Gitiles
Code Review Sign In
gerrit.omnirom.org / android_system_sepolicy / 2d6ee0286e2a0262ecfdd8e4a45484ddbc8a1a63 / private
  1. 2d6ee02 Allow otapreopt_chroot to use stdin and stdout pipes. by Martin Stjernholm · 2 years, 1 month ago
  2. 9d96576 Merge "add sepolicy rules for OT daemon binder service" into main by Kangping Dong · 2 years, 1 month ago
  3. 0b3e8c6 add sepolicy rules for OT daemon binder service by Kangping Dong · 2 years, 10 months ago
  4. 0e7babe Merge "Give vold permission to wipe a block device" into main by Kelvin Zhang · 2 years, 1 month ago
  5. 2b41362 Give vold permission to wipe a block device by Kelvin Zhang · 2 years, 2 months ago
  6. 825056d Add permission for VFIO device binding by Inseob Kim · 2 years, 1 month ago
  7. e9e32f5 Merge "Revert "Add /bootstrap-apex"" into main by Jooyung Han · 2 years, 1 month ago
  8. aca2918 Revert "Add /bootstrap-apex" by Jooyung Han · 2 years, 1 month ago
  9. 8b295dd Merge "Add /bootstrap-apex" into main by Jooyung Han · 2 years, 1 month ago
  10. db1535a Merge "Label /data/misc/bootanim with bootanim_data_file." into main by Lee George Thomas · 2 years, 1 month ago
  11. dfe3906 Merge "Revert "Remove fsverity_init SELinux rules"" into main by Eric Biggers · 2 years, 1 month ago
  12. e850e98 Merge "Add dontaudit for rs fd usage" into main by Alfred Piccioni · 2 years, 1 month ago
  13. bb59231 Merge "Policy for virtual_camera" into main by Vadim Caen · 2 years, 1 month ago
  14. d0042c6 Merge "SELinux allow listing core_experiements_team_internal namespace" into main by Dennis Shen · 2 years, 1 month ago
  15. 60b8c39 Merge "Update seapp_contexts precedence documentation" into main by Inseob Kim · 2 years, 1 month ago
  16. 7bb1b5d Update seapp_contexts precedence documentation by Inseob Kim · 2 years, 2 months ago
  17. dcb9c2b Add dontaudit for rs fd usage by Alfred Piccioni · 2 years, 1 month ago
  18. 486fa9f Revert "Remove fsverity_init SELinux rules" by Yunkai Lim · 2 years, 1 month ago
  19. 407e1cf Label /data/misc/bootanim with bootanim_data_file. by Lee George Thomas · 2 years, 1 month ago
  20. 3a57535 Merge "Remove fsverity_init SELinux rules" into main by Eric Biggers · 2 years, 1 month ago
  21. 3b8c57f SELinux allow listing core_experiements_team_internal namespace by Dennis Shen · 2 years, 1 month ago
  22. d64cf75 Policy for virtual_camera by Vadim Caen · 2 years, 10 months ago
  23. 9f8e315 Merge "Allow dex2oat access to symlinks in APEXes to find DCLA libs." into main by Treehugger Robot · 2 years, 1 month ago
  24. 502a036 Allow dex2oat access to symlinks in APEXes to find DCLA libs. by Martin Stjernholm · 2 years, 1 month ago
  25. 1c846df Add /bootstrap-apex by Jooyung Han · 2 years, 2 months ago
  26. 1d68b1b Merge "Add SELinux config for new SensorFusion property" into main by Pontus Lidman · 2 years, 2 months ago
  27. 0af0e71 Add SELinux config for new SensorFusion property by Pontus Lidman · 2 years, 2 months ago
  28. 306f510 Remove fsverity_init SELinux rules by Eric Biggers · 2 years, 2 months ago
  29. ae8d169 Merge "Add SELinux context for a new lmk system property" into main by Lee George Thomas · 2 years, 2 months ago
  30. d3f8efa Add SELinux context for a new lmk system property by Lee George Thomas · 2 years, 2 months ago
  31. f086648 Merge "Allow lpdumpd to read Virtual A/B diagnostics." into main by David Anderson · 2 years, 2 months ago
  32. 9d6ce19 Fix seapp_contexts documentation by Inseob Kim · 2 years, 2 months ago
  33. e6ad1f2 Allow lpdumpd to read Virtual A/B diagnostics. by David Anderson · 2 years, 2 months ago
