Log - c669667ec53c0ff212c03a74c4187ff46dabdc32 - fp2-dev/platform/external/sepolicy

c669667 Merge "fix healthd charger mode." by Nick Kralevich · 11 years ago
251ba76 Allow "mkdir /sdcard/foo" by Nick Kralevich · 11 years ago
0352393 fix healthd charger mode. by Nick Kralevich · 11 years ago
dffe634 Merge "Make drmserver enforcing." by Nick Kralevich · 11 years ago
1935173 Merge "Move adbd into enforcing (all build types)" by Nick Kralevich · 11 years ago
f956366 Move adbd into enforcing (all build types) by Nick Kralevich · 11 years ago
fed8a2a Remove transition / dyntransition from unconfined by Nick Kralevich · 11 years ago
5eca63f Make drmserver enforcing. by Nick Kralevich · 11 years ago
76d1476 Merge "Allow all appdomains to grab file attributes of wallpaper_file." by Nick Kralevich · 11 years ago
5c9c312 Move shell into enforcing for everyone. by Nick Kralevich · 11 years ago
d233350 Merge "Support running adbd in the su domain." by Nick Kralevich · 11 years ago
fc4c6b7 Allow all appdomains to grab file attributes of wallpaper_file. by Robert Craig · 11 years ago
7d0f955 Support running adbd in the su domain. by Nick Kralevich · 11 years ago
2c1a0ad Make healthd enforcing. by Stephen Smalley · 11 years ago
190c704 Allow healthd to read/write /dev/__null_. by Stephen Smalley · 11 years ago
129f8df Allow mediaserver to create dirs under /data/mediadrm. by rpcraig · 11 years ago
2e7a301 Address bug report denials. by Nick Kralevich · 11 years ago
d14e9de Make bluetooth enforcing (again). by Stephen Smalley · 11 years ago
09f6a99 Allow mediaserver to connect to bluetooth. by Stephen Smalley · 11 years ago
94f322e Remove /sys/class/rfkill/rfkill.* lines by Nick Kralevich · 11 years ago
05e719b Merge "Allow drmserver to unlink old socket file." by Nick Kralevich · 11 years ago
e9d3660 Merge "Make wpa_supplicant enforcing." by Nick Kralevich · 11 years ago
d9b8ef4 Drop legacy device types. by Stephen Smalley · 11 years ago
e11935d Allow drmserver to unlink old socket file. by Stephen Smalley · 11 years ago
5eab3ab Merge "Confine gpsd, but leave it permissive for now." by Nick Kralevich · 11 years ago
b1016ed Make hci_attach enforcing. by Stephen Smalley · 11 years ago
63c26f6 Make wpa_supplicant enforcing. by Stephen Smalley · 11 years ago
a60abdc Confine gpsd, but leave it permissive for now. by Stephen Smalley · 11 years ago
08fffc5 Revert "Revert "Strip file execute permissions from unconfined domains."" by Stephen Smalley · 11 years ago
8aae7bd Revert "Revert "Strip exec* permissions from unconfined domains."" by Stephen Smalley · 11 years ago
9fe4e7b ashmem_device is a character device, not a regular file. by Stephen Smalley · 11 years ago
9a40702 Allow recovery to execute ashmem_device and tmpfs. by Stephen Smalley · 11 years ago
810fc5d Merge "Add an exception for bluetooth to the sysfs neverallow rule." by Nick Kralevich · 11 years ago
7611b60 Merge "Support forcing permissive domains to unconfined." by Nick Kralevich · 11 years ago
570e5f4 Move adbd into enforcing on user devices by Nick Kralevich · 11 years ago
200e97d Merge "Add a domain for the recovery console." by Nick Kralevich · 11 years ago
6d10ca8 Add a domain for the recovery console. by Stephen Smalley · 11 years ago
df8af76 Add an exception for bluetooth to the sysfs neverallow rule. by Stephen Smalley · 11 years ago
40ce0bb allow adbd setpcap by Nick Kralevich · 11 years ago
623975f Support forcing permissive domains to unconfined. by Nick Kralevich · 11 years ago
06a0d78 Merge "Revert "Strip exec* permissions from unconfined domains."" by Nick Kralevich · 11 years ago
89740a6 Revert "Strip exec* permissions from unconfined domains." by Nick Kralevich · 11 years ago
e030950 Merge "Do not allow zygote to execve dalvikcache files." by Nick Kralevich · 11 years ago
e210b20 Merge "Revert "Make bluetooth enforcing."" by Nick Kralevich · 11 years ago
85396e9 Revert "Make bluetooth enforcing." by Nick Kralevich · 11 years ago
d7da665 Merge "Create new conditional userdebug_or_eng" by Nick Kralevich · 11 years ago
41a487d Merge "Revert "Strip file execute permissions from unconfined domains."" by Nick Kralevich · 11 years ago
43ddc10 Revert "Strip file execute permissions from unconfined domains." by Nick Kralevich · 11 years ago
88ce951 Create new conditional userdebug_or_eng by Nick Kralevich · 11 years ago
