Commit graph

40 commits

Author SHA1 Message Date
Aswin Sankar
aa139f50d2 Add telephony_modemtype_prop to GRIL service
Bug:315993263
Test: Manual test with GRIL changes to read out
SystemProperty("telephony.ril.modem_bin_status").

Change-Id: I67303f1410e5dfb4472185210f41437be01d473b
2024-04-09 13:28:42 -07:00
Hungyen Weng
1a1679c87e Allow modem_svc to access modem files and perfetto
Bug: 330730987

Test: Confirmed that modem_svc is able to access token db files in modem partition
Test: Confiemed that modem_svc can send traces to perfetto

Change-Id: Iaff263b1052cb565ffee30e442ee3c5824f35db9
(cherry picked from commit b5b20910e8)
2024-03-28 01:38:00 +00:00
timtmlin
f64d18749f allow GRIL native to read modem type
telephony.ril.modem_bin_status is set by CBD

Bug: 328148438
Test: check GRIL requests at TN modem and NTN modem
Change-Id: I5a3265a89ff365fd5ae1f49a452b3abf73461c7c
2024-03-08 23:30:03 +08:00
Chi Zhang
9de082ad52 Merge "Allow GRIL to get IRQ counts." into main 2024-02-23 22:07:01 +00:00
Mahesh Kallelil
4118c09b83 radio: Add PCIe dyn speed sysfs nodes to sysfs_modem
Allow modem_svc to write to the cpif sysfs files for PCIe dynamic
speed feature control.

Test: Tested with property change on device
Bug: 256247132
Change-Id: I1117ebf15ff4546cdd3a4bf0a653a46d39a8b59c
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2024-02-20 22:56:57 -08:00
Chi Zhang
8fb2332864 Allow GRIL to get IRQ counts.
auditd  : type=1400 audit(0.0:94): avc:  denied  { read } for  comm="TestableLooper" name="irq" dev="sysfs" ino=20470 scontext=u:r:grilservice_app:s0:c241,c256,c512,c768 tcontext=u:object_r:sysfs_irq:s0 tclass=dir permissive=0 app=com.google.android.grilservice

Bug: 322548372
Test: build and boot
Change-Id: Iffc7f49d28ccd1960e6f939375a8e42958eff8bb
2024-02-20 10:46:37 -08:00
Wayne Lin
35176423de Merge "gps: refine iGNSS build system - sepolicy" into main 2024-01-30 05:45:58 +00:00
Kieran Cyphus
98fe007a31 Merge "liboemservice_proxy: Add sepolicy" into main 2024-01-29 05:58:46 +00:00
Wayne Lin
b89210063c gps: refine iGNSS build system - sepolicy
Bug: 318310869
Bug: 315915958
Test: build pass, GPS works and no GPS avc denied error
Change-Id: I64d2e8971abb44d604082deaed6e90a13cac203d
2024-01-29 05:52:15 +00:00
kierancyphus
2fbd1edf60 liboemservice_proxy: Add sepolicy
This was previously only configured to run on zuma devices, but should
be expanded to this device as well. Since this service should only be
present on these two devices, it's fine to just copy this here instead
of placing it in gs-common.

Test: atest vts_treble_vintf_vendor_test:DeviceManifest/SingleAidlTest
Bug: 321867236
Change-Id: I9f086df735c866ed037307574b38458434a9c486
2024-01-25 17:53:23 +08:00
Ted Wang
a446b6d3ae Merge "Allow GrilService to access bluetooth extension HAL" into main 2024-01-24 02:38:02 +00:00
Megha Patil
3b48faef9c Merge "Add System Property to Specify NTN Demo Mode Enabled" into main 2024-01-23 10:35:10 +00:00
Megha Patil
ab78d95fb8 Add System Property to Specify NTN Demo Mode Enabled
"telephony.ril.ntn_demo_mode" Property is added which specifies
RIL about NTN Demo Mode.

