Cheng Chang
57c36bd644
Merge "sepolicy: sysfs to gnssif/wakeup node" into 24D1-dev am: a1d7364f1f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26795509
Change-Id: I4e42561e483036cb9d1c850cb8f36fef31cf45ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-10 03:47:51 +00:00
Cheng Chang
a1d7364f1f
Merge "sepolicy: sysfs to gnssif/wakeup node" into 24D1-dev
2024-04-10 03:28:56 +00:00
Aswin Sankar
aa139f50d2
Add telephony_modemtype_prop to GRIL service
...
Bug:315993263
Test: Manual test with GRIL changes to read out
SystemProperty("telephony.ril.modem_bin_status").
Change-Id: I67303f1410e5dfb4472185210f41437be01d473b
2024-04-09 13:28:42 -07:00
Hidayat Khan
468011067b
Change get_prop to only be allowed for userdebug or eng build.
...
Bug: 329006027
Test: flashed device and tested new prop locally
Change-Id: Ifdc250cccbd43f237942dc4e11e50f3c968bf65d
2024-04-09 01:24:40 +00:00
Enzo Liao
2761dbe28b
Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common.
...
New paths (ag/26620507):
RamdumpService: device/google/gs-common/ramdump_app
SSRestartDetector: device/google/gs-common/ssr_detector_app
Bug: 298102808
Design: go/sys-software-logging
Test: Manual
Change-Id: I455630b347f9f234365fec371142582d2cc0640a
2024-04-08 19:23:52 +08:00
Treehugger Robot
7bbfd1f3da
Merge "display: low-light blocking zone support" into 24D1-dev am: 8804ef12db
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26801447
Change-Id: I68fdbea7dbd2ee592a9fe3709a2374bdce585725
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-04 03:27:46 +00:00
Treehugger Robot
8804ef12db
Merge "display: low-light blocking zone support" into 24D1-dev
2024-04-04 02:46:42 +00:00
Frank Yu
f1b959a0ed
Update SEpolicy for grilservice_app register
...
callbacks of AntennaTuningService. Remove callbacks from radioext native
service to grilservice_app.
Bug: 321790599
Test: Manual test. gripservice_app receive update from callback successfully. Because moving out the callbacks from radioext to grilservice_app, we don't need antennatuningservice bind to radioext anymore.
Change-Id: I6827b506b9893e43d6d9268f623b33b848863a7c
2024-04-03 07:08:06 +00:00
Spade Lee
b520e07ead
sepolicy: allow kernel to search vendor debugfs am: aac2240ca4
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26762104
Change-Id: Icaca35d04c2d77f85f9eee01edfd1e77bf47d7ab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-03 04:24:44 +00:00
Treehugger Robot
53c0a6c140
Merge "shamp: Allow shamp to register AIDL hal" into main
2024-04-02 20:42:01 +00:00
cweichun
0b6fd93f3e
display: low-light blocking zone support
...
Bug: 315876417
Test: verify the functionality works
Change-Id: I8de35ac0685c9b5b07385001479906a84901b347
2024-04-02 15:25:43 +00:00
Cheng Chang
cdd424134a
sepolicy: sysfs to gnssif/wakeup node
...
avc: denied { read } for comm="binder:459_2" name="wakeup2" dev="sysfs" ino=54040 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
Bug: 329334328
Test: abtd under b/329334328 device-boot-health-check-extra.
Test: boot and check logcat avc.
Change-Id: If0e95efee521d15928648d1042f87d02fd41c637
2024-04-02 09:07:26 +00:00
Spade Lee
aac2240ca4
sepolicy: allow kernel to search vendor debugfs
...
audit: type=1400 audit(1710259012.824:4): avc: denied { search } for pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc: denied { search } for pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc: denied { search } for pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1
Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: Ib25cc13a329b40bebe87fab43e955e2e4395de9e
Signed-off-by: Spade Lee <spadelee@google.com>
2024-04-02 07:35:39 +00:00
Treehugger Robot
15352500d0
Merge "display: low-light blocking zone support" into main
2024-04-02 04:21:29 +00:00
cweichun
f080553fa0
display: low-light blocking zone support
...
Bug: 315876417
Test: verify the functionality works
Change-Id: I8de35ac0685c9b5b07385001479906a84901b347
2024-04-01 22:39:32 +00:00
kierancyphus
e94313c494
shamp: Allow shamp to register AIDL hal
...
Bug: 329367768
The `file_contexts` were modified to give the previous `modem_svc_sit`
permissions to the new `shared_modem_platform` executable.
Additionally, it was marked as a valid server for the
`ISharedModemPlaform` AIDL HAL.
