Commits · android-n-preview-2 · Werner Sembach / AndroidSystemSEPolicy · GitLab

Snippets Groups Projects

Apr 07, 2016
- drop vold from sys_rawio neverallow exception · 1df23cbf
  Nick Kralevich authored 9 years ago
  View commits for tag android-n-preview-2 android-n-preview-2
  
  1df23cbf
- adbd: disallow non-shell domain transitions. · 6c768d74
  Nick Kralevich authored 9 years ago
  6c768d74
- Merge "Enforce restrictions on kernel module origin" · 3541843a
  Jeffrey Vander Stoep authored 9 years ago
  
  3541843a
- Enforce restrictions on kernel module origin · 70159fd3
  Jeff Vander Stoep authored 9 years ago
  70159fd3
- Merge "Add module_load permission to system class" · acb07f8a
  Jeffrey Vander Stoep authored 9 years ago
  
  acb07f8a
- Merge "system_server: neverallow new file exec types" · cce2f471
  Nick Kralevich authored 9 years ago
  
  cce2f471
- Add module_load permission to system class · a16b0589
  Jeff Vander Stoep authored 9 years ago
  a16b0589
Apr 06, 2016
- system_server: neverallow new file exec types · f84b7981
  Nick Kralevich authored 9 years ago
  f84b7981
- Allow postinstall_file to be an entrypoint. · a9671c6b
  Alex Deymo authored 9 years ago
  a9671c6b
- domain: keep most domains out of app sandboxes · d7bd03c5
  William Roberts authored 9 years ago
  d7bd03c5
- domain: strengthen system_app sandbox neverallow · 1cf262da
  William Roberts authored 9 years ago
  1cf262da
- Merge "domain: keep others out of system app sandbox" · f4fefd92
  Nick Kralevich authored 9 years ago
  
  f4fefd92
Apr 05, 2016
- Merge "Revert "Remove "exec_type" from postinstall_file."" · 2f722694
  Alex Deymo authored 9 years ago
  
  2f722694
- Revert "Remove "exec_type" from postinstall_file." · f43af3a6
  Alex Deymo authored 9 years ago
  f43af3a6
- domain: keep others out of system app sandbox · 5470ffeb
  William Roberts authored 9 years ago
  5470ffeb
- init: keep init out of system_app sandboxes · 536b3334
  William Roberts authored 9 years ago
  536b3334
- Remove "exec_type" from postinstall_file. · 5507fa66
  Alex Deymo authored 9 years ago
  5507fa66
Apr 04, 2016
- Merge "init: avoid lengthy allow rules" · d25611d9
  Nick Kralevich authored 9 years ago
  
  d25611d9
Apr 01, 2016
- dumpstate: access /data/misc/logd · 74541338
  Mark Salyzyn authored 9 years ago
  74541338
Mar 30, 2016
- init: avoid lengthy allow rules · cf0d7f66
  William Roberts authored 9 years ago
  cf0d7f66
- Allow manual /postinstall loopback mounting on debug builds. · fc9e8e25
  Alex Deymo authored 9 years ago
  fc9e8e25
Mar 29, 2016
- drop install_recovery cache_recovery_file rules · ff2bf403
  Nick Kralevich authored 9 years ago
  ff2bf403
Mar 28, 2016
- refine /data/misc/logd rules · 6937aa93
  Nick Kralevich authored 9 years ago
  6937aa93
- Add mlstrustedobject to appfuse object type. · 4d19f98c
  Daichi Hirono authored 9 years ago
  4d19f98c
Mar 25, 2016
- Merge "init: logpersist access on debug" · 0144eedb
  Mark Salyzyn authored 9 years ago
  
  0144eedb
- Merge "dumpstate: access to /data/misc/recovery" · 8ae52a05
  Mark Salyzyn authored 9 years ago
  
  8ae52a05
- dumpstate: access to /data/misc/recovery · 4bf9a47e
  Mark Salyzyn authored 9 years ago
  4bf9a47e
- init: logpersist access on debug · 121f5bfd
  Mark Salyzyn authored 9 years ago
  121f5bfd
- neverallow /data/anr access for isolated/untrusted apps · 369cf8cd
  Nick Kralevich authored 9 years ago
  369cf8cd
- sysfs_uio: declare type in core policy · f2d07904
  Jeff Vander Stoep authored 9 years ago
  f2d07904
Mar 24, 2016
- Move sysfs_thermal to global policy and grant access. · df72abb3
  dcashman authored 9 years ago
  df72abb3
- Add recovery_persist & recovery_refresh · 16fe52c9
  Mark Salyzyn authored 9 years ago
  16fe52c9
Mar 22, 2016
- global_macros: Allow directory locking · af3ca33f
  Nick Kralevich authored 9 years ago
  af3ca33f
Mar 21, 2016
- system_server.te: expand app_data_file neverallow rule · 0792d8a0
  Nick Kralevich authored 9 years ago
  0792d8a0
Mar 17, 2016
- Add rules to allow dumpstate to run systrace. · 610f461e
  Felipe Leme authored 9 years ago
  610f461e
Mar 16, 2016
- Add /data/lib64, /data/vendor/lib64 to ASan sepolicy. · dda55908
  Evgenii Stepanov authored 9 years ago
  dda55908
Mar 14, 2016
- Mark batteryproperties service as app_api_service. · 9ed71eff
  dcashman authored 9 years ago
  9ed71eff
- Create sysfs_hwrandom type. · f100b2c4
  dcashman authored 9 years ago
  f100b2c4
Mar 11, 2016
- Leftovers of SELinux policy reload mechanism · 1c983327
  Janis Danisevskis authored 9 years ago
  1c983327
Mar 10, 2016
- Allow domains to getattr proc lnk_file. · f4c403d1
  dcashman authored 9 years ago
  f4c403d1