Lingfeng Yang
bdceef4325
Allow /dev/goldfish_sync
...
Change-Id: I41883eafd2b261d000c41eaf3ba04af7e2b89349
(cherry picked from commit 5d6ae8a3d467dd23a2f09a96bc4fdbea2d0353a2)
2017-01-12 11:35:53 -08:00
bohu
67d789a9a5
Emulator: increase x86_64 system image size to 2G
...
Fix the build on nyc-mr1-emu-dev
Change-Id: Iae5160289c98d045096a9dae9d536df447ca18f7
2016-09-14 21:42:58 +00:00
Dan Stoza
ae5e550f81
Remove DispSync default value/docs
...
Moves DispSync phase offset default values and documentation to
frameworks/native/services/surfaceflinger/Android.mk.
Bug: 30801895
Change-Id: I44a4355b2d112561b94ccfc6e9c3365885c205ad
2016-09-09 13:53:52 -07:00
Nick Kralevich
501c88c029
goldfish_setup: grant /system/bin/sh exec access
...
The goldfish_setup shell script needs the ability to execute
the shell script interpreter. Allow it.
Addresses the following denial:
avc: denied { getattr } for pid=1220 comm="init.goldfish.s"
path="/system/bin/sh" dev="vda" ino=442 scontext=u:r:goldfish_setup:s0
tcontext=u:object_r:shell_exec:s0 tclass=file permissive=0
Bug: 28941573
Change-Id: I22d26e90f107c8d801229354a5e0513c37e6c31d
2016-05-24 17:40:53 -07:00
Bo Hu
94f576d18c
Merge "Fix emulator specific SELinux denials related to qemu.gles" into nyc-dev
2016-04-20 18:46:38 +00:00
bohu
bf863dbffc
Fix emulator specific SELinux denials related to qemu.gles
...
init: avc: denied { set } for property=qemu.gles pid=108 uid=1003 gid=1003 scontext=u:r:bootanim:s0 tcontext=u:object_r:qemu_prop:s0 tclass=property_service permissive=1
init: avc: denied { set } for property=qemu.gles pid=75 uid=0 gid=0 scontext=u:r:zygote:s0 tcontext=u:object_r:qemu_prop:s0 tclass=property_service permissive=1
bug: 28221393
Change-Id: Icb0ee7fbf9a7b985f66fac087a48d9b5789e2b67
2016-04-19 15:04:58 -07:00
Nick Kralevich
841f6d870d
Address emulator specific SELinux denials
...
Fix the following denials:
avc: denied { search } for pid=222 comm="system_server"
name="qemu_trace" dev="sysfs" ino=45 scontext=u:r:system_server:s0
tcontext=u:object_r:sysfs_writable:s0 tclass=dir permissive=1
avc: denied { open } for pid=222 comm="system_server"
name="u:object_r:opengles_prop:s0" dev="tmpfs" ino=1429
scontext=u:r:system_server:s0 tcontext=u:object_r:opengles_prop:s0
tclass=file permissive=1
avc: denied { read } for pid=222 comm="system_server"
name="u:object_r:radio_noril_prop:s0" dev="tmpfs" ino=1430
scontext=u:r:system_server:s0 tcontext=u:object_r:radio_noril_prop:s0
tclass=file permissive=1
avc: denied { open } for pid=222 comm="system_server"
name="u:object_r:radio_noril_prop:s0" dev="tmpfs" ino=1430
scontext=u:r:system_server:s0 tcontext=u:object_r:radio_noril_prop:s0
tclass=file permissive=1
avc: denied { getattr } for pid=222 comm="system_server"
path="/dev/__properties__/u:object_r:radio_noril_prop:s0" dev="tmpfs"
ino=1430 scontext=u:r:system_server:s0
tcontext=u:object_r:radio_noril_prop:s0 tclass=file permissive=1
avc: denied { search } for pid=424 comm="putmethod.latin"
name="qemu_trace" dev="sysfs" ino=45
scontext=u:r:untrusted_app:s0:c512,c768
tcontext=u:object_r:sysfs_writable:s0 tclass=dir permissive=1
Bug: 28221393
Change-Id: I6fce1127d9d9e8bc0119bace3f142d51382401c0
2016-04-18 13:28:04 -07:00
Prathmesh Prabhu
6e64f417cd
Emulator: Bump mips(64) system image partition size to 1.75 GB.
