History log of /device/asus/grouper/BoardConfigCommon.mk
Revision Date Author Comments (<<< Hide modified files) (Show modified files >>>)
83a56b0a79e3b80a721526ef46ff89616e601189 19-Nov-2014 Ying Wang <wangying@google.com> Disable journaling to save system.img space.

Bug: 18430740
Change-Id: I80a3c8d71c27c1b0cb7bbf93e971674159e9e583
/device/asus/grouper/BoardConfigCommon.mk
9ed758f07b0e7c358481cb55d465bd9ccd29a347 07-Nov-2014 Nick Kralevich <nnk@google.com> Allow recovery to create device nodes and modify rootfs
automerge: de84e45

* commit 'de84e45d7e6f9dbd6ba8bfaf592130751d2ea853':
Allow recovery to create device nodes and modify rootfs
de84e45d7e6f9dbd6ba8bfaf592130751d2ea853 07-Nov-2014 Nick Kralevich <nnk@google.com> Allow recovery to create device nodes and modify rootfs

tilapia's OTA code for updating the radio image needs to
create files on rootfs and create a character device in /dev.
Allow it.

Bug: 18281224
Change-Id: Ic408c2b28e16a40650f71efe2f17fb0c2e71f97f
/device/asus/grouper/BoardConfigCommon.mk
bceb8444c08f43f3cd668e88d061e9897e51caca 15-Oct-2014 wayne2_chen <wayne2_chen@asus.com> SELinux: Grant radio related app corresponding SELinux capability to logging baseband log

The following permissions are granted for process with radio UID in non-user build:
1. connect to local socket rild-debug
2. read/write /dev/ttyACM1

Change-Id: If7cc7781d9c5465dd06694d09ac4c3bfd0403679
/device/asus/grouper/BoardConfigCommon.mk
81dbb4b548a22ab879d9c579abc261f0475e4c69 21-Apr-2014 Paul Lawrence <paullawrence@google.com> Fix encryption on Nexus 7 v1

Addresses the following errors

04-21 12:05:34.919 128 188 D Cryptfs : unmounting /data succeeded
04-21 12:05:34.928 128 188 D Cryptfs : Just triggered post_fs_data
04-21 12:05:35.121 153 153 W auditd : type=1403 audit(0.0:5): policy loaded auid=4294967295 ses=4294967295
04-21 12:05:35.179 128 188 D Cryptfs : post_fs_data done
04-21 12:05:37.181 188 188 W vold : type=1400 audit(0.0:6): avc: denied { execmem } for scontext=u:r:vold:s0 tcontext=u:r:vold:s0 tclass=process
04-21 12:05:37.188 128 188 D Cryptfs : Just triggered restart_min_framework
04-21 12:05:37.196 128 188 W linker : libtf_crypto_sst.so has text relocations. This is wasting memory and prevents security hardening. Please fix.
04-21 12:05:37.200 128 188 E HAL : load: module=/system/lib/hw/keystore.grouper.so
04-21 12:05:37.200 128 188 E HAL : dlopen failed: could not load library "libtf_crypto_sst.so" needed by "keystore.grouper.so"; caused by can't unprotect loadable segments for "libtf_crypto_sst.so": Permission denied
04-21 12:05:37.200 128 188 E Cryptfs : could not find any keystore module
04-21 12:05:37.200 128 188 E Cryptfs : Failed to init keymaster

Bug: 14225645

(cherry picked from commit bd0dbaa241cba8ba125ab715aee0dec4fac04d40)

Change-Id: I1f8067f2a0de19ccb8463c4a3572a470ed97d5ac
/device/asus/grouper/BoardConfigCommon.mk
53433d3a9e6a8416777091dfdaa654e98f5dc94e 11-Mar-2014 Stephen Smalley <sds@tycho.nsa.gov> Allow lmkd write to sysfs files on grouper/nakasi.

