456296936e9af
Test: https://android-build.corp.google.com/builds/abtd/run/L93200030000133974
2023-11-08 03:36:48 +00:00
Treehugger Robot
d76fa68860 Merge "sensors: Move USF related sepolicy to gs-common." into main 2023-11-07 06:49:08 +00:00
Rick Chen
587903f7c4 sensors: Move USF related sepolicy to gs-common.
Bug: 305120274
Test: Compile pass. Flash the build to ZUMA devices and no sensor
      related avc denied log.
Change-Id: I6911992b59802b62ffd206fd53e678da65ef1363
Signed-off-by: Rick Chen <rickctchen@google.com>
2023-11-06 23:20:16 +08:00
Sam Ou
c3d0ba2da2 Merge changes from topic "thismeal_enhancement" into main
* changes:
  Allow dump_power to create thismeal.txt by executing battery_mitigation
  Update odpm scale value sepolicy
2023-11-06 10:36:49 +00:00
Chris Lu
c13e6b0d82 Allow HWC to access display refresh control
Bug: 295603692
Test: write the node successfully
Change-Id: Ie900a9de4c23201ddefd61456bb2b8a80ba1945a
2023-11-06 09:28:09 +00:00
Mike Wang
7d43b5edb6 Merge "Add selinux policy change to allow MDS access Samsung OemRil hal." into main 2023-11-06 02:30:55 +00:00
samou
90ef181121 Allow dump_power to create thismeal.txt by executing battery_mitigation
Bug: 293899466
Change-Id: I88d4e3bcf18e818e9ee53ed69e522c9678c6edff
Signed-off-by: samou <samou@google.com>
2023-11-03 09:59:05 +00:00
mikeyuewang
b066861a22 Add selinux policy change to allow MDS access Samsung OemRil hal.
Bug: 301641283

selinux log:
11-03 15:32:38.850  2643  2643 I auditd  : type=1400 audit(0.0:1616): avc:  denied  { call } for  comm="binder:2643_3" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.850  2643  2643 I binder:2643_3: type=1400 audit(0.0:1616): avc:  denied  { call } for  scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  2643  2643 I auditd  : type=1400 audit(0.0:1617): avc:  denied  { transfer } for  comm="binder:2643_3" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  2643  2643 I binder:2643_3: type=1400 audit(0.0:1617): avc:  denied  { transfer } for  scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  1095  1095 I auditd  : type=1400 audit(0.0:1618): avc:  denied  { call } for  comm="HwBinder:1095_1" scontext=u:r:rild:s0 tcontext=u:r:modem_diagnostic_app:s0:c512,c768 tclass=binder permissive=1
11-03 15:32:38.854  1095  1095 I HwBinder:1095_1: type=1400 audit(0.0:1618): avc:  denied  { call } for  scontext=u:r:rild:s0 tcontext=u:r:modem_diagnostic_app:s0:c512,c768 tclass=binder permissive=1


Change-Id: Ia71844db230302fd3120b28b3ade2e55443ec078
2023-11-03 07:42:38 +00:00
Chia-Chi Teng
244aed251d Revert^2 "bluetooth: Allow triggering AOC reset from BT HAL" am: eb2dcaedc8 am: 5c827dca3a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25205134

Change-Id: Ief73384699e0dfba3d3b8a79545bb3a3ad27c4c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 19:03:04 +00:00
Chia-Chi Teng
5c827dca3a Revert^2 "bluetooth: Allow triggering AOC reset from BT HAL" am: eb2dcaedc8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/25205134

Change-Id: I075a05a8ccf755700923c9de7106b57f7f876830
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-10-31 17:56:21 +00:00
samou
3f67ca9478 Update odpm scale value sepolicy
Bug: 290149543
Change-Id: I66108d908ffa5cc6853b1e8280a5568c92a2e66f
Signed-off-by: samou <samou@google.com>
2023-10-31 12:13:45 +00:00
Chia-Chi Teng
eb2dcaedc8 Revert^2 "bluetooth: Allow triggering AOC reset from BT HAL"
This reverts commit 0aa787efa8.

Reason for revert: Debug BT HCI timeout on UD2A build and P23 on main

Bug: 306646797
Test: presubmit PTS
Change-Id: Ia72ea9d0ba0209cce483d220b420933b243e05b3
2023-10-27 22:53:17 +00:00
Daniel Okazaki
11ea7dd6d6 dump_power: adding dwell defend logs sepolicy
Bug: 306108267
Test: build/flash
Test: adb bugreport
Change-Id: Idb0571b6a974b98649f9cc071d506a8be94966f5
Signed-off-by: Daniel Okazaki <dtokazaki@google.com>
2023-10-27 18:45:43 +00:00
Chris Lu
32d99c3e05 Set context for sysfs file panel_pwr_vreg
Bug: 296978805
Test: read panel_pwr_vreg by dumpstate
Change-Id: Idc4845cadb278ef6406003cb3e55bfbdba758b4b
2023-10-27 07:46:46 +00:00
Sam Ou
5d83d85ad2 Merge "Allow battery_motigation to access gpu cur_freq" into main 2023-10-27 02:33:00 +00:00
Jacky Liu
8d46bb7983 Update sepolicy for new static i2c bus numbers
Bug: 305242309
Test: Boot to home
Change-Id: Ic235f6c2a4d325103dcd03e0977c1a88e98a0605
2023-10-23 14:26:55 +08:00
samou
a534079494 Allow battery_motigation to access gpu cur_freq
Bug: 290149543
Change-Id: I3396573d67f9f0995e63cd1e559f968107695d8b
Signed-off-by: samou <samou@google.com>
2023-10-23 01:44:06 +00:00
Ken Yang
fcf7f847ae SELinux: fix wakeup selinux issue
Bug: 305600876
Change-Id: I21a8993291b05a991e32bb7c363b5e831f4d0db0
Signed-off-by: Ken Yang <yangken@google.com>
2023-10-20 09:48:03 +00:00
John Chang
d20bee68db Merge "display: properties of vrr settings" into main 2023-10-18 15:46:47 +00:00
Wilson Sung
d48c63c215 Update SELinux error
Test: SELinuxUncheckedDenialBootTest
Bug: 305600857
Change-Id: I4715b66f1b1c051c8d83cffefdf4f3de6e5971ef
2023-10-16 12:19:18 +08:00
Hiroshi Akiyama
ea65836d59 Merge "Update missing dump_power sepolicy" into main 2023-10-15 23:45:47 +00:00