Commit Graph

2377 Commits

Author SHA1 Message Date
Badhri Jagan Sridharan
ecfc861e1e DO NOT MERGE :Usb Gadget hal implementation for wahoo
Bug: 63669128
Test: Tested USB gadget configurations and verified
that they enumerated.
Change-Id: If0f98697488f6c7cfe335d4c292acebaaba6c20f
2018-01-26 00:23:21 +00:00
Jeff Vander Stoep
3102a99db4 cnss_diag: Track selinux denial
Fix presubmit tests.

Bug: 72133934
Test: build
Change-Id: I72a95bffbaddb4373d761481462b2a0dabf25604
2018-01-17 22:35:54 -08:00
Treehugger Robot
6e436920a3 Merge "Remove copy/pasta code around DEX_PREOPT." 2018-01-18 01:36:07 +00:00
Treehugger Robot
d66f810d1e Merge "Allow hvx hal to open application fd" 2018-01-17 22:50:22 +00:00
Michael Butler
c02f290a1d Allow hvx hal to open application fd
Bug: 67478959
Test: mm, vts, cts
Change-Id: I36ffcbc97b1f70dc6e19ec344903c38adc3f2311
(cherry picked from commit fdabd93272ed99d47e10217620eb2659e78db185)
2018-01-17 13:08:00 -08:00
Nicolas Geoffray
7108ed5b85 Remove copy/pasta code around DEX_PREOPT.
Test: m
Change-Id: I4300eb093ece3293071b81a7f908fa181fbdaacd
2018-01-17 11:23:33 +00:00
Jeff Vander Stoep
df8a9ee6c6 sepolicy: move denial tracking to core policy
Bug: 68864350
Test: build
Change-Id: I28478fd9588023a8c43ee64b087476b8a074a0fd
2018-01-16 19:44:58 -08:00
Edwin Wong
a74d5f7707 Merge "Move persistent data to /data/vendor." 2018-01-17 02:17:55 +00:00
Tri Vo
6113e178c3 system_executes_vendor_violators: google_camera_app and tango_core
Bug: 62041836
Test: policy builds
No rules were added to google_camera_app and tango_core domains

Change-Id: Ib8605db10d28998ca564bf9f17a1a89a1b76d504
2018-01-16 10:01:10 -08:00
Edwin Wong
361214d17c Move persistent data to /data/vendor.
HALs are only allow to access files in /data/vendor starting
in Pi. Change SELinux policy to move data from /data/mediadrm
to /data/vendor/mediadrm.

Test: Play Movies & TV, Netflix
  Ensure offline playback works after the move.

bug: 36601695
Change-Id: Ie7ed580036fe0b6113eb4c39210e90dc08478230
2018-01-15 14:52:04 -08:00
Jeff Vander Stoep
99e7af062f vendor_init: allow reading sys.modem.diag property
Test: build wahoo policy
Change-Id: Iaa5c1c26a6a41fdb9c33bbad44b461e7bc898f23
2018-01-12 23:40:52 -08:00
Treehugger Robot
d1c8174061 Merge "Allow widevine drm hal to access allocator hal" 2018-01-04 21:52:52 +00:00
Jeff Tinker
9246d7f0de Allow widevine drm hal to access allocator hal
This fixes failing vts drm tests

bug:67675811

Change-Id: Ic489b4cfac383e809f9c1f0503c337dce21a100e
2018-01-03 23:43:04 +00:00
Ke Bai
401c245984 easel.te: read access to sysfs_thermal
Bug: b/70857705
Test: manual

Change-Id: I539f3cbc9fe69aa0c3f5bbf21599c0a126594188
2018-01-03 18:26:13 +00:00
Treehugger Robot
ec90390658 Merge "Label sysfs_rtc files." 2017-12-30 04:56:53 +00:00
Chenjie Luo
d2afaced27 Revert "Use TARGET_EASEL_VARIANT := amber for Pixel 2017"
This reverts commit 2426e17acb.

