platform_system_sepolicy/microdroid/system/private
Victor Hsieh dedb4909c3 Remove unnecessary privileges from dex2oat in VM
With a change in dex2oat to avoid opening /proc/self/fd, this change
removes open and a few other privileges from dex2oat.

Bug: 196404749
Test: ComposHostTestCases
Change-Id: I822c7ef3886a1cde8601e71afa2eb79973cd573c
2021-08-19 14:01:59 -07:00
..
access_vectors Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
adbd.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
apexd.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
apkdmverity.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
attributes Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
authfs.te Grant authfs_service and authfs CAP_SYS_ADMIN 2021-08-11 15:48:14 +00:00
authfs_service.te Grant authfs_service and authfs CAP_SYS_ADMIN 2021-08-11 15:48:14 +00:00
binderservicedomain.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
bug_map Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
compos.te Allow compos to getattr on authfs 2021-08-13 15:48:21 -07:00
crash_dump.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
dex2oat.te Remove unnecessary privileges from dex2oat in VM 2021-08-19 14:01:59 -07:00
domain.te Add more rules around cgroup files in microdroid 2021-07-23 15:48:17 +09:00
file.te SELinux policy for authfs_service and authfs 2021-08-06 09:16:48 -07:00
file_contexts SELinux policy for authfs_service and authfs 2021-08-06 09:16:48 -07:00
fs_use Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
genfs_contexts Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
halclientdomain.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
hwservice_contexts Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
hwservicemanager.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
init.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
initial_sid_contexts Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
initial_sids Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
kernel.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
keys.conf Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
keystore.te Suppress keystore F2FS related audit 2021-07-29 12:18:31 +00:00
keystore2_key_contexts Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
linkerconfig.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
logd.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
mac_permissions.xml Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
microdroid_app.te Don't audit microdroid_app getattr vsock_socket 2021-08-09 12:50:41 +00:00
microdroid_manager.te microdroid_manager: allow to read dm_device 2021-08-07 00:52:00 +09:00
microdroid_payload.te Add microdroid_payload attribute 2021-07-27 08:30:22 +00:00
mls Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
mls_decl Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
mls_macros Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
net.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
policy_capabilities Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
port_contexts Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
property.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
property_contexts SELinux policy for authfs_service and authfs 2021-08-06 09:16:48 -07:00
roles_decl Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
seapp_contexts Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
security_classes Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
service_contexts Allow authfs_service to add itself to service manager 2021-08-10 10:55:54 -07:00
servicemanager.te Add servicemanager's service to microdroid policy 2021-08-04 11:35:57 +00:00
shell.te Suppress power_supply access inside microdroid 2021-08-05 02:05:16 +00:00
statsd.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
su.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
tombstoned.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
toolbox.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
ueventd.te Temporarily dontaudit ueventd->tmpfs access 2021-08-04 10:58:22 +00:00
users Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00
zipfuse.te Move microdroid sepolicy to system/sepolicy 2021-07-19 07:48:34 +00:00