Commit graph

233 commits

Author SHA1 Message Date
Steven Moreland
1564ea3fe9 configstore policy: add dgetdents64
Required for libhidltransport to be able to update
process name.

Bug: 77696368
Bug: 77654200
Test: boot device and configstore doesn't crash
Change-Id: I6574cf1c21465c5eae901015da2564b64b6a40d2
2018-04-06 13:16:11 -07:00
Jeff Vander Stoep
da6a30dea3 configstore: whitelist getpid call for arm64 am: 0979cc5dd9
am: e3804803d4

Change-Id: Ic68c63ce824cdb024dde673015f1f23f8b1703cc
2018-03-19 20:36:18 +00:00
Jeff Vander Stoep
0979cc5dd9 configstore: whitelist getpid call for arm64
Addresses:
01-01 00:00:03.416   964   964 E /vendor/bin/hw/android.hardware.configstore@1.0-service:
libminijail[964]: blocked syscall: getpid

Bug: 74394073
Test: weipingliao@ to test
Change-Id: Iaa836d1f0b3595a66dfb6af2dd78fdddb9d7272e
2018-03-19 18:12:21 +00:00
chenhg
f33265ec58 Merge "configstore: allow to USE_CONTEXT_PRIORITY by device." am: cd712b0e8f am: 301951f8a4
am: f6f9837522

Change-Id: I830441c02b1cfba9a3f61f1510d3bca307a2b233
2018-03-02 02:49:24 +00:00
chenhg
f6f9837522 Merge "configstore: allow to USE_CONTEXT_PRIORITY by device." am: cd712b0e8f
am: 301951f8a4

Change-Id: I92ff43ccecfc8e87e670181d45de1ffa2fa279af
2018-03-02 02:39:04 +00:00
chenhg
a491908fe9 configstore: allow to USE_CONTEXT_PRIORITY by device.
Fixes: 72007412
Test: manual

Change-Id: Id6135347ef699b27ab708d387261bc031996a476
2018-03-01 22:51:02 +00:00
Zhuoyao Zhang
22b413bdd8 Merge "Convert configstore hal test to use VtsHalHidlTargetTestEnvBase" am: 42749f8863 am: 8857a90053
am: f28f18c0e7

Change-Id: I2ce9d4ab9273b81c2ab48d2a870cce675568adb6
2018-02-10 19:39:02 +00:00
Zhuoyao Zhang
f28f18c0e7 Merge "Convert configstore hal test to use VtsHalHidlTargetTestEnvBase" am: 42749f8863
am: 8857a90053

Change-Id: Ifa94c66094f72913b13d0d29647f281d53ac9fd1
2018-02-10 19:34:53 +00:00
Zhuoyao Zhang
d198ea4c09 Convert configstore hal test to use VtsHalHidlTargetTestEnvBase
Bug: 64203181
Test: make vts
      vts-tradefed run vts -m VtsHalConfigstoreV1_0Target

Change-Id: I4ba993d41e285df790c267e84b484f1564047e1e
2018-02-08 21:31:57 -08:00
Zhuoyao Zhang
ce386b10e9 Disable seccomp policy for configstore hal on coverage builds. am: 207e97c735 am: 23b5ae4553
am: 40ffc6130a

Change-Id: I09d4a2f53156de34f80bb66e0970ebbe4c7e40ec
2018-01-09 21:43:19 +00:00
Zhuoyao Zhang
40ffc6130a Disable seccomp policy for configstore hal on coverage builds. am: 207e97c735
am: 23b5ae4553

Change-Id: Id042a38e3e25fde309f5cf5922f7f1c24923ed9a
2018-01-09 19:59:15 +00:00
Zhuoyao Zhang
207e97c735 Disable seccomp policy for configstore hal on coverage builds.
Test: lunch walleye_coverage-userdebug && make
      verify configstore@1.0.policy is not generated.

Change-Id: Iad1f55fe10c2c77a3ca56418ec315e10ab71753f
2018-01-08 12:06:22 -08:00
Sundong Ahn
b162f3f8dd Configstore HAL is down-revisioned to 1.0
Configstore was up-revisioned from 1.0 to 1.1. However no new
APIs were added to 1.1. Therefore configstore in master will be down
revisioned to 1.0.

