Commit graph

282 commits

Author SHA1 Message Date
Jack Yu
181b6376d0 Merge "Add sepolicy for nfc hal v1.2" am: fd2d7b3f5c
am: c4b5e0a3a8

Change-Id: Id4c20b3c5fd3538359ce9d2756e19ae993b0c855
2019-04-22 23:56:05 -07:00
Jack Yu
a5dde796b5 Add sepolicy for nfc hal v1.2
Bug: 130509605
Test: No avc denial log and NFC works with hal v1.2
Change-Id: If54884f76a32705d11f2085f66fe83b9e0354f79
2019-04-22 12:08:20 +00:00
Henry Fang
1f1e36069d Change sepolicy to allow cas@1.1 service
Modify sepolicy configure file, so that cas@1.1 service can run
Test: Manual
bug: 124016538

Change-Id: I0b160bc1c575aa18ffead7ff136509fc9dcfb472
Merged-In: I142a6cd66a81ad9e0c8b4d87da672fb8f5c181d6
2019-02-08 22:05:25 +00:00
Henry Fang
1087a9e3e2 enable cas@1.1 interface
Change sepolicy to allow cas@1.1 service to run
Test: Manual
bug: 123903559

Change-Id: I142a6cd66a81ad9e0c8b4d87da672fb8f5c181d6
2019-02-05 13:16:37 -08:00
Peter Kalauskas
60c468c312 Merge "Allow lazy wifi HAL to run" am: 2613456a36 am: 66e92002e0
am: 8f91716a6b

Change-Id: I075e0062107a17351493693eaa2784023a861943
2019-01-31 14:40:41 -08:00
Peter Kalauskas
2613456a36 Merge "Allow lazy wifi HAL to run" 2019-01-31 22:05:47 +00:00
Jeff Vander Stoep
c4bc7d04db Initial selinux policy support for memfd am: 9f5d0d90a3 am: 5314cb2a93
am: beb8e5d159

Change-Id: Ia03563336f924ea99af2763b2edc71c2be52b6d3
2019-01-30 11:51:10 -08:00
Jeff Vander Stoep
9f5d0d90a3 Initial selinux policy support for memfd
Move all app tmpfs types to appdomain_tmpfs. These are still protected
by mls categories and DAC. TODO clean up other app tmpfs types in a
separate change.

Treble-ize tmpfs passing between graphics composer HAL and
surfaceflinger.

Bug: 122854450
Test: boot Blueline with memfd enabled.
Change-Id: Ib98aaba062f10972af6ae80fb85b7a0f60a32eee
2019-01-30 19:11:49 +00:00
Peter Kalauskas
03f43017b2 Allow lazy wifi HAL to run
Test: Manually check that lazy wifi HAL runs
Bug: 123307146
Change-Id: I22f9bc7a097056215d249b692b6f39a71b6b9811
2019-01-30 18:52:19 +00:00
Jeff Vander Stoep
41a2abfc0d Properly Treble-ize tmpfs access
This is being done in preparation for the migration from ashmem to
memfd. In order for tmpfs objects to be usable across the Treble
boundary, they need to be declared in public policy whereas, they're
currently all declared in private policy as part of the
tmpfs_domain() macro. Remove the type declaration from the
macro, and remove tmpfs_domain() from the init_daemon_domain() macro
to avoid having to declare the *_tmpfs types for all init launched
domains. tmpfs is mostly used by apps and the media frameworks.

Bug: 122854450
Test: Boot Taimen and blueline. Watch videos, make phone calls, browse
internet, send text, install angry birds...play angry birds, keep
playing angry birds...

Change-Id: I20a47d2bb22e61b16187015c7bc7ca10accf6358
Merged-In: I20a47d2bb22e61b16187015c7bc7ca10accf6358
(cherry picked from commit e16fb9109c)
2019-01-26 17:30:41 +00:00
Jeff Vander Stoep
e16fb9109c Properly Treble-ize tmpfs access
This is being done in preparation for the migration from ashmem to
memfd. In order for tmpfs objects to be usable across the Treble
boundary, they need to be declared in public policy whereas, they're
currently all declared in private policy as part of the
tmpfs_domain() macro. Remove the type declaration from the
macro, and remove tmpfs_domain() from the init_daemon_domain() macro
to avoid having to declare the *_tmpfs types for all init launched
domains. tmpfs is mostly used by apps and the media frameworks.

