Commit Graph

397 Commits

Author SHA1 Message Date
Jerry Zhang
3d68a0b40f Remove unused usb commands.
Property triggers duplicate functionality in
init.configfs.rc.

The ffs_aliases line is for android.c devices only.

Test: usb works.
Change-Id: Iae477f00671068a0628972feb69af7df1092c604
2017-04-26 14:32:43 -07:00
Jerry Zhang
284773d8db Enable MTP on functionfs for M/W/T.
Test: Use MTP.
Change-Id: I2979a0abbe22a5fe9a164a494ccc5e823ec69730
2017-04-26 14:29:19 -07:00
Etan Cohen
7cef570f79 Revert "[AWARE] Enable Wi-Fi Aware feature support."
This reverts commit 5232d40757.
2017-04-26 09:21:09 -07:00
Etan Cohen
0da75705ea Revert "Enable NAN data path"
This reverts commit 9d144330ce.
2017-04-26 09:20:51 -07:00
TreeHugger Robot
bd54d8c743 Merge "Adding allows and file_contexts to handle the following camera denials" 2017-04-26 05:15:36 +00:00
TreeHugger Robot
9652dceb85 Merge "wahoo: enable suspend clock reporting" 2017-04-26 04:38:57 +00:00
Max Bires
93f989ecc1 Adding allows and file_contexts to handle the following camera denials
These were occuring on camera init:
denied { read } for pid=699 comm="CAM_laser_sens" name="input"
dev="tmpfs" ino=17802 scontext=u:r:hal_camera_default:s0
tcontext=u:object_r:device:s0 tclass=dir

denied { write } for pid=699 comm="CAM_laser_sens"
name="enable_ps_sensor" dev="sysfs" ino=39968
scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:sysfs:s0
tclass=file

denied { call } for pid=810 comm="cameraserver"
scontext=u:r:cameraserver:s0 tcontext=u:r:mediacodec:s0 tclass=binder

Bug: 37669506
Test: These denials no longer occur during init
Change-Id: Ie97ab9433efd43da29f18ffa652c43701b3662af
2017-04-26 03:28:38 +00:00
Patrick Tjin
dcff546049 wahoo: enable suspend clock reporting
Test: Build
Bug: 37682684
Change-Id: I44623a0e1e7d7d15a6cad82a472f1d5d33908e51
2017-04-25 19:57:35 -07:00
Thierry Strudel
40b2ed1938 init.power: remove duplicate operations
This change disabled ability of msm_thermal driver to hot-plug CPUs

Change-Id: I37b1edb8ee9b5de02d55b595a4a710b513dd07e8
2017-04-26 02:00:43 +00:00
TreeHugger Robot
d28655ffd0 Merge "Putting system_server into permissive." 2017-04-26 00:41:46 +00:00
Max Bires
3914ca04bd Putting system_server into permissive.
System_server is attempting to access a .so that is currently labeled as
a vendor file, which is messing up the ability of anything on the device
to interact with sensor services. This will temporarily be put into
permissive until the .so can be properly relabeled.

Denial:
denied { execute } for pid=1380 comm="system_server" path="/vendor/li
b64/liblocation_api.so" dev="sda20" ino=929
scontext=u:r:system_server:s0 tcontext=u:object_r:vendor_file:s0
tclass=file

Bug: 37675139
Bug: 37669506
Test: adb shell dumpsys sensorservice works as expected
Change-Id: Ia13641dfaf4ab65f9060dc35b3778b9c88fb0242
2017-04-25 16:00:49 -07:00
TreeHugger Robot
4248fac623 Merge "Adding allows for smlog and dumpstate" 2017-04-25 22:47:05 +00:00
TreeHugger Robot
37650bc32c Merge "Bring-up RenderScript HAL for Muskie / Walleye" 2017-04-25 22:43:44 +00:00
Miao Wang
9898d9d468 Bring-up RenderScript HAL for Muskie / Walleye
Bug: 36097673
Test: mm && tested on Walleye to make sure QCOM driver load.
Test: RS CTS tests pass
Test: Imageprocessing tests pass, and confirming running on GPU.

Change-Id: Iaca74a8e90d9fd10e4327bd55d982e95b700ca0f
2017-04-25 14:11:06 -07:00
Jie Song
85b1b4d5e1 Adding allows for smlog and dumpstate
1. Adding allows for smlog and dumpstate
2. Moving log path to data/vendor