Bug in kernel < 3.3 causes sysfs inodes to lose their security context
and revert to the base sysfs type, so we need to allow this.
Revert when/if the kernel fix is merged:
https://android-review.googlesource.com/#/c/78930/

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

(cherry picked from commit 8feeb9f3fc88eb047f00fc17962f4077aeaa4fda)

Change-Id: I3745dcd95e357b228767281204cca640f46ba24b
/device/asus/grouper/BoardConfigCommon.mk
2d36121868ff1023d0210861bd6a447102b09ce9 21-Feb-2014 Robert Craig <rpcraig@tycho.ncsc.mil> Move SELinux diag_device policy to userdebug/eng.

Also just remove all specific domain access and instead
allow diag_device access for all domains on the
userdebug/user builds.

Change-Id: I2a35de3d4d407fad97e3b3ef9fadef962ecff901
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
/device/asus/grouper/BoardConfigCommon.mk
cd824e87dc043d3af8f6f06176ce2d30bf5a6a10 29-Jan-2014 Robert Craig <rpcraig@tycho.ncsc.mil> Drop nonexistent shell.te policy from BOARD_SEPOLICY_UNION

Change-Id: Ib67e70ad04780f089116b8895e7683359d2b916f
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
/device/asus/grouper/BoardConfigCommon.mk
7b97740f1d9d3bd4852e370e4c59f748b2f24360 13-Jan-2014 Stephen Smalley <sds@tycho.nsa.gov> Allow access to sysfs files.

Due to a bug in Linux < 3.3, sysfs inodes can lose a security context
set via setfilecon/setxattr and revert to the base sysfs type if the
security context is set before setting owner or mode on the inode and
the inode is later evicted from memory and subsequently refreshed.
This was fixed in mainline Linux by commit
93518dd2ebafcc761a8637b2877008cfd748c202.

As a workaround, allow any domain that can write to any sysfs type
to also write to the base sysfs type in the grouper sepolicy and
anything that inherits from it.

Change-Id: I14b0530387edce1097387223f0def9b59e4292e0
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
/device/asus/grouper/BoardConfigCommon.mk
26dc522dd34e6ff127845d0af36d38ae7342db64 20-Dec-2013 Stephen Smalley <sds@tycho.nsa.gov> Add execmem permission to gpsd and keystore domains.

Removed from domain so we need to add it back to individual domains
as required.

Change-Id: I902ac6f8cf2e93d46b3a976bc4dabefa3905fce6
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
/device/asus/grouper/BoardConfigCommon.mk
04740e0acf3de72957a93829d0b1150c5fc9c6c2 14-Dec-2013 Nick Kralevich <nnk@google.com> Rename nvhost_writable_device to gpu_device

In particular, this allows the nakasi boot animation to
work with bootanim in enforcing, and addresses the
following fatal denials:

11.953395 type=1400 audit(1386989602.240:5): avc: denied { read write } for pid=345 comm="BootAnimation" name="nvmap" dev=tmpfs ino=5305 scontext=u:r:bootanim:s0 tcontext=u:object_r:nvhost_writable_device:s0 tclass=chr_file
11.955950 type=1400 audit(1386989602.240:6): avc: denied { read write } for pid=345 comm="BootAnimation" name="nvhost-ctrl" dev=tmpfs ino=5360 scontext=u:r:bootanim:s0 tcontext=u:object_r:nvhost_writable_device:s0 tclass=chr_file

Change-Id: Id2d9711ce14ec755cc48f67d89e6a726e0f7706a
/device/asus/grouper/BoardConfigCommon.mk
a72b667956dd40b3d81fa70ff866cc79ccc3d88b 22-Nov-2013 The Android Open Source Project <initial-contribution@android.com> Merge commit 'd2af65102b44e4b20274909e3afc912dca20e988' into HEAD
edc8b9da86dadb624da0eb8a032f094254324272 08-Nov-2013 Nick Kralevich <nnk@google.com> Fix ueventd denial.

