aboutsummaryrefslogtreecommitdiff
path: root/sepolicy (follow)
Commit message (Collapse)AuthorAge
* msm8996-common: Initial sepolicydd3boh2017-11-04
| | | | | | | * Lots of parts are from the old one so thanks to everyone who contributed to that one * Still it doesn't boot in enforcing though Signed-off-by: dd3boh <dade.garberi@gmail.com>
* msm8996-common: Nuke the Nougat sepolicydd3boh2017-11-04
| | | | Signed-off-by: dd3boh <dade.garberi@gmail.com>
* Squash revert of the msm thermal simple drivers [1/2]dd3boh2017-08-25
| | | | | | | | | | | | | | | | | | | | It doesn't seem so efficent right now, so let's try to fall back to the old thermal engine driver for now at least Revert "rootdir: Fall back to the old power management" This reverts commit 98204762dd6569f4b4ded1ee0a51710efe7edacc. Revert "z2_plus: Configure msm-thermal-simple driver" This reverts commit d1830933a6c54a6ac9c7a5ac9a3edebdb326420b. Revert "z2_plus: Optimize power config on boot" This reverts commit 5c12086dac733836c91a4ad415aea5a728aa8fab. Revert "z2_plus: Remove msm-thermal, thermal-engine, and bcl" This reverts commit f4bd79af37442fbf594c6523950e3e9945a7cd70.
* z2_plus: Remove msm-thermal, thermal-engine, and bclSultanxda2017-08-21
| | | | We will use msm-thermal-simple instead.
* sepolicy: Address some denialsdd3boh2017-08-21
| | | | Signed-off-by: dd3boh <dade.garberi@gmail.com>
* z2_plus: Address sdcardfs SELinux denialsdianlujitao2017-07-22
| | | | Change-Id: Ibad7a8e1aa4a5ce458f61c7c155943b826817328
* z2_plus: Fix KeyDisablerOndrej Hlavac2017-07-13
| | | | | | - fix path in cmhw - change permissions on boot for sysfs - add selinux rule for sysfs
* sepolicy: Fix sysinit not declareddd3boh2017-07-12
|
* sepolicy: Allow mm-qcamerad to connect to perfd socketLuca Stefani2017-04-07
| | | | Change-Id: I4c7eede4bcf4e6a6f55dedad81317a7998ae66a8
* sepolicy: Remove dashddavidevinavil2017-04-07
|
* sepolicy: Fix some denials 2diegocr2017-04-07
| | | | Change-Id: Ic1c92ba6e902f208809cd10e106f8cd070642410
* sepolicy: Fix some denialsdiegocr2017-04-07
| | | | Change-Id: I7d79eadee41a637d26c8b29a73d733d64b68d822
* sepolicy: address some denials.Álvaro Brey2017-04-07
| | | | Closes #42
* Update thermal-engine.teÁlvaro Brey2017-04-07
| | | Use r_file_perms instead
* sepolicy: adress thermal engine denialOndrej Hlavac2017-04-07
| | | | [ 8.023939] type=1400 audit(24063124.567:6): avc: denied { open } for pid=708 comm="thermal-engine" path="/sys/devices/soc/6a00000.ssusb/power_supply/usb/type" dev="sysfs" ino=39804 scontext=u:r:thermal-engine:s0 tcontext=u:object_r:sysfs_usb_supply:s0 tclass=file permissive=0
* Remove alipay/ifaa packages and permissionsÁlvaro Brey2017-04-07
|
* sepolicy: Address some denials.Álvaro Brey2017-04-07
| | | | Closes #13
* sepolicy: address some denialsontherunvaro2017-04-07
|
* sepolicy: Address some denialsontherunvaro2017-04-07
|
* Address some SELinux denialsontherunvaro2017-04-07
|
* sepolicy: Update for some new denialsBruno Martins2017-04-07
| | | | Change-Id: I9dfa801f416d7346bcd6251b025172e8ec4ad90c
* sepolicy: Fix rmt_storage and rfs_access policiesBruno Martins2017-04-07
| | | | | | * New denials appearing after CAF rebase Change-Id: I3693514a9301df9994939437261acdfb2ad40ce3
* sepolicy: Address few missing denialsBruno Martins2017-04-07
