- 7c19012 Merge branch 'dev/10/fp2/security-aosp-qt-release' into int/10/fp2 by Maarten Derks · 1 year, 8 months ago int/10/fp2 rel/10/fp2/22.10.0-rel rel/10/fp2/22.12.0-rel rel/10/fp2/23.02.0-rel rel/10/fp2/22.10.0-rel.0 rel/10/fp2/22.12.0-rel.0 rel/10/fp2/23.02.0-rel.0
- 886fe5d DO NOT MERGE: Move bind permission on netlink to private by Thiébaud Weksteen · 2 years, 2 months ago
- b6267a5 Merge branch 'security-aosp-qt-release' into int/10/fp2 by Maarten Derks · 2 years, 3 months ago rel/10/fp2/22.04.0-rel rel/10/fp2/22.06.0-rel rel/10/fp2/22.08.0-rel rel/10/fp2/22.04.0-rel.1 rel/10/fp2/22.06.0-rel.0 rel/10/fp2/22.08.0-rel.0
- a60ed97 Allow system_app to set shell_prop by Luca Weiss · 2 years, 5 months ago rel/10/fp2/22.02.0-rel rel/10/fp2/22.02.0-rel.0
- cc923ad Allow adbd to access /proc/net/{tcp,tcp6,udp,udp6} by Gregory Montoir · 2 years, 9 months ago
- 71584fc sepolicy: Add rules for sudaemon by Demon Singur · 6 years ago
- d470c35 Merge tag 'android-security-10.0.0_r53' into int/10/fp2 by Karsten Tausche · 2 years, 9 months ago
- 6ec9b2e Don't give uid-based categories to app_zygote and isolated processes. by Martijn Coenen · 4 years ago
- a68dd13 Prevent apps from causing presubmit failures by Jeff Vander Stoep · 4 years, 6 months ago
- 5927933 Fix: dumpstate HAL service property context by Wei Wang · 4 years, 11 months ago
- 2951b48 system_server: TelephonyManager reads /proc/cmdline by Jeff Vander Stoep · 5 years ago
- 49807a6 Merge "Allow adb forward to traced consumer socket" into qt-qpr1-dev by TreeHugger Robot · 4 years, 5 months ago
- c0bad7b Allow adb forward to traced consumer socket by Hector Dearman · 4 years, 9 months ago
- b5c47df Revert "Revert "Allow dumpstate to dumpsys gpu"" by Yiwei Zhang · 4 years, 5 months ago
- 6daec46 Revert "Allow dumpstate to dumpsys gpu" by Yiwei Zhang · 4 years, 5 months ago
- 979f5a4 Allow dumpstate to dumpsys gpu by Yiwei Zhang · 5 years ago
- d77fec4 Allow shell to unlink perfetto_traces_data_file. by Florian Mayer · 4 years, 8 months ago
- d8a9a49 Allow dexoptanalyzer to mmap files with Linux 4.14+ that it can already access. by Roland Levillain · 4 years, 10 months ago
- afac97a Allow Traceur to record the suspend_resume trace event by Carmen Jackson · 4 years, 10 months ago
- eb1cf76 sepolicy: Adjust policy for migrate_legacy_obb_data.sh by Daniel Rosenberg · 5 years ago
- 640ead1 Merge "sepolicy: Adjust policy for migrate_legacy_obb_data.sh" into qt-dev by Daniel Rosenberg · 4 years, 11 months ago
- a85c536 Merge "sepolicy: Adjust policy for migrate_legacy_obb_data.sh" into qt-dev by Daniel Rosenberg · 4 years, 11 months ago
- 793dc8f sepolicy: Adjust policy for migrate_legacy_obb_data.sh by Daniel Rosenberg · 5 years ago
- b1d6eb9 Allow perfetto to access gpu_frequency tracepoint in user am: 9bfaa1c4dd by Sidath Senanayake · 5 years ago
- 9bfaa1c Allow perfetto to access gpu_frequency tracepoint in user by Sidath Senanayake · 5 years ago
- efc2dbb Allow rule to let settings access apex files am: 9067699d9d by Todd Kennedy · 5 years ago
- 9067699 Allow rule to let settings access apex files by Todd Kennedy · 5 years ago
- 75f2c87 Merge "In native coverage builds, allow all domains to access /data/misc/trace" into qt-dev by Oliver Nguyen · 5 years ago
- 72a75ff Merge "In native coverage builds, allow all domains to access /data/misc/trace" into qt-dev by Oliver Nguyen · 5 years ago
