tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
18745 commits 1 branch 0 tags 50 MiB
Commit graph

18745 commits

This branch
This branch
All branches
Author SHA1 Message Date
TreeHugger Robot
11111939ef Merge "Camera HAL: Allow minor version changes to camera.provider" 2019-01-11 04:28:51 +00:00
Michael Groover
949586b87b Merge "Add sepolicy for cameraserver to find sensor_privacy_service" 2019-01-10 19:53:53 +00:00
Tri Vo
c0f11bf4a9 Merge "Apply full_treble_only to whole rule." am: 0fa0d1e596 am: 4aa78f8054 
am: e9f70f7c35

Change-Id: I627802b54da2cb9e4bd7265f50ea78a0ce3bb7c6
 2019-01-09 19:20:29 -08:00
Tri Vo
e9f70f7c35 Merge "Apply full_treble_only to whole rule." am: 0fa0d1e596 
am: 4aa78f8054

Change-Id: Ic2e376f3998d754d7e186d7cf82dcb1433b34203
 2019-01-09 19:15:43 -08:00
Chong Zhang
aabee2a23c adding apex for media swcodecs am: b1ab8c6f9f am: 9a4260545d 
am: 79e8b071ea

Change-Id: Iacab66eaaa38010a738a0f64038d211b5cd5ae47
 2019-01-09 19:15:31 -08:00
Tri Vo
4aa78f8054 Merge "Apply full_treble_only to whole rule." 
am: 0fa0d1e596

Change-Id: Ie1d550d4dcb0123db423f1625d4489e16befe580
 2019-01-09 19:11:37 -08:00
Chong Zhang
79e8b071ea adding apex for media swcodecs am: b1ab8c6f9f 
am: 9a4260545d

Change-Id: Iaf55f01aeaac1c72654bbb73b5f2feb67499f708
 2019-01-09 19:11:21 -08:00
Tri Vo
0fa0d1e596 Merge "Apply full_treble_only to whole rule." 2019-01-10 03:06:35 +00:00
Chong Zhang
9a4260545d adding apex for media swcodecs 
am: b1ab8c6f9f

Change-Id: I7f1ba386bc168b0f5607308d3cc180f43146a3df
 2019-01-09 19:06:04 -08:00
Tri Vo
1e99de5779 Apply full_treble_only to whole rule. 
The way we build and run CTS expects full_treble_only and
compatible_property_only macros to be applied to whole rules and not be
nested inside other rules.

Fixes: 122601363
Test: corresponding neverallow rule in auto-generated
SELinuxNeverallowRulesTest.java is parsed correctly.
Change-Id: Ibf5187cedca72510fe74c6dc55a75a54a86c02ff
 2019-01-09 16:57:09 -08:00
Chong Zhang
b1ab8c6f9f adding apex for media swcodecs 
bug: 111407413
Change-Id: Ica209ad9476b0597a206bf53823a1928643c8256
 2019-01-09 13:24:59 -08:00
Yabin Cui
819fb2fe1e Merge "Add permissions in runas_app domain to debug/profile debuggable apps." am: cd1c24f323 am: 0dd15e788a 
am: b60f982707

Change-Id: I102ae116e38ee87d291c15a814976c750c180c6e
 2019-01-09 12:17:01 -08:00
Yabin Cui
b60f982707 Merge "Add permissions in runas_app domain to debug/profile debuggable apps." am: cd1c24f323 
am: 0dd15e788a

Change-Id: Ia4535cdb37ed1f0f6403f27a2c75c97e25349953
 2019-01-09 12:11:30 -08:00
Yabin Cui
0dd15e788a Merge "Add permissions in runas_app domain to debug/profile debuggable apps." 
am: cd1c24f323

Change-Id: I11c6f1d25977837b5388de34a3796b7cadcf5ea8
 2019-01-09 12:06:09 -08:00
Treehugger Robot
cd1c24f323 Merge "Add permissions in runas_app domain to debug/profile debuggable apps." 2019-01-09 19:48:18 +00:00
Chenbo Feng
480c3cc5f7 Merge "Use bpfloader to create bpf maps instead of netd" am: a739746990 am: 1e98efd4c6 
am: d0392f3828

Change-Id: Ic30cdf07bc4f507e0409b4183b1616ed92ceccf4
 2019-01-09 11:36:15 -08:00
Jeff Vander Stoep
ec0e0e0e3c Merge "audit use of net.dns. property" am: 7813cf4249 am: e61a910b19 
am: ebfe24a8b7

