Evolution-X-Tensor/device_google_zumapro
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
737 commits 1 branch 0 tags 4 MiB
Commit graph

737 commits

This branch
This branch
All branches
Author SHA1 Message Date
Nicole Lee
6e4b317a71 Allows modem_svc to read the logging related properties am: fc41724a97 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/27176301

Change-Id: Id7b52b03bb7e09b91e73cfe3167cb87041618254
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-05-03 12:16:55 +00:00
Nicole Lee
fc41724a97 Allows modem_svc to read the logging related properties 
avc:  denied  { read } for  comm="modem_svc_sit" name="u:object_r:vendor_logger_prop:s0" dev="tmpfs" ino=417 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_logger_prop:s0 tclass=file permissive=0

Bug: 337184337
Change-Id: I806eee53b4ed0414b08f6203fb07958d6e0e4be1
 2024-05-03 09:48:58 +00:00
Darren Hsu
ae01acb475 sepolicy: allow hal_power_stats to read modem sysfs node 
avc:  denied  { read } for  name="link_duration" dev="sysfs"
ino=50065 scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0

Bug: 338278462
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: I691955410fb2cc24f8a372c6176a4fb7490309c4
Signed-off-by: Darren Hsu <darrenhsu@google.com>
 2024-05-03 15:21:09 +08:00
Spade Lee
b5d740cdd1 Merge "sepolicy: add logbuffer_device r_file_perms" into 24D1-dev am: adbb0eda58 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/27135775

Change-Id: I4c4cdf330cb3a702b8da08473d2f6362a10d2833
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-05-03 05:24:16 +00:00
Spade Lee
adbb0eda58 Merge "sepolicy: add logbuffer_device r_file_perms" into 24D1-dev 2024-05-03 04:51:31 +00:00
Shawn Yang
0dd672a938 Merge "[PMS]Add context for PixelModemService and allow the access to shared modem service." into main 2024-05-02 22:20:10 +00:00
Priyanka Advani
97dcd536a8 Merge "Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"" into 24D1-dev am: dae4c8d652 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/27192520

Change-Id: I5c9d2eb447a81a80586d7111f9dce93aca0c8f6a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-05-02 19:54:21 +00:00
Priyanka Advani
dae4c8d652 Merge "Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"" into 24D1-dev 2024-05-02 19:42:59 +00:00
Priyanka Advani
4c6f1b0a81 Revert "sepolicy: Allow PixelGnss to connect to Chre HAL" 
Revert submission 27007604-pps_topic

Reason for revert: Droid-monitor created revert due to breakages in b/338407263. Will be verifying through ABTD before submission.

Reverted changes: /q/submissionid:27007604-pps_topic

Change-Id: Ib66d30e7de4fe1880296d2c66a99c2e941c96135
 2024-05-02 16:28:07 +00:00
Treehugger Robot
cf2ee92ffc Merge "sepolicy: Allow PixelGnss to connect to Chre HAL" into 24D1-dev am: 7cdb6ff8b0 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/27007604

Change-Id: Ie79136497bbe8b68fd02fb768927963c906bc844
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-05-02 13:36:24 +00:00
Treehugger Robot
7cdb6ff8b0 Merge "sepolicy: Allow PixelGnss to connect to Chre HAL" into 24D1-dev 2024-05-02 13:12:59 +00:00
Treehugger Robot
de8e4b1133 Merge "lights: Add LED sysfs sepolicy" into main 2024-05-02 00:31:33 +00:00
Chungjui Fan
91aa5ade23 lights: Add LED sysfs sepolicy 
Bug: 307424586
Change-Id: I5b919d56a72d98c7173004b1380ca50e3691aacc
Signed-off-by: Chungjui Fan <chungjuifan@google.com>
 2024-04-30 01:21:57 +00:00
YiKai Peng
660715f1f8 Merge "selinux: label wakeup for BMS I2C 0x5B, 0x61" into main 2024-04-29 06:30:42 +00:00
Spade Lee
098fb2dabc sepolicy: add logbuffer_device r_file_perms 
avc: denied { read } for name="logbuffer_max77779fg_monitor" dev="tmpfs" ino=1034 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:logbuffer_device:s0 tclass=chr_file permissive=0

