Commit graph

24505 commits

Author SHA1 Message Date
Jeffrey Vander Stoep
6dc1e5f472 Merge "incident_service: only disallow untrusted access" into rvc-dev 2020-05-18 08:19:19 +00:00
Steven Moreland
d895b40f2e servicemanager: add dump fd permissions
Getting hit when bugreport tries to dump this.

Fixes: 155835324
Test: adb bugreport, check denials
(cherry picked from commit b0fb5b44f8)
Merged-In: I189aeba2d3a5dfafccb8f8a4db224db71820faca
Change-Id: Ic044f245d8fee9f7a49cf23f76961f7dedbb3d8b
2020-05-14 17:27:14 +00:00
Jeff Vander Stoep
fdda81a521 incident_service: only disallow untrusted access
Allow device-specific domains to access the incident_service.

Test: build
Bug: 156479626
(Cherry picked from commit 2aa8042f9d)
Change-Id: I64d844f7a549afb4224d91b086c1f5fd76d0664c
2020-05-13 18:53:30 +00:00
Xiangyu/Malcolm Chen
554bcfe5e8 Merge "Expose max.active.modem to be vendor inittable." into rvc-dev 2020-05-12 18:12:53 +00:00
TreeHugger Robot
fd40037003 Merge "Sync prebuilts with NNAPI enablement change" into rvc-dev 2020-05-12 06:43:33 +00:00
TreeHugger Robot
c5ecb5c12c Merge "Merge "Allow dumpstate to dump NNAPI HAL log on userbuild"" into rvc-dev 2020-05-12 06:43:33 +00:00
Evan Severson
8ba72f3280 Merge "Allow permission controller to use radio service" into rvc-dev 2020-05-11 22:55:33 +00:00
Evan Severson
a6d6f677a2 Allow permission controller to use radio service
Test: Observe denial go away
Bug: 153997991

Change-Id: I9a11e226867a5d68f2490f5143963cc66bd09538
2020-05-11 22:54:38 +00:00
Malcolm Chen
4062937968 Expose max.active.modem to be vendor inittable.
And rename it properly.

Bug: 154072245
Test: manual
Change-Id: I85b060ef90a747b43e1ab386337ffc5b49d29e57
Merged-In: I85b060ef90a747b43e1ab386337ffc5b49d29e57
2020-05-11 10:31:17 -07:00
Stefano Galarraga
ec7b180bc8 Sync prebuilts with NNAPI enablement change
Synchronizing changes in prebuilt dumpstate.te with changes in
Ibad9b68736ccbdc3ed796606fd1d78ca04f98ad0.

Test: build + boot
Bug: 145388549
Bug: 154169913
Change-Id: I8ad5245181d79e787e26910ee4e701e2ae6812c9
2020-05-11 08:28:05 +01:00
Suren Baghdasaryan
9436677538 Add lmkd. property policies
lmkd.reinit property allows vendors to trigger lmkd reinitialization. Add
lmkd_prop to support lmkd.* properties inlcuding lmkd.reinit.

Bug: 155149944
Test: setprop lmkd.reinit 1
Signed-off-by: Suren Baghdasaryan <surenb@google.com>
Merged-In: I6ba598bad7ebb40fd6f23de473f25f32e53c996d
Change-Id: I6ba598bad7ebb40fd6f23de473f25f32e53c996d
2020-05-08 15:35:16 +00:00
Suren Baghdasaryan
ff4789185a sepolicy: Allow lmkd to communicate with its other instance for reinit
Lmkd should implement reinit functionality and to do so it needs to
communicate with its running instance using socket.

Bug: 155149944
Test: lmkd --reinit
Signed-off-by: Suren Baghdasaryan <surenb@google.com>
Merged-In: I81455fe187830081d88f001b4588f7607b1bd1d0
Change-Id: I81455fe187830081d88f001b4588f7607b1bd1d0
2020-05-08 15:35:05 +00:00
PO HUNG CHEN
3e81d5dd6b Merge changes from topic "vabse" into rvc-dev
* changes:
  Allow update_engine to get gsid property
  Allow update_engine to get gsid property
2020-05-08 09:03:19 +00:00
TreeHugger Robot
249b79c680 Merge "allow modprobe to read /proc/cmdline" into rvc-dev 2020-05-08 06:43:25 +00:00
Howard Chen
f6b2db0be7 Allow update_engine to get gsid property
Allow the update_engine to use the gsid property and to avoid the VAB
merge when running a DSU.

