Commit Graph

578 Commits

Author SHA1 Message Date
Stefanot
8db7a09938 Add external storage and contact permissions to 2017 google phones.
Test: manual
BUG:37635903
Change-Id: I6257943e380d6fa90ce042e143a065bb64d51a3c
2017-05-17 11:22:43 +01:00
TreeHugger Robot
925c0c5c1c Merge changes I6765befe,Iaebed412
* changes:
  Move etc/wifi/* to vendor for build split
  Move permissions to vendor
2017-05-16 04:29:35 +00:00
Christopher Ferris
9a2732bfb7 Merge "Change to cortex-a73 for target arch." 2017-05-16 01:53:39 +00:00
TreeHugger Robot
8926a35211 Merge "manifest: add android.hardware.bluetooth hwbinder" 2017-05-15 23:34:22 +00:00
Max Bires
51e13cdb05 Merge "Removing init_radio from permissive and into enforcing" 2017-05-15 22:04:13 +00:00
Thierry Strudel
8e00bda0bb manifest: add android.hardware.bluetooth hwbinder
Change-Id: Ifb2b063e41df91fb87958f91db95b1e60fcea1a5
Signed-off-by: Thierry Strudel <tstrudel@google.com>
2017-05-15 21:46:59 +00:00
Christopher Ferris
f1cf814639 Change to cortex-a73 for target arch.
Bug: 37647380

Test: Did a checkbuild for a walleye target.
Test: Ran bionic unit tests, ran art target tests on walleye.
Change-Id: I301b4995b232ab3a3521cc14dbcf803468197685
2017-05-15 14:44:46 -07:00
Ray Essick
d587c5a4ab Merge "add preliminary codec performance characteristics" 2017-05-15 21:42:26 +00:00
TreeHugger Robot
f6e6f1a8db Merge "allow camera HAL to talk to perf" 2017-05-15 21:39:06 +00:00
TreeHugger Robot
6fb10addb5 Merge "wahoo: Add Bluetooth to manifest.xml" 2017-05-15 21:13:57 +00:00
Max Bires
c69dbf7e39 Merge "Fixing load of following denials" 2017-05-15 20:09:13 +00:00
Max Bires
ff88516eb0 Merge "Removing location from permissive mode and into enforcing" 2017-05-15 19:56:35 +00:00
SzuWei Lin
1956321915 Move etc/wifi/* to vendor for build split
Bug: 37927875
Test: check these files in folder vendor/etc/wifi
Test: check wifi trun on/off
Change-Id: I6765befe6333aa7c15d91a2086e4eb96aee7071e
2017-05-15 17:12:15 +08:00
SzuWei Lin
314aea5bc9 Move permissions to vendor
Move all permission XML files form:

  system/etc/permissions/*

to

  vendor/etc/permissions/*

Bug: 37927875
Test: check these files in folder vendor/etc/permissions
Change-Id: Iaebed412a99c26bb89f7024618e3c2c4bf63ca4b
2017-05-15 17:12:08 +08:00
Yueyao Zhu
8318aa1ad4 selinux: fix typo for dev block nodes dtbo_[ab]
Bug: 38131826
Change-Id: I3897ca0fe831f7f88640ef0e913a1cfe3e635949
2017-05-12 11:39:08 -07:00
Myles Watson
203ae704b5 wahoo: Add Bluetooth to manifest.xml
Bug: 35807479
Test: VtsHalBluetoothV1_0TargetTest, Pair two phones, LE scan, lshal
Change-Id: Ib6a8c54577ca1f149ec6ae296c049dd3560c0aab
2017-05-12 18:20:06 +00:00
Isaac Chen
b635787205 Move configuration files to vendor for build split
The following configuration files need to reside in vendor
partition to work with generic AOSP system image.

Move uevent.*.rc to /vendor
Move fstab.* to /vendor/etc
Move init.*.rc and init.wahoo.usb.rc to /vendor/etc/init.

Also the following two make file variables need to be set:
  - BOARD_PROPERTY_OVERRIDES_SPLIT_ENABLED := true
  - PRODUCT_ENFORCE_RRO_TARGETS := framework-res

Change path (to /vendor/bin) for init.*.sh, and add
path (to /vendor/etc) for fstab.* in init.hardware.rc.

Bug: 37927875
Test: These files are under /vendor instead of / or /system,
paths (in rc files) are changed to vendor accordingly,
and the resulted system/vendor images work on the device.