Bug: 122854450
Test: Boot Taimen and blueline. Watch videos, make phone calls, browse
internet, send text, install angry birds...play angry birds, keep
playing angry birds...

Change-Id: I20a47d2bb22e61b16187015c7bc7ca10accf6358
2019-01-25 08:56:45 -08:00
Peter Kalauskas
74eed68b46 Merge "Allow lazy HAL to run" am: b6388fe753 am: a8ee48d499
am: 91dc2bca8c

Change-Id: I379d162d5a1f4f235049e74339ecdc3c2b9d413b
2019-01-24 07:52:24 -08:00
Peter Kalauskas
b1bdbb58cf Allow lazy HAL to run
Test: Manual
Change-Id: Ic4c3fd5b2d8d709573f8cc6332a6340d28d3ba26
2019-01-23 15:29:05 -08:00
Brian Stack
b1122f9372 Merge "Add selinux policy for Sensors HAL 2.0" am: 1e6055f172 am: 38626e4975
am: 76b2cccbc3

Change-Id: I1b1b6912556bffe17ce9d2a52a3fb1d53f11129a
2019-01-22 20:34:11 -08:00
Brian Stack
b8baed8fa7 Add selinux policy for Sensors HAL 2.0
Bug: 122267378
Test: Builds, no dmesg errors when starting Sensors HAL 2.0
Change-Id: Ieb52449579f72421bf8f36fb6af0cb110d04bd1c
2019-01-22 21:02:21 +00:00
Marissa Wall
c82e6e3671 Merge "gralloc3: add sepolicy for allocator/mapper 3.0" am: 7f22034591 am: e41834c88e
am: cfd4adebac

Change-Id: I25195cbaeab45407cd131b5ea1eea60f78d19ba4
2019-01-17 16:19:44 -08:00
Marissa Wall
97f5383895 gralloc3: add sepolicy for allocator/mapper 3.0
IAllocator and IMappaer are being rev'd to 3.0. Update sepolicy to
allow them to be used.

Test: compile with allocator/mapper patches add boot the device
Bug: 120493579
Change-Id: Id241c6bd79c02ec93d8dd415539f90a18f733d03
2019-01-17 11:56:08 -08:00
Wei Wang
d8339d7b28 Thermal: remove mock implementation sepolicy
Test: Build
Change-Id: I92562077535593aa62e4536b58cd43378aa65a6d
2019-01-14 09:18:32 -08:00
Siarhei Vishniakou
434dd2d6c7 Merge "Permissions for InputClassifier HAL" am: 1531e72e76 am: f01aeef78c
am: 26670ab73f

Change-Id: I45ee39fb63dab2ec91a5a909e59c990bacc7c48a
2019-01-11 11:54:26 -08:00
Eino-Ville Talvala
579314c66a Camera HAL: Allow minor version changes to camera.provider
Test: Adding a camera.provider@2.5 to a device works correctly
Merged-In: I516698afedad1294c0af3f4efedb0aed0a141780
Change-Id: I516698afedad1294c0af3f4efedb0aed0a141780
2019-01-11 19:24:47 +00:00
TreeHugger Robot
11111939ef Merge "Camera HAL: Allow minor version changes to camera.provider" 2019-01-11 04:28:51 +00:00
Siarhei Vishniakou
41a871ba84 Permissions for InputClassifier HAL
Add the required permissions for the InputClassifier HAL.

