summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-09-14SecureElement: allow ChannelAccess for OnePlus WalletHEADlineage-18.1alk3pInjection
Change-Id: Ic3424f7fcf575643b54c6dd31a64e45500e64ee2 Signed-off-by: alk3pInjection <webmaster@raspii.tech>
2021-09-14Merge remote-tracking branch 'nxp-oss/br_android_ncihalx_row_12' into ↵alk3pInjection
lineage-18.1 Signed-off-by: alk3pInjection <webmaster@raspii.tech> Change-Id: Ifda025f9963e067b37475cf65de4276fdaeeedd2
2021-09-14SecureElement: Do not try to initialze the access control enforcer in NFC APIJack Yu
If there is temporary failures in access rules retrieval, Secure Element service should handle the re-initialization. NFC transactions usually need to be completed in short time and should not wait for the access control enforcer re-initialization. Bug: 186588474 Test: HCE test in CtsVerifier Change-Id: I6e6dd8c05622ff67f6b75a8a93d0db0d35bc7056 (cherry picked from commit 8ca26b9e6c7381ac51c3bfe4d774b5d61b1b30c3)
2021-09-14SecureElement: Improve isNfcEventAllowedGeorge Chang
Return when SE is not connected Bug: 185198557 Test: manual Change-Id: I0c90862585f311bc6695235e316023aeceb9df7a (cherry picked from commit cba6328078700b0d3adc92c8a95da9337718597a)
2021-09-14SecureElement: Fix potential deadlock issueMaoliang Tang
It need to break the deadlock between the objects of Terminal.mLock and Channel to avoid the potentially ANR issue Bug: 158132553 Test: OMAPI works normal after multi-thread stress tests Signed-off-by: Maoliang Tang <tangmaoliang@xiaomi.com> Change-Id: I94676d45cabb65665d9336167d9814dfbca7a5bb (cherry picked from commit 8c52cf75b958f690457be330c52ba2487186f2d8)
2021-07-02Update README.mdnxpandroid
2021-07-02Enable Async MTE in the SecureElement app.nxf56319
Bug: 181603044 Test: none yet - this change does not affect non-MTE hardware Change-Id: I20d4d87e79995880cc5b1e764433fbf789b402e8
2021-07-02Do not try to initialze the access control enforcer in NFC APInxf56319
If there is temporary failures in access rules retrieval, Secure Element service should handle the re-initialization. NFC transactions usually need to be completed in short time and should not wait for the access control enforcer re-initialization. Bug: 186588474 Test: HCE test in CtsVerifier Change-Id: I6e6dd8c05622ff67f6b75a8a93d0db0d35bc7056
2021-07-02Improve isNfcEventAllowednxf56319
Return when SE is not connected Bug: 185198557 Test: manual Change-Id: I0c90862585f311bc6695235e316023aeceb9df7a
2020-10-19Updated readme for - NFC_AR_00_18C0_11.03.00_OpnSrcnxf35421
2020-09-10Updated readme for - NFC_AR_00_18C0_11.02.00_OpnSrcnxf35421
2020-09-09{11.0.0_r3}: Migrate to SecureElementStatsLog from StatsLogGanesh Deva
As part of statsd becoming a Mainline module in R, autogenerated StatsLog.write() calls are going away and replaced by *StatsLog.java that is autogenerated for each module. This CL adds autogenerated SecureElementStatsLog and replaces usages of StatsLog with SecureElementStatsLog.
2020-09-09Resolve JAVA warnings.nxf56319
Warnings fixed: FORWARD_NULL Checked for null before accessing method on mSEHal11.
2020-09-08Code sync to aosp branchGanesh Deva
Sync internal branch code refactor to aosp.
2020-09-08Strengthen the robustness of concurrent operationsGanesh Deva
1. Ensure the concurrent access to mChannels in Terminal.java is protected by the same lock instance 2. Move the remove operation of mSessions into synchronized block in method of Terminal.removeSession 3. Add synchronous block protection to mChannels.add operation in SecureElementService.java
2020-09-08Fix potentially deadlcok issueGanesh Deva
It need to break the deadlock between the objects of Terminal.mLock and Channel to avoid the potentially ANR issue
2020-09-08Deny the operation to select ISD-R aidGanesh Deva
Do not directly provide privilege access to carrier privilege apps to select ISD-R aid. Fallback to GP rules checking.
