- 7c19012 Merge branch 'dev/10/fp2/security-aosp-qt-release' into int/10/fp2 by Maarten Derks · 1 year, 8 months ago int/10/fp2 rel/10/fp2/22.10.0-rel rel/10/fp2/22.12.0-rel rel/10/fp2/23.02.0-rel rel/10/fp2/22.10.0-rel.0 rel/10/fp2/22.12.0-rel.0 rel/10/fp2/23.02.0-rel.0
- 886fe5d DO NOT MERGE: Move bind permission on netlink to private by Thiébaud Weksteen · 2 years, 2 months ago
- b1ccb34 Tag system_app as system_writes_mnt_vendor_violators by Luca Weiss · 2 years, 7 months ago
- 4a0b109 Revert "Relax strict neverallows for the persist partition" by Luca Weiss · 2 years, 7 months ago
- 8d1db57 Uncrypt: Allow uncrypt to write on ota_package_file. by P.Adarsh Reddy · 4 years ago
- b929b60 Relax strict neverallows for the persist partition by Luca Weiss · 2 years, 9 months ago
- 71584fc sepolicy: Add rules for sudaemon by Demon Singur · 6 years ago
- ab38d70 Ignore the denial due to vendor_misc_writer reading DT fstab. by Tao Bao · 5 years ago
- 4ee8089 Allow access to the "refresh_rate_switching" system property by Steven Thomas · 4 years, 3 months ago
- 23098ec Add property contexts for dex2oat cpu-set properties by Orion Hodson · 4 years, 7 months ago
- 028f2c3 Merge "block: allow init.rc to tune max discard size" into qt-qpr1-dev by Jaegeuk Kim · 4 years, 4 months ago
- 2b1e595 block: allow init.rc to tune max discard size by Jaegeuk Kim · 4 years, 6 months ago
- 60c4276 Allow adb start/stop mdnsd via ctl.start/stop by Changyeon Jo · 5 years ago
- 4c06707 Allow vendor_init to modify pm.dexopt.disable_bg_dexopt by Eric Jeong · 4 years, 6 months ago
- a235dde Revert "Property contexts for ro.sanitize.*" by Evgenii Stepanov · 4 years, 8 months ago
- df186a0 Property contexts for ro.sanitize.* by Evgenii Stepanov · 4 years, 8 months ago
- 859f921 Allow toolbox to rm -rf /data/per_boot by Paul Crowley · 4 years, 9 months ago
- 32f279c selinux: tag gpu_service as app_api_service by Tri Vo · 4 years, 10 months ago
- 40909f6 Add ro.surface_flinger.set_display_power_timer_ms to sepolicy by Ady Abraham · 5 years ago
- 39efa50 SF: enable device-specific dataspace for color space agnostic surfaces by Yichi Chen · 5 years ago
- 72a75ff Merge "In native coverage builds, allow all domains to access /data/misc/trace" into qt-dev by Oliver Nguyen · 5 years ago
- b658246 In native coverage builds, allow all domains to access /data/misc/trace by Pirama Arumuga Nainar · 5 years ago
- 6d976f4 Add rules to dump hal traces by Kevin Chyn · 5 years ago
- 890dba4 Merge "Add persist.sys.theme." into qt-dev by Tao Bao · 5 years ago
- 9bb7153 Add permission required by libdm_test by Hridya Valsaraju · 5 years ago
- 75182a1 Add persist.sys.theme. by Tao Bao · 5 years ago
- 51fae66 Allow init to mkdir inside /data/gsi. by David Anderson · 5 years ago
- 4cd2db8 Merge "Fix selinux denials when applying updates in recovery." into qt-dev by Alistair Strachan · 5 years ago
- cf48bfd Merge "Properly define hal_codec2 and related policies" into qt-dev by TreeHugger Robot · 5 years ago
- 115aafa Fix selinux denials when applying updates in recovery. by David Anderson · 5 years ago
- 609c243 Properly define hal_codec2 and related policies by Pawin Vongmasa · 5 years ago
- ab2e89a Merge "sepolicy: allow hal_omx to access audio devices" into qt-dev by Tri Vo · 5 years ago
