Commit Graph

905 Commits

Author SHA1 Message Date
Naveen Kalla
d30a7c79fd Add Settings overlay
Add Settings app overlays to
1) remove unwanted UI menu option "mobile_plan"
2) Use "WLAN Call" instead of "Wi-Fi Calling" Setting for DTAG

Bug: 62285528
Bug: 34396511
Test: Manual
Change-Id: I30fe6760c90dec3b9c988dc6d8d563d6e477b8ef
2017-06-19 18:55:05 +00:00
Roopesh Rajashekharaiah Nataraja
69bdf39fd5 Ensure treble compliance for time-service
- Use /data/vendor/time instead of /data/time
- Use /persist/time instead of /persist
- Allow vendor to vendor socket communication

Bug: 62184939
Bug: 62256376
Change-Id: Ia1c27cf3dfa393abcbf860249da8e7669c359ad9
2017-06-19 10:55:43 -07:00
Thierry Strudel
46898311ec init.hardware.rc: keep bootloader brightness at boot
Bug: 37424532
Change-Id: I83e59c2907df317ce375e80e29e75c3c9f414d38
Signed-off-by: Thierry Strudel <tstrudel@google.com>
2017-06-19 10:55:15 -07:00
Eino-Ville Talvala
9da8401acb Allow Hexagon DSP access to GoogleCamera application
- Add custom domain for GoogleCamera, with QDSP access
- Add app cert for Google apps
- Add new hexagon_halide_file type, apply it to two critical DSP
  libraries, and grant GoogleCamera access to them.
- Also allow tango_core access to hexagon_halide_file
- Remove /vendor/lib/libhalide_hexagon_host from
  same_process_hal_file, it's not used by anything currently.
- Move access to persist.camera.* properties to the generic app domain

Test: GoogleCamera able to use Hexagon for HDR+
Bug: 62712071
Bug: 62341955
Change-Id: I2c49c35d9f90d07b148a2f27d0f8128f99b55b6c
2017-06-17 18:49:58 -07:00
TreeHugger Robot
99be275e1e Merge "walleye & taimen: Add in-band ringing support" into oc-dr1-dev 2017-06-17 06:15:08 +00:00
TreeHugger Robot
d4679d5a8c Merge changes from topic 'speaker-safe' into oc-dr1-dev
* changes:
  Revert "Revert "Update audio policy configuration""
  audio: fix incorrect policy configuration
2017-06-17 04:48:24 +00:00
TreeHugger Robot
4aa311afe0 Merge "Set system time early to get more accurate timezones" into oc-dr1-dev 2017-06-17 04:19:22 +00:00
TreeHugger Robot
c0f726b251 Merge "init: remove persist partition mount" into oc-dr1-dev 2017-06-17 03:24:03 +00:00
David Lin
f9f9c80b7a sepolicy: allow ueventd to load calibration file on /persist
This patch adds the sepolicy to allow ueventd to load a calibration file
via a symlink on /vendor/firmware pointing to a file on /persist.

Bug: 62683712
Test: audio sanity test
Change-Id: Id16c947578b8860186a25e01ab64131d640a3004
Signed-off-by: David Lin <dtwlin@google.com>
2017-06-16 18:12:12 -07:00
Thierry Strudel
1b5fe2a540 Merge changes from topic 'merge-msm8998-AU210' into oc-dr1-dev
* changes:
  netmgrd: Change binary location to netutils
  Introduce cne server and apiservice hal
  Update IMS and radio SE policies based on AU 194 drop
  Adding contexts and allows for time_daemon
2017-06-17 00:09:08 +00:00
TreeHugger Robot
4eb8e11c2c Merge "Add spn-conf.xml for wahoo" into oc-dr1-dev 2017-06-16 23:36:33 +00:00
Thierry Strudel
77199d72f8 Merge "suppress spurious module loading denials" into oc-dr1-dev 2017-06-16 22:29:12 +00:00
Ecco Park
1cbbad1f55 Merge "wifi: add the read permission for /proc/ath_pktlog/cld" into oc-dr1-dev 2017-06-16 20:33:07 +00:00
David Lin
818f79613f Revert "Revert "Update audio policy configuration""
This reverts commit d1f39f3f2a.

