aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2016-01-08grant appdomain rw perms to tun_devicebrillo-m9-releasebrillo-m9-devJeff Vander Stoep
2016-01-08Neverallow isolated and untrusted apps to write system propertiesJohan Redestig
2016-01-08Merge "Allows init to send signals."Bertrand Simonnet
2016-01-07priv_app.te: refine cache_recovery_file auditallow rulesNick Kralevich
2016-01-08Merge "su.te: drop domain_deprecated and app auditallow rules."Nick Kralevich
2016-01-08Merge "Allow domain to read symlinks in /sys."Daniel Cashman
2016-01-07su.te: drop domain_deprecated and app auditallow rules.Nick Kralevich
2016-01-07Allow domain to read symlinks in /sys.dcashman
2016-01-07app: remove permission to execute gpu_deviceJeff Vander Stoep
2016-01-07Allows init to send signals.Bertrand SIMONNET
2016-01-07Remove cache_recovery_file symlink readNick Kralevich
2016-01-06Settings: switch to using ctl.start property instead of exec logcatMark Salyzyn
2016-01-06domain_deprecated.te: Exclude recovery from auditallow for /cache/recoveryNick Kralevich
2016-01-06untrusted_app: remove mtp_device permsJeff Vander Stoep
2016-01-06Merge "Add sysfs_batteryinfo label."Daniel Cashman
2016-01-06Merge "debuggerd.te: allow debuggerd to drop root."Josh Gao
2016-01-05Add sysfs_batteryinfo label.dcashman
2016-01-05debuggerd.te: allow debuggerd to drop root.Josh Gao
2016-01-05Log app access to sysfs for removal.dcashman
2016-01-04Creates a new permission for /cache/recoveryFelipe Leme
2016-01-04Create sysfs_zram label.dcashman
2015-12-29Merge changes from topic 'sepolicy-makefile-cleanup'Daniel Cashman
2015-12-28Minor cleanup to align the content with MasterPavlin Radoslavov
2015-12-28Android.mk: cleanse all set but not unset variablesWilliam Roberts
2015-12-28Android.mk: clean dependencies and clear variablesWilliam Roberts
2015-12-24Add new rules for appfuse.Daichi Hirono
2015-12-23Merge "Settings: Add option to disable logging"Mark Salyzyn
2015-12-23Settings: Add option to disable loggingMark Salyzyn
2015-12-22undeprecate /proc/cpuinfo, more shell permissionsNick Kralevich
2015-12-22shell.te: allow rules before neverallow rulesNick Kralevich
2015-12-17neverallow debugfs accessNick Kralevich
2015-12-17Revert "fingerprintd.te: neverallow fingerprint data file access"Nick Kralevich
2015-12-17fingerprintd.te: neverallow fingerprint data file accessNick Kralevich
2015-12-17Add policies for system_server to delete fpdata folderAmith Yamasani
2015-12-16sectxfile_nl: fix superfluous dependenciesWilliam Roberts
2015-12-16init.te: allow writing to /sys/kernel/debug/tracing/tracing_onNick Kralevich
2015-12-16Merge "checkfc: add attribute test"Jeffrey Vander Stoep
2015-12-14atrace.te: fix /sys/kernel/debug/tracing labelNick Kralevich
2015-12-14checkfc: add attribute testWilliam Roberts
2015-12-14label /sys/kernel/debug/tracing and remove debugfs writeNick Kralevich
2015-12-14Merge "dumpstate: storage statistics"Mark Salyzyn
2015-12-14Merge "bluetoothdomain.te: drop allow bluetoothdomain self:socket create_sock...Nick Kralevich
2015-12-13Merge "Ensure newlines are added between context config files"Nick Kralevich
2015-12-13Ensure newlines are added between context config filesRichard Haines
2015-12-11bluetoothdomain.te: drop allow bluetoothdomain self:socket create_socket_perms;Nick Kralevich
2015-12-11bluetoothdomain.te: drop bluetooth unix_stream_socket auditallowbrillo-m8-releasebrillo-m8-devNick Kralevich
2015-12-11dumpstate: storage statisticsMark Salyzyn
2015-12-10su.te: dontaudit su property_type:fileNick Kralevich
2015-12-10Restore sysfs_devices_system_cpu to domain.teNick Kralevich
2015-12-09Remove core_property_type from ctl_* propertiesNick Kralevich