Gitiles
Code Review Sign In
gerrit.omnirom.org / android_system_sepolicy / f7578e0b049e8d4a8d18652bdb145d5a35ec9f2d
  1. f7578e0 Merge "Allow mediaserver start transcoding service." by Hangyu Kuang · 4 years, 4 months ago
  2. de370e5 Allow mediaserver start transcoding service. by hkuang · 4 years, 4 months ago
  3. 82ce869 Merge "Added SELinux context for dalvik.vm.dexopt.thermal-cutoff property" by Christian Wailes · 4 years, 4 months ago
  4. 40bf1a6 Merge "Enforce RTM_GETLINK restrictions on all apps" by Bram Bonné · 4 years, 4 months ago
  5. 0ac8b75 Merge "Revert "Revert "Check that tracefs files are labelled as tracefs_type""" by Treehugger Robot · 4 years, 4 months ago
  6. edccaa8 Revert "Revert "Check that tracefs files are labelled as tracefs_type"" by Hridya Valsaraju · 4 years, 4 months ago
  7. 4c26361 Merge "Allow simpleperf_app_runner to write to shell pipe fds." by Yabin Cui · 4 years, 4 months ago
  8. d34a1dd Allow simpleperf_app_runner to write to shell pipe fds. by Yabin Cui · 4 years, 4 months ago
  9. 9327c4f Merge "Allow /dev/dma_heap directory to be readable" by Treehugger Robot · 4 years, 4 months ago
  10. 920939d Allow /dev/dma_heap directory to be readable by Hridya Valsaraju · 4 years, 4 months ago
  11. 04c85dc Revert "Allow the MediaProvider app to set FUSE passthrough property" by liuyg · 4 years, 4 months ago
  12. c1e2918 Allow the MediaProvider app to set FUSE passthrough property by Alessio Balsini · 4 years, 4 months ago
  13. 4274f98 Add neverallow rules around who can mount/unmount /apex by Nikita Ioffe · 4 years, 4 months ago
  14. 2e44672 Added SELinux context for dalvik.vm.dexopt.thermal-cutoff property by Chris Wailes · 4 years, 4 months ago
  15. 965cad9 Merge "Add sepolicy for com.android.compos" by Treehugger Robot · 4 years, 4 months ago
  16. bb8d005 Merge "Revert "se_compat_cil: Prepend generated files with a header"" by Yo Chiang · 4 years, 4 months ago
  17. 7c3ecf1 Revert "se_compat_cil: Prepend generated files with a header" by Yo Chiang · 4 years, 4 months ago
  18. 4361ef2 Merge "TEMP" by Shawn Willden · 4 years, 4 months ago
  19. 2189a1a TEMP by Max Bires · 4 years, 4 months ago
  20. 7b68126 Add sepolicy for com.android.compos by Victor Hsieh · 5 years ago
  21. dcc9b45 Add ro.audio.offload_wakelock to audio_config_prop by JJ Lee · 4 years, 4 months ago
  22. 945c456 DO NOT MERGE - Mark RQ2A.210105.001 as merged. by Xin Li · 4 years, 4 months ago
  23. ad8cf2f Merge "Stats: Marked service as app_api_service" by Vova Sharaienko · 4 years, 4 months ago
  24. 5f831c3 Merge "Migrate precompiled sepolicy hashes to Android.bp" by Inseob Kim · 4 years, 4 months ago
  25. a96cb4d Stats: Marked service as app_api_service by Vova Sharaienko · 4 years, 4 months ago
  26. deef325 Merge "Allow fastbootd to mount /metadata in recovery." by David Anderson · 4 years, 4 months ago
  27. 9395fb4 Merge "Add profile saver properties to selinux rules" by Treehugger Robot · 4 years, 4 months ago
  28. 731182a Migrate precompiled sepolicy hashes to Android.bp by Inseob Kim · 4 years, 4 months ago
  29. ce32e9b Merge "Add existing ro.hdmi sysprop to sepolicy" by Nathalie Le Clair · 4 years, 4 months ago
  30. 4e3599e Add profile saver properties to selinux rules by Calin Juravle · 4 years, 4 months ago
  31. 018004d Allow fastbootd to mount /metadata in recovery. by David Anderson · 4 years, 4 months ago
  32. b991763 Merge "Allow multiple heaps to use the system-secure vendor heap category" by Hridya Valsaraju · 4 years, 4 months ago
  33. f35c70b Merge changes If26ba23d,Ibea38822 by Hridya Valsaraju · 4 years, 4 months ago
  34. 740f9b7 Merge "Allow dumpstate to signal keystore to dump its stack" by Eric Biggers · 4 years, 4 months ago
