<feed xmlns='http://www.w3.org/2005/Atom'>
<title>system_core, branch history/14-07-2019</title>
<subtitle>Fork of system/core
</subtitle>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/'/>
<entry>
<title>HACK: gatekeeperd: force software imeplementation</title>
<updated>2019-06-09T14:54:17+00:00</updated>
<author>
<name>Denis 'GNUtoo' Carikli</name>
<email>GNUtoo@cyberdimension.org</email>
</author>
<published>2019-06-09T14:02:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=16cb5e347fdb45a8529579365f2d8c405c5e90cf'/>
<id>16cb5e347fdb45a8529579365f2d8c405c5e90cf</id>
<content type='text'>
Without that hack, IGatekeeper::getService() will try to get
a service implementing the Gatekeeper HAL. The HAL is supposed
to talk to a component that resides in a Trusted Execution
Environment (TEE) such as MobiCore.

On many Android device, the Trusted Execution Environment
is not free software, nor under the control of the user, so it
cannot be trusted by the user, and in fact it's better, if possible,
to make sure that it does not to run at all in that case.

Because of that the proper fix would be either to implement
a Gatekeeper HAL that would not depend on nonfree software that
cannot be trusted.

This could for instance be implemented by:
* Using a simple software implementation.
* Using the linux kernel keyring for that which can
  provide good resilience against userspace trying to get key
  material. See man 7 keyrings for more information on that.
* Have a free software Trusted Execution Environment like
  Google's Trusty or other implementations.

See the following documentation for more background information:
https://source.android.com/security/authentication/gatekeeper

Signed-off-by: Denis 'GNUtoo' Carikli &lt;GNUtoo@cyberdimension.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Without that hack, IGatekeeper::getService() will try to get
a service implementing the Gatekeeper HAL. The HAL is supposed
to talk to a component that resides in a Trusted Execution
Environment (TEE) such as MobiCore.

On many Android device, the Trusted Execution Environment
is not free software, nor under the control of the user, so it
cannot be trusted by the user, and in fact it's better, if possible,
to make sure that it does not to run at all in that case.

Because of that the proper fix would be either to implement
a Gatekeeper HAL that would not depend on nonfree software that
cannot be trusted.

This could for instance be implemented by:
* Using a simple software implementation.
* Using the linux kernel keyring for that which can
  provide good resilience against userspace trying to get key
  material. See man 7 keyrings for more information on that.
* Have a free software Trusted Execution Environment like
  Google's Trusty or other implementations.

See the following documentation for more background information:
https://source.android.com/security/authentication/gatekeeper

Signed-off-by: Denis 'GNUtoo' Carikli &lt;GNUtoo@cyberdimension.org&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Use more relaxed VNDK config</title>
<updated>2019-06-08T20:38:39+00:00</updated>
<author>
<name>Joonas Kylmälä</name>
<email>joonas.kylmala@iki.fi</email>
</author>
<published>2019-03-06T06:35:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=e6a056d93fcaf5d1f2e711b10b4b6532035456a3'/>
<id>e6a056d93fcaf5d1f2e711b10b4b6532035456a3</id>
<content type='text'>
This allows graphics libraries to communicate with each other.

Change-Id: I4c66e86b6353a174584ff77b38989713f2f77a9e
Signed-off-by: Joonas Kylmälä &lt;joonas.kylmala@iki.fi&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This allows graphics libraries to communicate with each other.

Change-Id: I4c66e86b6353a174584ff77b38989713f2f77a9e
Signed-off-by: Joonas Kylmälä &lt;joonas.kylmala@iki.fi&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge tag 'android-9.0.0_r37' into staging/lineage-16.0_merge-android-9.0.0_r37</title>
<updated>2019-05-07T02:34:37+00:00</updated>
<author>
<name>Kevin F. Haggerty</name>
<email>haggertk@lineageos.org</email>
</author>
<published>2019-05-07T02:34:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=100cf4a9f5f62b2844ae262e679e78b5acb51332'/>
<id>100cf4a9f5f62b2844ae262e679e78b5acb51332</id>
<content type='text'>
Android 9.0.0 Release 37 (PQ3A.190505.002)

