aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2015-08-28am b7934922: allow run-as to access /data/local/tmpNick Kralevich
2015-08-28am 7cd346a7: am 0055ea90: Allow recovery to create device nodes and modify ro...Nick Kralevich
2015-08-28am 7adc8cfe: Allow adbd to write to /data/adbNick Kralevich
2015-08-06Merge "[gatekeeperd] allow calls to UserManagerService" into mnc-devandroid-cts-6.0_r1marshmallow-devAndres Morales
2015-08-06Protect runtime storage mount points.Jeff Sharkey
2015-08-04[gatekeeperd] allow calls to UserManagerServiceAndres Morales
2015-08-03Relax neverallow rule for loading an updated SELinux policy.Nick Kralevich
2015-08-02Merge "init.te: delete kernel load policy support" into mnc-devNick Kralevich
2015-08-01init.te: delete kernel load policy supportNick Kralevich
2015-07-30Let Settings measure transient free space.Jeff Sharkey
2015-07-13Allow domains to read tmpfs symlinks.dcashman
2015-07-10allow procrank to write to bug reportJeff Vander Stoep
2015-06-30Let Zygote unmount inherited storage devices.Jeff Sharkey
2015-06-25Let's reinvent storage, yet again!Jeff Sharkey
2015-06-18remove mako specific neverallow exceptionNick Kralevich
2015-06-18neverallow read to shell- and app-writable symlinks.Stephen Smalley
2015-06-18neverallow transitions to shellWilliam Roberts
2015-06-18neverallow "write ops" on system_data_file from "others"William Roberts
2015-06-17am b23b49f9: am 0abf74eb: fs_use: Enabled loading security xattrs for squashfsMohamad Ayyash
2015-06-17am 0abf74eb: fs_use: Enabled loading security xattrs for squashfsMohamad Ayyash
2015-06-16fs_use: Enabled loading security xattrs for squashfsMohamad Ayyash
2015-06-16neverallow write access to /data/dalvik-cache directories.Stephen Smalley
2015-06-16Merge "Allow clatd CAP_IPC_LOCK for mmap()" into mnc-devErik Kline
2015-06-16Allow clatd CAP_IPC_LOCK for mmap()Erik Kline
2015-06-15installd restorecon now requires getattr.Jeff Sharkey
2015-06-12Merge "sdcardd: ensure that init never executes sdcard daemon" into mnc-devNick Kralevich
2015-06-11sdcardd: ensure that init never executes sdcard daemonNick Kralevich
2015-06-11Merge "Allow vold to change priority when benchmarking." into mnc-devJeff Sharkey
2015-06-11Allow vold to change priority when benchmarking.Jeff Sharkey
2015-06-11Update perfprofd rules to allow wake_unlock inspection.Than McIntosh
2015-06-10Allow recovery to read files with oemfs labelTao Bao
2015-06-10sepolicy-analyze: use headers from common selinux project.dcashman
2015-06-10tools: use headers from common selinux projectJeff Vander Stoep
2015-06-09Merge "New "selinux.restorecon" control property." into mnc-devJeff Sharkey
2015-06-09New "selinux.restorecon" control property.Jeff Sharkey
2015-06-09Merge changes from topic 'na-move-to-installd' into mnc-devNarayan Kamath
2015-06-08Remove service_manager_local_audit_domain.dcashman
2015-06-08Merge "Allow /dev/klog access, drop mknod and __null__ access" into mnc-devNick Kralevich
2015-06-08Allow /dev/klog access, drop mknod and __null__ accessNick Kralevich
2015-06-05Merge "restrict app access to socket ioctls" into mnc-devJeff Vander Stoep
2015-06-05restrict app access to socket ioctlsJeff Vander Stoep
2015-06-05Allow installd to link apk_data_file and dalvikcache_data_file.Narayan Kamath
2015-06-05Revert "Allow system_server to link,relabel and create_dir dalvikcache_data_f...Narayan Kamath
2015-06-04Merge "Move crypt commands to a different listener in vold" into mnc-devPaul Lawrence
2015-06-04Allow system_server to link,relabel and create_dir dalvikcache_data_file.Narayan Kamath
2015-06-03Move crypt commands to a different listener in voldPaul Lawrence
2015-06-02logd: logpersistdMark Salyzyn
2015-05-29DO NOT MERGE New ext4enc kernel switching from xattrs to ioctlPaul Lawrence
2015-05-29DO NOT MERGE Securely encrypt the master keyPaul Lawrence
2015-05-28Merge "Allow system_app to find all system services." into mnc-devdcashman