Commit graph

239 commits

Author SHA1 Message Date
Achigo Liu
063557a306 Revert "Allow vendor_init to move tasks" am: c989d47ad9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26991793

Change-Id: I309230b396e71259447b951562efaf224ff0ab08
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-17 18:09:12 +00:00
Achigo Liu
c989d47ad9 Revert "Allow vendor_init to move tasks"
Revert submission 26931570-cpuset_system_group

Reason for revert: b/335346990 suspend/resume ramdump or black screen

Reverted changes: /q/submissionid:26931570-cpuset_system_group

Change-Id: Ib505a519b519bf8c907ca9f5973d01a2f00bd841
2024-04-17 09:35:53 +00:00
Rick Yiu
e594c0c025 Allow vendor_init to move tasks am: 6122e05a50
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26968797

Change-Id: I591ba94dd745edb457266ed388978119cfef015e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-16 03:33:28 +00:00
Rick Yiu
6122e05a50 Allow vendor_init to move tasks
To move tasks to cpuset system group.

Bug: 328210236
Test: build pass
Change-Id: I9336ec8922cbfed496ef37df73e3ecdf83a98584
2024-04-15 14:26:29 +00:00
Kyle Tso
2ac5589553 file_contexts: Add logbuffer_pogo_transport
Bug: 328314131
Change-Id: Ie846cc75366375d5bd4889b2cf8061baf2aa82a5
Signed-off-by: Kyle Tso <kyletso@google.com>
2024-04-15 17:12:30 +08:00
Jenny Ho
50a9b3df83 Merge "sepolicy: allow pixelstats to access maxfg_history" into 24D1-dev am: a81b52aeb8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26930555

Change-Id: I7205a414e0b469f080f26e6b847a8bad86799ffd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-15 01:18:32 +00:00
Jenny Ho
a81b52aeb8 Merge "sepolicy: allow pixelstats to access maxfg_history" into 24D1-dev 2024-04-15 00:56:21 +00:00
Martin Liu
b7fe5c6f6a allow vendor init to access percpu_pagelist_high_fraction am: 8c4445390a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26919146

Change-Id: I3de00f10535dfb7bcb32dcb19828db01d88f80df
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-12 18:11:39 +00:00
Jenny Ho
b078a0eeca sepolicy: allow pixelstats to access maxfg_history
to dump secondary battery history for dual battery projects:
avc:  denied  { read } for  name="maxfg_history" dev="tmpfs" ino=1127 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0

Bug: 333952062
Change-Id: I072db3adff63c63ebbb5b1ba4dabfccfe3d6adac
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2024-04-12 00:25:11 +00:00
Martin Liu
8c4445390a allow vendor init to access percpu_pagelist_high_fraction
Bug: 333838316
Test: boot
Change-Id: I4b29278c4a7be10609e0aaafe99603d4762f64b6
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-11 15:03:58 +00:00
Treehugger Robot
c2791c61e2 Merge "allow vendor init to access compaction_proactiveness" into main 2024-04-11 11:02:08 +00:00
Martin Liu
1270b7766d allow vendor init to access compaction_proactiveness
Bug: 332916849
Test: boot
Change-Id: Id640b5ae489e003e9b3bad6054f415f3742832c5
Merged-In: Id640b5ae489e003e9b3bad6054f415f3742832c5
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-11 02:56:26 +00:00
Martin Liu
a5660dceda allow vendor init to access compaction_proactiveness
Bug: 332916849
Test: boot
Change-Id: Id640b5ae489e003e9b3bad6054f415f3742832c5
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-11 02:52:06 +00:00
Cheng Chang
57c36bd644 Merge "sepolicy: sysfs to gnssif/wakeup node" into 24D1-dev am: a1d7364f1f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26795509

Change-Id: I4e42561e483036cb9d1c850cb8f36fef31cf45ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-10 03:47:51 +00:00
Cheng Chang
a1d7364f1f Merge "sepolicy: sysfs to gnssif/wakeup node" into 24D1-dev 2024-04-10 03:28:56 +00:00
Treehugger Robot
8804ef12db Merge "display: low-light blocking zone support" into 24D1-dev 2024-04-04 02:46:42 +00:00
cweichun
0b6fd93f3e display: low-light blocking zone support
Bug: 315876417
Test: verify the functionality works
Change-Id: I8de35ac0685c9b5b07385001479906a84901b347
2024-04-02 15:25:43 +00:00
Cheng Chang
cdd424134a sepolicy: sysfs to gnssif/wakeup node
avc:  denied  { read } for  comm="binder:459_2" name="wakeup2" dev="sysfs" ino=54040 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0

