Commit graph

155 commits

Author SHA1 Message Date
Ady Abraham
ff9d4bdd63 Add new surfaceflinger ro props
add the new ro properties added to surfaceflinger:
ro.surface_flinger.set_idle_timer_ms
ro.surface_flinger.use_smart_90_for_video

Bug: 131054357
Test: Boot with SELinux enforcing
Change-Id: I887b318a95db200280344a11fcf7deaadafdeca9
2019-04-23 14:17:32 -07:00
Roshan Pius
73449cee1a Merge "wifi: Add a new property to indicate active wifi iface" am: 849ac8020d am: 09b3e95f62
am: 2a65fd6fd5

Change-Id: I72cb4f33460d38b5c3b249a47d0cf0dec3e8ab6e
2019-04-03 10:48:37 -07:00
Roshan Pius
d8790b66e1 wifi: Add a new property to indicate active wifi iface
Denial:
libc    : Unable to set property "wifi.active_interface" to "wlan0":
error code: 0x18

Bug: 129506593
Test: Verified that the denial is no longer seen in the logs
Change-Id: Ia345f5df1446e7ba3a44d6e8299bdc1f5f6ad9c8
2019-04-02 11:47:23 -07:00
Peiyong Lin
51605b2e9b [sepolicy] Add sysprop for SurfaceFlinger GPU protected contents. am: d50d36242c am: 5ff5900d16
am: 3c1bc0328a

Change-Id: I2bdd4e946a2aea0bea563a6a6ae034770c790445
2019-03-29 20:50:45 -07:00
Peiyong Lin
d50d36242c [sepolicy] Add sysprop for SurfaceFlinger GPU protected contents.
Not every device can support GPU protected contents, add a sysprop to allow
configuration.

BUG: 35315015
Test: N/A
Change-Id: I59f1b3ea81db742bc4d0b5a22e82de7385a726b7
2019-03-29 14:12:51 -07:00
Cheney Ni
25c58d0b57 Add rules for accessing the related bluetooth_audio_hal_prop am: e55a74bdff am: dd367bd058
am: 7f1e977b42

Change-Id: I0f2dd66489bb9d529f6e6cbd5bba7651fc5cf7ea
2019-03-20 01:53:39 -07:00
Cheney Ni
e55a74bdff Add rules for accessing the related bluetooth_audio_hal_prop
This change allows those daemons of the audio and Bluetooth which
include HALs to access the bluetooth_audio_hal_prop. This property is
used to force disable the new BluetoothAudio HAL.
  - persist.bluetooth.bluetooth_audio_hal.disabled

Bug: 128825244
Test: audio HAL can access the property
Change-Id: I87a8ba57cfbcd7d3e4548aa96bc915d0cc6b2b74
2019-03-20 03:12:25 +00:00
Nicolas Geoffray
d1cd878b80 Merge "Allow init to set dalvik.vm.boot-image." am: e668732936 am: 24b27f0b1a
am: 1c92ee4cc8

Change-Id: I24affb2f4f765ceceb76478cd22094a6c266b33b
2019-03-19 08:15:03 -07:00
Nicolas Geoffray
45963b59ae Allow init to set dalvik.vm.boot-image.
Test: m
Bug: 119800099
Change-Id: Idb4d4c6005e4ff271c1b5940bd39b655b674a0bb
2019-03-18 21:40:19 +00:00
Jack Yu
501d968535 Merge "Changed IWLAN operation mode system properties to enum" am: be93704fc5 am: 00cc584993
am: ad482918a0

Change-Id: I7331ba8cd5c197b5cf453729d305f63b54507915
2019-03-14 14:23:27 -07:00
Jack Yu
d8514fb33e Changed IWLAN operation mode system properties to enum
Changed the system properties to enum. The valid modes
are "default", "legacy", and "AP-assisted".

Test: Manual
Bug: 126218288

Change-Id: Ib70ed8606e845ca29453013a400b377647e15490
2019-03-13 10:15:39 -07:00
Inseob Kim
44ef135950 Merge "Fix surface flinger property types" am: 7a70210a47 am: 3767d8e9d0
am: c6e486e004

Change-Id: Iba6941358220d6e0f966adee6911ae28e80a8fb6
2019-03-12 23:24:59 -07:00
Inseob Kim
8669f52f79 Fix surface flinger property types
Third parameter of a property_context entry should be "exact" if the
entry is for a single property, not a prefix.

And the type of each entry should be the fourth parameter.

