Peter (YM)
f1834f0d8c
zumapro: sepolicy: Update gpu available_frequencies sepolicies.
...
Apply similar group coverage to sysfs_devices_system_cpu, allow service
to read available frequences and avoid invalid behaiovr
Bug: 336698561
Test: ls -lZ /sys/devices/platform/1f000000.mali
Change-Id: I5a4f0766b4778fd8895e41d52f6d6b92f9d90de5
Signed-off-by: Peter (YM) <peterym@google.com>
2024-04-25 06:42:28 +00:00
Kevin Ying
b5629419fe
Add sepolicy for power_state sysfs node
...
Bug: 329703995
Test: manual - use camera with DisplayMonitor update
Change-Id: Ifd738a1726ba1c2ff0931eac653737f9be7daa87
Signed-off-by: Kevin Ying <kevinying@google.com>
2024-04-24 19:10:44 +00:00
Jenny Ho
1dce149e64
Merge "sepolicy: add permission to dump max77779 fwupdate logbuffer" into 24D1-dev am: 99bf940a62
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/27059866
Change-Id: Ifc553e02746c68e26277d643c7838af776084ec7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-24 06:06:48 +00:00
Jenny Ho
99bf940a62
Merge "sepolicy: add permission to dump max77779 fwupdate logbuffer" into 24D1-dev
2024-04-24 05:51:21 +00:00
Donnie Pollitz
e7837b9987
Add permission for storageproxy to create symlinks for ss
...
Bug: 324989972
Test: Manually test that symlinks are created with no avc denials
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:dd71a9cf2794afecd2699bf1b245a98b5bfae376 )
Merged-In: I3f0559ee062c1b5393a2a35f957fbc8528bb58de
Change-Id: I3f0559ee062c1b5393a2a35f957fbc8528bb58de
2024-04-23 15:45:38 +00:00
Treehugger Robot
575e24cc04
Merge "Remove legacy camera HAL policy." into 24D1-dev am: f269b140a9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26948535
Change-Id: I502337ad9a354179edc7ab34c7974f0a45d3bbb6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-23 10:29:09 +00:00
Treehugger Robot
f269b140a9
Merge "Remove legacy camera HAL policy." into 24D1-dev
2024-04-23 10:06:13 +00:00
Jenny Ho
e1132a4be2
sepolicy: add permission to dump max77779 fwupdate logbuffer
...
W dump_power: type=1400 audit(0.0:9): avc: denied { read } for name="logbuffer_max77779_fwupdate" dev="tmpfs" ino=1570 scontext=u:r:dump_power:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0
Bug: 334198978
Change-Id: I1505abe88a18269ce50dbcec48d91622874f9a26
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2024-04-23 08:04:20 +00:00
Donnie Pollitz
dd71a9cf27
Add permission for storageproxy to create symlinks for ss
...
Bug: 324989972
Test: Manually test that symlinks are created with no avc denials
Change-Id: I3f0559ee062c1b5393a2a35f957fbc8528bb58de
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2024-04-22 19:00:01 +00:00
Weizhung Ding
791a7a4eb2
Merge "display: low-light blocking zone for secondary display" into 24D1-dev am: 650e554027
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26994922
Change-Id: I4f331a2d73addc7f635f74cf7137e8d8c483812a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-22 06:27:54 +00:00
Weizhung Ding
650e554027
Merge "display: low-light blocking zone for secondary display" into 24D1-dev
2024-04-22 06:12:58 +00:00
Frank Yu
7a43933e5c
Merge "Update SEpolicy for grilservice_app register callbacks of AntennaTuningService. Remove callbacks from radioext native service to grilservice_app." into 24D1-dev am: e6295955ff
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26783005
Change-Id: If67f2b8f38c48e933628b4d411b416068a42ae8a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-22 04:03:11 +00:00
Frank Yu
e6295955ff
Merge "Update SEpolicy for grilservice_app register callbacks of AntennaTuningService. Remove callbacks from radioext native service to grilservice_app." into 24D1-dev
2024-04-22 03:49:13 +00:00
Enzo Liao
e4ceb50a9c
Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common.
...
New paths (ag/26620507):
RamdumpService: device/google/gs-common/ramdump_app
SSRestartDetector: device/google/gs-common/ssr_detector_app
Bug: 298102808
Design: go/sys-software-logging
Test: Manual
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:2761dbe28b294be5199aba6ee73013427e8d627f )
Merged-In: I455630b347f9f234365fec371142582d2cc0640a
Change-Id: I455630b347f9f234365fec371142582d2cc0640a
2024-04-22 03:03:12 +00:00
Martin Liu
9127824dd6
move common MM policy to gs common folder
...
