Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
fp2-dev
/
platform
/
external
/
sepolicy
/
refs/tags/FP2-open-16.11.0
/
zygote.te
d3349b3
FPII-2470 : [Part 1/4] Update: Elevation of privilege vulnerability in Zygote process CVE-2016-3911 A-30963384
by Peter Lee
· 8 years ago
fp2-sibon
FP2-open-16.11.0
FP2-open-16.12.0
FP2-open-17.01.0
FP2-open-17.04.0
f7ccfd0
zygote/dex2oat: Grant additional symlink permissions
by Igor Murashkin
· 10 years ago
334e097
Revoke zygote's read permission on keychain data
by Robin Lee
· 10 years ago
51bfecf
Pull keychain-data policy out of system-data
by Robin Lee
· 10 years ago
f2c0118
zygote: allow replacing /proc/cpuinfo
by Nick Kralevich
· 10 years ago
8ee37b4
reconcile aosp (c103da877b72aae80616dbc192982aaf75dfe888) after branching. Please do not merge.
by Ed Heyl
· 10 years ago
fad4d5f
Fix SELinux policies to allow resource overlays.
by Nick Kralevich
· 10 years ago
356f4be
Restrict requesting contexts other than policy-defined defaults.
by Stephen Smalley
· 10 years ago
df48bd2
Remove zygote write access to system_data_file.
by Stephen Smalley
· 10 years ago
0099148
Audit zygote create/write access to system_data_file.
by Stephen Smalley
· 10 years ago
3a06a72
Change zygote sepolicy whitelist.
by Narayan Kamath
· 10 years ago
a268f48
zygote: clean up unnecessary rules.
by Nick Kralevich
· 10 years ago
66f25cb
Add auditallow to revaluate b/10498304
by dcashman
· 11 years ago
3bfdc6b
Allow stat of /system/bin/app_process by zygote.
by Stephen Smalley
· 11 years ago
37afd3f
Remove system_server and zygote unlabeled execute access.
by Stephen Smalley
· 11 years ago
49c995d
Do not allow zygote to execve dalvikcache files.
by Stephen Smalley
· 11 years ago
959fdaa
Remove unlabeled execute access from domain, add to appdomain.
by Stephen Smalley
· 11 years ago
a730e50
Don't allow zygote init:binder call
by Nick Kralevich
· 11 years ago
268a612
am d1083bf2: am e9c4181b: zygote.te: fix comment.
by Nick Kralevich
· 11 years ago
cccfa17
am 882d09db: am 199fc73f: Revert "Give Zygote the ability to write app data files."
by Nick Kralevich
· 11 years ago
e9c4181
zygote.te: fix comment.
by Nick Kralevich
· 11 years ago
199fc73
Revert "Give Zygote the ability to write app data files."
by Nick Kralevich
· 11 years ago
82140be
Follow-up to rename system to system_server.
by Alex Klyubin
· 11 years ago
d343fd5
am 3d94272a: am 1fdee11d: 1/2: Rename domain "system" to "system_server".
by Alex Klyubin
· 11 years ago
1fdee11
1/2: Rename domain "system" to "system_server".
by Alex Klyubin
· 11 years ago
e42aa03
am b9bbfeb0: Fix bug report notification not showing up.
by Alex Klyubin
· 11 years ago
b9bbfeb
Fix bug report notification not showing up.
by Alex Klyubin
· 11 years ago
0e48af3
am d629b87e: Fix bug report notification not showing up.
by Nick Kralevich
· 11 years ago
d629b87
Fix bug report notification not showing up.
by Nick Kralevich
· 11 years ago
d615ef3
Fix miscellaneous long-tail denials.
by Geremy Condra
· 11 years ago
090645b
Give Zygote the ability to write app data files.
by Geremy Condra
· 11 years ago
fc2bd01
Give Zygote the ability to write app data files.
by Geremy Condra
· 11 years ago
8156073
Fix denials encountered while getting bugreports.
by Geremy Condra
· 11 years ago
e036260
Add capabilities to Zygote to fix valgrind.
by Geremy Condra
· 11 years ago
aee5a18
Give zygote the ability to execute dalvik cache files.
by Geremy Condra
· 11 years ago
6aca515
zygote: enable SELinux restrictions
by Nick Kralevich
· 11 years ago
77d4731
Make all domains unconfined.
by repo sync
· 11 years ago
50e37b9
Move domains into per-domain permissive mode.
by repo sync
· 11 years ago
7bb2a55
Give domains read access to security_file domain.
by William Roberts
· 11 years ago
06575ee
Add remount capability to Zygote.
by Geremy Condra
· 11 years ago
65d4f44
Various policy updates.
by Robert Craig
· 11 years ago
8b3b4fe
Allow zygote to search tmpfs.
by rpcraig
· 12 years ago
c195ec3
Split internal and external sdcards
by William Roberts
· 12 years ago
e468016
zygote requires setpcap in order to drop from its bounding set.
by Stephen Smalley
· 12 years ago
61c80d5
Update policy for Android 4.2 / latest master.
by Stephen Smalley
· 12 years ago
2dd4e51
SE Android policy.
by Stephen Smalley
· 13 years ago