Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
fp2-dev
/
platform
/
external
/
sepolicy
/
997680a3b78db39cf442f80fd92d4eb93d0f262a
997680a
bluetooth: allow media_rw_data_file
by Nick Kralevich
· 11 years ago
c669667
Merge "fix healthd charger mode."
by Nick Kralevich
· 11 years ago
251ba76
Allow "mkdir /sdcard/foo"
by Nick Kralevich
· 11 years ago
0352393
fix healthd charger mode.
by Nick Kralevich
· 11 years ago
dffe634
Merge "Make drmserver enforcing."
by Nick Kralevich
· 11 years ago
1935173
Merge "Move adbd into enforcing (all build types)"
by Nick Kralevich
· 11 years ago
f956366
Move adbd into enforcing (all build types)
by Nick Kralevich
· 11 years ago
fed8a2a
Remove transition / dyntransition from unconfined
by Nick Kralevich
· 11 years ago
5eca63f
Make drmserver enforcing.
by Nick Kralevich
· 11 years ago
76d1476
Merge "Allow all appdomains to grab file attributes of wallpaper_file."
by Nick Kralevich
· 11 years ago
5c9c312
Move shell into enforcing for everyone.
by Nick Kralevich
· 11 years ago
d233350
Merge "Support running adbd in the su domain."
by Nick Kralevich
· 11 years ago
fc4c6b7
Allow all appdomains to grab file attributes of wallpaper_file.
by Robert Craig
· 11 years ago
7d0f955
Support running adbd in the su domain.
by Nick Kralevich
· 11 years ago
2c1a0ad
Make healthd enforcing.
by Stephen Smalley
· 11 years ago
190c704
Allow healthd to read/write /dev/__null_.
by Stephen Smalley
· 11 years ago
129f8df
Allow mediaserver to create dirs under /data/mediadrm.
by rpcraig
· 11 years ago
2e7a301
Address bug report denials.
by Nick Kralevich
· 11 years ago
d14e9de
Make bluetooth enforcing (again).
by Stephen Smalley
· 11 years ago
09f6a99
Allow mediaserver to connect to bluetooth.
by Stephen Smalley
· 11 years ago
94f322e
Remove /sys/class/rfkill/rfkill.* lines
by Nick Kralevich
· 11 years ago
05e719b
Merge "Allow drmserver to unlink old socket file."
by Nick Kralevich
· 11 years ago
e9d3660
Merge "Make wpa_supplicant enforcing."
by Nick Kralevich
· 11 years ago
d9b8ef4
Drop legacy device types.
by Stephen Smalley
· 11 years ago
e11935d
Allow drmserver to unlink old socket file.
by Stephen Smalley
· 11 years ago
5eab3ab
Merge "Confine gpsd, but leave it permissive for now."
by Nick Kralevich
· 11 years ago
b1016ed
Make hci_attach enforcing.
by Stephen Smalley
· 11 years ago
63c26f6
Make wpa_supplicant enforcing.
by Stephen Smalley
· 11 years ago
a60abdc
Confine gpsd, but leave it permissive for now.
by Stephen Smalley
· 11 years ago
08fffc5
Revert "Revert "Strip file execute permissions from unconfined domains.""
by Stephen Smalley
· 11 years ago
8aae7bd
Revert "Revert "Strip exec* permissions from unconfined domains.""
by Stephen Smalley
· 11 years ago
9fe4e7b
ashmem_device is a character device, not a regular file.
by Stephen Smalley
· 11 years ago
9a40702
Allow recovery to execute ashmem_device and tmpfs.
by Stephen Smalley
· 11 years ago
810fc5d
Merge "Add an exception for bluetooth to the sysfs neverallow rule."
by Nick Kralevich
· 11 years ago
7611b60
Merge "Support forcing permissive domains to unconfined."
by Nick Kralevich
· 11 years ago
570e5f4
Move adbd into enforcing on user devices
by Nick Kralevich
· 11 years ago
200e97d
Merge "Add a domain for the recovery console."
by Nick Kralevich
· 11 years ago
6d10ca8
Add a domain for the recovery console.
by Stephen Smalley
· 11 years ago
df8af76
Add an exception for bluetooth to the sysfs neverallow rule.
by Stephen Smalley
· 11 years ago
40ce0bb
allow adbd setpcap
by Nick Kralevich
· 11 years ago
623975f
Support forcing permissive domains to unconfined.
by Nick Kralevich
· 11 years ago
06a0d78
Merge "Revert "Strip exec* permissions from unconfined domains.""
by Nick Kralevich
· 11 years ago
89740a6
Revert "Strip exec* permissions from unconfined domains."
by Nick Kralevich
· 11 years ago
e030950
Merge "Do not allow zygote to execve dalvikcache files."
by Nick Kralevich
· 11 years ago
e210b20
Merge "Revert "Make bluetooth enforcing.""
by Nick Kralevich
· 11 years ago
85396e9
Revert "Make bluetooth enforcing."
by Nick Kralevich
· 11 years ago
d7da665
Merge "Create new conditional userdebug_or_eng"
by Nick Kralevich
· 11 years ago
41a487d
Merge "Revert "Strip file execute permissions from unconfined domains.""
by Nick Kralevich
· 11 years ago
43ddc10
Revert "Strip file execute permissions from unconfined domains."
