Commits · 2c8b50b88f6eb8f05be9d5dceb624281f59e82d6 · Werner Sembach / AndroidSystemSEPolicy · GitLab

Snippets Groups Projects

Jun 07, 2014
- remove shell_data_file from unconfined. · ee49c0e3
  Nick Kralevich authored 10 years ago
  ee49c0e3
May 30, 2014
- Restrict /data/security and setprop selinux.reload_policy access. · 3235f61a
  Stephen Smalley authored 10 years ago
  3235f61a
- Explictly allow init and kernel unlabeled access. · 73b0346a
  Stephen Smalley authored 10 years ago
  73b0346a
May 29, 2014
- Clean up kernel, init, and recovery domains. · eb1bbf26
  Stephen Smalley authored 10 years ago
  eb1bbf26
- Remove /system write from unconfined · 03ce5120
  Nick Kralevich authored 10 years ago
  03ce5120
- Protect /data/property. · ad0d0fc7
  Stephen Smalley authored 10 years ago
  ad0d0fc7
May 28, 2014
- remove syslog_* from unconfined · 685e2f9d
  Nick Kralevich authored 10 years ago
  685e2f9d
May 23, 2014
- Restrict requesting contexts other than policy-defined defaults. · 356f4be6
  Stephen Smalley authored 10 years ago
  356f4be6
May 09, 2014
- Drop relabelto_domain() macro and its associated definitions. · 02dac03a
  Stephen Smalley authored 10 years ago
  02dac03a
- Protect keystore's files. · cd905ec0
  Nick Kralevich authored 10 years ago
  cd905ec0
Feb 12, 2014
- Remove block device access from unconfined domains. · 3f40d4f4
  Stephen Smalley authored 11 years ago
  3f40d4f4
- Remove several superuser capabilities from unconfined domains. · 5487ca00
  Stephen Smalley authored 11 years ago
  5487ca00
Feb 11, 2014
- Remove mount-related permissions from unconfined domains. · b081cc1e
  Stephen Smalley authored 11 years ago
  b081cc1e
Jan 27, 2014
- Remove transition / dyntransition from unconfined · fed8a2a4
  Nick Kralevich authored 11 years ago
  fed8a2a4
Dec 06, 2013
- Allow kernel domain, not init domain, to set SELinux enforcing mode. · fea6e66f
  Stephen Smalley authored 11 years ago
  fea6e66f
- Revert "Allow kernel domain, not init domain, to set SELinux enforcing mode." · 9e8b8d9f
  Nick Kralevich authored 11 years ago
  9e8b8d9f
- Allow kernel domain, not init domain, to set SELinux enforcing mode. · bf12e225
  Stephen Smalley authored 11 years ago
  bf12e225
- Restrict the ability to set usermodehelpers and proc security settings. · 7adb999e
  Stephen Smalley authored 11 years ago
  7adb999e
Dec 02, 2013
- Restrict the ability to set SELinux enforcing mode to init. · d99e6d5f
  Stephen Smalley authored 11 years ago
  d99e6d5f
Nov 08, 2013
- Make kernel / init enforcing · b1d81645
  Nick Kralevich authored 11 years ago
  b1d81645
Jul 16, 2013
- Only init should be able to load a security policy · 2637198f
  Nick Kralevich authored 11 years ago
  2637198f
Jul 11, 2013
- domain.te: Add backwards compatibility for unlabeled files · 0c9708b2
  Nick Kralevich authored 11 years ago
  0c9708b2
May 20, 2013
- Make all domains unconfined. · 77d4731e
  repo sync authored 11 years ago
  77d4731e
May 15, 2013
- Move domains into per-domain permissive mode. · 50e37b93
  repo sync authored 11 years ago
  50e37b93
Jan 04, 2012
- SE Android policy. · 2dd4e51d
  Stephen Smalley authored 13 years ago
  
  2dd4e51d