Commits · bdbc30848b9ddf00451d86f30033ddeae95b2dee · Werner Sembach / AndroidSystemSEPolicy

Sep 09, 2016
- Revert "audit domain_deprecated perms for removal" · bdbc3084
  Jeff Vander Stoep authored 8 years ago
  
  This reverts commit 9c820a11. Bug: 31364540 Change-Id: I98a34bd32dd835e6795d31a90f16f4ccd691e6e5
  bdbc3084
- Revert "domain_deprecate: remove observed audit messages" · 0c994c39
  Jeff Vander Stoep authored 8 years ago
  
  This reverts commit 8486f4e6. Bug: 31364540 Change-Id: I7dee039540864a3244ee6d9fbb200ef177c42465
  0c994c39
- Revert "Allow kernel to read proc" · 2df6227a
  Jeff Vander Stoep authored 8 years ago
  
  This reverts commit 48d68a64. Bug: 31364540 Change-Id: I2a83b661e06c84f42c0a7aa566f02d2c135b96c3
  2df6227a
- Revert "Enforce ioctl command whitelisting on all sockets" · e69b1c93
  Jeff Vander Stoep authored 8 years ago
  
  This reverts commit c71c6622. Bug: 31364540 Change-Id: I3f4f132d4769e3cbc9d03ff908104a69f05bd2ef
  e69b1c93
- Revert "system_server, bluetooth: grant access to priv socket ioctls" · bed5a433
  Jeff Vander Stoep authored 8 years ago
  
  This reverts commit f19bcfd5. Bug: 31364540 Change-Id: I41d71202fe7d2e67742edd7915a95d37172ba7ea
  bed5a433
- Revert "rild: grant priv ioctl commands for udp sockets" · 094ab7a8
  Jeff Vander Stoep authored 8 years ago
  
  This reverts commit df5abb19. Bug: 31364540 Change-Id: I81557603e1f1f12f6a675bfab5157d4f000fe435
  094ab7a8
Aug 29, 2016
- Merge "Allow keystore to access KeyAttestationApplicationIDProviderService" · 5ab0a8c1
  TreeHugger Robot authored 8 years ago
  
  5ab0a8c1
Aug 28, 2016
- isolated_app: grant append on app_data_file am: 4e6655b5 am: a31bd6bd am: 1051aaff · 26e54337
  Jeff Vander Stoep authored 8 years ago
  
  am: a6e7112f Change-Id: I3246d31e6da40acb7c81f0eb227d198851101be3
  26e54337
- isolated_app: grant append on app_data_file am: 4e6655b5 am: a31bd6bd · a6e7112f
  Jeff Vander Stoep authored 8 years ago
  
  am: 1051aaff Change-Id: Iffa8d74604400a9d452ced84169b8104b29d63e7
  a6e7112f
- isolated_app: grant append on app_data_file am: 4e6655b5 · 1051aaff
  Jeff Vander Stoep authored 8 years ago
  
  am: a31bd6bd Change-Id: I98f64c66877821eff40b7cc34ae070ade3c1ea2f
  1051aaff
- isolated_app: grant append on app_data_file · a31bd6bd
  Jeff Vander Stoep authored 8 years ago
  
  am: 4e6655b5 Change-Id: I13896b6e919f8bd10573aa085bf73998e28f8661
  a31bd6bd
- isolated_app: grant append on app_data_file · 4e6655b5
  Jeff Vander Stoep authored 8 years ago
  
  isolated_app can already write to a file. Apps may want to append instead of write. Fixes: 30984610 Change-Id: I7a90b3311dcaff597f07930ceea0a23b29b0df2d
  4e6655b5
Aug 27, 2016
- Sepolicy: allow dex2oatd and patchoatd am: 47b373af am: 17e15650 am: c0fc6adc · f5ec3e81
  Andreas Gampe authored 8 years ago
  
  am: 586b6648 Change-Id: Ia1db2b5138e9711d1c04c944a3f82c84d37dce8b
  f5ec3e81
- Sepolicy: allow dex2oatd and patchoatd am: 47b373af am: 17e15650 · 586b6648
  Andreas Gampe authored 8 years ago
  
  am: c0fc6adc Change-Id: I84150bc525cb27470bfce6dfe624d7a5aff59307
  586b6648
- Sepolicy: allow dex2oatd and patchoatd am: 47b373af · c0fc6adc
  Andreas Gampe authored 8 years ago
  
  am: 17e15650 Change-Id: I6d0880b98ab74886cc302e68dd8a7f46e6663e7b
  c0fc6adc
- Sepolicy: allow dex2oatd and patchoatd · 17e15650
  Andreas Gampe authored 8 years ago
  
  am: 47b373af Change-Id: I58b6e0b40662e3fa5c771300f443d32cc40df3a3
  17e15650
Aug 26, 2016
- Merge "Allow the zygote to stat all files it opens." into nyc-mr1-dev am: 4af6d81b am: 84964e90 · 008bcb65
  Narayan Kamath authored 8 years ago
  
  am: cedf0908 Change-Id: I829e01e5015c89e17caf7f97828fbda23300f475
  008bcb65
- Allow the zygote to stat all files it opens. am: 63203a01 am: 7c4ecc87 · 265264f8
  Narayan Kamath authored 8 years ago
  
  am: be69aa3d Change-Id: I109ff9f701375edfc648f47c35deed0b9f36f1d0
  265264f8
- Merge "Allow the zygote to stat all files it opens." into nyc-mr1-dev am: 4af6d81b · cedf0908
  Narayan Kamath authored 8 years ago
  
  am: 84964e90 Change-Id: I501147502cf50187cdaa2f6daaf3cb301b9422a3
  cedf0908
- Allow the zygote to stat all files it opens. am: 63203a01 · be69aa3d
  Narayan Kamath authored 8 years ago
  
