tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
35385 commits 1 branch 0 tags 50 MiB
Commit graph

35385 commits

This branch
This branch
All branches
Author SHA1 Message Date
Geremy Condra
4959ecd167 Allow dhcpd to interact with ttys. 
Bug: 8539042
Change-Id: I27bcc4a485b031d54e17b03164642821d546e62f
 2013-04-03 16:04:43 -07:00
Geremy Condra
9db723b6f6 am d29d2e75: am 404fc4fa: Merge "Add the sys_resource capability to sdcardd." into jb-mr2-dev 
* commit 'd29d2e75a06c7813055491ab8960cd6b62c3f631':
  Add the sys_resource capability to sdcardd.
 2013-04-03 15:03:49 -07:00
Geremy Condra
d29d2e75a0 am 404fc4fa: Merge "Add the sys_resource capability to sdcardd." into jb-mr2-dev 
* commit '404fc4fa696d1d74866113d949d90a71de3905f9':
  Add the sys_resource capability to sdcardd.
 2013-04-03 14:22:15 -07:00
Geremy Condra
404fc4fa69 Merge "Add the sys_resource capability to sdcardd." into jb-mr2-dev 2013-04-03 21:16:37 +00:00
Geremy Condra
8e63ba4c70 am ee4426ae: am 2c831009: Fix various SELinux denials. 
* commit 'ee4426ae0289e9f3d21ccee55198b4125b489733':
  Fix various SELinux denials.
 2013-04-03 14:12:21 -07:00
Geremy Condra
ee4426ae02 am 2c831009: Fix various SELinux denials. 
* commit '2c831009a59f122fc870bedb6ed084eb5aeea0b0':
  Fix various SELinux denials.
 2013-04-03 13:59:52 -07:00
Stephen Smalley
cebe6a653b Allow ueventd to relabel sysfs nodes. 
Required for If8b8d66120453123c1371ce063b6f20e8b96b6ef .

Change-Id: I98871b957db8b291cbbb827b5eb39b4279ce4194
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
 2013-04-03 16:36:56 -04:00
Geremy Condra
2c831009a5 Fix various SELinux denials. 
Change-Id: I73a2b841ab3399b7528b8084a5c4736e6ecea48a
 2013-04-03 12:00:41 -07:00
Geremy Condra
7a23fcc859 Fix various SELinux denials. 
Change-Id: I73a2b841ab3399b7528b8084a5c4736e6ecea48a
 2013-04-02 22:12:40 -07:00
Robert Craig
d7be122ea6 am 08ca8ad6: am 84c46de5: Remove unneeded device type. 
* commit '08ca8ad6d9a235b86a87aaec8f519b9ba9e20d2e':
  Remove unneeded device type.
 2013-04-02 12:35:52 -07:00
Robert Craig
08ca8ad6d9 am 84c46de5: Remove unneeded device type. 
* commit '84c46de5251bbf567740d065c833cd3a3662e4f5':
  Remove unneeded device type.
 2013-04-02 12:33:03 -07:00
Robert Craig
84c46de525 Remove unneeded device type. 
timerirq_device has been removed in favor
of using the existing sensors_device domain.

Change-Id: I503e4a511c2901890356559c0afb971392b4ec6f
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
 2013-04-02 09:49:14 -04:00
Stephen Smalley
6a4391dbb8 am e267afa3: am e543a8bc: Increase policy version to 26. 
* commit 'e267afa32070609b080d4a7900cd27179430e04d':
  Increase policy version to 26.
 2013-04-01 11:12:31 -07:00
Stephen Smalley
e267afa320 am e543a8bc: Increase policy version to 26. 
* commit 'e543a8bc2a2d08ff381e5ae9e34cc2a094acf895':
  Increase policy version to 26.
 2013-04-01 11:09:14 -07:00
Stephen Smalley
e543a8bc2a Increase policy version to 26. 
Increase the SELinux policy version to 26.  This is needed
for name-based transitions used by the manta sepolicy.
Requires kernel 3.0 or higher.

