Commit Graph

2747 Commits

Author SHA1 Message Date
Max Bires
b0804bf928 Adding bug map entries for boot denials am: 6f8f263c64 am: 2d5b503deb
am: 8ad4301e14  -s ours

Change-Id: If3946307e70347560b7cf7457e718c3bf01a5257
2017-11-20 20:24:40 +00:00
Max Bires
8ad4301e14 Adding bug map entries for boot denials am: 6f8f263c64
am: 2d5b503deb

Change-Id: Ie98762bb38cb2865cc2517c25e6b48a9ae174e39
2017-11-20 20:21:56 +00:00
Max Bires
2d5b503deb Adding bug map entries for boot denials
am: 6f8f263c64

Change-Id: I63f5b9a494f535b499bc7a6bbb94016e6182b414
2017-11-20 20:17:58 +00:00
Max Bires
0e4f621620 Adding allow rules and bug_map entries to clean up boot on taimen am: bf29a6610c am: 2eb295df29
am: 8954b7958d  -s ours

Change-Id: I62afd705cf3d286bb41133441f46a9144fe4d9ea
2017-11-20 19:59:26 +00:00
Max Bires
8954b7958d Adding allow rules and bug_map entries to clean up boot on taimen am: bf29a6610c
am: 2eb295df29

Change-Id: I3f9b9453e1717498e76b254fc16d3d988a37d28e
2017-11-20 19:56:52 +00:00
Max Bires
2eb295df29 Adding allow rules and bug_map entries to clean up boot on taimen
am: bf29a6610c

Change-Id: Id3c3164c7fbbdda81a8a038f87181b2e535bb608
2017-11-20 19:53:53 +00:00
Max Bires
6f8f263c64 Adding bug map entries for boot denials
Test: bug metadata is properly attached to relevant denials
Change-Id: I20fba3a86104f494131714056b2809ae6a62d416
Merged-In: I20fba3a86104f494131714056b2809ae6a62d416
(cherry picked from commit 6f475be419)
2017-11-20 19:01:47 +00:00
Max Bires
bf29a6610c Adding allow rules and bug_map entries to clean up boot on taimen
Allow rule denials:
denied { ioctl } for pid=863 comm="rild"
path="/vendor/radio/qcril_database/qcril.db" dev="dm-1" ino=900
ioctlcmd=f50c scontext=u:r:rild:s0 tcontext=u:object_r:vendor_file:s0
tclass=file

denied { read } for pid=1609 comm="batterystats-wo" name="show_stat"
dev="sysfs" ino=37781 scontext=u:r:system_server:s0
tcontext=u:object_r:sysfs:s0 tclass=file

denied { search } for pid=1609 comm="system_server"
name="800f000.qcom,spmi" dev="sysfs" ino=19648
scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_msm_subsys:s0
tclass=dir

bug_map denial entries:
denied { create } for pid=751 comm="main" name="tasks"
scontext=u:r:zygote:s0 tcontext=u:object_r:cgroup:s0 tclass=fil

denied { getattr } for pid=1609 comm="system_server"
path="/vendor/framework" dev="dm-1" ino=291
scontext=u:r:system_server:s0
tcontext=u:object_r:vendor_framework_file:s0 tclass=dir

Test: denials either don't show up or are properly tagged with a bug
number

Change-Id: Ibf841033ac5480ddb975772840680011cb331a7d
Merged-In: Ibf841033ac5480ddb975772840680011cb331a7d
(cherry picked from commit 53146f8cc0)
2017-11-20 18:46:26 +00:00
TreeHugger Robot
5c2b0d3e38 Merge "init.power.sh: remove CPUBW min freq setting" 2017-11-17 20:53:21 +00:00
Wei Wang
3729835533 init.power.sh: remove CPUBW min freq setting
CPU BW is set to 200Mhz in QC MTP, since on Pixel, we also adjust CPU BW
in touch PowerHint, we can relax the setting to 100Mhz.

