..
adbd.te
Revert "Revert "Reduce the number of processes that can start adbd""
2018-06-26 19:52:21 +00:00
app.te
app: Allow all apps to read dropbox FDs
2018-09-04 20:23:43 +00:00
asan_extract.te
Sync internal master and AOSP sepolicy.
2017-09-26 14:38:47 -07:00
attributes
Rename untrusted_app_visible_*' to include 'violators'.
2018-08-21 21:32:41 +00:00
audioserver.te
blkid.te
blkid_untrusted.te
bluetooth.te
bootanim.te
Sync internal master and AOSP sepolicy.
2017-09-26 14:38:47 -07:00
bootstat.te
Remove bootstat access to proc label.
2017-09-18 10:29:24 -07:00
bufferhubd.te
mediacodec->mediacodec+hal_omx{,_server,_client}
2018-05-30 18:12:32 +00:00
cameraserver.te
Add shell:fifo_file permission for cameraserver
2018-02-28 16:12:40 -08:00
charger.te
charger: allow to read /sys/class/power_supply
2018-01-18 16:46:17 -08:00
clatd.te
Start the process of locking down proc/net
2018-05-04 21:36:33 +00:00
cppreopts.te
Grant cppreopts.sh permissions to cleanup if it fails
2017-08-23 16:00:23 +00:00
crash_dump.te
crash_dump: disallow ptrace of TCB components
2018-08-28 08:28:25 -07:00
device.te
Define 'super_block_device' type
2018-08-20 10:55:03 -07:00
dex2oat.te
more mmaps
2018-08-13 10:37:56 -07:00
dhcp.te
Start the process of locking down proc/net
2018-05-04 21:36:33 +00:00
display_service_server.te
dnsmasq.te
sepolicy: Add rules for non-init namespaces
2017-11-21 08:34:32 -07:00
domain.te
dumpstate: remove JIT and /data execute
2018-09-06 13:28:34 -07:00
drmserver.te
more mmaps
2018-08-13 10:37:56 -07:00
dumpstate.te
Ensure taking a bugreport generates no denials.
2018-09-10 15:48:34 -07:00
e2fs.te
Allow vendor_init and e2fs to enable metadata encryption
2018-02-01 13:25:34 -08:00
ephemeral_app.te
fastbootd.te
Fastbootd does not require read access to system and boot partitions
2018-09-07 00:09:34 +00:00
file.te
Allow all app types to socket send to statsdw (statsd socket)
2018-08-23 16:13:30 -07:00
fingerprintd.te
Remove fingerprintd access to sysfs_type and cgroup label.
2017-09-19 17:12:14 -07:00
fsck.te
Allow access to the metadata partition for metadata encryption.
2018-01-19 14:45:08 -08:00
fsck_untrusted.te
Sync internal master and AOSP sepolicy.
2017-09-27 18:55:47 -07:00
gatekeeperd.te
Sync internal master and AOSP sepolicy.
2017-09-26 14:38:47 -07:00
global_macros
sepolicy: Add rules for non-init namespaces
2017-11-21 08:34:32 -07:00
hal_allocator.te
Make hal_allocator use hal_attribute_hwservice.
2018-06-11 14:44:12 -07:00
hal_audio.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_audiocontrol.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_authsecret.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_bluetooth.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_bootctl.te
sepolicy: Fix references to self:capability
2018-08-21 15:55:23 +00:00
hal_broadcastradio.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_camera.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_cas.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_configstore.te
Make hal_configstore consistent.
2018-06-06 13:01:17 -07:00
hal_confirmationui.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_contexthub.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_drm.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_dumpstate.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_evs.te
Move automotive HALs sepolicy to system/
2018-05-04 21:36:48 +00:00
hal_fingerprint.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_gatekeeper.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_gnss.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_graphics_allocator.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_graphics_composer.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_health.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_health_filesystem.te
Add sepolicy for health filesystem HAL
2018-08-10 11:02:21 -07:00
hal_ir.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_keymaster.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_light.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_lowpan.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_memtrack.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_neuralnetworks.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_neverallows.te
Allow to use sockets from hal server for auto
2018-05-15 14:38:00 -07:00
hal_nfc.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_oemlock.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_omx.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_power.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_secure_element.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_sensors.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_system_suspend.te
Sepolicy for system suspend HAL.
