summaryrefslogtreecommitdiffstats
path: root/sepolicy/sepolicy.mk
Commit message (Collapse)AuthorAgeFilesLines
* Merge remote-tracking branch 'github/cm-13.0' into replicant-6.0Wolfgang Wiedmeyer2015-12-171-4/+1
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | remove prebuilt terminal (built-in terminal app can be activated in dev settings) Signed-off-by: Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de> Conflicts: CHANGELOG.mkdn CONTRIBUTORS.mkdn config/cdma.mk config/cm_audio.mk config/common.mk config/common_full.mk config/common_full_phone.mk config/gsm.mk config/themes_common.mk get-prebuilts overlay/common/frameworks/base/core/res/res/drawable-nodpi/default_wallpaper.jpg overlay/common/frameworks/base/core/res/res/drawable-sw600dp-nodpi/default_wallpaper.jpg overlay/common/frameworks/base/core/res/res/drawable-sw720dp-nodpi/default_wallpaper.jpg overlay/common/frameworks/base/core/res/res/drawable-xhdpi/default_wallpaper.jpg overlay/common/frameworks/base/core/res/res/values/config.xml overlay/common/frameworks/base/packages/SettingsProvider/res/values/defaults.xml prebuilt/common/bootanimation/1080.zip prebuilt/common/bootanimation/1200.zip prebuilt/common/bootanimation/240.zip prebuilt/common/bootanimation/320.zip prebuilt/common/bootanimation/360.zip prebuilt/common/bootanimation/480.zip prebuilt/common/bootanimation/540.zip prebuilt/common/bootanimation/600.zip prebuilt/common/bootanimation/720.zip prebuilt/common/bootanimation/768.zip prebuilt/common/bootanimation/800.zip prebuilt/common/etc/apns-conf.xml sepolicy/mac_permissions.xml sepolicy/sepolicy.mk vendorsetup.sh Change-Id: I4fc2a5b00721cae8b3a36f33c36f006142bad44f
| * sepolicy: remove BOARD_SEPOLICY_UNIONDan Pasanen2015-10-071-33/+0
| | | | | | | | | | | | * this is a no-op now Change-Id: I3703a9670285017ce7aec9ac20c63a6f733b8ffa
| * cm: sepolicy: Create standard policy for LiveDisplaySteve Kondik2015-09-151-0/+1
| | | | | | | | Change-Id: Icb0047f261861c8fae99ffa4e9053de8d3aa8c73
| * sepolicy: Fix denails for flash_recovery servicedhacker292015-02-151-0/+1
| | | | | | | | | | | | Needed when option is checked to update cm recovery Change-Id: I0b2fbfd7c141ae03ce14b9afeffd3a027d791c80
| * sepolicy: allow userinit to set its propertyGeorg Veichtlbauer2015-02-091-0/+1
| | | | | | | | Change-Id: I9d8270d889566d169077a1b1fdaee43059d11ee1
| * sepolicy: actually include mediaserver.teAdam Farden2015-02-041-0/+1
| | | | | | | | | | | | Added in patch e9c2de0679f16a8ba7291aaf2cd4286bef8b2886 but not included Change-Id: I2ae901a7c80fceb33dba2ed4122d2aa47bff5a51
| * sepolicy: Let drmserver scan themesSteve Kondik2015-01-251-0/+1
| | | | | | | | Change-Id: I7675b302723ef8700067ae9ef237daf6346a6627
| * sepolicy: Allow cmupdater/uncrypt access to media_rw_data_filedhacker292015-01-241-0/+1
| | | | | | | | Change-Id: I800584af2919e3397b19d229fc28ad50cc4b2730
| * sepolicy: Apps need to read themed resourcesClark Scheff2015-01-141-1/+4
| | | | | | | | | | | | | | Assets such as composed icons and ringtones need to be accessed by apps. This patch adds the policy needed to facilitate this. Change-Id: If47920b2cc5dbafe8d71a621782bb4a3351bd68c
| * cm: sepolicy: fix performance settingsPawit Pornkitprasan2015-01-031-0/+1
| | | | | | | | Change-Id: Idea17856b4aef9258688a3ad58d0e5cac6d805a6
| * sepolicy: Fix permissions for service.adb.tcp.portDiogo Ferreira2014-12-011-0/+1
| | | | | | | | | | | | | | This makes the rule more specific by overriding the upstream sepolicy. Also adds the adbd context which is necessary for "adb tcpip". Change-Id: Ia17eb56fc1682ab248764329e88eebd2a4075c97
| * vendor: add policies for netdPawit Pornkitprasan2014-11-291-0/+1
| | | | | | | | | | | | | | | | | | Required due to CAF's abc9c0f4fe574ee9847f118e5d2ae8c530bac650 in system/netd Fixes showing how many devices are connected to the tethered hotspot Change-Id: I1d83f7ac0b28efa6973e0baf429de2a398c471e3
| * Allow SystemServer to set service.adb.tcp.* propertiesRicardo Cerqueira2014-11-291-0/+3
| | | | | | | | | | | | Required for network adb enable/disable to function Change-Id: I3e2aacb6b8e9b107dcd229187a5dd76128e20001
| * cm: sepolicy: Add contexts for cm recoveryTom Marshall2014-11-271-0/+1
