Commit Graph

566 Commits

Author SHA1 Message Date
TreeHugger Robot
f6e6f1a8db Merge "allow camera HAL to talk to perf" 2017-05-15 21:39:06 +00:00
TreeHugger Robot
6fb10addb5 Merge "wahoo: Add Bluetooth to manifest.xml" 2017-05-15 21:13:57 +00:00
Max Bires
c69dbf7e39 Merge "Fixing load of following denials" 2017-05-15 20:09:13 +00:00
Max Bires
ff88516eb0 Merge "Removing location from permissive mode and into enforcing" 2017-05-15 19:56:35 +00:00
Yueyao Zhu
8318aa1ad4 selinux: fix typo for dev block nodes dtbo_[ab]
Bug: 38131826
Change-Id: I3897ca0fe831f7f88640ef0e913a1cfe3e635949
2017-05-12 11:39:08 -07:00
Myles Watson
203ae704b5 wahoo: Add Bluetooth to manifest.xml
Bug: 35807479
Test: VtsHalBluetoothV1_0TargetTest, Pair two phones, LE scan, lshal
Change-Id: Ib6a8c54577ca1f149ec6ae296c049dd3560c0aab
2017-05-12 18:20:06 +00:00
Isaac Chen
b635787205 Move configuration files to vendor for build split
The following configuration files need to reside in vendor
partition to work with generic AOSP system image.

Move uevent.*.rc to /vendor
Move fstab.* to /vendor/etc
Move init.*.rc and init.wahoo.usb.rc to /vendor/etc/init.

Also the following two make file variables need to be set:
  - BOARD_PROPERTY_OVERRIDES_SPLIT_ENABLED := true
  - PRODUCT_ENFORCE_RRO_TARGETS := framework-res

Change path (to /vendor/bin) for init.*.sh, and add
path (to /vendor/etc) for fstab.* in init.hardware.rc.

Bug: 37927875
Test: These files are under /vendor instead of / or /system,
paths (in rc files) are changed to vendor accordingly,
and the resulted system/vendor images work on the device.

Change-Id: I64c8a899ab1c6837d51853e289160e35910b5b9a
2017-05-12 11:16:45 +08:00
TreeHugger Robot
98173c26b7 Merge "Add laf partition to file_contexts" 2017-05-12 02:08:10 +00:00
Wei Wang
35257586fb Merge changes Ibd89d8c1,I01610bd3
* changes:
  Enable ZRAM on wahoo
  Override heap growth limit to 256M
2017-05-12 01:09:32 +00:00
Zhijun He
fc8a9ad390 Merge "device.mk: disable default perf mode for encoder" 2017-05-11 22:33:49 +00:00
Ecco Park
dfe38fa8d7 Merge "Wifi: remove the WCNSS_qcom_cf.ini from wahoo" 2017-05-11 22:33:23 +00:00
Wei Wang
5db9bb4b63 Enable ZRAM on wahoo
Bug: 38242009
Bug: 37765310
Test: boot and dumpsys meminfo
Change-Id: Ibd89d8c102ca33bc878b91dbf8e76a6f37c6f0a0
2017-05-11 15:27:27 -07:00
Max Bires
8fc1a5eb1f Merge "Removing port-bridge from permissive mode and into enforcing" 2017-05-11 21:36:40 +00:00
Tao Bao
7a43b29f97 Merge "Set sys.usb.configfs so that recovery knows it's using configfs." 2017-05-11 21:30:36 +00:00
Ecco Park
1e280464e2 Wifi: remove the WCNSS_qcom_cf.ini from wahoo
The ini file will be picked up from device directory.

