Commit graph

71 commits

Author SHA1 Message Date
Cheng Chang
92c5aff54d gps: Move type declaration to device folder am: 8fa884d01c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/27574819

Change-Id: I8d7cd44249f8912b9fab64d24ff53381e20fc05b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-06-12 07:27:17 +00:00
Cheng Chang
8fa884d01c gps: Move type declaration to device folder
Bug: 343280252
Test: b/343280252 compile and abtd test
Change-Id: I492ea0b14953cf5b0111ac70bf82240522a15494
2024-06-11 07:52:11 +00:00
Lynn Yeh
97d62f485d Merge "gps: maintain one solution" into 24D1-dev 2024-06-11 02:25:19 +00:00
Mike Wang
45d36ab2be Merge "Grant the Pixel Modem Service access to the SubscriptionManager." into main 2024-06-06 22:50:03 +00:00
Shinru Han
34de4a725d Merge "gps: maintain one solution" into main 2024-06-04 06:41:30 +00:00
mikeyuewang
785df18f1e Grant the Pixel Modem Service access to the SubscriptionManager.
Bug: 344624813

avc denial: avc: denied { find } for pid=2372 uid=10303 name=isub scontext=u:r:pixel_modem_app:s0:c47,c257,c512,c768 tcontext=u:object_r:radio_service:s0 tclass=service_manager permissive=0

Change-Id: I2e74ae8b364a30895e2769504efcd604f19adfa7
2024-06-03 18:54:26 +00:00
Frank Yu
3ef50e762f Update sepolicy for all device that use radioext 1.7 interface.
Bug: 340791912
Test: v2/pixel-health-guard/device-boot-health-check-extra
Change-Id: Icd7b482d88f52fbde6b281ef58857bfa6a9edea8
2024-05-20 03:17:49 +00:00
Wayne Lin
89a73294a0 gps: maintain one solution
Bug: 315915958
Test: build pass and GPS function works
Change-Id: I15572cbfc9bc4aa5ca966a7905c6aac63bc972d5
Merged-In: I15572cbfc9bc4aa5ca966a7905c6aac63bc972d5
2024-05-06 03:52:43 +00:00
Wayne Lin
e2546691fe gps: maintain one solution
Bug: 315915958
Test: build pass and GPS function works
Change-Id: I15572cbfc9bc4aa5ca966a7905c6aac63bc972d5
2024-05-06 03:09:11 +00:00
Nicole Lee
6e4b317a71 Allows modem_svc to read the logging related properties am: fc41724a97
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/27176301

Change-Id: Id7b52b03bb7e09b91e73cfe3167cb87041618254
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-03 12:16:55 +00:00
Nicole Lee
fc41724a97 Allows modem_svc to read the logging related properties
avc:  denied  { read } for  comm="modem_svc_sit" name="u:object_r:vendor_logger_prop:s0" dev="tmpfs" ino=417 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_logger_prop:s0 tclass=file permissive=0

Bug: 337184337
Change-Id: I806eee53b4ed0414b08f6203fb07958d6e0e4be1
2024-05-03 09:48:58 +00:00
Shawn Yang
0dd672a938 Merge "[PMS]Add context for PixelModemService and allow the access to shared modem service." into main 2024-05-02 22:20:10 +00:00
mikeyuewang
5ce4700d6f [PMS]Add context for PixelModemService and allow the access to shared modem service.
Bug: 335490443
Change-Id: Ie5c6b0191775d42d402632c46c34cafe77fe5e60
2024-04-26 17:02:26 +00:00
Enzo Liao
6b1e936fd8 Merge "Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common." into 24D1-dev 2024-04-25 08:22:07 +00:00
Frank Yu
7a43933e5c Merge "Update SEpolicy for grilservice_app register callbacks of AntennaTuningService. Remove callbacks from radioext native service to grilservice_app." into 24D1-dev am: e6295955ff
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26783005

Change-Id: If67f2b8f38c48e933628b4d411b416068a42ae8a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-22 04:03:11 +00:00
Frank Yu
e6295955ff Merge "Update SEpolicy for grilservice_app register callbacks of AntennaTuningService. Remove callbacks from radioext native service to grilservice_app." into 24D1-dev 2024-04-22 03:49:13 +00:00
Enzo Liao
e4ceb50a9c Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common.
New paths (ag/26620507):
  RamdumpService: device/google/gs-common/ramdump_app
  SSRestartDetector: device/google/gs-common/ssr_detector_app

