Commit Graph

1051 Commits

Author SHA1 Message Date
TreeHugger Robot
867145cecc Merge "Don't create /data/misc/sensors" into oc-dr1-dev 2017-07-01 01:13:27 +00:00
TreeHugger Robot
570b61e066 Merge "Add SPN override: Telstra 505-01" into oc-dr1-dev 2017-06-30 23:51:44 +00:00
Roopesh Rajashekharaiah Nataraja
739f448717 Add policies to remove System UID from time service
Bug: 62785008
Change-Id: I85cdaa618da7beddce88d4b67bd1b9d08c0a9c00
2017-06-30 23:16:39 +00:00
Wei Wang
454fc3e786 wahoo: time_daemon: use /persist to store offset to RTC
Also cleanup sepolicy files that was using /data/vendor as they are not
needed and /data is not ready by the time we start time_daemon

Bug: 62184939
Test: walleye boot with correct time in airplane mode
Change-Id: Ic7b025a8c795092a1dd4b1ab1d7497d1440c0a4b
2017-06-30 23:15:48 +00:00
Mikhail Naganov
e5216684d4 Merge "Remove Broadcast Radio HAL impl library" into oc-dr1-dev 2017-06-30 22:46:42 +00:00
TreeHugger Robot
51bb8f9e19 Merge "AOD: Enable binned brightness sensor" into oc-dr1-dev 2017-06-30 21:37:38 +00:00
Mikhail Naganov
4f3f9535d4 Remove Broadcast Radio HAL impl library
There is no support for FM radio on this line of devices.
Having this HAL impl in place was confusing VTS tests runner
as broadcast radio HAL was present in the output of 'lshal'.

Bug: 33050893
Test: audio works, no impl lib in /vendor/lib[64]/hw,
      no broadcastradio in lshal output

Change-Id: I35b4d6329de8b04032b456fb048b0b8728024a64
2017-06-30 10:36:21 -07:00
Jeff Vander Stoep
aaaafebf1c Allow qseecomd to write to persist_data
Needed for drm.
avc: denied { read } for comm="qseecomd" name="/" dev="sdd3" ino=2
scontext=u:r:tee:s0 tcontext=u:object_r:persist_file:s0 tclass=dir
avc: denied { open } for comm="qseecomd" path="/persist" dev="sdd3"
scontext=u:r:tee:s0 tcontext=u:object_r:persist_file:s0 tclass=dir
avc: denied { write } for comm="qseecomd" name="widevine" dev="sdd3"
ino=97 scontext=u:r:tee:s0 tcontext=u:object_r:persist_data_file:s0
tclass=dir
avc: denied { add_name } for comm="qseecomd" scontext=u:r:tee:s0
tcontext=u:object_r:persist_data_file:s0 tclass=dir permissive=1
avc: denied { create } for comm="qseecomd scontext=u:r:tee:s0
tcontext=u:object_r:persist_data_file:s0 tclass=file permissive=1
avc: denied { write } for comm="qseecomd" scontext=u:r:tee:s0
tcontext=u:object_r:persist_data_file:s0
tclass=file permissive=1:persist_file:s0 tclass=dir permissive=1
avc: denied { open } scontext=u:r:tee:s0
tcontext=u:object_r:persist_file:s0 tclass=dir permissive=1
avc: denied { write } for comm="qseecomd" name="widevine"
scontext=u:r:tee:s0 tcontext=u:object_r:persist_data_file:s0
tclass=dir permissive=1
avc: denied { add_name } for comm="qseecomd" scontext=u:r:tee:s0
tcontext=u:object_r:persist_data_file:s0 tclass=dir permissive=1
avc: denied { create } for comm="qseecomd" scontext=u:r:tee:s0
tcontext=u:object_r:persist_data_file:s0 tclass=file permissive=1
avc: denied { write } scontext=u:r:tee:s0
tcontext=u:object_r:persist_data_file:s0 tclass=file permissive=1

Bug: 63051358
Test: build
Change-Id: I28bd0cd816720a85fc840890a74929939366de6d
2017-06-30 14:07:37 +00:00
Adrian Roos
f31e1ea587 AOD: Enable binned brightness sensor
Change-Id: Ib7e80cd8887652984275f51101c6863fb528685d
Fixes: 38354633
Test: Enable AOD, expose to various light conditions, observe that AOD adjusts brightness
2017-06-30 15:06:40 +02:00
Meng Wang
8683217c90 Add SPN override: Telstra 505-01
Bug: 63051322
Test: make
Change-Id: I3b8f16026c3fbbc978e9d518d3709832f1386f6f
2017-06-29 18:18:19 -07:00
Brian Duddie
fba8eebc74 Don't create /data/misc/sensors
This folder is used for storing QC slang scripts, which are not used on
this device.