Bug: 38198219

Change-Id: Ie05de71da68169487da93372a9a19a12913fa468
Signed-off-by: Ecco Park <eccopark@google.com>
2017-05-11 21:28:56 +00:00
Wei Wang
5b02be8da5 Override heap growth limit to 256M
This is for high display density on device

Bug: 37765310
Bug: 38241506
Test: muskie boot
Change-Id: I01610bd309e532448c67c51c89a168fe441888e6
2017-05-11 14:12:26 -07:00
Glenn Kasten
0e6b7ed9b2 Merge "Temporary workaround to reduce audio glitches" 2017-05-11 20:50:23 +00:00
Max Bires
8ff7bf54cd Merge "Putting folio_daemon into enforcing mode." 2017-05-11 20:38:46 +00:00
Tao Bao
d38eccc66c Set sys.usb.configfs so that recovery knows it's using configfs.
Bug: 37713851
Test: Boot into recovery image. `adb devices` shows the device.
Test: 'sys.usb.configfs=1' according to /temp/recovery.log.
Change-Id: I3af7510ac0719bc97ef524a201d72567b58b5b1e
2017-05-11 11:55:18 -07:00
Glenn Kasten
699cac9518 Temporary workaround to reduce audio glitches
Test: see test case at bug
Bug: 37532694
Bug: 38234822
Change-Id: I27ce231272959e372589ada988173de4aa274d75
2017-05-11 11:23:22 -07:00
Max Bires
bb8db79246 Fixing load of following denials
denied { connectto } for pid=1017 comm="qseecomd"
path=0074696D655F67656E6F6666 scontext=u:r:tee:s0
tcontext=u:r:time_daemon:s0 tclass=unix_stream_socket

denied { search } for pid=1017 comm="qseecomd" name="/" dev="sda4" ino=2
scontext=u:r:tee:s0 tcontext=u:object_r:persist_file:s0 tclass=dir

denied { search } for pid=744 comm="qseecomd" name="data" dev="sdd3"
ino=18 scontext=u:r:tee:s0 tcontext=u:object_r:persist_data_file:s0
tclass=dir

denied { write } for pid=9351 comm="logcat" name="logd" dev="tmpfs"
ino=19484 scontext=u:r:system_server:s0
tcontext=u:object_r:logd_socket:s0 tclass=sock_file

denied { search } for pid=1027 comm="perfd" name="fb0" dev="sysfs"
ino=35328 scontext=u:r:perfd:s0 tcontext=u:object_r:sysfs_graphics:s0
tclass=dir

denied { read open } for pid=1027 comm="perfd" name="modes" dev="sysfs"
ino=35345 scontext=u:r:perfd:s0 tcontext=u:object_r:sysfs_graphics:s0
tclass=file

denied  { set } for property=net.r_rmnet_data0.dns1 pid=1033 uid=1001
gid=3003 scontext=u:r:netmgrd:s0 tcontext=u:object_r:system_prop:s0
tclass=property_service

denied { use } for pid=1012 comm="netd" path="socket:[218939]"
dev="sockfs" ino=218939 scontext=u:r:netd:s0
tcontext=u:r:hal_gnss_qti:s0 tclass=fd

denied { write } for pid=649 comm="Binder:649_2" name="mtu" dev="sysfs"
ino=59120 scontext=u:r:netd:s0 tcontext=u:object_r:sysfs_net:s0
tclass=file

denied { append } for pid=1044 comm="mediaextractor"
path="pipe:[149334]" dev="pipefs" ino=149334
scontext=u:r:mediaextractor:s0 tcontext=u:r:dumpstate:s0
tclass=fifo_file

denied { use } for pid=1050 comm="omx@1.0-service" path="pipe:[149339]"
dev="pipefs" ino=149339 scontext=u:r:mediacodec:s0
tcontext=u:r:dumpstate:s0 tclass=fd

denied { read open } for pid=3893 comm="ims_rtp_daemon" name="ion"
dev="tmpfs" ino=18545 scontext=u:r:ims:s0
tcontext=u:object_r:ion_device:s0 tclass=chr_file

denied { connectto } for pid=3891 comm="imsdatadaemon"
path="/dev/socket/cnd" scontext=u:r:ims:s0 tcontext=u:r:cnd:s0
tclass=unix_stream_socket

denied { write } for pid=3891 comm="imsdatadaemon" name="cnd"
dev="tmpfs" ino=9756 scontext=u:r:ims:s0
tcontext=u:object_r:cnd_socket:s0 tclass=sock_file

