Commits · ad151a233a51a76f5d3c1a6289daa8a03025b8ab · Werner Sembach / AndroidSystemSEPolicy · GitLab

Snippets Groups Projects

Oct 18, 2014
- Merge "Label block devices created or accessed by vold with specific types." · ad151a23
  Nick Kralevich authored 10 years ago
  
  ad151a23
Oct 17, 2014
- Revert "Do not allow isolated_app to directly open app data files." · 44cb98a7
  Nick Kralevich authored 10 years ago
  44cb98a7
Oct 16, 2014
- Exclude isolated_app from ptrace self. · e9623d8f
  Stephen Smalley authored 10 years ago
  e9623d8f
- Fix compile time / CTS gps_data_files neverallow assertion · 38936af0
  Nick Kralevich authored 10 years ago
  38936af0
- logd: Add klogd · 664ef57b
  Mark Salyzyn authored 10 years ago
  664ef57b
Oct 15, 2014
- maybe fix mac build. · 74bbf703
  Nick Kralevich authored 10 years ago
  74bbf703
Oct 14, 2014
- Merge "Add neverallow checking to sepolicy-analyze." · ddd47b0b
  Daniel Cashman authored 10 years ago
  
  ddd47b0b
- fix whitespace · 8c6dba90
  Nick Kralevich authored 10 years ago
  8c6dba90
- Add neverallow checking to sepolicy-analyze. · 59906bf8
  Stephen Smalley authored 10 years ago
  59906bf8
Oct 06, 2014
- Do not allow isolated_app to directly open app data files. · 669a9773
  Stephen Smalley authored 10 years ago
  669a9773
Oct 03, 2014
- Remove net_domain() from isolated_app. · 59bc00ab
  Stephen Smalley authored 10 years ago
  59bc00ab
Oct 02, 2014
- Label block devices created or accessed by vold with specific types. · 273d7ea4
  Stephen Smalley authored 10 years ago
  273d7ea4
- Merge "isolated_app: remove app_data_file execute" · c6cb6ac4
  Nick Kralevich authored 10 years ago
  
  c6cb6ac4
- Define specific block device types for system and recovery partitions. · 206b1a6c
  Stephen Smalley authored 10 years ago
  206b1a6c
Oct 01, 2014
- isolated_app: remove app_data_file execute · 94f9ff87
  Nick Kralevich authored 10 years ago
  94f9ff87
Sep 30, 2014
- Merge "Mark asec_apk_file as mlstrustedobject." · eb5b76aa
  Nick Kralevich authored 10 years ago
  
  eb5b76aa
- Fix fsck-related denials with encrypted userdata. · cedee697
  Stephen Smalley authored 10 years ago
  cedee697
- Mark asec_apk_file as mlstrustedobject. · 476c2078
  Stephen Smalley authored 10 years ago
  476c2078
Sep 29, 2014
- seinfo for platform based domains should be stated explicitly. · 92dfa31f
  William Roberts authored 10 years ago
  92dfa31f
Sep 28, 2014
- Do not allow init to execute anything without changing domains. · 8a0c25ef
  Stephen Smalley authored 10 years ago
  8a0c25ef
- Dependencies for new goldfish service domains. · 54e9bc45
  Stephen Smalley authored 10 years ago
  54e9bc45
Sep 26, 2014
- Enable selinux read_policy for adb pull. · 3e6da147
  dcashman authored 10 years ago
  3e6da147
- Allow NFC to read/write nfc. system properties. · 9ac7df22
  Martijn Coenen authored 10 years ago
  9ac7df22
- zygote: allow replacing /proc/cpuinfo · 2de02877
  Nick Kralevich authored 10 years ago
  2de02877
Sep 25, 2014
- allow apps to read the contents of mounted OBBs · 826bc5d6
  Nick Kralevich authored 10 years ago
  826bc5d6
Sep 23, 2014
- Merge "Enable per-user isolation for normal apps." · 4635b26f
  Nick Kralevich authored 10 years ago
  
  4635b26f
- make su an mlstrustedsubject · b54f92bb
  Nick Kralevich authored 10 years ago
  b54f92bb
- Enable per-user isolation for normal apps. · a833763b
  Stephen Smalley authored 10 years ago
  a833763b
Sep 22, 2014
- relax appdomain efs_file neverallow rules · 200a9f0e
  Nick Kralevich authored 10 years ago
  200a9f0e
- relax neverallow rules on NETLINK_KOBJECT_UEVENT sockets · 642b8042
  Nick Kralevich authored 10 years ago
  642b8042
Sep 20, 2014
- Define types for userdata and cache block devices. · dd053a9b
  Stephen Smalley authored 10 years ago
  dd053a9b
- Add support for factory reset protection. · f37ce3f3
  dcashman authored 10 years ago
  f37ce3f3
- Merge "Add isOwner= input selector for seapp_contexts." · d298354e
  Nick Kralevich authored 10 years ago
  
  d298354e
- Merge "More MLS trusted subject/object annotations." · b4c10e98
  Nick Kralevich authored 10 years ago
  
  b4c10e98
Sep 18, 2014
- Remove /dev/log/* access · a10bfd88
  Nick Kralevich authored 10 years ago
  a10bfd88
Sep 15, 2014
- Add isOwner= input selector for seapp_contexts. · ff4db919
  Stephen Smalley authored 10 years ago
  ff4db919
- More MLS trusted subject/object annotations. · cbc5279a
  Stephen Smalley authored 10 years ago
  cbc5279a
Sep 13, 2014
- Allow dumpstate to read /system/bin executables. · e7d13673
  Christopher Ferris authored 10 years ago
  e7d13673
Sep 11, 2014
- Allow appdomain read perms on apk_data_files. · 089d5fb7
  dcashman authored 10 years ago
  089d5fb7
- isolated_app: Do not allow access to the gpu_device. · 7f4a8a72
  Robert Sesek authored 10 years ago
  7f4a8a72