Gitiles
Code Review Sign In
LeafOS / LeafOS-Project / android_system_sepolicy / 3fbbe8f2abe24eb70e2acf52316bc3584fbf0dc3
  1. 3fbbe8f Merge "Allow shell/toolbox for all domains" into main am: b08b54e735 by Treehugger Robot · 1 year ago
  2. b08b54e Merge "Allow shell/toolbox for all domains" into main by Treehugger Robot · 1 year ago
  3. dc79d84 Add context that system server can access and perfetto can save traces to am: c5cb5a248d by Yisroel Forta · 1 year ago
  4. c5cb5a2 Add context that system server can access and perfetto can save traces to by Yisroel Forta · 1 year, 1 month ago
  5. bd6d03f Allow virtualizationservice to check parent dir am: a9d70d7ba8 by David Drysdale · 1 year ago
  6. 66c5bea Allow shell/toolbox for all domains by Jooyung Han · 1 year ago
  7. a9d70d7 Allow virtualizationservice to check parent dir by David Drysdale · 1 year ago
  8. d63c142 Allow virtualizationserver->ISecretkeeper am: 3242c6a271 by David Drysdale · 1 year ago
  9. 3242c6a Allow virtualizationserver->ISecretkeeper by David Drysdale · 1 year ago
  10. 8dae0dd Merge "Support multiple se_flags modules" into main am: f9f826fb30 by Treehugger Robot · 1 year ago
  11. f9f826f Merge "Support multiple se_flags modules" into main by Treehugger Robot · 1 year ago
  12. 454fadc Merge "Revert^2 "Relax neverallows for vendor to use /system/bin/sh"" into main am: 77b2a438fc by Jooyung Han · 1 year ago
  13. 77b2a43 Merge "Revert^2 "Relax neverallows for vendor to use /system/bin/sh"" into main by Jooyung Han · 1 year ago
  14. b42fd4c Merge "label boot animations on oem with bootanim_oem_file" into main am: d1fada7e61 by Inseob Kim · 1 year ago
  15. d1fada7 Merge "label boot animations on oem with bootanim_oem_file" into main by Inseob Kim · 1 year ago
  16. 9a123be Revert^2 "Relax neverallows for vendor to use /system/bin/sh" by Jooyung Han · 1 year, 1 month ago
  17. dd1b00f Merge "Revert "Relax neverallows for vendor to use /system/bin/sh"" into main am: bbff9f5ea1 by Jernej Virag · 1 year, 1 month ago
  18. bbff9f5 Merge "Revert "Relax neverallows for vendor to use /system/bin/sh"" into main by Jernej Virag · 1 year, 1 month ago
  19. 1f915b4 label boot animations on oem with bootanim_oem_file by Håkan Kvist · 1 year, 1 month ago
  20. f77cf67 Revert "Relax neverallows for vendor to use /system/bin/sh" by Joonhun Shin · 1 year, 1 month ago
  21. 7f41c9d Merge "Relax neverallows for vendor to use /system/bin/sh" into main am: 0ae95839d3 by Jooyung Han · 1 year, 1 month ago
  22. bf7f4a4 Support multiple se_flags modules by Inseob Kim · 1 year, 1 month ago
  23. 0ae9583 Merge "Relax neverallows for vendor to use /system/bin/sh" into main by Jooyung Han · 1 year, 1 month ago
  24. db14b17 Add fifo_file read access to enable gpuservice within device cts am: 4105da26f9 by Trevor David Black · 1 year, 1 month ago
  25. 4105da2 Add fifo_file read access to enable gpuservice within device cts by Trevor David Black · 1 year, 1 month ago
  26. f5b07ca Merge "Add ro.audio.ihaladaptervendorextension_enabled property" into main am: ead55ce93a by Mikhail Naganov · 1 year, 1 month ago
  27. ead55ce Merge "Add ro.audio.ihaladaptervendorextension_enabled property" into main by Mikhail Naganov · 1 year, 1 month ago
  28. 7254b10 Merge "selinux setup for files under /metadata/aconfig dir" into main am: 537a704088 by Dennis Shen · 1 year, 1 month ago
  29. 537a704 Merge "selinux setup for files under /metadata/aconfig dir" into main by Dennis Shen · 1 year, 1 month ago
  30. 4ed39a7 Merge "stats_service: only disallow untrusted access" into main am: aebd92592a by Tej Singh · 1 year, 1 month ago
  31. aebd925 Merge "stats_service: only disallow untrusted access" into main by Tej Singh · 1 year, 1 month ago
  32. f0ba322 Relax neverallows for vendor to use /system/bin/sh by Jooyung Han · 1 year, 1 month ago
  33. 000b251 stats_service: only disallow untrusted access by Tej Singh · 1 year, 1 month ago
