Gitiles
Code Review Sign In
gerrit.omnirom.org / android_system_sepolicy / 9ed8d3c9be05f30128638200778cfa37fdba0477 / private
  1. 9ed8d3c Allow system_server to connect to artd. by Jiakai Zhang · 3 years, 3 months ago
  2. c8d2d1d Merge "Remove key migration related changes" by John Wu · 3 years, 3 months ago
  3. e7d1f32 Merge "Allow system_server to read io and cpu pressure data Test: tested on device Bug: b/233036368" by Mohamad Mahmoud · 3 years, 3 months ago
  4. ab73c8f Merge "Allow Bluetooth stack to read security log sysprop" by Rubin Xu · 3 years, 3 months ago
  5. f2b91a0 Merge "Add xfrm netlink permissions for system server" by Treehugger Robot · 3 years, 4 months ago
  6. b25b4bf Add xfrm netlink permissions for system server by Benedict Wong · 3 years, 4 months ago
  7. c49d582 Allow system_server to read io and cpu pressure data by Mohamad Mahmoud · 3 years, 4 months ago
  8. 26750b9 Merge "Allow zygote to relabel sdk_sandbox_system_data_file" by Sanjana Sunil · 3 years, 4 months ago
  9. 488da4d Merge "Remove "@1.0-" from android.system.suspend service's name" by Treehugger Robot · 3 years, 4 months ago
  10. 5630163 Allow zygote to relabel sdk_sandbox_system_data_file by Sanjana Sunil · 3 years, 4 months ago
  11. 61bd670 Merge "Create a separate label for sandbox root directory" by Samiul Islam · 3 years, 4 months ago
  12. 9b12638 Merge "Ignore access from system_app to sysfs_zram" by Thiébaud Weksteen · 3 years, 4 months ago
  13. 36c1ef6 sysfs_fs_f2fs for zygote. by Nicolas Geoffray · 3 years, 4 months ago
  14. d2ffd35 Create a separate label for sandbox root directory by Mohammad Samiul Islam · 3 years, 4 months ago
  15. f6fefa9 Merge "Iorapd and friends have been removed" by Treehugger Robot · 3 years, 4 months ago
  16. bcc7cc1 Ignore access from system_app to sysfs_zram by Thiébaud Weksteen · 3 years, 4 months ago
  17. cabed18 Remove key migration related changes by John Wu · 3 years, 6 months ago
  18. 6b2fefb Merge "Enforce MAC address restrictions for priv apps." by Bram Bonné · 3 years, 4 months ago
  19. b07c12c Iorapd and friends have been removed by Jeff Vander Stoep · 3 years, 4 months ago
  20. 4e28172 Merge "Revert "crosvm: netlink perms for acpi"" by Steven Moreland · 3 years, 4 months ago
  21. af609b2 Enforce MAC address restrictions for priv apps. by Bram Bonne · 3 years, 4 months ago
  22. e14ad82 Merge "Update sepolicy prebuilts to sync vendor_system_native prop changes" by Richard Chang · 3 years, 4 months ago
  23. 0e15d77 Revert "crosvm: netlink perms for acpi" by Steven Moreland · 3 years, 4 months ago
  24. 9776e81 Remove "@1.0-" from android.system.suspend service's name by Frederick Mayle · 3 years, 4 months ago
  25. 3fda68d Merge "Add sysprops for virtual Fingerprint/Face HAL" by Joshua Mccloskey · 3 years, 4 months ago
  26. 50dbf2c Update sepolicy prebuilts to sync vendor_system_native prop changes by Richard Chang · 3 years, 4 months ago
  27. f42a5c9 Add sysprops for virtual Fingerprint/Face HAL by Joshua McCloskey · 3 years, 4 months ago
  28. 7fdc84a Merge "Remove init's write access to /data/user and /data/media" by Eric Biggers · 3 years, 4 months ago
  29. a274858 Allow Bluetooth stack to read security log sysprop by Rubin Xu · 3 years, 4 months ago
  30. 17369be Remove init's write access to /data/user and /data/media by Eric Biggers · 3 years, 4 months ago
  31. 3423bc4 Allow composd to pass some system properties to CompOS by Victor Hsieh · 3 years, 4 months ago
  32. ce2b6da Allow app to write to sdk_sandbox by Shiwangi Shah · 3 years, 4 months ago
  33. b10cffe Merge "Restrict creating per-user encrypted directories" by Eric Biggers · 3 years, 4 months ago
