1977 Commits

Author SHA1 Message Date
Hongyang Jiao
099d9ea0a9 Add betterbug folder to gs-common
Better Bug was previously labeled as priv_app, here we kept the same 'type=privapp_data_file levelFrom=user'

Copied some Better Bug used rules from system/sepolicy/private/priv_app.te.
(https://source.corp.google.com/h/googleplex-android/platform/superproject/main/+/main:system/sepolicy/private/priv_app.te;l=1?q=priv_app.te)

Test: local test
Bug: 322543833
Change-Id: Ia029e855dd46e65b9eec31835ccaabb3cb903058
2024-04-16 22:57:09 +00:00
Hongyang Jiao
1e6e41664f Merge "Revert "Add betterbug folder to gs-common"" into 24D1-dev 2024-04-16 22:47:41 +00:00
Sam Ou
d8f09cbcef Merge "sepolicy: allow dumpstate to call battery_mitigation" into 24D1-dev 2024-04-16 07:37:10 +00:00
samou
d7c33cef92 sepolicy: allow dumpstate to call battery_mitigation
Bug: 322141931
Change-Id: I5a6d013df754d3f6d6e9d1ee3ea335176450069b
Signed-off-by: samou <samou@google.com>
2024-04-16 03:54:45 +00:00
Ravi Jain
ea5ec69b79 touch: moving ical related sepolicies to independent folder
Bug: 331139251
Test: Manually verify the result.
Change-Id: I53b5c8eb73f1ce775ec83a06b43c0b4993f31e69
2024-04-15 03:49:41 +00:00
Eliot Wong
46f7fe3e61 Merge "Add SEPolicy for vendor_camera_image_processing_hal_service" into 24D1-dev 2024-04-11 20:15:58 +00:00
Daniel Chapin
a0708c2723 Revert "Add betterbug folder to gs-common"
Revert submission 26348985-bb-sepolicy-poc

Reason for revert: Droidfood blocking bug: b/327991669

Bug: 327991669

Reverted changes: /q/submissionid:26348985-bb-sepolicy-poc
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:aca06d61c64f947252808f73fbe01fdda5109c0e)
Merged-In: I0fe0bb22e293093d941b4d8ba826c8c8689a370d
Change-Id: I0fe0bb22e293093d941b4d8ba826c8c8689a370d
24D1-dev is based on 24Q2-release. Therefore, we merged this CL to 24D1-dev.
2024-04-08 06:19:44 +00:00
Tommy Chiu
aab9ec8424 mDL: Remove mDL HAL
Since the gsc firmware doens't support mDL since MAIN-00009, we'll need
to remove HAL accordingly to avoid inteface confusion.

Bug: 330415816
Test: PTE release test
Change-Id: Ie91817c926d77209c8ac1119dc74053cb0f6215a
2024-04-02 06:46:01 +00:00
Priyanka Advani
ce1c82e3b1 Merge "Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"" into 24D1-dev 2024-03-28 20:01:53 +00:00
Priyanka Advani
406eea24ba Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"
Revert submission 26593083-lassen_pps

Reason for revert: Culprit for test breakages in b/331680556. Will be verifying through ABTD for confirmation and before submitting the revert.

Bug: b/331680556

Reverted changes: /q/submissionid:26593083-lassen_pps

Change-Id: I97e29eaf09238d708fb9d941a5988ad42d583655
2024-03-28 19:53:52 +00:00
Samridhi
6561e3b343 Add SEPolicy domain for cavalry app
AVC error logs: https://paste.googleplex.com/4870439005847552
Test: make selinux_policy, flash build and test
Bug: 329276535
Change-Id: I2ccb4d9205125f02f12cc26ea9e6e6e40b8d6ba2
2024-03-28 09:43:36 +00:00
Super Liu
58b64ca3fb touch: init service to access gti interactive_calibrate sysfs
Write usage: setprop vendor.touch.gti0.ical VALUE

Any VALUE(e.g. 20X or 30X) set through this property will write
into gti interactive_calibrate sysfs except for the VALUE `read`.

Read usage: setprop vendor.touch.gti0.ical read
            getprop vendor.touch.gti0.ical.result
setprop with VALUE `read` will read the gti
interactive_calibrate sysfs and save the result to
vendor.touch.gti0.ical.result.

