Evolution-X-Tensor/device_google_zumapro
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
496 commits 1 branch 0 tags 4 MiB
Commit graph

220 commits

Author SHA1 Message Date
Peter (YM)
f1834f0d8c zumapro: sepolicy: Update gpu available_frequencies sepolicies. 
Apply similar group coverage to sysfs_devices_system_cpu, allow service
to read available frequences and avoid invalid behaiovr

Bug: 336698561
Test: ls -lZ /sys/devices/platform/1f000000.mali
Change-Id: I5a4f0766b4778fd8895e41d52f6d6b92f9d90de5
Signed-off-by: Peter (YM) <peterym@google.com>
 2024-04-25 06:42:28 +00:00
Jenny Ho
99bf940a62 Merge "sepolicy: add permission to dump max77779 fwupdate logbuffer" into 24D1-dev 2024-04-24 05:51:21 +00:00
Treehugger Robot
f269b140a9 Merge "Remove legacy camera HAL policy." into 24D1-dev 2024-04-23 10:06:13 +00:00
Jenny Ho
e1132a4be2 sepolicy: add permission to dump max77779 fwupdate logbuffer 
W dump_power: type=1400 audit(0.0:9): avc:  denied  { read } for  name="logbuffer_max77779_fwupdate" dev="tmpfs" ino=1570 scontext=u:r:dump_power:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0

Bug: 334198978
Change-Id: I1505abe88a18269ce50dbcec48d91622874f9a26
Signed-off-by: Jenny Ho <hsiufangho@google.com>
 2024-04-23 08:04:20 +00:00
Weizhung Ding
650e554027 Merge "display: low-light blocking zone for secondary display" into 24D1-dev 2024-04-22 06:12:58 +00:00
Frank Yu
e6295955ff Merge "Update SEpolicy for grilservice_app register callbacks of AntennaTuningService. Remove callbacks from radioext native service to grilservice_app." into 24D1-dev 2024-04-22 03:49:13 +00:00
Achigo Liu
c989d47ad9 Revert "Allow vendor_init to move tasks" 
Revert submission 26931570-cpuset_system_group

Reason for revert: b/335346990 suspend/resume ramdump or black screen

Reverted changes: /q/submissionid:26931570-cpuset_system_group

Change-Id: Ib505a519b519bf8c907ca9f5973d01a2f00bd841
 2024-04-17 09:35:53 +00:00
Weizhung Ding
9fe206c50f display: low-light blocking zone for secondary display 
Bug: 320804821
Test: dumpsys SurfaceFlinger| grep "blocking zone"
Change-Id: Iba1e005ddaf28a7a8d1d10677b5e501aaefa6c68
 2024-04-17 08:27:18 +00:00
Rick Yiu
6122e05a50 Allow vendor_init to move tasks 
To move tasks to cpuset system group.

Bug: 328210236
Test: build pass
Change-Id: I9336ec8922cbfed496ef37df73e3ecdf83a98584
 2024-04-15 14:26:29 +00:00
Jenny Ho
a81b52aeb8 Merge "sepolicy: allow pixelstats to access maxfg_history" into 24D1-dev 2024-04-15 00:56:21 +00:00
Krzysztof Kosiński
6d632595b6 Remove legacy camera HAL policy. 
All of these accesses are still needed.

Bug: 313934097
Test: presubmit
Change-Id: I5222a7416d7cffed0d84b1a4c80f74edc4aadd49
 2024-04-12 22:32:38 +00:00
Jenny Ho
b078a0eeca sepolicy: allow pixelstats to access maxfg_history 
to dump secondary battery history for dual battery projects:
avc:  denied  { read } for  name="maxfg_history" dev="tmpfs" ino=1127 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0