  34. 9a59923 Restrict creating per-user encrypted directories by Eric Biggers · 3 years, 4 months ago
  35. 0105944 Allow system_server to read apk root hash. by Alex Buynytskyy · 3 years, 4 months ago
  36. cec541e Merge "allow rename fscklogs" by Jaegeuk Kim · 3 years, 4 months ago
  37. c42d7af Merge "Allow crosvm to write shell_data_file" by Treehugger Robot · 3 years, 4 months ago
  38. 0a6c81f Merge "Add access to hardware_properties and linker" by Shiwangi Shah · 3 years, 4 months ago
  39. ad4a63a Spatial audio: add property for headtracking by Jean-Michel Trivi · 3 years, 4 months ago
  40. 2eab15e Allow crosvm to write shell_data_file by Jiyong Park · 3 years, 4 months ago
  41. 25a665d Merge "Allow deleting old virtualization files" by Treehugger Robot · 3 years, 4 months ago
  42. 1d79fd5 Merge "[MS82.3] Add sepolicy to access connectivity apex directory" by Treehugger Robot · 3 years, 4 months ago
  43. 0b25ca4 Merge "Allow vendor services to access vendor_system_native_prop" by Richard Chang · 3 years, 4 months ago
  44. 8a5c159 Allow untrusted app to use virtualizationservice - even on user builds by Jiyong Park · 3 years, 4 months ago
  45. af8fac1 Allow vendor services to access vendor_system_native_prop by Richard Chang · 3 years, 4 months ago
  46. 4410dab Merge changes from topic "33.0_sepolicy_mapping_file" by Treehugger Robot · 3 years, 4 months ago
  47. 90b7070 allow rename fscklogs by Jaegeuk Kim · 3 years, 4 months ago
  48. fe1ad47 Merge "Add "ro.hardware.egl_legacy" for ANGLE system driver" by Treehugger Robot · 3 years, 4 months ago
  49. 4ae0511 Add 33.0 mapping files by Inseob Kim · 3 years, 4 months ago
  50. 92251f5 Add "ro.hardware.egl_legacy" for ANGLE system driver by Ian Elliott · 3 years, 4 months ago
  51. d5af7b7 Allow vehicle_binding_util to access AIDL VHAL. by Yu Shan · 3 years, 4 months ago
  52. c88f0ef Allow deleting old virtualization files by Alan Stokes · 3 years, 4 months ago
  53. a77c296 Merge "zygote.te: clean up and tighten app data isolation rules" by Eric Biggers · 3 years, 4 months ago
  54. 4fe6bd1 Merge "Revert "Fix bootchart on android12"" by Treehugger Robot · 3 years, 4 months ago
  55. 8594b15 Merge "Prevent sandbox executing from sdk_sandbox_data_file" by Treehugger Robot · 3 years, 4 months ago
  56. 9f07ea5 zygote.te: clean up and tighten app data isolation rules by Eric Biggers · 3 years, 4 months ago
  57. 13bdca2 Add access to hardware_properties and linker by Shiwangi Shah · 3 years, 4 months ago
  58. bb270f6 Merge "Add ephemeral service access to sdk sandbox" by Shiwangi Shah · 3 years, 4 months ago
  59. 48b2b33 Add ephemeral service access to sdk sandbox by Shiwangi Shah · 3 years, 5 months ago
  60. 9f3d766 Merge "Update LE Audio profile names to be in line with spec and implementation" by Sal Savage · 3 years, 4 months ago
  61. 613519f Revert "Fix bootchart on android12" by Jooyung Han · 3 years, 4 months ago
  62. c43dbf8 [MS82.3] Add sepolicy to access connectivity apex directory by Junyu Lai · 3 years, 5 months ago
  63. 078b43c Prevent sandbox executing from sdk_sandbox_data_file by Bram Bonne · 3 years, 4 months ago
  64. a529796 Update LE Audio profile names to be in line with spec and implementation by Sal Savage · 3 years, 5 months ago
  65. 2f666d5 Merge "Add vibrator and power HALs to Watchdog dumps" by Treehugger Robot · 3 years, 5 months ago
  66. c696791 Merge "Allow apps to read system_user_mode_emulation_prop." by Felipe Leme · 3 years, 5 months ago
  67. d5d2f60 Add vibrator and power HALs to Watchdog dumps by Michael Wright · 3 years, 5 months ago