denied { search } for pid=572 comm="android.hardwar" name="/"
dev="sde19" ino=1 scontext=u:r:hal_keymaster_qti:s0
tcontext=u:object_r:firmware_file:s0 tclass=dir

denied { search } for pid=584 comm="android.hardwar" name="display"
dev="sda4" ino=43 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:persist_display_file:s0 tclass=dir

denied { connectto } for pid=664 comm="Loc_hal"
path="/dev/socket/netmgr/netmgr_connect_socket"
scontext=u:r:hal_gnss_qti:s0 tcontext=u:r:netmgrd:s0
tclass=unix_stream_socket

denied { write } for pid=664 comm="Loc_hal" name="netmgr_connect_socket"
dev="tmpfs" ino=31960 scontext=u:r:hal_gnss_qti:s0
tcontext=u:object_r:netmgrd_socket:s0 tclass=sock_file

denied { search } for pid=571 comm="android.hardwar" name="/"
dev="sde19" ino=1 scontext=u:r:hal_gatekeeper_qti:s0
tcontext=u:object_r:firmware_file:s0 tclass=dir

denied { connectto } for pid=660 comm="HwBinder:660_1"
path="/dev/socket/perfd" scontext=u:r:hal_camera_default:s0
tcontext=u:r:perfd:s0 tclass=unix_stream_socket

denied { getattr } for pid=13003 comm="df" path="/dev/block/sde19"
dev="tmpfs" ino=21967 scontext=u:r:dumpstate:s0
tcontext=u:object_r:modem_block_device:s0 tclass=blk_file

denied { getattr } for pid=11969 comm="dumpstate" path="/proc/modules"
dev="proc" ino=4026532149 scontext=u:r:dumpstate:s0
tcontext=u:object_r:proc_modules:s0 tclass=file

denied { getattr } for pid=13003 comm="df" path="/dev/block/sde28"
dev="tmpfs" ino=17995 scontext=u:r:dumpstate:s0
tcontext=u:object_r:system_block_device:s0 tclass=blk_file

denied { getattr } for pid=13003 comm="df" path="/persist" dev="sda4"
ino=2 scontext=u:r:dumpstate:s0 tcontext=u:object_r:persist_file:s0
tclass=dir

denied { search } for pid=11969 comm="dumpstate" name="leds" dev="sysfs"
ino=29583 scontext=u:r:dumpstate:s0 tcontext=u:object_r:sysfs_leds:s0
tclass=dir

denied { create } for pid=12103 comm="ip" scontext=u:r:dumpstate:s0
tcontext=u:r:dumpstate:s0 tclass=netlink_xfrm_socket

denied { read } for pid=12106 comm="top" name="stat" dev="proc"
ino=4026532103 scontext=u:r:dumpstate:s0
tcontext=u:object_r:proc_stat:s0 tclass=file

denied { sendto } for pid=8786 comm="wpa_supplicant"
path="/data/misc/wifi/sockets/wpa_ctrl_803-2"
scontext=u:r:hal_wifi_supplicant_default:s0 tcontext=u:r:cnd:s0
tclass=unix_dgram_socket

denied { sendto } for pid=1032 comm="cnd" path="/dev/socket/wpa_wlan0"
scontext=u:r:cnd:s0 tcontext=u:r:hal_wifi_supplicant_default:s0
tclass=unix_dgram_socket

denied  { set } for property=persist.sys.cnd.iwlan pid=1032 uid=1000
gid=1000 scontext=u:r:cnd:s0 tcontext=u:object_r:system_prop:s0
tclass=property_service

