Commits · bc1b4c0326410ed4c0f1a71f48d41a7307e799b2 · Werner Sembach / AndroidSystemSEPolicy

Nov 17, 2016
- allow policy to create a file by vfat (fs_type) for a case using sdcardfs am:... · bc1b4c03
  Eric Bae authored 8 years ago
  
  allow policy to create a file by vfat (fs_type) for a case using sdcardfs am: adf210d6 am: c6c8da37 am: f43135fd am: b2930607 Change-Id: I7ab37535f7a471712e5511dc0917cbf68bb7a1d5
  bc1b4c03
- allow policy to create a file by vfat (fs_type) for a case using sdcardfs am:... · b2930607
  Eric Bae authored 8 years ago
  
  allow policy to create a file by vfat (fs_type) for a case using sdcardfs am: adf210d6 am: c6c8da37 am: f43135fd Change-Id: Ia01ca88536362fe910808f33a445fc5c8c54b77f
  b2930607
- allow policy to create a file by vfat (fs_type) for a case using sdcardfs am: adf210d6 · f43135fd
  Eric Bae authored 8 years ago
  
  am: c6c8da37 Change-Id: I2dcb374609183a4460891c936757319d91064682
  f43135fd
- allow policy to create a file by vfat (fs_type) for a case using sdcardfs · c6c8da37
  Eric Bae authored 8 years ago
  
  am: adf210d6 Change-Id: I0386db7e81ed5e6a6c032adb1173163f45ad726e
  c6c8da37
Oct 06, 2016
- Sepolicy: Ignore otapreopt_chroot setsched denial · 8e1b33a6
  Andreas Gampe authored 8 years ago
  
  am: 0f81e066 Change-Id: I32529d2b8ad064f41d357f35b15c9acd31381bee
  8e1b33a6
- Allow dumpstate to use wake_lock. DO NOT MERGE. · a392783b
  Wei Liu authored 8 years ago
  
  am: 7a393427 Change-Id: Ia78328cffdba927301761e99174533623a6c1966
  a392783b
- allow policy to create a file by vfat (fs_type) for a case using sdcardfs · adf210d6
  Eric Bae authored 8 years ago
  
  Change-Id: Ia938d73b1a49b9ba4acf906df37095d21edee22e
  adf210d6
Oct 05, 2016
- Sepolicy: Ignore otapreopt_chroot setsched denial · 0f81e066
  Andreas Gampe authored 8 years ago
  
  Ignore, as it's a side effect of mounting /vendor. Bug: 31116514 Change-Id: If94a27a26181e40de5c5e60f5446de9ce2ccdba0
  View commits for tag android-cts-7.1_r1 android-cts-7.1_r1
  
  0f81e066
Oct 04, 2016

Allow dumpstate to use wake_lock. DO NOT MERGE. · 7a393427

Wei Liu authored 8 years ago

(cherry picked from commit e123f061)

BUG: 31828706
BUG: 30832947

Change-Id: Icd5117d655f1197524b39fe7bc1b11c4d920093c
(cherry picked from commit c78db969)

7a393427

Sep 27, 2016
- DO NOT MERGE - fix truncated boot sound. am: c6effa90 am: 21d78e0f · ef2da1d7
  Eric Laurent authored 8 years ago
  
  am: f781f952 Change-Id: If31aa1ecf8dae506d7e556702f3ca08d0efdabc9
  ef2da1d7
- DO NOT MERGE - fix truncated boot sound. am: c6effa90 · f781f952
  Eric Laurent authored 8 years ago
  
  am: 21d78e0f Change-Id: I2f9829077cf1f48b718afefc4d7d35f92d6e73b9
  f781f952
- DO NOT MERGE - fix truncated boot sound. · 21d78e0f
  Eric Laurent authored 8 years ago
  
  am: c6effa90 Change-Id: Id257877621b9375bca7d32e68d90c7a5c2a91f5d
  21d78e0f
- Allow dumpstate to run ss. · 0dbd1bc1
  Lorenzo Colitti authored 8 years ago
  
  am: 63c7ad6e Change-Id: I5b9383b4c50d2eecd995db6943a0a27e50fb6fdd
  0dbd1bc1
Sep 26, 2016
- Allow dumpstate to run ss. · 63c7ad6e
  Lorenzo Colitti authored 8 years ago
  