- 63ab8cd Merge "Add support_kernel_idle_timer to sepolicy" into qt-dev by TreeHugger Robot · 5 years ago
- 0ad88f0 Merge changes from topic "darkboot-sepolicy" into qt-dev by Tao Bao · 5 years ago
- ce9fc89 sepolicy: allow hal_omx to access audio devices by Vignesh Kulothungan · 5 years ago
- dc42fed Merge "Allow init to set context for super_block_device" into qt-dev by TreeHugger Robot · 5 years ago
- 6d66c02 Allow init to set context for super_block_device by Hridya Valsaraju · 5 years ago
- 8f39cce Add vendor_misc_writer. by Tao Bao · 5 years ago
- 97d4561 Set persist.sys.device_provisioned vendor-init-readable. by Tao Bao · 5 years ago
- f7c3d19 selinux: Allow dumpstate send signals to vold by Nikita Ioffe · 5 years ago
- 2e4dd2b Add support_kernel_idle_timer to sepolicy by Alec Mouri · 5 years ago
- a6ba39b Add ro.surface_flinger.set_touch_timer_ms to sepolicy by Ady Abraham · 5 years ago
- 653d0f1 Expand deletion powers to all "sdcard_type". by Jeff Sharkey · 5 years ago
- 7c40e0b selinux - netd - tighten down bpf policy by Maciej Żenczykowski · 5 years ago
- 24dd16b selinux - remove clatd tun creation privs by Maciej Żenczykowski · 5 years ago
- dc4dc55 Merge "Clean sepolicy of unused netd_socket" into qt-dev by TreeHugger Robot · 5 years ago
- 2b34e6a Merge "Remove unneeded permissions" into qt-dev by Marco Nelissen · 5 years ago
- 6306728 dontaudit su unlabeled:vsock_socket * by Maciej Żenczykowski · 5 years ago
- 5a56156 dnsmasq - allow getattr on unix stream sockets by Maciej Żenczykowski · 5 years ago
- 9bb7844 selinux - allow dnsmasq to getattr on fifos by Maciej Żenczykowski · 5 years ago
- ba258f0 Remove unneeded permissions by Marco Nelissen · 5 years ago
- 24c34d9 Merge "Move ro.boot.dynamic_partitions to vendor" into qt-dev by TreeHugger Robot · 5 years ago
- 0331778 Move ro.boot.dynamic_partitions to vendor by Hridya Valsaraju · 5 years ago
- 036a9b3 Merge "mtp: support using pppox_socket family" into qt-dev by Maciej Zenczykowski · 5 years ago
- 7f4b50e mtp: support using pppox_socket family by Maciej Żenczykowski · 5 years ago
- 532980f selinux - allow netd to create tun device and pass it in via open fd across execve to clatd cli by Maciej enczykowski · 5 years ago
- 64aa71a ppp: support using pppox_socket family by Nick Kralevich · 5 years ago
- 6f1800f Merge "Allow psi monitor users to setched kernel threads" into qt-dev by TreeHugger Robot · 5 years ago
- 5f5f322 Merge "Make new vendor properties settable by vendor_init" into qt-dev by Anton Hansson · 5 years ago
- 26f84c6 Clean sepolicy of unused netd_socket by Luke Huang · 5 years ago
- a3d6302 Allow psi monitor users to setched kernel threads by Wei Wang · 5 years ago
- b5b796a Merge "Sepolicy: add dynamic_system_prop" into qt-dev by TreeHugger Robot · 5 years ago
- dea144c Sepolicy: add dynamic_system_prop by Hung-ying Tyan · 5 years ago
- 63c402a Make new vendor properties settable by vendor_init by Anton Hansson · 5 years ago
- f546fd8 Merge "Add selinux rule to allow Traceur to enable the traced daemon." into qt-dev by TreeHugger Robot · 5 years ago
- ac55fe9 Add selinux rule to allow Traceur to enable the traced daemon. by Carmen Jackson · 5 years ago
- 2cdbd3a Sepolicy for netutils_wrapper to use binder call by Luke Huang · 5 years ago
