Gitiles
Code Review Sign In
gerrit.omnirom.org / android_system_sepolicy / 4c6586817a538a7a51cabdbf9ab8789722ca482b
  1. 4c65868 sepolicy for SE HAL by Steven Moreland · 2 years, 10 months ago
  2. 080c579 Move get_prop rules from public/app.te to private/app.te by Sandro · 2 years, 10 months ago
  3. 8a909eb Merge "Add NTFS support in sepolicy." by Alfred Piccioni · 2 years, 10 months ago
  4. b888a09 Merge "remount: Allow 'shell' to run 'remount_exec' domain" by Yi-yo Chiang · 2 years, 10 months ago
  5. f12e949 Merge "Use EXCEPTION_NO_FUZZER as default in fuzzer bindings" by Steven Moreland · 2 years, 10 months ago
  6. 63f8d96 Merge "sepolicy: Allow fd propagation from camera to display" by Treehugger Robot · 2 years, 10 months ago
  7. 704df9c Use EXCEPTION_NO_FUZZER as default in fuzzer bindings by Pawan Wagh · 2 years, 10 months ago
  8. 2a71988 Merge "Limit special file permissions to the keymint server domain" by Seth Moore · 2 years, 10 months ago
  9. 3e1dc57 Add NTFS support in sepolicy. by Alfred Piccioni · 2 years, 10 months ago
  10. 970cfa5 Limit special file permissions to the keymint server domain by Seth Moore · 2 years, 10 months ago
  11. e5ff93d Merge "Adding trusty-confirmationui service fuzzer binding." by Steven Moreland · 2 years, 10 months ago
  12. 2c818d9 Merge "Revert "Allow vendors to set remote_prov_prop properties"" by Andrew Scull · 2 years, 10 months ago
  13. 7b98800 Merge "Allow system_server to measure fs-verity" by Treehugger Robot · 2 years, 10 months ago
  14. 686d779 remount: Allow 'shell' to run 'remount_exec' domain by Yi-Yo Chiang · 2 years, 10 months ago
  15. 2b4bcf7 Allow system_server to measure fs-verity by Seigo Nonaka · 2 years, 10 months ago
  16. ed5ecbb sepolicy: Allow fd propagation from camera to display by Syed Haq · 3 years, 3 months ago
  17. edba76d Revert "Allow vendors to set remote_prov_prop properties" by Andrew Scull · 2 years, 10 months ago
  18. 803f4e8 Add bluetooth disable enhanced SCO connection by Katherine Lai · 2 years, 10 months ago
  19. c347dc2 Merge "Allow vendors to set remote_prov_prop properties" by Andrew Scull · 2 years, 10 months ago
  20. a87c7be Allow vendors to set remote_prov_prop properties by Andrew Scull · 2 years, 10 months ago
  21. 7bff1e5 Merge "Don't allow payload to connect to host" by Treehugger Robot · 2 years, 10 months ago
  22. 8718b20 Merge "Grant dumpstate access to update engine prefs" by Treehugger Robot · 2 years, 10 months ago
  23. 0596a47 Grant dumpstate access to update engine prefs by Thiébaud Weksteen · 2 years, 10 months ago
  24. e6a43ec Merge "Add selinux rules for android.hardware.usb.gadget.IUsbGadget AIDL migration" by Treehugger Robot · 2 years, 10 months ago
  25. fc1463c Add selinux rules for android.hardware.usb.gadget.IUsbGadget AIDL migration by Ricky Niu · 3 years ago
  26. 685cc43 Merge "Ignore access to /proc/zoneinfo for apps" by Thiébaud Weksteen · 2 years, 11 months ago
  27. c69ad27 Fix VS denials on fifo_file by Alan Stokes · 2 years, 11 months ago
  28. 960e186 Don't allow payload to connect to host by Alan Stokes · 2 years, 11 months ago
  29. d601699 Ignore access to /proc/zoneinfo for apps by Thiébaud Weksteen · 2 years, 11 months ago
  30. b65de6e Merge "Add odm_service_contexts module" by Treehugger Robot · 2 years, 11 months ago
  31. f9fed01 Adding trusty-confirmationui service fuzzer binding. by Rajesh Nyamagoud · 2 years, 11 months ago
  32. b7e21bc Merge "Add SeLinux policy for WiFi Vendor HAL AIDL service." by Gabriel Biren · 2 years, 11 months ago
  33. 0c3f615 Merge "Allow CAS AIDL sample HAL" by Henry Fang · 2 years, 11 months ago
