- 1c670cc Make watchdogd enforcing. by Stephen Smalley · 11 years ago
- aa37683 Fix new rild denials. by Robert Craig · 11 years ago
- b254764 Drop tegra specific label from policy. by Robert Craig · 11 years ago
- 8824c55 Merge "Allow SELinuxPolicyInstallReceiver to work." by Nick Kralevich · 11 years ago
- d99e6d5 Restrict the ability to set SELinux enforcing mode to init. by Stephen Smalley · 11 years ago
- a49ba92 Allow SELinuxPolicyInstallReceiver to work. by Stephen Smalley · 11 years ago
- 51ce2f0 Merge "Make the isolated_app domain enforcing." by Nick Kralevich · 11 years ago
- 081aed2 Default to socket_device for anything under /dev/socket. by Stephen Smalley · 11 years ago
- 08ecc02 Make the isolated_app domain enforcing. by Stephen Smalley · 11 years ago
- 4768553 Allow write access to ashmem allocated regions by Nick Kralevich · 11 years ago
- 2ffd52a am 043b9027: Confine watchdogd, but leave it permissive for now. by Stephen Smalley · 11 years ago
- 6af0cc2 Merge commit '060f6fa67e1d9779d2d8357659ae530d65171faa' into HEAD by The Android Open Source Project · 11 years ago
- 043b902 Confine watchdogd, but leave it permissive for now. by Stephen Smalley · 11 years ago
- 7ef2b39 am 1ed3caf7: Merge "Add support for duplicate allow rule detection (-D / --dups)." by Nick Kralevich · 11 years ago
- 1ed3caf Merge "Add support for duplicate allow rule detection (-D / --dups)." by Nick Kralevich · 11 years ago
- bec54f4 Add support for duplicate allow rule detection (-D / --dups). by Stephen Smalley · 11 years ago
- 65d4e83 am 006260e5: Merge "Confine hostapd, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 006260e Merge "Confine hostapd, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 2c8eef8 am 2b939e8c: Merge "Confine ping, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 2b939e8 Merge "Confine ping, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 945fb56 Confine hostapd, but leave it permissive for now. by Stephen Smalley · 11 years ago
- 24fb24f am ae49e7a3: Merge "Confine tee, but leave it permissive for now." by Nick Kralevich · 11 years ago
- ae49e7a Merge "Confine tee, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 678420e am 6ce3d60c: Merge "Confine rild, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 67a5323 am b1cb3205: Confine wpa_supplicant, but leave it permissive for now. by Stephen Smalley · 11 years ago
- 6ce3d60 Merge "Confine rild, but leave it permissive for now." by Nick Kralevich · 11 years ago
- dcbab90 Confine rild, but leave it permissive for now. by Stephen Smalley · 11 years ago
- 72a4745 Confine tee, but leave it permissive for now. by Stephen Smalley · 11 years ago
- b1cb320 Confine wpa_supplicant, but leave it permissive for now. by Stephen Smalley · 11 years ago
- ace68b1 am 91ebcf33: netd: allow tcp_socket name_connect by Nick Kralevich · 11 years ago
- 91ebcf3 netd: allow tcp_socket name_connect by Nick Kralevich · 11 years ago
- b391269 am 36a5d109: netd: allow tcp connections. by Nick Kralevich · 11 years ago
- 36a5d10 netd: allow tcp connections. by Nick Kralevich · 11 years ago
- 868a9e2 am 8510d31e: Rename camera_calibration_file and audio_firmware_file. by Stephen Smalley · 11 years ago
- 8510d31 Rename camera_calibration_file and audio_firmware_file. by Stephen Smalley · 11 years ago
- bc4484b am bc1388d3: Merge "Make kernel / init enforcing" by Nick Kralevich · 11 years ago
- 14f9510 am 56f39193: Merge "Confine debuggerd, but leave it permissive for now." by Nick Kralevich · 11 years ago
- bc1388d Merge "Make kernel / init enforcing" by Nick Kralevich · 11 years ago
- 56f3919 Merge "Confine debuggerd, but leave it permissive for now." by Nick Kralevich · 11 years ago
- a9ccd7d am af47ebb6: Label /dev/fscklogs and allow system_server access to it. by Stephen Smalley · 11 years ago
- af47ebb Label /dev/fscklogs and allow system_server access to it. by Stephen Smalley · 11 years ago
- c1468d4 am 00739e3d: Make the ueventd domain enforcing. by Nick Kralevich · 11 years ago
- b1d8164 Make kernel / init enforcing by Nick Kralevich · 11 years ago
- 00739e3 Make the ueventd domain enforcing. by Nick Kralevich · 11 years ago
- b53788d am a7716718: Label /data/misc/media and allow mediaserver access to it. by Stephen Smalley · 11 years ago
- a771671 Label /data/misc/media and allow mediaserver access to it. by Stephen Smalley · 11 years ago
- eac6e59 am ddf98fa8: Neverallow access to the kmem device from userspace. by Geremy Condra · 11 years ago
- ddf98fa Neverallow access to the kmem device from userspace. by Geremy Condra · 11 years ago
- 7bc576d am 0ea4ac8a: Merge "Move goldfish-specific rules to their own directory." by Nick Kralevich · 11 years ago
- 0ea4ac8 Merge "Move goldfish-specific rules to their own directory." by Nick Kralevich · 11 years ago