2020-09-08Allow OpenLogicalChannel with null aid for privilege appsGanesh Deva
Do not return null directly when application try to openLogicalChannel with null aid. Check if it is privilege application first.
2020-09-08Refresh terminal instances when switching between SS and DSGanesh Deva
Listen to CARRIER_CONFIG_CHANGED and reinitialize UICC terminals.
2020-09-08Fix ActivityNotFoundExceptionGanesh Deva
In Android 11, we need an additional permission to access all other installed packages
2020-09-08Correct carrier privilege checkingGanesh Deva
2020-09-08OpenBasicChannel with UICC should not be allowed for non-privilege appsGanesh Deva
Throw exception in setUpChannelAccess if this is not a privilege app.
2020-09-08Fix redundant codeflow in openLogicalChannel with UICC terminalGanesh Deva
When setup channel access for UICC terminal, carrier privileges checking add unnecessary rules loading.
2020-09-08Do not overwrite mFullAccess settingGanesh Deva
2020-09-08Add an exported flag in manifestGanesh Deva
With b/150232615, we will need an explicit value set for the exported flag when intent filters are present, as the default behavior is changing for S+. This change adds the value reflecting the previous default to the manifest. These changes were made using an automated tool, the xml file may be reformatted slightly creating a larger diff. The only "real" change is the addition of "android:exported" to activities, services, and receivers that have one or more intent-filters.
2020-06-12Refresh terminal instances when switching between SS and DS am: a0108ddb86 ↵Jack Yu
am: 66db1eb283 Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/apps/SecureElement/+/11675379 Change-Id: I8ec5c83a3ba0a07b47a79e0d37495cac823f41ce
2020-06-12Refresh terminal instances when switching between SS and DS am: a0108ddb86Jack Yu
Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/apps/SecureElement/+/11675379 Change-Id: I4aca49ad426195a20b2d0c0a5b19350cfabcd24a
2020-06-11Refresh terminal instances when switching between SS and DSJack Yu
Listen to CARRIER_CONFIG_CHANGED and reinitialize UICC terminals. Bug: 152008670 Test: adb shell dumpsys secure_element Merged-In: I8bb13b43de6f17f0b5b82440708d90bf684ca7ec Change-Id: I8bb13b43de6f17f0b5b82440708d90bf684ca7ec
2020-06-10Merge "Allow OpenLogicalChannel with null aid for privilege apps" into ↵TreeHugger Robot
rvc-dev am: da6daab1eb am: a69c3d10ee Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/apps/SecureElement/+/11628925 Change-Id: I4b493adab9fde398ecc411f5cf6411a48599cbc1
2020-06-10Merge "Allow OpenLogicalChannel with null aid for privilege apps" into ↵TreeHugger Robot
rvc-dev am: da6daab1eb Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/apps/SecureElement/+/11628925 Change-Id: I46507e9b4a76e26f9d257cb1a354b10ace89e45d
2020-06-10Merge "Allow OpenLogicalChannel with null aid for privilege apps" into rvc-devTreeHugger Robot
2020-06-08Deny the operation to select ISD-R aid am: 69dbe6f5de am: 7074bc2780Jack Yu
Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/apps/SecureElement/+/11786959 Change-Id: Id6b8519ca333e1897377c231dcb0a7bcf4bbe340
2020-06-08Deny the operation to select ISD-R aid am: 69dbe6f5deJack Yu
Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/apps/SecureElement/+/11786959 Change-Id: I587beab9aea7c31c9ab7c66e02704d74c0805e56
2020-06-08Deny the operation to select ISD-R aidJack Yu
