Commit Graph

766 Commits

Author SHA1 Message Date
Gabe Taubman
8fb1488b76 [Default permission exception]
Google - Pixel Ambient Services (com.google.intelligence.sense)

Pre-grant record audio for the sense apk.

Bug: 38375510
Bug: 62096243
Test: Flashed to a device and confirmed the permissions was already
granted.
Change-Id: I8e7b78ad073cb473caa8e6a17daaf5d545e0832b
2017-06-01 16:14:54 -04:00
Jaesoo Lee
9127ae4ff6 Revert "vndk: remove vndk/Android.mk"
This reverts commit 1362a69046.

Test: Built sailfish and boots
Change-Id: I3a92adcd40e5dc1354744903000baea69868fe3d
2017-05-31 17:23:42 +09:00
Jaesoo Lee
8aca4bd37f Merge "vndk: remove vndk/Android.mk" 2017-05-31 05:34:29 +00:00
TreeHugger Robot
9d1f66e361 Merge "Remove thermal shutdown config" 2017-05-30 20:50:24 +00:00
TreeHugger Robot
c1d0811708 Merge "device: build ipacm" 2017-05-30 20:31:46 +00:00
Wei Wang
a6d882e981 Remove thermal shutdown config
Config has been moved to derived products

Bug: 37711924
Test: Build
Change-Id: I4eb5252a81fcc7ea84d5d426ff46347e9a0dab06
2017-05-30 11:57:55 -07:00
TreeHugger Robot
d34711b35c Merge "Add permission to use mapper." 2017-05-30 18:37:50 +00:00
Thierry Strudel
21bbdefcac device: build ipacm
Change-Id: Id5e082afde375a62fbb07a5bf96699a0bdbb5c77
Signed-off-by: Thierry Strudel <tstrudel@google.com>
2017-05-30 18:19:44 +00:00
TreeHugger Robot
19057ffcac Merge "Add sepolicies OemLock HAL." 2017-05-27 01:53:11 +00:00
Jayachandran C
213f27d29e Make cnd permissive for VT to work
This change will be reverted after all cnd denials
are fixed as part of b38253858

Currently all QC propriatery modules are going through a major
re-architecture so keeping this in permissive mode will help
unblock the lab conformance test.

The current denials which will be ignored with this change

cnd     : type=1400 audit(0.0:453): avc: denied { net_raw } for
capability=13 scontext=u:r:cnd:s0 tcontext=u:r:cnd:s0 tclass=capability
permissive=1
cnd     : type=1400 audit(0.0:455): avc: denied { dac_override } for
capability=1 scontext=u:r:cnd:s0 tcontext=u:r:cnd:s0 tclass=capability
permissive=1
cnd     : type=1400 audit(0.0:456): avc: denied { read write } for
name="wake_lock" dev="sysfs" ino=18727 scontext=u:r:cnd:s0
tcontext=u:object_r:sysfs_wake_lock:s0 tclass=file permissive=1
cnd     : type=1400 audit(0.0:457): avc: denied { open } for
path="/sys/power/wake_lock" dev="sysfs" ino=18727 scontext=u:r:cnd:s0
tcontext=u:object_r:sysfs_wake_lock:s0 tclass=file permissive=1
cnd     : type=1400 audit(0.0:458): avc: denied { block_suspend } for
capability=36 scontext=u:r:cnd:s0 tcontext=u:r:cnd:s0 tclass=capability2
permissive=1

Change-Id: I9c0a7a38a0b61f3819f90f0178ab16e59da9e65f
2017-05-27 01:42:46 +00:00
Chia-Kai Liang
479abd5212 Add permission to use mapper.
For allocating the buffer for the direct sensor API to use.