Test: Build, flash and check to make sure correct logs on boot
Doc: go/shared-modem-platform-cpp-backend
Change-Id: I6bd6454f1c0b0c39c3ef6477cbec0e9f53b97038
2024-04-01 16:20:02 +08:00
Treehugger Robot
cb1d17b4ba
Merge "usb: correct the xhci wakeup path" into main
2024-04-01 04:00:20 +00:00
Mike Wang
2b280a43ff
Merge "Add the selinux policy for MDS to access modem_state file" into main
2024-03-29 15:16:19 +00:00
Treehugger Robot
dcffa225c8
Merge "Allow modem_svc to access modem files and perfetto" into 24D1-dev am: b07155593f
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26740635
Change-Id: I8b2f10bb01c22a427355fcc276c4cce7a5e89aae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-29 07:18:29 +00:00
Treehugger Robot
b07155593f
Merge "Allow modem_svc to access modem files and perfetto" into 24D1-dev
2024-03-29 07:01:36 +00:00
Shiyong Li
7835c69828
Merge "Label te2_rate_hz and te2_option as sysfs_display" into 24D1-dev am: a06f6749c8
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26481942
Change-Id: I23e6fe5f8f808ee1b6b32b187fafb59d9760ec8f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-28 21:37:16 +00:00
Shiyong Li
a06f6749c8
Merge "Label te2_rate_hz and te2_option as sysfs_display" into 24D1-dev
2024-03-28 21:10:16 +00:00
Priyanka Advani
1492ce0ed4
Merge "Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"" into 24D1-dev am: 3f268ee8a9
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26750102
Change-Id: I14a8d6f7148f73eed745269fb2d3e06381e5db4f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-28 20:20:54 +00:00
Priyanka Advani
3f268ee8a9
Merge "Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"" into 24D1-dev
2024-03-28 20:01:53 +00:00
Priyanka Advani
7299abaa81
Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"
...
Revert submission 26593083-lassen_pps
Reason for revert: Culprit for test breakages in b/331680556. Will be verifying through ABTD for confirmation and before submitting the revert.
Bug: b/331680556
Reverted changes: /q/submissionid:26593083-lassen_pps
Change-Id: I64487bc049ac7aa53b5bff461a033f70428ab6a9
2024-03-28 19:54:08 +00:00
Hungyen Weng
1a1679c87e
Allow modem_svc to access modem files and perfetto
...
Bug: 330730987
Test: Confirmed that modem_svc is able to access token db files in modem partition
Test: Confiemed that modem_svc can send traces to perfetto
Change-Id: Iaff263b1052cb565ffee30e442ee3c5824f35db9
(cherry picked from commit b5b20910e8
)
2024-03-28 01:38:00 +00:00
Chris Lu
2c3dc0c668
Label te2_rate_hz and te2_option as sysfs_display
...
Bug: 307787644
Test: Check the files label: adb shell ls -Z
Change-Id: Iab036b86b6d0c28191212a3ac10be6ddb5dcbd2b
2024-03-28 00:31:25 +00:00
WeiChungChang
8f872df64a
display: create entity_name property am: c46f6cf333
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26714643
Change-Id: Ic20b233c5112eafd1829dea6280680016b0945bf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-27 19:10:34 +00:00
mikeyuewang
ed2820a221
Add the selinux policy for MDS to access modem_state file
...
avc deny:
2024-02-20 19:21:35.941 21780-21780 DiagnosticServi com.google.mds I type=1400 audit(0.0:1078): avc: denied { read } for name="modem_state" dev="sysfs" ino=60939 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds
2024-02-20 19:21:35.941 21780-21780 DiagnosticServi com.google.mds I type=1400 audit(0.0:1079): avc: denied { open } for path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=60939 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds
2024-02-20 19:21:35.941 21780-21780 DiagnosticServi com.google.mds I type=1400 audit(0.0:1080): avc: denied { getattr } for path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=60939 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds
Bug: 331202327
Change-Id: I49bd28e4ae3b311c7e4b98567b929d3b887e0238
2024-03-27 17:50:05 +00:00
Hidayat Khan
5ca8ee6a0d
Merge "Define new persist vendor property vendor_ims_tiss_prop" into main
2024-03-27 05:22:30 +00:00
Hidayat Khan
ffb572cf1b
Define new persist vendor property vendor_ims_tiss_prop
...
- Properties under this context are for go/tiss test mode
- Properties can only be read by ShannonImsService as only getprop
method is allowed
Bug: 329006027
Test: flashed device and tested new prop locally
Change-Id: I8a4aaf5a6b34798dbd9aed0b2bbc1a4a75924c27
2024-03-27 02:54:40 +00:00
WeiChungChang
c46f6cf333
display: create entity_name property
...
HWC should designate the entity name 'Inner-Display'
for the primary display in cases of dual panels.
