Android RISC Team Yuming Lin Wendy Wang July,2017

Presentation on theme: "Android RISC Team Yuming Lin Wendy Wang July,2017"— Presentation transcript:

1 Android RISC Team Yuming Lin Wendy Wang July,2017
NXP Android 7.1.1_1.0.0 & Android for industrial PC feature Android RISC Team Yuming Lin Wendy Wang July,2017

2 Industrial PC Features Dashboards for Android Reference Appendix
Agenda NXP Android 7.1.1_1.0.0 Upgraded items Know issues Storage partition dm_verity & selinux Android Version Industrial PC Features Dashboards for Android Reference Appendix 2

3 NXP Android 7.1.1 Compared to the M6.0.1_2.1.0 release, this release has the following major changes: Added Support i.MX 7 Dual SABRE-SD board Upgraded the Android platform version to Android 7.1.1 Upgraded the U-Boot and Linux Kernel Code base from the L4.1.15_1.0.0 release to the L4.1.15_1.2.0-ga release. Upgraded the GPU driver from p8 to p2. ELAA 7.1.1 Android 7.1.1_1.0.0 U-boot based on Yocto-2.0 ( ) Kernel based on Yocto-2.1 ( )

4 NXP Android 7.1.1 Known Issues and Limitations
Google USB driver for WindowsR OS must be installed multiple times for the MTP, PTP, MTP&ADB, PTP&ADB, and ADB function settings. HDMI output is silent for a few seconds when connecting the SABRE-AI or SABRE-SD board to a TV set. UI is in Landscape mode while camera preview is in Portrait mode on the SABRE-SD platform.

5 NXP Android 7.1.1 Storage partition

6 NXP Android 7.1.1 Storage partition

7 NXP Android 7.1.1 dm_verity & selinux

8 device-mapper-verity (dm_verity)
Due to its large size, the system partition typically cannot be verified similarly to previous parts but must be verified as it’s being accessed instead using the dm-verity kernel driver or a similar solution.

9 device-mapper-verity (dm_verity)
Implementation Summary Generate an ext4 system image. Generate a hash tree for that image. Build a dm-verity table for that hash tree. Sign that dm-verity table to produce a table signature. Bundle the table signature and dm-verity table into verity metadata. Concatenate the system image, the verity metadata, and the hash tree.

10 device-mapper-verity (dm_verity)
Implementation code /kernel/include/upai/linux/dm-ioctl.h /kernel/include/linux/device-mapper.h /kernel/driver/md/dm-verity.c /kernel/driver/md/dm-table.c /kernel/dirver/md/dm-ioctl.c /system/core/fs_mgr/fs_mgr_verity.c

11 device-mapper-verity (dm_verity)
Verified boot failure warning

12 Selinux SELinux is set up to default-deny, which means that every single access for which it has a hook in the kernel must be explicitly allowed by policy. This means a policy file is comprised of a large amount of information regarding rules, types, classes, permissions, and more. A full consideration of SELinux is out of the scope of this document, but an understanding of how to write policy rules is now essential when bringing up new Android devices. There is a great deal of information available regarding SELinux already. See Supporting documentation for suggested resources.

13 Selinux SELinux domain defined: AVC denied:
init: Service advantech_script does not have a SELinux domain defined. AVC denied:

14 Selinux SEAndroid

15 Selinux Implementation code /device//fsl/rom_7421_a1/init.rc
sepolicy/advantech_script.te sepolicy/file.te sepolicy/file_contexts sepolicy/service.te sepolicy/service_contexts

16 Android Version Android 5 Lollipop Android 6 Marshmallow Android 7
Nougat Android 8 Oreo (August update) OK google/google Now (改善Android 4) USB Type-C Multi-window mode (多視窗模式) NAN WiFi Aware 共用裝置 Fingerprint Authentication  Daydream Virtual Reality mode (虛擬實境) Wide-Gamut Color Multiple SIM cards Musical Instrument Digital Interface (MIDI) Night Light 支援藍芽4.1 Android Pay 支援 Vulkan (3D繪圖功能增強) SD卡格式化至內部儲存空間 控制推送通知優先級 Vulkan Android 5 Android6 Android7 Android8 Android 6 VS Android 7

17 Industrial PC Features
Application Feature Version suggestion Vehicle Voice assistant Communication 3G/4G module Android 5 OK google Multiple-SIM card Retail Payment method support Android 6 Android pay Medical Display Medical Imaging (醫療影像) Notification Android 7 Daydream Vulkan 控制推送通知優先級 Others Wireless Display Android 4.4 up Identity authentication Fingerprint Storage increase SD format function 醫療 wiki 醫療影像 遠距醫療 車載系統 wiki 1.功能介紹 有多用途顯示器(通常是小型LCD) 收音機功能 播放光碟或DVD功能 顯示車輛資訊 控制部分車輛機械(包含車身外部攝影機) GPS功能 年後受惠於智慧型手機的發展，許多車載資訊系統外加有連結智慧型手機和平板電腦以擴展功能的能力，甚至有直接整合的系統出現，完全依靠智慧型手機和平板電腦的螢幕與軟硬體作為操作主體，車上只內建一種類似埠介面的連結裝備，所以當手機拿離車體時就無法使用，順便達成一種防盜功能，因為能啟動車輛的手機可以綁定特定手機晶片卡。

18 Dashboards for Android
Data collected during a 7-day period ending on June 5, 2017. Reference:

19 Reference

20

21 Daydream Smartphone VR

22 Vulkan performance Reference:

23 SD card format function
Reference:

24 Notification level settings
其實並不是所有的通知在安卓系統中都是一樣的。一些通知會停留在列表的頂部，而其他的會降到底部。在Nougat里，你可以設置這些應用程式的優先級。 打開控制開關，你可以為每個應用程式設置優先級別，每個級別的解釋說明都會顯示，例如，5級應用程式可以生成全螢幕通知；0級應用程式則不顯示通知。 要改變一個應用程式推送通知的級別，長按住它的一個通知，或從設置菜單中選擇應用程式。點擊A後，應用程式不會決定推送設配置。 Reference: