Commit graph

119 commits

Author SHA1 Message Date
Henry Tung
6d57b494c0 Create new system property type for Factory OTA could write system property
Due to Factory OTA client install in product partition but it also declare coredomian in
its sepolicy setting. That will let Factory OTA unable to find a property type could write system property.
But now Factory OTA have a restore NFC wake function need to write system property for communicate with bootloader.
So we need to create a new property type in system framework which could allow Factory OTA client to write system property.

Bug: 145178094
Test: Manual
Change-Id: Ic549cc939893ec67a46bf28a23ebeb9f9b81bd0b
2019-12-13 09:39:19 +00:00
Pierre-Hugues Husson
03f2bb6792 Merge "Mark mediacodec_2{6,7,8} as hal_omx_server" am: cc3f943436 am: 0608b6cdfb
am: 95dbe16e99

Change-Id: Ied2eaa4c259bec3460926d4ad892514bd6e6e5e7
2019-10-01 19:22:00 -07:00
Pierre-Hugues Husson
95dbe16e99 Merge "Mark mediacodec_2{6,7,8} as hal_omx_server" am: cc3f943436
am: 0608b6cdfb

Change-Id: I0d3e5a2becbe1f94f91aafa1defb7f63fe9af14e
2019-10-01 19:15:58 -07:00
Pierre-Hugues Husson
0608b6cdfb Merge "Mark mediacodec_2{6,7,8} as hal_omx_server"
am: cc3f943436

Change-Id: Ie70d97c980afe0d830344c011408eb9110f73752
2019-10-01 19:09:57 -07:00
Pierre-Hugues Husson
1019870fba Mark mediacodec_2{6,7,8} as hal_omx_server
The commit 7baf725ea6 broke OMX on O/O-MR1(/P?) vendors.
Previous to this commit, all OMX codecs had to use "mediacodec" type,
after this commit, omx codecs just had to get hal_omx_server attribute.
This commit left to the vendor the charge of adding "hal_omx_server"
attribute to mediacodec.

However this can't work on non-Q vendors.

On P vendor, versioned_plat_pub contains the appdomain <=> mediacodec
allows, so OMX isn't technically broken on those devices.
But to ensure it won't break in the future, mark 28's mediacodec as
hal_omx_server as well

This fixes broken OMX decoding on O/O-MR1 vendors, failing with the
following denial:
avc: denied { call } for comm=4E444B204D65646961436F6465635F scontext=u:r:platform_app:s0:c512,c768 tcontext=u:r:mediacodec:s0 tclass=binder permissive=0

Bug: 141186440

Change-Id: I018f8d9aabc77e7ea86ca14734b1ab2edfdf8ed1
2019-10-01 20:48:01 +00:00
Paul Crowley
908a9c6f16 Merge "Export vold FDE algorithm properties" am: 8cb6460058 am: fa2cc0539e
am: fb0c7a23e2

Change-Id: I853eda4a989719d6112ffb2d14d64c54c32c3709
2019-09-25 10:16:17 -07:00
Paul Crowley
fb0c7a23e2 Merge "Export vold FDE algorithm properties" am: 8cb6460058
am: fa2cc0539e

Change-Id: I72c5085569b8a8e9fd9ea8777979d1ddf44de0f2
2019-09-25 10:09:38 -07:00
Paul Crowley
fa2cc0539e Merge "Export vold FDE algorithm properties"
am: 8cb6460058

Change-Id: I912cca35978e934dfc1458cee946f0f0c24760f5
2019-09-25 10:02:47 -07:00
yuguoxu
a894a1aa66 Export vold FDE algorithm properties
ro.crypto.fde_algorithm
ro.crypto.fde_sector_size
ro.crypto.volume.contents_mode

These properties were not added to sepolicy export2vold. vold can't access
crypto algorithm type when flashing a GSI image and when the properties are in
/vendor/build.prop. This prevents FDE from working.

Bug: 141518844
Change-Id: I234bda439f6be7a2211a194856baf75800396232
Signed-off-by: yuguoxu <yuguoxu@allwinnertech.corp-partner.google.com>
2019-09-25 16:29:54 +00:00
Roland Levillain
695e2c15bb Allow dexoptanalyzer to mmap files with Linux 4.14+ that it can already access.
am: d8a9a493c5

Change-Id: I016d5846fc9bc21c46882c16ff17de535fa5974e
2019-09-13 12:30:17 -07:00
Roland Levillain
d8a9a493c5 Allow dexoptanalyzer to mmap files with Linux 4.14+ that it can already access.
SELinux has a separate file mmap permission in 4.14+ kernels. Add this
to dexoptanalyzer(d) in cases where it could already access files (in
particular, secondary dex files).