Bug:147071959
Test: ota_e2etest.py

Change-Id: I4a8d179e7e71f74d0c7ad34767de1f619f134d20
2020-05-08 10:10:46 +08:00
Howard Chen
f010f9dbe3 Allow update_engine to get gsid property
Allow the update_engine to use the gsid property and to avoid the VAB
merge when running a DSU.

Bug:147071959
Test: ota_e2etest.py

Merged-In: I40220877625453198b217e788e6b3bfab8437f24
Change-Id: I40220877625453198b217e788e6b3bfab8437f24
2020-05-08 10:08:54 +08:00
Steve Muckle
9316da8e12 allow modprobe to read /proc/cmdline
This is needed for libmodprobe to pass module options on the kernel
commandline to kernel modules when they are loaded.

Bug: 155422904
Change-Id: I9df7e211765268815bfb9269365264f5ca468712
Merged-In: I9df7e211765268815bfb9269365264f5ca468712
2020-05-07 11:28:50 -07:00
TreeHugger Robot
5e85b38286 Merge changes from topic "b/154795779" into rvc-dev
* changes:
  Update prebuilt sepolicy
  mediaserver, mediaextractor, drmserver: allow vendor_overlay_file
2020-05-07 03:10:31 +00:00
Przemysław Szczepaniak
2f30c18778 Allow neuralnetworks hal service to read files from /sdcard
Bug: 138457453
Test: tflite nnapi benchmark app against /sdcard file
Change-Id: I368629f9177141d59eb5862cd29dd65da68d3ad7
Merged-In: I368629f9177141d59eb5862cd29dd65da68d3ad7
(cherry picked from commit 94be98073d)
2020-05-06 14:20:21 +01:00
Jeffrey Vander Stoep
594c68fd68 Merge "Gboard: Whitelist test failure" into rvc-dev 2020-05-06 12:05:09 +00:00
Jeff Vander Stoep
c63c15d207 Gboard: Whitelist test failure
This is intended to be temporary workaround until the Gboard
developers fix their app.

Addresses
avc: denied { bind } for comm="ThreadPoolForeg"
scontext=u:r:untrusted_app:s0:c166,c256,c512,c768
tcontext=u:r:untrusted_app:s0:c166,c256,c512,c768
tclass=netlink_route_socket permissive=
app=com.google.android.inputmethod.latin

Bug: 155595000
Bug: 155440523
Test: build
Change-Id: I432ac1462329efb4bc118c3967a099833e6eb813
(cherry picked from commit aeebb9a42e)
2020-05-06 08:08:50 +00:00
Jeongik Cha
1fa5d6a7c5 Update prebuilt sepolicy
Updating sepolicy in ag/11322695, accrodingly, update prebuilt dir as
well

> cp -r public/ prebuilts/api/${SDK_INT}.0/
> cp -r private/ prebuilts/api/${SDK_INT}.0/

Bug: 154795779
Test: m
Change-Id: I55c2917e9c26cc44dd462c5434b78d36943bd195
2020-05-06 14:16:06 +09:00
Jeongik Cha
eeb9830aab mediaserver, mediaextractor, drmserver: allow vendor_overlay_file
MediaPlayer cannot load a video from RRO packages.
So, add allow rules which is necessary to play the video.

Bug: b/154795779
Test: check if MediaPlayer can load a video in RRO
Change-Id: I06eed146b6e70a548b6b4f4faf56ba2bccd68140
Merged-In: I06eed146b6e70a548b6b4f4faf56ba2bccd68140
(cherry picked from commit 832a8a9389)
2020-05-06 14:07:57 +09:00
Songchun Fan
5974c8b538 [rvc] Define vendor-specific property ro.incremental.enable
[already merged in master and AOSP]

Make ro.incremental.enable a vendor-specific property. Allow
system_server and vold to read this property.

Test: manual
BUG: 155212902
Merged-In: I8ff8837af635fa8e7b5bb02e5f6de5ac15b5023b
Change-Id: Id432390023de232deb4cc4d0ff3fb73904093b60
2020-05-04 12:04:18 -07:00
Songchun Fan
05ae77459b Merge "Revert "Define vendor-specific property ro.incremental.enable"" into rvc-dev 2020-05-04 18:05:42 +00:00
Songchun Fan
79ec7da4e0 Revert "Define vendor-specific property ro.incremental.enable"
This reverts commit 916163cf1b.

