Gitiles
Code Review Sign In
LeafOS / LeafOS-Project / android_system_sepolicy / 4541687be516e00492efe3e0ff906f14c8b48910
commit4541687be516e00492efe3e0ff906f14c8b48910[log] [tgz]
authorJeff Vander Stoep <jeffv@google.com>Fri Feb 05 14:17:22 2016 -0800
committerChien-Yu Chen <cychen@google.com>Tue Feb 09 18:00:59 2016 -0800
tree5fca97f2e8e94fb5561f2d2826229554d46f2a3f
parent66855fcaf3eb454e324068f46d46e1173ab38b0a [diff]
cameraserver: Build up least privileged policy

Remove all permissions not observed during testing.

Remove domain_deprecated.

Bug: 26982110
Change-Id: I33f1887c95bdf378c945319494378225b41db215
6 files changed
tree: 5fca97f2e8e94fb5561f2d2826229554d46f2a3f
  1. tools/
  2. access_vectors
  3. adbd.te
  4. Android.mk
  5. app.te
  6. atrace.te
  7. attributes
  8. audioserver.te
  9. autoplay_app.te
  10. binderservicedomain.te
  11. blkid.te
  12. blkid_untrusted.te
  13. bluetooth.te
  14. bluetoothdomain.te
  15. bootanim.te
  16. bootstat.te
  17. cameraserver.te
  18. clatd.te
  19. CleanSpec.mk
  20. debuggerd.te
  21. device.te
  22. dex2oat.te
  23. dhcp.te
  24. dnsmasq.te
  25. domain.te
  26. domain_deprecated.te
  27. drmserver.te
  28. dumpstate.te
  29. file.te
  30. file_contexts
  31. file_contexts_asan
  32. fingerprintd.te
  33. fs_use
  34. fsck.te
  35. fsck_untrusted.te
  36. gatekeeperd.te
  37. genfs_contexts
  38. global_macros
  39. gpsd.te
  40. hci_attach.te
  41. healthd.te
  42. hostapd.te
  43. idmap.te
  44. init.te
  45. initial_sid_contexts
  46. initial_sids
  47. inputflinger.te
  48. install_recovery.te
  49. installd.te
  50. ioctl_defines
  51. ioctl_macros
  52. isolated_app.te
  53. kernel.te
  54. keys.conf
  55. keystore.te
  56. lmkd.te
  57. logd.te
  58. mac_permissions.xml
  59. mdnsd.te
  60. mediaextractor.te
  61. mediaserver.te
  62. mls
  63. mls_macros
  64. MODULE_LICENSE_PUBLIC_DOMAIN
  65. mtp.te
  66. net.te
  67. netd.te
  68. neverallow_macros
  69. nfc.te
  70. NOTICE
  71. otapreopt.te
  72. perfprofd.te
  73. platform_app.te
  74. policy_capabilities
  75. port_contexts
  76. ppp.te
  77. priv_app.te
  78. property.te
  79. property_contexts
  80. racoon.te
  81. radio.te
  82. README
  83. recovery.te
  84. rild.te
  85. roles
  86. runas.te
  87. sdcardd.te
  88. seapp_contexts
  89. security_classes
  90. service.te
  91. service_contexts
  92. servicemanager.te
  93. sgdisk.te
  94. shared_relro.te
  95. shell.te
  96. slideshow.te
  97. su.te
  98. surfaceflinger.te
  99. system_app.te
  100. system_server.te
  101. te_macros
  102. tee.te
  103. toolbox.te
  104. tzdatacheck.te
  105. ueventd.te
  106. uncrypt.te
  107. untrusted_app.te
  108. update_engine.te
  109. update_verifier.te
  110. users
  111. vdc.te
  112. vold.te
  113. watchdogd.te
  114. wpa.te
  115. zygote.te