Addresses denials of the form:

  avc: denied { map } for […] path="/data/data/[…]" […]
  scontext=u:r:dexoptanalyzer:s0 tcontext=u:object_r:app_data_file:s0

(cherry picked from commit c72b7d1731)

Test: Reproduce steps in bug 138683603 on a device with a 4.14+ kernel
      and check the absence of SELinux denials
Bug: 138683603

Change-Id: Ieba53eb431c0ba3914dcb5e5abdae667bd063555
2019-09-13 13:45:40 +01:00
Xin Li
36edee480d Merge qt-r1-dev-plus-aosp-without-vendor (5817612) into stage-aosp-master
Bug: 135460123
Change-Id: Ie43761a96540ce489b65d9ba467ebdfa2dfe6066
Merged-In: I87a1ce741a77f5bd3a4ea81f1c519f7c1955a3c6
2019-09-08 13:07:03 -07:00
Paul Lawrence
9f38ee2021 Merge "Fix ext4/metadata/udc problem" am: 4d40aefa4b am: 31e6fa2075
am: 8134966f21

Change-Id: Ifdb5da049d4c1cd60e68d684b7e96ddf6c287500
2019-08-27 09:09:59 -07:00
Paul Lawrence
31e6fa2075 Merge "Fix ext4/metadata/udc problem"
am: 4d40aefa4b

Change-Id: I6d445070b533d3353a714fb043102c0be00cc883
2019-08-27 08:44:48 -07:00
Paul Lawrence
4d40aefa4b Merge "Fix ext4/metadata/udc problem" 2019-08-27 15:21:58 +00:00
Daniel Solomon
8e65285ec5 selinux: Update Q sepolicy prebuilt
am: 3248182855

Change-Id: I35a78cd9208439c9fc89c20ea546081fb5d4b4f2
2019-08-26 23:44:02 -07:00
Xin Li
65227a4be7 DO NOT MERGE - Merge build QP1A.190711.019 into stage-aosp-master
Bug: 139893257
Change-Id: I4a36357883efe369754e3ec08541e05f847b28ce
2019-08-23 06:45:27 +00:00
Daniel Solomon
732de6c2da selinux: Update Q sepolicy prebuilt
am: 3248182855

Change-Id: I0bb332cbb95c64d67c62527c5b34ff0298102e3d
2019-08-21 20:05:23 -07:00
Daniel Solomon
3248182855 selinux: Update Q sepolicy prebuilt
Tag gpu_service as app_api_service. This is the corresponding api 29.0
change to the public service.te from commit aosp/1105058
(I30a951cd712b0ae4aacd2c4d6d42e74fac5c0707).

Bug: 139685237
Test: m selinux_policy
Change-Id: Ia23cdd5f59b40a3e99cae424d9cf41d5e7442631
2019-08-21 17:10:37 -07:00
Carmen Jackson
afac97a16d Allow Traceur to record the suspend_resume trace event
This should be available in user and userdebug builds.

Bug: 137289935
Test: Alongside atrace changes, recorded a trace using Traceur and
verified that the tracepoints were included in the recorded trace in
both user and userdebug builds.

Change-Id: I6131557bdd0a298be9e75b39759599b189b9b988
Merged-In: I6131557bdd0a298be9e75b39759599b189b9b988
2019-08-13 17:13:00 +00:00
Carmen Jackson
dc43a0049b Allow Traceur to record the suspend_resume trace event am: 1e414b5355 am: 5860205f67
am: e46d7c3ce4

Change-Id: Icc034caa25d2cc57ff2988e7a89e33a8f5aa0dec
2019-08-13 01:35:36 -07:00
Carmen Jackson
e46d7c3ce4 Allow Traceur to record the suspend_resume trace event am: 1e414b5355
am: 5860205f67

Change-Id: I3881e0a4acac844f93822e9a28fe052d199c5c40
2019-08-13 01:28:53 -07:00
Carmen Jackson
5860205f67 Allow Traceur to record the suspend_resume trace event
am: 1e414b5355

Change-Id: I32de6f61520474f1cb9895e416ba409847082e6d
2019-08-13 01:13:23 -07:00
Carmen Jackson
1e414b5355 Allow Traceur to record the suspend_resume trace event
This should be available in user and userdebug builds.