Change-Id: I046fa9f7122f77506c70b2c735345bc0194935df
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
 2013-04-01 13:42:25 -04:00
Geremy Condra
f460aa43f8 am 4387956f: Add the ability to stat files under /cache for media_app. 
* commit '4387956f2607f9836e13267c10c5a5d0929eeb4c':
  Add the ability to stat files under /cache for media_app.
 2013-03-29 16:39:46 -07:00
Geremy Condra
bcb6de6129 am 06575ee4: Add remount capability to Zygote. 
* commit '06575ee40c5ddc0f151270dd1679d5c0ceeb333e':
  Add remount capability to Zygote.
 2013-03-29 16:39:46 -07:00
Geremy Condra
d3fc027fbd am 020b5ff6: Add a key directory argument to insertkeys.py 
* commit '020b5ff6311044ef7a2200dd4db69f5cccf46213':
  Add a key directory argument to insertkeys.py
 2013-03-29 16:39:45 -07:00
Geremy Condra
022388ae53 am 8abf01ac: Drop MLS separation for compatibility. 
* commit '8abf01ac3320c2cafd8d228ec45646aafa4a9332':
  Drop MLS separation for compatibility.
 2013-03-29 16:39:45 -07:00
Geremy Condra
47458307ef am c529c66f: Add policy for __properties__ device. 
* commit 'c529c66f2c80fc243053310e0c92ff093ed1d01f':
  Add policy for __properties__ device.
 2013-03-29 16:39:45 -07:00
Geremy Condra
1ac712f74c Add the sys_resource capability to sdcardd. 
Change-Id: I0b2ecdbddbed3d5ea1617c9ae9af7f8b1c9ace93
 2013-03-29 16:30:15 -07:00
Geremy Condra
4387956f26 Add the ability to stat files under /cache for media_app. 
This feels like a hidden bug- it shouldn't be trying to
stat everything under /cache anyways- but allowing for now.

Change-Id: Ib5ddfbb408c9f0b6c6218c78a678fcdb09360ccd
 2013-03-29 16:30:06 -07:00
Geremy Condra
06575ee40c Add remount capability to Zygote. 
This is a consequence of https://googleplex-android-review.googlesource.com/#/c/278069/

Change-Id: I9b310860534a80e7145950f6c632cf5ba0ad56a7
 2013-03-29 16:29:54 -07:00
Geremy Condra
020b5ff631 Add a key directory argument to insertkeys.py 
This allows us to better integrate key selection with our existing
build process.

Change-Id: I6e3eb5fbbfffb8e31c5edcf16f74df7c38abe537
 2013-03-29 16:29:43 -07:00
Geremy Condra
8abf01ac33 Drop MLS separation for compatibility. 
Change-Id: I555361d732b8f1bdc90c231a3183a85526a5a558
 2013-03-29 16:29:06 -07:00
Geremy Condra
c529c66f2c Add policy for __properties__ device. 
Change-Id: Ie9b391283362fb6930f1ae858f0a879835c91e32
 2013-03-29 12:59:21 -07:00
Geremy Condra
c141fc038d am 7c8e6d4a: am f4d5f3e1: Merge "Add missing seinfo tag from mac_permissions.xml policy." 
* commit '7c8e6d4a962a5a10dfb32dcd4cbb33d29881d07d':
  Add missing seinfo tag from mac_permissions.xml policy.
 2013-03-28 14:33:03 -07:00
Geremy Condra
7c8e6d4a96 am f4d5f3e1: Merge "Add missing seinfo tag from mac_permissions.xml policy." 
* commit 'f4d5f3e1f6db56c80959428591bb3dbbe685b010':
  Add missing seinfo tag from mac_permissions.xml policy.
 2013-03-28 14:29:25 -07:00
Geremy Condra
f4d5f3e1f6 Merge "Add missing seinfo tag from mac_permissions.xml policy." 2013-03-28 21:10:11 +00:00
Stephen Smalley
dc4837af0c am 7a80915f: am 2ae799e4: Drop separate domain for browser. 
* commit '7a80915f2a741198dbbbfd963a401a3df881c716':
  Drop separate domain for browser.
 2013-03-28 14:00:22 -07:00
Stephen Smalley
ff4002581e am 882f7ee2: am 0ecb0f88: Eliminate most of the app policy booleans. 
* commit '882f7ee2685133049878d007cdb85354bc62faa1':
  Eliminate most of the app policy booleans.
 2013-03-28 14:00:22 -07:00
Stephen Smalley
7a80915f2a am 2ae799e4: Drop separate domain for browser. 
* commit '2ae799e44e6603c4b5edc941ce41df9eaa7785ae':
  Drop separate domain for browser.
 2013-03-28 13:55:47 -07:00
Stephen Smalley
882f7ee268 am 0ecb0f88: Eliminate most of the app policy booleans. 
* commit '0ecb0f886660da5ddfd6945e4b993048727caac8':
  Eliminate most of the app policy booleans.
 2013-03-28 13:55:46 -07:00
Stephen Smalley
2ae799e44e Drop separate domain for browser. 
Change-Id: Ib37b392cb6f6d3fb80852b9a2a6547ab86cd9bff
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
 2013-03-28 12:41:32 -04:00
Stephen Smalley
0ecb0f8866 Eliminate most of the app policy booleans. 
Just allow them unconditionally for compatibility.