Bug: 71555815
Test: lshal | grep configsotre
Test: "cat proc/<configstore pid>/status | grep Seccomp " return:
    Seccomp: 2

Change-Id: I65d2dc06fbe12d0c0ccc020bbd287e0b14320f2f
2018-01-04 16:15:56 +09:00
Steven Moreland
e5c6548346 Remove subdirs
Removing whenever I see these in code reviews.

Test: none
Merged-In: I4322f533a837d55618ec2ed2125e8966ace9d61d
Change-Id: I4322f533a837d55618ec2ed2125e8966ace9d61d
2017-11-28 14:23:43 -08:00
Steven Moreland
8b76a6b90d Remove subdirs
Removing whenever I see these in code reviews.

Test: none
Merged-In: I4322f533a837d55618ec2ed2125e8966ace9d61d
Change-Id: I4322f533a837d55618ec2ed2125e8966ace9d61d
2017-11-28 14:22:55 -08:00
Steven Moreland
fcca4e23b7 Remove subdirs
Removing whenever I see these in code reviews.

Test: none
Merged-In: I4322f533a837d55618ec2ed2125e8966ace9d61d
Change-Id: I4322f533a837d55618ec2ed2125e8966ace9d61d
2017-11-28 14:22:43 -08:00
Xin Li
bb9e38fef9 Merge commit '1a06284b24f5eb7bb9c1fea0817da8898b3b1bff' from
oc-mr1-dev-plus-aosp into stage-aosp-master

Change-Id: I2a044eb8c9981d0a8198ffe2df55559afbd76341
Merged-In: I4fb9f18884f7ef21162015a0032c4431444f7025
2017-11-14 12:08:38 -08:00
TreeHugger Robot
75b8428b4c Merge "resolve merge conflicts of 32ba3eaa to oc-mr1-dev-plus-aosp" into oc-mr1-dev-plus-aosp 2017-11-14 11:00:56 +00:00
Martijn Coenen
3092f98101 resolve merge conflicts of 32ba3eaa to oc-mr1-dev-plus-aosp
Test: I solemnly swear I tested this conflict resolution.
Change-Id: I731eba80656edbf87a5d5ba3af63a2c607ac61a6
Merged-In: Id71e2348eabf5101d1fd286bbc0076154703d159
2017-11-14 08:37:32 +00:00
Martijn Coenen
cf426f0fea Fix library loading order in .mk files.
Test: angler boots again
Bug: 69180318
Change-Id: Id71e2348eabf5101d1fd286bbc0076154703d159
Merged-In: Id71e2348eabf5101d1fd286bbc0076154703d159
2017-11-13 20:42:40 +00:00
TreeHugger Robot
91d263d6a9 Merge "Fix library loading order in .mk files." 2017-11-13 20:40:38 +00:00
Steven Moreland
c2f829a1d2 Updating makefiles for hidl_interface.
Bug: 64487114
Test: manual
Merged-In: Ie13d9e014cf2b81c18c67f551b4644fb9f0ba812
Change-Id: Ie13d9e014cf2b81c18c67f551b4644fb9f0ba812
2017-11-13 11:39:07 -08:00
Martijn Coenen
b6fa3ae638 Fix library loading order in .mk files.
Test: angler boots again
Bug: 69180318
Change-Id: Id71e2348eabf5101d1fd286bbc0076154703d159
2017-11-13 19:59:54 +01:00
Steven Moreland
8db261bc99 Updating makefiles for hidl_interface.
Bug: 64487114
Test: manual
Merged-In: Ie13d9e014cf2b81c18c67f551b4644fb9f0ba812
Change-Id: Ie13d9e014cf2b81c18c67f551b4644fb9f0ba812
2017-11-13 10:00:18 -08:00
Steven Moreland
a1169dd600 Update makefiles for hidl_interface.
Bug: 35570956
Test: manual
Change-Id: I7a220b78ee081240e1dc30ef5672ba39e3e98375
2017-11-10 09:06:55 -08:00
Jeff Gaston
0498aefcfc Remove unused Android.bp
Now that the build system searches for and includes every file
named Android.bp, this one causes errors

Bug: 64363847
Test: m -j
Change-Id: I786efcc23a39de488265a11046a3660fd4526a1a
Merged-In: Ia68993a22b975d9a5dd19175988077481ded7559
2017-11-08 22:06:04 -08:00
Steven Moreland
726af41e68 resolve merge conflicts of dd5206c57 to oc-mr1-dev-plus-aosp
This version of configstore was removed internally.