Bug: 137289935
Test: Alongside atrace changes, recorded a trace using Traceur and
verified that the tracepoints were included in the recorded trace in
both user and userdebug builds.

Change-Id: I6131557bdd0a298be9e75b39759599b189b9b988
2019-08-09 10:56:15 -07:00
Paul Lawrence
37739146b6 Fix ext4/metadata/udc problem
Test: Cannot currently test since no device supports this combo
Bug: 137924328
Change-Id: Ie59e6c37e293c983e99618eacda9fd09c2ce01ed
2019-08-08 08:55:29 -07:00
Ady Abraham
f8aebbaa5d Merge "Add ro.surface_flinger.set_display_power_timer_ms to sepolicy" into qt-r1-dev
am: 74395f1ff4

Change-Id: I2abb139843bc425d276145d27d00c0f3acf5d30a
2019-07-16 15:54:52 -07:00
Ady Abraham
74395f1ff4 Merge "Add ro.surface_flinger.set_display_power_timer_ms to sepolicy" into qt-r1-dev 2019-07-16 22:40:52 +00:00
Daniel Rosenberg
eb1cf76b70 sepolicy: Adjust policy for migrate_legacy_obb_data.sh
Required to check if migration is necessary and migrate obb contents

Bug: 136199978
Test: make
Change-Id: I23890e4eeea1da7791e25ce5c9584b1abe94f440
(cherry picked from commit 793dc8f8da)
2019-07-16 02:55:25 +00:00
Daniel Rosenberg
0f6312f1d2 Merge "sepolicy: Adjust policy for migrate_legacy_obb_data.sh" into qt-dev am: a85c5360ab
am: 73c8c81d7e

Change-Id: I785f5c739ef9e96d0b8bc5d2939281fc5c7e8c18
2019-07-15 13:32:57 -07:00
Daniel Rosenberg
73c8c81d7e Merge "sepolicy: Adjust policy for migrate_legacy_obb_data.sh" into qt-dev
am: a85c5360ab

Change-Id: Id7800116e2ad5f2b4ce4a757b3c9c6bd61685c5e
2019-07-15 13:22:06 -07:00
Daniel Rosenberg
640ead1a51 Merge "sepolicy: Adjust policy for migrate_legacy_obb_data.sh" into qt-dev
am: a85c5360ab

Change-Id: I9cf4bf773a5c7d36922bb590f74e283c565673c8
2019-07-15 13:21:54 -07:00
Daniel Rosenberg
a85c5360ab Merge "sepolicy: Adjust policy for migrate_legacy_obb_data.sh" into qt-dev 2019-07-15 19:56:35 +00:00
Daniel Rosenberg
793dc8f8da sepolicy: Adjust policy for migrate_legacy_obb_data.sh
Required to check if migration is necessary and migrate obb contents

Bug: 136199978
Test: make
Change-Id: I23890e4eeea1da7791e25ce5c9584b1abe94f440
2019-07-12 16:35:20 -07:00
Ady Abraham
40909f65a6 Add ro.surface_flinger.set_display_power_timer_ms to sepolicy
Bug: 135550670
Test: Boot with SELinux enforcing
Change-Id: I61c30abc39909a263a2c402a5c0eb1de570748bb
2019-07-12 12:43:25 -07:00
Thierry Strudel
b8c28bdc96 Merge "SF: enable device-specific dataspace for color space agnostic surfaces" into qt-r1-dev
am: d519b1ca7c

Change-Id: I65664b9072278b2dd6d43ad564670a03defdaed7
2019-07-08 17:34:13 -07:00
Thierry Strudel
d519b1ca7c Merge "SF: enable device-specific dataspace for color space agnostic surfaces" into qt-r1-dev 2019-07-09 00:15:22 +00:00
Sidath Senanayake
0ea109059f Update API 29 prebuilts to include gpu_frequency tracepoint am: 31056ae11d am: 72883eff9c
am: b76450761a

Change-Id: I868cdaac753727f3ccaf92fceca00cbc8aabc2f1
2019-07-03 19:17:17 -07:00
Sidath Senanayake
72883eff9c Update API 29 prebuilts to include gpu_frequency tracepoint
am: 31056ae11d

Change-Id: I4ff4a43d337dff01e90fcea9d78e7eb241d4aaf5
2019-07-03 17:25:39 -07:00
Sidath Senanayake
31056ae11d Update API 29 prebuilts to include gpu_frequency tracepoint
Bug: 136289121
Change-Id: I2fb013d46ab72b29a83754b5199816d080bce534
2019-07-03 16:32:18 +01:00
Yichi Chen
39efa50184 SF: enable device-specific dataspace for color space agnostic surfaces
To reduce the DPU loading in color conversion, we enable device-specific
dataspace for color space agnostic surfaces. Since the type of surfaces
usually provide gray-level surfaces to users, it can be acceptable to
ignore the color conversion on them.