- 289fe68 am 842a1111: Merge "Confine healthd, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 842a111 Merge "Confine healthd, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 6b75479 am fec3c5ad: Merge "Make the keystore domain enforcing." by Nick Kralevich · 11 years ago
- fec3c5a Merge "Make the keystore domain enforcing." by Nick Kralevich · 11 years ago
- 1e38a55 am aaac2468: /system/bin/ash and /system/bin/mksh are dead. by Elliott Hughes · 11 years ago
- aaac246 /system/bin/ash and /system/bin/mksh are dead. by Elliott Hughes · 11 years ago
- 2a604ad Confine healthd, but leave it permissive for now. by Stephen Smalley · 11 years ago
- a74edc1 am f232f25b: Merge "Move audio_firmware_file and /data/misc/audio entry to core sepolicy." by Nick Kralevich · 11 years ago
- f232f25 Merge "Move audio_firmware_file and /data/misc/audio entry to core sepolicy." by Nick Kralevich · 11 years ago
- 870c4e5 Make the keystore domain enforcing. by Stephen Smalley · 11 years ago
- ca056dc am 2d8dcb73: Revert "Make the keystore domain enforcing." by Nick Kralevich · 11 years ago
- a7c8ea8 Move audio_firmware_file and /data/misc/audio entry to core sepolicy. by Stephen Smalley · 11 years ago
- 2e0b4a1 Move goldfish-specific rules to their own directory. by Stephen Smalley · 11 years ago
- 2d8dcb7 Revert "Make the keystore domain enforcing." by Nick Kralevich · 11 years ago
- 3cedab4 am 7316b18a: README: recommend concatenation vs assignment by Nick Kralevich · 11 years ago
- 7316b18 README: recommend concatenation vs assignment by Nick Kralevich · 11 years ago
- ed06d20 am cd95e0ac: Allow system_server to set powerctl_prop by Nick Kralevich · 11 years ago
- cd95e0a Allow system_server to set powerctl_prop by Nick Kralevich · 11 years ago
- 74ae46a am dd1ec6d5: Give system_server / system_app ability to write some properties by Nick Kralevich · 11 years ago
- dd1ec6d Give system_server / system_app ability to write some properties by Nick Kralevich · 11 years ago
- 4358866 am 58da198a: Merge "Confine system_server, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 20f4ed4 am 98f8b27f: Merge "Confine hci_attach, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 63f32e7 am 893cbcfd: Merge "Confine surfaceflinger, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 58da198 Merge "Confine system_server, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 98f8b27 Merge "Confine hci_attach, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 893cbcf Merge "Confine surfaceflinger, but leave it permissive for now." by Nick Kralevich · 11 years ago
- d25955e am e4ba4723: Merge "Make the keystore domain enforcing." by Nick Kralevich · 11 years ago
- e4ba472 Merge "Make the keystore domain enforcing." by Nick Kralevich · 11 years ago
- e12f0d9 am c9bb91da: Reintroduce -Wall -Werror to check_seapp. by Robert Craig · 11 years ago
- c9bb91d Reintroduce -Wall -Werror to check_seapp. by Robert Craig · 11 years ago
- 28683e0 am 2d8a4237: Revert -Wall -Werror by Nick Kralevich · 11 years ago
- 2d8a423 Revert -Wall -Werror by Nick Kralevich · 11 years ago
- 1121443 am 9056b19d: Merge "Add sepolicy-analyze tool." by Nick Kralevich · 11 years ago
- 9056b19 Merge "Add sepolicy-analyze tool." by Nick Kralevich · 11 years ago
- 514724d am e45b7de4: Merge "Confine drmserver, but leave it permissive for now." by Nick Kralevich · 11 years ago
- e45b7de Merge "Confine drmserver, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 7b2bee9 Add sepolicy-analyze tool. by Stephen Smalley · 11 years ago
- a3dde73 am 95cd6e09: Merge "Make the servicemanager domain enforcing." by Nick Kralevich · 11 years ago
- 709d718 Make the keystore domain enforcing. by Stephen Smalley · 11 years ago
- 95cd6e0 Merge "Make the servicemanager domain enforcing." by Nick Kralevich · 11 years ago
- 30ab1f8 am 68ce74b4: Merge "readme: add info on generating pem files from apks" by Nick Kralevich · 11 years ago
- 68ce74b Merge "readme: add info on generating pem files from apks" by Nick Kralevich · 11 years ago
- 57cc77f am cdf54ba7: Merge "Confine keystore, but leave it permissive for now." by Nick Kralevich · 11 years ago
- cdf54ba Merge "Confine keystore, but leave it permissive for now." by Nick Kralevich · 11 years ago
- 5298a4f am b3c48b66: Change the type on /dev/uinput to match /dev/uhid. by Stephen Smalley · 11 years ago
- b3c48b6 Change the type on /dev/uinput to match /dev/uhid. by Stephen Smalley · 11 years ago
- 1680ce6 am 8c302d0f: Merge "Move sysfs_devices_system_cpu to the central policy." by Nick Kralevich · 11 years ago
- 8c302d0 Merge "Move sysfs_devices_system_cpu to the central policy." by Nick Kralevich · 11 years ago
- b2b62e5 Make the servicemanager domain enforcing. by Stephen Smalley · 11 years ago
- 9002232 am a59c525c: Merge "Confine servicemanager, but leave it permissive for now." by Nick Kralevich · 11 years ago