aboutsummaryrefslogtreecommitdiffstats
path: root/mediaserver.te
Commit message (Expand)AuthorAgeFilesLines
* Enforce more specific service access.dcashman2015-04-091-7/+1
* Enforce more specific service access.dcashman2015-04-081-3/+3
* Assign app_api_service attribute to services.dcashman2015-04-061-1/+1
* Assign app_api_service attribute to services.dcashman2015-04-031-2/+2
* Add system_api_service and app_api_service attributes.dcashman2015-04-031-1/+0
* Record observed service accesses.dcashman2015-04-011-0/+2
* Record observed system_server servicemanager service requests.dcashman2015-03-031-6/+1
* Revert /proc/net related changesNick Kralevich2015-02-251-1/+0
* remove /proc/net read access from domain.teNick Kralevich2015-01-141-0/+1
* Make system_server_service an attribute.dcashman2015-01-141-0/+16
* Restrict service_manager find and list access.dcashman2014-12-151-11/+4
* am ebfd9f87: allow oemfs:dir searchNick Kralevich2014-10-101-0/+1
|\
| * allow oemfs:dir searchNick Kralevich2014-10-101-0/+1
* | resolved conflicts for merge of 0a20b57f to lmp-dev-plus-aospVineeta Srivastava2014-09-161-0/+3
|\|
| * Added sepolicy for oem customization.Vineeta Srivastava2014-09-161-0/+3
* | Resync lmp-dev-plus-aosp with masterNick Kralevich2014-07-251-0/+10
* | resolved conflicts for merge of 92b9360c to lmp-dev-plus-aospNick Kralevich2014-07-251-0/+12
|\ \ | |/ |/|
| * Add fine grained access control to DrmManagerService.Riley Spahn2014-07-241-0/+12
| * Add access control for each service_manager action.Riley Spahn2014-07-141-0/+10
* | DO NOT MERGE: Remove service_manager audit_allows.Riley Spahn2014-07-181-10/+0
* | Add access control for each service_manager action.Riley Spahn2014-07-151-0/+10
|/
* Make the mediaserver domain enforcing.Stephen Smalley2014-06-121-1/+0
* Add SELinux rules for service_manager.Riley Spahn2014-06-121-0/+2
* Remove graphics_device access.Stephen Smalley2014-05-141-2/+1
* Allow mediaserver to use app-created pipes.Stephen Smalley2014-05-131-0/+3
* Revert "Make the mediaserver domain enforcing."Nick Kralevich2014-05-131-0/+1
* Make the mediaserver domain enforcing.Stephen Smalley2014-05-101-1/+0
* Report graphics_device accesses by system_server or mediaserver.Stephen Smalley2014-05-071-0/+1
* Allow reading of radio data files passed over binder.Stephen Smalley2014-03-271-0/+3
* Allow drmserver and mediaserver to read apk files.Stephen Smalley2014-03-151-1/+2
* Get rid of separate platform_app_data_file type.Stephen Smalley2014-03-131-1/+0
* Allow mediaserver to connect to tee service.Stephen Smalley2014-03-061-0/+3
* Move qemud and /dev/qemu policy bits to emulator-specific sepolicy.Stephen Smalley2014-02-251-1/+0
* Introduce asec_public_file type.Robert Craig2014-02-111-1/+1
* Address screenrecord denials.rpcraig2014-02-061-1/+1
* Allow mediaserver to create dirs under /data/mediadrm.rpcraig2014-01-211-1/+1
* Allow mediaserver to connect to bluetooth.Stephen Smalley2014-01-161-0/+4
* Support forcing permissive domains to unconfined.Nick Kralevich2014-01-111-1/+1
* address denials when playing protected content.Nick Kralevich2014-01-081-0/+4
* Revert "Make mediaserver enforcing."Nick Kralevich2014-01-061-0/+1
* fix mediaserver selinux denials.Nick Kralevich2014-01-061-2/+3
* Make mediaserver enforcing.Stephen Smalley2013-12-061-1/+0
* Rename camera_calibration_file and audio_firmware_file.Stephen Smalley2013-11-121-6/+6
* Label /data/misc/media and allow mediaserver access to it.Stephen Smalley2013-11-071-0/+2
* Move audio_firmware_file and /data/misc/audio entry to core sepolicy.Stephen Smalley2013-11-061-0/+4
* Confine mediaserver, but leave it permissive for now.Stephen Smalley2013-10-231-1/+51
* Move unconfined domains out of permissive mode.Nick Kralevich2013-10-211-1/+0
* Make all domains unconfined.repo sync2013-05-201-47/+1
* Move domains into per-domain permissive mode.repo sync2013-05-141-0/+1
* Revert "Revert "Various minor policy fixes based on CTS.""Geremy Condra2013-03-271-1/+2