Gitiles
Code Review Sign In
gerrit.omnirom.org / android_system_sepolicy / refs/heads/android-15 / public / vold.te
  1. 09b27c7 Add "DO NOT ADD statements" comments to public by Inseob Kim · 1 year, 5 months ago
  2. 75806ef Minimize public policy by Inseob Kim · 1 year, 5 months ago
  3. d3db89d Modify SELinux rules to allow vold to use the keymaster HAL directly. am: b1c857c824 am: 769bbce026 by Peter Lee · 1 year, 7 months ago
  4. 769bbce Modify SELinux rules to allow vold to use the keymaster HAL directly. am: b1c857c824 by Peter Lee · 1 year, 7 months ago
  5. b1c857c Modify SELinux rules to allow vold to use the keymaster HAL directly. by Peter Lee · 1 year, 7 months ago
  6. 95930cf Allow vold to rename system_data_file directories by Eric Biggers · 2 years, 3 months ago
  7. ffb9f88 Allow vold to use FS_IOC_GET_ENCRYPTION_KEY_STATUS by Nathan Huckleberry · 2 years, 7 months ago
  8. b5f16b2 Allow mkfs/fsck for zoned block device by Jaegeuk Kim · 2 years, 8 months ago
  9. b0f5998 Allow zoned device support in f2fs by Jaegeuk Kim · 3 years, 4 months ago
  10. b07c12c Iorapd and friends have been removed by Jeff Vander Stoep · 3 years, 4 months ago
  11. 9a59923 Restrict creating per-user encrypted directories by Eric Biggers · 3 years, 4 months ago
  12. bf717e1 vold.te: stop allowing use of keymaster HAL directly by Eric Biggers · 3 years, 5 months ago
  13. 9bf0a0c Remove some FDE rules and update comments by Eric Biggers · 3 years, 5 months ago
  14. aabea20 Remove healthd. by Yifan Hong · 3 years, 11 months ago
  15. 9ec5327 Add fusefs_type for FUSE filesystems by Thiébaud Weksteen · 4 years, 3 months ago
  16. b382f02 [incfs] Allow everyone read the IncFS sysfs features by Yurii Zubrytskyi · 4 years, 5 months ago
  17. a999004 Keystore 2.0: sepolicy changes for vold to use keystore2 by Satya Tangirala · 4 years, 6 months ago
  18. 5854941 Add rules for calling ReadDefaultFstab() by Yi-Yo Chiang · 4 years, 6 months ago
  19. 806898d Split gsi_metadata_file and add gsi_metadata_file_type attribute by Yi-Yo Chiang · 4 years, 6 months ago
  20. c04f037 Fix problem whereby incfs can't remove files from .incomplete by Paul Lawrence · 4 years, 7 months ago
  21. 840d4f3 Add sepolicy for /proc/bootconfig by Devin Moore · 4 years, 7 months ago
  22. 29c54ec Merge "Allow vold to check apex files" by Randall Huang · 4 years, 8 months ago
  23. 80dfa06 IncFS: update SE policies for the new API by Yurii Zubrytskyi · 4 years, 8 months ago
  24. 84f59c8 Allow vold to check apex files by Randall Huang · 4 years, 8 months ago
  25. dc16f6d Allow vold to run make_f2fs by Jaegeuk Kim · 4 years, 9 months ago
  26. 7aa4041 Split user_profile_data_file label. by Alan Stokes · 4 years, 9 months ago
  27. 6273186 Merge "Allow gsid to find and binder-call vold" by Yo Chiang · 4 years, 11 months ago
  28. ffe786e Allow gsid to find and binder-call vold by Yo Chiang · 5 years ago
  29. 7d15ce2 Add secdiscard policies for vold_metadata_file by Yo Chiang · 5 years ago
  30. e939cbd Add F2FS_IOC_SEC_TRIM_FILE ioctl code by Yo Chiang · 5 years ago
  31. aa2cb51 Add sepolicy for FUSE control filesystem. by Martijn Coenen · 5 years ago
  32. 19a5cc2 [sepolicy] remove vendor_incremental_module from global sepolicy rules by Songchun Fan · 6 years ago
  33. 55e5c9b Move system property rules to private by Inseob Kim · 6 years ago
  34. 94dc474 Merge "vold: allow to set boottime prop" by Jaegeuk Kim · 6 years ago
  35. 9c38162 vold: allow to set boottime prop by Jaegeuk Kim · 6 years ago
  36. 3922253 permissions for incremental control file by Songchun Fan · 6 years ago
  37. fcbfe31 Merge "selinux rules for apk files installed with Incremental" by Songchun Fan · 6 years ago
  38. 3cf7d1b Merge "selinux rules for loading incremental module" by Songchun Fan · 6 years ago
  39. 99d9374 selinux rules for loading incremental module by Songchun Fan · 6 years ago
  40. 020e3ab selinux rules for apk files installed with Incremental by Songchun Fan · 6 years ago
  41. 127f5e8 Allow vold FS_IOC_{GET|SET}FLAGS ioctl. by Martijn Coenen · 6 years ago
  42. 5119bec Merge "Grant vold, installd, zygote and apps access to /mnt/pass_through" by Zimuzo Ezeozue · 6 years ago
  43. fcf599c Grant vold, installd, zygote and apps access to /mnt/pass_through by Zim · 6 years ago
  44. e0ab03a Add FS_IOC_FS(G|S)ETXATTR to ioctl_defines and allow vold to use it. by Martijn Coenen · 6 years ago
  45. d1460a1 Merge changes Ide8fc07c,Ia1f51db4 by Martijn Coenen · 6 years ago
  46. 313cff7 Allow vold to mount on top of /data/media. by Martijn Coenen · 6 years ago