BUG: b/321178074
Test: Set the property in the service.
Change-Id: I8baca9ceaf364b579293679cabe26c33e0a4ec1e
2024-01-23 10:34:57 +00:00
Ted Wang
4f5d6c7812 Allow GrilService to access bluetooth extension HAL
Bug: 320403892
Test: Manual
Change-Id: I83834154563f9e77aaaf5ed786259a331497a378
2024-01-19 08:11:41 +00:00
kadirpili
8f0acd4186 rfsd: add new property to sepolicy
Avoid Access denied finding property "vendor.cbd.modem_bin_type" error message and give access for rfsd to access the property

Bug: 307481296
Bug: 317735109

Change-Id: Icd287f863fd6d309297ce984f4ce387fb5d3ae24
2024-01-18 08:30:02 +00:00
Aaron Tsai
7c0879939a Fix avc denied for hal_radioext_default
01-02 03:20:32.967   421   421 I auditd  : avc:  denied  { find } for pid=900 uid=1001 name=vendor.google.bluetooth_ext.IBTChannelAvoidance/default scontext=u:r:hal_radioext_default:s0 tcontext=u:object_r:hal_bluetooth_coexistence_service:s0 tclass=service_manager permissive=0

Bug: 318308344
Test: manual test
Change-Id: Ied0dd27d86cfc4512c08a26d02499ba9b816ed78
2024-01-03 09:47:09 +00:00
Chi Zhang
62184e7953 Allow GRIL to get power stats.
SELinux : avc:  denied  { find } for pid=3147 uid=10219 name=android.hardware.power.stats.IPowerStats/default scontext=u:r:grilservice_app:s0:c219,c256,c512,c768 tcontext=u:object_r:hal_power_stats_service:s0 tclass=service_manager permissive=1

Bug: 286187143
Test: build and boot
Change-Id: I42c78a68a145c4f390e43c457a241b7c8db577bf
2023-12-19 12:22:22 -08:00
Aaron Tsai
cd447908ec Add permission for setting gril property
08-23 16:41:13.524     1     1 I auditd  : type=1107 audit(0.0:404): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc:  denied  { set } for property=vendor.gril.recovery.count pid=1024 uid=1001 gid=1001 scontext=u:r:hal_radioext_default:s0 tcontext=u:object_r:vendor_default_prop:s0 tclass=property_service permissive=1'

Bug: 203824024
Test: manual test
Change-Id: I0bc67815fde6651e54ea422e5fd3622846bb3c56
2023-12-11 09:50:51 +00:00
Treehugger Robot
13f760e70b Merge "allow RILD to access modem status property" into main 2023-12-08 09:48:29 +00:00
Rios Kao
94549b69f4 Merge "audio: move related sepolicy of audio to gs-common" into main 2023-12-05 11:31:46 +00:00
timtmlin
b861f8ec0f allow RILD to access modem status property
Bug: 314133117
Test: set telephony.ril.modem_bin_status and restart modem
Change-Id: Ibe3a9d6f2a5c6bcd596797131e6bbe90a4f2341a
2023-12-04 19:02:37 +08:00
Rios Kao
aeb8adcbc0 audio: move related sepolicy of audio to gs-common
Test: build pass
Bug: 301180586
Change-Id: I1fa6f6348da4a5fd24df328ff1f40fa80f43403a
2023-12-04 10:16:49 +00:00
Megha Patil
4e1566d9d3 Merge "Add a new property to track the current Binary" into main 2023-11-29 04:55:24 +00:00
Tim Lin
648fffe4e8 Merge "sepolicy: define vendor_satellite_service domain" into main 2023-11-16 23:47:24 +00:00
Megha Patil
48735bb478 Add a new property to track the current Binary
new propert to mirror the current binary
Bug: b/311102904

Test: Test the Enable Satellite Api
Change-Id: I0e207e8e9c48b0b081fb76a252649e7e0dc07210
2023-11-15 05:55:57 +00:00
Avinash Malipatil
6b3841bea3 SEPolicy change to allow ImsMedia to set priority of audio threads.
Setting real-time thread priority for audio threads is a must to handle voice stream during vowifi calls.