Reason for revert: moved to vendor

Change-Id: I0971b89ad22599f01b3406fe4641bea9d2f721f5
2017-12-28 18:58:59 +00:00
Chenjie Luo
2426e17acb Use TARGET_EASEL_VARIANT := amber for Pixel 2017
Bug: 70639754
Test: Build pass
Change-Id: Ie2127b936318acd516deba975b1b37a45d4b1190
2017-12-27 10:01:25 -08:00
Isaac Chen
b74b44f09e Set TARGET_2ND_ARCH_VARIANT to armv8-a
Taimen and Walleye are armv8 devices. Setting TARGET_2ND_ARCH_VARIANT
to armv8-a, instead of armv7-a-neon, can silence the related warning
during build.

Bug: 68012286
Test: lunch aosp_taimen; make -j
      lunch aosp_walleye; make -j

Change-Id: I9c81e614a7f103cd93c9c2d915d53577e8d19d2d
Merged-In: I9c81e614a7f103cd93c9c2d915d53577e8d19d2d
(cherry picked from commit 2195c105e5)
2017-12-23 11:43:12 +00:00
Tri Vo
6928c47605 Label sysfs_rtc files.
We expect all files under /sys/class/rtc to be labeled sysfs_rtc.
/sys/class/rtc/rtc0 is a symlink to
/sys/devices/soc/800f000.qcom,spmi/spmi-0/spmi0-00/800f000.qcom,spmi:qcom,pm8998@0:qcom,pm8998_rtc/rtc/rtc0

Bug: 68018685
Test: walleye boots with no denials to /sys/class/rtc/*.
Change-Id: Iacf2b55ae365661be29016729d5517403ff6e9a1
2017-12-19 13:09:19 -08:00
Yifan Hong
aff453d9ed Merge "Remove PRODUCT_COMPATIBILITY_MATRIX_LEVEL_OVERRIDE" 2017-12-15 18:58:34 +00:00
Jiyong Park
370aeb269e android.hardware.thermal@1.0-wahoo can be a static lib
thermal-engine, which is a proprietary module for msm8998, is now
statically linking to this library.

Bug: 70551668
Test: walleye is buildable and boots to the UI
Merged-In: I1417a9632f89869f2f8e3dc786c3f1c9fae9e45a
Change-Id: I1417a9632f89869f2f8e3dc786c3f1c9fae9e45a
(cherry picked from commit 787a4648f2)
2017-12-15 15:01:52 +09:00
Yifan Hong
5d5386d676 Remove PRODUCT_COMPATIBILITY_MATRIX_LEVEL_OVERRIDE
Replace it with FCM Version = 2, specified explicitly
in device manifest.

Test: builds
Bug: 69636193

Change-Id: I0f5689344bb7b10b2b5db2549e95c940c4812f9d
Merged-In: I0f5689344bb7b10b2b5db2549e95c940c4812f9d
2017-12-14 15:36:02 -08:00
Tri Vo
2a6f537080 Label vendor sys/*/power_supply/* as sysfs_batteryinfo
thermal-engine access to sysfs_batteryinfo.

Bug: 65643247
Bug: 70275668
Test: device boots with no denial to sysfs_batteryinfo or
sysfs_msm_subsys.

Change-Id: I09fd4057282236edfabc43fd2b4209fcee4e8332
2017-12-12 22:33:04 +00:00
Tri Vo
4b90c93c5f Merge "Label /sys/devices/soc/18800000.qcom,icnss/net" 2017-12-09 21:40:37 +00:00
Tri Vo
a3333a875a Label /sys/devices/soc/18800000.qcom,icnss/net
The following symlinks are under /sys/class/net:
/sys/class/net/p2p0 -> /sys/devices/soc/18800000.qcom,icnss/net/p2p0
/sys/class/net/wlan0 -> /sys/devices/soc/18800000.qcom,icnss/net/wlan0
and we expect everything under /sys/class/net to be labeled sysfs_net.

