| Commit message (Collapse) | Author | Age |
|
|
|
|
|
|
|
| |
* Add back the fstab contexts to prevent some vfat denials
* Remove a lot of not needed addresses
* Create a domain for double tap to wake to not let the powerhal access all the sysfs files
Change-Id: I44dfc5e9903eb562748215541f2d71f9a3d111d7
|
|
|
|
|
| |
Change-Id: Ifec612cc608fcd4b7d72892e7921e238be4672e0
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
|
|
|
| |
* Don't break any neverallows this time
* Still healthd missing to fix
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
Change-Id: I861eb5dc1f91e7cdea2e7b55c617e55a24ec2e02
|
|
|
|
|
|
|
|
| |
* They won't make the build fail anyway
* Probably just a temporarely thing
Change-Id: I4822b4eeef8cb3381a5721da8cc6b382898e6c4a
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: Idd48c93dbfddede327c556cf273520412485295e
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: Iddf2ac2f63d6f3a390e1720c11b1f334cc9729aa
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: I8f4d9588573e48069d365b77b081f981b4948fbb
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
|
|
|
|
| |
Change-Id: Ib1b232d57ca108f73995690ad31bbeee638aa5ad
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
| |
|
| |
|
|
|
|
| |
* We could probably optimize them more, but for now it's enough.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
system_server is configured to access idc and keylayout files in
/vendor/usr/idc and /vendor/usr/keylayout. This explicitly grants this
access to system_server, instead of relying on overly broad access
granted by hal_client_domain(system_server, ...) macros which is no
longer going to grant this overly broad access soon.
Test: Modify hal_client_domain to no longer associate hal_x_client with
hal_x, observe that there are no violations form system_server
trying to read /vendor/usr/idc and /vendor/usr/keylayouts.
Bug: 37160141
Change-Id: I136df8713f2f9ff03096e5f6cf35e3e804733040
|
|
|
|
|
|
|
| |
* Lots of parts are from the old one so thanks to everyone who contributed to that one
* Still it doesn't boot in enforcing though
Signed-off-by: dd3boh <dade.garberi@gmail.com>
|
|
|
|
| |
Signed-off-by: dd3boh <dade.garberi@gmail.com>
|
|
|
|
|
|
| |
- fix path in cmhw
- change permissions on boot for sysfs
- add selinux rule for sysfs
|
|
|
|
| |
Change-Id: Ic1c92ba6e902f208809cd10e106f8cd070642410
|
|
|
|
| |
Change-Id: I7d79eadee41a637d26c8b29a73d733d64b68d822
|
|
|
|
| |
Closes #42
|
|
|
|
| |
Change-Id: I86ab87016e118cfff8b9debc9c38327326b9bc69
|
| |
|
|
|