Commit graph

540 commits

Author SHA1 Message Date
mikeyuewang
5ce4700d6f [PMS]Add context for PixelModemService and allow the access to shared modem service.
Bug: 335490443
Change-Id: Ie5c6b0191775d42d402632c46c34cafe77fe5e60
2024-04-26 17:02:26 +00:00
Jenny Ho
50a9b3df83 Merge "sepolicy: allow pixelstats to access maxfg_history" into 24D1-dev am: a81b52aeb8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26930555

Change-Id: I7205a414e0b469f080f26e6b847a8bad86799ffd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-15 01:18:32 +00:00
Jenny Ho
a81b52aeb8 Merge "sepolicy: allow pixelstats to access maxfg_history" into 24D1-dev 2024-04-15 00:56:21 +00:00
Martin Liu
b7fe5c6f6a allow vendor init to access percpu_pagelist_high_fraction am: 8c4445390a
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26919146

Change-Id: I3de00f10535dfb7bcb32dcb19828db01d88f80df
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-12 18:11:39 +00:00
Jenny Ho
b078a0eeca sepolicy: allow pixelstats to access maxfg_history
to dump secondary battery history for dual battery projects:
avc:  denied  { read } for  name="maxfg_history" dev="tmpfs" ino=1127 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0

Bug: 333952062
Change-Id: I072db3adff63c63ebbb5b1ba4dabfccfe3d6adac
Signed-off-by: Jenny Ho <hsiufangho@google.com>
2024-04-12 00:25:11 +00:00
Martin Liu
8c4445390a allow vendor init to access percpu_pagelist_high_fraction
Bug: 333838316
Test: boot
Change-Id: I4b29278c4a7be10609e0aaafe99603d4762f64b6
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-11 15:03:58 +00:00
Treehugger Robot
9d658272ec [automerger skipped] Merge "allow vendor init to access compaction_proactiveness" into 24D1-dev am: e661ebabc8 -s ours
am skip reason: Merged-In Id640b5ae489e003e9b3bad6054f415f3742832c5 with SHA-1 a5660dceda is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26907599

Change-Id: I8f984e100a54ef80ded7193adc1bbd121463a000
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-11 13:58:46 +00:00
Martin Liu
2f4d1f6c5a [automerger skipped] allow vendor init to access compaction_proactiveness am: 1270b7766d -s ours
am skip reason: Merged-In Id640b5ae489e003e9b3bad6054f415f3742832c5 with SHA-1 a5660dceda is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26907599

Change-Id: Ia2d3c06f06dc684f07f2ea333814b21dcc2ca991
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-11 13:58:42 +00:00
Treehugger Robot
e661ebabc8 Merge "allow vendor init to access compaction_proactiveness" into 24D1-dev 2024-04-11 13:33:33 +00:00
Treehugger Robot
c2791c61e2 Merge "allow vendor init to access compaction_proactiveness" into main 2024-04-11 11:02:08 +00:00
Martin Liu
1270b7766d allow vendor init to access compaction_proactiveness
Bug: 332916849
Test: boot
Change-Id: Id640b5ae489e003e9b3bad6054f415f3742832c5
Merged-In: Id640b5ae489e003e9b3bad6054f415f3742832c5
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-11 02:56:26 +00:00
Martin Liu
a5660dceda allow vendor init to access compaction_proactiveness
Bug: 332916849
Test: boot
Change-Id: Id640b5ae489e003e9b3bad6054f415f3742832c5
Signed-off-by: Martin Liu <liumartin@google.com>
2024-04-11 02:52:06 +00:00
Enzo Liao
e2da6846cb Merge "Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common." into main 2024-04-11 02:03:26 +00:00
Aswin Sankar
05a3a75caf Merge "Add telephony_modemtype_prop to GRIL service" into 24D1-dev am: bab1ea9e7b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26891013

Change-Id: Ie6955ea6f52ef74297b37b5cc5a476a265cb6aa7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-10 23:09:43 +00:00
Aswin Sankar
bab1ea9e7b Merge "Add telephony_modemtype_prop to GRIL service" into 24D1-dev 2024-04-10 22:56:52 +00:00
Cheng Chang
57c36bd644 Merge "sepolicy: sysfs to gnssif/wakeup node" into 24D1-dev am: a1d7364f1f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26795509

Change-Id: I4e42561e483036cb9d1c850cb8f36fef31cf45ff
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-10 03:47:51 +00:00
Cheng Chang
a1d7364f1f Merge "sepolicy: sysfs to gnssif/wakeup node" into 24D1-dev 2024-04-10 03:28:56 +00:00
Aswin Sankar
aa139f50d2 Add telephony_modemtype_prop to GRIL service
Bug:315993263
Test: Manual test with GRIL changes to read out
SystemProperty("telephony.ril.modem_bin_status").