Change-Id: I64c8a899ab1c6837d51853e289160e35910b5b9a
2017-05-12 11:16:45 +08:00
TreeHugger Robot
98173c26b7 Merge "Add laf partition to file_contexts" 2017-05-12 02:08:10 +00:00
Wei Wang
35257586fb Merge changes Ibd89d8c1,I01610bd3
* changes:
  Enable ZRAM on wahoo
  Override heap growth limit to 256M
2017-05-12 01:09:32 +00:00
Ray Essick
fd33ab5147 add preliminary codec performance characteristics
CtsVideoTestCases were failing on video encode/decode performance
tests for the wahoo-family devices because there is no no performance
characteristic file in the build.  This adds an initial set of
performance characteristics, taken verbatim from the marlin devices.

The numbers will need updating before the device is released.

Bug: 38134584
Test: successful run of affected CTS tests
Change-Id: Idd37095a2883ee1e00a2f774da23ce3202c07b04
2017-05-11 16:44:39 -07:00
Zhijun He
fc8a9ad390 Merge "device.mk: disable default perf mode for encoder" 2017-05-11 22:33:49 +00:00
Ecco Park
dfe38fa8d7 Merge "Wifi: remove the WCNSS_qcom_cf.ini from wahoo" 2017-05-11 22:33:23 +00:00
Wei Wang
5db9bb4b63 Enable ZRAM on wahoo
Bug: 38242009
Bug: 37765310
Test: boot and dumpsys meminfo
Change-Id: Ibd89d8c102ca33bc878b91dbf8e76a6f37c6f0a0
2017-05-11 15:27:27 -07:00
Max Bires
8fc1a5eb1f Merge "Removing port-bridge from permissive mode and into enforcing" 2017-05-11 21:36:40 +00:00
Tao Bao
7a43b29f97 Merge "Set sys.usb.configfs so that recovery knows it's using configfs." 2017-05-11 21:30:36 +00:00
Ecco Park
1e280464e2 Wifi: remove the WCNSS_qcom_cf.ini from wahoo
The ini file will be picked up from device directory.

Bug: 38198219

Change-Id: Ie05de71da68169487da93372a9a19a12913fa468
Signed-off-by: Ecco Park <eccopark@google.com>
2017-05-11 21:28:56 +00:00
Wei Wang
5b02be8da5 Override heap growth limit to 256M
This is for high display density on device

Bug: 37765310
Bug: 38241506
Test: muskie boot
Change-Id: I01610bd309e532448c67c51c89a168fe441888e6
2017-05-11 14:12:26 -07:00
Glenn Kasten
0e6b7ed9b2 Merge "Temporary workaround to reduce audio glitches" 2017-05-11 20:50:23 +00:00
Max Bires
8ff7bf54cd Merge "Putting folio_daemon into enforcing mode." 2017-05-11 20:38:46 +00:00
Tao Bao
d38eccc66c Set sys.usb.configfs so that recovery knows it's using configfs.
Bug: 37713851
Test: Boot into recovery image. `adb devices` shows the device.
Test: 'sys.usb.configfs=1' according to /temp/recovery.log.
Change-Id: I3af7510ac0719bc97ef524a201d72567b58b5b1e
2017-05-11 11:55:18 -07:00
Glenn Kasten
699cac9518 Temporary workaround to reduce audio glitches
Test: see test case at bug
Bug: 37532694
Bug: 38234822
Change-Id: I27ce231272959e372589ada988173de4aa274d75
2017-05-11 11:23:22 -07:00
Max Bires
bb8db79246 Fixing load of following denials
denied { connectto } for pid=1017 comm="qseecomd"
path=0074696D655F67656E6F6666 scontext=u:r:tee:s0
tcontext=u:r:time_daemon:s0 tclass=unix_stream_socket

denied { search } for pid=1017 comm="qseecomd" name="/" dev="sda4" ino=2
scontext=u:r:tee:s0 tcontext=u:object_r:persist_file:s0 tclass=dir

denied { search } for pid=744 comm="qseecomd" name="data" dev="sdd3"
ino=18 scontext=u:r:tee:s0 tcontext=u:object_r:persist_data_file:s0
tclass=dir

denied { write } for pid=9351 comm="logcat" name="logd" dev="tmpfs"
ino=19484 scontext=u:r:system_server:s0
tcontext=u:object_r:logd_socket:s0 tclass=sock_file

denied { search } for pid=1027 comm="perfd" name="fb0" dev="sysfs"
ino=35328 scontext=u:r:perfd:s0 tcontext=u:object_r:sysfs_graphics:s0
tclass=dir

denied { read open } for pid=1027 comm="perfd" name="modes" dev="sysfs"
ino=35345 scontext=u:r:perfd:s0 tcontext=u:object_r:sysfs_graphics:s0
tclass=file

denied  { set } for property=net.r_rmnet_data0.dns1 pid=1033 uid=1001
gid=3003 scontext=u:r:netmgrd:s0 tcontext=u:object_r:system_prop:s0
tclass=property_service

