Evolution-X-Tensor/device_google_zumapro
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
517 commits 1 branch 0 tags 4 MiB
Commit graph

517 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kiwon Park
070be283a7 Add setupwizard_feature_prop as one of properties allowed to be read 
06-05 20:45:54.890420  root   351   351 W libc    : Unable to set property "setupwizard.feature.provisioning_profile_mode" to "true": error code: 0x18
06-05 20:45:54.894967  root   350   350 E init    : Unable to set property 'setupwizard.feature.provisioning_profile_mode' from uid:0 gid:0 pid:351: SELinux permission check failed

Test: manual
Bug: 336903409
Change-Id: I7282cfdbd621dd0e77f08c8ff7287f9693fa060a
Merged-In: I7282cfdbd621dd0e77f08c8ff7287f9693fa060a
 2024-06-06 21:42:07 +00:00
Cheng Gu
48326b2e0b Update SELinux error 
Bug: 317754251
Test: adb reboot and observe log
Change-Id: I7dcf9782ce2be632410e956871f74e874ddaf3a1
 2024-05-28 22:31:47 +00:00
Wilson Sung
b65f4dacb2 Update SELinux error 
Test: SELinuxUncheckedDenialBootTest
Bug: 340369535
Bug: 338347525 
Merged-In: I0d70966f03b0207388388fbc47e45de55a7385c3
Change-Id: I0d70966f03b0207388388fbc47e45de55a7385c3
(cherry picked from commit 924e6c6cd3)
 2024-05-17 03:50:29 +00:00
Donnie Pollitz
c41ed2ee7f Merge "Add permission for storageproxy to create symlinks for ss" into 24D1-dev 2024-05-14 21:59:03 +00:00
Weizhung Ding
32a69c8d11 Add HWC permission to access IStats AIDL 
avc:  denied  { call } for  scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:r:system_server:s0 tclass=binder permissive=0

Bug: 339598226
Test: Build and check log
Change-Id: I7e5ec165df0d397250b09f5981c1f45aea27bd4c
 2024-05-09 11:49:47 +00:00
Weizhung Ding
b5833b7ddf add sysfs access permission on Zumapro devices. 
Bug: 339598226
Test: build and check log
Change-Id: Ia7a7f0f8a5ffc63ab52f41d7a012260d73c54153
 2024-05-09 11:49:19 +00:00
Shiyong Li
3806937561 Merge "Add sepolicy for power_state sysfs node" into 24D1-dev 2024-05-09 05:16:16 +00:00
Wei Wang
6c9df27593 Merge "zumapro: sepolicy: Update gpu available_frequencies sepolicies." into 24D1-dev 2024-05-06 16:24:33 +00:00
Treehugger Robot
3bfa8edd2d Merge "sepolicy: allow hal_power_stats to read modem sysfs node" into 24D1-dev 2024-05-06 04:15:32 +00:00
Nicole Lee
fc41724a97 Allows modem_svc to read the logging related properties 
avc:  denied  { read } for  comm="modem_svc_sit" name="u:object_r:vendor_logger_prop:s0" dev="tmpfs" ino=417 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_logger_prop:s0 tclass=file permissive=0

Bug: 337184337
Change-Id: I806eee53b4ed0414b08f6203fb07958d6e0e4be1
 2024-05-03 09:48:58 +00:00
Darren Hsu
ae01acb475 sepolicy: allow hal_power_stats to read modem sysfs node 
avc:  denied  { read } for  name="link_duration" dev="sysfs"
ino=50065 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 338278462
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: I691955410fb2cc24f8a372c6176a4fb7490309c4
Signed-off-by: Darren Hsu <darrenhsu@google.com>
 2024-05-03 15:21:09 +08:00
Spade Lee
adbb0eda58 Merge "sepolicy: add logbuffer_device r_file_perms" into 24D1-dev 2024-05-03 04:51:31 +00:00
Priyanka Advani
dae4c8d652 Merge "Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"" into 24D1-dev 2024-05-02 19:42:59 +00:00
Priyanka Advani
4c6f1b0a81 Revert "sepolicy: Allow PixelGnss to connect to Chre HAL" 
Revert submission 27007604-pps_topic

Reason for revert: Droid-monitor created revert due to breakages in b/338407263. Will be verifying through ABTD before submission.