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:2761dbe28b294be5199aba6ee73013427e8d627f)
Merged-In: I455630b347f9f234365fec371142582d2cc0640a
Change-Id: I455630b347f9f234365fec371142582d2cc0640a
2024-04-22 03:03:12 +00:00
Hidayat Khan
ea5dc2cc1e Merge "Change get_prop to only be allowed for userdebug or eng build." into main 2024-04-16 16:24:17 +00:00
Enzo Liao
e2da6846cb Merge "Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common." into main 2024-04-11 02:03:26 +00:00
Aswin Sankar
05a3a75caf Merge "Add telephony_modemtype_prop to GRIL service" into 24D1-dev am: bab1ea9e7b
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26891013

Change-Id: Ie6955ea6f52ef74297b37b5cc5a476a265cb6aa7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-04-10 23:09:43 +00:00
Aswin Sankar
aa139f50d2 Add telephony_modemtype_prop to GRIL service
Bug:315993263
Test: Manual test with GRIL changes to read out
SystemProperty("telephony.ril.modem_bin_status").

Change-Id: I67303f1410e5dfb4472185210f41437be01d473b
2024-04-09 13:28:42 -07:00
Hidayat Khan
468011067b Change get_prop to only be allowed for userdebug or eng build.
Bug: 329006027
Test: flashed device and tested new prop locally
Change-Id: Ifdc250cccbd43f237942dc4e11e50f3c968bf65d
2024-04-09 01:24:40 +00:00
Enzo Liao
2761dbe28b Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common.
New paths (ag/26620507):
  RamdumpService: device/google/gs-common/ramdump_app
  SSRestartDetector: device/google/gs-common/ssr_detector_app

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
Change-Id: I455630b347f9f234365fec371142582d2cc0640a
2024-04-08 19:23:52 +08:00
Frank Yu
f1b959a0ed Update SEpolicy for grilservice_app register
callbacks of AntennaTuningService. Remove callbacks from radioext native
service to grilservice_app.

Bug: 321790599
Test: Manual test. gripservice_app receive update from callback successfully. Because moving out the callbacks from radioext to grilservice_app, we don't need antennatuningservice bind to radioext anymore.
Change-Id: I6827b506b9893e43d6d9268f623b33b848863a7c
2024-04-03 07:08:06 +00:00
kierancyphus
e94313c494 shamp: Allow shamp to register AIDL hal
Bug: 329367768

The `file_contexts` were modified to give the previous `modem_svc_sit`
permissions to the new `shared_modem_platform` executable.
Additionally, it was marked as a valid server for the
`ISharedModemPlaform` AIDL HAL.

Test: Build, flash and check to make sure correct logs on boot
Doc: go/shared-modem-platform-cpp-backend
Change-Id: I6bd6454f1c0b0c39c3ef6477cbec0e9f53b97038
2024-04-01 16:20:02 +08:00
Mike Wang
2b280a43ff Merge "Add the selinux policy for MDS to access modem_state file" into main 2024-03-29 15:16:19 +00:00
Hungyen Weng
1a1679c87e Allow modem_svc to access modem files and perfetto
Bug: 330730987

Test: Confirmed that modem_svc is able to access token db files in modem partition
Test: Confiemed that modem_svc can send traces to perfetto

Change-Id: Iaff263b1052cb565ffee30e442ee3c5824f35db9
(cherry picked from commit b5b20910e8)
2024-03-28 01:38:00 +00:00
mikeyuewang
ed2820a221 Add the selinux policy for MDS to access modem_state file
avc deny:
2024-02-20 19:21:35.941 21780-21780 DiagnosticServi         com.google.mds                       I  type=1400 audit(0.0:1078): avc:  denied  { read } for  name="modem_state" dev="sysfs" ino=60939 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds
2024-02-20 19:21:35.941 21780-21780 DiagnosticServi         com.google.mds                       I  type=1400 audit(0.0:1079): avc:  denied  { open } for  path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=60939 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds
2024-02-20 19:21:35.941 21780-21780 DiagnosticServi         com.google.mds                       I  type=1400 audit(0.0:1080): avc:  denied  { getattr } for  path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=60939 scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 app=com.google.mds

