Age | Commit message (Collapse) | Author |
|
Change-Id: Ib32a1e7bceae35587be948af2058111066f78809
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
Change-Id: Id6d068cf84a8913541d3f24058b98ab184596283
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
since Marshmallow has more strict selinux check, so we need the
rules added here.
add the linaro and linaro_exec domain for such scripts
Change-Id: I073e7ea37a541e5376962702f2f2ad39e67a5259
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
updated for following warnings:
avc: denied { create } for pid=1 comm="init" name="sdcard" scontext=u:r:init:s0 tcontext=u:object_r:tmpfs:s0 tclass=lnk_file permissive=1
avc: denied { mounton } for pid=1 comm="init" path="/cache" dev="rootfs" ino=73 scontext=u:r:init:s0 tcontext=u:object_r:cache_file:s0 tclass=dir permissive=1
avc: denied { mounton } for pid=1 comm="init" path="/storage" dev="rootfs" ino=73 scontext=u:r:init:s0 tcontext=u:object_r:storage_file:s0 tclass=dir permissive=1
Change-Id: I454c559c7f5fd649db66d920ec8c96a3aba24288
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
Signed-off-by: Vishal Bhoj <vishal.bhoj@linaro.org>
Change-Id: Ibe620512d45091f0bce919f117e707df4d3b3eea
|
|
The Makefile in Linux 3.18 does not support building specific named
device-trees, so use the 'dtbs' build target to build all those
configured for the current kernel. (That build target also works on
3.10 kernels.)
Also, the source files for device-trees trees are now spread out into
sub-directories named by vendor, so switch to using the 'find' command
to find the built dtb files we want to copy.
Change-Id: I1523db96a3013da017fd119a9650afec17a4e00a
Signed-off-by: Jon Medhurst <tixy@linaro.org>
|
|
Change-Id: I036cfd9bd545dd399914a1b69dac816ccfb1408f
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
this is for the running Nexus9 on LAVA
Change-Id: Id71963ac6935e784fe921559de9917e2b3b2400c
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
We have changed console to ttyAMA3 on hikey
Change-Id: I5e6a7d7682320c0fa661cfa3aeff7e9a16dd9bf8
Signed-off-by: Vishal Bhoj <vishal.bhoj@linaro.org>
|
|
move the copy of media_codecs.xml file from extra-and-tests.mk to
common-device.mk, so that mediaplayback will be enabled without
any condition
Change-Id: I3fc15a9eddef643baf7e22f7ab5428d1bda8860d
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
permission
use INCLUDE_TESTS to specify if tests will be integrated.
only when INCLUDE_TESTS is set to 1, tests will be integrated.
and INCLUDE_TESTS is default to 1.
set service.adb.root to 1 to make adb boot with root permission
Change-Id: I7062d79cdebca1f9bd86dd048b6659633ef548a5
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
add following 2 lines:
/dev/dri/card0 u:object_r:gpu_device:s0
/dev/hci_tty u:object_r:hci_attach_dev:s0
Change-Id: I8c83b055d7a7798f3baecf64898d02b600f23f18
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
make this file a common place where we can add features for all
linaro supported boards.
This should help to reduce the maintenance effort.
Change-Id: I9935b67c1ad7a4222e0b13194b7eb6aff77d0214
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
Change-Id: I9c9af918bad2c3ca5a4f3c73a08d16ca52b76b53
Signed-off-by: Vishal Bhoj <vishal.bhoj@linaro.org>
|
|
linaro-lollipop-experimental
|
|
Change-Id: I8f260039a41cfff2b665d0c072cb0509b286b584
Signed-off-by: Vishal Bhoj <vishal.bhoj@linaro.org>
|
|
mainly for module_request permission of personality-8
avc: denied { module_request } for pid=2399 comm="dex2oat" kmod="personality-8" scontext=u:r:shell:s0 tcontext=u:r:kernel:s0 tclass=system permissive=0
Change-Id: I474d2e3331f88cd44b18f64203d287ba86fc0cff
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
Change-Id: Icf4d0ad93fb84a60478396b6432f08a27f48ba65
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
linaro-lollipop-experimental
|
|
so that we don't need to integrate many libraries
that the dynamic linked binaries need
Change-Id: Ib88b57a55905f98fd231395d831dd51a363400dc
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
This reverts commit 27c010b979970297f5489a3a57c39566cc0ca30d.
Change-Id: Ic8971abd6f6edcec48c4c6ccf72b6f337cde5d87
|
|
This reverts commit c10fd5d6fbbcb590c08dbcd720bdc3df5ea2eda4.
Change-Id: I94dde4a49aece88fccbda960570ae55db8364329
|
|
Change-Id: I7031070f685ac8e45ea1ab4dae621f673c348c22
Signed-off-by: Vishal Bhoj <vishal.bhoj@linaro.org>
|
|
integrate the bionic-benchmark and bionic-unit-test for
checking the performance of bionic
Change-Id: I311dc77eb3806688cceebf6495107ae9527c3edf
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
Change-Id: I08df1f187d7ab2c2fe47d106ef57bf683b483bab
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
|
|
since lava will update mkshrc to set the boot prompt,
and this causes the security context information of /system/etc/mkshrc
lost, and the console service is not able to read the content of mkshrc file,
at last it cause the boot promopt can not be set correctly.
