summaryrefslogtreecommitdiff
path: root/sepolicy
Commit message (Expand)AuthorAgeFilesLines
* flo: sepolicy: Resolve cameraserver text relocationsArtem Borisov2018-06-171-0/+1
* flo & deb: denial FixZips2018-02-183-1/+12
* flo: gps selinux fixAli B2018-02-181-0/+1
* selinux perm 2Ali B2018-02-183-0/+35
* flo: sepolicy updateZips2018-02-151-3/+4
* flo: gnss policy for debZips2018-02-141-0/+5
* flo: sepolicy: Updates for binderized HALsArtem Borisov2018-02-1013-17/+55
* flo: sepolicy: Use genfs_contexts for file labelingArtem Borisov2018-02-102-16/+10
* flo: Accelerate boot by paralleling device enablestaging/o8.1staging/8.1Wei Wang2018-01-194-0/+32
* flo: more sepolicy updatesZips2018-01-104-0/+12
* flo: update sepolicyZips2018-01-102-0/+4
* flo: Enable ZRAMArtem Borisov2018-01-021-0/+2
* flo: sepolicy: system_server: whitelist MSM ipc router ioctlsJeff Vander Stoep2017-12-311-0/+4
* flo: sepolicy: allow system_server to access sensorsArtem Borisov2017-12-311-0/+1
* flo: move proprietary modules to vendorArtem Borisov2017-12-171-15/+15
* flo: move device-specific modules to vendorArtem Borisov2017-12-171-4/+4
* Camera: Use 'hal_client_domain' for graphics allocatorEmilian Peev2017-11-111-0/+1
* Move Camera HAL policy to hal_cameraAlex Klyubin2017-11-112-7/+7
* Label camera device and add permissionsJeff Vander Stoep2017-11-112-4/+5
* sepolicy: bring back hci_attach policyArtem Borisov2017-09-201-0/+8
* Enforce ioctl command whitelisting on all socketsJeff Vander Stoep2017-09-209-5/+30
* deprecate domain_deprecatedJeff Vander Stoep2017-09-2014-12/+52
* flo: N sepolicy bringupSimon Shields2016-11-127-2/+15
* camera_device: remove typeWilliam Roberts2016-01-122-7/+6
* perfprofd: update unix_socket_connect to set_propWilliam Roberts2016-01-081-2/+1
* Grant all processes the domain_deprecated attributeJeff Vander Stoep2015-11-0312-12/+12
* mediaserver: remove text relocation supportNick Kralevich2015-10-271-3/+0
* am 74c97c70: Merge "Only allow toolbox exec where /system exec was already al...Nick Kralevich2015-08-254-0/+7
|\
| * Only allow toolbox exec where /system exec was already allowed.Stephen Smalley2015-08-254-0/+7
* | am e4b16d70: Merge "Allow init to create /mnt/sdcard symlink." into mnc-devdcashman2015-06-301-0/+1
|\ \
| * | Allow init to create /mnt/sdcard symlink.dcashman2015-06-301-0/+1
* | | am af837717: Remove execmod from cameraJeff Vander Stoep2015-06-191-2/+0
|\| |
| * | Remove execmod from cameraJeff Vander Stoep2015-06-181-2/+0
* | | am bd63b542: Merge "Update device to use set_prop() macro"Jeffrey Vander Stoep2015-05-154-10/+6
|\ \ \ | |/ / |/| / | |/
| * Update device to use set_prop() macroWilliam Roberts2015-05-124-10/+6
* | New device-specific sepolicy file for 'perfprofd'Than McIntosh2015-05-073-0/+8
|/
* mediaserver: allow loading shared library with text relocationNick Kralevich2015-04-061-0/+3
* camera: allow loading files with text relocations from /systemNick Kralevich2015-04-021-1/+1
* flo: updates for SELinuxNick Kralevich2015-04-014-13/+12
* flo: label boot block deviceNick Kralevich2015-02-281-0/+1
* Allow init to rm /dev/diagNick Kralevich2015-02-061-0/+1
* netmgrd: give explicit read access to /proc/netNick Kralevich2015-01-141-0/+3
* Merge commit 'd903bf6916640b88730f54b1b65986696cdfb1ab' into HEADBill Yi2014-10-222-4/+4
|\
| * am 1b8393bc: am fa17d629: Merge "Assign specific types to system and recovery...Nick Kralevich2014-10-181-4/+7
| |\
| * \ am c43809cb: am e2fa6ce7: Merge "Assign specific types to userdata and cache ...Nick Kralevich2014-09-271-0/+3
| |\ \
| * | | tee.te: set persist_data_path permissionMekala Natarajan2014-08-081-1/+4
| * | | move rmt into SELinux enforcingNick Kralevich2014-07-171-3/+0
| * | | Update selinux rules for rmt_storageNick Kralevich2014-07-173-1/+11
* | | | Assign specific type to metadata block device.Stephen Smalley2014-10-211-0/+2
| |_|/ |/| |
* | | Assign specific types to system and recovery block devices.Stephen Smalley2014-10-021-4/+7
| |/ |/|