Bug: 333952062
Change-Id: I072db3adff63c63ebbb5b1ba4dabfccfe3d6adac
Signed-off-by: Jenny Ho <hsiufangho@google.com>
 2024-04-12 00:25:11 +00:00
Martin Liu
8c4445390a allow vendor init to access percpu_pagelist_high_fraction 
Bug: 333838316
Test: boot
Change-Id: I4b29278c4a7be10609e0aaafe99603d4762f64b6
Signed-off-by: Martin Liu <liumartin@google.com>
 2024-04-11 15:03:58 +00:00
Martin Liu
1270b7766d allow vendor init to access compaction_proactiveness 
Bug: 332916849
Test: boot
Change-Id: Id640b5ae489e003e9b3bad6054f415f3742832c5
Merged-In: Id640b5ae489e003e9b3bad6054f415f3742832c5
Signed-off-by: Martin Liu <liumartin@google.com>
 2024-04-11 02:56:26 +00:00
Cheng Chang
a1d7364f1f Merge "sepolicy: sysfs to gnssif/wakeup node" into 24D1-dev 2024-04-10 03:28:56 +00:00
Treehugger Robot
8804ef12db Merge "display: low-light blocking zone support" into 24D1-dev 2024-04-04 02:46:42 +00:00
Frank Yu
f1b959a0ed Update SEpolicy for grilservice_app register 
callbacks of AntennaTuningService. Remove callbacks from radioext native
service to grilservice_app.

Bug: 321790599
Test: Manual test. gripservice_app receive update from callback successfully. Because moving out the callbacks from radioext to grilservice_app, we don't need antennatuningservice bind to radioext anymore.
Change-Id: I6827b506b9893e43d6d9268f623b33b848863a7c
 2024-04-03 07:08:06 +00:00
cweichun
0b6fd93f3e display: low-light blocking zone support 
Bug: 315876417
Test: verify the functionality works
Change-Id: I8de35ac0685c9b5b07385001479906a84901b347
 2024-04-02 15:25:43 +00:00
Cheng Chang
cdd424134a sepolicy: sysfs to gnssif/wakeup node 
avc:  denied  { read } for  comm="binder:459_2" name="wakeup2" dev="sysfs" ino=54040 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0

Bug: 329334328
Test: abtd under b/329334328 device-boot-health-check-extra.
Test: boot and check logcat avc.
Change-Id: If0e95efee521d15928648d1042f87d02fd41c637
 2024-04-02 09:07:26 +00:00
Spade Lee
aac2240ca4 sepolicy: allow kernel to search vendor debugfs 
audit: type=1400 audit(1710259012.824:4): avc:  denied  { search } for  pid=128 comm="kworker/3:1" name="max77779fg" dev="debugfs" ino=24204 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_maxfg_debugfs:s0 tclass=dir permissive=0
audit: type=1400 audit(1710427790.680:2): avc:  denied  { search } for  pid=10 comm="kworker/u16:1" name="gvotables" dev="debugfs" ino=10582 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_votable_debugfs:s0 tclass=dir permissive=1
audit: type=1400 audit(1710427790.680:3): avc:  denied  { search } for  pid=211 comm="kworker/u16:4" name="google_charger" dev="debugfs" ino=16673 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_charger_debugfs:s0 tclass=dir permissive=1

Bug: 328016570
Bug: 329317898
Test: check all debugfs folders are correctly mounted
Change-Id: Ib25cc13a329b40bebe87fab43e955e2e4395de9e
Signed-off-by: Spade Lee <spadelee@google.com>
 2024-04-02 07:35:39 +00:00
Shiyong Li
a06f6749c8 Merge "Label te2_rate_hz and te2_option as sysfs_display" into 24D1-dev 2024-03-28 21:10:16 +00:00
Priyanka Advani
3f268ee8a9 Merge "Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"" into 24D1-dev 2024-03-28 20:01:53 +00:00
Priyanka Advani
7299abaa81 Revert "sepolicy: Allow PixelGnss to connect to Chre HAL" 
Revert submission 26593083-lassen_pps

Reason for revert: Culprit for test breakages in b/331680556. Will be verifying through ABTD for confirmation and before submitting the revert.