Bug: 35675592
Test: ringtone on speaker and USB headset
Change-Id: Ibbef05c2acdd8e588ea5936c03f33b12311e683c
Signed-off-by: David Lin <dtwlin@google.com>
2017-06-16 11:35:15 -07:00
David Lin
26642a8ba8 audio: fix incorrect policy configuration
Fix an incorrect setting on voice_rx mixport

Bug: 62393776
Test: voip call
Change-Id: Ie3bc1f124bc8fb3bc07aa175366c6edfa3c3411a
Signed-off-by: David Lin <dtwlin@google.com>
2017-06-16 11:31:14 -07:00
Ecco Park
ca38bc851d wifi: add the read permission for /proc/ath_pktlog/cld
Error:
type=1400 audit(1497566325.222:1870): avc: denied { read
} for pid=963 comm="cnss_diag" name="cld" dev="proc" ino=4026533982
scontext=u:r:wcnss_service:s0 tcontext=u:object_r:proc:s0 tclass=file
permissive=0

Bug: 36823983

Change-Id: Ie231bedccfc75d020e7a467d9b87b0e44e46fad2
Signed-off-by: Ecco Park <eccopark@google.com>
2017-06-16 11:09:51 -07:00
Jack He
4a3ca353af walleye & taimen: Add in-band ringing support
Bug: 19171297
Test: make, HFP regression, testplans/92476, testplans/92112
Change-Id: I58315452e02219a27f6bf87fe600de76d84a595e
2017-06-16 11:09:48 -07:00
David Lin
47b8ccab8b init: remove persist partition mount
This patch removes the /persist partition mount since it's been moved to
early-mount.

Bug: 62683712
Test: boot & audio sanity test
Change-Id: Ifff57f23db3aa221885331eaccc532d753e7e730
Signed-off-by: David Lin <dtwlin@google.com>
2017-06-16 10:10:09 -07:00
Thierry Strudel
4c80a57708 Merge "Add tangomapper and tango cts to tango_core SE context" into oc-dr1-dev 2017-06-16 17:00:51 +00:00
Subash Abhinov Kasiviswanathan
664f2d4397 netmgrd: Change binary location to netutils
Generic system partition binaries are no accessible on latest
versions of AOSP. As a result, use the netutils wrapper equivalents
of ip[6]tables, ip and tc. Fix the following denials -

type=1400 audit(1495499715.886:76): avc: denied { use } for pid=1370
comm="tc-wrapper-1.0" path="pipe:[28029]" dev="pipefs" ino=28029
scontext=u:r:netutils_wrapper:s0 tcontext=u:r:netmgrd:s0 tclass=fd
permissive=0
type=1400 audit(159.269:260): avc: denied { write } for pid=1612
comm="ndc-wrapper-1.0" path="pipe:[30233]" dev="pipefs" ino=30233
scontext=u:r:netutils_wrapper:s0 tcontext=u:r:netmgrd:s0
tclass=fifo_file permissive=0
type=1400 audit(159.269:267): avc: denied { read } for pid=1612
comm="ndc-wrapper-1.0" path="pipe:[30809]" dev="pipefs" ino=30809
scontext=u:r:netutils_wrapper:s0 tcontext=u:r:netmgrd:s0
tclass=fifo_file permissive=0
type=1400 audit(10632.149:134): avc: denied { read write } for
pid=1523 comm="ndc-wrapper-1.0" path="socket:[28342]" dev="sockfs"
ino=28342 scontext=u:r:netutils_wrapper:s0 tcontext=u:r:netmgrd:s0
tclass=netlink_socket permissive=0
type=1400 audit(3510988.283:134): avc: denied { module_request } for
pid=773 comm="netmgrd" kmod="netdev-rmnet_ipa0"
scontext=u:r:netmgrd:s0 tcontext=u:r:kernel:s0 tclass=system
permissive=0
type=1400 audit(1496866410.453:216): avc: denied { read } for
pid=810 comm="netmgrd" name="timestamp_switch" dev="sysfs" ino=27263
scontext=u:r:netmgrd:s0 tcontext=u:object_r:sysfs_timestamp_switch:s0
tclass=file permissive=0
type=1400 audit(1496882073.170:67506) avc: denied { open } for pid=822
comm="netmgrd" path="/sys/module/diagchar/parameters/timestamp_switch"
dev="sysfs" ino=27263 scontext=u:r:netmgrd:s0
tcontext=u:object_r:sysfs_timestamp_switch:s0 tclass=file permissive=0
audit(1496448874.298:224) avc: denied { read write } for pid=3976
comm="iptables-wrappe" path="socket:[35109]" dev="sockfs" ino=35109
scontext=u:r:netutils_wrapper:s0 tcontext=u:r:netmgrd:s0
tclass=tcp_socket permissive=1
audit(1496448785.385:139) avc: denied { getattr } for pid=1709
comm="ndc" path="pipe:[31264]" dev="pipefs" ino=31264
scontext=u:r:netutils_wrapper:s0 tcontext=u:r:netmgrd:s0
tclass=fifo_file permissive=1

