Chia-Chi Teng
890796a889
sepolicy: Allow PixelGnss implement PPS function
...
avc: denied { read } for name="u:object_r:vendor_chre_hal_prop:s0" dev="tmpfs" ino=401 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_chre_hal_prop:s0 tclass=file
avc: denied { find } for pid=900 uid=1021 name=android.hardware.contexthub.IContextHub/default scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:hal_contexthub_service:s0 tclass=service_manager
avc: denied { call } for scontext=u:r:hal_gnss_pixel:s0 tcontext=u:r:hal_contexthub_default:s0 tclass=binder
avc: denied { call } for scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder
avc: denied { search } for name="gps" dev="dm-54" ino=380 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=dir
avc: denied { write } for name="gps" dev="dm-54" ino=380 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=dir
avc: denied { add_name } for name=".pps_pipe" scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=dir
avc: denied { create } for name=".pps_pipe" scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=fifo_file
avc: denied { read } for name=".pps_pipe" dev="dm-54" ino=11418 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=fifo_file
avc: denied { open } for path="/data/vendor/gps/.pps_pipe" dev="dm-54" ino=11418 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=fifo_file permissive=1
avc: denied { write } for name=".pps_pipe" dev="dm-54" ino=11418 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=fifo_file
avc: denied { search } for name="gps" dev="dm-49" ino=380 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=dir
avc: denied { write } for name=".ppspipe" dev="dm-49" ino=18610 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=fifo_file
avc: denied { write } for name="gps" dev="dm-54" ino=380 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=dir
avc: denied { open } for path="/data/vendor/gps/.ppspipe" dev="dm-49" ino=18610 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=fifo_file
avc: denied { remove_name } for name=".pps_pipe" dev="dm-54" ino=11712 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=dir
avc: denied { unlink } for name=".pps_pipe" dev="dm-59" ino=6600 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=fifo_file
Bug: 330120749
Test: Verify PixelGnss HAL can connect to Chre HAL.
Test: Function test verification b/330120749.
Test: b/330120749#comment24 health boot check.
Test: b/330120749#comment25 health boot check.
Change-Id: I100ae061cfcbba17a26ece79eb552d60aa782d79
2024-04-29 11:41:58 +00:00
Enzo Liao
3b7d90448c
Merge "Centralize SELinux policies for deamons and apps related to ramdumps and coredumps according to go/pixel-defrag." into 24D1-dev
2024-04-25 08:22:06 +00:00
Erick Alvarez
0f0e2bed0a
Merge "Attach face detection state tracker files to the bug report" into 24D1-dev
2024-04-24 20:59:28 +00:00
Shinru Han
b61232f24f
Merge "gps: Update gps makefile" into 24D1-dev
2024-04-24 00:59:36 +00:00
Enzo Liao
2843f2a79b
Centralize SELinux policies for deamons and apps related to ramdumps and coredumps according to go/pixel-defrag.
...
They include the domains:
1. dump_ramdump
2. ramdump
3. ramdump_app
4. sscoredump
5. ssr_detector_app
We copy policies of domains of ramdump and sscoredump from hardware/google/pixel-sepolicy to gs-common but don't remove them there to keep compatibility for other projects.
New SELinux policies:
1. Create a new file context of /data/vendor/ssrdump/logcat for SSRestartDetector to write device logs when it detects new coredumps.
2. RamdumpService will also access the path to compress device logs to zip files of coredumps.
Bug: 298102808
Design: go/sys-software-logging
Test: Manual
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:7d7c8ebaeb07288f43bf507de3cd8919984337da )
Merged-In: I02c2e1569a95ea90901d9476ef75bca74a4f43e1
Change-Id: I02c2e1569a95ea90901d9476ef75bca74a4f43e1
2024-04-23 06:45:07 +00:00
Erick Alvarez
9001eb43e9
Attach face detection state tracker files to the bug report
...
State tracker proto file size is small, usually ~15KB. Collect 10 most recent
files to the bug reports.