Bug: 335934710
Test: no denied read logbuffer
Change-Id: Ie9cc3d7d0dbfc480cc8ff0bab2d600b8abf688c7
Signed-off-by: Spade Lee <spadelee@google.com>
 2024-04-28 17:33:28 +00:00
mikeyuewang
5ce4700d6f [PMS]Add context for PixelModemService and allow the access to shared modem service. 
Bug: 335490443
Change-Id: Ie5c6b0191775d42d402632c46c34cafe77fe5e60
 2024-04-26 17:02:26 +00:00
YiKai Peng
af3f9d9d62 selinux: label wakeup for BMS I2C 0x5B, 0x61 
Bug: 335557235
Test: v2/pixel-health-guard/device-boot-health-check-extra
Change-Id: If41db4725810a851f4a6a1a05566c2547f142da9
Signed-off-by: YiKai Peng <kenpeng@google.com>
 2024-04-26 07:28:52 +00:00
Enzo Liao
3f4e9ffdbd [automerger skipped] Merge "Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common." into 24D1-dev am: 6b1e936fd8 -s ours 
am skip reason: Merged-In I455630b347f9f234365fec371142582d2cc0640a with SHA-1 2761dbe28b is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/27046301

Change-Id: I5e38851de729ea69bfda4c219c636af70a71c2cb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-04-25 08:31:23 +00:00
Enzo Liao
9b7516efde [automerger skipped] Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common. am: e4ceb50a9c -s ours 
am skip reason: Merged-In I455630b347f9f234365fec371142582d2cc0640a with SHA-1 2761dbe28b is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/27046301

Change-Id: I677b04af41d0a1c3cf614df64359443dc3e64b42
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-04-25 08:31:16 +00:00
Enzo Liao
6b1e936fd8 Merge "Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common." into 24D1-dev 2024-04-25 08:22:07 +00:00
Cheng Chang
c4d1594131 sepolicy: Allow PixelGnss to connect to Chre HAL 
avc:  denied  { call } for  scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0

Bug: 330120749
Test: Verify PixelGnss HAL can connect to Chre HAL.
Test: Function test verification b/330120749.
Test: b/330120749#comment24 health boot check.
Test: b/330120749#comment25 health boot check.
Change-Id: I051cc19407ba168fadea4d51ed4aa1527e414bb7
 2024-04-25 07:49:16 +00:00
Peter (YM)
f1834f0d8c zumapro: sepolicy: Update gpu available_frequencies sepolicies. 
Apply similar group coverage to sysfs_devices_system_cpu, allow service
to read available frequences and avoid invalid behaiovr

Bug: 336698561
Test: ls -lZ /sys/devices/platform/1f000000.mali
Change-Id: I5a4f0766b4778fd8895e41d52f6d6b92f9d90de5
Signed-off-by: Peter (YM) <peterym@google.com>
 2024-04-25 06:42:28 +00:00
Kevin Ying
b5629419fe Add sepolicy for power_state sysfs node 
Bug: 329703995
Test: manual - use camera with DisplayMonitor update
Change-Id: Ifd738a1726ba1c2ff0931eac653737f9be7daa87
Signed-off-by: Kevin Ying <kevinying@google.com>
 2024-04-24 19:10:44 +00:00
Jenny Ho
1dce149e64 Merge "sepolicy: add permission to dump max77779 fwupdate logbuffer" into 24D1-dev am: 99bf940a62 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/27059866