Bug: 62940136
Test: no selinux denials in logcat when HAL is used inside input flinger.
Change-Id: Ibc9b115a83719421d56ecb4bca2fd196ec71fd76
2019-01-11 02:08:19 +00:00
Eino-Ville Talvala
2efd25cc4a Camera HAL: Allow minor version changes to camera.provider
Test: Adding a camera.provider@2.5 to a device works correctly
Change-Id: I516698afedad1294c0af3f4efedb0aed0a141780
2019-01-08 17:02:43 -08:00
Peter Kalauskas
d1eeffc551 Allow lazy drm services to run
Change-Id: I13f7bb0d04b5388180683edd6d5dc75555ada644
2018-12-28 13:16:55 -08:00
Zachary Iqbal
4c7469ad38 Added placeholder SELinux policy for the biometric face HAL. am: 893272d883 am: f8be9cf1c0
am: ab1e43cdad

Change-Id: If9c63acee76a9574c2e2fdbd7a2796bf89d194cc
2018-12-28 13:00:42 -08:00
Zachary Iqbal
893272d883 Added placeholder SELinux policy for the biometric face HAL.
Notes:
- Added face hal domain, context and file types for the default
  SELinux policy.
- Please see aosp/q/topic:"Face+Authentication"

Bug: 80155388
Test: Built successfully.
Change-Id: I2e02cf6df009c5ca476dfd842b493c6b76b7712a
2018-12-28 12:23:56 -08:00
Peiyong Lin
3a4b920de6 [SEPolicy] Add composer 2.3
Use regular expression for all composer service versions.

BUG: 115554640
Test: Build, flash and boot

Merged-In: Ie84ebb0a43c9eaad66829b15deaa8b3046bd7fe4
Change-Id: Ie84ebb0a43c9eaad66829b15deaa8b3046bd7fe4
2018-12-22 03:00:03 +00:00
Peiyong Lin
da3a837b97 [SEPolicy] Add composer 2.3
Use regular expression for all composer service versions.

BUG: 115554640
Test: Build, flash and boot

Change-Id: Ie84ebb0a43c9eaad66829b15deaa8b3046bd7fe4
2018-12-21 06:42:33 -08:00
Chong Zhang
bb2c7eb3dd Merge "Use hidl memory from allocator in CAS" am: 490cbfdbd3 am: fd59441275
am: c13fa3ce4d

Change-Id: I2adc312dd0eb948be0bcdf8bf24e67d8ab06efc0
2018-12-18 12:47:50 -08:00
Chong Zhang
404e40c6c1 Use hidl memory from allocator in CAS
Make mediaextractor use hidl memory allocated by
hidl allocator, instead of constructing hidl memory
from IMemory.

bug: 112766913
bug: 111407253
Change-Id: I7902f18768005c995925bc9a7947299e9988b68a
(Needed for internal commit I39e131718ea41f9cb23177c28213ddf7b7741338)
2018-12-17 22:49:18 +00:00
Peter Kalauskas
359d659cd6 Merge "Allow lazy cas service to run" am: f0b4fedc1c am: 85a60b8d99
am: c9e5f6518d

Change-Id: Iddef2266775ea4d2c00c7c7c3bab0e4ea8df69a9
2018-12-16 15:12:59 -08:00
Peter Kalauskas
4cc196f48a Allow lazy cas service to run
Test: Run CtsMediaTestCases on aosp_marlin_svelte
Change-Id: Ie7d491fbc11ef5c24826a0d69e479bc03bd2ad08
2018-12-14 21:29:58 +00:00
Yu-Han Yang
01dcae13b5 Merge "Add sepolicy for GNSS HAL 2.0 and 1.1" am: 66f75b699f am: c668a9ab13
am: d42cd8b5b2

Change-Id: I70c9ce2598bed332929124d212d4e77c98759487
2018-12-13 15:10:21 -08:00
Yu-Han Yang
63de8591e8 Add sepolicy for GNSS HAL 2.0 and 1.1
Bug: 112260995
Bug: 120277977
Test: atest VtsHalGnssV2_0TargetTest
Change-Id: I196d8506b2f7c2153e1f647ea5ba61b81bf3d881
2018-12-12 13:41:01 -08:00
Benjamin Schwartz
e7040eada0 Add power.stats HAL 1.0 sepolicy
Also giving statsd permission to access it. This change copies the internal sepolicy to AOSP.