Bug: 69271302
Test: boot
Change-Id: Iead3634d9c6fb0b3edc24ab0a19d62157a6a1793
2017-11-16 22:04:28 -08:00
Ruchi Kandoi
b0af94d3a0 Use nfc_nci.msm8998 instead of nfc_nci.$(TARGET_BOARD_PLATFORM) am: c2283035e2 am: 4886cb6b08
am: fb84bc6130

Change-Id: I4af8efd95d5432c0bedbfa205ef6bb263428f0aa
2017-11-17 00:14:15 +00:00
Ruchi Kandoi
fb84bc6130 Use nfc_nci.msm8998 instead of nfc_nci.$(TARGET_BOARD_PLATFORM) am: c2283035e2
am: 4886cb6b08

Change-Id: Iab53fe86f69df9a6f8bd03995760e1dcfc66b12f
2017-11-17 00:10:45 +00:00
Ruchi Kandoi
4886cb6b08 Use nfc_nci.msm8998 instead of nfc_nci.$(TARGET_BOARD_PLATFORM)
am: c2283035e2

Change-Id: If56d7587dc442ba66f288b544e839735b84ee502
2017-11-17 00:09:14 +00:00
Ruchi Kandoi
c2283035e2 Use nfc_nci.msm8998 instead of nfc_nci.$(TARGET_BOARD_PLATFORM)
Fixes: 69413085
Fixes: 69414641
Test: Make clean; make and flash.
Change-Id: I0edeb196ab28ff44cade1611e181eeedd42f79c3
2017-11-16 13:08:01 -08:00
Tom Cherry
bc563cf96a Merge "Add vendor_init.te" am: c0959d9ff8 am: c28270b47c
am: 3506ef33a3

Change-Id: Ib652a46bee64b02e567642d0c838f5c4f7d9cd54
2017-11-16 17:42:20 +00:00
Tom Cherry
3506ef33a3 Merge "Add vendor_init.te" am: c0959d9ff8
am: c28270b47c

Change-Id: I7543b913805e3c62e3a3ecc6ff6b0e97cc1bf299
2017-11-16 17:39:47 +00:00
Tom Cherry
c28270b47c Merge "Add vendor_init.te"
am: c0959d9ff8

Change-Id: Id7deaf4d160d31066eca8e0f77ecdfce48dab0c8
2017-11-16 17:38:16 +00:00
Tom Cherry
c0959d9ff8 Merge "Add vendor_init.te" 2017-11-16 17:34:51 +00:00
Ruchi Kandoi
1f34155e5b Merge "Add the correct NFC HAL library." am: 15ab496b31 am: fcf8b9124b
am: d774a2e48c

Change-Id: I941c87656c9a824360a450cc3c0ac0937f22c102
2017-11-16 00:01:22 +00:00
Tom Cherry
74d8c3674a Add vendor_init.te
Update sepolicy for vendor_init.  Relevant denials:

avc:  denied  { write } for  pid=558 comm="init" name="debug_suspend"
dev="debugfs" ino=997 scontext=u:r:vendor_init:s0
tcontext=u:object_r:debugfs_clk:s0 tclass=file permissive=1
avc: denied { module_request } for pid=558 comm="init"
kmod="deadline-iosched" scontext=u:r:vendor_init:s0
tcontext=u:r:kernel:s0 tclass=system permissive=1

Bug: 62875318
Test: use walleye + factory reset + vendor_init
Change-Id: I2655316be5fbf18120174a11958c43d7ca70b478
2017-11-15 16:00:29 -08:00
Ruchi Kandoi
d774a2e48c Merge "Add the correct NFC HAL library." am: 15ab496b31
am: fcf8b9124b

Change-Id: I80c28ae7aa4738baff3fe6cc0d79c5be79cf3605
2017-11-15 23:52:47 +00:00
Ruchi Kandoi
fcf8b9124b Merge "Add the correct NFC HAL library."
am: 15ab496b31

Change-Id: I523745a2c1f214f193828e9d5a4a6d6c28fab348
2017-11-15 23:49:16 +00:00
Treehugger Robot
15ab496b31 Merge "Add the correct NFC HAL library." 2017-11-15 23:44:50 +00:00
Jeff Vander Stoep
8da67c6ca9 Merge "Remove dumpstate HAL's access to radio app data" am: dc08a47024 am: 864b27eda6
am: 5fddf5544d  -s ours