...
BUG:27834040
Change-Id: I71861b023e8155df951036053ab0561e153d04fd
(cherry picked from commit 8a17ace10e
2016-03-25 00:20:29 +00:00
Prathmesh Prabhu
316654fc23
Emulator: Bump arm(64) system image partition size to 1.75 GB
...
Change-Id: If9ce0346ed4ca7ceab3fda217e5c9de6d89b6c94
2016-03-14 18:07:31 +00:00
Bo Hu
fed6c5cb0b
Merge "emulator: allows surfaceflinger to change qemu.gles value" into nyc-dev
2016-02-23 21:46:34 +00:00
Prathmesh Prabhu
e6ea602bb4
Generic x86_64: Bump system image partition size to 1.75 GB.
...
BUG=b.android.com/201662
Change-Id: I3b13082d73a3e1c9f49cb9158d2423dc580a8c75
2016-02-23 20:33:23 +00:00
bohu
37f5b608e1
emulator: allows surfaceflinger to change qemu.gles value
...
This is to allow surfaceflinger to always load vendor provided
egl libraries first and fall back to software renderer, and then
set the qemu.gles to correct value reflecting what libraries
are actually used.
bug: 27273457
Change-Id: Ifaca31aa2e562f50baa41fd228df9836bc3b1667
2016-02-20 01:39:27 +00:00
dcashman
cb1fb3156c
Label ranchu block devices.
...
Address the following denials:
avc: denied { getattr } for pid=1166 comm="e2fsck" path="/dev/block/vdc" dev="tmpfs" ino=2880 scontext=u:r:fsck:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file permissive=0
avc: denied { read write } for pid=1166 comm="e2fsck" name="vdc" dev="tmpfs" ino=2880 scontext=u:r:fsck:s0 tcontext=u:object_r:block_device:s0 tclass=blk_file permissive=0
Bug: 27224003
Change-Id: I4792420822d238e6ad1bf757634c924b95150515
2016-02-19 05:32:02 +00:00
Chih-Hung Hsieh
b81d0835ac
resolve merge conflicts of dc1afa9c0f to master.
...
Change-Id: I4236d9f79cbca689d0fcc400d4c10a663209bc2a
2016-02-04 15:43:05 -08:00
Chih-Hung Hsieh
6dc7147fb0
Remove USE_CLANG_PLATFORM_BUILD in BoardConfig.mk
...
Use global default USE_CLANG_PLATFORM_BUILD set in core/envsetup.mk,
or user provided environment variable USE_CLANG_PLATFORM_BUILD.
BUG: 26102335
Change-Id: I7e12219a60f36bb44797bb028b4a5873a67c9210
2016-02-04 10:55:56 -08:00
Tom Cherry
6ebff7a4d4
Merge "Remove special case handling of "ro." properties" am: 560fde999a
...
am: ca0091e26f
2016-01-13 18:50:00 +00:00
Tom Cherry
69035cd4aa
Remove special case handling of "ro." properties
...
Currently, properties that begin with "ro." are special cased to skip
over the "ro." part of the prefix before matching with entries in
property_contexts. A change to init is removing this special case and
therefore, the "ro." prefixes must be explicitly added to
property_contexts.
Bug 26425619
Change-Id: I735eb9fc208eeec284cda8d778db946eeec24192
2016-01-11 13:16:45 -08:00
Josh Gao
59bee9b831
Merge "Kill BOARD_MALLOC_ALIGNMENT." am: 1ad7edd5e4
...
am: 5774bafd18
2016-01-06 22:56:02 +00:00
Josh Gao
b1171e4a31
Kill BOARD_MALLOC_ALIGNMENT.
...
Bug: http://b/26403338
Change-Id: I55d2c417d972f78caddc5fb28a065807feb86b0a
2016-01-06 14:15:46 -08:00
Nick Kralevich
bcdc1070d4
Merge "sepolicy: Fix \'avc denied\' issues for the emulators" am: 154657f0e3
...
am: abfd39ae3a
2015-12-13 13:16:09 -08:00
Mike Frysinger
c15373f60e
Merge "sepolicy: drop -- marker" am: 50f21eb113
...
am: 86f12e6dcb
2015-12-11 09:00:23 -08:00
Miroslav Tisma
36a76ec098
sepolicy: Fix 'avc denied' issues for the emulators
...