Change-Id: I8735e20bdbd5b03be3ecc98f8047c2812628afb6
 2019-01-09 11:35:30 -08:00
Chenbo Feng
d0392f3828 Merge "Use bpfloader to create bpf maps instead of netd" am: a739746990 
am: 1e98efd4c6

Change-Id: I7f48004707c40cb4c063f0a17ad015ac76b313b5
 2019-01-09 11:16:43 -08:00
Jeff Vander Stoep
ebfe24a8b7 Merge "audit use of net.dns. property" am: 7813cf4249 
am: e61a910b19

Change-Id: I2e77782f006028810dbec651fec4c768d8e1ec94
 2019-01-09 11:16:16 -08:00
Chenbo Feng
1e98efd4c6 Merge "Use bpfloader to create bpf maps instead of netd" 
am: a739746990

Change-Id: Iddcc2231c391c512b03dfa9779661518ffec141b
 2019-01-09 10:54:27 -08:00
Jeff Vander Stoep
e61a910b19 Merge "audit use of net.dns. property" 
am: 7813cf4249

Change-Id: I5bba542852de7b2bebc5777b0452519453db5cdc
 2019-01-09 10:53:49 -08:00
Treehugger Robot
a739746990 Merge "Use bpfloader to create bpf maps instead of netd" 2019-01-09 18:34:49 +00:00
Treehugger Robot
7813cf4249 Merge "audit use of net.dns. property" 2019-01-09 18:26:19 +00:00
Yabin Cui
770a4f6539 Add permissions in runas_app domain to debug/profile debuggable apps. 
runas_app domain is used by lldb/ndk-gdb/simpleperf to debug/profile
debuggable apps. But it misses permissions to ptrace app processes and
read /proc/<app_pid> directory.

Bug: none
Test: build and boot marlin.
Test: run lldb and simpleperf on apps with target sdk version 24-29.
Change-Id: I9e6f940ec81a8285eae8db3b77fb1251a25dedd0
 2019-01-09 17:24:31 +00:00
David Anderson
1378d30fd2 Merge "Allow init to symlink userdata during first stage mounting." am: 39b0b80c34 am: 3cbe14c465 
am: 7691cb7c72

Change-Id: If241b66d68c2c416938c5f7b059dcb7822cbd1bc
 2019-01-08 23:56:34 -08:00
David Anderson
7691cb7c72 Merge "Allow init to symlink userdata during first stage mounting." am: 39b0b80c34 
am: 3cbe14c465

Change-Id: Ib89bba13b52505d36d7381fbe0de1db477200c0b
 2019-01-08 23:48:31 -08:00
David Anderson
3cbe14c465 Merge "Allow init to symlink userdata during first stage mounting." 
am: 39b0b80c34

Change-Id: Iff335fa5d47c7d745625f5c56540b724818ac020
 2019-01-08 23:43:22 -08:00
David Anderson
39b0b80c34 Merge "Allow init to symlink userdata during first stage mounting." 2019-01-09 07:37:00 +00:00
Remi NGUYEN VAN
93bff3a54c Merge "Change package name for NetworkStack" am: b4eef1ae50 am: 2fcc323ab5 
am: 97bcfc08a1

Change-Id: Ic4b5d78b8ba4bb56e920fa9ea69068ac91ed228a
 2019-01-08 21:30:40 -08:00
Tri Vo
1ee18fab0d Separate product_mac_permissions.xml out of system sepolicy. am: 35650d50a1 am: aa8b5689f2 
am: 38ff32b9db

Change-Id: Ic10795238bd5ea73f9608dd84aa0a3ab07e8d298
 2019-01-08 21:20:04 -08:00
Tri Vo
82bf246148 Separate product_service_contexts out of system sepolicy. am: 6ac0896b90 am: 152d7bfdc8 
am: 84fa3b3237

Change-Id: I62153504ff9654609852712ff5ce7c8260ce1247
 2019-01-08 21:19:42 -08:00
Tri Vo
61e264ed7f Separate product_seapp_contexts out of system sepolicy. am: 3507678d2e am: ecbdb81036 
am: f94520e950

Change-Id: Ie302c51bce151c278885fd580e221ae736c76b50
 2019-01-08 21:19:20 -08:00
Tri Vo
2ce8130e01 Separate product_property_contexts out of system sepolicy. am: 5da7200510 am: 17c5b7385f 
am: c81bd2b215