- 4ac9186 Merge "Allow mediaserver to find "audio" service" into qt-dev by TreeHugger Robot · 5 years ago
- 019037a Merge "DO NOT MERGE: Allow idmap1 to read vmdl*.tmp APK install files" into qt-dev by Winson Chiu · 5 years ago
- 4b33d68 DO NOT MERGE: Allow idmap1 to read vmdl*.tmp APK install files by Winson Chiu · 5 years ago
- aa568e1 Allow NNAPI HAL services access model files provided by privapp. by Miao Wang · 5 years ago
- 5f30c23 Merge "Allow signals to power/thermal HAL from dumpstate" into qt-dev by TreeHugger Robot · 5 years ago
- 58a9b10 Merge "Add new surfaceflinger ro props" into qt-dev by TreeHugger Robot · 5 years ago
- e28daa6 Merge "Fix denial of /debug_ramdisk/adb_debug.prop" into qt-dev by TreeHugger Robot · 5 years ago
- 62fb037 Fix denial of /debug_ramdisk/adb_debug.prop by Bowgo Tsai · 5 years ago
- 76d93f0 Allow signals to power/thermal HAL from dumpstate by Wei Wang · 5 years ago
- ff9d4bd Add new surfaceflinger ro props by Ady Abraham · 5 years ago
- afcdbef Allow mediaserver to find "audio" service by Mikhail Naganov · 5 years ago
- 1bbbf81 Treble-ize sepolicy for fwk HIDL services. by Tri Vo · 5 years ago
- 785521e add mediaswcodec to watchdog and dumpstate by Chong Zhang · 5 years ago
- f908592 Merge "Allow bootstrap bionic only to init, ueventd, and apexd" into qt-dev by TreeHugger Robot · 5 years ago
- 99149c9 Fix denial during bugreport. by Joel Galenson · 5 years ago
- 972d4b6 Allow bootstrap bionic only to init, ueventd, and apexd by Jiyong Park · 5 years ago
- b3ecb4e Allow signals to hal_power_stats_server from dumpstate by Benjamin Schwartz · 5 years ago
- 73449ce Merge "wifi: Add a new property to indicate active wifi iface" am: 849ac8020d am: 09b3e95f62 by Roshan Pius · 5 years ago
- 849ac80 Merge "wifi: Add a new property to indicate active wifi iface" by Treehugger Robot · 5 years ago
- 401b639 Remove apex_key_file am: cff95d7b5f am: 6c36a99417 am: c035d085ec by Jiyong Park · 5 years ago
- 8c82a41 Merge "NNAPI property to disable extensions use on GSI/AOSP product partition." am: d385346ada am: b97cabd363 by Przemyslaw Szczepaniak · 5 years ago
- cff95d7 Remove apex_key_file by Jiyong Park · 5 years ago
- d385346 Merge "NNAPI property to disable extensions use on GSI/AOSP product partition." by Przemyslaw Szczepaniak · 5 years ago
- 3d23317 Merge "Allow execmod for apps with targetSdkVersion=26-28" am: 61f28b33a4 am: 7bc1740052 by Jeff Vander Stoep · 5 years ago
- c9aba12 Allow execmod for apps with targetSdkVersion=26-28 by Jeff Vander Stoep · 5 years ago
- 62a22ce NNAPI property to disable extensions use on GSI/AOSP product partition. by Przemyslaw Szczepaniak · 5 years ago
- d8790b6 wifi: Add a new property to indicate active wifi iface by Roshan Pius · 5 years ago
- 7703c27 Merge "revert ipmemorystore selinux policy." am: f99aa3cb66 am: a2d7ab7f4b by Xiao Ma · 5 years ago
- f99aa3c Merge "revert ipmemorystore selinux policy." by Xiao Ma · 5 years ago
- b9ac23f Merge "sepolicy: allow init to tune f2fs" am: 6273b696eb am: a3602ee5ec by Jaegeuk Kim · 5 years ago
- 6273b69 Merge "sepolicy: allow init to tune f2fs" by Treehugger Robot · 5 years ago
- e2876a3 revert ipmemorystore selinux policy. by Xiao Ma · 5 years ago
- 51d9f63 Merge " Allow radio server to client binder callback" am: aed7273584 am: 827f3ac470 by Dan Harms · 5 years ago