Commits · c15d54ef1a245584d157aa55b80b78e24b4d4da9 · Werner Sembach / AndroidSystemSEPolicy · GitLab

Snippets Groups Projects

Jul 26, 2017
- domain_deprecated: remove proc access · c15d54ef
  Jeff Vander Stoep authored 7 years ago
  c15d54ef
Jul 25, 2017
- domain_deprecated: Remove access to /data/app · 21b4a925
  Jeff Vander Stoep authored 7 years ago
  21b4a925
- Merge "Allow shared_relro to connect to activity_service." · 6775ee15
  Richard Coles authored 7 years ago
  
  6775ee15
- Sepolicy: Support profmand and dexoptanalyzerd · 2713b095
  Andreas Gampe authored 7 years ago
  2713b095
Jul 24, 2017
- Allow shared_relro to connect to activity_service. · 75a41c59
  Torne (Richard Coles) authored 7 years ago
  75a41c59
- Move domain_deprecated into private policy · 7c34e83f
  Jeff Vander Stoep authored 7 years ago
  7c34e83f
- Make sure all public types are defined regardless of build variants · 83f8cde4
  Sandeep Patil authored 8 years ago
  83f8cde4
Jul 23, 2017
- domain_deprecate: remove system_data_file access · 2b75437d
  Jeff Vander Stoep authored 7 years ago
  2b75437d
Jul 20, 2017
- crash_dump_fallback: allow writing to system_server pipes. · 3c9b9197
  Josh Gao authored 7 years ago
  3c9b9197
Jul 19, 2017
- runas: grant access to seapp_contexts files · dcec3ee9
  Jeff Vander Stoep authored 7 years ago
  dcec3ee9
Jul 18, 2017
- Merge "allow system_server to write to cameraserver's /proc/<pid>/timerslack_ns" · 9f8773b4
  Treehugger Robot authored 7 years ago
  
  9f8773b4
- allow system_server to write to cameraserver's /proc/<pid>/timerslack_ns · 655599a6
  Max Bires authored 7 years ago
  655599a6
Jul 16, 2017
- Allow update_engine to read postinstall_mnt_dir · 8f687053
  Tianjie Xu authored 7 years ago
  View commits for tag android-o-preview-4 android-o-preview-4
  
  8f687053
- Explicitly allow netd to take the iptables lock. · 9273c1bb
  Lorenzo Colitti authored 7 years ago
  9273c1bb
Jul 13, 2017
- sepolicy: Define validate_trans permission · 50992311
  Stephen Smalley authored 7 years ago
  50992311
- Merge "sepolicy: Define and allow map permission" · 770214ab
  Treehugger Robot authored 7 years ago
  
  770214ab
- Merge "Revert "Temporarily revert the SELinux policy for persist.netd.stable_secret."" · 580a0f2b
  Lorenzo Colitti authored 7 years ago
  
  580a0f2b
- Revert "Temporarily revert the SELinux policy for persist.netd.stable_secret." · 5b3efd3b
  Lorenzo Colitti authored 7 years ago
  5b3efd3b
- App: Allow wrapped app to send pid · ee694980
  Andreas Gampe authored 7 years ago
  ee694980
Jul 12, 2017
- domain_deprecated: remove system_file rules · dbe0f65a
  Jeff Vander Stoep authored 7 years ago
  dbe0f65a
- domain_deprecated: remove rootfs rules · 90d2772a
  Jeff Vander Stoep authored 7 years ago
  90d2772a
- Merge "Temporarily revert the SELinux policy for persist.netd.stable_secret." · c501c345
  Lorenzo Colitti authored 7 years ago
  
  c501c345
Jul 11, 2017
- Merge "sepolicy: fix support for lmkd" · 6116489c
  Robert Benea authored 7 years ago
  
  6116489c
- domain_deprecated: remove rootfs access · a12aad45
  Jeff Vander Stoep authored 7 years ago
  a12aad45
- sepolicy: fix support for lmkd · e62cf5e5
  Robert Benea authored 7 years ago
  e62cf5e5
Jul 10, 2017
- domain_deprecated: remove cgroup access · 72b26547
  Jeff Vander Stoep authored 7 years ago
  72b26547
- domain_deprecated: remove cache access · 790f4c7e
  Jeff Vander Stoep authored 7 years ago
  790f4c7e
- sepolicy: Define and allow map permission · 4397f082
  Stephen Smalley authored 7 years ago
  4397f082
- Temporarily revert the SELinux policy for persist.netd.stable_secret. · 07e631d2
  Lorenzo Colitti authored 7 years ago
  07e631d2
- domain_deprecated: remove access to /proc/meminfo · 3e5bb807
  Jeff Vander Stoep authored 7 years ago
  3e5bb807
- dumpstate: remove domain_deprecated attribute · 90ae4f6b
  Jeff Vander Stoep authored 7 years ago
  90ae4f6b
- Remove dumpstate selinux spam from logs · f4ce8f6c
  Jeff Vander Stoep authored 7 years ago
  f4ce8f6c
Jul 06, 2017
- domain_deprecated: remove tmpfs dir access · ca5bb337
  Jeff Vander Stoep authored 7 years ago
  ca5bb337
Jul 03, 2017
- Merge "recovery: clean up audit logspam" · a92d3135
  Treehugger Robot authored 7 years ago
  
  a92d3135
- Merge "Allow installd to delete files via sdcardfs." · a6f6295c
  Treehugger Robot authored 7 years ago
  
  a6f6295c
- recovery: clean up audit logspam · 9bbe420b
  Jeff Vander Stoep authored 7 years ago
  9bbe420b
- Merge "Add SEPolicy for new Java-based Broadcast Radio service." · 6466092f
  Jeffrey Vander Stoep authored 7 years ago
  
  6466092f
- Allow installd to delete files via sdcardfs. · dd57e698
  Jeff Sharkey authored 7 years ago
  dd57e698
- domain_deprecated: remove ion access · 88e4be54
  Jeff Vander Stoep authored 7 years ago
  88e4be54
Jul 01, 2017
- Remove more domain_deprecated permissions · e39d5c87
  Jeff Vander Stoep authored 7 years ago
  e39d5c87