Bug: 332916849
Bug: 309409009
Test: boot
Change-Id: I66e6a70e798937c7a651f9400558c431237b3a9e
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-18 01:58:21 +00:00
Treehugger Robot
6cdcc7e516
Merge "Add capacity_headroom
to gpu sysfs" into main
2024-04-17 18:53:24 +00:00
Achigo Liu
063557a306
Revert "Allow vendor_init to move tasks" am: c989d47ad9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26991793
Change-Id: I309230b396e71259447b951562efaf224ff0ab08
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-17 18:09:12 +00:00
Achigo Liu
c989d47ad9
Revert "Allow vendor_init to move tasks"
...
Revert submission 26931570-cpuset_system_group
Reason for revert: b/335346990 suspend/resume ramdump or black screen
Reverted changes: /q/submissionid:26931570-cpuset_system_group
Change-Id: Ib505a519b519bf8c907ca9f5973d01a2f00bd841
2024-04-17 09:35:53 +00:00
Weizhung Ding
9fe206c50f
display: low-light blocking zone for secondary display
...
Bug: 320804821
Test: dumpsys SurfaceFlinger| grep "blocking zone"
Change-Id: Iba1e005ddaf28a7a8d1d10677b5e501aaefa6c68
2024-04-17 08:27:18 +00:00
Hidayat Khan
ea5dc2cc1e
Merge "Change get_prop to only be allowed for userdebug or eng build." into main
2024-04-16 16:24:17 +00:00
Rick Yiu
e594c0c025
Allow vendor_init to move tasks am: 6122e05a50
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26968797
Change-Id: I591ba94dd745edb457266ed388978119cfef015e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-16 03:33:28 +00:00
Rick Yiu
6122e05a50
Allow vendor_init to move tasks
...
To move tasks to cpuset system group.
Bug: 328210236
Test: build pass
Change-Id: I9336ec8922cbfed496ef37df73e3ecdf83a98584
2024-04-15 14:26:29 +00:00
Kyle Tso
2ac5589553
file_contexts: Add logbuffer_pogo_transport
...
Bug: 328314131
Change-Id: Ie846cc75366375d5bd4889b2cf8061baf2aa82a5
Signed-off-by: Kyle Tso <kyletso@google.com>
2024-04-15 17:12:30 +08:00
Jenny Ho
50a9b3df83
Merge "sepolicy: allow pixelstats to access maxfg_history" into 24D1-dev am: a81b52aeb8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26930555
Change-Id: I7205a414e0b469f080f26e6b847a8bad86799ffd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-15 01:18:32 +00:00
Jenny Ho
a81b52aeb8
Merge "sepolicy: allow pixelstats to access maxfg_history" into 24D1-dev
2024-04-15 00:56:21 +00:00
Kevin DuBois
4d50d35fcd
Add capacity_headroom
to gpu sysfs
...
This allows userspace (notably the power HAL) to apply a boost to GPU
frequency independent of previously measured load.
Bug: 290625326
Test: boot, run modified Power HAL
Change-Id: I87b2e3d3dbb0a6c3eb68970fc3f3380b61586a46
2024-04-12 19:40:56 -07:00
Krzysztof Kosiński
6d632595b6
Remove legacy camera HAL policy.
...
All of these accesses are still needed.
Bug: 313934097
Test: presubmit
Change-Id: I5222a7416d7cffed0d84b1a4c80f74edc4aadd49
2024-04-12 22:32:38 +00:00
Martin Liu
b7fe5c6f6a
allow vendor init to access percpu_pagelist_high_fraction am: 8c4445390a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26919146
Change-Id: I3de00f10535dfb7bcb32dcb19828db01d88f80df
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-12 18:11:39 +00:00
Jenny Ho
b078a0eeca
sepolicy: allow pixelstats to access maxfg_history
...
to dump secondary battery history for dual battery projects:
avc: denied { read } for name="maxfg_history" dev="tmpfs" ino=1127 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0
Bug: 333952062
Change-Id: I072db3adff63c63ebbb5b1ba4dabfccfe3d6adac
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2024-04-12 00:25:11 +00:00
Martin Liu
8c4445390a
allow vendor init to access percpu_pagelist_high_fraction
...
Bug: 333838316
Test: boot
Change-Id: I4b29278c4a7be10609e0aaafe99603d4762f64b6
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-11 15:03:58 +00:00
Treehugger Robot
9d658272ec
[automerger skipped] Merge "allow vendor init to access compaction_proactiveness" into 24D1-dev am: e661ebabc8
-s ours
...
am skip reason: Merged-In Id640b5ae489e003e9b3bad6054f415f3742832c5 with SHA-1 a5660dceda
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26907599
Change-Id: I8f984e100a54ef80ded7193adc1bbd121463a000
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-11 13:58:46 +00:00
Martin Liu
2f4d1f6c5a
[automerger skipped] allow vendor init to access compaction_proactiveness am: 1270b7766d
-s ours
...
am skip reason: Merged-In Id640b5ae489e003e9b3bad6054f415f3742832c5 with SHA-1 a5660dceda
is already in history
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26907599
Change-Id: Ia2d3c06f06dc684f07f2ea333814b21dcc2ca991
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-11 13:58:42 +00:00
Treehugger Robot
e661ebabc8
Merge "allow vendor init to access compaction_proactiveness" into 24D1-dev
2024-04-11 13:33:33 +00:00
Treehugger Robot
c2791c61e2
Merge "allow vendor init to access compaction_proactiveness" into main
2024-04-11 11:02:08 +00:00
Martin Liu
1270b7766d
allow vendor init to access compaction_proactiveness
...