Change-Id: I67303f1410e5dfb4472185210f41437be01d473b
2024-04-09 13:28:42 -07:00
Enzo Liao
2761dbe28b Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common.
New paths (ag/26620507):
  RamdumpService: device/google/gs-common/ramdump_app
  SSRestartDetector: device/google/gs-common/ssr_detector_app

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
Change-Id: I455630b347f9f234365fec371142582d2cc0640a
2024-04-08 19:23:52 +08:00
Treehugger Robot
7bbfd1f3da Merge "display: low-light blocking zone support" into 24D1-dev am: 8804ef12db
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26801447

Change-Id: I68fdbea7dbd2ee592a9fe3709a2374bdce585725
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-04 03:27:46 +00:00
Treehugger Robot
8804ef12db Merge "display: low-light blocking zone support" into 24D1-dev 2024-04-04 02:46:42 +00:00
Spade Lee
b520e07ead sepolicy: allow kernel to search vendor debugfs am: aac2240ca4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26762104

Change-Id: Icaca35d04c2d77f85f9eee01edfd1e77bf47d7ab
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-03 04:24:44 +00:00
Treehugger Robot
53c0a6c140 Merge "shamp: Allow shamp to register AIDL hal" into main 2024-04-02 20:42:01 +00:00
cweichun
0b6fd93f3e display: low-light blocking zone support
Bug: 315876417
Test: verify the functionality works
Change-Id: I8de35ac0685c9b5b07385001479906a84901b347
2024-04-02 15:25:43 +00:00
Cheng Chang
cdd424134a sepolicy: sysfs to gnssif/wakeup node
avc:  denied  { read } for  comm="binder:459_2" name="wakeup2" dev="sysfs" ino=54040 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0

Bug: 329334328
Test: abtd under b/329334328 device-boot-health-check-extra.
Test: boot and check logcat avc.
Change-Id: If0e95efee521d15928648d1042f87d02fd41c637
2024-04-02 09:07:26 +00:00
Spade Lee
aac2240ca4 sepolicy: allow kernel to search vendor debugfs
audit: type=1400 audit(1710259012.824:4): avc:  denied  { search } for  pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc:  denied  { search } for  pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc:  denied  { search } for  pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1

Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: Ib25cc13a329b40bebe87fab43e955e2e4395de9e
Signed-off-by: Spade Lee <spadelee@google.com>
2024-04-02 07:35:39 +00:00
Treehugger Robot
15352500d0 Merge "display: low-light blocking zone support" into main 2024-04-02 04:21:29 +00:00
cweichun
f080553fa0 display: low-light blocking zone support
Bug: 315876417
Test: verify the functionality works
Change-Id: I8de35ac0685c9b5b07385001479906a84901b347
2024-04-01 22:39:32 +00:00
kierancyphus
e94313c494 shamp: Allow shamp to register AIDL hal
Bug: 329367768

The `file_contexts` were modified to give the previous `modem_svc_sit`
permissions to the new `shared_modem_platform` executable.
Additionally, it was marked as a valid server for the
`ISharedModemPlaform` AIDL HAL.

Test: Build, flash and check to make sure correct logs on boot
Doc: go/shared-modem-platform-cpp-backend
Change-Id: I6bd6454f1c0b0c39c3ef6477cbec0e9f53b97038
2024-04-01 16:20:02 +08:00
Treehugger Robot
cb1d17b4ba Merge "usb: correct the xhci wakeup path" into main 2024-04-01 04:00:20 +00:00
Mike Wang
2b280a43ff Merge "Add the selinux policy for MDS to access modem_state file" into main 2024-03-29 15:16:19 +00:00
Treehugger Robot
dcffa225c8 Merge "Allow modem_svc to access modem files and perfetto" into 24D1-dev am: b07155593f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26740635

Change-Id: I8b2f10bb01c22a427355fcc276c4cce7a5e89aae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-29 07:18:29 +00:00
Treehugger Robot
b07155593f Merge "Allow modem_svc to access modem files and perfetto" into 24D1-dev 2024-03-29 07:01:36 +00:00
Shiyong Li
7835c69828 Merge "Label te2_rate_hz and te2_option as sysfs_display" into 24D1-dev am: a06f6749c8
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26481942

Change-Id: I23e6fe5f8f808ee1b6b32b187fafb59d9760ec8f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-28 21:37:16 +00:00
Shiyong Li
a06f6749c8 Merge "Label te2_rate_hz and te2_option as sysfs_display" into 24D1-dev 2024-03-28 21:10:16 +00:00
Priyanka Advani
1492ce0ed4 Merge "Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"" into 24D1-dev am: 3f268ee8a9
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26750102

Change-Id: I14a8d6f7148f73eed745269fb2d3e06381e5db4f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-28 20:20:54 +00:00
Priyanka Advani
3f268ee8a9 Merge "Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"" into 24D1-dev 2024-03-28 20:01:53 +00:00
Priyanka Advani
7299abaa81 Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"
Revert submission 26593083-lassen_pps

Reason for revert: Culprit for test breakages in b/331680556. Will be verifying through ABTD for confirmation and before submitting the revert.