Besides, please add your DOMAIN to access vendor_gti_prop.
set_prop(DOMAIN, vendor_gti_prop)

Bug: 331139251
Test: Manually verify the result.
Change-Id: I6296b9533dd0209e66832bfbbed6030a30077b96
Merged-In: I6296b9533dd0209e66832bfbbed6030a30077b96
Signed-off-by: Super Liu <supercjliu@google.com>
(cherry picked from commit 28754e355a847ce62b4e465c7afaa0f61e90b865)
2024-03-28 07:27:32 +00:00
Eliot Wong
c387a9b7ac Add SEPolicy for vendor_camera_image_processing_hal_service
avc message:
03-15 17:48:21.744   440   440 E SELinux : avc:  denied  { add } for pid=863 uid=1000 name=com.google.android.imageprocessing.IImageProcessingHal scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:vendor_image_processing_hal_service:s0 tclass=service_manager permissive=1

Bug: 323402267
Test: atest liblyric.services_image_processing_hal_test
Test: demo app
Change-Id: Idc9752a1a3f4b18de5f720a384fae97f0f160e98
2024-03-28 01:50:02 +00:00
Chia-Chi Teng
9a7af460a5 sepolicy: Allow PixelGnss to connect to Chre HAL
avc:  denied  { read } for  name="u:object_r:vendor_chre_hal_prop:s0" dev="tmpfs" ino=401 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_chre_hal_prop:s0 tclass=file permissive=0
avc:  denied  { find } for pid=900 uid=1021 name=android.hardware.contexthub.IContextHub/default scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:hal_contexthub_service:s0 tclass=service_manager permissive=0
avc:  denied  { call } for  scontext=u:r:hal_gnss_pixel:s0 tcontext=u:r:hal_contexthub_default:s0 tclass=binder permissive=0
avc:  denied  { call } for  scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0

Bug: 316227249
Test: Verify PixelGnss HAL can connect to Chre HAL.
Test: Function test verification b/330120749 without disable selinux.
Test: No avc error log in logcat.
Change-Id: Ia1052dbc14fdbb6287cd0958b30e1a1a116b7a80
2024-03-22 03:04:04 +00:00
Treehugger Robot
4055216656 Merge "dumpstate: thermal: Add tmu intpend dumps" into 24D1-dev 2024-03-22 01:12:45 +00:00
Sam Ou
5a78c395eb Merge "sepolicy: allow the communication between audio and battery_mitigation hal" into 24D1-dev 2024-03-21 11:41:43 +00:00
samou
0d88550486 sepolicy: allow the communication between audio and battery_mitigation hal
Bug: 330302105
Change-Id: I28a3b67594319d857a8c46bc8c02cddc539caaf8
Signed-off-by: samou <samou@google.com>
2024-03-19 12:01:46 +00:00
JJ Lee
eee8e04b92 Dumpstate: add DVFSA32 and lengthen timeouts for memory_votes_*
Bug: 328362738
Test: build pass
Change-Id: I0db129604911794e0fbdaf91b67b2e6fbda07e4d
Signed-off-by: JJ Lee <leejj@google.com>
2024-03-19 08:19:10 +00:00
YiHo Cheng
8051099b42 dumpstate: thermal: Add tmu intpend dumps
tmu intpend register dump sysfs is added so add the sysfs in thermal
dump script as well

Bug: 271619423
Test: adb bugreport
Change-Id: I9d5fe4302ce6101837a075ab46798e5f49a61d7d
2024-03-15 18:04:10 +08:00
Wei Wang
212df1bf25 Merge "sepolicy: allow setprop for thermal_controld" into 24D1-dev 2024-03-13 00:16:31 +00:00
Richard Hsu
7462c63bdf Merge "[mlock] Allow edgetpu_app_service to call mlock()" into 24D1-dev 2024-03-12 18:03:20 +00:00
Richard Hsu
f9c4631891 [mlock] Allow edgetpu_app_service to call mlock()
This CL references keunyoung's ag/25999220

This is to support the GenAI effort, allowing file backed large models to be mlocked, satisfying the memory accounting on Android.

AVC error message:
https://paste.googleplex.com/5844645780652032

Bug: 322229786

Tested:
end-to-end on ZUM and ZPR.

