<feed xmlns='http://www.w3.org/2005/Atom'>
<title>system_core/logd, branch replicant-10</title>
<subtitle>Fork of system/core
</subtitle>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/'/>
<entry>
<title>Avoid get same timestamps in log testcase</title>
<updated>2019-07-08T17:03:40+00:00</updated>
<author>
<name>Xu YiPing</name>
<email>xuyiping@hisilicon.com</email>
</author>
<published>2019-06-19T08:38:33+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=ac9e2af1b62a67abe7be5805afd18dd42e2fa194'/>
<id>ac9e2af1b62a67abe7be5805afd18dd42e2fa194</id>
<content type='text'>
for arm64, userspace get time by vDSO, no syscall overhead.
multiple_test_2 sometimes get 2 same timestamps now, then testcase
fails.

Bug: b/135555666
Test: ./CtsLogdTestCases64 --gtest_filter=*multiple_test*
Merged-In: Ic8a0ab6f571df1487fe5fb4e5f07dc612af69001
Change-Id: I83f8beae168f397a347972c5e60de86d16c8f7c6
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
for arm64, userspace get time by vDSO, no syscall overhead.
multiple_test_2 sometimes get 2 same timestamps now, then testcase
fails.

Bug: b/135555666
Test: ./CtsLogdTestCases64 --gtest_filter=*multiple_test*
Merged-In: Ic8a0ab6f571df1487fe5fb4e5f07dc612af69001
Change-Id: I83f8beae168f397a347972c5e60de86d16c8f7c6
</pre>
</div>
</content>
</entry>
<entry>
<title>introduce auditctl and use it to configure SELinux throttling</title>
<updated>2019-04-10T03:54:47+00:00</updated>
<author>
<name>Nick Kralevich</name>
<email>nnk@google.com</email>
</author>
<published>2019-04-09T17:59:39+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=ac3ca99b77c4944333649dda4670d509f9facc05'/>
<id>ac3ca99b77c4944333649dda4670d509f9facc05</id>
<content type='text'>
In an effort to ensure that our development community does not
introduce new code without corresponding SELinux changes, Android
closely monitors the number of SELinux denials which occur during
boot. This monitoring occurs both in treehugger, as well as various
dashboards. If SELinux denials are dropped during early boot, this
could result in non-determinism for the various SELinux treehugger
tests.

Introduce /system/bin/auditctl. This tool, model after
https://linux.die.net/man/8/auditctl , allows for configuring the
throttling rate for the kernel auditing system.

Remove any throttling from early boot. This will hopefully reduce
treehugger flakiness by making denial generation more predictible
during early boot.

Reapply the throttling at boot complete, to avoid denial of service
attacks against the auditing subsystem.

Delete pre-existing unittests for logd / SELinux integration. It's
intended that all throttling decisions be made in the kernel, and
shouldn't be a concern of logd.

Bug: 118815957
Test: Perform an operation which generates lots of SELinux denials,
      and count how many occur before and after the time period.

(cherry picked from commit be5e44679146d333c20e28bf99c52d168f422626)

Change-Id: I283cd56151d199cd66f0d217b49115460c4a01e5
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
In an effort to ensure that our development community does not
introduce new code without corresponding SELinux changes, Android
closely monitors the number of SELinux denials which occur during
boot. This monitoring occurs both in treehugger, as well as various
dashboards. If SELinux denials are dropped during early boot, this
could result in non-determinism for the various SELinux treehugger
tests.

Introduce /system/bin/auditctl. This tool, model after
https://linux.die.net/man/8/auditctl , allows for configuring the
throttling rate for the kernel auditing system.

Remove any throttling from early boot. This will hopefully reduce
treehugger flakiness by making denial generation more predictible
during early boot.

Reapply the throttling at boot complete, to avoid denial of service
attacks against the auditing subsystem.

Delete pre-existing unittests for logd / SELinux integration. It's
intended that all throttling decisions be made in the kernel, and
shouldn't be a concern of logd.

Bug: 118815957
Test: Perform an operation which generates lots of SELinux denials,
      and count how many occur before and after the time period.

(cherry picked from commit be5e44679146d333c20e28bf99c52d168f422626)