by Nick Kralevich
· 11 years ago
88ce951
Create new conditional userdebug_or_eng
by Nick Kralevich
· 11 years ago
49c995d
Do not allow zygote to execve dalvikcache files.
by Stephen Smalley
· 11 years ago
39fd781
Remove domain init:unix_stream_socket connectto permission.
by Stephen Smalley
· 11 years ago
aef4a46
Merge "Remove legacy rules from dumpstate in init domain."
by Nick Kralevich
· 11 years ago
6933416
Merge changes Ib3604537,I6f5715eb
by Nick Kralevich
· 11 years ago
38b8fc8
Remove legacy rules from dumpstate in init domain.
by Stephen Smalley
· 11 years ago
d832a6d
Merge "Strip file execute permissions from unconfined domains."
by Nick Kralevich
· 11 years ago
c75e35a
Merge "Strip exec* permissions from unconfined domains."
by Nick Kralevich
· 11 years ago
91c290b
Allow access to unlabeled socket and fifo files.
by Stephen Smalley
· 11 years ago
959fdaa
Remove unlabeled execute access from domain, add to appdomain.
by Stephen Smalley
· 11 years ago
c50bf17
Address new system server denial.
by Robert Craig
· 11 years ago
1dd3184
Merge "address denials when playing protected content."
by Nick Kralevich
· 11 years ago
b23d287
Allow keystore to talk to the tee
by Nick Kralevich
· 11 years ago
e45603d
address denials when playing protected content.
by Nick Kralevich
· 11 years ago
d362cdf
Apply a label to /data/mediadrm files.
by rpcraig
· 11 years ago
84a81d1
Merge "Restrict ability to set checkreqprot."
by Nick Kralevich
· 11 years ago
5da0881
Strip file execute permissions from unconfined domains.
by Stephen Smalley
· 11 years ago
c0493c8
Drop extra _system_file types.
by Stephen Smalley
· 11 years ago
4e416ea
Strip exec* permissions from unconfined domains.
by Stephen Smalley
· 11 years ago
8b51674
Restrict ability to set checkreqprot.
by Stephen Smalley
· 11 years ago
fa4002f
Merge "Adding permissions needed to remove cache"
by Nick Kralevich
· 11 years ago
1bf61c4
Make /proc/net a proc_net type.
by Robert Craig
· 11 years ago
529fcbe
Create proc_net type for /proc/sys/net entries.
by Robert Craig
· 11 years ago
11c48d4
Merge "Remove ping domain."
by Nick Kralevich
· 11 years ago
a506613
Fix denials triggered by adb shell screencap.
by Stephen Smalley
· 11 years ago
396015c
Remove ping domain.
by Stephen Smalley
· 11 years ago
5f29026
Revert "Make surfaceflinger domain enforcing."
by Nick Kralevich
· 11 years ago
a6f88c7
Revert "Make ping enforcing."
by Nick Kralevich
· 11 years ago
b8ac06f
Revert "Make mediaserver enforcing."
by Nick Kralevich
· 11 years ago
3d770d2
surfaceflinger: fix bugreport screenshot functionality
by Nick Kralevich
· 11 years ago
37339c7
fix mediaserver selinux denials.
by Nick Kralevich
· 11 years ago
a4e28f2
Merge "Allow dumpstate to write shell files"
by Nick Kralevich
· 11 years ago
bfa3cd5
Allow dumpstate to write shell files
by Nick Kralevich
· 11 years ago
a730e50
Don't allow zygote init:binder call
by Nick Kralevich
· 11 years ago
ed1648a
Merge "Address adb backup/restore denials."
by Nick Kralevich
· 11 years ago
c4021ce
Address adb backup/restore denials.
by Stephen Smalley
· 11 years ago
301e61e
Merge "Make mediaserver enforcing."
by Nick Kralevich
· 11 years ago
14a7764
Merge "Make media_app enforcing."
by Nick Kralevich
· 11 years ago
af28817
Merge "Make nfc enforcing."
by Nick Kralevich
· 11 years ago
782af9e
Merge "Make radio enforcing."
by Nick Kralevich
· 11 years ago
ee3cfd2
Merge "Make bluetooth enforcing."
by Nick Kralevich
· 11 years ago
aef19eb
Merge "Make surfaceflinger domain enforcing."
by Nick Kralevich
· 11 years ago
4e39317
Merge "Confine adbd but leave it permissive for now."
by Nick Kralevich
· 11 years ago
e7ec2f5
Only allow PROT_EXEC for ashmem where required.
by Stephen Smalley
· 11 years ago
ad7df7b
Remove execmem permission from domain, add to appdomain.
by Stephen Smalley
· 11 years ago
527316a
Allow use of art as the Android runtime.
by Stephen Smalley
· 11 years ago
81e74b1
Confine adbd but leave it permissive for now.
by Stephen Smalley
· 11 years ago
588bb5c
Merge "Confine sdcardd, but leave it permissive for now."
by Nick Kralevich
· 11 years ago
c48fd77
Confine dhcp, but leave it permissive for now.
by Stephen Smalley
· 11 years ago
9cc6d8d
Adding permissions needed to remove cache
by jaejyn.shin
· 11 years ago
c17d30a
Delete dalvikcache_data_file write/setattr access from shell.
by Stephen Smalley
· 11 years ago
Next »