Bug: 37169733
Test: Verify modem logs in bugreport
Change-Id: Ifaef1976bc7b88afdd3ee2a7ef82a78853c5ee14
2017-04-25 13:55:49 -07:00
Andrew Lehmer
b6cbc1d6c4 folio_daemon: exit when poll returns zero events
Bug: 37402669
Test: loaded on walleye, issued `adb shell stop`, checked `top`
Change-Id: I7d43cab39809b6b156eb26195df2c913991e5c96
2017-04-25 11:47:13 -07:00
TreeHugger Robot
b13737cc28 Merge "Removing wcnss_service from permissive mode" 2017-04-25 07:22:44 +00:00
TreeHugger Robot
995d1a1374 Merge "Removing qti from permissive mode" 2017-04-25 07:13:21 +00:00
TreeHugger Robot
d833149ab2 Merge "Removing ssr_setup from permissive mode" 2017-04-25 06:59:56 +00:00
TreeHugger Robot
d3c3621777 Merge "Removing adsprpcd from permissive mode" 2017-04-25 06:57:15 +00:00
TreeHugger Robot
d3f92bf1d1 Merge "Removing thermal-engine from permissive mode" 2017-04-25 06:55:31 +00:00
TreeHugger Robot
4d2e138f7d Merge "Removing init_power from individual permissive domain." 2017-04-25 06:39:52 +00:00
TreeHugger Robot
aa83795f2f Merge "Removing permissive mode on pd_mapper domain." 2017-04-25 06:32:43 +00:00
Max Bires
982994ed05 Removing wcnss_service from permissive mode
Bug: 34784662
Test: wcnss_service domain is in enforcing mode and the device functions
normally

Change-Id: Ia61351802b62448119f318cdcaede713bdbba674
2017-04-24 22:47:01 -07:00
Max Bires
e1bed673f2 Removing qti from permissive mode
Bug: 34784662
Test: qti is in enforcing mode and the device functions normally
Change-Id: Ief42b66b97ecc17690197e283ca3d6d5ff8e93e1
2017-04-24 22:36:49 -07:00
Max Bires
dcb824b799 Removing ssr_setup from permissive mode
Bug: 34784662
Test: ssr_setup is in enforcing and the device functions normally
Change-Id: Iacd79ec0da63b5bee3c898fadd91fb73ed70dcb6
2017-04-24 22:30:57 -07:00
Max Bires
a8067f5b39 Removing thermal-engine from permissive mode
Bug: 34784662
Test: thermal-engine is in enforcing mode and the device functions
normally

Change-Id: I5d98ef35a1d3c3fa2a0acc07766d776285693219
2017-04-24 22:25:44 -07:00
Max Bires
4cda1b6f35 Removing adsprpcd from permissive mode
Bug: 34784662
Test: The device functions normally and adsprpcd is in enforcing mode
Change-Id: Ib2778c175efcecfbf61e95ef18af1cb917d20fa2
2017-04-24 22:14:06 -07:00
Max Bires
34ef0ea4ae Removing permissive mode on pd_mapper domain.
Bug: 34784662
Test: pd_mapper is in enforcing and the phone functions normally
Change-Id: I3306fb67dcecb8c256688312f5929be1599da10d
2017-04-24 22:07:39 -07:00
Max Bires
5c3da1d867 Removing init_power from individual permissive domain.
Bug: 34784662
Test: init_power is no longer in permissive mode and the device
functions normally
Change-Id: I944ff957b84140a88b4622dabf528ac634a4aa28
2017-04-24 22:06:10 -07:00
Max Bires
153209ac9d Fixing camera app not launching
denied { read } for pid=9669 comm="id.GoogleCamera"
name="u:object_r:camera_prop:s0" dev="tmpfs" ino=17770
scontext=u:r:untrusted_app:s0:c512,c768
tcontext=u:object_r:camera_prop:s0 tclass=file

Bug: 37633957
Test: Camera launches
Change-Id: I2b68a13eaea0ee83e83f8e92cfda9d46c4531060
2017-04-24 19:56:38 -07:00
TreeHugger Robot
2021e7ad05 Merge "Adding allows to fix perfd and setup_wizard denials" 2017-04-25 02:31:57 +00:00
Max Bires
3d06ccc559 Adding allows to fix perfd and setup_wizard denials
denied { read write } for pid=1361 comm="Binder:1361_4" name="sdd4"
dev="tmpfs" ino=10187 scontext=u:r:system_server:s0
tcontext=u:object_r:block_device:s0 tclass=blk_file

denied { write } for pid=805 comm="perfd" name="scaling_min_freq"
dev="sysfs" ino=29879 scontext=u:r:perfd:s0
tcontext=u:object_r:sysfs_devices_system_cpu:s0 tclass=file

Test: Startup wizard no longer crashes a few times before working
Change-Id: I85425e00d1b834d0775ec940befec4ecee514df7
2017-04-24 23:24:20 +00:00
TreeHugger Robot
ef4927ef50 Merge "Added allowing at_device to port-bridge." 2017-04-24 22:31:42 +00:00
Max Bires
2238a616bc Fixing boot blocking selinux policy.
Following denials were blocking boot:

denied { read } for pid=589 comm="vold"
name="u:object_r:tee_listener_prop:s0" dev="tmpfs" ino=17236
scontext=u:r:vold:s0 tcontext=u:object_r:tee_listener_prop:s0
tclass=file

denied { read } for pid=555 comm="android.hardwar"
name="u:object_r:tee_listener_prop:s0" dev="tmpfs" ino=17236
scontext=u:r:hal_keymaster_qti:s0
tcontext=u:object_r:tee_listener_prop:s0 tclass=file

denied { read } for pid=555 comm="android.hardwar"
name="u:object_r:tee_listener_prop:s0" dev="tmpfs" ino=17236
scontext=u:r:vold:s0
tcontext=u:object_r:tee_listener_prop:s0 tclass=file