2018-08-13 17:26:34 -07:00
hal_telephony.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_tetheroffload.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_thermal.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_tv_cec.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_tv_input.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_usb.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_usb_gadget.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_vehicle.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_vibrator.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_vr.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_weaver.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_wifi.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_wifi_hostapd.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_wifi_offload.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
hal_wifi_supplicant.te
hal_attribute_hwservice_client drop '_client'
2018-06-06 09:30:18 -07:00
healthd.te
Fix aosp healthd. am: dd7d5a7038
2018-03-28 01:36:27 +00:00
hwservice.te
Sepolicy for system suspend HAL.
2018-08-13 17:26:34 -07:00
hwservicemanager.te
idmap.te
Suppress denials from idmap reading installd's files.
2018-01-25 10:07:19 -08:00
incident.te
incident_helper.te
Selinux permissions for incidentd project
2018-01-23 19:08:49 +00:00
incidentd.te
init.te
init: drop /dev/keychord access
2018-08-28 10:33:49 -07:00
inputflinger.te
install_recovery.te
sepolicy: Add rules for non-init namespaces
2017-11-21 08:34:32 -07:00
installd.te
Start partitioning off privapp_data_file from app_data_file
2018-08-02 16:29:02 -07:00
ioctl_defines
Fix TIOCSCTTY ioctl definition for mips
2017-08-31 18:16:46 +02:00
ioctl_macros
isolated_app.te
kernel.te
Start partitioning off privapp_data_file from app_data_file
2018-08-02 16:29:02 -07:00
keystore.te
Adding ability for keystore to find dropbox
2018-04-26 16:14:24 +00:00
llkd.te
llkd: add live-lock daemon
2018-05-10 17:19:16 +00:00
lmkd.te
Selinux: Allow lmkd write access to sys.lmk. properties
2018-08-10 20:05:46 +00:00
logd.te
llkd: Add stack symbol checking
2018-09-04 17:02:30 +00:00
logpersist.te
Start partitioning off privapp_data_file from app_data_file
2018-08-02 16:29:02 -07:00
mdnsd.te
mediadrmserver.te
mediacodec->mediacodec+hal_omx{,_server,_client}
2018-05-30 18:12:32 +00:00
mediaextractor.te
Start partitioning off privapp_data_file from app_data_file
2018-08-02 16:29:02 -07:00
mediametrics.te
Start partitioning off privapp_data_file from app_data_file
2018-08-02 16:29:02 -07:00
mediaprovider.te
mediaserver.te
Limit mediaserver access to vendor_app_file
2018-08-17 16:15:09 -07:00
modprobe.te
modprobe: shouldn't load kernel modules from /system
2018-03-23 14:16:25 -07:00
mtp.te
sepolicy: Add rules for non-init namespaces
2017-11-21 08:34:32 -07:00
net.te
netd.te
Start partitioning off privapp_data_file from app_data_file
2018-08-02 16:29:02 -07:00
netutils_wrapper.te
neverallow_macros
nfc.te
otapreopt_chroot.te
sepolicy: Add rules for non-init namespaces
2017-11-21 08:34:32 -07:00
otapreopt_slot.te
performanced.te
Suppress noisy performanced denials in permissive mode.
2018-02-27 10:42:12 +00:00
perfprofd.te
Start partitioning off privapp_data_file from app_data_file
2018-08-02 21:27:57 -07:00
platform_app.te
postinstall.te
postinstall_dexopt.te
Sepolicy: Modify postinstall_dexopt
2018-05-01 10:47:21 -07:00
ppp.te
Start the process of locking down proc/net
2018-05-04 21:36:33 +00:00
preopt2cachename.te
Start the process of locking down proc/net
2018-05-04 21:36:33 +00:00
priv_app.te
profman.te
sepolicy: Add mmap for profman
2018-09-04 14:55:31 -06:00
property.te
llkd: Add stack symbol checking
2018-09-04 17:02:30 +00:00
property_contexts
ro.crypto.{allow_encrypt_override filenames_mode} vendor-init-settable.
