Commits

Show all
Author Commit Message Labels Comments Date
The Android Open Source Project
am f5f899c3: Merge from upstream sepolicy * commit 'f5f899c3c0f684ffba6950b343e652abd78d0fd9': Rework the radio vs rild property split. Only label properties with the ril. prefix with rild_prop. Allow rild and system (and radio) to set radio_prop. Only rild can set rild_prop presently. Allow apps to write to anr_data_file for /data/anr/traces.txt. Add policy for property service. New property_contexts file for property selabel backe…
Tags
14 tags
Ying Wang
am f4ea5b25: Use the checkpolicy built from source. * commit 'f4ea5b25399e4c6a10aa353b0c3d40564f78e89c': Use the checkpolicy built from source.
The Android Open Source Project
Merge from upstream sepolicy Change-Id: I99085d575e3d884fb04ac03ac998eb3c53eb2d9f
Tags
android-sdk-adt_r20
Ying Wang
Use the checkpolicy built from source. Change-Id: I22f49db3d59b50ed8975d8c1146bb9c322adbf7e
Ying Wang
Use the checkpolicy built from source. Change-Id: I22f49db3d59b50ed8975d8c1146bb9c322adbf7e
Stephen Smalley
Rework the radio vs rild property split. Only label properties with the ril. prefix with rild_prop. Allow rild and system (and radio) to set radio_prop. Only rild can set rild_prop presently.
Stephen Smalley
Allow apps to write to anr_data_file for /data/anr/traces.txt.
Stephen Smalley
Add policy for property service. New property_contexts file for property selabel backend. New property.te file with property type declarations. New property_service security class and set permission. Allow rules for setting properties.
Stephen Smalley
Allow adbd to access the qemu device and label /dev/eac correctly.
Stephen Smalley
Integrate nfc_power and rild rules from tuna sepolicy by Bryan Hinton.
Stephen Smalley
Rewrite MLS constraints to only constrain open for app_data_file, not read/write.
Stephen Smalley
Introduce a separate wallpaper_file type for the wallpaper file.
Stephen Smalley
Introduce a separate apk_tmp_file type for the vmdl.*\.tmp files.
Stephen Smalley
Allow the shell to create files on the sdcard.
Stephen Smalley
Drop redundant rules.
Stephen Smalley
Policy changes to support running the latest CTS.
Stephen Smalley
Limit per-device policy files to a well-defined sepolicy prefix. Avoid any future collisions with the use of .fc or .te suffixes in the per-device directories. If we want multiple file support, add a separate subdirectory for sepolicy files.
Stephen Smalley
Add support for per-device .te and .fc files.
Stephen Smalley
Allow Settings to set enforcing and booleans if settings_manage_selinux is true.
Stephen Smalley
Do not build if HAVE_SELINUX=false.
Stephen Smalley
Add a dependency on checkpolicy.
Ying Wang
Rewrite Android.mk.
Stephen Smalley
Add explicit role declaration for newer checkpolicy versions.
Stephen Smalley
Allow reading of properties area, which is now created before init has switched contexts. Revisit this later - we should explicitly label the properties file.
Stephen Smalley
Allow system server to set scheduling info for apps.
Stephen Smalley
Further policy for Motorola Xoom.
Stephen Smalley
SE Android policy.