Bug: 329370514
Test: verify powerstats for dual panel devices
Change-Id: I284ff460709da6a8cb48a35bf2b805ea3d09c990
2024-03-26 22:40:54 +00:00
Cheng Chang
07d703b246
Merge "sepolicy: Allow PixelGnss to connect to Chre HAL" into 24D1-dev am: 3d57c4ee96
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26588701
Change-Id: I766c697005435e4a74bd3f8003ecb9b92255ac96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-25 13:09:33 +00:00
Cheng Chang
3d57c4ee96
Merge "sepolicy: Allow PixelGnss to connect to Chre HAL" into 24D1-dev
2024-03-25 12:51:10 +00:00
Cheng Chang
79e12fe426
sepolicy: Allow PixelGnss to connect to Chre HAL
...
avc: denied { call } for scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0
Bug: 316227249
Test: Verify PixelGnss HAL can connect to Chre HAL.
Test: Function test verification b/330120749 without disable selinux.
Test: No avc error log in logcat.
Change-Id: I7f6a45cd80c7ccbba2af1a0d3f3d89f30267db00
2024-03-25 06:59:51 +00:00
Sam Ou
d03db6fe73
Merge "sepolicy: fix odpm scale value path" into 24D1-dev am: 69b8799f82
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26678608
Change-Id: I8cab9f4ee662b370e1118215f76841735631bf36
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-25 02:52:18 +00:00
Sam Ou
69b8799f82
Merge "sepolicy: fix odpm scale value path" into 24D1-dev
2024-03-25 02:35:28 +00:00
Hungyen Weng
84a12fc4ed
Merge "Allow modem_svc to access modem files and perfetto" into main
2024-03-22 23:52:51 +00:00
samou
8ff89c21d0
sepolicy: fix odpm scale value path
...
Extend odpm sysfs path to cover the
different startup sequence.
Bug: 330815850
Change-Id: Ifd346f379b71c790e175e08e74398bae0c0417df
Signed-off-by: samou <samou@google.com>
2024-03-22 10:38:08 +00:00
derickhong
17ba02512b
Update SELinux error am: 1f38fe473a
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26641567
Change-Id: Ife0b7455701eb14228985e78612341cae5620a87
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-22 04:03:41 +00:00
Hungyen Weng
b5b20910e8
Allow modem_svc to access modem files and perfetto
...
Bug: 330730987
Test: Confirmed that modem_svc is able to access token db files in modem partition
Test: Confiemed that modem_svc can send traces to perfetto
Change-Id: Iaff263b1052cb565ffee30e442ee3c5824f35db9
2024-03-22 00:29:20 +00:00
Oleg Blinnikov
c2e527cbf1
Merge "persist.sys.hdcp_checking property added" into main
2024-03-21 12:21:30 +00:00
Spade Lee
b3e3319964
Merge "sepolicy: allow kernel to search vendor debugfs" into main
2024-03-21 06:35:25 +00:00
Spade Lee
bac2d41b9c
sepolicy: allow kernel to search vendor debugfs
...
audit: type=1400 audit(1710259012.824:4): avc: denied { search } for pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc: denied { search } for pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc: denied { search } for pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1
Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: Ib25cc13a329b40bebe87fab43e955e2e4395de9e
Signed-off-by: Spade Lee <spadelee@google.com>
2024-03-20 18:13:22 +00:00
derickhong
1f38fe473a
Update SELinux error
...
Bug: 326869289
Test: adb shell dmesg | grep avc ; adb logcat -d | grep avc
Change-Id: I57090ee64cafc5c2a9d98ec02152fdc9eb495591
2024-03-20 07:39:32 +00:00
Oleg Blinnikov
51e4f2e9eb
persist.sys.hdcp_checking property added
...
Change-Id: I7ae5e18afe7ee1b7d86c63adeda748e439b7b5ea
Bug: 321344894
Test: modify property, see that max_ver file is updated
2024-03-19 16:06:08 +00:00
Chris Lu
026570c6c7
Allow hwc to access te_info
...
Bug: 315094023
Test: can access sysfs node te_info
Change-Id: I9d418ab92cc68e0234e19162812cc33a8c07e40c
2024-03-18 11:57:24 +08:00
Tim Lin
31edc2fa71
Merge "allow GRIL native to read modem type" into 24D1-dev am: d0b2833cac
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26511650
Change-Id: Ia61f748f9185cbff881fbd544188ea8ec9d2fad6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 04:45:30 +00:00
Tim Lin
d0b2833cac
Merge "allow GRIL native to read modem type" into 24D1-dev
2024-03-12 04:00:43 +00:00
Zheng Pan
ef23bee122
Merge "Move display properties from tracking_denials to vendor" into 24D1-dev am: e29dd9a08b
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26513682
Change-Id: I4cfd39a984c4cb98f69a7d75581dacf631998f87
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-11 21:45:49 +00:00