Gitiles
Code Review Sign In
gerrit-public.fairphone.software / fp2-dev / platform / external / sepolicy / 17859404f6a1030488a657c4c406a7b83ea9957c
  1. 1785940 Address dnsmasq denials. by Stephen Smalley · 10 years ago
  2. d9d9d2f temp fix for build breakage. by Nick Kralevich · 10 years ago
  3. d331e00 Do not allow system_server to access SDcard files. by Stephen Smalley · 10 years ago
  4. 3dad7b6 Address system_server denials. by Stephen Smalley · 10 years ago
  5. 23a52e6 allow lmkd to kill processes. by Nick Kralevich · 10 years ago
  6. 2737cef Allow stat/read of /data/media files by app domains. by Stephen Smalley · 10 years ago
  7. 495e9d1 Allow getopt / getattr to bluetooth unix_stream_socket. by Stephen Smalley · 10 years ago
  8. 28afdd9 Deduplicate binder_call rules. by Stephen Smalley · 10 years ago
  9. 63b98b1 restore system_server zygote socket rules by Nick Kralevich · 10 years ago
  10. f197f8c Merge "Remove system_server and zygote unlabeled execute access." by Nick Kralevich · 10 years ago
  11. b19a191 Merge "Give lmkd kill capability" by Nick Kralevich · 10 years ago
  12. 0a5f561 uncrypt: allow /dev/block directory access. by Nick Kralevich · 10 years ago
  13. 24be391 Give lmkd kill capability by Nick Kralevich · 10 years ago
  14. 37afd3f Remove system_server and zygote unlabeled execute access. by Stephen Smalley · 10 years ago
  15. 0296b94 Move qemud and /dev/qemu policy bits to emulator-specific sepolicy. by Stephen Smalley · 10 years ago
  16. 2c347e0 Drop obsolete keystore_socket type and rules. by Stephen Smalley · 10 years ago
  17. dc1cedf Merge "Clean up socket rules." by Nick Kralevich · 10 years ago
  18. de4ff59 Merge "Drop levelFrom=none from untrusted_app entry." by Nick Kralevich · 10 years ago
  19. 1601132 Clean up socket rules. by Stephen Smalley · 10 years ago
  20. 85708ec Resolve overlapping rules between app.te and net.te. by Stephen Smalley · 10 years ago
  21. 96ff4c0 Add a domain for mdnsd and allow connecting to it. by Stephen Smalley · 10 years ago
  22. d107abd Merge "Remove fsetid from netd." by Nick Kralevich · 10 years ago
  23. d581b81 Remove fsetid from netd. by Stephen Smalley · 10 years ago
  24. 798668f Merge "Generalize rmnet entry for radio properties." by Nick Kralevich · 10 years ago
  25. 77470da Merge "Remove compatibility rules for old /data/media type." by Nick Kralevich · 10 years ago
  26. 111966d Merge "Remove redundant socket rules." by Nick Kralevich · 10 years ago
  27. 6006147 Merge "uncrypt: move into enforcing" by Nick Kralevich · 10 years ago
  28. 75ac64c Merge "Allow reading of /data/security/current symlink." by Nick Kralevich · 10 years ago
  29. 8673468 Drop levelFrom=none from untrusted_app entry. by Stephen Smalley · 10 years ago
  30. 68deff2 Remove compatibility rules for old /data/media type. by Stephen Smalley · 10 years ago
  31. 16a6652 Generalize rmnet entry for radio properties. by Stephen Smalley · 10 years ago
  32. f926817 Allow reading of /data/security/current symlink. by Stephen Smalley · 10 years ago
  33. 35102f5 Drop rules for /data/misc/adb legacy type. by Stephen Smalley · 10 years ago
  34. 1eb9403 Remove redundant socket rules. by Stephen Smalley · 10 years ago
  35. 2a36dff Merge "Address SELinux denials with clatd." by Nick Kralevich · 10 years ago
  36. 5a98304 uncrypt: move into enforcing by Nick Kralevich · 10 years ago
  37. a770ee5 Address SELinux denials with clatd. by Stephen Smalley · 10 years ago
  38. a88af85 Merge "Clarify meaning of untrusted_app and app domain assignment logic." by Nick Kralevich · 10 years ago
  39. d28ac52 Merge "Clarify init_shell, shell, and su domain usage." by Nick Kralevich · 10 years ago
  40. 49d713a Merge "Ensure that /data/misc/wifi/sockets is always labeled wpa_socket." by Nick Kralevich · 10 years ago
  41. b3cb969 Clarify init_shell, shell, and su domain usage. by Stephen Smalley · 10 years ago
  42. d823f83 Clarify meaning of untrusted_app and app domain assignment logic. by Stephen Smalley · 10 years ago
  43. 335faf2 Allow stat of /sys/module/lowmemorykiller files by system_server. by Stephen Smalley · 10 years ago
  44. 7ade68d Ensure that /data/misc/wifi/sockets is always labeled wpa_socket. by Stephen Smalley · 10 years ago
  45. b73d321 Merge "Create a label for the root block device." by Nick Kralevich · 10 years ago
  46. b8298d7 Merge "Add support for and use new path= specifier in seapp_contexts." by Nick Kralevich · 10 years ago
  47. af99ed8 uncrypt: allow /data/local/tmp on userdebug/eng by Nick Kralevich · 10 years ago
  48. dfef99a Create a label for the root block device. by Robert Craig · 10 years ago
  49. 96eeb1e initial policy for uncrypt. by Nick Kralevich · 10 years ago