Bug: b/331680556

Reverted changes: /q/submissionid:26593083-lassen_pps

Change-Id: I64487bc049ac7aa53b5bff461a033f70428ab6a9
 2024-03-28 19:54:08 +00:00
Chris Lu
2c3dc0c668 Label te2_rate_hz and te2_option as sysfs_display 
Bug: 307787644
Test: Check the files label: adb shell ls -Z
Change-Id: Iab036b86b6d0c28191212a3ac10be6ddb5dcbd2b
 2024-03-28 00:31:25 +00:00
WeiChungChang
c46f6cf333 display: create entity_name property 
HWC should designate the entity name 'Inner-Display'
for the primary display in cases of dual panels.

Bug: 329370514
Test: verify powerstats for dual panel devices
Change-Id: I284ff460709da6a8cb48a35bf2b805ea3d09c990
 2024-03-26 22:40:54 +00:00
Cheng Chang
3d57c4ee96 Merge "sepolicy: Allow PixelGnss to connect to Chre HAL" into 24D1-dev 2024-03-25 12:51:10 +00:00
Cheng Chang
79e12fe426 sepolicy: Allow PixelGnss to connect to Chre HAL 
avc:  denied  { call } for  scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0

Bug: 316227249
Test: Verify PixelGnss HAL can connect to Chre HAL.
Test: Function test verification b/330120749 without disable selinux.
Test: No avc error log in logcat.
Change-Id: I7f6a45cd80c7ccbba2af1a0d3f3d89f30267db00
 2024-03-25 06:59:51 +00:00
samou
8ff89c21d0 sepolicy: fix odpm scale value path 
Extend odpm sysfs path to cover the
different startup sequence.

Bug: 330815850
Change-Id: Ifd346f379b71c790e175e08e74398bae0c0417df
Signed-off-by: samou <samou@google.com>
 2024-03-22 10:38:08 +00:00
Zheng Pan
e29dd9a08b Merge "Move display properties from tracking_denials to vendor" into 24D1-dev 2024-03-11 21:04:14 +00:00
John Chang
46d2322311 Move display properties from tracking_denials to vendor 
Bug: 328001545
Test: Test MRR Version 2 is properly configured
Change-Id: Ib586398670b21bb88cd122647880149daa628d0d
 2024-03-08 16:32:30 +00:00
Yabin Cui
af6b895528 Add SOC specific ETE sysfs paths 
Bug: 321061072
Test: run profcollectd on device
Change-Id: I7eb39a5e9f586e36edd11679b0988af2ff6b986b
 2024-03-06 11:06:13 -08:00
Treehugger Robot
4d305706a5 Merge "add dsim wakeup labels" into main 2024-02-28 03:59:20 +00:00
Peter Lin
f88ffce8c7 add dsim wakeup labels 
Bug: 321733124
test: ls sys/devices/platform/19440000.drmdsim/19440000.drmdsim.0/wakeup -Z
Change-Id: I28bc16f23478131dfecf2ad61b306ce9ae1e2767
 2024-02-27 12:59:04 +00:00
Jack Wu
85aa1cb4b1 dontaudit on dir search for vendor_charger_debugfs 
Bug: 326869335
Test: make selinux_policy
Change-Id: I22623dd1c47a431233eb6666dbe37fa2d9aa73a3
Signed-off-by: Jack Wu <wjack@google.com>
 2024-02-26 21:10:51 +08:00
Treehugger Robot
4f275afd4e Merge "moving charger nodes to user build" into main 2024-02-21 02:01:55 +00:00
Treehugger Robot
35907c0769 Merge "dontaudit on dir search for vendor_votable_debugfs" into main 2024-02-21 01:55:49 +00:00
Darren Hsu
7b65b7fb2b sepolicy: allow hal_power_stats to read GPS files 
avc:  denied  { search } for  name="gps" dev="dm-49" ino=381
scontext=u:r:hal_power_stats_default:s0
tcontext=u:object_r:vendor_gps_file:s0 tclass=dir permissive=0