Test: I solemnly swear I tested this conflict resolution.
Change-Id: I589addff6aec7bb7a8a7938d75c51dcc56116a42
2017-11-02 20:59:39 +00:00
Steven Moreland
c5bc4c7cbb Update makefiles after AOSP push.
Test: none
Change-Id: If3ce74f4d2250d33820cbd864ff56bba6f9e6b67
2017-11-01 16:42:15 -07:00
TreeHugger Robot
448beed214 Merge "configstore: reduce restrictions in prctl()" 2017-10-24 23:04:02 +00:00
Jeff Vander Stoep
41534729e5 configstore: reduce restrictions in prctl()
Prevent configstore from crash-looping due to:
/vendor/bin/hw/android.hardware.configstore@1.0-service:
libminijail[22988]: blocked syscall: prctl

Bug: 68162846
Test: Launch photos.
Change-Id: I1593ea1e03ec5f688ec7311e586178f2f952fed9
2017-10-24 10:34:46 -07:00
Elliott Hughes
2e924e753c Add sched_setscheduler to the arm64 policy.
To support pthread_attr_setinheritsched for any code that uses pthread_create.

Bug: http://b/67471710
Test: no rolling configstore crashes when booting with the pthread change
Change-Id: I5847adba36b6a5d13b7bd20f955e432c14ce78b8
2017-10-20 17:52:00 -07:00
Steven Moreland
f390f03aa4 Update for Soong-only makefiles.
Test: pass
Bug: 33420795
Change-Id: Ibec6d1e38939b9e7566a96381439be2aac3bf8ca
2017-10-11 18:30:28 +00:00
Steven Moreland
1d7374c5e1 Update for Soong java makefiles. am: c3e80fa01e am: 0fff75dee1 am: 6c811964a1
am: 116161d94e

Change-Id: I33643636e2511de77fdf7de57777eb67edee2e52
2017-10-11 16:39:21 +00:00
Steven Moreland
116161d94e Update for Soong java makefiles. am: c3e80fa01e am: 0fff75dee1
am: 6c811964a1

Change-Id: I85ccbb4a15cd18938607f5bca4e065b9d7e0182b
2017-10-11 16:31:07 +00:00
Steven Moreland
6c811964a1 Update for Soong java makefiles. am: c3e80fa01e
am: 0fff75dee1

Change-Id: I5b524ccf13233f3696881a2a670b5d2134fd5f15
2017-10-11 16:27:24 +00:00
Steven Moreland
0fff75dee1 Update for Soong java makefiles.
am: c3e80fa01e

Change-Id: Ia8835f9c95bd98a96f5fd3aff11191e7d3726fb9
2017-10-11 16:23:54 +00:00
Steven Moreland
c3e80fa01e Update for Soong java makefiles.
Test: pass
Bug: 33420795
Change-Id: Id9b1919a19b8ff682738cfb0869a479b4dbb4293
2017-10-10 23:07:20 +00:00
Steven Moreland
70bfb9d250 Merge "Update for hidl adapter module defaults." am: 988c977079 am: 861651985f am: b53e6ad535
am: 9a17f41f6f

Change-Id: I78d9292068b372238554fd9d35128e69f5b5f9d2
2017-10-04 21:54:11 +00:00
Steven Moreland
9a17f41f6f Merge "Update for hidl adapter module defaults." am: 988c977079 am: 861651985f
am: b53e6ad535

Change-Id: I23269fb7a9bdd352e670a80f390527d9eef31412
2017-10-04 21:51:00 +00:00
Steven Moreland
b53e6ad535 Merge "Update for hidl adapter module defaults." am: 988c977079
am: 861651985f

