Commits · c491d5c0b5e1e86ec87e40adf2de3ee66416a70a · Werner Sembach / AndroidSystemSEPolicy · GitLab

Snippets Groups Projects

Jun 26, 2014
- Merge "Add missing services to service_contexts." · c491d5c0
  Nick Kralevich authored 10 years ago
  
  c491d5c0
- Add missing services to service_contexts. · 2b4c4f39
  Riley Spahn authored 10 years ago
  2b4c4f39
Jun 25, 2014
- dumpstate: transition into vdc domain · c0d14767
  Nick Kralevich authored 10 years ago
  c0d14767
- Allow system_server to read all /proc files · 8c6552ac
  Nick Kralevich authored 10 years ago
  8c6552ac
Jun 24, 2014
- Allow kernel sdcard read access as well for MTP sync. · a1558be5
  Stephen Smalley authored 10 years ago
  a1558be5
- Allow kernel sdcard access for MTP sync. · eb6b74fa
  Stephen Smalley authored 10 years ago
  eb6b74fa
Jun 20, 2014
- Merge "Give healthd permission to write sys properties to allow quick boot from charger mode." · 9f2d3f93
  Riley Andrews authored 10 years ago
  
  9f2d3f93
Jun 23, 2014
- Give healthd permission to write sys properties to allow quick boot from charger mode. · 51df227d
  Riley Andrews authored 10 years ago
  51df227d
- Align SELinux property policy with init property_perms. · fee49159
  Stephen Smalley authored 10 years ago
  fee49159
- unconfined: remove internet access · 0db95cce
  Nick Kralevich authored 10 years ago
  0db95cce
- Remove execmod access to system_file and exec_type. · a893edae
  Stephen Smalley authored 10 years ago
  a893edae
- Merge "Create vdc domain" · bb75dd73
  Nick Kralevich authored 10 years ago
  
  bb75dd73
- Merge "Allow init to relabel rootfs files." · 2e14164c
  Nick Kralevich authored 10 years ago
  
  2e14164c
- Allow init to relabel rootfs files. · c626a882
  Stephen Smalley authored 10 years ago
  c626a882
Jun 21, 2014
- Allow dumpsys from serial console · 67d1f1ec
  Nick Kralevich authored 10 years ago
  67d1f1ec
- Create vdc domain · bf8a37b8
  Nick Kralevich authored 10 years ago
  bf8a37b8
Jun 20, 2014
- Merge "Only allow app domains to access SDcard via fuse mount." · ed21bfca
  Nick Kralevich authored 10 years ago
  
  ed21bfca
- Only allow app domains to access SDcard via fuse mount. · cf610692
  Stephen Smalley authored 10 years ago
  cf610692
- Remove sdcard_type access from unconfineddomain. · ee615284
  Stephen Smalley authored 10 years ago
  ee615284
- Remove app_data_file access from unconfineddomain. · 631a5a8e
  Stephen Smalley authored 10 years ago
  631a5a8e
Jun 19, 2014
- Remove write access to rootfs files. · 04b8a75c
  Stephen Smalley authored 10 years ago
  04b8a75c
- Remove execute_no_trans from unconfineddomain. · f3c3a1aa
  Stephen Smalley authored 10 years ago
  f3c3a1aa
- Address recovery denials. · 1095d694
  Stephen Smalley authored 10 years ago
  1095d694
- Allow Bluetooth app to initiate DHCP service on bt-pan interface. · 97a2cfdf
  Paul Jensen authored 10 years ago
  97a2cfdf
- system_server: allow open /dev/snd and read files · 04e730b6
  Nick Kralevich authored 10 years ago
  04e730b6
Jun 18, 2014
- Prevent adding transitions to kernel or init domains. · bac4ccce
  Stephen Smalley authored 10 years ago
  bac4ccce
- Allow mounting of usbfs. · 718bf84b
  Stephen Smalley authored 10 years ago
  718bf84b
Jun 17, 2014
- Merge "Remove clatd's dac_override abilities." · 80b1b43a
  Lorenzo Colitti authored 10 years ago
  
  80b1b43a
- Merge "entrypoint should always be explicitly allowed." · ee43230f
  Nick Kralevich authored 10 years ago
  
  ee43230f
- entrypoint should always be explicitly allowed. · 5622cca0
  Stephen Smalley authored 10 years ago
  5622cca0
- Eliminate some duplicated rules. · 00b180df
  Stephen Smalley authored 10 years ago
  00b180df
- Refine sepolicy-analyze -D / dup detection. · 43b9cfd3
  Stephen Smalley authored 10 years ago
  43b9cfd3
- Force logwrapper to system_file · b4adc62a
  Nick Kralevich authored 10 years ago
  b4adc62a
- Merge "Add missing services to service_contexts." · a2288aff
  Nick Kralevich authored 10 years ago
  
  a2288aff
- Add missing services to service_contexts. · 3f06ad96
  Riley Spahn authored 10 years ago
  3f06ad96
- Merge "Fix SELinux policies to allow resource overlays." · 8d6e4cc1
  Nick Kralevich authored 10 years ago
  
  8d6e4cc1
Jun 16, 2014
- Fix SELinux policies to allow resource overlays. · fad4d5fb
  Nick Kralevich authored 10 years ago
  fad4d5fb
- Define contextmount_type attribute and add it to oemfs. · d2503ba8
  Stephen Smalley authored 10 years ago
  d2503ba8
- Restrict use of context= mount options. · 75e2ef92
  Stephen Smalley authored 10 years ago
  75e2ef92
- Don't allow types which are both file_type and fs_type · 48212742
  Nick Kralevich authored 10 years ago
  48212742