Bug: 34784662
Test: The above denials are no longer seen
Change-Id: I91b9516bff32b8afae93e5af317a3ffe48709cf0
2017-05-11 17:07:15 +00:00
Praveen Chavan
7d7606a2fe device.mk: disable default perf mode for encoder
Bug: 36696901
Change-Id: I99d5947801dbbbba34623c0b3e7ce905c0ebd55f
2017-05-11 16:01:47 +00:00
Max Bires
49c12398f0 Removing location from permissive mode and into enforcing
Bug: 34784662
Test: Location functions properly in enforcing mode
Change-Id: Iba636f6d01addc190e7e4c581c5f716ca8e945e4
2017-05-10 19:49:19 -07:00
Max Bires
6321bd8e3d Removing port-bridge from permissive mode and into enforcing
Bug: 34784662
Test: port-bridge continues to work as expected in enforcing mode
Change-Id: I8b84302919673face79e54b3a6de8fc458bc603c
2017-05-10 19:11:38 -07:00
Max Bires
d3ca10d532 Putting folio_daemon into enforcing mode.
Bug: 34784662
Test: folio_daemon continues to function while in enforcing
Change-Id: I9aefd2a8e95883a3782e63b8c4a3ed1ee5ca5435
2017-05-10 19:04:26 -07:00
TreeHugger Robot
9bce06c139 Merge "Revert "camera: enable full mode face detection by default"" 2017-05-11 01:12:43 +00:00
Adrian Roos
79cf7650b8 Merge "Disable DOZE_SUSPEND" 2017-05-11 00:02:35 +00:00
Zhijun He
cec3f91526 Revert "camera: enable full mode face detection by default"
This reverts commit 846ba1ccd3.

Change-Id: I566124516d8212d97b4ce97024ab217280443e16
2017-05-10 23:35:24 +00:00
Patrick Tjin
2b8a0815af Add laf partition to file_contexts
Bug: 37743272
Change-Id: I88d19fd6e537ee37bfd6dd256c69b3a37d15d435
2017-05-10 15:45:15 -07:00
Meng Wang
2230b62d70 Merge "Update Rogers/Fido APN" 2017-05-10 22:29:21 +00:00
Michael Wright
e1c6923c97 Disable DOZE_SUSPEND
Wahoo devices *do* support this, but there's no synchronization between
DOZE_SUSPEND and pushing frames, so we can't use it in practice.

Test: manual
Change-Id: I5ef2f5ac6407fa89aeb2f16fd7dcff140a055f43
2017-05-10 21:46:59 +01:00
Jie Song
6c49bffa20 Merge "Adding init script and SELinux support for qlogd" 2017-05-10 20:43:32 +00:00
Ahmed ElArabawy
910a77479e Merge "power hal: Add power HAL API 1.1 impl for Wahoo" 2017-05-10 20:37:49 +00:00
TreeHugger Robot
0740b8cb91 Merge "Add device compatibility matrix." 2017-05-10 19:54:57 +00:00
Jeff Vander Stoep
e7729bc10e allow camera HAL to talk to perf
avc: denied { connectto } path="/dev/socket/perfd"
scontext=u:r:hal_camera_default:s0 tcontext=u:r:perfd:s0
tclass=unix_stream_socket

Bug: 38200564
Change-Id: Ib68364976474200420c1b0d1953167a8594d4763
Test: policy builds
2017-05-10 12:51:34 -07:00
Max Bires
bed4cb170b Merge "Fixing the following denials" 2017-05-10 18:01:00 +00:00
Meng Wang
8910c0fcba Update Rogers/Fido APN
1. Merge ltemobile.apn into one entry
2. Rename Rogers Netsvcs APN
3. Add Fido Netsvcs APN

Bug: 37947461
Test: make
Change-Id: Ie97ed8c46fd3ee466d03af337424168a2fcbedca
2017-05-10 09:52:22 -07:00
Jie Song
18aecb7cb8 Adding init script and SELinux support for qlogd
Bug: 37115787
Change-Id: I64988953513cd0a7c2e861b5cad5fa6c1c7b9557
2017-05-10 09:27:57 -07:00
Pawin Vongmasa
3122f21f85 Merge "Update media_profiles.xml, add version, and move to vendor/etc" 2017-05-10 11:58:54 +00:00
Max Bires
687d2a7434 Merge "Fixing Taimen OTAs for enforcing before turning it on globally" 2017-05-10 02:17:53 +00:00
Yifan Hong
ffe4e0f348 Add device compatibility matrix.
Test: device boots
Bug: 37954458
Change-Id: I437a4506c17908e3107641bf6f1f0b25e4b17248
2017-05-09 15:29:38 -07:00
Thierry Strudel
a36f7d963e Merge changes from topic 'fstab-wahoo'
* changes:
  fstab.hardware: disable metadata encryption
  move fstab and BOARD_AVB_ENABLE to wahoo
2017-05-09 22:02:53 +00:00
Ahmed ElArabawy
c043816b3c power hal: Add power HAL API 1.1 impl for Wahoo
Add a full binderized implementation for Power hal

