tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/public/hal_dumpstate.te

16 lines
633 B
Text
Raw Normal View History

Switch Dumpstate HAL policy to _client/_server This switches Dumpstate HAL policy to the design which enables us to conditionally remove unnecessary rules from domains which are clients of Dumpstate HAL. Domains which are clients of Dumpstate HAL, such as dumpstate domain, are granted rules targeting hal_dumpstate only when the Dumpstate HAL runs in passthrough mode (i.e., inside the client's process). When the HAL runs in binderized mode (i.e., in another process/domain, with clients talking to the HAL over HwBinder IPC), rules targeting hal_dumpstate are not granted to client domains. Domains which offer a binderized implementation of Dumpstate HAL, such as hal_dumpstate_default domain, are always granted rules targeting hal_dumpstate. Test: adb bugreport Test: Take bugreport through system UI Bug: 34170079 Change-Id: I3e827534af03cdfa876921c5fa4af3a53025ba27
2017-02-22 19:15:24 +01:00
# HwBinder IPC from client to server, and callbacks
binder_call(hal_dumpstate_client, hal_dumpstate_server)
binder_call(hal_dumpstate_server, hal_dumpstate_client)
hal_dumpstate: allow writing to bug report files Bug: 31982882 Test: works with wip bullhead binderized dumpstate implementation Change-Id: Iae964f49b3c2704688ded8e7366d89ace35a92aa
2016-12-29 03:45:14 +01:00
Replace hal_dumpstate with hal_dumpstate_server After change Ia7437b8297794502d496e9bd9998dddfdcb747ef, some build targets are broken. This change fixes it. Bug: 166334688 Test: build Change-Id: Iaf6ca1ae5c461bd3c5059b27a148c7858679f795
2020-08-26 12:06:34 +02:00
set_prop(hal_dumpstate_server, hal_dumpstate_config_prop)
Reland "Add persist.dumpstate.verbose_logging.enabled to system/..." This reverts commit 409c038d3c356c5a9eb418b966d08375c0b65f37. Reason for revert: fixed breakage Bug: 163759751 Test: lunch sdk; m selinux_policy Change-Id: I59d170cd3a764209d353d77372387fdc8719ea7f
2020-08-18 04:25:32 +02:00
hal_attribute_hwservice_client drop '_client' Since this attribute just associates a hal_attribute with a given hwservice in the standard way. Bug: 80319537 Test: boot + sanity + test for denials Change-Id: I545de165515387317e6920ce8f5e8c491f9ab24e
2018-06-06 18:30:18 +02:00
hal_attribute_hwservice(hal_dumpstate, hal_dumpstate_hwservice)
Update sepolicy to add dumpstate device service for AIDL HAL - Add hal_dumpstate_service AIDL service to hal_dumpstate.te, service.te - Add default example hal_dumpstate service to file_contexts, service_contexts - Adde hal_dumpstate_service to API level 31 compatibility ignore list (31.0.ignore.cil) Bug: 205760700 Test: VtsHalDumpstateTargetTest, dumpstate, dumpstate_test, dumpsys Change-Id: If49fa16ac5ab1d3a1930bb800d530cbd32c5dec1
2021-11-16 10:06:00 +01:00
hal_attribute_service(hal_dumpstate, hal_dumpstate_service)
binder_call(hal_dumpstate_server, servicemanager)
Restrict access to hwservicemanager This adds fine-grained policy about who can register and find which HwBinder services in hwservicemanager. Test: Play movie in Netflix and Google Play Movies Test: Play video in YouTube app and YouTube web page Test: In Google Camera app, take photo (HDR+ and conventional), record video (slow motion and normal), and check that photos look fine and videos play back with sound. Test: Cast screen to a Google Cast device Test: Get location fix in Google Maps Test: Make and receive a phone call, check that sound works both ways and that disconnecting the call frome either end works fine. Test: Run RsHelloCompute RenderScript demo app Test: Run fast subset of media CTS tests: make and install CtsMediaTestCases.apk adb shell am instrument -e size small \ -w 'android.media.cts/android.support.test.runner.AndroidJUnitRunner' Test: Play music using Google Play music Test: Adjust screen brightness via the slider in Quick Settings Test: adb bugreport Test: Enroll in fingerprint screen unlock, unlock screen using fingerprint Test: Apply OTA update: Make some visible change, e.g., rename Settings app. make otatools && \ make dist Ensure device has network connectivity ota_call.py -s <serial here> --file out/dist/sailfish-ota-*.zip Confirm the change is now live on the device Bug: 34454312 (cherry picked from commit 632bc494f199d9d85c37c1751667fe41f4b094cb) Merged-In: Iecf74000e6c68f01299667486f3c767912c076d3 Change-Id: I7a9a487beaf6f30c52ce08e04d415624da49dd31
2017-04-14 04:05:27 +02:00
hal_dumpstate: allow writing to bug report files Bug: 31982882 Test: works with wip bullhead binderized dumpstate implementation Change-Id: Iae964f49b3c2704688ded8e7366d89ace35a92aa
2016-12-29 03:45:14 +01:00
# write bug reports in /data/data/com.android.shell/files/bugreports/bugreport
allow hal_dumpstate shell_data_file:file write;
dumpstate: allow HALs to read /proc/interrupts /proc/interrupts may be dumped by dumpstate HAL if required. Bug: 36486169 Test: 'adb shell bugreport' on sailfish Change-Id: Ifc41a516aeea846bc56b86b064bda555b43c58ed Signed-off-by: Sandeep Patil <sspatil@google.com>
2017-03-22 20:44:16 +01:00
# allow reading /proc/interrupts for all hal impls
allow hal_dumpstate proc_interrupts:file r_file_perms;
Reference in a new issue Copy permalink