Gitiles
Code Review
Sign In
gerrit.omnirom.org
/
android_system_sepolicy
/
2d5f2e242ddd824cd0c7cc335c54906b05462bad
/
private
2d5f2e2
Enable Kernel log from linkerconfig
by Kiyoung Kim
· 6 years ago
9859aa0
Merge "Add selinux labels for /metadata/ota."
by David Anderson
· 6 years ago
c1bc873
Add selinux labels for /metadata/ota.
by David Anderson
· 6 years ago
3aa1c17
sepolicy: Permission changes for new wifi mainline module
by Roshan Pius
· 6 years ago
2d16fef
Merge "Revert "Track usbd SELinux denial.""
by Pirama Arumuga Nainar
· 6 years ago
8231ac8
Merge "Add linker config generator and output file to sepolicy"
by Kiyoung Kim
· 6 years ago
4c52ced
Merge "Allow dumpstate to read /data/misc/logd always"
by Tom Cherry
· 6 years ago
98e320b
Revert "Track usbd SELinux denial."
by Pirama Arumuga Nainar
· 6 years ago
affa6f3
Add linker config generator and output file to sepolicy
by Kiyoung Kim
· 6 years ago
243ef72
Rename service from ircs to ircsmessage
by Brad Ebinger
· 6 years ago
25870c0
Merge "Give surfaceflinger permission to write perfetto traces"
by Mikael Pessa
· 6 years ago
c97ea91
Give surfaceflinger permission to write perfetto traces
by Mikael Pessa
· 6 years ago
87b4b81
Rename product_services to system_ext
by Justin Yun
· 6 years ago
77f8d4f
Allow dumpstate to read /data/misc/logd always
by Tom Cherry
· 6 years ago
18898ab
Merge "Sepolicy for added SystemSuspend HAL to ANR list."
by Treehugger Robot
· 6 years ago
56d34f7
Merge "Allow perfetto to access gpu_frequency tracepoint in user"
by Sidath Senanayake
· 6 years ago
113d10b
Sepolicy for added SystemSuspend HAL to ANR list.
by Kalesh Singh
· 6 years ago
6eaf8a2
Merge "Revert "Revert "Allow rule to let settings access apex files"""
by Andrew Sapperstein
· 6 years ago
544a9b1
Revert "Revert "Allow rule to let settings access apex files""
by Andrew Sapperstein
· 6 years ago
71e1c36
Merge "Revert "Allow rule to let settings access apex files""
by Cosmo Hsieh
· 6 years ago
e47d236
Revert "Allow rule to let settings access apex files"
by Cosmo Hsieh
· 6 years ago
bfe6fde
Merge "Allow rule to let settings access apex files"
by Andrew Sapperstein
· 6 years ago
0c0ba46
Allow rule to let settings access apex files
by Todd Kennedy
· 6 years ago
4b25c0a
Allow perfetto to access gpu_frequency tracepoint in user
by Sidath Senanayake
· 6 years ago
9cc8532
Merge "atrace: allow tracing of vibrator hal"
by Treehugger Robot
· 6 years ago
946dd43
Merge "Use a property instead of file to communicate cold boot done"
by Tom Cherry
· 6 years ago
828722b
Merge "Add power stats HAL to ANR list"
by Treehugger Robot
· 6 years ago
2a67e94
Use a property instead of file to communicate cold boot done
by Tom Cherry
· 6 years ago
0bdb4f2
Merge "Add rules to dump hal traces"
by Kevin Chyn
· 6 years ago
a18c5bd
Add rules to dump hal traces
by Kevin Chyn
· 6 years ago
f4362c0
Merge "Revert "Allow hal_face to write to /data/vendor/camera_calibration/*.""
by Treehugger Robot
· 6 years ago
405549a
Add power stats HAL to ANR list
by Benjamin Schwartz
· 6 years ago
ebcc082
Revert "Allow hal_face to write to /data/vendor/camera_calibration/*."
by Matthias Kramm
· 6 years ago
a999e39
Add persist.sys.theme.
by Tao Bao
· 6 years ago
3a9a6f5
Merge "Allow zygote to create fds and map executable."
by Nicolas Geoffray
· 6 years ago
9faeec7
Merge "Allow hal_face to write to /data/vendor/camera_calibration/*."
by Matthias Kramm
· 6 years ago
f77e8c1
Allow zygote to create fds and map executable.
by Nicolas Geoffray
· 6 years ago
1b62e7f
atrace: allow tracing of vibrator hal
by Harpreet "Eli" Sangha
· 6 years ago
1eb45b5
Merge "In native coverage builds, allow all domains to access /data/misc/trace"
by Treehugger Robot
· 6 years ago
ce9c0c5
In native coverage builds, allow all domains to access /data/misc/trace
by Pirama Arumuga Nainar
· 6 years ago
3a44b17
Allow hal_face to write to /data/vendor/camera_calibration/*.
by Matthias Kramm
· 6 years ago
6e823dd
Allow apexd to stop itself
by Jiyong Park
· 6 years ago
4afae94
Merge "Allow gsid to read dm nodes from sysfs."
by David Anderson
· 6 years ago
ab1e359
Merge "Add core domain attribute to perfprofd for all targets"
by Treehugger Robot
· 6 years ago
95fbedd
Allow gsid to read dm nodes from sysfs.
