Commits · oreo-cts-dev · Werner Sembach / AndroidSystemSEPolicy · GitLab

Snippets Groups Projects

May 25, 2018
- Allow mediaserver to access vendor_app_file · d53f0737
  Zheng Zhang authored 7 years ago
  d53f0737
Nov 30, 2017
- DO NOT MERGE: Allow Ephemeral apps to load code from /data/data for 8.0 · 473cc5e1
  Chad Brubaker authored 7 years ago
  473cc5e1
Jul 27, 2017
- netd: relax binder neverallow rules for hwservices · faaf86bc
  Jeff Vander Stoep authored 7 years ago
  faaf86bc
Jun 26, 2017
- Add another extraneous neverallow rule to force attribute inclusion · c75aa50d
  Jeff Vander Stoep authored 7 years ago
  c75aa50d
Jun 22, 2017
- Merge "Revert "Annotate rild with socket_between_core_and_vendor_violators"" into oc-dev · 0e0ed156
  TreeHugger Robot authored 7 years ago
  
  0e0ed156
Jun 21, 2017
- Merge "Exempt tetheroffload hal from network socket restrictions" into oc-dev · 6351c374
  TreeHugger Robot authored 7 years ago
  
  6351c374
- Revert "Annotate rild with socket_between_core_and_vendor_violators" · 3a939115
  Sandeep Patil authored 7 years ago
  3a939115
- Exempt tetheroffload hal from network socket restrictions · d75a2c0c
  Jeff Vander Stoep authored 7 years ago
  d75a2c0c
- Remove neverallow preventing hwservice access for apps. · 3e307a4d
  Dan Cashman authored 7 years ago
  3e307a4d
Jun 20, 2017
- Allow run-as to read/write unix_stream_sockets created by adbd. · 330d4477
  Yabin Cui authored 8 years ago
  330d4477
Jun 16, 2017
- Merge "Add rules for vfat for sdcardfs" into oc-dev · 58d0d1e4
  TreeHugger Robot authored 8 years ago
  
  58d0d1e4
- Merge "Add extraneous neverallow rule to enforce attribute inclusion." into oc-dev · b5aeaf6d
  TreeHugger Robot authored 8 years ago
  
  b5aeaf6d
- Add rules for vfat for sdcardfs · 260a4485
  Daniel Rosenberg authored 8 years ago
  260a4485
- Add extraneous neverallow rule to enforce attribute inclusion. · 939b50ff
  Dan Cashman authored 8 years ago
  939b50ff
- Merge changes from topic 'fix-neverallow-violation' into oc-dev · 3692b318
  Sandeep Patil authored 8 years ago
  3692b318
Jun 14, 2017
- Add debug selinux permission to write saved_cmdlines_size. · e9381d5e
  Carmen Jackson authored 8 years ago
  e9381d5e
- build: run neverallow checks on platform sepolicy · cfb6f352
  Sandeep Patil authored 8 years ago
  cfb6f352
- radio: disalllow radio and rild socket for treble devices · d3381cd9
  Sandeep Patil authored 8 years ago
  d3381cd9
Jun 13, 2017
- Build split file_contexts for recovery · b236eb6c
  Jeff Vander Stoep authored 8 years ago
  b236eb6c
Jun 10, 2017
- Move non-treble devices to split file_contexts · 7a68c5ae
  Jeff Vander Stoep authored 8 years ago
  7a68c5ae
Jun 06, 2017
- Merge "Move sysfs cpu hotplug labeling to genfs_contexts" into oc-dev · e546e81b
  TreeHugger Robot authored 8 years ago
  
  e546e81b
- crash_dump_fallback: allow dumpstate:pipe_file write. · 715955b7
  Josh Gao authored 8 years ago
  715955b7
- Move sysfs cpu hotplug labeling to genfs_contexts · f85be7f8
  Jeff Vander Stoep authored 8 years ago
  f85be7f8
Jun 05, 2017
- Run Treble sepolicy tests at build time · 1fc0682e
  Jeff Vander Stoep authored 8 years ago
  1fc0682e
- Fix coredomain violation for modprobe · e41af203
  Sandeep Patil authored 8 years ago
  e41af203
- Verify correct application of labels and attributes · bdfc0301
  Jeff Vander Stoep authored 8 years ago
  bdfc0301
Jun 03, 2017
- Merge "crash_dump_fallback: allow dumpstate:fd use." into oc-dev · f378708c
  Josh Gao authored 8 years ago
  
  f378708c
Jun 02, 2017
- crash_dump_fallback: allow dumpstate:fd use. · 2a00056a
  Josh Gao authored 8 years ago
  2a00056a
Jun 01, 2017
- Merge "Add missing sepolicies for OemLock HAL." into oc-dev · 60e4fd9d
  TreeHugger Robot authored 8 years ago
  
  60e4fd9d
- Merge "Add missing sepolicies for the Weaver HAL." into oc-dev · cd267450
  TreeHugger Robot authored 8 years ago
  
  cd267450
- Merge "allow modprobe to load signed kernel modules" into oc-dev · fc1d8d99
  TreeHugger Robot authored 8 years ago
  
  fc1d8d99
- allow modprobe to load signed kernel modules · 53add31a
  Steve Muckle authored 8 years ago
  53add31a
May 31, 2017
- Allow bootctl HAL to access misc block device. · b0d59450
  Andrew Scull authored 8 years ago
  b0d59450
- Add missing sepolicies for OemLock HAL. · 475954da
  Andrew Scull authored 8 years ago
  475954da
- Add missing sepolicies for the Weaver HAL. · a939c432
  Andrew Scull authored 8 years ago
  a939c432
May 30, 2017
- Allow ephemeral apps to find media.drm · d2b3a454
  Chad Brubaker authored 8 years ago
  d2b3a454
May 26, 2017
- Merge changes I397ca4e7,I38efe224 into oc-dev · 33d7e90b
  TreeHugger Robot authored 8 years ago
  33d7e90b
May 25, 2017
- Merge "MediaExtractor: Allow reading of app data files." into oc-dev · 62022c71
  Andy Hung authored 8 years ago
  
  62022c71
- Merge "Allow init to run vendor toybox for modprobe" into oc-dev · d5a2f3e2
  TreeHugger Robot authored 8 years ago
  
  d5a2f3e2
- Restrict BOARD_PLAT_[PUBLIC|PRIVATE]_SEPOLICY_DIRS to one dir. · 51455fe9
  Dan Cashman authored 8 years ago
  51455fe9