Change-Id: Ifc553e02746c68e26277d643c7838af776084ec7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-04-24 06:06:48 +00:00
Jenny Ho
99bf940a62 Merge "sepolicy: add permission to dump max77779 fwupdate logbuffer" into 24D1-dev 2024-04-24 05:51:21 +00:00
Donnie Pollitz
e7837b9987 Add permission for storageproxy to create symlinks for ss 
Bug: 324989972
Test: Manually test that symlinks are created with no avc denials
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:dd71a9cf2794afecd2699bf1b245a98b5bfae376)
Merged-In: I3f0559ee062c1b5393a2a35f957fbc8528bb58de
Change-Id: I3f0559ee062c1b5393a2a35f957fbc8528bb58de
 2024-04-23 15:45:38 +00:00
Treehugger Robot
575e24cc04 Merge "Remove legacy camera HAL policy." into 24D1-dev am: f269b140a9 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26948535

Change-Id: I502337ad9a354179edc7ab34c7974f0a45d3bbb6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-04-23 10:29:09 +00:00
Treehugger Robot
f269b140a9 Merge "Remove legacy camera HAL policy." into 24D1-dev 2024-04-23 10:06:13 +00:00
Jenny Ho
e1132a4be2 sepolicy: add permission to dump max77779 fwupdate logbuffer 
W dump_power: type=1400 audit(0.0:9): avc:  denied  { read } for  name="logbuffer_max77779_fwupdate" dev="tmpfs" ino=1570 scontext=u:r:dump_power:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0

Bug: 334198978
Change-Id: I1505abe88a18269ce50dbcec48d91622874f9a26
Signed-off-by: Jenny Ho <hsiufangho@google.com>
 2024-04-23 08:04:20 +00:00
Donnie Pollitz
dd71a9cf27 Add permission for storageproxy to create symlinks for ss 
Bug: 324989972
Test: Manually test that symlinks are created with no avc denials
Change-Id: I3f0559ee062c1b5393a2a35f957fbc8528bb58de
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
 2024-04-22 19:00:01 +00:00
Weizhung Ding
791a7a4eb2 Merge "display: low-light blocking zone for secondary display" into 24D1-dev am: 650e554027 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26994922

Change-Id: I4f331a2d73addc7f635f74cf7137e8d8c483812a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-04-22 06:27:54 +00:00
Weizhung Ding
650e554027 Merge "display: low-light blocking zone for secondary display" into 24D1-dev 2024-04-22 06:12:58 +00:00
Frank Yu
7a43933e5c Merge "Update SEpolicy for grilservice_app register callbacks of AntennaTuningService. Remove callbacks from radioext native service to grilservice_app." into 24D1-dev am: e6295955ff 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26783005

Change-Id: If67f2b8f38c48e933628b4d411b416068a42ae8a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-04-22 04:03:11 +00:00
Frank Yu
e6295955ff Merge "Update SEpolicy for grilservice_app register callbacks of AntennaTuningService. Remove callbacks from radioext native service to grilservice_app." into 24D1-dev 2024-04-22 03:49:13 +00:00
Enzo Liao
e4ceb50a9c Move SELinux policies of RamdumpService and SSRestartDetector to /gs-common. 
New paths (ag/26620507):
  RamdumpService: device/google/gs-common/ramdump_app
  SSRestartDetector: device/google/gs-common/ssr_detector_app

Bug: 298102808
Design: go/sys-software-logging
Test: Manual
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:2761dbe28b294be5199aba6ee73013427e8d627f)
Merged-In: I455630b347f9f234365fec371142582d2cc0640a
Change-Id: I455630b347f9f234365fec371142582d2cc0640a
 2024-04-22 03:03:12 +00:00
Martin Liu
9127824dd6 move common MM policy to gs common folder 
Bug: 332916849
Bug: 309409009
Test: boot
Change-Id: I66e6a70e798937c7a651f9400558c431237b3a9e
Signed-off-by: Martin Liu <liumartin@google.com>
 2024-04-18 01:58:21 +00:00
Treehugger Robot
6cdcc7e516 Merge "Add capacity_headroom to gpu sysfs" into main 2024-04-17 18:53:24 +00:00
Achigo Liu
063557a306 Revert "Allow vendor_init to move tasks" am: c989d47ad9 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26991793