Reverted changes: /q/submissionid:27007604-pps_topic

Change-Id: Ib66d30e7de4fe1880296d2c66a99c2e941c96135
 2024-05-02 16:28:07 +00:00
Treehugger Robot
7cdb6ff8b0 Merge "sepolicy: Allow PixelGnss to connect to Chre HAL" into 24D1-dev 2024-05-02 13:12:59 +00:00
Spade Lee
098fb2dabc sepolicy: add logbuffer_device r_file_perms 
avc: denied { read } for name="logbuffer_max77779fg_monitor" dev="tmpfs" ino=1034 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=0

Bug: 335934710
Test: no denied read logbuffer
Change-Id: Ie9cc3d7d0dbfc480cc8ff0bab2d600b8abf688c7
Signed-off-by: Spade Lee <spadelee@google.com>
 2024-04-28 17:33:28 +00:00
Enzo Liao
6b1e936fd8 Merge "Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common." into 24D1-dev 2024-04-25 08:22:07 +00:00
Cheng Chang
c4d1594131 sepolicy: Allow PixelGnss to connect to Chre HAL 
avc:  denied  { call } for  scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0

Bug: 330120749
Test: Verify PixelGnss HAL can connect to Chre HAL.
Test: Function test verification b/330120749.
Test: b/330120749#comment24 health boot check.
Test: b/330120749#comment25 health boot check.
Change-Id: I051cc19407ba168fadea4d51ed4aa1527e414bb7
 2024-04-25 07:49:16 +00:00
Peter (YM)
f1834f0d8c zumapro: sepolicy: Update gpu available_frequencies sepolicies. 
Apply similar group coverage to sysfs_devices_system_cpu, allow service
to read available frequences and avoid invalid behaiovr

Bug: 336698561
Test: ls -lZ /sys/devices/platform/1f000000.mali
Change-Id: I5a4f0766b4778fd8895e41d52f6d6b92f9d90de5
Signed-off-by: Peter (YM) <peterym@google.com>
 2024-04-25 06:42:28 +00:00
Kevin Ying
b5629419fe Add sepolicy for power_state sysfs node 
Bug: 329703995
Test: manual - use camera with DisplayMonitor update
Change-Id: Ifd738a1726ba1c2ff0931eac653737f9be7daa87
Signed-off-by: Kevin Ying <kevinying@google.com>
 2024-04-24 19:10:44 +00:00
Jenny Ho
99bf940a62 Merge "sepolicy: add permission to dump max77779 fwupdate logbuffer" into 24D1-dev 2024-04-24 05:51:21 +00:00
Donnie Pollitz
e7837b9987 Add permission for storageproxy to create symlinks for ss 
Bug: 324989972
Test: Manually test that symlinks are created with no avc denials
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:dd71a9cf2794afecd2699bf1b245a98b5bfae376)
Merged-In: I3f0559ee062c1b5393a2a35f957fbc8528bb58de
Change-Id: I3f0559ee062c1b5393a2a35f957fbc8528bb58de
 2024-04-23 15:45:38 +00:00
Treehugger Robot
f269b140a9 Merge "Remove legacy camera HAL policy." into 24D1-dev 2024-04-23 10:06:13 +00:00
Jenny Ho
e1132a4be2 sepolicy: add permission to dump max77779 fwupdate logbuffer 
W dump_power: type=1400 audit(0.0:9): avc:  denied  { read } for  name="logbuffer_max77779_fwupdate" dev="tmpfs" ino=1570 scontext=u:r:dump_power:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0

