Commit graph

7 commits

Author SHA1 Message Date
Mike Lockwood
0a52df5020 Give bootanimation access to /dev/snd files so it can use tinyalsa
Bug: 17674304

Change-Id: Ide32833809bca8d3ed8ddc898748e25d7a692319
2014-10-02 16:26:59 -07:00
Vineeta Srivastava
b4fcaeea34 sepolicy for oem cutomization
Added read permissions for bootanimation

Bug: 16635599
Change-Id: Ib5d0ba5a6d1144ff831f4f0eda092879f853c376
2014-09-22 21:17:39 +00:00
Riley Spahn
bf69632724 DO NOT MERGE: Remove service_manager audit_allows.
Remove the audit_allow rules from lmp-dev because
we will not be tightening any further so these logs
will not be useful.

Change-Id: Ibd0e4bf4e8f4f5438c3dbb9114addaadac9ef8c9
2014-07-18 19:58:27 +00:00
Riley Spahn
344fc109e9 Add access control for each service_manager action.
Add SELinux MAC for the service manager actions list
and find. Add the list and find verbs to the
service_manager class. Add policy requirements for
service_manager to enforce policies to binder_use
macro.

(cherry picked from commit b8511e0d98)

Change-Id: I980d4a8acf6a0c6e99a3a7905961eb5564b1be15
2014-07-15 10:09:52 -07:00
Ed Heyl
81839dfb24 reconcile aosp (3a8c5dc05f) after branching. Please do not merge.
Change-Id: Ic8ee83ed6ffef02bddd17e1175416fc2481db7b2
2014-07-14 23:31:31 -07:00
Stephen Smalley
8ad225908d Make bootanim domain enforcing.
Change-Id: I9d87c35cc8d4ffffab4f7c28f3d3d43f85b10123
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
2013-12-13 14:37:36 -05:00
Stephen Smalley
acde43f23f Define a domain for the bootanim service.
Leave the domain permissive initially until it gets more testing.

Change-Id: I9d88d76d1ffdc79a2eff4545d37a9e615482df50
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
2013-12-12 09:28:52 -05:00