Fix the following denials on grouper:

<5>[ 7.548916] type=1400 audit(1383869369.940:4): avc: denied { write } for pid=107 comm="ueventd" name="uevent" dev=sysfs ino=776 scontext=u:r:ueventd:s0 tcontext=u:object_r:sysfs_devices_tegradc:s0 tclass=file
<5>[ 7.549091] type=1400 audit(1383869369.940:5): avc: denied { open } for pid=107 comm="ueventd" name="uevent" dev=sysfs ino=776 scontext=u:r:ueventd:s0 tcontext=u:object_r:sysfs_devices_tegradc:s0 tclass=file

Change-Id: I1255488a9d2a5623ff29f8ae05499355b6ad72de
/device/asus/grouper/BoardConfigCommon.mk
f47cda3761b9f371401ddaa43be13eae72005b77 30-Oct-2013 Nick Kralevich <nnk@google.com> Move sysfs_devices_system_cpu to the central policy.

Every device has a CPU. This is not device specific.

Get rid of redundant allow rules, which are already allowed
by the base policy.

Change-Id: I4766dc571762d8fae06aa8c26828c070b80f5936
/device/asus/grouper/BoardConfigCommon.mk
bcdf76076bdb6a3dfb728ee8165e23aefede2f95 11-Oct-2013 Jesse Hall <jessehall@google.com> resolved conflicts for merge of 45dc0f49 to klp-dev-plus-aosp

Change-Id: If727d6f06bd91643fef0546b632a2ee0186a3a26
45dc0f499e86667eee293c80b6ab2cbbd5aa8f76 11-Oct-2013 Jesse Hall <jessehall@google.com> Move TARGET_RUNNING_WITHOUT_SYNC_FRAMEWORK to common BoardConfig

Both grouper (WiFi) and tilapia (3G) need this.

Bug: 11176302
Change-Id: Ia15d9d889b08133357e1e9f070ef774750708495
/device/asus/grouper/BoardConfigCommon.mk
27980970a99d5ba3fd39d3d5612e2c5c49a5b3c8 19-Sep-2013 rpcraig <rpcraig@tycho.ncsc.mil> Create 2 new device types for sepolicy.

nvhost_writable_device : used to label nvhost dev
nodes that are world readable/writable.

nvhost_device : used to label other nvhost dev
nodes that are not world readable/writable.

Also added policy to address the following denials which
were consistent across scontext= appdomain, system_server,
surfaceflinger and mediaserver.

<5>[ 151.537760] type=1400 audit(1379552992.957:156): avc: denied { read write } for pid=1086 comm="d.gameday.atbat" name="nvhost-ctrl"dev=tmpfs ino=5351 scontext=u:r:untrusted_app:s0 tcontext=u:object_r:nvhost_writable_device:s0 tclass=chr_file
<5>[ 151.538026] type=1400 audit(1379552992.957:157): avc: denied { open } for pid=1086 comm="d.gameday.atbat" name="nvhost-ctrl" dev=tmpfs ino=5351 scontext=u:r:untrusted_app:s0 tcontext=u:object_r:nvhost_writable_device:s0 tclass=chr_file
<5>[ 151.538276] type=1400 audit(1379552992.957:158): avc: denied { ioctl } for pid=1086 comm="d.gameday.atbat" path="/dev/nvhost-ctrl"dev=tmpfs ino=5351 scontext=u:r:untrusted_app:s0 tcontext=u:object_r:nvhost_writable_device:s0 tclass=chr_file

There are no new allow rules for the nvhost_device domain.
It was only used to distinguish among the nv* labels.

Change-Id: Ia07c5525ddc4d8a61c3437965da9e3862e6955d6
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
/device/asus/grouper/BoardConfigCommon.mk
85dfad9ed63a0958d0cf271cca7afe3ab3f2f056 18-Sep-2013 rpcraig <rpcraig@tycho.ncsc.mil> Remove btmacreader.te policy file.

Commit 747317fac1e6e0063a2f8de22aaab2403934d7d6
removed the btmacreader binary. Therefore, we
no longer need policy for it.