  34. 7788174 Merge "webview: add cgroup dir create permission" by Treehugger Robot · 2 years, 2 months ago
  35. b2d1fbb Add sepolicy rules for Thread Network HAL by Zhanglong Xia · 2 years, 3 months ago
  36. d18e345 webview: add cgroup dir create permission by Wanhong Jiang · 2 years, 2 months ago
  37. bc79260 Merge "Remove deprecated enable_rkpd property" by Max Bires · 2 years, 2 months ago
  38. 665cad0 SE Linux perimissions for Feature Flags Service by Dave Mankoff · 2 years, 2 months ago
  39. 78fd639 Add 34.0 mapping files by Inseob Kim · 2 years, 3 months ago
  40. a574060 Add 2 new system properties for Quick Start by Jay Civelli · 2 years, 5 months ago
  41. 8a74ff2 Remove deprecated enable_rkpd property by Max Bires · 2 years, 3 months ago
  42. 8dd58bf Allow mediatuner to get tuner.server.enable by Hongguang Chen · 2 years, 3 months ago
  43. 612ab85 Force HALs to explicitly enable legacy method for clearing buffer caches by Brian Lindahl · 2 years, 3 months ago
  44. c01d3fb Merge "Allow app_zygote to map memfd backed memeory as PROT_EXEC" by Dimitry Ivanov · 2 years, 3 months ago
  45. 97f7775 Allow app_zygote to map memfd backed memeory as PROT_EXEC by dimitry · 2 years, 3 months ago
  46. 06d79cd Merge "Allow app_process to link /data/asan/system_ext/lib/*" by Treehugger Robot · 2 years, 3 months ago
  47. 550f10e Merge "Allow VMs to log to shell pts" by Treehugger Robot · 2 years, 3 months ago
  48. 0179ede Allow app_process to link /data/asan/system_ext/lib/* by Weiwei.Zhang · 2 years, 3 months ago
  49. 7c4f8a8 Allow vendor_overlay_file from vendor apex by Jooyung Han · 2 years, 3 months ago
  50. 9f254ba Merge "Allow app_zygote to open vendor_overlay_file from vendor apex" by Treehugger Robot · 2 years, 3 months ago
  51. f108164 Allow app_zygote to open vendor_overlay_file from vendor apex by Jooyung Han · 2 years, 3 months ago
  52. b61d353 Merge "atrace: don't audit debugfs access" by Treehugger Robot · 2 years, 3 months ago
  53. 2435751 Merge "Switch rkpd to levelFrom=all" by Treehugger Robot · 2 years, 3 months ago
  54. 6d019be Allow VMs to log to shell pts by Alan Stokes · 2 years, 3 months ago
  55. aa83af5 Merge "add sepolicy rules for Thread network" by Kangping Dong · 2 years, 3 months ago
  56. 12de184 Switch rkpd to levelFrom=all by Alan Stokes · 2 years, 3 months ago
  57. f91152a Allow webview_zygote to "search" vendor apex dirs by Jooyung Han · 2 years, 3 months ago
  58. 49b8184 Merge "persist.sysui.notification.ranking_update_ashmem" by Alexander Roederer · 2 years, 3 months ago
  59. 584a862 persist.sysui.notification.ranking_update_ashmem by Alexander Roederer · 2 years, 3 months ago
  60. 5fdc6bf atrace: don't audit debugfs access by Steven Moreland · 2 years, 3 months ago
  61. 07429e3 add sepolicy rules for Thread network by Yakun Xu · 2 years, 3 months ago
  62. b6211b8 Introduce vendor_apex_metadata_file by Jooyung Han · 2 years, 3 months ago
  63. 30c25de Merge changes from topic "artsrv-experiment-flag" by Treehugger Robot · 2 years, 3 months ago
  64. 46288c6 Merge "strengthen app_data_file neverallows" by Steven Moreland · 2 years, 3 months ago
  65. cd69d35 Merge "Add sepolicy for ro.build.ab_update.ab_ota_partitions" by Treehugger Robot · 2 years, 3 months ago
  66. 8a676d0 Merge "Set up sepolicy for drmserver64" by Treehugger Robot · 2 years, 3 months ago
  67. 60456bd Add sepolicy for ro.build.ab_update.ab_ota_partitions by Kelvin Zhang · 2 years, 4 months ago