  35. f696109 Add existing ro.hdmi sysprop to sepolicy by Nathalie Le Clair · 4 years, 4 months ago
  36. 633f7ca [sepolicy] allow system server to read incfs metrics from sysfs by Songchun Fan · 4 years, 4 months ago
  37. 498318c Revert "Revert "Exclude vendor_modprobe from debugfs neverallow restrictions"" by Hridya Valsaraju · 4 years, 4 months ago
  38. 23f9f51 Revert "Revert "Add neverallows for debugfs access"" by Hridya Valsaraju · 4 years, 4 months ago
  39. f9519a6 Allow dumpstate to signal keystore to dump its stack by Eric Biggers · 4 years, 4 months ago
  40. 6c03124 Merge "sepolicy: allow traced_probes to access statsd socket" by Lalit Maganti · 4 years, 4 months ago
  41. 22c7415 Merge "Revert "Revert "Add a neverallow for debugfs mounting""" by Treehugger Robot · 4 years, 4 months ago
  42. ec6d12f Label the odm_dlkm properties in "odm_dlkm/etc/build.prop" by Alex Hong · 4 years, 4 months ago
  43. 15f0f92 Give mediatranscoding access to the DMA-BUF system heap by Hridya Valsaraju · 4 years, 4 months ago
  44. a2a2d9c Add missing permissions for Cuttlefish to support GSI testing by Hridya Valsaraju · 4 years, 4 months ago
  45. a885dd8 Revert "Revert "Add a neverallow for debugfs mounting"" by Hridya Valsaraju · 4 years, 4 months ago
  46. 351331b Merge "Revert^4 "Build userdebug_plat_sepolicy.cil with Android.bp"" by Treehugger Robot · 4 years, 4 months ago
  47. bdc4f74 Merge "Allowing userdebug/eng builds crash dump access to ks" by Shawn Willden · 4 years, 4 months ago
  48. f093916 Allowing userdebug/eng builds crash dump access to ks by Max Bires · 4 years, 4 months ago
  49. 979a1f8 [sepolicy] allow system_server to ioctl INCFS_IOC_GET_LAST_READ_ERROR by Songchun Fan · 4 years, 4 months ago
  50. 86e3ac0 Merge "app_zygote.te: allow reading and searching the ART module dalvik-cache" by Orion Hodson · 4 years, 4 months ago
  51. a4433b4 Enforce RTM_GETLINK restrictions on all apps by Bram Bonné · 4 years, 4 months ago
  52. 685205d sepolicy: allow traced_probes to access statsd socket by Lalit Maganti · 4 years, 4 months ago
  53. 24878f8 Merge "Allow dex2oat to read /apex/apex-info-list.xml" by Nicolas Geoffray · 4 years, 4 months ago
  54. 6cc75f4 Revert^4 "Build userdebug_plat_sepolicy.cil with Android.bp" by Inseob Kim · 4 years, 4 months ago
  55. 785ac2b Merge "Add precompiled hash only when policy exists" by Inseob Kim · 4 years, 4 months ago
  56. c96bd38 Merge "Add sepolicy_vers for plat_sepolicy_vers.txt" by Inseob Kim · 4 years, 4 months ago
  57. 04eec64 OWNERS: Remove myself from owners by Sandeep Patil · 4 years, 4 months ago
  58. 102883c Merge "sepolicy: add ro.product.vendor_dlkm coverage" by Oleg Matcovschi · 4 years, 4 months ago
  59. db8fa96 sepolicy: add ro.product.vendor_dlkm coverage by Oleg Matcovschi · 4 years, 4 months ago
  60. 90d3351 app_zygote.te: allow reading and searching the ART module dalvik-cache by Orion Hodson · 4 years, 4 months ago
  61. 1c056b1 Add sepolicy_vers for plat_sepolicy_vers.txt by Inseob Kim · 4 years, 4 months ago
  62. d82e1e4 Merge "app.te: enable mapping ART apexdata cache executable" by Treehugger Robot · 4 years, 4 months ago
  63. a76c0c8 Add precompiled hash only when policy exists by Inseob Kim · 4 years, 4 months ago
  64. 82bf10a Merge "Allow boot animation to update boot status." by Nicolas Geoffray · 4 years, 4 months ago
  65. 791dc49 Allow multiple heaps to use the system-secure vendor heap category by Hridya Valsaraju · 4 years, 4 months ago
  66. 59e8007 Merge "Add support for invoking derive_classpath from otadexopt" by Treehugger Robot · 4 years, 4 months ago
  67. 6553a8d Merge "Add SELinux properties for artd" by Christian Wailes · 4 years, 4 months ago