  47. f5ddc04 Add a new context for property ota.warm_reset by Tianjie Xu · 6 years ago
  48. 0c8a906 Merge changes from topic "fscrypt-key-mgmt-improvements" by Eric Biggers · 6 years ago
  49. 36ae663 Allow vold to use new ioctls to add/remove fscrypt keys by Eric Biggers · 6 years ago
  50. bfcddbe sepolicy: remove ashmemd by Tri Vo · 6 years ago
  51. aed0f76 Root of /data belongs to init (re-landing) by Paul Crowley · 6 years ago
  52. d98e311 Revert "Root of /data belongs to init" by Paul Crowley · 6 years ago
  53. 206b653 Root of /data belongs to init by Paul Crowley · 6 years ago
  54. 46303aa Sepolicy for IAshmem HIDL interface by Kalesh Singh · 6 years ago
  55. a5ff1ba sepolicy: add sepolicy rules for vold to write sysfs gc_urgent by YH_Lin · 6 years ago
  56. 1f1c4c3 Allow apexd to talk to vold. by Martijn Coenen · 6 years ago
  57. 5b60eb6 vold: write permission to sysfs_devices_block by Tri Vo · 6 years ago
  58. a532088 Decouple system_suspend from hal attributes. by Tri Vo · 7 years ago
  59. 84e87b8 Allow restorecon to work on vold_data_files by Paul Lawrence · 7 years ago
  60. db90b91 Full sepolicy for gsid. by David Anderson · 7 years ago
  61. 650981d Allow update_verifier to call checkpointing by Daniel Rosenberg · 7 years ago
  62. fb0ab2e Hide denial seen during boot. by Joel Galenson · 7 years ago
  63. 73d0a67 sepolicy for ashmemd by Tri Vo · 7 years ago
  64. f0abbf9 Allow vold to create files at /mnt/user/.* by Sudheer Shanka · 7 years ago
  65. d7bf921 Allow apexd to write to sysfs loop device parameters. by Martijn Coenen · 7 years ago
  66. 90e68e9 Remove overpermissive neverallow exceptions. by Paul Crowley · 7 years ago
  67. f9f7539 Abolish calls to shell in vold by Paul Crowley · 7 years ago
  68. 478ca55 Allow vold to remount by Daniel Rosenberg · 7 years ago
  69. 536d341 use hal_bootctl_server in neverallow rule by Nick Kralevich · 7 years ago
  70. 1c5d223 vold: remove access to /proc/net files by Nick Kralevich · 7 years ago
  71. fefc887 vold: allow ioctls BLKDISCARD and BLKGETSIZE by Nick Kralevich · 7 years ago
  72. 0c1848b SELinux changes for AppFuse by Risan · 7 years ago
  73. c4cf986 Revert "SELinux changes for AppFuse" by Nick Kralevich · 7 years ago
  74. f2cad2d vold does more than LOOP_GET_STATUS64. by Jeff Sharkey · 7 years ago
  75. 67ed432 SELinux changes for AppFuse by Risan · 7 years ago
  76. 787fc8d vold.te: allow BLKSECDISCARD by Nick Kralevich · 7 years ago
  77. 4c8eaba start enforcing ioctl restrictions on blk_file by Nick Kralevich · 7 years ago
  78. 877b086 vold: allow FS_IOC_FIEMAP by Nick Kralevich · 7 years ago
  79. ebc3a1a Move to ioctl whitelisting for plain files / directories by Nick Kralevich · 7 years ago
  80. 72a88b1 iorapd: Add new binder service iorapd. by Igor Murashkin · 7 years ago
  81. 2d123fc Ensure vold is a client of hal_bootctl only in Treble mode. by Joel Galenson · 7 years ago
  82. ac5293b Add bootctl for vold by Daniel Rosenberg · 7 years ago
  83. 5e37271 Introduce system_file_type by Nick Kralevich · 7 years ago
  84. 0b67bb8 Further lock down app data by Jeff Vander Stoep · 7 years ago
  85. 1cef6a9 health.filesystem HAL renamed to health.storage by Yifan Hong · 7 years ago
  86. 342362a sepolicy: grant dac_read_search to domains with dac_override by Benjamin Gordon · 7 years ago
  87. dac2a4a Sepolicy for system suspend HAL. by Tri Vo · 7 years ago
  88. fa5afa2 vold uses health filesystem HAL by Yifan Hong · 7 years ago
  89. a2bacea Allow vold to mount at /mnt/user/.* by Sudheer Shanka · 7 years ago
  90. 23c9d91 Start partitioning off privapp_data_file from app_data_file by Nick Kralevich · 7 years ago
  91. 7b67a61 Allowing vold to search /mnt/vendor/* by Bowgo Tsai · 7 years ago
  92. 711908e vold: not allowed to read sysfs_batteryinfo by Yifan Hong · 7 years ago
  93. ab82125 Improve tests protecting private app data by Jeff Vander Stoep · 7 years ago
  94. be31a68 Allow vendor_init to getattr vold_metadata_file. by Joel Galenson · 7 years ago
  95. 7a4af30 Start the process of locking down proc/net by Jeff Vander Stoep · 7 years ago
  96. 42bd163 Add metadata_file class for root of metadata folder. by Paul Crowley · 7 years ago
  97. d25ccab label /data/vendor{_ce,_de} by Jeff Vander Stoep · 8 years ago
  98. d9a4e06 Allow vendor_init and e2fs to enable metadata encryption by Paul Crowley · 8 years ago
  99. dcad0f0 vold: clarify sysfs access by Tri Vo · 8 years ago
  100. e497145 Whitelist exported platform properties by Jaekyun Seok · 8 years ago