| Commit message (Collapse) | Author | Age | Files | Lines |
| |\
| |
| |
| |
| |
| |
| | |
/sys/fs/selinux/load to system UID."
* commit '1998e505a98ad445bead87c2bb047053f1aea648':
Do not change ownership of /sys/fs/selinux/load to system UID.
|
| | |\
| | |
| | |
| | |
| | |
| | |
| | | |
/sys/fs/selinux/load to system UID."
* commit '2e9402863b40fe8bf2ddd8169c62f2419d968ff9':
Do not change ownership of /sys/fs/selinux/load to system UID.
|
| | | |\
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
system UID."
* commit '0f507339ec474a2f67227466efc9045630f1f1a4':
Do not change ownership of /sys/fs/selinux/load to system UID.
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Policy reload is handled by setting the selinux.reload_policy property
and letting the init process perform the actual loading of policy into
the kernel. Thus, there should be no need for the system UID to directly
write to /sys/fs/selinux/load.
Change-Id: I240c5bb2deaee757a2e1e396e14dea9e5d9286f5
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
|
| |\| | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
into klp-dev
* commit '0e7bd81c938611cfa4ebf44870668300a5bba875':
Initialize /dev/urandom earlier in boot.
|
| | |\ \ \
| | | | |
| | | | |
| | | | |
| | | | | |
* commit '4f18183bd6d3d2ed5d698c176ecc239211bdb82e':
Initialize /dev/urandom earlier in boot.
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
It's a security best practice to carry entropy across reboots.
(see "man 4 random"). Currently, entropy saving and mixing occur
in the system_server, via the EntropyMixer code. Unfortunately, the
EntropyMixer code runs fairly late in the boot process, which means
early boot doesn't have high quality entropy. This has caused security
problems in the past.
Load entropy data as soon as we can in the early boot process, so that
we can get /dev/random / /dev/urandom into a "random" state earlier.
Bug: 9983133
Change-Id: Id4a6f39e9060f30fe7497bd8f8085a9bec851e80
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Being moved to healthd/charger mode in board-specific init.rc.
Change-Id: Ie9fc2e5abc1737fbffec8fb071c73f5fd96e4d17
|
| |\| | | |
| | | | |
| | | | |
| | | | |
| | | | | |
* commit '342077e78da9411c252232313bc40fb4ce5f6137':
init.rc: change mem cgroups permissions
|
| | |\| | |
| | | | |
| | | | |
| | | | |
| | | | | |
* commit '67b00d8b2d96e8133c249bcbc0fb63c49e10e022':
init.rc: change mem cgroups permissions
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Changing mem cgroups permissions to only be accessible by root and system.
Bug: 10210529
Bug: 10210900
Change-Id: Ib4fff6f49b33013b3629d40ae98a5e2464571b2d
|
| | | | | |
| | | | |
| | | | |
| | | | | |
Change-Id: Ibebab31e1f41a210821834a1d65f196b39bb6601
|
| |\| | | |
| | | | |
| | | | |
| | | | |
| | | | | |
* commit '30caffc025aff450ebb354ee693174cc1732732b':
Handle policy reloads within ueventd rather than restarting it.
|
| | |\ \ \ \
| | |/ / /
| |/| / /
| | |/ / |
Change-Id: I08e9898940f7cdd466469b76760807cc5d5c67e4
|
| | | |\|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
restarting it."
* commit 'd8d99c45b704399d50ae0a5e4df938d825c70cfa':
Handle policy reloads within ueventd rather than restarting it.
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Restarting ueventd upon policy reloads has reportedly created
stability problems for some users and could cause events to be lost.
Stop restarting ueventd and instead handle policy reloads within ueventd.
Also stops restarting installd upon policy reloads.
Change-Id: Ic7f310d69a7c420e48fbc974000cf4a5b9ab4a3b
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
|
| |/ / /
| | |
| | |
| | |
| | | |
Bug: 10446930
Change-Id: I88b926380dbe1e866c0b87ec95b3489d87c5907b
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | | |
Command line flag -n tells healthd not to use (or wait for) servicemanager
in charger mode.
Change-Id: I255f9597dff6fc904f5ed20fd02f52c0531d14f8
|
| |\ \ \ |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
ActivityManager can't directly write to extra_free_kbytes because
/proc/sys rejects all chown and chmod syscalls. Proxy the writes
through init by using the sys.sysctl.extra_free_kbytes property.
Bug: 10024467
Change-Id: I441e00478421254355fcafb252bc878166483d4c
|
| |/ / /
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
- BOOTCLASSPATH now is derived from PRODUCT_BOOT_JARS, which is a product
configuration variable set up by the core build system.
- Moved files from the legacy ALL_PREBUILT to PRODUCT_COPY_FILES in
build/target/product/embedded.mk.
Bug: 9990214
Change-Id: I98bac36c1ca8c779dda572a0a5e0a22b7e4c4a7a
|
| |\| |
| | |
| | |
| | |
| | | |
* commit 'dafa66afdd3729e2c65ccb8dced8ca3e137db437':
Add writable data space for radio.
|
| | |\ \
| | |/
| |/|
| | |
| | | |
* commit '2aa33a3dbd1147558098d9a2948450d363ffe468':
Add writable data space for radio.