Change-Id: I6556bb03a4a3101706f981d93722db664f2a9d9b
2017-11-15 22:18:10 +00:00
Jeff Vander Stoep
5fddf5544d Merge "Remove dumpstate HAL's access to radio app data" am: dc08a47024
am: 864b27eda6

Change-Id: Icd51489793bbfb79686b7bd5f51589944e617ebf
2017-11-15 22:16:36 +00:00
Jeff Vander Stoep
864b27eda6 Merge "Remove dumpstate HAL's access to radio app data"
am: dc08a47024

Change-Id: I2ead3b84bf4e792a2791ba0877c338f4e07b61eb
2017-11-15 22:14:35 +00:00
Treehugger Robot
dc08a47024 Merge "Remove dumpstate HAL's access to radio app data" 2017-11-15 22:07:22 +00:00
Jeff Vander Stoep
64805d4e9c Merge changes I23f5d887,I7f65224b am: a3c5fdbfc3 am: 54a4466be9
am: 283fc24c21  -s ours

Change-Id: I288af46061c07a168f135df4b7e8b97debcec7d4
2017-11-15 21:53:35 +00:00
Jeff Vander Stoep
283fc24c21 Merge changes I23f5d887,I7f65224b am: a3c5fdbfc3
am: 54a4466be9

Change-Id: I67089f62df8e9bb98163ba1931140370e61c86d3
2017-11-15 21:49:34 +00:00
Ruchi Kandoi
2e5f03b821 Add the correct NFC HAL library.
NXP HAL library has a board platform suffix instead of product target.

Test: HAL library loaded correctly on boot
Change-Id: I6d794987140e604853945c2b3d29320a2e4a23a9
2017-11-15 13:48:43 -08:00
Jeff Vander Stoep
54a4466be9 Merge changes I23f5d887,I7f65224b
am: a3c5fdbfc3

Change-Id: I4367232e00d50c245e6c5034da9ea6d85e28440b
2017-11-15 21:47:08 +00:00
Treehugger Robot
a3c5fdbfc3 Merge changes I23f5d887,I7f65224b
* changes:
  Remove system_server access to location daemon's data
  Remove dumpstate's access to modem dump file
2017-11-15 21:35:03 +00:00
Wei Wang
b7edad7cf6 Merge "power: remove unused powerhint settings" 2017-11-15 21:23:11 +00:00
Jeff Vander Stoep
b93164076a Remove dumpstate HAL's access to radio app data
These permissions no longer appear to be needed.

Bug: 34980020
Test: adb bugreport, not denials for radio_data_file
Change-Id: Id20a3cc87d78ef547811dffe230d13772f1504b0
Merged-In: Id20a3cc87d78ef547811dffe230d13772f1504b0
(cherry picked from commit 97e8a770f6)
2017-11-15 12:55:38 -08:00
Jeff Vander Stoep
4c44680ee0 Remove system_server access to location daemon's data
These permissions no longer appear to be necessary, and violate
Treble separation of system/vendor data.

Bug: 34980020
Test: Launch google maps, get current location
Change-Id: I23f5d887fdcb400dd027431eabc4e744a08d4ea9
Merged-In: I23f5d887fdcb400dd027431eabc4e744a08d4ea9
(cherry picked from commit 9dccaa56ce)
2017-11-15 12:26:56 -08:00
Jie Song
d6a99d1db8 Remove dumpstate's access to modem dump file
Dumpstate is using the 2nd file descriptor to access dump file

Bug: 68044348
Test: Take bugreport, no denial for modem_dump_file and modem log is
valid

Change-Id: I7f65224bd3cc81258bccc3dbf419e52c1bcaeaa3
Merged-In: I7f65224bd3cc81258bccc3dbf419e52c1bcaeaa3
(cherry picked from commit b51ae72a5d)
2017-11-15 12:25:12 -08:00
Ecco Park
70484aa43d Merge "Dumpstate: add the Data.msc in the dumpstate_board.txt" 2017-11-15 18:22:36 +00:00
Wei Wang
f2bf7ef233 power: remove unused powerhint settings
1) remove GPU min freq from sustained mode as 257000000 is the lowest
   valid GPU frequency on msm8998
2) remove B/L CPU max freq setting from launch boost