CRs-Fixed: 2054108

Test: Verified that the LTE data and WiFi calling works
Bug: 62258789

Change-Id: I91e663ab35369f75d33ef4788c87bde14605f6b9
2017-06-16 09:21:30 -07:00
Jayachandran C
8466d682ec Introduce cne server and apiservice hal
Replace protobuf over socket with hidl.

Bug: 38043081
Bug: 37153322

Change-Id: I9884386a8d66f1abd5a1a37ec7c6ff8fcccde33f
2017-06-16 09:21:30 -07:00
Jayachandran C
25591f24ea Update IMS and radio SE policies based on AU 194 drop
Permissive to enforce for ims and cnd domains
Introduce new CNE HIDL service
Remove CNE talking to cnd via socket and move to HIDL
Allow IMS to access sysfs data and diag files
Allow radio to access telephony monitor property

Bug: 38043081

Change-Id: I1775d6aea4de9843fdbedd06ebd71ec213f38189
2017-06-16 09:21:30 -07:00
Max Bires
b7c0dc9aaf Adding contexts and allows for time_daemon
denied { write } for pid=741 comm="time_daemon" name="time" dev="sda10"
ino=335873 scontext=u:r:time_daemon:s0
tcontext=u:object_r:system_data_file:s0 tclass=dir

denied { search } for pid=825 comm="time_daemon" name="time" dev="sda10"
ino=335873 scontext=u:r:time_daemon:s0
tcontext=u:object_r:time_data_file:s0 tclass=dir

denied { create } for pid=894 comm="time_daemon" name="ats_13"
scontext=u:r:time_daemon:s0 tcontext=u:object_r:time_data_file:s0
tclass=file

denied { create } for pid=820 comm="time_daemon" name="ats_13"
scontext=u:r:time_daemon:s0 tcontext=u:object_r:persist_file:s0
tclass=file

denied { search } for pid=834 comm="time_daemon" name="time" dev="sda4"
ino=23 scontext=u:r:time_daemon:s0
tcontext=u:object_r:persist_time_file:s0 tclass=dir

denied { write } for pid=865 comm="time_daemon" name="time" dev="sda4"
ino=23 scontext=u:r:time_daemon:s0
tcontext=u:object_r:persist_time_file:s0 tclass=dir

Bug: 34784662
Bug: 38415848
Test: time works
Change-Id: I4e859761f32bb0e203e1047f5c491602efcc43b0
(cherry picked from commit 59425a13e6)
2017-06-16 09:21:30 -07:00
TreeHugger Robot
daa2ff2508 Merge "Fix denials for xtra-daemon file creation" into oc-dr1-dev 2017-06-16 01:43:21 +00:00
TreeHugger Robot
ef7dedbfe8 Merge "Remove treble violations from sepolicy" into oc-dr1-dev 2017-06-16 01:06:24 +00:00
Naveen Kalla
2284c8495a Set system time early to get more accurate timezones
Zygote reads the system time and caches the timezone information.
So start time_daemon early so that it can set the time before
zygote starts up and reads the time.

Bug: 62473512
Test: Manual: Check adb logs to ensure Zygote starts after system
              time is set.

Change-Id: I98fca37928e1822614f9fcb39869e664453a2c3e
2017-06-16 01:01:00 +00:00
Jeff Vander Stoep
a287c3bb29 suppress spurious module loading denials
We only load modules during boot, on only by a single script:
init.insmod.sh

Other denials are caused by code we don't rely on that
automatically looks for modules.