  68. c5bae6f Merge "Allow NN HAL service to read files from apk data files" by Xusong Wang · 4 years, 4 months ago
  69. 6a31147 Allow boot animation to update boot status. by Nicolas Geoffray · 4 years, 4 months ago
  70. 78f0250 Allow dex2oat to read /apex/apex-info-list.xml by Nicolas Geoffray · 4 years, 4 months ago
  71. 467d8a8 Add SELinux properties for artd by Chris Wailes · 4 years, 6 months ago
  72. 8393a05 Add support for invoking derive_classpath from otadexopt by Alex Light · 4 years, 4 months ago
  73. 13ee653 app.te: enable mapping ART apexdata cache executable by Orion Hodson · 4 years, 4 months ago
  74. 3c24ea1 Add a sysprop to set display update imminent timeout by Midas Chien · 4 years, 4 months ago
  75. 9891411 Merge "[incfs] Allow everyone read the IncFS sysfs features" by Treehugger Robot · 4 years, 4 months ago
  76. 206d6d8 Merge "Fix permissions for vold.post_fs_data_done" by Treehugger Robot · 4 years, 4 months ago
  77. 040ce19 Fix permissions for vold.post_fs_data_done by Eric Biggers · 4 years, 5 months ago
  78. 7362f58 Merge changes from topic "revert-1668411-MWQWEZISXF" by Hridya Valsaraju · 4 years, 5 months ago
  79. dbfe480 Merge "Add bootanim property context, ro.bootanim.quiescent.enabled property" by Robert Horvath · 4 years, 5 months ago
  80. f9dbb72 Revert "Add a neverallow for debugfs mounting" by Hridya Valsaraju · 4 years, 5 months ago
  81. e95e0ec Revert "Add neverallows for debugfs access" by Hridya Valsaraju · 4 years, 5 months ago
  82. 231c04b Revert "Exclude vendor_modprobe from debugfs neverallow restrictions" by Hridya Valsaraju · 4 years, 5 months ago
  83. a00863e Revert "Check that tracefs files are labelled as tracefs_type" by Hridya Valsaraju · 4 years, 5 months ago
  84. f02af9d Merge "Revert^3 "Build userdebug_plat_sepolicy.cil with Android.bp"" by Treehugger Robot · 4 years, 5 months ago
  85. a46d61c Revert^3 "Build userdebug_plat_sepolicy.cil with Android.bp" by Inseob Kim · 4 years, 5 months ago
  86. 3b6a385 Merge "Add crosvm domain and give virtmanager and crosvm necessary permissions." by Andrew Walbran · 4 years, 5 months ago
  87. 005ae59 Merge changes from topic "debugfs_neverallow" by Treehugger Robot · 4 years, 5 months ago
  88. 2b525c5 Merge "Revert^2 "Build userdebug_plat_sepolicy.cil with Android.bp"" by Florian Mayer · 4 years, 5 months ago
  89. e10ceab Revert^2 "Build userdebug_plat_sepolicy.cil with Android.bp" by Florian Mayer · 4 years, 5 months ago
  90. 714864c Merge "Revert "Build userdebug_plat_sepolicy.cil with Android.bp"" by Treehugger Robot · 4 years, 5 months ago
  91. e0646ba Merge "sepolicy: Give access to ahal to flinger standby prop" by Treehugger Robot · 4 years, 5 months ago
  92. 0177004 Revert "Build userdebug_plat_sepolicy.cil with Android.bp" by Bowgo Tsai · 4 years, 5 months ago
  93. 47b6227 Merge "Allow traced_probes to read devfreq" by David Massoud · 4 years, 5 months ago
  94. b382f02 [incfs] Allow everyone read the IncFS sysfs features by Yurii Zubrytskyi · 4 years, 5 months ago
  95. fde9b8f Check that tracefs files are labelled as tracefs_type by Hridya Valsaraju · 4 years, 5 months ago
  96. 4b6d50d Exclude vendor_modprobe from debugfs neverallow restrictions by Hridya Valsaraju · 4 years, 5 months ago
  97. a0b504a Add neverallows for debugfs access by Hridya Valsaraju · 4 years, 6 months ago
  98. 1c3d898 Add a neverallow for debugfs mounting by Hridya Valsaraju · 4 years, 6 months ago
  99. 7534762 Merge "sepolicy: allow BINDER_ENABLE_ONEWAY_SPAM_DETECTION for all processes" by Steven Moreland · 4 years, 5 months ago
  100. c78b806 Merge "Make suspend_prop system_vendor_config_prop" by Treehugger Robot · 4 years, 5 months ago