tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
17140 commits 1 branch 0 tags 50 MiB
Commit graph

12 commits

Author SHA1 Message Date
Jiyong Park
048e136653 Label the dynamic linker in the runtime APEX correctly 
e2bc9fe9d5ac82457bc6050bf705ff43a1b05cbf in platform/art project added
the dynamic linker to the runtime APEX. Since the dynamic linker has
been labeled as 'system_linker_exec' so does the linker in the APEX.

Bug: 120266448
Test: ls -Z /apex/com.android.runtime/bin/linker
u:object_r:system_linker_exec:s0 /apex/com.android.runtime/bin/linker

Change-Id: I243b86a74d94058b3283830c32232c6584639ff3
 2019-01-04 01:19:44 +09:00
Treehugger Robot
66334bd0e4 Merge "Add SELinux policy for Conscrypt APEX" 2018-12-13 23:27:54 +00:00
Neil Fuller
13a72f4b71 Add tz files to the runtime module permissions 
Code in bionic / libcore will now look in the runtime
APEX module for data files.

Bug: 119293618
Bug: 119390260
Test: build / treehugger only
Change-Id: I965c763e7f0452b8ef5ffbf730733e9a41254beb
 2018-12-07 11:35:03 +00:00
Adam Vartanian
8e4412d5e1 Add SELinux policy for Conscrypt APEX 
Bug: 110404540
Test: cts -m CtsLibcoreTestCases -t com.android.org.conscrypt
Change-Id: Id89fc0f5e39515093f1d9d8a4fd075d717b50cf8
 2018-12-07 10:49:44 +00:00
Dario Freni
4df603a038 Remove permission for APEX manifest. 
There is no real need to access the manifest.json (which is being
renamed in other CLs anyway). So remove the access to it.

Bug: 119672727
Test: m, installed on device, boots.
Change-Id: I2d82062031da36f871b2a64d97a50a6f1e6fc3dd
 2018-11-24 17:19:05 +00:00
Treehugger Robot
ac317b915e Merge "Add com.android.resolv-file_contexts to /system/sepolicy/apex" 2018-11-21 13:10:13 +00:00
chenbruce
a5121f64a6 Add com.android.resolv-file_contexts to /system/sepolicy/apex 
Gathering file contexts for all APEXes there for easier auditing.

Test: m com.android.resolv
Bug: 119527674
Change-Id: I0f06c21c77f4b537e7c7d590204569f4531b5302
 2018-11-21 14:39:33 +08:00
Roland Levillain
04dcdeacee Merge "Add file_contexts for Release Runtime APEX module." 2018-11-20 11:54:17 +00:00
Roland Levillain
4592b0f07a Add file_contexts for Release Runtime APEX module. 
Also rename `file_contexts` for the "Debug" Runtime APEX module
(containing both release and debug variants, as well as additional
tools).

Test: make com.android.runtime
Test: make com.android.runtime.release
Test: make com.android.runtime.debug
Test: art/build/apex/runtests.sh
Bug: 113373927
Change-Id: I6b917d7f5b1734aeb717932081c7b03366ef2774
 2018-11-16 19:04:09 +00:00
Jiyong Park
b23f71d97d Set filecontext for the test apex 
Label the surfaceflinger binary as surfaceflinger_exec

Test: m apex.test; m; device is bootable

Change-Id: I22297ba514f7ba298a1d0d4b476a447f26e48078
 2018-11-16 21:10:38 +09:00
Jiyong Park
a4767dd116 Rename APEX file_contexts as <name>-file_context 
It was <name>_file_context before. Changing for better readability.

Bug: 119034475
Test: m apex.test com.android.tzdata com.android.runtime
Change-Id: Ic9d6479dfed56ac474c574343a38b5f73dde3c05
 2018-11-14 13:56:56 +09:00
Jiyong Park
03ccac0e75 Move file_contexts for APEXes to under /system/sepolicy 
For centralized development of sepolices, file_contexts files for APEXes
are all moved to under /system/seplicy.

Bug: 119034475
Bug: 113373927
Test: m apex.test com.android.tzdata com.android.runtime com.android.media
Change-Id: I9bf4874793db4dbdb75cbd759ae95f72d7281007
 2018-11-13 14:22:38 -08:00