The bug is reported here:
https://bugs.linaro.org/show_bug.cgi?id=548
And this change is to give the shell domain the permission to read
the content of the mkshrc file updated by lava.
This change should be remove after the above bug fixed.
Change-Id: I8819655276b07ce7660d4a567f10f76b51710a05
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
Change-Id: Iab668b8d519a4a4fe26c352378e29625f6b76c0f
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
sepolicy file_contexts:
make the shell domain have rw permission for console device
set the console device of /dev/ttyAMA0 to have security context of
u:object_r:console_device:s0, so that the shell domain can read and write it.
netd.te:
set the netd domain have the permission of module_request for kernel:system
for following avc warning:
avc: denied { module_request } for pid=2273 comm="iptables" kmod="iptable_nat" scontext=u:r:netd:s0 tcontext=u:r:kernel:s0 tclass=system permissive=0
Change-Id: I240641f4cfc4ed2f7d1dffb9d61968f5ef1140ea
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
run-bionic-tests.sh:
check if the test program exists first,
if it does not exist, then will not try to run the test
Change-Id: Id1450da83b436e48c014bc802b30fc38bf20dd99
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
for following error:
avc: denied { sys_module } for pid=1 comm="init" capability=16 scontext=u:r:init:s0 tcontext=u:r:init:s0 tclass=capability permissive=0
Change-Id: Ife9e879b55763a5040baa3f7390801947e0c0eb2
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
update according to the upstream
Change-Id: I2caa104f93dfd5549bc89046a22e3ab20516a0b9
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
linaro-lollipop-experimental
|
|
add configs of CONFIG_MODULES=y and CONFIG_MODULE_UNLOAD=y
Change-Id: Ib46b3e6b62c232b088bcc15b72c034c367ebd6b5
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
add SELinux policies for gatord service to make ti run as
permissive mode, so that we can use the gatord service first,
and will update the sepolicies later
Change-Id: I62522c7c6aa8cff08747fcbf60e23e433f6c8746
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
Change-Id: I1487667faf932d49563f14a04ede15c8dfef3cdd
Signed-off-by: Vishal Bhoj <vishal.bhoj@linaro.org>
|
|
add linaro-android-userspace-tests in extra-and-tests.mk,
so that we don't need to add it into device config separately
Change-Id: I43373a98713cca6a7b583f80ceb107437b4f199a
Signe-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
Signed-off-by: Vishal Bhoj <vishal.bhoj@linaro.org>
|
|
Change-Id: I32ac5c466c61a96c52b41dba678191955bb778dd
Signed-off-by: Vishal Bhoj <vishal.bhoj@linaro.org>
|
|
since the init_shell.te files has been removed from upstream,
so change here as well
Change-Id: I6e1c62d381160a9052f15c3423bc920c74c2dd81
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
some test are removed on upstream,
and here is a response for the change.
Change-Id: Ibdacde6091598dc5753d710b765a2dc3e87d5959
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
use "ndc resolver" command to make dns work on juno device,
instead of using the "svc netd" command we added ourselves.
Change-Id: I55095a89f5e495c87dd8ecc7e82d031bc6274e16
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
since we do the hack to make console service to run with
u:r:su:s0 context, we do not need the hacks here for running
the ping/ifconfig/netcfg command.
So delete the hacks here for the removal of hacks on
external/sepolicy repository
Change-Id: I8d963cf0599f85ed6abc0711168450ad1d823ca6
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
add sepolicy rules for running the linaro_android_kernel_test
under eng build when selinux enabled
Change-Id: I8ba0b5b785ec91065c995846ad49517d8d42480d
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
Since LAVA support to run test for SELinux enabled android now,
we change to enable SELinux by default now
Change-Id: I42850c19008ab957964090f11fcd94f6ae69c154
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
1. add policies for fixing warnings
2. add policies for running netcfg/ping/ifconfg on console session
Change-Id: I64f98e325a49af9e6adc9d913836ff3caf713f86
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
debug_prop:property_service
for following avc warnings:
avc: denied { set } for property=debug.atrace.tags.enableflags scontext=u:r:surfaceflinger:s0 tcontext=u:object_r:debug_prop:s0 tclass=property_service 497.466
init: sys_prop: permission denied uid:1000 name:debug.atrace.tags.enableflags
Change-Id: I0276114e6af575b5de2fbc6d15a4d8fc7d5fb42e
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
Sync up with media_codecs.xml from "goldfish" device
Change-Id: I8594c7eda7fd34cf001fa72e582b3801e55ac2d5
|
|
add target selinuxtarballs for building selinux enabled tarball files
system.tar.bz2 and userdata.tar.bz2.
This target needs tar command in the build machine to support
--selinux option, so that we can have the security information
kept in tarball files
Change-Id: I45c16a417bb821ba28b613c723d7790014d17cf7
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|
|
remove tests of test_arc4random and test_vfprintf_leak
test_arc4random is removed from aosp source,
test_vfprintf_leak is disabled by us since compilation problem
Change-Id: I8f9a5fe6bb416276371b30600c1e8614d00a05fc
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
|