Bug: 112386364
Test: m -j
Change-Id: I2ed31c9fd7c7424e3a6a51d44b4e85413ae316b7
2019-03-12 22:38:36 +00:00
Jack Yu
7f3e79bacf Fixed the inaccessable system properties am: bd534ed52b am: f32b1100bc
am: 948f12c0ed

Change-Id: I56e49131299fed636cd995b363d97dc27275581e
2019-03-08 10:44:11 -08:00
Jack Yu
bd534ed52b Fixed the inaccessable system properties
Moved the system properties from exported3_default
to exported_radio so that the service from vendor
partition can access that.

Test: Manual
Bug: 126218288
Change-Id: I055c1c26d1e25f5d12f2593b96eecf57be62d871
2019-03-07 21:36:47 +00:00
Jiyong Park
2fed03eeaa Merge "Add a new system-to-vendor sysprop ro.apex.updatable" am: 452d6a5faa am: 15c0da7f90
am: 1e326b1a92

Change-Id: I6b3d91a7a764b6b1c589a0b20c8dc6c852e9e8fe
2019-03-06 10:40:56 -08:00
Jiyong Park
48d0793ec0 Add a new system-to-vendor sysprop ro.apex.updatable
The system property is for system to be able to identify vendor
implementation that is ready to support updatable APEXes. When this
sysprop is set to true, the init creates separate mount namespaces for
processes launched before apexd. When unset, default is false.

Bug: 122428178
Test: device boots to the UI
Test: atest android.appsecurity.cts.ExternalStorageHostTest
Change-Id: I4ae1eac5eec5f5085d8d32ff58300dfa9967c29a
2019-03-05 16:31:23 +09:00
Sundong Ahn
ed848e5554 Merge "Add ro.surface_flinger.display_primary*" am: 3e7ad0b081 am: c1f0e3cc95
am: 2c5a67ff89

Change-Id: I6966d101b149e1529409319e4a1d052d935fe07c
2019-02-25 22:15:38 -08:00
Sundong Ahn
88bb57ec88 Add ro.surface_flinger.display_primary*
The ro.surface_flinger.display_primary* properties are added to
property_contexts. Because these properties are located in vendor
partition, but surfaceflinger service which use these properties
is in the system partition.

Bug: 124531214
Test: m -j && boot test
Change-Id: If90c4bc75796d8966bbf3ee2e3bab39145395800
2019-02-21 09:54:13 +09:00
Peiyong Lin
a1269200c9 Merge "Add persistent property for SurfaceFlinger color mode." am: e72b2328ae am: 6cac784253
am: 91b5d26a71

Change-Id: I0ff650a8369f6ab822ff56880005b3d9150c646c
2019-02-12 10:35:26 -08:00
Peiyong Lin
4dfc59e5f4 Add persistent property for SurfaceFlinger color mode.
To enable devices to stay in a color mode all the time, add a persistent
property as part of per device configuration.

BUG: 124129486
Test: Build, flash and boot. Verify with internal patch
Change-Id: I45ce25e4f1317911e70a4276df6adc39e7455fed
2019-02-11 17:19:03 -08:00
Joel Fernandes
7b59e039f5 Merge "Add permissions for sys.use_memfd property" am: f6085fefe6 am: b80724d882
am: 28d070c9c7

Change-Id: I90b55fba1975b0ce30e445571a52dc0e8bb53346
2019-02-07 06:32:19 -08:00
Joel Fernandes
deef7f0afd Add permissions for sys.use_memfd property
Will be used to forcefully turn on memfd if device supports it.
Currently used only for debugging.

Change-Id: I46a1b7169677ea552d4b092e7501da587c42ba1a
Signed-off-by: Joel Fernandes <joelaf@google.com>
2019-02-06 15:16:16 -05:00
Sundong Ahn
92b65328b0 Merge "Add ro.surface_flinger.* to property_contexts" am: d99018cfd5 am: 39ffdb711c
am: 9469d99f9f

Change-Id: Ie663e7c783c02e7e760b15e55d55a41d8b71ad5d
2019-01-22 20:09:49 -08:00
Sundong Ahn
b9796da741 Add ro.surface_flinger.* to property_contexts
The ro.surface_flinger.* properties are added to property_contexts.
Because these properties are located in vendor partition, but
surfaceflinger service which use these properties is in the system
partition.

Bug: 112386364
Test: m -j & boot test
Change-Id: I98d71d4c03297a2a3fe92ba17bfdcb428f763753
2019-01-22 11:00:14 +09:00
Srinivas Paladugu
55dffae07f Merge "Allow system server to access zram sysfs" 2019-01-18 23:00:32 +00:00
William Hester
2367e8790b Merge "Add the testharness service to sepolicy rules" am: 1fefa6c0e8 am: a587f0d4d3
am: d10adc6f50

Change-Id: I9af82b1f2583945eb8c0ba5563cf2d548e552619
2019-01-17 17:52:59 -08:00
William Hester
5f486c74bf Add the testharness service to sepolicy rules
The testharness service will manage Test Harness Mode and provide a
command-line interface for users to enable Test Harness Mode; however it
does not directly provide a public API.

