Commits · ed21bfca194d8a5d88e8ed00c22db044cafdb611 · Werner Sembach / AndroidSystemSEPolicy · GitLab

Snippets Groups Projects

Jun 20, 2014
- Merge "Only allow app domains to access SDcard via fuse mount." · ed21bfca
  Nick Kralevich authored 10 years ago
  
  ed21bfca
- Only allow app domains to access SDcard via fuse mount. · cf610692
  Stephen Smalley authored 10 years ago
  cf610692
- Remove sdcard_type access from unconfineddomain. · ee615284
  Stephen Smalley authored 10 years ago
  ee615284
- Remove app_data_file access from unconfineddomain. · 631a5a8e
  Stephen Smalley authored 10 years ago
  631a5a8e
Jun 19, 2014
- Remove write access to rootfs files. · 04b8a75c
  Stephen Smalley authored 10 years ago
  04b8a75c
- Remove execute_no_trans from unconfineddomain. · f3c3a1aa
  Stephen Smalley authored 10 years ago
  f3c3a1aa
- Address recovery denials. · 1095d694
  Stephen Smalley authored 10 years ago
  1095d694
- Allow Bluetooth app to initiate DHCP service on bt-pan interface. · 97a2cfdf
  Paul Jensen authored 10 years ago
  97a2cfdf
- system_server: allow open /dev/snd and read files · 04e730b6
  Nick Kralevich authored 10 years ago
  04e730b6
Jun 18, 2014
- Prevent adding transitions to kernel or init domains. · bac4ccce
  Stephen Smalley authored 10 years ago
  bac4ccce
- Allow mounting of usbfs. · 718bf84b
  Stephen Smalley authored 10 years ago
  718bf84b
Jun 17, 2014
- Merge "Remove clatd's dac_override abilities." · 80b1b43a
  Lorenzo Colitti authored 10 years ago
  
  80b1b43a
- Merge "entrypoint should always be explicitly allowed." · ee43230f
  Nick Kralevich authored 10 years ago
  
  ee43230f
- entrypoint should always be explicitly allowed. · 5622cca0
  Stephen Smalley authored 10 years ago
  5622cca0
- Eliminate some duplicated rules. · 00b180df
  Stephen Smalley authored 10 years ago
  00b180df
- Refine sepolicy-analyze -D / dup detection. · 43b9cfd3
  Stephen Smalley authored 10 years ago
  43b9cfd3
- Force logwrapper to system_file · b4adc62a
  Nick Kralevich authored 10 years ago
  b4adc62a
- Merge "Add missing services to service_contexts." · a2288aff
  Nick Kralevich authored 10 years ago
  
  a2288aff
- Add missing services to service_contexts. · 3f06ad96
  Riley Spahn authored 10 years ago
  3f06ad96
- Merge "Fix SELinux policies to allow resource overlays." · 8d6e4cc1
  Nick Kralevich authored 10 years ago
  
  8d6e4cc1
Jun 16, 2014
- Fix SELinux policies to allow resource overlays. · fad4d5fb
  Nick Kralevich authored 10 years ago
  fad4d5fb
- Define contextmount_type attribute and add it to oemfs. · d2503ba8
  Stephen Smalley authored 10 years ago
  d2503ba8
- Restrict use of context= mount options. · 75e2ef92
  Stephen Smalley authored 10 years ago
  75e2ef92
- Don't allow types which are both file_type and fs_type · 48212742
  Nick Kralevich authored 10 years ago
  48212742
Jun 15, 2014
- recovery: Allow exec_type on dirs, read for /dev · ff409bb4
  Nick Kralevich authored 10 years ago
  ff409bb4
Jun 13, 2014
- Remove clatd's dac_override abilities. · 1d75c90b
  Lorenzo Colitti authored 10 years ago
  1d75c90b
- Remove clatd's ability to write to proc files. · 81c03013
  Lorenzo Colitti authored 10 years ago
  81c03013
Jun 11, 2014
- Merge "Make inputflinger enforcing." · 2be9c64f
  Nick Kralevich authored 10 years ago
  
  2be9c64f
Jun 14, 2014
- system_server profile access · a76d9ddf
  Nick Kralevich authored 10 years ago
  a76d9ddf
Jun 13, 2014
- allow system_server getattr on /data/dalvik-cache/profiles · 96d9af42
  Nick Kralevich authored 10 years ago
  96d9af42
- Make inputflinger enforcing. · 701aebb5
  Stephen Smalley authored 10 years ago
  701aebb5
Jun 12, 2014
- Merge "selinux: logd Development settings" · 848109c0
  Mark Salyzyn authored 10 years ago
  
  848109c0
- selinux: logd Development settings · 9e7bbf61
  Mark Salyzyn authored 10 years ago
  9e7bbf61
- Allow shell to read/search /dev/input directory. · a2e4e265
  Stephen Smalley authored 10 years ago
  a2e4e265
- Merge "runas: allow pipe communication from the shell" · fc10f2a7
  Nick Kralevich authored 10 years ago
  
  fc10f2a7
Jun 13, 2014
- runas: allow pipe communication from the shell · 6c9c5888
  Nick Kralevich authored 10 years ago
  6c9c5888
Jun 10, 2014
- Merge "Allow clatd to read from packet sockets and write to raw sockets" · b32448c9
  Lorenzo Colitti authored 10 years ago
  
  b32448c9
Jun 12, 2014
- Make the mediaserver domain enforcing. · f0ffff0b
  Stephen Smalley authored 10 years ago
  f0ffff0b
- Remove world-read access to /data/dalvik-cache/profiles · 86703051
  Nick Kralevich authored 10 years ago
  86703051
- Allow clatd to read from packet sockets and write to raw sockets · 6cd57a43
  Lorenzo Colitti authored 10 years ago
  6cd57a43