aboutsummaryrefslogtreecommitdiff
path: root/netd.te
AgeCommit message (Expand)Author
2015-05-07Replace unix_socket_connect() and explicit property sets with macroWilliam Roberts
2015-04-02netd dontaudit fsetidNick Kralevich
2015-02-25Revert /proc/net related changesNick Kralevich
2015-01-15Rules to let netd read packets from NFLOG target.Jeff Sharkey
2015-01-14remove /proc/net read access from domain.teNick Kralevich
2014-09-08Annotate MLS trusted subjects and objects.Stephen Smalley
2014-07-08Allow netd to create data files in /data/misc/net/.Sreeram Ramachandran
2014-06-23Align SELinux property policy with init property_perms.Stephen Smalley
2014-05-14Introduce fwmarkd: a service to set the fwmark of sockets.Sreeram Ramachandran
2014-03-25Replace ctl_default_prop access with explicit service property keys.Robert Craig
2014-03-10Deduplicate neverallow rules on selinuxfs operations.Stephen Smalley
2014-02-25Clean up socket rules.Stephen Smalley
2014-02-25Add a domain for mdnsd and allow connecting to it.Stephen Smalley
2014-02-25Remove fsetid from netd.Stephen Smalley
2014-01-07Create proc_net type for /proc/sys/net entries.Robert Craig
2013-12-15put netd into net_domainNick Kralevich
2013-11-22Merge commit '060f6fa67e1d9779d2d8357659ae530d65171faa' into HEADThe Android Open Source Project
2013-11-13netd: allow tcp_socket name_connectNick Kralevich
2013-11-13netd: allow tcp connections.Nick Kralevich
2013-11-07Neverallow access to the kmem device from userspace.Geremy Condra
2013-09-17am 3bb1ccc2: Fix long-tail denials in enforcing domains.Geremy Condra
2013-09-17Fix long-tail denials in enforcing domains.Geremy Condra
2013-09-13Drop obsolete comments about SEAndroidManager.Stephen Smalley
2013-08-05Fix clatd, broken by selinux policing /dev/tunLorenzo Colitti
2013-07-12remove "self:process ptrace" from domain, netd neverallow rulesNick Kralevich
2013-07-10netd.te: allow ctl.mdnsdNick Kralevich
2013-06-28Enable SELinux protections for netd.Nick Kralevich
2013-05-20Make all domains unconfined.repo sync
2013-05-14Move domains into per-domain permissive mode.repo sync
2013-04-05Strip unnecessary trailing semicolon on macro calls.Stephen Smalley
2013-03-22Create policy for PAN connections.rpcraig
2012-01-06Further policy for Motorola Xoom.Stephen Smalley
2012-01-04SE Android policy.Stephen Smalley