Bug: 331202327

Change-Id: I49bd28e4ae3b311c7e4b98567b929d3b887e0238
2024-03-27 17:50:05 +00:00
Hidayat Khan
5ca8ee6a0d Merge "Define new persist vendor property vendor_ims_tiss_prop" into main 2024-03-27 05:22:30 +00:00
Hidayat Khan
ffb572cf1b Define new persist vendor property vendor_ims_tiss_prop
- Properties under this context are for go/tiss test mode
- Properties can only be read by ShannonImsService as only getprop
  method is allowed

Bug: 329006027
Test: flashed device and tested new prop locally
Change-Id: I8a4aaf5a6b34798dbd9aed0b2bbc1a4a75924c27
2024-03-27 02:54:40 +00:00
Hungyen Weng
b5b20910e8 Allow modem_svc to access modem files and perfetto
Bug: 330730987

Test: Confirmed that modem_svc is able to access token db files in modem partition
Test: Confiemed that modem_svc can send traces to perfetto

Change-Id: Iaff263b1052cb565ffee30e442ee3c5824f35db9
2024-03-22 00:29:20 +00:00
Tim Lin
31edc2fa71 Merge "allow GRIL native to read modem type" into 24D1-dev am: d0b2833cac
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26511650

Change-Id: Ia61f748f9185cbff881fbd544188ea8ec9d2fad6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-03-12 04:45:30 +00:00
timtmlin
f64d18749f allow GRIL native to read modem type
telephony.ril.modem_bin_status is set by CBD

Bug: 328148438
Test: check GRIL requests at TN modem and NTN modem
Change-Id: I5a3265a89ff365fd5ae1f49a452b3abf73461c7c
2024-03-08 23:30:03 +08:00
Kah Xuan Lim
6914e7a49b Modem ML: Add sepolicy for TFLiteService
Add the sepolicy required to:
- Introduce modemml_tflite_service which runs on the system server.
- Allow modem_ml_svc_sit to access the new service.
- Allow system_server to access NNAPI TPU service.

Relevant logs before the sepolicy changes are made:

```
auditd  : avc:  denied  { find } for pid=1000 uid=1001 name=com.android.server.modemml.ITFLiteService/default scontext=u:r:modem_ml_svc_sit:s0 tcontext=u:object_r:modemml_tflite_service:s0 tclass=service_manager permissive=1
```

```
11-14 03:03:44.392  1064  1064 I auditd  : type=1400 audit(0.0:9): avc:  denied  { call } for  comm="modem_ml_svc_si" scontext=u:r:modem_ml_svc_sit:s0 tcontext=u:r:system_server:s0 tclass=binder permissive=1
```

```
SELinux : avc:  denied  { find } for pid=1115 uid=1000 name=android.hardware.neuralnetworks.IDevice/google-edgetpu scontext=u:r:system_server:s0 tcontext=u:object_r:edgetpu_nnapi_service:s0 tclass=service_manager permissive=1
```

Bug: 307449478

Change-Id: I14c2aa02eca08a026d100af6eea11ac9ac9e4fc7
2024-03-06 13:35:33 +08:00
Chi Zhang
9de082ad52 Merge "Allow GRIL to get IRQ counts." into main 2024-02-23 22:07:01 +00:00
Mahesh Kallelil
4118c09b83 radio: Add PCIe dyn speed sysfs nodes to sysfs_modem
Allow modem_svc to write to the cpif sysfs files for PCIe dynamic
speed feature control.

Test: Tested with property change on device
Bug: 256247132
Change-Id: I1117ebf15ff4546cdd3a4bf0a653a46d39a8b59c
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
2024-02-20 22:56:57 -08:00
Chi Zhang
8fb2332864 Allow GRIL to get IRQ counts.
auditd  : type=1400 audit(0.0:94): avc:  denied  { read } for  comm="TestableLooper" name="irq" dev="sysfs" ino=20470 scontext=u:r:grilservice_app:s0:c241,c256,c512,c768 tcontext=u:object_r:sysfs_irq:s0 tclass=dir permissive=0 app=com.google.android.grilservice

