Gitiles
Code Review Sign In
gerrit-public.fairphone.software / fp2-dev / platform / external / sepolicy / refs/tags/fp2-sibon-17.11.2
  1. defb13a system_server: replace sys_resource with sys_ptrace by Nick Kralevich · 7 years ago fp2-m-sibon fp2-sibon-17.07.6 fp2-sibon-17.08.1.1 fp2-sibon-17.10.1 fp2-sibon-17.11.2 fp2-sibon-17.12.1 fp2-sibon-18.01.1 fp2-sibon-18.02.0 fp2-sibon-18.03.1 fp2-sibon-18.04.1
  2. 5e8f464 Merge "Fix sideloading" into fp2-m-sibon by Teemu Hukkanen · 7 years ago
  3. bf7fd2b Make recovery domain permissive so we can set SELinux permissive by Ethan Yonker · 9 years ago
  4. 7a09aea Fix sideloading by Maarten Derks · 7 years ago
  5. 5f13b7d sepolicy: Fixup neverallow for su in userdebug/eng by Maarten Derks · 7 years ago
  6. 898e2b8 Merge "Allow the zygote to stat all files it opens." into FPIIM_WIP by Teemu Hukkanen · 7 years ago
  7. 67f4076 Allow the zygote to stat all files it opens. by Narayan Kamath · 8 years ago
  8. a10f87b FPIIM-67: expose control over unpriv perf access to shell by Daniel Micay · 8 years ago
  9. 46a640d Remove generic socket access from untrusted processes by Nick Kralevich · 8 years ago
  10. 90ccbcf Further restrict socket ioctls available to apps by Jeff Vander Stoep · 8 years ago
  11. c47a11b DO NOT MERGE: Further restrict access to socket ioctl commands by Jeff Vander Stoep · 8 years ago
  12. a53b816 Merge AU_LINUX_ANDROID_LA.BF.1.1.3_RB1.06.00.01.181.013 on remote branch by Linux Build Service Account · 8 years ago
  13. 69dc586 Merge AU_LINUX_ANDROID_LA.BF.1.1.3_RB1.06.00.01.181.012 on remote branch by Linux Build Service Account · 8 years ago
  14. 207024d Merge AU_LINUX_ANDROID_LA.BF.1.1.3_RB1.06.00.01.181.010 on remote branch by Linux Build Service Account · 8 years ago
  15. 4033ead Merge AU_LINUX_ANDROID_LA.BF.1.1.3_RB1.06.00.01.181.009 on remote branch by Linux Build Service Account · 8 years ago
  16. 471b458 Merge AU_LINUX_ANDROID_LA.BF.1.1.3_RB1.06.00.01.181.008 on remote branch by Linux Build Service Account · 8 years ago
  17. 35b9a30 Merge AU_LINUX_ANDROID_LA.BF.1.1.3_RB1.06.00.01.181.007 on remote branch by Linux Build Service Account · 8 years ago
  18. 63471a0 Merge AU_LINUX_ANDROID_LA.BF.1.1.3_RB1.06.00.00.181.006 on remote branch by Linux Build Service Account · 8 years ago
  19. 64ef3e1 Current Never Allow rule for writing to sockets is too strict. by Phani Avadhanam · 8 years ago
  20. 480c7f4 Merge dlb/android-5.1.0_r1/dax2.1.4.18_r0-qualcomm. by Dean Wheatley · 9 years ago
  21. 945b374 Revert "Merge dlb/android-5.1.0_r1/dax2.1.4.18_r0-qualcomm" by Vivek Mehta · 8 years ago
  22. da2bc9d Merge tag 'android-6.0.1_r3' into 601r3 by David Ng · 8 years ago
  23. dcb4bb2 Merge "Merge tag 'android-6.0.0_r26' into HEAD" by Linux Build Service Account · 8 years ago
  24. b5fc834 Merge dlb/android-5.1.0_r1/dax2.1.4.18_r0-qualcomm by Dean Wheatley · 9 years ago
  25. 84d698e Merge tag 'android-6.0.0_r26' into HEAD by Divya Sharma · 9 years ago
  26. 9acda2f Enable permission checking by binderservicedomain. by dcashman · 9 years ago
  27. 6ab438d Merge "untrusted_apps: Allow untrusted apps to find healthd_service." into mnc-dr-dev by Nick Kralevich · 9 years ago
  28. ac8b575 untrusted_apps: Allow untrusted apps to find healthd_service. by Ruchi Kandoi · 9 years ago
  29. 9fcc949 am 63af426a: bluetooth.te: Relax bluetooth neverallow rule. am: 33a779fecb by Nick Kralevich · 9 years ago
  30. 63af426 bluetooth.te: Relax bluetooth neverallow rule. am: 33a779fecb by Nick Kralevich · 9 years ago
  31. 33a779f bluetooth.te: Relax bluetooth neverallow rule. by Nick Kralevich · 9 years ago
  32. dbd06c1 merge in mnc-dr-release history after reset to mnc-dr-dev by The Android Automerger · 9 years ago
  33. 48dae29 Merge "Allow system_server to bind ping sockets." into mnc-dr-dev by Lorenzo Colitti · 9 years ago
  34. 16c36f6 Allow system_server to bind ping sockets. by Lorenzo Colitti · 9 years ago