Bug: 334198978
Change-Id: I1505abe88a18269ce50dbcec48d91622874f9a26
Signed-off-by: Jenny Ho <hsiufangho@google.com>
 2024-04-23 08:04:20 +00:00
Weizhung Ding
650e554027 Merge "display: low-light blocking zone for secondary display" into 24D1-dev 2024-04-22 06:12:58 +00:00
Frank Yu
e6295955ff Merge "Update SEpolicy for grilservice_app register callbacks of AntennaTuningService. Remove callbacks from radioext native service to grilservice_app." into 24D1-dev 2024-04-22 03:49:13 +00:00
Enzo Liao
e4ceb50a9c Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common. 
New paths (ag/26620507):
  RamdumpService: device/google/gs-common/ramdump_app
  SSRestartDetector: device/google/gs-common/ssr_detector_app

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:2761dbe28b294be5199aba6ee73013427e8d627f)
Merged-In: I455630b347f9f234365fec371142582d2cc0640a
Change-Id: I455630b347f9f234365fec371142582d2cc0640a
 2024-04-22 03:03:12 +00:00
Achigo Liu
c989d47ad9 Revert "Allow vendor_init to move tasks" 
Revert submission 26931570-cpuset_system_group

Reason for revert: b/335346990 suspend/resume ramdump or black screen

Reverted changes: /q/submissionid:26931570-cpuset_system_group

Change-Id: Ib505a519b519bf8c907ca9f5973d01a2f00bd841
 2024-04-17 09:35:53 +00:00
Weizhung Ding
9fe206c50f display: low-light blocking zone for secondary display 
Bug: 320804821
Test: dumpsys SurfaceFlinger| grep "blocking zone"
Change-Id: Iba1e005ddaf28a7a8d1d10677b5e501aaefa6c68
 2024-04-17 08:27:18 +00:00
Rick Yiu
6122e05a50 Allow vendor_init to move tasks 
To move tasks to cpuset system group.

Bug: 328210236
Test: build pass
Change-Id: I9336ec8922cbfed496ef37df73e3ecdf83a98584
 2024-04-15 14:26:29 +00:00
Jenny Ho
a81b52aeb8 Merge "sepolicy: allow pixelstats to access maxfg_history" into 24D1-dev 2024-04-15 00:56:21 +00:00
Krzysztof Kosiński
6d632595b6 Remove legacy camera HAL policy. 
All of these accesses are still needed.

Bug: 313934097
Test: presubmit
Change-Id: I5222a7416d7cffed0d84b1a4c80f74edc4aadd49
 2024-04-12 22:32:38 +00:00
Jenny Ho
b078a0eeca sepolicy: allow pixelstats to access maxfg_history 
to dump secondary battery history for dual battery projects:
avc:  denied  { read } for  name="maxfg_history" dev="tmpfs" ino=1127 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0

Bug: 333952062
Change-Id: I072db3adff63c63ebbb5b1ba4dabfccfe3d6adac
Signed-off-by: Jenny Ho <hsiufangho@google.com>
 2024-04-12 00:25:11 +00:00
Martin Liu
8c4445390a allow vendor init to access percpu_pagelist_high_fraction 
Bug: 333838316
Test: boot
Change-Id: I4b29278c4a7be10609e0aaafe99603d4762f64b6
Signed-off-by: Martin Liu <liumartin@google.com>
 2024-04-11 15:03:58 +00:00
Treehugger Robot
e661ebabc8 Merge "allow vendor init to access compaction_proactiveness" into 24D1-dev 2024-04-11 13:33:33 +00:00
Martin Liu
1270b7766d allow vendor init to access compaction_proactiveness 
Bug: 332916849
Test: boot
Change-Id: Id640b5ae489e003e9b3bad6054f415f3742832c5
Merged-In: Id640b5ae489e003e9b3bad6054f415f3742832c5
Signed-off-by: Martin Liu <liumartin@google.com>
 2024-04-11 02:56:26 +00:00
Aswin Sankar
bab1ea9e7b Merge "Add telephony_modemtype_prop to GRIL service" into 24D1-dev 2024-04-10 22:56:52 +00:00
Cheng Chang
a1d7364f1f Merge "sepolicy: sysfs to gnssif/wakeup node" into 24D1-dev 2024-04-10 03:28:56 +00:00
Aswin Sankar
aa139f50d2 Add telephony_modemtype_prop to GRIL service 
Bug:315993263
Test: Manual test with GRIL changes to read out
SystemProperty("telephony.ril.modem_bin_status").