Change-Id: Ifdb878720d42120e7309dd2a49e5a91059ff4b72
2017-10-04 21:48:04 +00:00
Steven Moreland
861651985f Merge "Update for hidl adapter module defaults."
am: 988c977079

Change-Id: I289818be1b30397391847ba1c532d1014fdbed27
2017-10-04 21:45:09 +00:00
Steven Moreland
527fd76a0e Update for hidl adapter module defaults.
Test: pass
Change-Id: Idc6a943149a279bf17cfcfd0f2571473e53bbbbf
2017-10-04 12:47:03 -07:00
Steven Moreland
3788a7321f Update makefiles for hidl-adapter (2/2).
Bug: 37518178
Test: none
Change-Id: I77fe67964f89da8b66aeb8df6d424de0f8689f8d
2017-09-27 08:55:47 -07:00
Steven Moreland
91799c6cc7 Merge "Fix typo in update makefiles." am: 9960148420 am: f07e364ce3 am: 71a193a425
am: 9fdd241905

Change-Id: I1c852fa6600fecc44d5afd1a65a5f51c43ecf71c
2017-09-27 00:02:52 +00:00
Steven Moreland
9fdd241905 Merge "Fix typo in update makefiles." am: 9960148420 am: f07e364ce3
am: 71a193a425

Change-Id: I45ae43f07323254212532acbf0f891d11143b05f
2017-09-26 23:58:51 +00:00
Steven Moreland
71a193a425 Merge "Fix typo in update makefiles." am: 9960148420
am: f07e364ce3

Change-Id: If5bbf259458363b755989578c2f3828cbcb3d07c
2017-09-26 23:55:59 +00:00
Steven Moreland
f07e364ce3 Merge "Fix typo in update makefiles."
am: 9960148420

Change-Id: I949634e72f817f3a5411130e968acd8efd1d7725
2017-09-26 23:51:07 +00:00
Steven Moreland
a5299ee739 Fix typo in update makefiles.
Bug: 37518178
Test: pass
Change-Id: Ic401b3a473f15ca4c01e58b3072e19db7c31b653
2017-09-26 21:59:43 +00:00
Steven Moreland
7741c0e17b Update makefiles for hidl adapter. am: 26a0bb2762 am: 73949c1d7e am: b94d0c7290
am: 97228c0b7d

Change-Id: Ic4b459b7c1a4325453945b0b00db8f44e4e77c26
2017-09-26 13:36:09 +00:00
Steven Moreland
97228c0b7d Update makefiles for hidl adapter. am: 26a0bb2762 am: 73949c1d7e
am: b94d0c7290

Change-Id: If766cffbcc003cc0cc5eb98969b924aa918fff44
2017-09-26 12:53:13 +00:00
Steven Moreland
b94d0c7290 Update makefiles for hidl adapter. am: 26a0bb2762
am: 73949c1d7e

Change-Id: I9af2df255ccdac36c8c11bbca973c42ea2e758fe
2017-09-26 12:48:40 +00:00
Steven Moreland
73949c1d7e Update makefiles for hidl adapter.
am: 26a0bb2762

Change-Id: I3a811f5cd49bd4e81e8fcd5c8e88922115812539
2017-09-25 23:14:44 +00:00
Steven Moreland
26a0bb2762 Update makefiles for hidl adapter.
Bug: 37518178
Test: manual
Change-Id: I50e999907d3c64d2b039272b823971998da64d1b
2017-09-25 18:35:56 +00:00
Jeff Vander Stoep
19eb208a45 Merge "Allow clock_gettime syscall for logging" into oc-mr1-dev am: 3816306137
am: 9942d5e495

Change-Id: I2e81116a46a7025f2cb15e696a155a3320b19471
2017-09-14 06:00:39 +00:00
Jeff Vander Stoep
9942d5e495 Merge "Allow clock_gettime syscall for logging" into oc-mr1-dev
am: 3816306137

Change-Id: Ib537f86d38547000c2dfdafd4e84cc13db96b48b
2017-09-14 03:08:45 +00:00
Justin Yun
cc7699043a Mark hidl utils as vndk am: 52cadaec39
am: 97a31bcff8

Change-Id: I5fb478bd38b7cf7e39b6b89a23571d423751cb36
2017-09-14 01:46:19 +00:00
Justin Yun
97a31bcff8 Mark hidl utils as vndk
am: 52cadaec39

Change-Id: I551dd6c454443f07a0d64a0daac134361671adab
2017-09-14 01:44:22 +00:00
Justin Yun
52cadaec39 Mark hidl utils as vndk
As a VNDK module, Android.bp must have 'vndk' tag as well as
'vendor_available: true'.