Change-Id: I6abef85eebbc051cb5e41b8f11f70f7ae1b489ab
2024-03-11 12:16:02 -07:00
TeYuan Wang
2e4c437b43 sepolicy: allow setprop for thermal_controld
selinux denied log:
[   53.774820] type=1400 audit(1709683991.036:9): avc:  denied  { write } for  comm="setprop" name="property_service" dev="tmpfs" ino=842 scontext=u:r:pixel-thermal-control-sh:s0 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0

Bug: 328118301
Test: adb shell getprop vendor.disable.thermalhal.control
Change-Id: I590f05d1119d11400b0115fff63b3420790e7332
2024-03-11 19:00:11 +00:00
Poomarin Phloyphisut
292145d81e [HDMI Audio] Fix SEPolicy issue that prevent HDMI audio functionality.
Error:
avc:  denied  { search } for  comm="binder:845_2" name="hdmi_audio" dev="sysfs" ino=77907 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:sysfs_extcon:s0 tclass=dir permissive=0

Test: Local test.
Bug: 327710671
Change-Id: I413f4edae98cb0b868a4b6b7c62f6d4ae6f17727
2024-03-11 01:51:06 +00:00
Wayne Lin
c093a56797 Merge "gps: add policy for partial reset feature" into main 2024-03-04 19:26:02 +00:00
Hongyang Jiao
f507e4a7f7 Merge "Add betterbug folder to gs-common" into main 2024-03-01 01:10:47 +00:00
Wayne Lin
1c9e011597 gps: add policy for partial reset feature
avc:  denied  { read } for  name="u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=413 scontext=u:r:gnssd:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=0
avc:  denied  { open } for  path="/dev/__properties__/u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=414 scontext=u:r:gnssd:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=0
avc:  denied  { getattr } for  path="/dev/__properties__/u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=414 scontext=u:r:gnssd:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=0
avc:  denied  { map } for  path="/dev/__properties__/u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=414 scontext=u:r:gnssd:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=0

Bug: 326493553
Test: no avc denied error
Change-Id: I4ac1ecf51da01c24d4e2f0f7e52df1d2cb92e275
2024-03-01 02:46:50 +08:00
Treehugger Robot
792837721c Merge "dumpstate: thermal: update thermal dump script path" into main 2024-02-29 08:45:22 +00:00
Spandan Das
fd1a2e7ba4 Merge "Add PRODUCT_MODULE_BUILD_FROM_SOURCE to fullmte" into main 2024-02-29 08:01:23 +00:00
YiHo Cheng
a1f78bf75d dumpstate: thermal: update thermal dump script path
Correct thermal dump script file path

Bug: 326349256
Test: build

Change-Id: Iaf2108f037ca89ffae3e89a2e81996d03c79ff5f
2024-02-29 06:51:05 +00:00
Hongyang Jiao
9aa2c2e001 Add betterbug folder to gs-common
Test: locally test, recorded in http://shortn/_iEz9DTCHgo
Bug: 322543833
Change-Id: I035adde2253056414d7c729f4a9f5b4effdde87d
2024-02-29 05:23:01 +00:00
Treehugger Robot
ce71d502c0 Merge "Add OWNERS for gs-common/mte." into main am: 699f72786b am: 1eaa8b8952
Original change: https://android-review.googlesource.com/c/device/google/gs-common/+/2983326

Change-Id: I142a74ce2f4766d0ee9d3a47f369f53f08e0f923
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-02-28 23:10:28 +00:00
Treehugger Robot
1eaa8b8952 Merge "Add OWNERS for gs-common/mte." into main am: 699f72786b
Original change: https://android-review.googlesource.com/c/device/google/gs-common/+/2983326

Change-Id: Ib12b30703f889fb1b0172fbe40415f4e6936d63e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-02-28 22:03:29 +00:00
Spandan Das
815fd34817 Add PRODUCT_MODULE_BUILD_FROM_SOURCE to fullmte
This is a temporary workaround to ensure that fullmte variants of google
devices uses mainline modules from source in next release config

Long term, this functionality will likely be implemented by creating a
product specific release config map