Bug: 311086427
Test: adb bugreport
Change-Id: I5e43c85aaf40e33e9a578749121b0d3a750c209e
2024-04-22 23:23:27 +00:00
Binhao Lin
278620120f
Merge "Attach multicam CPA to the bug report" into 24D1-dev
2024-04-19 20:47:41 +00:00
Binhao Lin
b1a35566c1
Attach multicam CPA to the bug report
...
Multicam CPA file size is small, usually <50KB. Collect 10 most recent
files to the bug reports.
Bug: 310389222
Test: adb bugreport
Change-Id: I902fbdfa460a18fb3976d2fbfb4c1c0a716a4ab2
2024-04-19 18:33:56 +00:00
Ravi Jain
3defa6f8ea
Merge changes from topic "touch_dumpstate_priority-24D1-dev" into 24D1-dev
...
* changes:
dumpstate: touch: Add touch_predump for syna
dumpstate: touch: Add touch_predump for gti
dumpstate: touch: Init touch_predump service
2024-04-19 05:47:46 +00:00
Rios Kao
905441e15c
aidl: audio: update external service version
...
Bug: 332443021
Test: mm
Change-Id: I56f50c5f2ddce80f95af2228e91a1db5757dffbc
2024-04-18 18:38:14 +00:00
Ravi Jain
8d34b54167
dumpstate: touch: Add touch_predump for syna
...
go/touch_predump
Test: b/318578275
Test: Flash on dogfood and check touch dump logs
Bug: 287907308
Change-Id: I88c488dec5de85545ae5f33f5e65371883982e48
2024-04-18 06:35:29 +00:00
Ravi Jain
f7bacf5322
dumpstate: touch: Add touch_predump for gti
...
go/touch_predump
Test: b/318578275
Test: Locally flash and check dump logs on dogfood device
Bug: 287907308
Change-Id: I4a35a9a57c1331d67dfcd1863b57d75a9b804c32
2024-04-18 06:35:29 +00:00
Ravi Jain
8a52cae4dd
dumpstate: touch: Init touch_predump service
...
go/touch_predump
Test: b/318578275
Test: Locally flash to check dump_touch logs on dogfood devices
Bug: 287907308
Change-Id: Ibc9df367549dd69c83936a7fd08465f7bb53ce80
2024-04-18 06:35:23 +00:00
Hongyang Jiao
5f3f01a719
Merge "Add betterbug folder to gs-common" into 24D1-dev
2024-04-17 17:57:26 +00:00
Shinru Han
84de7535b5
gps: Update gps makefile
...
Test: on-device
Bug: 326527903
Change-Id: I4357e7a7c5c35c9bdfd94fa8c1fd59d21bbcd668
Merged-In: I4357e7a7c5c35c9bdfd94fa8c1fd59d21bbcd668
2024-04-17 10:16:01 +00:00
David Lin
f0c3c420ab
Merge "[Gyotaku] Update the build rule to exclude build Gyotaku dump for barbet" into 24D1-dev
2024-04-17 08:16:45 +00:00
Hongyang Jiao
099d9ea0a9
Add betterbug folder to gs-common
...
Better Bug was previously labeled as priv_app, here we kept the same 'type=privapp_data_file levelFrom=user'
Copied some Better Bug used rules from system/sepolicy/private/priv_app.te.
(https://source.corp.google.com/h/googleplex-android/platform/superproject/main/+/main:system/sepolicy/private/priv_app.te;l=1?q=priv_app.te )
Test: local test
Bug: 322543833
Change-Id: Ia029e855dd46e65b9eec31835ccaabb3cb903058
2024-04-16 22:57:09 +00:00
Hongyang Jiao
1e6e41664f
Merge "Revert "Add betterbug folder to gs-common"" into 24D1-dev
2024-04-16 22:47:41 +00:00
Klines Jiang
3133d362a4
[Gyotaku] Update the build rule to exclude build Gyotaku dump for barbet
...
Pixel 5a (barbet) does not support Pixel dump, we need to exclude build
Pixel dump for Pixel 5a (barbet). The git_24Q2-beta-release TARGET_PRODUCT is barbet_beta, updated to barbet% for all barbet target products.