Bug: 37633957
Test: Device boots
Change-Id: I6be2bafde9a6f1d14802cfa39b170c55858a4d36
2017-04-24 21:54:01 +00:00
Kyunam.jo
f22572013b Added allowing at_device to port-bridge.
denied { read write } for pid=749 comm="port-bridge" name="at_mdm0" dev="tmpfs" ino=22585 scontext=u:r:port-bridge:s0 tcontext=u:object_r:at_device:s0 tclass=chr_file permissive=0
denied { read write } for pid=749 comm="port-bridge" name="at_mdm0" dev="tmpfs" ino=22585 scontext=u:r:port-bridge:s0 tcontext=u:object_r:at_device:s0 tclass=chr_file permissive=0
denied { read write } for pid=749 comm="port-bridge" name="at_usb0" dev="tmpfs" ino=21293 scontext=u:r:port-bridge:s0 tcontext=u:object_r:at_device:s0 tclass=chr_file permissive=0

Bug: 37628525
Test: Taimen is no longer blocked on boot
Change-Id: Ib2e1443471c822d20627286b090b2edc4de9578b
2017-04-24 14:12:49 -07:00
Max Bires
d2f7877baf Setting SELinux back to enforcing mode.
Sanity testing indicates the phone is stable under an enforcing
policy, and that OTAs will be functional.

Bug: 34784662
Test: Device boots

This reverts commit fb4eaa89a1.

Change-Id: Ib9338485e3aab0bc04e42011b52710ddfa711b4f
2017-04-24 17:38:57 +00:00
Siddharth Ray
036084830d Merge "Location overlay refactoring 2/3" 2017-04-24 17:23:58 +00:00
TreeHugger Robot
990d8690d9 Merge "Moving these into permissive so global enforcing can be turned on." 2017-04-23 20:00:11 +00:00
Max Bires
a3e68ffd51 Moving these into permissive so global enforcing can be turned on.
There are some issues with wi-fi calling that need these to be
individually flipped into permissive for now so that they can continue
to function.

Test: Wi-Fi calling works
Change-Id: Ib8dff8c5a6a9e7a0d702e558a950ce7315f78881
2017-04-23 11:52:02 -07:00
Thierry Strudel
0b19015b63 Merge changes from topic 'avb'
* changes:
  init.hardware.rc: start qseecomd on fs
  manifest.xml: add gatekeeper and keymaster definitions
  Add sepolicies for binderized QCOM KM 3.0 and GK 1.0 HAL
  device: don't use generic GK and KM HALs
  device: add frp prop
2017-04-22 01:34:07 +00:00
TreeHugger Robot
9e55f530d9 Merge "VR hal to choose thermal config" 2017-04-22 00:51:40 +00:00
TreeHugger Robot
9d112b2c4f Merge "wahoo: move fluence config to common code" 2017-04-21 23:45:32 +00:00
Thierry Strudel
7cb682c819 init.hardware.rc: start qseecomd on fs
qseecomd needs /dev/block/bootdevice
vold needs keymaster that needs qseecomd


Change-Id: I2080d711ea9c1427f30a4a457a95fa356b026278
Signed-off-by: Thierry Strudel <tstrudel@google.com>
2017-04-21 16:37:22 -07:00
Thierry Strudel
02b1b43da5 manifest.xml: add gatekeeper and keymaster definitions
Also fix the drm HIDL indentation

Change-Id: I1c2eb8719adfc0b4f0cf17e21badd188bba36274
Signed-off-by: Thierry Strudel <tstrudel@google.com>
2017-04-21 16:37:22 -07:00
Roopesh Rajashekharaiah Nataraja
0d3ddf604b Add sepolicies for binderized QCOM KM 3.0 and GK 1.0 HAL
Change-Id: Icb480b1072a70a7afd1296dc6feaec045d610b7a
2017-04-21 16:37:22 -07:00
Thierry Strudel
cb0d612923 device: don't use generic GK and KM HALs
Change-Id: I2f862dcc0639a96d1cb0f4c613d0d18d4847ca95
2017-04-21 16:37:22 -07:00
alvin_liang
e06ff3db58 device: add frp prop
Bug: 37455788
Change-Id: I9410ba17530a16812d86627e69f95122615a82c4
2017-04-21 16:37:22 -07:00
Jayachandran Chinnakkannu
e9f73e1064 Merge "Set RIL_DATA_REG_STATE_CONDITIONAL_REPORT to true" 2017-04-21 21:54:28 +00:00
Jayachandran C
580fb6a4a8 Set RIL_DATA_REG_STATE_CONDITIONAL_REPORT to true
persist.radio.data_con_rprt=true

This will enable RIL to report DATA_REGISTRATION_STATE RAT IWLAN
if device is IMS registered for voice over Wifi. Reporting IWLAN
in this use case is needed for telephony to use IWLAN RAT for APN
selection for data call (ex. MMS) over IWLAN use cases.

Bug: 37326164

Change-Id: I5d102a70b67aa098de015fb72038edccb5c3fd67
2017-04-21 21:51:15 +00:00