Many subsystems (e.g.wifi) could be living on an
independent power island (sourced from VBatt directly)
and might even have their own dedicated XTAL to source
their clocks. Since these SOCs are capable of
autonomously operating (while the platform is in one
of the sleep states), they are still drawing power
from the VBatt. Hence it is critical to understand
the  (SOC) level low power statistics as well when
the battery level changes and be able to find any
correlation in event of unexpected battery drain.

This commit adds the support of the Power Hal 1.1
to wahoo based devices(that includes Muskie/walleye).
This includes the new api for wlan specific power stats

Bug: 29339696
Test: Manual
Change-Id: Iee4e38f2d9ced31f8b6a333b535fa1d9a302ec26
Signed-off-by: Ahmed ElArabawy <arabawy@google.com>
2017-05-09 14:19:49 -07:00
Max Bires
30326ba8bf Fixing the following denials
denied  { write } for  pid=520 comm="ueventd" name="uevent" dev="sysfs"
ino=35415 scontext=u:r:ueventd:s0 tcontext=u:object_r:sysfs_graphics:s0
tclass=file

denied { search } for pid=763 comm="perfd" name="fb0" dev="sysfs"
ino=35414 scontext=u:r:perfd:s0 tcontext=u:object_r:sysfs_graphics:s0
tclass=dir

denied { read } for pid=763 comm="perfd" name="modes" dev="sysfs"
ino=35431 scontext=u:r:perfd:s0 tcontext=u:object_r:sysfs_graphics:s0
tclass=file

denied { search } for pid=666 comm="light@2.0-servi"
name="800f000.qcom,spmi" dev="sysfs" ino=19444
scontext=u:r:hal_light_default:s0
tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=dir

denied { create } for pid=771 comm="Loc_hal"
scontext=u:r:hal_gnss_qti:s0 tcontext=u:r:hal_gnss_qti:s0
tclass=udp_socket

denied { ioctl } for pid=755 comm="Loc_hal" path="socket:[64279]"
dev="sockfs" ino=64279 ioctlcmd=89fd scontext=u:r:hal_gnss_qti:s0
tcontext=u:r:hal_gnss_qti:s0 tclass=udp_socket

denied { ioctl } for pid=771 comm="Loc_hal" path="socket:[54210]"
dev="sockfs" ino=54210 ioctlcmd=c304 scontext=u:r:hal_gnss_qti:s0
tcontext=u:r:hal_gnss_qti:s0 tclass=socket

denied { create } for pid=771 comm="Loc_hal" name="xtra"
scontext=u:r:hal_gnss_qti:s0 tcontext=u:object_r:location_data_file:s0
tclass=dir

denied { create read getattr lock unlink } for pid=771 comm="Loc_hal"
name="xtra.sqlite" scontext=u:r:hal_gnss_qti:s0
tcontext=u:object_r:location_data_file:s0 tclass=file

denied { ioctl } for pid=798 comm="Loc_hal" path="socket:[64664]"
dev="sockfs" ino=64664 ioctlcmd=c302 scontext=u:r:hal_gnss_qti:s0
tcontext=u:r:hal_gnss_qti:s0 tclass=socket

denied { connectto } for pid=755 comm="NtpDown"
path="/dev/socket/dnsproxyd" scontext=u:r:hal_gnss_qti:s0
tcontext=u:r:netd:s0 tclass=unix_stream_socket