  68. 4f36bd1 Merge "strengthen debugfs neverallows" by Treehugger Robot · 2 years, 4 months ago
  69. f21abea Merge "Revert "Fix selinux denial for setupwizard_esim_prop"" by Jin Jeong · 2 years, 4 months ago
  70. d7558db Merge "Revert "Add setupwizard_esim_prop to access ro.setupwizard.esim_cid_ignore"" by Jin Jeong · 2 years, 4 months ago
  71. 0a9cd6f Revert "Fix selinux denial for setupwizard_esim_prop" by Jin Jeong · 2 years, 4 months ago
  72. f3722d5 strengthen app_data_file neverallows by Steven Moreland · 2 years, 4 months ago
  73. e1b3e92 Merge "strengthen vendor_file neverallows" by Steven Moreland · 2 years, 4 months ago
  74. b56bf68 strengthen debugfs neverallows by Steven Moreland · 2 years, 4 months ago
  75. b9238b4 Merge "Allow mediaserver access to media_native flag namespace" by Treehugger Robot · 2 years, 4 months ago
  76. 806c625 Allow mediaserver access to media_native flag namespace by Wonsik Kim · 2 years, 6 months ago
  77. 2ecabd4 Merge "Revert "Add "ro.hardware.egl_legacy" for ANGLE system driver"" by Peiyong Lin · 2 years, 4 months ago
  78. 8fe9ad2 Revert "Add "ro.hardware.egl_legacy" for ANGLE system driver" by Peiyong Lin · 2 years, 4 months ago
  79. 07e0430 strengthen vendor_file neverallows by Steven Moreland · 2 years, 4 months ago
  80. 9ea325f Set up sepolicy for drmserver64 by SzuWei Lin · 2 years, 4 months ago
  81. 612011b Merge "Relax sepolicy for device_config_runtime_native_*." by Treehugger Robot · 2 years, 4 months ago
  82. a9eaec1 Give art_boot explicit access to experiment flags. by Martin Stjernholm · 2 years, 4 months ago
  83. e1ac267 Allow the ART boot oneshot service to configure ART config properties. by Martin Stjernholm · 2 years, 4 months ago
  84. 9bd3eed Revert "Add setupwizard_esim_prop to access ro.setupwizard.esim_cid_ignore" by Jin Jeong · 2 years, 4 months ago
  85. bd2efac Merge "Allow apps and SDK sandbox to access each others' open FDs" by Gavin Corkery · 2 years, 4 months ago
  86. d4d3c01 Allow apps and SDK sandbox to access each others' open FDs by Gavin Corkery · 2 years, 4 months ago
  87. 4ccaf11 Merge "Grant system_server the permission to create its own profile." by Jiakai Zhang · 2 years, 4 months ago
  88. 1c18e1a Merge "Add canary restrictions for sdk_sandbox" by Mugdha Lakhani · 2 years, 4 months ago
  89. bccfd80 Grant system_server the permission to create its own profile. by Jiakai Zhang · 2 years, 4 months ago
  90. b5a60db Merge "Allow camera service to access "ro.camera.disableJpegR" property" by Treehugger Robot · 2 years, 4 months ago
  91. 49075f9 Add canary restrictions for sdk_sandbox by Mugdha Lakhani · 2 years, 4 months ago
  92. b203f56 Allow camera service to access "ro.camera.disableJpegR" property by Emilian Peev · 2 years, 5 months ago
  93. 50ad933 Introduce sdk_sandbox_next by Mugdha Lakhani · 2 years, 4 months ago
  94. 2ae45c5 Create sdk_sandbox_all. by Mugdha Lakhani · 2 years, 4 months ago
  95. 1bff173 Merge "Allow mediaprovider and mediaserver to read sdk_sandbox_data_file" by Gavin Corkery · 2 years, 4 months ago
  96. b86b8e2 Merge "Relax sdk sandbox sepolicy." by Mugdha Lakhani · 2 years, 4 months ago
  97. 10c06ce Merge "Allow graphics_config_writable_prop to be modified." by Peiyong Lin · 2 years, 4 months ago
  98. 837b232 Relax sdk sandbox sepolicy. by Mugdha Lakhani · 2 years, 4 months ago
  99. a2e6584 Allow mediaprovider and mediaserver to read sdk_sandbox_data_file by Gavin Corkery · 2 years, 6 months ago
  100. 54229d8 Allow graphics_config_writable_prop to be modified. by Peiyong Lin · 2 years, 4 months ago