Reason for revert: breaks build
BUG: 155655234
Change-Id: Idd4b682876786f80d892cf6b4e1cc8d748e34274
2020-05-04 18:05:16 +00:00
Songchun Fan
f2485aabf6 Merge "Define vendor-specific property ro.incremental.enable" into rvc-dev 2020-05-04 16:47:37 +00:00
Svet Ganov
395b2d4318 Updading selinux policy for R
* Update se policy prebuilts

Test: build + boot

bug:150281259

Change-Id: I0a0e94bc230f7726e7a9dd84b17c3a90e5601120
Merged-In: I0a0e94bc230f7726e7a9dd84b17c3a90e5601120
2020-04-30 15:57:06 -07:00
Songchun Fan
916163cf1b Define vendor-specific property ro.incremental.enable
[Will cherry-pick to AOSP]

Make ro.incremental.enable a vendor-specific property. Allow
system_server and vold to read this property.

Test: manual
BUG: 155212902
Change-Id: I8ff8837af635fa8e7b5bb02e5f6de5ac15b5023b
Merged-In: I8ff8837af635fa8e7b5bb02e5f6de5ac15b5023b
2020-04-30 01:05:55 +00:00
Dan Shi
893f7e67e0 Merge "Change property_contexts from private to public." into rvc-dev 2020-04-29 00:10:35 +00:00
Ioannis Ilkos
d723f38fe9 Enable tracing of the ion/ion_stat events
These events supersede the ion_heap_grow / ion_heap_shrink events on
4.19+ kernels.

Bug: 154302786
Test: build, run on cuttlefish with new kernel, ls -lZ /sys/kernel/tracing/events/ion/ion_stat/enable
Merged-In: I262d8c3269d4261701361ad4b1bdc322f1f03969
Change-Id: I262d8c3269d4261701361ad4b1bdc322f1f03969
2020-04-28 07:59:39 +01:00
yangbill
4279857b76 Change property_contexts from private to public.
For R, it is using public/property_contexts.

Bug: 154793693
Test: m vts_treble_sys_prop_test
Change-Id: I3056a010d063acbfbd4394e880b6dfb3cc317e00
Merged-In: I81a0e21a989dd89f8c37adf5a5c739ca0bdfbac0
Merged-In: I3e3c6e1dacfc0461a26e44df7e824db4d73c718f
2020-04-28 06:21:27 +00:00
TreeHugger Robot
324edd0fa1 Merge "property_contexts: Add ro.kernel.ebpf.supported" into rvc-dev 2020-04-25 06:33:32 +00:00
Steven Moreland
293754959b Merge "Add rules for hidl_lazy_test*" into rvc-dev 2020-04-25 00:14:18 +00:00
Nikita Ioffe
91cecb75ca Merge "Allow priv_app to search apex_data_file and read staging_data_file" into rvc-dev 2020-04-24 21:44:40 +00:00
Steven Moreland
eeaef8ace2 Add rules for hidl_lazy_test*
eng/userdebug rules added for integration testing of hidl_lazy_test,
similar to aidl_lazy_test.

This is required in sepolicy since the test requires defining a service
in an init.rc file, and so there needs to be sepolicy for init to start
this service.

Bug: 148114689
Test: hidl_lazy_test
Change-Id: Id6549cbb89b62d3f6de1ae2690ce95c3e8656f66
(cherry picked from commit e4f0ccf29c)
Merged-In: Id6549cbb89b62d3f6de1ae2690ce95c3e8656f66
2020-04-24 14:09:41 -07:00
Collin Fijalkovich
a24d7ccd8f Merge "Use prefixes for binder cache SELinux properties." into rvc-dev 2020-04-24 20:54:04 +00:00
Petri Gynther
284c189cf7 Merge "Allow adb shell user to collect vmstat" into rvc-dev 2020-04-24 16:40:40 +00:00
Felix
8962257c9f property_contexts: Add ro.kernel.ebpf.supported
This prop allows vendors to specify whether their devices
have basic eBPF compatibility (ie. Linux kernel 4.9 with P VINTF).

Make it exported_default_prop because the shared library
libbpf_android is used in a lot of places.