Bug: b/331680556

Reverted changes: /q/submissionid:26593083-lassen_pps

Change-Id: I64487bc049ac7aa53b5bff461a033f70428ab6a9
2024-03-28 19:54:08 +00:00
Hungyen Weng
1a1679c87e Allow modem_svc to access modem files and perfetto
Bug: 330730987

Test: Confirmed that modem_svc is able to access token db files in modem partition
Test: Confiemed that modem_svc can send traces to perfetto

Change-Id: Iaff263b1052cb565ffee30e442ee3c5824f35db9
(cherry picked from commit b5b20910e8)
2024-03-28 01:38:00 +00:00
Chris Lu
2c3dc0c668 Label te2_rate_hz and te2_option as sysfs_display
Bug: 307787644
Test: Check the files label: adb shell ls -Z
Change-Id: Iab036b86b6d0c28191212a3ac10be6ddb5dcbd2b
2024-03-28 00:31:25 +00:00
WeiChungChang
8f872df64a display: create entity_name property am: c46f6cf333
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26714643

Change-Id: Ic20b233c5112eafd1829dea6280680016b0945bf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-27 19:10:34 +00:00
mikeyuewang
ed2820a221 Add the selinux policy for MDS to access modem_state file
avc deny:
2024-02-20 19:21:35.941 21780-21780 DiagnosticServi         com.google.mds                       I  type=1400 audit(0.0:1078): avc:  denied  { read } for  name="modem_state" dev="sysfs" ino=60939 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds
2024-02-20 19:21:35.941 21780-21780 DiagnosticServi         com.google.mds                       I  type=1400 audit(0.0:1079): avc:  denied  { open } for  path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=60939 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds
2024-02-20 19:21:35.941 21780-21780 DiagnosticServi         com.google.mds                       I  type=1400 audit(0.0:1080): avc:  denied  { getattr } for  path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=60939 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds

Bug: 331202327

Change-Id: I49bd28e4ae3b311c7e4b98567b929d3b887e0238
2024-03-27 17:50:05 +00:00
Hidayat Khan
5ca8ee6a0d Merge "Define new persist vendor property vendor_ims_tiss_prop" into main 2024-03-27 05:22:30 +00:00
Hidayat Khan
ffb572cf1b Define new persist vendor property vendor_ims_tiss_prop
- Properties under this context are for go/tiss test mode
- Properties can only be read by ShannonImsService as only getprop
  method is allowed

Bug: 329006027
Test: flashed device and tested new prop locally
Change-Id: I8a4aaf5a6b34798dbd9aed0b2bbc1a4a75924c27
2024-03-27 02:54:40 +00:00
WeiChungChang
c46f6cf333 display: create entity_name property
HWC should designate the entity name 'Inner-Display'
for the primary display in cases of dual panels.

Bug: 329370514
Test: verify powerstats for dual panel devices
Change-Id: I284ff460709da6a8cb48a35bf2b805ea3d09c990
2024-03-26 22:40:54 +00:00
Cheng Chang
07d703b246 Merge "sepolicy: Allow PixelGnss to connect to Chre HAL" into 24D1-dev am: 3d57c4ee96
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26588701

Change-Id: I766c697005435e4a74bd3f8003ecb9b92255ac96
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-25 13:09:33 +00:00
Cheng Chang
3d57c4ee96 Merge "sepolicy: Allow PixelGnss to connect to Chre HAL" into 24D1-dev 2024-03-25 12:51:10 +00:00
Cheng Chang
79e12fe426 sepolicy: Allow PixelGnss to connect to Chre HAL
avc:  denied  { call } for  scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0

Bug: 316227249
Test: Verify PixelGnss HAL can connect to Chre HAL.
Test: Function test verification b/330120749 without disable selinux.
Test: No avc error log in logcat.
Change-Id: I7f6a45cd80c7ccbba2af1a0d3f3d89f30267db00
2024-03-25 06:59:51 +00:00
Sam Ou
d03db6fe73 Merge "sepolicy: fix odpm scale value path" into 24D1-dev am: 69b8799f82
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26678608

Change-Id: I8cab9f4ee662b370e1118215f76841735631bf36
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-25 02:52:18 +00:00
Sam Ou
69b8799f82 Merge "sepolicy: fix odpm scale value path" into 24D1-dev 2024-03-25 02:35:28 +00:00