platform_system_sepolicy/public
Wei Wang 4cb024e790 Merge "stable aidl Power HAL policy"
am: fbe4afa7aa

Change-Id: Id2791733129f015b4364774ebc3f79b84b043dc4
2020-01-16 14:40:30 -08:00
..
adbd.te Allow adb start/stop mdnsd via ctl.start/stop 2019-04-16 08:39:33 -07:00
aidl_lazy_test_server.te Add aidl_lazy_test_server 2020-01-07 15:11:03 -08:00
apexd.te binder_use: Allow servicemanager callbacks 2019-12-19 23:07:14 +00:00
app.te Grant appdomain access to app_api_service 2020-01-07 09:59:34 +08:00
app_zygote.te Properly Treble-ize tmpfs access 2019-01-26 17:30:41 +00:00
asan_extract.te
attributes Add SELinux policy for Identity Credential HAL 2020-01-14 20:13:39 -05:00
audioserver.te audioserver: allow audioserver to generate audio HAL tombstones 2019-11-04 18:05:28 -08:00
blkid.te
blkid_untrusted.te
bluetooth.te Remove unused *_tmpfs types 2019-01-30 21:54:40 +00:00
bootanim.te
bootstat.te
bufferhubd.te Properly define hal_codec2 and related policies 2019-05-23 03:53:47 -07:00
camera_service_server.te Abstract use of cameraserver behind an attribute 2019-03-01 14:02:59 -08:00
cameraserver.te Properly define hal_codec2 and related policies 2019-05-23 03:53:47 -07:00
charger.te Allow charger to open health passthrough HAL 2019-10-17 16:35:43 -07:00
crash_dump.te crash_dump: suppress denials on properties 2019-02-07 08:45:15 -08:00
device.te Move usb_serial_device to device.te 2019-12-13 17:01:27 -08:00
dhcp.te
display_service_server.te
dnsmasq.te dnsmasq - allow getattr on unix stream sockets 2019-05-10 00:52:12 +00:00
domain.te perf_event: rules for system and simpleperf domain 2020-01-15 16:56:41 +00:00
drmserver.te Allow drmserver to communicate with mediametrics 2019-08-22 11:31:03 -07:00
dumpstate.te Don't audit data_mirror in dumpstate 2019-12-19 16:36:24 +00:00
e2fs.te Allow e2fs more ioctls to device-mapper devices. 2019-02-05 18:05:50 -08:00
ephemeral_app.te Remove unused *_tmpfs types 2019-01-30 21:54:40 +00:00
fastbootd.te Give fastbootd permission to mount and write to /metadata/gsi. 2019-12-18 15:08:24 -08:00
file.te Merge "Allow init to configure dm_verity kernel driver." 2020-01-15 13:13:01 +00:00
fingerprintd.te
flags_health_check.te Add native flags namespace storage_native_boot 2019-10-04 11:05:48 +00:00
fsck.te fs_mgr: overlayfs support legacy devices (marlin) Part Deux 2019-02-15 15:56:16 +00:00
fsck_untrusted.te
fwk_bufferhub.te Allow app to conntect to BufferHub service 2019-01-14 10:49:35 -08:00
gatekeeperd.te Allow gatekeeperd to read ro.gsid.image_running. 2019-02-19 21:08:22 +00:00
global_macros global_macros: trim back various watch* permissions 2019-08-28 12:36:58 -07:00
gmscore_app.te Create a separate SELinux domain for gmscore 2019-11-22 10:39:19 -08:00
gpuservice.te Game Driver: sepolicy update for plumbing GpuStats into GpuService 2019-02-08 18:15:17 -08:00
hal_allocator.te
hal_atrace.te
hal_audio.te sepolicy: allow hal_omx to access audio devices 2019-05-22 10:35:16 -07:00
hal_audiocontrol.te
hal_authsecret.te
hal_bluetooth.te Add rules for accessing the related bluetooth_audio_hal_prop 2019-03-20 03:12:25 +00:00
hal_bootctl.te add hal_bootctl to white-list of sys_rawio 2019-02-13 12:38:22 +00:00
hal_broadcastradio.te Allow radio server to client binder callback 2019-03-29 15:22:16 -07:00
hal_camera.te
hal_can.te Move usb_serial_device to device.te 2019-12-13 17:01:27 -08:00
hal_cas.te
hal_codec2.te Properly define hal_codec2 and related policies 2019-05-23 03:53:47 -07:00
hal_configstore.te In native coverage builds, allow all domains to access /data/misc/trace 2019-06-19 16:27:17 -07:00
hal_confirmationui.te
hal_contexthub.te
hal_drm.te Give hal_drm_server appdomain fd access. 2019-06-05 10:12:28 -07:00
hal_dumpstate.te
hal_evs.te Update sepolicy for EVS v1.x 2019-07-30 13:22:03 -07:00
hal_face.te Revert "Allow hal_face to write to /data/vendor/camera_calibration/*." 2019-06-19 20:15:50 +00:00
hal_fingerprint.te
hal_gatekeeper.te