Do not directly provide privilege access to carrier privilege apps to select ISD-R aid. Fallback to GP rules checking. Bug: 157968163 Test: select ISD-R aid is not directly allowed for carrier privilege apps Merged-In: Id7dd6e3afcb88d97b7c62e8710ef16fbc35010f3 Change-Id: Id7dd6e3afcb88d97b7c62e8710ef16fbc35010f3
2020-06-03Allow OpenLogicalChannel with null aid for privilege appsJack Yu
Do not return null directly when application try to openLogicalChannel with null aid. Check if it is privilege application first. Bug: 157349625 Test: openLogicalChannel with null aid Merged-In: Icf7ee2b299154874f1bdd4b5b409c7df04eb831b Change-Id: Icf7ee2b299154874f1bdd4b5b409c7df04eb831b
2020-05-25Fix ActivityNotFoundException am: b8b2823edd am: 904263bc38Jack Yu
Change-Id: I44a6d6666afb7f53d9c829cd76756261d3f0e262
2020-05-25Fix ActivityNotFoundException am: b8b2823eddJack Yu
Change-Id: If34ad6817f28a5c7d730c821400b2ac46066867c
2020-05-25Fix ActivityNotFoundExceptionJack Yu
In Android 11, we need an additional permission to access all other installed packages Bug: 157119957 Test: build pass Merged-In: I721549c68430bec4f777e560642864907c60f90f Change-Id: I721549c68430bec4f777e560642864907c60f90f
2020-05-09Update README.mdnxpandroid
2020-05-09Updated readme for - NFC_AR_00_18C0_11.01.01_OpnSrcnxf24591
2020-05-09Updated readme for - NFC_AR_00_18C0_11.01.01nxf24591
2020-05-01Update README.mdnxpandroid
2020-05-01Enum mismatch fix for HAL_ESE_IOCTL_OMAPI_TRY_GET_ESE_SESSION & ↵nxp61433
HAL_ESE_IOCTL_OMAPI_RELEASE_ESE_SESSION
2020-05-01{R-DP2} Add support for secure_element HAL 1.2Yerriswamy
Test: manual Bug: 142495673 Change-Id: I1338a2a11cc60fa50b1c8dd8e75022af9ea1b0a1
2020-05-01{R-DP2} Allow privilege app access to open channelYerriswamy
Allow privilege app access to open channel even if AccessControlEnforcer is not available. Throw exception only for non privileged access. Bug: 149632580 Test: OpenBasicChannel from Privileged/Non privileged app Change-Id: Ie188d397f6bf641923d010ad3a9d00d21bc9351b
2020-05-01{R-DP2} Include channel operation in synchronized areaYerriswamy
When application try to stress OMAPI by continuously open/close channels with multi-thread, there is possibility channel management is incorrect and result to no response. Bug: 148892905 Test: OMAPI works normal after multi-thread stress tests Change-Id: I530015ff20ed143a129024d6385fae9392a00a99
2020-05-01{R-DP1} Unblock some operations for privilege applicationsYerriswamy
When applications with privilege permission or carrier privilege, allow basic channel access and select operation in an opened channel. Bug: 139701995 Test: build pass Change-Id: I823202b9eadf012cfdf89bde5678c01bc8f77314
2020-05-01{R-DP1} Add Carrier Privilege supportYerriswamy
Support Carrier Privilege rules. Bug: 139701995 Test: Check carrier privilege rules could be parsed correctly Change-Id: I2838d335f9993eb7e50323773ed52579f53766a3
2020-05-01{R-DP1} Provide privilege access to system applicationYerriswamy
Provide access to eSE when system application granted privilege permission. Bug: 141963658 Test: Manual Change-Id: I5f00ee71c4d42ea612abeeeb637248337af3c1f6
2020-05-01{R-DP1} Make SecureElementService visible for instant appsYerriswamy
SecureElementService should be visible for instant apps to be able to pass instant test cases on aosp_car_x86_64 emulator. Bug: 145094907 Test: emulator -wipe-data # or "adb reboot" on real car device cts-tradefed run cts -m CtsSecureElementAccessControlTestCases1 Signed-off-by: Ivan Korniienko <ivan.o.korniienko@globallogic.com> Change-Id: Ib187c8555ef60d6f138f6b7e7eb6a4d474a9941c