by David Anderson
· 6 years ago
ce3a33f
userdebug: support perfetto traces as a section in incident reports
by Ryan Savitski
· 6 years ago
1fc5708
Add core domain attribute to perfprofd for all targets
by Kalesh Singh
· 6 years ago
848075e
Merge "Clean sepolicy of unused netd_socket"
by Luke Huang
· 6 years ago
50aa029
Reland "Add 29.0 mapping files"
by Tri Vo
· 6 years ago
3a97f5a
Clean sepolicy of unused netd_socket
by Luke Huang
· 6 years ago
b374835
Merge "Sepolicy for IAshmem HIDL interface"
by Treehugger Robot
· 6 years ago
46303aa
Sepolicy for IAshmem HIDL interface
by Kalesh Singh
· 6 years ago
04d2392
Don't use apexd when TARGET_FLATTEN_APEX == true
by Jiyong Park
· 6 years ago
0b1094c
Allow init to mkdir inside /data/gsi.
by David Anderson
· 6 years ago
7ca6fc8
Merge "Allows StatsCompanionService to pipe data to statsd."
by Treehugger Robot
· 6 years ago
febfa8f
Allows StatsCompanionService to pipe data to statsd.
by Max Dashouk
· 6 years ago
ccf8af8
Merge "Add vendor_misc_writer."
by Tao Bao
· 6 years ago
42c05cf
Add vendor_misc_writer.
by Tao Bao
· 6 years ago
87b5e75
Relabel /proc/kpageflags and grant access to heapprofd.
by Florian Mayer
· 6 years ago
19459a3
atrace: debug: allow notifying camera HAL of a change in sysprops
by Ryan Savitski
· 6 years ago
232295e
atrace.te: allow notifying cameraserver of a change in sysprops
by Ryan Savitski
· 6 years ago
62f0e4f
Merge "Dontaudit unneeded denials."
by Treehugger Robot
· 6 years ago
44328c0
sepolicy - move public clatd to private
by Maciej Żenczykowski
· 6 years ago
8f5436a
Merge "Allow system server to lock system files."
by Nicolas Geoffray
· 6 years ago
5d5ac9a
Dontaudit unneeded denials.
by Joel Galenson
· 6 years ago
0051c93
Allow dumpstate to dumpsys gpu
by Yiwei Zhang
· 6 years ago
db3fde0
Allow system server to lock system files.
by Nicolas Geoffray
· 6 years ago
e319c03
priv_app: suppress denials to proc_net
by Tri Vo
· 6 years ago
38bbf30
Merge "Add mechanism for granting permissions to old vendor images"
by Jeffrey Vander Stoep
· 6 years ago
564e292
Add mechanism for granting permissions to old vendor images
by Jeff Vander Stoep
· 6 years ago
487fcb8
selinux - netd - tighten down bpf policy
by Maciej Żenczykowski
· 6 years ago
44b0efb
Add TODOs
by Nick Kralevich
· 6 years ago
1415c2d
Merge "Allow psi monitor users to setched kernel threads"
by Treehugger Robot
· 6 years ago
e95d8e9
Allow psi monitor users to setched kernel threads
by Wei Wang
· 6 years ago
4eb1a20
Merge "Sepolicy: add dynamic_system_prop"
by Treehugger Robot
· 6 years ago
6acaea4
Merge "Use explicit whitelist for HIDL app neverallows."
by Steven Moreland
· 6 years ago
565384d
Sepolicy: add dynamic_system_prop
by Hung-ying Tyan
· 6 years ago
68b6f80
Use explicit whitelist for HIDL app neverallows.
by Steven Moreland
· 6 years ago
3cfad10
lmkd: grant access to /proc/lowmemorykiller
by Jim Blackler
· 6 years ago
75b2538
Merge "Sepolicy for netutils_wrapper to use binder call"
by Luke Huang
· 6 years ago
ea61d19
Adding vendor_apex_file for /vendor/apex
by Jooyung Han
· 6 years ago
a3c5322
Merge "Remove obsolete denials tracking."
by Treehugger Robot
· 6 years ago
6cf01b3
Merge "Treble-ize sepolicy for fwk HIDL services."
by Tri Vo
· 6 years ago
1d34b8c
Treble-ize sepolicy for fwk HIDL services.
by Tri Vo
· 6 years ago
40a71c6
Merge "add mediaswcodec to watchdog and dumpstate"
by Treehugger Robot
· 6 years ago
63f8d4f
Merge "Adding /debug_ramdisk mount point"
by Treehugger Robot
· 6 years ago
ad3621a
add mediaswcodec to watchdog and dumpstate
by Chong Zhang
· 6 years ago
5e0b83c
Remove obsolete denials tracking.
by Sudheer Shanka
· 6 years ago
2e86fa0
Adding /debug_ramdisk mount point
by Bowgo Tsai
· 6 years ago
6e4d217
Merge "Allow system_server to schedule mediaswcodec"
by Treehugger Robot
· 6 years ago
1054b44
Merge "Allow zygote to scan static overlays on /oem"
by Treehugger Robot
· 6 years ago
042f844
Allow system_server to schedule mediaswcodec
by Chong Zhang
· 6 years ago
ef1a64e
Allow zygote to scan static overlays on /oem
by Ryan Mitchell
· 6 years ago
795add5
Remove isV2App
by Nick Kralevich
· 6 years ago
3cba24a
Merge "Move pf_key socket creation permission to netd"
by Treehugger Robot
· 6 years ago
bf7ae04
Merge "Deprecate /mnt/sdcard -> /storage/self/primary symlink."
by Treehugger Robot
· 6 years ago
addc1c2
Merge "Allow webview_zygote to read the /data/user/0 symlink."
by Treehugger Robot
· 6 years ago
add6473
sepolicy: proper labelling of /sys/devices/virtual/net/...
by Maciej Żenczykowski
· 6 years ago
8eff3e2
Deprecate /mnt/sdcard -> /storage/self/primary symlink.
by Tri Vo
· 6 years ago
8a5539b
Move pf_key socket creation permission to netd
by Chenbo Feng
· 7 years ago
Next »