index
:
android_external_sepolicy
caf/cm-12.0
caf/cm-12.1
cm-10.1
cm-10.2
cm-11.0
cm-12.0
cm-12.1
cm-13.0
jellybean
jellybean-stable
mr1.1-staging
shipping/cm-11.0
stable/cm-10.2
stable/cm-11.0
stable/cm-11.0-XNF8Y
stable/cm-11.0-XNF9X
stable/cm-11.0-XNG2S
stable/cm-11.0-XNG3C
stable/cm-12.0-YNG1I
stable/cm-12.0-YNG1T
stable/cm-12.0-YNG1TA
stable/cm-12.0-YNG3C
stable/cm-12.0-YNG4N
stable/cm-12.1-YOG3C
stable/cm-12.1-YOG4P
stable/cm-12.1-YOG7D
stable/cm-13.0-ZNH0E
stable/cm-13.0-ZNH2K
stable/cm-13.0-ZNH2KB
stable/cm-13.0-ZNH5Y
staging/cm-12.0-caf
staging/cm-12.1
staging/cm-13.0+r22
Unnamed repository; edit this file 'description' to name the repository.
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
system_server.te
Commit message (
Expand
)
Author
Age
Files
Lines
*
gatekeeperd: neverallow non-system_server binder call
Nick Kralevich
2015-04-09
1
-0
/
+1
*
Enforce more specific service access.
dcashman
2015-04-09
1
-21
/
+0
*
Enforce more specific service access.
dcashman
2015-04-08
1
-6
/
+0
*
system_server: support hard linking for split APKs
Nick Kralevich
2015-04-08
1
-1
/
+1
*
Allow system_server to collect app heapdumps (debug builds only)
Nick Kralevich
2015-04-07
1
-0
/
+4
*
Enforce more specific service access.
dcashman
2015-04-07
1
-7
/
+0
*
Enforce more specific service access.
dcashman
2015-04-07
1
-8
/
+0
*
Allow system_server to read oat dir
Fyodor Kupolov
2015-04-07
1
-0
/
+1
*
Enforce more specific service access.
dcashman
2015-04-07
1
-5
/
+0
*
Initial policy for expanded storage.
Jeff Sharkey
2015-04-06
1
-0
/
+3
*
SELinux permissions for gatekeeper TEE proxy
Andres Morales
2015-04-06
1
-0
/
+1
*
Assign app_api_service attribute to services.
dcashman
2015-04-06
1
-5
/
+0
*
Assign app_api_service attribute to services.
dcashman
2015-04-03
1
-4
/
+0
*
Remove obsolete system_server auditallow logging.
dcashman
2015-04-01
1
-15
/
+0
*
Record observed service accesses.
dcashman
2015-04-01
1
-0
/
+2
*
Add keystore add_auth
Chad Brubaker
2015-03-31
1
-0
/
+1
*
Updated policy for external storage.
Jeff Sharkey
2015-03-30
1
-2
/
+11
*
Add graphicsstats service
John Reck
2015-03-27
1
-0
/
+1
*
Revert "allow system_server to set kernel scheduling priority"
Nick Kralevich
2015-03-12
1
-4
/
+0
*
system_server: neverallow blk_file read/write
Nick Kralevich
2015-03-11
1
-0
/
+5
*
system_server: remove appdomain:file write
Nick Kralevich
2015-03-11
1
-3
/
+0
*
am 8f81dcad: Only allow system_server to send commands to zygote.
dcashman
2015-03-09
1
-3
/
+0
|
\
|
*
Only allow system_server to send commands to zygote.
dcashman
2015-03-09
1
-3
/
+0
*
|
am 0560e75e: system_server: allow handling app generated unix_stream_sockets
Nick Kralevich
2015-03-09
1
-1
/
+1
|
\
|
|
*
system_server: allow handling app generated unix_stream_sockets
Nick Kralevich
2015-03-08
1
-1
/
+1
*
|
am 92b10ddb: Eliminate CAP_SYS_MODULE from system_server
Nick Kralevich
2015-03-05
1
-1
/
+0
|
\
|
|
*
Eliminate CAP_SYS_MODULE from system_server
Nick Kralevich
2015-03-05
1
-1
/
+0
*
|
am 23f33615: Record observed system_server servicemanager service requests.
dcashman
2015-03-03
1
-0
/
+5
|
\
|
|
*
Record observed system_server servicemanager service requests.
dcashman
2015-03-03
1
-0
/
+5
*
|
am d99ea5a8: Merge "Revert /proc/net related changes"
Nick Kralevich
2015-02-26
1
-1
/
+0
|
\
|
|
*
Revert /proc/net related changes
Nick Kralevich
2015-02-25
1
-1
/
+0
*
|
am 437f7139: am 361cdaff: system_server: neverallow dex2oat exec
Nick Kralevich
2015-01-30
1
-0
/
+6
|
\
|
|
*
system_server: neverallow dex2oat exec
Nick Kralevich
2015-01-29
1
-0
/
+6
*
|
am a5119ee7: am 566e8fe2: Record service accesses.
dcashman
2015-01-20
1
-11
/
+39
|
\
|
|
*
Record service accesses.
dcashman
2015-01-16
1
-11
/
+39
*
|
am c1142451: am 0d16b5ac: Merge "Remove known system_server service accesses ...
dcashman
2015-01-16
1
-2
/
+15
|
\
|
|
*
Remove known system_server service accesses from auditing.
dcashman
2015-01-15
1
-2
/
+15
*
|
am acf209e8: am 99940d1a: remove /proc/net read access from domain.te
Nick Kralevich
2015-01-15
1
-0
/
+1
|
\
|
|
*
remove /proc/net read access from domain.te
Nick Kralevich
2015-01-14
1
-0
/
+1
*
|
resolved conflicts for merge of e55f2b81 to lmp-mr1-dev-plus-aosp
dcashman
2015-01-14
1
-0
/
+12
|
\
|
|
*
Make system_server_service an attribute.
dcashman
2015-01-14
1
-0
/
+12
*
|
am d8800a10: am cd82557d: Restrict service_manager find and list access.
dcashman
2014-12-16
1
-4
/
+18
|
\
|
|
*
Restrict service_manager find and list access.
dcashman
2014-12-15
1
-4
/
+18
*
|
am c230c292: am c48971f6: allow system_server to set ro.build.fingerprint
Nick Kralevich
2014-11-19
1
-0
/
+1
|
\
|
|
*
allow system_server to set ro.build.fingerprint
Nick Kralevich
2014-11-18
1
-0
/
+1
*
|
am 4d9648e3: am b519949d: system_server: assert app data files never opened d...
Nick Kralevich
2014-10-29
1
-0
/
+7
|
\
|
|
*
am b519949d: system_server: assert app data files never opened directly
Nick Kralevich
2014-10-28
1
-0
/
+7
|
|
\
|
|
*
system_server: assert app data files never opened directly
Nick Kralevich
2014-10-23
1
-0
/
+7
|
|
*
Add support for factory reset protection.
dcashman
2014-09-19
1
-3
/
+3
|
|
*
Allow system reset_uid, sync_uid, password_uid
Robin Lee
2014-09-11
1
-0
/
+3
[next]