Bug: 309876364
Test: dumpsys android.hardware.power.stats.IPowerStats/default
Change-Id: I577443effaf8c3072e05c24025ec2c9ba63639b8
Signed-off-by: Darren Hsu <darrenhsu@google.com>
 2024-02-19 16:37:21 +08:00
Wilson Sung
0ae4d6f09e dontaudit on dir search for vendor_votable_debugfs 
Bug: 305880925
Bug: 310539058
Bug: 318033504
Test: make selinux_policy
Change-Id: I5e13370fe5430f3dfbf73ccff787986fbe80f9ea
 2024-02-19 14:58:56 +08:00
Ken Yang
7da489c7ad SELinux: fix SELinux denials 
devices/platform/108d0000.hsi2c/i2c-6/6-0066/max77779-pmic-irq.2.auto/wakeup/wakeup69

Bug: 325680852
Change-Id: I974c65bab46f3de3bdcacb42c67257d91a3ecf8a
Signed-off-by: Ken Yang <yangken@google.com>
 2024-02-19 04:21:12 +00:00
Treehugger Robot
bb48ecd1e2 Merge "Allow CccDkTimeSyncService to access bluetooth extension HAL" into main 2024-02-17 08:49:51 +00:00
Daniel Okazaki
7d46482f86 moving charger nodes to user build 
Bug: 323415060
Test: adb bugreport
Change-Id: I2f613d513b2c8a1eb5f52dbd6ba9f8381486a150
Signed-off-by: Daniel Okazaki <dtokazaki@google.com>
 2024-02-15 23:09:32 +00:00
Imo Umoren
a8ad4fb402 Merge "Add CHRE SELinux Permissions for Twoshay [Zuma Pro]" into main 2024-02-13 21:09:09 +00:00
Imo Richard Umoren
52fe3a2703 Add CHRE SELinux Permissions for Twoshay [Zuma Pro] 
Adds permissions for chre socket to SELinux policy.
Used for the Wallaby nanoapp.

Bug: b/324278826
Test: Manually tested on zuma pro devices
Change-Id: Ied113002ec0650607f657cc47d183635916ae83e
 2024-02-08 02:09:58 +00:00
Roy Luo
0e115d4d15 hal_usb_impl: Grant read permission to usb overheat files 
Carried over from WHI PRO setting.

Bug: 307583011
Test: no audit logs
Change-Id: Icdcf36ee739f009a1e87ecd346b6178d096079b9
 2024-02-07 05:19:37 +00:00
Kuen-Han Tsai
01658d880d Merge "Set SEPolicy for the disable_contaminant_detection script" into main 2024-02-06 08:34:52 +00:00
Wiwit Rifa'i
bf3e95edb1 Allow binder call from servicemanager to composer 
This will fix below avc denial:

type=1400 audit(0.0:4): avc:  denied  { call } for
comm="servicemanager" scontext=u:r:servicemanager:s0
tcontext=u:r:hal_graphics_composer_default:s0 tclass=binder
permissive=0