hal_gnss.te
hal_graphics_allocator.te
hal_graphics_composer.te Initial selinux policy support for memfd 2019-01-30 19:11:49 +00:00
hal_health.te Allow to getattr kmsg_device 2019-03-25 10:14:20 -07:00
hal_health_storage.te
hal_identity.te Add SELinux policy for Identity Credential HAL 2020-01-14 20:13:39 -05:00
hal_input_classifier.te Permissions for InputClassifier HAL 2019-01-11 02:08:19 +00:00
hal_ir.te
hal_keymaster.te
hal_light.te
hal_lowpan.te
hal_memtrack.te
hal_neuralnetworks.te Allow NNAPI HAL services access model files provided by privapp. 2019-04-24 21:15:45 -07:00
hal_neverallows.te SEPolicy rules for CAN bus HAL 2019-08-01 10:24:00 -07:00
hal_nfc.te
hal_oemlock.te
hal_omx.te Properly define hal_codec2 and related policies 2019-05-23 03:53:47 -07:00
hal_power.te stable aidl Power HAL policy 2020-01-15 16:53:40 -08:00
hal_power_stats.te
hal_rebootescrow.te Support Resume on Reboot 2019-12-09 14:25:04 -08:00
hal_secure_element.te
hal_sensors.te
hal_telephony.te
hal_tetheroffload.te
hal_thermal.te
hal_tv_cec.te
hal_tv_input.te
hal_tv_tuner.te Tuner Hal 1.0 Enable ITuner service 2019-08-14 11:22:09 -07:00
hal_usb.te
hal_usb_gadget.te
hal_vehicle.te
hal_vibrator.te Allow dumping vibrator HAL. 2019-12-09 11:17:55 -08:00
hal_vr.te
hal_weaver.te
hal_wifi.te Allow dumpstate to dump wlan hal log on userbuild 2019-03-21 12:27:44 +08:00
hal_wifi_hostapd.te
hal_wifi_offload.te
hal_wifi_supplicant.te
healthd.te drop "allow healthd self:process execmem;" 2019-05-23 11:17:21 -07:00
heapprofd.te
hwservice.te Add SELinux policy for Identity Credential HAL 2020-01-14 20:13:39 -05:00
hwservicemanager.te
idmap.te idmap: add binderservice permissions 2019-09-18 13:47:09 +02:00
incident.te
incident_helper.te
incidentd.te
init.te Allow init to configure dm_verity kernel driver. 2020-01-06 09:40:50 +01:00
inputflinger.te
installd.te Merge "binder_use: Allow servicemanager callbacks" 2019-12-23 20:04:33 +00:00
ioctl_defines Allow vold to use new ioctls to add/remove fscrypt keys 2019-09-30 13:11:49 -07:00
ioctl_macros
iorap_prefetcherd.te sepolicy: Add iorap_prefetcherd rules 2019-10-22 12:45:46 -07:00
iorapd.te Using macro "rx_file_perms" instead of "execute_no_trans". 2020-01-09 13:23:01 -08:00
isolated_app.te Remove unused *_tmpfs types 2019-01-30 21:54:40 +00:00
kernel.te Update kernel permissions to pass libdm snapshot unit test 2019-11-05 23:54:29 +00:00
keystore.te
llkd.te
lmkd.te allow init to communicate with lmkd and lmkd to kill native processes 2019-11-07 18:19:44 +00:00
logd.te Relabel /data/system/packages.list to new type. 2019-03-28 10:27:43 +00:00
logpersist.te logpersist is now a shell script, so give it the appropriate permissions 2019-10-30 13:54:35 -07:00
mdnsd.te
mediadrmserver.te
mediaextractor.te In native coverage builds, allow all domains to access /data/misc/trace 2019-06-19 16:27:17 -07:00
mediametrics.te Allow mediametrics to log records to statsd 2019-02-25 20:09:54 -08:00
mediaprovider.te Remove unused *_tmpfs types 2019-01-30 21:54:40 +00:00
mediaserver.te Remove mediacodec_service. 2019-08-21 01:19:20 +00:00
mediaswcodec.te Properly define hal_codec2 and related policies 2019-05-23 03:53:47 -07:00
mediatranscoding.te MediaTranscodingService: Add sepolicy for MediaTranscodingService. 2019-12-02 13:57:28 -08:00
modprobe.te
mtp.te mtp: support using pppox_socket family 2019-05-08 06:01:58 -07:00
net.te netlink_route_socket: add new nlmsg_readpriv perm 2019-10-16 16:14:16 +02:00
netd.te Revert "sepolicy: Permission changes for new wifi mainline module" 2019-11-22 09:49:32 -08:00
netutils_wrapper.te
network_stack.te Remove unused *_tmpfs types 2019-01-30 21:54:40 +00:00
neverallow_macros neverallow_macros: add watch* perms 2019-09-05 09:54:43 -07:00
nfc.te Remove unused *_tmpfs types 2019-01-30 21:54:40 +00:00
perfetto.te
performanced.te
platform_app.te Remove unused *_tmpfs types 2019-01-30 21:54:40 +00:00