  50. 41f221f Merge "Delete unnecessary /data/data entries." by Nick Kralevich · 10 years ago
  51. a08cbe1 Merge "lmkd: add sys_resource" by Nick Kralevich · 10 years ago
  52. 1c73a5c lmkd: add sys_resource by Nick Kralevich · 10 years ago
  53. 6139de5 Add support for and use new path= specifier in seapp_contexts. by Stephen Smalley · 10 years ago
  54. f4c6579 Delete unnecessary /data/data entries. by Stephen Smalley · 10 years ago
  55. 116a20f debuggerd: Allow "debug.db.uid" usage by Nick Kralevich · 10 years ago
  56. ba3f9b8 Merge "Allow sdcardd to write to sdcard directory and file." by Nick Kralevich · 10 years ago
  57. a475ce7 Merge "Allow dhcp rawip_socket permissions." by Nick Kralevich · 10 years ago
  58. 7b52ebf Allow sdcardd to write to sdcard directory and file. by Stephen Smalley · 10 years ago
  59. e55aac2 Add debuggerd64 entry for 64-bit debuggerd daemon by Dan Willemsen · 10 years ago
  60. 515a76b Allow dhcp rawip_socket permissions. by dcashman · 10 years ago
  61. 5fa2a19 Make lmkd enforcing. by Nick Kralevich · 10 years ago
  62. 5467fce initial lmkd policy. by Nick Kralevich · 10 years ago
  63. af21e71 Merge "Make the sdcardd domain enforcing." by Nick Kralevich · 10 years ago
  64. bfa785a Merge "Make racoon permissive or unconfined." by Nick Kralevich · 10 years ago
  65. 9f5241e Merge "Remove block device access from unconfined domains." by Nick Kralevich · 10 years ago
  66. 00abfd6 Merge "Make ppp permissive or unconfined." by Nick Kralevich · 10 years ago
  67. 9145918 Merge "Make mtp permissive or unconfined." by Nick Kralevich · 10 years ago
  68. a792bca Merge "Make dnsmasq permissive or unconfined." by Nick Kralevich · 10 years ago
  69. 4ba8707 Merge "Update hostapd domain for /data/misc/wifi/sockets label change." by Nick Kralevich · 10 years ago
  70. bbfa352 Merge "Make inputflinger permissive or unconfined." by Nick Kralevich · 10 years ago
  71. b5558aa Merge "Make lmkd permissive or unconfined." by Nick Kralevich · 10 years ago
  72. d20c0c2 Merge "Finish fixing Zygote descriptor leakage problem" by Dave Platt · 10 years ago
  73. 3f40d4f Remove block device access from unconfined domains. by Stephen Smalley · 10 years ago
  74. 5487ca0 Remove several superuser capabilities from unconfined domains. by Stephen Smalley · 10 years ago
  75. 3db328f Merge "Make clatd permissive or unconfined." by Daniel Cashman · 10 years ago
  76. b081cc1 Remove mount-related permissions from unconfined domains. by Stephen Smalley · 10 years ago
  77. 48b1883 Introduce asec_public_file type. by Robert Craig · 10 years ago
  78. f206737 Update hostapd domain for /data/misc/wifi/sockets label change. by Stephen Smalley · 10 years ago
  79. f321456 Make clatd permissive or unconfined. by Stephen Smalley · 10 years ago
  80. c6a28f0 Make dnsmasq permissive or unconfined. by Stephen Smalley · 11 years ago
  81. 5970259 Make mtp permissive or unconfined. by Stephen Smalley · 11 years ago
  82. cc65fe8 Make ppp permissive or unconfined. by Stephen Smalley · 11 years ago
  83. 97f7c82 Make racoon permissive or unconfined. by Stephen Smalley · 11 years ago
  84. 2561a9a Make lmkd permissive or unconfined. by Stephen Smalley · 10 years ago
  85. 38b7f43 Make inputflinger permissive or unconfined. by Stephen Smalley · 10 years ago
  86. 49bd91d Make the sdcardd domain enforcing. by Stephen Smalley · 10 years ago
  87. e21871c Address screenrecord denials. by rpcraig · 10 years ago
  88. 0b218ec Finish fixing Zygote descriptor leakage problem by Dave Platt · 10 years ago
  89. 629c98c Fix NFC image transfer by Nick Kralevich · 10 years ago
  90. 10baf47 Merge "Revert "Move tlcd_sock policy over to manta."" by Nick Kralevich · 10 years ago
  91. 1a1ad95 Revert "Move tlcd_sock policy over to manta." by Nick Kralevich · 10 years ago
  92. 94e0652 Merge "Add file_contexts entries for socket files." by Nick Kralevich · 10 years ago
  93. a7e4ace Add file_contexts entries for socket files. by Stephen Smalley · 10 years ago
  94. 8cd400d Move tlcd_sock policy over to manta. by Stephen Smalley · 10 years ago
  95. ba1a731 allow wpa_cli to work. by Nick Kralevich · 10 years ago
  96. 418e2ab Label /data/misc/wifi/sockets with wpa_socket. by Stephen Smalley · 10 years ago
  97. 8ed750e sepolicy: Add write_logd, read_logd & control_logd by Mark Salyzyn · 11 years ago
  98. a637b2f assert: Do not allow access to generic device:chr_file by William Roberts · 10 years ago
  99. d0919ec assert: do not allow raw access to generic block_device by William Roberts · 10 years ago
  100. b71dae8 Merge "drmserver: allow looking in efs_file directories" by Nick Kralevich · 10 years ago