denied { create bind } for pid=755 comm="Loc_hal"
scontext=u:r:hal_gnss_qti:s0 tcontext=u:r:hal_gnss_qti:s0
tclass=netlink_generic_socket

denied  { find } for interface=android.hardware.graphics.mapper::IMapper
pid=564 scontext=u:r:hal_graphics_composer_default:s0
tcontext=u:object_r:hal_graphics_mapper_hwservice:s0
tclass=hwservice_manager

denied { search } for pid=428 comm="kworker/6:2" name="firmware"
dev="sde14" ino=229 scontext=u:r:kernel:s0
tcontext=u:object_r:vendor_firmware_file:s0 tclass=dir

denied { ioctl } for pid=798 comm="Loc_hal" path="/dev/binder"
dev="tmpfs" ino=10125 ioctlcmd=6201 scontext=u:r:hal_gnss_qti:s0
tcontext=u:object_r:binder_device:s0 tclass=chr_file

denied { call } for pid=798 comm="Loc_hal" scontext=u:r:hal_gnss_qti:s0
tcontext=u:r:servicemanager:s0 tclass=binder

denied  { write } for  pid=1 comm="init" name="debug_suspend"
dev="debugfs" ino=997 scontext=u:r:init:s0
tcontext=u:object_r:debugfs:s0 tclass=file

Bug: 34784662
Test: The above denials no longer appear during operation
Change-Id: I4c713ea9147fe613564ed39d874005cfa7b928a5
2017-05-09 13:19:13 -07:00
Max Bires
0a4f88cbd3 Fixing Taimen OTAs for enforcing before turning it on globally
denied { ioctl } for pid=570 comm="boot@1.0-servic"
path="/dev/block/sde" dev="tmpfs" ino=19779 ioctlcmd=1268
scontext=u:r:hal_bootctl_default:s0 tcontext=u:object_r:block_device:s0
tclass=blk_file

denied { open } for pid=570 comm="boot@1.0-servic" path="/dev/block/sde"
dev="tmpfs" ino=19779 scontext=u:r:hal_bootctl_default:s0
tcontext=u:object_r:block_device:s0 tclass=blk_file

denied { read write } for pid=570 comm="boot@1.0-servic" name="sde"
dev="tmpfs" ino=19779 scontext=u:r:hal_bootctl_default:s0
tcontext=u:object_r:block_device:s0 tclass=blk_file

denied { getattr } for pid=570 comm="boot@1.0-servic"
path="/dev/block/sde13" dev="tmpfs" ino=19819
scontext=u:r:hal_bootctl_default:s0 tcontext=u:object_r:block_device:s0
tclass=blk_file

Bug: 34784662
Test: OTAs work
Change-Id: Idd78395353c54f5d81220f7c8073ab90ee22af2f
2017-05-09 13:17:44 -07:00
Thierry Strudel
a8ed387f1c fstab.hardware: disable metadata encryption
Bug: 38137299
Bug: 38133157
Change-Id: I4bae0df21238126fcadce48697ecba91b05ef057
Signed-off-by: Thierry Strudel <tstrudel@google.com>
2017-05-09 12:20:47 -07:00
Thierry Strudel
36d09bf13f move fstab and BOARD_AVB_ENABLE to wahoo
Change-Id: I057403bb22241cc756f714019f4c2d2efeb4cd3e
Signed-off-by: Thierry Strudel <tstrudel@google.com>
2017-05-09 12:20:01 -07:00
Wei Wang
cb8982e861 Merge "whaoo: enable low persist_mode for VR" 2017-05-09 18:15:23 +00:00
TreeHugger Robot
658dd78713 Merge "Use hardware feature definition to indicate Passpoint support" 2017-05-09 17:21:36 +00:00
Wei Wang
42fd4ba288 whaoo: enable low persist_mode for VR
Access to /sys/class/graphics/fb0/msm_fb_persist_mode is needed for light HAL.

Bug: 36660424
Test: display is going into low persistence mode in daydream
Change-Id: Ie54120ee70b2b3e4acb4d9d5f1ec1c0d75d93a81
2017-05-09 16:14:08 +00:00