Gitiles
Code Review Sign In
gerrit-public.fairphone.software / fp2-dev / platform / external / sepolicy / refs/tags/fp2-sibon-17.07.6
  1. 6b75d09 Let's reinvent storage, yet again! by Jeff Sharkey · 9 years ago
  2. 8c045a4 merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  3. 6ef3275 remove mako specific neverallow exception by Nick Kralevich · 9 years ago
  4. 16873c1 neverallow read to shell- and app-writable symlinks. by Stephen Smalley · 9 years ago
  5. 6462027 neverallow transitions to shell by William Roberts · 9 years ago
  6. 7c065a9 neverallow "write ops" on system_data_file from "others" by William Roberts · 9 years ago
  7. b39ff99 am b23b49f9: am 0abf74eb: fs_use: Enabled loading security xattrs for squashfs by Mohamad Ayyash · 9 years ago
  8. b23b49f am 0abf74eb: fs_use: Enabled loading security xattrs for squashfs by Mohamad Ayyash · 9 years ago
  9. 369556b merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  10. 0abf74e fs_use: Enabled loading security xattrs for squashfs by Mohamad Ayyash · 9 years ago
  11. 1bcff87 neverallow write access to /data/dalvik-cache directories. by Stephen Smalley · 9 years ago
  12. 904099c Merge "Allow clatd CAP_IPC_LOCK for mmap()" into mnc-dev by Erik Kline · 9 years ago
  13. e708451 Allow clatd CAP_IPC_LOCK for mmap() by Erik Kline · 9 years ago
  14. 9051115 merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  15. f8fd5ab installd restorecon now requires getattr. by Jeff Sharkey · 9 years ago
  16. 1802bc3 merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  17. 8934fac merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  18. df54526 Merge "sdcardd: ensure that init never executes sdcard daemon" into mnc-dev by Nick Kralevich · 9 years ago
  19. 50897fe sdcardd: ensure that init never executes sdcard daemon by Nick Kralevich · 9 years ago
  20. 46452b8 Merge "Allow vold to change priority when benchmarking." into mnc-dev by Jeff Sharkey · 9 years ago
  21. 769b96f Allow vold to change priority when benchmarking. by Jeff Sharkey · 9 years ago
  22. 4ae4309 Update perfprofd rules to allow wake_unlock inspection. by Than McIntosh · 9 years ago
  23. d06607b merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  24. d245789 Allow recovery to read files with oemfs label by Tao Bao · 9 years ago
  25. 73f7e76 sepolicy-analyze: use headers from common selinux project. by dcashman · 9 years ago
  26. 918bea4 tools: use headers from common selinux project by Jeff Vander Stoep · 9 years ago
  27. 7745275 merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  28. 86987a0 Merge "New "selinux.restorecon" control property." into mnc-dev by Jeff Sharkey · 9 years ago
  29. 7617cd4 New "selinux.restorecon" control property. by Jeff Sharkey · 9 years ago
  30. ba8821b Merge changes from topic 'na-move-to-installd' into mnc-dev by Narayan Kamath · 9 years ago
  31. 05dc432 merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  32. 4b4b2b9 Remove service_manager_local_audit_domain. by dcashman · 9 years ago
  33. 93a7ab8 Merge "Allow /dev/klog access, drop mknod and __null__ access" into mnc-dev by Nick Kralevich · 9 years ago
  34. e265197 Allow /dev/klog access, drop mknod and __null__ access by Nick Kralevich · 9 years ago
  35. 01cec59 merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  36. 5a23b16 Merge "restrict app access to socket ioctls" into mnc-dev by Jeff Vander Stoep · 9 years ago
  37. de9b530 restrict app access to socket ioctls by Jeff Vander Stoep · 9 years ago
  38. 9aafd4a Allow installd to link apk_data_file and dalvikcache_data_file. by Narayan Kamath · 9 years ago
  39. 01898ea Revert "Allow system_server to link,relabel and create_dir dalvikcache_data_file." by Narayan Kamath · 9 years ago
  40. dc496c2 Merge "Move crypt commands to a different listener in vold" into mnc-dev by Paul Lawrence · 9 years ago
  41. 41f233f Allow system_server to link,relabel and create_dir dalvikcache_data_file. by Narayan Kamath · 9 years ago
  42. 3aac44e Move crypt commands to a different listener in vold by Paul Lawrence · 9 years ago
  43. ddbf028 merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  44. 7e0838a logd: logpersistd by Mark Salyzyn · 9 years ago
  45. caa6523 merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  46. 35e5015 DO NOT MERGE New ext4enc kernel switching from xattrs to ioctl by Paul Lawrence · 9 years ago
  47. e2c0c9d DO NOT MERGE Securely encrypt the master key by Paul Lawrence · 9 years ago
  48. 8dcf48c Merge "Allow system_app to find all system services." into mnc-dev by dcashman · 9 years ago
  49. 48c1f61 Allow system_app to find all system services. by dcashman · 9 years ago
  50. 12e8b61 Merge "Allow system server and uncrypt to operate pipe file" into mnc-dev by Tao Bao · 9 years ago