Bug: 37423054
Change-Id: I8f973a0d7b06640650a9a61428ebd97afc780ec0
2017-05-26 16:50:22 -07:00
TreeHugger Robot
69ceaada22 Merge "Fix manifest instance for Uce HAL" 2017-05-26 22:45:05 +00:00
Naveen Kalla
def4e0a092 Fix manifest instance for Uce HAL
Update UCE Hal instance definition

Bug: 38388637
Test: manual - Ensure that Presence finds the UCE Stack in logs
Change-Id: I3b08f1f4864ddb3d8dc36c604d3e94cebe38d262
2017-05-26 13:44:10 -07:00
Max Bires
be88e38b38 Merge "Fixing taimen OTAs" 2017-05-26 20:23:15 +00:00
Max Bires
9e36e709a9 Fixing taimen OTAs
Bug: 62127933
Test: OTAs work
Change-Id: I66fb3ed5e4e88172dffe90627a7d3ddbc03eac11
2017-05-26 11:34:01 -07:00
Andrew Scull
83cb7dd73c Add sepolicies OemLock HAL.
This HAL is no longer implemented with the SE but, instead, communicates
with the bootloader.

Bug: 62052545
Test: Build and boot
Change-Id: I929f184019a782372c09dd6264e6ccec0f822f0f
2017-05-26 18:59:38 +01:00
TreeHugger Robot
df63270b72 Merge "Revert "Update audio policy configuration"" 2017-05-26 06:51:46 +00:00
TreeHugger Robot
24fe053066 Merge "Sepolicy for xtra-daemon start and download" 2017-05-26 01:57:44 +00:00
David Lin
d1f39f3f2a Revert "Update audio policy configuration"
This reverts commit 1a7c8bbb26.

Bug: 62101879
Change-Id: Ibcc168cbc723357108aa29e35ba2aa58dd266474
2017-05-26 01:32:16 +00:00
TreeHugger Robot
fb7a755a04 Merge "Adding allow for ramdump to get into enforcing" 2017-05-25 23:48:04 +00:00
TreeHugger Robot
5773967810 Merge "allow camera hal to find graphics mapper hwservice" 2017-05-25 22:23:29 +00:00
Max Bires
3080bb5dad Adding allow for ramdump to get into enforcing
denied { read } for pid=691 comm="ramdump" name="sda10" dev="tmpfs"
ino=9821 scontex t=u:r:ramdump:s0 tcontext=u:object_r:userdata_block_device:s0
tclass=blk_file

Bug: 38261729
Bug: 34784662
Test: ramdump works in enforcing
Change-Id: I2707da0673f5f93f255b155cacc1f39adfd224e0
2017-05-25 15:08:07 -07:00
Max Bires
d9adf049d0 Merge "Removing hal_gnss_qti from permissive into enforcing" 2017-05-25 21:53:16 +00:00
Siddharth Ray
736d22fe40 Merge "Adding gps_debug.conf for W/T" 2017-05-25 21:15:10 +00:00
Andre Eisenbach
753ad9da64 Merge "Bluetooth: Enable SAP on Taimen/Walleye" 2017-05-25 21:08:53 +00:00
TreeHugger Robot
af235df036 Merge "Add create file perms to rfs_access." 2017-05-25 20:55:32 +00:00
TreeHugger Robot
a028c10ec9 Merge "ueventd: grant access to easel dev to other users" 2017-05-25 19:56:44 +00:00
Jeff Vander Stoep
2a7d60512c allow camera hal to find graphics mapper hwservice
avc:  denied  { find } scontext=u:r:hal_camera_default:s0
tcontext=u:object_r:hal_graphics_mapper_hwservice:s0
tclass=hwservice_manager