The 'vndk' tag for VNDK module is formated as below:
vndk: {
    enabled: true,
},

VNDK modules will be installed both in system/lib(64) as normal and
in system/lib(64)/vndk as a vendor variant.

Bug: 63866913
Test: build and boot with BOARD_VNDK_VERSION=current
Merged-In: If0eb0c1bddfa5bdc7ea0ca4635d4e53b59836582
Change-Id: If0eb0c1bddfa5bdc7ea0ca4635d4e53b59836582
(cherry picked from commit eff28dc3ba)
2017-09-14 01:30:51 +00:00
Jeff Vander Stoep
7adaf002be Allow clock_gettime syscall for logging
Addresses:
__kernel_clock_gettime" access failed.

The call flow is as follow:
"configstore -> hidltransport.tryShortenProcessName -> ALOGI ->
__android_log_print -> logdOpen -> netdClientConnect -> clock_gettime".

Bug: 65611466
Test: build and boot sailfish
Change-Id: I9e12c3a0969a7fe67c017d70f39a85792cf10bae
2017-09-13 07:54:45 -07:00
Jaekyun Seok
81104ae5ef Add 'vendor.' prefix to a vendor HAL service name
To prevent property name collisions between properties of system and
vendor, 'vendor.' prefix must be added to a vendor HAL service name.
You can see the details in http://go/treble-sysprop-compatibility.

Test: succeeded building and tested on a walleye device
Bug: 36796459
Change-Id: I4e8fbee791ec917a8f627a1366f4d44ec7e6febc
2017-09-12 08:01:42 +09:00
Sundong Ahn
4586fb7454 Configstore HAL is down-revisioned to 1.0
Configstore was down-revisioned from 1.1 to 1.0 in oc-dr1-dev,
oc-mr1-dev and oc-mr1-dev-plus-aosp. Therefore configstore in
oc-dr1-dev-plus-aosp will also be down-revisioned to 1.0.

Bug: 65124635
Test: build & boot test on sailfish + walleye
Change-Id: Ia2614439cd620fbe5fbd427571ab55a15089cc47
Merged-In: Ia68993a22b975d9a5dd19175988077481ded7559
2017-09-01 04:53:46 +00:00
Sundong Ahn
68f2e828d5 DO NOT MERGE: resolve merge conflicts of e46ab1fd to oc-mr1-dev-plus-aosp
Test: I solemnly swear I tested this conflict resolution.
Change-Id: Ia68993a22b975d9a5dd19175988077481ded7559
2017-08-28 21:35:37 +00:00
Tri Vo
ba6d6e5767 VTS tests now static link to HAL def libs.
am: b65c5ceff2

Change-Id: I393284c12ca5cb79926c4891ffcfd332408a5b9f
2017-08-28 19:23:36 +00:00
Tri Vo
b65c5ceff2 VTS tests now static link to HAL def libs.
And use VtsHalTargetTestDefaults.
This is a partial cherry-pick of ag/2657080.

Bug: 64040096
Test: compiles, works fine in internal master
Merged-In: I8f6995e9536a9aefe283ee3effec9f5a7f03b620
Change-Id: I76d47d8546416b57055841851a9d343026cd3210
2017-08-25 11:48:10 -07:00
Sundong Ahn
169eeecb08 Configstore HAL is down-revisioned to 1.0
Configstore was up-revisioned from 1.0 to 1.1. However no new
APIs were added to 1.1. Therefore configstore in mr1 will be down
revisioned to 1.0.

