aboutsummaryrefslogtreecommitdiffstats
path: root/surfaceflinger.te
Commit message (Expand)AuthorAgeFilesLines
* Replace unix_socket_connect() and explicit property sets with macroWilliam Roberts2015-05-071-5/+2
* Enforce more specific service access.dcashman2015-04-091-7/+1
* Enforce more specific service access.dcashman2015-04-081-2/+2
* Add system_api_service and app_api_service attributes.dcashman2015-04-031-1/+0
* Record service accesses.dcashman2015-01-161-5/+2
* Record surfaceflinger power_service access.dcashman2015-01-161-0/+11
* Make system_server_service an attribute.dcashman2015-01-141-0/+1
* Restrict service_manager find and list access.dcashman2014-12-151-9/+5
* Add access control for each service_manager action.Riley Spahn2014-07-141-0/+8
* Add SELinux rules for service_manager.Riley Spahn2014-06-121-0/+2
* surfaceflinger: remove unconfined domain reference.Nick Kralevich2014-06-081-2/+1
* Merge adf_device into graphics_deviceNick Kralevich2014-06-031-3/+0
* Make the surfaceflinger domain enforcing.Stephen Smalley2014-05-161-1/+0
* Add policies for Atomic Display FrameworkGreg Hackmann2014-05-071-0/+3
* Allow surfaceflinger to make binder call to bootanimNick Kralevich2014-04-161-0/+1
* Replace ctl_default_prop access with explicit service property keys.Robert Craig2014-03-251-1/+1
* Allow surfaceflinger to read /proc/pid/cmdline of dumpstate.Stephen Smalley2014-03-211-0/+1
* Get rid of separate platform_app_data_file type.Stephen Smalley2014-03-131-1/+0
* Address surfaceflinger denials.Stephen Smalley2014-03-101-3/+19
* Clean up socket rules.Stephen Smalley2014-02-251-1/+1
* Address screenrecord denials.rpcraig2014-02-061-0/+1
* Fix NFC image transferNick Kralevich2014-02-051-0/+1
* Address bug report denials.Nick Kralevich2014-01-211-1/+0
* Support forcing permissive domains to unconfined.Nick Kralevich2014-01-111-1/+1
* address denials when playing protected content.Nick Kralevich2014-01-081-0/+5
* Fix denials triggered by adb shell screencap.Stephen Smalley2014-01-071-0/+1
* Revert "Make surfaceflinger domain enforcing."Nick Kralevich2014-01-071-0/+1
* surfaceflinger: fix bugreport screenshot functionalityNick Kralevich2014-01-061-0/+4
* fix mediaserver selinux denials.Nick Kralevich2014-01-061-0/+1
* Make surfaceflinger domain enforcing.Stephen Smalley2013-12-121-1/+0
* Define a domain for the bootanim service.Stephen Smalley2013-12-121-1/+3
* Move gpu_device type and rules to core policy.Stephen Smalley2013-12-121-0/+3
* Confine surfaceflinger, but leave it permissive for now.Stephen Smalley2013-10-291-1/+27
* Move unconfined domains out of permissive mode.Nick Kralevich2013-10-211-1/+0
* Make all domains unconfined.repo sync2013-05-201-26/+1
* Move domains into per-domain permissive mode.repo sync2013-05-141-0/+1
* Revert "DO NOT MERGE Split some device nodes out from device."Ben Murdoch2013-04-251-6/+0
* DO NOT MERGE Split some device nodes out from device.repo sync2013-04-241-0/+6
* Revert "Revert "Various minor policy fixes based on CTS.""Geremy Condra2013-03-271-0/+4
* Revert "Various minor policy fixes based on CTS."Geremy Condra2013-03-221-4/+0
* Various minor policy fixes based on CTS.Stephen Smalley2013-03-221-0/+4
* Update binder-related policy.Stephen Smalley2013-03-191-0/+1
* Address various denials introduced by JB/4.1.Stephen Smalley2012-07-121-1/+3
* Add policy for property service.Stephen Smalley2012-04-041-0/+3
* SE Android policy.Stephen Smalley2012-01-041-0/+24
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-24 17:10:45 +0000