Bug: 38425697
Test: load, sanity check sensors
Change-Id: Ie40e356c57e98355117833df05f59e26c4754e74
2017-06-29 16:36:38 -07:00
Brian Duddie
ee8cd6b127 Allow sensors daemon to create vendor data files
Add an entry to init.hardware.rc to create /data/vendor/sensors at
startup, and sepolicy entries that allow the sensors daemon to create
files in that directory. These will be used to persist runtime
calibration across reboot, but not across factory reset.

denied { getattr } for pid=14080 comm="sensors.qcom"
path="/data/vendor/sensors/cal.txt" dev="sda45" ino=2179116
scontext=u:r:sensors:s0 tcontext=u:object_r:system_data_file:s0
tclass=file permissive=1
denied { write } for pid=14113 comm="sensors.qcom" name="vendor"
dev="sda45" ino=2179073 scontext=u:r:sensors:s0
tcontext=u:object_r:system_data_file:s0 tclass=dir permissive=1
denied { add_name } for pid=14113 comm="sensors.qcom" name="sensors"
scontext=u:r:sensors:s0 tcontext=u:object_r:system_data_file:s0
tclass=dir permissive=1
denied { create } for pid=14113 comm="sensors.qcom" name="sensors"
scontext=u:r:sensors:s0 tcontext=u:object_r:system_data_file:s0
tclass=dir permissive=1
denied { create } for pid=14113 comm="sensors.qcom" name="cal.bin"
scontext=u:r:sensors:s0 tcontext=u:object_r:system_data_file:s0
tclass=file permissive=1
denied { write open } for pid=14113 comm="sensors.qcom"
path="/data/vendor/sensors/cal.bin" dev="sda45" ino=2179115
scontext=u:r:sensors:s0 tcontext=u:object_r:system_data_file:s0
tclass=file permissive=1
denied { read } for pid=14113 comm="sensors.qcom"
path="/data/vendor/sensors/cal.txt" dev="sda45" ino=2179116
scontext=u:r:sensors:s0 tcontext=u:object_r:system_data_file:s0
tclass=file permissive=1
denied { getattr } for pid=14113 comm="sensors.qcom"
path="/data/vendor/sensors/cal.txt" dev="sda45" ino=2179116
scontext=u:r:sensors:s0 tcontext=u:object_r:system_data_file:s0
tclass=file permissive=1

Bug: 38425697
Test: confirm folder is created on boot, and calibration files are
created, updated, and read successfully by sensors daemon
Change-Id: Ie23cafe4f43b3335e07cf0d13dde0c5d06b69f80
2017-06-29 16:36:38 -07:00
Ecco Park
53c92f3bb8 Merge "Remove vendor_executes_system_violator attribute" into oc-dr1-dev 2017-06-29 23:18:04 +00:00
Subhani Shaik
c272f35b8b Remove vendor_executes_system_violator attribute
Bug: 62385687
Test: No svc denial error, wifi is working fine.
Change-Id: I47cad9cab9b2e60ccf4b692daae7042b44804b05
2017-06-29 20:26:18 +00:00
Thierry Strudel
0d721f2f62 Merge "init.hardware.rc: enforce system UID/GID on tftp-server files" into oc-dr1-dev 2017-06-29 15:32:41 +00:00
Ed Tam
1fe3fbbda7 Merge "Revert "Wahoo sepolicy changes"" into oc-dr1-dev 2017-06-29 09:29:00 +00:00
Ed Tam
7d05a3ba89 Revert "Wahoo sepolicy changes"
This reverts commit eb6f000bff.

Reason for revert: Causing runtime restarts

Bug: 63123125
Change-Id: I3f4752c7ff29f52957f28b0f0c84de2c11a06f40
2017-06-29 08:49:47 +00:00
Thierry Strudel
777768fbf0 init.hardware.rc: enforce system UID/GID on tftp-server files
Enforce correct system as UID/GID on tftp-server used files

Bug: 62544362
Change-Id: I92a346576c4e0af2187317281acc7e53599787eb
Signed-off-by: Thierry Strudel <tstrudel@google.com>
2017-06-28 21:36:21 -07:00
TreeHugger Robot
730070f3d2 Merge "declare ipacm as the tetheroffload HAL" into oc-dr1-dev 2017-06-29 04:26:10 +00:00
Jeff Vander Stoep
5c5eb9de3a declare ipacm as the tetheroffload HAL
Also add tetheroffload HALs to the manifest.