| | | | | | | | | | | | | | | | * Allow setup of secure adb (setup_adbd) * minivold in recovery Change-Id: Id1243154f4016b59e54890404cadea46a2aad212
| * selinux: Fix healthd's access to /dev nodesRicardo Cerqueira2014-11-271-0/+1
| | | | | | | | | | | | | | Our healthd's support for power-on alarms adds some steps that imply reading files its user doesn't own. Let it. Change-Id: I3d4735aaab8fbec7acc460f812bc21f1dfa516ab
| * Add selinux policies for superuserRicardo Cerqueira2014-11-271-0/+1
| | | | | | | | Change-Id: I878eaa9d25feaedf46e89083f91d6a21f4aff37a
| * vendor: Update SELinux policy for sysinitmyfluxi2014-11-241-0/+1
| | | | | | | | Change-Id: I41d4c25d9d6246cd2ca0a8ff3b5a4e114e3bc4d4
| * [1/2] SEPolicy: Add Edgegesture service.Kyrylo Mikos2014-11-191-0/+1
| | | | | | | | Change-Id: Id9fc2d68b954e1cd6792739309a0df40e2dc998c
| * selinux: Add rules for the audit daemonRicardo Cerqueira2014-11-091-0/+1
| | | | | | | | Change-Id: I050a9ef39d58d2592d880d225d45eb64d8a40b7b
| * Updates for CM12Ricardo Cerqueira2014-11-061-1/+0
| |
| * sepolicy: Allow relabeling after wallpaper changeSteve Kondik2014-05-181-0/+1
| | | | | | | | Change-Id: I89220fae961f483dad8b92faaee9ed8fe6c8a7cf
| * cm: policy for ipv6 tetheringSteve Kondik2014-05-111-0/+1
| | | | | | | | | | | | * Enable use of radish via netd for ipv6 tethering Change-Id: Ifa0e85686fc70f59c089ca40a78cea9935820185
| * cm: sepolicy: Allow ueventd to properly handle cpufreq changesSteve Kondik2014-04-051-1/+2
| | | | | | | | | | | | | | * We need to allow relabeling since these files can pop in and out if the governor is changed. Change-Id: Id75099290e24dac9962d4fed8148ec2df9e256b2
| * sepolicy: allow vold to create files on external sdcardPawit Pornkitprasan2013-11-141-0/+1
| | | | | | | | | | | | | | This is required for ASEC support. Vold can already create and access directories, but do not yet have the permission for files. Change-Id: I5082bbff692e5dc53c7000e4b3a293e42d33f901
| * sepolicy: allow installd to query ASEC sizePawit Pornkitprasan2013-11-131-0/+1
| | | | | | | | | | | | | | installd need to query ASEC size on sdcard_external to show on the Settings -> Apps page correctly. Change-Id: I2d9a49b8f0652f05d73d0ff464a3835595e2cc3c
| * sepolicy: treat fuseblk as sdcard_externalPawit Pornkitprasan2013-11-131-0/+1
| | | | | | | | | | | | Allow fuse-mounted NTFS/exFAT file systems to be written to Change-Id: I1492914dd269a305e27aba58e61064d853adf2bc
| * selinux: Fix asec mountingRicardo Cerqueira2013-11-121-0/+1
| | | | | | | | Change-Id: I92392f3d810dfaf8dfc35f5c9170178a651d28dc
| * sepolicy: f2fs: Allow fs_use_xattrdhacker292013-11-101-0/+1
| | | | | | | | Change-Id: I458d464598777fa06751dad0aa9cfd4d903a4de1
| * selinux: Add CM-specific file_contextsRicardo Cerqueira2013-11-061-0/+1
| | | | | | | | Change-Id: Ie70c59acedbb7be2f5b34a83c1d3d011f440ba05
| * selinux: CM policies are now inserted lastRicardo Cerqueira2013-11-051-2/+3
| | | | | | | | | | | | | | Inclusion of the makefile is done by the build system to enforce the wanted order Change-Id: I86d7c6fb08b6bb1f6e0385e951a54827345aaf84
| * sepolicy: Start CM Common sepolicyWilliam Roberts2013-08-171-0/+10
| | | | | | | | | | Rather than having to maintain out of tree changes, it is often easier to maintain a hiearchy of changes, starting with the vendors common config file. From there, inheriting products can pick up a base and start to add or remove certain bits from it, making use of the BOARD_SEPOLICY_* functions documented in external/sepolicy/README. Change-Id: I28a4aaf6c126535f0a88001582641b234a750015
* Initial Replicant 4.2 commitPaul Kocialkowski2013-12-281-1/+1
| | | | | Change-Id: I6f3249ff6f84862a5a1efee9a50e440381d6866a Signed-off-by: Paul Kocialkowski <contact@paulk.fr>
* sepolicy: Start CM Common sepolicyWilliam Roberts2013-08-151-0/+10
Rather than having to maintain out of tree changes, it is often easier to maintain a hiearchy of changes, starting with the vendors common config file. From there, inheriting products can pick up a base and start to add or remove certain bits from it, making use of the BOARD_SEPOLICY_* functions documented in external/sepolicy/README. Change-Id: I28a4aaf6c126535f0a88001582641b234a750015