  34. dbf77ce Merge "Revert "[res] Allow accessing idmap files in all zygotes"" into main am: 37c4c7c500 by Brandon Liu · 1 year, 1 month ago
  35. 37c4c7c Merge "Revert "[res] Allow accessing idmap files in all zygotes"" into main by Brandon Liu · 1 year, 1 month ago
  36. 8b69e5f Add ro.audio.ihaladaptervendorextension_enabled property by Mikhail Naganov · 1 year, 1 month ago
  37. 6c8210d selinux setup for files under /metadata/aconfig dir by Dennis Shen · 1 year, 1 month ago
  38. 7ee66a0 Revert "[res] Allow accessing idmap files in all zygotes" by Patrick Baumann · 1 year, 1 month ago
  39. 31a94f2 [automerger skipped] [RESTRICT AUTOMERGE] Allow dumpstate to make binder IPC to automotive display service am: d16bdc461f -s ours am: 41f83574eb -s ours by Changyeon Jo · 1 year, 1 month ago
  40. 41f8357 [automerger skipped] [RESTRICT AUTOMERGE] Allow dumpstate to make binder IPC to automotive display service am: d16bdc461f -s ours by Changyeon Jo · 1 year, 1 month ago
  41. 940443d [res] Allow accessing idmap files in all zygotes am: 1195b5eb14 by Yurii Zubrytskyi · 1 year, 1 month ago
  42. 1195b5e [res] Allow accessing idmap files in all zygotes by Yurii Zubrytskyi · 1 year, 1 month ago
  43. ec2735a Allow appdomain to read dir and files under vendor_microdroid_file am: 01c4f57431 by Seungjae Yoo · 1 year, 1 month ago
  44. ee509cc Merge changes from topic "revert-2954994-revert-2952245-vfrc_as_tot_sepolicy-AMFGMLDWQF-IIRWTIICIK" into main am: d88d8959a8 by Inseob Kim · 1 year, 1 month ago
  45. ed15451 Revert^2 "Fix freeze test condition to board api" am: e28eb52f4e by Inseob Kim · 1 year, 1 month ago
  46. 01c4f57 Allow appdomain to read dir and files under vendor_microdroid_file by Seungjae Yoo · 1 year, 1 month ago
  47. d16bdc4 [RESTRICT AUTOMERGE] Allow dumpstate to make binder IPC to automotive display service by Changyeon Jo · 1 year, 5 months ago
  48. d88d895 Merge changes from topic "revert-2954994-revert-2952245-vfrc_as_tot_sepolicy-AMFGMLDWQF-IIRWTIICIK" into main by Inseob Kim · 1 year, 1 month ago
  49. e28eb52 Revert^2 "Fix freeze test condition to board api" by Inseob Kim · 1 year, 1 month ago
  50. e41e95e Revert^2 "Add 1000000.0 mapping file temporarily" by Inseob Kim · 1 year, 1 month ago
  51. 5ce3915 Merge "Add rules for Perfetto to be used from system_server" into main am: f80a830b32 by Treehugger Robot · 1 year, 1 month ago
  52. 0980c27 Merge "Remove mounton from app and web zygote" into main am: a8f2bbf7c2 by Nate Myren · 1 year, 1 month ago
  53. f80a830 Merge "Add rules for Perfetto to be used from system_server" into main by Treehugger Robot · 1 year, 1 month ago
  54. a8f2bbf Merge "Remove mounton from app and web zygote" into main by Nate Myren · 1 year, 1 month ago
  55. 28b811d Add rules for Perfetto to be used from system_server by Carmen Jackson · 1 year, 1 month ago
  56. f86fab0 Merge "SELinux permissions for ProfilingService" into main am: e510cb8696 by Yisroel Forta · 1 year, 1 month ago
  57. e510cb8 Merge "SELinux permissions for ProfilingService" into main by Yisroel Forta · 1 year, 1 month ago
  58. a0787ed remount: allow bootanimation to run animation from oem am: e38af22c5e by Håkan Kvist · 1 year, 1 month ago
  59. aa9d0bf SELinux permissions for ProfilingService by Yisroel Forta · 1 year, 1 month ago
  60. e38af22 remount: allow bootanimation to run animation from oem by Håkan Kvist · 1 year, 1 month ago
  61. 59bb900 Merge "Update sepolicy for service dexopt_chroot_setup and artd_pre_reboot." into main am: 95d371bcfd by Jiakai Zhang · 1 year, 1 month ago
  62. 95d371b Merge "Update sepolicy for service dexopt_chroot_setup and artd_pre_reboot." into main by Jiakai Zhang · 1 year, 1 month ago
  63. faaec9d Add SELinux policy for ContentProtectionManagerService am: 9a7700cd46 by mrulhania · 1 year, 1 month ago
  64. 9a7700c Add SELinux policy for ContentProtectionManagerService by mrulhania · 1 year, 1 month ago
  65. b1019e8 Merge changes from topic "revert-2952245-vfrc_as_tot_sepolicy-AMFGMLDWQF" into main am: 1c9aa0cb18 by Ikjoon Jang · 1 year, 1 month ago