Bug: 329334328
Test: abtd under b/329334328 device-boot-health-check-extra.
Test: boot and check logcat avc.
Change-Id: If0e95efee521d15928648d1042f87d02fd41c637
2024-04-02 09:07:26 +00:00
Spade Lee
aac2240ca4 sepolicy: allow kernel to search vendor debugfs
audit: type=1400 audit(1710259012.824:4): avc:  denied  { search } for  pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc:  denied  { search } for  pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc:  denied  { search } for  pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1

Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: Ib25cc13a329b40bebe87fab43e955e2e4395de9e
Signed-off-by: Spade Lee <spadelee@google.com>
2024-04-02 07:35:39 +00:00
Treehugger Robot
15352500d0 Merge "display: low-light blocking zone support" into main 2024-04-02 04:21:29 +00:00
cweichun
f080553fa0 display: low-light blocking zone support
Bug: 315876417
Test: verify the functionality works
Change-Id: I8de35ac0685c9b5b07385001479906a84901b347
2024-04-01 22:39:32 +00:00
Treehugger Robot
cb1d17b4ba Merge "usb: correct the xhci wakeup path" into main 2024-04-01 04:00:20 +00:00
Shiyong Li
7835c69828 Merge "Label te2_rate_hz and te2_option as sysfs_display" into 24D1-dev am: a06f6749c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26481942

Change-Id: I23e6fe5f8f808ee1b6b32b187fafb59d9760ec8f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-28 21:37:16 +00:00
Shiyong Li
a06f6749c8 Merge "Label te2_rate_hz and te2_option as sysfs_display" into 24D1-dev 2024-03-28 21:10:16 +00:00
Priyanka Advani
1492ce0ed4 Merge "Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"" into 24D1-dev am: 3f268ee8a9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26750102

Change-Id: I14a8d6f7148f73eed745269fb2d3e06381e5db4f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-28 20:20:54 +00:00
Priyanka Advani
3f268ee8a9 Merge "Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"" into 24D1-dev 2024-03-28 20:01:53 +00:00
Priyanka Advani
7299abaa81 Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"
Revert submission 26593083-lassen_pps

Reason for revert: Culprit for test breakages in b/331680556. Will be verifying through ABTD for confirmation and before submitting the revert.

Bug: b/331680556

Reverted changes: /q/submissionid:26593083-lassen_pps

Change-Id: I64487bc049ac7aa53b5bff461a033f70428ab6a9
2024-03-28 19:54:08 +00:00
Chris Lu
2c3dc0c668 Label te2_rate_hz and te2_option as sysfs_display
Bug: 307787644
Test: Check the files label: adb shell ls -Z
Change-Id: Iab036b86b6d0c28191212a3ac10be6ddb5dcbd2b
2024-03-28 00:31:25 +00:00
WeiChungChang
8f872df64a display: create entity_name property am: c46f6cf333
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26714643

Change-Id: Ic20b233c5112eafd1829dea6280680016b0945bf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-27 19:10:34 +00:00
WeiChungChang
c46f6cf333 display: create entity_name property
HWC should designate the entity name 'Inner-Display'
for the primary display in cases of dual panels.

Bug: 329370514
Test: verify powerstats for dual panel devices
Change-Id: I284ff460709da6a8cb48a35bf2b805ea3d09c990
2024-03-26 22:40:54 +00:00
Cheng Chang
07d703b246 Merge "sepolicy: Allow PixelGnss to connect to Chre HAL" into 24D1-dev am: 3d57c4ee96
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26588701

Change-Id: I766c697005435e4a74bd3f8003ecb9b92255ac96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-25 13:09:33 +00:00
Cheng Chang
3d57c4ee96 Merge "sepolicy: Allow PixelGnss to connect to Chre HAL" into 24D1-dev 2024-03-25 12:51:10 +00:00
Cheng Chang
79e12fe426 sepolicy: Allow PixelGnss to connect to Chre HAL
avc:  denied  { call } for  scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0

Bug: 316227249
Test: Verify PixelGnss HAL can connect to Chre HAL.
Test: Function test verification b/330120749 without disable selinux.
Test: No avc error log in logcat.
Change-Id: I7f6a45cd80c7ccbba2af1a0d3f3d89f30267db00
2024-03-25 06:59:51 +00:00
Sam Ou
d03db6fe73 Merge "sepolicy: fix odpm scale value path" into 24D1-dev am: 69b8799f82
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26678608

Change-Id: I8cab9f4ee662b370e1118215f76841735631bf36
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-25 02:52:18 +00:00
samou
8ff89c21d0 sepolicy: fix odpm scale value path
Extend odpm sysfs path to cover the
different startup sequence.