Bug: 111185513
Bug: 120551881
Test: make
Change-Id: I7e0386777e05580299caf9b97cb7804459f1a9d0
2018-12-11 00:11:08 +00:00
Peter Kalauskas
46b6d252e8 Add rules to allow default lazy camera HAL
Test: Reboot and ensure lazy camera HAL can run
Change-Id: I4cd9fe75537c6aca561830524e25fba631a12def
2018-12-07 13:29:22 -08:00
Kevin DuBois
7fc5b9ff83 Merge "add updated graphics.composer (2.3) to sepolicy" 2018-10-29 15:05:17 +00:00
Kevin DuBois
815f504cae add updated graphics.composer (2.3) to sepolicy
Allows graphics.composer@2.3 services to run.

Test: Boot, make sure UI comes up, 2.3 service is running
Bug: 116028976

Change-Id: I58c2a7523aa3277596add74eef61eaaba6230622
2018-10-25 13:36:34 -07:00
Vinay Kalia
fa445507d2 Merge "Add power.stats HAL 1.0 sepolicy" 2018-10-23 23:34:03 +00:00
Vinay Kalia
a4babcf2be Add power.stats HAL 1.0 sepolicy
BUG: 117424656
BUG: 111185513
Test: run vts -m VtsHalPowerStatsV1_0Target

Change-Id: Icb0790219df4189c0dabbe41221e69e56d000755
2018-10-23 18:12:10 +00:00
Wei Wang
03c669f5a3 Merge "Add sepolicy for thermal HAL 2.0" 2018-10-20 04:52:42 +00:00
Wei Wang
b0517359c4 Add sepolicy for thermal HAL 2.0
Bug: 116540200
Test: add default ThermalHAL 2.0 and VtsHalThermalV2_0TargetTest pass
Change-Id: I9e6f8d040b331f07a931d91cafd6921600f04ccd
2018-10-19 16:49:17 -07:00
Kim Low
dfc7348b25 Merge "Add input_device permission to hal_sensors_default" am: 24e2b82446 am: 22fbea2c34
am: b1edca4ae9

Change-Id: I73f8af3eca7bc63d58b49d3c3d1b1a0986b23632
2018-10-19 15:48:13 -07:00
Treehugger Robot
24e2b82446 Merge "Add input_device permission to hal_sensors_default" 2018-10-19 22:24:54 +00:00
Chong Zhang
f6721de82e Merge "add mediaswcodec service" am: 9977e25411 am: 817027b055
am: b1b6bf9bb3

Change-Id: I9f0252a0661c5ce533ba5f307035456b5c55a3ed
2018-10-11 19:19:35 -07:00
Chong Zhang
bdbfff1b00 add mediaswcodec service
Set up a new service for sw media codec services.

Bug: 111407413

Test: cts-tradefed run cts-dev --module CtsMediaTestCases --compatibility:module-arg CtsMediaTestCases:include-annotation:android.platform.test.annotations.RequiresDevice
Change-Id: Ia1c6a9ef3f0c1d84b2be8756eb1853ffa0597f8e
2018-10-11 15:10:17 -07:00
Wei Wang
bc71a6109e Add atrace HAL 1.0 sepolicy
Bug: 111098596
Test: atrace/systrace

(cherry picked from commit 9ed5cf6e43)

Change-Id: I97772ff21754d03a0aea0d53b39e8da5312a17c0
2018-09-27 23:18:29 +00:00
Wei Wang
9ed5cf6e43 Add atrace HAL 1.0 sepolicy
Bug: 111098596
Test: atrace/systrace
Change-Id: I06ca76750d640c98849c475c8a237d62c8e582b9
2018-09-25 21:02:10 -07:00
Tri Vo
f16aad1cce Merge "More granular vendor access to /system files." am: 6816044271 am: 70f1c88fa6
am: 2ce65bef69

Change-Id: Ia6bda63626f088f7c6211706f6b6a42f9e8c1a42
2018-09-21 18:46:06 -07:00
Tri Vo
6816044271 Merge "More granular vendor access to /system files." 2018-09-22 01:30:25 +00:00