tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/private
History
Alex Klyubin a7653ee2ed Move webview_zygote policy to private 
This leaves only the existence of webview_zygote domain and its
executable's webview_zygote_exec file label as public API. All other
rules are implementation details of this domain's policy and are thus
now private.

Test: Device boots, with Multiproces WebView developer setting
      enabled, apps with WebView work fine. No new denials.
Bug: 31364497

Change-Id: I179476c43a50863ee3b327fc5155847d992a040d
2017-01-27 17:01:43 +00:00
..
access_vectors Introduce crash_dump debugging helper. 2017-01-18 15:03:24 -08:00
adbd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
app.te Move appdomain policy to private 2017-01-26 11:26:49 -08:00
atrace.te Whitespace fix 2016-12-09 20:14:31 -08:00
audioserver.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
bluetooth.te Restore app_domain macro and move to private use. 2016-12-08 14:42:43 -08:00
bootanim.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
bootstat.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
cameraserver.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
cppreopts.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
crash_dump.te crash_dump: temporarily make permissive. 2017-01-19 10:28:43 -08:00
dexoptanalyzer.te SElinux policies for compiling secondary dex files 2017-01-24 14:28:07 -08:00
dhcp.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
domain.te Introduce crash_dump debugging helper. 2017-01-18 15:03:24 -08:00
drmserver.te sepolicy: add version_policy tool and version non-platform policy. 2016-12-06 08:56:02 -08:00
dumpstate.te Storaged permissions for task I/O 2017-01-07 01:12:51 +00:00
ephemeral_app.te Allow ephemeral apps to read/write external storage 2017-01-19 13:26:26 -08:00
file.te sepolicy: add version_policy tool and version non-platform policy. 2016-12-06 08:56:02 -08:00
file_contexts sepolicy for usb hal 2017-01-27 00:05:19 +00:00
file_contexts_asan Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
fingerprintd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
fs_use Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
fsck.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
gatekeeperd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
genfs_contexts Define policy for /proc/uid_io/stats 2017-01-18 11:00:57 -08:00
hal_allocator.te Sepolicy for allocator hal. 2016-12-22 11:39:23 -08:00
hal_audio_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_bluetooth_default.te Allow the Bluetooth HAL to log firmware versions 2017-01-17 15:15:07 -08:00
hal_boot.te sepolicy for boot_control HAL service 2016-10-25 13:33:48 -07:00
hal_camera_default.te DO NOT MERGE: Camera: Add initial Treble camera HAL sepolicy 2017-01-18 12:02:36 -08:00
hal_contexthub_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_drm_default.te Add sepolicy for drm HALs 2017-01-25 11:21:03 -08:00
hal_dumpstate_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_fingerprint_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_gatekeeper_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_gnss_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_graphics_allocator_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_graphics_composer_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_health_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_ir_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_light_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_memtrack_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_nfc_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_power_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_sensors_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_thermal_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_usb_default.te sepolicy for usb hal 2017-01-27 00:05:19 +00:00
hal_vibrator_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_vr_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_wifi_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
haldomain.te haldomain: search for passthrough hals 2017-01-24 16:41:00 -08:00
healthd.te healthd: create SEPolicy for 'charger' and reduce healthd's scope 2016-12-15 18:17:13 -08:00
hostapd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
hwservicemanager.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
init.te logcat: introduce split to logd and logpersist domains 2016-12-20 20:31:03 +00:00
initial_sid_contexts Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
initial_sids Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
inputflinger.te Whitespace fix 2016-12-09 20:14:31 -08:00
install_recovery.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
installd.te SElinux policies for compiling secondary dex files 2017-01-24 14:28:07 -08:00
isolated_app.te Move isolated_app policy to private 2017-01-05 16:06:54 -08:00
kernel.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
keys.conf Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
keystore.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
lmkd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
logd.te logcat: introduce split to logd and logpersist domains 2016-12-20 20:31:03 +00:00
logpersist.te logcat: introduce split to logd and logpersist domains 2016-12-20 20:31:03 +00:00
mac_permissions.xml Move MediaProvider to its own domain, add new MtpServer permissions 2016-12-12 11:05:33 -08:00
mdnsd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
mediacodec.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
mediadrmserver.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
mediaextractor.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
mediametrics.te rename mediaanalytics->mediametrics, wider access 2017-01-24 16:57:19 -08:00
mediaserver.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
mls sepolicy: add version_policy tool and version non-platform policy. 2016-12-06 08:56:02 -08:00
mls_decl sepolicy: add version_policy tool and version non-platform policy. 2016-12-06 08:56:02 -08:00
mls_macros Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
mtp.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
netd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
nfc.te Whitespace fix 2016-12-09 20:14:31 -08:00
otapreopt_chroot.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
otapreopt_slot.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
perfprofd.te Whitespace fix 2016-12-09 20:14:31 -08:00
platform_app.te rename mediaanalytics->mediametrics, wider access 2017-01-24 16:57:19 -08:00
policy_capabilities Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
port_contexts Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
postinstall.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
postinstall_dexopt.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
ppp.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
priv_app.te rename mediaanalytics->mediametrics, wider access 2017-01-24 16:57:19 -08:00
property_contexts property: add persist.hal.binderization 2017-01-26 06:06:24 +00:00
racoon.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
radio.te Whitespace fix 2016-12-09 20:14:31 -08:00
recovery_persist.te sepolicy: add version_policy tool and version non-platform policy. 2016-12-06 08:56:02 -08:00
recovery_refresh.te sepolicy: add version_policy tool and version non-platform policy. 2016-12-06 08:56:02 -08:00
rild.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
roles_decl sepolicy: add version_policy tool and version non-platform policy. 2016-12-06 08:56:02 -08:00
runas.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
sdcardd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
seapp_contexts Clarify what determines precedence rules in seapp_contexts 2016-12-19 11:07:53 -08:00
security_classes Introduce crash_dump debugging helper. 2017-01-18 15:03:24 -08:00
service_contexts rename mediaanalytics->mediametrics, wider access 2017-01-24 16:57:19 -08:00
servicemanager.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
shared_relro.te Restore app_domain macro and move to private use. 2016-12-08 14:42:43 -08:00
shell.te Restore app_domain macro and move to private use. 2016-12-08 14:42:43 -08:00
storaged.te te_macros: introduce add_service() macro 2017-01-26 04:43:16 +00:00
su.te Restore app_domain macro and move to private use. 2016-12-08 14:42:43 -08:00
surfaceflinger.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
system_app.te property: add persist.hal.binderization 2017-01-26 06:06:24 +00:00
system_server.te SElinux policies for compiling secondary dex files 2017-01-24 14:28:07 -08:00
tee.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
tombstoned.te Introduce crash_dump debugging helper. 2017-01-18 15:03:24 -08:00
toolbox.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
tzdatacheck.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
ueventd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
uncrypt.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
untrusted_app.te rename mediaanalytics->mediametrics, wider access 2017-01-24 16:57:19 -08:00
update_engine.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
update_engine_common.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
update_verifier.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
users Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
vdc.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
vold.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
webview_zygote.te Move webview_zygote policy to private 2017-01-27 17:01:43 +00:00
wificond.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
wpa.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
zygote.te Move zygote policy to private 2017-01-26 13:31:16 -08:00