Bug: 330815850
Change-Id: Ifd346f379b71c790e175e08e74398bae0c0417df
Signed-off-by: samou <samou@google.com>
2024-03-22 10:38:08 +00:00
Spade Lee
b3e3319964 Merge "sepolicy: allow kernel to search vendor debugfs" into main 2024-03-21 06:35:25 +00:00
Spade Lee
bac2d41b9c sepolicy: allow kernel to search vendor debugfs
audit: type=1400 audit(1710259012.824:4): avc:  denied  { search } for  pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc:  denied  { search } for  pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc:  denied  { search } for  pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1

Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: Ib25cc13a329b40bebe87fab43e955e2e4395de9e
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-20 18:13:22 +00:00
Chris Lu
026570c6c7 Allow hwc to access te_info
Bug: 315094023
Test: can access sysfs node te_info
Change-Id: I9d418ab92cc68e0234e19162812cc33a8c07e40c
2024-03-18 11:57:24 +08:00
Zheng Pan
561bce895b Merge "Move display properties from tracking_denials to vendor" into main 2024-03-11 21:04:23 +00:00
Zheng Pan
e29dd9a08b Merge "Move display properties from tracking_denials to vendor" into 24D1-dev 2024-03-11 21:04:14 +00:00
John Chang
46d2322311 Move display properties from tracking_denials to vendor
Bug: 328001545
Test: Test MRR Version 2 is properly configured
Change-Id: Ib586398670b21bb88cd122647880149daa628d0d
2024-03-08 16:32:30 +00:00
John Chang
21601cc866 Move display properties from tracking_denials to vendor
Bug: 328001545
Test: Test MRR Version 2 is properly configured
Change-Id: Ib586398670b21bb88cd122647880149daa628d0d
2024-03-08 16:23:52 +00:00
Yabin Cui
76c40d23cf Add SOC specific ETE sysfs paths
Bug: 321061072
Test: run profcollectd on device
Change-Id: I7eb39a5e9f586e36edd11679b0988af2ff6b986b
2024-03-07 19:53:25 +00:00
Yabin Cui
af6b895528 Add SOC specific ETE sysfs paths
Bug: 321061072
Test: run profcollectd on device
Change-Id: I7eb39a5e9f586e36edd11679b0988af2ff6b986b
2024-03-06 11:06:13 -08:00
Kah Xuan Lim
6914e7a49b Modem ML: Add sepolicy for TFLiteService
Add the sepolicy required to:
- Introduce modemml_tflite_service which runs on the system server.
- Allow modem_ml_svc_sit to access the new service.
- Allow system_server to access NNAPI TPU service.

Relevant logs before the sepolicy changes are made:

```
auditd  : avc:  denied  { find } for pid=1000 uid=1001 name=com.android.server.modemml.ITFLiteService/default scontext=u:r:modem_ml_svc_sit:s0 tcontext=u:object_r:modemml_tflite_service:s0 tclass=service_manager permissive=1
```

```
11-14 03:03:44.392  1064  1064 I auditd  : type=1400 audit(0.0:9): avc:  denied  { call } for  comm="modem_ml_svc_si" scontext=u:r:modem_ml_svc_sit:s0 tcontext=u:r:system_server:s0 tclass=binder permissive=1
```

```
SELinux : avc:  denied  { find } for pid=1115 uid=1000 name=android.hardware.neuralnetworks.IDevice/google-edgetpu scontext=u:r:system_server:s0 tcontext=u:object_r:edgetpu_nnapi_service:s0 tclass=service_manager permissive=1
```

Bug: 307449478

Change-Id: I14c2aa02eca08a026d100af6eea11ac9ac9e4fc7
2024-03-06 13:35:33 +08:00
Hwayoung Helen Kim
dc37b510fa Merge "Allow imssvc property access for the audio path in PDK build" into main 2024-03-05 06:48:16 +00:00
Treehugger Robot
87c046a3bf Merge "Add AIDL media.c2 into service_contexts" into main 2024-03-05 06:17:02 +00:00
Treehugger Robot
4d305706a5 Merge "add dsim wakeup labels" into main 2024-02-28 03:59:20 +00:00
Sungtak Lee
f8aaa7afa0 Add AIDL media.c2 into service_contexts
Bug: 321808716
Change-Id: Ieff24ebd4c5ce6201faecf819828f21cb598de67
2024-02-27 18:14:13 +00:00
Peter Lin
f88ffce8c7 add dsim wakeup labels
Bug: 321733124
test: ls sys/devices/platform/19440000.drmdsim/19440000.drmdsim.0/wakeup -Z
Change-Id: I28bc16f23478131dfecf2ad61b306ce9ae1e2767
2024-02-27 12:59:04 +00:00