Change-Id: I309230b396e71259447b951562efaf224ff0ab08
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-04-17 18:09:12 +00:00
Achigo Liu
c989d47ad9 Revert "Allow vendor_init to move tasks" 
Revert submission 26931570-cpuset_system_group

Reason for revert: b/335346990 suspend/resume ramdump or black screen

Reverted changes: /q/submissionid:26931570-cpuset_system_group

Change-Id: Ib505a519b519bf8c907ca9f5973d01a2f00bd841
 2024-04-17 09:35:53 +00:00
Weizhung Ding
9fe206c50f display: low-light blocking zone for secondary display 
Bug: 320804821
Test: dumpsys SurfaceFlinger| grep "blocking zone"
Change-Id: Iba1e005ddaf28a7a8d1d10677b5e501aaefa6c68
 2024-04-17 08:27:18 +00:00
Hidayat Khan
ea5dc2cc1e Merge "Change get_prop to only be allowed for userdebug or eng build." into main 2024-04-16 16:24:17 +00:00
Rick Yiu
e594c0c025 Allow vendor_init to move tasks am: 6122e05a50 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26968797

Change-Id: I591ba94dd745edb457266ed388978119cfef015e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-04-16 03:33:28 +00:00
Rick Yiu
6122e05a50 Allow vendor_init to move tasks 
To move tasks to cpuset system group.

Bug: 328210236
Test: build pass
Change-Id: I9336ec8922cbfed496ef37df73e3ecdf83a98584
 2024-04-15 14:26:29 +00:00
Kyle Tso
2ac5589553 file_contexts: Add logbuffer_pogo_transport 
Bug: 328314131
Change-Id: Ie846cc75366375d5bd4889b2cf8061baf2aa82a5
Signed-off-by: Kyle Tso <kyletso@google.com>
 2024-04-15 17:12:30 +08:00
Jenny Ho
50a9b3df83 Merge "sepolicy: allow pixelstats to access maxfg_history" into 24D1-dev am: a81b52aeb8 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26930555

Change-Id: I7205a414e0b469f080f26e6b847a8bad86799ffd
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-04-15 01:18:32 +00:00
Jenny Ho
a81b52aeb8 Merge "sepolicy: allow pixelstats to access maxfg_history" into 24D1-dev 2024-04-15 00:56:21 +00:00
Kevin DuBois
4d50d35fcd Add capacity_headroom to gpu sysfs 
This allows userspace (notably the power HAL) to apply a boost to GPU
frequency independent of previously measured load.

Bug: 290625326
Test: boot, run modified Power HAL
Change-Id: I87b2e3d3dbb0a6c3eb68970fc3f3380b61586a46
 2024-04-12 19:40:56 -07:00
Krzysztof Kosiński
6d632595b6 Remove legacy camera HAL policy. 
All of these accesses are still needed.

Bug: 313934097
Test: presubmit
Change-Id: I5222a7416d7cffed0d84b1a4c80f74edc4aadd49
 2024-04-12 22:32:38 +00:00
Martin Liu
b7fe5c6f6a allow vendor init to access percpu_pagelist_high_fraction am: 8c4445390a 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zumapro-sepolicy/+/26919146

Change-Id: I3de00f10535dfb7bcb32dcb19828db01d88f80df
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
 2024-04-12 18:11:39 +00:00
Jenny Ho
b078a0eeca sepolicy: allow pixelstats to access maxfg_history 
to dump secondary battery history for dual battery projects:
avc:  denied  { read } for  name="maxfg_history" dev="tmpfs" ino=1127 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0

Bug: 333952062
Change-Id: I072db3adff63c63ebbb5b1ba4dabfccfe3d6adac
Signed-off-by: Jenny Ho <hsiufangho@google.com>
 2024-04-12 00:25:11 +00:00