  Bug: 23113288 Change-Id: I123e5d40955358665800fe3b86cd5f8dbaeb8717
  63c7ad6e
Sep 23, 2016

DO NOT MERGE - fix truncated boot sound. · c6effa90

Eric Laurent authored 8 years ago

Allow bootanim process to access audioserver service.

Bug: 31651778
Change-Id: I5bec8812877792b1df3b37dddc5ccea3b243f5c4

c6effa90

Sep 20, 2016
- Add app_api_service to connmetrics_service · 76436c61
  Hugo Benichi authored 8 years ago
  
  am: d0561efe Change-Id: Id1537bf36a218f3727caef36659a40087c19feb9
  76436c61
Sep 16, 2016

Add app_api_service to connmetrics_service · d0561efe

Hugo Benichi authored 8 years ago

This allows the ConnectivityMetrics app to dump connmetrics service
metrics.

Bug: 31254800
Change-Id: I4c3da8cc80a5820dbed9843badc1464f3ae40581

d0561efe

Sep 12, 2016
- Merge "New service name for IpConnectivity metrics" into nyc-mr1-dev · 0aa395db
  Hugo Benichi authored 8 years ago
  
  am: 5ed3131e Change-Id: Idd271962226c30a157c1b04f6ee3c56afe1f7f28
  0aa395db
- New service name for IpConnectivity metrics · 90307fbc
  Hugo Benichi authored 8 years ago
  
  am: f412cc62 Change-Id: I576ad54dc5526a022e0725b15a2e326df5432e31
  90307fbc
- Merge "New service name for IpConnectivity metrics" into nyc-mr1-dev · 5ed3131e
  Hugo Benichi authored 8 years ago
  
  5ed3131e
Sep 09, 2016
- New service name for IpConnectivity metrics · f412cc62
  Hugo Benichi authored 8 years ago
  
  Bug: 31254800 Change-Id: If8708c8a4e0ea7655f31028881248a14cf2ba5f7
  f412cc62
Sep 08, 2016
- Merge "selinux: Update policies for mediadrmserver" into nyc-mr1-dev · 5b44e2b9
  Takahiro Aizawa authored 8 years ago
  
  am: 030632f0 Change-Id: I2a2a4208770736207aeb1226f5d4f00b3eb3d57e
  5b44e2b9
- selinux: Update policies for mediadrmserver · ce80c467
  Takahiro Aizawa authored 8 years ago
  
  am: 8db0f254 Change-Id: I10537bd00dcb129741b10c3af960e7f6eacd459e
  ce80c467
- Merge "selinux: Update policies for mediadrmserver" into nyc-mr1-dev · 030632f0
  TreeHugger Robot authored 8 years ago
  
  030632f0
- Allow the zygote to stat all files it opens. am: a60342b7 am: 28e18c3a · 60db8f62
  Narayan Kamath authored 8 years ago
  
  am: 35a0597a Change-Id: I8ee43acea1274d46ca6071c472b8c7427101b384
  60db8f62
- Allow the zygote to stat all files it opens. am: a60342b7 · 35a0597a
  Narayan Kamath authored 8 years ago
  
  am: 28e18c3a Change-Id: I88bec1549bb1a28b70cb32b10911baa8d91669e9
  35a0597a
- Allow the zygote to stat all files it opens. · 28e18c3a
  Narayan Kamath authored 8 years ago
  
  am: a60342b7 Change-Id: I2d7c99660b6bb9b45922f1203cb1eafe90659238
  28e18c3a
Sep 07, 2016

