5 commits

Author	SHA1	Message	Date
Jeff Vander Stoep	00fdd71185	autoplay_app: cgroup write perms moved to domain ... Remove from autoplay Change-Id: Ic9f019f69e5f2dff5e2b8d03d39052486660d791	2016-01-27 09:27:16 -08:00
Nick Kralevich	6b3a308805	autoplay_app.te: remove debugfs write access ... This should no longer be necessary due to https://android-review.googlesource.com/185597 Change-Id: I2cd5fde8f1319684cc558e64ea5cdd230061367e	2015-12-14 14:02:40 -08:00
Jeff Vander Stoep	b7baa7fd2f	autoplay_app: access to services and other permissions ... Change-Id: I01bb0ad7c93e807cd76135bce554abf0908a54ab	2015-12-09 12:36:09 -08:00
Jeff Vander Stoep	ae72bf241d	Populate autoplay_app with minimal set of permissions ... Change-Id: Ia90fb531cfd99d49d179921f041dd93c7325ad50	2015-11-25 09:41:05 -08:00
Jeff Vander Stoep	400d3ac140	Add autoplay_app domain ... Initial check in of empty autoplay_app.te policy file. Create isAutoPlayApp input selector. Give this selector high precedence - only below isSystemServer. Add neverallow rule disallowing an app context with isAutoPlayApp=true from running in a domain other than autoplay_app. Change-Id: I1d06669d2f1acf953e50867dfa2b264ccaee29a4	2015-11-09 13:43:55 -08:00