Bug: 330819191
Test: Local build and trigger a new build the result passed
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:d4de4ddf902f75ebcb6b0e1079e78b8a96410ed5 )
Merged-In: I2c1785105bab74a483bc68893d96a8a88eabfd90
Change-Id: I2c1785105bab74a483bc68893d96a8a88eabfd90
24D1-dev is based on 24Q2-release. Therefore, we merged this CL to 24D1-dev.
2024-04-16 07:41:19 +00:00
Sam Ou
d8f09cbcef
Merge "sepolicy: allow dumpstate to call battery_mitigation" into 24D1-dev
2024-04-16 07:37:10 +00:00
samou
d7c33cef92
sepolicy: allow dumpstate to call battery_mitigation
...
Bug: 322141931
Change-Id: I5a6d013df754d3f6d6e9d1ee3ea335176450069b
Signed-off-by: samou <samou@google.com>
2024-04-16 03:54:45 +00:00
Ravi Jain
ea5ec69b79
touch: moving ical related sepolicies to independent folder
...
Bug: 331139251
Test: Manually verify the result.
Change-Id: I53b5c8eb73f1ce775ec83a06b43c0b4993f31e69
2024-04-15 03:49:41 +00:00
Eliot Wong
46f7fe3e61
Merge "Add SEPolicy for vendor_camera_image_processing_hal_service" into 24D1-dev
2024-04-11 20:15:58 +00:00
Daniel Chapin
a0708c2723
Revert "Add betterbug folder to gs-common"
...
Revert submission 26348985-bb-sepolicy-poc
Reason for revert: Droidfood blocking bug: b/327991669
Bug: 327991669
Reverted changes: /q/submissionid:26348985-bb-sepolicy-poc
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:aca06d61c64f947252808f73fbe01fdda5109c0e )
Merged-In: I0fe0bb22e293093d941b4d8ba826c8c8689a370d
Change-Id: I0fe0bb22e293093d941b4d8ba826c8c8689a370d
24D1-dev is based on 24Q2-release. Therefore, we merged this CL to 24D1-dev.
2024-04-08 06:19:44 +00:00
Tommy Chiu
aab9ec8424
mDL: Remove mDL HAL
...
Since the gsc firmware doens't support mDL since MAIN-00009, we'll need
to remove HAL accordingly to avoid inteface confusion.
Bug: 330415816
Test: PTE release test
Change-Id: Ie91817c926d77209c8ac1119dc74053cb0f6215a
2024-04-02 06:46:01 +00:00
Priyanka Advani
ce1c82e3b1
Merge "Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"" into 24D1-dev
2024-03-28 20:01:53 +00:00
Priyanka Advani
406eea24ba
Revert "sepolicy: Allow PixelGnss to connect to Chre HAL"
...
Revert submission 26593083-lassen_pps
Reason for revert: Culprit for test breakages in b/331680556. Will be verifying through ABTD for confirmation and before submitting the revert.
Bug: b/331680556
Reverted changes: /q/submissionid:26593083-lassen_pps
Change-Id: I97e29eaf09238d708fb9d941a5988ad42d583655
2024-03-28 19:53:52 +00:00
Samridhi
6561e3b343
Add SEPolicy domain for cavalry app
...
AVC error logs: https://paste.googleplex.com/4870439005847552
Test: make selinux_policy, flash build and test
Bug: 329276535
Change-Id: I2ccb4d9205125f02f12cc26ea9e6e6e40b8d6ba2
2024-03-28 09:43:36 +00:00
Super Liu
58b64ca3fb
touch: init service to access gti interactive_calibrate sysfs
...
Write usage: setprop vendor.touch.gti0.ical VALUE
Any VALUE(e.g. 20X or 30X) set through this property will write
into gti interactive_calibrate sysfs except for the VALUE `read`.
Read usage: setprop vendor.touch.gti0.ical read
getprop vendor.touch.gti0.ical.result
setprop with VALUE `read` will read the gti
interactive_calibrate sysfs and save the result to
vendor.touch.gti0.ical.result.