* tag 'android-9.0.0_r37':
  lmkd: bump process priority and set to FOREGROUND group before kill
  Run BoringSSL self test during startup
  Export maximum number of fds/ints in a native_handle.
  Export maximum number of fds/ints in a native_handle.
  usbd: Do not join the thread pool

Change-Id: I73973be25afae5c908ff03a9dbceb302eff323c3
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Android 9.0.0 Release 37 (PQ3A.190505.002)

* tag 'android-9.0.0_r37':
  lmkd: bump process priority and set to FOREGROUND group before kill
  Run BoringSSL self test during startup
  Export maximum number of fds/ints in a native_handle.
  Export maximum number of fds/ints in a native_handle.
  usbd: Do not join the thread pool

Change-Id: I73973be25afae5c908ff03a9dbceb302eff323c3
</pre>
</div>
</content>
</entry>
<entry>
<title>healthd: make periodic battery status a debug message</title>
<updated>2019-04-07T10:10:55+00:00</updated>
<author>
<name>Stefan Assmann</name>
<email>sassmann@kpanic.de</email>
</author>
<published>2019-03-14T09:00:43+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=e7f2386193eedf9d1cb35fc4549a16d8a0c4bfb4'/>
<id>e7f2386193eedf9d1cb35fc4549a16d8a0c4bfb4</id>
<content type='text'>
Battery status is printed to the kernel log as a warning every
10 seconds.
[  276.605006] healthd: battery l=88 v=4235 t=29.6 h=2 st=2 c=0 chg=u
[  286.662791] healthd: battery l=88 v=4238 t=29.5 h=2 st=2 c=0 chg=u
[  296.707097] healthd: battery l=88 v=4238 t=29.5 h=2 st=2 c=0 chg=u

That's a debug statement and not a warning.

Change-Id: I45cfdeb150de59e2ef68749e0ab400da3599d156
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Battery status is printed to the kernel log as a warning every
10 seconds.
[  276.605006] healthd: battery l=88 v=4235 t=29.6 h=2 st=2 c=0 chg=u
[  286.662791] healthd: battery l=88 v=4238 t=29.5 h=2 st=2 c=0 chg=u
[  296.707097] healthd: battery l=88 v=4238 t=29.5 h=2 st=2 c=0 chg=u

That's a debug statement and not a warning.

Change-Id: I45cfdeb150de59e2ef68749e0ab400da3599d156
</pre>
</div>
</content>
</entry>
<entry>
<title>Revert "sdcard: Allow building as a static library"</title>
<updated>2019-03-23T19:18:08+00:00</updated>
<author>
<name>Michael Bestas</name>
<email>mkbestas@lineageos.org</email>
</author>
<published>2019-03-23T18:05:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=23c558947ab0defc432c4c47a5301a7798f65460'/>
<id>23c558947ab0defc432c4c47a5301a7798f65460</id>
<content type='text'>
* No longer needed

This reverts commit 20afb0f9e54de4476ee8ef966908c2fbc229eee8.

Change-Id: I37aae07b73cfaae005575fd68fa958282b2f57d5
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* No longer needed

This reverts commit 20afb0f9e54de4476ee8ef966908c2fbc229eee8.

Change-Id: I37aae07b73cfaae005575fd68fa958282b2f57d5
</pre>
</div>
</content>
</entry>
<entry>
<title>fs_mgr: Skip filesystem check unless fs_type matches</title>
<updated>2019-03-22T23:07:29+00:00</updated>
<author>
<name>Dan Pasanen</name>
<email>dan.pasanen@gmail.com</email>
</author>
<published>2015-01-29T00:41:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=9d31f8f6d6ee76878ca9158d7991f1dc45caaafc'/>
<id>9d31f8f6d6ee76878ca9158d7991f1dc45caaafc</id>
<content type='text'>
* Prevent accidentally destroying a partition of the wrong type.
* Don't skip iterations of the internal mount_all loop, otherwise
  encryptability may not be properly handled.

Change-Id: I8f3ddc396a5fb85f4ae0a0a11dd61fb4d6462d6d
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* Prevent accidentally destroying a partition of the wrong type.
* Don't skip iterations of the internal mount_all loop, otherwise
  encryptability may not be properly handled.

