- 6b6aae4 Add update provider to SELinux policy by Brian Daniels · 10 months ago
- c3ee5c4 Allow apexd to talk to statsbootstrap_service by Jooyung Han · 11 months ago
- a4fddc0 Allow apexd to rename files in /data/apex/decompressed by Jooyung Han · 12 months ago
- 75806ef Minimize public policy by Inseob Kim · 1 year, 5 months ago
- 4acd073 Update SELinux policy for Pre-reboot Dexopt. by Jiakai Zhang · 1 year, 6 months ago
- a1927af Allow apexd to send atoms to statsd via socket by Jooyung Han · 1 year, 6 months ago
- 2f0bcc1 Remove remaining APEX sepolicy types by Inseob Kim · 2 years ago
- b6211b8 Introduce vendor_apex_metadata_file by Jooyung Han · 2 years, 3 months ago
- 7848d3a Modifed sepolicy for new apex ready prop by Deyao Ren · 3 years ago
- 3fab00f Remove init.apex.<apex-name>.load/unload property by Deyao Ren · 3 years ago
- ccfb0ef Added properties for rebootless apex install by Jooyung Han · 3 years, 2 months ago
- 9a59923 Restrict creating per-user encrypted directories by Eric Biggers · 3 years, 4 months ago
- 4fe6bd1 Merge "Revert "Fix bootchart on android12"" by Treehugger Robot · 3 years, 4 months ago
- 613519f Revert "Fix bootchart on android12" by Jooyung Han · 3 years, 4 months ago
- 6446490 Allow apexd to enable fsverity on /metadata by sandrom · 3 years, 7 months ago
- e9a5e7c Allow apexd to write to /metadata/sepolicy by sandrom · 3 years, 7 months ago
- 16c1ae3 Add use_bionic_libs macro by Jiyong Park · 3 years, 8 months ago
- 0c7c267 Add apexd_payload_metadata_prop by Richard Fung · 3 years, 10 months ago
- 0dd5118 Merge "Revert "Revert "Adds a new prop context for choosing between mul..."" by Daniel Norman · 3 years, 10 months ago
- 2f8ce0d Revert "Revert "Adds a new prop context for choosing between mul..." by Daniel Norman · 3 years, 10 months ago
- 95d7aaa Merge "Revert "Adds a new prop context for choosing between multi-insta..."" by Owen Kim · 3 years, 10 months ago
- 780cd02 Revert "Adds a new prop context for choosing between multi-insta..." by Owen Kim · 3 years, 10 months ago
- 8e276ea Merge "Adds a new prop context for choosing between multi-installed APEXes." by Daniel Norman · 3 years, 10 months ago
- 6b0049d Adds a new prop context for choosing between multi-installed APEXes. by Daniel Norman · 3 years, 11 months ago
- d338d0e Fix bootchart on android12 by Ji Luo · 3 years, 10 months ago
- 9237163 Allow apexd to call derive_classpath binary by Samiul Islam · 4 years ago
- 6b53d73 Stop using the bdev_type and sysfs_block_type SELinux attributes by Bart Van Assche · 4 years ago
- c0cac41 Cleanup sepolicy related to APEX pre/post-install hooks by Nikita Ioffe · 4 years ago
- ec50aa5 Allow the init and apexd processes to read all block device properties by Bart Van Assche · 4 years, 1 month ago
- fa10a14 Refactor apex data file types. by Alan Stokes · 4 years, 2 months ago
- 01fcc28 Allow apexd to create links in otapreopt_chroot. by Dario Freni · 4 years, 2 months ago
- c96305f Allow apexd to call f2fs-compression related ioctls on staging_data_file by Nikita Ioffe · 4 years, 3 months ago
- 5b4e13f Allow apexd to write to /apex/apex-info-list.xml by Nikita Ioffe · 4 years, 3 months ago
- 0b2553a Allow the appsearch apex access to the apexdata misc_ce dir. by Alexander Dorokhine · 4 years, 3 months ago
- 4274f98 Add neverallow rules around who can mount/unmount /apex by Nikita Ioffe · 4 years, 4 months ago
- b62be12 Allow apexd to access a new dev_type: virtual disk by Jooyung Han · 4 years, 5 months ago
- 16dfb43 Use postinstall file_contexts by Alex Light · 4 years, 6 months ago
- a3f3045 Merge "Relocate permission to reserve file from update_engine to apexd" by Mohammad Islam · 4 years, 6 months ago
- 360e0f9 Add apexd_config_prop type by Nikita Ioffe · 4 years, 6 months ago
- a3b0227 Relocate permission to reserve file from update_engine to apexd by Mohammad Samiul Islam · 4 years, 6 months ago
- 3bb3559 Merge "Add sepolicy for scheduling module data directories" by Gavin Corkery · 4 years, 7 months ago
- cd3bb57 Add sepolicy for scheduling module data directories by Gavin Corkery · 4 years, 7 months ago