- 20ca587 Add rules to dump hal traces am: 6d976f4d5d by Kevin Chyn · 5 years ago
- b658246 In native coverage builds, allow all domains to access /data/misc/trace by Pirama Arumuga Nainar · 5 years ago
- 6d976f4 Add rules to dump hal traces by Kevin Chyn · 5 years ago
- 9af5272 Merge "Add power stats HAL to ANR list" into qt-r1-dev by TreeHugger Robot · 5 years ago
- 8273f19 Add power stats HAL to ANR list by Benjamin Schwartz · 5 years ago
- 75182a1 Add persist.sys.theme. by Tao Bao · 5 years ago
- 6dc831d Merge "system_server_startup: allow SIGCHLD to zygote" into qt-dev by TreeHugger Robot · 5 years ago
- e0d9e50 system_server_startup: allow SIGCHLD to zygote by Jeff Vander Stoep · 5 years ago
- 72f247f userdebug: support perfetto traces as a section in incident reports by Ryan Savitski · 5 years ago
- 51fae66 Allow init to mkdir inside /data/gsi. by David Anderson · 5 years ago
- 097f48c Merge "sepolicy: Add policy for migrate_legacy_obb_data.sh" into qt-dev by Anton Hansson · 5 years ago
- cf48bfd Merge "Properly define hal_codec2 and related policies" into qt-dev by TreeHugger Robot · 5 years ago
- d0482ba Allows StatsCompanionService to pipe data to statsd. by Max Dashouk · 5 years ago
- 0574e4c sepolicy: Add policy for migrate_legacy_obb_data.sh by Narayan Kamath · 5 years ago
- 609c243 Properly define hal_codec2 and related policies by Pawin Vongmasa · 5 years ago
- 0ad88f0 Merge changes from topic "darkboot-sepolicy" into qt-dev by Tao Bao · 5 years ago
- 8f39cce Add vendor_misc_writer. by Tao Bao · 5 years ago
- 37f0662 atrace: debug: allow notifying camera HAL of a change in sysprops by Ryan Savitski · 5 years ago
- fb89742 atrace.te: allow notifying cameraserver of a change in sysprops by Ryan Savitski · 5 years ago
- 622992f Merge "Allow system server to lock system files." into qt-dev by Nicolas Geoffray · 5 years ago
- 52414b2 Allow system server to lock system files. by Nicolas Geoffray · 5 years ago
- 7c40e0b selinux - netd - tighten down bpf policy by Maciej Żenczykowski · 5 years ago
- dc4dc55 Merge "Clean sepolicy of unused netd_socket" into qt-dev by TreeHugger Robot · 5 years ago
- ba258f0 Remove unneeded permissions by Marco Nelissen · 5 years ago
- 654ceeb Dontaudit unneeded denials. by Joel Galenson · 5 years ago
- 6f1800f Merge "Allow psi monitor users to setched kernel threads" into qt-dev by TreeHugger Robot · 5 years ago
- 26f84c6 Clean sepolicy of unused netd_socket by Luke Huang · 5 years ago
- a3d6302 Allow psi monitor users to setched kernel threads by Wei Wang · 5 years ago
- b5b796a Merge "Sepolicy: add dynamic_system_prop" into qt-dev by TreeHugger Robot · 5 years ago
- dea144c Sepolicy: add dynamic_system_prop by Hung-ying Tyan · 5 years ago
- 2cdbd3a Sepolicy for netutils_wrapper to use binder call by Luke Huang · 5 years ago
- 1739bce Add /data/vendor_ce/0/facedata alongside its vendor_de relation by Paul Crowley · 5 years ago
- 5e967d8 Merge "Allow zygote to scan static overlays on /oem" into qt-dev by TreeHugger Robot · 5 years ago
- 0b0f1cf Merge "Treble-ize sepolicy for fwk HIDL services." into qt-dev by Tri Vo · 5 years ago
- 8471491 Merge "Move pf_key socket creation permission to netd" into qt-dev by TreeHugger Robot · 5 years ago
- 1bbbf81 Treble-ize sepolicy for fwk HIDL services. by Tri Vo · 5 years ago
