tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/private
History
Mark Salyzyn d33a9a194b logd: restrict access to /dev/event-log-tags 
Create an event_log_tags_file label and use it for
/dev/event-log-tags.  Only trusted system log readers are allowed
direct read access to this file, no write access.  Untrusted domain
requests lack direct access, and are thus checked for credentials via
the "plan b" long path socket to the event log tag service.

Test: gTest logd-unit-tests, liblog-unit-tests and logcat-unit-tests
Bug: 31456426
Bug: 30566487
Change-Id: Ib9b71ca225d4436d764c9bc340ff7b1c9c252a9e
2017-01-31 15:50:15 +00:00
..
access_vectors Introduce crash_dump debugging helper. 2017-01-18 15:03:24 -08:00
adbd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
app.te Move appdomain policy to private 2017-01-26 11:26:49 -08:00
atrace.te Whitespace fix 2016-12-09 20:14:31 -08:00
audioserver.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
bluetooth.te Restore app_domain macro and move to private use. 2016-12-08 14:42:43 -08:00
bootanim.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
bootstat.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
cameraserver.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
cppreopts.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
crash_dump.te crash_dump: temporarily make permissive. 2017-01-19 10:28:43 -08:00
dexoptanalyzer.te SElinux policies for compiling secondary dex files 2017-01-24 14:28:07 -08:00
dhcp.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
domain.te Introduce crash_dump debugging helper. 2017-01-18 15:03:24 -08:00
drmserver.te sepolicy: add version_policy tool and version non-platform policy. 2016-12-06 08:56:02 -08:00
dumpstate.te Storaged permissions for task I/O 2017-01-07 01:12:51 +00:00
ephemeral_app.te Allow ephemeral apps to read/write external storage 2017-01-19 13:26:26 -08:00
file.te sepolicy: add version_policy tool and version non-platform policy. 2016-12-06 08:56:02 -08:00
file_contexts logd: restrict access to /dev/event-log-tags 2017-01-31 15:50:15 +00:00
file_contexts_asan Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
fingerprintd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
fs_use Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
fsck.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
gatekeeperd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
genfs_contexts Define policy for /proc/uid_io/stats 2017-01-18 11:00:57 -08:00
hal_allocator.te Sepolicy for allocator hal. 2016-12-22 11:39:23 -08:00
hal_audio_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_bluetooth_default.te Allow the Bluetooth HAL to log firmware versions 2017-01-17 15:15:07 -08:00
hal_boot.te sepolicy for boot_control HAL service 2016-10-25 13:33:48 -07:00
hal_camera_default.te DO NOT MERGE: Camera: Add initial Treble camera HAL sepolicy 2017-01-18 12:02:36 -08:00
hal_contexthub_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_drm_default.te Add sepolicy for drm HALs 2017-01-25 11:21:03 -08:00
hal_dumpstate_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_fingerprint_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_gatekeeper_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_gnss_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_graphics_allocator_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_graphics_composer_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_health_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_ir_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_keymaster.te Preliminary policy for hal_keymaster (TREBLE) 2017-01-27 15:02:57 -08:00
hal_light_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_memtrack_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_nfc_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_power_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_sensors_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_thermal_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_usb_default.te sepolicy for usb hal 2017-01-27 00:05:19 +00:00
hal_vibrator_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_vr_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
hal_wifi_default.te Group all HAL impls using haldomain attribute 2017-01-17 11:20:49 -08:00
haldomain.te haldomain: search for passthrough hals 2017-01-24 16:41:00 -08:00
healthd.te healthd: create SEPolicy for 'charger' and reduce healthd's scope 2016-12-15 18:17:13 -08:00
hostapd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
hwservicemanager.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
init.te logcat: introduce split to logd and logpersist domains 2016-12-20 20:31:03 +00:00
initial_sid_contexts Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
initial_sids Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
inputflinger.te Whitespace fix 2016-12-09 20:14:31 -08:00
install_recovery.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
installd.te SElinux policies for compiling secondary dex files 2017-01-24 14:28:07 -08:00