Bug: 323761837
Bug: 315497129
Test: verify this avc denial doesn't appear
Change-Id: I76d7ea9e52e7140a715e375142abd904be8fa6ce
 2024-02-05 15:40:17 +08:00
Treehugger Robot
ad3761f873 Merge changes from topic "threadbt_se_policy" into main 
* changes:
  Grant Thread HAL service to access BT HAL folder
  Grant BT HAL to access socket file
 2024-02-05 03:31:48 +00:00
shihchienc
ed3ca1e266 Grant Thread HAL service to access BT HAL folder 
02-02 14:36:00.660  2378  2378 I android.hardwar: type=1400 audit(0.0:15): avc:  denied  { read } for  name="bluetooth" dev="dm-53" ino=399 scontext=u:r:hal_threadnetwork_default:s0 tcontext=u:object_r:vendor_bt_data_file:s0 tclass=dir permissive=1
02-02 14:36:00.660  2378  2378 I android.hardwar: type=1400 audit(0.0:16): avc:  denied  { watch } for  path="/data/vendor/bluetooth" dev="dm-53" ino=399 scontext=u:r:hal_threadnetwork_default:s0 tcontext=u:object_r:vendor_bt_data_file:s0 tclass=dir permissive=1
02-02 14:36:02.664  2378  2378 I android.hardwar: type=1400 audit(0.0:17): avc:  denied  { search } for  name="bluetooth" dev="dm-53" ino=399 scontext=u:r:hal_threadnetwork_default:s0 tcontext=u:object_r:vendor_bt_data_file:s0 tclass=dir permissive=1
14:36:29.076  7627  7627 I android.hardwar: type=1400 audit(0.0:30): avc:  denied  { getattr } for  path="/data/vendor/bluetooth/thread_dispatcher_socket" dev="dm-53" ino=46090 scontext=u:r:hal_threadnetwork_default:s0 tcontext=u:object_r:vendor_bt_data_file:s0 tclass=sock_file permissive=1
02-02 14:36:29.076  7627  7627 I android.hardwar: type=1400 audit(0.0:31): avc:  denied  { write } for  name="thread_dispatcher_socket" dev="dm-53" ino=46090 scontext=u:r:hal_threadnetwork_default:s0 tcontext=u:object_r:vendor_bt_data_file:s0 tclass=sock_file permissive=1
02-02 14:36:29.076  7627  7627 I android.hardwar: type=1400 audit(0.0:32): avc:  denied  { connectto } for  path="/data/vendor/bluetooth/thread_dispatcher_socket" scontext=u:r:hal_threadnetwork_default:s0 tcontext=u:r:hal_bluetooth_btlinux:s0 tclass=unix_stream_socket permissive=1

Bug: 318594282
Test: reboot and open bluetooth
Change-Id: Ia63ed27b732eafa2e0aa3311fc7cea9c77e7b50c
 2024-02-04 23:00:54 +00:00
Kuen-Han Tsai
25748e9d93 Set SEPolicy for the disable_contaminant_detection script 
This patch ports Zuma project SEPolicy and corrects the platform device
name.

init    : Command 'exec /vendor/bin/hw/disable_contaminant_detection.sh'
action=vendor.usb.contaminantdisable=true (/vendor/etc/init/hw/
init.zumapro.usb.rc:288) took 5ms and failed: Could not start exec
service: File /vendor/bin/hw/disable_contaminant_detection.sh(labeled
"u:object_r:vendor_file:s0") has incorrect label or no domain transition
from u:r:init:s0 to another SELinux domain defined. Have you configured
your service correctly?
https://source.android.com/security/selinux/device-policy#
label_new_services_and_address_denials. Note: this error shows up even
in permissive mode in order to make auditing denials possible.

Bug: 295127978
Test: manual test
Change-Id: I4269127f0101250615aad9218a9e2684579a653b
Signed-off-by: Kuen-Han Tsai <khtsai@google.com>
 2024-02-02 18:07:36 +08:00
Wiwit Rifa'i
24ad0c2d7f Allow binder calls between composer and powerstats 
This will fix some avc denials:

* SELinux : avc:  denied  { find } for pid=508 uid=1000
name=power.stats-vendor scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:hal_power_stats_vendor_service:s0
tclass=service_manager permissive=0

* binder:501_1: type=1400 audit(0.0:30): avc:  denied  { call } for
scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=0

* android.hardwar: type=1400 audit(0.0:10): avc:  denied  { call }
for  scontext=u:r:hal_power_stats_default:s0
tcontext=u:r:hal_graphics_composer_default:s0 tclass=binder
permissive=0

Bug: 315497129
Test: check no avc denied between composer & powerstats
Change-Id: I6033e088d5706a0d2a6f942f983a05e6148764a9
 2024-02-01 09:13:27 +08:00