- f33351b Merge "Adding /debug_ramdisk mount point" into qt-dev by TreeHugger Robot · 5 years ago
- 2c25a31 Merge "add mediaswcodec to watchdog and dumpstate" into qt-dev by TreeHugger Robot · 5 years ago
- 1c48f44 Adding /debug_ramdisk mount point by Bowgo Tsai · 5 years ago
- 785521e add mediaswcodec to watchdog and dumpstate by Chong Zhang · 5 years ago
- 5bce022 Remove obsolete denials tracking. by Sudheer Shanka · 5 years ago
- 625ed86 Merge "Allow system_server to schedule mediaswcodec" into qt-dev by TreeHugger Robot · 5 years ago
- 6fd8d82 Allow system_server to schedule mediaswcodec by Chong Zhang · 5 years ago
- d6d6225 Allow zygote to scan static overlays on /oem by Ryan Mitchell · 5 years ago
- 6b34e64 Remove isV2App by Nick Kralevich · 5 years ago
- f908592 Merge "Allow bootstrap bionic only to init, ueventd, and apexd" into qt-dev by TreeHugger Robot · 5 years ago
- 3bf0e82 Move pf_key socket creation permission to netd by Chenbo Feng · 5 years ago
- 180b243 Allow webview_zygote to read the /data/user/0 symlink. by Torne (Richard Coles) · 5 years ago
- f4aeb81 sepolicy: proper labelling of /sys/devices/virtual/net/... by Maciej Żenczykowski · 5 years ago
- 99a6d53 Merge "Let dumpstate get netd stack traces." into qt-dev by TreeHugger Robot · 5 years ago
- 972d4b6 Allow bootstrap bionic only to init, ueventd, and apexd by Jiyong Park · 5 years ago
- c7a3140 Add policy for /system/bin/auditctl by Nick Kralevich · 5 years ago
- e65658c Merge "ephemeral_app: restore /dev/ashmem open permissions" into qt-dev by Tri Vo · 5 years ago
- ae58322 Merge "Re-label /data/pkg_staging files as staging." into qt-dev by TreeHugger Robot · 5 years ago
- 0da2ecd ephemeral_app: restore /dev/ashmem open permissions by Tri Vo · 5 years ago
- b485a6a Re-label /data/pkg_staging files as staging. by Dario Freni · 5 years ago
- ba27ad4 Add producer socket to the selinux perfetto domain. by Stephen Nusko · 5 years ago
- 18bf53f Let dumpstate get netd stack traces. by Chalard Jean · 5 years ago
- 401b639 Remove apex_key_file am: cff95d7b5f am: 6c36a99417 am: c035d085ec by Jiyong Park · 5 years ago
- 79b4296 Merge "Allow traced_probes to read packages.list." am: 5686c383c8 am: 2ace731692 by Florian Mayer · 5 years ago
- 8c82a41 Merge "NNAPI property to disable extensions use on GSI/AOSP product partition." am: d385346ada am: b97cabd363 by Przemyslaw Szczepaniak · 5 years ago
- cff95d7 Remove apex_key_file by Jiyong Park · 5 years ago
- 5686c38 Merge "Allow traced_probes to read packages.list." by Treehugger Robot · 5 years ago
- d385346 Merge "NNAPI property to disable extensions use on GSI/AOSP product partition." by Przemyslaw Szczepaniak · 5 years ago
- 3d23317 Merge "Allow execmod for apps with targetSdkVersion=26-28" am: 61f28b33a4 am: 7bc1740052 by Jeff Vander Stoep · 5 years ago
- 6c6ccf1 rs.te: Allow ephemeral_app FD use am: 99a5103585 am: 56c312b30b am: 6afad16a2c by Nick Kralevich · 5 years ago
- 61f28b3 Merge "Allow execmod for apps with targetSdkVersion=26-28" by Treehugger Robot · 5 years ago
- 99a5103 rs.te: Allow ephemeral_app FD use by Nick Kralevich · 5 years ago
- c9aba12 Allow execmod for apps with targetSdkVersion=26-28 by Jeff Vander Stoep · 5 years ago
- 62a22ce NNAPI property to disable extensions use on GSI/AOSP product partition. by Przemyslaw Szczepaniak · 5 years ago
- d04ffff Allow traced_probes to read packages.list. by Florian Mayer · 5 years ago