Bug: 65643247
Test: netd_integration_test
Test: can browse internet without denials to sysfs_net

Change-Id: Ie92ac36b34f86847aaaef2199b9f3aaae05d991b
2017-12-08 16:13:28 -08:00
Treehugger Robot
cddea04f14 Merge "Rename libnfc-brcm.conf -> libnfc-nci.conf" 2017-12-08 18:30:18 +00:00
Andre Eisenbach
40d20d0fb0 Rename libnfc-brcm.conf -> libnfc-nci.conf
Test: manual
Merged-In: I9655a14e021024540cf342022cb817e1f8d0f9ad
Change-Id: I9655a14e021024540cf342022cb817e1f8d0f9ad
2017-12-08 16:47:39 +00:00
Kevin Chyn
4b55a6ca98 Allow Sensors HAL to connect with CHRE Daemon
Bug: 69386746

Test: On master, able to connect to CHRE Daemon without
      using adb shell setenforce 0
Change-Id: I590e495e4f032d8928ea1aa8264a285e1d424078
2017-12-07 13:37:23 -08:00
Jeff Vander Stoep
65ab5a73f5 Annotate boot denials
Test: build
Bug: 70180742
Bug: 70308329
Change-Id: I16ad0c4b01452a7d7e23d1f467f56501db37329f
2017-12-06 22:08:06 -08:00
Xin Li
97b8876c66 DO NOT MERGE: Merge Oreo MR1 into master
Exempt-From-Owner-Approval: Changes already landed internally
Change-Id: I14033f4737f74831ff8545664832b7e8f17f8f59
2017-12-06 14:24:44 -08:00
Ajay Dudani
7164b2c4d4 dumpstate: Add battery type to bugreport & fixup sepolicy
am: 22f01a2fa0

Change-Id: Ic0fa85622c4f0cb0ec77e88a39d05b81fd3c1513
2017-12-06 02:18:19 +00:00
Ajay Dudani
2381f51ba5 sepolicy: Allow rpm and wifi power stats in user builds
am: 6cbc6d9104

Change-Id: I9080f9f54241f5a18e4bf179331c2509c28212ac
2017-12-06 02:17:51 +00:00
Ajay Dudani
22f01a2fa0 dumpstate: Add battery type to bugreport & fixup sepolicy
Add sepolicy for this operation, and update sepolicy to allow
collecting batteryinfo in bugreport for user builds.

Bug: 70094701, 70094083
Test: Take bugreport, verify battery type is present
Change-Id: Id67776301e2ed39a283a08483ac5eb8125aba96b
2017-12-05 14:36:30 -08:00
Ajay Dudani
6cbc6d9104 sepolicy: Allow rpm and wifi power stats in user builds
In order to enable debugging of power issues on 'user' builds, we need
to capture rpm stats and wifi power stats from debugfs.  Allow this
for user builds.

Bug: 69003183
Test: Verify rpm & wifi power stats are present in bugreport
Change-Id: If9754137f9331832d055ee39d3fd3d5ec79cfc15
2017-12-05 12:32:30 -08:00
Jeff Vander Stoep
fb9dbfebcc Merge "wifi_supplicant: deprecate entropy.bin"
am: 5ded7d8a1c

Change-Id: Ifdcf8c25340608bf82f4699609dcebd12c7a9f47
2017-12-01 06:41:42 +00:00
Treehugger Robot
5ded7d8a1c Merge "wifi_supplicant: deprecate entropy.bin" 2017-12-01 06:36:39 +00:00
Jeff Vander Stoep
0a81570cb9 wifi_supplicant: deprecate entropy.bin
Wpa_supplicant's random pool is not necessary on Android. Randomness
is already provided by the entropymixer service which ensures
sufficient entropy is maintained across reboots. Commit b410eb1913
'Initialize /dev/urandom earlier in boot' seeds /dev/urandom with
that entropy before either wpa_supplicant or hostapd are run.

