Commits · n-iot-preview-2 · Werner Sembach / AndroidSystemSEPolicy · GitLab

Snippets Groups Projects

Jun 07, 2016
- logpersist: reserve persist.logd.logpersistd · 68d67a0f
  Mark Salyzyn authored 8 years ago
  68d67a0f
Apr 28, 2016
- shell: enable hostside test: testAllBlockDevicesAreSecure · e53d0b0b
  William Roberts authored 9 years ago
  e53d0b0b
- shell: enable hostside test: testAllCharacterDevicesAreSecure · 72c16e32
  William Roberts authored 9 years ago
  72c16e32
Apr 13, 2016
- Allow shell to read /proc/meminfo. · a8e7fe22
  dcashman authored 9 years ago
  a8e7fe22
Jan 25, 2016
- app: connect to adbd · 2fdeab37
  Jeff Vander Stoep authored 9 years ago
  2fdeab37
Jan 13, 2016
- Allow shell to read sysfs dirs. · 20fb7866
  dcashman authored 9 years ago
  20fb7866
Jan 05, 2016
- Add sysfs_batteryinfo label. · a31755fa
  dcashman authored 9 years ago
  a31755fa
- DO NOT MERGE: Further restrict access to socket ioctl commands · 57531cac
  Jeff Vander Stoep authored 9 years ago
  57531cac
Dec 23, 2015
- undeprecate /proc/cpuinfo, more shell permissions · f8f937a1
  Nick Kralevich authored 9 years ago
  f8f937a1
Dec 22, 2015
- shell.te: allow rules before neverallow rules · 9c5b4a8a
  Nick Kralevich authored 9 years ago
  9c5b4a8a
Dec 16, 2015
- init.te: allow writing to /sys/kernel/debug/tracing/tracing_on · 5beeb81e
  Nick Kralevich authored 9 years ago
  5beeb81e
Dec 14, 2015
- label /sys/kernel/debug/tracing and remove debugfs write · fe12b616
  Nick Kralevich authored 9 years ago
  fe12b616
Dec 08, 2015
- Change /dev/ion from read-only to read-write · 71fd337f
  Nick Kralevich authored 9 years ago
  71fd337f
- shell.te: Restore /proc/net access · 99c78bf2
  Nick Kralevich authored 9 years ago
  99c78bf2
- Add initial debugfs labeling support and label /sys/kernel/debug/tracing/trace_marker · 44826cb5
  Nick Kralevich authored 9 years ago
  44826cb5
Dec 04, 2015
- Increase communication surface between dumpstate and Shell: · 83fd8a54
  Felipe Leme authored 9 years ago
  83fd8a54
- shell.te: Allow read access to system_file · 29b9532a
  Nick Kralevich authored 9 years ago
  29b9532a
Dec 03, 2015
- shell.te: allow pulling the currently running SELinux policy · ad22e867
  Nick Kralevich authored 9 years ago
  ad22e867
Dec 02, 2015
- Explicitly added permissions that were previously granted through · 15a1e0d4
  Felipe Leme authored 9 years ago
  15a1e0d4
- Add permissions back to app / shell domains · 8ff6a86d
  Nick Kralevich authored 9 years ago
  8ff6a86d
Nov 28, 2015
- Remove domain_deprecated from adbd and shell · 8ca19368
  Nick Kralevich authored 9 years ago
  8ca19368
Nov 03, 2015
- Create attribute for moving perms out of domain · d22987b4
  Jeff Vander Stoep authored 9 years ago
  d22987b4
Oct 29, 2015
- Create a new SELinux type for /data/nativetest · e9d261ff
  Nick Kralevich authored 9 years ago
  e9d261ff
Oct 15, 2015
- allow shell self:process ptrace; · 43cd0cce
  Nick Kralevich authored 9 years ago
  43cd0cce
Sep 22, 2015
- Enforce no persistent logging on user builds · 483fd267
  Jeff Vander Stoep authored 9 years ago
  483fd267
Aug 25, 2015
- Only allow toolbox exec where /system exec was already allowed. · a3c97a76
  Stephen Smalley authored 9 years ago
  a3c97a76
Jul 30, 2015
- Add SELinux settings to support tracing during boot. · 3d328179
  Yasuhiro Matsuda authored 9 years ago
  3d328179
Jun 08, 2015
- Remove service_manager_local_audit_domain. · 4b4b2b92
  dcashman authored 9 years ago
  4b4b2b92
- Remove service_manager_local_audit_domain. · eab26faa
  dcashman authored 9 years ago
  eab26faa
Jun 02, 2015
- logd: logpersistd · 7e0838aa
  Mark Salyzyn authored 9 years ago
  7e0838aa
- logd: logpersistd · 0d22c6ce
  Mark Salyzyn authored 9 years ago
  0d22c6ce
May 07, 2015
- Replace unix_socket_connect() and explicit property sets with macro · 2f5a6a96
  William Roberts authored 9 years ago
  2f5a6a96
- Replace unix_socket_connect() and explicit property sets with macro · 625a3526
  William Roberts authored 9 years ago
  625a3526
Apr 16, 2015
- neverallow shell file_type:file link · e0c8da25
  Nick Kralevich authored 10 years ago
  e0c8da25
Apr 06, 2015
- SELinux permissions for gatekeeper TEE proxy · e207986e
  Andres Morales authored 10 years ago
  e207986e
Apr 03, 2015
- Consistent external storage policy. · 93fd6f0a
  Jeff Sharkey authored 10 years ago
  93fd6f0a
Mar 31, 2015
- Fix small copy/paste bug in recent shell rule. · 983e2afe
  Jeff Sharkey authored 10 years ago
  983e2afe
- Shell needs to read /storage/self/primary symlink. · 1c597f0c
  Jeff Sharkey authored 10 years ago
  1c597f0c
Mar 16, 2015
- Allow shell to read /proc/pid/attr/current for ps -Z. · d5892b4c
  Stephen Smalley authored 10 years ago
  d5892b4c
Mar 03, 2015
- Record observed system_server servicemanager service requests. · 23f33615
  dcashman authored 10 years ago
  23f33615