2018-09-08 14:42:51 -07:00
racoon.te
sepolicy: Add rules for non-init namespaces
2017-11-21 08:34:32 -07:00
radio.te
sepolicy entries for time zone detector service
2018-06-19 21:13:57 +01:00
recovery.te
Recovery does not need permission to start adbd anymore
2018-09-07 14:57:36 -07:00
recovery_persist.te
Start partitioning off privapp_data_file from app_data_file
2018-08-02 16:29:02 -07:00
recovery_refresh.te
Start partitioning off privapp_data_file from app_data_file
2018-08-02 16:29:02 -07:00
roles
runas.te
sepolicy: Add rules for non-init namespaces
2017-11-21 08:34:32 -07:00
sdcardd.te
sepolicy: Add rules for non-init namespaces
2017-11-21 08:34:32 -07:00
secure_element.te
SE Policy for Secure Element app and Secure Element HAL
2018-01-29 21:31:42 +00:00
service.te
Add looper_stats_service to SE policy.
2018-09-06 21:07:13 +00:00
servicemanager.te
Prevent vendor_init from using binder or sockets
2018-02-09 19:32:59 +00:00
sgdisk.te
sepolicy: Add rules for non-init namespaces
2017-11-21 08:34:32 -07:00
shared_relro.te
Allow shared_relro to access PackageManager.
2018-09-11 16:26:56 -04:00
shell.te
shell: remove /dev/input write access
2018-08-28 09:19:51 -07:00
slideshow.te
sepolicy: Add rules for non-init namespaces
2017-11-21 08:34:32 -07:00
statsd.te
Allow all app types to socket send to statsdw (statsd socket)
2018-08-23 16:13:30 -07:00
su.te
Sepolicy for system suspend HAL.
2018-08-13 17:26:34 -07:00
surfaceflinger.te
system_app.te
system_server.te
te_macros
llkd: Add stack symbol checking
2018-09-04 17:02:30 +00:00
tee.te
Fingerprint data is now stored in one of two ways depending on the
2018-05-16 14:22:14 -07:00
thermalserviced.te
remove thermalcallback_hwservice
2018-07-18 16:18:50 -07:00
tombstoned.te
tombstoned: clean up TODO on anr writes
2018-09-06 14:01:25 -07:00
toolbox.te
traced_probes.te
Make traced_probes mlstrustedsubject.
2018-04-17 18:12:28 +00:00
traceur_app.te
Enable Traceur on user builds.
2018-02-02 12:46:36 -08:00
tzdatacheck.te
ueventd.te
Allow ueventd to insert modules
2018-08-01 13:21:20 -07:00
uncrypt.te
Improve tests protecting private app data
2018-05-29 13:47:49 -07:00
untrusted_app.te
Add untrusted_app_27
2018-04-03 12:25:51 -07:00
update_engine.te
sepolicy: Fix references to self:capability
2018-08-21 15:55:23 +00:00
update_engine_common.te
Make /proc/sys/kernel/random available to everyone
2017-11-20 21:02:21 +00:00
update_verifier.te
Create sysfs_dm label.
2017-10-10 14:42:24 -07:00
usbd.te
Revert "Revert "Reduce the number of processes that can start adbd""
2018-06-26 19:52:21 +00:00
vdc.te
Sync internal master and AOSP sepolicy.
2017-09-27 18:55:47 -07:00
vendor_init.te
init: drop /dev/keychord access
2018-08-28 10:33:49 -07:00
vendor_shell.te
Allow shell to start vendor shell
2018-01-16 18:28:51 +00:00
vendor_toolbox.te
virtual_touchpad.te
vndservice.te
vndservicemanager.te
vold.te
Sepolicy for system suspend HAL.
2018-08-13 17:26:34 -07:00
vold_prepare_subdirs.te
Move most of public/vold_prepare_subdirs.te to private
2017-10-25 13:06:25 -07:00
vr_hwc.te
Selinux changes for vr flinger vsync service
2018-07-13 17:17:01 -07:00
watchdogd.te
Move watchdogd out of init and into its own domain
2018-08-03 19:28:05 +00:00
webview_zygote.te
wificond.te
resolve merge conflicts of bc34fa26ac to pi-dev-plus-aosp
2018-05-04 19:03:03 -07:00
wpantund.te
sepolicy: Add rules for non-init namespaces
2017-11-21 08:34:32 -07:00
zygote.te
0f326f3c47