AVC Error: auditd  : avc:  denied  { find } for pid=9346 uid=1001 name=scheduling_policy scontext=u:r:radio:s0 tcontext=u:object_r:scheduling_policy_service:s0 tclass=service_manager permissive=0

Bug: 309727903
Bug: 308517246

Test: adb shell 'ps -Tl -p '
Change-Id: Ib37aa1018ee63433ad878d1319a0c8158754befd
2023-11-14 15:55:17 +00:00
Mike Wang
5d3838f1eb Change the MDS to platform app in selinux ap context.
The MDS will be signed with platform key and become a platform app. To
make the selinux rules for modem_diagnostic_app work, need to set it to
platform app in app context.

Bug: 287683516

Test: Tested with both dev key or platform key signed MDS apps and the selinux rules works.
Change-Id: I19cce0963d85fd156e54f3c530431e1d465054b3
2023-11-08 05:19:22 +00:00
Mike Wang
3c9256f338 Merge "Add selinux policy change to allow MDS access Samsung OemRil hal." into main 2023-11-06 02:30:55 +00:00
mikeyuewang
eed49f4c46 Add selinux policy change to allow MDS access Samsung OemRil hal.
Bug: 301641283

selinux log:
11-03 15:32:38.850  2643  2643 I auditd  : type=1400 audit(0.0:1616): avc:  denied  { call } for  comm="binder:2643_3" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.850  2643  2643 I binder:2643_3: type=1400 audit(0.0:1616): avc:  denied  { call } for  scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  2643  2643 I auditd  : type=1400 audit(0.0:1617): avc:  denied  { transfer } for  comm="binder:2643_3" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  2643  2643 I binder:2643_3: type=1400 audit(0.0:1617): avc:  denied  { transfer } for  scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854  1095  1095 I auditd  : type=1400 audit(0.0:1618): avc:  denied  { call } for  comm="HwBinder:1095_1" scontext=u:r:rild:s0 tcontext=u:r:modem_diagnostic_app:s0:c512,c768 tclass=binder permissive=1
11-03 15:32:38.854  1095  1095 I HwBinder:1095_1: type=1400 audit(0.0:1618): avc:  denied  { call } for  scontext=u:r:rild:s0 tcontext=u:r:modem_diagnostic_app:s0:c512,c768 tclass=binder permissive=1


Change-Id: Ia71844db230302fd3120b28b3ade2e55443ec078
2023-11-03 07:36:16 +00:00
Sungwoo choi
b750cf8179 sepolicy: define vendor_satellite_service domain
vendor_satellite_service domain is for VendorSatelliteService.
  package: com.samsung.slsi.telephony.satelliteservice
  policy: vendor_satellite_service.te

Bug: 303240366
Bug: 304696411
Test: make

Change-Id: Ib7024d0397eda6d7f4e0809a1824dc550948207d
Signed-off-by: Sungwoo choi <sungwoo48.choi@samsung.com>
2023-10-31 20:06:44 +08:00
Megha Patil
6191d7d37f Sepolicy for the new property to switch Modem Binary
Sepolicy Rules added for telephony.TnNtn.image_switch

BUG: b/298322438
Test: Test Binding sequence of Service
Change-Id: Ie79aff94159d79a573ec92546a5d3e390b802b22
2023-10-30 11:32:41 +00:00
Mike Wang
72c63096bd Grant the MDS access to the IPowerStats hal service.
ref logs:
09-06 10:07:18.006   536   536 I auditd  : avc:  denied  { find } for pid=22543 uid=10225 name=android.hardware.power.stats.IPowerStats/default scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:hal_power_stats_service:s0 tclass=service_manager permissive=1
09-06 10:07:18.010 22543 22543 I auditd  : type=1400 audit(0.0:65): avc:  denied  { call } for  comm="pool-4-thread-1" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=1 app=com.google.mds

Test: Tested with MDS app and the MDS can get IPowerStats binder and
call the interface.

