- 2fd9806 Revert "Add sepolicy for terminal app for composite disk and disk resizing" by Jiyong Park · 9 months ago
- 1f1e4ca Add sepolicy for terminal app for composite disk and disk resizing by Mu-Le Lee · 10 months ago
- 6d3126d Relax crosvm flagged neverallow rules by Todd Frederick · 11 months ago
- 17ba644 Merge "Restrict access to virtualization service's vsocks" into main by Treehugger Robot · 1 year, 3 months ago
- 88207c4 Restrict access to virtualization service's vsocks by Alan Stokes · 1 year, 3 months ago
- c9df293 Revert^2 "Introducing vm_tethering_service as system_server_service" by Seungjae Yoo · 1 year, 3 months ago
- 3833f2f Revert "Introducing vm_tethering_service as system_server_service" by Priyanka Advani · 1 year, 3 months ago
- 70e6e88 Introducing vm_tethering_service as system_server_service by Seungjae Yoo · 1 year, 3 months ago
- 9709129 Merge "Add system property to disable avf remote attestation" into main by Alice Wang · 1 year, 3 months ago
- 3d9ce1a Add system property to disable avf remote attestation by Alice Wang · 1 year, 3 months ago
- 378ed74 more vm socket isolation by Steven Moreland · 1 year, 3 months ago
- 80fd618 Set sepolicy for creating TAP interfaces in vmnic of AVF by Seungjae Yoo · 1 year, 4 months ago
- f60a1e0 Set sepolicy for vmnic in AVF by Seungjae Yoo · 1 year, 4 months ago
- f7fc9f9 Adjust policy that allows virtualizationservice to access RKPD by Alice Wang · 1 year, 4 months ago
- 77a3ca6 Introduce vmlauncher_app domain by Jeongik Cha · 1 year, 5 months ago
- f09f43c Sepolicy for crosvm to show display by Jeongik Cha · 1 year, 5 months ago
- d2bc72b Merge "Add virtualization_maintenance_service" into main by Alan Stokes · 1 year, 7 months ago
- 38131e7 Add virtualization_maintenance_service by Alan Stokes · 1 year, 7 months ago
- a9d70d7 Allow virtualizationservice to check parent dir by David Drysdale · 1 year, 7 months ago
- 3242c6a Allow virtualizationserver->ISecretkeeper by David Drysdale · 1 year, 7 months ago
- 260daf5 [attestation] Allow virtualizationservice to retrieve keys by Alice Wang · 1 year, 8 months ago
- fb0ed7f Fix denial due to vfio_handler's IBoundDevice by Inseob Kim · 1 year, 8 months ago
- e79bbf9 Revert^4 "[avf][rkp] Allow virtualizationservice to register RKP HAL" by Alice Wang · 1 year, 10 months ago
- 094e8e8 Flag-guard vfio_handler policies by Inseob Kim · 1 year, 10 months ago
- 18bcf12 Revert "Revert^2 "[avf][rkp] Allow virtualizationservice to regi..." by Alan Stokes · 1 year, 10 months ago
- 0407c99 Revert^2 "[avf][rkp] Allow virtualizationservice to register RKP HAL" by Alice Wang · 1 year, 10 months ago
- ece557d Revert "[avf][rkp] Allow virtualizationservice to register RKP H..." by Alice Wang · 1 year, 10 months ago
- 104626c [avf][rkp] Allow virtualizationservice to register RKP HAL service by Alice Wang · 2 years ago
- f0aaa15 Change sepolicy of virtualizationservice and vfio_handler for VM DTBO by Seungjae Yoo · 2 years ago
- 3e4b7bf Merge "[service-vm] Adjust sepolicy for running service VM" into main by Treehugger Robot · 2 years ago
- 40519f7 [service-vm] Adjust sepolicy for running service VM by Alice Wang · 2 years ago
- d61618b Allow VS to read vendor cfg for assignable devices by Inseob Kim · 2 years ago
- bbe514d Use regular file for VM DTBO by Inseob Kim · 2 years, 1 month ago
- 825056d Add permission for VFIO device binding by Inseob Kim · 2 years, 1 month ago
- ccf9164 virtualizationservice: Allow checking permissions by David Brazdil · 2 years, 8 months ago
- 55d808c Start using virtmgr for running VMs by David Brazdil · 2 years, 9 months ago
- 84bb5ee Adjust policy for hypervisor system properties by Keir Fraser · 2 years, 10 months ago
- 9f240f2 Allow reading proc file in crosvm process for reading cpu/mem stat in VM by Seungjae Yoo · 2 years, 10 months ago
- 88f98d9 Use CAP_SYS_RESOURCE instead of CAP_IPC_LOCK for crosvm by David Brazdil · 2 years, 10 months ago
- 3060852 Allow priv apps to use virtualizationservice by Alan Stokes · 2 years, 11 months ago
- ad58b8d Allow virtualizationservice to create and manage socket files in its data folder by Keir Fraser · 3 years, 2 months ago
- 991087c Make sure only VS can access its data files by Alan Stokes · 3 years ago
- a9f1dc9 Selinux configs for enabling tombstones be passed to host by Shikha Panwar · 3 years, 6 months ago
- 7e07941 Merge changes I82f0c2ef,I013894de by Andrew Scull · 3 years, 7 months ago
- 792b03d Let VirtualizationService access hypervisor properties by Andrew Scull · 3 years, 7 months ago
- 2f27f96 virtualizationservice no longer tries to check for pKVM extension. by Andrew Walbran · 3 years, 7 months ago
- 8a881c1 Fix virtualizationservice denials by Alan Stokes · 3 years, 8 months ago
- 3fad86b Allow VS to run derive_classpath by Alan Stokes · 3 years, 8 months ago
- 2dd48d0 Allow virtualizationservice to check for PKVM extension by Jiyong Park · 3 years, 8 months ago
- 33b21f0 remove unnecessary right from virtualizationservice by Jooyung Han · 3 years, 10 months ago
- 970166f virtualizationservice to use "staged" apexes by Jooyung Han · 4 years ago
- b804de2 Add virtualizationservice.state.last_cid by Jiyong Park · 4 years ago
- 39f4970 SEPolicy for compos_verify_key. by Alan Stokes · 4 years ago
- c0b4a91 crosvm now takes all files by FD. by Andrew Walbran · 4 years, 1 month ago
- e2a002c Allow CompOS to start a VM with its instance image. by Alan Stokes · 4 years, 1 month ago
- 5e20d83 Add rules for virtualizationservice and crosvm by Jiyong Park · 4 years, 2 months ago
- 6d4179a Fix virtualizationservice rules by Jooyung Han · 4 years, 2 months ago
- f408371 Allow virtualizationservice to use vsock by Jiyong Park · 4 years, 2 months ago
- 9b2fa1b Allow virtualizationservice and crosvm to access shell_data_file files. by Andrew Walbran · 4 years, 2 months ago
- 4b80a3f Rename VirtManager to VirtualizationService. by Andrew Walbran · 4 years, 4 months ago