Bug: 332916849
Test: boot
Change-Id: Id640b5ae489e003e9b3bad6054f415f3742832c5
Merged-In: Id640b5ae489e003e9b3bad6054f415f3742832c5
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-11 02:56:26 +00:00
Martin Liu
a5660dceda
allow vendor init to access compaction_proactiveness
...
Bug: 332916849
Test: boot
Change-Id: Id640b5ae489e003e9b3bad6054f415f3742832c5
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-11 02:52:06 +00:00
Enzo Liao
e2da6846cb
Merge "Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common." into main
2024-04-11 02:03:26 +00:00
Aswin Sankar
05a3a75caf
Merge "Add telephony_modemtype_prop to GRIL service" into 24D1-dev am: bab1ea9e7b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26891013
Change-Id: Ie6955ea6f52ef74297b37b5cc5a476a265cb6aa7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-10 23:09:43 +00:00
Aswin Sankar
bab1ea9e7b
Merge "Add telephony_modemtype_prop to GRIL service" into 24D1-dev
2024-04-10 22:56:52 +00:00
Cheng Chang
57c36bd644
Merge "sepolicy: sysfs to gnssif/wakeup node" into 24D1-dev am: a1d7364f1f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26795509
Change-Id: I4e42561e483036cb9d1c850cb8f36fef31cf45ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-10 03:47:51 +00:00
Cheng Chang
a1d7364f1f
Merge "sepolicy: sysfs to gnssif/wakeup node" into 24D1-dev
2024-04-10 03:28:56 +00:00
Aswin Sankar
aa139f50d2
Add telephony_modemtype_prop to GRIL service
...
Bug:315993263
Test: Manual test with GRIL changes to read out
SystemProperty("telephony.ril.modem_bin_status").
Change-Id: I67303f1410e5dfb4472185210f41437be01d473b
2024-04-09 13:28:42 -07:00
Hidayat Khan
468011067b
Change get_prop to only be allowed for userdebug or eng build.
...
Bug: 329006027
Test: flashed device and tested new prop locally
Change-Id: Ifdc250cccbd43f237942dc4e11e50f3c968bf65d
2024-04-09 01:24:40 +00:00
Enzo Liao
2761dbe28b
Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common.
...
New paths (ag/26620507):
RamdumpService: device/google/gs-common/ramdump_app
SSRestartDetector: device/google/gs-common/ssr_detector_app
Bug: 298102808
Design: go/sys-software-logging
Test: Manual
Change-Id: I455630b347f9f234365fec371142582d2cc0640a
2024-04-08 19:23:52 +08:00
Treehugger Robot
7bbfd1f3da
Merge "display: low-light blocking zone support" into 24D1-dev am: 8804ef12db
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26801447
Change-Id: I68fdbea7dbd2ee592a9fe3709a2374bdce585725
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-04 03:27:46 +00:00
Treehugger Robot
8804ef12db
Merge "display: low-light blocking zone support" into 24D1-dev
2024-04-04 02:46:42 +00:00
Frank Yu
f1b959a0ed
Update SEpolicy for grilservice_app register
...
callbacks of AntennaTuningService. Remove callbacks from radioext native
service to grilservice_app.
Bug: 321790599
Test: Manual test. gripservice_app receive update from callback successfully. Because moving out the callbacks from radioext to grilservice_app, we don't need antennatuningservice bind to radioext anymore.
Change-Id: I6827b506b9893e43d6d9268f623b33b848863a7c
2024-04-03 07:08:06 +00:00
Spade Lee
b520e07ead
sepolicy: allow kernel to search vendor debugfs am: aac2240ca4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26762104
Change-Id: Icaca35d04c2d77f85f9eee01edfd1e77bf47d7ab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-03 04:24:44 +00:00
Treehugger Robot
53c0a6c140
Merge "shamp: Allow shamp to register AIDL hal" into main
2024-04-02 20:42:01 +00:00
cweichun
0b6fd93f3e
display: low-light blocking zone support
...
Bug: 315876417
Test: verify the functionality works
Change-Id: I8de35ac0685c9b5b07385001479906a84901b347
2024-04-02 15:25:43 +00:00