- e7cd0eb Sepolicy setting for crosvm virtiofs mounts by Akilesh Kailash · 9 months ago
- 6a8e53d sepolicy for crosvm to support virtiofs by Akilesh Kailash · 10 months ago
- 872e66d Add sepolicy for crosvm to support virtiofs mounts by Akilesh Kailash · 10 months ago
- 9d4d6c5 Merge "Relax crosvm flagged neverallow rules" into main by Todd Frederick · 11 months ago
- 6d3126d Relax crosvm flagged neverallow rules by Todd Frederick · 11 months ago
- 852d19b Allow access to cgroups.json files by T.J. Mercier · 11 months ago
- c9bfd8c Revert "Add crosvm permission to run KeyMint VM" by Alice Wang · 12 months ago
- 41fe7ea Add permissions to early_virtmgr for early VMs by Inseob Kim · 1 year ago
- 85b743b Merge "Add crosvm permission to run KeyMint VM" into main by Treehugger Robot · 1 year ago
- 0b9625d Add labels and permissions for /mnt/vm by Inseob Kim · 1 year, 1 month ago
- 23b712e Add crosvm permission to run KeyMint VM by Alice Wang · 1 year, 1 month ago
- fcecae7 Grant TUNSETOFFLOAD to crosvm for running ferrochrome by Seungjae Yoo · 1 year, 3 months ago
- 12d84e2 Merge "Sepolicy for crosvm to play audio with aaudio" into main by Mu-Le Lee · 1 year, 3 months ago
- 12fd482 Let crosvm be able to use TAP interface created by vmnic by Seungjae Yoo · 1 year, 3 months ago
- 27b515e Add SELinux policy for storage areas by Ellen Arteca · 1 year, 4 months ago
- c7177f7 Sepolicy for crosvm to play audio with aaudio by Mu-Le Lee · 1 year, 5 months ago
- 77a3ca6 Introduce vmlauncher_app domain by Jeongik Cha · 1 year, 5 months ago
- f09f43c Sepolicy for crosvm to show display by Jeongik Cha · 1 year, 5 months ago
- 7066a96 Allow CAP_SYS_NICE for crosvm by David Dai · 1 year, 7 months ago
- aeab04f Suppress spurious ipc_lock denials by Alan Stokes · 1 year, 7 months ago
- bc12bcc crosvm doesn't need IPC_LOCK by Alan Stokes · 1 year, 7 months ago
- d2a0892 Introduce vendor_microdroid_file for microdroid vendor image by Seungjae Yoo · 1 year, 10 months ago
- 40519f7 [service-vm] Adjust sepolicy for running service VM by Alice Wang · 2 years ago
- bbe514d Use regular file for VM DTBO by Inseob Kim · 2 years, 1 month ago
- 825056d Add permission for VFIO device binding by Inseob Kim · 2 years, 1 month ago
- 6d019be Allow VMs to log to shell pts by Alan Stokes · 2 years, 3 months ago
- ae5869a Introduce vm_manager_device_type for crosvm by Elliot Berman · 2 years, 6 months ago
- 40a48c1 Sepolicy rules to allow crosvm to start a gdb-server by Nikita Ioffe · 2 years, 7 months ago
- 42798af dontaudit crosvm reading VM's pipe by Inseob Kim · 2 years, 8 months ago
- 55d808c Start using virtmgr for running VMs by David Brazdil · 2 years, 9 months ago
- 7b843d4 Allow crosvm to open test artifacts in shell_data_file by Jaewan Kim · 2 years, 9 months ago
- 88f98d9 Use CAP_SYS_RESOURCE instead of CAP_IPC_LOCK for crosvm by David Brazdil · 2 years, 10 months ago
- 3060852 Allow priv apps to use virtualizationservice by Alan Stokes · 2 years, 11 months ago
- 34f6b26 crosvm: socket getopt by Steven Moreland · 2 years, 11 months ago
- ad58b8d Allow virtualizationservice to create and manage socket files in its data folder by Keir Fraser · 3 years, 2 months ago
- fd59a2d crosvm: dontaudit netlink perms for acpi by Steven Moreland · 3 years, 5 months ago
- 0e15d77 Revert "crosvm: netlink perms for acpi" by Steven Moreland · 3 years, 4 months ago
- 2eab15e Allow crosvm to write shell_data_file by Jiyong Park · 3 years, 4 months ago
- cdd5e07 crosvm can access data_shell_file on user builds by Jiyong Park · 3 years, 5 months ago
- c1e8eb5 crosvm: netlink perms for acpi by Steven Moreland · 3 years, 5 months ago
- b02ac32 Allow piping VM failure reason by Alan Stokes · 3 years, 6 months ago
- 23161e5 Allow piping console output to clients by Alan Stokes · 3 years, 7 months ago
- b20cb78 Neverallow domains other than VS from executing VM by Inseob Kim · 3 years, 7 months ago
- 2f27f96 virtualizationservice no longer tries to check for pKVM extension. by Andrew Walbran · 3 years, 7 months ago
- ed82cc8 Allow crosvm to mlock VM memory. by Andrew Walbran · 3 years, 8 months ago
- d020fc0 Merge "Add comment explaining why crosvm shouldn't be allowed to open files." by Andrew Walbran · 3 years, 8 months ago
- 2dd48d0 Allow virtualizationservice to check for PKVM extension by Jiyong Park · 3 years, 8 months ago
- 8191dc0 Add comment explaining why crosvm shouldn't be allowed to open files. by Andrew Walbran · 3 years, 9 months ago
- 028e722 app_data_file is the only app_data_file_type that is allowed for crosvm by Jiyong Park · 3 years, 10 months ago
- 39f4970 SEPolicy for compos_verify_key. by Alan Stokes · 4 years ago
- 21d1710 Merge "crosvm now takes all files by FD." by Andrew Walbran · 4 years, 1 month ago
- 3fee5a4 Don't prevent crosvm from accessing vendor-owned VM disk images by Jiyong Park · 4 years, 1 month ago
- c0b4a91 crosvm now takes all files by FD. by Andrew Walbran · 4 years, 1 month ago
- e2a002c Allow CompOS to start a VM with its instance image. by Alan Stokes · 4 years, 1 month ago
- 5e20d83 Add rules for virtualizationservice and crosvm by Jiyong Park · 4 years, 2 months ago
- 9b2fa1b Allow virtualizationservice and crosvm to access shell_data_file files. by Andrew Walbran · 4 years, 2 months ago
- 4b80a3f Rename VirtManager to VirtualizationService. by Andrew Walbran · 4 years, 4 months ago
- a995e84 Add crosvm domain and give virtmanager and crosvm necessary permissions. by Andrew Walbran · 4 years, 5 months ago