Test: boot
Bug: 69271302
Change-Id: I32e13a8f5aa10eba242e1429823f1b9517e1634d
2017-11-14 21:37:25 -08:00
Jiyong Park
ccf137e26a DO NOT MERGE ANYWHERE Temporarily disable VNDK restriction for wahoo am: 632d1b2cbf -s ours am: 1ec57889cf -s ours
am: a2bbddcbdf  -s ours

Change-Id: I98e8916ef9d1db1a8decb2ea08aa1059d0d96d87
2017-11-15 02:04:39 +00:00
Jiyong Park
a2bbddcbdf DO NOT MERGE ANYWHERE Temporarily disable VNDK restriction for wahoo am: 632d1b2cbf -s ours
am: 1ec57889cf  -s ours

Change-Id: I4abacd6dd817857b736473a2bffb9a5aecdd4511
2017-11-15 01:36:41 +00:00
Ecco Park
2f79642331 Dumpstate: add the Data.msc in the dumpstate_board.txt
The file will be used to decode the wifi firmware in the bugreport
automatically in the wifi bugbot.

Bug: 69010177
Change-Id: I4db3b99fb704d0646ef3b0b8a31cd1592e165f16
Signed-off-by: Ecco Park <eccopark@google.com>
2017-11-15 01:30:44 +00:00
Jiyong Park
1ec57889cf DO NOT MERGE ANYWHERE Temporarily disable VNDK restriction for wahoo
am: 632d1b2cbf  -s ours

Change-Id: I8a60633dcda83e9769281ee24cfcba578bdf2873
2017-11-15 01:27:39 +00:00
Xin Li
ff3c9b529c Merge remote-tracking branch 'goog/stage-aosp-master' into HEAD
am: 4a1e81d506

Change-Id: If98ee075c2a114b27696e98fbdf0cf589546ae8e
2017-11-15 01:08:42 +00:00
Xin Li
4a1e81d506 Merge remote-tracking branch 'goog/stage-aosp-master' into HEAD
Change-Id: I8cbb198d7eb182abc0af98780659c92e76ae4583
2017-11-14 16:38:07 -08:00
Xin Li
9ba9e412f6 Merge commit '34f7f32ea4cca137547463132f06cb93dc8d04b3' from
oc-mr1-dev-plus-aosp-without-vendor into stage-aosp-master

Change-Id: I1f549411c9b9219fae6e602569778ae36c511055
2017-11-14 11:49:25 -08:00
Jiyong Park
632d1b2cbf DO NOT MERGE ANYWHERE Temporarily disable VNDK restriction for wahoo
Bug: 68710251
Test: aosp_walleye, aosp_taimen boots to the UI
Change-Id: I2decd5c12b45b574ec80226cde7e4b234d0d23f1
2017-11-14 17:01:10 +09:00
Lennart Wieboldt
d370ecafbb wohoo: remove cpuset foreground boost am: 150af4c811 am: 155dbc92ae
am: 25f89d640c

Change-Id: Iab7a217787b978a3cc8bb39e151563af12c7aae5
2017-11-14 05:41:37 +00:00
Lennart Wieboldt
25f89d640c wohoo: remove cpuset foreground boost am: 150af4c811
am: 155dbc92ae

Change-Id: Ib172d07c29fa2bed77afa7db3660f8bbdcd440c9
2017-11-14 05:39:07 +00:00
Lennart Wieboldt
155dbc92ae wohoo: remove cpuset foreground boost
am: 150af4c811

Change-Id: I5ea9a2a329cc0ed29fe1ee36520315282ed25a19
2017-11-14 05:37:04 +00:00
Lennart Wieboldt
150af4c811 wohoo: remove cpuset foreground boost
Cpuset foreground boost is departed since
https://android.googlesource.com/platform/frameworks/base/+/a712d4058f6f85268838

Change-Id: Iab1834dbb8cce15480b5e11968bcfff7cc80177e
Signed-off-by: Lennart Wieboldt <lennart.1997@gmx.de>
2017-11-14 05:33:39 +00:00