Bug: 297250368
Change-Id: I7503a86baa01e4391d64f958cd053822de78d8fd
2023-09-28 15:26:21 +00:00
Wilson Sung
c7a757a4ee Revert "Sync zuma-sepolicy to legacy folder"
This reverts commit 355f0df8fd.

Bug: 297270938
Merged-In: I3b15b35df4bc40716d0aa757a226c5075c7e29ff
Change-Id: I44cbb1a0ea6248fbc5a4dc3c12e96d2b66a32282
2023-08-24 08:47:01 +08:00
Wilson Sung
355f0df8fd Sync zuma-sepolicy to legacy folder
Duplicate from zuma-sepolicy 7f3e2b9

Test: make selinux_policy
Bug: 296187211
Change-Id: If686fbdcf058849479019e8b37bb1d57a0215ed6
Signed-off-by: Wilson Sung <wilsonsung@google.com>
2023-08-22 15:37:56 +08:00
Samuel Huang
d460f878fe Revert "Revert "Create telephony.ril.silent_reset system_ext pro..."
Revert submission 23817868-revert-23736941-tpsr-ril-property-WQVGKEVBKX

Reason for revert: The root cause is missing property definition in gs101-sepolicy. This CL can be merged safely. Verified by abtd run: https://android-build.googleplex.com/builds/abtd/run/L48900000961646046

Reverted changes: /q/submissionid:23817868-revert-23736941-tpsr-ril-property-WQVGKEVBKX

Bug: 286476107
Change-Id: I81a350f1df3c9071945e484277ed7fab5ae4c60e
2023-06-28 10:28:06 +00:00
Sebastian Pickl
0c5d6dd888 Revert "Create telephony.ril.silent_reset system_ext property fo..."
Revert submission 23736941-tpsr-ril-property

Reason for revert: culprit for b/289014054 verified by abtd run: https://android-build.googleplex.com/builds/abtd/run/L54800000961620143

Bug: 289014054

Reverted changes: /q/submissionid:23736941-tpsr-ril-property

Change-Id: I2b845e6600e613eaa10788274cb028903d5df82e
2023-06-27 10:05:38 +00:00
Samuel Huang
7d7f055d46 Create telephony.ril.silent_reset system_ext property for RILD restart
RILD listens for changes to this property. If the value changes to 1, RILD will restart itself and set this property back to 0.

The TelephonyGoogle app will set this property to 1 when it receives a request from the SCONE app. Since TelephonyGoogle runs in the com.android.phone process, we also need to give the radio domain permission to set the telephony.ril.silent_reset property.

Bug: 286476107
Test: manual
Change-Id: I363b44a1a44184df05449ceb97089bb9e0211550
2023-06-21 06:35:13 +00:00
Robin Peng
30ab759177 Sync with device/google/zuma-sepolicy a89fbcc4aa1ae
fix build breakage:
device/google/zumapro-sepolicy/legacy/whitechapel_pro/file.te:4:ERROR 'Duplicate declaration of type' at token ';' on line 104436:
type tcpdump_vendor_data_file, file_type, data_file_type;
type updated_wifi_firmware_data_file, file_type, data_file_type;

Bug: 272725898
Change-Id: Ic17d18409c28760d172a4ee7a5beb6c90016a381
2023-05-01 10:04:38 +00:00
Robin Peng
d9e2e6aae9 Sync with device/google/zuma-sepolicy cfa00dfc881e3
Bug: 272725898
Change-Id: I9125ed760c0b4c688cf37720f5d4a744f2484be7
2023-04-11 10:30:07 +00:00
Robin Peng
bff99af2da init zumapro from zuma sha 43d5907677d0f
Bug: 272725898
Change-Id: If35d9efdda9dd3b8d8b24008f0738a0cbbe5bd9b
2023-03-31 14:16:57 +00:00