Test: lunch <devicename>-next-userdebug && m nothing
Test: https://android-build.corp.google.com/builds/abtd/run/L14800030002211627
Bug: 325666427
Change-Id: I042319e14362e66b1078941dabcfd7dcecfc7cfb
2024-02-28 22:00:04 +00:00
Treehugger Robot
699f72786b Merge "Add OWNERS for gs-common/mte." into main 2024-02-28 21:30:32 +00:00
Evgenii Stepanov
8d835e2797 Add OWNERS for gs-common/mte.
Bug: none available
Test: none necessary
Change-Id: I61722f0462d9e6defc972512e4732addaff288e4
2024-02-28 13:25:16 -08:00
Mark Chang
c66788d5a7 Merge "Revert "Move sepolicy files from hardware/google/pixel-sepolicy."" into main 2024-02-28 10:33:59 +00:00
Liana Kazanova
e2ec91ccbd Revert "Move sepolicy files from hardware/google/pixel-sepolicy."
Revert submission 26288713-twoshay-sepolicy-24

Reason for revert: DroidMonitor: Potential culprit for b/327235315 - verifying through ABTD before revert submission. This is part of the standard investigation process, and does not mean your CL will be reverted.

Reverted changes: /q/submissionid:26288713-twoshay-sepolicy-24

Bug: 327235315

Change-Id: I3529a6bc329b38f9a6b5a21c5d7c809636076eb5
2024-02-28 05:00:29 +00:00
James Huang
525803fc3e Merge "Allow gnssd set gps property" into main 2024-02-27 19:50:38 +00:00
YiHo Cheng
0af3efb815 gs-common:thermal: Add thermal owner file am: d2dc2ff3b8 am: 26ee331772
Original change: https://android-review.googlesource.com/c/device/google/gs-common/+/2979052

Change-Id: Ia03a36c1de47fabab40f9348d05adcbc27dfd71f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-02-27 18:14:17 +00:00
YiHo Cheng
26ee331772 gs-common:thermal: Add thermal owner file am: d2dc2ff3b8
Original change: https://android-review.googlesource.com/c/device/google/gs-common/+/2979052

Change-Id: Ie1df5242b051f4b9ed7cd660692ec0c49afef86f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-02-27 17:31:19 +00:00
Mark Chang
78493bfb6a Merge "Move sepolicy files from hardware/google/pixel-sepolicy." into main 2024-02-27 09:43:47 +00:00
YiHo Cheng
d2dc2ff3b8 gs-common:thermal: Add thermal owner file
Bug: 327096037
Test: build

Change-Id: I5ec3640c5cc6f66e53d5cbedacd68bc2c6b3cc22
2024-02-27 08:00:12 +00:00
Treehugger Robot
338ea85df0 Merge "Add Gralloc Flags" into main 2024-02-26 23:44:06 +00:00
Mark Chang
57384abb7e Move sepolicy files from hardware/google/pixel-sepolicy.
Bug: 325422902
Test: Manual, system booted without sepolicy denied error.
Change-Id: I10d20c0b79acf938bd41dcd640a716369ecf779b
Signed-off-by: Mark Chang <changmark@google.com>
2024-02-26 11:46:42 +00:00
Shinru Han
3b682abda5 Allow gnssd set gps property
avc:  denied  { write } for  name="property_service" dev="tmpfs" ino=837 scontext=u:r:gnssd:s0 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0

Bug: 320577795
Test: on-device
Change-Id: I77c02d9754c8ccd66d8cc889fd361de0fc20e09d
2024-02-26 03:23:08 +00:00
Treehugger Robot
5cb8b637f6 Merge "audio: add module for tas25xx" into main 2024-02-23 04:32:23 +00:00
Shinru Han
1f9b2775bd Merge "gps: Enable Pixel GNSS HAL" into main 2024-02-22 13:55:14 +00:00
Treehugger Robot
6a21045ad3 Merge "audio: add file_contexts of /dev/acd-mc_headpos" into main 2024-02-22 07:43:14 +00:00
Shinru Han
eadc0d0114 gps: Enable Pixel GNSS HAL
avc:  denied  { call } for  scontext=u:r:hal_gnss_pixel:s0 tcontext=u:r:hal_gnss_default:s0 tclass=binder permissive=0
avc:  denied  { call } for  scontext=u:r:hal_gnss_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0
avc:  denied  { read } for  name="modem_state" dev="sysfs" ino=66325 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
avc:  denied  { open } for  path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=66325 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
avc:  denied  { getattr } for  path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=66325 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1

Test: CTS/VTS pass
Bug: 320567656
Change-Id: I22ed09fe37a7e9811f78bf66c21420d2809da9c6
2024-02-22 06:09:20 +00:00