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Storing carrier provisioning urls updates in /data/misc/radio.
bug:9623159
Change-Id: I8d62d4638229733dea0f11f1729c4d22ae2295d1
I36697ed341353b7a3dbec5afe20241102e76f6f1
|
| | | |
| | |
| | |
| | | |
Change-Id: I590de05f23669cf625030b479c786423f21c6159
|
| | | |
| | |
| | |
| | | |
Change-Id: Ibcb1116bdcd9189272db620910b9958c8ffb4552
|
| |\ \ \ |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Create the memory cgroups folders and configure them
Change-Id: I06c4bb486b204f7e98b0bc6757deec8bd7f6349e
|
| |\ \ \ \
| | |/ /
| |/| |
| | | |
| | | | |
* commit '9a4913d422f4c18033333afe8e2e1d699b112d44':
init.rc: remove "on fs" section
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This was only ever used by the emulator. Now the emulator
uses an fstab file.
Change-Id: I1a071e567e1f1a379f9c8079cc2dc17660d8455f
|
| |\| | |
| |/ /
|/| |
| | |
| | | |
* commit '7d6ddc7d395e909d841bb7eadfc12a167076aecf':
use ext4 instead of yaffs
|
| | |\ \
| | | |
| | | |
| | | |
| | | | |
* commit 'fb1c9cf6fa4efafb3e0c6b0bc93c7f087d926a48':
use ext4 instead of yaffs
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This is needed to allow the emulator to use ext4 images.
Bug: https://code.google.com/p/android/issues/detail?id=38561
Change-Id: I02fde6382ad67cf7f4f3b695396841f70bb9301d
|
| | | |\ \
| | | | |
| | | | |
| | | | | |
default."
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This commit sets up the system property which is actually used by the
Connectivity Service
(frameworks/base/services/java/com/android/server/ConnectivityService.java).
It fixes an (obsolete?) convention where the dns was affected directly by
the interface (i.e. "net.eth0.dns1=10.0.2.3"), which causes the Android
Emulator (goldfish) to ignore this value, and effectively have no DNS
resolving at all.
An immediate fix can be either add reference to net.eth%s.dns%s in the
ConnectivityService and possibly on the dhcp code as well which would be
bloated, or just stick to the apparant new convention.
I chose the latter as a one line fix which gets the job done.
Change-Id: Id4364129e9a82c1f48403068a837aca54de07944
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add /system/framework/webviewchromium.jar to BOOTCLASSPATH. This jar
contains the implementation classes for the new WebView. It has been
processed with jarjar to ensure that it doesn't define any classes
outside of com.android.
Change-Id: If65913638df0088f4dd7d62a087750b90038a7fb
|
| |\| | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
led-related nodes"
* commit '5f1a938e9c65829c3afebb4d92c8e93caecc3e11':
init.rc: remove duplicated led-related nodes
|
| | |\ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
* commit '3d8e8c147b41dbc6a5e4edf6da1610a83623b5b2':
init.rc: remove duplicated led-related nodes
|
| | | |\| | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
* commit '9246f8d6def40a50933a980fac773a909f2138d7':
init.rc: remove duplicated led-related nodes
|
| | | | |/ /
| | | | |
| | | | |
| | | | | |
Change-Id: Ibee7ef9137594fc4c30d3ab6ee7bdf3515836c62
|
| |\| | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
enforcment status."
* commit '253e91b4ffb631b188fdac0c1624786103471f05':
Revert "Add persistent property for SELinux enforcment status."
|
| | |\ \ \ \
| | | |_|/
| | |/| |
| | | | |
| | | | | |
* commit '477e35d6d56c7fe9b2305becdf3ed4f590ddfbd6':
Revert "Add persistent property for SELinux enforcment status."
|
| | | | | |
| | | | |
| | | | |
| | | | | |
This reverts commit b89bdfde422eff751b3f939f10ab57e22af83eaa.
|
| |\| | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
partition."
* commit '43329bc1c99c0f5f3670a8aaab39e54df34819a1':
Revert "Reload policy after setting up the data partition."
|
| | |\| | |
| | | | |
| | | | |
| | | | |
| | | | | |
* commit '8a3878700eb9cd8ecf495cd01f15face5c3879c8':
Revert "Reload policy after setting up the data partition."
|
| | | | | |
| | | | |
| | | | |
| | | | | |
This reverts commit fee250d27a9c03af1ba439047b976d89563b1887.
|
| |\| | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
device."
* commit 'b9866649e24d7b6eedcaf2e03ffc605a3417537d':
Revert "Add a version check for SELinux policy on device."
|
| | |\| | |
| | |/ /
| |/| |
| | | |
| | | | |
* commit '52351300d156826bf22c493828571f45a1cea16a':
Revert "Add a version check for SELinux policy on device."
|
| | | | |
| | | |
| | | |
| | | | |
This reverts commit 921be8b6568df0057c4eacbac2e1022b71e09620.
|
| |\| | |
| | | |
| | | |
| | | |
| | | | |
* commit '5a98566d589408c78e35f4476f478a2fa1c13e78':
Add a version check for SELinux policy on device.
|