tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/public
History
Nick Kralevich 855084960f Fix m4 warnings 
Quotes and backticks are sensitive characters and should never show up
in a comment. Fix comment to avoid the use of a single quote. Also fixes
a bug where certain rules were not getting included in the compiled
policy.

Fixes the following build warnings:

[  3% 3564/114975] build out/target/product/taimen/obj/ETC/sepolicy_neverallows_intermediates/plat_pub_policy.conf
m4:system/sepolicy/public/te_macros:404: Warning: excess arguments to builtin `define' ignored
[  3% 3578/114975] build out/target/product/taimen/obj/ETC/plat_sepolicy.cil_intermediates/plat_policy.conf
m4:system/sepolicy/public/te_macros:404: Warning: excess arguments to builtin `define' ignored
[  3% 3579/114975] build out/target/product/taimen/obj/ETC/vendor_sepolicy.cil_intermediates/vendor_policy.conf
m4:system/sepolicy/public/te_macros:404: Warning: excess arguments to builtin `define' ignored
[  3% 3607/114975] build out/target/product/taimen/obj/ETC/sepolicy_neverallows_intermediates/policy.conf
m4:system/sepolicy/public/te_macros:404: Warning: excess arguments to builtin `define' ignored
[  3% 3677/114975] build out/target/product/taimen/obj/ETC/built_plat_sepolicy_intermediates/base_plat_policy.conf
m4:system/sepolicy/public/te_macros:404: Warning: excess arguments to builtin `define' ignored

Test: policy compiles and no warnings.
Change-Id: Ie32d8b536955b40888b79e3a93851d2ae297f8ee
2018-08-14 14:42:54 -07:00
..
adbd.te Revert "Revert "Reduce the number of processes that can start adbd"" 2018-06-26 19:52:21 +00:00
app.te more mmaps 2018-08-13 10:37:56 -07:00
asan_extract.te Sync internal master and AOSP sepolicy. 2017-09-26 14:38:47 -07:00
attributes Sepolicy for system suspend HAL. 2018-08-13 17:26:34 -07:00
audioserver.te
blkid.te
blkid_untrusted.te
bluetooth.te
bootanim.te Sync internal master and AOSP sepolicy. 2017-09-26 14:38:47 -07:00
bootstat.te Remove bootstat access to proc label. 2017-09-18 10:29:24 -07:00
bufferhubd.te mediacodec->mediacodec+hal_omx{,_server,_client} 2018-05-30 18:12:32 +00:00
cameraserver.te Add shell:fifo_file permission for cameraserver 2018-02-28 16:12:40 -08:00
charger.te charger: allow to read /sys/class/power_supply 2018-01-18 16:46:17 -08:00
clatd.te Start the process of locking down proc/net 2018-05-04 21:36:33 +00:00
cppreopts.te Grant cppreopts.sh permissions to cleanup if it fails 2017-08-23 16:00:23 +00:00
crash_dump.te Widen crash_dump dontaudit. 2018-04-11 11:02:06 -07:00
device.te Add secure_element_device 2018-03-07 13:54:21 -08:00
dex2oat.te more mmaps 2018-08-13 10:37:56 -07:00
dhcp.te Start the process of locking down proc/net 2018-05-04 21:36:33 +00:00
display_service_server.te Add fwk_display_hwservice. 2017-05-17 11:00:28 -07:00
dnsmasq.te sepolicy: Add rules for non-init namespaces 2017-11-21 08:34:32 -07:00
domain.te Add sepolicy for fastbootd 2018-08-14 20:21:36 +00:00
drmserver.te more mmaps 2018-08-13 10:37:56 -07:00
dumpstate.te Merge "access to /proc/slabinfo" 2018-06-15 08:04:18 -07:00
e2fs.te Allow vendor_init and e2fs to enable metadata encryption 2018-02-01 13:25:34 -08:00
ephemeral_app.te
fastbootd.te Add sepolicy for fastbootd 2018-08-14 20:21:36 +00:00
file.te Add sepolicy for fastbootd 2018-08-14 20:21:36 +00:00
fingerprintd.te Remove fingerprintd access to sysfs_type and cgroup label. 2017-09-19 17:12:14 -07:00
fsck.te Allow access to the metadata partition for metadata encryption. 2018-01-19 14:45:08 -08:00
fsck_untrusted.te Sync internal master and AOSP sepolicy. 2017-09-27 18:55:47 -07:00
gatekeeperd.te Sync internal master and AOSP sepolicy. 2017-09-26 14:38:47 -07:00
global_macros sepolicy: Add rules for non-init namespaces 2017-11-21 08:34:32 -07:00
hal_allocator.te Make hal_allocator use hal_attribute_hwservice. 2018-06-11 14:44:12 -07:00
hal_audio.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_audiocontrol.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_authsecret.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_bluetooth.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_bootctl.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_broadcastradio.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_camera.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_cas.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_configstore.te Make hal_configstore consistent. 2018-06-06 13:01:17 -07:00