Bug: 34980020
Test: Use wifi and wifi tethering on Taimen
Change-Id: Ib5caf362bc939911b357db186a274957d3fbf186
2017-11-30 12:57:55 -08:00
Jeff Vander Stoep
c04078c166 Merge "Remove obsolete /data/ramdump sepolicy"
am: 80c738e7ab

Change-Id: I25bafcbb91501a5495a2cc554d43be67c7b7a4ec
2017-11-30 01:24:25 +00:00
Treehugger Robot
80c738e7ab Merge "Remove obsolete /data/ramdump sepolicy" 2017-11-30 01:14:19 +00:00
Jeff Vander Stoep
b33775465b Remove obsolete /data/ramdump sepolicy
No domain has access to this type/location.

Test: build
Bug: 34980020
Change-Id: Icd7e58a1e8a46f603bfb651a4654ddf020e684a0
2017-11-29 10:34:20 -08:00
Jeff Vander Stoep
201fc696bd sepolicy: Remove tracking of resolved denial
am: d90b6a6589

Change-Id: I0f3a4750522a6ed4c247c359398b62eddf09afd2
2017-11-28 18:23:54 +00:00
Max Bires
9be94e1031 Removing entry from bug_map that belongs in global policy
am: 8dfbc9c280

Change-Id: I301105abf86b0108554609ccde4585649e6a0479
2017-11-28 17:57:53 +00:00
Jeff Vander Stoep
d90b6a6589 sepolicy: Remove tracking of resolved denial
Bug: 67860826
Test: build
Change-Id: I9e7bb8e0af75e499d024228e26abf12ff4418d55
2017-11-28 08:10:31 -08:00
Max Bires
8dfbc9c280 Removing entry from bug_map that belongs in global policy
Test: entry no longer exists in this file
Change-Id: I8b16c772983dfd79a54cd049ba3295cc6cdecd41
(cherry picked from commit d946b273ba)
2017-11-28 08:09:48 -08:00
Jeff Vander Stoep
508cfa70b8 Merge "This change is primarily a revert of 611c3d70a"
am: 3bd6a7ab6f

Change-Id: Iedfc834e35dac481cdf49df8917256164f740b1a
2017-11-22 21:26:35 +00:00
Treehugger Robot
3bd6a7ab6f Merge "This change is primarily a revert of 611c3d70a" 2017-11-22 21:21:13 +00:00
Tom Cherry
99955d9cdf Merge "Move mkdir /data/nfc/... to rootdir init.rc"
am: e3ffe7bffd

Change-Id: I7c32865226dad0393aea804533e8edf1b0fa8d94
2017-11-22 20:03:56 +00:00
Tom Cherry
e3ffe7bffd Merge "Move mkdir /data/nfc/... to rootdir init.rc" 2017-11-22 19:56:10 +00:00
Jeff Vander Stoep
8d21715fc2 This change is primarily a revert of 611c3d70a
Commit 611c3d70a "Move hal_bootctl rules to hal_bootctl_default"
breaks sideloading OTAs. It was introduced to fix a CTS regression
due to overly broad access to the vendor-owned misc_block partition.
The change also did a refactor of permissions for the bootctl HAL.

The fix leaves the one-line CTS fix in place and reverts the rest of
the refactor. This results in no change in permissions for the recovery
process which is already granted access to the misc_block partion in
core policy. "allow recovery dev_type:blk_file rw_file_perms;"

Bug: 69566734
Test: adb sideload ota
Change-Id: I67504482b166e1cf278be213e42bfde2ddfa6e67
2017-11-22 19:18:52 +00:00
Jeffrey Vander Stoep
5dc4c280f7 Merge "Move hal_bootctl rules to hal_bootctl_default"
am: cee6d6db58

Change-Id: I608d31eae81625a48e75dd143c13156b4ab5acc9
2017-11-22 04:58:37 +00:00