  34. 1b89f63 Merge "Update SELinux policy to allow artd to perform secondary dex compilation" by Jiakai Zhang · 2 years, 11 months ago
  35. 6a80e5c Merge "Allow priv apps to use virtualizationservice" by Treehugger Robot · 2 years, 11 months ago
  36. dd32f3b Merge "Switch to tombstoned.microdroid" by Nikita Ioffe · 2 years, 11 months ago
  37. 878ac54 Merge "Add sepolicy for background_install_control service" by Treehugger Robot · 2 years, 11 months ago
  38. e825ad2 Add sepolicy for background_install_control service by Wenhao Wang · 2 years, 11 months ago
  39. 2ffeca7 Update SELinux policy to allow artd to perform secondary dex compilation by Jiakai Zhang · 2 years, 11 months ago
  40. d0fb527 Switch to tombstoned.microdroid by Nikita Ioffe · 2 years, 11 months ago
  41. 3060852 Allow priv apps to use virtualizationservice by Alan Stokes · 2 years, 11 months ago
  42. 3bb2033 Add odm_service_contexts module by Inseob Kim · 2 years, 11 months ago
  43. 7e70724 Merge "Add app_api_service and ephemeral_app_api to credential_service selinux policy to allow regular apps and instant apps to access credential manager Test: Built & deployed locally Bug: 253155284 Feature Bug: 241268646" by Reema Bajwa · 2 years, 11 months ago
  44. 3002f1a Merge "Add sepolicy for default Context Hub HAL access to stats service" by Arthur Ishiguro · 2 years, 11 months ago
  45. 8cd5d0b Merge changes I9deb367b,I8c88622e,I18747dc6,I4e94db4a by Treehugger Robot · 2 years, 11 months ago
  46. ca5474c Add sepolicy for default Context Hub HAL access to stats service by Arthur Ishiguro · 2 years, 11 months ago
  47. e310ef8 Add SeLinux policy for WiFi Vendor HAL AIDL service. by Gabriel Biren · 3 years, 2 months ago
  48. d151d63 Add app_api_service and ephemeral_app_api to credential_service selinux policy to allow regular apps and instant apps to access credential manager by Reema Bajwa · 2 years, 11 months ago
  49. f87eb38 Generate compat files and modules with scripts by Inseob Kim · 2 years, 11 months ago
  50. bf2a967 Fix wrongly hardcoded version by Inseob Kim · 2 years, 11 months ago
  51. 73172d8 Remove deprecated distutils dependency by Inseob Kim · 2 years, 11 months ago
  52. 0c4a3ed Remove redundant comments by Inseob Kim · 2 years, 11 months ago
  53. 4a5c2de Merge "Add policies for new services HDMI and HDMICEC" by Treehugger Robot · 2 years, 11 months ago
  54. 586703a Merge "servicemanager: kernel log perms" by Steven Moreland · 2 years, 11 months ago
  55. 5c3f315 servicemanager: kernel log perms by Steven Moreland · 3 years, 3 months ago
  56. 59f3e11 Merge "Revert "Revert "Updating exisiting fuzzers in fuzzer bindings""" by Pawan Wagh · 2 years, 11 months ago
  57. 0c00096 Merge "Add IRadioIms and IImsMedia context" by Hunsuk Choi · 2 years, 11 months ago
  58. 184064c Merge "Add selinux policy to register remote access HAL." by Treehugger Robot · 2 years, 11 months ago
  59. fe3d48f Revert "Revert "Updating exisiting fuzzers in fuzzer bindings"" by Pawan Wagh · 2 years, 11 months ago
  60. 093c870 Merge "sepolicy : check if missing dependencies are allowed" by Pawan Wagh · 2 years, 11 months ago
  61. 9833c60 Merge "Allow service managers access to apex data." by Rob Seymour · 2 years, 11 months ago
  62. 5cbe30c Allow microdroid_manager to create a ZRAM swap device by Keir Fraser · 2 years, 11 months ago
  63. 24abed2 Add IRadioIms and IImsMedia context by Hunsuk Choi · 3 years, 9 months ago
  64. c3b7489 Merge "Fix too-broad allows granted to domain" by Treehugger Robot · 2 years, 11 months ago
