aboutsummaryrefslogtreecommitdiffstats
path: root/zygote.te
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'android-6.0.1_r74' into HEADreplicant-6.0-0002replicant-6.0-0001Jessica Wagantall2016-11-091-0/+7
|\
| * Allow the zygote to stat all files it opens.Narayan Kamath2016-09-271-0/+7
* | sepolicy: Add policy for sdcardfs and configfsSteve Kondik2016-07-261-0/+1
|/
* Let Zygote unmount inherited storage devices.Jeff Sharkey2015-06-301-0/+1
* Let's reinvent storage, yet again!Jeff Sharkey2015-06-251-1/+1
* Ensure that domain and appdomain attributes are assigned.Stephen Smalley2015-05-011-0/+12
* Updated policy for external storage.Jeff Sharkey2015-03-301-6/+12
* am f48951a9: am 0ae33a8d: Merge "zygote/dex2oat: Grant additional symlink per...Igor Murashkin2014-10-291-0/+2
|\
| * am 0ae33a8d: Merge "zygote/dex2oat: Grant additional symlink permissions"Igor Murashkin2014-10-291-0/+2
| |\
| | * zygote/dex2oat: Grant additional symlink permissionsIgor Murashkin2014-10-271-0/+2
| | * zygote: allow replacing /proc/cpuinfoNick Kralevich2014-09-261-0/+4
| | * Put dex2oat in it's own sandboxNick Kralevich2014-07-101-0/+1
* | | Revoke zygote's read permission on keychain dataRobin Lee2014-10-201-3/+0
|/ /
* | Pull keychain-data policy out of system-dataRobin Lee2014-10-151-0/+3
* | zygote: allow replacing /proc/cpuinfoNick Kralevich2014-09-261-0/+4
* | reconcile aosp (c103da877b72aae80616dbc192982aaf75dfe888) after branching. Pl...Ed Heyl2014-07-141-0/+1
|/
* Fix SELinux policies to allow resource overlays.Nick Kralevich2014-06-161-0/+3
* Restrict requesting contexts other than policy-defined defaults.Stephen Smalley2014-05-231-0/+1
* Remove zygote write access to system_data_file.Stephen Smalley2014-05-141-5/+4
* Audit zygote create/write access to system_data_file.Stephen Smalley2014-05-121-0/+2
* Change zygote sepolicy whitelist.Narayan Kamath2014-05-011-2/+2
* zygote: clean up unnecessary rules.Nick Kralevich2014-04-081-11/+0
* Add auditallow to revaluate b/10498304dcashman2014-03-101-0/+5
* Allow stat of /system/bin/app_process by zygote.Stephen Smalley2014-03-101-1/+1
* Remove system_server and zygote unlabeled execute access.Stephen Smalley2014-02-271-5/+0
* Do not allow zygote to execve dalvikcache files.Stephen Smalley2014-01-091-1/+3
* Remove unlabeled execute access from domain, add to appdomain.Stephen Smalley2014-01-091-0/+5
* Don't allow zygote init:binder callNick Kralevich2014-01-031-1/+0
* am d1083bf2: am e9c4181b: zygote.te: fix comment.Nick Kralevich2013-09-231-1/+1
|\
| * zygote.te: fix comment.Nick Kralevich2013-09-231-1/+1
* | am 882d09db: am 199fc73f: Revert "Give Zygote the ability to write app data f...Nick Kralevich2013-09-231-2/+2
|\|
| * Revert "Give Zygote the ability to write app data files."Nick Kralevich2013-09-231-2/+2
* | Follow-up to rename system to system_server.Alex Klyubin2013-09-171-1/+1
* | am 3d94272a: am 1fdee11d: 1/2: Rename domain "system" to "system_server".Alex Klyubin2013-09-171-2/+2
|\|
| * 1/2: Rename domain "system" to "system_server".Alex Klyubin2013-09-171-2/+2
* | am b9bbfeb0: Fix bug report notification not showing up.Alex Klyubin2013-09-091-0/+1
|\ \
| * | Fix bug report notification not showing up.Alex Klyubin2013-09-091-0/+1
* | | am d629b87e: Fix bug report notification not showing up.Nick Kralevich2013-09-091-0/+6
|\| | | |/ |/|
| * Fix bug report notification not showing up.Nick Kralevich2013-09-091-0/+6
| * Give Zygote the ability to write app data files.Geremy Condra2013-09-041-3/+3
* | Fix miscellaneous long-tail denials.Geremy Condra2013-09-041-1/+1
* | Give Zygote the ability to write app data files.Geremy Condra2013-08-301-2/+2
* | Fix denials encountered while getting bugreports.Geremy Condra2013-08-301-1/+1
|/
* Add capabilities to Zygote to fix valgrind.Geremy Condra2013-08-271-0/+3
* Give zygote the ability to execute dalvik cache files.Geremy Condra2013-07-091-1/+1
* zygote: enable SELinux restrictionsNick Kralevich2013-07-011-2/+38
* Make all domains unconfined.repo sync2013-05-201-39/+2
* Move domains into per-domain permissive mode.repo sync2013-05-141-0/+1
* Give domains read access to security_file domain.William Roberts2013-04-051-2/+2
* Add remount capability to Zygote.Geremy Condra2013-03-291-0/+1
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-24 07:38:28 +0000