Gitiles
Code Review Sign In
LeafOS / LeafOS-Project / android_system_sepolicy / 08de89547d9b03de7f22b209fabae6c3790418a9 / public / file.te
  1. 1f915b4 label boot animations on oem with bootanim_oem_file by Håkan Kvist · 1 year, 1 month ago
  2. 6c8210d selinux setup for files under /metadata/aconfig dir by Dennis Shen · 1 year, 1 month ago
  3. 878f7f1 Merge "system_server: remove access to proc/memhealth/*" into main by Carlos Galo · 1 year, 1 month ago
  4. 4a9f07f system_server: remove access to proc/memhealth/* by Carlos Galo · 1 year, 1 month ago
  5. 0d6679a [Thread] move ot-daemon socket to /dev/socket/ot-daemon by Kangping Dong · 1 year, 2 months ago
  6. ed25d94 vendor_microdroid_file shouldn't be overwrited by Seungjae Yoo · 1 year, 3 months ago
  7. d2a0892 Introduce vendor_microdroid_file for microdroid vendor image by Seungjae Yoo · 1 year, 4 months ago
  8. 52aa503 add percpu_pagelist_high_fraction type by Martin Liu · 1 year, 4 months ago
  9. ebe1316 Create sepolicy for allowing system_server rw in /metadata/repair-mode by Rhed Jao · 1 year, 9 months ago
  10. 0b3f585 Allow system server read binderfs stats by Li Li · 1 year, 5 months ago
  11. 75603e3 allow writes to /sys/power/sync_on_suspend from init by Steve Muckle · 1 year, 5 months ago
  12. 004cc8c system_server: allow access to proc/memhealth/* by Carlos Galo · 1 year, 6 months ago
  13. b6211b8 Introduce vendor_apex_metadata_file by Jooyung Han · 1 year, 9 months ago
  14. dbe230a Allow snapuserd to write log files to /data/misc by Kelvin Zhang · 1 year, 10 months ago
  15. 6b5da95 Use kernel sys/fs/fuse/features/fuse_bpf flag to enable fuse_bpf by Paul Lawrence · 2 years ago
  16. 863cedf Merge "Allow dumpstate to read /data/system/shutdown-checkpoints/" by Treehugger Robot · 2 years ago
  17. dd4c5fa Merge "Adds support for fuseblk binaries." by Alfred Piccioni · 2 years, 1 month ago
  18. 35541e1 Allow dumpstate to read /data/system/shutdown-checkpoints/ by Woody Lin · 2 years, 1 month ago
  19. 01fd5eb Merge "Restrict system server from reading statsd data" by Jeffrey Huang · 2 years, 1 month ago
  20. fcf5a91 Restrict system server from reading statsd data by Jeffrey Huang · 2 years, 1 month ago
  21. 30ae427 Adds support for fuseblk binaries. by Alfred Piccioni · 2 years, 2 months ago
  22. 3e1dc57 Add NTFS support in sepolicy. by Alfred Piccioni · 2 years, 4 months ago
  23. afa8ca6 Merge "much more finegrained bpf selinux privs for networking mainline" by Maciej Żenczykowski · 2 years, 9 months ago
  24. b13921c much more finegrained bpf selinux privs for networking mainline by Maciej Żenczykowski · 2 years, 10 months ago
  25. 37888b3 Remove TZUvA feature. by Neil Fuller · 6 years ago
  26. b07c12c Iorapd and friends have been removed by Jeff Vander Stoep · 2 years, 10 months ago
  27. 9a59923 Restrict creating per-user encrypted directories by Eric Biggers · 2 years, 10 months ago
  28. a933980 Adds GPU sepolicy to support devices with DRM gralloc/rendering by Jason Macnak · 3 years ago
  29. 6ba4146 Merge changes from topic "mglru-exp" by Kalesh Singh · 2 years, 11 months ago
  30. 98f6349 Add sepolicy for Multi-Gen LRU sysfs control by Kalesh Singh · 2 years, 11 months ago
  31. 8337d04 Add label and permission for game_mode_intervention.list by Andy Yu · 3 years ago
  32. 7582132 sepolicy: allow access to binderfs feature files by Carlos Llamas · 3 years ago
  33. 4a55689 system_dlkm: sepolicy: add system_dlkm_file_type by Ramji Jiyani · 3 years, 1 month ago