  65. 4e141f6 Fix too-broad allows granted to domain by Inseob Kim · 2 years, 11 months ago
  66. 54eebad sepolicy : check if missing dependencies are allowed by Pawan Wagh · 2 years, 11 months ago
  67. bacf949 Allow CAS AIDL sample HAL by Shraddha Basantwani · 3 years ago
  68. 9a8980a Merge "Add auditallow for system properties access from the sdk sandbox" by Sandro Montanari · 2 years, 11 months ago
  69. dda67f9 Merge "crosvm: socket getopt" by Steven Moreland · 2 years, 11 months ago
  70. 9f7ab3c Merge "Supress permissive audit messages post OTA reboot" by Akilesh Kailash · 2 years, 11 months ago
  71. d055352 Add auditallow for system properties access from the sdk sandbox by Sandro · 3 years ago
  72. 3ad46dc Allow reading some files in /proc by microdroid_manager by Seungjae Yoo · 3 years ago
  73. 34f6b26 crosvm: socket getopt by Steven Moreland · 2 years, 11 months ago
  74. 1044702 Supress permissive audit messages post OTA reboot by Akilesh Kailash · 3 years, 1 month ago
  75. 24b66bc Merge "Fix zipfuse race condition" by Treehugger Robot · 2 years, 11 months ago
  76. 38ff3b4 Add policies for new services HDMI and HDMICEC by Venkatarama Avadhani · 3 years ago
  77. 3ea9f16 Merge "Move DICE logic into microdroid_manager" by Andrew Scull · 2 years, 11 months ago
  78. e3245a4 Revert "Updating exisiting fuzzers in fuzzer bindings" by Nicolas Geoffray · 2 years, 11 months ago
  79. 431ef36 Merge "Updating exisiting fuzzers in fuzzer bindings" by Pawan Wagh · 2 years, 11 months ago
  80. 941ab0a Add selinux policy to register remote access HAL. by Yu Shan · 2 years, 11 months ago
  81. f38fb73 Updating exisiting fuzzers in fuzzer bindings by Pawan Wagh · 2 years, 11 months ago
  82. 6892b3f Move DICE logic into microdroid_manager by Andrew Scull · 3 years ago
  83. fb9911a Fix zipfuse race condition by Alan Stokes · 2 years, 11 months ago
  84. 34c9f94 Allow the microdroid app to use vm payload service by Alice Wang · 3 years ago
  85. 33e03e0 Merge "Update SEPolicy for Thermal AIDL" by Peiyong Lin · 2 years, 11 months ago
  86. ad58b8d Allow virtualizationservice to create and manage socket files in its data folder by Keir Fraser · 3 years, 2 months ago
  87. 4a5d0f1 Update SEPolicy for Thermal AIDL by Peiyong Lin · 3 years ago
  88. 7bc1648 Merge "Add SELinux policies for remote_key_provisioning_native namespace." by Vikram Gaur · 3 years ago
  89. 96268c6 Update sepolicy prebuilts for PRNG seeder changes. by Pete Bentley · 3 years ago
  90. 07c5387 Merge "hidl2aidl: sepolicy changes for confirmationui aidl" by Steven Moreland · 3 years ago
  91. 565653a Merge "[MTE] ignore mtectrl selinux error for device tree." by Florian Mayer · 3 years ago
  92. 09f14e9 [MTE] ignore mtectrl selinux error for device tree. by Florian Mayer · 3 years ago
  93. e1c49f5 Add SELinux policies for remote_key_provisioning_native namespace. by Vikram Gaur · 3 years ago
  94. 38292f1 Merge "sepolicy: updating error message for fuzzer bindings" by Pawan Wagh · 3 years ago
  95. b44cb47 Merge "Grant appdomain remove_name permission on user_profile_data_file." by Treehugger Robot · 3 years ago
  96. 3c614b2 Grant appdomain remove_name permission on user_profile_data_file. by Jiakai Zhang · 3 years ago
  97. f974811 Merge "Allow dumpstate to exec derive_sdk" by Treehugger Robot · 3 years ago
  98. a103fde sepolicy: updating error message for fuzzer bindings by Pawan Wagh · 3 years ago
  99. e325a7e Merge "Merge logic of DICE HAL and diced in to dice-service" by Andrew Scull · 3 years ago
  100. 098e909 Allow dumpstate to exec derive_sdk by Mårten Kongstad · 3 years ago