  68. b85242c Allow apps to read system_user_mode_emulation_prop. by Felipe Leme · 3 years, 5 months ago
  69. 197b314 Add virtual fingerprint instance to policy. by Joe Bolinger · 3 years, 5 months ago
  70. 800e948 Merge "[GWP-ASan] Add sysprop, allow shell and system apps to set it." by Mitch Phillips · 3 years, 5 months ago
  71. 222e99e Merge "Allow the remote provisioner app to set rkp_only properties" by Seth Moore · 3 years, 5 months ago
  72. 1ebfb86 Merge "Grants clatd privs since forked by system server" by Maciej Żenczykowski · 3 years, 5 months ago
  73. bd3e8d9 Merge "Track sys_module permission for system_server" by Treehugger Robot · 3 years, 5 months ago
  74. ce19c41 Merge "Adds GPU sepolicy to support devices with DRM gralloc/rendering" by Alistair Delva · 3 years, 5 months ago
  75. 8bfdd82 Allow the remote provisioner app to set rkp_only properties by Seth Moore · 3 years, 5 months ago
  76. 9a385b2 Adds system_user_mode_emulation_prop property. by Felipe Leme · 3 years, 5 months ago
  77. d222ea6 Merge "crosvm can access data_shell_file on user builds" by Treehugger Robot · 3 years, 5 months ago
  78. b87591b Merge "/apex/com.android.art/bin/dex2oat is a symlink, so allow reading it from the shell." by Treehugger Robot · 3 years, 5 months ago
  79. cdd5e07 crosvm can access data_shell_file on user builds by Jiyong Park · 3 years, 5 months ago
  80. b83a6d1 Merge "Remove some FDE rules and update comments" by Eric Biggers · 3 years, 5 months ago
  81. a933980 Adds GPU sepolicy to support devices with DRM gralloc/rendering by Jason Macnak · 3 years, 6 months ago
  82. 9bf0a0c Remove some FDE rules and update comments by Eric Biggers · 3 years, 5 months ago
  83. 47bddcd sepolicy: Allow uwb module access to CE directories for UWB by Roshan Pius · 3 years, 5 months ago
  84. 1c8df20 Merge "sepolicy: allow vendor system native experiments property" by Richard Chang · 3 years, 5 months ago
  85. 1e0b4a5 /apex/com.android.art/bin/dex2oat is a symlink, so allow reading it by Martin Stjernholm · 3 years, 5 months ago
  86. 6a2fbfa Track sys_module permission for system_server by Thiébaud Weksteen · 3 years, 5 months ago
  87. b1f61ba Merge "surfaceflinger: allow to be profiled by perfetto on release builds" by Treehugger Robot · 3 years, 5 months ago
  88. 20d0aca surfaceflinger: allow to be profiled by perfetto on release builds by Ryan Savitski · 3 years, 5 months ago
  89. 8cd32cd [GWP-ASan] Add sysprop, allow shell and system apps to set it. by Mitch Phillips · 3 years, 6 months ago
  90. 6ba4146 Merge changes from topic "mglru-exp" by Kalesh Singh · 3 years, 5 months ago
  91. 7057e4a sepolicy: allow vendor system native experiments property by Richard Chang · 3 years, 5 months ago
  92. 0681757 Merge "Add sepolicy for BLE Privacy sysprop" by Dorin Drimus · 3 years, 5 months ago
  93. 98f6349 Add sepolicy for Multi-Gen LRU sysfs control by Kalesh Singh · 3 years, 5 months ago
  94. 9e25714 Add sepolicy for mglru_native flag namespace by Kalesh Singh · 3 years, 5 months ago
  95. 6d0b6a3 Merge "Fix gmscore selinux denial on rmdir/setattr" by Treehugger Robot · 3 years, 5 months ago
  96. 3979818 Merge "Allow Bluetooth to link files - Robust Caching requires it" by Treehugger Robot · 3 years, 5 months ago
  97. 64c1199 Merge "Selinux setup for /data/misc/odsign/metrics/" by Treehugger Robot · 3 years, 5 months ago
  98. 4d59166 Fix gmscore selinux denial on rmdir/setattr by Kelvin Zhang · 3 years, 5 months ago
  99. 86f7945 Allow Bluetooth to link files - Robust Caching requires it by Jakub Pawlowski · 3 years, 5 months ago
  100. 36daf98 Selinux setup for /data/misc/odsign/metrics/ by Shikha Panwar · 3 years, 6 months ago