postinstall.te Allow postinstall scripts to trigger F2FS GC 2019-02-20 22:40:53 +00:00
ppp.te ppp: support using pppox_socket family 2019-05-06 14:11:02 -07:00
priv_app.te Remove unused *_tmpfs types 2019-01-30 21:54:40 +00:00
profman.te
property.te SELinux changes for the hasSystemFeature() binder cache property. 2020-01-13 10:21:54 -08:00
property_contexts Merge "Configure SELinux for PowerManager Caches" 2020-01-16 14:40:05 -08:00
racoon.te
radio.te Add new time zone detection service 2019-11-15 13:33:23 +00:00
recovery.te Allow recovery and fastbootd to interact with libfiemap. 2019-11-13 18:46:57 -08:00
recovery_persist.te
recovery_refresh.te
roles
rs.te sepolicy: Add "rs" and "rs_exec" to public policy 2018-12-21 17:47:54 +00:00
rss_hwm_reset.te
runas.te Relabel /data/system/packages.list to new type. 2019-03-28 10:27:43 +00:00
runas_app.te Remove unused *_tmpfs types 2019-01-30 21:54:40 +00:00
scheduler_service_server.te Treble-ize sepolicy for fwk HIDL services. 2019-04-22 17:07:06 -07:00
sdcardd.te Move layout_version to /data/misc/installd 2019-08-21 10:11:35 -07:00
secure_element.te Remove unused *_tmpfs types 2019-01-30 21:54:40 +00:00
sensor_service_server.te Treble-ize sepolicy for fwk HIDL services. 2019-04-22 17:07:06 -07:00
service.te stable aidl Power HAL policy 2020-01-15 16:53:40 -08:00
servicemanager.te Service context for servicemanager. 2019-10-16 16:31:42 -07:00
sgdisk.te
shared_relro.te Remove unused *_tmpfs types 2019-01-30 21:54:40 +00:00
shell.te Add label for persist.pm.mock-upgrade 2019-10-14 18:09:11 +01:00
simpleperf.te perf_event: rules for system and simpleperf domain 2020-01-15 16:56:41 +00:00
simpleperf_app_runner.te Relabel /data/system/packages.list to new type. 2019-03-28 10:27:43 +00:00
slideshow.te
stats_service_server.te Treble-ize sepolicy for fwk HIDL services. 2019-04-22 17:07:06 -07:00
statsd.te Remove perfprofd references. 2019-07-19 11:15:12 -07:00
su.te perf_event: rules for system and simpleperf domain 2020-01-15 16:56:41 +00:00
surfaceflinger.te Initial selinux policy support for memfd 2019-01-30 19:11:49 +00:00
system_app.te Remove unused *_tmpfs types 2019-01-30 21:54:40 +00:00
system_server.te Initial selinux policy support for memfd 2019-01-30 19:11:49 +00:00
system_suspend_server.te Decouple system_suspend from hal attributes. 2019-02-26 18:10:28 -08:00
te_macros perf_event: rules for system and simpleperf domain 2020-01-15 16:56:41 +00:00
tee.te
tombstoned.te
toolbox.te Allow toolbox to rm -rf /data/per_boot 2019-09-17 18:44:13 +00:00
traced.te Allow iorapd to access perfetto 2019-01-23 22:43:47 +00:00
traced_probes.te
traceur_app.te Add selinux rule to allow Traceur to enable the traced daemon. 2019-04-26 16:18:56 -07:00
tzdatacheck.te
ueventd.te ueventd: allow using external firmware handlers 2019-08-15 11:34:07 +09:00
uncrypt.te
untrusted_app.te Remove unused *_tmpfs types 2019-01-30 21:54:40 +00:00
update_engine.te Audit binder_call rule for priv_app in update_engine.te 2019-12-03 14:02:57 -08:00
update_engine_common.te update_engine: rules to apply virtual A/B OTA 2019-10-02 12:46:47 -07:00
update_verifier.te Add a new context for property ota.warm_reset 2019-11-14 15:24:25 -08:00
usbd.te
vdc.te Allow to getattr kmsg_device 2019-03-25 10:14:20 -07:00
vendor_init.te SELinux changes for the hasSystemFeature() binder cache property. 2020-01-13 10:21:54 -08:00
vendor_misc_writer.te Ignore the denial due to vendor_misc_writer reading DT fstab. 2019-10-10 22:17:53 -07:00
vendor_shell.te
vendor_toolbox.te
virtual_touchpad.te
vndservice.te
vndservicemanager.te
vold.te Merge changes Ide8fc07c,Ia1f51db4 2019-11-23 09:10:34 +00:00
vold_prepare_subdirs.te
vr_hwc.te
watchdogd.te
webview_zygote.te Properly Treble-ize tmpfs access 2019-01-26 17:30:41 +00:00
wificond.te Revert "sepolicy: Permission changes for new wifi mainline module" 2019-11-22 09:49:32 -08:00
wpantund.te
zygote.te Properly Treble-ize tmpfs access 2019-01-26 17:30:41 +00:00