hal_confirmationui.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_contexthub.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_drm.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_dumpstate.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_evs.te Move automotive HALs sepolicy to system/ 2018-05-04 21:36:48 +00:00
hal_fingerprint.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_gatekeeper.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_gnss.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_graphics_allocator.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_graphics_composer.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_health.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_health_filesystem.te Add sepolicy for health filesystem HAL 2018-08-10 11:02:21 -07:00
hal_ir.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_keymaster.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_light.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_lowpan.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_memtrack.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_neuralnetworks.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_neverallows.te Allow to use sockets from hal server for auto 2018-05-15 14:38:00 -07:00
hal_nfc.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_oemlock.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_omx.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_power.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_secure_element.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_sensors.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_system_suspend.te Sepolicy for system suspend HAL. 2018-08-13 17:26:34 -07:00
hal_telephony.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_tetheroffload.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_thermal.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_tv_cec.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_tv_input.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_usb.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_usb_gadget.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_vehicle.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_vibrator.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_vr.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_weaver.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_wifi.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_wifi_hostapd.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_wifi_offload.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
hal_wifi_supplicant.te hal_attribute_hwservice_client drop '_client' 2018-06-06 09:30:18 -07:00
healthd.te Fix aosp healthd. am: dd7d5a7038 2018-03-28 01:36:27 +00:00
hwservice.te Sepolicy for system suspend HAL. 2018-08-13 17:26:34 -07:00
hwservicemanager.te
idmap.te Suppress denials from idmap reading installd's files. 2018-01-25 10:07:19 -08:00
incident.te
incident_helper.te Selinux permissions for incidentd project 2018-01-23 19:08:49 +00:00
incidentd.te
init.te more mmaps 2018-08-13 10:37:56 -07:00
inputflinger.te
install_recovery.te sepolicy: Add rules for non-init namespaces 2017-11-21 08:34:32 -07:00
installd.te Start partitioning off privapp_data_file from app_data_file 2018-08-02 16:29:02 -07:00
ioctl_defines Fix TIOCSCTTY ioctl definition for mips 2017-08-31 18:16:46 +02:00
ioctl_macros
isolated_app.te
kernel.te Start partitioning off privapp_data_file from app_data_file 2018-08-02 16:29:02 -07:00
keystore.te Adding ability for keystore to find dropbox 2018-04-26 16:14:24 +00:00
llkd.te llkd: add live-lock daemon 2018-05-10 17:19:16 +00:00
lmkd.te Selinux: Allow lmkd write access to sys.lmk. properties 2018-08-10 20:05:46 +00:00
logd.te Start partitioning off privapp_data_file from app_data_file 2018-08-02 16:29:02 -07:00
logpersist.te Start partitioning off privapp_data_file from app_data_file 2018-08-02 16:29:02 -07:00
mdnsd.te
mediadrmserver.te mediacodec->mediacodec+hal_omx{,_server,_client} 2018-05-30 18:12:32 +00:00
mediaextractor.te Start partitioning off privapp_data_file from app_data_file 2018-08-02 16:29:02 -07:00
mediametrics.te Start partitioning off privapp_data_file from app_data_file 2018-08-02 16:29:02 -07:00
mediaprovider.te Split mediaprovider from priv_app. 2017-07-10 11:17:18 -07:00
mediaserver.te Start partitioning off privapp_data_file from app_data_file 2018-08-02 16:29:02 -07:00
modprobe.te modprobe: shouldn't load kernel modules from /system 2018-03-23 14:16:25 -07:00