Change-Id: Id7af2c4d0192855286f707b42ee7ebac4ba9d018
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
/device/asus/grouper/BoardConfigCommon.mk
afb7a0a5bf30ed967cf91d96e7f3100123d93455 18-Sep-2013 rpcraig <rpcraig@tycho.ncsc.mil> Move sepolicy declarations to common board file.

Moving to BoardConfigCommon allows tilapia
to also enjoy sepolicy. Also use concatenation
versus assignment when making those declarations.
This will allow sepolicy to exist in the vendor
directory.

Change-Id: I5857efdf467fcec22735de93482c2b72009476ab
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
/device/asus/grouper/BoardConfigCommon.mk
f5354d6f9cc82f9ba825298c324f035994052caa 23-Mar-2013 Elliott Hughes <enh@google.com> am d6347f7b: am 62f76ae4: Merge "Remove unused asus/grouper ARCH_ARM_HAVE_TLS_REGISTER."

* commit 'd6347f7b03c0cfc7fd5e1dbe48fd96cc34d636ea':
Remove unused asus/grouper ARCH_ARM_HAVE_TLS_REGISTER.
7a52acad07b193423320c74ecbb5fae77ff3e92f 23-Mar-2013 Elliott Hughes <enh@google.com> am d6347f7b: am 62f76ae4: Merge "Remove unused asus/grouper ARCH_ARM_HAVE_TLS_REGISTER."

* commit 'd6347f7b03c0cfc7fd5e1dbe48fd96cc34d636ea':
Remove unused asus/grouper ARCH_ARM_HAVE_TLS_REGISTER.
c4f414067ddaa2bf5ae6d89624be518b502e7f6f 22-Mar-2013 Dmitry Shmidt <dimitrysh@google.com> grouper: wifi: Remove obsolete path to P2P FW

Change-Id: I406090bdcc79c45dff7c4c00f94f0cf302a63d4c
Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
/device/asus/grouper/BoardConfigCommon.mk
6caef4cc8dab7bdb395356a7a80932a3a9703071 22-Mar-2013 Dmitry Shmidt <dimitrysh@google.com> grouper: wifi: Remove obsolete path to P2P FW

Change-Id: I406090bdcc79c45dff7c4c00f94f0cf302a63d4c
Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
/device/asus/grouper/BoardConfigCommon.mk
1509c49f6cda4821fb404f85f743f197fd0f9a79 22-Mar-2013 Elliott Hughes <enh@google.com> Remove unused asus/grouper ARCH_ARM_HAVE_TLS_REGISTER.

Change-Id: I5165185b7fb36a78a734402c639857f4b7a81ef1
/device/asus/grouper/BoardConfigCommon.mk
65e61bcfbd97f3bd02f9c831c120c74f838d7dea 22-Mar-2013 Elliott Hughes <enh@google.com> Remove unused asus/grouper ARCH_ARM_HAVE_TLS_REGISTER.

Change-Id: I5165185b7fb36a78a734402c639857f4b7a81ef1
/device/asus/grouper/BoardConfigCommon.mk
486213d0ba88002c8637ab50db581bee3fc6b88a 27-Feb-2013 Christopher Ferris <cferris@google.com> Remove unneeded ARCH_ARM_USE_NON_NEON_MEMCPY value.

Bug: 8005082

Merge change from internal master.

(cherry-picked from e0f6895de8ca1c92f97f3ac2d4529e5265960025)

Change-Id: Ieaf6fa402277ebe2282e20dcfdc649df0fb92f95
/device/asus/grouper/BoardConfigCommon.mk
3cffb331877a02914ab7da9c5aca452b16f8af72 27-Feb-2013 Christopher Ferris <cferris@google.com> Remove unneeded ARCH_ARM_USE_NON_NEON_MEMCPY value.

Bug: 8005082

Merge change from internal master.

(cherry-picked from e0f6895de8ca1c92f97f3ac2d4529e5265960025)

Change-Id: Ieaf6fa402277ebe2282e20dcfdc649df0fb92f95
/device/asus/grouper/BoardConfigCommon.mk
82d481b728580ae27efe244cfe0cfe85c4809efd 06-Feb-2013 Christopher Ferris <cferris@google.com> Adding TARGET_CPU_VARIANT to config file.