Change-Id: I34f989bde583d997d163f2b18d8090aa0e393073
 2019-01-08 21:18:58 -08:00
Tri Vo
fd86dfed62 Separate product_hwservice_contexts out of system sepolicy. am: ade741635f am: 51b5f66fa8 
am: 11491d0c44

Change-Id: I0ecf3dc3d8846bb2bfe8971505d9c2824ac27690
 2019-01-08 21:18:37 -08:00
Remi NGUYEN VAN
97bcfc08a1 Merge "Change package name for NetworkStack" am: b4eef1ae50 
am: 2fcc323ab5

Change-Id: I5fb68dc6ebed1d2db59ffe7367a100152a1f593d
 2019-01-08 21:15:57 -08:00
Remi NGUYEN VAN
2fcc323ab5 Merge "Change package name for NetworkStack" 
am: b4eef1ae50

Change-Id: I105c5e66c53f4785419d18436b5d7fb7b42196e3
 2019-01-08 21:06:34 -08:00
Tri Vo
38ff32b9db Separate product_mac_permissions.xml out of system sepolicy. am: 35650d50a1 
am: aa8b5689f2

Change-Id: I433d548a195ed86637d521d35d7ac5597164831e
 2019-01-08 21:06:15 -08:00
Tri Vo
84fa3b3237 Separate product_service_contexts out of system sepolicy. am: 6ac0896b90 
am: 152d7bfdc8

Change-Id: Ibf58bd4c2c2e36de3176def7a717c97d3608de9f
 2019-01-08 21:05:57 -08:00
Tri Vo
f94520e950 Separate product_seapp_contexts out of system sepolicy. am: 3507678d2e 
am: ecbdb81036

Change-Id: Id10bea526b4cfec898d911718a124ece5990ab88
 2019-01-08 21:05:39 -08:00
Tri Vo
c81bd2b215 Separate product_property_contexts out of system sepolicy. am: 5da7200510 
am: 17c5b7385f

Change-Id: I25f622d01929af5c5486944819479ab625be3456
 2019-01-08 21:05:13 -08:00
Tri Vo
11491d0c44 Separate product_hwservice_contexts out of system sepolicy. am: ade741635f 
am: 51b5f66fa8

Change-Id: I97ef5093d259708e1fb18dfe96f68eb8e668bc36
 2019-01-08 21:04:54 -08:00
Remi NGUYEN VAN
b4eef1ae50 Merge "Change package name for NetworkStack" 2019-01-09 04:57:19 +00:00
Tri Vo
aa8b5689f2 Separate product_mac_permissions.xml out of system sepolicy. 
am: 35650d50a1

Change-Id: I222870431b122babc913fe0dd78920632f5bd8bc
 2019-01-08 20:55:57 -08:00
Tri Vo
152d7bfdc8 Separate product_service_contexts out of system sepolicy. 
am: 6ac0896b90

Change-Id: Ia4e14801bdea9078ea20bf9477ba3d61d29d9177
 2019-01-08 20:55:45 -08:00
Tri Vo
ecbdb81036 Separate product_seapp_contexts out of system sepolicy. 
am: 3507678d2e

Change-Id: Ie68e48ed83afa9cf8b55bf17befd19524d964fa3
 2019-01-08 20:55:34 -08:00
Tri Vo
17c5b7385f Separate product_property_contexts out of system sepolicy. 
am: 5da7200510

Change-Id: I2f54927fb8c7e6a73c9bdb31cfd79186bcd3d12a
 2019-01-08 20:55:22 -08:00
Tri Vo
51b5f66fa8 Separate product_hwservice_contexts out of system sepolicy. 
am: ade741635f

Change-Id: I3283f121a7dfae31fcd9c831be4c51165f4b6d12
 2019-01-08 20:55:11 -08:00
Eino-Ville Talvala
2efd25cc4a Camera HAL: Allow minor version changes to camera.provider 
Test: Adding a camera.provider@2.5 to a device works correctly
Change-Id: I516698afedad1294c0af3f4efedb0aed0a141780
 2019-01-08 17:02:43 -08:00
TreeHugger Robot
c499a34dad Merge "Allow lazy drm services to run" 2019-01-08 21:30:15 +00:00
Jeff Vander Stoep
ecb00a109c audit use of net.dns. property 
Bug: 33308258
Test: atest CtsSelinuxTargetSdk25TestCases
Change-Id: Ifeceecec7b2f38ebd38b6693712b8f65ee24dc5d
 2019-01-08 18:44:29 +00:00