Besides, please add your DOMAIN to access vendor_gti_prop.
set_prop(DOMAIN, vendor_gti_prop)
Bug: 331139251
Test: Manually verify the result.
Change-Id: I6296b9533dd0209e66832bfbbed6030a30077b96
Merged-In: I6296b9533dd0209e66832bfbbed6030a30077b96
Signed-off-by: Super Liu <supercjliu@google.com>
(cherry picked from commit 28754e355a847ce62b4e465c7afaa0f61e90b865)
2024-03-28 07:27:32 +00:00
Eliot Wong
c387a9b7ac
Add SEPolicy for vendor_camera_image_processing_hal_service
...
avc message:
03-15 17:48:21.744 440 440 E SELinux : avc: denied { add } for pid=863 uid=1000 name=com.google.android.imageprocessing.IImageProcessingHal scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:vendor_image_processing_hal_service:s0 tclass=service_manager permissive=1
Bug: 323402267
Test: atest liblyric.services_image_processing_hal_test
Test: demo app
Change-Id: Idc9752a1a3f4b18de5f720a384fae97f0f160e98
2024-03-28 01:50:02 +00:00
Chia-Chi Teng
9a7af460a5
sepolicy: Allow PixelGnss to connect to Chre HAL
...
avc: denied { read } for name="u:object_r:vendor_chre_hal_prop:s0" dev="tmpfs" ino=401 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_chre_hal_prop:s0 tclass=file permissive=0
avc: denied { find } for pid=900 uid=1021 name=android.hardware.contexthub.IContextHub/default scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:hal_contexthub_service:s0 tclass=service_manager permissive=0
avc: denied { call } for scontext=u:r:hal_gnss_pixel:s0 tcontext=u:r:hal_contexthub_default:s0 tclass=binder permissive=0
avc: denied { call } for scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0
Bug: 316227249
Test: Verify PixelGnss HAL can connect to Chre HAL.
Test: Function test verification b/330120749 without disable selinux.
Test: No avc error log in logcat.
Change-Id: Ia1052dbc14fdbb6287cd0958b30e1a1a116b7a80
2024-03-22 03:04:04 +00:00
Treehugger Robot
4055216656
Merge "dumpstate: thermal: Add tmu intpend dumps" into 24D1-dev
2024-03-22 01:12:45 +00:00
Sam Ou
5a78c395eb
Merge "sepolicy: allow the communication between audio and battery_mitigation hal" into 24D1-dev
2024-03-21 11:41:43 +00:00
samou
0d88550486
sepolicy: allow the communication between audio and battery_mitigation hal
...
Bug: 330302105
Change-Id: I28a3b67594319d857a8c46bc8c02cddc539caaf8
Signed-off-by: samou <samou@google.com>
2024-03-19 12:01:46 +00:00
JJ Lee
eee8e04b92
Dumpstate: add DVFSA32 and lengthen timeouts for memory_votes_*
...
Bug: 328362738
Test: build pass
Change-Id: I0db129604911794e0fbdaf91b67b2e6fbda07e4d
Signed-off-by: JJ Lee <leejj@google.com>
2024-03-19 08:19:10 +00:00
YiHo Cheng
8051099b42
dumpstate: thermal: Add tmu intpend dumps
...
tmu intpend register dump sysfs is added so add the sysfs in thermal
dump script as well
Bug: 271619423
Test: adb bugreport
Change-Id: I9d5fe4302ce6101837a075ab46798e5f49a61d7d
2024-03-15 18:04:10 +08:00
Wei Wang
212df1bf25
Merge "sepolicy: allow setprop for thermal_controld" into 24D1-dev
2024-03-13 00:16:31 +00:00
Richard Hsu
7462c63bdf
Merge "[mlock] Allow edgetpu_app_service to call mlock()" into 24D1-dev
2024-03-12 18:03:20 +00:00
Richard Hsu
f9c4631891
[mlock] Allow edgetpu_app_service to call mlock()
...