denied { use } for pid=1012 comm="netd" path="socket:[218939]"
dev="sockfs" ino=218939 scontext=u:r:netd:s0
tcontext=u:r:hal_gnss_qti:s0 tclass=fd

denied { write } for pid=649 comm="Binder:649_2" name="mtu" dev="sysfs"
ino=59120 scontext=u:r:netd:s0 tcontext=u:object_r:sysfs_net:s0
tclass=file

denied { append } for pid=1044 comm="mediaextractor"
path="pipe:[149334]" dev="pipefs" ino=149334
scontext=u:r:mediaextractor:s0 tcontext=u:r:dumpstate:s0
tclass=fifo_file

denied { use } for pid=1050 comm="omx@1.0-service" path="pipe:[149339]"
dev="pipefs" ino=149339 scontext=u:r:mediacodec:s0
tcontext=u:r:dumpstate:s0 tclass=fd

denied { read open } for pid=3893 comm="ims_rtp_daemon" name="ion"
dev="tmpfs" ino=18545 scontext=u:r:ims:s0
tcontext=u:object_r:ion_device:s0 tclass=chr_file

denied { connectto } for pid=3891 comm="imsdatadaemon"
path="/dev/socket/cnd" scontext=u:r:ims:s0 tcontext=u:r:cnd:s0
tclass=unix_stream_socket

denied { write } for pid=3891 comm="imsdatadaemon" name="cnd"
dev="tmpfs" ino=9756 scontext=u:r:ims:s0
tcontext=u:object_r:cnd_socket:s0 tclass=sock_file

denied { search } for pid=572 comm="android.hardwar" name="/"
dev="sde19" ino=1 scontext=u:r:hal_keymaster_qti:s0
tcontext=u:object_r:firmware_file:s0 tclass=dir

denied { search } for pid=584 comm="android.hardwar" name="display"
dev="sda4" ino=43 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:persist_display_file:s0 tclass=dir

denied { connectto } for pid=664 comm="Loc_hal"
path="/dev/socket/netmgr/netmgr_connect_socket"
scontext=u:r:hal_gnss_qti:s0 tcontext=u:r:netmgrd:s0
tclass=unix_stream_socket

denied { write } for pid=664 comm="Loc_hal" name="netmgr_connect_socket"
dev="tmpfs" ino=31960 scontext=u:r:hal_gnss_qti:s0
tcontext=u:object_r:netmgrd_socket:s0 tclass=sock_file

denied { search } for pid=571 comm="android.hardwar" name="/"
dev="sde19" ino=1 scontext=u:r:hal_gatekeeper_qti:s0
tcontext=u:object_r:firmware_file:s0 tclass=dir

denied { connectto } for pid=660 comm="HwBinder:660_1"
path="/dev/socket/perfd" scontext=u:r:hal_camera_default:s0
tcontext=u:r:perfd:s0 tclass=unix_stream_socket

denied { getattr } for pid=13003 comm="df" path="/dev/block/sde19"
dev="tmpfs" ino=21967 scontext=u:r:dumpstate:s0
tcontext=u:object_r:modem_block_device:s0 tclass=blk_file

denied { getattr } for pid=11969 comm="dumpstate" path="/proc/modules"
dev="proc" ino=4026532149 scontext=u:r:dumpstate:s0
tcontext=u:object_r:proc_modules:s0 tclass=file

denied { getattr } for pid=13003 comm="df" path="/dev/block/sde28"
dev="tmpfs" ino=17995 scontext=u:r:dumpstate:s0
tcontext=u:object_r:system_block_device:s0 tclass=blk_file

denied { getattr } for pid=13003 comm="df" path="/persist" dev="sda4"
ino=2 scontext=u:r:dumpstate:s0 tcontext=u:object_r:persist_file:s0
tclass=dir

denied { search } for pid=11969 comm="dumpstate" name="leds" dev="sysfs"
ino=29583 scontext=u:r:dumpstate:s0 tcontext=u:object_r:sysfs_leds:s0
tclass=dir

denied { create } for pid=12103 comm="ip" scontext=u:r:dumpstate:s0
tcontext=u:r:dumpstate:s0 tclass=netlink_xfrm_socket

denied { read } for pid=12106 comm="top" name="stat" dev="proc"
ino=4026532103 scontext=u:r:dumpstate:s0
tcontext=u:object_r:proc_stat:s0 tclass=file

denied { sendto } for pid=8786 comm="wpa_supplicant"
path="/data/misc/wifi/sockets/wpa_ctrl_803-2"
scontext=u:r:hal_wifi_supplicant_default:s0 tcontext=u:r:cnd:s0
tclass=unix_dgram_socket

denied { sendto } for pid=1032 comm="cnd" path="/dev/socket/wpa_wlan0"
scontext=u:r:cnd:s0 tcontext=u:r:hal_wifi_supplicant_default:s0
tclass=unix_dgram_socket

denied  { set } for property=persist.sys.cnd.iwlan pid=1032 uid=1000
gid=1000 scontext=u:r:cnd:s0 tcontext=u:object_r:system_prop:s0
tclass=property_service