Bug: 64999074
Test: lshal | grep configsotre
Test: "cat proc/<configstore pid>/status | grep Seccomp " return:
    Seccomp: 2
Change-Id: Ia2614439cd620fbe5fbd427571ab55a15089cc47
2017-08-25 17:05:29 +00:00
Jeff Vander Stoep
b01c20b882 Merge "configstore: Allow syscalls needed by crash_dump" into oc-mr1-dev
am: 1f88a5dce8

Change-Id: I91d80f95a9f66fab518bf5dd4d5961e686108669
2017-08-24 18:37:52 +00:00
Jeff Vander Stoep
f378b7ffe2 configstore: Allow syscalls needed by crash_dump
Information such as tombstones and callstack are important when
debugging why a process crashed. configstore's seccomp filter
and selinux policy are currently overly strict and are blocking
the collection of crash data.

In order to keep configstore's sandbox as strict as possible, use
Crash_dump's fallback mechanism to collect crash data. This uses a
local socket to send crash data to tombstoned.

Bug: 64768925
Test: killall -ABRT android.hardware.configstore@1.1-service
    Verify that configstore callstack gets dumped to logcat.
    Verify that a crash tombstone gets recorded to /data/tombstones
Test: proto_fuzzer runs without crashing

Change-Id: I3c3e13d6aa1c1e2dda2a619dfa815375ee7ebff6
(cherry picked from commit 60ced29112)
2017-08-23 21:22:07 -07:00
Jeff Vander Stoep
60ced29112 configstore: Allow syscalls needed by crash_dump
Information such as tombstones and callstack are important when
debugging why a process crashed. configstore's seccomp filter
and selinux policy are currently overly strict and are blocking
the collection of crash data.

In order to keep configstore's sandbox as strict as possible, use
Crash_dump's fallback mechanism to collect crash data. This uses a
local socket to send crash data to tombstoned.

Bug: 64768925
Test: killall -ABRT android.hardware.configstore@1.1-service
    Verify that configstore callstack gets dumped to logcat.
    Verify that a crash tombstone gets recorded to /data/tombstones
Test: proto_fuzzer runs without crashing

Change-Id: I3c3e13d6aa1c1e2dda2a619dfa815375ee7ebff6
2017-08-18 13:51:43 -07:00
Steven Moreland
dfd8287506 Updating all makefiles.
Bug: 64487114
Test: none
Merged-In: I8608c8f636c35f21e4246a805a9eff6d14124e0a
Merged-In: I2fa89b6661c39859ec4fb62c4bb0a05a35e645f0
Merged-In: Ifdc3c17cb2b85c18b37dac2d03bb5c8935c23180
Change-Id: I170fa1c4fe39f8109b1670db58ef99bb11afc0be
2017-08-14 20:25:09 +00:00
Steven Moreland
9d76d47126 Merge "Revert "Revert "Updating all makefiles.""" into oc-mr1-dev-plus-aosp 2017-08-14 17:21:28 +00:00
Steven Moreland
4f25c2a143 Revert "Revert "Updating all makefiles.""
Relanding without automotive/vehicle/2.0+2.1 changes.

This reverts commit 1020ebedfb.

Merged-In: I8608c8f636c35f21e4246a805a9eff6d14124e0a
Change-Id: Icc49df42c2bedf443d878d5d8fbaa53441ea65db
2017-08-11 23:02:01 +00:00
Steven Moreland
ff308ea6ba Updating all makefiles.
Bug: 64487114
Test: none
Merged-In: I8608c8f636c35f21e4246a805a9eff6d14124e0a
Merged-In: I2fa89b6661c39859ec4fb62c4bb0a05a35e645f0
Change-Id: Ifdc3c17cb2b85c18b37dac2d03bb5c8935c23180
2017-08-11 22:58:47 +00:00
Steven Moreland
e2c6989289 Merge "Revert "Updating all makefiles."" into oc-mr1-dev-plus-aosp 2017-08-11 22:58:00 +00:00
Steven Moreland
1020ebedfb Revert "Updating all makefiles."
This reverts commit 8ac1971678.

Reason for revert: Didn't remove automotive changes from this CL.

