Log - refs/tags/fp2-sibon-17.10.1 - fp2-dev/platform/external/sepolicy

5e8f464 Merge "Fix sideloading" into fp2-m-sibon by Teemu Hukkanen · 7 years ago
bf7fd2b Make recovery domain permissive so we can set SELinux permissive by Ethan Yonker · 9 years ago
7a09aea Fix sideloading by Maarten Derks · 7 years ago
d245789 Allow recovery to read files with oemfs label by Tao Bao · 9 years ago
c960596 drop_caches label, vold scratch space on expanded. by Jeff Sharkey · 9 years ago
2f5a6a9 Replace unix_socket_connect() and explicit property sets with macro by William Roberts · 9 years ago
303e139 am b76966d6: recovery: remove auditallow for exec_type:dir writes by Nick Kralevich · 9 years ago
b76966d recovery: remove auditallow for exec_type:dir writes by Nick Kralevich · 9 years ago
899fb42 am bd050a8e: Allow recovery to access kmsg for log retrieval by Patrick Tjin · 9 years ago
bd050a8 Allow recovery to access kmsg for log retrieval by Patrick Tjin · 9 years ago
a17a266 recovery.te: add /data neverallow rules by Nick Kralevich · 10 years ago
5fad3d9 recovery: allow changing unlabeled symbolic links by Nick Kralevich · 10 years ago
683ac49 recovery: allow changing unlabeled symbolic links by Nick Kralevich · 10 years ago
7563a6f reconcile aosp (a7c04dcd748e1a9daf374551303a3bd578305cf9) after branching. Please do not merge. by Ed Heyl · 10 years ago
e9c90bd reconcile aosp (4da3bb1481e4e894a7dee3f3b9ec8cef6f6b1aed) after branching. Please do not merge. by Ed Heyl · 10 years ago
9f88bc5 support newer-style adbd interface in recovery by Doug Zongker · 10 years ago
a7c04dc Remove domain:process from unconfined by Nick Kralevich · 10 years ago
bad4e91 support newer-style adbd interface in recovery by Doug Zongker · 10 years ago
374b2a1 Rename sdcard_internal/external types. by Stephen Smalley · 10 years ago
e9d97b7 recovery: allow read access to fuse filesystem by Nick Kralevich · 10 years ago
c2ba5ed recovery: start enforcing SELinux rules by Nick Kralevich · 10 years ago
558710c recovery: allow relabelto unlabeled and other unlabeled rules by Nick Kralevich · 10 years ago
93d849b recovery: allow creating and reading fuse filesystems by Doug Zongker · 10 years ago
fee4915 Align SELinux property policy with init property_perms. by Stephen Smalley · 10 years ago
f3c3a1a Remove execute_no_trans from unconfineddomain. by Stephen Smalley · 10 years ago
1095d69 Address recovery denials. by Stephen Smalley · 10 years ago
75e2ef9 Restrict use of context= mount options. by Stephen Smalley · 10 years ago
ff409bb recovery: Allow exec_type on dirs, read for /dev by Nick Kralevich · 10 years ago
f4e6902 recovery: don't use single quote by Nick Kralevich · 10 years ago
8b7ca45 Refine recovery domain. by Nick Kralevich · 10 years ago
a03d761 refine recovery domain. by Nick Kralevich · 10 years ago
03dbf07 More recovery rules by Nick Kralevich · 10 years ago
4203981 recovery: enable permissive_or_unconfined by Nick Kralevich · 10 years ago
e60723a Create a separate recovery policy. by Stephen Smalley · 10 years ago
eb1bbf2 Clean up kernel, init, and recovery domains. by Stephen Smalley · 10 years ago
03ce512 Remove /system write from unconfined by Nick Kralevich · 10 years ago
356f4be Restrict requesting contexts other than policy-defined defaults. by Stephen Smalley · 10 years ago
c2c91bb Drop unused rules for raw I/O and mknod. by Stephen Smalley · 10 years ago
02dac03 Drop relabelto_domain() macro and its associated definitions. by Stephen Smalley · 10 years ago
3f40d4f Remove block device access from unconfined domains. by Stephen Smalley · 10 years ago
5487ca0 Remove several superuser capabilities from unconfined domains. by Stephen Smalley · 10 years ago
b081cc1 Remove mount-related permissions from unconfined domains. by Stephen Smalley · 10 years ago
04ee5df Remove MAC capabilities from unconfined domains. by Stephen Smalley · 10 years ago
9fe4e7b ashmem_device is a character device, not a regular file. by Stephen Smalley · 10 years ago
9a40702 Allow recovery to execute ashmem_device and tmpfs. by Stephen Smalley · 10 years ago
6d10ca8 Add a domain for the recovery console. by Stephen Smalley · 10 years ago