| | | | Change-Id: Ie5c1edde619cb273bdeb07cf6cafc83c4b314e6b
* z2_plus: Fixdavidevinavil2017-04-07
|
* z2_plus: Fix mac addressdavidevinavil2017-01-29
| | | | | | | | * Let's ensure that wlan_mac.bin exists in persist partition and is valid, otherwise WiFi MAC address is randomized on every boot because qca_cld can't properly read it Change-Id: I82d66b84104802eaa1becdc72a1aec5fd185e5fa
* sepolicy: Allow init to write in debugfsArne Coucheron2017-01-27
| | | | | | avc: denied { write } for name="tracing_on" dev="debugfs" ino=3203 scontext=u:r:init:s0 tcontext=u:object_r:debugfs:s0 tclass=file permissive=0 Change-Id: Ia3258d2d57088efd367d79de1a7d60fcb01a3e6a
* z2_plus: Update sepolicydavidevinavil2017-01-14
| | | | Change-Id: I2a81974b7c6e4d6acc4e07609b05789426b5e246
* z2_plus: thermal-engine: allow reading kgsl sysfsAlexander Martinz2017-01-14
| | | | | | | | | type=1400 audit(1482423426.553:71): avc: denied { read } for pid=7482 comm="thermal-engine" name="gpu_available_frequencies" dev="sysfs" ino=28723 scontext=u:r:thermal-engine:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=file permissive=1 type=1400 audit(1482423426.553:72): avc: denied { open } for pid=7482 comm="thermal-engine" path="/sys/devices/soc/b00000.qcom,kgsl-3d0/kgsl/kgsl-3d0/gpu_available_frequencies" dev="sysfs" ino=28723 scontext=u:r:thermal-engine:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=file permissive=1 type=1400 audit(1482423426.553:73): avc: denied { getattr } for pid=7482 comm="thermal-engine" path="/sys/devices/soc/b00000.qcom,kgsl-3d0/kgsl/kgsl-3d0/gpu_available_frequencies" dev="sysfs" ino=28723 scontext=u:r:thermal-engine:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=file permissive=1 Change-Id: I665d52c2bc80116454c14abcfccbd8dfacbd00ce Signed-off-by: Alexander Martinz <eviscerationls@gmail.com>
* z2plus: update sepolicymnemonyc2017-01-08
| | | | Change-Id: I86ab87016e118cfff8b9debc9c38327326b9bc69
* z2plus: Update services to drop net_raw and net_adminBruno Martins2017-01-08
| | | | | | | | * This is now replaced by the usage of CAP_NET_BIND_SERVICE in android config file * Remove unneeded sepolicies Change-Id: I98086a5b13f6c89c03ca7f433118033f97de9bc3
* z2plus: Address additional ifaadaemon denialdianlujitao2017-01-08
| | | | | | * Now we have working alipay fingerprint payment \o/ Change-Id: I6c172030d8c819408dd2c6cb1c20b78f1f481480
* z2plus: seplicy: address new mediaserver/camera denialdh-harald2017-01-08
| | | | | | | | avc: denied { search } for pid=608 comm="mediaserver" name="camera" dev="sda15" ino=1945933 scontext=u:r:mediaserver:s0 tcontext=u:object_r:camera_data_file:s0 tclass=dir permissive=0 This commit fixes user build camera Change-Id: I1aaa3c46cf447dadb784ca1463df8f56660a6882
* z2plus: Additional policy for new camera driverSteve Kondik2017-01-08
| | | | Change-Id: I6270e2f89c14eed59ae63431c87f2b782d3fbbdd
* z2plus: Unblock alipaydianlujitao2017-01-08
| | | | Change-Id: I91fb623d37bd82eacdded181ebbd63e1f068772d
* Test some changes in sepolicyFedor9172016-11-10
|
* Initialising brunch based on davidevinavil device tree (CM14.0 branch)Fedor9172016-11-10
|
* Initial commitFedor9172016-10-26
generated by cgit v1.2.3 (git 2.25.1) at 2025-10-22 05:16:45 +0000