Change-Id: I8f3ddc396a5fb85f4ae0a0a11dd61fb4d6462d6d
</pre>
</div>
</content>
</entry>
<entry>
<title>Revert "fs_mgr_fstab: removing fs_mgr_get_entry_for_mount_point_after()"</title>
<updated>2019-03-22T22:59:35+00:00</updated>
<author>
<name>Alessandro Astone</name>
<email>ales.astone@gmail.com</email>
</author>
<published>2019-03-21T18:18:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=57188dc60563d4c39dfe9124c20726c8a001d751'/>
<id>57188dc60563d4c39dfe9124c20726c8a001d751</id>
<content type='text'>
This reverts commit c55f188207215bea0980027e47cbc6325a3a1f38.

but keeps the change to fs_mgr_get_entry_for_mount_point args:
    fs_mgr_get_entry_for_mount_point(struct fstab* fstab, const char* path);
==&gt; fs_mgr_get_entry_for_mount_point(struct fstab* fstab, const std::string&amp; path);

Change-Id: I19ef4539c5d5be8e1ec83642448814d2c3711c0a
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This reverts commit c55f188207215bea0980027e47cbc6325a3a1f38.

but keeps the change to fs_mgr_get_entry_for_mount_point args:
    fs_mgr_get_entry_for_mount_point(struct fstab* fstab, const char* path);
==&gt; fs_mgr_get_entry_for_mount_point(struct fstab* fstab, const std::string&amp; path);

Change-Id: I19ef4539c5d5be8e1ec83642448814d2c3711c0a
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix path for treble default prop</title>
<updated>2019-03-17T16:59:03+00:00</updated>
<author>
<name>Wei Wang</name>
<email>wvw@google.com</email>
</author>
<published>2019-01-25T17:31:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=d339252ee152e335f0332d69dd472fdae52d9309'/>
<id>d339252ee152e335f0332d69dd472fdae52d9309</id>
<content type='text'>
Bug: 123407630
Test: boot
Change-Id: Ia10ac6ad141e980abb07d7b37487f9de9ef64796
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Bug: 123407630
Test: boot
Change-Id: Ia10ac6ad141e980abb07d7b37487f9de9ef64796
</pre>
</div>
</content>
</entry>
<entry>
<title>storaged: change log level for health HAL calls</title>
<updated>2019-03-14T03:35:38+00:00</updated>
<author>
<name>Yifan Hong</name>
<email>elsk@google.com</email>
</author>
<published>2018-09-13T16:39:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=4fc8aaa4a81213cc80019279ace7fb505ea31340'/>
<id>4fc8aaa4a81213cc80019279ace7fb505ea31340</id>
<content type='text'>
Devices that does not implement getDiskStats and getStorageInfo
returns NOT_SUPPORTED as a value. Do not log to error stream in
this case.
Fixes: 114475810
Test: boots

Change-Id: I95e9ebe23b4dee451cb8f6e8dc0b60a224006600
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Devices that does not implement getDiskStats and getStorageInfo
returns NOT_SUPPORTED as a value. Do not log to error stream in
this case.
Fixes: 114475810
Test: boots

Change-Id: I95e9ebe23b4dee451cb8f6e8dc0b60a224006600
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge tag 'android-9.0.0_r34' into lineage-16.0-android-9.0.0_r34</title>
<updated>2019-03-08T08:46:34+00:00</updated>
<author>
<name>Luca Stefani</name>
<email>luca.stefani.ge1@gmail.com</email>
</author>
<published>2019-03-08T08:46:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=ca27d679e55fb7287c86f1413d585568284d3e73'/>
<id>ca27d679e55fb7287c86f1413d585568284d3e73</id>
<content type='text'>
Android 9.0.0 Release 34 (PQ2A.190305.002)

* tag 'android-9.0.0_r34':
  Export maximum number of fds/ints in a native_handle.

Change-Id: I0e6cb68f2d21362e643023ce6a98cf38ca8f9b14
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Android 9.0.0 Release 34 (PQ2A.190305.002)

* tag 'android-9.0.0_r34':
  Export maximum number of fds/ints in a native_handle.

Change-Id: I0e6cb68f2d21362e643023ce6a98cf38ca8f9b14
</pre>
</div>
</content>
</entry>
</feed>