  51. 70c6dbf Allow system server and uncrypt to operate pipe file by Tao Bao · 9 years ago
  52. 00cbb64 merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  53. 20d0ad0 Remove zygote security class declaration. by Stephen Smalley · 9 years ago
  54. b98619e merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  55. 83554d2 Merge "Selinux: Allow system_server to create fpdata dir." into mnc-dev by Jim Miller · 9 years ago
  56. a39b131 Selinux: Allow system_server to create fpdata dir. by Jim Miller · 9 years ago
  57. 894911d Expand rtc_device label to match all rtc class drivers. by dcashman · 9 years ago
  58. b3df438 Merge "Rename keystore methods and delete unused permissions" into mnc-dev by Chad Brubaker · 9 years ago
  59. a106039 merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  60. 5d78c07 Merge "Add selinux policy for fingerprintd" into mnc-dev by Jim Miller · 9 years ago
  61. c1cb855 camera: Add AIDL interface for CameraServiceProxy. by Ruben Brunk · 9 years ago
  62. a983621 Merge "camera: Add AIDL interface for CameraServiceProxy." into mnc-dev by Ruben Brunk · 9 years ago
  63. 264eb65 Add selinux policy for fingerprintd by Jim Miller · 9 years ago
  64. e1edbe9 camera: Add AIDL interface for CameraServiceProxy. by Ruben Brunk · 9 years ago
  65. 9dc28cd Allow MediaProvider to traverse /mnt/media_rw. by Jeff Sharkey · 9 years ago
  66. 6e1f405 Allow MediaProvider to traverse /mnt/media_rw. by Jeff Sharkey · 9 years ago
  67. b30dc5c merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  68. 807d8d0 Label /dev/rtc0 as rtc_device. by dcashman · 9 years ago
  69. eaa1a1e Rename keystore methods and delete unused permissions by Chad Brubaker · 9 years ago
  70. 77a8246 Add keystore user_changed permission by Chad Brubaker · 9 years ago
  71. 271f9d2 merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  72. 929c858 Merge "Allow tty and wireless extensions ioctls" into mnc-dev by Jeff Vander Stoep · 9 years ago
  73. a0fbeb9 Allow tty and wireless extensions ioctls by Jeff Vander Stoep · 9 years ago
  74. e5acc38 Merge "drop_caches label, vold scratch space on expanded." into mnc-dev by Jeff Sharkey · 9 years ago
  75. aee12c3 Tweak perfprofd sepolicy to include ipc_lock self capability. by Than McIntosh · 9 years ago
  76. c960596 drop_caches label, vold scratch space on expanded. by Jeff Sharkey · 9 years ago
  77. 324cdd6 Fix sepolicy-analyze libc++.so loading issue w/CTS. by dcashman · 9 years ago
  78. ae69694 Fix sepolicy-analyze libc++.so loading issue w/CTS. by dcashman · 9 years ago
  79. b5dc766 Merge "dontaudit untrusted_app exec_type:file getattr" into mnc-dev by Nick Kralevich · 9 years ago
  80. f6d12c6 dontaudit untrusted_app exec_type:file getattr by Nick Kralevich · 9 years ago
  81. 3526a66 Allow system_server to read/write /proc/uid_cputime/ module by Adam Lesinski · 9 years ago
  82. 415f0ba Label /oem files by Nick Kralevich · 9 years ago
  83. 2f5a6a9 Replace unix_socket_connect() and explicit property sets with macro by William Roberts · 9 years ago
  84. 34a468f Update sepolicy to add label for /data/misc/perfprofd. by Dehao Chen · 9 years ago
  85. 38d0247 New sepolicy for perfprofd, simpleperf. by Than McIntosh · 9 years ago
  86. 618efe8 kernel: allow rebooting, and writing to /dev/__kmsg__ by Nick Kralevich · 9 years ago
  87. 86f30cb Deny untrusted app ioctl access to MAC addr by Jeff Vander Stoep · 9 years ago
  88. 4286019 Merge "Allow system_app to list all services." into mnc-dev by dcashman · 9 years ago
  89. c6290ac Allow system_app to list all services. by dcashman · 9 years ago
  90. 64b01c6 Update policy version to enable ioctl whitelisting by Jeff Vander Stoep · 9 years ago
  91. ecc82e0 Allow installd to move APKs. by Jeff Sharkey · 9 years ago
  92. 3c242ca Ensure that domain and appdomain attributes are assigned. by Stephen Smalley · 9 years ago
  93. 37137da Merge "Make deviceidle accessible as system_api_service." into mnc-dev by dcashman · 9 years ago
  94. 31548db Make deviceidle accessible as system_api_service. by dcashman · 9 years ago
  95. ab5cf66 Expand access to gatekeeperd. by Alex Klyubin · 9 years ago
  96. 320a7ca am aeb110ce: am e05487ac: init.te: Don\'t allow mounting on top of /proc by Nick Kralevich · 9 years ago
  97. aeb110c am e05487ac: init.te: Don\'t allow mounting on top of /proc by Nick Kralevich · 9 years ago
  98. e05487a init.te: Don't allow mounting on top of /proc by Nick Kralevich · 9 years ago
  99. fd1c6e7 am 20f38b98: am 90c64542: Allow vold to move FUSE backing files directly. by Jeff Sharkey · 9 years ago
  100. 20f38b9 am 90c64542: Allow vold to move FUSE backing files directly. by Jeff Sharkey · 9 years ago