Bug: 34784662
Test: build policy
Change-Id: Iccdbe52582e9960f49ecb4ba9b472cf792e48fe6
2017-06-15 15:38:56 -07:00
Ranjith Kagathi Ananda
e84735870c Add tangomapper and tango cts to tango_core SE context
* Add com.google.tango.* to tango_core SE context
* Replace the key.pem used for tango apps for userbuild.
    Use a release key instead of dummy key
* Resolve denials for tango_core:

avc: denied { search } for name="/" dev="sdd3" ino=2
scontext=u:r:tango_core:s0:c512,c768 tcontext=u:object_r:persist_file:s0
tclass=dir permissive=0

avc: denied { search } for name="sensors" dev="sdd3" ino=16
scontext=u:r:tango_core:s0:c512,c768
tcontext=u:object_r:persist_sensors_file:s0 tclass=dir permissive=0

avc: denied { getattr } for
path="/persist/sensors/calibration/calibration.xml" dev="sdd3" ino=38
scontext=u:r:tango_core:s0:c512,c768
tcontext=u:object_r:persist_sensors_file:s0 tclass=file permissive=1

avc: denied { open } for
path="/persist/sensors/calibration/calibration.xml" dev="sdd3" ino=38
scontext=u:r:tango_core:s0:c512,c768
tcontext=u:object_r:persist_sensors_file:s0 tclass=file permissive=1

avc: denied { read } for name="calibration.xml" dev="sdd3" ino=38
scontext=u:r:tango_core:s0:c512,c768
tcontext=u:object_r:persist_sensors_file:s0 tclass=file permissive=0

BUG=62581695
Test: Tested on walleye

Change-Id: Ifac77c8190e59d88c9f1a65ab451e7e060742082
2017-06-15 15:24:45 -07:00
Wyatt Riley
fc83072eed Fix denials for xtra-daemon file creation
avc: denied { create } for name="xtra.sqlite" scontext=u:r:location:s0
    tcontext=u:object_r:location_data_file:s0 tclass=file permissive=0
avc: denied { create } for name="nvparam.sqlite" scontext=u:r:location:s0
    tcontext=u:object_r:location_data_file:s0 tclass=file permissive=0
avc: denied { create } for name="pcid.data" scontext=u:r:location:s0
    tcontext=u:object_r:location_data_file:s0 tclass=file permissive=0

Thinner version of
https://partner-android-review.googlesource.com/#/c/840686/

Aligns with marlin

Bug: 62603830
Test: Build, run GPS, check denials
Change-Id: I8b0f11b73c09513a4c19232cfde03b378b93f8f3
2017-06-15 15:06:56 -07:00
Jeff Vander Stoep
bbc467932d Add domain for widevine HAL
Address:
[   14.701366] init: service drm-widevine-hal-1-0 does not have a
SELinux domain defined
avc: denied { ioctl } scontext=u:r:hal_drm_widevine:s0
tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file
avc: denied { open } scontext=u:r:hal_drm_widevine:s0
tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file
avc: denied { read write } scontext=u:r:hal_drm_widevine:s0
tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file

Bug: 62075360
Test: built and booted xyz_test-userdebug
Test: added account and watched video on Play movies. Listened
    to songs on Play Music
Change-Id: Id219da343b1268a7492b50f870334a1e7dc151d5
2017-06-15 21:45:31 +00:00
TreeHugger Robot
115b724ccd Merge "supress spurious firmware_file denial" into oc-dr1-dev 2017-06-15 21:34:22 +00:00
Jeff Vander Stoep
97f996a846 supress spurious firmware_file denial
avc: denied { search } comm="cnss-daemon" scontext=u:r:wcnss_service:s0
tcontext=u:object_r:firmware_file:s0 tclass=dir

Test: build policy
Bug: 34784662
Change-Id: Ic89abbfdb2b36cb35c5a7f14abb21c9464b60561
2017-06-15 12:25:27 -07:00
Meng Wang
a3f7b11d87 Add spn-conf.xml for wahoo
Bug: 62646036
Test: make - spn-conf.xml appears in /system/etc
Test: manual - see the bug
Change-Id: I842c312319c8e1329c38f83ac0ecd214f9080578
2017-06-15 12:13:35 -07:00
Jeff Vander Stoep
da1ebb7d92 Remove treble violations from sepolicy
Bug: 36570300
Bug: 36570130