49c995d Do not allow zygote to execve dalvikcache files. by Stephen Smalley · 11 years ago
39fd781 Remove domain init:unix_stream_socket connectto permission. by Stephen Smalley · 11 years ago
aef4a46 Merge "Remove legacy rules from dumpstate in init domain." by Nick Kralevich · 11 years ago
6933416 Merge changes Ib3604537,I6f5715eb by Nick Kralevich · 11 years ago
38b8fc8 Remove legacy rules from dumpstate in init domain. by Stephen Smalley · 11 years ago
d832a6d Merge "Strip file execute permissions from unconfined domains." by Nick Kralevich · 11 years ago
c75e35a Merge "Strip exec* permissions from unconfined domains." by Nick Kralevich · 11 years ago
91c290b Allow access to unlabeled socket and fifo files. by Stephen Smalley · 11 years ago
959fdaa Remove unlabeled execute access from domain, add to appdomain. by Stephen Smalley · 11 years ago
c50bf17 Address new system server denial. by Robert Craig · 11 years ago
1dd3184 Merge "address denials when playing protected content." by Nick Kralevich · 11 years ago
b23d287 Allow keystore to talk to the tee by Nick Kralevich · 11 years ago
e45603d address denials when playing protected content. by Nick Kralevich · 11 years ago
d362cdf Apply a label to /data/mediadrm files. by rpcraig · 11 years ago
84a81d1 Merge "Restrict ability to set checkreqprot." by Nick Kralevich · 11 years ago
5da0881 Strip file execute permissions from unconfined domains. by Stephen Smalley · 11 years ago
c0493c8 Drop extra _system_file types. by Stephen Smalley · 11 years ago
4e416ea Strip exec* permissions from unconfined domains. by Stephen Smalley · 11 years ago
8b51674 Restrict ability to set checkreqprot. by Stephen Smalley · 11 years ago
fa4002f Merge "Adding permissions needed to remove cache" by Nick Kralevich · 11 years ago
1bf61c4 Make /proc/net a proc_net type. by Robert Craig · 11 years ago
529fcbe Create proc_net type for /proc/sys/net entries. by Robert Craig · 11 years ago
11c48d4 Merge "Remove ping domain." by Nick Kralevich · 11 years ago
a506613 Fix denials triggered by adb shell screencap. by Stephen Smalley · 11 years ago
396015c Remove ping domain. by Stephen Smalley · 11 years ago
5f29026 Revert "Make surfaceflinger domain enforcing." by Nick Kralevich · 11 years ago
a6f88c7 Revert "Make ping enforcing." by Nick Kralevich · 11 years ago
b8ac06f Revert "Make mediaserver enforcing." by Nick Kralevich · 11 years ago
3d770d2 surfaceflinger: fix bugreport screenshot functionality by Nick Kralevich · 11 years ago
37339c7 fix mediaserver selinux denials. by Nick Kralevich · 11 years ago
a4e28f2 Merge "Allow dumpstate to write shell files" by Nick Kralevich · 11 years ago
bfa3cd5 Allow dumpstate to write shell files by Nick Kralevich · 11 years ago
a730e50 Don't allow zygote init:binder call by Nick Kralevich · 11 years ago
ed1648a Merge "Address adb backup/restore denials." by Nick Kralevich · 11 years ago
c4021ce Address adb backup/restore denials. by Stephen Smalley · 11 years ago
301e61e Merge "Make mediaserver enforcing." by Nick Kralevich · 11 years ago
14a7764 Merge "Make media_app enforcing." by Nick Kralevich · 11 years ago
af28817 Merge "Make nfc enforcing." by Nick Kralevich · 11 years ago
782af9e Merge "Make radio enforcing." by Nick Kralevich · 11 years ago
ee3cfd2 Merge "Make bluetooth enforcing." by Nick Kralevich · 11 years ago
aef19eb Merge "Make surfaceflinger domain enforcing." by Nick Kralevich · 11 years ago
4e39317 Merge "Confine adbd but leave it permissive for now." by Nick Kralevich · 11 years ago
e7ec2f5 Only allow PROT_EXEC for ashmem where required. by Stephen Smalley · 11 years ago
ad7df7b Remove execmem permission from domain, add to appdomain. by Stephen Smalley · 11 years ago
527316a Allow use of art as the Android runtime. by Stephen Smalley · 11 years ago
81e74b1 Confine adbd but leave it permissive for now. by Stephen Smalley · 11 years ago
588bb5c Merge "Confine sdcardd, but leave it permissive for now." by Nick Kralevich · 11 years ago
c48fd77 Confine dhcp, but leave it permissive for now. by Stephen Smalley · 11 years ago
9cc6d8d Adding permissions needed to remove cache by jaejyn.shin · 11 years ago
c17d30a Delete dalvikcache_data_file write/setattr access from shell. by Stephen Smalley · 11 years ago
d28ceeb Merge "shell: allow setting debug_prop and powerctl_prop" by Nick Kralevich · 11 years ago