Bug: 8005082

Merge from internal master.

Change-Id: I33210d3044119fbeb1ce00a515a2f32d6893ad14
/device/asus/grouper/BoardConfigCommon.mk
6e01ad744d9c072fa7ef749dfb29b7866e0bdb82 06-Feb-2013 Christopher Ferris <cferris@google.com> Adding TARGET_CPU_VARIANT to config file.

Bug: 8005082

Merge from internal master.

Change-Id: I33210d3044119fbeb1ce00a515a2f32d6893ad14
/device/asus/grouper/BoardConfigCommon.mk
0d75b1c7e03edd62ea12a9359a68c73efbc20b1b 27-Feb-2013 Christopher Ferris <cferris@google.com> Remove unneeded ARCH_ARM_USE_NON_NEON_MEMCPY value. DO NOT MERGE

Bug: 8005082

(cherry picked from commit e0f6895de8ca1c92f97f3ac2d4529e5265960025)

Change-Id: Id269322c0e9e933e708adca8cde5df4c243ddc86
/device/asus/grouper/BoardConfigCommon.mk
a589ef751a07031457e2a4469dc2e02fc696927e 27-Feb-2013 Christopher Ferris <cferris@google.com> Remove unneeded ARCH_ARM_USE_NON_NEON_MEMCPY value. DO NOT MERGE

Bug: 8005082

(cherry picked from commit e0f6895de8ca1c92f97f3ac2d4529e5265960025)

Change-Id: Id269322c0e9e933e708adca8cde5df4c243ddc86
/device/asus/grouper/BoardConfigCommon.mk
99c79e9468f03c1453a6ef1e78cf6bb0e3dca79b 23-Feb-2013 Ken Sumrall <ksumrall@android.com> Separate the fstab file between grouper and tilapia

Because tilapia has the radio image partition which recovery
knows how to update, we can no longer have a unified fstab
for the two products.

Change-Id: I8c45d4e813e1e0a7379524ba4d7465d2d6568641
/device/asus/grouper/BoardConfigCommon.mk
fae44513cf252d7ac322193c3944807d40962b8e 23-Feb-2013 Ken Sumrall <ksumrall@android.com> Separate the fstab file between grouper and tilapia

Because tilapia has the radio image partition which recovery
knows how to update, we can no longer have a unified fstab
for the two products.

Change-Id: I8c45d4e813e1e0a7379524ba4d7465d2d6568641
/device/asus/grouper/BoardConfigCommon.mk
d6b3698fef8846502924ea25f915639f96600fad 22-Feb-2013 Christopher Ferris <cferris@google.com> Merge "Adding TARGET_CPU_VARIANT to config file."
894313fb48f2b513df87ce6154044cd21d5c0346 22-Feb-2013 Christopher Ferris <cferris@google.com> Merge "Adding TARGET_CPU_VARIANT to config file."
a05812bdb147c67961b88b43a054a6331ea54cfe 14-Feb-2013 Ken Sumrall <ksumrall@android.com> Update unified fstab.grouper to support recovery

Add entries to the unified fstab needed by recovery.
Also, copy the unified fstab to /etc/recovery.fstab in the recovery
ramdisk.

Change-Id: I3e94b988a59a61b91abfba0f6e69f90240112621
/device/asus/grouper/BoardConfigCommon.mk
918ee2cb287348b1ab1fd2fabe3e84cb28fe0f85 14-Feb-2013 Ken Sumrall <ksumrall@android.com> Update unified fstab.grouper to support recovery

Add entries to the unified fstab needed by recovery.
Also, copy the unified fstab to /etc/recovery.fstab in the recovery
ramdisk.

Change-Id: I3e94b988a59a61b91abfba0f6e69f90240112621
/device/asus/grouper/BoardConfigCommon.mk
aee493bf55715f983c26f32e81d911f5304c9a3c 06-Feb-2013 Christopher Ferris <cferris@google.com> Adding TARGET_CPU_VARIANT to config file.