Bug: 134783740
Bug: 135140940
Test: Check ScreenDecorOverlays in expected dataspace
Test: Play HDR video on C2 and check dataspace
Change-Id: Ief32f0ff3867b2e154fecd6c9ebd6610b0e6ed11
2019-07-03 20:24:42 +08:00
Sidath Senanayake
b1d6eb979e Allow perfetto to access gpu_frequency tracepoint in user
am: 9bfaa1c4dd

Change-Id: Ie0ec9a00dab4c2d8aea365fb95b708aee8ef09d0
2019-07-02 13:00:52 -07:00
Sidath Senanayake
9bfaa1c4dd Allow perfetto to access gpu_frequency tracepoint in user
This will allow Perfetto to capture GPU frequency changes
on the target, which is useful to graphics developers
using Perfetto to profile graphics HW usage.

This change also updates the private prebuilt at version
29.0 to match the update.

Bug: 136062452
Merged-In: Idb7870b2f674f1359ef3b4487dbeff190b394248
Change-Id: Ib98ba10d96caa199d7030be3a17148045576a80c
2019-06-28 20:13:05 +01:00
Todd Kennedy
efc2dbb26e Allow rule to let settings access apex files
am: 9067699d9d

Change-Id: Id3541133ffa48e7685f8e8195f5c585ea8fe9630
2019-06-28 10:32:32 -07:00
Andrew Sapperstein
ea1bd922f6 Merge "Revert "Revert "Allow rule to let settings access apex files""" am: 6eaf8a2d62 am: 48353bf0af
am: 41ca891c57

Change-Id: Idf332f592d50734b9751b145c237f2c9d29e34fe
2019-06-28 10:06:56 -07:00
Cosmo Hsieh
1d84c81370 Merge "Revert "Allow rule to let settings access apex files"" am: 71e1c36956 am: be678acc85
am: 7f1dd65024

Change-Id: Ie1ca6f6bf2e1b7d956583a7eaa32ebbe7c04a89e
2019-06-28 09:39:54 -07:00
Andrew Sapperstein
41ca891c57 Merge "Revert "Revert "Allow rule to let settings access apex files""" am: 6eaf8a2d62
am: 48353bf0af

Change-Id: I91b9edc07fbc1cbefae611017c409a9bfd27bf0e
2019-06-28 09:30:18 -07:00
Cosmo Hsieh
7f1dd65024 Merge "Revert "Allow rule to let settings access apex files"" am: 71e1c36956
am: be678acc85

Change-Id: I29ea36768d5b129777eb41cd3275f25b14f8edf0
2019-06-28 09:16:02 -07:00
Andrew Sapperstein
a8b6c0f0bf Merge "Allow rule to let settings access apex files" am: bfe6fdedba am: f7c9b8a1fc
am: 9b6ad1d5b0

Change-Id: I8384127510e8e45821ea4ec9785e4e784135e506
2019-06-28 09:13:29 -07:00
Andrew Sapperstein
9b6ad1d5b0 Merge "Allow rule to let settings access apex files" am: bfe6fdedba
am: f7c9b8a1fc

Change-Id: Ie8a88d458f234477d2311a6a8f0f9fde3533de5c
2019-06-28 09:03:26 -07:00
Andrew Sapperstein
544a9b1c51 Revert "Revert "Allow rule to let settings access apex files""
This reverts commit e47d2365a8.

Reason for revert: Original CL was not the cause of the breakage. It went green before this revert landed. https://android-build.googleplex.com/builds/branches/aosp-master/grid?

Original CL went in 5695273.
Went green in 5695399.
Revert went in 5695588.

Change-Id: Ie4d7065fe7d3c58cdff99c2b7d76b50b941895bb
2019-06-28 15:28:28 +00:00