  am: 7c4ecc87 Change-Id: Ic40b023f6f61a00026a56ae2c9d8faba38440129
  be69aa3d
- Merge "Allow the zygote to stat all files it opens." into nyc-mr1-dev · 84964e90
  Narayan Kamath authored 8 years ago
  
  am: 4af6d81b Change-Id: I3ee22a0599e0333662a743a99ae92a8a46313135
  84964e90
- Allow the zygote to stat all files it opens. · 7c4ecc87
  Narayan Kamath authored 8 years ago
  
  am: 63203a01 Change-Id: I5beb026a80cf9c2c6613d77c1b798797aa10eeb5
  7c4ecc87
- Merge "Allow the zygote to stat all files it opens." into nyc-mr1-dev · 4af6d81b
  TreeHugger Robot authored 8 years ago
  
  4af6d81b
- Sepolicy: allow dex2oatd and patchoatd · 47b373af
  Andreas Gampe authored 8 years ago
  
  Give debug versions the same rights as non-debug versions for ART. Change-Id: I9906d100c3857c3a87344ff37aabc53107562c61
  47b373af
Aug 25, 2016
- Allow the zygote to stat all files it opens. · 63203a01
  Narayan Kamath authored 8 years ago
  
  bug: 30963384 Change-Id: I62b5ffd43469dbb0bba67e1bb1d3416e7354f9e5
  63203a01
Aug 24, 2016
- Allow apps to read keychain_data_file links am: f247dcba am: a3f6339a am: 6269ecd0 · 9542a4e4
  Chad Brubaker authored 8 years ago
  
  am: 2561db9a Change-Id: I8dbc5c1c1445792f8e944f2e13f4b31411bb0fb2
  9542a4e4
- Allow apps to read keychain_data_file links am: f247dcba am: a3f6339a · 2561db9a
  Chad Brubaker authored 8 years ago
  
  am: 6269ecd0 Change-Id: Iad6cbe6b2215f125a7558e7618a82e3b97a44672
  2561db9a
- Allow apps to read keychain_data_file links am: f247dcba · 6269ecd0
  Chad Brubaker authored 8 years ago
  
  am: a3f6339a Change-Id: I755afa8558556df83c18e87fea526f76e6fa249f
  6269ecd0
- Allow apps to read keychain_data_file links · a3f6339a
  Chad Brubaker authored 8 years ago
  
  am: f247dcba Change-Id: Ie24129d68ee32fe0178dd0fe4aea4208e72f050f
  a3f6339a
- Allow apps to read keychain_data_file links · f247dcba
  Chad Brubaker authored 8 years ago
  
  Bug: 28746284 Change-Id: I59aa235ecba05e22aaa531e387a77f47267ac9ae
  f247dcba
- Merge "Allow wificond to drop privileges after startup" · c388ce12
  TreeHugger Robot authored 8 years ago
  
  c388ce12
Aug 23, 2016
- Merge "Allow wificond to set interfaces up and down" · dfbf33fb
  TreeHugger Robot authored 8 years ago
  
  dfbf33fb
- Allow wificond to drop privileges after startup · 8a04a313
  Christopher Wiley authored 8 years ago
  
  wificond will now change user/group to wifi/wifi after taking control of a particular path in the sysfs. Bug: 29870863 Change-Id: I9ccb23f60a66d6850f3969c364288f8850044fed Test: wificond unit and integration tests pass
  8a04a313
- Allow wificond to set interfaces up and down · ca7b04ba
  Christopher Wiley authored 8 years ago
  
  This is apparently a privileged ioctl. Being able to do this allows us to no longer kill hostapd with SIGTERM, since we can cleanup after hard stops. Bug: 31023120 Test: wificond unit and integration tests pass Change-Id: Icdf2469d403f420c742871f54b9fb17432805991
  ca7b04ba
- Merge "Port from pcre to pcre2 (Fix wrong merge decision)" into... · 17b0cbc7
  Janis Danisevskis authored 8 years ago
  
  Merge "Port from pcre to pcre2 (Fix wrong merge decision)" into stage-aosp-master am: 9b5b32c0 am: bba39385 am: d0d38fa2 Change-Id: If589c63a35593ac4a9305e63408467b7970438e2
  17b0cbc7
- Port from pcre to pcre2 (Fix wrong merge decision) am: 750d797b am: aaa363cd · 990c68ef
  Janis Danisevskis authored 8 years ago
  
  am: 24e4ecf0 Change-Id: I026c0fe7b37317a24f83b377b4874216551ff2ca
  990c68ef
- Merge "Port from pcre to pcre2 (Fix wrong merge decision)" into stage-aosp-master am: 9b5b32c0 · d0d38fa2
  Janis Danisevskis authored 8 years ago
  
  am: bba39385 Change-Id: I88c59ac92116183242b475c6beeb2b7a3dba069b
  d0d38fa2
- Port from pcre to pcre2 (Fix wrong merge decision) am: 750d797b · 24e4ecf0
  Janis Danisevskis authored 8 years ago
  
  am: aaa363cd Change-Id: Ieb71a3d8c51fd33ee60213fad43824db18da59aa
  24e4ecf0
- Merge "Port from pcre to pcre2 (Fix wrong merge decision)" into stage-aosp-master · bba39385
  Janis Danisevskis authored 8 years ago
  
  am: 9b5b32c0 Change-Id: I5d8f73b32be174189a88e07c638af4daaa612cce
  bba39385
- Port from pcre to pcre2 (Fix wrong merge decision) · aaa363cd
  Janis Danisevskis authored 8 years ago
  
  am: 750d797b Change-Id: I1e9de6697e2755da0b9f0ff11a799ad976ccd8a0
  aaa363cd