Merged-In: I8608c8f636c35f21e4246a805a9eff6d14124e0a
Change-Id: I1c660cffc8817ad0b33da9f6eceb3d88e7c48416
2017-08-11 22:56:56 +00:00
TreeHugger Robot
845677568e Merge "Updating all makefiles." into oc-mr1-dev-plus-aosp 2017-08-11 22:27:04 +00:00
Jeff Vander Stoep
050dfca37f Merge "configstore: sandbox with seccomp filter" into oc-mr1-dev
am: b5a807de3a

Change-Id: I22ca62c30a653ef48b881a82a849f27c8f11ce7d
2017-08-11 17:01:10 +00:00
TreeHugger Robot
b5a807de3a Merge "configstore: sandbox with seccomp filter" into oc-mr1-dev 2017-08-11 16:40:06 +00:00
Steven Moreland
6da35570df Updating all makefiles.
Bug: 64487114
Test: none
Change-Id: I8608c8f636c35f21e4246a805a9eff6d14124e0a
2017-08-10 23:43:46 +00:00
Steven Moreland
8ac1971678 Updating all makefiles.
Bug: 64487114
Test: none
Merged-In: I8608c8f636c35f21e4246a805a9eff6d14124e0a
Change-Id: I2fa89b6661c39859ec4fb62c4bb0a05a35e645f0
2017-08-10 22:40:04 +00:00
Tri Vo
2b2ba2fa83 Merge "VTS tests now static link to HAL def libs. #2" into oc-mr1-dev am: 2883486706
am: a6969cdd68

Change-Id: Iecd7cfd4e02aea837647e2f12446e7375744f004
2017-08-10 18:38:53 +00:00
Tri Vo
a6969cdd68 Merge "VTS tests now static link to HAL def libs. #2" into oc-mr1-dev
am: 2883486706

Change-Id: I763622ff5280ade458da82e95df50a1b6d104f93
2017-08-10 18:08:27 +00:00
Tri Vo
0c2ce357b1 VTS tests now static link to HAL def libs. #2
And use VtsHalTargetTestDefaults.

Bug: 64040096
Test: crop out all non-affected tests from vts-hal-hidl.xml and run
vts-tradefed run commandAndExit vts-hal-hidl --skip-all-system-status-check 
--skip-preconditions
2 failures, same as without this change:
GatekeeperHidlTest.DeleteAllUsersTest
GatekeeperHidlTest.DeleteUserTest

Change-Id: I8f6995e9536a9aefe283ee3effec9f5a7f03b620
2017-08-10 17:44:57 +00:00
Jeff Vander Stoep
03253b48c9 configstore: sandbox with seccomp filter
Configstore HAL is accessible to third party apps and thus requires
a tight sandbox that reflects the limited system access this HAL
needs.

We use two primary mechanisms to sandbox configstore, selinux and
seccomp, with the goal of restricting its access to userspace and
the kernel. The addition of a seccomp filter is primarily aimed
at reducing the kernel's attack surface that is reachable by
configstore HAL.

Seccomp filters are architecture dependent, so filters need to be
added for each architecture. This change adds a seccomp filter for
arm64 and issues a non-fatal runtime warning for other architectures
which still require a seccomp filter.

Bug: 36453956
Test: boot Marlin and Angler. Verify that configstore is not aborting
    due to seccomp violations.
Test: "cat proc/<configstore pid>/status | grep seccomp " returns:
    seccomp: 2
    Which indicates that configstore is using seccomp-bpf.

Change-Id: Iab014ff357b7329085a5e18a92f51838d2c72371
(cherry picked from commit ed95043d64)
2017-08-10 10:34:08 -07:00
Steven Moreland
65de66a67e Update makefiles for vndk enabled. am: 5e59402492 am: 271d53d836
am: 148ca84740

Change-Id: I5ef3611026b9c770bf713c14b9e01899a796e61c
2017-08-09 20:36:43 +00:00
Steven Moreland
271d53d836 Update makefiles for vndk enabled.
am: 5e59402492