Change-Id: I85b56532c6389bdfa25731042b98d8f254bd80ee
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
 2013-03-28 10:14:25 -04:00
Robert Craig
65911e8d5d Add missing seinfo tag from mac_permissions.xml policy. 
A prior merge accidentally dropped the seinfo tag from the
release keys stanza.

Change-Id: I99f9ea8d0981c5324c3875896b0673552a03d2ca
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
 2013-03-28 06:48:27 -04:00
Geremy Condra
3ca322e6d4 Add the sys_resource capability to sdcardd. 
Change-Id: I0b2ecdbddbed3d5ea1617c9ae9af7f8b1c9ace93
 2013-03-27 21:14:31 -07:00
Geremy Condra
643b65e2a7 Add the ability to stat files under /cache for media_app. 
This feels like a hidden bug- it shouldn't be trying to
stat everything under /cache anyways- but allowing for now.

Change-Id: Ib5ddfbb408c9f0b6c6218c78a678fcdb09360ccd
 2013-03-27 20:59:14 -07:00
Geremy Condra
8b80fa890d Add remount capability to Zygote. 
This is a consequence of https://googleplex-android-review.googlesource.com/#/c/278069/

Change-Id: I9b310860534a80e7145950f6c632cf5ba0ad56a7
 2013-03-27 19:55:40 -07:00
Geremy Condra
7c89b6b0b0 Merge "Add a key directory argument to insertkeys.py" 2013-03-28 02:36:26 +00:00
Geremy Condra
51dd0339e3 Add a key directory argument to insertkeys.py 
This allows us to better integrate key selection with our existing
build process.

Change-Id: I6e3eb5fbbfffb8e31c5edcf16f74df7c38abe537
 2013-03-27 19:35:48 -07:00
Geremy Condra
b41fedcfd6 am c507c377: am 96c109e8: Merge "Revert "Revert "Rewrite mac_permissions.xml file.""" 
* commit 'c507c37707400aba90d6cb25962ca789bf8f4084':
  Revert "Revert "Rewrite mac_permissions.xml file.""
 2013-03-27 17:51:12 -07:00
Geremy Condra
c507c37707 am 96c109e8: Merge "Revert "Revert "Rewrite mac_permissions.xml file.""" 
* commit '96c109e8f6de0a2541aabccacecec65bd5ec4c31':
  Revert "Revert "Rewrite mac_permissions.xml file.""
 2013-03-27 17:45:23 -07:00
Geremy Condra
96c109e8f6 Merge "Revert "Revert "Rewrite mac_permissions.xml file.""" 2013-03-28 00:22:33 +00:00
Geremy Condra
59fd8d40de Revert "Revert "Rewrite mac_permissions.xml file."" 
This reverts commit 31d1a40b2e

Change-Id: I70aab6f01b9a74512dcbd9bff167890747e54355
 2013-03-28 00:19:52 +00:00
Geremy Condra
c0dc668017 Add policy for __properties__ device. 
Change-Id: Ie9b391283362fb6930f1ae858f0a879835c91e32
 2013-03-27 15:56:12 -07:00
Geremy Condra
17a41bdb65 Drop MLS separation for compatibility. 
Change-Id: I555361d732b8f1bdc90c231a3183a85526a5a558
 2013-03-27 15:14:48 -07:00
William Roberts
8b92506821 am e693ed7c: Remove the su domain from -user builds. 
* commit 'e693ed7c187804b3b1ae49bf0d31bd43e7a19e08':
  Remove the su domain from -user builds.
 2013-03-27 13:55:33 -07:00
Geremy Condra
2d580ddc16 am 16820182: Merge "Expand insertkeys.py script to allow union of files." 
* commit '1682018210077f27a04cd992c660ab7b21a21afc':
  Expand insertkeys.py script to allow union of files.
 2013-03-27 13:55:32 -07:00
Geremy Condra
ebbee43efb am e69552ba: Revert "Revert "Various minor policy fixes based on CTS."" 
* commit 'e69552ba2d76174d443d1b8457295e4d72f2a986':
  Revert "Revert "Various minor policy fixes based on CTS.""
 2013-03-27 13:55:32 -07:00