Bug: 34784662
Test: The above denials are no longer seen
Change-Id: I91b9516bff32b8afae93e5af317a3ffe48709cf0
2017-05-11 17:07:15 +00:00
Praveen Chavan
7d7606a2fe device.mk: disable default perf mode for encoder
Bug: 36696901
Change-Id: I99d5947801dbbbba34623c0b3e7ce905c0ebd55f
2017-05-11 16:01:47 +00:00
Max Bires
49c12398f0 Removing location from permissive mode and into enforcing
Bug: 34784662
Test: Location functions properly in enforcing mode
Change-Id: Iba636f6d01addc190e7e4c581c5f716ca8e945e4
2017-05-10 19:49:19 -07:00
Max Bires
6321bd8e3d Removing port-bridge from permissive mode and into enforcing
Bug: 34784662
Test: port-bridge continues to work as expected in enforcing mode
Change-Id: I8b84302919673face79e54b3a6de8fc458bc603c
2017-05-10 19:11:38 -07:00
Max Bires
7af6e3151a Removing init_radio from permissive and into enforcing
Bug: 34784662
Test: init_radio continues to function as expected while in enforcing
Change-Id: Ic82a2c0fedf302e12b1c55f6292df83cec625953
2017-05-10 19:08:14 -07:00
Max Bires
d3ca10d532 Putting folio_daemon into enforcing mode.
Bug: 34784662
Test: folio_daemon continues to function while in enforcing
Change-Id: I9aefd2a8e95883a3782e63b8c4a3ed1ee5ca5435
2017-05-10 19:04:26 -07:00
TreeHugger Robot
9bce06c139 Merge "Revert "camera: enable full mode face detection by default"" 2017-05-11 01:12:43 +00:00
Adrian Roos
79cf7650b8 Merge "Disable DOZE_SUSPEND" 2017-05-11 00:02:35 +00:00
Zhijun He
cec3f91526 Revert "camera: enable full mode face detection by default"
This reverts commit 846ba1ccd3.

Change-Id: I566124516d8212d97b4ce97024ab217280443e16
2017-05-10 23:35:24 +00:00
Patrick Tjin
2b8a0815af Add laf partition to file_contexts
Bug: 37743272
Change-Id: I88d19fd6e537ee37bfd6dd256c69b3a37d15d435
2017-05-10 15:45:15 -07:00
Meng Wang
2230b62d70 Merge "Update Rogers/Fido APN" 2017-05-10 22:29:21 +00:00
Michael Wright
e1c6923c97 Disable DOZE_SUSPEND
Wahoo devices *do* support this, but there's no synchronization between
DOZE_SUSPEND and pushing frames, so we can't use it in practice.

Test: manual
Change-Id: I5ef2f5ac6407fa89aeb2f16fd7dcff140a055f43
2017-05-10 21:46:59 +01:00
Jie Song
6c49bffa20 Merge "Adding init script and SELinux support for qlogd" 2017-05-10 20:43:32 +00:00
Ahmed ElArabawy
910a77479e Merge "power hal: Add power HAL API 1.1 impl for Wahoo" 2017-05-10 20:37:49 +00:00
TreeHugger Robot
0740b8cb91 Merge "Add device compatibility matrix." 2017-05-10 19:54:57 +00:00
Jeff Vander Stoep
e7729bc10e allow camera HAL to talk to perf
avc: denied { connectto } path="/dev/socket/perfd"
scontext=u:r:hal_camera_default:s0 tcontext=u:r:perfd:s0
tclass=unix_stream_socket

Bug: 38200564
Change-Id: Ib68364976474200420c1b0d1953167a8594d4763
Test: policy builds
2017-05-10 12:51:34 -07:00
Max Bires
bed4cb170b Merge "Fixing the following denials" 2017-05-10 18:01:00 +00:00
Meng Wang
8910c0fcba Update Rogers/Fido APN
1. Merge ltemobile.apn into one entry
2. Rename Rogers Netsvcs APN
3. Add Fido Netsvcs APN

Bug: 37947461
Test: make
Change-Id: Ie97ed8c46fd3ee466d03af337424168a2fcbedca
2017-05-10 09:52:22 -07:00
Jie Song
18aecb7cb8 Adding init script and SELinux support for qlogd
Bug: 37115787
Change-Id: I64988953513cd0a7c2e861b5cad5fa6c1c7b9557
2017-05-10 09:27:57 -07:00