Bug: 62091712
Test: Build sepolicy
Change-Id: I0837910c8cc678d6c3acabbe98ad4239e69d08e7
2017-05-25 12:54:40 -07:00
Siddharth Ray
56d3fbd889 Adding gps_debug.conf for W/T
Change-Id: Ia1a6534fdb08749eb07a45c4a266c79b03c2ab38
2017-05-25 11:40:24 -07:00
pkanwar
b57ee850aa Bluetooth: Enable SAP on Taimen/Walleye
Fixes: 62064043
Test: manual
Change-Id: I20ff2e70d0b9be97ae2600007f4bac392defaba8
2017-05-25 18:13:12 +00:00
Adrian Roos
5d401b470b Merge "Add config option for always on display availability." 2017-05-25 17:48:54 +00:00
Wyatt Riley
a6e639f43d Sepolicy for xtra-daemon start and download
Bug: 37547308
Bug: 62034764
Test: Boots, GPS works, XTRA injection success, no gnss or loc avc denials
Change-Id: I13f69947db28c092b75b9b433913644f8cfbf1ce
2017-05-25 10:47:11 -07:00
Max Bires
8d055121e9 Removing hal_gnss_qti from permissive into enforcing
Bug: 34784662
Bug: 38211606
Test: hal_gnss_qti functions in enforcing mode
Change-Id: I204e16842dbb5609d8e6bf772b741d39cf1d4f53
2017-05-24 15:19:57 -07:00
Joel Fernandes
d502340815 Merge "LISA: Improve power hint tuning functions" 2017-05-24 21:15:34 +00:00
Adrian Roos
4f5d44b11a Add config option for always on display availability.
By default it's false since always on display requires special tuning,
but we've done that for wahoo devices so set it to true.

Test: manual
Bug: 38354290
Change-Id: I6f061336062d6bb854c80cc7e792d57467ea9fa2
2017-05-24 14:12:22 -07:00
Connor O'Brien
86e278cbee LISA: Improve power hint tuning functions
- pkill does not find the power service, so use pkill -f instead in
  restart_power_hal
- rename touch-specific functions
- add functions to disable launch boosts and restore defaults

Test: ran restore_defaults & disable_launch_hint and checked
powerhint.xml on device; ran restart_power_hal and confirmed service
restarted.
Change-Id: If6dda7c891c5c595d1c18a58007af4d89e007b0b
Signed-off-by: Connor O'Brien <connoro@google.com>
2017-05-24 13:38:31 -07:00
TreeHugger Robot
fb2a842892 Merge "audio: clean up unused audio config tables" 2017-05-24 20:03:04 +00:00
TreeHugger Robot
8b9826db44 Merge "init.power.sh: enable memlat and add SELinux context" 2017-05-24 20:00:57 +00:00
TreeHugger Robot
61ba67b3f6 Merge "folio_daemon: retry slowly on failure" 2017-05-24 18:39:47 +00:00
David Lin
1710cc93b8 audio: clean up unused audio config tables
Bug: 62039625
Change-Id: I092e2a0a812e8ea9583090e2b3fab6fb4023fb09
Signed-off-by: David Lin <dtwlin@google.com>
2017-05-24 09:55:30 -07:00
Andrew Lehmer
518eb90bea folio_daemon: retry slowly on failure
Bug: 38001818
Test: loaded on taimen
Change-Id: I3f5a8cbf0faca3b5d027dcd74f1b16de80fdbee2
2017-05-24 09:52:04 -07:00
TreeHugger Robot
ea1f737838 Merge "Check handle for nullptr" 2017-05-24 15:49:17 +00:00
Sooraj Sasindran
1550d8306b Merge "Enabling VT Sepolicy changes" 2017-05-24 14:16:51 +00:00
TreeHugger Robot
e5daf23c7d Merge "Add dtbo partition information" 2017-05-24 07:46:51 +00:00
Jiyong Park
1362a69046 vndk: remove vndk/Android.mk
It is moved to development/vndk. VNDK-related modules are all behind a
phony module vndk-<version>.

Bug: 38356823
Bug: 37522144
Bug: 38210782
Test: muskie builds and boots
Change-Id: I5f37f1bdbda92f3eb606a271dbcd84b5e5b1a353
2017-05-24 16:33:20 +09:00
Thierry Strudel
924945e6a9 Merge "Move AB_OTA_PARTITION vbmeta and vendor to wahoo/device.mk" 2017-05-24 04:55:45 +00:00
TreeHugger Robot
f7003a4983 Merge "Create selinux domain for Tango core" 2017-05-24 04:42:40 +00:00
Max Bires
3bce3c00b5 Merge "Fixing boot blocking denials" 2017-05-24 03:39:43 +00:00
TreeHugger Robot
f954be507a Merge "Update audio policy configuration" 2017-05-24 03:35:45 +00:00
TreeHugger Robot
d6fbfa28c8 Merge "Offload HAL Service: Invoke Server implementation" 2017-05-24 03:26:05 +00:00