This commit fixes the avc denied issues in the emulators:
- goldfish_setup is granted for network access
- netd dontaudit for sys_module
- qemu_prop is granted domain for get_prop
Critical issue was that SELinux denied reading the lcd_density property
by SurfaceFlinger via qemu_prop and this commit fixes it.
Change-Id: I633d96f4d2ee6659f18482a53e21f816abde2a5f
Signed-off-by: Miroslav Tisma <miroslav.tisma@imgtec.com>
2015-12-11 16:21:00 +01:00
Mike Frysinger
db4883ca93
sepolicy: drop -- marker
...
It's not needed and is a bit confusing.
BUG=26018537
Change-Id: Ibb1c3995de97a442c95d5eea823523b5f0f26393
2015-12-10 18:18:27 +00:00
Chih-hung Hsieh
f43f558129
Merge "Move mips64 target to clang by default." am: b0d9108795 am: 54ac6cd527
...
am: c5a9f9cbcc
2015-11-24 21:25:44 +00:00
Chih-hung Hsieh
fc3277806a
Merge "Move mips target to clang by default." am: 80d6b0a9c6 am: 917f4aea1d
...
am: 7906e14344
2015-11-24 21:25:37 +00:00
Chih-hung Hsieh
b0d9108795
Merge "Move mips64 target to clang by default."
2015-11-24 21:13:38 +00:00
Konstantinos Menychtas
94a47cd03a
Increasing sysimage partition size for all boards
...
This change fixes issue b/25613506
The predefined, fixed system image partition size is failing
to fit content for NYC release MIPS64 images. This change
increases the system image size for all boards to 1.5GB
(up from 1.25GB) to make sure that the system image sizes are
uniform across all virtual boards, and fit new content.
Change-Id: Id9808ad5318cd2390fc666ac35b0f9cd32870993
2015-11-22 17:17:23 -08:00
Chih-Hung Hsieh
4dcd769f2c
Move mips64 target to clang by default.
...
Bug: 23163853
Change-Id: Ia3d449f908b09ce95b3de246c8c699d171dcbaa3
2015-11-20 13:35:44 -08:00
Chih-Hung Hsieh
990407e0a5
Move mips target to clang by default.
...
Bug: 23163853
Change-Id: I408ffd90ff2ff075e03962fffd1681fccf0319d3
2015-11-20 13:32:22 -08:00
Griff Hazen
83c07e93c9
Merge "Let qemu_props service set system properties in ro.emu and ro.emulator" am: 0b4529239f am: 2e4314481e
...
am: 9707c5d724
2015-11-08 01:06:15 +00:00
Griff Hazen
0517540e8d
Let qemu_props service set system properties in ro.emu and ro.emulator
...
These boot properties are used by android wear emulator to configure
round and chin shaped devices.
Bug: 23324757
Change-Id: I812da02d771bba0ffc63b14459c7de7cbdeed142
2015-11-07 16:53:59 -08:00
Jeffrey Vander Stoep
4e5955ea7c
Merge "selinux: Grant all processes the domain_deprecated attribute" am: b18da85cb6 am: 6e32d6b0a0
...
am: 10b3d6cfcb
2015-11-04 19:06:04 +00:00
Jeff Vander Stoep
7890fc4d2e
selinux: Grant all processes the domain_deprecated attribute
...
Bug: 25433265
Change-Id: Iafad5abd6e75c5a46f844ef3e744adf1c904b362
2015-11-04 08:49:07 -08:00
Chih-hung Hsieh
d1e932e91e
Merge "Move arm64 target to clang by default." am: befb82f204 am: b7ad8778cd
...
am: 72d90d25d0
2015-10-28 01:46:34 +00:00
Chih-Hung Hsieh
07be5025d9
resolve merge conflicts of b5775d97b4 to master.
...
Change-Id: I99fda2935ab74e0634c1aa4905ce4da693e96cb6
2015-10-27 16:48:38 -07:00
Chih-hung Hsieh
befb82f204
Merge "Move arm64 target to clang by default."
