Log - refs/heads/fp2-sibon - fp2-dev/platform/external/sepolicy

d3349b3 FPII-2470 : [Part 1/4] Update: Elevation of privilege vulnerability in Zygote process CVE-2016-3911 A-30963384 by Peter Lee · 8 years ago fp2-sibon FP2-open-16.11.0 FP2-open-16.12.0 FP2-open-17.01.0 FP2-open-17.04.0
f7ccfd0 zygote/dex2oat: Grant additional symlink permissions by Igor Murashkin · 10 years ago
334e097 Revoke zygote's read permission on keychain data by Robin Lee · 10 years ago
51bfecf Pull keychain-data policy out of system-data by Robin Lee · 10 years ago
f2c0118 zygote: allow replacing /proc/cpuinfo by Nick Kralevich · 10 years ago
8ee37b4 reconcile aosp (c103da877b72aae80616dbc192982aaf75dfe888) after branching. Please do not merge. by Ed Heyl · 10 years ago
fad4d5f Fix SELinux policies to allow resource overlays. by Nick Kralevich · 10 years ago
356f4be Restrict requesting contexts other than policy-defined defaults. by Stephen Smalley · 10 years ago
df48bd2 Remove zygote write access to system_data_file. by Stephen Smalley · 10 years ago
0099148 Audit zygote create/write access to system_data_file. by Stephen Smalley · 10 years ago
3a06a72 Change zygote sepolicy whitelist. by Narayan Kamath · 10 years ago
a268f48 zygote: clean up unnecessary rules. by Nick Kralevich · 10 years ago
66f25cb Add auditallow to revaluate b/10498304 by dcashman · 10 years ago
3bfdc6b Allow stat of /system/bin/app_process by zygote. by Stephen Smalley · 10 years ago
37afd3f Remove system_server and zygote unlabeled execute access. by Stephen Smalley · 10 years ago
49c995d Do not allow zygote to execve dalvikcache files. by Stephen Smalley · 10 years ago
959fdaa Remove unlabeled execute access from domain, add to appdomain. by Stephen Smalley · 10 years ago
a730e50 Don't allow zygote init:binder call by Nick Kralevich · 10 years ago
268a612 am d1083bf2: am e9c4181b: zygote.te: fix comment. by Nick Kralevich · 11 years ago
cccfa17 am 882d09db: am 199fc73f: Revert "Give Zygote the ability to write app data files." by Nick Kralevich · 11 years ago
e9c4181 zygote.te: fix comment. by Nick Kralevich · 11 years ago
199fc73 Revert "Give Zygote the ability to write app data files." by Nick Kralevich · 11 years ago
82140be Follow-up to rename system to system_server. by Alex Klyubin · 11 years ago
d343fd5 am 3d94272a: am 1fdee11d: 1/2: Rename domain "system" to "system_server". by Alex Klyubin · 11 years ago
1fdee11 1/2: Rename domain "system" to "system_server". by Alex Klyubin · 11 years ago
e42aa03 am b9bbfeb0: Fix bug report notification not showing up. by Alex Klyubin · 11 years ago
b9bbfeb Fix bug report notification not showing up. by Alex Klyubin · 11 years ago
0e48af3 am d629b87e: Fix bug report notification not showing up. by Nick Kralevich · 11 years ago
d629b87 Fix bug report notification not showing up. by Nick Kralevich · 11 years ago
d615ef3 Fix miscellaneous long-tail denials. by Geremy Condra · 11 years ago
090645b Give Zygote the ability to write app data files. by Geremy Condra · 11 years ago
fc2bd01 Give Zygote the ability to write app data files. by Geremy Condra · 11 years ago
8156073 Fix denials encountered while getting bugreports. by Geremy Condra · 11 years ago
e036260 Add capabilities to Zygote to fix valgrind. by Geremy Condra · 11 years ago
aee5a18 Give zygote the ability to execute dalvik cache files. by Geremy Condra · 11 years ago
6aca515 zygote: enable SELinux restrictions by Nick Kralevich · 11 years ago
77d4731 Make all domains unconfined. by repo sync · 11 years ago
50e37b9 Move domains into per-domain permissive mode. by repo sync · 11 years ago
7bb2a55 Give domains read access to security_file domain. by William Roberts · 11 years ago
06575ee Add remount capability to Zygote. by Geremy Condra · 11 years ago
65d4f44 Various policy updates. by Robert Craig · 11 years ago
8b3b4fe Allow zygote to search tmpfs. by rpcraig · 12 years ago
c195ec3 Split internal and external sdcards by William Roberts · 11 years ago
e468016 zygote requires setpcap in order to drop from its bounding set. by Stephen Smalley · 11 years ago
61c80d5 Update policy for Android 4.2 / latest master. by Stephen Smalley · 12 years ago
2dd4e51 SE Android policy. by Stephen Smalley · 12 years ago