See: https://r.android.com/1261922

Test: builds
Bug: 151753987
Signed-off-by: Felix <google@ix5.org>
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Ifd9af558d84ea1619a6af7fce81b700fdfb22b9f
Merged-In: Ifd9af558d84ea1619a6af7fce81b700fdfb22b9f
2020-04-24 08:09:47 -07:00
David Sehr
96b06bc2ae Merge "Control use of dex2oat64 by device property" into rvc-dev 2020-04-23 23:38:26 +00:00
David Sehr
cfe6717d05 Control use of dex2oat64 by device property
Gate use of dex2oat64 by a device property.

Bug: 153380900
Test: atest -c  installd_dexopt_test
(cherry picked from commit 80a1403c62)
Merged-In: I640085b5cd744cdc4563f565f8a914f9b1adc3ab
Change-Id: Ic81916085112d6556ade78476dbc61bb3f318ce9
2020-04-23 21:41:28 +00:00
Petri Gynther
0e19ccc49f Allow adb shell user to collect vmstat
Bug: 154839500
Test: adb shell vmstat 2 5
Merged-In: I6e93c4b5b29f38549f49f7f1ed0bd505613d648f
Change-Id: I6e93c4b5b29f38549f49f7f1ed0bd505613d648f
2020-04-23 11:12:45 -07:00
Automerger Merge Worker
4dd363d511 Use prefixes for binder cache SELinux properties.
Adds a context for telephony related cache properties and changes
the bluetooth and system_server properties to match off of prefix
instead of exact string matches.

Bug: 151953109
Test: Flashed phone with PowerManager caches enabled and verified
that the phone boots.

Merged-In: I9110192a12bb6222e49a8fb6b266d6067ef2ea92
Change-Id: I3128596a2f893954a54499cf295e5c88a94d4965
(cherry picked from commit bae0bd2016)
2020-04-23 18:02:31 +00:00
Treehugger Robot
a07eaa4eec Adding file group for vts_treble_sys_prop_test.
Bug: 147720376
Test: m vts_treble_sys_prop_test
Change-Id: I81a0e21a989dd89f8c37adf5a5c739ca0bdfbac0
Merged-In: I81a0e21a989dd89f8c37adf5a5c739ca0bdfbac0
2020-04-23 17:55:04 +00:00
TreeHugger Robot
deddd22d0b Merge "Enable incidentd access to ro.boot.bootreason" into rvc-dev 2020-04-22 20:19:38 +00:00
Ashwini Oruganti
a917c9f6e1 Merge "Fix typo: s/com.google.android.gfs/com.google.android.gsf" into rvc-dev 2020-04-22 20:15:54 +00:00
Nikita Ioffe
34849cb3f1 Merge "Add new apexd.status value of "activated"." into rvc-dev 2020-04-22 18:43:02 +00:00
Wenjie Zhou
eee53bc24b Enable incidentd access to ro.boot.bootreason
incident report contains similar data as in a bugreport, but in proto
format.

This is a cherry-pick from aosp/1283764 with conflicts resolved.


Test: adb shell incident -p LOCAL 1000
Bug: 152173578
Change-Id: Iee53a3b8a6c95629a1d5c15b4d17f3d680b14178
Merged-In: Iee53a3b8a6c95629a1d5c15b4d17f3d680b14178
2020-04-22 17:55:18 +00:00
Ashwini Oruganti
1c46259081 Fix typo: s/com.google.android.gfs/com.google.android.gsf
Bug: 154597032
Test: TH
Change-Id: Ia8de313a9573649c456568abb3a8190dc2960bc3
Merged-In: Ia8de313a9573649c456568abb3a8190dc2960bc3
2020-04-22 10:35:56 -07:00
Oli Lan
c8fcff6bfe Add new apexd.status value of "activated".
- Cherry-pick of aosp/1228660

As of aosp/1224611, there is a new step in the preparation of APEXes
where init calls back into apexd after DE user data is unencrypted to
allow DE apex data to be snapshotted or restored.

This adds a new enum value for the apexd.status property to allow
this status to be described.

Bug: 148672144
Test: build & flash, check boot completes and check in logs that the
correct status values are set.
Merged-In: I7effcf16280eabcd5b9a0d70d33bd34d79121312
Change-Id: Ibe023ac0155419f2dfa8b1d5ce4c1e2a6ca87277
2020-04-22 13:05:11 +00:00