2015-10-27 23:02:26 +00:00
Chih-Hung Hsieh
cf67f13792
Move arm64 target to clang by default.
...
Bug: 23163853
Change-Id: I59c311f552ca060bc7bd034fa4f1c03eb24802d5
2015-10-27 13:44:53 -07:00
Chih-Hung Hsieh
557fa2f3cd
Move arm target to clang by default.
...
Bug: 23163853
Change-Id: I4cb95ed652ca697461e2fb22811779aa2df8d262
2015-10-27 13:42:34 -07:00
Chih-hung Hsieh
a7404f6f9a
Merge "Move x86_64 target to clang by default." am: 373a1e36a9 am: bbe8225aca
...
am: 8d28df5804
2015-10-23 00:36:09 +00:00
Chih-hung Hsieh
373a1e36a9
Merge "Move x86_64 target to clang by default."
2015-10-23 00:26:20 +00:00
Chih-Hung Hsieh
b9774f34e1
Move x86_64 target to clang by default.
...
Bug: 23163853
Change-Id: I0587ec75c0000ac99562233de33147ec8e120e65
2015-10-22 16:29:59 -07:00
Nick Kralevich
d51e641dfe
Merge "allow qemu_props to set opengles.version" am: c5a33b0570 am: c6c5b1a969
...
am: 58ddb6d8e8
2015-10-21 18:29:12 +00:00
Nick Kralevich
ce1062629f
allow qemu_props to set opengles.version
...
Addresses the following denial:
init: avc: denied { set } for property=opengles.version scontext=u:r:qemu_props:s0 tcontext=u:object_r:default_prop:s0 tclass=property_service
Bug: 25148690
Change-Id: I4b197eeabfe37e794104e4e686e9e388b5bc3e0c
2015-10-21 10:55:21 -07:00
Chih-hung Hsieh
8acf4e7ba9
Merge "Move x86 target to clang by default." am: a993bfff36 am: ebfadd8990
...
am: 9b2e93946e
2015-10-20 23:58:58 +00:00
Chih-Hung Hsieh
f0ba2e9da6
Move x86 target to clang by default.
...
Bug: 23163853
Change-Id: Ib5e9beddbeca8968d6e4365abeb44ae97cbe9981
2015-10-20 12:16:57 -07:00
Nick Kralevich
c98da6590a
am ee15a452: am f14b0298: am 5c24a50e: Merge "generic_x86: delete system_server execmem"
...
* commit 'ee15a4527e2ee495141a06774e332cb3c0c61fc4':
generic_x86: delete system_server execmem
2015-10-15 09:55:15 +00:00
Nick Kralevich
7da1b68236
generic_x86: delete system_server execmem
...
https://android-review.googlesource.com/175922 removed all uses
of system_server execmem and neverallowed it. The x86 emulator policy
inappropriately includes this rule. Delete it.
Fixes the following build breakage:
libsepol.report_failure: neverallow on line 473 of external/sepolicy/system_server.te (or line 12452 of policy.conf) violated by allow system_server system_server:process { execmem };
libsepol.check_assertions: 1 neverallow failures occurred
Error while expanding policy
Change-Id: I7fbfaa0a09e8f4e8a372d2f1a64bbe58d5302204
2015-10-15 02:37:40 -07:00
Nick Kralevich
5758846abe
am e7fb896d: am 35a075db: am 36d91b53: Merge "Only allow toolbox exec where /system exec was already allowed."
...
* commit 'e7fb896df309953d010f3c3923b7ed83505cd12b':
Only allow toolbox exec where /system exec was already allowed.
2015-08-26 03:00:03 +00:00
Nick Kralevich
e7fb896df3
am 35a075db: am 36d91b53: Merge "Only allow toolbox exec where /system exec was already allowed."
...
* commit '35a075db60bc5553b57ef3311b9643d3b04ea7da':
Only allow toolbox exec where /system exec was already allowed.
2015-08-26 02:54:08 +00:00
Nick Kralevich
64e4d8a211
am 35a075db: am 36d91b53: Merge "Only allow toolbox exec where /system exec was already allowed."
...
* commit '35a075db60bc5553b57ef3311b9643d3b04ea7da':
Only allow toolbox exec where /system exec was already allowed.
2015-08-25 22:53:03 +00:00