Allow the zygote to stat all files it opens. · a60342b7

Narayan Kamath authored 8 years ago

bug: 30963384

(cherry picked from commit 63203a01)

Change-Id: Ifa4b9a645f8edcf51e3f025316106e5b65a4790d

a60342b7

Aug 26, 2016
- Merge "Allow the zygote to stat all files it opens." into nyc-mr1-dev · 84964e90
  Narayan Kamath authored 8 years ago
  
  am: 4af6d81b Change-Id: I3ee22a0599e0333662a743a99ae92a8a46313135
  84964e90
- Allow the zygote to stat all files it opens. · 7c4ecc87
  Narayan Kamath authored 8 years ago
  
  am: 63203a01 Change-Id: I5beb026a80cf9c2c6613d77c1b798797aa10eeb5
  7c4ecc87
- Merge "Allow the zygote to stat all files it opens." into nyc-mr1-dev · 4af6d81b
  TreeHugger Robot authored 8 years ago
  
  4af6d81b
Aug 25, 2016
- Allow the zygote to stat all files it opens. · 63203a01
  Narayan Kamath authored 8 years ago
  
  bug: 30963384 Change-Id: I62b5ffd43469dbb0bba67e1bb1d3416e7354f9e5
  63203a01
Aug 23, 2016

fix build: exclude bluetooth from neverallow restriction am: 7e380216 am: a59830d9 · 5e09765c
Nick Kralevich authored 8 years ago
```
am: ce84793b

Change-Id: Ief73a034bbd522f633cda815e7a4d0f319e78f49
```
5e09765c
fix build: exclude bluetooth from neverallow restriction am: 7e380216 · ce84793b
Nick Kralevich authored 8 years ago
```
am: a59830d9

Change-Id: Ibb2f08c673f62136d51b6c510b830bcc958ce236
```
ce84793b
fix build: exclude bluetooth from neverallow restriction · a59830d9
Nick Kralevich authored 8 years ago
```
am: 7e380216

Change-Id: I827a8b38264906bd06a8fefb9c3a8209dbc1035f
```
a59830d9

fix build: exclude bluetooth from neverallow restriction · 7e380216

Nick Kralevich authored 8 years ago

Bluetooth is sometimes started from init.

Addresses the following compiler error:

  libsepol.report_failure: neverallow on line 489 of
  system/sepolicy/domain.te (or line 9149 of policy.conf) violated by
  allow init bluetooth:process { transition };
  libsepol.check_assertions: 1 neverallow failures occurred
  Error while expanding policy

Change-Id: I2bc1e15217892e1ba2a62c9683af0f3c0aa16b86

7e380216

Remove platform_app from neverallow execute from /data am: c55cf17a am: 69fe5d07 · 4bfb943d
Nick Kralevich authored 8 years ago
```
am: 31bb306a

Change-Id: I542273a4affe02b0f7df0c90cf6bb33d77b79958
```
4bfb943d
Rework neverallow for /data execute permission am: eedacf83 am: 81fb2363 · 4cd633b2
Eino-Ville Talvala authored 8 years ago
```
am: 76e85e8c

Change-Id: I6a7c4aa29186b32ab3dd94d028104ed50048735b
```
4cd633b2

Aug 22, 2016
- Remove platform_app from neverallow execute from /data am: c55cf17a · 31bb306a
  Nick Kralevich authored 8 years ago
  
  am: 69fe5d07 Change-Id: Iaaea2aaeaba08869a8885c88e07c436196134d11
  31bb306a
- Rework neverallow for /data execute permission am: eedacf83 · 76e85e8c
  Eino-Ville Talvala authored 8 years ago
  
  am: 81fb2363 Change-Id: I129acfbecd2b8bb840c4d4897dbcc43f2ed0d2e2
  76e85e8c