aboutsummaryrefslogtreecommitdiffstats
path: root/system_server.te
Commit message (Expand)AuthorAgeFilesLines
* allow system_server to set ro.build.fingerprintNick Kralevich2014-11-191-0/+1
* allow system_server to set kernel scheduling priorityNick Kralevich2014-10-241-0/+4
* Pull keychain-data policy out of system-dataRobin Lee2014-10-151-0/+2
* allow system_server oemfs read accessNick Kralevich2014-10-101-1/+1
* Add support for factory reset protection.dcashman2014-09-081-3/+3
* Allow system reset_uid, sync_uid, password_uidRobin Lee2014-08-291-0/+3
* Remove system_server create access from /data/dalvik-cacheBrian Carlstrom2014-08-281-4/+0
* Allow system_server to talk to netlink directly.Sreeram Ramachandran2014-07-281-0/+3
* Revert "fix system_server dex2oat exec"Narayan Kamath2014-07-251-1/+0
* DO NOT MERGE: Remove service_manager audit_allows.Riley Spahn2014-07-181-3/+0
* Remove auditallow from system_server.Riley Spahn2014-07-161-9/+0
* Add access control for each service_manager action.Riley Spahn2014-07-151-0/+12
* fix system_server dex2oat execNick Kralevich2014-07-151-0/+1
* reconcile aosp (3a8c5dc05fb7696dd81b8a7c1b2524224154e8ea) after branching. Pl...Ed Heyl2014-07-141-0/+3
* sepolicy: allow system server to remove cgroupsColin Cross2014-07-091-0/+3
* Typedef+rules for SysSer to access persistent block deviceAndres Morales2014-07-091-0/+5
* Rules to allow installing package directories.Jeff Sharkey2014-07-071-2/+4
* system_server: bring back sdcard_type neverallow ruleNick Kralevich2014-07-041-1/+1
* Remove keystore auditallow statements from system.Riley Spahn2014-07-011-15/+0
* Adding policies for KeyStore MAC.Riley Spahn2014-06-261-0/+34
* Allow system_server to read all /proc filesNick Kralevich2014-06-251-9/+4
* Align SELinux property policy with init property_perms.Stephen Smalley2014-06-231-1/+3
* Allow Bluetooth app to initiate DHCP service on bt-pan interface.Paul Jensen2014-06-191-0/+1
* system_server: allow open /dev/snd and read filesNick Kralevich2014-06-181-0/+2
* Eliminate some duplicated rules.Stephen Smalley2014-06-171-1/+0
* Fix SELinux policies to allow resource overlays.Nick Kralevich2014-06-161-0/+4
* system_server profile accessNick Kralevich2014-06-131-1/+1
* allow system_server getattr on /data/dalvik-cache/profilesNick Kralevich2014-06-131-1/+1
* Remove world-read access to /data/dalvik-cache/profilesNick Kralevich2014-06-121-0/+4
* Add SELinux rules for service_manager.Riley Spahn2014-06-121-0/+2
* system_server: Adds permission to system_server to write sysfs fileRuchi Kandoi2014-06-101-0/+1
* Make the system_server domain enforcing.Stephen Smalley2014-06-091-1/+0
* Allow system_server access to /data/media files passed via Binder.Stephen Smalley2014-06-041-0/+3
* Allow installd, vold, system_server unlabeled access.Stephen Smalley2014-05-291-0/+5
* Introduce wakelock_use()Nick Kralevich2014-05-231-4/+1
* Remove graphics_device access.Stephen Smalley2014-05-141-3/+0
* Allow system_server to read tombstones.Stephen Smalley2014-05-141-0/+4
* Restrict system_server to only the data file types needed.Stephen Smalley2014-05-131-3/+67
* Drop relabelto_domain() macro and its associated definitions.Stephen Smalley2014-05-091-1/+0
* Protect keystore's files.Nick Kralevich2014-05-091-2/+2
* Report graphics_device accesses by system_server or mediaserver.Stephen Smalley2014-05-071-0/+1
* Allow system_server pstore access.Nick Kralevich2014-04-151-0/+6
* Allow inputflinger to call system_server.Stephen Smalley2014-03-211-0/+1
* Allow system_server to set ctl.bugreport property.Stephen Smalley2014-03-181-0/+1
* Allow system_server to read from log daemon.Stephen Smalley2014-03-141-0/+3
* Silence /proc/pid denials.Stephen Smalley2014-03-131-0/+7
* Deduplicate and rationalize system_server /proc/pid access.Stephen Smalley2014-03-061-12/+8
* temp fix for build breakage.Nick Kralevich2014-03-051-1/+1
* Do not allow system_server to access SDcard files.Stephen Smalley2014-03-051-3/+9
* Address system_server denials.Stephen Smalley2014-03-051-6/+28