aboutsummaryrefslogtreecommitdiff
path: root/sepolicy/system_server.te (follow)
Commit message (Collapse)AuthorAge
* msm8996-common: sepolicy: CleanupDavide Garberi2019-05-02
| | | | | | | | * Add back the fstab contexts to prevent some vfat denials * Remove a lot of not needed addresses * Create a domain for double tap to wake to not let the powerhal access all the sysfs files Change-Id: I44dfc5e9903eb562748215541f2d71f9a3d111d7
* msm8996-common: sepolicy: Update for touch HALDavide Garberi2019-02-11
| | | | | Change-Id: Ifec612cc608fcd4b7d72892e7921e238be4672e0 Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: sepolicy: Address some denialsDavide Garberi2019-02-06
| | | | | | | | * Don't break any neverallows this time * Still healthd missing to fix Signed-off-by: Davide Garberi <dade.garberi@gmail.com> Change-Id: I861eb5dc1f91e7cdea2e7b55c617e55a24ec2e02
* msm8996-common: sepolicy: Put all the neverallows in a separated fileDavide Garberi2018-10-07
| | | | | | | | * They won't make the build fail anyway * Probably just a temporarely thing Change-Id: I4822b4eeef8cb3381a5721da8cc6b382898e6c4a Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: Address CNE IMS and some other denialsdavidevinavil2018-10-07
| | | | | Change-Id: Idd48c93dbfddede327c556cf273520412485295e Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996: sepolicy: Fix device related neverallowsDavide Garberi2018-09-16
| | | | | Change-Id: Iddf2ac2f63d6f3a390e1720c11b1f334cc9729aa Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996: sepolicy: Address some denialsDavide Garberi2018-09-16
| | | | | Change-Id: I8f4d9588573e48069d365b77b081f981b4948fbb Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996: sepolicy: Switch to vendor_ prefixDavide Garberi2018-09-16
| | | | | Change-Id: Ib1b232d57ca108f73995690ad31bbeee638aa5ad Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* msm8996-common: More SELinux fixes...Cosme Domínguez Díaz2018-05-06
|
* msm8996-common: sepolicy: CleanupCosme Domínguez Díaz2018-05-02
|
* msm8996-common: sepolicy: Fix more SELinux denials.Cosme Domínguez Díaz2018-03-31
| | | | * We could probably optimize them more, but for now it's enough.
* msm8996-common: Grant system_server access to idc and keylayot dirsAlex Klyubin2018-03-23
| | | | | | | | | | | | | | | system_server is configured to access idc and keylayout files in /vendor/usr/idc and /vendor/usr/keylayout. This explicitly grants this access to system_server, instead of relying on overly broad access granted by hal_client_domain(system_server, ...) macros which is no longer going to grant this overly broad access soon. Test: Modify hal_client_domain to no longer associate hal_x_client with hal_x, observe that there are no violations form system_server trying to read /vendor/usr/idc and /vendor/usr/keylayouts. Bug: 37160141 Change-Id: I136df8713f2f9ff03096e5f6cf35e3e804733040
* msm8996-common: Initial sepolicydd3boh2017-11-04
| | | | | | | * Lots of parts are from the old one so thanks to everyone who contributed to that one * Still it doesn't boot in enforcing though Signed-off-by: dd3boh <dade.garberi@gmail.com>
* msm8996-common: Nuke the Nougat sepolicydd3boh2017-11-04
| | | | Signed-off-by: dd3boh <dade.garberi@gmail.com>
* z2_plus: Fix KeyDisablerOndrej Hlavac2017-07-13
| | | | | | - fix path in cmhw - change permissions on boot for sysfs - add selinux rule for sysfs
* sepolicy: Fix some denials 2diegocr2017-04-07
| | | | Change-Id: Ic1c92ba6e902f208809cd10e106f8cd070642410
* sepolicy: Fix some denialsdiegocr2017-04-07
| | | | Change-Id: I7d79eadee41a637d26c8b29a73d733d64b68d822
* sepolicy: address some denials.Álvaro Brey2017-04-07
| | | | Closes #42
* z2plus: update sepolicymnemonyc2017-01-08
| | | | Change-Id: I86ab87016e118cfff8b9debc9c38327326b9bc69
* Test some changes in sepolicyFedor9172016-11-10
|
* Initial commitFedor9172016-10-26