  34. c27d24c Allow BPF programs from vendor. by Steven Moreland · 5 years ago
  35. 04cddf8 Merge "Allow bpfloader to read fuse's bpf_prog number" by Paul Lawrence · 3 years, 3 months ago
  36. ce54266 Added sepolicy rule for vendor uuid mapping config by Rajesh Nyamagoud · 3 years, 4 months ago
  37. e3e26b7 Allow bpfloader to read fuse's bpf_prog number by Paul Lawrence · 3 years, 4 months ago
  38. 3702f33 introduce new 'proc_bpf' for bpf related sysctls by Maciej Żenczykowski · 3 years, 4 months ago
  39. 5e016c1 Merge "Stop using the bdev_type and sysfs_block_type SELinux attributes" by Bart Van Assche · 3 years, 4 months ago
  40. 37919f5 Merge "Remove references to nonplat sepolicy" by Treehugger Robot · 3 years, 4 months ago
  41. f098071 Remove references to nonplat sepolicy by Jeff Vander Stoep · 3 years, 4 months ago
  42. 6092d63 Allow init to write to /proc/cpu/alignment by Alistair Delva · 3 years, 4 months ago
  43. 4374a1f Stop using the bdev_type and sysfs_block_type SELinux attributes by Bart Van Assche · 3 years, 5 months ago
  44. e3cfa9e Revert "Remove the bdev_type and sysfs_block_type SELinux attributes" by Bart Van Assche · 3 years, 4 months ago
  45. 63930d3 Remove the bdev_type and sysfs_block_type SELinux attributes by Bart Van Assche · 3 years, 5 months ago
  46. e8739ba Revert "Remove the bdev_type and sysfs_block_type SELinux attributes" by Michał Brzeziński · 3 years, 5 months ago
  47. c50f669 Remove the bdev_type and sysfs_block_type SELinux attributes by Bart Van Assche · 3 years, 5 months ago
  48. 27f77dc Grant apexd access the SELinux type sysfs_devices_block by Bart Van Assche · 3 years, 5 months ago
  49. 6988677 Allow init to execute extra_free_kbytes.sh script by Suren Baghdasaryan · 3 years, 7 months ago
  50. 11d2b1c Merge "Don't prevent crosvm from accessing vendor-owned VM disk images" by Jiyong Park · 3 years, 7 months ago
  51. ec50aa5 Allow the init and apexd processes to read all block device properties by Bart Van Assche · 3 years, 7 months ago
  52. 3fee5a4 Don't prevent crosvm from accessing vendor-owned VM disk images by Jiyong Park · 3 years, 7 months ago
  53. b31ec34 Move vendor_sched to common sepolicy by Rick Yiu · 3 years, 7 months ago
  54. bf5b6ce Add new snapuserd socket and property rules. by David Anderson · 3 years, 7 months ago
  55. fa10a14 Refactor apex data file types. by Alan Stokes · 3 years, 8 months ago
  56. 4db56b0 allow init to access watermark_boost_factor by Martin Liu · 3 years, 8 months ago
  57. 9ec5327 Add fusefs_type for FUSE filesystems by Thiébaud Weksteen · 3 years, 9 months ago
  58. 0b2553a Allow the appsearch apex access to the apexdata misc_ce dir. by Alexander Dorokhine · 3 years, 9 months ago
  59. f35c70b Merge changes If26ba23d,Ibea38822 by Hridya Valsaraju · 3 years, 10 months ago
  60. 633f7ca [sepolicy] allow system server to read incfs metrics from sysfs by Songchun Fan · 3 years, 10 months ago
  61. 23f9f51 Revert "Revert "Add neverallows for debugfs access"" by Hridya Valsaraju · 3 years, 10 months ago
  62. 7362f58 Merge changes from topic "revert-1668411-MWQWEZISXF" by Hridya Valsaraju · 3 years, 11 months ago
  63. e95e0ec Revert "Add neverallows for debugfs access" by Hridya Valsaraju · 3 years, 11 months ago
  64. 005ae59 Merge changes from topic "debugfs_neverallow" by Treehugger Robot · 3 years, 11 months ago
  65. a0b504a Add neverallows for debugfs access by Hridya Valsaraju · 4 years ago
  66. c50fecd Allow traced_probes to read devfreq by David Massoud · 3 years, 11 months ago