isolated_app.te Move isolated_app policy to private 2017-01-05 16:06:54 -08:00
kernel.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
keys.conf Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
keystore.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
lmkd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
logd.te logd: restrict access to /dev/event-log-tags 2017-01-31 15:50:15 +00:00
logpersist.te logd: restrict access to /dev/event-log-tags 2017-01-31 15:50:15 +00:00
mac_permissions.xml Move MediaProvider to its own domain, add new MtpServer permissions 2016-12-12 11:05:33 -08:00
mdnsd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
mediacodec.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
mediadrmserver.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
mediaextractor.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
mediametrics.te rename mediaanalytics->mediametrics, wider access 2017-01-24 16:57:19 -08:00
mediaserver.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
mls sepolicy: add version_policy tool and version non-platform policy. 2016-12-06 08:56:02 -08:00
mls_decl sepolicy: add version_policy tool and version non-platform policy. 2016-12-06 08:56:02 -08:00
mls_macros Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
mtp.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
netd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
nfc.te Whitespace fix 2016-12-09 20:14:31 -08:00
otapreopt_chroot.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
otapreopt_slot.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
perfprofd.te Whitespace fix 2016-12-09 20:14:31 -08:00
platform_app.te logd: restrict access to /dev/event-log-tags 2017-01-31 15:50:15 +00:00
policy_capabilities Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
port_contexts Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
postinstall.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
postinstall_dexopt.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
ppp.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
priv_app.te logd: restrict access to /dev/event-log-tags 2017-01-31 15:50:15 +00:00
property_contexts property: add persist.hal.binderization 2017-01-26 06:06:24 +00:00
racoon.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
radio.te logd: restrict access to /dev/event-log-tags 2017-01-31 15:50:15 +00:00
recovery_persist.te sepolicy: add version_policy tool and version non-platform policy. 2016-12-06 08:56:02 -08:00
recovery_refresh.te sepolicy: add version_policy tool and version non-platform policy. 2016-12-06 08:56:02 -08:00
rild.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
roles_decl sepolicy: add version_policy tool and version non-platform policy. 2016-12-06 08:56:02 -08:00
runas.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
sdcardd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
seapp_contexts Clarify what determines precedence rules in seapp_contexts 2016-12-19 11:07:53 -08:00
security_classes Introduce crash_dump debugging helper. 2017-01-18 15:03:24 -08:00
service_contexts rename mediaanalytics->mediametrics, wider access 2017-01-24 16:57:19 -08:00
servicemanager.te logd: restrict access to /dev/event-log-tags 2017-01-31 15:50:15 +00:00
shared_relro.te Restore app_domain macro and move to private use. 2016-12-08 14:42:43 -08:00
shell.te Restore app_domain macro and move to private use. 2016-12-08 14:42:43 -08:00
storaged.te te_macros: introduce add_service() macro 2017-01-26 04:43:16 +00:00
su.te Restore app_domain macro and move to private use. 2016-12-08 14:42:43 -08:00
surfaceflinger.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
system_app.te logd: restrict access to /dev/event-log-tags 2017-01-31 15:50:15 +00:00
system_server.te SElinux policies for compiling secondary dex files 2017-01-24 14:28:07 -08:00
tee.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
tombstoned.te Introduce crash_dump debugging helper. 2017-01-18 15:03:24 -08:00
toolbox.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
tzdatacheck.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
ueventd.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
uncrypt.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
untrusted_app.te rename mediaanalytics->mediametrics, wider access 2017-01-24 16:57:19 -08:00
update_engine.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
update_engine_common.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
update_verifier.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
users Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
vdc.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
vold.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
webview_zygote.te Move webview_zygote policy to private 2017-01-27 17:01:43 +00:00
wificond.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
wpa.te Split general policy into public and private components. 2016-10-06 13:09:06 -07:00
zygote.te logd: restrict access to /dev/event-log-tags 2017-01-31 15:50:15 +00:00