Test: build and boot device
Change-Id: I248a31048a867a4e8a4a0c756936e9371d16d320
2017-06-15 11:26:24 -07:00
TreeHugger Robot
e6ee6b54ff Merge "Fixing hal_imsrtp timestamp read issue" into oc-dr1-dev 2017-06-15 18:23:57 +00:00
TreeHugger Robot
2d85910d9f Merge "Fixing a sensors issue" into oc-dr1-dev 2017-06-15 07:09:19 +00:00
Thierry Strudel
baf22be3bc Merge "wahoo: voip rx controls" into oc-dr1-dev 2017-06-15 05:33:28 +00:00
Haynes Mathew George
853aecdf9b wahoo: voip rx controls
mixer path additions
audio_platform info updates

Bug: 62393776
Test: hangout call
Change-Id: I7af811856846d8075e16ff8f540a7931d31581c9
Signed-off-by: David Lin <dtwlin@google.com>
2017-06-15 02:25:22 +00:00
Chris Thornton
2815735796 Merge "Remove unused modules and decrease buffer size to reduce fragmentation risk." into oc-dr1-dev 2017-06-15 01:00:16 +00:00
TreeHugger Robot
15f7fe745e Merge "Deprecate ril.subscription.types" into oc-dr1-dev 2017-06-14 19:43:42 +00:00
Pankaj Kanwar
30e8e49e85 Merge "add missing cfg to product packages" into oc-dr1-dev 2017-06-14 18:59:36 +00:00
Niranjan Pendharkar
f24953f875 add missing cfg to product packages
IPACM_cfg.xml is needed for ipacm configuration and needs to be installed.

CP from Partner.

Bug: 34361337
Test: manual
Change-Id: Ib7c4855ab758221feb7d5eb179ebe664c57f341b
2017-06-14 18:58:59 +00:00
Sandeep Patil
9e75e0ed2c rild: add radio to rild socket rule temporarily
The rule is added to ensure we dont break the radio to
rild communication once we remove the same rule from platform's
sepolicy for treble devices. This change MUST be reverted along with
the change to use HIDL between radio and rild domains.

Bug: 62616897
Bug: 62343727
Test: Build and boot.

Change-Id: I846389257bf9d40bac55299c24d2cf07c74e9092
Signed-off-by: Sandeep Patil <sspatil@google.com>
2017-06-14 09:12:50 -07:00
Thierry Strudel
e19f915247 Merge "Usb: HAL: Update wahoo HAL" into oc-dr1-dev 2017-06-14 05:40:55 +00:00
Badhri Jagan Sridharan
cb3e84691f Usb: HAL: Update wahoo HAL
This CL rebases wahoo HAL based on the kernel change to update
sysfs interface.

https://partner-android-review.googlesource.com/#/c/836088/

Bug: 62272992
Test: Verify USB dialog on wahoo
Change-Id: I8bc8f494176c7648abeb9783fbd18dc837793bda
2017-06-13 17:23:08 -07:00
Max Bires
187628ed87 Fixing a sensors issue
denial:
denied { write } for pid=7720 comm="sensors.qcom" name="sensors"
dev="sdd3" ino=16 scontext=u:r:sensors:s0
tcontext=u:object_r:persist_sensors_file:s0 tclass=dir

Bug: 62555317
Bug: 34784662
Test: sensors domain works properly
Change-Id: Ibb41c6c699282383e80a4cb80784ccc544787d71
2017-06-13 16:31:58 -07:00
Max Bires
59733a30d1 Fixing hal_imsrtp timestamp read issue
denied { read } for pid=1148 comm="ims_rtp_daemon"
name="timestamp_switch" dev="sysfs" ino=27258 scontext=u:r:hal_imsrtp:s0
tcontext=u:object_r:sysfs_timestamp_switch:s0 tclass=file

Bug: 34784662
Test: this denial no longer appears
Change-Id: I7760173500d8b9c5abbc3eeded1ffba04c49988f
2017-06-13 14:52:26 -07:00
TreeHugger Robot
b47fc7b552 Merge "haptics: move playback mode setting to on()" into oc-dr1-dev 2017-06-13 21:08:22 +00:00
TreeHugger Robot
d76cf1df96 Merge "audio: add policy configuation for mmap no irq mode" into oc-dr1-dev 2017-06-13 19:26:46 +00:00
TreeHugger Robot
d116fc4734 Merge "AOD: Use double tap coordinates to trigger Ambient Indication" into oc-dr1-dev 2017-06-13 19:00:40 +00:00