aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2016-03-29Delete external/sepolicy files.HEADmastermainNick Kralevich
2016-03-28refine /data/misc/logd rulesNick Kralevich
2016-03-28Add mlstrustedobject to appfuse object type.Daichi Hirono
2016-03-25Merge "init: logpersist access on debug"Mark Salyzyn
2016-03-25Merge "dumpstate: access to /data/misc/recovery"Mark Salyzyn
2016-03-25dumpstate: access to /data/misc/recoveryMark Salyzyn
2016-03-25init: logpersist access on debugMark Salyzyn
2016-03-25neverallow /data/anr access for isolated/untrusted appsNick Kralevich
2016-03-25sysfs_uio: declare type in core policyJeff Vander Stoep
2016-03-24Move sysfs_thermal to global policy and grant access.dcashman
2016-03-24Add recovery_persist & recovery_refreshMark Salyzyn
2016-03-22global_macros: Allow directory lockingNick Kralevich
2016-03-20system_server.te: expand app_data_file neverallow ruleNick Kralevich
2016-03-17Add rules to allow dumpstate to run systrace.Felipe Leme
2016-03-16Add /data/lib64, /data/vendor/lib64 to ASan sepolicy.Evgenii Stepanov
2016-03-14Mark batteryproperties service as app_api_service.dcashman
2016-03-14Create sysfs_hwrandom type.dcashman
2016-03-11Leftovers of SELinux policy reload mechanismJanis Danisevskis
2016-03-10Allow domains to getattr proc lnk_file.dcashman
2016-03-10Merge "Allow debuggerd to send SIGKILL."Josh Gao
2016-03-09Merge "Remove procfs file read perm from untrusted_app."Daniel Cashman
2016-03-08Allow debuggerd to send SIGKILL.Josh Gao
2016-03-07Remove procfs file read perm from untrusted_app.dcashman
2016-03-04Merge "New postinstall domain and rules to run post-install program."Alex Deymo
2016-03-04Merge "New postinstall domain and rules to run post-install program."Alex Deymo
2016-03-03Update netlink socket classes.Stephen Smalley
2016-03-03Update netlink socket classes.Stephen Smalley
2016-03-02New postinstall domain and rules to run post-install program.Alex Deymo
2016-03-02suppress unnecessary makefile outputNick Kralevich
2016-02-29suppress unnecessary makefile outputNick Kralevich
2016-02-29Allow bluetooth access to the tun device.Nick Kralevich
2016-02-29Allow bluetooth access to the tun device.Nick Kralevich
2016-02-27Don\'t allow permissive SELinux domains on user builds.Nick Kralevich
2016-02-26Don't allow permissive SELinux domains on user builds.Nick Kralevich
2016-02-24Label /proc/meminfo.dcashman
2016-02-24Label /proc/meminfo.dcashman
2016-02-24Allow access to the daydream ("dreams") service.Dan Sandler
2016-02-23Allow access to the daydream ("dreams") service.Dan Sandler
2016-02-22Add recovery service.Tao Bao
2016-02-22Add recovery service.brillo-m10-releasebrillo-m10-devTao Bao
2016-02-19Enable recovery to read batteryinfo.Yabin Cui
2016-02-18Enable recovery to read batteryinfo.Yabin Cui
2016-02-17Merge commit '563b2bfc73740720af9f9048ad164e6f5a9f9128' into HEADBill Yi
2016-02-16Merge "Allow logd.auditd to reboot to safe mode"Sami Tolvanen
2016-02-16Allow netd to use NETLINK_SOCK_DIAG.Lorenzo Colitti
2016-02-10Allow logd.auditd to reboot to safe modeSami Tolvanen
2016-02-10Merge "Remove appdomain sysfs auditallow."Daniel Cashman
2016-02-10Remove appdomain sysfs auditallow.dcashman
2016-02-10Merge changes from topic 'checkseapp-fixups'Jeffrey Vander Stoep
2016-02-10uncrypt: drop generic block_device allow rulesNick Kralevich