Change-Id: I283cd56151d199cd66f0d217b49115460c4a01e5
</pre>
</div>
</content>
</entry>
<entry>
<title>Actually add right instant app boilerplate.</title>
<updated>2019-01-30T01:12:35+00:00</updated>
<author>
<name>Tom Cherry</name>
<email>tomcherry@google.com</email>
</author>
<published>2019-01-30T00:07:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=3882b509b46069a3ba0a575609e40263b0a73115'/>
<id>3882b509b46069a3ba0a575609e40263b0a73115</id>
<content type='text'>
Bug: 123366871
Test: treehugger
Change-Id: Id3d01396efe6afb69dea0e59dd6e1040ba82a1fd
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Bug: 123366871
Test: treehugger
Change-Id: Id3d01396efe6afb69dea0e59dd6e1040ba82a1fd
</pre>
</div>
</content>
</entry>
<entry>
<title>Add "instant app" boilerplate.</title>
<updated>2019-01-29T16:53:01+00:00</updated>
<author>
<name>Tom Cherry</name>
<email>tomcherry@google.com</email>
</author>
<published>2019-01-29T16:53:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=d722fbf4b00d6e837e29188b18b638db3b64a206'/>
<id>d722fbf4b00d6e837e29188b18b638db3b64a206</id>
<content type='text'>
Bug: 123366871
Test: treehugger
Change-Id: I2963aea53ae96651854bbbcb8e411add5183e523
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Bug: 123366871
Test: treehugger
Change-Id: I2963aea53ae96651854bbbcb8e411add5183e523
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge "Convert Android.mk file to Android.bp"</title>
<updated>2019-01-25T18:17:54+00:00</updated>
<author>
<name>Treehugger Robot</name>
<email>treehugger-gerrit@google.com</email>
</author>
<published>2019-01-25T18:17:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=4830ba0fd1eb7f94465d15ba05cab2d6a1a91e0e'/>
<id>4830ba0fd1eb7f94465d15ba05cab2d6a1a91e0e</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge "Read selinux_denial_metadata from /vendor"</title>
<updated>2019-01-25T17:51:48+00:00</updated>
<author>
<name>Tri Vo</name>
<email>trong@google.com</email>
</author>
<published>2019-01-25T17:51:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=6600f978a4a751f332534c3cad9aac445b70ccc7'/>
<id>6600f978a4a751f332534c3cad9aac445b70ccc7</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>DO NOT MERGE: Revert "Revert "Add dependencies on libprocessgroup for sched_policy users""</title>
<updated>2019-01-25T16:49:18+00:00</updated>
<author>
<name>Suren Baghdasaryan</name>
<email>surenb@google.com</email>
</author>
<published>2019-01-25T05:32:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=949107830044b8eaa58b7fca57bd0e0737646c1d'/>
<id>949107830044b8eaa58b7fca57bd0e0737646c1d</id>
<content type='text'>
This reverts commit 1bef8c550c6c9118969a93f14d9c5933cb7b2811.

Reason for revert: AOSP is fixed with new vendor image

Change-Id: Ib341ac80e2f88c13a7815a490ea2d9422ebdf55f
Signed-off-by: Suren Baghdasaryan &lt;surenb@google.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This reverts commit 1bef8c550c6c9118969a93f14d9c5933cb7b2811.

Reason for revert: AOSP is fixed with new vendor image

Change-Id: Ib341ac80e2f88c13a7815a490ea2d9422ebdf55f
Signed-off-by: Suren Baghdasaryan &lt;surenb@google.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Convert Android.mk file to Android.bp</title>
<updated>2019-01-25T05:16:39+00:00</updated>
<author>
<name>Sasha Smundak</name>
<email>asmundak@google.com</email>
</author>
<published>2019-01-25T05:16:39+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=3a62fc44e8022c4b838b222ed373d74cea17a2f8'/>
<id>3a62fc44e8022c4b838b222ed373d74cea17a2f8</id>
<content type='text'>
See build/soong/README.md for more information.

Bug: 122332380
Test: treehugger
Change-Id: I39a69c722922cfb19059d10ff37132442f0337ba
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
See build/soong/README.md for more information.

Bug: 122332380
Test: treehugger
Change-Id: I39a69c722922cfb19059d10ff37132442f0337ba
</pre>
</div>
</content>
</entry>
<entry>
<title>DO NOT MERGE: Revert "Add dependencies on libprocessgroup for sched_policy users"</title>
<updated>2019-01-24T04:43:28+00:00</updated>
<author>
<name>Suren Baghdasaryan</name>
<email>surenb@google.com</email>
</author>
<published>2019-01-24T04:43:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=1bef8c550c6c9118969a93f14d9c5933cb7b2811'/>
<id>1bef8c550c6c9118969a93f14d9c5933cb7b2811</id>
<content type='text'>
This reverts commit 02843339f998f05c712549658c9f8f8bc14ff57d.

Reason for revert: Broke AOSP

Change-Id: I62f91c0adf440b5da0a145862b04dd27a7016faf
Signed-off-by: Suren Baghdasaryan &lt;surenb@google.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This reverts commit 02843339f998f05c712549658c9f8f8bc14ff57d.

Reason for revert: Broke AOSP

Change-Id: I62f91c0adf440b5da0a145862b04dd27a7016faf
Signed-off-by: Suren Baghdasaryan &lt;surenb@google.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Read selinux_denial_metadata from /vendor</title>
<updated>2019-01-23T17:58:37+00:00</updated>
<author>
<name>Tri Vo</name>
<email>trong@google.com</email>
</author>
<published>2019-01-23T17:58:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/replicant-next/system_core/commit/?id=57b2e8cd01fb556322cba6725b3df037ec12f743'/>
<id>57b2e8cd01fb556322cba6725b3df037ec12f743</id>
<content type='text'>
selinux_denial_metadata contains device-specific information, so it is
being moved to /vendor.

Bug: 5159394
Test: bug information is still preserved in avc logs, e.g.
audit(0.0:248): avc: denied { read } for
name="u:object_r:vendor_default_prop:s0" dev="tmpfs" ino=18012
scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:vendor_default_prop:s0 tclass=file permissive=0
b/79617173 app=com.android.systemui
Change-Id: I23293e715b5d793a54466a128ccd57f44370cf5a
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
selinux_denial_metadata contains device-specific information, so it is
being moved to /vendor.

Bug: 5159394
Test: bug information is still preserved in avc logs, e.g.
audit(0.0:248): avc: denied { read } for
name="u:object_r:vendor_default_prop:s0" dev="tmpfs" ino=18012
scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:vendor_default_prop:s0 tclass=file permissive=0
b/79617173 app=com.android.systemui
Change-Id: I23293e715b5d793a54466a128ccd57f44370cf5a
</pre>
</div>
</content>
</entry>
</feed>