Change-Id: I08414d68d5275df82336653cb91765af7235f914
2017-08-09 00:44:39 +00:00
Steven Moreland
5e59402492 Update makefiles for vndk enabled.
Test: none
Bug: 63866913
Merged-In: I29174fdadca2828455ef49f14e53bc95c5238dbb
Change-Id: I29174fdadca2828455ef49f14e53bc95c5238dbb
(cherry picked from commit c716b8c307)
2017-08-08 17:09:10 +09:00
TreeHugger Robot
cf3dd6faed Merge "configstore: sandbox with seccomp filter" 2017-08-07 21:07:57 +00:00
Justin Yun
f628856a98 Merge changes from topic 'hidl-vndk-enabled-oc-mr1' into oc-mr1-dev am: 0a21415efa
am: fc85237365

Change-Id: I9857a7cb84520cca5ca66d5a8a84b29ed1559f0f
2017-08-05 02:17:44 +00:00
Justin Yun
723c2dbd43 Update make file for vndk enabled. am: 608d773ef8
am: d66371512c

Change-Id: I35b778c39c2349346278deb6dea56b8cd3701f7d
2017-08-05 02:17:38 +00:00
Justin Yun
fc85237365 Merge changes from topic 'hidl-vndk-enabled-oc-mr1' into oc-mr1-dev
am: 0a21415efa

Change-Id: Ib7d2fb35840ad0789da37e4452f150100fd911a2
2017-08-05 02:10:49 +00:00
Justin Yun
d66371512c Update make file for vndk enabled.
am: 608d773ef8

Change-Id: I6ea2891c61edaa2f8e1657544e3d2fb5011626c8
2017-08-05 02:10:40 +00:00
Justin Yun
eff28dc3ba Mark hidl utils as vndk
As a VNDK module, Android.bp must have 'vndk' tag as well as
'vendor_available: true'.

The 'vndk' tag for VNDK module is formated as below:
vndk: {
    enabled: true,
},

VNDK modules will be installed both in system/lib(64) as normal and
in system/lib(64)/vndk as a vendor variant.

Bug: 63866913
Test: build and boot with BOARD_VNDK_VERSION=current
Change-Id: If0eb0c1bddfa5bdc7ea0ca4635d4e53b59836582
2017-08-04 15:25:13 +09:00
Justin Yun
608d773ef8 Update make file for vndk enabled.
Update the Android.bp generated with hidl-gen.

Test: build with and without BOARD_VNDK_VERSION=current
Bug: 63866913
Change-Id: I1a9db1df49e0f13c5790da2b118ae9ec63ba34a7
2017-08-04 14:12:23 +09:00
Steven Moreland
250aa2ae25 Merge "Update makefiles for vndk enabled." into oc-mr1-dev am: d9b12c13e5
am: a7a300a13b

Change-Id: I4624aae28e0ccd493af5030c8e507aff25bc5743
2017-08-04 05:01:56 +00:00
Steven Moreland
a7a300a13b Merge "Update makefiles for vndk enabled." into oc-mr1-dev
am: d9b12c13e5

Change-Id: Id70e58e6b4d20dada4aab107b2aa98c58cf167ca
2017-08-04 01:04:40 +00:00
TreeHugger Robot
d9b12c13e5 Merge "Update makefiles for vndk enabled." into oc-mr1-dev 2017-08-04 00:52:06 +00:00
Steven Moreland
6ae7aad171 Update makefiles (frameworks.jar).
Test: links at runtime and buildtime
Bug: 35771640
Change-Id: Ic7a71653d659115205e5bdbb782f73b774af0b29
2017-08-03 23:02:46 +00:00
Tri Vo
7694738e26 Update Android.bp HIDL makefiles
am: f5d136c231

Change-Id: Iaabf86403c85f7cbf57d78de5abbfaff0c53fec5
2017-08-03 15:20:54 +00:00
Steven Moreland
c716b8c307 Update makefiles for vndk enabled.
Test: none
Bug: 63866913
Change-Id: I29174fdadca2828455ef49f14e53bc95c5238dbb
2017-08-02 18:00:14 -07:00
Tri Vo
f5d136c231 Update Android.bp HIDL makefiles
Allow HAL definition libs to be static.

Bug: 32920003
Bug: 64040096
Test: update-all-google-makefiles.sh
Change-Id: I1483d572bea6799717d1614fb7d52fe225e31104
2017-08-03 00:30:01 +00:00