Bug: 29337859
Bug: 32163131

Test: adb shell getenforce
Enforcing
adb shell dumpsys connectivity tethering
Tethering:
  ...
  Log:
    ...
    06-28 11:46:58.841 - SET master tether settings: ON
    06-28 11:46:58.857 - [OffloadController] tethering offload started
And logs show some signs of happiness:
    06-28 11:46:58.853   816   947 I IPAHALService: IPACM was provided two FDs (18, 19)
    06-28 11:46:58.853  1200  1571 I zygote64: Looking for service android.hardware.tetheroffload.control@1.0::IOffloadControl/default
Change-Id: I40e23c1863901330dfe59e2ea196314c5c7bb52a
(cherry picked from commit c6ecb207d7032bf43e9b39941ff7e47dd127e361)
2017-06-29 04:25:14 +00:00
Siddharth Ray
eb6f000bff Wahoo sepolicy changes
Wahoo's sepolicy is changed to mirror Marlin's. Marlin's sepolicy can be
found at device/google/marlin/sepolicy/hal_gnss_default.te

BUG: 37409476
Change-Id: Id6f49defd70923c56da2dfd68f55cf3dfc2e62fc
2017-06-29 01:58:58 +00:00
Thierry Strudel
12fddd67f7 Merge "init.hardware.rc: fix permission for time_daemon" into oc-dr1-dev 2017-06-28 20:17:47 +00:00
Thierry Strudel
638cc16535 Merge "Allow init_ese to run grep" into oc-dr1-dev 2017-06-28 17:58:28 +00:00
Wei Wang
44356709c3 init.hardware.rc: fix permission for time_daemon
We moved time_daemon without setting its required permission. This CL is
to fix that.

Bug: 62184939
Test: walleye boots
Change-Id: I5e485a4e8a7c3eadde8d9a111c9e1bc33eee3f67
2017-06-28 10:41:21 -07:00
TreeHugger Robot
eb3cbfb47b Merge "Clean up denials" into oc-dr1-dev 2017-06-28 17:26:46 +00:00
TreeHugger Robot
dc9fd8d1e5 Merge "Reduce USB audio latency on Walleye only" into oc-dr1-dev 2017-06-28 05:05:09 +00:00
Jeffrey Vander Stoep
8f87ef72a2 Merge "Suppress mediaprover access to certain cache dirs" into oc-dr1-dev 2017-06-28 04:12:32 +00:00
TreeHugger Robot
6c899f1322 Merge "USB HAL: Use 1.1 IUsb intead of 1.0 IUsb" into oc-dr1-dev 2017-06-28 02:24:32 +00:00
Badhri Jagan Sridharan
07caa115dc USB HAL: Use 1.1 IUsb intead of 1.0 IUsb
Use 1.1 IUsb in order to make register the service as 1.1 compatible.
This enables lshal to recognize the hal service as 1.1 implementation.

Bug: 62917546
Test: Manually verified lshal output
android.hardware.usb@1.0::IUsb/default   0/1             782     6024 568
android.hardware.usb@1.1::IUsb/default   0/1             782     6024 568

Change-Id: I9b0817841dbcc345a1d854ee4a5193797181ea3f
2017-06-27 17:03:49 -07:00
Glenn Kasten
a8bfec5987 Reduce USB audio latency on Walleye only
No change in latency for Taimen

Bug: 62375603
Test: Loopback shows reduction and no glitches on Walleye, no change on Taimen
Change-Id: I6a071ed588a69dacb5be11a5154bd2976444df4f
2017-06-27 16:00:24 -07:00
TreeHugger Robot
28ec2468b5 Merge "tftp_server: fix directory permissions" into oc-dr1-dev 2017-06-27 22:46:33 +00:00
Paul Crowley
98bc1a88ac Allow init_ese to run grep
Bug: 62586642
Test: selinux denial on grep no longer seen.
Change-Id: I61847f5a5f460fc8efef5a772eae3a0559634b40
(cherry picked from commit 1478bd41b4)
2017-06-27 15:39:13 -07:00
Jeff Vander Stoep
a63fd3aadb Clean up denials
avc: denied { search } for name="/" scontext=u:r:kernel:s0
tcontext=u:object_r:persist_file:s0 tclass=dir
avc: denied { search } for name="ipc_logging" dev="debugfs"
scontext=u:r:kernel:s0 tcontext=u:object_r:debugfs_ipc:s0
tclass=dir
avc: denied { sys_module } scontext=u:r:netd:s0
tcontext=u:r:netd:s0 tclass=capability

Bug: 35197529
Test: build, verify denials no longer occur.
Change-Id: Ibe18ca05f2d80343624d08116b83b5287239c01a
2017-06-27 14:30:18 -07:00
Eino-Ville Talvala
2d5372cfb9 Merge "Allow network access to google_camera_app domain" into oc-dr1-dev 2017-06-27 21:24:54 +00:00
TreeHugger Robot
8389d66ad9 Merge "Revert "init.hardware.rc: start CHRE earlier"" into oc-dr1-dev 2017-06-27 21:20:42 +00:00
Jeff Vander Stoep
5e99a317fd tftp_server: fix directory permissions
Devices with an existing /persist/rfs directory need all the subdirs
permissions fixed up to avoid an selinux denial. On new devices
this will already be fixed.