Bug: 322548372
Test: build and boot
Change-Id: Iffc7f49d28ccd1960e6f939375a8e42958eff8bb
2024-02-20 10:46:37 -08:00
Wayne Lin
35176423de Merge "gps: refine iGNSS build system - sepolicy" into main 2024-01-30 05:45:58 +00:00
Kieran Cyphus
98fe007a31 Merge "liboemservice_proxy: Add sepolicy" into main 2024-01-29 05:58:46 +00:00
Wayne Lin
b89210063c gps: refine iGNSS build system - sepolicy
Bug: 318310869
Bug: 315915958
Test: build pass, GPS works and no GPS avc denied error
Change-Id: I64d2e8971abb44d604082deaed6e90a13cac203d
2024-01-29 05:52:15 +00:00
kierancyphus
2fbd1edf60 liboemservice_proxy: Add sepolicy
This was previously only configured to run on zuma devices, but should
be expanded to this device as well. Since this service should only be
present on these two devices, it's fine to just copy this here instead
of placing it in gs-common.

Test: atest vts_treble_vintf_vendor_test:DeviceManifest/SingleAidlTest
Bug: 321867236
Change-Id: I9f086df735c866ed037307574b38458434a9c486
2024-01-25 17:53:23 +08:00
Ted Wang
a446b6d3ae Merge "Allow GrilService to access bluetooth extension HAL" into main 2024-01-24 02:38:02 +00:00
Megha Patil
3b48faef9c Merge "Add System Property to Specify NTN Demo Mode Enabled" into main 2024-01-23 10:35:10 +00:00
Megha Patil
ab78d95fb8 Add System Property to Specify NTN Demo Mode Enabled
"telephony.ril.ntn_demo_mode" Property is added which specifies
RIL about NTN Demo Mode.

BUG: b/321178074
Test: Set the property in the service.
Change-Id: I8baca9ceaf364b579293679cabe26c33e0a4ec1e
2024-01-23 10:34:57 +00:00
Ted Wang
4f5d6c7812 Allow GrilService to access bluetooth extension HAL
Bug: 320403892
Test: Manual
Change-Id: I83834154563f9e77aaaf5ed786259a331497a378
2024-01-19 08:11:41 +00:00
kadirpili
8f0acd4186 rfsd: add new property to sepolicy
Avoid Access denied finding property "vendor.cbd.modem_bin_type" error message and give access for rfsd to access the property

Bug: 307481296
Bug: 317735109

Change-Id: Icd287f863fd6d309297ce984f4ce387fb5d3ae24
2024-01-18 08:30:02 +00:00
Aaron Tsai
7c0879939a Fix avc denied for hal_radioext_default
01-02 03:20:32.967   421   421 I auditd  : avc:  denied  { find } for pid=900 uid=1001 name=vendor.google.bluetooth_ext.IBTChannelAvoidance/default scontext=u:r:hal_radioext_default:s0 tcontext=u:object_r:hal_bluetooth_coexistence_service:s0 tclass=service_manager permissive=0

Bug: 318308344
Test: manual test
Change-Id: Ied0dd27d86cfc4512c08a26d02499ba9b816ed78
2024-01-03 09:47:09 +00:00
Chi Zhang
62184e7953 Allow GRIL to get power stats.
SELinux : avc:  denied  { find } for pid=3147 uid=10219 name=android.hardware.power.stats.IPowerStats/default scontext=u:r:grilservice_app:s0:c219,c256,c512,c768 tcontext=u:object_r:hal_power_stats_service:s0 tclass=service_manager permissive=1

Bug: 286187143
Test: build and boot
Change-Id: I42c78a68a145c4f390e43c457a241b7c8db577bf
2023-12-19 12:22:22 -08:00
Aaron Tsai
cd447908ec Add permission for setting gril property
08-23 16:41:13.524     1     1 I auditd  : type=1107 audit(0.0:404): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc:  denied  { set } for property=vendor.gril.recovery.count pid=1024 uid=1001 gid=1001 scontext=u:r:hal_radioext_default:s0 tcontext=u:object_r:vendor_default_prop:s0 tclass=property_service permissive=1'

Bug: 203824024
Test: manual test
Change-Id: I0bc67815fde6651e54ea422e5fd3622846bb3c56
2023-12-11 09:50:51 +00:00
Treehugger Robot
13f760e70b Merge "allow RILD to access modem status property" into main 2023-12-08 09:48:29 +00:00