Change-Id: I67303f1410e5dfb4472185210f41437be01d473b
 2024-04-09 13:28:42 -07:00
Treehugger Robot
8804ef12db Merge "display: low-light blocking zone support" into 24D1-dev 2024-04-04 02:46:42 +00:00
Frank Yu
f1b959a0ed Update SEpolicy for grilservice_app register 
callbacks of AntennaTuningService. Remove callbacks from radioext native
service to grilservice_app.

Bug: 321790599
Test: Manual test. gripservice_app receive update from callback successfully. Because moving out the callbacks from radioext to grilservice_app, we don't need antennatuningservice bind to radioext anymore.
Change-Id: I6827b506b9893e43d6d9268f623b33b848863a7c
 2024-04-03 07:08:06 +00:00
cweichun
0b6fd93f3e display: low-light blocking zone support 
Bug: 315876417
Test: verify the functionality works
Change-Id: I8de35ac0685c9b5b07385001479906a84901b347
 2024-04-02 15:25:43 +00:00
Cheng Chang
cdd424134a sepolicy: sysfs to gnssif/wakeup node 
avc:  denied  { read } for  comm="binder:459_2" name="wakeup2" dev="sysfs" ino=54040 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0

Bug: 329334328
Test: abtd under b/329334328 device-boot-health-check-extra.
Test: boot and check logcat avc.
Change-Id: If0e95efee521d15928648d1042f87d02fd41c637
 2024-04-02 09:07:26 +00:00
Spade Lee
aac2240ca4 sepolicy: allow kernel to search vendor debugfs 
audit: type=1400 audit(1710259012.824:4): avc:  denied  { search } for  pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc:  denied  { search } for  pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc:  denied  { search } for  pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1

Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: Ib25cc13a329b40bebe87fab43e955e2e4395de9e
Signed-off-by: Spade Lee <spadelee@google.com>
 2024-04-02 07:35:39 +00:00
Treehugger Robot
b07155593f Merge "Allow modem_svc to access modem files and perfetto" into 24D1-dev 2024-03-29 07:01:36 +00:00
Shiyong Li
a06f6749c8 Merge "Label te2_rate_hz and te2_option as sysfs_display" into 24D1-dev 2024-03-28 21:10:16 +00:00
Priyanka Advani
3f268ee8a9 Merge "Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"" into 24D1-dev 2024-03-28 20:01:53 +00:00
Priyanka Advani
7299abaa81 Revert "sepolicy: Allow PixelGnss to connect to Chre HAL" 
Revert submission 26593083-lassen_pps

Reason for revert: Culprit for test breakages in b/331680556. Will be verifying through ABTD for confirmation and before submitting the revert.

Bug: b/331680556

Reverted changes: /q/submissionid:26593083-lassen_pps

Change-Id: I64487bc049ac7aa53b5bff461a033f70428ab6a9
 2024-03-28 19:54:08 +00:00
Hungyen Weng
1a1679c87e Allow modem_svc to access modem files and perfetto 
Bug: 330730987

Test: Confirmed that modem_svc is able to access token db files in modem partition
Test: Confiemed that modem_svc can send traces to perfetto

Change-Id: Iaff263b1052cb565ffee30e442ee3c5824f35db9
(cherry picked from commit b5b20910e8)
 2024-03-28 01:38:00 +00:00
Chris Lu
2c3dc0c668 Label te2_rate_hz and te2_option as sysfs_display 
Bug: 307787644
Test: Check the files label: adb shell ls -Z
Change-Id: Iab036b86b6d0c28191212a3ac10be6ddb5dcbd2b
 2024-03-28 00:31:25 +00:00