avc: denied { dac_override } scontext=u:r:rfs_access:s0
tcontext=u:r:rfs_access:s0 tclass=capability permissive=0
avc: denied { dac_read_search } scontext=u:r:rfs_access:s0
tcontext=u:r:rfs_access:s0 tclass=capability permissive=0

Bug: 38214174
Test: Device boots with no selinux denials for rfs_access
Change-Id: I4be2c578eecca4f199a0773cfded589f09eb0bd4
2017-06-27 12:55:29 -07:00
TreeHugger Robot
d76d24c2ba Merge "Add widevine service to wahoo manifest" into oc-dr1-dev 2017-06-27 19:25:36 +00:00
Wei Wang
9a7459bdd0 Revert "init.hardware.rc: start CHRE earlier"
CHRE depends on calibration data which is in persist partition.
This reverts commit 69b03ecd63.

Bug: 63066826
Change-Id: Ic7cf3daa227091c211902a945cd5fc4f7f11c814
2017-06-27 19:15:47 +00:00
Jie Song
486dc6acd7 Merge "Add folder and SELinux rules for subsystem ramdump" into oc-dr1-dev 2017-06-27 18:19:22 +00:00
Eino-Ville Talvala
153afe88d3 Allow network access to google_camera_app domain
Test: New features in app that use the network function as expected
Bug: 63058578
Bug: 62848290
Change-Id: I129a57e2837f180e722bef4a3a05756acb150c0f
2017-06-27 10:14:01 -07:00
Glenn Kasten
614e203677 Merge "Report feature android.software.midi to enable testing" into oc-dr1-dev 2017-06-27 15:05:26 +00:00
Jie Song
cbaa3b6884 Add folder and SELinux rules for subsystem ramdump
1. Move subsystem ramdump to ssrdump
2. Fix denials on sysfs

Bug: 62257616
Test: Modem ramdump in new folder
Change-Id: I5c77ec42a0967140d04b616ede9b02e6272f3442
2017-06-26 21:27:54 -07:00
Jeff Vander Stoep
fcf1b20839 Suppress mediaprover access to certain cache dirs
avc: denied { getattr } for comm="sAsyncHandlerTh"
path="/data/cache/recovery" dev="sda13" ino=7086082
scontext=u:r:mediaprovider:s0:c512,c768
tcontext=u:object_r:cache_recovery_file:s0 tclass=dir
avc: denied { getattr } for path="/data/cache/backup"
scontext=u:r:mediaprovider:s0:c512,c768
tcontext=u:object_r:cache_private_backup_file:s0 tclass=dir

Bug: 63038506
Bug: 35197529
Test: build police
Change-Id: I51624c255e622bf712d41ca1bbf190ec3e4fefae
2017-06-26 16:58:51 -07:00
Wei Wang
f31c67caa8 Do not do powerhint if current governor is not supported
Bug: 62913269
Test: Boot and verify powerhint works
Change-Id: If2638ae5f107534b46412ca8cce9f02e9eb5d215
2017-06-26 22:59:14 +00:00
TreeHugger Robot
dfc34ea32b Merge "bootanim: suppress selinux denial" into oc-dr1-dev 2017-06-26 20:24:05 +00:00
Glenn Kasten
a949a88da4 Report feature android.software.midi to enable testing
Test: MIDI Scope and similar tests can be launched
Bug: 37993866
Change-Id: I27b134f4709b5c49a99c2525a871d2121c842dee
2017-06-26 12:21:23 -07:00
TreeHugger Robot
577d0c144f Merge "Media volume: from 15 to 25 steps" into oc-dr1-dev 2017-06-26 18:35:23 +00:00
Jeff Tinker
59114dc021 Add widevine service to wahoo manifest
bug:62685361
Change-Id: I0dcd17b70bf52ef82dc9c094650033c4be3e0d1e
2017-06-26 18:20:27 +00:00
Jeff Vander Stoep
3ecc3b2913 bootanim: suppress selinux denial
Reading time from /data/system/time is not used on Wahoo.

denied { read } for pid=619 comm="BootAnimation::" name="system"
scontext=u:r:bootanim:s0 tcontext=u:object_r:system_data_file:s0
tclass=dir

Bug: 62954877
Test: build policy
Change-Id: I0d5bc69797f7a11ca4e612c00228e87dd48942c7
2017-06-26 09:58:22 -07:00
TreeHugger Robot
9dca253a01 Merge "Add SPN for Vodafone 262-02" into oc-dr1-dev 2017-06-26 16:48:12 +00:00