mtp.te sepolicy: Add rules for non-init namespaces 2017-11-21 08:34:32 -07:00
net.te
netd.te Start partitioning off privapp_data_file from app_data_file 2018-08-02 16:29:02 -07:00
netutils_wrapper.te
neverallow_macros
nfc.te
otapreopt_chroot.te sepolicy: Add rules for non-init namespaces 2017-11-21 08:34:32 -07:00
otapreopt_slot.te
performanced.te Suppress noisy performanced denials in permissive mode. 2018-02-27 10:42:12 +00:00
perfprofd.te Start partitioning off privapp_data_file from app_data_file 2018-08-02 21:27:57 -07:00
platform_app.te
postinstall.te
postinstall_dexopt.te Sepolicy: Modify postinstall_dexopt 2018-05-01 10:47:21 -07:00
ppp.te Start the process of locking down proc/net 2018-05-04 21:36:33 +00:00
preopt2cachename.te Start the process of locking down proc/net 2018-05-04 21:36:33 +00:00
priv_app.te
profman.te Start partitioning off privapp_data_file from app_data_file 2018-08-02 16:29:02 -07:00
property.te Selinux: Allow lmkd write access to sys.lmk. properties 2018-08-10 20:05:46 +00:00
property_contexts Add missing pm.* properties in property_contexts 2018-08-08 17:07:56 +00:00
racoon.te sepolicy: Add rules for non-init namespaces 2017-11-21 08:34:32 -07:00
radio.te sepolicy entries for time zone detector service 2018-06-19 21:13:57 +01:00
recovery.te Add sepolicy for fastbootd 2018-08-14 20:21:36 +00:00
recovery_persist.te Start partitioning off privapp_data_file from app_data_file 2018-08-02 16:29:02 -07:00
recovery_refresh.te Start partitioning off privapp_data_file from app_data_file 2018-08-02 16:29:02 -07:00
roles
runas.te sepolicy: Add rules for non-init namespaces 2017-11-21 08:34:32 -07:00
sdcardd.te sepolicy: Add rules for non-init namespaces 2017-11-21 08:34:32 -07:00
secure_element.te SE Policy for Secure Element app and Secure Element HAL 2018-01-29 21:31:42 +00:00
service.te Added sepolicy for uri_grants service 2018-07-23 15:31:40 -07:00
servicemanager.te Prevent vendor_init from using binder or sockets 2018-02-09 19:32:59 +00:00
sgdisk.te sepolicy: Add rules for non-init namespaces 2017-11-21 08:34:32 -07:00
shared_relro.te Allow shared_relro to connect to activity_service. 2017-07-24 17:38:40 -04:00
shell.te fs_mgr: add overlayfs handling for squashfs system filesystems 2018-08-08 07:33:10 -07:00
slideshow.te sepolicy: Add rules for non-init namespaces 2017-11-21 08:34:32 -07:00
su.te Sepolicy for system suspend HAL. 2018-08-13 17:26:34 -07:00
surfaceflinger.te
system_app.te
system_server.te
te_macros Fix m4 warnings 2018-08-14 14:42:54 -07:00
tee.te Fingerprint data is now stored in one of two ways depending on the 2018-05-16 14:22:14 -07:00
thermalserviced.te remove thermalcallback_hwservice 2018-07-18 16:18:50 -07:00
tombstoned.te tombstoned: allow linking tombstones. 2018-05-02 14:44:18 -07:00
toolbox.te
traced_probes.te Make traced_probes mlstrustedsubject. 2018-04-17 18:12:28 +00:00
traceur_app.te Enable Traceur on user builds. 2018-02-02 12:46:36 -08:00
tzdatacheck.te
ueventd.te Allow ueventd to insert modules 2018-08-01 13:21:20 -07:00
uncrypt.te Improve tests protecting private app data 2018-05-29 13:47:49 -07:00
untrusted_app.te Add untrusted_app_27 2018-04-03 12:25:51 -07:00
update_engine.te Hide sys_rawio SELinux denials. 2018-04-11 10:53:36 -07:00
update_engine_common.te Make /proc/sys/kernel/random available to everyone 2017-11-20 21:02:21 +00:00
update_verifier.te Create sysfs_dm label. 2017-10-10 14:42:24 -07:00
usbd.te Revert "Revert "Reduce the number of processes that can start adbd"" 2018-06-26 19:52:21 +00:00
vdc.te Sync internal master and AOSP sepolicy. 2017-09-27 18:55:47 -07:00
vendor_init.te Start partitioning off privapp_data_file from app_data_file 2018-08-02 16:29:02 -07:00
vendor_shell.te Allow shell to start vendor shell 2018-01-16 18:28:51 +00:00
vendor_toolbox.te Allow init to run vendor toybox for modprobe 2017-05-24 15:01:20 -07:00
virtual_touchpad.te
vndservice.te
vndservicemanager.te
vold.te Sepolicy for system suspend HAL. 2018-08-13 17:26:34 -07:00
vold_prepare_subdirs.te Move most of public/vold_prepare_subdirs.te to private 2017-10-25 13:06:25 -07:00
vr_hwc.te Selinux changes for vr flinger vsync service 2018-07-13 17:17:01 -07:00
watchdogd.te Move watchdogd out of init and into its own domain 2018-08-03 19:28:05 +00:00
webview_zygote.te
wificond.te resolve merge conflicts of bc34fa26ac to pi-dev-plus-aosp 2018-05-04 19:03:03 -07:00
wpantund.te sepolicy: Add rules for non-init namespaces 2017-11-21 08:34:32 -07:00
zygote.te