This CL references keunyoung's ag/25999220
This is to support the GenAI effort, allowing file backed large models to be mlocked, satisfying the memory accounting on Android.
AVC error message:
https://paste.googleplex.com/5844645780652032
Bug: 322229786
Tested:
end-to-end on ZUM and ZPR.
Change-Id: I6abef85eebbc051cb5e41b8f11f70f7ae1b489ab
2024-03-11 12:16:02 -07:00
TeYuan Wang
2e4c437b43
sepolicy: allow setprop for thermal_controld
...
selinux denied log:
[ 53.774820] type=1400 audit(1709683991.036:9): avc: denied { write } for comm="setprop" name="property_service" dev="tmpfs" ino=842 scontext=u:r:pixel-thermal-control-sh:s0 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=0
Bug: 328118301
Test: adb shell getprop vendor.disable.thermalhal.control
Change-Id: I590f05d1119d11400b0115fff63b3420790e7332
2024-03-11 19:00:11 +00:00
Poomarin Phloyphisut
292145d81e
[HDMI Audio] Fix SEPolicy issue that prevent HDMI audio functionality.
...
Error:
avc: denied { search } for comm="binder:845_2" name="hdmi_audio" dev="sysfs" ino=77907 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:sysfs_extcon:s0 tclass=dir permissive=0
Test: Local test.
Bug: 327710671
Change-Id: I413f4edae98cb0b868a4b6b7c62f6d4ae6f17727
2024-03-11 01:51:06 +00:00
Wayne Lin
c093a56797
Merge "gps: add policy for partial reset feature" into main
2024-03-04 19:26:02 +00:00
Hongyang Jiao
f507e4a7f7
Merge "Add betterbug folder to gs-common" into main
2024-03-01 01:10:47 +00:00
Wayne Lin
1c9e011597
gps: add policy for partial reset feature
...
avc: denied { read } for name="u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=413 scontext=u:r:gnssd:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=0
avc: denied { open } for path="/dev/__properties__/u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=414 scontext=u:r:gnssd:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=0
avc: denied { getattr } for path="/dev/__properties__/u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=414 scontext=u:r:gnssd:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=0
avc: denied { map } for path="/dev/__properties__/u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=414 scontext=u:r:gnssd:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=0
Bug: 326493553
Test: no avc denied error
Change-Id: I4ac1ecf51da01c24d4e2f0f7e52df1d2cb92e275
2024-03-01 02:46:50 +08:00
Treehugger Robot
792837721c
Merge "dumpstate: thermal: update thermal dump script path" into main
2024-02-29 08:45:22 +00:00
Spandan Das
fd1a2e7ba4
Merge "Add PRODUCT_MODULE_BUILD_FROM_SOURCE to fullmte" into main
2024-02-29 08:01:23 +00:00
YiHo Cheng
a1f78bf75d
dumpstate: thermal: update thermal dump script path
...
Correct thermal dump script file path
Bug: 326349256
Test: build
Change-Id: Iaf2108f037ca89ffae3e89a2e81996d03c79ff5f
2024-02-29 06:51:05 +00:00
Hongyang Jiao
9aa2c2e001
Add betterbug folder to gs-common
...
Test: locally test, recorded in http://shortn/_iEz9DTCHgo
Bug: 322543833
Change-Id: I035adde2253056414d7c729f4a9f5b4effdde87d
2024-02-29 05:23:01 +00:00
Treehugger Robot
ce71d502c0
Merge "Add OWNERS for gs-common/mte." into main am: 699f72786b am: 1eaa8b8952
...
Original change: https://android-review.googlesource.com/c/device/google/gs-common/+/2983326
Change-Id: I142a74ce2f4766d0ee9d3a47f369f53f08e0f923
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-02-28 23:10:28 +00:00
Treehugger Robot
1eaa8b8952
Merge "Add OWNERS for gs-common/mte." into main am: 699f72786b
...
Original change: https://android-review.googlesource.com/c/device/google/gs-common/+/2983326
Change-Id: Ib12b30703f889fb1b0172fbe40415f4e6936d63e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-02-28 22:03:29 +00:00