Bug: 80137798
Test: make
Test: flash crosshatch
Change-Id: Ie396e40fcea8914b4dd2247f2314e029b66ad84e
2019-01-17 13:10:37 -08:00
Srinivas Paladugu
d36d94a551 Allow system server to access zram sysfs
This patch allows
 - System server needs write access to zram sysfs
   directory to be able to trigger writeback to disk.
 - init should be able to change attrs on zram to make
   them writeable by system_server.
 - Vendor init scripts should be able to set zram properties.

Bug: 117682284
Bug: 122674343
Test: Test writeback on go ref device
Change-Id: I308e48210f34894204992043eced5f276d736baf
2019-01-16 20:52:05 -08:00
Tim Van Patten
e8c777308b Merge "Create System Property to Indicate ANGLE Support" am: 890186e561 am: 8d44940ebe
am: e4f70ef0c0

Change-Id: Ie24181960ebc01b351cca260ac3d73f77b62f0d1
2019-01-11 16:23:45 -08:00
Tim Van Patten
3293abb67f Create System Property to Indicate ANGLE Support
Create the system property ro.gfx.angle.supported that indicates if the
device supports ANGLE.   The current planned use of this property is to
allow CTS to validate ANGLE functionality if the device indicates ANGLE
is supported.

Bug: 80239516
Test: Flash the build and verify the property is 'false' for marlin.
Test: Flash the build and verify the property is 'true' for walleye.
Change-Id: I00387db9ade34152f79d75453ea17d5ea7b063cd
2019-01-10 11:35:58 -07:00
Stan Iliev
707b384bed Merge "Add a property used to enable Vulkan as default render pipeline" am: 5ca7847a87 am: 82abb5bcce
am: 6b8b16849b

Change-Id: I6e3720c9e562829b5848b32fe6987e80fd6ae438
2018-12-17 14:11:07 -08:00
Stan Iliev
7f19d841e4 Add a property used to enable Vulkan as default render pipeline
Test: Booted with Vulkan rendering
Change-Id: I00485c16e5a878321a699f35d28fb85834991255
2018-12-17 11:30:48 -05:00
Peter Kalauskas
46b6d252e8 Add rules to allow default lazy camera HAL
Test: Reboot and ensure lazy camera HAL can run
Change-Id: I4cd9fe75537c6aca561830524e25fba631a12def
2018-12-07 13:29:22 -08:00
Aalique Grahame
abb34ff5fd Merge "sepolicy: add rule for offload minimum duration property" am: 2bf5c3d29f am: 6a519642b2
am: 43ce5999a9

Change-Id: Iacbff66e508efbe93a5bd3a7915cac4804e799a3
2018-12-06 13:35:15 -08:00
Aalique Grahame
22cf8f7c1e sepolicy: add rule for offload minimum duration property
Add sepolicy rule to support audio system property
audio.offload.min.duration.secs

Bug: 120123518
Change-Id: Ie027eb9ef102caca13adb1924db3be11d02b25c7
2018-12-05 17:17:21 -08:00
Haibo Huang
fdbcd20e00 Merge "Add new cpu variant related rules to SELinux" am: e80631ff53 am: ea04f8de6a
am: 3b82373489

Change-Id: Ife9d4001ddb99bb62eee719df994b85c78c43fa7
2018-11-19 14:04:03 -08:00
Haibo Huang
544a0d5480 Add new cpu variant related rules to SELinux
I added ro.bionic.(2nd_)?_(arch|cpu_variant) to vendor system
properties. And have init to write them to files under dev/.

This change set SELinux rules for these properties and files.

For the system properties: vendor/default.prop will set them. init will
read them.
For the files /dev/cpu_variant:.*: init will write them. bionic libc
will read them. (Basically world readable).

This is to allow libc select the right optimized routine at runtime.
Like memcpy / strcmp etc.

Test: getprop to make sure the properties are set.
Test: ls -laZ to make sure /dev/cpu_variant:.* are correctly labeled.

Change-Id: I41662493dce30eae6d41bf0985709045c44247d3
2018-11-19 18:29:36 +00:00
Felipe Leme
d6e59c8c56 Merge "Added system property (dumpstate.unroot) to run dumpstate as shell." am: b32113e106 am: 2d7245dcaa
am: 2918b8bb14

Change-Id: Ia7c68fd4c965fa020229c293a447a7ae0eb79712
2018-11-15 05:28:30 -08:00
Felipe Leme
da54e5f2dd Added system property (dumpstate.unroot) to run dumpstate as shell.
This is useful to test how it would behave on devices with user builds.