- 12b7ccd Allow apexd to relabel files in /data/apex/decompressed by Mohammad Samiul Islam · 4 years, 8 months ago
- 8f75f76 Permissions for odrefresh and /data/misc/apexdata/com.android.art by Orion Hodson · 5 years ago
- 0d7f2a8 Allow apexd to read ro.cold_boot_done prop by Nikita Ioffe · 5 years ago
- 76ce7f5 Remove policy for deprecated ART apex update scripts by Orion Hodson · 5 years ago
- 4c5220c Merge "Support GKI updates" by Treehugger Robot · 5 years ago
- 47f61db Add policy for LOOP_CONFIGURE ioctl. by Martijn Coenen · 5 years ago
- 8ac37f0 Support GKI updates by Yifan Hong · 5 years ago
- 8c18009 allow apexd to mount apex-info-list.xml file by Jooyung Han · 5 years ago
- 93a99cf Introduce apex_info_file type by Jiyong Park · 5 years ago
- 55e5c9b Move system property rules to private by Inseob Kim · 6 years ago
- 8f84cc3 sepolicy(wifi): Allow wifi service access to wifi apex directories by Roshan Pius · 6 years ago
- 7e346c9 Add dac_read_search to apexd to prevent spurious denials. by Oli Lan · 6 years ago
- 1a775e0 Allow apexd to execute toybox for snapshot & restore. by Oli Lan · 6 years ago
- 335d704 Add sepolicy rules to allow apexd to perform snapshot and restore. by Oli Lan · 6 years ago
- f301cd2 Add policies for permission APEX data directory. by Hai Zhang · 6 years ago
- 91ce5b9 Add type for directories containing snapshots of apex data. by Oli Lan · 6 years ago
- 79b4e1a Add type for APEX data directories. by Oli Lan · 6 years ago
- 8a48052 Allow apexd to be fork_execvp'ed from init during userspace reboot by Nikita Ioffe · 6 years ago
- 6e823dd Allow apexd to stop itself by Jiyong Park · 6 years ago
- ea61d19 Adding vendor_apex_file for /vendor/apex by Jooyung Han · 6 years ago
- a0f998e Allow bootstrap bionic only to init, ueventd, and apexd by Jiyong Park · 6 years ago
- cff95d7 Remove apex_key_file by Jiyong Park · 6 years ago
- 64b812c Rename data/pkg_staging to data/app-staging by Gavin Corkery · 7 years ago
- 1f1c4c3 Allow apexd to talk to vold. by Martijn Coenen · 6 years ago
- 5fbbf26 Add policy for /metadata/apex. by Martijn Coenen · 6 years ago
- 5ed5072 Use label staging_data_file for installed APEX. by Dario Freni · 7 years ago
- 4c2d06c Sepolicy: Add base runtime APEX postinstall policies by Andreas Gampe · 7 years ago
- ae127d8 Sepolicy: Add base runtime APEX preinstall policies by Andreas Gampe · 7 years ago
- cfe7f7b Allow apexd to reboot device by Nikita Ioffe · 7 years ago
- 2db5015 Rename data/staging to data/pkg_staging. by Gavin Corkery · 7 years ago
- 742ac55 Sepolicy: Give apexd permission for mounton by Andreas Gampe · 7 years ago
- 6d73cea apexd: allow apexd to unlink staging_data_file files by Nikita Ioffe · 7 years ago
- 74a5b50 apexd: permission to traverse /sys directory tree. by Tri Vo · 7 years ago
- 261ea86 Sepolicy: Initial Apexd pre-/postinstall rules by Andreas Gampe · 7 years ago
- aada501 Sepolicy: Allow apexd to log to kmsg by Andreas Gampe · 7 years ago
- 179ada9 Allow apexd to also create dirs/files in its storage. by Martijn Coenen · 7 years ago
- 9f343b3 Allow system_server to read apex_data_file. by Narayan Kamath · 7 years ago
- 274c1de SEPolicy for Staged Installs. by Dario Freni · 7 years ago
- d7bf921 Allow apexd to write to sysfs loop device parameters. by Martijn Coenen · 7 years ago
- 558c1b8 Allow apexd to flush block devices. by Martijn Coenen · 7 years ago
- ce15e5e Allow apexd to label apk_tmp_file to apex_data_file by Jiyong Park · 7 years ago
- 341476d Allow apexd to configure /sys/block/dm- by Martijn Coenen · 7 years ago
- ac2b2d4 Allow the kernel to access apexd file descriptors. by Martijn Coenen · 7 years ago
- 173a1d9 Allow apexd more ioctl cmds for loop devices by Jiyong Park · 7 years ago
- 4c8eaba start enforcing ioctl restrictions on blk_file by Nick Kralevich · 7 years ago
- ecc0987 Allow apexd to realpath(3) on apex_key_files by Jiyong Park · 7 years ago
- bab267a Allow apexd to create symlink in /apex. by Dario Freni · 7 years ago
- ac097ac Add policy for apexd. by Martijn Coenen · 7 years ago