  67. 49806a1 Merge "Add vendor_kernel_modules type to public." by Yabin Cui · 4 years ago
  68. 2e2df6b Add vendor_kernel_modules type to public. by Yabin Cui · 4 years ago
  69. 806898d Split gsi_metadata_file and add gsi_metadata_file_type attribute by Yi-Yo Chiang · 4 years ago
  70. 3d52817 Selinux policy for bootreceiver tracing instance by Alexander Potapenko · 4 years ago
  71. 08a25e6 Revert "Selinux policy for bootreceiver tracing instance" by Wonsik Kim · 4 years ago
  72. 31251aa Selinux policy for bootreceiver tracing instance by Alexander Potapenko · 4 years ago
  73. 840d4f3 Add sepolicy for /proc/bootconfig by Devin Moore · 4 years, 1 month ago
  74. a1e5881 Add necessary sepolicy for update_engine to reserve space on data by Kelvin Zhang · 4 years, 1 month ago
  75. 3bb3559 Merge "Add sepolicy for scheduling module data directories" by Gavin Corkery · 4 years, 1 month ago
  76. cd3bb57 Add sepolicy for scheduling module data directories by Gavin Corkery · 4 years, 1 month ago
  77. d68cb48 apply 'fs_bpf_tethering' label to /sys/fs/bpf/tethering by Maciej Żenczykowski · 4 years, 1 month ago
  78. 2c3ef29 Allow dumpsys to read total DMA-BUF heap pool size by Hridya Valsaraju · 4 years, 1 month ago
  79. 6217b66 Allow dumpstate to read DMA-BUF sysfs stats by Hridya Valsaraju · 4 years, 2 months ago
  80. 883de3c Merge "Add vendor_public_framework_file type to SEPolicy" by Treehugger Robot · 4 years, 1 month ago
  81. 850842f Add data directory for appcompat by Andrei Onea · 4 years, 2 months ago
  82. 84cd708 Add vendor_public_framework_file type to SEPolicy by Dorin Drimus · 4 years, 1 month ago
  83. d37f2e9 Merge "Sepolicy for mm events trace instance" by Kalesh Singh · 4 years, 1 month ago
  84. aab7a73 Sepolicy for mm events trace instance by Kalesh Singh · 4 years, 2 months ago
  85. bab989d Merge "Add SePolicy for system_server accessing sysfs uhid." by Linzhao Ye · 4 years, 1 month ago
  86. c0e7206 Add SePolicy for system_server accessing sysfs uhid. by Chris Ye · 4 years, 4 months ago
  87. 80dfa06 IncFS: update SE policies for the new API by Yurii Zubrytskyi · 4 years, 2 months ago
  88. 3eabc1d sepolicy: allow system_server to read /proc/locks by Marco Ballesio · 4 years, 2 months ago
  89. b46e956 Merge "Add sepolicy for /metadata/watchdog" by Gavin Corkery · 4 years, 2 months ago
  90. b0aae28 Add sepolicy for /metadata/watchdog by Gavin Corkery · 4 years, 3 months ago
  91. 813c25f Add new selinux type for radio process by Chiachang Wang · 4 years, 2 months ago
  92. 7aa4041 Split user_profile_data_file label. by Alan Stokes · 4 years, 3 months ago
  93. 37f1a13 Add rules for per-API level task profiles and cgroup description files by Suren Baghdasaryan · 4 years, 4 months ago
  94. f8ad339 Introduce app_data_file_type attribute. by Alan Stokes · 4 years, 4 months ago
  95. b01e1d9 Revert "Introduce app_data_file_type attribute." by Alan Stokes · 4 years, 4 months ago
  96. 27e0c74 Introduce app_data_file_type attribute. by Alan Stokes · 4 years, 4 months ago
  97. 1237616 New type for printk_formats, allow traced_probes. by Florian Mayer · 4 years, 4 months ago
  98. 45ac6e8 Merge "Add sepolicy for dm-user devices and the snapuserd daemon." by David Anderson · 4 years, 4 months ago
  99. fe30369 Add sepolicy for dm-user devices and the snapuserd daemon. by David Anderson · 4 years, 5 months ago
  100. cd45230 Allow tracing service to access kallsyms on userdebug by Primiano Tucci · 4 years, 5 months ago