aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2013-12-10Merge "Support run-as and ndk-gdb functionality."idea133Nick Kralevich
2013-12-09Restrict mapping low memory.Stephen Smalley
2013-12-09Support run-as and ndk-gdb functionality.Stephen Smalley
2013-12-09Restrict ptrace access by debuggerd and unconfineddomain.Stephen Smalley
2013-12-06Allow app-app communication via pipesNick Kralevich
2013-12-06Merge "Make debuggerd enforcing."Nick Kralevich
2013-12-06am fea6e66f: Allow kernel domain, not init domain, to set SELinux enforcing m...Stephen Smalley
2013-12-06Allow kernel domain, not init domain, to set SELinux enforcing mode.Stephen Smalley
2013-12-06am 9e8b8d9f: Revert "Allow kernel domain, not init domain, to set SELinux enf...Nick Kralevich
2013-12-06Revert "Allow kernel domain, not init domain, to set SELinux enforcing mode."Nick Kralevich
2013-12-06am bf12e225: Allow kernel domain, not init domain, to set SELinux enforcing m...Stephen Smalley
2013-12-06Allow kernel domain, not init domain, to set SELinux enforcing mode.Stephen Smalley
2013-12-06am 2b392fcc: Move lmkd into it\'s own domain.Nick Kralevich
2013-12-06am 7adb999e: Restrict the ability to set usermodehelpers and proc security se...Stephen Smalley
2013-12-06Move lmkd into it's own domain.Nick Kralevich
2013-12-06Make debuggerd enforcing.Stephen Smalley
2013-12-06Restrict the ability to set usermodehelpers and proc security settings.Stephen Smalley
2013-12-05Merge commit '4ab298359613736281e10accaed3a6ffe1fe590a' into HEADThe Android Open Source Project
2013-12-05Fix new rild denials.Robert Craig
2013-12-05Drop tegra specific label from policy.Robert Craig
2013-12-05Merge "Allow SELinuxPolicyInstallReceiver to work."Nick Kralevich
2013-12-02Restrict the ability to set SELinux enforcing mode to init.Stephen Smalley
2013-12-02Allow SELinuxPolicyInstallReceiver to work.Stephen Smalley
2013-12-02Merge "Make the isolated_app domain enforcing."Nick Kralevich
2013-12-02Default to socket_device for anything under /dev/socket.Stephen Smalley
2013-12-02Make the isolated_app domain enforcing.Stephen Smalley
2013-11-27Allow write access to ashmem allocated regionsNick Kralevich
2013-11-22am 043b9027: Confine watchdogd, but leave it permissive for now.Stephen Smalley
2013-11-22Merge commit '060f6fa67e1d9779d2d8357659ae530d65171faa' into HEADThe Android Open Source Project
2013-11-21Confine watchdogd, but leave it permissive for now.Stephen Smalley
2013-11-19am 1ed3caf7: Merge "Add support for duplicate allow rule detection (-D / --du...Nick Kralevich
2013-11-19Merge "Add support for duplicate allow rule detection (-D / --dups)."Nick Kralevich
2013-11-18Add support for duplicate allow rule detection (-D / --dups).Stephen Smalley
2013-11-18am 006260e5: Merge "Confine hostapd, but leave it permissive for now."Nick Kralevich
2013-11-18Merge "Confine hostapd, but leave it permissive for now."Nick Kralevich
2013-11-18am 2b939e8c: Merge "Confine ping, but leave it permissive for now."Nick Kralevich
2013-11-18Merge "Confine ping, but leave it permissive for now."Nick Kralevich
2013-11-18Confine hostapd, but leave it permissive for now.Stephen Smalley
2013-11-14am 35e8dcc9: Merge "Let vold mount OBB files on external storage." into klp-devJeff Sharkey
2013-11-15Merge "Let vold mount OBB files on external storage." into klp-devandroid-sdk-4.4.2_r1.0.1android-sdk-4.4.2_r1android-4.4.2_r2.0.1android-4.4.2_r2android-4.4.2_r1.0.1android-4.4.2_r1android-4.4.1_r1.0.1android-4.4.1_r1kitkat-mr1.1-releasekitkat-mr1-releaseJeff Sharkey
2013-11-14Let vold mount OBB files on external storage.Jeff Sharkey
2013-11-14am 24fb24f7: am ae49e7a3: Merge "Confine tee, but leave it permissive for now."Nick Kralevich
2013-11-14am ae49e7a3: Merge "Confine tee, but leave it permissive for now."Nick Kralevich
2013-11-14Merge "Confine tee, but leave it permissive for now."Nick Kralevich
2013-11-14am 678420e0: am 6ce3d60c: Merge "Confine rild, but leave it permissive for now."Nick Kralevich
2013-11-14am 67a53232: am b1cb3205: Confine wpa_supplicant, but leave it permissive for...Stephen Smalley
2013-11-14am 6ce3d60c: Merge "Confine rild, but leave it permissive for now."Nick Kralevich
2013-11-14am b1cb3205: Confine wpa_supplicant, but leave it permissive for now.Stephen Smalley
2013-11-14Merge "Confine rild, but leave it permissive for now."Nick Kralevich
2013-11-13Confine rild, but leave it permissive for now.Stephen Smalley