  66. f0f530b Revert "Add 1000000.0 mapping file temporarily" am: 82126e9d77 by Ikjoon Jang · 1 year, 1 month ago
  67. 1c9aa0c Merge changes from topic "revert-2952245-vfrc_as_tot_sepolicy-AMFGMLDWQF" into main by Ikjoon Jang · 1 year, 1 month ago
  68. f3fad1a Revert "Fix freeze test condition to board api" by Ikjoon Jang · 1 year, 1 month ago
  69. 82126e9 Revert "Add 1000000.0 mapping file temporarily" by Ikjoon Jang · 1 year, 1 month ago
  70. 817c49f Update sepolicy for service dexopt_chroot_setup and artd_pre_reboot. by Jiakai Zhang · 1 year, 5 months ago
  71. 92e41b0 Merge "Check if ./bin entries are not vendor_file" into main am: 41e786ae48 by Jooyung Han · 1 year, 1 month ago
  72. 41e786a Merge "Check if ./bin entries are not vendor_file" into main by Jooyung Han · 1 year, 1 month ago
  73. f539425 Merge changes from topic "vfrc_as_tot_sepolicy" into main am: 569241f82f by Inseob Kim · 1 year, 1 month ago
  74. 34a3196 Fix freeze test condition to board api am: 7a235a4d9d by Inseob Kim · 1 year, 1 month ago
  75. 569241f Merge changes from topic "vfrc_as_tot_sepolicy" into main by Inseob Kim · 1 year, 1 month ago
  76. c7b99fb Merge "Add property for enabling stereo spatialization" into main am: 67c12aa98d by Nikhil Bhanu · 1 year, 1 month ago
  77. 67c12aa Merge "Add property for enabling stereo spatialization" into main by Nikhil Bhanu · 1 year, 1 month ago
  78. c945a10 Check if ./bin entries are not vendor_file by Jooyung Han · 1 year, 1 month ago
  79. ef4bd55 Merge "Changes in SELinux Policy for CSS API" into main am: 49a519234b by Treehugger Robot · 1 year, 1 month ago
  80. 49a5192 Merge "Changes in SELinux Policy for CSS API" into main by Treehugger Robot · 1 year, 1 month ago
  81. 9772607 Add property for enabling stereo spatialization by Nikhil Bhanu · 1 year, 1 month ago
  82. d6a43bc Set ro.llndk.api_level as a system prop am: 385d5099cf by Justin Yun · 1 year, 1 month ago
  83. 385d509 Set ro.llndk.api_level as a system prop by Justin Yun · 1 year, 1 month ago
  84. ef60889 Merge "Allow CAP_SYS_NICE for crosvm" into main am: 8a216be443 by David Dai · 1 year, 1 month ago
  85. 8a216be Merge "Allow CAP_SYS_NICE for crosvm" into main by David Dai · 1 year, 1 month ago
  86. 786f918 Merge "Add hal_graphics_mapper_service type" into main am: d4ae4c1165 by Jooyung Han · 1 year, 1 month ago
  87. d4ae4c1 Merge "Add hal_graphics_mapper_service type" into main by Jooyung Han · 1 year, 1 month ago
  88. 7066a96 Allow CAP_SYS_NICE for crosvm by David Dai · 1 year, 1 month ago
  89. dc589e9 Merge "Suppress spurious ipc_lock denials" into main am: e01e8d5595 by Alan Stokes · 1 year, 1 month ago
  90. e01e8d5 Merge "Suppress spurious ipc_lock denials" into main by Alan Stokes · 1 year, 1 month ago
  91. 952673d Add hal_graphics_mapper_service type by Jooyung Han · 1 year, 1 month ago
  92. ef85620 Remove mounton from app and web zygote by Nate Myren · 1 year, 1 month ago
  93. 48c1888 Merge "Revert^2 "Adding sepolicy rules for CrashRecoveryProperties"" into main am: d02643a3ed by Harshit Mahajan · 1 year, 1 month ago
  94. d02643a Merge "Revert^2 "Adding sepolicy rules for CrashRecoveryProperties"" into main by Harshit Mahajan · 1 year, 1 month ago
  95. 00ceacf Merge "Remove all sepolicy relating to ppp/mtp." into main am: 34ee0b5da3 by Hansen Kurli · 1 year, 1 month ago
  96. 34ee0b5 Merge "Remove all sepolicy relating to ppp/mtp." into main by Hansen Kurli · 1 year, 1 month ago
  97. e7c0b7d Merge "system_server: remove access to proc/memhealth/*" into main am: 878f7f1795 by Carlos Galo · 1 year, 1 month ago
  98. 878f7f1 Merge "system_server: remove access to proc/memhealth/*" into main by Carlos Galo · 1 year, 1 month ago
  99. 038885a Modify SELinux rules to allow vold to use the keymaster HAL directly. am: b1c857c824 am: 769bbce026 am: d3db89de5b by Peter Lee · 1 year, 1 month ago
  100. 4a9f07f system_server: remove access to proc/memhealth/* by Carlos Galo · 1 year, 1 month ago