Bug: 117980186
Test: adb shell setprop dumpstate.unroot true && \
      adb shell cmd activity bug-report --progress

Change-Id: If9094bbe0c29e8180f1b35d2b4ac95343a1bd0eb
2018-11-08 08:25:32 -08:00
Jiyong Park
908a44de86 apexd exports its status via sysprop am: b3b94614f7 am: 301dd93910
am: 35714ba6a8

Change-Id: I1f68e505ffe0cd28b8d066a5e65641c42a83f7e6
2018-11-02 03:59:02 -07:00
Jiyong Park
b3b94614f7 apexd exports its status via sysprop
A sysprop apexd.status is set by apexd, to that other components (i.e.
init) can determine whether APEXs are all successfully mounted or no
(i.e., being mounted).

The sysprop is only writable by apexd.

Bug: 117403679
Test: adb shell getprop apexd.status returns 'ready'.
Change-Id: I81bcb96e6c5cb9d899f29ffa84f91eab3820be25
2018-11-02 12:23:42 +09:00
Minchan Kim
5725100c13 Merge "export init.svc.bugreport" am: 96c6d14c85 am: 059446b113
am: 16d176fb8b

Change-Id: I71a5f2509c7919053a644c1ae62f3aed7804ebc4
2018-10-31 21:53:34 -07:00
Minchan Kim
fac9bc0a62 export init.svc.bugreport
Vendor need to hook bugreport propery as well as dumpstatez.
This CL exports it.

Test: Confirmed verndor can get property trigger hook manually
Bug: 118718191
Change-Id: I64a0e38716fb863ccd8923c6c41a776ea341f2d1
Signed-off-by: Minchan Kim <minchan@google.com>
2018-11-01 09:32:33 +09:00
Jack Yu
846d265e2b Added a new system properties for IWLAN operation mode am: b10f4eba61 am: cec1afe192
am: b16b4ab667

Change-Id: Ia2ad07e805b24773bda36ad2235f8a09489881ed
2018-10-25 20:46:55 -07:00
Jack Yu
b10f4eba61 Added a new system properties for IWLAN operation mode
Added a new flag to specify the IWLAN operation mode. Also
allowed this system properties for vendor native service to
access.

Test: Manual
Bug: 73659459
Change-Id: I23197e451557fae36a0cc5da4b50b3a00f9233dc
2018-10-24 10:48:12 -07:00
Tom Cherry
b912ec5f2e Merge "Combine vendor-init-actionable with vendor-init-readable" am: fc1980eb8a am: 9333f514ab
am: e886f46c7f

Change-Id: I115cf1ddc7c01cf8bc4258841d814dc780c7d259
2018-10-24 09:30:10 -07:00
Tom Cherry
30dd711157 Combine vendor-init-actionable with vendor-init-readable
Historically, vendor-init-actionable was created since the various
property_contexts files were not yet available when init parses its
scripts.  Since then, the property_contexts files are now always
available when init parses its scripts, so we can collapse these two
categories.

Specifically, this change ensures that all of the properties in the
previous 'stable_properties.h' file in init, which contained the
vendor-init-actionable properties, are able to be read by init
according to SEPolicy.

Bug: 71814576
Test: vendor_init fails to use non-readable properties as a trigger
Test: vendor_init successfully uses readable properties as a trigger

Change-Id: Ic6d9919b6047f3076a1a19fc26295c6a77aca627
2018-10-24 01:58:32 +00:00
Tom Cherry
e854e80c35 Merge "Add sepolicy labeling of wifi.concurrent.interface property." am: d04cae2f3c am: a862fe64da
am: fef7156bc8

Change-Id: I35fa3738815efabf6001b18d2112244e58ef9d5f
2018-10-09 13:48:48 -07:00
jinhee0207.jo
2b09698a80 Add sepolicy labeling of wifi.concurrent.interface property.
1. "Add sepolicy labeling of wifi.concurrent.interface" in property_contexts.
wlan1 interface is added first in Pie OS. And wlan1 interface has getIfaceName
by property_get in wifi_chip.cpp.
(/hardware/interface/wifi/1.2/default/wifi_chip.cpp)
But, there is no sepolicy about this interface. wlan0 and p2p0 is definitely specified.
So, if we try to use wlan1, native sepolicy violation occurs.
This is why this labeling is necessary.

2. wlan1: Property labeling same with wlan0 or p2p0.
wifi.interface u:object_r:exported_default_prop:s0 exact string

Test: Basic Sanity - Verified tethering by using wlan1
Bug: 117302656

Change-Id: I24194bca7176e1927164228e6571870531a9bc56
Signed-off-by: Jinhee Jo <jinhee0207.jo@lge.com>
2018-10-09 16:20:16 +00:00