Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
fp2-dev
/
platform
/
external
/
sepolicy
/
35102f584b81e2c38073863a368cd3209cf0a4c8
/
system_server.te
335faf2
Allow stat of /sys/module/lowmemorykiller files by system_server.
by Stephen Smalley
· 11 years ago
5467fce
initial lmkd policy.
by Nick Kralevich
· 11 years ago
418e2ab
Label /data/misc/wifi/sockets with wpa_socket.
by Stephen Smalley
· 11 years ago
8ed750e
sepolicy: Add write_logd, read_logd & control_logd
by Mark Salyzyn
· 11 years ago
208deb3
Allow dumpstate to run am and shell.
by Stephen Smalley
· 11 years ago
623975f
Support forcing permissive domains to unconfined.
by Nick Kralevich
· 11 years ago
959fdaa
Remove unlabeled execute access from domain, add to appdomain.
by Stephen Smalley
· 11 years ago
c50bf17
Address new system server denial.
by Robert Craig
· 11 years ago
37339c7
fix mediaserver selinux denials.
by Nick Kralevich
· 11 years ago
e7ec2f5
Only allow PROT_EXEC for ashmem where required.
by Stephen Smalley
· 11 years ago
527316a
Allow use of art as the Android runtime.
by Stephen Smalley
· 11 years ago
13e44ec
allow system_server block_suspend
by Nick Kralevich
· 11 years ago
c4d7c0d
system_server.te: allow getopt/getattr on zygote socket
by Nick Kralevich
· 11 years ago
3ba9012
Move gpu_device type and rules to core policy.
by Stephen Smalley
· 11 years ago
2b392fc
Move lmkd into it's own domain.
by Nick Kralevich
· 11 years ago
a49ba92
Allow SELinuxPolicyInstallReceiver to work.
by Stephen Smalley
· 11 years ago
af47ebb
Label /dev/fscklogs and allow system_server access to it.
by Stephen Smalley
· 11 years ago
2a604ad
Confine healthd, but leave it permissive for now.
by Stephen Smalley
· 11 years ago
cd95e0a
Allow system_server to set powerctl_prop
by Nick Kralevich
· 11 years ago
dd1ec6d
Give system_server / system_app ability to write some properties
by Nick Kralevich
· 11 years ago
1ff6441
Confine system_server, but leave it permissive for now.
by Stephen Smalley
· 11 years ago
353c72e
Move unconfined domains out of permissive mode.
by Nick Kralevich
· 11 years ago
ec7d39b
Introduce controls on wake lock interface
by William Roberts
· 11 years ago
8d68831
Restrict access to /dev/hw_random to system_server and init.
by Alex Klyubin
· 11 years ago
45ba665
Label and allow access to /data/system/ndebugsocket.
by Stephen Smalley
· 11 years ago
4103b3f
2/2: Rename domain "system" to "system_server".
by Alex Klyubin
· 11 years ago
1fdee11
1/2: Rename domain "system" to "system_server".
by Alex Klyubin
· 11 years ago