Bug: 8005082
Change-Id: I401197f64796b4bc5badef9d75b2320647c8c699
/device/asus/grouper/BoardConfigCommon.mk
d18be78818977e002b3dc7767023c6625ee0c288 06-Feb-2013 Christopher Ferris <cferris@google.com> Adding TARGET_CPU_VARIANT to config file.

Bug: 8005082
Change-Id: I401197f64796b4bc5badef9d75b2320647c8c699
/device/asus/grouper/BoardConfigCommon.mk
a1914de4ea2f1d6d7c1408f12e01753977cbab06 26-Sep-2012 Ramanan Rajeswaran <ramanan@google.com> Revert "Sensors: [PATCH 2/3] Enable flags to load correct sensors HAL."

This reverts commit cc625e78cde781e1c51c621fdaef741ac9a9e4c2

Change-Id: Ibb4ccefd4b96f2e08c6aae25ef65a846ccf1afa5
/device/asus/grouper/BoardConfigCommon.mk
cc625e78cde781e1c51c621fdaef741ac9a9e4c2 21-Sep-2012 Joseph Wu <Joseph_Wu@asus.com> Sensors: [PATCH 2/3] Enable flags to load correct sensors HAL.

- Enable " COMPILE_INVENSENSE_COMPASS_CAL", " COMPILE_COMPASS_AMI306"
to load sensors HAL correctly in our target project.

Change-Id: Ia478fe362aa7b6d2bdf64ca65f65c06fb572ade4
/device/asus/grouper/BoardConfigCommon.mk
c9cf5d43ecc8f43157f391d107213a49b4f1baa2 22-Sep-2012 jessica <jessica_jong@asus.com> Move TARGET_RELEASETOOLS_EXTENSIONS from BoardConfigCommon.mk

doing this for tilapia

Change-Id: I07f65a49ce28ba8f18c0b3ef409c6fe639170dbf
/device/asus/grouper/BoardConfigCommon.mk
2c9956ef4a1346c13b17fb03c40dc8faaec3ae23 20-Aug-2012 Wink Saville <wink@google.com> Add support for per device bluetooth configuration.

Bug: 6837125
Change-Id: Ifa631af298c9c78f3317c864ec257915f17775ff
/device/asus/grouper/BoardConfigCommon.mk
125fd3e6d914d0b7b83df4f8d5a7061ebbf239e5 20-Aug-2012 Ramanan Rajeswaran <ramanan@google.com> Refactor build for grouper.

Change-Id: I52c16e1f050279431528e43c73627e73abf95462
/device/asus/grouper/BoardConfigCommon.mk
aa971673a352374662513a7ff41ed813fc535704 09-Aug-2012 Ramanan Rajeswaran <ramanan@google.com> am e56eff83: Move grouper specific vars into BoardConfig.

* commit 'e56eff836b65114f896d0916a93e06d043b8dc66':
Move grouper specific vars into BoardConfig.
e56eff836b65114f896d0916a93e06d043b8dc66 08-Aug-2012 Ramanan Rajeswaran <ramanan@google.com> Move grouper specific vars into BoardConfig.

Change-Id: Ia90386f027c43abd80d67d443c77a156513fd382
/device/asus/grouper/BoardConfigCommon.mk
b59e5c70bfd04d904ccb9309a05618b6d5872968 07-Aug-2012 Jean-Baptiste Queru <jbq@google.com> resolved conflicts for merge of a057d5d0 to jb-dev-plus-aosp

Change-Id: I16c9c3fa73b5b2f32e635ac053723053177cd6e9
a057d5d0b095a5442923d0427d8792be0d59af54 03-Aug-2012 Jean-Baptiste Queru <jbq@google.com> Follow the established pattern for the vendor/ entry points.

That way, scripts that expect that pattern don't get confused.

Bug: 6931494
Change-Id: I121e013af42fa8ee64f56dcacc81e17a945e01af
/device/asus/grouper/BoardConfigCommon.mk