  35. 8257ecc merge in mnc-dr-release history after reset to mnc-dr-dev by The Android Automerger · 9 years ago
  36. 0b764ae Allow untrusted_app to list services. by dcashman · 9 years ago
  37. 1c38b8a am 4496a389: am 78b54b5d: am bf323ff8: am 21827ff0: am f82f5e01: Accept command-line input for neverallow-check. by dcashman · 9 years ago
  38. 1116759 am f84c740b: am ed21ab14: am c9b882dc: am a045ca42: am 87f3802a: appdomain: relax netlink_socket neverallow rule by Nick Kralevich · 9 years ago
  39. d0e9419 am 5e911116: am f35d737d: am a669507e: am b5dd69a1: am c423b1aa: Add neverallow checking to sepolicy-analyze. by Stephen Smalley · 9 years ago
  40. 38869ad am 7dea3ae2: am 22db098e: am 5c190886: am 57dec60c: am 6f201ddc: App: add permissions to read symlinks from dalvik cache. by Jeff Hao · 9 years ago
  41. 583425e am c80e805c: am f08d0446: am 582620ae: am c2eb12b2: am 9f0af9ec: Merge "zygote/dex2oat: Grant additional symlink permissions" into lmp-sprout-dev by Jeff Hao · 9 years ago
  42. f7b2792 am eced16c0: am fd352211: am f83e617f: am 4008b6c6: am b7934922: allow run-as to access /data/local/tmp by Nick Kralevich · 9 years ago
  43. beb40b5 am 8ef2fed6: am d5d55306: am 330dd6e4: am 0edbecf2: am 7cd346a7: am 0055ea90: Allow recovery to create device nodes and modify rootfs by Nick Kralevich · 9 years ago
  44. b4b562d am 58aa4481: am f992c4fa: am aa03e496: am e2ba13b9: am 7adc8cfe: Allow adbd to write to /data/adb by Nick Kralevich · 9 years ago
  45. 4496a38 am 78b54b5d: am bf323ff8: am 21827ff0: am f82f5e01: Accept command-line input for neverallow-check. by dcashman · 9 years ago
  46. f84c740 am ed21ab14: am c9b882dc: am a045ca42: am 87f3802a: appdomain: relax netlink_socket neverallow rule by Nick Kralevich · 9 years ago
  47. 5e91111 am f35d737d: am a669507e: am b5dd69a1: am c423b1aa: Add neverallow checking to sepolicy-analyze. by Stephen Smalley · 9 years ago
  48. 7dea3ae am 22db098e: am 5c190886: am 57dec60c: am 6f201ddc: App: add permissions to read symlinks from dalvik cache. by Jeff Hao · 9 years ago
  49. c80e805 am f08d0446: am 582620ae: am c2eb12b2: am 9f0af9ec: Merge "zygote/dex2oat: Grant additional symlink permissions" into lmp-sprout-dev by Jeff Hao · 9 years ago
  50. eced16c am fd352211: am f83e617f: am 4008b6c6: am b7934922: allow run-as to access /data/local/tmp by Nick Kralevich · 9 years ago
  51. 8ef2fed am d5d55306: am 330dd6e4: am 0edbecf2: am 7cd346a7: am 0055ea90: Allow recovery to create device nodes and modify rootfs by Nick Kralevich · 9 years ago
  52. 58aa448 am f992c4fa: am aa03e496: am e2ba13b9: am 7adc8cfe: Allow adbd to write to /data/adb by Nick Kralevich · 9 years ago
  53. 78b54b5 am bf323ff8: am 21827ff0: am f82f5e01: Accept command-line input for neverallow-check. by dcashman · 9 years ago
  54. ed21ab1 am c9b882dc: am a045ca42: am 87f3802a: appdomain: relax netlink_socket neverallow rule by Nick Kralevich · 9 years ago
  55. f35d737 am a669507e: am b5dd69a1: am c423b1aa: Add neverallow checking to sepolicy-analyze. by Stephen Smalley · 9 years ago
  56. 22db098 am 5c190886: am 57dec60c: am 6f201ddc: App: add permissions to read symlinks from dalvik cache. by Jeff Hao · 9 years ago
  57. f08d044 am 582620ae: am c2eb12b2: am 9f0af9ec: Merge "zygote/dex2oat: Grant additional symlink permissions" into lmp-sprout-dev by Jeff Hao · 9 years ago
  58. fd35221 am f83e617f: am 4008b6c6: am b7934922: allow run-as to access /data/local/tmp by Nick Kralevich · 9 years ago
  59. d5d5530 am 330dd6e4: am 0edbecf2: am 7cd346a7: am 0055ea90: Allow recovery to create device nodes and modify rootfs by Nick Kralevich · 9 years ago
  60. f992c4f am aa03e496: am e2ba13b9: am 7adc8cfe: Allow adbd to write to /data/adb by Nick Kralevich · 9 years ago
  61. bf323ff am 21827ff0: am f82f5e01: Accept command-line input for neverallow-check. by dcashman · 9 years ago
