Log - 1095d6944c6dc206c8656a34712f15820cd18f74 - fp2-dev/platform/external/sepolicy

1095d69 Address recovery denials. by Stephen Smalley · 10 years ago
75e2ef9 Restrict use of context= mount options. by Stephen Smalley · 10 years ago
ff409bb recovery: Allow exec_type on dirs, read for /dev by Nick Kralevich · 10 years ago
f4e6902 recovery: don't use single quote by Nick Kralevich · 10 years ago
8b7ca45 Refine recovery domain. by Nick Kralevich · 10 years ago
a03d761 refine recovery domain. by Nick Kralevich · 10 years ago
03dbf07 More recovery rules by Nick Kralevich · 10 years ago
4203981 recovery: enable permissive_or_unconfined by Nick Kralevich · 10 years ago
e60723a Create a separate recovery policy. by Stephen Smalley · 10 years ago
eb1bbf2 Clean up kernel, init, and recovery domains. by Stephen Smalley · 10 years ago
03ce512 Remove /system write from unconfined by Nick Kralevich · 10 years ago
356f4be Restrict requesting contexts other than policy-defined defaults. by Stephen Smalley · 10 years ago
c2c91bb Drop unused rules for raw I/O and mknod. by Stephen Smalley · 11 years ago
02dac03 Drop relabelto_domain() macro and its associated definitions. by Stephen Smalley · 11 years ago
3f40d4f Remove block device access from unconfined domains. by Stephen Smalley · 11 years ago
5487ca0 Remove several superuser capabilities from unconfined domains. by Stephen Smalley · 11 years ago
b081cc1 Remove mount-related permissions from unconfined domains. by Stephen Smalley · 11 years ago
04ee5df Remove MAC capabilities from unconfined domains. by Stephen Smalley · 11 years ago
9fe4e7b ashmem_device is a character device, not a regular file. by Stephen Smalley · 11 years ago
9a40702 Allow recovery to execute ashmem_device and tmpfs. by Stephen Smalley · 11 years ago
6d10ca8 Add a domain for the recovery console. by Stephen Smalley · 11 years ago