  62. c9b882d am a045ca42: am 87f3802a: appdomain: relax netlink_socket neverallow rule by Nick Kralevich · 9 years ago
  63. a669507 am b5dd69a1: am c423b1aa: Add neverallow checking to sepolicy-analyze. by Stephen Smalley · 9 years ago
  64. 5c19088 am 57dec60c: am 6f201ddc: App: add permissions to read symlinks from dalvik cache. by Jeff Hao · 9 years ago
  65. 582620a am c2eb12b2: am 9f0af9ec: Merge "zygote/dex2oat: Grant additional symlink permissions" into lmp-sprout-dev by Jeff Hao · 9 years ago
  66. f83e617 am 4008b6c6: am b7934922: allow run-as to access /data/local/tmp by Nick Kralevich · 9 years ago
  67. 330dd6e am 0edbecf2: am 7cd346a7: am 0055ea90: Allow recovery to create device nodes and modify rootfs by Nick Kralevich · 9 years ago
  68. aa03e49 am e2ba13b9: am 7adc8cfe: Allow adbd to write to /data/adb by Nick Kralevich · 9 years ago
  69. 21827ff am f82f5e01: Accept command-line input for neverallow-check. by dcashman · 9 years ago
  70. a045ca4 am 87f3802a: appdomain: relax netlink_socket neverallow rule by Nick Kralevich · 9 years ago
  71. b5dd69a am c423b1aa: Add neverallow checking to sepolicy-analyze. by Stephen Smalley · 9 years ago
  72. 57dec60 am 6f201ddc: App: add permissions to read symlinks from dalvik cache. by Jeff Hao · 9 years ago
  73. c2eb12b am 9f0af9ec: Merge "zygote/dex2oat: Grant additional symlink permissions" into lmp-sprout-dev by Jeff Hao · 9 years ago
  74. 4008b6c am b7934922: allow run-as to access /data/local/tmp by Nick Kralevich · 9 years ago
  75. 0edbecf am 7cd346a7: am 0055ea90: Allow recovery to create device nodes and modify rootfs by Nick Kralevich · 9 years ago
  76. e2ba13b am 7adc8cfe: Allow adbd to write to /data/adb by Nick Kralevich · 9 years ago
  77. 86c188f merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  78. c7fdb9c merge in mnc-dr-release history after reset to mnc-dr-dev by The Android Automerger · 9 years ago
  79. 4af63fd Merge "[gatekeeperd] allow calls to UserManagerService" into mnc-dev by Andres Morales · 9 years ago
  80. 25725b6 Protect runtime storage mount points. by Jeff Sharkey · 9 years ago
  81. 54a4aab [gatekeeperd] allow calls to UserManagerService by Andres Morales · 9 years ago
  82. 2f162ac merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  83. 3960757 merge in mnc-dr-release history after reset to mnc-dr-dev by The Android Automerger · 9 years ago
  84. e827a8a Relax neverallow rule for loading an updated SELinux policy. by Nick Kralevich · 9 years ago
  85. 831fb7d merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  86. fe0a762 merge in mnc-dr-release history after reset to mnc-dr-dev by The Android Automerger · 9 years ago
  87. dde8290 Merge "init.te: delete kernel load policy support" into mnc-dev by Nick Kralevich · 9 years ago
  88. 356df32 init.te: delete kernel load policy support by Nick Kralevich · 9 years ago
  89. 7bb4249 merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  90. bb7b993 merge in mnc-dr-release history after reset to mnc-dr-dev by The Android Automerger · 9 years ago
  91. c69b5e0 Let Settings measure transient free space. by Jeff Sharkey · 9 years ago
  92. 725cfa9 merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  93. 1d41f08 merge in mnc-dr-release history after reset to mnc-dr-dev by The Android Automerger · 9 years ago
  94. 301555e Allow domains to read tmpfs symlinks. by dcashman · 9 years ago
  95. b617bf8 merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago
  96. 099d632 allow procrank to write to bug report by Jeff Vander Stoep · 9 years ago
  97. 1283c5e merge in mnc-dr-release history after reset to mnc-dr-dev by The Android Automerger · 9 years ago
  98. 630f80a Let Zygote unmount inherited storage devices. by Jeff Sharkey · 9 years ago
  99. 24f3bcd Let Zygote unmount inherited storage devices. by Jeff Sharkey · 9 years ago
  100. cb79c9a merge in mnc-release history after reset to mnc-dev by The Android Automerger · 9 years ago